@penclipai/adapter-utils 2026.426.0 → 2026.505.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (62) hide show
  1. package/dist/command-managed-runtime.d.ts +8 -2
  2. package/dist/command-managed-runtime.d.ts.map +1 -1
  3. package/dist/command-managed-runtime.js +35 -8
  4. package/dist/command-managed-runtime.js.map +1 -1
  5. package/dist/command-managed-runtime.test.d.ts +2 -0
  6. package/dist/command-managed-runtime.test.d.ts.map +1 -0
  7. package/dist/command-managed-runtime.test.js +122 -0
  8. package/dist/command-managed-runtime.test.js.map +1 -0
  9. package/dist/command-redaction.d.ts +3 -0
  10. package/dist/command-redaction.d.ts.map +1 -0
  11. package/dist/command-redaction.js +17 -0
  12. package/dist/command-redaction.js.map +1 -0
  13. package/dist/execution-target-sandbox.test.js +252 -2
  14. package/dist/execution-target-sandbox.test.js.map +1 -1
  15. package/dist/execution-target.d.ts +41 -3
  16. package/dist/execution-target.d.ts.map +1 -1
  17. package/dist/execution-target.js +290 -15
  18. package/dist/execution-target.js.map +1 -1
  19. package/dist/execution-target.test.js +96 -1
  20. package/dist/execution-target.test.js.map +1 -1
  21. package/dist/index.d.ts +3 -1
  22. package/dist/index.d.ts.map +1 -1
  23. package/dist/index.js +1 -0
  24. package/dist/index.js.map +1 -1
  25. package/dist/remote-managed-runtime.d.ts +0 -1
  26. package/dist/remote-managed-runtime.d.ts.map +1 -1
  27. package/dist/remote-managed-runtime.js +1 -3
  28. package/dist/remote-managed-runtime.js.map +1 -1
  29. package/dist/sandbox-callback-bridge.d.ts +115 -0
  30. package/dist/sandbox-callback-bridge.d.ts.map +1 -0
  31. package/dist/sandbox-callback-bridge.js +641 -0
  32. package/dist/sandbox-callback-bridge.js.map +1 -0
  33. package/dist/sandbox-callback-bridge.test.d.ts +2 -0
  34. package/dist/sandbox-callback-bridge.test.d.ts.map +1 -0
  35. package/dist/sandbox-callback-bridge.test.js +516 -0
  36. package/dist/sandbox-callback-bridge.test.js.map +1 -0
  37. package/dist/sandbox-managed-runtime.d.ts +1 -2
  38. package/dist/sandbox-managed-runtime.d.ts.map +1 -1
  39. package/dist/sandbox-managed-runtime.js +1 -4
  40. package/dist/sandbox-managed-runtime.js.map +1 -1
  41. package/dist/sandbox-managed-runtime.test.js +7 -0
  42. package/dist/sandbox-managed-runtime.test.js.map +1 -1
  43. package/dist/sandbox-shell.d.ts +2 -0
  44. package/dist/sandbox-shell.d.ts.map +1 -0
  45. package/dist/sandbox-shell.js +4 -0
  46. package/dist/sandbox-shell.js.map +1 -0
  47. package/dist/server-utils.d.ts +29 -0
  48. package/dist/server-utils.d.ts.map +1 -1
  49. package/dist/server-utils.js +326 -11
  50. package/dist/server-utils.js.map +1 -1
  51. package/dist/server-utils.test.js +213 -1
  52. package/dist/server-utils.test.js.map +1 -1
  53. package/dist/session-compaction.d.ts.map +1 -1
  54. package/dist/session-compaction.js +6 -0
  55. package/dist/session-compaction.js.map +1 -1
  56. package/dist/ssh.d.ts +6 -6
  57. package/dist/ssh.d.ts.map +1 -1
  58. package/dist/ssh.js +71 -36
  59. package/dist/ssh.js.map +1 -1
  60. package/dist/types.d.ts +54 -0
  61. package/dist/types.d.ts.map +1 -1
  62. package/package.json +1 -1
@@ -1,4 +1,4 @@
1
- import { type PreparedSandboxManagedRuntime, type SandboxManagedRuntimeAsset } from "./sandbox-managed-runtime.js";
1
+ import { type PreparedSandboxManagedRuntime, type SandboxManagedRuntimeAsset, type SandboxManagedRuntimeClient } from "./sandbox-managed-runtime.js";
2
2
  import type { RunProcessResult } from "./server-utils.js";
3
3
  export interface CommandManagedRuntimeRunner {
4
4
  execute(input: {
@@ -17,12 +17,18 @@ export interface CommandManagedRuntimeRunner {
17
17
  }
18
18
  export interface CommandManagedRuntimeSpec {
19
19
  providerKey?: string | null;
20
+ shellCommand?: "bash" | "sh" | null;
20
21
  leaseId?: string | null;
21
22
  remoteCwd: string;
22
23
  timeoutMs?: number | null;
23
- paperclipApiUrl?: string | null;
24
24
  }
25
25
  export type CommandManagedRuntimeAsset = SandboxManagedRuntimeAsset;
26
+ export declare function createCommandManagedRuntimeClient(input: {
27
+ runner: CommandManagedRuntimeRunner;
28
+ remoteCwd: string;
29
+ timeoutMs: number;
30
+ shellCommand?: "bash" | "sh" | null;
31
+ }): SandboxManagedRuntimeClient;
26
32
  export declare function prepareCommandManagedRuntime(input: {
27
33
  runner: CommandManagedRuntimeRunner;
28
34
  spec: CommandManagedRuntimeSpec;
@@ -1 +1 @@
1
- {"version":3,"file":"command-managed-runtime.d.ts","sourceRoot":"","sources":["../src/command-managed-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAGhC,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,KAAK,EAAE;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACvE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AAwEpE,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,MAAM,EAAE,2BAA2B,CAAC;IACpC,IAAI,EAAE,yBAAyB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,MAAM,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAsCzC"}
1
+ {"version":3,"file":"command-managed-runtime.d.ts","sourceRoot":"","sources":["../src/command-managed-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,2BAA2B,EAEjC,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAE1D,MAAM,WAAW,2BAA2B;IAC1C,OAAO,CAAC,KAAK,EAAE;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KACvE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,MAAM,0BAA0B,GAAG,0BAA0B,CAAC;AAyBpE,wBAAgB,iCAAiC,CAAC,KAAK,EAAE;IACvD,MAAM,EAAE,2BAA2B,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC;CACrC,GAAG,2BAA2B,CAwE9B;AAED,wBAAsB,4BAA4B,CAAC,KAAK,EAAE;IACxD,MAAM,EAAE,2BAA2B,CAAC;IACpC,IAAI,EAAE,yBAAyB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC,MAAM,CAAC,EAAE,0BAA0B,EAAE,CAAC;IACtC,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAChC,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAuCzC"}
@@ -1,8 +1,13 @@
1
1
  import path from "node:path";
2
2
  import { prepareSandboxManagedRuntime, } from "./sandbox-managed-runtime.js";
3
