@struktoai/mirage-node 0.0.8-alpha.1 → 0.0.8

package/dist/runtime/sandbox/daytona/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/daytona/runtime.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,kDAAkD,CAAA;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAGtE,OAAO,EAAE,OAAO,EAAmB,MAAM,UAAU,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAsB,MAAM,aAAa,CAAA;AAGrE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAE7B;;;;;;;;;GASG;AACH,MAAM,OAAO,cAAe,SAAQ,aAA4B;IACrD,IAAI,GAAG,SAAS,CAAA;IACjB,MAAM,GAAmB,IAAI,CAAA;IAC7B,OAAO,GAAmB,IAAI,CAAA;IAEtC,YAAY,UAAyC,EAAE;QACrD,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QACnC,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAC1D,CAAC;IAED,iEAAiE;IACvD,OAAO;QACf,OAAO,OAAO,EAAE,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;YAChC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9E,CAAA;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAC7D,CAAC;IAEQ,KAAK,CAAC,QAAQ,CACrB,IAAY,EACZ,KAAwB,EACxB,GAA2B,EAC3B,GAAW;QAEX,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC3E,IAAI,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QACtC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAA;YACxB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC9B,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACnE,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,IAAgB;QACjD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACpD,IAAI,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACpE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IAC3D,CAAC;IAED,gEAAgE;IACvD,KAAK,CAAC,KAAK;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAA;YACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QACpB,CAAC;IACH,CAAC;CACF;AAED,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/daytona/runtime.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,OAAO,EAAE,WAAW,EAAmB,MAAM,iCAAiC,CAAA;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,kDAAkD,CAAA;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAGtE,OAAO,EAAE,OAAO,EAAmB,MAAM,UAAU,CAAA;AACnD,OAAO,EAAE,mBAAmB,EAAsB,MAAM,aAAa,CAAA;AAGrE,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;AAE7B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,cAAe,SAAQ,aAA4B;IACrD,IAAI,GAAG,SAAS,CAAA;IACjB,MAAM,GAAmB,IAAI,CAAA;IAC7B,OAAO,GAAmB,IAAI,CAAA;IAEtC,YAAY,UAAyC,EAAE;QACrD,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QACnC,SAAS,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAC1D,CAAC;IAED,iEAAiE;IACvD,OAAO;QACf,OAAO,OAAO,EAAE,CAAA;IAClB,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;YAChC,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAC9E,CAAA;QACH,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAC7D,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAC/B,IAAuB,EACvB,KAAwB,EACxB,GAA2B,EAC3B,GAAW;QAEX,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC3E,IAAI,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QACtC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,SAAS,EAAE,CAAA;YACxB,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;YACjD,OAAO,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QACxC,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAA;QACnE,OAAO;YACL,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnC,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAA;IACH,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAY,EAAE,IAAgB;QACjD,IAAI,IAAI,CAAC,OAAO,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;QACnC,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QACpD,IAAI,MAAM,KAAK,EAAE;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QACpE,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IAC3D,CAAC;IAED,gEAAgE;IACvD,KAAK,CAAC,KAAK;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAA;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAA;YACxC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QACpB,CAAC;QACD,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;IACrB,CAAC;CACF;AAED,eAAe,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA"}

package/dist/runtime/sandbox/docker/constants.d.ts

@@ -1,2 +1,7 @@
-export declare const DOCKER_CLI_HINT = "the docker runtime needs the docker CLI on PATH (Docker Desktop, colima, or a podman alias)";
+export declare const DOCKER_HINT = "the docker runtime needs `docker` on PATH (Docker Desktop, colima, or a podman alias)";
+/**
+ * `docker inspect` reports State.Status: created, running, paused,
+ * restarting, removing, exited or dead. Only "running" takes a line.
+ */
+export declare const RUNNING_STATE = "running";
 //# sourceMappingURL=constants.d.ts.map

package/dist/runtime/sandbox/docker/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/constants.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,eAAe,gGACmE,CAAA"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/constants.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,WAAW,0FACiE,CAAA;AAEzF;;;GAGG;AACH,eAAO,MAAM,aAAa,YAAY,CAAA"}

package/dist/runtime/sandbox/docker/constants.js

@@ -11,5 +11,10 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 // ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========
-export const DOCKER_CLI_HINT = 'the docker runtime needs the docker CLI on PATH (Docker Desktop, colima, or a podman alias)';
+export const DOCKER_HINT = 'the docker runtime needs `docker` on PATH (Docker Desktop, colima, or a podman alias)';
+/**
+ * `docker inspect` reports State.Status: created, running, paused,
+ * restarting, removing, exited or dead. Only "running" takes a line.
+ */
+export const RUNNING_STATE = 'running';
 //# sourceMappingURL=constants.js.map

package/dist/runtime/sandbox/docker/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/constants.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,MAAM,CAAC,MAAM,eAAe,GAC1B,6FAA6F,CAAA"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/constants.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,MAAM,CAAC,MAAM,WAAW,GACtB,uFAAuF,CAAA;AAEzF;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAA"}

