@multiplayer-app/agent 0.1.19 → 0.1.21

package/dist/runtime/workload.js

@@ -0,0 +1,222 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WORKLOAD_HOME = exports.WORKLOAD_GID = exports.WORKLOAD_UID = exports.WORKLOAD_USER = void 0;
+exports.workloadIdentity = workloadIdentity;
+exports.workloadEnv = workloadEnv;
+exports.writeWorkloadFile = writeWorkloadFile;
+exports.appendWorkloadFile = appendWorkloadFile;
+exports.removeWorkloadFile = removeWorkloadFile;
+exports.makeWorkloadDir = makeWorkloadDir;
+exports.workloadAppendStream = workloadAppendStream;
+exports.handOverToWorkload = handOverToWorkload;
+exports.packAsWorkload = packAsWorkload;
+exports.unpackAsWorkload = unpackAsWorkload;
+exports.isInsideDir = isInsideDir;
+exports.openInside = openInside;
+exports.readInside = readInside;
+exports.realDirInside = realDirInside;
+// Who runs what in a VM. The agent runtime is root and holds the VM's secrets; everything the model
+// or an app controls (its commands, its app's processes, a build's steps) runs as an unprivileged
+// user that can't read the runtime's environment or memory. That user owns the workspace, so the
+// runtime must never trust what's in it: a link there can lead anywhere and root would follow it.
+// So the runtime writes workspace files as that user, and reads them only through openInside.
+//
+// Not root (a test, or a dev's machine) there is no one to protect the runtime from: these are
+// plain file calls and commands run as whoever ran the agent.
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_path_1 = __importDefault(require("node:path"));
+const promises_1 = require("node:stream/promises");
+const node_zlib_1 = require("node:zlib");
+exports.WORKLOAD_USER = 'agent';
+exports.WORKLOAD_UID = 1001;
+exports.WORKLOAD_GID = 1001;
+exports.WORKLOAD_HOME = '/home/agent';
+/** The identity to start a workload process with, for spawn's options. */
+function workloadIdentity() {
+    var _a;
+    return ((_a = process.getuid) === null || _a === void 0 ? void 0 : _a.call(process)) === 0 ? { uid: exports.WORKLOAD_UID, gid: exports.WORKLOAD_GID } : undefined;
+}
+/** A workload's env: its own home, since root's isn't readable to it (npm's and pip's caches live there). */
+function workloadEnv(env) {
+    return workloadIdentity() ? { ...env, HOME: exports.WORKLOAD_HOME, USER: exports.WORKLOAD_USER, LOGNAME: exports.WORKLOAD_USER } : env;
+}
+function runAsWorkload(script, target, input) {
+    return new Promise((resolve, reject) => {
+        const child = (0, node_child_process_1.spawn)('sh', ['-c', script, 'sh', target], {
+            ...workloadIdentity(),
+            cwd: '/',
+            env: { PATH: process.env.PATH },
+            stdio: ['pipe', 'ignore', 'pipe'],
+        });
+        let stderr = '';
+        child.stderr.on('data', (chunk) => {
+            stderr += chunk.toString('utf8');
+        });
+        child.on('error', reject);
+        // It failed before reading what it was given: its exit says why, this only repeats it.
+        child.stdin.on('error', () => undefined);
+        child.on('close', (code) => {
+            if (code === 0)
+                resolve();
+            else
+                reject(new Error(`Could not change ${target}: ${stderr.trim() || `exit ${code}`}`));
+        });
+        child.stdin.end(input);
+    });
+}
+const WRITE = 'mkdir -p -- "$(dirname -- "$1")" && cat > "$1"';
+const APPEND = 'mkdir -p -- "$(dirname -- "$1")" && cat >> "$1"';
+const APPEND_STREAM = 'mkdir -p -- "$(dirname -- "$1")" && exec cat >> "$1"';
+/** Writes a workspace file, and any folder it needs. */
+async function writeWorkloadFile(target, content) {
+    if (workloadIdentity())
+        return runAsWorkload(WRITE, target, content);
+    await node_fs_1.promises.mkdir(node_path_1.default.dirname(target), { recursive: true });
+    await node_fs_1.promises.writeFile(target, content);
+}
+async function appendWorkloadFile(target, content) {
+    if (workloadIdentity())
+        return runAsWorkload(APPEND, target, content);
+    await node_fs_1.promises.mkdir(node_path_1.default.dirname(target), { recursive: true });
+    await node_fs_1.promises.appendFile(target, content);
+}
+async function removeWorkloadFile(target) {
+    if (workloadIdentity())
+        return runAsWorkload('rm -f -- "$1"', target);
+    await node_fs_1.promises.rm(target, { force: true });
+}
+async function makeWorkloadDir(dir) {
+    if (workloadIdentity())
+        return runAsWorkload('mkdir -p -- "$1"', dir);
+    await node_fs_1.promises.mkdir(dir, { recursive: true });
+}
+/** A file an app's output keeps being appended to, for as long as it runs. */
+function workloadAppendStream(target) {
+    if (!workloadIdentity())
+        return (0, node_fs_1.createWriteStream)(target, { flags: 'a' });
+    const child = (0, node_child_process_1.spawn)('sh', ['-c', APPEND_STREAM, 'sh', target], {
+        ...workloadIdentity(),
+        cwd: '/',
+        env: { PATH: process.env.PATH },
+        stdio: ['pipe', 'ignore', 'ignore'],
+    });
+    child.on('error', (error) => child.stdin.destroy(error));
+    return child.stdin;
+}
+/**
+ * Gives a tree the runtime fetched to the workload. Only before any workload runs: nothing can
+ * change it meanwhile, and -h with -R never follows a link left there by an earlier run on this disk.
+ */
+async function handOverToWorkload(dir) {
+    const identity = workloadIdentity();
+    if (!identity) {
+        console.warn('[workload] not running as root: commands and apps run as this user, with no separation');
+        return;
+    }
+    await node_fs_1.promises.mkdir(exports.WORKLOAD_HOME, { recursive: true });
+    await node_fs_1.promises.chown(exports.WORKLOAD_HOME, identity.uid, identity.gid);
+    await new Promise((resolve, reject) => {
+        const child = (0, node_child_process_1.spawn)('chown', ['-hR', `${identity.uid}:${identity.gid}`, '--', dir], { stdio: 'ignore' });
+        child.on('error', reject);
+        child.on('close', (code) => (code === 0 ? resolve() : reject(new Error(`Could not hand over ${dir}: exit ${code}`))));
+    });
+}
+/**
+ * Runs tar as the workload, feeding it through `flow`. What's in a folder a build wrote, or an
+ * archive of one, is what the app's own code left there: root would follow its links and write where
+ * its paths lead, the workload can only reach what it could anyway.
