@namzu/sandbox 24.0.0 → 26.0.0

package/dist/local-virtual-computer/detached-process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detached-process.js","sourceRoot":"","sources":["../../src/local-virtual-computer/detached-process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AAiBxC,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CACxC,OAA+B,EAC/B,OAAe,EACf,OAA0B,EAAE,EAC5B,YAAkC;IAElC,MAAM,KAAK,GAAG,KAAK,CAClB,OAAO,CAAC,QAAQ,EAChB,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,IAAI,GAAG,CAAC,sBAAsB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EACvF;QACC,WAAW,EAAE,IAAI;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC;QACxC,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE;KAClD,CACD,CAAA;IACD,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,IAAI,SAAS,GAAG,KAAK,CAAA;IACrB,IAAI,gBAAgB,GAAG,KAAK,CAAA;IAC5B,IAAI,UAAqC,CAAA;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,EAGnB,CAAA;IACJ,MAAM,MAAM,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAC5C,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACxB,gBAAgB,GAAG,IAAI,CAAA;QACvB,OAAO,EAAE,CAAA;QACT,IAAI,CAAC,SAAS;YAAE,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAC9C,CAAC,CAAC,CACF,CAAA;IACD,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC/B,SAAS,GAAG,IAAI,CAAA;QAChB,gBAAgB,GAAG,KAAK,CAAA;QACxB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,OAAO,EAAE,CAAA;YAC9C,OAAO,CAAC,KAAK,EAAE,CAAA;QAChB,CAAC,CAAC,CAAA;IACH,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,GAAkB,EAAE;QAClC,IAAI,UAAU;YAAE,OAAO,UAAU,CAAA;QACjC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE;aAC/B,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;aAC5B,IAAI,CACJ,GAAG,EAAE;YACJ,kBAAkB,EAAE,CAAA;YACpB,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAChF,CAAC,EACD,GAAG,EAAE;YACJ,gBAAgB,GAAG,IAAI,CAAA;YACvB,MAAM,KAAK,GAAG,IAAI,KAAK,CACtB,wHAAwH,CACxH,CAAA;YACD,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAClD,OAAO,CAAC,KAAK,EAAE,CAAA;YACf,IAAI,KAAK,CAAC,SAAS;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAChF,MAAM,KAAK,CAAA;QACZ,CAAC,CACD;aACA,OAAO,CAAC,GAAG,EAAE;YACb,UAAU,GAAG,SAAS,CAAA;QACvB,CAAC,CAAC,CAAA;QACH,UAAU,GAAG,OAAO,CAAA;QACpB,OAAO,OAAO,CAAA;IACf,CAAC,CAAA;IACD,MAAM,mBAAmB,GAAG,CAAC,MAAsB,EAAE,EAAE;QACtD,IAAI,SAAS;YAAE,OAAM;QACrB,IAAI,gBAAgB,IAAI,gBAAgB,EAAE,CAAC;YAC1C,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC7B,OAAM;QACP,CAAC;QACD,IAAI,KAAK,CAAC,SAAS;YAClB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;gBAChD,IAAI,KAAK;oBAAE,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACzC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAA;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;QACxB,MAAM,MAAM,GAAgC;YAC3C,IAAI,EAAE,OAAO;YACb,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,OAAO;YACP,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;YACf,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvD,CAAA;QACD,IAAI,KAAK,CAAC,SAAS;YAClB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,IAAI,KAAK;oBACR,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC,CAAA;YACxF,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,KAAK,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;QACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;YAAE,OAAM;QAC/D,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB;YAAE,kBAAkB,EAAE,CAAA;QAC3D,IAAI,GAAG,CAAC,IAAI,KAAK,iBAAiB;YAAE,KAAK,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IACF,OAAO;QACN,KAAK;QACL,MAAM;QACN,IAAI,CAAC,MAAM;YACV,iEAAiE;YACjE,gEAAgE;YAChE,oEAAoE;YACpE,mBAAmB,CAAC,MAAM,CAAC,CAAA;QAC5B,CAAC;QACD,SAAS,CAAC,MAAM,GAAG,SAAS;YAC3B,IAAI,SAAS;gBAAE,OAAO,MAAM,CAAA;YAC5B,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAA;gBAChC,mBAAmB,CAAC,MAAM,CAAC,CAAA;YAC5B,CAAC,CAAC,CAAA;QACH,CAAC;KACD,CAAA;AACF,CAAC"}

