@reason-machines/cli-linux-x64 0.2.419 → 0.2.420

package/bin/vm-hands/vm-hands-entry-lite-fpp2bs9y.js

@@ -1,452 +0,0 @@
-// @bun
-import{$c as G0,Pc as WQ,Qc as n9,Rc as g9,Sc as N0,Tc as B9,Uc as v0}from"./vm-hands-entry-lite-vsa7t6m9.js";import{ad as P$,bd as N8,dd as C8,ed as A$,fd as E$,hd as R$,md as S$}from"./vm-hands-entry-lite-j2ng164q.js";import{nd as NQ,od as CQ,pd as hZ,qd as vZ,rd as e9,sd as TQ}from"./vm-hands-entry-lite-2m5dwrdf.js";import{Ad as HZ,yd as o9,zd as a9}from"./vm-hands-entry-lite-f5xb489y.js";import{Mf as O9,Nf as p0,Of as X8,Pf as A0,Tf as L0,Xe as l$,af as u$}from"./vm-hands-entry-lite-tytfs183.js";import{ph as T$,vh as R9,wh as U8}from"./vm-hands-entry-lite-ntx8fdyq.js";import{Ch as W9,Lh as a$,Mh as o$,Oh as r$,Qh as b9,Rh as g$,Sh as y$,Th as D8,Wh as k9,di as q8,ei as _0,fi as M0,gi as f9,ni as _8,oi as t$,pi as h$,zh as tQ}from"./vm-hands-entry-lite-9qep7pka.js";import{Di as mZ}from"./vm-hands-entry-lite-28s7v15d.js";import{dj as D$,ej as j8}from"./vm-hands-entry-lite-26q3hbdc.js";import{Fj as D0}from"./vm-hands-entry-lite-714wspqb.js";import{Yj as G8,Zj as m9,ak as fZ}from"./vm-hands-entry-lite-6nwbqg37.js";import{bk as Y8,ck as c0,dk as J8,ek as d0,fk as G9,gk as s9,hk as l8,ik as h0,jk as f0,kk as m$,vk as X$}from"./vm-hands-entry-lite-feybcq63.js";import{Ak as dQ}from"./vm-hands-entry-lite-d98m00b8.js";import{Vk as _}from"./vm-hands-entry-lite-q8wkrzer.js";import{$k as cZ}from"./vm-hands-entry-lite-v4jtxgaj.js";import{cl as gZ,el as y9,fl as s$,hl as n$,il as i$,ll as yZ,ml as r0}from"./vm-hands-entry-lite-gxper06w.js";import{ql as j}from"./vm-hands-entry-lite-magmzx9c.js";import{rl as E3,wl as vQ}from"./vm-hands-entry-lite-ejkba2nk.js";import{readFileSync as q$,realpathSync as C$,statSync as eZ}from"fs";import{homedir as $4}from"os";import{dirname as Q4,isAbsolute as Z4,join as H9,sep as X4}from"path";var V6="--proxy",K6="--proxy-ca-file",Y4=262144;class Z0 extends Error{}function H8($){let Q;try{Q=new URL($)}catch{throw new Z0("The proxy must be a URL like https://proxy.example.com:3128.")}if(Q.protocol!=="https:"&&Q.protocol!=="http:")throw new Z0("The proxy URL must use the https or http scheme.");if(!Q.hostname)throw new Z0("The proxy URL must name a host.");if(Q.port!==""&&Number(Q.port)<1)throw new Z0("The proxy URL must use a port between 1 and 65535.");if(Q.pathname!==""&&Q.pathname!=="/"||Q.search||Q.hash)throw new Z0("The proxy URL must not carry a path, query, or fragment.");return Q.toString()}function W6($){let Q=new URL($.url),Z=Q.port||(Q.protocol==="https:"?"443":"80");return`${Q.hostname}:${Z}`}function J4($={}){let Q=$.home??$4(),Z=$.statePath??T$();return[Q4(Z),H9(Q,".ssh"),H9(Q,".aws"),H9(Q,".gnupg"),H9(Q,".kube"),H9(Q,"Library","Keychains")]}function G4($,Q){return Q===$||Q.startsWith($+X4)}function z4($,Q={}){if(!Z4($))throw new Z0("The proxy CA file must be an absolute path.");let Z,X,Y;try{Z=C$($);let K=eZ(Z);X=K.size,Y=K.isFile()}catch{throw new Z0("The proxy CA file does not exist or is not readable.")}if(!Y)throw new Z0("The proxy CA file must be a regular file.");if(X>Y4)throw new Z0("The proxy CA file must be 256 KB or smaller.");let J=J4(Q).flatMap((K)=>{try{let G=C$(K);return G===K?[K]:[K,G]}catch{return[K]}});for(let K of[$,Z])if(J.some((G)=>G4(G,K)))throw new Z0("The proxy CA file must not live inside a credential directory.");let z;try{z=q$(Z,"utf8")}catch{throw new Z0("The proxy CA file is not readable.")}if(!z.includes("-----BEGIN CERTIFICATE-----"))throw new Z0("The proxy CA file must be a PEM certificate bundle.");return Z}function B6($,Q={}){if(!$.proxyUrl)throw new Z0("A proxy URL is required.");let Z=H8($.proxyUrl),X=$.caFile===void 0?void 0:z4($.caFile,Q);return{version:R9,url:Z,...X===void 0?{}:{caFile:X}}}function F6($,Q=fetch){if(!$)return Q;let Z,X=!1;return(J,z)=>{if(!X){if($.caFile)try{Z=q$($.caFile,"utf8")}catch{throw new Z0(`The configured proxy CA file is not readable: ${$.caFile}`)}X=!0}let K={...z,proxy:$.url,...Z===void 0?{}:{tls:{ca:Z}}};return Q(J,K)}}import{createHash as V4}from"crypto";import{isAbsolute as O$,join as I$,relative as _$,resolve as w9,sep as x$}from"path";var S9=_.string().min(1).refine(O$,"absolute path required"),M8=_.strictObject({version:_.literal(1),apiOrigin:_.url(),channel:_.enum(["staging","production"]),stateDirectory:S9,workspaceRoot:S9,lifetime:_.enum(["persistent","ephemeral"]),executionMode:_.enum(["confined","host"]).default("confined"),name:_.string().min(1).max(160).default("Reason headless worker"),slots:_.number().int().min(1).max(4).default(1),shutdownGraceMs:_.number().int().min(0).max(300000).default(30000),proxy:_.strictObject({version:_.literal(R9),url:_.string().refine(($)=>{try{return H8($)===$}catch{return!1}},"invalid proxy URL"),caFile:S9.optional()}).optional(),userChrome:_.boolean().optional(),cloudSessions:_.literal(!0).optional(),localLogins:_.boolean().optional(),folders:_.array(S9).min(1).max(31).optional()}),K4=/^https:\/\/[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.trycloudflare\.com$/,q6=_.discriminatedUnion("channel",[M8,M8.extend({channel:_.literal("pr"),apiOrigin:_.string(),prEnvironment:_.string()}),M8.extend({channel:_.literal("local-qa"),apiOrigin:_.string()})]).superRefine(($,Q)=>{if($.channel==="local-qa"){if(!K4.test($.apiOrigin))Q.addIssue({code:"custom",message:"local QA worker requires an exact HTTPS trycloudflare.com quick-tunnel origin"})}else if($.channel==="pr"){let X=$.prEnvironment,Y=/^https:\/\/([a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)\.up\.railway\.app$/.exec($.apiOrigin),J=Y?.[1]?.match(/(?:^|-)pr-[0-9]+(?=-|$)/g)?.map((z)=>z.replace(/^-/,""));if(!X||/^pr-[1-9][0-9]*$/.exec(X)?.[0]!==X||Y?.[0]!==$.apiOrigin||J?.length!==1||J[0]!==X)Q.addIssue({code:"custom",message:"PR worker requires explicit prEnvironment and an exact same-PR HTTPS Railway origin"})}else{let X=new URL($.apiOrigin);if(X.origin!==$.apiOrigin||X.username||X.password||X.protocol!=="https:"&&!(X.protocol==="http:"&&j8(X.origin))||!j8(X.origin)&&!D$($.channel,X.origin))Q.addIssue({code:"custom",message:"API origin must match channel (or loopback)"})}if(!M9($.workspaceRoot,$.stateDirectory))Q.addIssue({code:"custom",message:"state and workspace must be disjoint"});let Z=$.folders??[];if(new Set([$.workspaceRoot,...Z]).size!==Z.length+1||Z.some((X)=>!M9(X,$.stateDirectory)))Q.addIssue({code:"custom",message:"folders must be distinct and disjoint from state"})});function W4($){return I$($.stateDirectory,`headless-${$.channel==="pr"?$.prEnvironment:$.channel}`)}function D6($,Q={},Z={}){let X=$.executionMode==="host"?"unsandboxed":"sandboxed";return{worker:Object.freeze({executionMode:X,runtimeDirectory:W4($),handsSlots:$.slots,...Z.ownComputer?{ownComputer:!0}:{},readiness:Object.freeze({...Q}),...Z.persistentTerminals?{persistentTerminals:!0}:{},...Z.probing?.length?{probing:Object.freeze([...Z.probing])}:{},...Z.displayVideo?{displayVideo:!0}:{},...Z.handsBrowser&&Q["hands.connect"]===!0?{handsBrowser:!0}:{},...Z.githubSignedIn===void 0?{}:{githubSignedIn:Z.githubSignedIn},...$.userChrome!==!1&&Z.userChrome?{userChrome:Z.userChrome}:{},...$.cloudSessions&&Q["automation.call.v1"]===!0?{cloudSessions:!0}:{}}),proxy:$.proxy??null}}function M9($,Q){if(H0(Q,$))return!1;return!H0($,Q)||D0(I$(x$,_$(w9($),w9(Q))))}function H0($,Q){let Z=_$(w9($),w9(Q));return Z===""||Z!==".."&&!Z.startsWith(`..${x$}`)&&!O$(Z)}function O6($){let{proxy:Q,userChrome:Z,cloudSessions:X,localLogins:Y,folders:J,...z}=$;return V4("sha256").update(JSON.stringify(z)).digest("hex")}var B4=4,F4=[2375,2376,9222,9229];function w$($){let Q=new Set(F4);for(let Z of $){let X=new URL(Z);Q.add(Number(X.port||(["https:","wss:"].includes(X.protocol)?443:80)))}return Q}function O0(){throw new j("preview_unavailable","The live Hands preview binding is unavailable or stale.")}var L4=60000;function b$($){let Q=new AbortController,Z=new Map,X=(G)=>JSON.stringify([G.jobId,G.port]);function Y(G){let W=$.authority.owner;if(Q.signal.aborted||!$.isCurrent()||$.expiresAtMs<=Date.now()||G.organization_id!==W.organization_id||G.user_id!==W.user_id||G.device_id!==W.device_id)O0()}function J(G){let W;try{W=$.environment.current()}catch{return null}return W.binding.target_generation===G.generation&&W.binding.target_fence_id===G.fenceId&&W.run_id===$.runId&&W.device_id===$.authority.owner.device_id&&W.root_id===$.authority.rootId?W:null}async function z(G,W,L){let B=await K(G,W,L);if(B!=="moved")return B;let V=await K(G,W,L);return V==="moved"?null:V}async function K(G,W,L){try{Y($.authority.owner);let B=$.identity();if(!B||L.aborted||G.expiresAtMs<=Date.now()||G.expiresAtMs>$.expiresAtMs)return null;let V=W.opened,H=V!==void 0&&B.generation>V.generation,U=J(B);if(H){if(U){if(U.revision<=V.revision||G.expiresAtMs>Date.parse(U.expires_at)||U.binding.target_revision!==V.attachmentRevision||U.binding.root_grant_revision!==V.grantRevision)return null;W.recoveringSinceMs=void 0}else if(Date.now()-(W.recoveringSinceMs??=Date.now())>L4)return null}else if(!U||G.expiresAtMs>Date.parse(U.expires_at)||V&&(B.generation!==V.generation||B.fenceId!==V.fenceId))return null;let F=await $.inspect(G.jobId,L),N=$.identity(),D=N&&J(N);Y($.authority.owner);let T=U&&{generation:B.generation,fenceId:B.fenceId,snapshotId:U.snapshot_id,revision:U.revision,attachmentRevision:U.binding.target_revision,grantRevision:U.binding.root_grant_revision},I=H?V:T;if(L.aborted||!N)return null;if(N.generation!==B.generation||N.fenceId!==B.fenceId||D?.snapshot_id!==U?.snapshot_id||D?.revision!==U?.revision)return"moved";let k=F.ok&&F.job.environmentSnapshotId!==void 0&&F.job.environmentRevision!==void 0?{snapshotId:F.job.environmentSnapshotId,revision:F.job.environmentRevision}:null;if(!F.ok||F.generation!==B.generation||!I||!k)return null;if((k.snapshotId!==I.snapshotId||k.revision!==I.revision)&&(H||!$.environment.carried(k.snapshotId,k.revision)))return null;if(!V&&B.generation===G.generation&&B.fenceId===G.fenceId)W.opened={...I,...k};return{executorLaunchId:$.executorLaunchId,job:F.job,binding:{organizationId:$.authority.owner.organization_id,userId:$.authority.owner.user_id,deviceId:$.authority.owner.device_id,rootId:$.authority.rootId,runId:$.runId,attachmentRevision:I.attachmentRevision,grantRevision:I.grantRevision,generation:I.generation,fenceId:I.fenceId,jobId:F.job.jobId,port:G.port,expiresAtMs:G.expiresAtMs}}}catch{return null}}return{async open(G,W,L){Y(W);let{binding:B,deviceRelayUrl:V}=A$(G);if(L.aborted||B.expiresAtMs<=Date.now()||B.expiresAtMs>Date.now()+P$.lifetimeMs||new URL(V).origin!==$.authority.relayOrigin)O0();let H=X(B),U=Z.get(H);if(U){if(!N8(U.binding,B)||U.relay!==V)O0();if(await U.opened,!await C8(()=>U.port.check())||L.aborted||U.abort.signal.aborted)O0();return{opened:!0,binding:B}}if(Z.size>=B4)O0();let F=new AbortController,N={},D=S$({binding:B,deniedPorts:$.authority.deniedPorts,readCurrentJob:()=>z(B,N,F.signal)}),T=()=>F.abort();if(L.addEventListener("abort",T,{once:!0}),Q.signal.addEventListener("abort",T,{once:!0}),L.aborted||Q.signal.aborted)T();let I=R$({binding:B,deviceRelayUrl:V,port:D,signal:F.signal}),k={binding:B,relay:V,abort:F,port:D,opened:I};Z.set(H,k);let y=()=>{if(L.removeEventListener("abort",T),Q.signal.removeEventListener("abort",T),Z.get(H)===k)Z.delete(H)};try{if((await I).closed.then(y),L.removeEventListener("abort",T),Y(W),F.signal.aborted||!await C8(()=>D.check()))O0();return{opened:!0,binding:B}}catch{F.abort(),y(),O0()}},async close(G,W){Y(W);let{binding:L}=E$(G),B=Z.get(X(L));if(!B||!N8(B.binding,L))O0();return B.abort.abort(),await B.opened.then((V)=>V.closed,()=>{return}),{closed:!0,binding:L}},dispose(){Q.abort();for(let G of Z.values())G.abort.abort();Z.clear()}}}import{WebSocket as T8}from"ws";var k$=($)=>("data"in $)?$.data.length:$.bytes,f$=2*g$;function s($){throw new j($,"The bound Hands terminal is unavailable or its outcome is unconfirmed.")}var i0=($)=>!["starting","running"].includes($.state);function k6($,Q,Z=Date.now()){let X=["relay_url","session_id","expires_at","cols","rows","pty","workspace"];if(Object.keys($).length!==X.length||Object.keys($).some((W)=>!X.includes(W))||!q8(Q)||!q8($.session_id)||typeof $.expires_at!=="string"||typeof $.relay_url!=="string"||$.relay_url.length>4096||![$.cols,$.rows].every((W)=>Number.isSafeInteger(W)&&Number(W)>=1&&Number(W)<=D8))s("invalid_pty_request");let Y=$.pty;if(!Y||typeof Y!=="object"||Array.isArray(Y))s("invalid_pty_request");let J=Y;if(Object.keys(J).length!==2||J.version!==1||!f9(J.jobId))s("invalid_pty_request");let z;try{z=new URL($.relay_url)}catch{return s("invalid_pty_request")}if(!["ws:","wss:"].includes(z.protocol)||z.username||z.password||z.hash||z.protocol==="ws:"&&!["127.0.0.1","[::1]","localhost"].includes(z.hostname))s("invalid_pty_request");let K=Date.parse($.expires_at);if(!Number.isSafeInteger(K)||K<=Z)s("invalid_pty_request");return{workspace:m$($.workspace)??s("invalid_pty_request"),session:{jobId:J.jobId,sessionId:$.session_id,operationId:Q,relayUrl:z.href,cols:Number($.cols),rows:Number($.rows),leaseExpiresAtMs:Math.min(K,Z+43200000)}}}async function v$($){let{session:Q,binding:Z}=$;if(Z.assertCurrent(),$.signal.aborted||Date.now()>=Q.leaseExpiresAtMs)s("cancelled");let X=new T8(Q.relayUrl,{followRedirects:!1,perMessageDeflate:!1,maxPayload:b9}),Y=new AbortController,J=()=>{},z=()=>{Y.abort(),J()};$.signal.addEventListener("abort",z,{once:!0});let K=setTimeout(z,Math.max(1,Q.leaseExpiresAtMs-Date.now())),G=[],W=0,L=0,B=0,V=!1,H=!1,U=!1,F,N,D,T=(M)=>{D=new j(M,"Bound terminal input was refused."),z()};X.on("error",()=>T("pty_relay_unavailable")),X.on("close",z),X.on("message",(M,C)=>{if(Y.signal.aborted)return;if(!H){T("pty_not_ready");return}let x=Array.isArray(M)?Buffer.concat(M):M instanceof ArrayBuffer?Buffer.from(M):M;if(x.length===0)return;let f=G.at(-1),R=C&&f!==void 0&&"data"in f&&f.data.length+x.length<=b9;if(x.length>b9||W+x.length>y$){T("pty_input_backpressure");return}if(R)f.data=Buffer.concat([f.data,x]);else if(C)G.push({data:Buffer.from(x)});else try{let S=JSON.parse(x.toString("utf8"));if(S&&S.t==="close"&&Object.keys(S).length===1){U=!0,z();return}if(!S||S.t!=="resize"||Object.keys(S).length!==3||![S.cols,S.rows].every((O)=>Number.isSafeInteger(O)&&O>=1&&O<=D8))throw Error("invalid_control");G.push({cols:S.cols,rows:S.rows,bytes:x.length})}catch{T("invalid_pty_control");return}W+=x.length,J()});function I(M){return h$(JSON.stringify({...Z.scope,version:1,sessionId:Q.sessionId,operationId:Q.operationId,job:{...M,output:[],pty:M.pty?{...M.pty,output:[]}:void 0}}))}function k(M){if(!M.ok)s(M.error);let C=M.job;if(M.generation!==Z.scope.generation||C.jobId!==Q.jobId||!C.pty||C.leaseExpiresAtMs>Q.leaseExpiresAtMs||C.process&&C.process.executorLaunchId!==Z.scope.executorLaunchId||C.process&&N&&(C.process.pid!==N.pid||C.process.processGroupId!==N.processGroupId)||C.state!=="starting"&&(C.environmentRevision!==Z.environment.revision||C.environmentSnapshotId!==Z.environment.snapshotId))s("pty_binding_changed");if(I(C),C.process)N??={...C.process};return C}async function y(M){Z.assertCurrent();let C=await Z.request(M,Y.signal);if(Z.assertCurrent(),Y.signal.aborted)s("cancelled");let x=k(C);if(x.inputSequence!==L)s("job_input_sequence");if(!i0(x)&&x.leaseExpiresAtMs<=Date.now())s("pty_binding_changed");return x}function q(M){if(Z.assertCurrent(),Y.signal.aborted||X.readyState!==T8.OPEN||X.bufferedAmount+Buffer.byteLength(M)>f$)s("pty_output_backpressure");X.send(M)}function b(M){if(M.firstCursor>B+1)B=M.firstCursor-1;for(let C of M.pty.output){if(C.cursor<=B)continue;if(C.cursor!==B+1)s("pty_output_gap");let x=Buffer.from(C.dataBase64,"base64");if(X.bufferedAmount+x.length>f$)return!1;q(x),B=C.cursor}if(B!==M.nextCursor)s("pty_output_gap");return!0}async function g(M,C){let x;try{await Promise.race([$.emit(M,C),new Promise((f,R)=>{x=setTimeout(()=>R(new j("pty_event_unavailable","Terminal metadata delivery timed out.")),2000)})])}finally{clearTimeout(x)}}async function A(){let M=AbortSignal.timeout(k9),C=Z.request({jobId:Q.jobId,action:"cancel",input:{}},M),x,f=new Promise((R,S)=>{if(x=()=>S(new j("pty_cleanup_unconfirmed","Terminal cleanup acknowledgement was not observed within authority.")),M.addEventListener("abort",x,{once:!0}),M.aborted)x()});try{let R=await Promise.race([C,f]);if(M.aborted)s("pty_cleanup_unconfirmed");return k(R)}finally{M.removeEventListener("abort",x)}}try{await new Promise((R,S)=>{let O=setTimeout(()=>{z(),S(new j("pty_relay_unavailable","Terminal pairing timed out."))},5000),w=()=>{clearTimeout(O),S(new j("cancelled","Terminal pairing was cancelled."))};if(Y.signal.addEventListener("abort",w,{once:!0}),X.once("open",()=>{clearTimeout(O),Y.signal.removeEventListener("abort",w),R()}),Y.signal.aborted)w()}),Z.assertCurrent(),V=!0,F=await y({jobId:Q.jobId,action:"start",input:{mode:"pty",cols:Q.cols,rows:Q.rows,leaseExpiresAtMs:Q.leaseExpiresAtMs}});let M=Date.now()+5000;while(F.state==="starting"){if(Date.now()>=M)s("pty_not_ready");await new Promise((R)=>setTimeout(R,25)),F=await y({jobId:Q.jobId,action:"inspect",input:{after:B}})}if(F.state!=="running"||F.inputSequence!==0||F.leaseExpiresAtMs<=Date.now())s("pty_not_ready");await g("pty.ready",I(F)),H=!0,q(JSON.stringify({t:"open",cols:F.pty.cols,rows:F.pty.rows,receipt:I(F)}));let C=!1,x=0,f=!1;while(!Y.signal.aborted){let R=F.firstCursor>B+1,S=b(F);if(i0(F)){if(S)break}else if(R)C=!0;else if(C&&S&&Date.now()>=x){C=!1,x=Date.now()+1000;let{cols:w,rows:d}=F.pty;for(let p of[{cols:w,rows:d>1?d-1:2},{cols:w,rows:d}]){if(i0(F))break;let e=++L;if(F=await y({jobId:Q.jobId,action:"resize",input:{sequence:e,...p}}),F.inputSequence!==e)s("job_input_sequence")}continue}let O=i0(F)||f?void 0:G.shift();if(O){W-=k$(O);let w=++L;try{F=await y("data"in O?{jobId:Q.jobId,action:"input",input:{sequence:w,dataBase64:O.data.toString("base64")}}:{jobId:Q.jobId,action:"resize",input:{sequence:w,cols:O.cols,rows:O.rows}})}catch(d){if(!(d instanceof j)||d.code!=="job_input_backpressure")throw d;L-=1,G.unshift(O),W+=k$(O),f=!0;continue}if(F.inputSequence!==w)s("job_input_sequence")}else if(await new Promise((w)=>{let d=setTimeout(w,f||!S?10:50);if(J=()=>{clearTimeout(d),w()},Y.signal.aborted||!f&&G.length)J()}),f=!1,J=()=>{},!Y.signal.aborted&&S)try{F=await y({jobId:Q.jobId,action:"inspect",input:{after:B}})}catch(w){if(!U||!(w instanceof j)||w.code!=="cancelled")throw w}}}catch(M){D??=M}finally{if(H=!1,G.length=0,clearTimeout(K),$.signal.removeEventListener("abort",z),z(),V&&(!F||!i0(F)))try{F=await A()}catch{F=void 0}try{if(!F||!i0(F)||F.pty?.cleanup!=="confirmed")s("pty_cleanup_unconfirmed");let M=I(F);if(X.readyState===T8.OPEN)await new Promise((C)=>{let x=setTimeout(C,500);X.send(JSON.stringify({t:"exit",code:F.exitCode,receipt:M}),()=>{clearTimeout(x),C()})});await g("pty.stopped",M)}catch(M){D??=M}X.terminate()}if(D)throw D;if($.signal.aborted)s("cancelled");if(!F)s("pty_cleanup_unconfirmed");return{receipt:I(F)}}import{createHash as U4,randomUUID as x8}from"crypto";import{spawnSync as e$}from"child_process";import{closeSync as c$,constants as O8,fstatSync as H4,fsyncSync as M4,lstatSync as N9,mkdirSync as j4,mkdtempSync as $Q,openSync as d$,readFileSync as N4,readdirSync as QQ,realpathSync as j9,rmSync as I8,unlinkSync as C4}from"fs";import{createConnection as T4}from"net";import{dirname as q4,join as k0,sep as D4}from"path";import{tmpdir as O4}from"os";var t=new Map,I0=new Map;function j0($,Q){return U4("sha256").update(JSON.stringify([$,Q])).digest("hex")}function a0($){try{j4($,{mode:448})}catch(Z){if(!(Z instanceof Error&&("code"in Z)&&Z.code==="EEXIST"))throw Z}let Q=N9($);if(!Q.isDirectory()||Q.isSymbolicLink()||!r0(Q)||j9($)!==$)throw new j("hands_jobs_unavailable","Hands job state must be a private canonical directory.")}function I4($){let Q;try{Q=N9($)}catch(Z){if(Z instanceof Error&&"code"in Z&&Z.code==="ENOENT")return!1;throw Z}return!Q.isDirectory()||Q.isSymbolicLink()||QQ($).length>0}function ZQ($){let Q=j0($.root,$.runId),Z=$.previousRuntimeDirectories?.find((z)=>I4(k0(z,"jobs",Q.slice(0,16))))??$.runtimeDirectory;a0(Z);let X=k0(Z,"jobs");a0(X);let Y=k0(X,Q.slice(0,16));if($.maxScopes!==void 0){let z=QQ(X);if(!Number.isSafeInteger($.maxScopes)||$.maxScopes<1||z.length>$.maxScopes||!z.includes(Q.slice(0,16))&&z.length>=$.maxScopes)throw new j("process_journal_capacity","Managed process receipt capacity is full; preserve uncertain jobs and reconcile their existing receipts before starting more work.")}a0(Y);let J=$Q(k0(s$(),"reason-j-"));try{return a0(J),{journalDirectory:Y,scopeId:Q,launchDirectory:J,socketPath:process.platform==="win32"?`\\\\.\\pipe\\reason-jobs-${x8()}`:k0(J,"control.sock"),disposeSocket:()=>I8(J,{recursive:!0,force:!0})}}catch(z){throw I8(J,{recursive:!0,force:!0}),z}}var _4=60000,x4=5000;function P4($){if(process.platform==="win32")return A4($);let Q=e$("ps",["-o","lstart=","-p",String($)],{encoding:"utf8",timeout:2000,env:{...process.env,LC_ALL:"C",LANG:"C"}}),Z=Q.status===0?/^\w{3} (\w{3}) +(\d{1,2}) (\d{2}):(\d{2}):(\d{2}) (\d{4})$/.exec(Q.stdout.trim()):null,X=Z?"JanFebMarAprMayJunJulAugSepOctNovDec".indexOf(Z[1]):-1;if(!Z||X<0||X%3!==0)return null;let Y=new Date(Number(Z[6]),X/3,Number(Z[2]),Number(Z[3]),Number(Z[4]),Number(Z[5])).getTime();return Number.isFinite(Y)?Y:null}function A4($){let Q=e$(n$("powershell"),["-NoProfile","-NonInteractive","-Command",`(Get-Process -Id ${$}).StartTime.ToUniversalTime().ToString('o')`],{encoding:"utf8",timeout:5000,windowsHide:!0,env:i$()}),Z=Q.status===0?Date.parse(Q.stdout.trim()):Number.NaN;return Number.isFinite(Z)?Z:null}function XQ($,Q={}){let Z=k0($.journalDirectory,"owner.lock"),X;try{X=d$(Z,O8.O_RDONLY|O8.O_NOFOLLOW)}catch{return null}try{let Y=H4(X);if(!Y.isFile()||Y.nlink!