@reason-machines/cli-linux-x64 0.2.561 → 0.2.565

package/bin/vm-hands/{vm-hands-entry-lite-52qz0n30.js → vm-hands-entry-lite-ngry8nkq.js}

@@ -1,7 +1,7 @@
 // @bun
-import{Bt}from"./vm-hands-entry-lite-weqam12f.js";import{rn}from"./vm-hands-entry-lite-tcmye5ny.js";import{Y,Xe,B}from"./vm-hands-entry-lite-8xv6c0rm.js";import{r}from"./vm-hands-entry-lite-qy9xg6em.js";import{spawn as k,spawnSync as N}from"child_process";import{existsSync as S,mkdtempSync as z,readFileSync as j,readdirSync as we,realpathSync as Se,rmSync as q,statSync as Q}from"fs";import{platform as W,tmpdir as V}from"os";import{dirname as A,join as u,win32 as x}from"path";import{fileURLToPath as be,pathToFileURL as F}from"url";var xe=["bwrap","socat","rg"],he=2000,I=20000,ye=3,O=4000,Pe=new Set([".git",".hg",".svn","node_modules"]),Ee=["runAsHostUid","sysrq-trigger"],Z=u(A(A(be(import.meta.url))),"packages","sandbox-runtime"),Re=u(Z,"src","index.ts"),ee=!1;function cr(){ee=!0}function ne(){return ee?u(A(Se(process.execPath)),"runtime","srt"):void 0}function Ae(){let e=u(ne()??Z,"vendor","srt-win");return u(e,process.arch,"srt-win.exe")}var ka="confined commands need the Windows sandbox: run `reason connect` and approve the Windows prompt.";function Jr(e=Ae()){let n=N(e,["status"],{encoding:"utf8",timeout:15000,windowsHide:!0});try{let o=JSON.parse(n.stdout??"");return n.status===0&&o.user?.user?.exists===!0&&o.user.cred_present===!0}catch{return!1}}function xa(e=Ae()){let n=N(e,["install"],{stdio:["ignore","ignore","ignore"],timeout:120000,windowsHide:!0});return n.status===0?"installed":n.status===10?"cancelled":"failed"}async function te(){let e=ne();if(e&&process.platform==="linux"&&!S(u(e,"vendor","seccomp",process.arch,"apply-seccomp")))throw Error("packaged_sandbox_runtime_vendor_missing");if(e&&process.platform==="win32"&&!S(Ae()))throw Error("packaged_sandbox_runtime_vendor_missing");if(e){let i=j(u(e,"sandbox-runtime.mjs"),"utf8");for(let s of Ee)if(!i.includes(s))throw Error(`packaged_sandbox_runtime_fork_missing:${s}`)}let t=(await import(e?F(u(e,"sandbox-runtime.mjs")).href:F(Re).href)).SandboxManager;if(!t||typeof t.initialize!=="function"||typeof t.wrapWithSandboxArgv!=="function")throw Error("sandbox-runtime does not expose the expected SandboxManager API.");return{SandboxManager:t}}function _e(e={}){if((e.platformName??W())!=="linux")return!1;let o=e.fileExists??S,t=e.readFile??((i)=>j(i,"utf8"));for(let i of["/.dockerenv","/run/.containerenv"])try{if(o(i))return!0}catch{}try{return/docker|containerd|kubepods|lxc|libpod/.test(t("/proc/1/cgroup"))}catch{return!1}}function re(e){return["/bin/true","/usr/bin/true"].find((n)=>e(n))??null}function Me(e,n){return e==="strict"?["--ro-bind","/","/","--unshare-pid","--unshare-user","--cap-drop","ALL","--proc","/proc","--",n]:["--ro-bind","/","/","--unshare-pid","--unshare-user","--bind","/proc","/proc","--",n]}function Ce(e,n){try{let o=N("bwrap",Me(e,n),{stdio:"ignore",timeout:he});return!o.error&&o.status===0}catch{return!1}}function ve(e){let n=e.platformName??W(),o=e.fileExists??S;if(n==="win32")return(e.bash??Y)()&&o(Ae())?m??"strict":null;if(n!=="linux")return null;let t=e.hasExecutable??rn;if(!xe.every((l)=>t(l)))return null;let i=re(o);if(!i)return null;let s=m??(e.containerized??_e({platformName:n})?"weak":"strict");return(e.probeNamespaces??((l)=>Ce(l,i)))(s)?s:null}var h=null,M=!1,p=null,U=null,H=null,m=null,y=null,_=null,P=null,C=[],b=new Map;function v(){throw g("sandbox_mode_conflict"),new r("sandbox_unavailable","Sandbox process policy conflicts with an existing probe or session. Restart the worker.")}function Ca(e){if(m!==null&&m!==e||M&&h!==null&&h!==e||y!==null&&y!==e)v();m=e}function g(e){if(!p)process.stderr.write(`Reason worker: confined commands are off (${e})
