@te-river/opencode-team-mode 1.7.1 → 1.7.3

package/dist/tm/ptc/contract.js

@@ -1,85 +0,0 @@
-/**
- * tm_ptc_run — public contract types + the frozen engine seam.
- *
- * Design: .git/opencode-team/.../ptc-run/02-architect-ptc-run-design.md §2/§3.
- * Everything in this module is CONTRACT — frozen since M1 so M2's engines and
- * M3's registration could land without touching the driver or the tool.
- * (Split out of the former monolithic ptc.ts; behavior unchanged.)
- *
- * Governance is REUSED, never forked (D6 lock): the bridge calls the exact
- * four exported pipelines, so threshold offload, P2/P3, R6 and handle/TTL
- * semantics apply to every bridged call verbatim.  PTC is NOT a bypass layer.
- */
-import { shorten } from "../config.js";
-// ---------- statuses + bridge surface (design §2) ---------------------------
-/** The six PTC run statuses (design §2; "program-error" added in the fix
- *  batch to separate PROGRAM faults — the body threw, engine healthy, no
- *  auto-degrade — from ENGINE faults). */
-export const PTC_STATUS_VALUES = [
-    "ok",
-    "stopped-error-budget",
-    "stopped-call-budget",
-    "timeout",
-    "engine-error",
-    "program-error",
-];
-/**
- * Bridge allow set — read-only; tm_ptc_run itself is excluded (no nesting).
- * T6 added the two WEB bridges (tm_search / tm_webfetch): they are gated a
- * second time at the bridge layer (TM_PTC_WEB_BRIDGE=off → the bridge returns
- * an args error) and a THIRD time by the host ruleset — a bridged call runs
- * the real tm_search/tm_webfetch execute with the CALLER's per-execute ctx, so
- * ctx.ask evaluates against that agent's grant and a non-web role is denied
- * with a permission error (zero new mechanism).
- */
-export const BRIDGE_ALLOW = [
-    "tm_read",
-    "tm_grep",
-    "tm_bash",
-    "tm_fetch",
-    "tm_search",
-    "tm_webfetch",
-];
-/** The web bridge tools — the subset gated behind TM_PTC_WEB_BRIDGE + role. */
-export const WEB_BRIDGE_TOOLS = ["tm_search", "tm_webfetch"];
-/** Phases safe to retry once (idempotent read-only bridges; design §4.2). */
-// T6: tm_search / tm_webfetch issue GETs — idempotent — so their transient
-// failures (client/execute/store phases) inherit the SAME one-retry policy;
-// a permission/args error is never retried (the role denial must stand).
-export const RETRYABLE_PHASES = ["client", "execute", "store"];
-/**
- * The stop signal unwinding a program on a budget/time hit.  Thrown by the
- * StepGate (call/error budget, pre-call deadline) and rejected through the
- * engines' abort promises (wall-clock timeout); caught by the driver, which
- * maps it to a status.  Never escapes as an engine-error.
- */
-export class PtcStopSignal extends Error {
-    reason;
-    constructor(reason) {
-        super(`ptc-stop:${reason}`);
-        this.reason = reason;
-        this.name = "PtcStopSignal";
-    }
-}
-/**
- * A PROGRAM fault — the program body itself threw (the worker bootstrap
- * posts kind:"program"; the inline-vm engine tags promise rejections).
- * Distinct from an engine fault: the engine is healthy, so the driver maps
- * it to status "program-error" and NEVER auto-degrades (re-running the same
- * program would just throw again).
- */
-export class PtcProgramError extends Error {
-    constructor(message, stack) {
-        super(message);
-        this.name = "PtcProgramError";
-        if (typeof stack === "string" && stack)
-            this.stack = stack;
-    }
-}
-/** Short display code for a ref: the `steps/<id>` step segment.  Shared by
- *  the gate (success table) and the summary renderer (error refs). */
-export function shortRefCode(ref) {
-    const m = /\/steps\/([^/]+)\/result/.exec(ref);
-    return m ? m[1] : shorten(ref, 24);
-}
-//# sourceMappingURL=contract.js.map

package/dist/tm/ptc/contract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/tm/ptc/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAGtC,+EAA+E;AAE/E;;0CAE0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI;IACJ,sBAAsB;IACtB,qBAAqB;IACrB,SAAS;IACT,cAAc;IACd,eAAe;CACP,CAAA;AAWV;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU;IACV,WAAW;IACX,aAAa;CACd,CAAA;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAA0B,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;AAEnF,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAuB,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;AA0FlF;;;;;GAKG;AACH,MAAM,OAAO,aAAc,SAAQ,KAAK;IACjB;IAArB,YAAqB,MAAkD;QACrE,KAAK,CAAC,YAAY,MAAM,EAAE,CAAC,CAAA;QADR,WAAM,GAAN,MAAM,CAA4C;QAErE,IAAI,CAAC,IAAI,GAAG,eAAe,CAAA;IAC7B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe,EAAE,KAAc;QACzC,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAA;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IAC5D,CAAC;CACF;AAED;sEACsE;AACtE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,CAAC,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9C,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACpC,CAAC"}