package/dist/local-virtual-computer/detached-worker.d.ts

@@ -0,0 +1,11 @@
+export declare const LOCAL_BACKGROUND_TIMEOUT_MS = 2147000000;
+export interface DetachedWorkerConfiguration {
+    readonly type: 'start';
+    readonly executionUrl: string;
+    readonly token: string;
+    readonly command: string;
+    readonly args: string[];
+    readonly cwd?: string;
+    readonly env?: Record<string, string>;
+}
+//# sourceMappingURL=detached-worker.d.ts.map

package/dist/local-virtual-computer/detached-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detached-worker.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/detached-worker.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,2BAA2B,aAAgB,CAAA;AAExD,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAA;IACvB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACrC"}

package/dist/local-virtual-computer/detached-worker.js

@@ -0,0 +1,97 @@
+/** Host-side stream bridge. No command is executed on this host process. */
+import { HttpWorkerClient } from '../backends/http-worker-client.js';
+import { RemoteCancellationUnknownError } from '../backends/remote-execution-controller.js';
+export const LOCAL_BACKGROUND_TIMEOUT_MS = 2_147_000_000;
+const controller = new AbortController();
+let started = false;
+let disconnected = false;
+let cancellation;
+let retirement;
+function cancel(signal = 'SIGTERM') {
+    cancellation ??= signal;
+    controller.abort(new Error('Guest background command cancelled'));
+}
+process.on('SIGTERM', () => cancel());
+process.on('SIGINT', () => cancel('SIGINT'));
+process.on('disconnect', () => {
+    disconnected = true;
+    cancel();
+    retirement?.(false);
+});
+async function finish(code, confirmed = true) {
+    // Drain Node's own pipe buffers before reporting terminal state.
+    await Promise.all([
+        new Promise((resolve) => process.stdout.write('', () => resolve())),
+        new Promise((resolve) => process.stderr.write('', () => resolve())),
+    ]);
+    if (confirmed && process.connected)
+        await new Promise((resolve) => process.send?.({ type: 'terminal-confirmed' }, () => resolve()));
+    process.exit(code);
+}
+async function requireRetirement() {
+    let confirmed = disconnected
+        ? false
+        : await new Promise((resolve) => {
+            retirement = resolve;
+            process.send?.({ type: 'retire-computer' }, (error) => {
+                if (error)
+                    resolve(false);
+            });
+        });
+    while (!confirmed && !disconnected) {
+        process.stderr.write('\n[Guest cancellation could not be confirmed; the computer requires operator recovery.]\n');
+        // Keep the bridge and ownership alive. The provider's next termination
+        // attempt retries retirement, never the command or its guest signals.
+        confirmed = await new Promise((resolve) => {
+            retirement = resolve;
+        });
+    }
+    return await finish(1, confirmed);
+}
+async function execute(config) {
+    try {
+        const result = await new HttpWorkerClient(config.executionUrl, config.token).exec(config.command, config.args, {
+            timeout: LOCAL_BACKGROUND_TIMEOUT_MS,
+            cwd: config.cwd,
+            env: config.env,
+            signal: controller.signal,
+            onOutput: (chunk) => (chunk.stream === 'stdout' ? process.stdout : process.stderr).write(chunk.data),
+        });
+        if (result.stdoutTruncated || result.stderrTruncated)
+            process.stderr.write('\n[Guest worker output exceeded its capture cap; the omitted bytes are unavailable.]\n');
+        if (result.timedOut)
+            process.stderr.write('\n[Guest background command reached its maximum lifetime.]\n');
+        await finish(result.exitCode);
+    }
+    catch (error) {
+        if (error instanceof RemoteCancellationUnknownError) {
+            // Closing a host pipe cannot prove a guest tree stopped. Ask the
+            // owning provider to retire the actual computer before exiting.
+            await requireRetirement();
+        }
+        if (controller.signal.aborted)
+            await finish(128 + (cancellation === 'SIGINT' ? 2 : 15));
+        process.stderr.write('\n[Guest background command could not be completed.]\n');
+        // A transport failure may happen after admission. Retire the computer
+        // rather than report a host bridge failure as a guest process exit.
+        await requireRetirement();
+    }
+}
+process.on('message', (raw) => {
+    if (!raw || typeof raw !== 'object' || !('type' in raw))
+        return;
+    const message = raw;
+    if (message.type === 'cancel') {
+        cancel(message.signal);
+        return;
+    }
+    if (message.type === 'retired') {
+        retirement?.(message.confirmed === true);
+        return;
+    }
+    if (message.type !== 'start' || started)
+        return;
+    started = true;
+    void execute(raw);
+});
+//# sourceMappingURL=detached-worker.js.map