+ import { preferredShellForSandbox } from "./sandbox-shell.js";
3
4
  function shellQuote(value) {
4
5
  return `'${value.replace(/'/g, `'"'"'`)}'`;
5
6
  }
7
+ function mergeRuntimeExcludes(entries) {
8
+ return [...new Set([".paperclip-runtime", ...(entries ?? [])])];
9
+ }
10
+ const REMOTE_WRITE_BASE64_CHUNK_SIZE = 32 * 1024;
6
11
  function toBuffer(bytes) {
7
12
  if (Buffer.isBuffer(bytes))
8
13
  return bytes;
@@ -17,10 +22,11 @@ function requireSuccessfulResult(result, action) {
17
22
  const detail = stderr.length > 0 ? `: ${stderr}` : "";
18
23
  throw new Error(`${action} failed with exit code ${result.exitCode ?? "null"}${detail}`);
19
24
  }
20
- function createCommandManagedRuntimeClient(input) {
25
+ export function createCommandManagedRuntimeClient(input) {
26
+ const shellCommand = preferredShellForSandbox(input.shellCommand);
21
27
  const runShell = async (script, opts = {}) => {
22
28
  const result = await input.runner.execute({
23
- command: "sh",
29
+ command: shellCommand,
24
30
  args: ["-lc", script],
25
31
  cwd: input.remoteCwd,
26
32
  stdin: opts.stdin,
@@ -35,15 +41,35 @@ function createCommandManagedRuntimeClient(input) {
35
41
  },
36
42
  writeFile: async (remotePath, bytes) => {
37
43
  const body = toBuffer(bytes).toString("base64");
38
- await runShell(`mkdir -p ${shellQuote(path.posix.dirname(remotePath))} && base64 -d > ${shellQuote(remotePath)}`, { stdin: body });
44
+ const remoteDir = path.posix.dirname(remotePath);
45
+ const remoteTempPath = `${remotePath}.paperclip-upload.b64`;
46
+ await runShell(`mkdir -p ${shellQuote(remoteDir)} && rm -f ${shellQuote(remoteTempPath)} && : > ${shellQuote(remoteTempPath)}`);
47
+ for (let offset = 0; offset < body.length; offset += REMOTE_WRITE_BASE64_CHUNK_SIZE) {
48
+ const chunk = body.slice(offset, offset + REMOTE_WRITE_BASE64_CHUNK_SIZE);
49
+ await runShell(`cat >> ${shellQuote(remoteTempPath)}`, { stdin: chunk });
50
+ }
51
+ await runShell(`base64 -d < ${shellQuote(remoteTempPath)} > ${shellQuote(remotePath)} && rm -f ${shellQuote(remoteTempPath)}`);
39
52
  },
40
53
  readFile: async (remotePath) => {
41
54
  const result = await runShell(`base64 < ${shellQuote(remotePath)}`);
42
55
  return Buffer.from(result.stdout.replace(/\s+/g, ""), "base64");
43
56
  },
57
+ listFiles: async (remotePath) => {
58
+ const result = await runShell(`if [ -d ${shellQuote(remotePath)} ]; then ` +
59
+ `for entry in ${shellQuote(remotePath)}/*; do ` +
60
+ `[ -f "$entry" ] || continue; ` +
61
+ `basename "$entry"; ` +
62
+ `done; ` +
63
+ `fi`);
64
+ return result.stdout
65
+ .split(/\r?\n/)
66
+ .map((entry) => entry.trim())
67
+ .filter((entry) => entry.length > 0)
68
+ .sort((left, right) => left.localeCompare(right));
69
+ },
44
70
  remove: async (remotePath) => {
45
71
  const result = await input.runner.execute({
46
- command: "sh",
72
+ command: shellCommand,
47
73
  args: ["-lc", `rm -rf ${shellQuote(remotePath)}`],
48
74
  cwd: input.remoteCwd,
49
75
  timeoutMs: input.timeoutMs,
@@ -52,7 +78,7 @@ function createCommandManagedRuntimeClient(input) {
52
78
  },
53
79
  run: async (command, options) => {
54
80
  const result = await input.runner.execute({
55
- command: "sh",
81
+ command: shellCommand,
56
82
  args: ["-lc", command],
57
83
  cwd: input.remoteCwd,
58
84
  timeoutMs: options.timeoutMs,
@@ -71,16 +97,17 @@ export async function prepareCommandManagedRuntime(input) {
71
97
  remoteCwd: workspaceRemoteDir,
72
98
  timeoutMs,
73
99
  apiKey: null,
74
- paperclipApiUrl: input.spec.paperclipApiUrl ?? null,
75
100
  };
76
101
  const client = createCommandManagedRuntimeClient({
77
102
  runner: input.runner,
78
103
  remoteCwd: workspaceRemoteDir,
79
104
  timeoutMs,
105
+ shellCommand: input.spec.shellCommand,
80
106
  });
107
+ const shellCommand = preferredShellForSandbox(input.spec.shellCommand);
81
108
  if (input.installCommand?.trim()) {
82
109
  const result = await input.runner.execute({
83
- command: "sh",
110
+ command: shellCommand,
84
111
  args: ["-lc", input.installCommand.trim()],
85
112
  cwd: workspaceRemoteDir,
86
113
  timeoutMs,
@@ -93,7 +120,7 @@ export async function prepareCommandManagedRuntime(input) {
93
120
  adapterKey: input.adapterKey,
94
121
  workspaceLocalDir: input.workspaceLocalDir,
95
122
  workspaceRemoteDir,
96
- workspaceExclude: input.workspaceExclude,
123
+ workspaceExclude: mergeRuntimeExcludes(input.workspaceExclude),
97
124
  preserveAbsentOnRestore: input.preserveAbsentOnRestore,
98
125
  assets: input.assets,
99
126
  });
@@ -1 +1 @@
1
- {"version":3,"file":"command-managed-runtime.js","sourceRoot":"","sources":["../src/command-managed-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,4BAA4B,GAK7B,MAAM,8BAA8B,CAAC;AA0BtC,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAwC;IACxD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAwB,EAAE,MAAc;IACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,0BAA0B,MAAM,CAAC,QAAQ,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,iCAAiC,CAAC,KAI1C;IACC,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,OAA+C,EAAE,EAAE,EAAE;QAC3F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YACxC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YACrB,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;SAC7C,CAAC,CAAC;QACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC5B,MAAM,QAAQ,CAAC,YAAY,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,QAAQ,CACZ,YAAY,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,mBAAmB,UAAU,CAAC,UAAU,CAAC,EAAE,EACjG,EAAE,KAAK,EAAE,IAAI,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjD,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,uBAAuB,CAAC,MAAM,EAAE,UAAU,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxC,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;gBACtB,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAUlD;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACpG,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;IAC5E,MAAM,WAAW,GAA+B;QAC9C,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,SAAS;QAC7C,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS;QAC1C,SAAS,EAAE,kBAAkB;QAC7B,SAAS;QACT,MAAM,EAAE,IAAI;QACZ,eAAe,EAAE,KAAK,CAAC,IAAI,CAAC,eAAe,IAAI,IAAI;KACpD,CAAC;IACF,MAAM,MAAM,GAAG,iCAAiC,CAAC;QAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,kBAAkB;QAC7B,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YACxC,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC1C,GAAG,EAAE,kBAAkB;YACvB,SAAS;SACV,CAAC,CAAC;QACH,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,4BAA4B,CAAC;QACxC,IAAI,EAAE,WAAW;QACjB,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,kBAAkB;QAClB,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC"}