package/dist/runtime/sandbox/docker/runtime.d.ts

@@ -1,26 +1,26 @@
-import { PROCESS_EXECUTOR, type ProcessExecutor } from '@struktoai/mirage-core/runtime/mixin';
+import type { ByteSource } from '@struktoai/mirage-core/io/types';
 import { RemoteSandbox } from '@struktoai/mirage-core/runtime/sandbox/base';
-import type { RunResult, SandboxPipe } from '@struktoai/mirage-core/runtime/types';
+import { PIPE_TRANSPORT, type PipeTransport } from '@struktoai/mirage-core/runtime/sandbox/mixin';
+import type { OutputFn, RunResult, SandboxPipe } from '@struktoai/mirage-core/runtime/types';
 import type { RuntimeOptions } from '@struktoai/mirage-core/runtime/config';
 import { type DockerConfig } from './config.ts';
-import { type CliResult } from '../cli.ts';
 /**
  * A container the user runs as a whole-line runtime.
  *
  * You start the container yourself; mirage only connects to it and
- * execs lines. The docker CLI is the transport (Docker Desktop,
+ * execs lines. The `docker` program is the transport (Docker Desktop,
  * colima, or a podman alias all work), so there is no SDK dependency
  * and no daemon socket wiring; each line is one `docker exec -i` with
  * the merged environment, the session cwd, real stdin, and separated
  * stderr.
  */
-export declare class DockerRuntime extends RemoteSandbox<DockerConfig> implements ProcessExecutor<undefined> {
-    readonly [PROCESS_EXECUTOR]: true;
+export declare class DockerRuntime extends RemoteSandbox<DockerConfig> implements PipeTransport {
+    readonly [PIPE_TRANSPORT]: true;
     readonly name = "docker";
     constructor(options?: RuntimeOptions<DockerConfig>);
-    protected docker(args: string[], stdin?: Uint8Array | null, signal?: AbortSignal): Promise<CliResult>;
+    protected docker(args: string[], stdin?: ByteSource | null, output?: OutputFn | null, signal?: AbortSignal, errors?: OutputFn | null): Promise<RunResult>;
     connect(): Promise<void>;
-    protected execArgv(argv: readonly string[], stdin: Uint8Array | null, env: Record<string, string>, cwd: string, signal?: AbortSignal): Promise<RunResult>;
+    protected execArgv(argv: readonly string[], stdin: ByteSource | null, env: Record<string, string>, cwd: string, output: OutputFn | null, errors: OutputFn | null, signal?: AbortSignal): Promise<RunResult>;
     openPipe(command: string): Promise<SandboxPipe>;
 }
 //# sourceMappingURL=runtime.d.ts.map

package/dist/runtime/sandbox/docker/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/runtime.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAG3E,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAA;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAA;AAEnE,OAAO,EAAE,KAAK,SAAS,EAAiC,MAAM,WAAW,CAAA;AAEzE;;;;;;;;;GASG;AACH,qBAAa,aACX,SAAQ,aAAa,CAAC,YAAY,CAClC,YAAW,eAAe,CAAC,SAAS,CAAC;IAErC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAS;IAC3C,QAAQ,CAAC,IAAI,YAAW;gBAEZ,OAAO,GAAE,cAAc,CAAC,YAAY,CAAM;IAMtD,SAAS,CAAC,MAAM,CACd,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC;IAIf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;cAeL,QAAQ,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC;IAMZ,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAMzD"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/runtime.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,8CAA8C,CAAA;AAGjG,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAA;AAC5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,aAAa,CAAA;AAKnE;;;;;;;;;GASG;AACH,qBAAa,aAAc,SAAQ,aAAa,CAAC,YAAY,CAAE,YAAW,aAAa;IACrF,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAG,IAAI,CAAS;IACzC,QAAQ,CAAC,IAAI,YAAW;gBAEZ,OAAO,GAAE,cAAc,CAAC,YAAY,CAAM;IAMtD,SAAS,CAAC,MAAM,CACd,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,QAAQ,GAAG,IAAW,EAC9B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,GAAE,QAAQ,GAAG,IAAW,GAC7B,OAAO,CAAC,SAAS,CAAC;IAQf,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;cAOX,QAAQ,CACzB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC;IAKrB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAMhD"}

