@pixelzx/genesis 2026.5.9-1 → 2026.5.9-2

package/dist/bash-tools.exec-runtime-BxYRaGWr.js

@@ -1,829 +0,0 @@
-import { n as emitDiagnosticEvent } from "./diagnostic-events-CD7YG9TK.js";
-import "./host-env-security-Bin-AhM4.js";
-import { a as logWarn } from "./logger-DxTAquCB.js";
-import { p as scopedHeartbeatWakeOptions } from "./session-key-EpIbK3Oz.js";
-import { i as normalizeDeliveryContext } from "./delivery-context.shared-Bddxu9DN.js";
-import { r as DEFAULT_EXEC_APPROVAL_TIMEOUT_MS, w as resolveExecApprovalAllowedDecisions } from "./exec-approvals-BD-zKkI1.js";
-import "./bash-tools.schemas-WpKXx_uT.js";
-import "./delivery-context-Bj_usnQD.js";
-import { r as generateSecureInt } from "./secure-random-mgghPL19.js";
-import { n as requestHeartbeatNow } from "./heartbeat-wake-gB5UjCS-.js";
-import { i as enqueueSystemEvent } from "./system-events-C6NkuE_K.js";
-import { c as readEnvInt, i as clampWithDefault, r as chunkString, t as buildDockerExecArgs } from "./bash-tools.shared-tw0qhD7i.js";
-import { n as getShellConfig, r as sanitizeBinaryOutput } from "./shell-utils-CyjjFCHc.js";
-import { n as findPathKey, r as mergePathPrepend } from "./path-prepend-DR8e0z7b.js";
-import { t as getProcessSupervisor } from "./supervisor-BwVXGbW1.js";
-import path from "node:path";
-//#region src/agents/session-slug.ts
-const SLUG_ADJECTIVES = [
-	"amber",
-	"briny",
-	"brisk",
-	"calm",
-	"clear",
-	"cool",
-	"crisp",
-	"dawn",
-	"delta",
-	"ember",
-	"faint",
-	"fast",
-	"fresh",
-	"gentle",
-	"glow",
-	"good",
-	"grand",
-	"keen",
-	"kind",
-	"lucky",
-	"marine",
-	"mellow",
-	"mild",
-	"neat",
-	"nimble",
-	"nova",
-	"oceanic",
-	"plaid",
-	"quick",
-	"quiet",
-	"rapid",
-	"salty",
-	"sharp",
-	"swift",
-	"tender",
-	"tidal",
-	"tidy",
-	"tide",
-	"vivid",
-	"warm",
-	"wild",
-	"young"
-];
-const SLUG_NOUNS = [
-	"atlas",
-	"basil",
-	"bison",
-	"bloom",
-	"breeze",
-	"canyon",
-	"cedar",
-	"claw",
-	"cloud",
-	"comet",
-	"coral",
-	"cove",
-	"crest",
-	"crustacean",
-	"daisy",
-	"dune",
-	"ember",
-	"falcon",
-	"fjord",
-	"forest",
-	"glade",
-	"gulf",
-	"harbor",
-	"haven",
-	"kelp",
-	"lagoon",
-	"lobster",
-	"meadow",
-	"mist",
-	"nudibranch",
-	"nexus",
-	"ocean",
-	"orbit",
-	"otter",
-	"pine",
-	"prairie",
-	"reef",
-	"ridge",
-	"river",
-	"rook",
-	"sable",
-	"sage",
-	"seaslug",
-	"shell",
-	"shoal",
-	"shore",
-	"slug",
-	"summit",
-	"tidepool",
-	"trail",
-	"valley",
-	"wharf",
-	"willow",
-	"zephyr"
-];
-function randomChoice(values, fallback) {
-	return values[generateSecureInt(values.length)] ?? fallback;
-}
-const SLUG_FALLBACK_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
-function createFallbackSuffix(length) {
-	let suffix = "";
-	for (let i = 0; i < length; i += 1) suffix += SLUG_FALLBACK_ALPHABET[generateSecureInt(36)] ?? "x";
-	return suffix;
-}
-function createSlugBase(words = 2) {
-	const parts = [randomChoice(SLUG_ADJECTIVES, "steady"), randomChoice(SLUG_NOUNS, "harbor")];
-	if (words > 2) parts.push(randomChoice(SLUG_NOUNS, "reef"));
-	return parts.join("-");
-}
-function createAvailableSlug(words, isIdTaken) {
-	for (let attempt = 0; attempt < 12; attempt += 1) {
-		const base = createSlugBase(words);
-		if (!isIdTaken(base)) return base;
-		for (let i = 2; i <= 12; i += 1) {
-			const candidate = `${base}-${i}`;
-			if (!isIdTaken(candidate)) return candidate;
-		}
-	}
-}
-function createSessionSlug$1(isTaken) {
