@ricsam/r5d-worker 0.0.136 → 0.0.138

package/dist/cjs/command-launcher.cjs

@@ -1,423 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var command_launcher_exports = {};
-__export(command_launcher_exports, {
-  CommandLaunchCancelledError: () => CommandLaunchCancelledError,
-  CommandLauncherUnavailableError: () => CommandLauncherUnavailableError,
-  WorkerCommandLauncher: () => WorkerCommandLauncher,
-  commandLaunchLane: () => commandLaunchLane,
-  commandLauncherEnvironment: () => commandLauncherEnvironment,
-  createWorkerCommandLauncher: () => createWorkerCommandLauncher,
-  parseCommandLauncher: () => parseCommandLauncher
-});
-module.exports = __toCommonJS(command_launcher_exports);
-var import_node_child_process = require("node:child_process");
-function commandLaunchLane(request) {
-  if (request.commandClass === "control") {
-    if (request.kind !== "exec_start") throw new Error("Control commands must be exec_start launches");
-    return "control";
-  }
-  return request.kind === "exec" && request.workspaceEffect === "none" ? "utility" : "general";
-}
-class CommandLauncherUnavailableError extends Error {
-  constructor(message, cause) {
-    super(message, { cause });
-    this.name = "CommandLauncherUnavailableError";
-  }
-}
-class CommandLaunchCancelledError extends Error {
-  constructor() {
-    super("Command cancelled before it started");
-    this.name = "CommandLaunchCancelledError";
-  }
-}
-function parseCommandLauncher(configuration) {
-  if (configuration === void 0) return void 0;
-  let argv;
-  try {
-    argv = JSON.parse(configuration);
-  } catch {
-    throw new Error("R5D_WORKER_COMMAND_LAUNCHER must be a JSON argv array");
-  }
-  if (!Array.isArray(argv) || argv.length === 0 || argv.some((part) => typeof part !== "string" || part.includes("\0")) || !argv[0])
-    throw new Error("R5D_WORKER_COMMAND_LAUNCHER must be a nonempty JSON argv array without NUL characters");
-  return argv;
-}
-function commandLauncherEnvironment(source = process.env) {
-  const result = {};
-  for (const [key, value] of Object.entries(source)) {
-    if (/^(PATH|HOME|USER|LOGNAME|TMP|TMPDIR|TEMP|SHELL|SYSTEMROOT|COMSPEC|PATHEXT|LANG|LC_[A-Z_]+)$/i.test(key)) result[key] = value;
-  }
-  return result;
-}
-class WorkerCommandLauncher {
-  constructor(options = {}) {
-    this.options = options;
-    this.mode = options.argv ? "external" : "direct";
-    if (!options.argv) {
-      this.exited = Promise.resolve();
-      return;
-    }
-    this.child = (0, import_node_child_process.spawn)(options.argv[0], options.argv.slice(1), {
-      env: options.env ?? commandLauncherEnvironment(),
-      stdio: ["pipe", "pipe", "pipe"]
-    });
-    this.exited = new Promise((resolve) => {
-      this.child.once("close", (code, signal) => {
-        if (!this.closing) this.fail(new Error(`Configured command launcher exited (${signal ?? code ?? "unknown"})`));
-        resolve();
-      });
-    });
-    this.child.once("error", (error) => this.fail(error));
-    this.child.stdin.on("error", (error) => {
-      if (!this.closing) this.fail(error);
-    });
-    let buffered = "";
-    this.child.stdout.setEncoding("utf8");
-    this.child.stdout.on("data", (data) => {
-      buffered += data;
-      if (Buffer.byteLength(buffered) > 1024 * 1024) {
-        this.fail(new Error("Command launcher response exceeded the protocol limit"));
-        return;
-      }
-      while (buffered.includes("\n")) {
-        const newline = buffered.indexOf("\n");
-        const line = buffered.slice(0, newline);
-        buffered = buffered.slice(newline + 1);
-        try {
-          this.receive(JSON.parse(line));
-        } catch (error) {
-          this.fail(error instanceof Error ? error : new Error(String(error)));
-          return;
-        }
-      }
-    });
-    this.child.stderr.setEncoding("utf8");
-    this.child.stderr.on("data", (data) => options.onStderr?.(data));
-  }
-  options;
-  mode;
-  child;
-  pending = /* @__PURE__ */ new Map();
-  launches = /* @__PURE__ */ new Map();
-  exited;
-  failure;
-  closing = false;
-  initialized = false;
-  closePromise;
-  sequence = 0;
-  capacity;
-  async initialize() {
-    this.assertHealthy();