-`);p=e}function Gn(e){if(p)return!1;if(!M){if(h=ve(e??{}),M=!0,h&&!e)ue()}return h!==null}function De(){return Gn()?h:null}var E=null,w=0;function D(e,n){if(p)throw new r("sandbox_unavailable","Confined execution is unavailable in this worker process.");if(m&&e.sandboxMode&&m!==e.sandboxMode)v();let o=m??e.sandboxMode??De();if(!o)throw new r("sandbox_unavailable","Confined command execution is unavailable on this operating system.");if(y&&y!==o)v();return y=o,E??=(async()=>{let{SandboxManager:t}=await(e.loadSandboxRuntime??te)();return await t.initialize(Ie(o,n)),t})().catch((t)=>{if(E=null,n)_=null,process.stderr.write(`Reason worker: the Windows sandbox did not start for this folder (${String(t).slice(0,500)})
+import{Ft}from"./vm-hands-entry-lite-s93f3pbv.js";import{ln}from"./vm-hands-entry-lite-q62g6sx0.js";import{Y,Ye,B}from"./vm-hands-entry-lite-pg7nnyc6.js";import{r}from"./vm-hands-entry-lite-qy9xg6em.js";import{spawn as k,spawnSync as N}from"child_process";import{existsSync as S,mkdtempSync as z,readFileSync as j,readdirSync as we,realpathSync as Se,rmSync as q,statSync as Q}from"fs";import{platform as W,tmpdir as V}from"os";import{dirname as A,join as u,win32 as x}from"path";import{fileURLToPath as be,pathToFileURL as F}from"url";var xe=["bwrap","socat","rg"],he=2000,I=20000,ye=3,O=4000,Pe=new Set([".git",".hg",".svn","node_modules"]),Ee=["runAsHostUid","sysrq-trigger"],Z=u(A(A(be(import.meta.url))),"packages","sandbox-runtime"),Re=u(Z,"src","index.ts"),ee=!1;function cr(){ee=!0}function ne(){return ee?u(A(Se(process.execPath)),"runtime","srt"):void 0}function Ae(){let e=u(ne()??Z,"vendor","srt-win");return u(e,process.arch,"srt-win.exe")}var Da="confined commands need the Windows sandbox: run `reason connect` and approve the Windows prompt.";function tn(e=Ae()){let n=N(e,["status"],{encoding:"utf8",timeout:15000,windowsHide:!0});try{let o=JSON.parse(n.stdout??"");return n.status===0&&o.user?.user?.exists===!0&&o.user.cred_present===!0}catch{return!1}}function Oa(e=Ae()){let n=N(e,["install"],{stdio:["ignore","ignore","ignore"],timeout:120000,windowsHide:!0});return n.status===0?"installed":n.status===10?"cancelled":"failed"}async function te(){let e=ne();if(e&&process.platform==="linux"&&!S(u(e,"vendor","seccomp",process.arch,"apply-seccomp")))throw Error("packaged_sandbox_runtime_vendor_missing");if(e&&process.platform==="win32"&&!S(Ae()))throw Error("packaged_sandbox_runtime_vendor_missing");if(e){let i=j(u(e,"sandbox-runtime.mjs"),"utf8");for(let s of Ee)if(!i.includes(s))throw Error(`packaged_sandbox_runtime_fork_missing:${s}`)}let t=(await import(e?F(u(e,"sandbox-runtime.mjs")).href:F(Re).href)).SandboxManager;if(!t||typeof t.initialize!=="function"||typeof t.wrapWithSandboxArgv!=="function")throw Error("sandbox-runtime does not expose the expected SandboxManager API.");return{SandboxManager:t}}function _e(e={}){if((e.platformName??W())!=="linux")return!1;let o=e.fileExists??S,t=e.readFile??((i)=>j(i,"utf8"));for(let i of["/.dockerenv","/run/.containerenv"])try{if(o(i))return!0}catch{}try{return/docker|containerd|kubepods|lxc|libpod/.test(t("/proc/1/cgroup"))}catch{return!1}}function re(e){return["/bin/true","/usr/bin/true"].find((n)=>e(n))??null}function Me(e,n){return e==="strict"?