==1||!r0(Y)||Y.size>4096)return null;let J=null;try{J=JSON.parse(N4(X,"utf8"))}catch{}let z;if(J===null){if((Q.now??Date.now)()-Y.mtimeMs<_4)return null;z={reason:"never_written",executorLaunchId:null}}else{let{version:W,scopeId:L,pid:B,createdAtMs:V,executorLaunchId:H}=J;if(W!==1||L!==$.scopeId||typeof H!=="string"||typeof B!=="number"||!Number.isSafeInteger(B)||B<1||B===process.pid||typeof V!=="number"||!Number.isSafeInteger(V))return null;if(!(Q.exists??((F)=>{try{return process.kill(F,0),!0}catch(N){return!(N instanceof Error&&("code"in N)&&N.code==="ESRCH")}}))(B))z={reason:"owner_exited",executorLaunchId:H};else{let F=(Q.startedAtMs??P4)(B);if(F===null||F<=V+x4)return null;z={reason:"pid_reused",executorLaunchId:H}}}let K=N9(Z);if(K.dev!==Y.dev||K.ino!==Y.ino)return null;C4(Z);let G=d$($.journalDirectory,O8.O_RDONLY);try{M4(G)}finally{c$(G)}return z}catch{return null}finally{c$(X)}}function YQ($){let Q={...$,workspace:$.workspace&&Object.freeze({...$.workspace}),previewAuthority:$.previewAuthority&&Object.freeze({...$.previewAuthority,owner:Object.freeze({...$.previewAuthority.owner}),deniedPorts:new Set($.previewAuthority.deniedPorts)})},Z=j0(Q.root,Q.runId);if(t.has(Z)||Q.operationId!==void 0&&I0.has(Q.operationId))throw new j("hands_jobs_busy","The Session already has a live Hands job supervisor.");let X={binding:Q,key:Z,terminals:new Map};if(Q.previewAuthority&&Q.environment)X.previews=b$({authority:Q.previewAuthority,runId:Q.runId,expiresAtMs:Q.expiresAtMs,executorLaunchId:Q.executorLaunchId,environment:Q.environment,isCurrent:()=>t.get(X.key)===X,identity:()=>{try{return o0(Q)}catch{return null}},inspect:(Y,J)=>{if(t.get(X.key)!==X)throw new j("preview_unavailable","The Hands supervisor is no longer current.");return JQ(Q,{jobId:Y,action:"inspect",input:{after:0}},J)}});if(t.set(Z,X),Q.operationId!==void 0)I0.set(Q.operationId,X);return()=>{if(t.get(X.key)===X)t.delete(X.key);if(Q.operationId!==void 0&&I0.get(Q.operationId)===X)I0.delete(Q.operationId);X.previews?.dispose();for(let Y of X.terminals.values())Y.abort()}}var E4=5000,R4=20;async function o6($){let Q=(Y)=>{throw new j("hands_rebind_unavailable",Y)};if(!M0($.operationId)||!M0($.runId)||!M0($.fenceId)||!_0($.targetGeneration))Q("Reason sent an invalid Hands rebind.");let Z=I0.get($.operationId);if(!Z||Z.binding.root!==$.root)return Q("No live Hands supervisor owns this operation.");for(let Y=Date.now()+E4;;){if($.signal?.aborted)Q("The Hands rebind was cancelled.");if(I0.get($.operationId)!==Z)Q("The Hands supervisor is no longer current.");let J=null;try{J=o0(Z.binding)}catch{}if(J&&J.generation===$.targetGeneration&&J.fenceId===$.fenceId)break;if(J&&J.generation>$.targetGeneration||Date.now()>=Y)Q("The executor did not adopt this take.");await new Promise((z)=>setTimeout(z,R4))}if(I0.get($.operationId)!==Z||t.get(Z.key)!==Z)Q("The Hands supervisor is no longer current.");let X=j0($.root,$.runId);if(Z.key===X)return;if(t.has(X))Q("The taking run already has a live Hands job supervisor.");t.delete(Z.key);for(let Y of Z.terminals.values())Y.abort();Z.key=X,t.set(X,Z)}function r6($){let Q="operationId"in $?I0.get($.operationId):t.get(j0($.root,$.runId)),Z=Q&&Q.binding.root===$.root?Q.binding:void 0;if(!Z?.environment||Z.expiresAtMs<=Date.now())throw new j("environment_unavailable","No live Hands supervisor owns this environment.");return Z.environment.install($.payload)}async function t6($){let Q=t.get(j0($.root,$.runId));if(!Q?.previews||!$.owner)throw new j("preview_unavailable","No authenticated Hands supervisor owns this preview.");return Q.previews.open($.payload,$.owner,$.signal)}async function e6($){let Q=t.get(j0($.root,$.runId));if(!Q?.previews||!$.owner||$.signal.aborted)throw new j("preview_unavailable","No authenticated Hands supervisor owns this preview.");return Q.previews.close($.payload,$.owner)}async function $2($){let Q=j0($.root,$.runId),Z=t.get(Q),X=Z?.binding,Y=X?.runId,J=X?.previewAuthority,z=X?.environment,K=$.owner&&{...$.owner},G=$.authority&&{...$.authority},W=()=>{throw new j("pty_binding_unavailable","No current authenticated Hands scope owns this terminal.")};if(!Z||!X||!J||!z||!K||!G||!X.workspace)return W();let L=Object.freeze({...X.workspace}),B=o0(X),V=z.current(),H=()=>{if(t.get(Q)!==Z||K.organization_id!==J.owner.organization_id||K.user_id!==J.owner.user_id||K.device_id!==J.owner.device_id||$.deviceId!==J.owner.device_id||$.rootId!==J.rootId||f0($.workspace)!==f0(L))W();let F=o0(X),N=z.current();if(F.generation!==B.generation||F.fenceId!==B.fenceId||N.run_id!==Y||N.device_id!==$.deviceId||N.root_id!==$.rootId||N.snapshot_id!==V.snapshot_id||N.revision!==V.revision||N.binding.target_generation!==B.generation||N.binding.target_fence_id!==B.fenceId||G.device_id!==$.deviceId||G.binding!==N.binding.kind||G.target_revision!==N.binding.target_revision||G.root_grant_revision!==N.binding.root_grant_revision||G.target_generation!==B.generation||G.target_fence_id!==B.fenceId)W()};if(H(),new URL($.session.relayUrl).origin!==J.relayOrigin||Z.terminals.has($.session.jobId)||Z.terminals.size>=4)return W();let U=new AbortController;Z.terminals.set($.session.jobId,U);try{return await v$({session:{...$.session,leaseExpiresAtMs:Math.min($.session.leaseExpiresAtMs,B.expiresAtMs,Date.parse(V.expires_at))},signal:AbortSignal.any([$.signal,U.signal]),emit:$.emit,binding:{assertCurrent:H,environment:{revision:V.revision,snapshotId:V.snapshot_id},scope:{runId:$.runId,deviceId:$.deviceId,rootId:$.rootId,workspace:L,binding:V.binding.kind,targetRevision:V.binding.target_revision,rootGrantRevision:V.binding.root_grant_revision,generation:B.generation,fenceId:B.fenceId,executorLaunchId:B.executorLaunchId},request:(F,N)=>GQ(B,_8(JSON.stringify({...F,type:"job",version:2,generation:B.generation,id:x8()})),N)}})}finally{if(Z.terminals.get($.session.jobId)===U)Z.terminals.delete($.session.jobId)}}async function Q2($){if(f9($.payload.jobId))throw new j("pty_binding_required","PTY jobs require the bound terminal capability.");let Q=t.get(j0($.root,$.runId))?.binding;if(!Q||Q.expiresAtMs<=Date.now())throw new j("hands_jobs_unavailable","No live Hands supervisor owns this Session and root.");return JQ(Q,$.payload,$.signal)}var S4=1e4,w4=20,b4=o$/2,k4=a$/2,f4=($)=>$.output.reduce((Q,Z)=>Q+Z.text.length,0);async function JQ($,Q,Z){if(Object.keys(Q).some((W)=>!["jobId","action","input","waitForExitMs"].includes(W)))throw new j("invalid_payload","Unexpected job control field.");let{waitForExitMs:X,...Y}=Q;if(X!==void 0&&(Y.action!=="start"||typeof Y.input!=="object"||Y.input===null||!("script"in Y.input)||typeof X!=="number"||!Number.isSafeInteger(X)||X<1||X>S4))throw new j("invalid_payload","Only a script start may wait for its job, within its bound.");let J=(W)=>{let L=o0($);return GQ(L,_8(JSON.stringify({...W,type:"job",version:2,generation:L.generation,id:x8()})),Z)},z=await J(Y);if(X===void 0)return z;let K=Date.now()+X,G=z;while(G.ok&&["starting","running"].includes(G.job.state)&&G.job.output.length<b4&&f4(G.job)<k4&&!Z.aborted&&Date.now()<K){if(await new Promise((W)=>setTimeout(W,Math.min(w4,K-Date.now()))),Z.aborted)break;try{let W=await J({jobId:Y.jobId,action:"inspect",input:{after:0}});if(!W.ok)break;G=W}catch{break}}return G}function o0($){if($.expiresAtMs<=Date.now())throw new j("hands_jobs_unavailable","Hands authority expired.");let Q=$.readIdentity?$.readIdentity():$;if(!Q||!_0(Q.generation)||!M0(Q.fenceId)||Q.generation<$.generation||Q.generation===$.generation&&Q.fenceId!==$.fenceId)throw new j("hands_jobs_unavailable","The live Hands fencing identity could not be verified.");return $.generation=Q.generation,$.fenceId=Q.fenceId,{...$}}function GQ($,Q,Z){if(Z.aborted)return Promise.reject(new j("cancelled","Job control was cancelled."));return new Promise((X,Y)=>{let J=T4($.socketPath),z="",K=!1,G,W=(B,V)=>{if(K)return;if(K=!0,clearTimeout(G),Z.removeEventListener("abort",L),J.destroy(),B)Y(B);else X(V)},L=()=>W(new j("cancelled","Job control waiter cancelled; inspect before retrying mutations."));Z.addEventListener("abort",L,{once:!0}),J.setEncoding("utf8"),G=setTimeout(()=>W(new j("hands_job_result_unknown","Job control timed out; inspect before retrying mutations.")),Math.min(1e4,Math.max(1,$.expiresAtMs-Date.now()))),J.on("error",()=>W(new j("hands_job_result_unknown","Hands job control connection failed."))),J.once("connect",()=>J.write(JSON.stringify({version:1,scopeId:$.scopeId,fenceId:$.fenceId,executorLaunchId:$.executorLaunchId,request:Q})+`
-`)),J.on("data",(B)=>{if(z+=B,Buffer.byteLength(z)>r$)W(new j("hands_job_result_unknown","Hands job result exceeded its bound."))}),J.once("end",()=>{if(Date.now()>=$.expiresAtMs){W(new j("hands_job_result_unknown","Hands authority expired before the result was acknowledged."));return}try{let B=t$(z.trim());if(B.id!==Q.id||B.generation!==$.generation||B.ok&&B.job.jobId!==Q.jobId)throw Error("identity");W(void 0,B)}catch{W(new j("hands_job_result_unknown","Hands job response identity or shape was invalid."))}}),J.once("close",()=>{if(!K)W(new j("hands_job_result_unknown","Hands job control closed before an acknowledged result."))})})}function p$($){let Q=j9($.root),Z=$.authority,X=Date.parse($.leaseUntil),Y=()=>{if($.signal.throwIfAborted(),!Number.isFinite(X)||X<=Date.now())throw Error("local_device_gh_lease_expired")};if(Y(),Z.readOnly&&Z.generation===null)return{root:Q,readOnly:!0,signal:$.signal,deadlineMs:X,assertCurrent:Y};let J=j0(Q,$.runId),z=t.get(J),K=z?.binding;if(!K?.environment||!K.workspace||K.localGithubConfinement!==!0)throw Error("local_device_gh_confinement_unavailable");let G=K.environment.current(),W=()=>{Y();let B=K.environment.current(),V=o0(K);if(t.get(J)!==z||B.github_auth!=="local_gh"||B.run_id!==K.runId||Z.runId!==$.runId||B.device_id!==Z.deviceId||B.root_id!==Z.rootId||String(B.binding.root_grant_revision)!==Z.rootRevision||B.binding.target_generation!==Z.generation||B.binding.target_fence_id!==Z.fenceId||V.generation!==Z.generation||V.fenceId!==Z.fenceId||B.snapshot_id!==G.snapshot_id||B.revision!==G.revision)throw Error("local_device_gh_authority_changed")};W();let L=m9(Q,K.workspace);return{root:L.boundary,signal:$.signal,deadlineMs:X,privateDirectory:q4(K.environment.path),repoPath:L.path,readOnly:Z.readOnly,forbiddenSecretValues:Object.values(G.variables),secretNames:(B)=>Object.entries(G.variables).filter(([,V])=>V.trim()===B.trim()).map(([V])=>`variable ${V}`),assertCurrent:W}}async function Z2($,Q){let Z=l$.parse($.request),X=u$.parse($.authority);if(X.contributorRefresh&&Z.kind==="read"&&X.readOnly)return Q(p$($));let Y=Boolean(X.contributorRefresh);if(Y&&(X.merge||Z.kind!=="pr_mutation"||Z.mutation.action!=="edit"||typeof Z.mutation.body!=="string"||Z.mutation.title!==void 0||Z.mutation.base!==void 0||X.readOnly||X.runId!==$.runId||X.repoFullName!==Z.repoFullName))throw Error("local_device_gh_contributor_refresh_authority_invalid");if(Z.kind!=="pr_merge"&&!Y){if(X.merge)throw Error("local_device_gh_merge_authority_invalid");return Q(p$($))}if(!Y&&(!X.merge||X.readOnly||X.runId!==$.runId||X.repoFullName!==Z.repoFullName||X.merge.source==="agent"&&(X.generation===null||X.fenceId===null)))throw Error("local_device_gh_merge_authority_invalid");let J=j9($.root),z=N9(J),K=Date.parse($.leaseUntil);if(!Number.isFinite(K)||K<=Date.now())throw Error("local_device_gh_lease_expired");let G=j9(O4());if(G===J||G.startsWith(J+D4))throw Error("local_device_gh_private_scope_unavailable");let W=$Q(k0(G,"reason-gh-merge-"));try{a0(W);let L=()=>{if($.signal.throwIfAborted(),Date.now()>=K)throw Error("local_device_gh_lease_expired");let B=N9($.root);if(B.isSymbolicLink()||B.dev!==z.dev||B.ino!==z.ino||j9($.root)!==J)throw Error("local_device_gh_authority_changed");a0(W)};return L(),await Q({root:J,readOnly:!1,privateDirectory:W,forbiddenSecretValues:[],signal:$.signal,deadlineMs:K,assertCurrent:L})}finally{I8(W,{recursive:!0,force:!0})}}var KQ=43200000;function t0($){return Number.isSafeInteger($)&&Math.abs($)<=8640000000000000?$:null}function zQ($){return $!==null&&typeof $==="object"&&!Array.isArray($)}function VQ($,Q){return Object.keys($).length===Q.length&&Q.every((Z)=>Object.hasOwn($,Z))}function Y2($){if(!zQ($)||!VQ($,["version","outcome","clock_source","validation_now_ms","expiry_ms","remaining_ms","maximum_lifetime_ms","cli_artifact"])||$.version!==1||$.maximum_lifetime_ms!==43200000||typeof $.outcome!=="string"||!["accepted","parse","noncanonical","expired","over_cap"].includes($.outcome)||typeof $.clock_source!=="string"||!["date_now","injected"].includes($.clock_source))return null;for(let X of["validation_now_ms","expiry_ms"]){let Y=$[X];if(Y!==null&&(typeof Y!=="number"||t0(Y)===null))return null}if($.remaining_ms!==null&&(typeof $.remaining_ms!=="number"||!Number.isSafeInteger($.remaining_ms)))return null;let Q=typeof $.expiry_ms==="number"&&typeof $.validation_now_ms==="number"?$.expiry_ms-$.validation_now_ms:null;if($.remaining_ms!==(Q!==null&&Number.isSafeInteger(Q)?Q:null))return null;if($.outcome==="parse"&&$.expiry_ms!==null)return null;if($.outcome!=="parse"&&$.expiry_ms===null)return null;if($.outcome==="expired"&&!(typeof Q==="number"&&Q<=0))return null;if($.outcome==="over_cap"&&!(typeof Q==="number"&&Q>43200000))return null;if($.outcome==="accepted"&&!(typeof Q==="number"&&Q>0&&Q<=43200000))return null;let Z=$.cli_artifact;if(!zQ(Z)||!VQ(Z,["kind","status","sha256","observed_at_ms"])||Z.observed_at_ms!==null&&(typeof Z.observed_at_ms!=="number"||t0(Z.observed_at_ms)===null))return null;if(Z.kind==="entrypoint_file"){if(Z.status!=="observed"||typeof Z.sha256!=="string"||!/^[a-f0-9]{64}$/.test(Z.sha256)||Z.observed_at_ms===null)return null}else if(Z.kind!=="unavailable"||Z.sha256!==null||typeof Z.status!=="string"||!["unsupported_entrypoint","read_failed","file_changed","size_limit","time_limit"].includes(Z.status))return null;return $}var P8=_.strictObject({kind:_.enum(["workspace_source","mcp_control"]),target_revision:_.number().int().nonnegative(),root_grant_revision:_.number().int().positive()}),BQ=new RegExp(g9.tokenPattern),m4=_.strictObject({token_url:_.url().max(2048),request_token:_.string().min(1).max(8192).regex(BQ),aws_credentials_url:_.url().max(2048).nullable()});function FQ($,Q){let Z=(X,Y)=>{try{let J=new URL(X);return J.origin===new URL(Q).origin&&J.pathname===Y&&!J.username&&!J.password&&!J.search&&!J.hash}catch{return!1}};if(!BQ.test($.request_token)||!Z($.token_url,g9.tokenPath)||$.aws_credentials_url!==null&&!Z($.aws_credentials_url,g9.awsPath))return null;return{REASON_OIDC_TOKEN_URL:$.token_url,REASON_OIDC_REQUEST_TOKEN:$.request_token,...$.aws_credentials_url!==null?{AWS_CONTAINER_CREDENTIALS_FULL_URI:$.aws_credentials_url,AWS_CONTAINER_AUTHORIZATION_TOKEN:$.request_token}:{}}}function LQ($){return new TextEncoder().encode($).byteLength}function g4($){return LQ(JSON.stringify($)+`
-`)}var UQ=_.strictObject({version:_.literal(1),snapshot_id:_.uuid(),revision:_.number().int().positive(),run_id:_.string().min(1).max(160),device_id:_.uuid(),root_id:_.uuid(),binding:P8.extend({target_generation:_.number().int().positive(),target_fence_id:_.uuid()}),expires_at:_.iso.datetime({offset:!0}),variables:_.record(_.string().max(128).regex(WQ),_.string().refine(($)=>!$.includes("\x00")&&LQ($)<=N0.valueBytes)).refine(($)=>Object.keys($).length<=N0.variables),github_auth:_.literal("local_gh").optional(),git:_.strictObject({base_url:_.url().max(2048),token:_.string().min(1).max(4096).regex(/^[A-Za-z0-9._~-]+$/),expires_at:_.iso.datetime({offset:!0})}).nullable(),cloud_access:m4.optional()}).refine(($)=>$.github_auth!=="local_gh"||$.git===null,"conflicting git authority").refine(($)=>g4($)<=N0.snapshotBytes,"snapshot too large");import{spawn as y4}from"child_process";import{basename as h4,isAbsolute as F2}from"path";var v4=0,HQ=120000,MQ=15000,c4=65536;function A8($=process.execPath,Q=process.argv[1]){let Z=h4($),X=(Z.startsWith("bun")||Z.startsWith("node"))&&typeof Q==="string"&&Q.length>0;return{command:$,prefix:X?[Q]:[]}}function L2($={}){let{command:Q,prefix:Z}=A8($.executablePath,$.sourceEntrypoint),X=$.spawnProcess??y4,Y=$.now??Date.now,J=null,z=0,K=!1,G=(L)=>{try{L.kill("SIGKILL")}catch{}},W=()=>{if(K)return;if(J&&Y()-z<HQ-MQ)return;if(J){let B=J;J=null,G(B)}let L;try{L=X(Q,[...Z,"__device","__hands-worker","--handoff-fd",String(v4)],{cwd:"/",env:{PATH:process.env.PATH??"/usr/local/bin:/usr/bin:/bin"},shell:!1,stdio:["pipe","ignore","pipe"]})}catch{return}J=L,z=Y(),L.on("error",()=>{if(J===L)J=null}),L.once("exit",(B,V)=>{if(J!==L)return;J=null,$.log?.("hands.worker_prespawn_exited",{exit_code:B,exit_signal:V})}),$.log?.("hands.worker_prespawned",{pid:L.pid??null})};return{arm:W,take(L){let B=J;if(!B||K)return null;let V=L.args.at(-1),H=L.options.env,U=L.options.cwd,F=[...Z,"__device","__hands-worker","--config"];if(L.command!==Q||L.args.length!==F.length+1||F.some((I,k)=>L.args[k]!==I)||typeof V!=="string"||!H||typeof U!=="string"||L.options.shell||JSON.stringify(L.options.stdio)!==JSON.stringify(["ignore","ignore","pipe"]))return null;J=null;let N=B.stdin,D={configPath:V,cwd:U,env:Object.fromEntries(Object.entries(H).filter((I)=>typeof I[1]==="string"))},T=JSON.stringify(D);if(B.exitCode!==null||B.signalCode!==null||!N||N.destroyed||Y()-z>=HQ-MQ||Buffer.byteLength(T,"utf8")>c4)return G(B),null;return N.on("error",()=>{return}),N.end(T),B.once("exit",()=>{W()}),$.log?.("hands.worker_prespawn_taken",{pid:B.pid??null}),B},adopt(L){L.once("exit",()=>{W()})},close(){if(K=!0,J)G(J);J=null}}}import{accessSync as n4,constants as i4,statSync as a4}from"fs";import{homedir as o4,tmpdir as r4,userInfo as t4}from"os";import{delimiter as e4,win32 as $3}from"path";var d4=new Set(["ALL_PROXY","BUN_BE_BUN","BUN_OPTIONS","CURL_CA_BUNDLE","GIT_SSL_CAINFO","GRPC_DEFAULT_SSL_ROOTS_FILE_PATH","HTTPS_PROXY","HTTP_PROXY","NO_PROXY","NODE_EXTRA_CA_CERTS","NODE_OPTIONS","NODE_TLS_REJECT_UNAUTHORIZED","REQUESTS_CA_BUNDLE","SSLKEYLOGFILE","SSL_CERT_DIR","SSL_CERT_FILE","all_proxy","http_proxy","https_proxy","no_proxy"]);var p4=["BUN_CONFIG_","BUN_INSPECT","DYLD_","NODE_DEBUG"],l4=new Set(["BUN_INSTALL"]);var u4=/^--(?:max-old-space-size|max-semi-space-size|stack-size)=\d{1,9}$/;function s4($){return($??"").split(/\s+/).filter(Boolean).every((Q)=>u4.test(Q.replaceAll("_","-")))}function jQ($){return Object.keys($).filter((Q)=>d4.has(Q)&&!(Q==="NODE_OPTIONS"&&s4($[Q]))||p4.some((Z)=>Q.startsWith(Z))||Q.startsWith("BUN_")&&!l4.has(Q)).sort()}var Q3=new Set(["HOME","PATH","PWD","OLDPWD","SHLVL","_","TMPDIR","TMP","TEMP","SHELL","BASH_ENV","ENV","ZDOTDIR","PROMPT_COMMAND","IFS","CDPATH","GLOBIGNORE","SHELLOPTS","BASHOPTS","NODE_PATH"]),Z3=/^(?:ARA_|REASON_|PI_|GIT_|GH_|GITHUB_|LD_|DYLD_|BUN_|BASH_FUNC_|SSH_)/,X3=/TOKEN|SECRET|PASSW|PASSPHRASE|CREDENTIAL|API_?KEY|ACCESS_?KEY|PRIVATE_?KEY|AUTH/i,Y3=/^[A-Za-z_][A-Za-z0-9_]*$/;function qQ($=process.env){let Q=(Y)=>{if(!(process.platform==="win32"?$3.isAbsolute(Y):Y.startsWith("/"))||/[\0\r\n]/.test(Y)||Y.length>32768)throw Error("invalid_host_execution_environment");return Y};if($.PATH!==void 0&&(/[\0\r\n]/.test($.PATH)||$.PATH.length>32768))throw Error("invalid_host_execution_environment");let Z=new Set(jQ($)),X=Object.fromEntries(Object.entries($).filter((Y)=>{let[J,z]=Y;return typeof z==="string"&&z.length<=32768&&!z.includes("\x00")&&J.length<=128&&Y3.test(J)&&!Z.has(J)&&!Q3.has(J)&&!Z3.test(J)&&!X3.test(J)}).sort(([Y],[J])=>Y.localeCompare(J)).slice(0,512));return{home:Q($.HOME||(process.platform==="win32"?$.USERPROFILE:void 0)||o4()),path:((Y)=>process.platform==="win32"?TQ(Y):Y)(CQ($.PATH??"").join(e4)||NQ),temporaryDirectory:Q($.TMPDIR||$.TMP||$.TEMP||r4()),variables:X}}function DQ($=process.env,Q=()=>t4().shell){if(process.platform==="win32")return y9();let Z=(Y)=>{if(!Y||!/^\/[A-Za-z0-9._/-]*\/(?:bash|zsh)$/.test(Y))return!1;try{return n4(Y,i4.X_OK),a4(Y).isFile()}catch{return!1}};if(Z($.SHELL))return $.SHELL;let X;try{X=Q()}catch{X=void 0}return Z(X)?X:"/bin/zsh"}import{readdir as J3}from"fs/promises";var G3=15000;function z3($){let Q=$ instanceof Error&&"code"in $?$.code:null;return Q==="EPERM"||Q==="EACCES"}function V3($){return new j("folder_access_denied",`macOS blocked Reason from opening ${$}. Allow Reason in System Settings \u203A Privacy & Security \u203A Files and Folders `+"(or Full Disk Access), then try again.")}async function OQ($,{timeoutMs:Q=G3,open:Z=(X)=>J3(X)}={}){let X,Y=new Promise((J)=>{X=setTimeout(()=>J("pending"),Q)});try{if(await Promise.race([Z($).then(()=>"open"),Y])==="pending")throw new j("folder_access_pending",`macOS is asking whether Reason may open ${$}. Answer the prompt on this Mac, then try again.`)}catch(J){if(z3(J))throw V3($);if(J instanceof j)throw J}finally{clearTimeout(X)}}import{chmodSync as c3,closeSync as d3,constants as y8,fstatSync as p3,lstatSync as nQ,openSync as l3,readSync as u3,realpathSync as h8,unlinkSync as s3}from"fs";import{lookup as n3}from"dns/promises";import{createRequire as i3}from"module";import{request as a3}from"http";import{request as o3}from"https";import y0 from"net";import{platform as eQ}from"os";import{basename as r3,extname as t3,isAbsolute as iQ,relative as v8,resolve as Z9,sep as c8}from"path";var IQ=String.raw`
-async (roots) => {
-  "use strict";
-  const version = 2;
-  if (globalThis.__araHandsRepl && globalThis.__araHandsRepl.version === version) return;
-  const hostCall = globalThis.__araHandsRpc;
-  if (typeof hostCall !== "function") throw new Error("Reason Hands browser bridge is not installed");
-  try { delete globalThis.__araHandsRpc; } catch (error) {
-    if (!(error instanceof TypeError)) throw error;
-  }
-
-  const handles = new WeakMap();
-  const bytes = new WeakMap();
-  const routes = new WeakMap();
-  const derived = new Set([
-    "browser", "context", "frame", "frameLocator", "getByAltText", "getByLabel",
-    "getByPlaceholder", "getByRole", "getByTestId", "getByText", "getByTitle",