-    if (this.initialized) return;
-    if (this.child) {
-      try {
-        const result = await this.rpc("initialize");
-        this.capacity = parseCapacity(result.capacity);
-      } catch (error) {
-        this.fail(error instanceof Error ? error : new Error(String(error)));
-        await this.close();
-        throw error;
-      }
-    }
-    this.initialized = true;
-  }
-  get activeIds() {
-    return [...this.launches.keys()];
-  }
-  /** The lane totals the launcher declared at initialization; undefined for a direct worker or an older launcher. */
-  get declaredCapacity() {
-    return this.capacity;
-  }
-  get supportsControlLane() {
-    return this.initialized && (this.mode === "direct" || (this.capacity?.controlSlots ?? 0) > 0);
-  }
-  /** Current admissions per lane, for the worker's capacity report. */
-  capacityReport() {
-    const bounded = this.child !== void 0;
-    const lanes = {
-      general: { slots: bounded ? this.capacity?.generalSlots ?? null : null, active: [], queued: [] },
-      utility: { slots: bounded ? this.capacity?.utilitySlots ?? null : null, active: [], queued: [] },
-      control: { slots: bounded ? this.capacity?.controlSlots ?? null : null, active: [], queued: [] }
-    };
-    for (const record of this.launches.values()) {
-      if (record.released) continue;
-      const entry = {
-        id: record.request.id,
-        ...record.request.sessionId ? { sessionId: record.request.sessionId } : {},
-        since: record.since
-      };
-      (record.phase === "active" ? lanes[record.lane].active : lanes[record.lane].queued).push(entry);
-    }
-    return { bounded, controlRuntimeMs: bounded ? this.capacity?.controlRuntimeMs ?? null : null, lanes };
-  }
-  notifyCapacityChange() {
-    try {
-      this.options.onCapacityChange?.();
-    } catch {
-    }
-  }
-  async acquire(request) {
-    this.assertHealthy();
-    if (!this.initialized) throw new Error("Command launcher is not initialized");
-    request.assertAdmission();
-    if (this.launches.has(request.id)) throw new Error(`Duplicate command launch identity: ${request.id}`);
-    const lane = commandLaunchLane(request);
-    if (lane === "control" && !this.supportsControlLane)
-      throw new Error("Update the worker command launcher before running control commands");
-    let rejectAdmission;
-    const cancellation = new Promise((_resolve, reject) => {
-      rejectAdmission = reject;
-    });
-    void cancellation.catch(() => {
-    });
-    const record = {
-      request,
-      lane,
-      phase: this.child ? "queued" : "active",
-      since: (/* @__PURE__ */ new Date()).toISOString(),
-      revoked: false,
-      released: false,
-      rejectAdmission
-    };
-    this.launches.set(request.id, record);
-    this.notifyCapacityChange();
-    let prefix = [];
-    let admissionTimer;
-    try {
-      if (this.child) {
-        const { assertAdmission: _assertAdmission, ...fields } = request;
-        const acquisition = this.rpc("acquire", fields, this.options.acquisitionTimeoutMs ?? 9e4).then(async (result) => {
-          if (record.revoked) {
-            await this.releaseRecord(record);
-            throw new CommandLaunchCancelledError();
-          }
-          if (!Array.isArray(result.argvPrefix) || result.argvPrefix.some((part) => typeof part !== "string" || part.includes("\0")))
-            throw this.fail(new Error("Command launcher acquire returned an invalid argvPrefix"));
-          return result.argvPrefix;
-        });
-        admissionTimer = setInterval(() => {
-          try {
-            request.assertAdmission();
-          } catch (error) {
-            record.revoked = true;
-            record.rejectAdmission(error);
-            void this.cancel(request.id).catch(() => {
-            });
-          }
-        }, 100);
-        prefix = await Promise.race([acquisition, cancellation]);
-        record.phase = "active";
-        record.since = (/* @__PURE__ */ new Date()).toISOString();
-        this.notifyCapacityChange();
-      }
-      request.assertAdmission();
-      this.assertHealthy();
-      if (record.revoked) throw new CommandLaunchCancelledError();
-    } catch (error) {