["--ro-bind","/","/","--unshare-pid","--unshare-user","--cap-drop","ALL","--proc","/proc","--",n]:["--ro-bind","/","/","--unshare-pid","--unshare-user","--bind","/proc","/proc","--",n]}function Ce(e,n){try{let o=N("bwrap",Me(e,n),{stdio:"ignore",timeout:he});return!o.error&&o.status===0}catch{return!1}}function ve(e){let n=e.platformName??W(),o=e.fileExists??S;if(n==="win32")return(e.bash??Y)()&&o(Ae())?m??"strict":null;if(n!=="linux")return null;let t=e.hasExecutable??ln;if(!xe.every((l)=>t(l)))return null;let i=re(o);if(!i)return null;let s=m??(e.containerized??_e({platformName:n})?"weak":"strict");return(e.probeNamespaces??((l)=>Ce(l,i)))(s)?s:null}var h=null,M=!1,p=null,U=null,H=null,m=null,y=null,_=null,P=null,C=[],b=new Map;function v(){throw g("sandbox_mode_conflict"),new r("sandbox_unavailable","Sandbox process policy conflicts with an existing probe or session. Restart the worker.")}function Na(e){if(m!==null&&m!==e||M&&h!==null&&h!==e||y!==null&&y!==e)v();m=e}function g(e){if(!p)process.stderr.write(`Reason worker: confined commands are off (${e})
+`);p=e}function Xn(e){if(p)return!1;if(!M){if(h=ve(e??{}),M=!0,h&&!e)ue()}return h!==null}function De(){return Xn()?h:null}var E=null,w=0;function D(e,n){if(p)throw new r("sandbox_unavailable","Confined execution is unavailable in this worker process.");if(m&&e.sandboxMode&&m!==e.sandboxMode)v();let o=m??e.sandboxMode??De();if(!o)throw new r("sandbox_unavailable","Confined command execution is unavailable on this operating system.");if(y&&y!==o)v();return y=o,E??=(async()=>{let{SandboxManager:t}=await(e.loadSandboxRuntime??te)();return await t.initialize(Ie(o,n)),t})().catch((t)=>{if(E=null,n)_=null,process.stderr.write(`Reason worker: the Windows sandbox did not start for this folder (${String(t).slice(0,500)})
 `);else g(`initialize_failed: ${String(t)}`);throw t instanceof r?t:new r("sandbox_unavailable","The confined execution sandbox failed to start.")}),E.then((t)=>{if(p)throw new r("sandbox_unavailable","Confined execution became unavailable during sandbox initialization.");return t})}function T(){if(w-=1,w===0)for(let e of C.splice(0))e()}async function oe(e,n=!0,o,t){let i=t===void 0?1/0:Date.now()+t;await le();let s=ke();if(n)await s;let a=JSON.stringify(e),l=!1,c=()=>{if(!l)return;l=!1;let d=(b.get(a)??1)-1;if(d>0)b.set(a,d);else b.delete(a)};try{for(;;){if(o?.aborted)throw new r("cancelled","Operation was cancelled.");if(Date.now()>=i)return!1;if(P){await P;continue}let d=b.keys().next().value;if(_??=d??a,_===a&&(d===void 0||d===a))break;if(!l){l=!0,b.set(a,(b.get(a)??0)+1);continue}if(w===0&&d===a){ie();continue}await new Promise((f)=>{if(C.push(f),o?.addEventListener("abort",()=>f(),{once:!0}),i!==1/0)setTimeout(f,Math.max(0,i-Date.now())).unref?.()})}return w+=1,!0}finally{if(l&&w===0)for(let d of C.splice(0))d();c()}}function ie(){return P??=ce().finally(()=>{P=null}),P}function se(e,n,o=process.env){let t=o.USERPROFILE?x.resolve(o.USERPROFILE).toLowerCase():null,i=x.resolve(e).toLowerCase(),s=t!==null&&i.startsWith(`${t}\\`),a=n?ae(o).filter((l)=>l.toLowerCase()===i||l.toLowerCase().startsWith(`${i}\\`)):[];return{denyRead:[],allowRead:[e],allowWrite:n?[e]:[],denyWrite:n?a:s?[]:[e]}}function ae(e,n=process.execPath){let o=new Map;for(let t of[...(e.PATH??e.Path??"").split(";"),x.dirname(n)]){if(!t||!x.isAbsolute(t))continue;let i=x.resolve(t);if(!o.has(i.toLowerCase()))o.set(i.toLowerCase(),i)}return[...o.values()]}function Te(e=process.env,n=process.execPath){let o=[e.SystemRoot,e.ProgramFiles,e["ProgramFiles(x86)"],e.ProgramW6432,e.ProgramData,e.USERPROFILE].filter((t)=>!!t).map((t)=>x.resolve(t).toLowerCase());return ae(e,n).filter((t)=>{let i=t.toLowerCase();return!o.some((s)=>i===s||i.startsWith(`${s}\\`))})}var J=null,K=null;function le(e=Ae()){return K??