@namzu/sandbox 23.0.1 → 25.0.0

package/dist/local-virtual-computer/guest-stdio.js

@@ -0,0 +1,330 @@
+import { workerAuthorization } from '../backends/http-worker-client.js';
+const MAX_FRAME_BYTES = 2 * 1024 * 1024;
+const MAX_QUEUED_BYTES = 4 * 1024 * 1024;
+/** Private allocation token stays inside this host channel, never in guest argv/env. */
+export async function openGuestStdio(host, command, args, options) {
+    if (!command || typeof command !== 'string' || args.some((arg) => typeof arg !== 'string'))
+        throw new Error('Guest stdio requires a command and literal argv');
+    const headers = { 'content-type': 'application/json', ...workerAuthorization(host.token) };
+    const post = async (route, body, signal) => {
+        const response = await fetch(`${host.executionUrl}${route}`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(body),
+            signal: signal
+                ? AbortSignal.any([signal, AbortSignal.timeout(30_000)])
+                : AbortSignal.timeout(30_000),
+        });
+        if (!response.ok)
+            throw new Error(`Guest stdio request refused (${response.status})`);
+        return (await response.json());
+    };
+    const reservation = await post('/executions/reserve', {}, options?.signal);
+    const executionId = reservation.executionId;
+    if (typeof executionId !== 'string' || !/^exec_[0-9a-f-]{36}$/.test(executionId))
+        throw new Error('Guest did not return an execution reservation');
+    const cancel = async () => {
+        const result = await post('/cancel', { executionId });
+        if (result.ok !== true || !['completed', 'cancelled', 'failed'].includes(String(result.state)))
+            throw new Error('Guest stdio process-group termination was not confirmed');
+    };
+    const capability = reservation.stdio;
+    if (capability?.version !== 1 ||
+        !Number.isSafeInteger(capability.maxLifetimeMs) ||
+        typeof capability.maxLifetimeMs !== 'number' ||
+        capability.maxLifetimeMs < 1 ||
+        capability.maxLifetimeMs > 2_147_000_000) {
+        await cancel();
+        throw new Error('This guest worker does not support owned interactive stdio; rebuild the Pal image');
+    }
+    const controller = new AbortController();
+    let confirmed = false;
+    let closing;
+    let terminal = false;
+    let failure;
+    let resolveClosed;
+    let rejectClosed;
+    const closed = new Promise((resolve, reject) => {
+        resolveClosed = resolve;
+        rejectClosed = reject;
+    });
+    // An embedding transport may attach only after connect resolves.
+    void closed.catch(() => { });
+    const operations = new Set();
+    const unknown = () => {
+        host.uncertain();
+        for (const operation of operations)
+            operation.unknown();
+    };
+    const queue = [];
+    let queuedBytes = 0;
+    let consumerWake;
+    let producerWake;
+    let claimed = false;
+    const finish = (error) => {
+        if (terminal)
+            return;
+        terminal = true;
+        failure = error;
+        options?.signal?.removeEventListener('abort', onAbort);
+        consumerWake?.();
+        producerWake?.();
+        if (error)
+            rejectClosed(error);
+        else
+            resolveClosed();
+    };
+    const close = () => {
+        if (confirmed)
+            return Promise.resolve();
+        if (closing)
+            return closing;
+        // Closing MCP does not prove an external editor command stopped.