1
+ {"version":3,"file":"command-managed-runtime.js","sourceRoot":"","sources":["../src/command-managed-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EACL,4BAA4B,GAK7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AA0B9D,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC;AAED,SAAS,oBAAoB,CAAC,OAA6B;IACzD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,oBAAoB,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,8BAA8B,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjD,SAAS,QAAQ,CAAC,KAAwC;IACxD,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAwB,EAAE,MAAc;IACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;QAAE,OAAO;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,0BAA0B,MAAM,CAAC,QAAQ,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAKjD;IACC,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,OAA+C,EAAE,EAAE,EAAE;QAC3F,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YACxC,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC;YACrB,GAAG,EAAE,KAAK,CAAC,SAAS;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS;SAC7C,CAAC,CAAC;QACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC5B,MAAM,QAAQ,CAAC,YAAY,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACjD,MAAM,cAAc,GAAG,GAAG,UAAU,uBAAuB,CAAC;YAE5D,MAAM,QAAQ,CACZ,YAAY,UAAU,CAAC,SAAS,CAAC,aAAa,UAAU,CAAC,cAAc,CAAC,WAAW,UAAU,CAAC,cAAc,CAAC,EAAE,CAChH,CAAC;YACF,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,8BAA8B,EAAE,CAAC;gBACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,8BAA8B,CAAC,CAAC;gBAC1E,MAAM,QAAQ,CAAC,UAAU,UAAU,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,QAAQ,CACZ,eAAe,UAAU,CAAC,cAAc,CAAC,MAAM,UAAU,CAAC,UAAU,CAAC,aAAa,UAAU,CAAC,cAAc,CAAC,EAAE,CAC/G,CAAC;QACJ,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC7B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QAClE,CAAC;QACD,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC3B,WAAW,UAAU,CAAC,UAAU,CAAC,WAAW;gBAC1C,gBAAgB,UAAU,CAAC,UAAU,CAAC,SAAS;gBAC/C,+BAA+B;gBAC/B,qBAAqB;gBACrB,QAAQ;gBACV,IAAI,CACL,CAAC;YACF,OAAO,MAAM,CAAC,MAAM;iBACjB,KAAK,CAAC,OAAO,CAAC;iBACd,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;iBAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;iBACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxC,OAAO,EAAE,YAAY;gBACrB,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjD,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;YACH,uBAAuB,CAAC,MAAM,EAAE,UAAU,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;YAC9B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;gBACxC,OAAO,EAAE,YAAY;gBACrB,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;gBACtB,GAAG,EAAE,KAAK,CAAC,SAAS;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;YACH,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,KAUlD;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACpG,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;IAC5E,MAAM,WAAW,GAA+B;QAC9C,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,SAAS;QAC7C,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,SAAS;QAC1C,SAAS,EAAE,kBAAkB;QAC7B,SAAS;QACT,MAAM,EAAE,IAAI;KACb,CAAC;IACF,MAAM,MAAM,GAAG,iCAAiC,CAAC;QAC/C,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS,EAAE,kBAAkB;QAC7B,SAAS;QACT,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY;KACtC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEvE,IAAI,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;YACxC,OAAO,EAAE,YAAY;YACrB,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC1C,GAAG,EAAE,kBAAkB;YACvB,SAAS;SACV,CAAC,CAAC;QACH,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,MAAM,4BAA4B,CAAC;QACxC,IAAI,EAAE,WAAW;QACjB,MAAM;QACN,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,kBAAkB;QAClB,gBAAgB,EAAE,oBAAoB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC9D,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=command-managed-runtime.test.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command-managed-runtime.test.d.ts","sourceRoot":"","sources":["../src/command-managed-runtime.test.ts"],"names":[],"mappings":""}
@@ -0,0 +1,122 @@
1
+ import { existsSync } from "node:fs";
2
+ import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
3
+ import os from "node:os";
4
+ import path from "node:path";
5
+ import { execFile as execFileCallback } from "node:child_process";
6
+ import { promisify } from "node:util";
7
+ import { afterEach, describe, expect, it } from "vitest";
8
+ import { prepareCommandManagedRuntime } from "./command-managed-runtime.js";
9
+ const execFile = promisify(execFileCallback);
10
+ function resolveTestPosixShellCommand(command) {
11
+ if (process.platform !== "win32")
12
+ return command === "bash" ? "/bin/bash" : "/bin/sh";
13
+ const candidates = command === "bash"
14
+ ? ["C:\\Program Files\\Git\\bin\\bash.exe", "C:\\Program Files\\Git\\usr\\bin\\bash.exe"]
15
+ : ["C:\\Program Files\\Git\\usr\\bin\\sh.exe", "C:\\Program Files\\Git\\bin\\bash.exe"];
16
+ return candidates.find((candidate) => existsSync(candidate)) ?? "sh";
17
+ }
18
+ function rewriteWindowsPathsForGitShell(script) {
19
+ if (process.platform !== "win32")
20
+ return script;
21
+ return script.replace(/([A-Za-z]):\\([^'"\s]*)/g, (_match, drive, rest) => `/${drive.toLowerCase()}/${rest.replace(/\\/g, "/")}`);
22
+ }
23
+ describe("command managed runtime", () => {
24
+ const cleanupDirs = [];
25
+ afterEach(async () => {
26
+ while (cleanupDirs.length > 0) {
27