=(async()=>{let n;try{n=JSON.parse((await de(e,["status"])).stdout).user?.user?.sid}catch{return null}if(typeof n!=="string"||!/^S-1-[0-9-]+$/.test(n))return null;if(!await new Promise((t)=>{let i=k(B("icacls"),[e,"/grant",`*${n}:(RX)`],{stdio:"ignore",windowsHide:!0,timeout:30000});i.on("error",()=>t(!1)),i.on("close",(s)=>t(s===0))}))process.stderr.write(`Reason worker: could not let the Windows sandbox user run srt-win.exe
 `);return n})(),K}function de(e,n,o){return new Promise((t)=>{let i=k(e,n,{stdio:["pipe","pipe","ignore"],windowsHide:!0,timeout:120000}),s="";i.stdout?.setEncoding("utf8").on("data",(a)=>{s+=a}),i.on("error",()=>t({status:null,stdout:s})),i.on("close",(a)=>t({status:a,stdout:s})),i.stdin?.end(o??"")})}function ke(e=Ae()){return J??=(async()=>{let n=Te();if(n.length===0)return;let o=await le(e),t=o?await de(e,["acl","stamp","--holder-pid",String(process.ppid),"--sandbox-user-sid",o],JSON.stringify({denyRead:[],denyWrite:n})):null;if(!t||t.status!==0&&t.status!==2)g(`program_folder_deny_failed: ${t?`exit ${t.status}`:"no sandbox user"}`),process.stderr.write(`Reason worker: could not deny the Windows sandbox writes to PATH folders (${t?`exit ${t.status}`:"no sandbox user"}); confined commands are off
-`)})(),J}var Ne=`h=$(mktemp -d) || exit 125; trap 'rm -rf "$h"' EXIT; mkdir -p "$h/AppData/Roaming" "$h/AppData/Local"; w=$(cygpath -w "$h"); export HOME="$h" USERPROFILE="$w" APPDATA="$w\\AppData\\Roaming" LOCALAPPDATA="$w\\AppData\\Local" TEMP="$w" TMP="$w"; `;async function ce(){let e=E;if(E=null,_=null,!e)return;try{await(await e).reset()}catch{}}async function ue(e={}){if(p)return!1;if(e.loadSandboxRuntime)return G(e.loadSandboxRuntime);if(!Gn())return!1;return U??=G(te),U}async function G(e){try{let{SandboxManager:n}=await e();if(process.platform==="win32"){if(!S(Ae()))g("dependencies_missing: srt-win.exe");return!p}let o=n.checkDependencies().errors;if(o.length>0)return g(`dependencies_missing: ${o.join(", ")}`),!1;return!p}catch(n){return g(`load_failed: ${String(n)}`),!1}}async function Aa(e={}){if(!e.loadSandboxRuntime&&!e.sandboxMode){if(!await ue())return!1;return H??=X({}),H}return X(e)}async function X(e){let n=process.platform==="win32",o=z(u(V(),"reason-device-probe-"));try{let t=n?se(o,!1):void 0;if(t)await oe(t,!1);let i;try{i=await We(await D(e,t),o)}catch{return!1}finally{if(n)T()}if(!i)g("confined_command_failed");if(w===0)await(n?ie():ce());return i}finally{q(o,{recursive:!0,force:!0})}}async function We(e,n){let o=process.platform==="win32",t=o?"true":re(S);if(!t)return!1;try{let{argv:i,env:s}=await e.wrapWithSandboxArgv(fe([t]),Kn(),{filesystem:o?pe([],n):me({root:n,allowWrite:!1,temporaryDirectory:n,protectedPaths:[]})},void 0,n),[a,...l]=i;if(!a)return!1;return await Le(a,l,n,o?{env:s}:{})}catch{return!1}finally{try{e.cleanupAfterCommand()}catch{}}}function Le(e,n,o,t={}){return new Promise((i)=>{let s=!1,a,l=(f)=>{if(s)return;s=!0,clearTimeout(a),i(f)},c;try{c=(t.spawnChild??k)(e,n,{cwd:o,env:t.env??{PATH:Bt,HOME:o,TMPDIR:o},stdio:"ignore",windowsHide:!0})}catch{l(!1);return}c.once("error",()=>l(!1));let d=(f,R)=>l(f===0&&R===null);if(c.once("exit",d),c.once("close",d),c.exitCode!==null||c.signalCode!==null)d(c.exitCode,c.signalCode);if(s)return;a=setTimeout(()=>{l(!1);try{c.kill("SIGKILL")}catch{}},Math.min(t.timeoutMs??I,I))})}function Kn(e=S,n=W()){if(n==="win32")return Xe("win32");return["/bin/bash","/bin/sh"].find((o)=>e(o))??"