package/dist/runtime/sandbox/docker/runtime.js

@@ -11,57 +11,53 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 // ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========
-import { PROCESS_EXECUTOR } from '@struktoai/mirage-core/runtime/mixin';
 import { RemoteSandbox } from '@struktoai/mirage-core/runtime/sandbox/base';
+import { PIPE_TRANSPORT } from '@struktoai/mirage-core/runtime/sandbox/mixin';
 import { requireId } from '@struktoai/mirage-core/runtime/sandbox/config';
 import { registerRuntime } from '@struktoai/mirage-core/runtime/table';
 import { DOCKER_CONFIG_KEYS } from "./config.js";
-import { DOCKER_CLI_HINT } from "./constants.js";
-import { execArgs, openCliPipe, runCli } from "../cli.js";
+import { notRunningHint } from '@struktoai/mirage-core/runtime/sandbox/constants';
+import { DOCKER_HINT, RUNNING_STATE } from "./constants.js";
+import { execArgs, openProgramPipe, reportedState, runProgram } from "../program.js";
 /**
  * A container the user runs as a whole-line runtime.
  *
  * You start the container yourself; mirage only connects to it and
- * execs lines. The docker CLI is the transport (Docker Desktop,
+ * execs lines. The `docker` program is the transport (Docker Desktop,
  * colima, or a podman alias all work), so there is no SDK dependency
  * and no daemon socket wiring; each line is one `docker exec -i` with
  * the merged environment, the session cwd, real stdin, and separated
  * stderr.
  */
 export class DockerRuntime extends RemoteSandbox {
-    [PROCESS_EXECUTOR] = true;
+    [PIPE_TRANSPORT] = true;
     name = 'docker';
     constructor(options = {}) {
         super(options, DOCKER_CONFIG_KEYS);
         requireId('docker', 'container', this.config.container);
     }
-    // One docker CLI invocation; the seam tests override.
-    docker(args, stdin = null, signal) {
-        return runCli('docker', DOCKER_CLI_HINT, args, stdin, signal !== undefined ? { signal } : {});
+    // Run `docker` once; the seam tests override.
+    docker(args, stdin = null, output = null, signal, errors = null) {
+        return runProgram('docker', DOCKER_HINT, args, stdin, {
+            ...(signal !== undefined ? { signal } : {}),
+            ...(output !== null ? { output } : {}),
+            ...(errors !== null ? { errors } : {}),
+        });
     }
     async connect() {
-        const result = await this.docker([
-            'inspect',
-            '--format',
-            '{{.State.Running}}',
-            this.config.container,
-        ]);
-        if (result.code !== 0) {
-            throw new Error(`docker inspect failed: ${DECODER.decode(result.stderr).trim()}`);
-        }
-        if (DECODER.decode(result.stdout).trim() !== 'true') {
-            throw new Error(`container ${this.config.container} is not running`);
-        }
+        const container = this.config.container;
+        const status = await this.docker(['inspect', '--format', '{{json .State}}', container]);
+        const state = reportedState(status, 'docker inspect', ['Status']);
+        if (state !== RUNNING_STATE)
+            throw new Error(notRunningHint('container', container, state, {}));
     }
-    async execArgv(argv, stdin, env, cwd, signal) {
+    execArgv(argv, stdin, env, cwd, output, errors, signal) {
         const args = execArgs(['exec', '-i'], [this.config.container], env, cwd, argv);
-        const result = await this.docker(args, stdin, signal);
-        return { stdout: result.stdout, stderr: result.stderr, exitCode: result.code };
+        return this.docker(args, stdin, output, signal, errors);
     }
     openPipe(command) {
-        return openCliPipe('docker', execArgs(['exec', '-i'], [this.config.container], {}, null, ['sh', '-c', command]));
+        return openProgramPipe('docker', execArgs(['exec', '-i'], [this.config.container], {}, null, ['/bin/sh', '-c', command]));
     }
 }
-const DECODER = new TextDecoder();
 registerRuntime('docker', DockerRuntime);
 //# sourceMappingURL=runtime.js.map

package/dist/runtime/sandbox/docker/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/runtime.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,OAAO,EAAE,gBAAgB,EAAwB,MAAM,sCAAsC,CAAA;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAGtE,OAAO,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAkB,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAEzE;;;;;;;;;GASG;AACH,MAAM,OAAO,aACX,SAAQ,aAA2B;IAG1B,CAAC,gBAAgB,CAAC,GAAG,IAAa,CAAA;IAClC,IAAI,GAAG,QAAQ,CAAA;IAExB,YAAY,UAAwC,EAAE;QACpD,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAClC,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACzD,CAAC;IAED,sDAAsD;IAC5C,MAAM,CACd,IAAc,EACd,QAA2B,IAAI,EAC/B,MAAoB;QAEpB,OAAO,MAAM,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAC/F,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC/B,SAAS;YACT,UAAU;YACV,oBAAoB;YACpB,IAAI,CAAC,MAAM,CAAC,SAAS;SACtB,CAAC,CAAA;QACF,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,0BAA0B,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;QACnF,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,MAAM,CAAC,SAAS,iBAAiB,CAAC,CAAA;QACtE,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAC/B,IAAuB,EACvB,KAAwB,EACxB,GAA2B,EAC3B,GAAW,EACX,MAAoB;QAEpB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;QACrD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IAChF,CAAC;IAEQ,QAAQ,CAAC,OAAe;QAC/B,OAAO,WAAW,CAChB,QAAQ,EACR,QAAQ,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CACnF,CAAA;IACH,CAAC;CACF;AAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/docker/runtime.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAGvE,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAsB,MAAM,8CAA8C,CAAA;AACjG,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAGtE,OAAO,EAAE,kBAAkB,EAAqB,MAAM,aAAa,CAAA;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAA;AACjF,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC3D,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAEpF;;;;;;;;;GASG;AACH,MAAM,OAAO,aAAc,SAAQ,aAA2B;IACnD,CAAC,cAAc,CAAC,GAAG,IAAa,CAAA;IAChC,IAAI,GAAG,QAAQ,CAAA;IAExB,YAAY,UAAwC,EAAE;QACpD,KAAK,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;QAClC,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACzD,CAAC;IAED,8CAA8C;IACpC,MAAM,CACd,IAAc,EACd,QAA2B,IAAI,EAC/B,SAA0B,IAAI,EAC9B,MAAoB,EACpB,SAA0B,IAAI;QAE9B,OAAO,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE;YACpD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAA;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAA;QACvF,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;QACjE,IAAI,KAAK,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAA;IACjG,CAAC;IAEkB,QAAQ,CACzB,IAAuB,EACvB,KAAwB,EACxB,GAA2B,EAC3B,GAAW,EACX,MAAuB,EACvB,MAAuB,EACvB,MAAoB;QAEpB,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAC9E,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IACzD,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,OAAO,eAAe,CACpB,QAAQ,EACR,QAAQ,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CACxF,CAAA;IACH,CAAC;CACF;AAED,eAAe,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAA"}

package/dist/runtime/sandbox/microsandbox/constants.d.ts

@@ -1,6 +1,4 @@
-export declare const MICROSANDBOX_CLI_HINT: string;
+export declare const MICROSANDBOX_HINT: string;
 export declare const RUNNING_STATE = "Running";
 export declare const INSPECT_TIMEOUT_SECONDS = 10;
-/** Explain why the configured sandbox cannot take a command. */
-export declare function notRunningHint(sandbox: string, state: string): string;
 //# sourceMappingURL=constants.d.ts.map