+        if (operations.size)
+            unknown();
+        closing = cancel()
+            .then(() => {
+            confirmed = true;
+            controller.abort();
+            finish();
+        })
+            .catch((error) => {
+            unknown();
+            closing = undefined;
+            throw error;
+        });
+        return closing;
+    };
+    const onAbort = () => {
+        void close().catch(() => { });
+    };
+    let response;
+    const handshakeTimeout = setTimeout(() => controller.abort(new Error('Guest stdio startup timed out')), 30_000);
+    try {
+        options?.signal?.throwIfAborted();
+        await options?.assertExecutionAllowed?.();
+        options?.signal?.throwIfAborted();
+        response = await fetch(`${host.executionUrl}/execute`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify({
+                executionId,
+                command,
+                args,
+                cwd: options?.cwd,
+                env: options?.env,
+                stdio: true,
+                timeoutMs: capability.maxLifetimeMs,
+                normalExitPolicy: 'strict',
+            }),
+            signal: AbortSignal.any([controller.signal, ...(options?.signal ? [options.signal] : [])]),
+        });
+        if (!response.ok || !response.body)
+            throw new Error('Guest stdio admission was not confirmed');
+    }
+    catch (error) {
+        clearTimeout(handshakeTimeout);
+        try {
+            await close();
+        }
+        catch {
+            host.uncertain();
+        }
+        throw error;
+    }
+    const frames = readFrames(response.body);
+    try {
+        const first = await frames.next();
+        if (first.done || first.value.type !== 'stdio_started' || first.value.version !== 1)
+            throw new Error('Guest stdio startup acknowledgement is missing');
+    }
+    catch (error) {
+        try {
+            await close();
+        }
+        catch {
+            host.uncertain();
+        }
+        throw error;
+    }
+    finally {
+        clearTimeout(handshakeTimeout);
+    }
+    options?.signal?.addEventListener('abort', onAbort, { once: true });
+    if (options?.signal?.aborted)
+        onAbort();
+    void (async () => {
+        try {
+            for await (const frame of frames) {
+                if (frame.type === 'stdio_heartbeat') {
+                    if (frame.version !== 1 || Object.keys(frame).length !== 2)
+                        throw new Error('Invalid guest stdio heartbeat');
+                    // Transport liveness is not stdout, an RPC reply or device admission.
+                    continue;
+                }
+                if (frame.type === 'result') {
+                    confirmed = true;
+                    // The consumer may still have an exact reply in its queue. Its RPC
+                    // adapter settles that reply before classifying remaining EOF calls.
+                    finish();
+                    return;
+                }
+                if (frame.type !== 'stdio_data' ||
+                    !['stdout', 'stderr'].includes(String(frame.stream)) ||
+                    typeof frame.data !== 'string')
+                    throw new Error('Invalid guest stdio stream frame');
+                const bytes = Buffer.from(frame.data, 'base64');
+                if (bytes.toString('base64') !== frame.data)
+                    throw new Error('Invalid guest stdio stream bytes');
+                while (!terminal && queuedBytes >= MAX_QUEUED_BYTES)
+                    await new Promise((resolve) => {
+                        producerWake = resolve;
+                    });
+                if (terminal)
+                    return;
+                queue.push({ stream: frame.stream, data: bytes });
+                queuedBytes += bytes.length;
+                consumerWake?.();
+            }
+            if (!confirmed)
+                throw new Error('Guest stdio stream ended without process-group confirmation');
+        }
+        catch (error) {
+            if (confirmed)
+                return;
+            if (operations.size)
+                unknown();
+            try {
+                await cancel();
+                confirmed = true;
+            }
+            catch {
+                unknown();