+ const dir = cleanupDirs.pop();
28
+ if (!dir)
29
+ continue;
30
+ await rm(dir, { recursive: true, force: true }).catch(() => undefined);
31
+ }
32
+ });
33
+ it("keeps the runtime overlay out of sandbox workspace sync by default", async () => {
34
+ const rootDir = await mkdtemp(path.join(os.tmpdir(), "paperclip-command-runtime-"));
35
+ cleanupDirs.push(rootDir);
36
+ const localWorkspaceDir = path.join(rootDir, "local-workspace");
37
+ const remoteWorkspaceDir = path.join(rootDir, "remote-workspace");
38
+ await mkdir(path.join(localWorkspaceDir, ".paperclip-runtime"), { recursive: true });
39
+ await mkdir(remoteWorkspaceDir, { recursive: true });
40
+ await writeFile(path.join(localWorkspaceDir, "README.md"), "local workspace\n", "utf8");
41
+ await writeFile(path.join(localWorkspaceDir, ".paperclip-runtime", "state.json"), "{\"keep\":true}\n", "utf8");
42
+ const calls = [];
43
+ const runner = {
44
+ execute: async (input) => {
45
+ calls.push({ ...input });
46
+ const startedAt = new Date().toISOString();
47
+ const env = {
48
+ ...process.env,
49
+ ...input.env,
50
+ };
51
+ const command = input.command === "sh" || input.command === "bash"
52
+ ? resolveTestPosixShellCommand(input.command)
53
+ : input.command;
54
+ const args = [...(input.args ?? [])];
55
+ if ((input.command === "sh" || input.command === "bash") && args[0] === "-lc" && typeof args[1] === "string") {
56
+ args[1] = rewriteWindowsPathsForGitShell(args[1]);
57
+ }
58
+ if (input.stdin != null &&
59
+ (input.command === "sh" || input.command === "bash") &&
60
+ args[0] === "-lc" &&
61
+ typeof args[1] === "string") {
62
+ env.PAPERCLIP_TEST_STDIN = input.stdin;
63
+ args[1] = `printf '%s' \"$PAPERCLIP_TEST_STDIN\" | (${args[1]})`;
64
+ }
65
+ try {
66
+ const result = await execFile(command, args, {
67
+ cwd: input.cwd,
68
+ env,
69
+ maxBuffer: 32 * 1024 * 1024,
70
+ timeout: input.timeoutMs,
71
+ });
72
+ return {
73
+ exitCode: 0,
74
+ signal: null,
75
+ timedOut: false,
76
+ stdout: result.stdout,
77
+ stderr: result.stderr,
78
+ pid: null,
79
+ startedAt,
80
+ };
81
+ }
82
+ catch (error) {
83
+ const err = error;
84
+ return {
85
+ exitCode: typeof err.code === "number" ? err.code : null,
86
+ signal: err.signal ?? null,
87
+ timedOut: Boolean(err.killed && input.timeoutMs),
88
+ stdout: err.stdout ?? "",
89
+ stderr: err.stderr ?? "",
90
+ pid: null,
91
+ startedAt,
92
+ };
93
+ }
94
+ },
95
+ };
96
+ const prepared = await prepareCommandManagedRuntime({
97
+ runner,
98
+ spec: {
99
+ remoteCwd: remoteWorkspaceDir,
100
+ timeoutMs: 30_000,
101
+ },
102
+ adapterKey: "claude",
103
+ workspaceLocalDir: localWorkspaceDir,
104
+ });
105
+ await expect(readFile(path.join(remoteWorkspaceDir, "README.md"), "utf8")).resolves.toBe("local workspace\n");
106
+ await expect(readFile(path.join(remoteWorkspaceDir, ".paperclip-runtime", "state.json"), "utf8")).rejects
107
+ .toMatchObject({ code: "ENOENT" });
108
+ const uploadCalls = calls.filter((call) => call.args?.[1]?.includes("cat >>"));
109
+ expect(uploadCalls.length).toBeGreaterThan(0);
110
+ expect(uploadCalls.every((call) => typeof call.stdin === "string" && call.stdin.length <= 32 * 1024)).toBe(true);
111
+ await mkdir(path.join(remoteWorkspaceDir, ".paperclip-runtime"), { recursive: true });
112
+ await writeFile(path.join(remoteWorkspaceDir, "README.md"), "remote workspace\n", "utf8");
113
+ await writeFile(path.join(remoteWorkspaceDir, ".paperclip-runtime", "remote-state.json"), "{\"remote\":true}\n", "utf8");
114
+ await prepared.restoreWorkspace();
115
+ await expect(readFile(path.join(localWorkspaceDir, "README.md"), "utf8")).resolves.toBe("remote workspace\n");
116
+ await expect(readFile(path.join(localWorkspaceDir, ".paperclip-runtime", "state.json"), "utf8")).resolves
117
+ .toBe("{\"keep\":true}\n");
118
+ await expect(readFile(path.join(localWorkspaceDir, ".paperclip-runtime", "remote-state.json"), "utf8")).rejects
119
+ .toMatchObject({ code: "ENOENT" });
120
+ }, 30_000);
121
+ });
122
+ //# sourceMappingURL=command-managed-runtime.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command-managed-runtime.test.js","sourceRoot":"","sources":["../src/command-managed-runtime.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC3E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAG5E,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAE7C,SAAS,4BAA4B,CAAC,OAAsB;IAC1D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,UAAU,GAAG,OAAO,KAAK,MAAM;QACnC,CAAC,CAAC,CAAC,uCAAuC,EAAE,4CAA4C,CAAC;QACzF,CAAC,CAAC,CAAC,0CAA0C,EAAE,uCAAuC,CAAC,CAAC;IAC1F,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;AACvE,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAc;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE,CACxF,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CACtD,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAC;QACpF,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE1B,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAChE,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAC;QAClE,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,KAAK,CAAC,kBAAkB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QACxF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,YAAY,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAE/G,MAAM,KAAK,GAON,EAAE,CAAC;QACR,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,KAAK,EAAE,KAOf,EAA6B,EAAE;gBAC9B,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;gBACzB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG;oBACV,GAAG,OAAO,CAAC,GAAG;oBACd,GAAG,KAAK,CAAC,GAAG;iBACb,CAAC;gBACF,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;oBAChD,CAAC,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC7C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;gBACpB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC7G,IAAI,CAAC,CAAC,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,IACE,KAAK,CAAC,KAAK,IAAI,IAAI;oBACnB,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC;oBACpD,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK;oBACjB,