package/dist/local-virtual-computer/detached-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detached-worker.js","sourceRoot":"","sources":["../../src/local-virtual-computer/detached-worker.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAA;AACpE,OAAO,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAA;AAE3F,MAAM,CAAC,MAAM,2BAA2B,GAAG,aAAa,CAAA;AAYxD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;AACxC,IAAI,OAAO,GAAG,KAAK,CAAA;AACnB,IAAI,YAAY,GAAG,KAAK,CAAA;AACxB,IAAI,YAAwC,CAAA;AAC5C,IAAI,UAAsD,CAAA;AAE1D,SAAS,MAAM,CAAC,SAAyB,SAAS;IACjD,YAAY,KAAK,MAAM,CAAA;IACvB,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAA;AAClE,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,CAAA;AACrC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAA;AAC5C,OAAO,CAAC,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE;IAC7B,YAAY,GAAG,IAAI,CAAA;IACnB,MAAM,EAAE,CAAA;IACR,UAAU,EAAE,CAAC,KAAK,CAAC,CAAA;AACpB,CAAC,CAAC,CAAA;AAEF,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,SAAS,GAAG,IAAI;IACnD,iEAAiE;IACjE,MAAM,OAAO,CAAC,GAAG,CAAC;QACjB,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;KACzE,CAAC,CAAA;IACF,IAAI,SAAS,IAAI,OAAO,CAAC,SAAS;QACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CACnC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAC/D,CAAA;IACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACnB,CAAC;AAED,KAAK,UAAU,iBAAiB;IAC/B,IAAI,SAAS,GAAG,YAAY;QAC3B,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YACvC,UAAU,GAAG,OAAO,CAAA;YACpB,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;gBACrD,IAAI,KAAK;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAA;YAC1B,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,OAAO,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,2FAA2F,CAC3F,CAAA;QACD,uEAAuE;QACvE,sEAAsE;QACtE,SAAS,GAAG,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,EAAE;YAClD,UAAU,GAAG,OAAO,CAAA;QACrB,CAAC,CAAC,CAAA;IACH,CAAC;IACD,OAAO,MAAM,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;AAClC,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAmC;IACzD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAChF,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,IAAI,EACX;YACC,OAAO,EAAE,2BAA2B;YACpC,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,CACnB,CAAC,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC;SAChF,CACD,CAAA;QACD,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,eAAe;YACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,wFAAwF,CACxF,CAAA;QACF,IAAI,MAAM,CAAC,QAAQ;YAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,CAAC,CAAA;QACrF,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;YACrD,iEAAiE;YACjE,gEAAgE;YAChE,MAAM,iBAAiB,EAAE,CAAA;QAC1B,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,GAAG,GAAG,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACvF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAA;QAC9E,sEAAsE;QACtE,oEAAoE;QACpE,MAAM,iBAAiB,EAAE,CAAA;IAC1B,CAAC;AACF,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;IACtC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;QAAE,OAAM;IAC/D,MAAM,OAAO,GAAG,GAIf,CAAA;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACtB,OAAM;IACP,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAChC,UAAU,EAAE,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAA;QACxC,OAAM;IACP,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO;QAAE,OAAM;IAC/C,OAAO,GAAG,IAAI,CAAA;IACd,KAAK,OAAO,CAAC,GAAkC,CAAC,CAAA;AACjD,CAAC,CAAC,CAAA"}

package/dist/local-virtual-computer/dialect.d.ts

@@ -0,0 +1,26 @@
+import type { EngineDialect, LocalEngine } from './engine.js';
+/**
+ * The engines speak nearly the same command line. Every place they differ is
+ * here, so the lifecycle in index.ts reads the same for all of them.
+ */
+export type PublishedPorts = Record<string, {
+    HostIp?: string;
+    HostPort?: string;
+}[]>;
+/** Podman machines on WSL can lack delegated cgroup controllers. */
+export declare function resourceFlags(dialect: EngineDialect): string[];
+/**
+ * The container boundary. wslc has no flag for any of these; its boundary is
+ * the per-user virtual machine, the unprivileged guest user and the image.
+ */
+export declare function hardeningFlags(dialect: EngineDialect): string[];
+/** Command line that prints full container ids, one per line, for a filter. */
+export declare function containerIdQuery(dialect: EngineDialect, filter: string, options: {
+    readonly full: boolean;
+}): string[];
+export declare function portsQuery(dialect: EngineDialect, name: string): string[];
+/** Read published ports from what `portsQuery` printed. */
+export declare function parsePublishedPorts(dialect: EngineDialect, output: string): PublishedPorts;
+/** Make sure the labelled volume exists, creating it only when absent. */
+export declare function ensureVolume(engine: LocalEngine, dialect: EngineDialect, volume: string, label: string, signal?: AbortSignal): Promise<void>;
+//# sourceMappingURL=dialect.d.ts.map