+            }
+            finish(error instanceof Error ? error : new Error('Guest stdio stream failed'));
+        }
+    })();
+    return {
+        closed,
+        close,
+        allocationEnded() {
+            confirmed = true;
+            controller.abort();
+            finish();
+        },
+        events: {
+            async *[Symbol.asyncIterator]() {
+                if (claimed)
+                    throw new Error('Guest stdio supports one stream consumer');
+                claimed = true;
+                while (true) {
+                    if (queue.length) {
+                        const event = queue.shift();
+                        if (!event)
+                            continue;
+                        queuedBytes -= event.data.length;
+                        producerWake?.();
+                        yield event;
+                    }
+                    else if (terminal) {
+                        if (failure)
+                            throw failure;
+                        return;
+                    }
+                    else
+                        await new Promise((resolve) => {
+                            consumerWake = resolve;
+                        });
+                }
+            },
+        },
+        async beginOperation(signal) {
+            if (terminal || closing)
+                throw new Error('Guest stdio channel has ended');
+            const release = await host.acquire(signal);
+            if (terminal || closing) {
+                release();
+                throw new Error('Guest stdio channel has ended');
+            }
+            let ended = false;
+            const operation = {
+                unknown: () => {
+                    if (!ended) {
+                        ended = true;
+                        host.uncertain();
+                        operations.delete(operation);
+                    }
+                },
+            };
+            operations.add(operation);
+            return {
+                complete() {
+                    if (!ended) {
+                        ended = true;
+                        operations.delete(operation);
+                        release();
+                    }
+                },
+                outcomeUnknown: operation.unknown,
+            };
+        },
+        async write(data, signal) {
+            if (terminal || closing)
+                throw new Error('Guest stdio channel has ended');
+            const bytes = Buffer.from(data);
+            if (bytes.length > 1024 * 1024)
+                throw new Error('Guest stdio write exceeds 1 MiB; split the byte stream');
+            const release = await host.acquire(signal);
+            let issued = false;
+            try {
+                if (terminal || closing)
+                    throw new Error('Guest stdio channel has ended');
+                signal?.throwIfAborted();
+                issued = true;
+                const result = await post('/executions/write', { executionId, data: bytes.toString('base64') }, signal);
+                if (result.ok !== true || result.bytesWritten !== bytes.length)
+                    throw new Error('Guest stdin delivery was not confirmed');
+            }
+            catch (error) {
+                if (issued)
+                    unknown();
+                throw error;
+            }
+            finally {
+                release();
+            }
+        },
+    };
+}
+async function* readFrames(body) {
+    const reader = body.getReader();
+    let pending = '';
+    const decoder = new TextDecoder();
+    try {
+        while (true) {
+            const next = await reader.read();
+            if (next.done)
+                break;
+            pending += decoder.decode(next.value, { stream: true });
+            let newline = pending.indexOf('\n');
+            while (newline >= 0) {
+                if (newline > MAX_FRAME_BYTES)
+                    throw new Error('Guest stdio frame exceeds its bound');
+                const frame = JSON.parse(pending.slice(0, newline));
+                pending = pending.slice(newline + 1);
+                newline = pending.indexOf('\n');
+                if (!frame || typeof frame !== 'object')
+                    throw new Error('Invalid guest stdio frame');