package/dist/runtime/sandbox/microsandbox/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/constants.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,qBAAqB,QAEK,CAAA;AAEvC,eAAO,MAAM,aAAa,YAAY,CAAA;AACtC,eAAO,MAAM,uBAAuB,KAAK,CAAA;AAEzC,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAErE"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/constants.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,iBAAiB,QAES,CAAA;AAEvC,eAAO,MAAM,aAAa,YAAY,CAAA;AACtC,eAAO,MAAM,uBAAuB,KAAK,CAAA"}

package/dist/runtime/sandbox/microsandbox/constants.js

@@ -11,12 +11,8 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 // ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========
-export const MICROSANDBOX_CLI_HINT = 'the microsandbox runtime needs the msb CLI on PATH (https://microsandbox.dev); ' +
+export const MICROSANDBOX_HINT = 'the microsandbox runtime needs `msb` on PATH (https://microsandbox.dev); ' +
     'start the sandbox before connecting';
 export const RUNNING_STATE = 'Running';
 export const INSPECT_TIMEOUT_SECONDS = 10;
-/** Explain why the configured sandbox cannot take a command. */
-export function notRunningHint(sandbox, state) {
-    return `sandbox ${sandbox} is not running (status: ${state}); start it with msb start`;
-}
 //# sourceMappingURL=constants.js.map

package/dist/runtime/sandbox/microsandbox/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/constants.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,MAAM,CAAC,MAAM,qBAAqB,GAChC,iFAAiF;IACjF,qCAAqC,CAAA;AAEvC,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAA;AACtC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAA;AAEzC,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,KAAa;IAC3D,OAAO,WAAW,OAAO,4BAA4B,KAAK,4BAA4B,CAAA;AACxF,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/constants.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,MAAM,CAAC,MAAM,iBAAiB,GAC5B,2EAA2E;IAC3E,qCAAqC,CAAA;AAEvC,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAA;AACtC,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAA"}

package/dist/runtime/sandbox/microsandbox/runtime.d.ts

@@ -1,26 +1,26 @@
-import { PROCESS_EXECUTOR, type ProcessExecutor } from '@struktoai/mirage-core/runtime/mixin';
+import type { ByteSource } from '@struktoai/mirage-core/io/types';
 import { RemoteSandbox } from '@struktoai/mirage-core/runtime/sandbox/base';
-import type { RunResult, SandboxPipe } from '@struktoai/mirage-core/runtime/types';
+import { PIPE_TRANSPORT, type PipeTransport } from '@struktoai/mirage-core/runtime/sandbox/mixin';
+import type { OutputFn, RunResult, SandboxPipe } from '@struktoai/mirage-core/runtime/types';
 import type { RuntimeOptions } from '@struktoai/mirage-core/runtime/config';
 import { type MicrosandboxConfig } from './config.ts';
-import { type CliResult } from '../cli.ts';
 /**
- * Run programs in an existing Microsandbox guest through the msb CLI.
+ * Run programs in an existing Microsandbox guest through `msb`.
  * The user starts the sandbox and serves its workspace at the same paths
  * inside the guest. Mirage forwards commands, stdin, environment, and cwd
  * without managing the sandbox's lifecycle.
  */
-export declare class MicrosandboxRuntime extends RemoteSandbox<MicrosandboxConfig> implements ProcessExecutor<undefined> {
-    readonly [PROCESS_EXECUTOR]: true;
+export declare class MicrosandboxRuntime extends RemoteSandbox<MicrosandboxConfig> implements PipeTransport {
+    readonly [PIPE_TRANSPORT]: true;
     readonly name = "microsandbox";
     constructor(options?: RuntimeOptions<MicrosandboxConfig> | Record<string, unknown>);
     /** Skip the connect-once latch: every exec probes the guest. */
     protected ensureConnected(signal?: AbortSignal): Promise<void>;
-    protected microsandbox(args: string[], stdin?: Uint8Array | null, signal?: AbortSignal): Promise<CliResult>;
+    protected microsandbox(args: string[], stdin?: ByteSource | null, output?: OutputFn | null, signal?: AbortSignal, errors?: OutputFn | null): Promise<RunResult>;
     /** Require a running sandbox before executing any commands. */
     connect(signal?: AbortSignal): Promise<void>;
     private inspect;
-    protected execArgv(argv: readonly string[], stdin: Uint8Array | null, env: Record<string, string>, cwd: string, signal?: AbortSignal): Promise<RunResult>;
+    protected execArgv(argv: readonly string[], stdin: ByteSource | null, env: Record<string, string>, cwd: string, output: OutputFn | null, errors: OutputFn | null, signal?: AbortSignal): Promise<RunResult>;
     openPipe(command: string): Promise<SandboxPipe>;
     private head;
 }