-    "contentFrame", "locator", "nth", "mainFrame", "newContext", "newPage", "opener", "owner", "page", "parentFrame",
-  ]);
-  const locatorMethods = new Set([
-    "all", "allInnerTexts", "allTextContents", "and", "ariaSnapshot", "blur",
-    "boundingBox", "check", "clear", "click", "contentFrame", "count", "dblclick",
-    "dragTo", "evaluate", "evaluateAll", "fill", "filter", "focus", "getAttribute",
-    "hover", "innerHTML", "innerText", "inputValue", "isChecked", "isEditable",
-    "isEnabled", "isHidden", "isVisible", "or", "page", "press", "pressSequentially",
-    "screenshot", "scrollIntoViewIfNeeded", "selectOption", "setInputFiles", "tap",
-    "textContent", "type", "uncheck", "waitFor",
-  ]);
-  const pageMethods = new Set([
-    "addInitScript", "addScriptTag", "addStyleTag", "bringToFront", "close", "content",
-    "emulateMedia", "evaluate", "frameLocator", "frames", "goBack", "goForward", "goto",
-    "isClosed", "pdf", "reload", "route", "screenshot", "captureScreenshot", "selectOption", "setContent",
-    "setDefaultNavigationTimeout", "setDefaultTimeout", "setExtraHTTPHeaders", "setInputFiles",
-    "setViewportSize", "title", "unroute", "url", "viewportSize", "waitForFunction",
-    "waitForLoadState", "waitForNavigation", "waitForTimeout", "waitForURL",
-  ]);
-  const contextMethods = new Set([
-    "startRecording", "stopRecording",
-    "addCookies", "addInitScript", "clearCookies", "clearPermissions", "close", "cookies",
-    "grantPermissions", "pages", "route", "setDefaultNavigationTimeout", "setDefaultTimeout",
-    "setExtraHTTPHeaders", "setGeolocation", "setHTTPCredentials", "setOffline",
-    "setViewportSize", "storageState", "unroute", "viewportSize",
-  ]);
-  const browserMethods = new Set(["close", "contexts", "isConnected", "version"]);
-  const frameMethods = new Set([
-    "addScriptTag", "addStyleTag", "childFrames", "content", "evaluate", "frameLocator",
-    "goto", "isDetached", "name", "parentFrame", "setContent", "title", "url",
-    "waitForFunction", "waitForLoadState", "waitForNavigation", "waitForTimeout", "waitForURL",
-  ]);
-
-  function record(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-    const proto = Object.getPrototypeOf(value);
-    return proto === Object.prototype || proto === null;
-  }
-  function handle(value) {
-    return record(value) && value.$handsRepl === "handle"
-      && typeof value.id === "string" && typeof value.kind === "string";
-  }
-  function clone(value, stack) {
-    if (value === null || typeof value === "boolean" || typeof value === "string") return value;
-    if (typeof value === "number") {
-      if (!Number.isFinite(value)) throw new TypeError("Reason Hands bridge accepts only finite numbers");
-      return value;
-    }
-    if (!value || typeof value !== "object") throw new TypeError("Reason Hands bridge accepts only JSON data");
-    if (stack.has(value)) throw new TypeError("Reason Hands bridge does not accept cyclic data");
-    stack.add(value);
-    try {
-      if (Array.isArray(value)) return value.map((item) => clone(item, stack));
-      if (!record(value)) throw new TypeError("Reason Hands bridge accepts only plain objects");
-      const output = Object.create(null);
-      for (const key of Object.keys(value)) {
-        if (key === "__proto__" || key === "constructor" || key === "prototype") {
-          throw new TypeError("Reason Hands bridge rejects unsafe object keys");
-        }
-        output[key] = clone(value[key], stack);
-      }
-      return output;
-    } finally { stack.delete(value); }
-  }
-  function data(value) { return clone(value, new WeakSet()); }
-  function refOf(value) {
-    const ref = value && typeof value === "object" ? handles.get(value) : undefined;
-    if (!ref) throw new TypeError("Reason Hands operation needs a browser target");
-    return ref;
-  }
-  async function wire(value) {
-    const target = value && typeof value === "object" ? handles.get(value) : undefined;
-    if (target) return (await target).handle;
-    const binary = value && typeof value === "object" ? bytes.get(value) : undefined;
-    if (binary) return binary;
-    const route = value && typeof value === "object" ? routes.get(value) : undefined;
-    if (route) return route;
-    if (value === null || typeof value === "boolean" || typeof value === "string") return value;
-    if (typeof value === "number") {
-      if (!Number.isFinite(value)) throw new TypeError("Reason Hands bridge accepts only finite numbers");
-      return value;
-    }
-    if (Array.isArray(value)) return await Promise.all(value.map(wire));
-    if (!record(value)) throw new TypeError("Reason Hands bridge accepts only JSON data");
-    const output = Object.create(null);
-    for (const key of Object.keys(value)) output[key] = await wire(value[key]);
-    return output;
-  }
-  function decode(value) {
-    if (handle(value)) return makeTarget(value);
-    if (record(value) && value.$handsRepl === "bytes" && typeof value.base64 === "string") {
-      const output = Object.freeze({ $handsRepl: "bytes", base64: value.base64 });
-      bytes.set(output, output);
-      return output;
-    }
-    if (record(value) && value.$handsRepl === "undefined") return undefined;
-    if (Array.isArray(value)) return value.map(decode);
-    if (!record(value)) return value;
-    const output = Object.create(null);
-    for (const key of Object.keys(value)) output[key] = decode(value[key]);
-    return output;
-  }
-  async function rpc(request) { return decode(await hostCall(request)); }
-  async function invoke(ref, method, args) {
-    return await rpc({ type: "call", target: ref.handle, method, args: await Promise.all(args.map(wire)) });
-  }
-  function targetFrom(value) {
-    const ref = value && typeof value === "object" ? handles.get(value) : undefined;
-    if (!ref) throw new Error("Reason Hands bridge received an invalid target");
-    return ref;
-  }
-  function lazy(refPromise) {
-    const object = Object.create(null);
-    const ready = Promise.resolve(refPromise);
-    const proxy = new Proxy(object, {
-      get(_object, key) {
-        if (key === "then") return (resolve, reject) => {
-          // Derived targets carry the bridge's internal { handle, kind } ref,
-          // not the wire handle accepted by makeTarget. Passing the wrapper
-          // used to throw inside this detached fulfillment callback; because
-          // that rejection was not forwarded to the thenable consumer, every
-          // await context.newPage() / await page.context() hung until an
-          // outer tool deadline destroyed the evaluator execution context.
-          ready.then((ref) => {
-            try { resolve(makeTarget(ref.handle)); } catch (error) { reject(error); }
-          }, reject);
-        };
-        if (typeof key !== "string") return undefined;
-        if (key === "first" || key === "last") return lazy(ready.then(async (ref) => targetFrom(await invoke(ref, key, []))));
-        if (derived.has(key)) return (...args) => lazy(ready.then(async (ref) => targetFrom(await invoke(ref, key, args))));
-        if (key === "evaluate" || key === "evaluateAll") return (source, argument) => ready.then((ref) => evaluateInTarget(ref, source, argument));
-        return (...args) => ready.then((ref) => invoke(ref, key, args));
-      },
-    });
-    handles.set(proxy, ready);
-    return proxy;
-  }
-  function makeTarget(handleValue) {
-    if (!handle(handleValue)) throw new Error("Reason Hands bridge received an invalid handle");
-    const ref = { handle: Object.freeze({ $handsRepl: "handle", id: handleValue.id, kind: handleValue.kind }), kind: handleValue.kind };
-    const object = Object.create(null);
-    // Preserve the existing synchronous viewport facade. URL reads use the
-    // dispatcher: a human can navigate the real page without an agent goto,
-    // and a new evaluator must not invent about:blank for that live page.
-    const meta = {
-      viewport: ref.kind === "page" && ref.handle.id === roots.page.id
-        ? { width: 1440, height: 900 }
-        : undefined,
-    };
-    const invokeDerived = (method, args) => lazy(Promise.resolve(invoke(ref, method, args)).then(targetFrom));
-    const get = (_object, key) => {
-      if (key === "first" || key === "last") return invokeDerived(key, []);
-      if (typeof key !== "string") return undefined;
-      if (key === "evaluate" || key === "evaluateAll") return (source, argument) => evaluateInTarget(ref, source, argument);
-      if (ref.kind === "page" && key === "viewportSize" && meta.viewport) {
-        return () => ({ ...meta.viewport });
-      }
-      if (ref.kind === "page" && key === "setViewportSize") {
-        return (next) => invoke(ref, key, [next]).then((value) => {
-          if (record(next) && typeof next.width === "number" && typeof next.height === "number") {
-            meta.viewport = { width: next.width, height: next.height };
-          }
-          return value;
-        });
-      }
-      if ((ref.kind === "page" || ref.kind === "context") && key === "route") {
-        return async (url, handler) => {
-          if (typeof handler !== "function") return await invoke(ref, key, [url, handler]);
-          let fulfillment;
-          const route = Object.freeze({
-            fulfill: async (options) => {
-              if (fulfillment) throw new TypeError("route() can register one fulfillment action");
-              fulfillment = routeFulfill(options);
-            },
-          });
-          await handler(route);
-          if (!fulfillment) {
-            throw new TypeError("route() supports a data-only route.fulfill({ ... }) callback");
-          }
-          return await invoke(ref, key, [url, fulfillment]);
-        };
-      }
-      if (derived.has(key)) return (...args) => invokeDerived(key, args);
-      const methods = ref.kind === "browser" ? browserMethods
-        : ref.kind === "context" ? contextMethods
-          : ref.kind === "page" ? pageMethods
-            : ref.kind === "frame" ? frameMethods
-              : locatorMethods;
-      if (!methods.has(key)) return undefined;
-      return (...args) => invoke(ref, key, args);
-    };
-    const proxy = new Proxy(object, { get });
-    handles.set(proxy, Promise.resolve(ref));
-    return proxy;
-  }
-  async function evaluateInTarget(ref, source, argument) {
-    const text = typeof source === "function" ? Function.prototype.toString.call(source) : source;
-    if (typeof text !== "string" || !text.trim()) throw new TypeError("evaluate() needs a function or expression string");
-    const value = argument === undefined ? undefined : JSON.stringify(await wire(argument));
-    let renderer;
-    if (ref.kind === "locator") {
-      renderer = typeof source === "function"
-        ? "(element) => (" + text + ")(element" + (value === undefined ? "" : ", " + value) + ")"
-        : text;
-    } else {
-      renderer = typeof source === "function"
-        ? "(" + text + ")(" + (value === undefined ? "" : value) + ")"
-        : value === undefined ? text : "(" + text + ")(" + value + ")";
-    }
-    return await invoke(ref, "evaluate", [renderer]);
-  }
-  function routeFulfill(options) {
-    const token = Object.freeze(Object.create(null));
-    routes.set(token, { $handsRepl: "routeFulfill", options: data(options) });
-    return token;
-  }
-  const replConsole = Object.freeze({
-    log: (...values) => { logs.push(values.map(render).join(" ")); },
-    info: (...values) => { logs.push(values.map(render).join(" ")); },
-    warn: (...values) => { logs.push("[warn] " + values.map(render).join(" ")); },
-    error: (...values) => { logs.push("[error] " + values.map(render).join(" ")); },
-  });
-  function render(value) {
-    if (value === undefined) return "undefined";
-    if (typeof value === "string") return value;
-    try { const text = JSON.stringify(value); return text === undefined ? String(value) : text; } catch { return "[unrenderable]"; }
-  }
-  const logs = [];
-  const browser = makeTarget(roots && roots.browser);
-  const context = makeTarget(roots && roots.context);
-  const page = makeTarget(roots && roots.page);
-  const state = Object.create(null);
-  async function a11y(target) {
-    const ref = target === undefined ? await refOf(page) : await refOf(target);
-    return await rpc({ type: "a11y", target: ref.handle });
-  }
-  async function view(source, options) {
-    return await rpc({ type: "view", source: await wire(source), options: options === undefined ? Object.create(null) : await wire(options) });
-  }
-  async function evaluate(code) {
-    if (typeof code !== "string") throw new TypeError("Reason Hands REPL code must be a string");
-    logs.length = 0;
-    let program;
-    let statementList = false;
-    try { program = new Function('"use strict"; return (async () => await (' + code + "\n))();"); }
-    catch {
-      statementList = true;
-      const strictCode = '"use strict";\n' + code;
-      program = new Function(
-        '"use strict"; return (async () => (0, eval)(' + JSON.stringify(strictCode) + '))();',
-      );
-    }
-    let value;
-    try {
-      value = await program();
-    } catch (error) {
-      // Indirect eval preserves a statement-list completion value but cannot
-      // parse top-level await or return. Those programs retain the prior async
-      // block behavior; a syntax failure occurs before any user code executes.
-      if (!statementList || !(error instanceof SyntaxError)) throw error;
-      program = new Function('"use strict"; return (async () => {' + code + "\n})();");
-      value = await program();
-    }
-    const output = render(value);
-    return logs.length === 0 ? output : value === undefined ? logs.join("\n") : logs.join("\n") + "\n" + output;
-  }
-  function install(name, value) { Object.defineProperty(globalThis, name, { value, configurable: false, enumerable: false, writable: false }); }
-  install("browser", browser); install("context", context); install("page", page);
-  install("state", state); install("browserState", state);
-  install("a11y", a11y); install("view", view); install("routeFulfill", routeFulfill); install("console", replConsole);
-  install("__araHandsRepl", Object.freeze({ version, evaluate }));
-}
-`.trim(),_Q=String.raw`
-async (input) => {
-  const bridge = globalThis.__araHandsRepl;
-  if (!bridge || typeof bridge.evaluate !== "function") throw new Error("Reason Hands browser bridge is not installed");
-  return await bridge.evaluate(typeof input === "string" ? input : input && input.code);
-}
-`.trim();import{Buffer as e0}from"buffer";import{randomUUID as K3}from"crypto";class EQ extends Error{code;constructor($){super($==="hands_repl_private_profile_attribute_denied"?"Private browser attribute read denied.":$);this.code=$;this.name="HandsReplBrowserDispatcherError"}}var RQ=new Set(["__defineGetter__","__defineSetter__","__lookupGetter__","__lookupSetter__","__proto__","constructor","prototype"]),xQ=/^hands_[A-Za-z0-9_-]{8,128}$/,W3=2048,SQ=32,wQ=1e4,B3=new Set(["href","src","alt","title","role","aria-label","aria-expanded","aria-checked","aria-selected","aria-disabled","placeholder","type","name","data-testid"]);function F3($){let Q=$.split("+"),Z=(Q.pop()??"").replace(/^Key/,"").toLowerCase();if(Z==="f12")return!0;if(Q.some((X)=>["Control","ControlOrMeta","Meta"].includes(X))&&["l","n","t","j","i","p","s","w","u","o","r","tab","pageup","pagedown"].includes(Z))return!0;if(Q.some((X)=>["Control","ControlOrMeta","Meta"].includes(X))&&Q.includes("Shift")&&Z==="c")return!0;return Q.includes("Alt")&&["d","arrowleft","arrowright","home"].includes(Z)}var L3=($)=>{let Q=$.closest("a[href],area[href]");return{password:$.tagName==="INPUT"&&$.type==="password",executableLink:Boolean(Q&&!/^(https?:|about:blank)/i.test(Q.href))}},bQ={browser:{close:{returns:"void"},contexts:{returns:"context[]"},isConnected:{returns:"json"},version:{returns:"json"}},context:{addCookies:{returns:"void"},addInitScript:{returns:"void"},browser:{returns:"browser"},clearCookies:{returns:"void"},clearPermissions:{returns:"void"},close:{returns:"void"},cookies:{returns:"json"},grantPermissions:{returns:"void"},newPage:{returns:"page"},pages:{returns:"page[]"},setDefaultNavigationTimeout:{returns:"void"},setDefaultTimeout:{returns:"void"},setExtraHTTPHeaders:{returns:"void"},setGeolocation:{returns:"void"},setHTTPCredentials:{returns:"void"},setOffline:{returns:"void"},setViewportSize:{returns:"void"},storageState:{returns:"json"},viewportSize:{returns:"json",special:"contextViewportSize"}},page:{addInitScript:{returns:"void"},addScriptTag:{returns:"void"},addStyleTag:{returns:"void"},bringToFront:{returns:"void"},close:{returns:"void"},content:{returns:"json"},context:{returns:"context"},emulateMedia:{returns:"void"},evaluate:{returns:"json",requiresStringSource:!0},frame:{returns:"frame"},frameLocator:{returns:"frameLocator"},frames:{returns:"frame[]"},getByAltText:{returns:"locator"},getByLabel:{returns:"locator"},getByPlaceholder:{returns:"locator"},getByRole:{returns:"locator"},getByTestId:{returns:"locator"},getByText:{returns:"locator"},getByTitle:{returns:"locator"},goBack:{returns:"void"},goForward:{returns:"void"},goto:{returns:"void"},isClosed:{returns:"json"},locator:{returns:"locator"},mainFrame:{returns:"frame"},opener:{returns:"page"},pdf:{returns:"bytes"},reload:{returns:"void"},screenshot:{returns:"bytes"},selectOption:{returns:"json"},setContent:{returns:"void"},setDefaultNavigationTimeout:{returns:"void"},setDefaultTimeout:{returns:"void"},setExtraHTTPHeaders:{returns:"void"},setInputFiles:{returns:"void"},setViewportSize:{returns:"void"},title:{returns:"json"},url:{returns:"json"},viewportSize:{returns:"json"},waitForFunction:{returns:"void",requiresStringSource:!0},waitForLoadState:{returns:"void"},waitForNavigation:{returns:"void"},waitForTimeout:{returns:"void"},waitForURL:{returns:"void"}},locator:{all:{returns:"locator[]"},allInnerTexts:{returns:"json"},allTextContents:{returns:"json"},and:{returns:"locator"},ariaSnapshot:{returns:"json"},blur:{returns:"void"},boundingBox:{returns:"json"},check:{returns:"void"},clear:{returns:"void"},click:{returns:"void"},contentFrame:{returns:"frameLocator"},count:{returns:"json"},dblclick:{returns:"void"},dragTo:{returns:"void"},evaluate:{returns:"json",requiresStringSource:!0},evaluateAll:{returns:"json",requiresStringSource:!0},fill:{returns:"void"},filter:{returns:"locator"},first:{returns:"locator",special:"property"},focus:{returns:"void"},getAttribute:{returns:"json"},getByAltText:{returns:"locator"},getByLabel:{returns:"locator"},getByPlaceholder:{returns:"locator"},getByRole:{returns:"locator"},getByTestId:{returns:"locator"},getByText:{returns:"locator"},getByTitle:{returns:"locator"},hover:{returns:"void"},innerHTML:{returns:"json"},innerText:{returns:"json"},inputValue:{returns:"json"},isChecked:{returns:"json"},isEditable:{returns:"json"},isEnabled:{returns:"json"},isHidden:{returns:"json"},isVisible:{returns:"json"},last:{returns:"locator",special:"property"},locator:{returns:"locator"},nth:{returns:"locator"},or:{returns:"locator"},page:{returns:"page"},press:{returns:"void"},pressSequentially:{returns:"void"},scrollIntoViewIfNeeded:{returns:"void"},screenshot:{returns:"bytes"},selectOption:{returns:"json"},setInputFiles:{returns:"void"},tap:{returns:"void"},textContent:{returns:"json"},type:{returns:"void"},uncheck:{returns:"void"},waitFor:{returns:"void"}},frame:{addScriptTag:{returns:"void"},addStyleTag:{returns:"void"},childFrames:{returns:"frame[]"},content:{returns:"json"},evaluate:{returns:"json",requiresStringSource:!0},frameLocator:{returns:"frameLocator"},getByAltText:{returns:"locator"},getByLabel:{returns:"locator"},getByPlaceholder:{returns:"locator"},getByRole:{returns:"locator"},getByTestId:{returns:"locator"},getByText:{returns:"locator"},getByTitle:{returns:"locator"},goto:{returns:"void"},isDetached:{returns:"json"},locator:{returns:"locator"},name:{returns:"json"},page:{returns:"page"},parentFrame:{returns:"frame"},setContent:{returns:"void"},title:{returns:"json"},url:{returns:"json"},waitForFunction:{returns:"void",requiresStringSource:!0},waitForLoadState:{returns:"void"},waitForNavigation:{returns:"void"},waitForTimeout:{returns:"void"},waitForURL:{returns:"void"}},frameLocator:{getByAltText:{returns:"locator"},getByLabel:{returns:"locator"},getByPlaceholder:{returns:"locator"},getByRole:{returns:"locator"},getByTestId:{returns:"locator"},getByText:{returns:"locator"},getByTitle:{returns:"locator"},locator:{returns:"locator"},owner:{returns:"locator"}}};function P($){throw new EQ($)}function J0($){if(!$||typeof $!=="object"||Array.isArray($))return!1;let Q=Object.getPrototypeOf($);return Q===Object.prototype||Q===null}function $9($,Q=0,Z={nodes:0}){if(Q>SQ||++Z.nodes>wQ)P("hands_repl_json_too_complex");if($===null||typeof $==="boolean"||typeof $==="string")return;if(typeof $==="number"){if(!Number.isFinite($))P("hands_repl_invalid_json");return}if(Array.isArray($)){for(let X of $)$9(X,Q+1,Z);return}if(!J0($))P("hands_repl_invalid_json");for(let[X,Y]of Object.entries($)){if(RQ.has(X))P("hands_repl_invalid_json");$9(Y,Q+1,Z)}}function E8($){return typeof $==="string"&&Object.hasOwn(bQ,$)}function U3($){if(!$.endsWith("[]"))return null;let Q=$.slice(0,-2);return E8(Q)?Q:null}function PQ($){return J0($)&&Object.keys($).length===2&&$.$handsRepl==="bytes"&&typeof $.base64==="string"}function H3($){return J0($)&&Object.keys($).length===1&&$.$handsRepl==="undefined"}function AQ($){return J0($)&&Object.keys($).length===2&&$.$handsRepl==="routeFulfill"&&"options"in $}function x0($){return!!$&&typeof $==="object"}function h9(){return Object.freeze({$handsRepl:"undefined"})}function M3($){if(!e0.isBuffer($)&&!