package/dist/tm/ptc/driver.d.ts

@@ -1,40 +0,0 @@
-/**
- * tm_ptc_run — the run driver: engine selection (auto / worker / inline),
- * the static pre-scan handoff, wall-clock timeout, status mapping, and the
- * trajectory parent events.  Split out of the former monolithic ptc.ts;
- * behavior unchanged.
- */
-import type { TmConfig } from "../config.js";
-import type { RunStore } from "../store.js";
-import type { PtcBridge, PtcEngine, PtcRunOutcome } from "./contract.js";
-import type { PtcBudgets } from "./budgets.js";
-export interface EngineSelection {
-    engine: PtcEngine;
-    /** true when the auto chain degraded from worker to inline. */
-    degraded: boolean;
-}
-/**
- * Select the PTC engine based on the TM_PTC_ENGINE mode.
- *  - "worker": WorkerEngine only (throws on failure → engine-error status).
- *  - "inline": InlineVmEngine only (script timeout for pre-await busy-loops).
- *  - "auto" (default): worker-first — the REAL auto-degrade happens in
- *    runPtc, which re-runs the whole program on InlineVmEngine ONLY when a
- *    worker run returns engine-error having made ZERO bridged calls (the
- *    worker could not start).  A worker that started and then crashed is
- *    reported program-error / engine-error-with-calls and is NEVER replayed
- *    on the inline realm (C1: never re-run a started program).
- */
-export declare function selectEngine(mode: "auto" | "worker" | "inline", bridge: PtcBridge): EngineSelection;
-export interface RunPtcOptions {
-    program: string;
-    label: string;
-    budgets: PtcBudgets;
-    parentStepId: string;
-    cfg: TmConfig;
-    store?: RunStore;
-    bridge: PtcBridge;
-    engine?: PtcEngine;
-    now?: () => number;
-}
-export declare function runPtc(o: RunPtcOptions): Promise<PtcRunOutcome>;
-//# sourceMappingURL=driver.d.ts.map

package/dist/tm/ptc/driver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"driver.d.ts","sourceRoot":"","sources":["../../../src/tm/ptc/driver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC5C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAa,MAAM,eAAe,CAAA;AAMnF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAI9C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,SAAS,CAAA;IACjB,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,GAAG,eAAe,CAQnG;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,UAAU,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,GAAG,EAAE,QAAQ,CAAA;IACb,KAAK,CAAC,EAAE,QAAQ,CAAA;IAChB,MAAM,EAAE,SAAS,CAAA;IACjB,MAAM,CAAC,EAAE,SAAS,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,wBAAsB,MAAM,CAAC,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAoKrE"}