package/dist/runtime/sandbox/microsandbox/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/runtime.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,gBAAgB,EAAE,KAAK,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAG3E,OAAO,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAA;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAO/E,OAAO,EAAE,KAAK,SAAS,EAAiC,MAAM,WAAW,CAAA;AAEzE;;;;;GAKG;AACH,qBAAa,mBACX,SAAQ,aAAa,CAAC,kBAAkB,CACxC,YAAW,eAAe,CAAC,SAAS,CAAC;IAErC,QAAQ,CAAC,CAAC,gBAAgB,CAAC,EAAG,IAAI,CAAS;IAC3C,QAAQ,CAAC,IAAI,kBAAiB;gBAElB,OAAO,GAAE,cAAc,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;IAKtF,gEAAgE;cAC7C,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvE,SAAS,CAAC,YAAY,CACpB,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC;IAIrB,+DAA+D;IACzD,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YAiBpC,OAAO;cAsBI,QAAQ,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC;IAUN,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQ9D,OAAO,CAAC,IAAI;CAGb"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/runtime.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAE,KAAK,aAAa,EAAE,MAAM,8CAA8C,CAAA;AAGjG,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAA;AAC5F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAK/E;;;;;GAKG;AACH,qBAAa,mBACX,SAAQ,aAAa,CAAC,kBAAkB,CACxC,YAAW,aAAa;IAExB,QAAQ,CAAC,CAAC,cAAc,CAAC,EAAG,IAAI,CAAS;IACzC,QAAQ,CAAC,IAAI,kBAAiB;gBAElB,OAAO,GAAE,cAAc,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;IAKtF,gEAAgE;cAC7C,eAAe,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvE,SAAS,CAAC,YAAY,CACpB,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,GAAE,UAAU,GAAG,IAAW,EAC/B,MAAM,GAAE,QAAQ,GAAG,IAAW,EAC9B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,GAAE,QAAQ,GAAG,IAAW,GAC7B,OAAO,CAAC,SAAS,CAAC;IAQrB,+DAA+D;IACzD,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;YAiBpC,OAAO;cAaI,QAAQ,CAC/B,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,MAAM,EAAE,QAAQ,GAAG,IAAI,EACvB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC;IASf,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAQrD,OAAO,CAAC,IAAI;CAGb"}

package/dist/runtime/sandbox/microsandbox/runtime.js

@@ -11,21 +11,22 @@
 // See the License for the specific language governing permissions and
 // limitations under the License.
 // ========= Copyright 2026 @ Strukto.AI All Rights Reserved. =========
-import { PROCESS_EXECUTOR } from '@struktoai/mirage-core/runtime/mixin';
 import { RemoteSandbox } from '@struktoai/mirage-core/runtime/sandbox/base';
+import { PIPE_TRANSPORT } from '@struktoai/mirage-core/runtime/sandbox/mixin';
 import { requireId } from '@struktoai/mirage-core/runtime/sandbox/config';
 import { registerRuntime } from '@struktoai/mirage-core/runtime/table';
 import { MICROSANDBOX_CONFIG_KEYS } from "./config.js";
-import { RUNNING_STATE, MICROSANDBOX_CLI_HINT, INSPECT_TIMEOUT_SECONDS, notRunningHint, } from "./constants.js";
-import { execArgs, openCliPipe, runCli } from "../cli.js";
+import { notRunningHint } from '@struktoai/mirage-core/runtime/sandbox/constants';
+import { RUNNING_STATE, MICROSANDBOX_HINT, INSPECT_TIMEOUT_SECONDS } from "./constants.js";
+import { execArgs, openProgramPipe, reportedState, runProgram } from "../program.js";
 /**
- * Run programs in an existing Microsandbox guest through the msb CLI.
+ * Run programs in an existing Microsandbox guest through `msb`.
  * The user starts the sandbox and serves its workspace at the same paths
  * inside the guest. Mirage forwards commands, stdin, environment, and cwd
  * without managing the sandbox's lifecycle.
  */
 export class MicrosandboxRuntime extends RemoteSandbox {
-    [PROCESS_EXECUTOR] = true;
+    [PIPE_TRANSPORT] = true;
     name = 'microsandbox';
     constructor(options = {}) {
         super(options, MICROSANDBOX_CONFIG_KEYS);
@@ -36,9 +37,13 @@ export class MicrosandboxRuntime extends RemoteSandbox {
         signal?.throwIfAborted();
         return Promise.resolve();
     }
-    // One msb CLI invocation.
-    microsandbox(args, stdin = null, signal) {
-        return runCli('msb', MICROSANDBOX_CLI_HINT, args, stdin, signal !== undefined ? { signal } : {});
+    // Run `msb` once.
+    microsandbox(args, stdin = null, output = null, signal, errors = null) {
+        return runProgram('msb', MICROSANDBOX_HINT, args, stdin, {
+            ...(signal !== undefined ? { signal } : {}),
+            ...(output !== null ? { output } : {}),
+            ...(errors !== null ? { errors } : {}),
+        });
     }
     /** Require a running sandbox before executing any commands. */
     async connect(signal) {
@@ -56,44 +61,27 @@ export class MicrosandboxRuntime extends RemoteSandbox {
         }
     }
     async inspect(signal) {
-        const args = ['status', this.config.sandbox, '--format', 'json'];
-        const result = await this.microsandbox(args, null, signal);
-        if (result.code !== 0) {
-            const detail = DECODER.decode(result.stderr).trim();
-            throw new Error(`msb status failed: ${detail}`);
-        }
-        let status;
-        try {
-            status = JSON.parse(DECODER.decode(result.stdout));
-        }
-        catch (error) {
-            throw new Error(`msb status returned unreadable json: ${String(error)}`);
-        }
-        if (status === null || typeof status !== 'object' || Array.isArray(status)) {
-            throw new Error('msb status returned an invalid status object');
-        }
-        const state = status.status;
-        if (state !== RUNNING_STATE) {
-            throw new Error(notRunningHint(this.config.sandbox, String(state)));
-        }
+        const sandbox = this.config.sandbox;
+        const status = await this.microsandbox(['status', sandbox, '--format', 'json'], null, null, signal);
+        const state = reportedState(status, 'msb status', ['status']);
+        if (state !== RUNNING_STATE)
+            throw new Error(notRunningHint('sandbox', sandbox, state, {}, 'start it with msb start'));
     }
-    async execArgv(argv, stdin, env, cwd, signal) {
+    async execArgv(argv, stdin, env, cwd, output, errors, signal) {
         // Released msb can still auto-start a guest stopped after this probe.
         signal?.throwIfAborted();
         await this.connect(signal);
         signal?.throwIfAborted();
         const args = execArgs(this.head(), ['--'], env, cwd, argv);
-        const result = await this.microsandbox(args, stdin, signal);
-        return { stdout: result.stdout, stderr: result.stderr, exitCode: result.code };
+        return this.microsandbox(args, stdin, output, signal, errors);
     }
     async openPipe(command) {
         await this.connect();
-        return openCliPipe('msb', execArgs([...this.head(), '--stream'], ['--'], {}, null, ['sh', '-c', command]));
+        return openProgramPipe('msb', execArgs([...this.head(), '--stream'], ['--'], {}, null, ['/bin/sh', '-c', command]));
     }
     head() {
-        return ['exec', this.config.sandbox, '--quiet', '--no-tty'];
+        return ['exec', this.config.sandbox, '--quiet'];
     }
 }
-const DECODER = new TextDecoder();
 registerRuntime('microsandbox', MicrosandboxRuntime);
 //# sourceMappingURL=runtime.js.map