-      if (!this.failure && !this.closing) await this.releaseRecord(record);
-      throw error;
-    } finally {
-      if (admissionTimer) clearInterval(admissionTimer);
-    }
-    return {
-      wrap: (argv) => {
-        this.assertHealthy();
-        request.assertAdmission();
-        if (record.revoked) throw new CommandLaunchCancelledError();
-        if (record.released) throw new Error("Command launch lease is already released");
-        if (!argv.length) throw new Error("Command argv must not be empty");
-        return [...prefix, ...argv];
-      },
-      cancel: async () => {
-        await this.cancel(request.id);
-      },
-      diagnose: async () => {
-        this.assertHealthy();
-        if (!this.child) return void 0;
-        try {
-          const result = await this.rpc("diagnose", { id: request.id });
-          if (result.message !== void 0 && typeof result.message !== "string")
-            throw new Error("Command launcher returned an invalid diagnostic");
-          return result.message;
-        } catch (error) {
-          throw this.fail(error instanceof Error ? error : new Error(String(error)));
-        }
-      },
-      release: () => this.releaseRecord(record)
-    };
-  }
-  /** Revoke a launch. Returns whether this launcher still held it (queued or acquired, not yet released). */
-  async cancel(id) {
-    const record = this.launches.get(id);
-    if (!record || record.released) return false;
-    record.revoked = true;
-    record.rejectAdmission(new CommandLaunchCancelledError());
-    if (this.child) {
-      try {
-        await this.rpc("cancel", { id });
-      } catch (error) {
-        throw this.fail(error instanceof Error ? error : new Error(String(error)));
-      }
-    }
-    return true;
-  }
-  async cancelSession(sessionId) {
-    await this.cancelMatching((_id, ownerSessionId) => ownerSessionId === sessionId);
-  }
-  async cancelMatching(matches) {
-    const results = await Promise.allSettled(
-      [...this.launches].filter(([id, record]) => matches(id, record.request.sessionId)).map(([id]) => this.cancel(id))
-    );
-    const errors = results.flatMap((result) => result.status === "rejected" ? [result.reason] : []);
-    if (errors.length) throw new AggregateError(errors, "Command launcher cancellation was incomplete");
-  }
-  close() {
-    return this.closePromise ??= (async () => {
-      this.closing = true;
-      for (const record of this.launches.values()) {
-        record.revoked = true;
-        record.rejectAdmission(new CommandLaunchCancelledError());
-      }
-      this.rejectPending(new CommandLauncherUnavailableError("Command launcher is shutting down"));
-      this.child?.stdin.end();
-      const exited = await this.waitForExit(6e3);
-      if (!exited) {
-        this.child?.kill("SIGKILL");
-        await this.waitForExit(1e3);
-      }
-    })();
-  }
-  async waitForExit(timeoutMs) {
-    let timer;
-    try {
-      return await Promise.race([
-        this.exited.then(() => true),
-        new Promise((resolve) => {
-          timer = setTimeout(() => resolve(false), timeoutMs);
-        })
-      ]);
-    } finally {
-      if (timer) clearTimeout(timer);
-    }
-  }
-  releaseRecord(record) {
-    return record.release ??= (async () => {
-      record.revoked = true;
-      if (this.child) {
-        try {
-          await this.rpc("release", { id: record.request.id });
-        } catch (error) {
-          throw this.fail(error instanceof Error ? error : new Error(String(error)));
-        }
-      }
-      record.released = true;
-      this.launches.delete(record.request.id);
-      this.notifyCapacityChange();
-    })();
-  }
-  assertHealthy() {
-    if (this.failure) throw this.failure;
-    if (this.closing) throw new CommandLauncherUnavailableError("Command launcher is shutting down");
-  }
-  rpc(method, fields = {}, timeoutMs = this.options.requestTimeoutMs ?? 1e4) {
-    try {
-      this.assertHealthy();
-    } catch (error) {
-      return Promise.reject(error);
-    }
-    const requestId = String(++this.sequence);
-    return new Promise((resolve, reject) => {
-      const timer = setTimeout(() => this.fail(new Error(`Command launcher ${method} request timed out`)), timeoutMs);