($ instanceof Uint8Array))P("hands_repl_expected_bytes");return Object.freeze({$handsRepl:"bytes",base64:e0.from($).toString("base64")})}function kQ($){if(!x0($.browser)||!x0($.context)||!x0($.page))P("hands_repl_invalid_roots");if(typeof $.a11y!=="function"||typeof $.view!=="function")P("hands_repl_invalid_callbacks");let Q=$.maxHandles??W3;if(!Number.isInteger(Q)||Q<3||Q>1e5)P("hands_repl_invalid_handle_limit");let Z=new Map,X=new WeakMap,Y=$.createOpaqueId??K3,J=(V,H)=>{if(!x0(H))P("hands_repl_expected_target");let U=X.get(H)?.get(V);if(U)return U;if(Z.size>=Q)P("hands_repl_handle_limit");let F="";for(let T=0;T<16;T+=1){let I=`hands_${Y()}`;if(xQ.test(I)&&!Z.has(I)){F=I;break}}if(!F)P("hands_repl_invalid_opaque_id");let N=Object.freeze({$handsRepl:"handle",id:F,kind:V});Z.set(F,{kind:V,target:H});let D=X.get(H);if(!D)D=new Map,X.set(H,D);return D.set(V,N),N},z=Object.freeze({browser:J("browser",$.browser),context:J("context",$.context),page:J("page",$.page)}),K=(V)=>{if(!J0(V)||Object.keys(V).length!==3||V.$handsRepl!=="handle"||typeof V.id!=="string"||!xQ.test(V.id)||!E8(V.kind))P("hands_repl_invalid_handle");let H=Z.get(V.id);if(!H||H.kind!==V.kind)P("hands_repl_unknown_handle");return H},G=(V,H=0,U=new Set)=>{if(H>SQ)P("hands_repl_json_too_complex");if(V===void 0)return h9();if(V===null||typeof V==="boolean"||typeof V==="string")return V;if(typeof V==="number"){if(!Number.isFinite(V))P("hands_repl_non_json_result");return V}if(Array.isArray(V)){if(U.has(V))P("hands_repl_cyclic_result");U.add(V);try{return V.map((F)=>G(F,H+1,U))}finally{U.delete(V)}}if(!J0(V))P("hands_repl_non_json_result");if(U.has(V))P("hands_repl_cyclic_result");U.add(V);try{let F=Object.create(null);for(let N of Object.keys(V)){let D=Object.getOwnPropertyDescriptor(V,N);if(!D||!("value"in D))continue;F[N]=G(D.value,H+1,U)}return F}finally{U.delete(V)}},W=(V,H)=>{if(H==="void")return h9();if(H==="json")return G(V);if(H==="bytes")return M3(V);let U=U3(H);if(U){if(!Array.isArray(V))P("hands_repl_expected_target_list");if(U==="context"&&V.some((F)=>F!==$.context))P("hands_repl_foreign_context");return V.map((F)=>J(U,F))}if(V===null||V===void 0)return h9();if(!E8(H))P("hands_repl_invalid_return_kind");if(H==="context"&&V!==$.context)P("hands_repl_foreign_context");return J(H,V)},L=(V)=>{if(J0(V)&&V.$handsRepl==="handle")return K(V).target;if(PQ(V))return e0.from(V.base64,"base64");if(H3(V))return;if(AQ(V))P("hands_repl_route_fulfill_only");if(Array.isArray(V))return V.map(L);if(!J0(V))return V;let H=Object.create(null);for(let[U,F]of Object.entries(V))H[U]=L(F);return H};return Object.freeze({roots:z,dispatch:async(V)=>{if(!J0(V)||typeof V.type!=="string")P("hands_repl_invalid_request");if(V.type==="a11y"){let q=V.target===void 0?Z.get(z.page.id):K(V.target);if(!q||q.kind!=="page"&&q.kind!=="locator")P("hands_repl_invalid_a11y_target");return G(await $.a11y(q.target))}if(V.type==="view"){if($9(V.source),V.options!==void 0)$9(V.options);let q=PQ(V.source)?e0.from(V.source.base64,"base64"):V.source;if($.privateProfile&&!e0.isBuffer(q))P("hands_repl_profile_requires_image_bytes");return G(await $.view(q,V.options))}if(V.type!=="call")P("hands_repl_invalid_request");if(typeof V.method!=="string"||V.method.length===0||V.method.length>128)P("hands_repl_invalid_method");if(RQ.has(V.method))P("hands_repl_forbidden_method");let H=K(V.target),U=V.args??[];if(!Array.isArray(U))P("hands_repl_invalid_arguments");if($9(U),H.kind==="page"&&V.method==="captureScreenshot"){if(U.length!==0)P("hands_repl_invalid_arguments");if(!$.screenshotExport)P("hands_repl_screenshot_export_unavailable");return G(await $.screenshotExport(H.target))}if(H.kind==="context"&&["startRecording","stopRecording"].includes(V.method)){if(!$.recording||H.target!==$.context)P("hands_repl_recording_unavailable");if(U.length>(V.method==="startRecording"?1:0))P("hands_repl_invalid_arguments");return G(V.method==="startRecording"?await $.recording.start(U[0]):await $.recording.stop())}if($.privateProfile){let q=V.method;if(["evaluate","evaluateAll","waitForFunction","addInitScript","addScriptTag","addStyleTag","setContent","setInputFiles","route","content","cookies","storageState","addCookies","clearCookies","setExtraHTTPHeaders","setHTTPCredentials","grantPermissions","clearPermissions","innerHTML","textContent","allTextContents"].includes(q)||H.kind==="browser"&&q==="close"||H.kind==="context"&&q==="close")P("hands_repl_private_profile_method_denied");if(H.kind==="browser"&&q==="contexts")return W([$.context],"context[]");if((q==="screenshot"||q==="pdf")&&J0(U[0])&&(("path"in U[0])||("style"in U[0])))P("hands_repl_private_profile_path_denied");if(q==="goto"){if(typeof U[0]!=="string")P("hands_repl_private_profile_url_denied");try{let b=new URL(U[0]);if(!["http:","https:"].includes(b.protocol)&&U[0]!=="about:blank")P("hands_repl_private_profile_url_denied")}catch{P("hands_repl_private_profile_url_denied")}}if(q==="getAttribute"&&(typeof U[0]!=="string"||!B3.has(U[0].toLowerCase())))P("hands_repl_private_profile_attribute_denied");if(H.kind==="locator"&&["innerText","allInnerTexts","getAttribute"].includes(q)){let b=[H.target];if(q==="allInnerTexts"){let g=Reflect.get(H.target,"all");if(typeof g!=="function")P("hands_repl_private_profile_probe_unavailable");let A=await Reflect.apply(g,H.target,[]);if(!Array.isArray(A)||A.length>wQ||!A.every(x0))P("hands_repl_private_profile_probe_unavailable");b=A}for(let g of b){let A=Reflect.get(g,"isVisible");if(typeof A!=="function"||!await Reflect.apply(A,g,[]))P("hands_repl_private_profile_hidden_value_denied")}}if(q==="press"&&typeof U[0]==="string"&&F3(U[0]))P("hands_repl_private_profile_browser_shortcut_denied");if(H.kind==="locator"&&["inputValue","click","dblclick","tap","press"].includes(q)){let b=Reflect.get(H.target,"evaluate");if(typeof b!=="function")P("hands_repl_private_profile_probe_unavailable");let g=await Reflect.apply(b,H.target,[L3]);if(!J0(g)||typeof g.password!=="boolean"||typeof g.executableLink!=="boolean")P("hands_repl_private_profile_probe_unavailable");if(q==="inputValue"&&g.password)P("hands_repl_private_profile_password_denied");if(q!=="inputValue"&&g.executableLink)P("hands_repl_private_profile_url_denied");if(q==="inputValue"){let A=Reflect.get(H.target,"isVisible");if(typeof A!=="function"||!await Reflect.apply(A,H.target,[]))P("hands_repl_private_profile_hidden_value_denied")}}}let F=bQ[H.kind][V.method];if(!F)P("hands_repl_method_not_allowed");if(F.requiresStringSource&&typeof U[0]!=="string")P("hands_repl_string_source_required");if(H.kind==="browser"&&V.method==="contexts")return[z.context];if(["addInitScript","addScriptTag","addStyleTag","screenshot","pdf","storageState"].includes(V.method)&&U.some((q)=>J0(q)&&("path"in q)))P("hands_repl_file_path_not_allowed");if(V.method==="goto"&&typeof U[0]==="string"){let q;try{q=new URL(U[0]).protocol}catch{P("hands_repl_invalid_url")}if(!["http:","https:","data:","about:","blob:"].includes(q))P("hands_repl_file_path_not_allowed")}if(F.special==="contextViewportSize"){let q=Reflect.get(H.target,"pages");if(typeof q!=="function")P("hands_repl_method_unavailable");let b=await Reflect.apply(q,H.target,[]),g=Array.isArray(b)?b[0]:void 0,A=x0(g)?Reflect.get(g,"viewportSize"):void 0;if(typeof A!=="function")return h9();return W(await Reflect.apply(A,g,[]),F.returns)}if(F.special==="property"){let q=Reflect.get(H.target,V.method);return W(typeof q==="function"?Reflect.apply(q,H.target,[]):q,F.returns)}let N=Reflect.get(H.target,V.method);if(typeof N!=="function")P("hands_repl_method_unavailable");if(F.special==="route"){let q=U[1];if(!AQ(q))P("hands_repl_invalid_route_handler");$9(q.options);let b=L(q.options),g=async(C)=>{if(!x0(C))P("hands_repl_invalid_route");let x=Reflect.get(C,"fulfill");if(typeof x!=="function")P("hands_repl_invalid_route");await Reflect.apply(x,C,[b])},A=[L(U[0]??null),g],M=await Reflect.apply(N,H.target,A);return W(M,F.returns)}let D=U.map(L);if(V.method==="setInputFiles"){let q=H.kind==="locator"?0:1,b=async(A)=>{if(typeof A!=="string"){if(!J0(A)||typeof A.name!=="string"||typeof A.mimeType!=="string"||!e0.isBuffer(A.buffer))P("hands_repl_invalid_file_input");return A}if(!$.readWorkspaceFile)P("hands_repl_workspace_required");return $.readWorkspaceFile(A)},g=D[q];D[q]=Array.isArray(g)?await Promise.all(g.map(b)):await b(g)}if(V.method==="goto")await $.beforeNavigation?.();let T=$.actionRecorder?.(),I=await Reflect.apply(N,H.target,D),y={click:"Click browser element",tap:"Click browser element",dblclick:"Double click browser element",fill:"Type text",type:"Type text",pressSequentially:"Type text",clear:"Clear browser field",press:"Press key",scrollIntoViewIfNeeded:"Scroll browser element into view",dragTo:"Drag on computer",selectOption:"Select browser option",check:"Check browser control",uncheck:"Uncheck browser control",hover:"Hover browser element",focus:"Focus browser element",goto:"Open browser page",reload:"Reload browser page",goBack:"Go back in browser",goForward:"Go forward in browser",screenshot:"Take browser screenshot"}[V.method];if(y){let q=Reflect.get(H.target,"page"),b=H.kind==="page"?H.target:typeof q==="function"?Reflect.apply(q,H.target,[]):void 0;T?.(y,x0(b)?b:void 0)}return W(I,F.returns)}})}import{isIP as hQ}from"net";import{Resolver as j3}from"dns/promises";import{isIP as c9}from"net";var N3=[["0.0.0.0",8],["10.0.0.0",8],["100.64.0.0",10],["127.0.0.0",8],["169.254.0.0",16],["172.16.0.0",12],["192.0.0.0",24],["192.0.2.0",24],["192.168.0.0",16],["198.18.0.0",15],["198.51.100.0",24],["203.0.113.0",24],["224.0.0.0",4],["240.0.0.0",4]];function R8($){if(c9($)!==4)return null;let Q=$.split(".");if(Q.length!==4)return null;let Z=0;for(let X of Q){let Y=Number(X);if(!Number.isInteger(Y)||Y<0||Y>255)return null;Z=Z*256+Y}return Z>>>0}function C3($,Q,Z){let X=R8(Q);if(X===null)return!1;let Y=Z===0?0:4294967295<<32-Z>>>0;return($&Y)>>>0===(X&Y)>>>0}function fQ($){let Q=R8($);if(Q===null)return!0;return N3.some(([Z,X])=>C3(Q,Z,X))}function T3($){if(c9($)!==6)return null;let Q=$.toLowerCase(),Z=Q.indexOf("%");if(Z>=0)Q=Q.slice(0,Z);let X=[],Y=Q.lastIndexOf(":"),J=Y>=0?Q.slice(Y+1):"";if(J.includes(".")){let V=R8(J);if(V===null)return null;X=[V>>>16&65535,V&65535],Q=Q.slice(0,Y+1)+"0:0"}let z=Q.split("::");if(z.length>2)return null;let K=(V)=>{if(V==="")return[];let H=[];for(let U of V.split(":")){if(U===""||U.length>4||!/^[0-9a-f]+$/.test(U))return null;H.push(Number.parseInt(U,16))}return H},G=K(z[0]??"");if(G===null)return null;if(z.length===1){let V=G;if(V.length!==8)return null;return X.length>0?V.slice(0,6).concat(X):V}let W=K(z[1]??"");if(W===null)return null;let L=8-G.length-W.length;if(L<0)return null;let B=G.concat(Array(L).fill(0),W);if(B.length!==8)return null;return X.length>0?B.slice(0,6).concat(X):B}function q3($,Q){return`${$>>8&255}.${$&255}.${Q>>8&255}.${Q&255}`}function D3($){let Q=T3($);if(Q===null)return!0;let[Z,X,Y]=Q;if((Z&57344)!==8192)return!0;if(Z===8193&&(X&65024)===0)return!0;if(Z===8193&&X===3512)return!0;if(Z===16383&&(X&61440)===0)return!0;if(Z===8194)return fQ(q3(X,Y));return!1}function mQ($){return $.replace(/^\[|\]$/g,"")}function v9($){let Q=mQ($.trim()),Z=c9(Q);if(Z===4)return fQ(Q);if(Z===6)return D3(Q);return!0}function gQ($){if($ instanceof Error&&$.name==="TimeoutError")return"dns_timeout";switch(typeof $==="object"&&$!==null&&"code"in $?$.code:void 0){case"ENOTFOUND":return"dns_not_found";case"ENODATA":return"dns_empty";case"EAI_AGAIN":case"ESERVFAIL":case"ECONNREFUSED":return"dns_temporary";case"ETIMEOUT":case"ETIMEDOUT":return"dns_timeout";default:return"dns_failed"}}var yQ=5000;function O3($){return async(Q,Z)=>{if(Z?.aborted)throw Error("aborted");let X=new j3({timeout:yQ,tries:1});if($)X.setServers($);let Y=()=>X.cancel();Z?.addEventListener("abort",Y,{once:!0});try{let[J,z]=await Promise.allSettled([X.resolve4(Q),X.resolve6(Q)]),K=[...J.status==="fulfilled"?J.value:[],...z.status==="fulfilled"?z.value:[]];if(K.length>0)return K;let G=[J,z].flatMap((L)=>L.status==="rejected"?[L.reason]:[]);throw G.find((L)=>["dns_temporary","dns_timeout"].includes(gQ(L)))??G[0]??Object.assign(Error("DNS returned no addresses"),{code:"ENODATA"})}finally{Z?.removeEventListener("abort",Y)}}}var I3=O3();async function _3($,Q,Z,X){if(X?.aborted)throw Error("aborted");let Y=new AbortController,J,z,K=Q($,Y.signal);K.catch(()=>{});try{return await Promise.race([K,new Promise((G,W)=>{if(J=setTimeout(()=>W(new DOMException("DNS lookup timed out","TimeoutError")),Z),X)z=()=>W(Error("aborted")),X.addEventListener("abort",z,{once:!0})})])}finally{if(J!==void 0)clearTimeout(J);if(X&&z)X.removeEventListener("abort",z);Y.abort()}}async function s2($,Q=I3,Z){let X=mQ($);if(c9(X))return v9(X)?{ok:!1,reason:"non_public_ip"}:{ok:!0,addresses:[X]};let Y;try{Y=await _3(X,Q,yQ,Z)}catch(J){return{ok:!1,reason:Z?.aborted?Z.reason instanceof Error&&Z.reason.name==="TimeoutError"?"dns_timeout":"aborted":gQ(J)}}if(Y.length===0)return{ok:!1,reason:"dns_empty"};if(Y.some(v9))return{ok:!1,reason:"non_public_ip"};return{ok:!0,addresses:Y}}var x3=/^(?:\*\.)?[a-z0-9](?:[a-z0-9.-]{0,251}[a-z0-9])?$/;function S8($){return $.length<=253&&x3.test($.toLowerCase())}function P3($,Q){let Z=$.trim().toLowerCase();if(!S8(Z))return!1;if(Z.startsWith("*.")){let X=Z.slice(2);return Q===X||Q.endsWith(`.${X}`)}return Z===Q}function A3($){let Q=/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec($);if(!Q)return null;let Z=Q.slice(1).map(Number);return Z.some((X)=>X>255)?null:Z}function w8($,Q=[]){let Z=(X)=>{if(X=X.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.$/,""),!X.includes(":"))return X;try{X=new URL(`http://[${X}]/`).hostname.slice(1,-1)}catch{return X}let Y=/^::ffff:([\da-f]+):([\da-f]+)$/.exec(X);if(!Y)return X;let J=parseInt(Y[1],16),z=parseInt(Y[2],16);return`${J>>8}.${J&255}.${z>>8}.${z&255}`};return Q.some((X)=>Z(X)===Z($))}function m0($){$=$.toLowerCase().replace(/^\[|\]$/g,"");let Q=A3($);if(Q){let[J,z,K]=Q;if(J===127)return"loopback";return J===0||J===10||J>=224||J===100&&z>=64&&z<=127||J===169&&z===254||J===172&&z>=16&&z<=31||J===192&&(z===168||z===0&&(K===0||K===2)||z===88&&K===99)||J===198&&(z===18||z===19||z===51&&K===100)||J===203&&z===0&&K===113?"private":"public"}if(!$.includes(":"))return"hostname";try{$=new URL(`http://[${$}]/`).hostname.slice(1,-1)}catch{return"private"}if($==="::1")return"loopback";let Z=/^::ffff:([\da-f]+):([\da-f]+)$/.exec($);if(Z){let J=parseInt(Z[1],16),z=parseInt(Z[2],16);return m0(`${J>>8}.${J&255}.${z>>8}.${z&255}`)==="public"?"public":"private"}let[X,Y=0]=$.split(":").map((J)=>parseInt(J||"0",16));return X<8192||X>16383||X===8194||X===8193&&(Y<512||Y===3512)||X===16383&&Y<4096?"private":"public"}function C9($,Q){let Z;try{Z=new URL($)}catch{return{allowed:!1,url:$,host:null,reason:"invalid_url"}}if(["about:","data:","blob:"].includes(Z.protocol))return{allowed:!0,url:$,host:null,reason:"local_document"};if(!["http:","https:","ws:","wss:"].includes(Z.protocol))return{allowed:!1,url:$,host:Z.hostname||null,reason:"unsupported_protocol"};let X=Z.hostname.toLowerCase().replace(/^\[|\]$/g,"").replace(/\.$/,"");if(Q.mode==="off")return{allowed:!0,url:$,host:X,reason:"policy_off"};let Y=(K)=>({allowed:!1,url:$,host:X,reason:K});if(Z.username||Z.password)return Y("invalid_url");if(Q.mode==="public_web"){let K=m0(X)!=="public"&&m0(X)!=="hostname"||X==="localhost"||/\.(?:localhost|local|internal|arpa)$/.test(X)||!X.includes(".")&&!hQ(X)||Boolean(hQ(X)&&v9(X));return{allowed:!K,url:$,host:X,reason:K?"private_network":"public_web"}}let J=Number(Z.port||(["https:","wss:"].includes(Z.protocol)?443:80));if(Q.deniedPorts?.includes(J)||w8(X,Q.deniedHosts))return Y("destination_not_allowed");let z=m0(X);if(z==="private"||["local","internal","arpa"].some((K)=>X===K||X.endsWith(`.${K}`)))return Y("private_network");if(z==="loopback"||X==="localhost"||X.endsWith(".localhost"))return Q.allowedLoopbackPorts?.includes(J)?{allowed:!0,url:$,host:X,reason:"loopback"}:Y("destination_not_allowed");if(Q.allowedDomains.some((K)=>P3(K,X)))return{allowed:!0,url:$,host:X,reason:"allowed_domain"};return{allowed:!1,url:$,host:X,reason:"destination_not_allowed"}}import cQ from"child_process";import{accessSync as R3,constants as S3,readFileSync as w3,statSync as pQ}from"fs";import{createRequire as lQ}from"module";import{homedir as b8}from"os";import{dirname as b3,isAbsolute as k8,join as g0,resolve as k3,win32 as f3}from"path";var d9=Object.freeze({schemaVersion:1,driver:"playwright-core",driverVersion:dQ.dependencies["playwright-core"],browser:"chromium"}),uQ=["/Applications/Google Chrome.app/Contents/MacOS/Google Chrome","/Applications/Microsoft Edge.app/Contents/MacOS/Microsoft Edge","/Applications/Brave Browser.app/Contents/MacOS/Brave Browser","/Applications/Chromium.app/Contents/MacOS/Chromium"],f8=["/usr/bin/chromium","/usr/bin/chromium-browser","/usr/bin/google-chrome","/usr/bin/google-chrome-stable"];function m3($=process.env){let Q=[$.ProgramFiles??"C:\\Program Files",$["ProgramFiles(x86)"]??"C:\\Program Files (x86)"],Z=$.LOCALAPPDATA?[$.LOCALAPPDATA]:[],X=(Y,...J)=>Y.map((z)=>f3.join(z,...J));return[...X([...Q,...Z],"Google","Chrome","Application","chrome.exe"),...X(Q,"Microsoft","Edge","Application","msedge.exe"),...X([...Q,...Z],"BraveSoftware","Brave-Browser","Application","brave.exe")]}function T9($){try{return R3($,S3.X_OK),k8($)&&pQ($).isFile()}catch{return!1}}function m8($,Q=process.platform){let Z=Q==="darwin"?uQ:Q==="linux"?f8:Q==="win32"?m3():null;return Z?($??Z).find(T9)??null:null}function g3(){if(!process.versions.bun)return;let $=Symbol.for("ara.headless-browser.bun-pipe-owners");if(Object.hasOwn(globalThis,$))return;let Q=[];cQ.spawn=new Proxy(cQ.spawn,{apply(Z,X,Y){let J=Reflect.apply(Z,X,Y),z=Y[1],K=Y[2]?.stdio;if(Array.isArray(z)&&z.includes("--remote-debugging-pipe")&&Array.isArray(K)&&K[3]==="pipe"&&K[4]==="pipe")Q.push(J);return J}}),Object.defineProperty(globalThis,$,{value:Q})}async function p9($){if(g3(),$!==void 0){if(!k8($))throw Error("hands_browser_driver_path_must_be_absolute");let X=g0($,"package.json"),Y=JSON.parse(w3(X,"utf8"));if(Y.name!==d9.driver)throw Error("hands_browser_wrong_driver");let J=lQ(X)($),z=J.default?.chromium??J.chromium;if(!z)throw Error("hands_browser_missing_chromium");return{version:Y.version,chromium:z}}let[Q,Z]=await Promise.all([import("./index-194s4vz0.js"),import("./package-ej9snd47.js").then((m)=>E3(m.default,1))]);return{version:Z.default.version,chromium:Q.chromium}}var y3=($,Q=d9.driverVersion)=>({status:"unavailable",reason:$,expectedDriverVersion:Q}),h3=($)=>$.loadDriver?.()??p9($.driverModuleDirectory),v3={"1.60.0":"1223"};function XX(){let $=process.platform,Q=v3[d9.driverVersion];if(!Q||$!=="linux"&&$!=="darwin"&&$!=="win32")return!1;let Z=(X)=>process.env[X]??process.env[`npm_config_${X.toLowerCase()}`]??process.env[`npm_package_config_${X.toLowerCase()}`];try{let X=Z("PLAYWRIGHT_BROWSERS_PATH"),Y=X==="0"?g0(b3(lQ(import.meta.url).resolve("playwright-core/package.json")),".local-browsers"):X?k3(Z("INIT_CWD")||process.cwd(),X):g0($==="darwin"?g0(b8(),"Library","Caches"):$==="win32"?process.env.LOCALAPPDATA||g0(b8(),"AppData","Local"):process.env.XDG_CACHE_HOME||g0(b8(),".cache"),"ms-playwright");return pQ(g0(Y,`chromium-${Q}`,"INSTALLATION_COMPLETE")).isFile()}catch{return!1}}async function Q9($={}){return sQ($,d9.driverVersion)}async function g8($,Q={}){if($.driverVersion!=="1.61.1"||!k8($.driverModuleDirectory))throw Error("hands_browser_invalid_managed_compatibility");return sQ({...Q,driverModuleDirectory:$.driverModuleDirectory,allowSystemBrowser:!0},$.driverVersion)}async function sQ($,Q){let Z=(G)=>y3(G,Q),X=$.platform??process.platform;if(X!=="linux"&&X!=="darwin"&&X!=="win32")return Z("unsupported_platform");let Y;try{Y=await h3($)}catch{return Z("driver_missing")}if(Y.version!==Q)return Z("driver_version_mismatch");let J=(G,W)=>({status:"resolved",executablePath:G,source:W,driverVersion:Y.version});if($.executablePath!==void 0)return T9($.executablePath)?J($.executablePath,"configured"):Z("executable_missing");let z=Y.chromium.executablePath();if(T9(z))return J(z,"managed");let K=$.allowSystemBrowser===!0?m8($.systemCandidates,X):null;return K?J(K,"system"):Z("executable_missing")}var e3=["/usr/local/bin/chromium",...f8];function $1($,Q=eQ()){return m8($??(Q==="linux"?e3:void 0),Q)}async function Q1(){try{return(await p9()).chromium}catch{return i3(import.meta.url)("playwright-core").chromium}}var Z1=1048576,X1=105000,Y1=20000,aQ=5000,J1=2000,G1=1000,z1=30000,oQ=81920,V1={".png":"image/png",".jpg":"image/jpeg",".jpeg":"image/jpeg",".webp":"image/webp",".gif":"image/gif"};async function K1($,Q){let Z=new URL($.url()),X={...await $.allHeaders(),host:Z.host};for(let Y of Object.keys(X))if(/^(?:proxy-|connection$|upgrade$|transfer-encoding$|content-length$)/i.test(Y))delete X[Y];return new Promise((Y,J)=>{let K=(Z.protocol==="https:"?o3:a3)(Z,{method:$.method(),headers:X,agent:!1,lookup:(W,L,B)=>{let V=y0.isIP(Q);if(L.all)B(null,[{address:Q,family:V}]);else B(null,Q,V)}},(W)=>{let L=[],B=0;W.on("data",(V)=>{if(B+=V.length,B>33554432)K.destroy(Error("hands_browser_response_too_large"));else L.push(V)}),W.on("error",J),W.on("end",()=>{let V={};for(let[H,U]of Object.entries(W.headers))if(U!==void 0&&!["transfer-encoding","connection","content-length"].includes(H))V[H]=Array.isArray(U)?U.join(`