package/dist/runtime/sandbox/microsandbox/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/runtime.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAEvE,OAAO,EAAE,gBAAgB,EAAwB,MAAM,sCAAsC,CAAA;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAGtE,OAAO,EAAE,wBAAwB,EAA2B,MAAM,aAAa,CAAA;AAC/E,OAAO,EACL,aAAa,EACb,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,GACf,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAkB,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,WAAW,CAAA;AAEzE;;;;;GAKG;AACH,MAAM,OAAO,mBACX,SAAQ,aAAiC;IAGhC,CAAC,gBAAgB,CAAC,GAAG,IAAa,CAAA;IAClC,IAAI,GAAG,cAAc,CAAA;IAE9B,YAAY,UAAwE,EAAE;QACpF,KAAK,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAA;QACxC,SAAS,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC;IAED,gEAAgE;IAC7C,eAAe,CAAC,MAAoB;QACrD,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAC1B,CAAC;IAED,0BAA0B;IAChB,YAAY,CACpB,IAAc,EACd,QAA2B,IAAI,EAC/B,MAAoB;QAEpB,OAAO,MAAM,CAAC,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAClG,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAA;QACpE,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,IAAI,QAAQ,CAAC,OAAO;gBAClB,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,uBAAuB,CAAC,UAAU,EACnF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;YACH,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAmB;QACvC,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAA;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;QAC1D,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YACnD,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,EAAE,CAAC,CAAA;QACjD,CAAC;QACD,IAAI,MAAe,CAAA;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACjE,CAAC;QACD,MAAM,KAAK,GAAI,MAA+B,CAAC,MAAM,CAAA;QACrD,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAC/B,IAAuB,EACvB,KAAwB,EACxB,GAA2B,EAC3B,GAAW,EACX,MAAoB;QAEpB,sEAAsE;QACtE,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAC1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;QAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,CAAA;IAChF,CAAC;IAEQ,KAAK,CAAC,QAAQ,CAAC,OAAe;QACrC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,OAAO,WAAW,CAChB,KAAK,EACL,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAChF,CAAA;IACH,CAAC;IAEO,IAAI;QACV,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,CAAA;IAC7D,CAAC;CACF;AAED,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC,eAAe,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../../../src/runtime/sandbox/microsandbox/runtime.ts"],"names":[],"mappings":"AAAA,uEAAuE;AACvE,kEAAkE;AAClE,mEAAmE;AACnE,0CAA0C;AAC1C,EAAE;AACF,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,oEAAoE;AACpE,2EAA2E;AAC3E,sEAAsE;AACtE,iCAAiC;AACjC,uEAAuE;AAGvE,OAAO,EAAE,aAAa,EAAE,MAAM,6CAA6C,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAsB,MAAM,8CAA8C,CAAA;AACjG,OAAO,EAAE,SAAS,EAAE,MAAM,+CAA+C,CAAA;AACzE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAA;AAGtE,OAAO,EAAE,wBAAwB,EAA2B,MAAM,aAAa,CAAA;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,kDAAkD,CAAA;AACjF,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAA;AAC1F,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAEpF;;;;;GAKG;AACH,MAAM,OAAO,mBACX,SAAQ,aAAiC;IAGhC,CAAC,cAAc,CAAC,GAAG,IAAa,CAAA;IAChC,IAAI,GAAG,cAAc,CAAA;IAE9B,YAAY,UAAwE,EAAE;QACpF,KAAK,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAA;QACxC,SAAS,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC;IAED,gEAAgE;IAC7C,eAAe,CAAC,MAAoB;QACrD,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IAC1B,CAAC;IAED,kBAAkB;IACR,YAAY,CACpB,IAAc,EACd,QAA2B,IAAI,EAC/B,SAA0B,IAAI,EAC9B,MAAoB,EACpB,SAA0B,IAAI;QAE9B,OAAO,UAAU,CAAC,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,KAAK,EAAE;YACvD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC,CAAA;IACJ,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,OAAO,CAAC,MAAoB;QAChC,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAA;QACpE,MAAM,WAAW,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAA;QACzF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,IAAI,QAAQ,CAAC,OAAO;gBAClB,MAAM,IAAI,KAAK,CACb,0CAA0C,MAAM,CAAC,uBAAuB,CAAC,UAAU,EACnF,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;YACH,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAmB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAA;QACnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CACpC,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EACvC,IAAI,EACJ,IAAI,EACJ,MAAM,CACP,CAAA;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC7D,IAAI,KAAK,KAAK,aAAa;YACzB,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAA;IAC7F,CAAC;IAEkB,KAAK,CAAC,QAAQ,CAC/B,IAAuB,EACvB,KAAwB,EACxB,GAA2B,EAC3B,GAAW,EACX,MAAuB,EACvB,MAAuB,EACvB,MAAoB;QAEpB,sEAAsE;QACtE,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC1B,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAC1D,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC5B,MAAM,IAAI,CAAC,OAAO,EAAE,CAAA;QACpB,OAAO,eAAe,CACpB,KAAK,EACL,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CACrF,CAAA;IACH,CAAC;IAEO,IAAI;QACV,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;IACjD,CAAC;CACF;AAED,eAAe,CAAC,cAAc,EAAE,mBAAmB,CAAC,CAAA"}