-	const isIdTaken = isTaken ?? (() => false);
-	const twoWord = createAvailableSlug(2, isIdTaken);
-	if (twoWord) return twoWord;
-	const threeWord = createAvailableSlug(3, isIdTaken);
-	if (threeWord) return threeWord;
-	const fallback = `${createSlugBase(3)}-${createFallbackSuffix(3)}`;
-	return isIdTaken(fallback) ? `${fallback}-${Date.now().toString(36)}` : fallback;
-}
-//#endregion
-//#region src/agents/bash-process-registry.ts
-const DEFAULT_JOB_TTL_MS = 1800 * 1e3;
-const MIN_JOB_TTL_MS = 60 * 1e3;
-const MAX_JOB_TTL_MS = 10800 * 1e3;
-const DEFAULT_PENDING_OUTPUT_CHARS = 3e4;
-function clampTtl(value) {
-	if (!value || Number.isNaN(value)) return DEFAULT_JOB_TTL_MS;
-	return Math.min(Math.max(value, MIN_JOB_TTL_MS), MAX_JOB_TTL_MS);
-}
-let jobTtlMs = clampTtl(Number.parseInt(process.env.PI_BASH_JOB_TTL_MS ?? "", 10));
-const runningSessions = /* @__PURE__ */ new Map();
-const finishedSessions = /* @__PURE__ */ new Map();
-let sweeper = null;
-function isSessionIdTaken(id) {
-	return runningSessions.has(id) || finishedSessions.has(id);
-}
-function createSessionSlug() {
-	return createSessionSlug$1(isSessionIdTaken);
-}
-function addSession(session) {
-	runningSessions.set(session.id, session);
-	startSweeper();
-}
-function getSession(id) {
-	return runningSessions.get(id);
-}
-function getFinishedSession(id) {
-	return finishedSessions.get(id);
-}
-function deleteSession(id) {
-	runningSessions.delete(id);
-	finishedSessions.delete(id);
-}
-function appendOutput(session, stream, chunk) {
-	session.pendingStdout ??= [];
-	session.pendingStderr ??= [];
-	session.pendingStdoutChars ??= sumPendingChars(session.pendingStdout);
-	session.pendingStderrChars ??= sumPendingChars(session.pendingStderr);
-	const buffer = stream === "stdout" ? session.pendingStdout : session.pendingStderr;
-	const bufferChars = stream === "stdout" ? session.pendingStdoutChars : session.pendingStderrChars;
-	const pendingCap = Math.min(session.pendingMaxOutputChars ?? DEFAULT_PENDING_OUTPUT_CHARS, session.maxOutputChars);
-	buffer.push(chunk);
-	let pendingChars = bufferChars + chunk.length;
-	if (pendingChars > pendingCap) {
-		session.truncated = true;
-		pendingChars = capPendingBuffer(buffer, pendingChars, pendingCap);
-	}
-	if (stream === "stdout") session.pendingStdoutChars = pendingChars;
-	else session.pendingStderrChars = pendingChars;
-	session.totalOutputChars += chunk.length;
-	const aggregated = trimWithCap(session.aggregated + chunk, session.maxOutputChars);
-	session.truncated = session.truncated || aggregated.length < session.aggregated.length + chunk.length;
-	session.aggregated = aggregated;
-	session.tail = tail(session.aggregated, 2e3);
-}
-function drainSession(session) {
-	const stdout = session.pendingStdout.join("");
-	const stderr = session.pendingStderr.join("");
-	session.pendingStdout = [];
-	session.pendingStderr = [];
-	session.pendingStdoutChars = 0;
-	session.pendingStderrChars = 0;
-	return {
-		stdout,
-		stderr
-	};
-}
-function markExited(session, exitCode, exitSignal, status, exitReason) {
-	session.exited = true;
-	session.exitCode = exitCode;
-	session.exitSignal = exitSignal;
-	session.exitReason = exitReason;
-	session.tail = tail(session.aggregated, 2e3);
-	moveToFinished(session, status);
-}
-function markBackgrounded(session) {
-	session.backgrounded = true;
-}
-function moveToFinished(session, status) {
-	runningSessions.delete(session.id);