-`):U;Y({status:W.statusCode??502,headers:V,body:Buffer.concat(L)})})}),G=setTimeout(()=>K.destroy(Error("hands_browser_fetch_timeout")),z1);K.once("close",()=>clearTimeout(G)),K.on("error",J),K.end($.postDataBuffer()??void 0)})}async function W1($,Q,Z=()=>{},X={lookup:(Y)=>n3(Y,{all:!0}),fetch:K1}){let Y=new WeakSet,J=new WeakMap,z=(K)=>{let G=J.get(K);if(G)return G;let W=(async()=>{if(!$.newCDPSession)return;let L=await $.newCDPSession(K),B=new Map;L.on("Network.loadingFinished",({requestId:V})=>B.delete(V)),L.on("Network.loadingFailed",({requestId:V})=>B.delete(V)),L.on("Fetch.requestPaused",async(V)=>{let H=V.networkId??V.requestId,U=V.redirectedRequestId?(B.get(H)??0)+1:0;B.set(H,U);let F=C9(V.request.url,Q),N=Q.mode==="enforce"&&Boolean(V.redirectedRequestId)&&F.host!==null&&!y0.isIP(F.host),D=!F.allowed?F:N?{...F,allowed:!1,reason:"destination_not_allowed"}:U>20?{...F,allowed:!1,reason:"redirect_not_supported"}:null;try{if(D)Z(D),await L.send("Fetch.failRequest",{requestId:V.requestId,errorReason:"BlockedByClient"});else await L.send("Fetch.continueRequest",{requestId:V.requestId})}catch{await L.send("Fetch.failRequest",{requestId:V.requestId,errorReason:"Failed"}).catch(()=>{})}}),await L.send("Network.enable"),await L.send("Fetch.enable",{patterns:[{urlPattern:"*",requestStage:"Request"}]}),Y.add(K)})();return J.set(K,W),W};return await $.route("**/*",async(K)=>{let G=K.request().url(),W=C9(G,Q);if(W.allowed&&Q.mode==="public_web"){await K.continue();return}let L=K.request();if(W.allowed&&W.host&&y0.isIP(W.host)&&L.isNavigationRequest?.()){let B=L.frame();if(Y.has(B.page())&&B===B.page().mainFrame()){await K.continue();return}}if(W.allowed&&(Q.mode==="off"||W.reason==="local_document")){await K.continue();return}if(W.allowed&&W.host)try{let B=W.host,V=m0(B),H,U=await(async()=>{if(V!=="hostname")return[{address:B,family:y0.isIP(B)}];if(W.reason==="loopback")return[{address:"127.0.0.1",family:4}];try{return await Promise.race([X.lookup(B),new Promise((F,N)=>{H=setTimeout(()=>N(Error("hands_browser_dns_timeout")),5000)})])}finally{if(H)clearTimeout(H)}})();if(!U.length||U.some(({address:F})=>{let N=m0(F);return!y0.isIP(F)||Q.mode==="enforce"&&w8(F,Q.deniedHosts)||(W.reason==="loopback"?N!=="loopback":N!=="public")}))W={...W,allowed:!1,reason:"private_network"};else{let F=await X.fetch(K.request(),U[0].address);if(F.status>=300&&F.status<400){let N=F.headers.location??G;try{N=new URL(N,G).href}catch{}let D=C9(N,Q);W=D.allowed?{...D,allowed:!1,reason:"redirect_not_supported"}:D}else{await K.fulfill(F);return}}}catch{await K.abort("failed");return}Z(W),await K.abort("blockedbyclient")}),await $.routeWebSocket("**/*",async(K)=>{let G=C9(K.url(),Q);if(Q.mode==="enforce"&&G.allowed&&(!G.host||!y0.isIP(G.host)))G={...G,allowed:!1,reason:"destination_not_allowed"};if(G.allowed){K.connectToServer();return}Z(G),await K.close({code:1008,reason:"Reason egress policy denied"})}),Q.mode==="off"?void 0:{preparePage:z}}async function $Z($,Q=eQ(),Z){if(Z){let Y=await g8(Z,{platform:Q,systemCandidates:$});return Y.status==="resolved"?Y.executablePath:null}if($!==void 0){let Y=$1($,Q);if(Y)return Y}let X=await Q9({platform:Q,systemCandidates:$,allowSystemBrowser:!0});return X.status==="resolved"?X.executablePath:null}function rQ($,Q){if(!$)throw Error("hands_repl_workspace_required");let Z=h8($),X=Z9($),Y=v8(X,Z9(X,Q)),z=Y!==".."&&!Y.startsWith(`..${c8}`)&&!iQ(Y)?Z9(Z,Y):Z9(Z,Q);if(D0(Z9(X,Q))||D0(z))throw Error("hands_repl_protected_path");let K=(U)=>{let F=v8(Z,U);return F!==""&&F!==".."&&!F.startsWith(`..${c8}`)&&!iQ(F)},G=h8(z);if(D0(G))throw Error("hands_repl_protected_path");if(!K(z)||!K(G))throw Error("hands_repl_file_outside_workspace");let W=v8(Z,z).split(c8),L=[Z,...W.map((U,F)=>Z9(Z,...W.slice(0,F+1)))],B=L.map((U)=>nQ(U));if(B.some((U)=>U.isSymbolicLink()))throw Error("hands_repl_file_symlink");let V=B[B.length-1];if(!V.isFile()||V.nlink!==1||V.size>16777216)throw Error("hands_repl_file_not_regular_or_too_large");let H=l3(z,y8.O_RDONLY|y8.O_NOFOLLOW|y8.O_NONBLOCK);try{let U=p3(H);if(U.dev!==V.dev||U.ino!==V.ino||!U.isFile())throw Error("hands_repl_file_changed");for(let T=0;T<L.length;T++){let I=nQ(L[T]);if(I.dev!==B[T].dev||I.ino!==B[T].ino||I.isSymbolicLink())throw Error("hands_repl_file_changed")}if(!K(h8(z)))throw Error("hands_repl_file_outside_workspace");let F=Buffer.alloc(16777217),N=0;while(N<F.length){let T=u3(H,F,N,F.length-N,null);if(!T)break;N+=T}if(N===F.length)throw Error("hands_repl_file_too_large");let D=F.subarray(0,N);return{name:r3(z),mimeType:V1[t3(z).toLowerCase()]??"application/octet-stream",buffer:D}}finally{d3(H)}}function X9($,Q){$.end(`${JSON.stringify(Q)}
-`)}function l9($){try{s3($)}catch{}}async function QZ($){if($.managedBrowser&&$.driverModuleDirectory!==void 0)throw Error("hands_browser_ambiguous_driver_configuration");let Q=$.launch||$.targetContext?null:$.managedBrowser?await g8($.managedBrowser,{executablePath:$.browserExecutablePath}):await Q9({executablePath:$.browserExecutablePath,driverModuleDirectory:$.driverModuleDirectory});if(Q?.status==="unavailable")throw Error(`hands_browser_${Q.reason}`);let Z=Q?.status==="resolved"?Q.executablePath:$.browserExecutablePath;if(!Z||!T9(Z))throw Error("hands_browser_unavailable");let X=$.launch??(async(M)=>($.targetContext?await Q1():(await p9($.managedBrowser?.driverModuleDirectory??$.driverModuleDirectory)).chromium).launch(M)),Y=[],J={},z=null,K=null,G=null,W=null,L=!1,B=null,V=new Map,H=new WeakMap,U=null,F=()=>{if(L)throw Error("hands_repl_stopped");if(W)throw W},N=(M)=>{let C=H.get(M);if(C)return C;let x=Promise.resolve().then(()=>M.close()).then(()=>{V.delete(M)});return H.set(M,x),x},D=async()=>{let M=[...V.entries()].reverse(),C=U??=performance.now()+G1,x=Promise.allSettled(M.filter(([,O])=>O==="context").map(([O])=>N(O))),f;try{await Promise.race([x,new Promise((O)=>{f=setTimeout(O,Math.max(0,C-performance.now()))})])}finally{if(f)clearTimeout(f)}let R=await Promise.allSettled(M.map(([O])=>N(O))),S=[];for(let[O,w]of R.entries()){if(w.status!=="rejected")continue;let d=w.reason instanceof Error&&["Error","TimeoutError","ProtocolError"].includes(w.reason.name)?w.reason.name:"unknown";S.push(Error(`hands_repl_close_failed: ${M[O][1]}: ${d}`))}if(S.length)throw AggregateError(S,"hands_repl_stop_unconfirmed")},T=(M,C)=>{if(V.set(M,C),L||W)N(M).catch(()=>{return}),F();return M},I=async()=>{let M=await X({executablePath:Z,headless:!0,chromiumSandbox:$.managedBrowser===void 0,args:["--disable-background-networking","--disable-quic","--disable-dev-shm-usage","--disable-gpu","--disable-software-rasterizer","--dns-prefetch-disable","--force-webrtc-ip-handling-policy=disable_non_proxied_udp","--no-pings"]}),C=null;try{T(M,"browser"),C=$.targetContext??T(await M.newContext({viewport:{width:1440,height:900},screen:{width:1440,height:900},serviceWorkers:"block",acceptDownloads:!1}),"context");let x=await W1(C,$.networkPolicy??{mode:"off"},$.onEgressDenied);if(F(),x){let m=C.newPage.bind(C);C.newPage=async()=>{let l=await m();return await x.preparePage(l),l}}let R=C.pages()[0]??await C.newPage();await x?.preparePage(R),F();let S=async(m=R)=>{let l=m;if(typeof l.ariaSnapshot==="function")return l.ariaSnapshot({timeout:1e4});return R.locator("body").innerText({timeout:1e4})},O=async(m,l={})=>{let u=l&&typeof l==="object"&&!Array.isArray(l)?l:{},a,U0="image/png";if(Buffer.isBuffer(m)||m instanceof Uint8Array)a=Buffer.from(m);else if(typeof m==="string"&&(m.startsWith("data:")||/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(m)))a=Buffer.from(m.replace(/^data:[^,]*,/,""),"base64");else if(typeof m==="string"){let R0=rQ($.workspaceRoot,m);a=R0.buffer,U0=R0.mimeType}else throw Error("view() needs a Buffer, a base64 string, or a path to an image file");if(a.length===0)throw Error("view(): the image is empty");let z8=String(u.label??"").replace(/[\r\n>]+/g," ").trim().slice(0,120),q0=Number(u.maxWidth)||1024,u0=Number(u.quality)||72,_9=$.targetContext?await M.newPage():await C.newPage();try{let R0=`data:${U0};base64,${a.toString("base64")}`;for(let o=0;o<5;o+=1){let B0=await _9.evaluate(async(K0)=>{let F0=new Image;F0.src=K0.url,await F0.decode();let S0=Math.min(1,K0.maxWidth/F0.naturalWidth),Y0=document.createElement("canvas");Y0.width=Math.max(1,Math.round(F0.naturalWidth*S0)),Y0.height=Math.max(1,Math.round(F0.naturalHeight*S0));let Q0=Y0.getContext("2d");if(!Q0)throw Error("view(): canvas unavailable");return Q0.fillStyle="#ffffff",Q0.fillRect(0,0,Y0.width,Y0.height),Q0.drawImage(F0,0,0,Y0.width,Y0.height),{data:Y0.toDataURL("image/jpeg",K0.q/100).split(",")[1]??"",width:Y0.width,height:Y0.height,sourceWidth:F0.naturalWidth,sourceHeight:F0.naturalHeight}},{url:R0,maxWidth:q0,q:u0}),s0=Buffer.from(B0.data,"base64");if(s0.length<=oQ){let K0=z8||"image";return`<<<ARA_VIEW_IMAGE ${B0.data} image/jpeg ${K0}>>>
-Viewing ${K0} (${B0.sourceWidth}x${B0.sourceHeight} source, sent at ${B0.width}x${B0.height}, ${Math.round(s0.length/1024)}KB).`}if(q0>640)q0=Math.round(q0*0.75);else u0=Math.max(30,u0-15)}throw Error(`view(): could not reduce the image under ${Math.round(oQ/1024)}KB`)}finally{await _9.close().catch(()=>{return})}},w=kQ({browser:$.targetContext?.browser()??M,context:C,page:R,a11y:S,view:O,readWorkspaceFile:(m)=>rQ($.workspaceRoot,m),privateProfile:$.privateProfile,beforeNavigation:$.beforeNavigation,recording:$.recording,screenshotExport:$.screenshotExport,actionRecorder:()=>{let m=Y,l=J;return(u,a)=>{if(m.length<tQ)m.push(u);if(a)l.page=a}}}),d=async(m)=>{F();let l=T(await M.newContext({serviceWorkers:"block",acceptDownloads:!1}),"context");try{await l.route("**/*",(a)=>a.abort()),F(),await l.routeWebSocket("**/*",(a)=>a.close({code:1008,reason:"Reason evaluator network denied"})),F(),await l.exposeBinding("__araHandsRpc",async(a,U0)=>$.onBrowserOperation?$.onBrowserOperation(m,()=>w.dispatch(U0)):w.dispatch(U0)),F();let u=await l.newPage();return F(),await u.goto("data:text/html,<title>Reason Hands evaluator</title>"),F(),await u.evaluate(`(${IQ})(${JSON.stringify(w.roots)})`),{context:l,page:u,runId:m}}catch(u){throw await N(l).catch(()=>{return}),u}},p=await d(),e={browser:M,context:C,page:R,evaluator:p,async captureProgressFrame(m){return O(await m.screenshot({type:"jpeg",quality:65,timeout:2000}),{label:"Screen after browser action"})},async resetEvaluator(m){await N(e.evaluator.context),e.evaluator=await d(m)}};return F(),e}catch(x){throw await D().catch(()=>{return}),x}},k=async()=>{if(F(),z)return z;if(!G){K=I();let M;G=Promise.race([K,new Promise((C,x)=>{M=setTimeout(()=>x(Error("hands_browser_unavailable: startup timed out")),Y1)})]).then((C)=>{return F(),z=C,C}).catch(async()=>{W=Error("hands_browser_unavailable: startup failed or timed out");let C;try{await Promise.race([D(),new Promise((x,f)=>{C=setTimeout(()=>f(Error("hands_repl_stop_timeout")),aQ)})])}catch{W=Error("hands_browser_unavailable: startup cleanup unconfirmed")}finally{if(C)clearTimeout(C)}throw W}).finally(()=>{if(M)clearTimeout(M)})}return G},y=async(M,C,x=!1)=>{let f=await k(),R=J;if($.onBrowserOperation&&f.evaluator.runId!==C)await f.resetEvaluator(C);let O=(async()=>{let p=await f.evaluator.page.evaluate(`(${_Q})(${JSON.stringify({code:M})})`);if(typeof p!=="string")throw Error("hands_repl_invalid_evaluator_output");let e=R.page;if(x&&e&&!p.includes("<<<ARA_VIEW_IMAGE")){let m=()=>f.captureProgressFrame(e);try{let l=await($.onBrowserOperation?$.onBrowserOperation(C,m):m());return R.automaticProgressImage=!0,`${p}
-${l}`}catch{return`${p}
-Screen capture unavailable.`}}return p})(),w,d=new Promise((p,e)=>{w=setTimeout(()=>e(Error("REPL evaluation timed out after 105 seconds")),X1)});try{return await Promise.race([O,d])}catch(p){if(p instanceof Error&&p.message.includes("timed out"))O.catch(()=>{return}),await f.resetEvaluator(C).catch(()=>{return});throw p}finally{if(w)clearTimeout(w)}},q=Promise.resolve(),b=new Set,g=new Set;l9($.socketPath);let A=y0.createServer((M)=>{b.add(M),M.once("close",()=>{b.delete(M),g.delete(M)}),M.setEncoding("utf8");let C="",x=!1;M.on("data",(f)=>{if(x)return;if(C+=f,C.length>Z1){x=!0,X9(M,{ok:!1,error:"REPL request exceeds 1 MiB"});return}let R=C.indexOf(`
-`);if(R===-1)return;x=!0;let S=C.slice(0,R);if($.onControl)try{let O=JSON.parse(S);if(typeof O.action==="string"&&O.action!=="evaluate")g.add(M)}catch{}q=q.then(async()=>{if(M.destroyed)return;Y=[],J={};try{let O=JSON.parse(S);if(O.action==="probe"){let m=await k();await y("undefined",m.evaluator.runId),X9(M,{ok:!0,output:"ARA_HANDS_REPL_READY"});return}if(typeof O.action==="string"&&O.action!=="evaluate"&&$.onControl){X9(M,{ok:!0,output:await $.onControl(O.action,O)});return}if(O.action!=="evaluate"||typeof O.code!=="string")throw Error("Invalid REPL request");let w=O.code,d=typeof O.runId==="string"?O.runId:void 0,p=()=>y(w,d,O.includeProgressCapture===!0),e=await($.onEvaluate?$.onEvaluate(O,p):p());X9(M,{ok:!0,output:e,browserActions:Y,...J.automaticProgressImage?{automaticProgressImage:!0}:{}})}catch(O){X9(M,{ok:!1,error:O instanceof Error?O.message:String(O),stack:O instanceof Error?O.stack:void 0,browserActions:Y})}}).catch((O)=>{X9(M,{ok:!1,error:O instanceof Error?O.message:String(O)})})})});try{await new Promise((M,C)=>{A.once("error",C),A.listen($.socketPath,()=>{A.off("error",C);try{if(process.platform!=="win32")c3($.socketPath,384);M()}catch(x){A.close(()=>C(x))}})})}catch(M){throw l9($.socketPath),M}return{socketPath:$.socketPath,browserExecutablePath:Z,stop(){if(B)return B;L=!0;let M=g.size?setTimeout(()=>{for(let R of g)R.destroy()},J1):void 0,C=new Promise((R)=>A.close(()=>{if(M)clearTimeout(M);R()}));for(let R of b)if(!g.has(R))R.destroy();q.catch(()=>{return});let x=async()=>{await C,l9($.socketPath);let R=[D()];if(K)R.push(K.then(()=>{return},()=>{return}));let S=await Promise.allSettled(R),O=await Promise.allSettled([D()]),w=[...S,...O].filter((d)=>d.status==="rejected");if(w.length)throw AggregateError(w.map((d)=>d.reason),"hands_repl_stop_unconfirmed")},f;return B=Promise.race([x(),new Promise((R,S)=>{f=setTimeout(()=>S(Error("hands_repl_stop_timeout")),aQ)})]).finally(()=>{if(f)clearTimeout(f);l9($.socketPath)}),B}}}var B1=["private_runtime","runtime_root","temporary_directory","granted_root","workspace_layout","jobs","browser_socket","relay_url","environment_owner","job_environment","config_write"],F1=["ENOENT","EACCES","EPERM","EINVAL","ENOTDIR","EISDIR","ELOOP","EROFS","ENOSPC","EMFILE","ENFILE","EEXIST"];function ZZ($,Q){if(!$||!B1.includes($))return null;let Z=typeof Q==="object"&&Q!==null&&"code"in Q?Q.code:null;return{workspace_stage:$,workspace_errno:typeof Z==="string"&&F1.includes(Z)?Z:"unknown"}}import{lstatSync as L1,readFileSync as U1}from"fs";var H1="/run/sc/egress-guard",M1=10002,d8=10003;function XZ($=process.platform,Q=H1){if($!=="linux")return!1;try{let Z=L1(Q);if(!Z.isFile()||Z.uid!==0||(Z.mode&18)!==0)return!1;return U1(Q,"utf8")===`v1 ${M1} ${d8}
-`}catch{return!1}}var j1=/^(\/.+)-sidechat-([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/;function YZ($){let Q=j1.exec($.replace(/\/+$/,""));return Q?`${Q[1]}/repo`:null}import{randomUUID as U7}from"crypto";import{spawn as H7,spawnSync as M7}from"child_process";import{accessSync as j7,chmodSync as I9,closeSync as N7,constants as K9,fchmodSync as C7,fstatSync as T7,openSync as q7,copyFileSync as D7,existsSync as Z$,lstatSync as i,statSync as l0,mkdtempSync as O7,mkdirSync as F9,realpathSync as c,renameSync as Q8,rmSync as I7,writeFileSync as Z8}from"fs";import{homedir as _7,tmpdir as dZ}from"os";import{basename as x7,dirname as X0,join as n,resolve as pZ,sep as P7}from"path";var N1={"navigation.ara-egress.invalid":"canary_navigation","fetch.ara-egress.invalid":"canary_fetch","subresource.ara-egress.invalid":"canary_subresource","codeload.github.com":"canary_redirect","websocket.ara-egress.invalid":"canary_websocket"};function JZ($){return $===null?"other":N1[$]??"other"}function V0($,Q){if($===void 0||Q===void 0)return null;let Z=Math.round(Q-$);return Number.isSafeInteger(Z)&&Z>=0&&Z<=600000?Z:null}var h="workspace_mode",P0="granted_root",W0="project_root",Y9="terminal_root",J9="terminal_benchmark_tool_profile",C1=["bash","bash-node-repl","bash-node-repl-files"],GZ="hands_node_repl_persistent_execution_unsupported";function zZ($){return $==="bash"?null:"hands_node_repl_persistent_execution_unsupported"}function p8($){return C1.includes($)}function PX($){return T1($)&&$.workspace_mode==="terminal_root"&&p8($.terminal_benchmark_tool_profile)}function T1($){return typeof $==="object"&&$!==null&&!Array.isArray($)}var wX=_.object({device_id:_.string().uuid(),root_id:_.string().uuid()}),u8=/^reason\/[0-9a-f]{8}$/,q1=_.strictObject({source_path:_.string().refine(h0).optional(),branch:_.string().regex(u8)}),bX=_.object({checkout_mode:_.enum(["worktree","direct"]).optional(),project_workspace_source:_.object({kind:_.literal("local_device"),device_id:_.string().uuid(),root_id:_.string().uuid(),path:_.string().refine(h0).optional(),worktree:q1.optional()})});import{execFile as D1}from"child_process";var O1=20000,I1=1e4,VZ=/^[0-9a-f]{40}(?:[0-9a-f]{24})?$/,_1=["-c","core.hooksPath=/dev/null","-c","core.fsmonitor=false","-c","gc.auto=0","-c","maintenance.auto=false"];async function KZ($,Q=x1){let Z=(N,D=I1)=>Q([..._1,"-C",$,...N],D),X=async(N)=>{let D=await Z(N);return D.status===0?D.stdout.trim():null},Y=await X(["rev-parse","--verify","--quiet","HEAD^{commit}"]);if(!Y||!VZ.test(Y))return null;let J=Y.slice(0,12),z=(N)=>({commit:Y,from:"head",note:`reason: started from ${N}`}),K=await X(["symbolic-ref","--quiet","HEAD"]);if(!K?.startsWith("refs/heads/"))return z(`the checkout's detached HEAD ${J}`);let G=K.slice(11),W=await Z(["--no-optional-locks","status","--porcelain=v1","--untracked-files=no"]);if(W.status!==0||W.stdout.trim())return z(`${G} at ${J}: the checkout has uncommitted changes, which stay there`);let L=await X(["config","--get",`branch.${G}.remote`]),B=await X(["config","--get",`branch.${G}.merge`]);if(!L||!B?.startsWith("refs/")||L.startsWith("-"))return z(`${G} at ${J}: it has no upstream to catch up with`);let V=L==="."||(await Z(["fetch","--quiet","--no-tags","--no-write-fetch-head","--no-recurse-submodules",L,B],O1)).status===0,H=await X(["rev-parse","--abbrev-ref","--symbolic-full-name","@{upstream}"]),U=H?await X(["rev-parse","--verify","--quiet","@{upstream}^{commit}"]):null;if(!H||!U||!VZ.test(U))return z(`${G} at ${J}: ${V?"it has no upstream to catch up with":`fetching ${L} failed`}`);if(!V)return z(`${G} at ${J}: fetching ${H} failed, so it may be behind`);if(U===Y)return z(`${G} at ${J}, the same commit as ${H} after fetching it`);if((await Z(["merge-base","--is-ancestor",Y,U])).status!==0)return z(`${G} at ${J}: it has commits that ${H} does not`);let F=await X(["rev-list","--count",`${Y}..${U}`]);return{commit:U,from:"upstream",note:`reason: started from ${H} at ${U.slice(0,12)}, fetched just now: ${G} had no commits of its own and was ${F??"some"} commits behind it`}}function x1($,Q){return new Promise((Z)=>{D1("git",$,{encoding:"utf8",timeout:Q,maxBuffer:1048576,env:{...process.env,GIT_TERMINAL_PROMPT:"0"}},(X,Y)=>{let J=X?typeof X.code==="number"?X.code:null:0;Z({status:J,stdout:String(Y??"")})})})}import{execFile as P1}from"child_process";import{lstatSync as i8,readdirSync as s8,readFileSync as FZ,realpathSync as u9,rmdirSync as WZ,unlinkSync as A1,writeFileSync as E1}from"fs";import{readFile as R1}from"fs/promises";import{join as C0,resolve as BZ}from"path";var q9=".reason-device",S1=86400000,w1=500,b1=60000;function LZ($,Q,Z){let X=Q.split("/"),Y=G9.split("/");if(X.length!==Y.length+2||Y.some((J,z)=>X[z]!==J)||!s9.test(X[Y.length]))return;try{let J=UZ($,X[Y.length]);E1(C0(J,q9),Z,{flag:"wx",mode:384})}catch{}}function UZ($,Q){let Z=()=>new j("session_worktree_outside_workspace","Reason removes only Session folders in ~/.reason/workspace/sessions.");if(!s9.test(Q))throw Z();let X=C0(u9($),G9),Y=C0(X,Q);if(!i8(Y).isDirectory()||u9(Y)!==Y)throw Z();return Y}async function k1($,Q,Z=m1){let X;try{X=UZ($,Q)}catch(Y){if(n8(Y))return!0;throw Y}for(let Y of s8(X,{withFileTypes:!0})){if(Y.name===q9||!Y.isDirectory())continue;let J=C0(X,Y.name),z=await f1(J);if(z){let K=["-c","core.hooksPath=/dev/null","-c","core.fsmonitor=false",`--git-dir=${z}`,"worktree"];if((await Z([...K,"remove","--force",J])).status===0)await Z([...K,"prune"])}else try{WZ(J)}catch{}}if(s8(X).some((Y)=>Y!==q9))return!1;try{A1(C0(X,q9))}catch(Y){if(!n8(Y))throw Y}return WZ(X),!0}async function f1($){try{let Q=C0($,".git");if(!i8(Q).isFile())return null;let Z=/^gitdir: (.+)$/m.exec(FZ(Q,"utf8"));if(!Z)return null;let X=BZ($,Z[1].trim());return BZ(X,(await R1(C0(X,"commondir"),"utf8")).trim())}catch{return null}}async function pX($){let Q;try{if(Q=C0(u9($.home),G9),!i8(Q).isDirectory())return{status:"skipped",reason:"workspace_untrusted"};if(u9(Q)!==Q)return{status:"skipped",reason:"workspace_untrusted"}}catch(J){if(n8(J))return{status:"skipped",reason:"no_workspace"};throw J}let Z=s8(Q,{withFileTypes:!0}).filter((J)=>J.isDirectory()&&s9.test(J.name)).map((J)=>J.name).filter((J)=>{try{return FZ(C0(Q,J,q9),"utf8")===$.deviceId}catch{return!1}}).sort().slice(0,w1);if(!Z.length)return{status:"done",removed:[],kept:[],failed:[]};let X=await $.liveIds(Z);if(X===null)return{status:"skipped",reason:"server_unsupported"};let Y={status:"done",removed:[],kept:Z.filter((J)=>X.includes(J)),failed:[]};for(let J of Z.filter((z)=>!X.includes(z)))(await k1($.home,J,$.runGit).catch(()=>!1)?Y.removed:Y.failed).push(J);return Y}function lX($,Q,Z=S1){if(Q.aborted)return;let X=!1,Y=()=>{if(X||Q.aborted)return;X=!0,$().catch(()=>{return}).finally(()=>{X=!1})},J=setInterval(Y,Z);J.unref?.(),Q.addEventListener("abort",()=>clearInterval(J),{once:!0}),Y()}function n8($){return typeof $==="object"&&$!==null&&$.code==="ENOENT"}function m1($){return new Promise((Q)=>{P1("git",$,{encoding:"utf8",timeout:b1,maxBuffer:1048576,env:{...process.env,GIT_TERMINAL_PROMPT:"0"}},(Z,X,Y)=>{let J=Z&&typeof Z.code==="number"?Z.code:null;Q({status:Z?J??1:0,stderr:Y??""})})})}import{createHash as g1}from"crypto";import{join as y1}from"path";function h1($){return n9($)}function T0(){throw new j("environment_unavailable","The private Session environment is unavailable or stale.")