/bin/sh"}function fe(e){return e.map((n)=>`'${n.replaceAll("'","'\\''")}'`).join(" ")}function Fe(e,n,o=(t)=>we(t,{withFileTypes:!0}).filter((i)=>i.isDirectory()||i.isFile()).map((i)=>i.name)){let t=[],i=[{path:e,depth:0}],s=0;while(i.length>0&&s<O){let a=i.pop(),l;try{l=o(a.path)}catch{continue}for(let c of l){if(s+=1,s>O)break;let d=u(a.path,c);if(n(d)){t.push(d);continue}if(a.depth+1<ye&&!Pe.has(c))i.push({path:d,depth:a.depth+1})}}return t}function me(e){let n=u(e.root,".git"),o=[];try{if(Q(n).isDirectory())o=[u(n,"config"),u(n,"hooks")]}catch{}return{denyRead:["/home","/root","/tmp","/tmp/.X11-unix",...e.protectedPaths],allowRead:[e.root,e.temporaryDirectory],allowWrite:[...e.allowWrite?[e.root]:[],e.temporaryDirectory],denyWrite:[...e.protectedPaths,...o]}}function pe(e,n){let o=u(n,".git"),t=[];try{if(Q(o).isDirectory())t=[u(o,"config"),u(o,"hooks")]}catch{}return{denyRead:[...e],allowRead:[],allowWrite:[],denyWrite:[...e,...t]}}function Ie(e,n){if(n)return{network:{allowedDomains:[],deniedDomains:[]},filesystem:n,windows:{srtWin:{path:Ae()}}};return{network:{allowedDomains:[],deniedDomains:[]},filesystem:{denyRead:[],allowRead:[],allowWrite:[],denyWrite:[]},...e==="weak"?{enableWeakerNestedSandbox:!0}:{}}}function Pa(e){let n=e.createTemporaryDirectory??(()=>z(u(V(),"reason-device-"))),o=e.removeTemporaryDirectory??((t)=>q(t,{recursive:!0,force:!0}));return async(t,i,s)=>{let a=process.platform==="win32",l;if(a){let d=se(s.root,s.allowWrite);if(!await oe(d,!s.workerProbe,s.signal,s.timeoutMs))return{exitCode:null,signal:null,stdout:"",stderr:"",timedOut:!0,truncated:!1};try{l=await D(e,d)}catch(f){throw T(),f}}else l=await D(e),w+=1;let c;try{c=n();let d=Fe(s.root,e.isProtectedPath),f;try{f=await l.wrapWithSandboxArgv((a?Ne:"")+fe([t,...i]),e.shell??Kn(),{filesystem:a?pe(d,s.root):me({root:s.root,allowWrite:s.allowWrite,temporaryDirectory:c,protectedPaths:d})},s.signal,s.cwd)}catch(L){throw L instanceof r?L:new r("sandbox_unavailable","The confined execution sandbox could not wrap the command.")}let[R,...ge]=f.argv;if(!R)throw new r("sandbox_unavailable","The confined execution sandbox produced no command.");return await e.spawnCaptured(R,ge,{cwd:s.cwd,timeoutMs:s.timeoutMs,signal:s.signal,env:a?f.env:e.scrubEnvironment(s.root,c)})}finally{T();try{l.cleanupAfterCommand()}catch{}if(c!==void 0)o(c)}}}
-export{cr,Ae,ka,Jr,xa,Ca,Gn,Aa,Kn,Pa};
+`)})(),J}var Ne=`h=$(mktemp -d) || exit 125; trap 'rm -rf "$h"' EXIT; mkdir -p "$h/AppData/Roaming" "$h/AppData/Local"; w=$(cygpath -w "$h"); export HOME="$h" USERPROFILE="$w" APPDATA="$w\\AppData\\Roaming" LOCALAPPDATA="$w\\AppData\\Local" TEMP="$w" TMP="$w"; `;async function ce(){let e=E;if(E=null,_=null,!e)return;try{await(await e).reset()}catch{}}async function ue(e={}){if(p)return!1;if(e.loadSandboxRuntime)return G(e.loadSandboxRuntime);if(!Xn())return!1;return U??=G(te),U}async function G(e){try{let{SandboxManager:n}=await e();if(process.platform==="win32"){if(!S(Ae()))g("dependencies_missing: srt-win.exe");return!p}let o=n.checkDependencies().errors;if(o.length>0)return g(`dependencies_missing: ${o.join(", ")}`),!1;return!p}catch(n){return g(`load_failed: ${String(n)}`),!1}}async function La(e={}){if(!e.loadSandboxRuntime&&!e.sandboxMode){if(!await ue())return!1;return H??=X({}),H}return X(e)}async function X(e){let n=process.platform==="win32",o=z(u(V(),"reason-device-probe-"));try{let t=n?se(o,!1):void 0;if(t)await oe(t,!1);let i;try{i=await We(await D(e,t),o)}catch{return!1}finally{if(n)T()}if(!i)g("confined_command_failed");if(w===0)await(n?ie():ce());return i}finally{q(o,{recursive:!0,force:!0})}}async function We(e,n){let o=process.platform==="win32",t=o?"true":re(S);if(!t)return!1;try{let{argv:i,env:s}=await e.wrapWithSandboxArgv(fe([t]),Yn(),{filesystem:o?pe([],n):me({root:n,allowWrite:!1,temporaryDirectory:n,protectedPaths:[]})},void 0,n),[a,...l]=i;if(!a)return!1;return await Le(a,l,n,o?