-	if (session.child) {
-		session.child.stdin?.destroy?.();
-		session.child.stdout?.destroy?.();
-		session.child.stderr?.destroy?.();
-		session.child.removeAllListeners();
-		delete session.child;
-	}
-	if (session.stdin) {
-		if (typeof session.stdin.destroy === "function") session.stdin.destroy();
-		else if (typeof session.stdin.end === "function") session.stdin.end();
-		try {
-			session.stdin.destroyed = true;
-		} catch {}
-		delete session.stdin;
-	}
-	if (!session.backgrounded) return;
-	finishedSessions.set(session.id, {
-		id: session.id,
-		command: session.command,
-		scopeKey: session.scopeKey,
-		startedAt: session.startedAt,
-		endedAt: Date.now(),
-		cwd: session.cwd,
-		status,
-		exitCode: session.exitCode,
-		exitSignal: session.exitSignal,
-		exitReason: session.exitReason,
-		aggregated: session.aggregated,
-		tail: session.tail,
-		truncated: session.truncated,
-		totalOutputChars: session.totalOutputChars
-	});
-}
-function tail(text, max = 2e3) {
-	if (text.length <= max) return text;
-	return text.slice(text.length - max);
-}
-function sumPendingChars(buffer) {
-	let total = 0;
-	for (const chunk of buffer) total += chunk.length;
-	return total;
-}
-function capPendingBuffer(buffer, pendingChars, cap) {
-	if (pendingChars <= cap) return pendingChars;
-	const last = buffer.at(-1);
-	if (last && last.length >= cap) {
-		buffer.length = 0;
-		buffer.push(last.slice(last.length - cap));
-		return cap;
-	}
-	while (buffer.length && pendingChars - buffer[0].length >= cap) {
-		pendingChars -= buffer[0].length;
-		buffer.shift();
-	}
-	if (buffer.length && pendingChars > cap) {
-		const overflow = pendingChars - cap;
-		buffer[0] = buffer[0].slice(overflow);
-		pendingChars = cap;
-	}
-	return pendingChars;
-}
-function trimWithCap(text, max) {
-	if (text.length <= max) return text;
-	return text.slice(text.length - max);
-}
-function listRunningSessions() {
-	return Array.from(runningSessions.values()).filter((s) => s.backgrounded);
-}
-function listFinishedSessions() {
-	return Array.from(finishedSessions.values());
-}
-function setJobTtlMs(value) {
-	if (value === void 0 || Number.isNaN(value)) return;
-	jobTtlMs = clampTtl(value);
-	stopSweeper();
-	startSweeper();
-}
-function pruneFinishedSessions() {
-	const cutoff = Date.now() - jobTtlMs;
-	for (const [id, session] of finishedSessions.entries()) if (session.endedAt < cutoff) finishedSessions.delete(id);
-}
-function startSweeper() {
-	if (sweeper) return;
-	sweeper = setInterval(pruneFinishedSessions, Math.max(3e4, jobTtlMs / 6));
-	sweeper.unref?.();
-}
-function stopSweeper() {
-	if (!sweeper) return;
-	clearInterval(sweeper);
-	sweeper = null;
-}
-//#endregion
-//#region src/agents/pty-dsr.ts
-const DSR_PATTERN = new RegExp(`${String.fromCharCode(27)}\\[\\??6n`, "g");
-function stripDsrRequests(input) {
-	let requests = 0;
-	return {
-		cleaned: input.replace(DSR_PATTERN, () => {
-			requests += 1;
-			return "";
-		}),
-		requests
-	};
-}
-function buildCursorPositionResponse(row = 1, col = 1) {
-	return `\x1b[${row};${col}R`;
-}
-//#endregion
-//#region src/agents/bash-tools.exec-runtime.ts
-const SMKX = "\x1B[?1h";
-const RMKX = "\x1B[?1l";
-/**
-* Detect cursor key mode from PTY output chunk.
-* Uses lastIndexOf to find the *last* toggle in the chunk.
-* Returns "application" if smkx is the last toggle, "normal" if rmkx is last,
-* or null if no toggle is found.