}function i9($){return g1("sha256").update(JSON.stringify({...$,variables:Object.fromEntries(Object.entries($.variables).sort(([Q],[Z])=>Q.localeCompare(Z)))})).digest("hex")}function MZ($,Q){o9($);let Z=y1($,"environment.json"),X,Y=new Set,J=(K,G)=>`${G}:${K}`,z=(K)=>{let G=UQ.safeParse(K);if(!G.success)return T0();let W=G.data,L=Q.identity(),B=Date.parse(W.expires_at);if(!L||W.run_id!==Q.runId||W.device_id!==Q.deviceId||W.root_id!==Q.rootId||W.binding.kind!==Q.binding.kind||W.binding.target_revision!==Q.binding.target_revision||W.binding.root_grant_revision!==Q.binding.root_grant_revision||W.binding.target_generation!==L.generation||W.binding.target_fence_id!==L.fenceId||B<=Date.now()||B>Q.expiresAtMs||Q.expiresAtMs<=Date.now()||Object.keys(W.variables).some((V)=>!h1(V)))return T0();if(W.git){let V=new URL(Q.apiOrigin),H=new URL(W.git.base_url),U=Date.parse(W.git.expires_at);if(H.origin!==V.origin)throw new j("environment_git_origin_mismatch","The delivered Git broker is not on this worker's API origin.");if(!["/git","/git/"].includes(H.pathname)||H.username||H.password||H.search||H.hash||U<=Date.now()||U>B)return T0()}if(W.cloud_access&&!FQ(W.cloud_access,Q.apiOrigin))throw new j("environment_cloud_access_origin_mismatch","The delivered cloud access is not on this worker's API origin.");return W};return{path:Z,install(K){let G=z(K),W=i9(G);if(X&&(G.revision<X.revision||G.revision===X.revision&&(W!==X.hash||G.snapshot_id!==X.snapshotId)))return T0();if(!X||G.revision>X.revision){if(HZ(Z,G,N0.snapshotBytes),i9(z(JSON.parse(a9(Z,N0.snapshotBytes))))!==W)return T0();let L=X;if(X={revision:G.revision,hash:W,snapshotId:G.snapshot_id,generation:G.binding.target_generation},L&&L.generation<X.generation)Y.add(J(L.snapshotId,L.revision))}else if(i9(z(JSON.parse(a9(Z,N0.snapshotBytes))))!==X.hash)return T0();return{installed:!0,snapshot_id:G.snapshot_id,installed_revision:G.revision}},current(){if(!X)return T0();try{let K=z(JSON.parse(a9(Z,N0.snapshotBytes)));if(i9(K)!==X.hash)return T0();return K}catch{return T0()}},carried:(K,G)=>Y.has(J(K,G))}}var z9=Object.freeze([Object.freeze({version:"0.2.61",artifact_sha256:"02ffcd514bf7cc0a9e73d4ce31ecea32709429cd0adf79e7062c1b70ff9ab8b8",legacy_linux_x64_sha256:"cdc0828abde3157e39afc6a64e033deee52ff7cfb09b55a42e60394df24980b9"}),Object.freeze({version:"0.2.62",artifact_sha256:"20a77fff617e18315c60777d46a2de2c433e42eba4e1c5e0b5535d967847303d",legacy_linux_x64_sha256:"cce594365d518b680abfb2378d234c8ef4e3daf257df83adef650a4523fb2d92"}),Object.freeze({version:"0.2.63",artifact_sha256:"20a77fff617e18315c60777d46a2de2c433e42eba4e1c5e0b5535d967847303d"}),Object.freeze({version:"0.2.64",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.65",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.66",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.67",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.68",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.69",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.70",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.71",artifact_sha256:"830afe8cffb1f4ebb2663b5f86e5d2a7c9965fa03706178b251eea5d415917d2"}),Object.freeze({version:"0.2.72",artifact_sha256:"6071ba92082b8378f5484e8dce446d3f0c3bde61d5b5ca48efa6f72389d3ab64"}),Object.freeze({version:"0.2.73",artifact_sha256:"6071ba92082b8378f5484e8dce446d3f0c3bde61d5b5ca48efa6f72389d3ab64"}),Object.freeze({version:"0.2.74",artifact_sha256:"6071ba92082b8378f5484e8dce446d3f0c3bde61d5b5ca48efa6f72389d3ab64"}),Object.freeze({version:"0.2.75",artifact_sha256:"a6e0648894f1f4876affd77c0ff42642c1f9cbe9bb752de19d7a97a5fb3b820e"}),Object.freeze({version:"0.2.76",artifact_sha256:"857446b7e0b25fe1cc21e58860c7d984ee9a1c28efb4a4c49bc573a2d70bb3c0"}),Object.freeze({version:"0.2.77",artifact_sha256:"857446b7e0b25fe1cc21e58860c7d984ee9a1c28efb4a4c49bc573a2d70bb3c0"}),Object.freeze({version:"0.2.78",artifact_sha256:"0a7a7ece14850a28b8f972d66e4eef570eb2bb75d58f8a82f4e9afe91424e27f",pi_tools_v1:!0}),Object.freeze({version:"0.2.79",artifact_sha256:"96f52656b454fc5b9ffe520f5c5d55720b5173eb084cd326d2710e434623897b",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.80",artifact_sha256:"6ee0ed70889e2771bd9b239ee039b549361b56ce870e08956ec7cce7fa199cd7",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.81",artifact_sha256:"c8909b36f4ee9316c0c3e298cb9adb5fc821a6ec5ca365cab60043eb942c258a",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.82",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.83",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.84",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.85",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.86",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.87",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.88",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.89",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.90",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.91",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.92",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.93",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.94",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.95",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.96",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.97",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.98",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.99",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.100",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.101",artifact_sha256:"38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.102",artifact_sha256:"53da53b31916c077bd63814db6cef8646785352d628b06a9ded927a94b08ecdd",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.103",artifact_sha256:"53da53b31916c077bd63814db6cef8646785352d628b06a9ded927a94b08ecdd",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.104",artifact_sha256:"53da53b31916c077bd63814db6cef8646785352d628b06a9ded927a94b08ecdd",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.105",artifact_sha256:"53da53b31916c077bd63814db6cef8646785352d628b06a9ded927a94b08ecdd",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.106",artifact_sha256:"53da53b31916c077bd63814db6cef8646785352d628b06a9ded927a94b08ecdd",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.107",artifact_sha256:"53da53b31916c077bd63814db6cef8646785352d628b06a9ded927a94b08ecdd",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.108",artifact_sha256:"53da53b31916c077bd63814db6cef8646785352d628b06a9ded927a94b08ecdd",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.109",artifact_sha256:"7a82b33611b9f47478fb181d0da6f49a04f7e4bc401a7752530fecffb2dc5864",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.110",artifact_sha256:"00b7dcc9078a7d7ea4814414fbf92dcf9ba3b0fd51186aac1b967e9ae306a377",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.111",artifact_sha256:"7688e992667a48defe6fefb3b8624012b918e8776498faf9e5b20b69c13d7520",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.112",artifact_sha256:"7688e992667a48defe6fefb3b8624012b918e8776498faf9e5b20b69c13d7520",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.113",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.114",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.115",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.116",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.117",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.118",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.119",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.120",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.121",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.122",artifact_sha256:"cc134e4d22b3f4032099d9f3c18a95815177598e0e6658840702e0dafaf5c7ad",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.123",artifact_sha256:"ae68959cc57c3d3e360ba16883479d0706a0c2e742fe61a66b78e12fbbf5463e",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.124",artifact_sha256:"ae68959cc57c3d3e360ba16883479d0706a0c2e742fe61a66b78e12fbbf5463e",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.125",artifact_sha256:"503ec2935bd73740bca494782cea6e6740667ce416d1a526c8cdf152ab3d0090",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.126",artifact_sha256:"503ec2935bd73740bca494782cea6e6740667ce416d1a526c8cdf152ab3d0090",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.127",artifact_sha256:"503ec2935bd73740bca494782cea6e6740667ce416d1a526c8cdf152ab3d0090",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.128",artifact_sha256:"852f8b11cee963d2f077f010b5c836fab0ee84e0026c4762bc4c7ef28e4deb2b",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.129",artifact_sha256:"852f8b11cee963d2f077f010b5c836fab0ee84e0026c4762bc4c7ef28e4deb2b",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.130",artifact_sha256:"852f8b11cee963d2f077f010b5c836fab0ee84e0026c4762bc4c7ef28e4deb2b",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.131",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.132",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.133",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.134",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.135",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.136",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.137",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.138",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.139",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.140",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.141",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.142",artifact_sha256:"39e5173130068852fd81ffbe0f75cf52d7afcfcd92d640fedda85e1993960527",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.143",artifact_sha256:"ddd5382224321a671a5e338ccc8f9aae09ad876b534e6a8bfec07dc04c5b57d3",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.144",artifact_sha256:"ddd5382224321a671a5e338ccc8f9aae09ad876b534e6a8bfec07dc04c5b57d3",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.145",artifact_sha256:"ddd5382224321a671a5e338ccc8f9aae09ad876b534e6a8bfec07dc04c5b57d3",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0}),Object.freeze({version:"0.2.146",artifact_sha256:"8b2959fed27dff6769a0124ecbbddceaa671dc2dd502f5f77d54dbe69c99e4b5",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.147",artifact_sha256:"8b2959fed27dff6769a0124ecbbddceaa671dc2dd502f5f77d54dbe69c99e4b5",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.148",artifact_sha256:"8b2959fed27dff6769a0124ecbbddceaa671dc2dd502f5f77d54dbe69c99e4b5",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.149",artifact_sha256:"8b2959fed27dff6769a0124ecbbddceaa671dc2dd502f5f77d54dbe69c99e4b5",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.150",artifact_sha256:"8b2959fed27dff6769a0124ecbbddceaa671dc2dd502f5f77d54dbe69c99e4b5",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.151",artifact_sha256:"8b2959fed27dff6769a0124ecbbddceaa671dc2dd502f5f77d54dbe69c99e4b5",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.152",artifact_sha256:"065b5bfc86ec87cf2907d83864ffef9912a8cb18b2b36db435c74cfd3891b8f8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.153",artifact_sha256:"065b5bfc86ec87cf2907d83864ffef9912a8cb18b2b36db435c74cfd3891b8f8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.154",artifact_sha256:"065b5bfc86ec87cf2907d83864ffef9912a8cb18b2b36db435c74cfd3891b8f8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.155",artifact_sha256:"065b5bfc86ec87cf2907d83864ffef9912a8cb18b2b36db435c74cfd3891b8f8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.156",artifact_sha256:"065b5bfc86ec87cf2907d83864ffef9912a8cb18b2b36db435c74cfd3891b8f8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.157",artifact_sha256:"065b5bfc86ec87cf2907d83864ffef9912a8cb18b2b36db435c74cfd3891b8f8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.158",artifact_sha256:"065b5bfc86ec87cf2907d83864ffef9912a8cb18b2b36db435c74cfd3891b8f8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0}),Object.freeze({version:"0.2.159",artifact_sha256:"cc806ca6df14c39d45a944d1e1db9827dae35b3e66e0265ededb3eea3d883dcb",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.160",artifact_sha256:"0b8f6c4598a19acbeff93929efc237dbc4e356ccb26abf6957e297bfc1b551e8",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.161",artifact_sha256:"d570f5035bfc5916c31f4954ce5bcc00013eec83edb020edbbfbd3260b9c17d0",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.162",artifact_sha256:"6e52c44af7a3ea3633a4dc28aa63696143cd80044bca7f67a57c4c156985566f",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.163",artifact_sha256:"8c14891abb51ab566864387137ea4af511db7ef9c565afb63e4f2b49c91260b6",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.164",artifact_sha256:"8c14891abb51ab566864387137ea4af511db7ef9c565afb63e4f2b49c91260b6",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.165",artifact_sha256:"8c14891abb51ab566864387137ea4af511db7ef9c565afb63e4f2b49c91260b6",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.166",artifact_sha256:"8c14891abb51ab566864387137ea4af511db7ef9c565afb63e4f2b49c91260b6",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.167",artifact_sha256:"62658de309f9b9c8fd70041c83898d8625d85fed303ac6e60c3a17afc85477e2",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.168",artifact_sha256:"24d7efe74218b862a90f48cf71dc59dce1d0dba29b167168aca06649bbfab364",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.169",artifact_sha256:"83879d03741c3f37c1502535d128685421cd7a498bc22543516a23ef2b21e496",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.170",artifact_sha256:"386b975277972e253599e5168b654e35c50b5eed9cbe711d7359e2efedd78f31",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.171",artifact_sha256:"386b975277972e253599e5168b654e35c50b5eed9cbe711d7359e2efedd78f31",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.172",artifact_sha256:"7a01a820961bd03b31007e46ba4f09df0a621ea5bfc9ee84548d6acdfd750169",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.173",artifact_sha256:"82c9ece017e109cf8b4b54734ac7a81b1ecb2ff35a426998369b6c3e690fd1ae",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.174",artifact_sha256:"07fa1db4f84afe909ad4de4bcdbda9bc785cf2598b51769b1f5620bb86b3743b",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.175",artifact_sha256:"07fa1db4f84afe909ad4de4bcdbda9bc785cf2598b51769b1f5620bb86b3743b",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0}),Object.freeze({version:"0.2.176",artifact_sha256:"ba3e211489877d0622aeca87be98e235d245f39d2b57f275cd924168d05f98ce",pi_tools_v1:!0,background_bash_v1:!0,machine_sdk_v1:!0,pi_tools_confinement_v1:!0,home_folder_v1:!0})]),v1="16befed856b4414dee65733e82549e1db74fe0ff3841d2571cfd8605d3ee970b",c1=Object.freeze(["ea63410f321f70848139a63ddcaa9f3f0a48daa3641898cc1db9f0e15ddfbb13","6cd101ddb09f87ed6996aa92a93911b1759b5ae33e9579c3dff8225ecfcbe1b6",v1]),jZ=Object.freeze(["0f57db3036c275f78064796a72827d0f47fe702475e5feebb31e1569bcb5a0cf","38e82c8fefcc4ef98468eb3b4f0df450e4e196a8bd1063bb4de14ffef951a0c2"]),G5=Object.freeze(["pi_tools_v1","background_bash_v1","machine_sdk_v1","pi_tools_confinement_v1","home_folder_v1","workspace_before_v1"]),z5=new Set([G0,...z9.map(($)=>$.artifact_sha256),...c1,...jZ]);var V5=new Set([G0,...z9.filter(($)=>$.pi_tools_v1).map(($)=>$.artifact_sha256),...jZ]);var K5=new Set([G0,...z9.filter(($)=>$.pi_tools_confinement_v1).map(($)=>$.artifact_sha256)]);var W5=new Set([G0,...z9.filter(($)=>$.home_folder_v1).map(($)=>$.artifact_sha256)]);var B5=new Set([G0,...z9.filter(($)=>$.background_bash_v1).map(($)=>$.artifact_sha256)]);var F5=new Set([G0,...z9.filter(($)=>$.machine_sdk_v1).map(($)=>$.artifact_sha256)]);var d1=[v0,"reason-hands-worker.cjs"];function NZ($){return typeof $==="string"&&d1.includes($)}var p1;function CZ(){return p1??{kind:"unavailable",status:"unsupported_entrypoint",sha256:null,observed_at_ms:null}}import{closeSync as l1,constants as a8,fstatSync as TZ,lstatSync as u1,openSync as s1,readSync as n1,realpathSync as i1,watch as a1}from"fs";import{dirname as qZ}from"path";function r9($,Q){let Z;try{let X=qZ($),Y=u1(X);if(!Y.isDirectory()||Y.isSymbolicLink()||!r0(Y,18)||i1(X)!==X)return null;Z=s1($,a8.O_RDONLY|a8.O_NOFOLLOW|a8.O_NONBLOCK);let J=TZ(Z);if(!J.isFile()||J.nlink!==1||!r0(J)||J.size<1||J.size>8192)return null;let z=Buffer.alloc(8193),K=n1(Z,z,0,z.length,0),G=TZ(Z);if(K!==J.size||G.size!==J.size||G.nlink!==1||G.mtimeMs!==J.mtimeMs||G.ctimeMs!==J.ctimeMs)return null;let W=JSON.parse(z.subarray(0,K).toString("utf8"));if(!W||W.pid!==Q.pid||!Number.isSafeInteger(W.pid)||W.pid<1||W.launchId!==Q.launchId||W.workerVersion!==Q.workerVersion||W.protocolVersion!==Q.protocolVersion||W.workerArtifactSha256!==Q.workerArtifactSha256||W.workerEntrypoint!==Q.workerEntrypoint||W.workspaceAliasReady!==!0||!_0(W.targetGeneration)||!_0(W.generation)||!M0(W.fenceId))return null;return{...Q,generation:W.generation,targetGeneration:W.targetGeneration,fenceId:W.fenceId,workspaceAliasReady:!0}}catch{return null}finally{if(Z!==void 0)l1(Z)}}var o1=($,Q,Z)=>{let X=a1($,{persistent:!1},Q);return X.on("error",Z),X};function DZ($){let Q=new AbortController,Z=$.initial,X=Z.targetGeneration,Y=!1,J=!1,z,K,G=()=>{if(J)return;J=!0,z?.close(),z=void 0,clearInterval(K),$.signal.removeEventListener("abort",G),Q.abort()},W=()=>{if(J)return;if(!$.isAlive()){G();return}let L=r9($.path,$.initial);if(!L||L.generation<Z.generation||L.targetGeneration<Z.targetGeneration||L.targetGeneration===Z.targetGeneration&&L.fenceId!==Z.fenceId)return;if(Z=L,Y||L.targetGeneration<=X)return;X=L.targetGeneration,Y=!0,Promise.resolve().then(()=>{return Q.signal.throwIfAborted(),$.publish(L,Q.signal)}).catch(()=>{if(!J)G(),$.failed?.()}).finally(()=>{Y=!1,W()})};if($.signal.aborted)return G(),{stop:G};$.signal.addEventListener("abort",G,{once:!0});try{z=($.watch??o1)(qZ($.path),W,()=>{z?.close(),z=void 0})}catch{}return K=setInterval(W,1000),K.unref?.(),W(),{stop:G}}import{spawn as r1}from"child_process";import{chmodSync as t1,mkdtempSync as e1,realpathSync as $7,rmSync as Q7,unlinkSync as Z7,writeFileSync as X7}from"fs";import Y7 from"net";import{platform as J7,tmpdir as G7}from"os";import{join as OZ}from"path";var IZ=1048576,t8=105000,z7=2000,V7=String.raw`
-const { writeSync } = require("node:fs");
-const { createRequire } = require("node:module");
-const { join } = require("node:path");
-const { createInterface } = require("node:readline");
-const { formatWithOptions, inspect } = require("node:util");
-const vm = require("node:vm");
-
-const timeoutMs = ${t8};
-const maxLogChars = 524288;
-let activeOutput = [];
-let activeOutputChars = 0;
-function appendOutput(value) {
-  if (activeOutputChars >= maxLogChars) return;
-  const kept = String(value).slice(0, maxLogChars - activeOutputChars);
-  activeOutput.push(kept);
-  activeOutputChars += kept.length;
-}
-const replConsole = Object.fromEntries(
-  ["log", "info", "warn", "error", "debug"].map((method) => [
-    method,
-    (...args) => {
-      const formatted = formatWithOptions({ colors: false }, ...args);
-      appendOutput(formatted + "\n");
-    },
-  ]),
-);
-const originalProcessKill = process.kill.bind(process);
-function selfOnlyProcessKill(pid, signal) {
-  if (pid !== process.pid) {
-    const error = new Error("kill EPERM");
-    error.code = "EPERM";
-    error.errno = -1;
-    error.syscall = "kill";
-    throw error;
-  }
-  return originalProcessKill(pid, signal);
-}
-Object.defineProperty(process, "kill", {
-  value: selfOnlyProcessKill,
-  configurable: false,
-  enumerable: true,
-  writable: false,
-});
-Object.defineProperty(process, "_kill", {
-  value: selfOnlyProcessKill,
-  configurable: false,
-  enumerable: false,
-  writable: false,
-});
-const localRequire = createRequire(join(process.cwd(), "__ara_hands_node_repl__.js"));
-const context = vm.createContext({
-  AbortController,
-  AbortSignal,
-  Buffer,
-  URL,
-  URLSearchParams,
-  clearImmediate,
-  clearInterval,
-  clearTimeout,
-  console: replConsole,
-  fetch,
-  process,
-  queueMicrotask,
-  require: localRequire,
-  setImmediate,
-  setInterval,
-  setTimeout,
-  structuredClone,
-});
-
-async function evaluate(code) {
-  activeOutput = [];
-  activeOutputChars = 0;
-  const originalStdoutWrite = process.stdout.write;
-  process.stdout.write = function(chunk, encoding, callback) {
-    const normalizedEncoding = typeof encoding === "string" ? encoding : undefined;
-    appendOutput(Buffer.isBuffer(chunk) ? chunk.toString(normalizedEncoding) : chunk);
-    const completed = typeof encoding === "function" ? encoding : callback;
-    if (typeof completed === "function") queueMicrotask(completed);
-    return true;
-  };
-  const script = new vm.Script(code, { filename: "reason-hands-node-repl.js" });
-  let timer;
-  try {
-    const value = script.runInContext(context, { timeout: timeoutMs });
-    const resolved = await Promise.race([
-      Promise.resolve(value),
-      new Promise((_, reject) => {
-        timer = setTimeout(
-          () => reject(new Error("REPL evaluation timed out after 105 seconds")),
-          timeoutMs,
-        );
-      }),
-    ]);
-    const inspected = inspect(resolved, {
-      depth: 8,
-      colors: false,
-      maxArrayLength: 200,
-      maxStringLength: 16_000,
-      breakLength: 120,
-    });
-    const emitted = activeOutput.join("");
-    return emitted.length === 0
-      ? inspected
-      : emitted + (emitted.endsWith("\n") ? "" : "\n") + inspected;
-  } finally {
-    if (timer) clearTimeout(timer);
-    process.stdout.write = originalStdoutWrite;
-  }
-}
-
-// Ordinary stdout is just an untrusted result stream, not a control authority.
-// The parent must terminate and reap this process before accepting any result.