+ */
+async function tarAsWorkload(args, cwd, flow) {
+    const child = (0, node_child_process_1.spawn)('tar', args, { ...workloadIdentity(), cwd, env: { PATH: process.env.PATH }, stdio: ['pipe', 'pipe', 'pipe'] });
+    let stderr = '';
+    child.stderr.on('data', (chunk) => {
+        stderr = (stderr + chunk.toString('utf8')).slice(-2000);
+    });
+    const exited = new Promise((resolve, reject) => {
+        child.on('error', reject);
+        child.on('close', (code) => (code === 0 ? resolve() : reject(new Error(`tar failed: ${stderr.trim() || `exit ${code}`}`))));
+    });
+    const [fed, ended] = await Promise.allSettled([flow(child), exited]);
+    // When tar gives up, its pipe breaks too: only its own exit says why.
+    if (fed.status === 'rejected' && fed.reason.code !== 'EPIPE')
+        throw fed.reason;
+    if (ended.status === 'rejected')
+        throw ended.reason;
+}
+/** Writes `folders` of `dir` to `target` as a compressed archive, leaving out what `exclude` names at any depth. */
+function packAsWorkload(dir, folders, exclude, target) {
+    const args = ['-c', '-f', '-', ...exclude.map((name) => `--exclude=${name}`), ...folders.map((folder) => (folder === '.' ? '.' : `./${folder}`))];
+    return tarAsWorkload(args, dir, async ({ stdin, stdout }) => {
+        stdin.end();
+        await (0, promises_1.pipeline)(stdout, (0, node_zlib_1.createZstdCompress)({ params: { [node_zlib_1.constants.ZSTD_c_checksumFlag]: 1 } }), target);
+    });
+}
+/** Unpacks what packAsWorkload wrote into `dir`, which the workload already owns. */
+function unpackAsWorkload(dir, source) {
+    return tarAsWorkload(['-x', '-f', '-'], dir, async ({ stdin, stdout }) => {
+        stdout.resume();
+        await (0, promises_1.pipeline)(source, (0, node_zlib_1.createZstdDecompress)(), stdin);
+    });
+}
+function notFound(file) {
+    return Object.assign(new Error(`ENOENT: no such file, open '${file}'`), { code: 'ENOENT' });
+}
+/**
+ * Whether `target` is `root` or somewhere under it, by path alone: a neighbour that only shares its
+ * prefix isn't. Both absolute and normalized, and real paths where a link could lead out.
+ */
+function isInsideDir(root, target) {
+    return target === root || target.startsWith(`${root}${node_path_1.default.sep}`);
+}
+/**
+ * Opens a file to read, for the runtime: only if what actually opened is a regular file under
+ * `root`. Checking first and opening after would leave a gap to swap a link in, so it asks the
+ * kernel what this open reached. Anything else reads as missing, which callers already handle.
+ */
+async function openInside(root, file, flags = 0) {
+    if (!workloadIdentity())
+        return node_fs_1.promises.open(file, node_fs_1.constants.O_RDONLY | flags);
+    // Non-blocking: a FIFO left there must not hang the runtime on an open with no writer.
+    const handle = await node_fs_1.promises.open(file, node_fs_1.constants.O_RDONLY | node_fs_1.constants.O_NONBLOCK | flags);
+    try {
+        const [realRoot, opened, stat] = await Promise.all([
+            node_fs_1.promises.realpath(root),
+            node_fs_1.promises.readlink(`/proc/self/fd/${handle.fd}`),
+            handle.stat(),
+        ]);
+        const inside = isInsideDir(realRoot, opened);
+        if (inside && stat.isDirectory()) {
+            throw Object.assign(new Error(`EISDIR: illegal operation on a directory, read '${file}'`), { code: 'EISDIR' });
+        }
+        if (inside && stat.isFile())
+            return handle;
+        throw notFound(file);
+    }
+    catch (error) {
+        await handle.close();
+        throw error;
+    }
+}
+async function readInside(root, file, flags = 0) {
+    const handle = await openInside(root, file, flags);
+    try {
+        return await handle.readFile();
+    }
+    finally {
+        await handle.close();
+    }
+}
+/** A directory's real path, if it's really under `root` (listing one follows links too). */
+async function realDirInside(root, dir) {
+    if (!workloadIdentity())
+        return dir;
+    const [realRoot, real] = await Promise.all([node_fs_1.promises.realpath(root), node_fs_1.promises.realpath(dir)]);
+    if (!isInsideDir(realRoot, real))
+        throw notFound(dir);
+    return real;
+}
+//# sourceMappingURL=workload.js.map

package/dist/runtime/workload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workload.js","sourceRoot":"","sources":["../../src/runtime/workload.ts"],"names":[],"mappings":";;;;;;AAsBA,4CAEC;AAGD,kCAEC;AA8BD,8CAIC;AAED,gDAIC;AAED,gDAGC;AAED,0CAGC;AAGD,oDAUC;AAMD,gDAaC;AAwBD,wCAMC;AAGD,4CAKC;AAUD,kCAEC;AAOD,gCAoBC;AAED,gCAOC;AAGD,sCAKC;AA7MD,oGAAoG;AACpG,kGAAkG;AAClG,iGAAiG;AACjG,kGAAkG;AAClG,8FAA8F;AAC9F,EAAE;AACF,+FAA+F;AAC/F,8DAA8D;AAC9D,2DAA0C;AAC1C,qCAAsE;AAEtE,0DAA4B;AAE5B,mDAA+C;AAC/C,yCAAgG;AAEnF,QAAA,aAAa,GAAG,OAAO,CAAA;AACvB,QAAA,YAAY,GAAG,IAAI,CAAA;AACnB,QAAA,YAAY,GAAG,IAAI,CAAA;AACnB,QAAA,aAAa,GAAG,aAAa,CAAA;AAE1C,0EAA0E;AAC1E,SAAgB,gBAAgB;;IAC9B,OAAO,CAAA,MAAA,OAAO,CAAC,MAAM,uDAAI,MAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,oBAAY,EAAE,GAAG,EAAE,oBAAY,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACxF,CAAC;AAED,6GAA6G;AAC7G,SAAgB,WAAW,CAAC,GAAsB;IAChD,OAAO,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,qBAAa,EAAE,IAAI,EAAE,qBAAa,EAAE,OAAO,EAAE,qBAAa,EAAE,CAAC,CAAC,CAAC,GAAG,CAAA;AAChH,CAAC;AAED,SAAS,aAAa,CAAC,MAAc,EAAE,MAAc,EAAE,KAAuB;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;YACtD,GAAG,gBAAgB,EAAE;YACrB,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;YAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC;SAClC,CAAC,CAAA;QACF,IAAI,MAAM,GAAG,EAAE,CAAA;QACf,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QAClC,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,uFAAuF;QACvF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACxC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;;gBACpB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAA;QAC1F,CAAC,CAAC,CAAA;QACF,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACxB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,KAAK,GAAG,gDAAgD,CAAA;AAC9D,MAAM,MAAM,GAAG,iDAAiD,CAAA;AAChE,MAAM,aAAa,GAAG,sDAAsD,CAAA;AAE5E,wDAAwD;AACjD,KAAK,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAwB;IAC9E,IAAI,gBAAgB,EAAE;QAAE,OAAO,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IACpE,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AACrC,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,MAAc,EAAE,OAAwB;IAC/E,IAAI,gBAAgB,EAAE;QAAE,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IACrE,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,kBAAE,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AACtC,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,IAAI,gBAAgB,EAAE;QAAE,OAAO,aAAa,CAAC,eAAe,EAAE,MAAM,CAAC,CAAA;IACrE,MAAM,kBAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACtC,CAAC;AAEM,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,IAAI,gBAAgB,EAAE;QAAE,OAAO,aAAa,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAA;IACrE,MAAM,kBAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,8EAA8E;AAC9E,SAAgB,oBAAoB,CAAC,MAAc;IACjD,IAAI,CAAC,gBAAgB,EAAE;QAAE,OAAO,IAAA,2BAAiB,EAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;IACzE,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,IAAI,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE;QAC7D,GAAG,gBAAgB,EAAE;QACrB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;QAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;KACpC,CAAC,CAAA;IACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA;IACxD,OAAO,KAAK,CAAC,KAAK,CAAA;AACpB,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,kBAAkB,CAAC,GAAW;IAClD,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAA;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAA;QACtG,OAAM;IACR,CAAC;IACD,MAAM,kBAAE,CAAC,KAAK,CAAC,qBAAa,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAClD,MAAM,kBAAE,CAAC,KAAK,CAAC,qBAAa,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAA;IACzD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,CAAC,KAAK,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxG,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,GAAG,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACvH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,IAAc,EAAE,GAAW,EAAE,IAAmE;IAC3H,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,gBAAgB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAA;IAClI,IAAI,MAAM,GAAG,EAAE,CAAA;IACf,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,MAAM,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAK,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QACzB,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,MAAM,CAAC,IAAI,EAAE,IAAI,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7H,CAAC,CAAC,CAAA;IACF,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IACpE,sEAAsE;IACtE,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAK,GAAG,CAAC,MAAgC,CAAC,IAAI,KAAK,OAAO;QAAE,MAAM,GAAG,CAAC,MAAM,CAAA;IACzG,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,KAAK,CAAC,MAAM,CAAA;AACrD,CAAC;AAED,oHAAoH;AACpH,SAAgB,cAAc,CAAC,GAAW,EAAE,OAAiB,EAAE,OAAiB,EAAE,MAAgB;IAChG,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,CAAA;IACjJ,OAAO,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QAC1D,KAAK,CAAC,GAAG,EAAE,CAAA;QACX,MAAM,IAAA,mBAAQ,EAAC,MAAM,EAAE,IAAA,8BAAkB,EAAC,EAAE,MAAM,EAAE,EAAE,CAAC,qBAAa,CAAC,mBAAmB,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,CAAC,CAAA;IAC5G,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAgB,gBAAgB,CAAC,GAAW,EAAE,MAAgB;IAC5D,OAAO,aAAa,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACvE,MAAM,CAAC,MAAM,EAAE,CAAA;QACf,MAAM,IAAA,mBAAQ,EAAC,MAAM,EAAE,IAAA,gCAAoB,GAAE,EAAE,KAAK,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,+BAA+B,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;AAC7F,CAAC;AAED;;;GAGG;AACH,SAAgB,WAAW,CAAC,IAAY,EAAE,MAAc;IACtD,OAAO,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,mBAAI,CAAC,GAAG,EAAE,CAAC,CAAA;AACnE,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC;IACpE,IAAI,CAAC,gBAAgB,EAAE;QAAE,OAAO,kBAAE,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAS,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAA;IACzE,uFAAuF;IACvF,MAAM,MAAM,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAS,CAAC,QAAQ,GAAG,mBAAS,CAAC,UAAU,GAAG,KAAK,CAAC,CAAA;IACrF,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjD,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;YACjB,kBAAE,CAAC,QAAQ,CAAC,iBAAiB,MAAM,CAAC,EAAE,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,EAAE;SACd,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;QAC5C,IAAI,MAAM,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACjC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,IAAI,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAChH,CAAC;QACD,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE;YAAE,OAAO,MAAM,CAAA;QAC1C,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACpB,MAAM,KAAK,CAAA;IACb,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;IAChC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,4FAA4F;AACrF,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,GAAW;IAC3D,IAAI,CAAC,gBAAgB,EAAE;QAAE,OAAO,GAAG,CAAA;IACnC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACjF,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC;QAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAA;IACrD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/runtime/workload.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=workload.test.d.ts.map

package/dist/runtime/workload.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workload.test.d.ts","sourceRoot":"","sources":["../../src/runtime/workload.test.ts"],"names":[],"mappings":""}

package/dist/runtime/workload.test.js

@@ -0,0 +1,235 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var _a;
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_stream_1 = require("node:stream");
+const node_util_1 = require("node:util");
+const node_zlib_1 = require("node:zlib");
+const node_test_1 = require("node:test");
+const workload_1 = require("./workload");
+const exec = (0, node_util_1.promisify)(node_child_process_1.execFile);
+const isRoot = ((_a = process.getuid) === null || _a === void 0 ? void 0 : _a.call(process)) === 0;
+/** A tar entry as a hostile build could write one, which no tar on purpose would. */