-*/
-function detectCursorKeyMode(raw) {
-	const lastSmkx = raw.lastIndexOf(SMKX);
-	const lastRmkx = raw.lastIndexOf(RMKX);
-	if (lastSmkx === -1 && lastRmkx === -1) return null;
-	return lastSmkx > lastRmkx ? "application" : "normal";
-}
-const DEFAULT_MAX_OUTPUT = clampWithDefault(readEnvInt("PI_BASH_MAX_OUTPUT_CHARS"), 2e5, 1e3, 2e5);
-const DEFAULT_PENDING_MAX_OUTPUT = clampWithDefault(readEnvInt("GENESIS_BASH_PENDING_MAX_OUTPUT_CHARS"), 3e4, 1e3, 2e5);
-const DEFAULT_PATH = process.env.PATH ?? "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-const DEFAULT_NOTIFY_SNIPPET_CHARS = 180;
-const DEFAULT_APPROVAL_TIMEOUT_MS = DEFAULT_EXEC_APPROVAL_TIMEOUT_MS;
-const DEFAULT_APPROVAL_REQUEST_TIMEOUT_MS = DEFAULT_APPROVAL_TIMEOUT_MS + 1e4;
-const DEFAULT_APPROVAL_RUNNING_NOTICE_MS = 1e4;
-const APPROVAL_SLUG_LENGTH = 8;
-function normalizeExecExitSignal(signal) {
-	if (signal === null) return;
-	return String(signal);
-}
-function emitExecProcessCompleted(params) {
-	const exitSignal = normalizeExecExitSignal(params.outcome.exitSignal);
-	emitDiagnosticEvent({
-		type: "exec.process.completed",
-		target: params.target,
-		mode: params.mode,
-		outcome: params.outcome.status,
-		durationMs: params.outcome.durationMs,
-		commandLength: params.command.length,
-		...params.sessionKey?.trim() ? { sessionKey: params.sessionKey.trim() } : {},
-		...typeof params.outcome.exitCode === "number" ? { exitCode: params.outcome.exitCode } : {},
-		...exitSignal ? { exitSignal } : {},
-		...params.outcome.status === "failed" ? {
-			timedOut: params.outcome.timedOut,
-			failureKind: params.outcome.failureKind
-		} : {}
-	});
-}
-function renderExecHostLabel(host) {
-	return host === "sandbox" ? "sandbox" : host === "gateway" ? "gateway" : "node";
-}
-function renderExecTargetLabel(target) {
-	return target === "auto" ? "auto" : renderExecHostLabel(target);
-}
-function isRequestedExecTargetAllowed(params) {
-	if (params.requestedTarget === params.configuredTarget) return true;
-	if (params.configuredTarget === "auto") {
-		if (params.sandboxAvailable && (params.requestedTarget === "gateway" || params.requestedTarget === "node")) return false;
-		return true;
-	}
-	return false;
-}
-function resolveExecTarget(params) {
-	const configuredTarget = params.configuredTarget ?? "auto";
-	const requestedTarget = params.requestedTarget ?? null;
-	if (requestedTarget && !isRequestedExecTargetAllowed({
-		configuredTarget,
-		requestedTarget,
-		sandboxAvailable: params.sandboxAvailable
-	})) {
-		const allowedConfig = Array.from(new Set(configuredTarget === "auto" && params.sandboxAvailable && (requestedTarget === "gateway" || requestedTarget === "node") ? [renderExecTargetLabel(requestedTarget)] : requestedTarget === "gateway" && !params.sandboxAvailable ? ["gateway", "auto"] : [renderExecTargetLabel(requestedTarget), "auto"])).join(" or ");
-		throw new Error(`exec host not allowed (requested ${renderExecTargetLabel(requestedTarget)}; configured host is ${renderExecTargetLabel(configuredTarget)}; set tools.exec.host=${allowedConfig} to allow this override).`);
-	}
-	const selectedTarget = requestedTarget ?? configuredTarget;
-	const resolvedTarget = params.elevatedRequested ? selectedTarget === "node" ? "node" : "gateway" : selectedTarget;
-	return {
-		configuredTarget,
-		requestedTarget,
-		selectedTarget: resolvedTarget,
-		effectiveHost: resolvedTarget === "auto" ? params.sandboxAvailable ? "sandbox" : "gateway" : resolvedTarget
-	};
-}
-function normalizeNotifyOutput(value) {
-	return value.replace(/\s+/g, " ").trim();
-}
-function compactNotifyOutput(value, maxChars = DEFAULT_NOTIFY_SNIPPET_CHARS) {
-	const normalized = normalizeNotifyOutput(value);
-	if (!normalized) return "";