package/dist/local-virtual-computer/dialect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/dialect.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAE7D;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAAE,CAAC,CAAA;AAErF,oEAAoE;AACpE,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,EAAE,CAE9D;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,MAAM,EAAE,CAG/D;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAC/B,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACjC,MAAM,EAAE,CAYV;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAGzE;AAED,2DAA2D;AAC3D,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,cAAc,CAO1F;AAED,0EAA0E;AAC1E,wBAAsB,YAAY,CACjC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAkBf"}

package/dist/local-virtual-computer/dialect.js

@@ -0,0 +1,61 @@
+/** Podman machines on WSL can lack delegated cgroup controllers. */
+export function resourceFlags(dialect) {
+    return dialect === 'podman' ? ['--cgroups=disabled'] : [];
+}
+/**
+ * The container boundary. wslc has no flag for any of these; its boundary is
+ * the per-user virtual machine, the unprivileged guest user and the image.
+ */
+export function hardeningFlags(dialect) {
+    if (dialect === 'wslc')
+        return [];
+    return ['--cap-drop=ALL', '--security-opt=no-new-privileges', '--read-only', '--ipc=private'];
+}
+/** Command line that prints full container ids, one per line, for a filter. */
+export function containerIdQuery(dialect, filter, options) {
+    // wslc has no Go templates and truncates -q ids to 12 characters.
+    if (dialect === 'wslc')
+        return ['ps', '-a', '--filter', filter, '-q', '--no-trunc'];
+    return [
+        'ps',
+        '--all',
+        '--filter',
+        filter,
+        ...(options.full ? ['--no-trunc'] : []),
+        '--format',
+        '{{.ID}}',
+    ];
+}
+export function portsQuery(dialect, name) {
+    if (dialect === 'wslc')
+        return ['inspect', '-f', 'json', name];
+    return ['inspect', '--format', '{{json .NetworkSettings.Ports}}', name];
+}
+/** Read published ports from what `portsQuery` printed. */
+export function parsePublishedPorts(dialect, output) {
+    const parsed = JSON.parse(output);
+    if (dialect !== 'wslc')
+        return parsed;
+    const first = (Array.isArray(parsed) ? parsed[0] : undefined);
+    return first?.Ports ?? first?.NetworkSettings?.Ports ?? {};
+}
+/** Make sure the labelled volume exists, creating it only when absent. */
+export async function ensureVolume(engine, dialect, volume, label, signal) {
+    if (dialect !== 'wslc') {
+        await engine.run(['volume', 'create', ...(dialect === 'podman' ? ['--ignore'] : []), '--label', label, volume], { signal });
+        return;
+    }
+    // wslc has no --ignore. A missing volume is either a failed command or an
+    // empty list, depending on how the output was captured.
+    let present = false;
+    try {
+        const found = JSON.parse(await engine.run(['volume', 'inspect', volume], { signal }));
+        present = Array.isArray(found) && found.length > 0;
+    }
+    catch {
+        signal?.throwIfAborted();
+    }
+    if (!present)
+        await engine.run(['volume', 'create', '--label', label, volume], { signal });
+}
+//# sourceMappingURL=dialect.js.map

package/dist/local-virtual-computer/dialect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.js","sourceRoot":"","sources":["../../src/local-virtual-computer/dialect.ts"],"names":[],"mappings":"AASA,oEAAoE;AACpE,MAAM,UAAU,aAAa,CAAC,OAAsB;IACnD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAsB;IACpD,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,EAAE,CAAA;IACjC,OAAO,CAAC,gBAAgB,EAAE,kCAAkC,EAAE,aAAa,EAAE,eAAe,CAAC,CAAA;AAC9F,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAC/B,OAAsB,EACtB,MAAc,EACd,OAAmC;IAEnC,kEAAkE;IAClE,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAA;IACnF,OAAO;QACN,IAAI;QACJ,OAAO;QACP,UAAU;QACV,MAAM;QACN,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,UAAU;QACV,SAAS;KACT,CAAA;AACF,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,OAAsB,EAAE,IAAY;IAC9D,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;IAC9D,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,iCAAiC,EAAE,IAAI,CAAC,CAAA;AACxE,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,mBAAmB,CAAC,OAAsB,EAAE,MAAc;IACzE,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAC1C,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,MAAwB,CAAA;IACvD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAEhD,CAAA;IACZ,OAAO,KAAK,EAAE,KAAK,IAAI,KAAK,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAA;AAC3D,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAmB,EACnB,OAAsB,EACtB,MAAc,EACd,KAAa,EACb,MAAoB;IAEpB,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,MAAM,CAAC,GAAG,CACf,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,EAC7F,EAAE,MAAM,EAAE,CACV,CAAA;QACD,OAAM;IACP,CAAC;IACD,0EAA0E;IAC1E,wDAAwD;IACxD,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;QAC9F,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;IACnD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,EAAE,cAAc,EAAE,CAAA;IACzB,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAC3F,CAAC"}