{env:s}:{})}catch{return!1}finally{try{e.cleanupAfterCommand()}catch{}}}function Le(e,n,o,t={}){return new Promise((i)=>{let s=!1,a,l=(f)=>{if(s)return;s=!0,clearTimeout(a),i(f)},c;try{c=(t.spawnChild??k)(e,n,{cwd:o,env:t.env??{PATH:Ft,HOME:o,TMPDIR:o},stdio:"ignore",windowsHide:!0})}catch{l(!1);return}c.once("error",()=>l(!1));let d=(f,R)=>l(f===0&&R===null);if(c.once("exit",d),c.once("close",d),c.exitCode!==null||c.signalCode!==null)d(c.exitCode,c.signalCode);if(s)return;a=setTimeout(()=>{l(!1);try{c.kill("SIGKILL")}catch{}},Math.min(t.timeoutMs??I,I))})}function Yn(e=S,n=W()){if(n==="win32")return Ye("win32");return["/bin/bash","/bin/sh"].find((o)=>e(o))??"/bin/sh"}function fe(e){return e.map((n)=>`'${n.replaceAll("'","'\\''")}'`).join(" ")}function Fe(e,n,o=(t)=>we(t,{withFileTypes:!0}).filter((i)=>i.isDirectory()||i.isFile()).map((i)=>i.name)){let t=[],i=[{path:e,depth:0}],s=0;while(i.length>0&&s<O){let a=i.pop(),l;try{l=o(a.path)}catch{continue}for(let c of l){if(s+=1,s>O)break;let d=u(a.path,c);if(n(d)){t.push(d);continue}if(a.depth+1<ye&&!Pe.has(c))i.push({path:d,depth:a.depth+1})}}return t}function me(e){let n=u(e.root,".git"),o=[];try{if(Q(n).isDirectory())o=[u(n,"config"),u(n,"hooks")]}catch{}return{denyRead:["/home","/root","/tmp","/tmp/.X11-unix",...e.protectedPaths],allowRead:[e.root,e.temporaryDirectory],allowWrite:[...e.allowWrite?[e.root]:[],e.temporaryDirectory],denyWrite:[...e.protectedPaths,...o]}}function pe(e,n){let o=u(n,".git"),t=[];try{if(Q(o).isDirectory())t=[u(o,"config"),u(o,"hooks")]}catch{}return{denyRead:[...e],allowRead:[],allowWrite:[],denyWrite:[...e,...t]}}function Ie(e,n){if(n)return{network:{allowedDomains:[],deniedDomains:[]},filesystem:n,windows:{srtWin:{path:Ae()}}};return{network:{allowedDomains:[],deniedDomains:[]},filesystem:{denyRead:[],allowRead:[],allowWrite:[],denyWrite:[]},...e==="weak"?{enableWeakerNestedSandbox:!0}:{}}}function $a(e){let n=e.createTemporaryDirectory??(()=>z(u(V(),"reason-device-"))),o=e.removeTemporaryDirectory??((t)=>q(t,{recursive:!0,force:!0}));return async(t,i,s)=>{let a=process.platform==="win32",l;if(a){let d=se(s.root,s.allowWrite);if(!await oe(d,!s.workerProbe,s.signal,s.timeoutMs))return{exitCode:null,signal:null,stdout:"",stderr:"",timedOut:!0,truncated:!1};try{l=await D(e,d)}catch(f){throw T(),f}}else l=await D(e),w+=1;let c;try{c=n();let d=Fe(s.root,e.isProtectedPath),f;try{f=await l.wrapWithSandboxArgv((a?Ne:"")+fe([t,...i]),e.shell??Yn(),{filesystem:a?pe(d,s.root):me({root:s.root,allowWrite:s.allowWrite,temporaryDirectory:c,protectedPaths:d})},s.signal,s.cwd)}catch(L){throw L instanceof r?L:new r("sandbox_unavailable","The confined execution sandbox could not wrap the command.")}let[R,...ge]=f.argv;if(!R)throw new r("sandbox_unavailable","The confined execution sandbox produced no command.");return await e.spawnCaptured(R,ge,{cwd:s.cwd,timeoutMs:s.timeoutMs,signal:s.signal,env:a?f.env:e.scrubEnvironment(s.root,c)})}finally{T();try{l.cleanupAfterCommand()}catch{}if(c!==void 0)o(c)}}}
+export{cr,Ae,Da,tn,Oa,Na,Xn,La,Yn,$a};

package/bin/vm-hands/{vm-hands-entry-lite-8xv6c0rm.js → vm-hands-entry-lite-pg7nnyc6.js}

@@ -1,3 +1,3 @@
 // @bun