-	if (normalized.length <= maxChars) return normalized;
-	const safe = Math.max(1, maxChars - 1);
-	return `${normalized.slice(0, safe)}…`;
-}
-function applyShellPath(env, shellPath) {
-	if (!shellPath) return;
-	const entries = shellPath.split(path.delimiter).map((part) => part.trim()).filter(Boolean);
-	if (entries.length === 0) return;
-	const pathKey = findPathKey(env);
-	const merged = mergePathPrepend(env[pathKey], entries);
-	if (merged) env[pathKey] = merged;
-}
-function maybeNotifyOnExit(session, status) {
-	if (!session.backgrounded || !session.notifyOnExit || session.exitNotified) return;
-	const sessionKey = session.sessionKey?.trim();
-	if (!sessionKey) return;
-	session.exitNotified = true;
-	const exitLabel = session.exitSignal ? `signal ${session.exitSignal}` : `code ${session.exitCode ?? 0}`;
-	const output = compactNotifyOutput(tail(session.tail || session.aggregated || "", 400));
-	if (status === "failed" && session.exitReason === "manual-cancel" && !output) return;
-	if (status === "completed" && !output && session.notifyOnExitEmptySuccess !== true) return;
-	enqueueSystemEvent(output ? `Exec ${status} (${session.id.slice(0, 8)}, ${exitLabel}) :: ${output}` : `Exec ${status} (${session.id.slice(0, 8)}, ${exitLabel})`, {
-		sessionKey,
-		deliveryContext: session.notifyDeliveryContext,
-		trusted: false
-	});
-	requestHeartbeatNow(scopedHeartbeatWakeOptions(sessionKey, {
-		reason: "exec-event",
-		coalesceMs: 0
-	}));
-}
-function createApprovalSlug(id) {
-	return id.slice(0, APPROVAL_SLUG_LENGTH);
-}
-function buildApprovalPendingMessage(params) {
-	let fence = "```";
-	while (params.command.includes(fence)) fence += "`";
-	const commandBlock = `${fence}sh\n${params.command}\n${fence}`;
-	const lines = [];
-	const allowedDecisions = params.allowedDecisions ?? resolveExecApprovalAllowedDecisions();
-	const decisionText = allowedDecisions.join("|");
-	const warningText = params.warningText?.trim();
-	if (warningText) lines.push(warningText, "");
-	lines.push(`Approval required (id ${params.approvalSlug}, full ${params.approvalId}).`);
-	lines.push(`Host: ${params.host}`);
-	if (params.nodeId) lines.push(`Node: ${params.nodeId}`);
-	lines.push(`CWD: ${params.cwd ?? "(node default)"}`);
-	lines.push("Command:");
-	lines.push(commandBlock);
-	lines.push("Mode: foreground (interactive approvals available).");
-	lines.push(allowedDecisions.includes("allow-always") ? "Background mode requires pre-approved policy (allow-always or ask=off)." : "Background mode requires an effective policy that allows pre-approval (for example ask=off).");
-	lines.push(`Reply with: /approve ${params.approvalSlug} ${decisionText}`);
-	if (!allowedDecisions.includes("allow-always")) lines.push("The effective approval policy requires approval every time, so Allow Always is unavailable.");
-	lines.push("If the short code is ambiguous, use the full id in /approve.");
-	return lines.join("\n");
-}
-function resolveApprovalRunningNoticeMs(value) {
-	if (typeof value !== "number" || !Number.isFinite(value)) return DEFAULT_APPROVAL_RUNNING_NOTICE_MS;
-	if (value <= 0) return 0;
-	return Math.floor(value);
-}
-function joinExecFailureOutput(aggregated, reason) {
-	return aggregated ? `${aggregated}\n\n${reason}` : reason;
-}
-function classifyExecFailureKind(params) {
-	if (params.isShellFailure) return params.exitCode === 127 ? "shell-command-not-found" : "shell-not-executable";
-	if (params.exitReason === "overall-timeout") return "overall-timeout";
-	if (params.exitReason === "no-output-timeout") return "no-output-timeout";
-	if (params.exitSignal != null) return "signal";
-	return "aborted";
-}
-function formatExecFailureReason(params) {
-	switch (params.failureKind) {
-		case "shell-command-not-found": return "Command not found";