package/dist/local-virtual-computer/engine.d.ts

@@ -0,0 +1,63 @@
+/** Stable reasons a caller can branch on without parsing prose. */
+export type LocalComputerSetupCode = 'engine-missing' | 'engine-too-old' | 'virtualization-off' | 'blocked-by-policy' | 'image-missing' | 'sdk-mismatch';
+/** Safe operator-facing diagnosis, without daemon output or credentials. */
+export declare class LocalComputerSetupError extends Error {
+    readonly name = "LocalComputerSetupError";
+    readonly code?: LocalComputerSetupCode;
+    constructor(message: string, code?: LocalComputerSetupCode, options?: {
+        cause?: unknown;
+    });
+}
+/**
+ * A failed engine command. The message never carries engine output; only
+ * recognised machine-readable codes (HRESULTs, WSLC_E_* names, spawn errno
+ * names) survive, so a typed diagnosis can be made without leaking text.
+ */
+export declare class LocalCommandError extends Error {
+    readonly name = "LocalCommandError";
+    readonly errorCodes: readonly string[];
+    /** The process exit status, when the command ran and failed. */
+    readonly exitCode?: number;
+    constructor(message: string, errorCodes?: readonly string[], exitCode?: number);
+}
+/** Extract the codes worth keeping from a command's stderr. */
+export declare function extractErrorCodes(text: string): string[];
+/** Which command-line dialect an engine speaks. */
+export type EngineDialect = 'docker' | 'podman' | 'wslc';
+/** A host-controlled transport. Never pass this or its environment to an agent. */
+export interface LocalComputerCommandRunner {
+    run(binary: string, args: readonly string[], options?: {
+        readonly signal?: AbortSignal;
+        readonly env?: NodeJS.ProcessEnv;
+        readonly cwd?: string;
+    }): Promise<string>;
+}
+export declare const nodeCommandRunner: LocalComputerCommandRunner;
+/** TCP, SSH and remote named pipes cannot establish a local-device boundary. */
+export declare function assertLocalEngineEndpoint(endpoint: string): void;
+export interface LocalEngineOptions {
+    readonly dockerBinary?: string;
+    readonly engineEndpoint?: string;
+    readonly runner?: LocalComputerCommandRunner;
+}
+export interface LocalEngine {
+    readonly endpoint: string;
+    /** Command-line dialect. Absent means the engine was selected as Docker. */
+    readonly dialect?: EngineDialect;
+    forwardPorts?(ports: readonly number[], options: {
+        readonly signal?: AbortSignal;
+        readonly onLost: () => void;
+    }): Promise<LocalPortForward>;
+    run(args: readonly string[], options?: {
+        readonly signal?: AbortSignal;
+        readonly env?: NodeJS.ProcessEnv;
+    }): Promise<string>;
+}
+export interface LocalPortForward {
+    readonly ports: readonly number[];
+    assertAlive(): void;
+    close(): Promise<void>;
+}
+/** Resolve once, then pin every operation to the verified endpoint. */
+export declare function resolveLocalEngine(options: LocalEngineOptions, signal?: AbortSignal): Promise<LocalEngine>;
+//# sourceMappingURL=engine.d.ts.map