-import{Fn}from"./vm-hands-entry-lite-krpqqx12.js";import{Dt}from"./vm-hands-entry-lite-ab1pq3xg.js";import{execFileSync as p}from"child_process";import{realpathSync as S,statSync as w}from"fs";import{tmpdir as P}from"os";import{createRequire as b}from"module";import{win32 as r}from"path";var h=["/bin/bash","/usr/bin/bash"],ha="Git Bash was not found. Install Git for Windows (https://git-scm.com/download/win), then run `reason connect`.";function c(o){try{return w(o).isFile()}catch{return!1}}var i=(o)=>[r.join(o,"bin","bash.exe"),r.join(o,"usr","bin","bash.exe")];function g(o,e){let t=r.normalize(o).toLowerCase(),s=(e.SystemRoot??e.SYSTEMROOT??"C:\\Windows").toLowerCase();return t.startsWith(r.join(s,"system32").toLowerCase()+"\\")||t.startsWith(r.join(s,"sysnative").toLowerCase()+"\\")||t.includes("\\windowsapps\\")}function f(o=process.env,e=c){let t=[];for(let s of(o.PATH??o.Path??"").split(";"))if(s&&r.isAbsolute(s))t.push(r.join(s,"git.exe"));for(let s of[o.ProgramW6432,o.ProgramFiles,o["ProgramFiles(x86)"]])if(s)t.push(r.join(s,"Git","cmd","git.exe"));if(o.LOCALAPPDATA)t.push(r.join(o.LOCALAPPDATA,"Programs","Git","cmd","git.exe"));return t.find(e)??null}var a;function Wc(o=process.platform){if(o!=="win32")return"git";return a??=f(),a}function x(o){let e=process.platform==="win32"?f(o):"git";if(!e)return null;try{return p(e,["--exec-path"],{encoding:"utf8",timeout:5000,windowsHide:!0,stdio:["ignore","pipe","ignore"],env:o}).trim()||null}catch{return null}}function J(o=process.env,e=x,t=c){let s=[],l=e(o);if(l)s.push(...i(r.resolve(l,"..","..","..")));for(let n of[o.ProgramW6432,o.ProgramFiles,o["ProgramFiles(x86)"]])if(n)s.push(...i(r.join(n,"Git")));if(o.LOCALAPPDATA)s.push(...i(r.join(o.LOCALAPPDATA,"Programs","Git")));for(let n of(o.PATH??o.Path??"").split(";"))if(n&&r.isAbsolute(n))s.push(r.join(n,"bash.exe"));return s.find((n)=>!g(n,o)&&t(n))??null}var d;function Y(o=process.platform){if(o!=="win32")return h.find(c)??null;return d??=J(),d}function Xe(o=process.platform){let e=Y(o);if(!e)throw Error(o==="win32"?ha:"bash_unavailable");return e}function fa(o=process.platform){return S(o==="win32"?P():"/tmp")}function Rt(o=process.platform,e=process.env){if(o!=="win32")return"/usr/bin:/bin";let t=e.SystemRoot??e.SYSTEMROOT??"C:\\Windows";return[r.join(t,"System32"),t,r.join(t,"System32","Wbem"),r.join(t,"System32","WindowsPowerShell","v1.0")].join(";")}function B(o,e=process.platform){if(e!=="win32"||/[\\/]/.test(o))return o;let t=/\.exe$/i.test(o)?o:`${o}.exe`,s=Rt(e).split(";");return r.join(t.toLowerCase()==="powershell.exe"?s[3]:s[0],t)}function Tt(o=process.platform,e=process.env){if(o!=="win32")return{PATH:Rt(o)};let t=e.SystemRoot??e.SYSTEMROOT??"C:\\Windows";return{PATH:Rt(o,e),SystemRoot:t,WINDIR:t}}function Me(o=process.platform){return o==="win32"?{windowsHide:!0}:{detached:!0}}var u;function m(){if(u===void 0)u=Dt(Fn)(b(import.meta.url));return u}function It(o,e=process.platform){let t=o.pid;if(e!=="win32"||t===void 0)return;let s=m();if(s?.track(t))o.once("close",()=>s.release(t))}function Be(o,e="SIGTERM",t=process.platform){if(t!=="win32"){process.kill(-o,e);return}if(e===0){process.kill(o,0);return}if(m()?.terminate(o))return;p(B("taskkill",t),["/PID",String(o),"/T","/F"],{stdio:"ignore",timeout:1e4,windowsHide:!0})}function G(o,e=63,t=process.platform){return t==="win32"||o.uid===process.getuid?.()&&(o.mode&e)===0}var y=/^(?:con|prn|aux|nul|com[0-9\u00b9\u00b2\u00b3]|lpt[0-9\u00b9\u00b2\u00b3]|conin\$|conout\$)(?:\..*)?$|:|[. ]$/i;function Ki(o){return o!=="."&&o!==".."&&y.test(o)}
-export{ha,Wc,Y,Xe,fa,Rt,B,Tt,Me,It,Be,G,Ki};