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAC3B,CAAC;oBACD,GAAG,CAAC,oBAAoB,GAAG,KAAK,CAAC,KAAK,CAAC;oBACvC,IAAI,CAAC,CAAC,CAAC,GAAG,4CAA4C,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;gBACnE,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE;wBAC3C,GAAG,EAAE,KAAK,CAAC,GAAG;wBACd,GAAG;wBACH,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;wBAC3B,OAAO,EAAE,KAAK,CAAC,SAAS;qBACzB,CAAC,CAAC;oBACH,OAAO;wBACL,QAAQ,EAAE,CAAC;wBACX,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,GAAG,EAAE,IAAI;wBACT,SAAS;qBACV,CAAC;gBACJ,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,GAAG,GAAG,KAMX,CAAC;oBACF,OAAO;wBACL,QAAQ,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;wBACxD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;wBAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC;wBAChD,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;wBACxB,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE;wBACxB,GAAG,EAAE,IAAI;wBACT,SAAS;qBACV,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CAAC;QAEF,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC;YAClD,MAAM;YACN,IAAI,EAAE;gBACJ,SAAS,EAAE,kBAAkB;gBAC7B,SAAS,EAAE,MAAM;aAClB;YACD,UAAU,EAAE,QAAQ;YACpB,iBAAiB,EAAE,iBAAiB;SACrC,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC9G,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO;aACtG,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjH,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,WAAW,CAAC,EAAE,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAC1F,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,EAAE,qBAAqB,EAAE,MAAM,CAAC,CAAC;QACzH,MAAM,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAElC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC9G,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ;aACtG,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7B,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO;aAC5G,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}
@@ -0,0 +1,3 @@
1
+ export declare const REDACTED_COMMAND_TEXT_VALUE = "***REDACTED***";
2
+ export declare function redactCommandText(command: string, redactedValue?: string): string;
3
+ //# sourceMappingURL=command-redaction.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command-redaction.d.ts","sourceRoot":"","sources":["../src/command-redaction.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,2BAA2B,mBAAmB,CAAC;AAY5D,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,SAA8B,GAAG,MAAM,CAQtG"}
@@ -0,0 +1,17 @@
1
+ export const REDACTED_COMMAND_TEXT_VALUE = "***REDACTED***";
2
+ const COMMAND_CLI_SECRET_OPTION_RE = /(\B-{1,2}(?:api[-_]?key|(?:access[-_]?|auth[-_]?)?token|token|authorization|bearer|secret|passwd|password|credential|jwt|private[-_]?key|cookie|connectionstring)(?:\s+|=)(["']?))[^\s"'`]+(\2)/gi;
3
+ const COMMAND_ENV_SECRET_ASSIGNMENT_RE = /(\b[A-Za-z0-9_]*(?:TOKEN|KEY|SECRET|PASSWORD|PASSWD|AUTHORIZATION|JWT)[A-Za-z0-9_]*\s*=\s*)[^\s"'`]+/gi;
4
+ const COMMAND_AUTHORIZATION_BEARER_RE = /(\bAuthorization\s*:\s*Bearer\s+)[^\s"'`]+/gi;
5
+ const COMMAND_OPENAI_KEY_RE = /\bsk-[A-Za-z0-9_-]{12,}\b/g;
6
+ const COMMAND_GITHUB_TOKEN_RE = /\bgh[pousr]_[A-Za-z0-9_]{20,}\b/g;
7
+ const COMMAND_JWT_RE = /\b[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}(?:\.[A-Za-z0-9_-]{8,})?\b/g;
8
+ export function redactCommandText(command, redactedValue = REDACTED_COMMAND_TEXT_VALUE) {
9
+ return command
10
+ .replace(COMMAND_AUTHORIZATION_BEARER_RE, `$1${redactedValue}`)
11
+ .replace(COMMAND_CLI_SECRET_OPTION_RE, `$1${redactedValue}$3`)
12
+ .replace(COMMAND_ENV_SECRET_ASSIGNMENT_RE, `$1${redactedValue}`)
13
+ .replace(COMMAND_OPENAI_KEY_RE, redactedValue)
14
+ .replace(COMMAND_GITHUB_TOKEN_RE, redactedValue)
15
+ .replace(COMMAND_JWT_RE, redactedValue);
16
+ }
17
+ //# sourceMappingURL=command-redaction.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command-redaction.js","sourceRoot":"","sources":["../src/command-redaction.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,2BAA2B,GAAG,gBAAgB,CAAC;AAE5D,MAAM,4BAA4B,GAChC,mMAAmM,CAAC;AACtM,MAAM,gCAAgC,GACpC,wGAAwG,CAAC;AAC3G,MAAM,+BAA+B,GAAG,8CAA8C,CAAC;AACvF,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;AAC3D,MAAM,uBAAuB,GAAG,kCAAkC,CAAC;AACnE,MAAM,cAAc,GAClB,sFAAsF,CAAC;AAEzF,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,aAAa,GAAG,2BAA2B;IAC5F,OAAO,OAAO;SACX,OAAO,CAAC,+BAA+B,EAAE,KAAK,aAAa,EAAE,CAAC;SAC9D,OAAO,CAAC,4BAA4B,EAAE,KAAK,aAAa,IAAI,CAAC;SAC7D,OAAO,CAAC,gCAAgC,EAAE,KAAK,aAAa,EAAE,CAAC;SAC/D,OAAO,CAAC,qBAAqB,EAAE,aAAa,CAAC;SAC7C,OAAO,CAAC,uBAAuB,EAAE,aAAa,CAAC;SAC/C,OAAO,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC;AAC5C,CAAC"}
@@ -1,6 +1,60 @@
1
- import { describe, expect, it, vi } from "vitest";
2
- import { adapterExecutionTargetSessionIdentity, adapterExecutionTargetToRemoteSpec, runAdapterExecutionTargetProcess, runAdapterExecutionTargetShellCommand, } from "./execution-target.js";
1
+ import { createServer } from "node:http";
2
+ import { existsSync } from "node:fs";
3
+ import { mkdir, mkdtemp, rm } from "node:fs/promises";
4
+ import os from "node:os";
5
+ import path from "node:path";
6
+ import { afterEach, describe, expect, it, vi } from "vitest";
7
+ import { adapterExecutionTargetSessionIdentity, adapterExecutionTargetToRemoteSpec, adapterExecutionTargetUsesPaperclipBridge, runAdapterExecutionTargetProcess, runAdapterExecutionTargetShellCommand, startAdapterExecutionTargetPaperclipBridge, } from "./execution-target.js";
8
+ import { runChildProcess } from "./server-utils.js";
9
+ function resolveTestPosixShellCommand(command) {
10
+ if (process.platform !== "win32")
11
+ return command === "bash" ? "/bin/bash" : "sh";
12
+ const candidates = command === "bash"
13
+ ? ["C:\\Program Files\\Git\\bin\\bash.exe", "C:\\Program Files\\Git\\usr\\bin\\bash.exe"]
14
+ : ["C:\\Program Files\\Git\\usr\\bin\\sh.exe", "C:\\Program Files\\Git\\bin\\bash.exe"];
15
+ return candidates.find((candidate) => existsSync(candidate)) ?? "sh";
16
+ }
17
+ function rewriteWindowsPathsForGitShell(script) {
18
+ if (process.platform !== "win32")