package/dist/runtime/sandbox/program.d.ts

@@ -0,0 +1,165 @@
+import { type ChildProcess } from 'node:child_process';
+import type { OutputFn, RunResult, SandboxPipe } from '@struktoai/mirage-core/runtime/types';
+import type { ByteSource } from '@struktoai/mirage-core/io/types';
+import type { ProcessHandle } from '@struktoai/mirage-core/process/handle';
+import type { JsonValue } from '@struktoai/mirage-core/types';
+/**
+ * What a process on this host needs to read the running workspace's system
+ * time (`faketimeEnv`). Empty when the workspace keeps the host's time, and
+ * when this host has no libfaketime, where the process runs on the host's
+ * clock. `env` is the process's environment, whose `LD_PRELOAD` libraries
+ * load after libfaketime. Mirrors Python's `system_time_env`.
+ */
+export declare function systemTimeEnv(env: Record<string, string>): Promise<Record<string, string>>;
+/**
+ * Host folders a kernel mount in this process serves. A child started in
+ * one, or from one, would wait inside its spawn on the loop that answers
+ * for the folder, the very loop spawning it, so it starts outside and
+ * EXEC_PRELUDE takes it in once the spawn has returned. Each name counts the
+ * mounts recording it, so one going down leaves another at its path. Mirrors
+ * Python's `SERVED`.
+ */
+export declare const SERVED: Map<string, number>;
+/**
+ * Record `folder` in `SERVED` under each name a child's path may give it: as
+ * given, made absolute, and with its parent's links resolved. Only the parent
+ * is read, never the mount, so recording it waits on no loop. Returns the
+ * names added, for `unserve` once the mount is gone. Mirrors Python's `serve`.
+ */
+export declare function serve(folder: string): string[];
+/**
+ * Take one mount's names out of `SERVED`; a name another mount still records
+ * stays. Mirrors Python's `unserve`.
+ */
+export declare function unserve(names: string[]): void;
+/**
+ * Where the host's own PATH finds a program, as Python's `shutil.which`
+ * does, as an absolute path: a child's environment may carry no host PATH,
+ * and a relative entry would be read against the child's directory, so the
+ * lookup cannot be left to spawn. Asynchronous, so a PATH entry on a mount
+ * this process serves never blocks the loop that answers it. An empty
+ * entry is the current directory, as for the shell. A name with a slash is
+ * taken as given, and one the PATH lacks too, so spawn reports it missing.
+ * On Windows a name without one of `PATHEXT`'s suffixes is tried with each.
+ */
+export declare function onHostPath(name: string): Promise<string>;
+/**
+ * One process run to its end: its output and its exit status. The child
+ * leads a process group of its own, and an aborted call kills the whole
+ * group and stops reading the pipes: a grandchild left alive, or one that
+ * left the group, holds the output pipes open, so 'close' would wait until
+ * it exited on its own, and the call rejects with an AbortError at once.
+ * When a `kill` stopped the runner with a signal other than KILL, the
+ * group gets that signal first (`endTree`), so the program's handlers get
+ * to run, and a `direct` child that exits on its own then leaves its status
+ * with the runner. A missing executable rejects with `hint` when one is given, else with
+ * spawn's own error. EPIPE means the command exited without draining its
+ * stdin (`head`-like), so it is not an error. An input pull still pending
+ * when the child exits is left to close on its own. One in or from a
+ * `SERVED` folder starts through `EXEC_PRELUDE`. Mirrors Python's
+ * `run_program`.
+ */
+export declare function runProgram(executable: string, hint: string | null, args: string[], stdin: ByteSource | null, options?: {
+    cwd?: string;
+    env?: Record<string, string>;
+    signal?: AbortSignal;
+    children?: Set<ChildProcess>;
+    output?: OutputFn;
+    errors?: OutputFn;
+    direct?: boolean;
+}): Promise<RunResult>;
+/**
+ * How another workspace on this host reaches a child `runProgram` started,
+ * which leads its own process group: the host, the PID, and when it
+ * started, so a PID the host reused is never taken for it. `runProgram` adds
+ * `exited_at` once the child exits while what it started may run on. Mirrors
+ * Python's `host_run`.
+ */
+export declare function hostRun(pid: number, argv: readonly string[]): Record<string, JsonValue>;
+/**
+ * Stop a host run a lapsed workspace left: its process group gets `signum`,
+ * then KILL after `STOP_GRACE_SECONDS`. Only a run of this host is reached,
+ * and only while its PID still names a process started when the run did, to
+ * the second `ps` shows, so a PID the host reused is left alone. A PID that
+ * names no process may still name the run's group, whose leader exited
+ * before the programs it started. That group is the run's while one of its
+ * members started by the last time the group was known to be: when the
+ * leader exited (`exited_at`), else when its workspace last vouched for the
+ * run (`seen_at`), with the leader still unreaped. The host gives no new
+ * process the id of a group that has members, and hands a number out again
+ * only after a full round of the others, so a group that took the id later
+ * has only members started since. One none of whose members proves it is not
+ * reached: its members may all have started since, the run's descendants, so
+ * its record stays. A group this workspace may not signal is not reached
+ * while its leader still runs
+ * (macOS answers EPERM for one that only exited unreaped). Answers true once
+ * the run is stopped or gone, false when this workspace cannot reach it.
+ * Mirrors Python's `reap_host_run`.
+ */
+export declare function reapHostRun(run: Readonly<Record<string, JsonValue>>, signum: number): Promise<boolean>;
+/**
+ * The state a sandbox's status command printed as JSON, at `path`: the keys
+ * and indexes down to it. Throws when the command failed or its JSON holds
+ * no state. Mirrors Python's `reported_state`.
+ */
+export declare function reportedState(result: RunResult, command: string, path: readonly (string | number)[]): string;
+/**
+ * A sandbox program's exec arguments, the same for every program that runs a
+ * command in a box: the program's own words (`head`: `exec -i`, smolvm's
+ * `machine exec --name M`), `/` as the working directory and each
+ * variable as `-e`, the target or `--` (`tail`: `--` where the command is
+ * a trailing var arg, so a line starting with a dash is not read as a
+ * flag), then the command.
+ *
+ * A `cwd` runs the command there through the prelude, which exits 126
+ * when the box lacks it, and defers the chdir until the shell starts, so
+ * an agent that blocks on a chdir into a passive sshfs prefix still
+ * serves the mount's pipe. Null runs it from `/` as given, for a helper
+ * pipe. Mirrors Python's `exec_args`.
+ */
+export declare function execArgs(head: readonly string[], tail: readonly string[], env: Record<string, string>, cwd: string | null, argv: readonly string[]): string[];
+/**
+ * Refuse a host program whose working directory this host lacks. The
+ * session cwd is a workspace path; running elsewhere instead would point
+ * a relative path at the wrong files. Mirrors Python's `cwd_refusal`.
+ */
+export declare function cwdRefusal(name: string, cwd: string): Promise<RunResult | null>;
+/**
+ * Signal a child and everything it started: its process group. Windows has
+ * no process group to signal, and no signal but a kill, so only the child
+ * goes there, killed. A group whose members have all exited but are not
+ * yet reaped answers EPERM on macOS where Linux answers ESRCH; either way
+ * nothing in it is left to signal. The group's signal reaches the child
+ * too, so only a KILL also goes through `child.kill`, which marks it
+ * killed: a second gentler signal would reach its handler twice. Mirrors
+ * Python's `kill_tree`.
+ *
+ * @param signum the signal, KILL (9) by default.
+ */
+export declare function killTree(child: ChildProcess, signum?: number): void;
+/**
+ * Signal a child's process group and give the group `STOP_GRACE_SECONDS`
+ * to end. The grace is the group's: a descendant still handling the signal
+ * after the child exited keeps it, unless a KILL reaches the runner first.
+ * What is left after it is the caller's to kill (`stopTree`). Mirrors
+ * Python's `end_tree`.
+ *
+ * @param signum the signal.
+ * @param runner the runner the signal stopped, whose KILL ends the grace.
+ */
+export declare function endTree(child: ChildProcess, signum: number, runner?: ProcessHandle | null): Promise<void>;
+/**
+ * Kill every child still running, so none outlives the workspace, and wait
+ * for each to close. Mirrors Python's `close_children`.
+ */
+export declare function closeChildren(children: Set<ChildProcess>): Promise<void>;
+/**
+ * Hold a byte transport to a sandbox helper until stopped. The tail of what
+ * the helper says on stderr is kept for `diagnostic`, so a mount that fails
+ * can say why. Stopping ends the helper's input; one that has not closed
+ * 100 ms later loses its process group and our ends of its pipes, which
+ * output nobody read would otherwise hold open, exited or not. Mirrors
+ * Python's `open_program_pipe`.
+ */
+export declare function openProgramPipe(executable: string, args: string[]): Promise<SandboxPipe>;
+//# sourceMappingURL=program.d.ts.map