+import{Un}from"./vm-hands-entry-lite-rxydyqke.js";import{Ot}from"./vm-hands-entry-lite-wnqqjsew.js";import{execFileSync as p}from"child_process";import{realpathSync as S,statSync as w}from"fs";import{tmpdir as P}from"os";import{createRequire as b}from"module";import{win32 as r}from"path";var h=["/bin/bash","/usr/bin/bash"],va="Git Bash was not found. Install Git for Windows (https://git-scm.com/download/win), then run `reason connect`.";function c(o){try{return w(o).isFile()}catch{return!1}}var i=(o)=>[r.join(o,"bin","bash.exe"),r.join(o,"usr","bin","bash.exe")];function g(o,e){let t=r.normalize(o).toLowerCase(),s=(e.SystemRoot??e.SYSTEMROOT??"C:\\Windows").toLowerCase();return t.startsWith(r.join(s,"system32").toLowerCase()+"\\")||t.startsWith(r.join(s,"sysnative").toLowerCase()+"\\")||t.includes("\\windowsapps\\")}function f(o=process.env,e=c){let t=[];for(let s of(o.PATH??o.Path??"").split(";"))if(s&&r.isAbsolute(s))t.push(r.join(s,"git.exe"));for(let s of[o.ProgramW6432,o.ProgramFiles,o["ProgramFiles(x86)"]])if(s)t.push(r.join(s,"Git","cmd","git.exe"));if(o.LOCALAPPDATA)t.push(r.join(o.LOCALAPPDATA,"Programs","Git","cmd","git.exe"));return t.find(e)??null}var a;function Zc(o=process.platform){if(o!=="win32")return"git";return a??=f(),a}function x(o){let e=process.platform==="win32"?f(o):"git";if(!e)return null;try{return p(e,["--exec-path"],{encoding:"utf8",timeout:5000,windowsHide:!0,stdio:["ignore","pipe","ignore"],env:o}).trim()||null}catch{return null}}function J(o=process.env,e=x,t=c){let s=[],l=e(o);if(l)s.push(...i(r.resolve(l,"..","..","..")));for(let n of[o.ProgramW6432,o.ProgramFiles,o["ProgramFiles(x86)"]])if(n)s.push(...i(r.join(n,"Git")));if(o.LOCALAPPDATA)s.push(...i(r.join(o.LOCALAPPDATA,"Programs","Git")));for(let n of(o.PATH??o.Path??"").split(";"))if(n&&r.isAbsolute(n))s.push(r.join(n,"bash.exe"));return s.find((n)=>!g(n,o)&&t(n))??null}var d;function Y(o=process.platform){if(o!=="win32")return h.find(c)??null;return d??=J(),d}function Ye(o=process.platform){let e=Y(o);if(!e)throw Error(o==="win32"?va:"bash_unavailable");return e}function Sa(o=process.platform){return S(o==="win32"?P():"/tmp")}function Tt(o=process.platform,e=process.env){if(o!=="win32")return"/usr/bin:/bin";let t=e.SystemRoot??e.SYSTEMROOT??"C:\\Windows";return[r.join(t,"System32"),t,r.join(t,"System32","Wbem"),r.join(t,"System32","WindowsPowerShell","v1.0")].join(";")}function B(o,e=process.platform){if(e!=="win32"||/[\\/]/.test(o))return o;let t=/\.exe$/i.test(o)?o:`${o}.exe`,s=Tt(e).split(";");return r.join(t.toLowerCase()==="powershell.exe"?s[3]:s[0],t)}function It(o=process.platform,e=process.env){if(o!=="win32")return{PATH:Tt(o)};let t=e.SystemRoot??e.SYSTEMROOT??"C:\\Windows";return{PATH:Tt(o,e),SystemRoot:t,WINDIR:t}}function Me(o=process.platform){return o==="win32"?{windowsHide:!0}:{detached:!0}}var u;function m(){if(u===void 0)u=Ot(Un)(b(import.meta.url));return u}function Dt(o,e=process.platform){let t=o.pid;if(e!=="win32"||t===void 0)return;let s=m();if(s?.track(t))o.once("close",()=>s.release(t))}function Be(o,e="SIGTERM",t=process.platform){if(t!=="win32"){process.kill(-o,e);return}if(e===0){process.kill(o,0);return}if(m()?.terminate(o))return;p(B("taskkill",t),["/PID",String(o),"/T","/F"],{stdio:"ignore",timeout:1e4,windowsHide:!0})}function G(o,e=63,t=process.platform){return t==="win32"||o.uid===process.getuid?.()&&(o.mode&e)===0}var y=/^(?:con|prn|aux|nul|com[0-9\u00b9\u00b2\u00b3]|lpt[0-9\u00b9\u00b2\u00b3]|conin\$|conout\$)(?:\..*)?$|:|[. ]$/i;function Yi(o){return o!=="."&&o!==".."&&y.test(o)}
+export{va,Zc,Y,Ye,Sa,Tt,B,It,Me,Dt,Be,G,Yi};