package/dist/local-virtual-computer/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/engine.ts"],"names":[],"mappings":"AAEA,mEAAmE;AACnE,MAAM,MAAM,sBAAsB,GAC/B,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,mBAAmB,GACnB,eAAe,GACf,cAAc,CAAA;AAEjB,4EAA4E;AAC5E,qBAAa,uBAAwB,SAAQ,KAAK;IACjD,SAAkB,IAAI,6BAA4B;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAA;gBAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE;CAIzF;AAED;;;;GAIG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC3C,SAAkB,IAAI,uBAAsB;IAC5C,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;gBACd,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,SAAS,MAAM,EAAO,EAAE,QAAQ,CAAC,EAAE,MAAM;CAKlF;AAID,+DAA+D;AAC/D,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMxD;AAED,mDAAmD;AACnD,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAA;AAExD,mFAAmF;AACnF,MAAM,WAAW,0BAA0B;IAC1C,GAAG,CACF,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE;QACT,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;QAC7B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;QAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KACrB,GACC,OAAO,CAAC,MAAM,CAAC,CAAA;CAClB;AAED,eAAO,MAAM,iBAAiB,EAAE,0BA0D/B,CAAA;AAED,gFAAgF;AAChF,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAMhE;AAED,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAA;CAC5C;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAA;IAChC,YAAY,CAAC,CACZ,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAA;KAAE,GACrE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5B,GAAG,CACF,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;KAAE,GAC3E,OAAO,CAAC,MAAM,CAAC,CAAA;CAClB;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,WAAW,IAAI,IAAI,CAAA;IACnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACtB;AAED,uEAAuE;AACvE,wBAAsB,kBAAkB,CACvC,OAAO,EAAE,kBAAkB,EAC3B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,WAAW,CAAC,CAgCtB"}

package/dist/local-virtual-computer/engine.js

@@ -0,0 +1,125 @@
+import { spawn } from 'node:child_process';
+/** Safe operator-facing diagnosis, without daemon output or credentials. */
+export class LocalComputerSetupError extends Error {
+    name = 'LocalComputerSetupError';
+    code;
+    constructor(message, code, options) {
+        super(message, options);
+        this.code = code;
+    }
+}
+/**
+ * A failed engine command. The message never carries engine output; only
+ * recognised machine-readable codes (HRESULTs, WSLC_E_* names, spawn errno
+ * names) survive, so a typed diagnosis can be made without leaking text.
+ */
+export class LocalCommandError extends Error {
+    name = 'LocalCommandError';
+    errorCodes;
+    /** The process exit status, when the command ran and failed. */
+    exitCode;
+    constructor(message, errorCodes = [], exitCode) {
+        super(message);
+        this.errorCodes = errorCodes;
+        if (exitCode !== undefined)
+            this.exitCode = exitCode;
+    }
+}
+const ERROR_CODE_PATTERN = /WSLC_E_[A-Z0-9_]+|HCS_E_[A-Z0-9_]+|0x[0-9A-Fa-f]{8}/g;
+/** Extract the codes worth keeping from a command's stderr. */
+export function extractErrorCodes(text) {
+    const found = new Set();
+    for (const match of text.match(ERROR_CODE_PATTERN) ?? []) {
+        found.add(match.startsWith('0x') ? `0x${match.slice(2).toUpperCase()}` : match);
+    }
+    return [...found];
+}
+export const nodeCommandRunner = {
+    run(binary, args, options) {
+        options?.signal?.throwIfAborted();
+        return new Promise((resolve, reject) => {
+            const child = spawn(binary, [...args], {
+                env: options?.env ?? process.env,
+                cwd: options?.cwd,
+                signal: options?.signal,
+                windowsHide: true,
+                stdio: ['ignore', 'pipe', 'pipe'],
+            });
+            const output = [];
+            const diagnostics = [];
+            let diagnosticBytes = 0;
+            let outputBytes = 0;
+            let failed = false;
+            child.stdout.on('data', (chunk) => {
+                output.push(chunk);
+                outputBytes += chunk.byteLength;
+                if (outputBytes > 1024 * 1024) {
+                    failed = true;
+                    child.kill();
+                }
+            });
+            // Docker's error text can echo worker configuration. Preserve the exit
+            // code, never stdout/stderr or the environment in a failure message.
+            child.stderr.on('data', (chunk) => {
+                if (diagnosticBytes >= 64 * 1024)
+                    return;
+                diagnostics.push(chunk);
+                diagnosticBytes += chunk.byteLength;
+            });
+            child.once('error', (error) => reject(new LocalCommandError('The local container engine could not be started', error.code ? [error.code] : [])));
+            child.once('close', (code) => {
+                if (failed)
+                    reject(new Error('The local container engine response exceeded its size limit'));
+                else if (code !== 0)
+                    reject(new LocalCommandError(`The local container engine command failed (${code})`, extractErrorCodes(Buffer.concat(diagnostics).toString('utf8')), code ?? undefined));
+                else {
+                    const bytes = Buffer.concat(output);
+                    // Native wsl.exe emits UTF-16LE through a redirected pipe.
+                    const utf16 = bytes[1] === 0 || (bytes[0] === 0xff && bytes[1] === 0xfe);
+                    resolve(bytes.toString(utf16 ? 'utf16le' : 'utf8').replace(/^\uFEFF/, ''));
+                }
+            });
+        });
+    },
+};
+/** TCP, SSH and remote named pipes cannot establish a local-device boundary. */
+export function assertLocalEngineEndpoint(endpoint) {
+    if (/^unix:\/\/\/[\S]+$/.test(endpoint))
+        return;
+    if (/^npipe:\/\/\/\/\.\/pipe\/[a-zA-Z0-9_.-]+$/.test(endpoint))
+        return;
+    throw new LocalComputerSetupError('Pals require a local Docker Unix socket or Windows named pipe; remote engines are refused');
+}
+/** Resolve once, then pin every operation to the verified endpoint. */
+export async function resolveLocalEngine(options, signal) {
+    const binary = options.dockerBinary ?? 'docker';
+    const runner = options.runner ?? nodeCommandRunner;
+    let endpoint = options.engineEndpoint;
+    if (endpoint === undefined) {
+        const current = (await runner.run(binary, ['context', 'show'], { signal })).trim();
+        if (!current)
+            throw new LocalComputerSetupError('The current Docker context could not be determined');
+        const contexts = JSON.parse(await runner.run(binary, ['context', 'inspect', current], { signal }));
+        endpoint = contexts[0]?.Endpoints?.docker?.Host;
+        // DOCKER_HOST overrides a context in normal Docker invocations. Honor
+        // its actual destination and validate it rather than checking one
+        // endpoint while accidentally provisioning on another.
+        if (!process.env.DOCKER_CONTEXT && process.env.DOCKER_HOST)
+            endpoint = process.env.DOCKER_HOST;
+    }
+    if (!endpoint)
+        throw new LocalComputerSetupError('Docker did not provide a local engine endpoint');
+    assertLocalEngineEndpoint(endpoint);
+    const host = endpoint;
+    const run = (args, call) => {
+        const env = { ...process.env, ...call?.env };
+        env.DOCKER_CONTEXT = undefined;
+        env.DOCKER_HOST = undefined;
+        return runner.run(binary, ['--host', host, ...args], { ...call, env });
+    };
+    const info = JSON.parse(await run(['info', '--format', '{{json .}}'], { signal }));
+    if (info.OSType !== 'linux')
+        throw new LocalComputerSetupError('The local Docker engine must run Linux containers');
+    return { endpoint: host, run };
+}
+//# sourceMappingURL=engine.js.map