+function tarEntry(name, options = {}) {
+    var _a, _b, _c, _d;
+    const content = Buffer.from((_a = options.content) !== null && _a !== void 0 ? _a : '');
+    const header = Buffer.alloc(512);
+    const put = (value, at, length) => header.write(value.slice(0, length), at, 'latin1');
+    const octal = (value, length) => value.toString(8).padStart(length - 1, '0');
+    put(name, 0, 100);
+    put(octal((_b = options.mode) !== null && _b !== void 0 ? _b : 0o644, 8), 100, 8);
+    put(octal(0, 8), 108, 8);
+    put(octal(0, 8), 116, 8);
+    put(octal(content.length, 12), 124, 12);
+    put(octal(0, 12), 136, 12);
+    header.fill(' ', 148, 156);
+    put((_c = options.type) !== null && _c !== void 0 ? _c : '0', 156, 1);
+    put((_d = options.link) !== null && _d !== void 0 ? _d : '', 157, 100);
+    put('ustar  ', 257, 8);
+    put(`${octal(header.reduce((sum, byte) => sum + byte, 0), 7)}\0 `, 148, 8);
+    return Buffer.concat([header, content, Buffer.alloc((512 - (content.length % 512)) % 512)]);
+}
+const hostileArchive = (...entries) => node_stream_1.Readable.from([(0, node_zlib_1.zstdCompressSync)(Buffer.concat([...entries, Buffer.alloc(1024)]))]);
+(0, node_test_1.describe)('a path inside a directory', () => {
+    (0, node_test_1.it)('is the directory or under it, and not a neighbour that shares its prefix', () => {
+        strict_1.default.equal((0, workload_1.isInsideDir)('/workspace/app', '/workspace/app'), true);
+        strict_1.default.equal((0, workload_1.isInsideDir)('/workspace/app', '/workspace/app/src/a.js'), true);
+        strict_1.default.equal((0, workload_1.isInsideDir)('/workspace/app', '/workspace/app-secrets/a.js'), false);
+        strict_1.default.equal((0, workload_1.isInsideDir)('/workspace/app', '/workspace'), false);
+    });
+});
+(0, node_test_1.describe)('workspace files', () => {
+    let root;
+    let workspace;
+    (0, node_test_1.beforeEach)(async () => {
+        root = await node_fs_1.promises.mkdtemp(node_path_1.default.join(node_os_1.default.tmpdir(), 'workload-'));
+        await node_fs_1.promises.chmod(root, 0o755);
+        workspace = node_path_1.default.join(root, 'workspace');
+        await node_fs_1.promises.mkdir(workspace);
+        await (0, workload_1.handOverToWorkload)(workspace);
+    });
+    (0, node_test_1.afterEach)(() => node_fs_1.promises.rm(root, { recursive: true, force: true }));
+    (0, node_test_1.it)('writes, appends and removes, making the folders a file needs', async () => {
+        const file = node_path_1.default.join(workspace, 'deep/er/notes.txt');
+        await (0, workload_1.writeWorkloadFile)(file, 'one\n');
+        await (0, workload_1.appendWorkloadFile)(file, 'two\n');
+        strict_1.default.equal(await node_fs_1.promises.readFile(file, 'utf8'), 'one\ntwo\n');
+        await (0, workload_1.writeWorkloadFile)(file, Buffer.from([0, 1, 2, 255]));
+        strict_1.default.deepEqual([...(await node_fs_1.promises.readFile(file))], [0, 1, 2, 255]);
+        await (0, workload_1.removeWorkloadFile)(file);
+        await strict_1.default.rejects(node_fs_1.promises.access(file));
+        await (0, workload_1.removeWorkloadFile)(file);
+        await (0, workload_1.makeWorkloadDir)(node_path_1.default.join(workspace, 'made/here'));
+        strict_1.default.ok((await node_fs_1.promises.stat(node_path_1.default.join(workspace, 'made/here'))).isDirectory());
+    });
+    (0, node_test_1.it)('handles names a shell would trip on', async () => {
+        const file = node_path_1.default.join(workspace, 'a b/$(touch pwned)"; rm -rf x\'.txt');
+        await (0, workload_1.writeWorkloadFile)(file, 'kept');
+        strict_1.default.equal(await node_fs_1.promises.readFile(file, 'utf8'), 'kept');
+        await strict_1.default.rejects(node_fs_1.promises.access(node_path_1.default.join(workspace, 'pwned')));
+        await strict_1.default.rejects(node_fs_1.promises.access('/pwned'));
+    });
+    (0, node_test_1.it)('keeps appending to a log stream until it ends', async () => {
+        const file = node_path_1.default.join(workspace, '.builder/logs/app.log');
+        await (0, workload_1.makeWorkloadDir)(node_path_1.default.dirname(file));
+        const stream = (0, workload_1.workloadAppendStream)(file);
+        await new Promise((resolve, reject) => {
+            stream.on('error', reject);
+            stream.write('line one\n');
+            stream.write(Buffer.from('line two\n'));
+            stream.end(resolve);
+        });
+        for (let tries = 0; tries < 50 && !(await node_fs_1.promises.readFile(file, 'utf8').catch(() => '')).includes('two'); tries += 1) {
+            await new Promise((resolve) => setTimeout(resolve, 20));
+        }
+        strict_1.default.equal(await node_fs_1.promises.readFile(file, 'utf8'), 'line one\nline two\n');
+    });
+    (0, node_test_1.it)('reads a file inside, and says a missing one is missing', async () => {
+        await (0, workload_1.writeWorkloadFile)(node_path_1.default.join(workspace, 'a.txt'), 'hello');
+        strict_1.default.equal((await (0, workload_1.readInside)(workspace, node_path_1.default.join(workspace, 'a.txt'))).toString(), 'hello');
+        await strict_1.default.rejects((0, workload_1.readInside)(workspace, node_path_1.default.join(workspace, 'none.txt')), { code: 'ENOENT' });
+        strict_1.default.equal(await (0, workload_1.realDirInside)(workspace, workspace).then(() => true), true);
+    });
+    (0, node_test_1.it)('only changes the env when there is someone to run as', () => {
+        var _a;
+        const env = { PATH: '/bin', HOME: '/root' };
+        strict_1.default.deepEqual((0, workload_1.workloadEnv)(env), isRoot ? { ...env, HOME: workload_1.WORKLOAD_HOME, USER: 'agent', LOGNAME: 'agent' } : env);
+        strict_1.default.equal((_a = (0, workload_1.workloadIdentity)()) === null || _a === void 0 ? void 0 : _a.uid, isRoot ? workload_1.WORKLOAD_UID : undefined);
+    });
+});
+// What the separation is for. They need root and Linux's /proc: run in the VM image as root, see
+// docs/architecture/deployments.md. Skipped anywhere else, where there's no privilege to protect.