-      this.pending.set(requestId, { resolve, reject, timer });
-      this.child.stdin.write(`${JSON.stringify({ requestId, method, ...fields })}
-`, (error) => {
-        if (error) this.fail(error);
-      });
-    });
-  }
-  receive(value) {
-    if (!value || typeof value !== "object") throw new Error("Invalid command launcher response");
-    const response = value;
-    if (typeof response.requestId !== "string") throw new Error("Command launcher response is missing requestId");
-    const request = this.pending.get(response.requestId);
-    if (!request) throw new Error("Command launcher returned an unknown requestId");
-    this.pending.delete(response.requestId);
-    clearTimeout(request.timer);
-    if (typeof response.error === "string") {
-      request.reject(new Error(response.error));
-      return;
-    }
-    if (!response.result || typeof response.result !== "object" || Array.isArray(response.result)) {
-      const error = new Error("Command launcher response is missing result");
-      request.reject(error);
-      throw error;
-    }
-    request.resolve(response.result);
-  }
-  rejectPending(error) {
-    for (const request of this.pending.values()) {
-      clearTimeout(request.timer);
-      request.reject(error);
-    }
-    this.pending.clear();
-  }
-  fail(error) {
-    if (this.failure || this.closing) return this.failure ?? error;
-    this.failure = new CommandLauncherUnavailableError(`Command launcher unavailable: ${error.message}`, error);
-    for (const record of this.launches.values()) {
-      record.revoked = true;
-      record.rejectAdmission(this.failure);
-    }
-    this.rejectPending(this.failure);
-    this.child?.kill("SIGTERM");
-    this.options.onFailure?.(this.failure, this.activeIds);
-    return this.failure;
-  }
-}
-function parseCapacity(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
-  const candidate = value;
-  const numbers = ["generalSlots", "utilitySlots", "controlSlots", "controlRuntimeMs", "queueTimeoutMs"];
-  if (!numbers.every((key) => typeof candidate[key] === "number" && Number.isSafeInteger(candidate[key]) && candidate[key] >= 0)) {
-    throw new Error("Command launcher initialize returned an invalid capacity");
-  }
-  return {
-    generalSlots: candidate.generalSlots,
-    utilitySlots: candidate.utilitySlots,
-    controlSlots: candidate.controlSlots,
-    controlRuntimeMs: candidate.controlRuntimeMs,
-    queueTimeoutMs: candidate.queueTimeoutMs
-  };
-}
-async function createWorkerCommandLauncher(options = {}) {
-  const launcher = new WorkerCommandLauncher({ ...options, argv: parseCommandLauncher(options.configuration) });
-  await launcher.initialize();
-  return launcher;
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  CommandLaunchCancelledError,
-  CommandLauncherUnavailableError,
-  WorkerCommandLauncher,
-  commandLaunchLane,
-  commandLauncherEnvironment,
-  createWorkerCommandLauncher,
-  parseCommandLauncher
-});

package/dist/cjs/control-command-policy.cjs

@@ -1,177 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var control_command_policy_exports = {};
-__export(control_command_policy_exports, {
-  CONTROL_COMMAND_MAX_ARGV: () => CONTROL_COMMAND_MAX_ARGV,
-  CONTROL_COMMAND_MAX_LENGTH: () => CONTROL_COMMAND_MAX_LENGTH,
-  CONTROL_COMMAND_PROGRAM: () => CONTROL_COMMAND_PROGRAM,
-  CONTROL_COMMAND_RUNTIME_MS: () => CONTROL_COMMAND_RUNTIME_MS,
-  assertControlCommandArgv: () => assertControlCommandArgv,
-  classifyControlCommand: () => classifyControlCommand,
-  controlCommandEnvironment: () => controlCommandEnvironment,
-  resolveControlCommandExecutable: () => resolveControlCommandExecutable
-});
-module.exports = __toCommonJS(control_command_policy_exports);
-const CONTROL_COMMAND_PROGRAM = "r5dctl";
-const CONTROL_COMMAND_RUNTIME_MS = 12e4;
-const CONTROL_COMMAND_MAX_ARGV = 64;
-const CONTROL_COMMAND_MAX_LENGTH = 4096;
-const CONTROL_GLOBAL_FLAGS_WITH_VALUE = /* @__PURE__ */ new Set(["-p", "--project", "-s", "--session", "-b", "--branch"]);
-const CONTROL_GLOBAL_FLAGS = /* @__PURE__ */ new Set(["--json", "-h", "--help", "-v", "--version"]);