-function respond(payload) { writeSync(1, JSON.stringify(payload) + "\n"); }
-
-let queue = Promise.resolve();
-const lines = createInterface({ input: process.stdin, crlfDelay: Infinity });
-lines.on("line", (line) => {
-  queue = queue.then(async () => {
-    try {
-      const request = JSON.parse(line);
-      if (request.action === "probe") {
-        respond({ ok: true, output: "ARA_HANDS_REPL_READY" });
-        return;
-      }
-      if (request.action !== "evaluate" || typeof request.code !== "string") {
-        throw new Error("Invalid REPL request");
-      }
-      respond({ ok: true, output: await evaluate(request.code) });
-    } catch (error) {
-      respond({
-        ok: false,
-        error: error instanceof Error ? error.message : String(error),
-        stack: error instanceof Error ? error.stack : undefined,
-      });
-    }
-  }).catch((error) => respond({ ok: false, error: String(error) }));
-});
-`;function K7($=process.execPath,Q=process.versions.bun){return Q?"node":$}function o8($){try{Z7($)}catch{}}function t9($,Q){$.end(`${JSON.stringify(Q)}
-`)}function r8($){return JSON.stringify($)}function W7($){let Q=e1(OZ(G7(),"reason-node-repl-")),Z=OZ(Q,"node-repl.sb"),Y=["(version 1)","(deny default)",'(import "system.sb")',"(allow process*)","(deny network*)",`(allow file-read* ${["/System","/usr","/bin","/opt/homebrew","/usr/local"].map((z)=>`(subpath ${r8(z)})`).join(" ")})`,`(allow file-read* file-write* (subpath ${r8($.workRoot)}) (subpath ${r8(Q)}))`].join(`
-`);X7(Z,Y,{mode:384});let J=!1;return{command:"/usr/bin/sandbox-exec",args:["-f",Z,$.nodeExecutable,...$.nodeArgs],cwd:$.workRoot,env:{...$.environment,TMPDIR:Q},async cleanup(){if(J)return;J=!0,Q7(Q,{recursive:!0,force:!0})}}}async function B7($){let Q=$7($.workRoot),Z=$.nodeExecutable??K7(),X=["--max-old-space-size=512","--permission",`--allow-fs-read=${Q}`,`--allow-fs-write=${Q}`,"-e",V7],Y=e9({home:Q,temporaryDirectory:Q}),J=$.platformName??J7();if(J==="linux")return{command:Z,args:X,cwd:Q,env:Y,async cleanup(){}};if(J==="darwin")return W7({nodeExecutable:Z,nodeArgs:X,workRoot:Q,environment:Y});throw Error("hands_node_repl_platform_unsupported")}async function D9($){let Q;try{await Promise.race([$,new Promise((Z,X)=>{Q=setTimeout(()=>X(Error("hands_node_repl_child_cleanup_timeout")),z7)})])}finally{clearTimeout(Q)}}async function _Z($){if($.executionMode!=="single-evaluation")throw Error(GZ);let Q=await B7($),Z;try{Z=r1(Q.command,Q.args,{cwd:Q.cwd,env:Q.env,stdio:["pipe","pipe","pipe"]})}catch(T){throw await Q.cleanup(),T}let X=new Promise((T)=>Z.once("close",()=>T())),Y;Z.once("error",(T)=>{Y=T});let J=!1,z=!1,K="";Z.stderr.setEncoding("utf8"),Z.stderr.on("data",(T)=>{K=`${K}${T}`.slice(-16384)});let G=Z.stdout,W,L=(T,I,k)=>{if(k)T.failure??=k;if(T.finishing)return;T.finishing=!0,z=!0,Z.kill("SIGKILL"),D9(X).then(()=>{if(T.failure)T.reject(T.failure);else T.resolve(I??{})},(y)=>T.reject(y))},B=()=>{if(z=!0,W)L(W,void 0,Error("hands_node_repl_state_lost"));else Z.kill("SIGKILL")},V="";G?.setEncoding("utf8"),G?.on("data",(T)=>{if(W?.finishing||z)return;if(V+=T,V.length>IZ){B();return}while(!0){let I=V.indexOf(`
-`);if(I===-1)return;let k=V.slice(0,I);V=V.slice(I+1);let y=W;if(!y){B();return}try{let q=JSON.parse(k);if(y.action==="probe")y.resolve(q);else{L(y,q);return}}catch{L(y,void 0,Error("invalid_hands_node_repl_child_response"));return}}});let H=(T)=>{let I=K.trim(),k=T??Error(I?`hands_node_repl_child_exited:${I}`:"hands_node_repl_child_exited");if(z=!0,W&&!W.finishing)L(W,void 0,k)};Z.once("error",H),Z.once("close",()=>H()),Z.stdin.on("error",H);let U=(T)=>new Promise((I,k)=>{if(J||z||Z.exitCode!==null||Z.signalCode!==null){k(Error(z?"hands_node_repl_state_lost":"hands_node_repl_stopped"));return}let y=setTimeout(B,T.action==="probe"?1e4:Math.max(1,Math.min($.evaluationTimeoutMs??t8-1000,t8-1000))),q={action:T.action,finishing:!1,resolve(b){if(W===q)W=void 0;clearTimeout(y),I(b)},reject(b){if(W===q)W=void 0;clearTimeout(y),k(b)}};W=q,Z.stdin.write(`${JSON.stringify(T)}
-`,(b)=>{if(!b)return;L(q,void 0,b)})});try{if(!G){if(Z.pid===void 0)await D9(X);throw Y??Error("hands_node_repl_control_pipe_missing")}let T=await U({action:"probe"});if(T.ok!==!0||T.output!=="ARA_HANDS_REPL_READY")throw Error("hands_node_repl_probe_failed")}catch(T){J=!0,Z.kill("SIGKILL");try{await D9(X)}finally{await Q.cleanup()}throw T}let F=Promise.resolve(),N=new Set;o8($.socketPath);let D=Y7.createServer((T)=>{N.add(T),T.once("close",()=>N.delete(T)),T.setEncoding("utf8");let I="",k=!1,y=!1;T.once("close",()=>{if(y)B()}),T.on("error",()=>T.destroy()),T.on("data",(q)=>{if(k)return;if(I+=q,I.length>IZ){k=!0,t9(T,{ok:!1,error:"REPL request exceeds 1 MiB"});return}let b=I.indexOf(`
-`);if(b===-1)return;k=!0;let g=I.slice(0,b);F=F.then(async()=>{if(T.destroyed)return;try{let A=JSON.parse(g);if(A.action!=="evaluate"||typeof A.code!=="string")throw Error("Invalid REPL request");y=!0;let M=await U({action:"evaluate",code:A.code});if(y=!1,M.ok!==!0||typeof M.output!=="string")throw Error(typeof M.error==="string"?M.error:"hands_node_repl_failed");t9(T,{ok:!0,output:M.output})}catch(A){y=!1,t9(T,{ok:!1,error:A instanceof Error?A.message:String(A),stack:A instanceof Error?A.stack:void 0})}}).catch((A)=>{t9(T,{ok:!1,error:A instanceof Error?A.message:String(A)})})})});try{await new Promise((T,I)=>{D.once("error",I),D.listen($.socketPath,()=>{D.off("error",I);try{t1($.socketPath,384),T()}catch(k){D.close(()=>I(k))}})})}catch(T){J=!0,Z.kill("SIGKILL");try{await D9(X)}finally{await Q.cleanup(),o8($.socketPath)}throw T}return{socketPath:$.socketPath,async stop(){if(J)return;J=!0;let T=new Promise((I)=>D.close(()=>I()));for(let I of N)I.destroy();await T,F.catch(()=>{return}),B();try{await D9(X)}finally{await Q.cleanup(),o8($.socketPath)}}}}var e8=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;var xZ="/workspace",PZ="/var/lib/reason/sessions",F7="/var/lib/reason/session-controls";function AZ($){let Q=`${PZ}/`;if(!$.startsWith(Q))return null;let Z=$.slice(Q.length);if(!e8.test(Z)||Z!==Z.toLowerCase())throw Error("personal_computer_invalid_runtime_root");return`${F7}/${Z}/job.env`}function L7($){if(!e8.test($))throw Error("personal_computer_invalid_identity");return $.toLowerCase()}function $8($){let Q=L7($);return{runtimeRoot:`${PZ}/${Q}`,workspaceRoot:`${xZ}/sessions/${Q}`,sharedRoot:xZ}}var EZ="/root/.ara/cloud-browser/repl.sock";function $$($){return $==="compute"}function RZ($,Q,Z="linux"){if($)$8($);if(Z!=="linux")throw Error("cloud_browser_os_invalid");if(Q!==void 0&&(!$||!/^[1-9][0-9]{0,18}$/.test(Q)))throw Error("cloud_browser_generation_invalid");let X=$?`/var/lib/reason/browsers/${$.toLowerCase()}`:"/root/.ara/cloud-browser",Y=$?`${X}/${Q?`g${Q}`:"current"}`:X,J=$?`/root/.b/${$.toLowerCase().replaceAll("-","")}`:X;return{temporarySessionDirectory:J,temporaryDirectory:$?`${J}/${Q??"current"}`:`${Y}/tmp`,directory:Y,sessionDirectory:X,config:`${Y}/config.json`,status:`${Y}/status.json`,socket:`${Y}/repl.sock`,bundle:`${Y}/driver.mjs`,processName:$?`ara-browser-${$.toLowerCase()}${Q?`-${Q}`:""}`:"ara-cloud-browser"}}var Q$="browser_egress",SZ=KQ,A7=45000,E7=k9+1500,E0=/^[A-Za-z0-9._:-]{1,160}$/,R7="/run/ara-hands";function S7($,Q,Z=dZ()){if($==="darwin")return{temporaryRoot:Z,prepareRoot:!1,sessionMode:448};return{temporaryRoot:Q??R7,prepareRoot:!0,sessionMode:457}}function wZ($,Q=process.platform,Z=process.geteuid?.()){return $===!0&&Q==="linux"&&Z===0}function Y$($=mZ(),Q=process.platform,Z=process.geteuid?.()){return $&&Q==="linux"&&Z===0?{uid:$.uid,gid:$.gid,home:$.home,username:$.username}:null}function w7($=Y$(),Q=XZ){return $&&Q()?d8:null}function AY($=Y$(),Q=process.platform,Z=process.geteuid?.()){return Q!=="linux"||Z!==0||$!==null}function EY($=process.platform,Q=process.geteuid?.()){return $!=="linux"||Q!==0}function b7($,Q){if(!Q&&($??"linux")==="linux")return EZ;return RZ(Q,void 0,$??"linux").socket}function V9($){return Boolean($)&&typeof $==="object"&&!Array.isArray($)}function lZ($){let Q=$.toLowerCase().replace(/^\[|\]$/g,"");return Q==="localhost"||Q.endsWith(".localhost")||Q==="::1"||Q==="0:0:0:0:0:0:0:1"||Q==="0.0.0.0"||Q.startsWith("127.")}class uZ extends j{expiryDiagnostic;constructor($){super("invalid_hands_expiry","Reason Hands connection expiry is invalid.");this.expiryDiagnostic=$}}function k7($){return V9($)&&Object.keys($).every((Q)=>Q==="source_path"||Q==="branch")&&($.source_path===void 0||h0($.source_path))&&typeof $.branch==="string"&&u8.test($.branch)}function f7($,Q,Z){let X=Q===void 0?Date.now():Q,Y=["relay_url","session_id","environment_id","expires_at","policy_mode","policy_version","hands_protocol_version","hands_worker_version","hands_worker_artifact_sha256","hands_worker_entrypoint","target_generation","target_fence_id"],J=new Set([...Y,"workspace_id","legacy_workspace_id",c0,d0,"environment_binding","cloud_browser","sandbox_provider","sandbox_os","personal_workspace","workspace_path","workspace_worktree",h,Q$,J9,L0,p0,A0]),z=V9($)?$:null,K=z?.[Q$],G=z?.[J9],W=z?.[p0],L=K===void 0||(z?.[h]===P0||W===O9&&z?.[h]===void 0)&&V9(K)&&Object.keys(K).every((D)=>D==="mode"||D==="allowed_domains")&&K.mode==="enforce"&&Array.isArray(K.allowed_domains)&&K.allowed_domains.length<=256&&K.allowed_domains.every((D)=>typeof D==="string"&&S8(D));if(!V9($)||Y.some((D)=>!(D in $))||Object.keys($).some((D)=>!J.has(D))||!L||W!==void 0&&W!==O9||z?.[A0]!==void 0&&z[A0]!==X8||z?.personal_workspace!==void 0&&(z.personal_workspace!==!0||z[h]!==P0)||z?.cloud_browser!==void 0&&(z.cloud_browser!==!0||z[h]!==P0)||z?.sandbox_provider!==void 0&&!$$(z.sandbox_provider)||z?.sandbox_os!==void 0&&z.sandbox_os!=="linux"||G!==void 0&&(z?.[h]!==Y9||!p8(G))||h in $&&$[h]!==P0&&$[h]!==Y9&&$[h]!==W0||$.workspace_path!==void 0&&(!h0($.workspace_path)||$[h]!==W0)||$.workspace_worktree!==void 0&&($.workspace_path===void 0||!k7($.workspace_worktree))||typeof $.relay_url!=="string"||typeof $.session_id!=="string"||!E0.test($.session_id)||$.workspace_id!==void 0&&(typeof $.workspace_id!=="string"||!E0.test($.workspace_id))||$.legacy_workspace_id!==void 0&&(typeof $.legacy_workspace_id!=="string"||!E0.test($.legacy_workspace_id))||$[c0]!==void 0&&($[c0]!==Y8||(h in $))||$[d0]!==void 0&&($[d0]!==J8||(h in $))||$[L0]!==void 0&&(typeof $[L0]!=="string"||!E0.test($[L0]))||typeof $.environment_id!=="string"||!E0.test($.environment_id)||typeof $.expires_at!=="string"||$.policy_mode!=="full_access"||$.policy_version!==1||$.hands_protocol_version!==W9||$.hands_worker_version!==B9||$.hands_worker_artifact_sha256!==G0||!NZ($.hands_worker_entrypoint)||!_0($.target_generation)||!M0($.target_fence_id))throw new j("invalid_hands_payload","Reason Hands connection payload is invalid.");let B;try{B=new URL($.relay_url)}catch{throw new j("invalid_hands_relay","Reason Hands relay URL is invalid.")}if((lZ(B.hostname)?B.protocol!=="ws:":B.protocol!=="wss:")||B.username||B.password||B.hash||!/^\/device\/[A-Za-z0-9-]+\/[A-Za-z0-9]+$/.test(B.pathname))throw new j("invalid_hands_relay","Reason Hands relay URL is not allowed.");let H=Date.parse($.expires_at),U=Number.isNaN(H)?"parse":new Date(H).toISOString()!==$.expires_at?"noncanonical":H<=X?"expired":H-X>SZ?"over_cap":"accepted",F={version:1,outcome:U,clock_source:Q===void 0?"date_now":"injected",validation_now_ms:t0(X),expiry_ms:t0(H),remaining_ms:Number.isSafeInteger(H-X)?H-X:null,maximum_lifetime_ms:SZ,cli_artifact:CZ()};if(U!=="accepted")throw new uZ(F);try{Z?.(F)}catch{}let N=$.environment_binding===void 0?void 0:P8.safeParse($.environment_binding);if(N&&!N.success)throw new j("invalid_hands_request","Reason Hands environment binding is invalid.");return{...$.cloud_browser===!0?{cloud_browser:!0}:{},...$$($.sandbox_provider)?{sandbox_provider:$.sandbox_provider}:{},...$.sandbox_os==="linux"?{sandbox_os:$.sandbox_os}:{},...$.personal_workspace===!0?{personal_workspace:!0}:{},relay_url:B.toString(),...N?.success?{environment_binding:N.data}:{},session_id:$.session_id,...$.workspace_id===void 0?{}:{workspace_id:$.workspace_id},...$.legacy_workspace_id===void 0?{}:{legacy_workspace_id:$.legacy_workspace_id},...$[c0]===Y8?{[c0]:Y8}:{},...$[d0]===J8?{[d0]:J8}:{},...typeof $[L0]==="string"?{[L0]:$[L0]}:{},...$[p0]===O9?{[p0]:O9}:{},...$[A0]===X8?{[A0]:X8}:{},...typeof $.workspace_path==="string"?{workspace_path:$.workspace_path}:{},...V9($.workspace_worktree)?{workspace_worktree:{...typeof $.workspace_worktree.source_path==="string"?{source_path:$.workspace_worktree.source_path}:{},branch:String($.workspace_worktree.branch)}}:{},environment_id:$.environment_id,expires_at:$.expires_at,policy_mode:"full_access",policy_version:1,hands_protocol_version:W9,hands_worker_version:B9,hands_worker_artifact_sha256:G0,hands_worker_entrypoint:v0,target_generation:$.target_generation,target_fence_id:$.target_fence_id,...h in $?{[h]:$[h]}:{},...G===void 0?{}:{[J9]:G},...K===void 0?{}:{[Q$]:{mode:"enforce",allowed_domains:[...new Set(K.allowed_domains)].sort()}}}}function m7(){let $=new Map;return{acquire(Q,Z){if($.has(Q))return null;let X=[...$.values()],Y=(z)=>Z.group!==void 0&&z.group===Z.group;if(Z.exclusive?!X.every(Y):X.some((z)=>z.exclusive))return null;if(Z.limit!==void 0&&!X.some(Y)&&new Set(X.map((z,K)=>z.group??K)).size>=Z.limit)return null;$.set(Q,Z);let J=!1;return()=>{if(J)return;J=!0,$.delete(Q)}},activeOwners:()=>[...$.keys()]}}var g7=m7();function y7($,Q){F9($,{recursive:!0,mode:448});let Z=c($),X=()=>new j("invalid_hands_workspace","Reason Hands managed workspace ancestor must be a real directory, not a link.");for(let z of Q.split("/")){let K=n(Z,z);try{let W=i(K);if(W.isSymbolicLink()||!W.isDirectory())throw X()}catch(W){if(!(W&&typeof W==="object"&&("code"in W)&&W.code==="ENOENT"))throw W;try{F9(K,{mode:448})}catch(L){if(!(L&&typeof L==="object"&&("code"in L)&&L.code==="EEXIST"))throw L}}let G=i(K);if(G.isSymbolicLink()||!G.isDirectory()||c(K)!==K)throw X();Z=K}if(process.platform==="win32"){let z=i(Z);if(z.isSymbolicLink()||!z.isDirectory()||c(Z)!==Z||!H0(c($),Z))throw X();return Z}let Y=i(Z),J=q7(Z,K9.O_RDONLY|K9.O_DIRECTORY|K9.O_NOFOLLOW);try{let z=T7(J);if(!z.isDirectory()||z.dev!==Y.dev||z.ino!==Y.ino||c(Z)!==Z)throw X();C7(J,448)}finally{N7(J)}return Z}function h7($,Q=fZ(),Z,X,Y){if(!E0.test($)||Z!==void 0&&!E0.test(Z))throw new j("invalid_hands_workspace","Reason Hands run identity is invalid.");let J=X0(f0({kind:"managed",workspaceId:$,...X?{base:X}:{},...Y?{layout:Y}:{}})),z=y7(Q,X0(J)),K=n(z,x7(J)),G=!1;try{let V=i(K);if(G=!0,V.isSymbolicLink())throw new j("invalid_hands_workspace","Reason Hands workspace cannot be a symbolic link.");if(!V.isDirectory())throw new j("invalid_hands_workspace","Reason Hands workspace must be a managed directory.")}catch(V){if(V instanceof j||!(V&&typeof V==="object"&&("code"in V)&&V.code==="ENOENT"))throw V}if(Y&&!G)try{let V=n(c(Q),X0(f0({kind:"managed",workspaceId:$,...X?{base:X}:{}}))),H=i(V);if(!H.isSymbolicLink()&&H.isDirectory()&&c(V)===V)Q8(V,K),G=!0}catch{}if(Z&&Z!==$){let V=n(z,Z);try{let H=i(V);if(H.isSymbolicLink()||!H.isDirectory())throw new j("invalid_hands_workspace","Reason Hands legacy workspace must be a managed directory.");let U=c(V);if(X0(U)!==z)throw new j("invalid_hands_workspace","Reason Hands legacy workspace escaped its managed parent.");let F=null;if(G){F=n(z,`.${$}.previous`);try{throw i(F),new j("invalid_hands_workspace","Reason Hands previous workspace backup already exists.")}catch(N){if(N instanceof j||!(N&&typeof N==="object"&&("code"in N)&&N.code==="ENOENT"))throw N}Q8(K,F)}try{Q8(U,K)}catch(N){if(F)Q8(F,K);throw N}G=!0}catch(H){if(H instanceof j||!(H&&typeof H==="object"&&("code"in H)&&H.code==="ENOENT"))throw H}}F9(K,{recursive:!0,mode:448}),I9(K,448);let W=c(K);if(X0(W)!==z)throw new j("invalid_hands_workspace","Reason Hands workspace escaped its managed parent.");let L=n(W,"repo");try{let V=i(L);if(V.isSymbolicLink()||!V.isDirectory())throw new j("invalid_hands_workspace","Reason Hands repository must be a managed directory.")}catch(V){if(V instanceof j||!(V&&typeof V==="object"&&("code"in V)&&V.code==="ENOENT"))throw V}F9(L,{recursive:!0,mode:448}),I9(L,448);let B=c(L);if(X0(B)!==W)throw new j("invalid_hands_workspace","Reason Hands repository escaped its managed run workspace.");return{workRoot:W,repoPath:B}}function sZ($){let Q=null;try{Q=i($)}catch{}if(!Q||Q.isSymbolicLink()||!Q.isDirectory()||Q.uid!==0||Q.gid!==0||(Q.mode&4095)!==493)throw new j("cloud_workspace_root_invalid","This cloud Session's workspace root is not root's 0755 directory, so Reason Hands cannot use it.")}function v7($,Q,Z=process.geteuid?.(),X=process.platform){if(X==="win32")return"unknown";let Y;try{if(Y=l0($),!Y.isDirectory())return"unready";j7($,K9.R_OK|K9.W_OK|K9.X_OK)}catch{return"unready"}try{if(i($).isSymbolicLink()||c($)!==$)return"unknown"}catch{return"unknown"}if(Z!==0)return"checked";if(Q===null||Y.uid!==Q.uid||(Y.mode&448)!==448)return"unknown";for(let J=X0($);;J=X0(J)){let z;try{z=l0(J)}catch{return"unknown"}if(!(z.uid===Q.uid?(z.mode&64)!==0:z.gid===Q.gid?(z.mode&8)!==0:(z.mode&1)!==0))return"unknown";if(J===X0(J))return"checked"}}function c7($,Q){let Z="/";for(let X of["",...$.split("/"),...Q.split("/")].filter((Y,J)=>J===0||Y)){if(X)Z=n(Z,X);let Y;try{Y=i(Z)}catch{return null}if(Y.uid!==0)return Y.uid;if((Y.mode&2)!==0&&(Y.mode&512)===0&&!Y.isSymbolicLink())return-1;if(Y.isSymbolicLink()||!Y.isDirectory())return null}return null}function d7($,Q,Z,X=process.geteuid?.(),Y){if(!E0.test(Q))return null;let J,z;try{J=c($),z=X0(f0({kind:"managed",workspaceId:Q,...Z?{base:Z}:{},...Y?{layout:Y}:{}}))}catch{return null}let K=n(J,z),G=X$(K)!==null,W=(U)=>new j("cloud_workspace_root_invalid",U),L;if(X===0){let U=c7(J,z);if(U===null)return null;if(!G)throw new j("invalid_hands_workspace","As root, Reason Hands never prepares a workspace in folders another user owns.");L=U}else{if(!G)return null;let U,F;try{U=i(X0(K)),F=i(K)}catch{return null}if(U.isSymbolicLink()||!U.isDirectory()||U.uid===0||F.uid!==0)return null;L=U.uid}let B=J;for(let U of z.split("/")){let F=n(B,U),N=!1;try{let D=i(F);N=!D.isSymbolicLink()&&D.isDirectory()&&c(F)===F}catch{}if(!N)throw W("This cloud Session's workspace root is missing or is not a real directory.");B=F}sZ(K);let V;try{V=nZ(K)}catch(U){if(U instanceof j)throw U;throw W("This cloud Session's workspace root changed while Reason Hands checked it.")}let H=null;try{H=l0(V.repoPath).uid}catch{}if(H!==L)throw new j("invalid_hands_workspace","Reason Hands repository must belong to the cloud Session's user.");return V}function nZ($,Q=!1){let Z=c($),X=n(Z,"repo"),Y;try{Y=i(X)}catch{throw new j("invalid_hands_workspace","Reason Hands repository is missing from the granted root.")}if(Q){if(!/^\/var\/lib\/reason\/sessions\/[0-9a-f-]{36}$/.test(Z))throw new j("invalid_hands_workspace","Personal runtime identity is invalid.");if($8(Z.slice(Z.lastIndexOf("/")+1)).runtimeRoot!==Z)throw new j("invalid_hands_workspace","Personal runtime identity is invalid.");let K=c("/workspace"),G=c(X);if(K!=="/workspace"||!l0(G).isDirectory()||!G.startsWith("/workspace/"))throw new j("invalid_hands_workspace","Personal files escaped the personal computer.");return{workRoot:Z,repoPath:G}}let J=YZ(Z);if(J&&Y.isSymbolicLink()){let K=c(X);if(K!==c(J)||!l0(K).isDirectory())throw new j("invalid_hands_workspace","Side chat repository must be its parent's checkout.");return{workRoot:Z,repoPath:K}}if(Y.isSymbolicLink()||!Y.isDirectory())throw new j("invalid_hands_workspace","Reason Hands repository must be a managed directory.");let z=c(X);if(X0(z)!==Z)throw new j("invalid_hands_workspace","Reason Hands repository escaped its granted root.");return{workRoot:Z,repoPath:z}}function J$($,Q,Z){if(Q!==void 0&&!h0(Q))throw new j("invalid_hands_workspace",`Reason Hands ${Z} is invalid.`);let X=pZ($,Q??".");if(!H0($,X))throw new j("invalid_hands_workspace",`Reason Hands ${Z} escapes its granted root.`);return X}function iZ($,Q,Z){if(l8(Q)){let X=c(Z);return{anchor:X,target:pZ(X,Q),boundary:n(X,G9)}}return{anchor:$,target:J$($,Q,"folder"),boundary:$}}function p7($,Q){if(!H0($,Q))throw new j("invalid_hands_workspace","Reason Hands folder escapes its granted root.");let Z=$;for(let X of Q.slice($.length).split(P7).filter(Boolean)){Z=n(Z,X);let Y=null;try{Y=i(Z)}catch(J){if(J.code!=="ENOENT")throw J}if(!Y)F9(Z,{mode:448});else if(Y.isSymbolicLink()||!Y.isDirectory())throw new j("invalid_hands_workspace","Reason Hands folder must be made of real directories.")}}function aZ($,Q){let Z=c(J$($,Q.source_path,"repository"));if(!H0($,Z)||!l0(Z).isDirectory())throw new j("invalid_hands_workspace","Reason Hands repository must be a folder in its granted root.");return Z}async function l7($,Q,Z,X=G8()){try{let Y=c($);if(Z$(iZ(Y,Q,X).target))return;return await KZ(aZ(Y,Z))??void 0}catch{return}}function u7($,Q,Z,X,Y=s7,J=G8()){let z=c($),{target:K,boundary:G,anchor:W}=iZ(z,Q,J);if(Z&&!Z$(K)){let V=aZ(z,Z);p7(W,X0(K));let H=["-c","core.hooksPath=/dev/null","-C",V];if(X)Y([...H,"update-ref","--create-reflog","-m",X.note,`refs/heads/${Z.branch}`,X.commit,""]);let U=X?Y([...H,"worktree","add",K,Z.branch]):Y([...H,"worktree","add","-b",Z.branch,K]);if(!X&&U.status!==0&&/already exists/.test(U.stderr)&&!Z$(K))U=Y([...H,"worktree","add",K,Z.branch]);if(U.status!==0)throw new j(/not a git repository/i.test(U.stderr)?"workspace_not_git_repository":"workspace_worktree_failed","Reason could not create this Session's git worktree.")}let L;try{L=i(K)}catch{throw new j("workspace_folder_missing","This Session's folder no longer exists.")}let B=c(K);if(L.isSymbolicLink()&&!H0(G,B))throw new j("invalid_hands_workspace","Reason Hands folder resolves outside its granted root.");if(!l0(B).isDirectory()||!H0(G,B))throw new j("invalid_hands_workspace","Reason Hands folder must be a directory in its granted root.");if(D0(B))throw new j("protected_path","Credential and secret folders are unavailable to Sessions.");return B}function s7($){let Q=gZ();if(!Q)return{status:null,stderr:"git was not found. Install Git for Windows (https://git-scm.com/download/win)."};let Z=M7(Q,$,{encoding:"utf8",timeout:60000,env:{...process.env,GIT_TERMINAL_PROMPT:"0"},stdio:["ignore","ignore","pipe"]});return{status:Z.status,stderr:Z.stderr??""