+                yield frame;
+            }
+            if (pending.length > MAX_FRAME_BYTES)
+                throw new Error('Guest stdio frame exceeds its bound');
+        }
+        if (pending.trim())
+            throw new Error('Truncated guest stdio frame');
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+//# sourceMappingURL=guest-stdio.js.map

package/dist/local-virtual-computer/guest-stdio.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-stdio.js","sourceRoot":"","sources":["../../src/local-virtual-computer/guest-stdio.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AASvE,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACvC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAOxC,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,cAAc,CACnC,IAAoB,EACpB,OAAe,EACf,IAAuB,EACvB,OAA6B;IAE7B,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;IAC1F,MAAM,IAAI,GAAG,KAAK,EAAE,KAAa,EAAE,IAAa,EAAE,MAAoB,EAAE,EAAE;QACzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,MAAM;gBACb,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;gBACxD,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SAC9B,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;QACrF,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAA;IAC1D,CAAC,CAAA;IACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC1E,MAAM,WAAW,GAAG,WAAW,CAAC,WAAW,CAAA;IAC3C,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IACjE,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAA;QACrD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7F,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC,CAAA;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,KAAmE,CAAA;IAClG,IACC,UAAU,EAAE,OAAO,KAAK,CAAC;QACzB,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,aAAa,CAAC;QAC/C,OAAO,UAAU,CAAC,aAAa,KAAK,QAAQ;QAC5C,UAAU,CAAC,aAAa,GAAG,CAAC;QAC5B,UAAU,CAAC,aAAa,GAAG,aAAa,EACvC,CAAC;QACF,MAAM,MAAM,EAAE,CAAA;QACd,MAAM,IAAI,KAAK,CACd,mFAAmF,CACnF,CAAA;IACF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,OAAkC,CAAA;IACtC,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,OAA0B,CAAA;IAC9B,IAAI,aAA0B,CAAA;IAC9B,IAAI,YAAqC,CAAA;IACzC,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,aAAa,GAAG,OAAO,CAAA;QACvB,YAAY,GAAG,MAAM,CAAA;IACtB,CAAC,CAAC,CAAA;IACF,iEAAiE;IACjE,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC3B,MAAM,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAA;IACrD,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,IAAI,CAAC,SAAS,EAAE,CAAA;QAChB,KAAK,MAAM,SAAS,IAAI,UAAU;YAAE,SAAS,CAAC,OAAO,EAAE,CAAA;IACxD,CAAC,CAAA;IACD,MAAM,KAAK,GAAwB,EAAE,CAAA;IACrC,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,YAAsC,CAAA;IAC1C,IAAI,YAAsC,CAAA;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;QAChC,IAAI,QAAQ;YAAE,OAAM;QACpB,QAAQ,GAAG,IAAI,CAAA;QACf,OAAO,GAAG,KAAK,CAAA;QACf,OAAO,EAAE,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACtD,YAAY,EAAE,EAAE,CAAA;QAChB,YAAY,EAAE,EAAE,CAAA;QAChB,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;;YACzB,aAAa,EAAE,CAAA;IACrB,CAAC,CAAA;IACD,MAAM,KAAK,GAAG,GAAkB,EAAE;QACjC,IAAI,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QACvC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,iEAAiE;QACjE,IAAI,UAAU,CAAC,IAAI;YAAE,OAAO,EAAE,CAAA;QAC9B,OAAO,GAAG,MAAM,EAAE;aAChB,IAAI,CAAC,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAA;YAChB,UAAU,CAAC,KAAK,EAAE,CAAA;YAClB,MAAM,EAAE,CAAA;QACT,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACzB,OAAO,EAAE,CAAA;YACT,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,KAAK,CAAA;QACZ,CAAC,CAAC,CAAA;QACH,OAAO,OAAO,CAAA;IACf,CAAC,CAAA;IACD,MAAM,OAAO,GAAG,GAAG,EAAE;QACpB,KAAK,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC7B,CAAC,CAAA;IACD,IAAI,QAAkB,CAAA;IACtB,MAAM,gBAAgB,GAAG,UAAU,CAClC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,EAClE,MAAM,CACN,CAAA;IACD,IAAI,CAAC;QACJ,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QACjC,MAAM,OAAO,EAAE,sBAAsB,EAAE,EAAE,CAAA;QACzC,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QACjC,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,UAAU,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,WAAW;gBACX,OAAO;gBACP,IAAI;gBACJ,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,KAAK,EAAE,IAAI;gBACX,SAAS,EAAE,UAAU,CAAC,aAAa;gBACnC,gBAAgB,EAAE,QAAQ;aAC1B,CAAC;YACF,