-		case "shell-not-executable": return "Command not executable (permission denied)";
-		case "overall-timeout": return typeof params.timeoutSec === "number" && params.timeoutSec > 0 ? `Command timed out after ${params.timeoutSec} seconds. If this command is expected to take longer, re-run with a higher timeout (e.g., exec timeout=300). If it should keep running, start it with exec background=true or yieldMs so Genesis can register a pollable process session. Do not rely on shell backgrounding with a trailing &.` : "Command timed out. If this command is expected to take longer, re-run with a higher timeout (e.g., exec timeout=300). If it should keep running, start it with exec background=true or yieldMs so Genesis can register a pollable process session. Do not rely on shell backgrounding with a trailing &.";
-		case "no-output-timeout": return "Command timed out waiting for output";
-		case "signal": return `Command aborted by signal ${params.exitSignal}`;
-		case "aborted": return "Command aborted before exit code was captured";
-	}
-	throw new Error("Unsupported exec failure kind");
-}
-function buildExecExitOutcome(params) {
-	const exitCode = params.exit.exitCode ?? 0;
-	const isNormalExit = params.exit.reason === "exit";
-	const isShellFailure = exitCode === 126 || exitCode === 127;
-	if ((isNormalExit && !isShellFailure ? "completed" : "failed") === "completed") {
-		const exitMsg = exitCode !== 0 ? `\n\n(Command exited with code ${exitCode})` : "";
-		return {
-			status: "completed",
-			exitCode,
-			exitSignal: params.exit.exitSignal,
-			durationMs: params.durationMs,
-			aggregated: params.aggregated + exitMsg,
-			timedOut: false
-		};
-	}
-	const failureKind = classifyExecFailureKind({
-		exitReason: params.exit.reason,
-		exitCode,
-		isShellFailure,
-		exitSignal: params.exit.exitSignal
-	});
-	const reason = formatExecFailureReason({
-		failureKind,
-		exitSignal: params.exit.exitSignal,
-		timeoutSec: params.timeoutSec
-	});
-	return {
-		status: "failed",
-		exitCode: params.exit.exitCode,
-		exitSignal: params.exit.exitSignal,
-		durationMs: params.durationMs,
-		aggregated: params.aggregated,
-		timedOut: params.exit.timedOut,
-		failureKind,
-		reason: joinExecFailureOutput(params.aggregated, reason)
-	};
-}
-function buildExecRuntimeErrorOutcome(params) {
-	return {
-		status: "failed",
-		exitCode: null,
-		exitSignal: null,
-		durationMs: params.durationMs,
-		aggregated: params.aggregated,
-		timedOut: false,
-		failureKind: "runtime-error",
-		reason: joinExecFailureOutput(params.aggregated, String(params.error))
-	};
-}
-async function runExecProcess(opts) {
-	const startedAt = Date.now();
-	const sessionId = createSessionSlug();
-	const execCommand = opts.execCommand ?? opts.command;
-	const diagnosticTarget = opts.sandbox ? "sandbox" : "host";
-	const supervisor = getProcessSupervisor();
-	const shellRuntimeEnv = {
-		...opts.env,
-		GENESIS_SHELL: "exec"
-	};
-	const session = {
-		id: sessionId,
-		command: opts.command,
-		scopeKey: opts.scopeKey,
-		sessionKey: opts.sessionKey,
-		notifyDeliveryContext: normalizeDeliveryContext(opts.notifyDeliveryContext),
-		notifyOnExit: opts.notifyOnExit,
-		notifyOnExitEmptySuccess: opts.notifyOnExitEmptySuccess === true,
-		exitNotified: false,
-		child: void 0,
-		stdin: void 0,
-		pid: void 0,
-		startedAt,
-		cwd: opts.workdir,
-		maxOutputChars: opts.maxOutput,
-		pendingMaxOutputChars: opts.pendingMaxOutput,
-		totalOutputChars: 0,
-		pendingStdout: [],
-		pendingStderr: [],
-		pendingStdoutChars: 0,
-		pendingStderrChars: 0,
-		aggregated: "",
-		tail: "",
-		exited: false,
-		exitCode: void 0,
-		exitSignal: void 0,
-		truncated: false,
-		backgrounded: false,
-		cursorKeyMode: opts.usePty ? "unknown" : "normal"