+(0, node_test_1.describe)('a workspace a workload controls, read by a root runtime', { skip: !isRoot }, () => {
+    let root;
+    let workspace;
+    let secret;
+    const as = (command) => exec('sh', ['-c', command], { cwd: workspace, uid: workload_1.WORKLOAD_UID, gid: workload_1.WORKLOAD_UID, env: { PATH: process.env.PATH } });
+    (0, node_test_1.beforeEach)(async () => {
+        root = await node_fs_1.promises.mkdtemp(node_path_1.default.join(node_os_1.default.tmpdir(), 'workload-'));
+        await node_fs_1.promises.chmod(root, 0o755);
+        workspace = node_path_1.default.join(root, 'workspace');
+        await node_fs_1.promises.mkdir(workspace);
+        secret = node_path_1.default.join(root, 'root-only.txt');
+        await node_fs_1.promises.writeFile(secret, 'SECRET', { mode: 0o600 });
+        await (0, workload_1.handOverToWorkload)(workspace);
+    });
+    (0, node_test_1.afterEach)(() => node_fs_1.promises.rm(root, { recursive: true, force: true }));
+    (0, node_test_1.it)('gives the workspace to the workload, without following a link out of it', async () => {
+        await node_fs_1.promises.symlink(secret, node_path_1.default.join(workspace, 'link'));
+        await (0, workload_1.handOverToWorkload)(workspace);
+        strict_1.default.equal((await node_fs_1.promises.stat(secret)).uid, 0, 'the link itself changed owner, not what it leads to');
+        strict_1.default.equal((await node_fs_1.promises.lstat(node_path_1.default.join(workspace, 'link'))).uid, workload_1.WORKLOAD_UID);
+    });
+    (0, node_test_1.it)('stops the workload from reading what root can', async () => {
+        await strict_1.default.rejects(as(`cat ${secret}`));
+        await strict_1.default.rejects(as('cat /proc/1/environ'));
+    });
+    (0, node_test_1.it)('never reads through a link leading out, to a file or to the runtime itself', async () => {
+        await as(`ln -s ${secret} leak.txt && ln -s /proc/self/environ env.txt && ln -s /proc/1/environ one.txt`);
+        for (const name of ['leak.txt', 'env.txt', 'one.txt']) {
+            await strict_1.default.rejects((0, workload_1.readInside)(workspace, node_path_1.default.join(workspace, name)), { code: 'ENOENT' }, name);
+        }
+    });
+    (0, node_test_1.it)('never reads through a folder swapped for a link', async () => {
+        await as(`ln -s ${root} dir`);
+        await strict_1.default.rejects((0, workload_1.readInside)(workspace, node_path_1.default.join(workspace, 'dir/root-only.txt')), { code: 'ENOENT' });
+        await strict_1.default.rejects((0, workload_1.realDirInside)(workspace, node_path_1.default.join(workspace, 'dir')), { code: 'ENOENT' });
+    });
+    (0, node_test_1.it)('still reads a link that stays inside', async () => {
+        await as('echo -n inside > real.txt && ln -s real.txt alias.txt');
+        strict_1.default.equal((await (0, workload_1.readInside)(workspace, node_path_1.default.join(workspace, 'alias.txt'))).toString(), 'inside');
+    });
+    (0, node_test_1.it)('does not hang on a FIFO, or read a directory as a file', async () => {
+        await as('mkfifo pipe && mkdir folder');
+        await strict_1.default.rejects((0, workload_1.readInside)(workspace, node_path_1.default.join(workspace, 'pipe')), { code: 'ENOENT' });
+        await strict_1.default.rejects((0, workload_1.readInside)(workspace, node_path_1.default.join(workspace, 'folder')), { code: 'EISDIR' });
+    });
+    (0, node_test_1.it)('never writes, appends or removes through a link as root', async () => {
+        await as(`ln -s ${secret} target.txt && ln -s ${root} parent`);
+        await strict_1.default.rejects((0, workload_1.writeWorkloadFile)(node_path_1.default.join(workspace, 'target.txt'), 'OVERWRITTEN'));
+        await strict_1.default.rejects((0, workload_1.appendWorkloadFile)(node_path_1.default.join(workspace, 'target.txt'), 'OVERWRITTEN'));
+        await strict_1.default.rejects((0, workload_1.writeWorkloadFile)(node_path_1.default.join(workspace, 'parent/planted.txt'), 'x'));
+        await (0, workload_1.removeWorkloadFile)(node_path_1.default.join(workspace, 'parent/root-only.txt')).catch(() => undefined);
+        strict_1.default.equal(await node_fs_1.promises.readFile(secret, 'utf8'), 'SECRET');
+        await strict_1.default.rejects(node_fs_1.promises.access(node_path_1.default.join(root, 'planted.txt')));
+    });
+    (0, node_test_1.describe)('an archive of what a build left', () => {
+        const packed = async (folders = ['.']) => {
+            const chunks = [];
+            const sink = new node_stream_1.PassThrough();
+            sink.on('data', (chunk) => chunks.push(chunk));
+            await (0, workload_1.packAsWorkload)(workspace, folders, [], sink);
+            return Buffer.concat(chunks);
+        };
+        (0, node_test_1.it)('holds a link leading out as a link, and never what it leads to', async () => {
+            await as(`echo -n mine > own.txt && ln -s ${secret} leak.txt`);
+            const tar = (0, node_zlib_1.zstdDecompressSync)(await packed()).toString('latin1');
+            strict_1.default.ok(tar.includes('mine'));
+            strict_1.default.ok(tar.includes(secret), 'the link, by where it leads');
+            strict_1.default.ok(!tar.includes('SECRET'));
+        });
+        (0, node_test_1.it)('can\'t pack what the workload couldn\'t read', async () => {
+            await node_fs_1.promises.copyFile(secret, node_path_1.default.join(workspace, 'root-only.txt'));
+            await node_fs_1.promises.chmod(node_path_1.default.join(workspace, 'root-only.txt'), 0o600);
+            await strict_1.default.rejects(packed(), /tar failed/);
+        });
+        (0, node_test_1.it)('unpacks as the workload, whatever it holds', async () => {
+            await as('echo -n mine > own.txt');
+            const archive = await packed();
+            await as('rm own.txt');
+            await (0, workload_1.unpackAsWorkload)(workspace, node_stream_1.Readable.from([archive]));
+            strict_1.default.equal((await node_fs_1.promises.stat(node_path_1.default.join(workspace, 'own.txt'))).uid, workload_1.WORKLOAD_UID);
+        });
+        (0, node_test_1.it)('never writes outside through a link it brought', async () => {
+            const archive = hostileArchive(tarEntry('out', { type: '2', link: root }), tarEntry('out/planted.txt', { content: 'x' }));
+            await (0, workload_1.unpackAsWorkload)(workspace, archive).catch(() => undefined);
+            await strict_1.default.rejects(node_fs_1.promises.access(node_path_1.default.join(root, 'planted.txt')));
+        });
+        (0, node_test_1.it)('never writes where an absolute path or a parent leads', async () => {
+            await (0, workload_1.unpackAsWorkload)(workspace, hostileArchive(tarEntry(node_path_1.default.join(root, 'absolute.txt'), { content: 'x' }))).catch(() => undefined);
+            await strict_1.default.rejects(node_fs_1.promises.access(node_path_1.default.join(root, 'absolute.txt')));
+            await (0, workload_1.unpackAsWorkload)(workspace, hostileArchive(tarEntry('../parent.txt', { content: 'x' }))).catch(() => undefined);
+            await strict_1.default.rejects(node_fs_1.promises.access(node_path_1.default.join(root, 'parent.txt')));
+        });
+        (0, node_test_1.it)('never overwrites a file of root\'s through a link, or takes root\'s through a hard link', async () => {
+            await (0, workload_1.unpackAsWorkload)(workspace, hostileArchive(tarEntry('over', { type: '2', link: secret }), tarEntry('over', { content: 'OVERWRITTEN' }))).catch(() => undefined);