package/dist/runtime/sandbox/program.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../../src/runtime/sandbox/program.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,KAAK,YAAY,EAAmB,MAAM,oBAAoB,CAAA;AAQvE,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,sCAAsC,CAAA;AAa5F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAA;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAA;AAI1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAK7D;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQhG;AAoBD;;;;;;;GAOG;AACH,eAAO,MAAM,MAAM,qBAA4B,CAAA;AAE/C;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAU9C;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAM7C;AAUD;;;;;;;;;GASG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4B9D;AA2ED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,GAAG,IAAI,EACnB,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,EAAE,UAAU,GAAG,IAAI,EACxB,OAAO,GAAE;IAEP,GAAG,CAAC,EAAE,MAAM,CAAA;IAEZ,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAE5B,MAAM,CAAC,EAAE,WAAW,CAAA;IAEpB,QAAQ,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,CAAA;IAC5B,MAAM,CAAC,EAAE,QAAQ,CAAA;IAEjB,MAAM,CAAC,EAAE,QAAQ,CAAA;IAIjB,MAAM,CAAC,EAAE,OAAO,CAAA;CACZ,GACL,OAAO,CAAC,SAAS,CAAC,CAqHpB;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAEvF;AA8DD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,EACxC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAmDlB;AA4BD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,GACjC,MAAM,CAiBR;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,QAAQ,CACtB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,EAClB,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,MAAM,EAAE,CAMV;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAYrF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,SAAI,GAAG,IAAI,CAa9D;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,aAAa,GAAG,IAAI,GAC5B,OAAO,CAAC,IAAI,CAAC,CAkBf;AAaD;;;GAGG;AACH,wBAAsB,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAY9E;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAsCxF"}