-	};
-	addSession(session);
-	let updatesDisabled = false;
-	const emitUpdate = () => {
-		if (!opts.onUpdate) return;
-		if (session.backgrounded || session.exited || updatesDisabled) return;
-		const tailText = session.tail || session.aggregated;
-		const warningText = opts.warnings.length ? `${opts.warnings.join("\n")}\n\n` : "";
-		opts.onUpdate({
-			content: [{
-				type: "text",
-				text: warningText + (tailText || "")
-			}],
-			details: {
-				status: "running",
-				sessionId,
-				pid: session.pid ?? void 0,
-				startedAt,
-				cwd: session.cwd,
-				tail: session.tail
-			}
-		});
-	};
-	const handleStdout = (data) => {
-		const raw = data;
-		const mode = detectCursorKeyMode(raw);
-		if (mode) session.cursorKeyMode = mode;
-		const str = sanitizeBinaryOutput(raw);
-		for (const chunk of chunkString(str)) {
-			appendOutput(session, "stdout", chunk);
-			emitUpdate();
-		}
-	};
-	const handleStderr = (data) => {
-		const str = sanitizeBinaryOutput(data);
-		for (const chunk of chunkString(str)) {
-			appendOutput(session, "stderr", chunk);
-			emitUpdate();
-		}
-	};
-	const timeoutMs = typeof opts.timeoutSec === "number" && opts.timeoutSec > 0 ? Math.floor(opts.timeoutSec * 1e3) : void 0;
-	let sandboxFinalizeToken;
-	const spawnSpec = await (async () => {
-		if (opts.sandbox) {
-			const backendExecSpec = await opts.sandbox.buildExecSpec?.({
-				command: execCommand,
-				workdir: opts.containerWorkdir ?? opts.sandbox.containerWorkdir,
-				env: shellRuntimeEnv,
-				usePty: opts.usePty
-			});
-			sandboxFinalizeToken = backendExecSpec?.finalizeToken;
-			return {
-				mode: "child",
-				argv: backendExecSpec?.argv ?? ["docker", ...buildDockerExecArgs({
-					containerName: opts.sandbox.containerName,
-					command: execCommand,
-					workdir: opts.containerWorkdir ?? opts.sandbox.containerWorkdir,
-					env: shellRuntimeEnv,
-					tty: opts.usePty
-				})],
-				env: backendExecSpec?.env ?? process.env,
-				stdinMode: backendExecSpec?.stdinMode ?? (opts.usePty ? "pipe-open" : "pipe-closed")
-			};
-		}
-		const { shell, args: shellArgs } = getShellConfig();
-		const childArgv = [
-			shell,
-			...shellArgs,
-			execCommand
-		];
-		if (opts.usePty) return {
-			mode: "pty",
-			ptyCommand: execCommand,
-			childFallbackArgv: childArgv,
-			env: shellRuntimeEnv,
-			stdinMode: "pipe-open"
-		};
-		return {
-			mode: "child",
-			argv: childArgv,
-			env: shellRuntimeEnv,
-			stdinMode: "pipe-closed"
-		};
-	})();
-	let managedRun = null;
-	let usingPty = spawnSpec.mode === "pty";
-	const cursorResponse = buildCursorPositionResponse();
-	const onSupervisorStdout = (chunk) => {
-		if (usingPty) {
-			const { cleaned, requests } = stripDsrRequests(chunk);
-			if (requests > 0 && managedRun?.stdin) for (let i = 0; i < requests; i += 1) managedRun.stdin.write(cursorResponse);
-			handleStdout(cleaned);
-			return;
-		}
-		handleStdout(chunk);
-	};
-	try {
-		const spawnBase = {
-			runId: sessionId,
-			sessionId: opts.sessionKey?.trim() || sessionId,
-			backendId: opts.sandbox ? "exec-sandbox" : "exec-host",
-			scopeKey: opts.scopeKey,
-			cwd: opts.workdir,
-			env: spawnSpec.env,
-			timeoutMs,
-			captureOutput: false,
-			onStdout: onSupervisorStdout,
-			onStderr: handleStderr
-		};
-		managedRun = spawnSpec.mode === "pty" ? await supervisor.spawn({
-			...spawnBase,
-			mode: "pty",
-			ptyCommand: spawnSpec.ptyCommand
-		}) : await supervisor.spawn({
-			...spawnBase,
-			mode: "child",
-			argv: spawnSpec.argv,
-			stdinMode: spawnSpec.stdinMode
-		});
-	} catch (err) {
-		if (spawnSpec.mode === "pty") {
-			const warning = `Warning: PTY spawn failed (${String(err)}); retrying without PTY for \`${opts.command}\`.`;