package/dist/local-virtual-computer/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/local-virtual-computer/engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAW1C,4EAA4E;AAC5E,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC/B,IAAI,GAAG,yBAAyB,CAAA;IACzC,IAAI,CAAyB;IACtC,YAAY,OAAe,EAAE,IAA6B,EAAE,OAA6B;QACxF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IACjB,CAAC;CACD;AAED;;;;GAIG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACzB,IAAI,GAAG,mBAAmB,CAAA;IACnC,UAAU,CAAmB;IACtC,gEAAgE;IACvD,QAAQ,CAAS;IAC1B,YAAY,OAAe,EAAE,aAAgC,EAAE,EAAE,QAAiB;QACjF,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,UAAU,GAAG,UAAU,CAAA;QAC5B,IAAI,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;IACrD,CAAC;CACD;AAED,MAAM,kBAAkB,GAAG,sDAAsD,CAAA;AAEjF,+DAA+D;AAC/D,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1D,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;IAChF,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAA;AAClB,CAAC;AAkBD,MAAM,CAAC,MAAM,iBAAiB,GAA+B;IAC5D,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO;QACxB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAA;QACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;gBACtC,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG;gBAChC,GAAG,EAAE,OAAO,EAAE,GAAG;gBACjB,MAAM,EAAE,OAAO,EAAE,MAAM;gBACvB,WAAW,EAAE,IAAI;gBACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;aACjC,CAAC,CAAA;YACF,MAAM,MAAM,GAAa,EAAE,CAAA;YAC3B,MAAM,WAAW,GAAa,EAAE,CAAA;YAChC,IAAI,eAAe,GAAG,CAAC,CAAA;YACvB,IAAI,WAAW,GAAG,CAAC,CAAA;YACnB,IAAI,MAAM,GAAG,KAAK,CAAA;YAClB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBAClB,WAAW,IAAI,KAAK,CAAC,UAAU,CAAA;gBAC/B,IAAI,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;oBAC/B,MAAM,GAAG,IAAI,CAAA;oBACb,KAAK,CAAC,IAAI,EAAE,CAAA;gBACb,CAAC;YACF,CAAC,CAAC,CAAA;YACF,uEAAuE;YACvE,qEAAqE;YACrE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;gBACzC,IAAI,eAAe,IAAI,EAAE,GAAG,IAAI;oBAAE,OAAM;gBACxC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;gBACvB,eAAe,IAAI,KAAK,CAAC,UAAU,CAAA;YACpC,CAAC,CAAC,CAAA;YACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE,CACpD,MAAM,CACL,IAAI,iBAAiB,CACpB,iDAAiD,EACjD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAC9B,CACD,CACD,CAAA;YACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC5B,IAAI,MAAM;oBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC,CAAA;qBACvF,IAAI,IAAI,KAAK,CAAC;oBAClB,MAAM,CACL,IAAI,iBAAiB,CACpB,8CAA8C,IAAI,GAAG,EACrD,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAC9D,IAAI,IAAI,SAAS,CACjB,CACD,CAAA;qBACG,CAAC;oBACL,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;oBACnC,2DAA2D;oBAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;oBACxE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAA;gBAC3E,CAAC;YACF,CAAC,CAAC,CAAA;QACH,CAAC,CAAC,CAAA;IACH,CAAC;CACD,CAAA;AAED,gFAAgF;AAChF,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACzD,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAM;IAC/C,IAAI,2CAA2C,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAM;IACtE,MAAM,IAAI,uBAAuB,CAChC,2FAA2F,CAC3F,CAAA;AACF,CAAC;AA4BD,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACvC,OAA2B,EAC3B,MAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAA;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,iBAAiB,CAAA;IAClD,IAAI,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAA;IACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAClF,IAAI,CAAC,OAAO;YACX,MAAM,IAAI,uBAAuB,CAAC,oDAAoD,CAAC,CAAA;QACxF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAC1B,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CACjB,CAAA;QACrD,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAA;QAC/C,sEAAsE;QACtE,kEAAkE;QAClE,uDAAuD;QACvD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YAAE,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAA;IAC/F,CAAC;IACD,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,uBAAuB,CAAC,gDAAgD,CAAC,CAAA;IAClG,yBAAyB,CAAC,QAAQ,CAAC,CAAA;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAA;IACrB,MAAM,GAAG,GAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE;QAC9C,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAA;QAC5C,GAAG,CAAC,cAAc,GAAG,SAAS,CAAA;QAC9B,GAAG,CAAC,WAAW,GAAG,SAAS,CAAA;QAC3B,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IACvE,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAEhF,CAAA;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO;QAC1B,MAAM,IAAI,uBAAuB,CAAC,mDAAmD,CAAC,CAAA;IACvF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAA;AAC/B,CAAC"}