19
+ return script;
20
+ return script.replace(/([A-Za-z]):\\([^'"\s]*)/g, (_match, drive, rest) => `/${drive.toLowerCase()}/${rest.replace(/\\/g, "/")}`);
21
+ }
3
22
  describe("sandbox adapter execution targets", () => {
23
+ const cleanupDirs = [];
24
+ afterEach(async () => {
25
+ while (cleanupDirs.length > 0) {
26
+ const dir = cleanupDirs.pop();
27
+ if (!dir)
28
+ continue;
29
+ await rm(dir, { recursive: true, force: true }).catch(() => undefined);
30
+ }
31
+ }, 30_000);
32
+ function createLocalSandboxRunner() {
33
+ let counter = 0;
34
+ return {
35
+ execute: async (input) => {
36
+ counter += 1;
37
+ const command = input.command === "sh" || input.command === "bash"
38
+ ? resolveTestPosixShellCommand(input.command)
39
+ : input.command;
40
+ const args = [...(input.args ?? [])];
41
+ if ((input.command === "sh" || input.command === "bash") && args[0] === "-lc" && typeof args[1] === "string") {
42
+ args[1] = rewriteWindowsPathsForGitShell(args[1]);
43
+ }
44
+ return runChildProcess(`sandbox-run-${counter}`, command, args, {
45
+ cwd: input.cwd ?? process.cwd(),
46
+ env: input.env ?? {},
47
+ stdin: input.stdin,
48
+ timeoutSec: Math.max(1, Math.ceil((input.timeoutMs ?? 30_000) / 1000)),
49
+ graceSec: 5,
50
+ onLog: input.onLog ?? (async () => { }),
51
+ onSpawn: input.onSpawn
52
+ ? async (meta) => input.onSpawn?.({ pid: meta.pid, startedAt: meta.startedAt })
53
+ : undefined,
54
+ });
55
+ },
56
+ };
57
+ }
4
58
  it("executes through the provider-neutral runner without a remote spec", async () => {
5
59
  const runner = {
6
60
  execute: vi.fn(async () => ({
@@ -79,5 +133,201 @@ describe("sandbox adapter execution targets", () => {
79
133
  timeoutMs: 7000,
80
134
  }));
81
135
  });
136
+ it("treats SSH targets as bridge-only", () => {
137
+ const target = {
138
+ kind: "remote",
139
+ transport: "ssh",
140
+ remoteCwd: "/workspace",
141
+ spec: {
142
+ host: "ssh.example.test",
143
+ port: 22,
144
+ username: "paperclip",
145
+ remoteWorkspacePath: "/workspace",
146
+ remoteCwd: "/workspace",
147
+ privateKey: null,
148
+ knownHosts: null,
149
+ strictHostKeyChecking: true,
150
+ },
151
+ };
152
+ expect(adapterExecutionTargetUsesPaperclipBridge(target)).toBe(true);
153
+ expect(adapterExecutionTargetSessionIdentity(target)).toEqual({
154
+ transport: "ssh",
155
+ host: "ssh.example.test",
156
+ port: 22,
157
+ username: "paperclip",
158
+ remoteCwd: "/workspace",
159
+ });
160
+ });
161
+ it("uses the provider-declared shell for sandbox helper commands", async () => {
162
+ const runner = {
163
+ execute: vi.fn(async () => ({
164
+ exitCode: 0,
165
+ signal: null,
166
+ timedOut: false,
167
+ stdout: "/home/sandbox",
168
+ stderr: "",
169
+ pid: null,
170
+ startedAt: new Date().toISOString(),
171
+ })),
172
+ };
173
+ const target = {
174
+ kind: "remote",
175
+ transport: "sandbox",
176
+ providerKey: "custom-provider",
177
+ shellCommand: "bash",
178
+ remoteCwd: "/workspace",
179
+ runner,
180
+ };
181
+ await runAdapterExecutionTargetShellCommand("run-2b", target, 'printf %s "$HOME"', {
182
+ cwd: "/local/workspace",
183
+ env: {},
184
+ timeoutSec: 7,
185
+ });
186
+ expect(runner.execute).toHaveBeenCalledWith(expect.objectContaining({
187
+ command: "bash",
188
+ args: ["-lc", 'printf %s "$HOME"'],
189
+ cwd: "/workspace",
190
+ timeoutMs: 7000,
191
+ }));
192
+ });
193
+ it("starts a localhost Paperclip bridge for sandbox targets in bridge mode", async () => {
194
+ const rootDir = await mkdtemp(path.join(os.tmpdir(), "paperclip-execution-target-bridge-"));
195
+ cleanupDirs.push(rootDir);
196
+ const remoteCwd = path.join(rootDir, "workspace");
197
+ const runtimeRootDir = path.join(remoteCwd, ".paperclip-runtime", "codex");
198
+ await mkdir(runtimeRootDir, { recursive: true });
199
+ const requests = [];
200
+ const apiServer = createServer((req, res) => {
201
+ requests.push({
202
+ method: req.method ?? "GET",
203
+ url: req.url ?? "/",
204
+ auth: req.headers.authorization ?? null,
205
+ runId: typeof req.headers["x-paperclip-run-id"] === "string" ? req.headers["x-paperclip-run-id"] : null,
206
+ });
207
+ res.writeHead(200, { "content-type": "application/json" });
208
+ res.end(JSON.stringify({ ok: true }));
209
+ });
210
+ await new Promise((resolve, reject) => {
211
+ apiServer.once("error", reject);
212
+ apiServer.listen(0, "127.0.0.1", () => resolve());
213
+ });
214
+ const address = apiServer.address();
215
+ if (!address || typeof address === "string") {
216
+ throw new Error("Expected the bridge test API server to listen on a TCP port.");
217
+ }
218
+ const target = {
219
+ kind: "remote",
220
+ transport: "sandbox",
221
+ providerKey: "e2b",
222
+ environmentId: "env-1",
223
+ leaseId: "lease-1",
224
+ remoteCwd,
225
+ runner: createLocalSandboxRunner(),
226
+ timeoutMs: 30_000,
227
+ };
228
+ const bridge = await startAdapterExecutionTargetPaperclipBridge({
229
+ runId: "run-bridge",
230
+ target,
231
+ runtimeRootDir,
232
+ adapterKey: "codex",
233
+ hostApiToken: "real-run-jwt",
234
+ hostApiUrl: `http://127.0.0.1:${address.port}`,
235
+ });
236
+ try {
237
+ expect(bridge).not.toBeNull();
238
+ expect(bridge?.env.PAPERCLIP_API_URL).toMatch(/^http:\/\/127\.0\.0\.1:\d+$/);
239
+ expect(bridge?.env.PAPERCLIP_API_KEY).not.toBe("real-run-jwt");
240
+ expect(bridge?.env.PAPERCLIP_API_BRIDGE_MODE).toBe("queue_v1");
241
+ const response = await fetch(`${bridge.env.PAPERCLIP_API_URL}/api/agents/me`, {
242
+ headers: {
243
+ authorization: `Bearer ${bridge.env.PAPERCLIP_API_KEY}`,
244
+ accept: "application/json",
245
+ },
246
+ });
247
+ expect(response.status).toBe(200);
248
+ expect(await response.json()).toEqual({ ok: true });
249
+ expect(requests).toEqual([{
250
+ method: "GET",
251
+ url: "/api/agents/me",
252
+ auth: "Bearer real-run-jwt",
253
+ runId: "run-bridge",
254
+ }]);
255
+ }
256
+ finally {
257
+ await bridge?.stop();
258
+ await new Promise((resolve) => apiServer.close(() => resolve()));
259
+ }
260
+ }, 30_000);
261
+ it("fails oversized host responses with a 502 before returning them to the sandbox client", async () => {