-const REFUSED_ANYWHERE = /* @__PURE__ */ new Set(["-f", "--follow", "--watch", "--base-url", "--config", "--token", "--api-key"]);
-const CONTROL_VERBS = {
-  session: /* @__PURE__ */ new Set(["status", "stop", "prompt", "claim", "claims", "process-log"]),
-  sessions: /* @__PURE__ */ new Set(["recent"]),
-  describe: /* @__PURE__ */ new Set(["project", "branch", "session", "branch-operation", "branch-deletion"]),
-  get: /* @__PURE__ */ new Set(["projects", "branches", "sessions", "envs", "env"]),
-  conversation: /* @__PURE__ */ new Set(["overview", "inspect-node", "inspect-work"]),
-  ps: /* @__PURE__ */ new Set(["list", "history", "inspect", "stop"]),
-  workspace: /* @__PURE__ */ new Set(["status"]),
-  auth: /* @__PURE__ */ new Set(["status"]),
-  create: /* @__PURE__ */ new Set(["session"]),
-  update: /* @__PURE__ */ new Set(["session"]),
-  delete: /* @__PURE__ */ new Set(["session"]),
-  "answer-questions": null,
-  "answer-env-request": null
-};
-const CODE_LOADING_ENV_PATTERN = /^(NODE_OPTIONS|NODE_PATH|NODE_REPL_EXTERNAL_MODULE|BUN_OPTIONS|BUN_CONFIG_[A-Z_]+|LD_PRELOAD|LD_LIBRARY_PATH|LD_AUDIT|DYLD_[A-Z_]+|PATH|PATHEXT|PYTHONPATH|PERL5OPT|RUBYOPT|SHELL|ENV|BASH_ENV)$/i;
-const BARE_WORD = /^[A-Za-z0-9_@%+=:,./-]+$/;
-const DOUBLE_QUOTED_FORBIDDEN = /[$`\\!]/;
-function tokenizePlainInvocation(command) {
-  if (command.length > CONTROL_COMMAND_MAX_LENGTH) return { reason: "command is longer than the control lane allows" };
-  if (/[\r\n]/.test(command)) return { reason: "multi-line commands are shell scripts" };
-  const argv = [];
-  let index = 0;
-  while (index < command.length) {
-    const char = command[index];
-    if (char === " " || char === "	") {
-      index += 1;
-      continue;
-    }
-    let word = "";
-    let quotedParts = 0;
-    let bareParts = 0;
-    while (index < command.length && command[index] !== " " && command[index] !== "	") {
-      const current = command[index];
-      if (current === "'") {
-        const end = command.indexOf("'", index + 1);
-        if (end < 0) return { reason: "unterminated single quote" };
-        word += command.slice(index + 1, end);
-        quotedParts += 1;
-        index = end + 1;
-        continue;
-      }
-      if (current === '"') {
-        const end = command.indexOf('"', index + 1);
-        if (end < 0) return { reason: "unterminated double quote" };
-        const inner = command.slice(index + 1, end);
-        if (DOUBLE_QUOTED_FORBIDDEN.test(inner)) return { reason: "double-quoted text would be expanded by the shell" };
-        word += inner;
-        quotedParts += 1;
-        index = end + 1;
-        continue;
-      }
-      let bare = "";
-      while (index < command.length && !/[\s'"]/.test(command[index])) {
-        bare += command[index];
-        index += 1;
-      }
-      if (!BARE_WORD.test(bare)) return { reason: `shell syntax in "${bare}" is not part of a plain invocation` };
-      word += bare;
-      bareParts += 1;
-    }
-    if (quotedParts + bareParts > 1) return { reason: "adjacent quoted and bare text is shell concatenation" };
-    argv.push(word);
-    if (argv.length > CONTROL_COMMAND_MAX_ARGV) return { reason: "too many arguments for a control command" };
-  }
-  if (argv.length === 0) return { reason: "empty command" };
-  return { argv };
-}
-function assertControlCommandArgv(argv) {
-  if (argv.length === 0 || argv.length > CONTROL_COMMAND_MAX_ARGV) throw new Error("Control commands are a single r5dctl invocation");
-  if (argv[0] !== CONTROL_COMMAND_PROGRAM) throw new Error(`Control commands must start with ${CONTROL_COMMAND_PROGRAM}`);
-  if (argv.reduce((length, argument) => length + (typeof argument === "string" ? argument.length : 0) + 1, 0) > CONTROL_COMMAND_MAX_LENGTH)
-    throw new Error("Control command arguments exceed the length limit");
-  for (const argument of argv) {
-    if (typeof argument !== "string" || argument.includes("\0") || /[\r\n]/.test(argument)) throw new Error("Control command arguments must be plain text");
-    if (REFUSED_ANYWHERE.has(argument.split("=", 1)[0])) throw new Error(`Control command option is not allowed (${argument.split("=", 1)[0]})`);
-    if (argument === "--") throw new Error("Control commands cannot use `--`");
-  }