}}function oZ($){return AZ($)??X$($)?.jobEnv??n($,"job.env")}function n7($,Q){let Z=oZ($),X=i(Z);if(X.isSymbolicLink()||!X.isFile())throw new j("invalid_hands_workspace","Reason Hands job environment must be a managed regular file.");D7(Z,Q),I9(Q,384)}function i7($){if($.workspaceMode===W0&&$.workspacePath!==void 0){let z=$.home??G8(),K=u7($.grantedRoot,$.workspacePath,$.workspaceWorktree,$.workspaceWorktreeStart,void 0,z);if($.workspaceWorktree&&$.deviceId)LZ(z,$.workspacePath,$.deviceId);return{workRoot:K,repoPath:K,workspace:{kind:"root",path:$.workspacePath},jobEnvPath:n($.temporaryDirectory,"job.env"),workspacePoolPath:null,managedWorkspace:!0}}if($.workspaceMode===P0)return{...nZ($.grantedRoot,$.personalWorkspace),workspace:{kind:"root"},jobEnvPath:n($.temporaryDirectory,"job.env"),workspacePoolPath:null,managedWorkspace:!1};if($.workspaceMode===Y9||$.workspaceMode===W0){let z=i($.grantedRoot);if(z.isSymbolicLink()||!z.isDirectory())throw new j("invalid_hands_workspace","Reason Hands root must be a real directory.");let K=c($.grantedRoot);return{workRoot:K,repoPath:K,workspace:{kind:"root"},jobEnvPath:n($.temporaryDirectory,"job.env"),workspacePoolPath:null,managedWorkspace:!0}}let Q=$.workspaceId??$.runId,Z={kind:"managed",workspaceId:Q,...$.workspaceBase?{base:$.workspaceBase}:{},...$.workspaceLayout?{layout:$.workspaceLayout}:{}},X=m9($.grantedRoot,Z,$.home).anchor,Y=d7(X,Q,$.workspaceBase,void 0,$.workspaceLayout);if(Y)return{...Y,workspace:Z,jobEnvPath:n($.temporaryDirectory,"job.env"),workspacePoolPath:null,managedWorkspace:!1,cloudSessionRoot:!0};let J=h7(Q,X,$.legacyWorkspaceId,$.workspaceBase,$.workspaceLayout);return{...J,workspace:Z,jobEnvPath:n($.temporaryDirectory,"job.env"),workspacePoolPath:X0(J.workRoot),managedWorkspace:!0}}function a7($){let{command:Q,prefix:Z}=A8($.executablePath,$.sourceEntrypoint),X=e9({home:_7(),temporaryDirectory:$.temporaryDirectory,path:$.path});if(X.REASON_DEVICE_ROOT=X.ARA_DEVICE_ROOT=$.grantedRoot,X.REASON_HANDS_WORKSPACE=X.ARA_HANDS_WORKSPACE=$.workRoot,X.REASON_HANDS_REPO=X.ARA_HANDS_REPO=$.root,$.workspacePoolPath)X.REASON_HANDS_WORKSPACE_POOL=X.ARA_HANDS_WORKSPACE_POOL=$.workspacePoolPath;return{command:Q,args:[...Z,"__device","__hands-worker","--config",$.configPath],options:{cwd:$.root,env:X,shell:!1,stdio:[o7,"ignore","pipe"]}}}var o7=process.platform==="win32"?"pipe":"ignore";function bZ($,Q){if(process.platform!=="win32")return $.kill(Q);if(Q==="SIGTERM")$.stdin?.end();else if($.pid)yZ($.pid);return!0}function r7($,Q){let Z="",X=!1,Y=Date.now(),J=0,z=new Set(["connecting","open","dial_pending","socket_error","close","claim_accepted","claim_rejected","stopping","stopped","request_cancelled","permission_denied"].map((B)=>`hands.worker.${B}`)),K=new Set([null,"open_not_received","current_connection","obsolete_connection","request_aborted","request_timeout","client_closed","driver_stopped","driver_handoff","run_cancelled","run_finished","other","frame_too_large","invalid_json","invalid_claim","executor_mismatch","stale_generation","fence_conflict","SIGTERM","SIGINT","SIGHUP","expired","cleanup_complete","cleanup_failed","cancelled","settled","unsupported","unconfirmed",...["sandbox_policy","os_permission_unknown"].flatMap((B)=>["bash","read","write","edit"].map((V)=>`${B}:${V}`))]),G=["timestampMs","connectionAttempt","connectionGeneration","targetGeneration","activeRequestCount","remainingLifetimeMs","suppressedDiagnostics"],W=["peerGeneration","socketState","closeCode"],L=new Set(["event","reason","launchId",...G,...W]);return(B)=>{for(let V of B.toString().split(/(?<=\n)/)){let H=V.endsWith(`
-`);if(!X&&Z.length+V.length<=2048)Z+=V;else X=!0;if(!H)continue;let U=Z;if(Z="",X){X=!1;continue}try{let F=JSON.parse(U);if(!F||typeof F!=="object"||Array.isArray(F)||Object.keys(F).some((N)=>!L.has(N))||!z.has(F.event)||!K.has(F.reason)||F.event==="hands.worker.permission_denied"!==(typeof F.reason==="string"&&F.reason.includes(":"))||F.launchId!==$||G.some((N)=>!Number.isSafeInteger(F[N])||F[N]<0)||W.some((N)=>F[N]!==null&&(!Number.isSafeInteger(F[N])||F[N]<0)))continue;if(Date.now()-Y>=60000)Y=Date.now(),J=0;if(J>=122)continue;J+=1,Q(F)}catch{}}}}async function t7($){let Q=$.now()+$.timeoutMs;while($.now()<Q){if($.signal.aborted)throw new j("cancelled","Reason Hands start was cancelled.");if($.spawnFailed?.()||$.child.exitCode!==null||$.child.signalCode!==null)throw new j("hands_worker_exited","Reason Hands exited before ready.");let Z=r9($.path,{pid:$.child.pid??-1,launchId:$.launchId,workerVersion:B9,protocolVersion:W9,workerArtifactSha256:G0,workerEntrypoint:v0});if(Z?.targetGeneration===$.targetGeneration&&Z.fenceId===$.fenceId)return Z;await new Promise((X)=>setTimeout(X,10))}throw new j("hands_ready_timeout","Reason Hands did not become ready.")}async function e7($,Q){let Z=()=>$.exitCode===0&&$.signalCode===null;if($.exitCode!==null||$.signalCode!==null)return Z()?"stopped":"already_exited";let X=new Promise((z)=>$.once("exit",()=>z()));try{if(!bZ($,"SIGTERM"))return Z()?"stopped":"unobserved"}catch{return Z()?"stopped":"unobserved"}if(await kZ(X,Q))return Z()?"stopped":"unobserved";try{bZ($,"SIGKILL")}catch{}return await kZ(X,Q)?"forced":"unobserved"}async function kZ($,Q){let Z;try{return await Promise.race([$.then(()=>!0),new Promise((X)=>{Z=setTimeout(()=>X(!1),Q)})])}finally{clearTimeout(Z)}}function $6($){return new Promise((Q)=>{let Z=!1,X=(K)=>{if(Z)return;Z=!0,clearTimeout(z),$.signal.removeEventListener("abort",Y),$.child.off("exit",J),Q(K)},Y=()=>X("cancelled"),J=()=>X("exited"),z=setTimeout(()=>X("expired"),Math.max(0,$.expiresAt-$.now()));if($.signal.addEventListener("abort",Y,{once:!0}),$.child.once("exit",J),$.signal.aborted)Y();else if($.child.exitCode!==null||$.child.signalCode!==null)J()})}var rZ=vZ();function Q6($,Q){if(!($ instanceof Error)||$ instanceof j)return!1;let Z=["hands_browser_driver_missing","hands_browser_driver_version_mismatch","hands_browser_executable_missing","hands_browser_unsupported_platform","hands_browser_unavailable"].includes($.message),X=["ENOENT","EACCES","EPERM"].includes($.code??"");if(!Z&&!X)return!1;try{return i(Q),!1}catch(Y){return V9(Y)&&Y.code==="ENOENT"}}function Z6($){return $.sandbox_provider==="compute"&&!$.cloud_browser&&$[h]===P0}function X6($,Q,Z){return $===void 0?{}:{dispatch_stages:{version:1,claim_to_entered_ms:V0($,Q),...Z===void 0?{}:{worker_prespawned:Z}}}}function RY(){rZ().catch(()=>{return}),Q9().catch(()=>{return})}async function SY($,Q={}){let Z=Q.logDiagnostic??((M)=>console.warn(M)),X=new Map,Y=(M)=>{let C=Date.now();X.set(M,C);try{Z(JSON.stringify({event:"sandbox.hands_startup",stage:M,timestampMs:C}))}catch{}};Y("entered");let J=$.claimEnvironment;$.claimEnvironment=void 0;let z=Q.now??Date.now,K,G=f7($.payload,Q.now?.(),(M)=>{K=M});if($.managedPty&&($.managedPty.version!==1||!$.headless||!$.runtimeDirectory||![void 0,!0].includes($.managedPty.startupVerified)||!$.deviceIdentity||!$.claimOwner||$.claimOwner.device_id!==$.deviceIdentity.deviceId||!G.environment_binding||!["darwin","linux","win32"].includes(process.platform)))throw new j("pty_unsupported","Bound PTY requires qualified headless Hands with private jobs and environment.");let W=async(M)=>{let C;try{await Promise.race([M,new Promise((x,f)=>{C=setTimeout(()=>f(new j("hands_event_delivery_unavailable","Hands event delivery did not settle within its deadline.")),Math.max(1,Math.min(Q.eventDeliveryTimeoutMs??5000,5000)))})])}finally{clearTimeout(C)}},L=async(M,C)=>W($.emitEvent(M,C));if($.headless&&(G.cloud_browser===!0||$.managedBrowser!==void 0||G[J9]!==void 0||G[h]!==void 0&&G[h]!==W0))throw new j("invalid_hands_request","Managed sandbox extensions are unavailable to a headless worker.");let B=Y$(),V=G[A0]===void 0?null:w7(B);if(G[A0]!==void 0&&(V===null||!$.headless||!wZ($.hostExecution,Q.hostIdentity?.platform,Q.hostIdentity?.euid)))throw new j("hands_model_jobs_egress_unavailable","This worker cannot hold its jobs to the guest egress guard; the Hands did not start.");if(G[p0]!==void 0&&!($.headless&&wZ($.hostExecution,Q.hostIdentity?.platform,Q.hostIdentity?.euid)))throw new j("hands_confinement_unavailable","Confined Hands need a root Linux worker in host mode.");if(G.cloud_browser&&process.platform!=="linux")throw new j("cloud_browser_target_invalid","Cloud browser is available only on a cloud machine.");let H=`${$.operationId}:${$.attemptId}`,U=G[h]===Y9,F=$.headless||process.platform==="darwin"&&$.managedBrowser===void 0&&!G.cloud_browser&&!G.browser_egress&&(G[h]===void 0||G[h]===W0)||Z6(G),N=U?G[J9]??"bash":null,D=N?zZ(N):null;if(D)throw new j(D,"Persistent Node REPL execution is unavailable; this benchmark profile cannot start.");let T=G[h],I=$.headless===!0&&$.ownComputer!==!0?$.handsSlots??1:void 0,k=(Q.slot??g7).acquire(H,{exclusive:I===1||T!==void 0&&T!==W0,...I!==void 0&&I>1?{limit:I}:{},...$.headless===!0&&G[L0]!==void 0?{group:G[L0]}:{}});if(!k)throw new j("hands_slot_busy",I!==void 0&&I>1?`This Reason worker runs at most ${I} sessions at a time.`:"This Reason Device runs one session at a time.");let y=$.headless===!0?cZ($.runId):null,q=null,b=null,g,A;try{Y("browser_resolution");let M=$.headless&&Q.browserExecutablePath===void 0?await Q9():null,C=U||G.cloud_browser?null:Q.browserExecutablePath===void 0?$.headless?M?.status==="resolved"?M.executablePath:null:await $Z(void 0,process.platform,$.managedBrowser):Q.browserExecutablePath;if(!U&&!G.cloud_browser&&!F&&!C)throw new j("hands_browser_unavailable","Reason Hands requires Chrome, Edge, Brave, Chromium, or a Playwright Chromium install.");Y("path_resolution");let x;try{x=await(Q.resolvePathEnvironment??rZ)()}catch{x={path:hZ(),source:"fallback"}}if(Y("workspace_setup"),process.platform==="darwin"){let v=G[h]===W0&&G.workspace_path!==void 0?J$($.root,G.workspace_worktree?G.workspace_worktree.source_path:G.workspace_path,"folder"):null;for(let r of new Set([$.root,...v?[v]:[]]))await OQ(r)}let R=G[h]===P0||G[h]===Y9?S7(process.platform,Q.sandboxRuntimeRoot):null,S=$.headless&&$.runtimeDirectory?$.runtimeDirectory:R?R.temporaryRoot:dZ();if(q="private_runtime",$.headless&&$.runtimeDirectory){o9(S);let v=c($.root);if(!M9(v,S))throw new j("invalid_hands_workspace","Private worker state must not overlap the granted workspace.")}if($.headless&&$.runtimeDirectory&&(!$.deviceIdentity||!G.environment_binding))throw new j("environment_unavailable","Headless Hands requires a server-bound private environment.");if(q="runtime_root",R?.prepareRoot)F9(S,{recursive:!0,mode:457}),I9(S,457);q="temporary_directory";let O=c(O7(n(S,"reason-hands-session-")));b=O,I9(O,R?.sessionMode??448);let w=n(O,"hands-config.json"),d=n(O,"hands-ready.json"),p=U7(),e=G.target_fence_id;if($.workspaceGrant){q="workspace_grant",Y("workspace_grant_wait");let v=$.workspaceGrant;await new Promise((r,b0)=>{let n0=()=>b0(new j("cancelled","Reason Hands was cancelled."));if($.signal.aborted){n0();return}$.signal.addEventListener("abort",n0,{once:!0}),v.then(r,b0).finally(()=>$.signal.removeEventListener("abort",n0))})}q="granted_root";let m=c($.root);q="workspace_layout";let l=G[h]===W0&&G.workspace_path!==void 0&&G.workspace_worktree?await l7(m,G.workspace_path,G.workspace_worktree):void 0,{workRoot:u,repoPath:a,jobEnvPath:U0,workspacePoolPath:z8,managedWorkspace:q0,workspace:u0,cloudSessionRoot:_9}=i7({grantedRoot:m,personalWorkspace:G.personal_workspace===!0,runId:$.runId,workspaceId:G.workspace_id,legacyWorkspaceId:G.legacy_workspace_id,workspaceBase:G[c0],workspaceLayout:G[d0],temporaryDirectory:O,workspaceMode:G[h],applicationSupportPath:Q.applicationSupportPath,...G.workspace_path===void 0?{}:{workspacePath:G.workspace_path},...G.workspace_worktree?{workspaceWorktree:G.workspace_worktree}:{},...l?{workspaceWorktreeStart:l}:{},...$.deviceIdentity?{deviceId:$.deviceIdentity.deviceId}:{}}),R0="ara_device_wss";q="jobs";let o=$.headless&&$.runtimeDirectory?ZQ({runtimeDirectory:$.runtimeDirectory,root:m,runId:$.runId}):void 0;g=o?.disposeSocket;let B0=o?XQ(o):null;if(B0)try{Z(JSON.stringify({event:"hands.journal_owner_retired",run_id:$.runId,reason:B0.reason,prior_executor_launch_id:B0.executorLaunchId}))}catch{}if(o&&[u,a].some((v)=>!M9(v,o.journalDirectory)))throw new j("invalid_hands_workspace","A Session can't work in the folder that holds this worker's settings; start it in a project or repository inside it.");let s0=G.personal_workspace?u.slice(u.lastIndexOf("/")+1):void 0;if(s0&&s0!==G.workspace_id)throw new j("invalid_hands_workspace","Personal session identity does not match its Device grant.");q="browser_socket";let K0=G.cloud_browser?b7(G.sandbox_os,s0):process.platform==="win32"?`\\\\.\\pipe\\reason-repl-${p}`:n(o?o.launchDirectory:O,"repl.sock");q="relay_url";let F0=lZ(new URL(G.relay_url).hostname),S0=R0==="ara_device_wss"&&!F0?(Q.loadProxy??U8)()?.url:void 0,Y0;q="environment_owner";let Q0=$.headless&&$.deviceIdentity&&G.environment_binding?MZ(O,{runId:$.runId,...$.deviceIdentity,binding:G.environment_binding,expiresAtMs:Date.parse(G.expires_at),identity:()=>Y0?.()??null}):void 0;q="job_environment";let L9=!Q0&&u0.kind==="managed"&&q0?n(u,"job.env"):null;if(L9)try{Z8(L9,"",{mode:384,flag:"wx"})}catch(v){if(!(v instanceof Error&&("code"in v)&&v.code==="EEXIST"))throw v}let V8={url:G.relay_url,transport:R0,...S0===void 0?{}:{proxyUrl:S0},...$.localGithubConfinement?{localGithubConfinement:!0}:{},...G[p0]&&Q0?{gitCredentialEnvironment:!0}:{},workerVersion:B9,protocolVersion:W9,workerArtifactSha256:G0,workerEntrypoint:v0,...process.platform==="win32"?{bashExecutable:y9()}:{},targetGeneration:G.target_generation,fenceId:e,workRoot:u,workspaceAliasPath:u,jobEnvPath:U0,...Q0?{environmentSnapshotPath:Q0.path,...$.hostExecution?{executionEnvironment:qQ()}:{},environmentExpectedBinding:{runId:$.runId,...$.deviceIdentity,binding:G.environment_binding}}:L9?{jobEnvSourcePath:L9,workspacePoolPath:X0(u)}:q0?{}:{jobEnvSourcePath:oZ(u)},repoPath:a,replSocketPath:K0,...G.cloud_browser?{browserRunId:$.runId}:{},readyPath:d,launchId:p,expiresAtMs:Date.parse(G.expires_at),bashTimeoutMs:300000,replTimeoutMs:120000,...o?{managedJobs:{journalDirectory:o.journalDirectory,scopeId:o.scopeId},jobControlSocketPath:o.socketPath}:{},...o&&B?{jobsUser:{...B,...V!==null?{modelGid:V}:{}}}:{},...$.managedPty&&o&&Q0?{managedPty:{version:1,...$.managedPty.startupVerified===!0?{persistent:!0}:{},...process.platform==="darwin"?{shell:DQ()}:{}}}:{},...F&&!C?{allowedTools:["bash","read","write","edit"]}:U?{allowedTools:N==="bash"?["bash"]:["bash","repl"]}:{}};if(Q0||q0&&!L9)Z8(U0,"",{mode:384});else n7(u,U0);q="config_write",Z8(w,JSON.stringify(V8),{mode:384}),q=null;let w0={session_id:G.session_id,environment_id:G.environment_id,hands_protocol_version:W9,hands_worker_version:B9,hands_worker_artifact_sha256:G0,hands_worker_entrypoint:v0,target_generation:G.target_generation,target_fence_id:G.target_fence_id,executor_launch_id:p},x9=null,G$=!1,z$=!1,V$,$0=null,K$,W$,P9="failed",B$=null,K8=Promise.resolve(),F$=null,W8=async(v,r)=>{try{await L(v,r)}catch{}};try{Y("event_started");let v,r=(async()=>{await $.emitEvent("hands.started",{...w0,policy_mode:"full_access",policy_version:1,path_source:x.source}),v=Date.now()})();r.catch(()=>{return}),Y("worker_setup");let b0=G.browser_egress?{mode:"enforce",allowedDomains:G.browser_egress.allowed_domains}:{mode:"off"};if(N&&N!=="bash")x9=await(Q.startNodeRepl??_Z)({socketPath:K0,workRoot:u});else if(!U&&!G.cloud_browser&&C)x9=await(Q.startRepl??QZ)({socketPath:K0,browserExecutablePath:C,workspaceRoot:a,...$.managedBrowser?{managedBrowser:$.managedBrowser}:{},...$.desktopRecording?{recording:$.desktopRecording}:{},networkPolicy:b0,onEgressDenied:(E)=>{let z0=JZ(E.host);Z(JSON.stringify({event:"sandbox.repl_egress_denied",destination_id:z0,reason:E.reason,run_id:$.runId})),K8=K8.then(()=>L("hands.browser_egress_denied",{destination_id:z0,reason:E.reason})).catch((E9)=>{F$??=E9})}}).catch((E)=>{if(!F||$.signal.aborted||z()>=Date.parse(G.expires_at)||!Q6(E,K0))throw E;return Object.assign(V8,{allowedTools:["bash","read","write","edit"]}),Z8(w,JSON.stringify(V8),{mode:384}),z$=!0,null});let n0=a7({configPath:w,root:a,grantedRoot:m,workRoot:u,workspacePoolPath:z8,temporaryDirectory:O,path:x.path,executablePath:Q.executablePath,sourceEntrypoint:Q.sourceEntrypoint}),B8=Date.now(),F8,L$,L8=Q.takePrespawnedWorker?.(n0)??null;if(V$=Q.takePrespawnedWorker?L8!==null:void 0,$0=L8??(Q.spawnWorker??((E)=>H7(E.command,E.args,E.options)))(n0),!L8)Q.adoptSpawnedWorker?.($0);$0.stderr?.on("data",r7(p,(E)=>{if(E.event==="hands.worker.connecting")F8??=E.timestampMs;else if(E.event==="hands.worker.open")L$??=E.timestampMs;if(Z(JSON.stringify({...E,run_id:$.runId})),E.event==="hands.worker.permission_denied"&&typeof E.reason==="string"){let[z0,E9]=E.reason.split(":");if(["sandbox_policy","os_permission_unknown"].includes(z0??"")&&["bash","read","write","edit"].includes(E9??""))L("permission.denied",{provenance:z0,operation:E9}).catch(()=>{return})}}));let U$=!1;$0.on("error",()=>{U$=!0}),$0.once("exit",(E,z0)=>{try{Z(JSON.stringify({event:"hands.worker.exited",run_id:$.runId,launchId:p,exit_code:E,exit_signal:z0}))}catch{}}),A=$0,Y("worker_ready_wait");let U9=await t7({path:d,launchId:p,fenceId:e,targetGeneration:G.target_generation,child:$0,spawnFailed:()=>U$,signal:$.signal,timeoutMs:Q.readyTimeoutMs??A7,now:z}),tZ=Date.now();if(Y0=()=>{if(!$0||$0.exitCode!==null||$0.signalCode!==null)return null;let E=r9(d,U9);return E?{generation:E.targetGeneration,fenceId:E.fenceId}:null},o){let E={root:m,runId:$.runId,operationId:$.operationId,scopeId:o.scopeId,socketPath:o.socketPath,generation:U9.targetGeneration,fenceId:U9.fenceId,executorLaunchId:p,expiresAtMs:Date.parse(G.expires_at),readIdentity:Y0,workspace:u0,localGithubConfinement:$.localGithubConfinement===!0};if(Q0)E.environment=Q0;if($.claimOwner&&$.deviceIdentity&&$.claimOwner.device_id===$.deviceIdentity.deviceId){let z0=[$.deviceIdentity.apiOrigin,G.relay_url];if(S0)z0.push(S0);E.previewAuthority={owner:Object.freeze({...$.claimOwner}),rootId:$.deviceIdentity.rootId,relayOrigin:new URL(G.relay_url).origin,deniedPorts:w$(z0)}}W$=YQ(E)}if(await new Promise((E)=>{setImmediate(E)}),_9)sZ(u);let A9;if(J&&Q0){try{let E=Q0.install(J);A9={snapshot_id:E.snapshot_id,installed_revision:E.installed_revision}}catch{}try{Z(JSON.stringify({event:"hands.environment_at_claim",run_id:$.runId,installed:A9!==void 0}))}catch{}}J=void 0;let H$=!1;if($.headless){let E=v7(a,B);try{Z(JSON.stringify({event:"hands.workspace_check",run_id:$.runId,outcome:E}))}catch{}if(E==="unready")throw new j("hands_workspace_unready","This Session's checkout is not a readable, writable directory at its own path, so Reason Hands cannot use it.");H$=E==="checked"}Y("event_ready");let M$=W(r);M$.catch(()=>{return});let j$=Date.now();G$=!0,await L("hands.ready",{...w0,expiry_diagnostic:K,startup_stages:{version:1,browser_resolution_ms:V0(X.get("browser_resolution"),X.get("path_resolution")),path_resolution_ms:V0(X.get("path_resolution"),X.get("workspace_setup")),workspace_setup_ms:V0(X.get("workspace_setup"),X.get("event_started")),repl_setup_ms:V0(X.get("worker_setup"),B8),worker_boot_ms:V0(B8,F8),worker_dial_ms:V0(F8,L$),worker_ready_ms:V0(B8,tZ),started_event_ms:V0(X.get("event_started"),v),started_join_wait_ms:V0(X.get("event_ready"),j$),total_ms:V0(X.get("entered"),j$)},...X6($.claimedAtMs,X.get("entered"),V$),...$.managedPty?.startupVerified===!0?{managed_pty:{version:1,execution_mode:"host",descendant_cleanup_verified:!0}}:{},policy_mode:"full_access",policy_version:1,path_source:x.source,connection_generation:U9.generation,...A9?{environment_installed:A9}:{},...H$?{workspace_checked:!0}:{},...F&&!x9?{browser_state:"unavailable",browser_reason_code:z$?"setup_failed":"not_resolved"}:{viewport_width:1440,viewport_height:900}}),await M$,Y("ready"),K$=DZ({path:d,initial:U9,signal:$.signal,isAlive:()=>$0!==null&&$0.exitCode===null&&$0.signalCode===null&&z()<Date.parse(G.expires_at),publish:(E,z0)=>$.emitEvent("hands.reconnected",{...w0,target_generation:E.targetGeneration,target_fence_id:E.fenceId,connection_generation:E.generation},z0),failed:()=>Z(JSON.stringify({event:"hands.worker.generation_proof_failed",run_id:$.runId,executor_launch_id:p}))});let N$=await $6({child:$0,signal:$.signal,expiresAt:Date.parse(G.expires_at),now:z});if(N$==="cancelled"){let E=$.signal.reason instanceof j?$.signal.reason.code:"cancelled";throw P9=E,new j(E,"Reason Hands was cancelled.")}if(N$==="exited")throw new j("hands_worker_exited","Reason Hands exited unexpectedly.");return P9="expired",{...w0,policy_mode:"full_access",policy_version:1,ended:"expired"}}catch(v){B$=v;let r=v instanceof j?v.code:"hands_failed",b0=r==="cancelled"||["run_finished","run_cancelled","driver_handoff","driver_stopped"].includes(r);if(P9=b0?r:"failed",!b0)await W8("hands.failed",{...w0,reason_code:r});throw v}finally{K$?.stop(),W$?.();let v=$0?await e7($0,Q.stopTimeoutMs??E7):null,r=!1;await $.desktopRecording?.close();try{await x9?.stop()}catch{r=!0}if(await K8,(v==="stopped"||v==="already_exited"&&!G$)&&!r)await W8("hands.stopped",{...w0,reason_code:P9});else if(v!==null||r){if(await W8("hands.failed",{...w0,reason_code:v==="forced"?"hands_stop_forced":"hands_stop_unconfirmed"}),B$===null||r)throw new j("hands_stop_unconfirmed","Reason Hands resource cleanup could not be proven.")}if(F$!==null)throw new j("hands_egress_audit_failed","Reason Hands could not persist a browser egress denial receipt.")}}catch(M){let C=ZZ(q,M);if(C)try{Z(JSON.stringify({event:"sandbox.hands_workspace_failed",...C}))}catch{}throw M}finally{try{if(!A||A.exitCode!==null||A.signalCode!==null)g?.();if(b!==null&&(!A||A.exitCode!==null||A.signalCode!==null))I7(b,{recursive:!0,force:!0})}finally{y?.(),k()}}}
-export{V6 as Lb,K6 as Mb,Z0 as Nb,W6 as Ob,B6 as Pb,F6 as Qb,q6 as Rb,W4 as Sb,D6 as Tb,M9 as Ub,H0 as Vb,O6 as Wb,w$ as Xb,k6 as Yb,ZQ as Zb,o6 as _b,r6 as $b,t6 as ac,e6 as bc,$2 as cc,Q2 as dc,GQ as ec,Z2 as fc,Y2 as gc,h as hc,W0 as ic,PX as jc,pX as kc,lX as lc,UQ as mc,MZ as nc,L2 as oc,jQ as pc,qQ as qc,DQ as rc,XX as sc,z3 as tc,V3 as uc,mQ as vc,s2 as wc,C9 as xc,$1 as yc,e8 as zc,AZ as Ac,wZ as Bc,Y$ as Cc,w7 as Dc,AY as Ec,EY as Fc,uZ as Gc,m7 as Hc,sZ as Ic,nZ as Jc,a7 as Kc,o7 as Lc,bZ as Mc,RY as Nc,SY as Oc};