package/dist/local-virtual-computer/guest-stdio.d.ts

@@ -0,0 +1,15 @@
+import type { SandboxStdioChannel, SandboxStdioOptions } from '@namzu/sdk';
+interface GuestStdioHost {
+    readonly executionUrl: string;
+    readonly token: string;
+    readonly acquire: (signal?: AbortSignal) => Promise<() => void>;
+    readonly uncertain: () => void;
+}
+export interface OwnedGuestStdioChannel extends SandboxStdioChannel {
+    /** Host-only: the owning engine has positively confirmed allocation removal. */
+    allocationEnded(): void;
+}
+/** Private allocation token stays inside this host channel, never in guest argv/env. */
+export declare function openGuestStdio(host: GuestStdioHost, command: string, args: readonly string[], options?: SandboxStdioOptions): Promise<OwnedGuestStdioChannel>;
+export {};
+//# sourceMappingURL=guest-stdio.d.ts.map

package/dist/local-virtual-computer/guest-stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guest-stdio.d.ts","sourceRoot":"","sources":["../../src/local-virtual-computer/guest-stdio.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,mBAAmB,EAGnB,mBAAmB,EACnB,MAAM,YAAY,CAAA;AAGnB,UAAU,cAAc;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,CAAA;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAA;CAC9B;AAKD,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IAClE,gFAAgF;IAChF,eAAe,IAAI,IAAI,CAAA;CACvB;AAED,wFAAwF;AACxF,wBAAsB,cAAc,CACnC,IAAI,EAAE,cAAc,EACpB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE,mBAAmB,GAC3B,OAAO,CAAC,sBAAsB,CAAC,CAkRjC"}