+            strict_1.default.equal(await node_fs_1.promises.readFile(secret, 'utf8'), 'SECRET');
+            strict_1.default.equal((await node_fs_1.promises.stat(secret)).uid, 0);
+            await (0, workload_1.unpackAsWorkload)(workspace, hostileArchive(tarEntry('hard', { type: '1', link: secret }))).catch(() => undefined);
+            strict_1.default.equal((await node_fs_1.promises.stat(secret)).uid, 0);
+            await strict_1.default.rejects(as('cat hard'));
+        });
+        (0, node_test_1.it)('gives root nothing to run: no file it unpacks belongs to root, setuid or not', async () => {
+            await (0, workload_1.unpackAsWorkload)(workspace, hostileArchive(tarEntry('suid', { mode: 0o4755, content: '#!/bin/sh\n' })));
+            const stats = await node_fs_1.promises.stat(node_path_1.default.join(workspace, 'suid'));
+            strict_1.default.equal(stats.uid, workload_1.WORKLOAD_UID);
+            strict_1.default.notEqual(stats.mode & 0o100, 0);
+        });
+        (0, node_test_1.it)('stops at an archive that isn\'t one', async () => {
+            await strict_1.default.rejects((0, workload_1.unpackAsWorkload)(workspace, node_stream_1.Readable.from([Buffer.from('not an archive')])));
+        });
+        (0, node_test_1.it)('never leaves what it was given in the environment of tar', async () => {
+            process.env.TEST_SECRET_ENV = 'SECRET_IN_ENV';
+            try {
+                await (0, workload_1.unpackAsWorkload)(workspace, hostileArchive(tarEntry('a.txt', { content: 'x' })));
+                strict_1.default.equal((await node_fs_1.promises.readFile(node_path_1.default.join(workspace, 'a.txt'), 'utf8')), 'x');
+            }
+            finally {
+                delete process.env.TEST_SECRET_ENV;
+            }
+        });
+    });
+    (0, node_test_1.it)('writes what the workload can then change', async () => {
+        await (0, workload_1.writeWorkloadFile)(node_path_1.default.join(workspace, 'new/file.txt'), 'x');
+        strict_1.default.equal((await node_fs_1.promises.stat(node_path_1.default.join(workspace, 'new/file.txt'))).uid, workload_1.WORKLOAD_UID);
+        await as('echo more >> new/file.txt && rm new/file.txt && rmdir new');
+    });
+});
+//# sourceMappingURL=workload.test.js.map

package/dist/runtime/workload.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workload.test.js","sourceRoot":"","sources":["../../src/runtime/workload.test.ts"],"names":[],"mappings":";;;;;;AAAA,gEAAuC;AACvC,2DAA6C;AAC7C,qCAAwC;AACxC,sDAAwB;AACxB,0DAA4B;AAC5B,6CAAmD;AACnD,yCAAqC;AACrC,yCAAgE;AAChE,yCAA+D;AAC/D,yCAiBmB;AAEnB,MAAM,IAAI,GAAG,IAAA,qBAAS,EAAC,6BAAQ,CAAC,CAAA;AAChC,MAAM,MAAM,GAAG,CAAA,MAAA,OAAO,CAAC,MAAM,uDAAI,MAAK,CAAC,CAAA;AAEvC,qFAAqF;AACrF,SAAS,QAAQ,CAAC,IAAY,EAAE,UAA4F,EAAE;;IAC5H,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAA,OAAO,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAU,EAAE,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC7G,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAA;IAC5F,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;IACjB,GAAG,CAAC,KAAK,CAAC,MAAA,OAAO,CAAC,IAAI,mCAAI,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAC5C,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IACxB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IACxB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IACvC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAC1B,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IAC1B,GAAG,CAAC,MAAA,OAAO,CAAC,IAAI,mCAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAChC,GAAG,CAAC,MAAA,OAAO,CAAC,IAAI,mCAAI,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;IACjC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IACtB,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;AAC7F,CAAC;AACD,MAAM,cAAc,GAAG,CAAC,GAAG,OAAiB,EAAE,EAAE,CAAC,sBAAQ,CAAC,IAAI,CAAC,CAAC,IAAA,4BAAgB,EAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEnI,IAAA,oBAAQ,EAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,IAAA,cAAE,EAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,gBAAM,CAAC,KAAK,CAAC,IAAA,sBAAW,EAAC,gBAAgB,EAAE,gBAAgB,CAAC,EAAE,IAAI,CAAC,CAAA;QACnE,gBAAM,CAAC,KAAK,CAAC,IAAA,sBAAW,EAAC,gBAAgB,EAAE,yBAAyB,CAAC,EAAE,IAAI,CAAC,CAAA;QAC5E,gBAAM,CAAC,KAAK,CAAC,IAAA,sBAAW,EAAC,gBAAgB,EAAE,6BAA6B,CAAC,EAAE,KAAK,CAAC,CAAA;QACjF,gBAAM,CAAC,KAAK,CAAC,IAAA,sBAAW,EAAC,gBAAgB,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,IAAA,oBAAQ,EAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,IAAI,IAAY,CAAA;IAChB,IAAI,SAAiB,CAAA;IAErB,IAAA,sBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;QAC5D,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC3B,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACxC,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACzB,MAAM,IAAA,6BAAkB,EAAC,SAAS,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IACF,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAE9D,IAAA,cAAE,EAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAA;QACtD,MAAM,IAAA,4BAAiB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACtC,MAAM,IAAA,6BAAkB,EAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QACvC,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAA;QAC3D,MAAM,IAAA,4BAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;QAC1D,gBAAM,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAChE,MAAM,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;QACrC,MAAM,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,IAAA,0BAAe,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;QACxD,gBAAM,CAAC,EAAE,CAAC,CAAC,MAAM,kBAAE,CAAC,IAAI,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAA;QACxE,MAAM,IAAA,4BAAiB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACrC,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAA;QACrD,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QAC9D,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,uBAAuB,CAAC,CAAA;QAC1D,MAAM,IAAA,0BAAe,EAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,IAAA,+BAAoB,EAAC,IAAI,CAAC,CAAA;QACzC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YAC1B,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;YAC1B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAA;YACvC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrB,CAAC,CAAC,CAAA;QACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACjH,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;QACzD,CAAC;QACD,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,sBAAsB,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAA,4BAAiB,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;QAC/D,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAA,qBAAU,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAA;QAC9F,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qBAAU,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QACjG,gBAAM,CAAC,KAAK,CAAC,MAAM,IAAA,wBAAa,EAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,sDAAsD,EAAE,GAAG,EAAE;;QAC9D,MAAM,GAAG,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAC3C,gBAAM,CAAC,SAAS,CAAC,IAAA,sBAAW,EAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,wBAAa,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACnH,gBAAM,CAAC,KAAK,CAAC,MAAA,IAAA,2BAAgB,GAAE,0CAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IAC1E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,iGAAiG;AACjG,kGAAkG;AAClG,IAAA,oBAAQ,EAAC,yDAAyD,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE;IAC1F,IAAI,IAAY,CAAA;IAChB,IAAI,SAAiB,CAAA;IACrB,IAAI,MAAc,CAAA;IAElB,MAAM,EAAE,GAAG,CAAC,OAAe,EAAE,EAAE,CAC7B,