-  let position = 1;
-  while (position < argv.length) {
-    const argument = argv[position];
-    if (CONTROL_GLOBAL_FLAGS.has(argument)) {
-      position += 1;
-      continue;
-    }
-    if (CONTROL_GLOBAL_FLAGS_WITH_VALUE.has(argument)) {
-      if (position + 1 >= argv.length) throw new Error(`Missing value for ${argument}`);
-      position += 2;
-      continue;
-    }
-    if (argument.startsWith("-")) throw new Error(`Global flag ${argument} is not allowed in a control command`);
-    break;
-  }
-  const verb = argv[position];
-  if (verb === void 0) throw new Error("Control commands need a coordination verb (for example `r5dctl ps list`)");
-  const allowed = Object.hasOwn(CONTROL_VERBS, verb) ? CONTROL_VERBS[verb] : void 0;
-  if (allowed === void 0) throw new Error(`r5dctl ${verb} is not a coordination command`);
-  if (allowed === null) return;
-  const subject = argv[position + 1];
-  if (subject === void 0 || !allowed.has(subject)) {
-    throw new Error(`r5dctl ${verb}${subject ? ` ${subject}` : ""} is not a coordination command`);
-  }
-}
-function resolveControlCommandExecutable(trustedPath, which, program = CONTROL_COMMAND_PROGRAM) {
-  const resolved = trustedPath ? which(program, { PATH: trustedPath }) : null;
-  if (!resolved) throw new Error(`${program} is not installed on the worker's trusted PATH; control commands are unavailable until it is`);
-  return resolved;
-}
-function controlCommandEnvironment(environment, trustedPath) {
-  const result = {};
-  for (const [key, value] of Object.entries(environment)) {
-    if (value === void 0 || CODE_LOADING_ENV_PATTERN.test(key)) continue;
-    result[key] = value;
-  }
-  if (trustedPath !== void 0) result.PATH = trustedPath;
-  return result;
-}
-function classifyControlCommand(command) {
-  const tokenized = tokenizePlainInvocation(command.trim());
-  if ("reason" in tokenized) return { control: false, reason: tokenized.reason };
-  const { argv } = tokenized;
-  if (argv[0] !== CONTROL_COMMAND_PROGRAM) return { control: false, reason: "not an r5dctl invocation" };
-  try {
-    assertControlCommandArgv(argv);
-  } catch (error) {
-    return { control: false, reason: error instanceof Error ? error.message : String(error) };
-  }
-  return { control: true, argv };
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  CONTROL_COMMAND_MAX_ARGV,
-  CONTROL_COMMAND_MAX_LENGTH,
-  CONTROL_COMMAND_PROGRAM,
-  CONTROL_COMMAND_RUNTIME_MS,
-  assertControlCommandArgv,
-  classifyControlCommand,
-  controlCommandEnvironment,
-  resolveControlCommandExecutable
-});

package/dist/cjs/git-blob-hash.cjs

@@ -1,41 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var git_blob_hash_exports = {};
-__export(git_blob_hash_exports, {
-  gitBlobHash: () => gitBlobHash,
-  gitObjectHashAlgorithmFor: () => gitObjectHashAlgorithmFor
-});
-module.exports = __toCommonJS(git_blob_hash_exports);
-var import_node_crypto = require("node:crypto");
-function gitObjectHashAlgorithmFor(objectId) {
-  if (/^[0-9a-f]{40}$/u.test(objectId)) return "sha1";
-  if (/^[0-9a-f]{64}$/u.test(objectId)) return "sha256";
-  return null;
-}
-function gitBlobHash(content, algorithm) {
-  const hash = (0, import_node_crypto.createHash)(algorithm);
-  hash.update(`blob ${content.length}\0`);
-  hash.update(content);
-  return hash.digest("hex");
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  gitBlobHash,
-  gitObjectHashAlgorithmFor
-});

package/dist/cjs/git-identity.cjs

@@ -1,39 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var git_identity_exports = {};
-__export(git_identity_exports, {
-  configureVisibleGitIdentity: () => configureVisibleGitIdentity
-});
-module.exports = __toCommonJS(git_identity_exports);
-function configureVisibleGitIdentity(branchPath, identity, runGit) {
-  if (!identity) {
-    return;
-  }
-  const name = identity.name.trim();
-  const email = identity.email.trim();
-  if (!name || !email) {
-    throw new Error("Git identity must include name and email");
-  }
-  runGit(["config", "user.name", name], { cwd: branchPath });
-  runGit(["config", "user.email", email], { cwd: branchPath });
-}
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  configureVisibleGitIdentity
-});