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SAC1F,CAAC,CAAA;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,YAAY,CAAC,gBAAgB,CAAC,CAAA;QAC9B,IAAI,CAAC;YACJ,MAAM,KAAK,EAAE,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,SAAS,EAAE,CAAA;QACjB,CAAC;QACD,MAAM,KAAK,CAAA;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IACxC,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;QACjC,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,CAAC;YACJ,MAAM,KAAK,EAAE,CAAA;QACd,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,SAAS,EAAE,CAAA;QACjB,CAAC;QACD,MAAM,KAAK,CAAA;IACZ,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,gBAAgB,CAAC,CAAA;IAC/B,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACnE,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,CAAA;IACvC,KAAK,CAAC,KAAK,IAAI,EAAE;QAChB,IAAI,CAAC;YACJ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACtC,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;wBACzD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;oBACjD,sEAAsE;oBACtE,SAAQ;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,SAAS,GAAG,IAAI,CAAA;oBAChB,mEAAmE;oBACnE,qEAAqE;oBACrE,MAAM,EAAE,CAAA;oBACR,OAAM;gBACP,CAAC;gBACD,IACC,KAAK,CAAC,IAAI,KAAK,YAAY;oBAC3B,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACpD,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAE9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;gBACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;gBAC/C,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI;oBAC1C,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;gBACpD,OAAO,CAAC,QAAQ,IAAI,WAAW,IAAI,gBAAgB;oBAClD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;wBACnC,YAAY,GAAG,OAAO,CAAA;oBACvB,CAAC,CAAC,CAAA;gBACH,IAAI,QAAQ;oBAAE,OAAM;gBACpB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAA6B,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;gBACxE,WAAW,IAAI,KAAK,CAAC,MAAM,CAAA;gBAC3B,YAAY,EAAE,EAAE,CAAA;YACjB,CAAC;YACD,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;QAC/F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,SAAS;gBAAE,OAAM;YACrB,IAAI,UAAU,CAAC,IAAI;gBAAE,OAAO,EAAE,CAAA;YAC9B,IAAI,CAAC;gBACJ,MAAM,MAAM,EAAE,CAAA;gBACd,SAAS,GAAG,IAAI,CAAA;YACjB,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,EAAE,CAAA;YACV,CAAC;YACD,MAAM,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAA;QAChF,CAAC;IACF,CAAC,CAAC,EAAE,CAAA;IACJ,OAAO;QACN,MAAM;QACN,KAAK;QACL,eAAe;YACd,SAAS,GAAG,IAAI,CAAA;YAChB,UAAU,CAAC,KAAK,EAAE,CAAA;YAClB,MAAM,EAAE,CAAA;QACT,CAAC;QACD,MAAM,EAAE;YACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;gBAC5B,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;gBACxE,OAAO,GAAG,IAAI,CAAA;gBACd,OAAO,IAAI,EAAE,CAAC;oBACb,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAA;wBAC3B,IAAI,CAAC,KAAK;4BAAE,SAAQ;wBACpB,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAA;wBAChC,YAAY,EAAE,EAAE,CAAA;wBAChB,MAAM,KAAK,CAAA;oBACZ,CAAC;yBAAM,IAAI,QAAQ,EAAE,CAAC;wBACrB,IAAI,OAAO;4BAAE,MAAM,OAAO,CAAA;wBAC1B,OAAM;oBACP,CAAC;;wBACA,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;4BACnC,YAAY,GAAG,OAAO,CAAA;wBACvB,CAAC,CAAC,CAAA;gBACJ,CAAC;YACF,CAAC;SACD;QACD,KAAK,CAAC,cAAc,CAAC,MAAM;YAC1B,IAAI,QAAQ,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YACzE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACzB,OAAO,EAAE,CAAA;gBACT,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YACjD,CAAC;YACD,IAAI,KAAK,GAAG,KAAK,CAAA;YACjB,MAAM,SAAS,GAAG;gBACjB,OAAO,EAAE,GAAG,EAAE;oBACb,IAAI,CAAC,KAAK,EAAE,CAAC;wBACZ,KAAK,GAAG,IAAI,CAAA;wBACZ,IAAI,CAAC,SAAS,EAAE,CAAA;wBAChB,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;oBAC7B,CAAC;gBACF,CAAC;aACD,CAAA;YACD,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACzB,OAAO;gBACN,QAAQ;oBACP,IAAI,CAAC,KAAK,EAAE,CAAC;wBACZ,KAAK,GAAG,IAAI,CAAA;wBACZ,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;wBAC5B,OAAO,EAAE,CAAA;oBACV,CAAC;gBACF,CAAC;gBACD,cAAc,EAAE,SAAS,CAAC,OAAO;aACjC,CAAA;QACF,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM;YACvB,IAAI,QAAQ,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;YACzE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;gBAC7B,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAA;YAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YAC1C,IAAI,MAAM,GAAG,KAAK,CAAA;YAClB,IAAI,CAAC;gBACJ,IAAI,QAAQ,IAAI,