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,uBAAY,EAAE,GAAG,EAAE,uBAAY,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;IAExH,IAAA,sBAAU,EAAC,KAAK,IAAI,EAAE;QACpB,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAA;QAC5D,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC3B,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QACxC,MAAM,kBAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACzB,MAAM,GAAG,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAA;QACzC,MAAM,kBAAE,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;QACrD,MAAM,IAAA,6BAAkB,EAAC,SAAS,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IACF,IAAA,qBAAS,EAAC,GAAG,EAAE,CAAC,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAE9D,IAAA,cAAE,EAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,kBAAE,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;QACtD,MAAM,IAAA,6BAAkB,EAAC,SAAS,CAAC,CAAA;QACnC,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,qDAAqD,CAAC,CAAA;QACnG,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,uBAAY,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,gBAAM,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC,CAAA;QACzC,MAAM,gBAAM,CAAC,OAAO,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,4EAA4E,EAAE,KAAK,IAAI,EAAE;QAC1F,MAAM,EAAE,CAAC,SAAS,MAAM,gFAAgF,CAAC,CAAA;QACzG,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YACtD,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qBAAU,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAA;QACnG,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,EAAE,CAAC,SAAS,IAAI,MAAM,CAAC,CAAA;QAC7B,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qBAAU,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC1G,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,wBAAa,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjG,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,EAAE,CAAC,uDAAuD,CAAC,CAAA;QACjE,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAA,qBAAU,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAA;IACrG,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,CAAC,6BAA6B,CAAC,CAAA;QACvC,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qBAAU,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;QAC7F,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,qBAAU,EAAC,SAAS,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IACjG,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,CAAC,SAAS,MAAM,wBAAwB,IAAI,SAAS,CAAC,CAAA;QAC9D,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,4BAAiB,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC1F,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,6BAAkB,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,aAAa,CAAC,CAAC,CAAA;QAC3F,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,4BAAiB,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QACxF,MAAM,IAAA,6BAAkB,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAC7F,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;QACzD,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;IACjE,CAAC,CAAC,CAAA;IAEF,IAAA,oBAAQ,EAAC,iCAAiC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,KAAK,EAAE,OAAO,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;YACvC,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,MAAM,IAAI,GAAG,IAAI,yBAAW,EAAE,CAAA;YAC9B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;YACtD,MAAM,IAAA,yBAAc,EAAC,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;YAClD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QAC9B,CAAC,CAAA;QAED,IAAA,cAAE,EAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,EAAE,CAAC,mCAAmC,MAAM,WAAW,CAAC,CAAA;YAC9D,MAAM,GAAG,GAAG,IAAA,8BAAkB,EAAC,MAAM,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;YACjE,gBAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;YAC/B,gBAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC,CAAA;YAC9D,gBAAM,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QACpC,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,kBAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC,CAAA;YAChE,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,KAAK,CAAC,CAAA;YAC5D,MAAM,gBAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAA;QAC9C,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,EAAE,CAAC,wBAAwB,CAAC,CAAA;YAClC,MAAM,OAAO,GAAG,MAAM,MAAM,EAAE,CAAA;YAC9B,MAAM,EAAE,CAAC,YAAY,CAAC,CAAA;YACtB,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,sBAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAC3D,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,IAAI,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,uBAAY,CAAC,CAAA;QAClF,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;YACzH,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACjE,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAA;QACjE,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;YACrE,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACrI,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,CAAA;YAChE,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACrH,MAAM,gBAAM,CAAC,OAAO,CAAC,kBAAE,CAAC,MAAM,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAA;QAChE,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;YACvG,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACrK,gBAAM,CAAC,KAAK,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAA;YACzD,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAC5C,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACvH,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YAC5C,MAAM,gBAAM,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAA;QACtC,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;YAC5F,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAC7G,MAAM,KAAK,GAAG,MAAM,kBAAE,CAAC,IAAI,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;YACzD,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAY,CAAC,CAAA;YACrC,gBAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,EAAE,CAAC,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,gBAAM,CAAC,OAAO,CAAC,IAAA,2BAAgB,EAAC,SAAS,EAAE,sBAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACnG,CAAC,CAAC,CAAA;QAEF,IAAA,cAAE,EAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,eAAe,CAAA;YAC7C,IAAI,CAAC;gBACH,MAAM,IAAA,2BAAgB,EAAC,SAAS,EAAE,cAAc,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAA;gBACtF,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,QAAQ,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YAC/E,CAAC;oBAAS,CAAC;gBACT,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAA;YACpC,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,IAAA,cAAE,EAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,IAAA,4BAAiB,EAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,EAAE,GAAG,CAAC,CAAA;QAClE,gBAAM,CAAC,KAAK,CAAC,CAAC,MAAM,kBAAE,CAAC,IAAI,CAAC,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,uBAAY,CAAC,CAAA;QACrF,MAAM,EAAE,CAAC,2DAA2D,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/session/conversation.d.ts

@@ -8,8 +8,16 @@ export interface PersistedConversation {
 }
 /** Drops the oldest turns (user message + everything up to the next user message) past the cap, keeping the first one. */
 export declare function limitConversation(messages: ModelMessage[], charBudget?: number): ModelMessage[];
+/**
+ * Every earlier turn as one assistant message (its final text plus what it did), then the character
+ * cap. Tool calls and results of finished turns never re-enter the prompt: the workspace holds what they
+ * produced, and the account names the files. An interrupted turn (a lost VM mid-work) collapses the same
+ * way, which is how a restored session knows what was already done.