262
+ const rootDir = await mkdtemp(path.join(os.tmpdir(), "paperclip-execution-target-bridge-limit-"));
263
+ cleanupDirs.push(rootDir);
264
+ const remoteCwd = path.join(rootDir, "workspace");
265
+ const runtimeRootDir = path.join(remoteCwd, ".paperclip-runtime", "codex");
266
+ await mkdir(runtimeRootDir, { recursive: true });
267
+ const requests = [];
268
+ const largeBody = "x".repeat(64);
269
+ const apiServer = createServer((req, res) => {
270
+ requests.push({
271
+ method: req.method ?? "GET",
272
+ url: req.url ?? "/",
273
+ auth: req.headers.authorization ?? null,
274
+ runId: typeof req.headers["x-paperclip-run-id"] === "string" ? req.headers["x-paperclip-run-id"] : null,
275
+ });
276
+ res.writeHead(200, {
277
+ "content-type": "application/json",
278
+ "content-length": String(Buffer.byteLength(largeBody, "utf8")),
279
+ });
280
+ res.end(largeBody);
281
+ });
282
+ await new Promise((resolve, reject) => {
283
+ apiServer.once("error", reject);
284
+ apiServer.listen(0, "127.0.0.1", () => resolve());
285
+ });
286
+ const address = apiServer.address();
287
+ if (!address || typeof address === "string") {
288
+ throw new Error("Expected the bridge test API server to listen on a TCP port.");
289
+ }
290
+ const target = {
291
+ kind: "remote",
292
+ transport: "sandbox",
293
+ providerKey: "e2b",
294
+ environmentId: "env-1",
295
+ leaseId: "lease-1",
296
+ remoteCwd,
297
+ runner: createLocalSandboxRunner(),
298
+ timeoutMs: 30_000,
299
+ };
300
+ const bridge = await startAdapterExecutionTargetPaperclipBridge({
301
+ runId: "run-bridge-limit",
302
+ target,
303
+ runtimeRootDir,
304
+ adapterKey: "codex",
305
+ hostApiToken: "real-run-jwt",
306
+ hostApiUrl: `http://127.0.0.1:${address.port}`,
307
+ maxBodyBytes: 32,
308
+ });
309
+ try {
310
+ const response = await fetch(`${bridge.env.PAPERCLIP_API_URL}/api/agents/me`, {
311
+ headers: {
312
+ authorization: `Bearer ${bridge.env.PAPERCLIP_API_KEY}`,
313
+ accept: "application/json",
314
+ },
315
+ });
316
+ expect(response.status).toBe(502);
317
+ await expect(response.json()).resolves.toEqual({
318
+ error: "Bridge response body exceeded the configured size limit of 32 bytes.",
319
+ });
320
+ expect(requests).toEqual([{
321
+ method: "GET",
322
+ url: "/api/agents/me",
323
+ auth: "Bearer real-run-jwt",
324
+ runId: "run-bridge-limit",
325
+ }]);
326
+ }
327
+ finally {
328
+ await bridge?.stop();
329
+ await new Promise((resolve) => apiServer.close(() => resolve()));
330
+ }
331
+ }, 30_000);
82
332
  });
83
333
  //# sourceMappingURL=execution-target-sandbox.test.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"execution-target-sandbox.test.js","sourceRoot":"","sources":["../src/execution-target-sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAElD,OAAO,EACL,qCAAqC,EACrC,kCAAkC,EAClC,gCAAgC,EAChC,qCAAqC,GAEtC,MAAM,uBAAuB,CAAC;AAE/B,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE;gBACV,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,MAAM,GAAkC;YAC5C,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,cAAc;YAC3B,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,MAAM;YACjB,MAAM;SACP,CAAC;QAEF,MAAM,CAAC,kCAAkC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE;YAC9F,GAAG,EAAE,kBAAkB;YACvB,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACvB,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAClE,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACvB,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,qCAAqC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,cAAc;YAC3B,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,EAAE;gBACV,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,MAAM,GAAkC;YAC5C,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,YAAY;YACvB,MAAM;SACP,CAAC;QAEF,MAAM,qCAAqC,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAChF,GAAG,EAAE,kBAAkB;YACvB,GAAG,EAAE,EAAE;YACP,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAClE,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC;YAClC,GAAG,EAAE,YAAY;YACjB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
1
+ {"version":3,"file":"execution-target-sandbox.test.js","sourceRoot":"","sources":["../src/execution-target-sandbox.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE7D,OAAO,EACL,qCAAqC,EACrC,kCAAkC,EAClC,yCAAyC,EACzC,gCAAgC,EAChC,qCAAqC,EACrC,0CAA0C,GAE3C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,SAAS,4BAA4B,CAAC,OAAsB;IAC1D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,MAAM,UAAU,GAAG,OAAO,KAAK,MAAM;QACnC,CAAC,CAAC,CAAC,uCAAuC,EAAE,4CAA4C,CAAC;QACzF,CAAC,CAAC,CAAC,0CAA0C,EAAE,uCAAuC,CAAC,CAAC;IAC1F,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC;AACvE,CAAC;AAED,SAAS,8BAA8B,CAAC,MAAc;IACpD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,MAAM,CAAC,OAAO,CAAC,0BAA0B,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,IAAY,EAAE,EAAE,CACxF,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CACtD,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC9B,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,SAAS,wBAAwB;QAC/B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,KAAK,EAAE,KASf,EAAE,EAAE;gBACH,OAAO,IAAI,CAAC,CAAC;gBACb,MAAM,OAAO,GACX,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;oBAChD,CAAC,CAAC,4BAA4B,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC7C,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;gBACpB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBAC7G,IAAI,CAAC,CAAC,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,OAAO,eAAe,CAAC,eAAe,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;oBAC9D,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;oBAC/B,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;oBACpB,KAAK,EAAE,KAAK,CAAC,KAAK;oBAClB,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;oBACtE,QAAQ,EAAE,CAAC;oBACX,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;oBACtC,OAAO,EAAE,KAAK,CAAC,OAAO;wBACpB,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;wBAC/E,CAAC,CAAC,SAAS;iBACd,CAAC,CAAC;YACL,CAAC;SACF,