-			logWarn(`exec: PTY spawn failed (${String(err)}); retrying without PTY for "${opts.command}".`);
-			opts.warnings.push(warning);
-			usingPty = false;
-			try {
-				managedRun = await supervisor.spawn({
-					runId: sessionId,
-					sessionId: opts.sessionKey?.trim() || sessionId,
-					backendId: "exec-host",
-					scopeKey: opts.scopeKey,
-					mode: "child",
-					argv: spawnSpec.childFallbackArgv,
-					cwd: opts.workdir,
-					env: spawnSpec.env,
-					stdinMode: "pipe-open",
-					timeoutMs,
-					captureOutput: false,
-					onStdout: handleStdout,
-					onStderr: handleStderr
-				});
-			} catch (retryErr) {
-				markExited(session, null, null, "failed");
-				maybeNotifyOnExit(session, "failed");
-				emitExecProcessCompleted({
-					command: opts.command,
-					mode: "child",
-					outcome: buildExecRuntimeErrorOutcome({
-						error: retryErr,
-						aggregated: session.aggregated.trim(),
-						durationMs: Date.now() - startedAt
-					}),
-					sessionKey: opts.sessionKey,
-					target: diagnosticTarget
-				});
-				throw retryErr;
-			}
-		} else {
-			markExited(session, null, null, "failed");
-			maybeNotifyOnExit(session, "failed");
-			emitExecProcessCompleted({
-				command: opts.command,
-				mode: spawnSpec.mode,
-				outcome: buildExecRuntimeErrorOutcome({
-					error: err,
-					aggregated: session.aggregated.trim(),
-					durationMs: Date.now() - startedAt
-				}),
-				sessionKey: opts.sessionKey,
-				target: diagnosticTarget
-			});
-			throw err;
-		}
-	}
-	session.stdin = managedRun.stdin;
-	session.pid = managedRun.pid;
-	const promise = managedRun.wait().then(async (exit) => {
-		updatesDisabled = true;
-		const durationMs = Date.now() - startedAt;
-		const outcome = buildExecExitOutcome({
-			exit,
-			aggregated: session.aggregated.trim(),
-			durationMs,
-			timeoutSec: opts.timeoutSec
-		});
-		markExited(session, exit.exitCode, exit.exitSignal, outcome.status, exit.reason);
-		maybeNotifyOnExit(session, outcome.status);
-		if (!session.child && session.stdin) session.stdin.destroyed = true;
-		if (opts.sandbox?.finalizeExec) await opts.sandbox.finalizeExec({
-			status: outcome.status,
-			exitCode: exit.exitCode ?? null,
-			timedOut: exit.timedOut,
-			token: sandboxFinalizeToken
-		});
-		emitExecProcessCompleted({
-			command: opts.command,
-			mode: usingPty ? "pty" : "child",
-			outcome,
-			sessionKey: opts.sessionKey,
-			target: diagnosticTarget
-		});
-		return outcome;
-	}).catch((err) => {
-		updatesDisabled = true;
-		markExited(session, null, null, "failed");
-		maybeNotifyOnExit(session, "failed");
-		const outcome = buildExecRuntimeErrorOutcome({
-			error: err,
-			aggregated: session.aggregated.trim(),
-			durationMs: Date.now() - startedAt
-		});
-		emitExecProcessCompleted({
-			command: opts.command,
-			mode: usingPty ? "pty" : "child",
-			outcome,
-			sessionKey: opts.sessionKey,
-			target: diagnosticTarget
-		});
-		return outcome;
-	});
-	return {
-		session,
-		startedAt,
-		pid: session.pid ?? void 0,
-		promise,
-		kill: () => {
-			managedRun?.cancel("manual-cancel");
-		},
-		disableUpdates: () => {
-			updatesDisabled = true;
-		}
-	};
-}
-//#endregion
-export { setJobTtlMs as C, markExited as S, getFinishedSession as _, DEFAULT_PENDING_MAX_OUTPUT as a, listRunningSessions as b, createApprovalSlug as c, renderExecTargetLabel as d, resolveApprovalRunningNoticeMs as f, drainSession as g, deleteSession as h, DEFAULT_PATH as i, isRequestedExecTargetAllowed as l, runExecProcess as m, DEFAULT_APPROVAL_TIMEOUT_MS as n, applyShellPath as o, resolveExecTarget as p, DEFAULT_MAX_OUTPUT as r, buildApprovalPendingMessage as s, DEFAULT_APPROVAL_REQUEST_TIMEOUT_MS as t, normalizeNotifyOutput as u, getSession as v, tail as w, markBackgrounded as x, listFinishedSessions as y };