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;gBACzE,MAAM,EAAE,cAAc,EAAE,CAAA;gBACxB,MAAM,GAAG,IAAI,CAAA;gBACb,MAAM,MAAM,GAAG,MAAM,IAAI,CACxB,mBAAmB,EACnB,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAC/C,MAAM,CACN,CAAA;gBACD,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK,CAAC,MAAM;oBAC7D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;YAC3D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,MAAM;oBAAE,OAAO,EAAE,CAAA;gBACrB,MAAM,KAAK,CAAA;YACZ,CAAC;oBAAS,CAAC;gBACV,OAAO,EAAE,CAAA;YACV,CAAC;QACF,CAAC;KACD,CAAA;AACF,CAAC;AAED,KAAK,SAAS,CAAC,CAAC,UAAU,CACzB,IAAgC;IAEhC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAA;IAC/B,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,CAAC;QACJ,OAAO,IAAI,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;YAChC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAK;YACpB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;YACvD,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;YACnC,OAAO,OAAO,IAAI,CAAC,EAAE,CAAC;gBACrB,IAAI,OAAO,GAAG,eAAe;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;gBACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAA4B,CAAA;gBAC9E,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAA;gBACpC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;gBAC/B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAA;gBACrF,MAAM,KAAK,CAAA;YACZ,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,eAAe;gBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QAC7F,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IACnE,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,WAAW,EAAE,CAAA;IACrB,CAAC;AACF,CAAC"}

package/dist/local-virtual-computer/index.d.ts

@@ -0,0 +1,36 @@
+import type { PalEnvironmentProvider } from '@namzu/sdk';
+import { type EngineDialect, type LocalComputerCommandRunner } from './engine.js';
+export type { LocalComputerCommandRunner } from './engine.js';
+export { type EngineDialect, LocalComputerSetupError, type LocalComputerSetupCode, } from './engine.js';
+export declare const LOCAL_COMPUTER_IMAGE = "namzu-local-computer:1";
+export declare const LOCAL_COMPUTER_PROTOCOL_LABEL = "org.namzu.local-computer.protocol";
+/** Uses an already installed local engine and an already built guest image. */
+export interface LocalVirtualComputerOptions {
+    readonly image?: string;
+    /** Foreground applications normally belong to the computer after a successful launcher. */
+    readonly normalExitPolicy?: 'strict' | 'computer-lifetime';
+    /**
+     * Docker remains the default. Podman requires an explicitly selected local
+     * Windows WSL machine. wslc is Windows' own container CLI for WSL and must be
+     * selected explicitly; it is never chosen automatically.
+     */
+    readonly engine?: EngineDialect;
+    readonly dockerBinary?: string;
+    /** Path to wslc.exe; defaults to the WSL install directory, then PATH. */
+    readonly wslcBinary?: string;
+    readonly podmanBinary?: string;
+    readonly podmanMachine?: string;
+    readonly podmanConnection?: string;
+    readonly engineEndpoint?: string;
+    readonly readyTimeoutMs?: number;
+    readonly width?: number;
+    readonly height?: number;
+    /** Host transport injection for embedders/tests; contains authority, never model input. */
+    readonly runner?: LocalComputerCommandRunner;
+}
+/**
+ * A separate guest desktop in a local Linux container. It does not provision
+ * a dedicated-kernel VM and never falls back to the operator's desktop.
+ */
+export declare function createLocalVirtualComputerProvider(options?: LocalVirtualComputerOptions): PalEnvironmentProvider;
+//# sourceMappingURL=index.d.ts.map

package/dist/local-virtual-computer/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAuB,sBAAsB,EAAyB,MAAM,YAAY,CAAA;AAWpG,OAAO,EACN,KAAK,aAAa,EAElB,KAAK,0BAA0B,EAK/B,MAAM,aAAa,CAAA;AAKpB,YAAY,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EACN,KAAK,aAAa,EAClB,uBAAuB,EACvB,KAAK,sBAAsB,GAC3B,MAAM,aAAa,CAAA;AAEpB,eAAO,MAAM,oBAAoB,2BAA2B,CAAA;AAC5D,eAAO,MAAM,6BAA6B,sCAAsC,CAAA;AAGhF,+EAA+E;AAC/E,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,2FAA2F;IAC3F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,GAAG,mBAAmB,CAAA;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAA;CAC5C;AA2ED;;;GAGG;AACH,wBAAgB,kCAAkC,CACjD,OAAO,GAAE,2BAAgC,GACvC,sBAAsB,CAkTxB"}