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,EAAE;gBACV,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,MAAM,GAAkC;YAC5C,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,cAAc;YAC3B,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,YAAY;YACvB,SAAS,EAAE,MAAM;YACjB,MAAM;SACP,CAAC;QAEF,MAAM,CAAC,kCAAkC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAE9D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,EAAE;YAC9F,GAAG,EAAE,kBAAkB;YACvB,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACvB,KAAK,EAAE,QAAQ;YACf,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,CAAC;YACX,KAAK,EAAE,KAAK,IAAI,EAAE,GAAE,CAAC;SACtB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAClE,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;YACvB,KAAK,EAAE,QAAQ;YACf,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,CAAC;QACJ,MAAM,CAAC,qCAAqC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,cAAc;YAC3B,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,EAAE;gBACV,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,MAAM,GAAkC;YAC5C,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,SAAS,EAAE,YAAY;YACvB,MAAM;SACP,CAAC;QAEF,MAAM,qCAAqC,CAAC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE;YAChF,GAAG,EAAE,kBAAkB;YACvB,GAAG,EAAE,EAAE;YACP,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAClE,OAAO,EAAE,IAAI;YACb,IAAI,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC;YAClC,GAAG,EAAE,YAAY;YACjB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG;YACb,IAAI,EAAE,QAAiB;YACvB,SAAS,EAAE,KAAc;YACzB,SAAS,EAAE,YAAY;YACvB,IAAI,EAAE;gBACJ,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,EAAE;gBACR,QAAQ,EAAE,WAAW;gBACrB,mBAAmB,EAAE,YAAY;gBACjC,SAAS,EAAE,YAAY;gBACvB,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,IAAI;gBAChB,qBAAqB,EAAE,IAAI;aAC5B;SACF,CAAC;QAEF,MAAM,CAAC,yCAAyC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,qCAAqC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAC5D,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,kBAAkB;YACxB,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,YAAY;SACxB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,MAAM,GAAG;YACb,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBAC1B,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,eAAe;gBACvB,MAAM,EAAE,EAAE;gBACV,GAAG,EAAE,IAAI;gBACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,MAAM,GAAkC;YAC5C,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,iBAAiB;YAC9B,YAAY,EAAE,MAAM;YACpB,SAAS,EAAE,YAAY;YACvB,MAAM;SACP,CAAC;QAEF,MAAM,qCAAqC,CAAC,QAAQ,EAAE,MAAM,EAAE,mBAAmB,EAAE;YACjF,GAAG,EAAE,kBAAkB;YACvB,GAAG,EAAE,EAAE;YACP,UAAU,EAAE,CAAC;SACd,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,gBAAgB,CAAC;YAClE,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC;YAClC,GAAG,EAAE,YAAY;YACjB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC,CAAC;QAC5F,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAsF,EAAE,CAAC;QACvG,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;gBAC3B,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG;gBACnB,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;gBACvC,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI;aACxG,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAkC;YAC5C,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS;YAClB,SAAS;YACT,MAAM,EAAE,wBAAwB,EAAE;YAClC,SAAS,EAAE,MAAM;SAClB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,0CAA0C,CAAC;YAC9D,KAAK,EAAE,YAAY;YACnB,MAAM;YACN,cAAc;YACd,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,cAAc;YAC5B,UAAU,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;SAC/C,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;YAC7E,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC/D,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,yBAAyB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAE/D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAO,CAAC,GAAG,CAAC,iBAAiB,gBAAgB,EAAE;gBAC7E,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;oBACxD,MAAM,EAAE,kBAAkB;iBAC3B;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;oBACxB,MAAM,EAAE,KAAK;oBACb,GAAG,EAAE,gBAAgB;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,YAAY;iBACpB,CAAC,CAAC,CAAC;QACN,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;IAEX,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,0CAA0C,CAAC,CAAC,CAAC;QAClG,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAClD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,oBAAoB,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjD,MAAM,QAAQ,GAAsF,EAAE,CAAC;QACvG,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;YAC1C,QAAQ,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;gBAC3B,GAAG,EAAE,GAAG,CAAC,GAAG,IAAI,GAAG;gBACnB,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,IAAI;gBACvC,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI;aACxG,CAAC,CAAC;YACH,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;aAC/D,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAChC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAkC;YAC5C,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,SAAS;YACpB,WAAW,EAAE,KAAK;YAClB,aAAa,EAAE,OAAO;YACtB,OAAO,EAAE,SAAS;YAClB,SAAS;YACT,MAAM,EAAE,wBAAwB,EAAE;YAClC,SAAS,EAAE,MAAM;SAClB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,0CAA0C,CAAC;YAC9D,KAAK,EAAE,kBAAkB;YACzB,MAAM;YACN,cAAc;YACd,UAAU,EAAE,OAAO;YACnB,YAAY,EAAE,cAAc;YAC5B,UAAU,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;YAC9C,YAAY,EAAE,EAAE;SACjB,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAO,CAAC,GAAG,CAAC,iBAAiB,gBAAgB,EAAE;gBAC7E,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE;oBACxD,MAAM,EAAE,kBAAkB;iBAC3B;aACF,CAAC,CAAC;YAEH,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAC7C,KAAK,EAAE,sEAAsE;aAC9E,CAAC,CAAC;YACH,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC;oBACxB,MAAM,EAAE,KAAK;oBACb,GAAG,EAAE,gBAAgB;oBACrB,IAAI,EAAE,qBAAqB;oBAC3B,KAAK,EAAE,kBAAkB;iBAC1B,CAAC,CAAC,CAAC;QACN,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,EAAE,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC,CAAC,CAAC"}