+ */
+export declare function prepareHistory(messages: ModelMessage[], charBudget?: number): ModelMessage[];
+export declare function conversationFile(stateDir: string): string;
 /** Missing conversation means a new session; corrupt state must fail startup. */
-export declare function readConversation(workspaceDir: string): Promise<PersistedConversation | undefined>;
+export declare function readConversation(stateDir: string): Promise<PersistedConversation | undefined>;
 /** Replace atomically so recovery never reads half of a conversation. The caller serializes writes. */
-export declare function writeConversation(workspaceDir: string, getConversation: () => PersistedConversation): Promise<void>;
+export declare function writeConversation(stateDir: string, getConversation: () => PersistedConversation): Promise<void>;
 //# sourceMappingURL=conversation.d.ts.map

package/dist/session/conversation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../src/session/conversation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAMtC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAA;IACV,QAAQ,EAAE,YAAY,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAMD,0HAA0H;AAC1H,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,UAAU,SAAsB,GAAG,YAAY,EAAE,CAa5G;AAED,iFAAiF;AACjF,wBAAsB,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAavG;AAED,uGAAuG;AACvG,wBAAsB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOzH"}
+{"version":3,"file":"conversation.d.ts","sourceRoot":"","sources":["../../src/session/conversation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,IAAI,CAAA;AAOtC,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,CAAC,CAAA;IACV,QAAQ,EAAE,YAAY,EAAE,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,0HAA0H;AAC1H,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,UAAU,SAAsB,GAAG,YAAY,EAAE,CAa5G;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,EAAE,UAAU,SAAsB,GAAG,YAAY,EAAE,CAgBzG;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,iFAAiF;AACjF,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAanG;AAED,uGAAuG;AACvG,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOrH"}

package/dist/session/conversation.js

@@ -4,20 +4,20 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.limitConversation = limitConversation;
+exports.prepareHistory = prepareHistory;
+exports.conversationFile = conversationFile;
 exports.readConversation = readConversation;
 exports.writeConversation = writeConversation;
 const node_fs_1 = require("node:fs");
 const node_path_1 = __importDefault(require("node:path"));
-const CONVERSATION_FILE = '.builder/conversation.json';
+const turn_history_1 = require("../agent/turn-history");
+const CONVERSATION_FILE = 'conversation.json';
 /** Rough context cap (chars ≈ tokens × 4): older turns are dropped, the first question is kept. */
 const CONTEXT_CHAR_BUDGET = 480000;
-function approxChars(message) {
-    return JSON.stringify(message).length;
-}
 /** Drops the oldest turns (user message + everything up to the next user message) past the cap, keeping the first one. */
 function limitConversation(messages, charBudget = CONTEXT_CHAR_BUDGET) {
     var _a;
-    let total = messages.reduce((sum, message) => sum + approxChars(message), 0);
+    let total = messages.reduce((sum, message) => sum + (0, turn_history_1.approxChars)(message), 0);
     if (total <= charBudget)
         return messages;
     const result = [...messages];
@@ -28,15 +28,43 @@ function limitConversation(messages, charBudget = CONTEXT_CHAR_BUDGET) {
         const start = userIndexes[1];
         const end = (_a = userIndexes[2]) !== null && _a !== void 0 ? _a : result.length;
         const removed = result.splice(start, end - start);
-        total -= removed.reduce((sum, message) => sum + approxChars(message), 0);
+        total -= removed.reduce((sum, message) => sum + (0, turn_history_1.approxChars)(message), 0);
     }
     return result;
 }
+/**
+ * Every earlier turn as one assistant message (its final text plus what it did), then the character
+ * cap. Tool calls and results of finished turns never re-enter the prompt: the workspace holds what they
+ * produced, and the account names the files. An interrupted turn (a lost VM mid-work) collapses the same
+ * way, which is how a restored session knows what was already done.
+ */
+function prepareHistory(messages, charBudget = CONTEXT_CHAR_BUDGET) {
+    const prepared = [];
+    let run = [];
+    const flush = () => {
+        if (run.length)
+            prepared.push((0, turn_history_1.collapseTurn)(run));
+        run = [];
+    };
+    for (const message of messages) {
+        if (message.role === 'assistant' || message.role === 'tool')
+            run.push(message);
+        else {
+            flush();
+            prepared.push(message);
+        }
+    }
+    flush();
+    return limitConversation(prepared, charBudget);
+}
+function conversationFile(stateDir) {
+    return node_path_1.default.join(stateDir, CONVERSATION_FILE);
+}
 /** Missing conversation means a new session; corrupt state must fail startup. */
-async function readConversation(workspaceDir) {
+async function readConversation(stateDir) {
     let raw;
     try {
-        raw = await node_fs_1.promises.readFile(node_path_1.default.join(workspaceDir, CONVERSATION_FILE), 'utf8');
+        raw = await node_fs_1.promises.readFile(conversationFile(stateDir), 'utf8');
     }
     catch (error) {
         if (error.code === 'ENOENT')
@@ -50,12 +78,12 @@ async function readConversation(workspaceDir) {
     return parsed;
 }
 /** Replace atomically so recovery never reads half of a conversation. The caller serializes writes. */
-async function writeConversation(workspaceDir, getConversation) {
-    const target = node_path_1.default.join(workspaceDir, CONVERSATION_FILE);
-    await node_fs_1.promises.mkdir(node_path_1.default.dirname(target), { recursive: true });
+async function writeConversation(stateDir, getConversation) {
+    const target = conversationFile(stateDir);
+    await node_fs_1.promises.mkdir(stateDir, { recursive: true, mode: 0o700 });
     // Read messages and token counters together after the directory is ready. A model step
     // may finish during mkdir; capturing counters earlier would pair them with newer messages.
-    await node_fs_1.promises.writeFile(`${target}.tmp`, JSON.stringify(getConversation()));
+    await node_fs_1.promises.writeFile(`${target}.tmp`, JSON.stringify(getConversation()), { mode: 0o600 });
     await node_fs_1.promises.rename(`${target}.tmp`, target);
 }
 //# sourceMappingURL=conversation.js.map