package/dist/tm/ptc/driver.js

@@ -1,213 +0,0 @@
-/**
- * tm_ptc_run — the run driver: engine selection (auto / worker / inline),
- * the static pre-scan handoff, wall-clock timeout, status mapping, and the
- * trajectory parent events.  Split out of the former monolithic ptc.ts;
- * behavior unchanged.
- */
-import * as crypto from "node:crypto";
-import { PtcProgramError, PtcStopSignal } from "./contract.js";
-import { createGateBridge } from "./gate.js";
-import { InlineVmEngine, WorkerEngine } from "./engines.js";
-import { staticPscan } from "./pscan.js";
-/**
- * Select the PTC engine based on the TM_PTC_ENGINE mode.
- *  - "worker": WorkerEngine only (throws on failure → engine-error status).
- *  - "inline": InlineVmEngine only (script timeout for pre-await busy-loops).
- *  - "auto" (default): worker-first — the REAL auto-degrade happens in
- *    runPtc, which re-runs the whole program on InlineVmEngine ONLY when a
- *    worker run returns engine-error having made ZERO bridged calls (the
- *    worker could not start).  A worker that started and then crashed is
- *    reported program-error / engine-error-with-calls and is NEVER replayed
- *    on the inline realm (C1: never re-run a started program).
- */
-export function selectEngine(mode, bridge) {
-    void bridge;
-    if (mode === "inline") {
-        return { engine: new InlineVmEngine(), degraded: false };
-    }
-    // auto and worker both start on the worker engine (construction never
-    // throws — no spawn until run()).
-    return { engine: new WorkerEngine(), degraded: false };
-}
-export async function runPtc(o) {
-    const now = o.now ?? Date.now;
-    const start = now();
-    const deadlineAt = start + o.budgets.timeoutMs;
-    // engine selection — explicit override or auto/worker/inline from config.
-    let engine;
-    let degraded = false;
-    if (o.engine) {
-        engine = o.engine;
-    }
-    else {
-        const sel = selectEngine(o.cfg.ptcEngine, o.bridge);
-        engine = sel.engine;
-        degraded = sel.degraded;
-    }
-    // static pre-scan — reject programs with banned tokens before any
-    // engine runs.  Shape: engine-error with the pscan tokens listed.
-    // (Design §3: "辅助手段，声明不作安全边界".)
-    const pscan = staticPscan(o.program);
-    if (pscan.rejected) {
-        return {
-            label: o.label,
-            status: "engine-error",
-            steps: [],
-            okCount: 0,
-            errCount: 0,
-            retries: 0,
-            calls: 0,
-            ms: 0,
-            engine: engine.name,
-            degraded,
-            returnValue: undefined,
-            returned: false,
-            engineError: {
-                tool: "tm_ptc_run",
-                phase: "args",
-                message: `程序包含禁止标识符（${pscan.tokens.join(", ")}），已拒绝执行。`,
-            },
-            budgets: o.budgets,
-            parentStepId: o.parentStepId,
-        };
-    }
-    // Auto-degrade: if the selected engine reports an ENGINE fault (not a
-    // budget stop, not a program fault), and we're in auto mode, retry with
-    // InlineVmEngine.  A program fault is tagged PtcProgramError by the
-    // engines and mapped to "program-error" below — it never re-runs (the
-    // same program would just throw again).
-    const tryRun = async (eng, parentId = o.parentStepId) => {
-        const state = { calls: 0, errors: 0, retries: 0, steps: [] };
-        const gate = createGateBridge(o.bridge, parentId, o.budgets, state, {
-            now,
-            deadlineAt,
-            store: o.store,
-        });
-        // parent call event (design §6)
-        o.store?.appendTrajectory({
-            tool: "tm_ptc_run",
-            step_id: parentId,
-            event: "call",
-            label: o.label,
-            program_sha256: crypto.createHash("sha256").update(o.program).digest("hex"),
-            budgets: o.budgets,
-        });
-        const ac = new AbortController();
-        const remaining = Math.max(0, deadlineAt - now());
-        const timer = setTimeout(() => ac.abort(), remaining);
-        let status;
-        let returnValue;
-        let returned = false;
-        let engineError;
-        try {
-            returnValue = await eng.run(o.program, gate, ac.signal, {
-                startDeadlineMs: deadlineAt,
-                timeoutMs: o.budgets.timeoutMs,
-            });
-            returned = true;
-            status = state.stopReason ? mapStop(state.stopReason) : "ok";
-        }
-        catch (err) {
-            if (err instanceof PtcStopSignal) {
-                status = mapStop(err.reason);
-            }
-            else if (err instanceof PtcProgramError) {
-                // T5: the PROGRAM threw — distinct status, NO auto-degrade re-run.
-                status = "program-error";
-                const line = extractLine(err);
-                engineError = {
-                    tool: "tm_ptc_run",
-                    phase: "execute",
-                    message: err.message,
-                    ...(line != null ? { line } : {}),
-                };
-            }
-            else {
-                status = "engine-error";
-                const line = extractLine(err);
-                engineError = {
-                    tool: "tm_ptc_run",
-                    phase: "execute",
-                    message: err instanceof Error ? err.message : String(err ?? "engine error"),
-                    ...(line != null ? { line } : {}),
-                };
-            }
-        }
-        finally {
-            clearTimeout(timer);
-        }
-        const ms = now() - start;
-        const outcome = {
-            label: o.label,
-            status,
-            steps: state.steps,
-            okCount: state.steps.filter((s) => s.ok).length,
-            errCount: state.steps.filter((s) => !s.ok).length,
-            retries: state.retries,
-            calls: state.calls,
-            ms,
-            engine: eng.name,
-            degraded,
-            returnValue,
-            returned,
-            ...(engineError ? { engineError } : {}),
-            budgets: o.budgets,
-            parentStepId: parentId,
-        };
-        o.store?.appendTrajectory({
-            tool: "tm_ptc_run",
-            step_id: parentId,
-            event: "finish",
-            status: outcome.status,
-            calls: outcome.calls,
-            errors: outcome.errCount,
-            retries: outcome.retries,
-            ms: outcome.ms,
-        });
-        return outcome;
-    };
-    // Auto mode: try worker first.  C1 (never replay a started program): degrade
-    // to the inline-vm engine ONLY when the worker could not START at all — an
-    // ENGINE fault with ZERO bridged calls dispatched (the program never ran).
-    // A worker that started and THEN crashed surfaces as `program-error` (the
-    // engines tag any post-online crash a program fault) or as an `engine-error`
-    // with calls > 0; in BOTH such cases we return as-is and do NOT re-run the
-    // program on the more-privileged inline/ESM realm — re-running a program
-    // that already executed is exactly the sandbox-escape amplification the
-    // reviewer's PoC turned on.  An INJECTED engine participates too (tests
-    // inject crashers); the fallback is always the real InlineVmEngine.
-    if (o.cfg.ptcEngine === "auto" && engine.name === "worker") {
-        const result = await tryRun(engine);
-        if (result.status === "engine-error" && result.calls === 0) {
-            // Degrade to inline-vm and re-run.
-            const inlineEngine = new InlineVmEngine();
-            const fallback = await tryRun(inlineEngine, `${o.parentStepId}.r2`);
-            fallback.degraded = true;
-            fallback.engine = "inline";
-            fallback.parentStepId = o.parentStepId;
-            return fallback;
-        }
-        return result;
-    }
-    return tryRun(engine);
-}
-function mapStop(reason) {
-    if (reason === "timeout")
-        return "timeout";
-    if (reason === "error-budget")
-        return "stopped-error-budget";
-    return "stopped-call-budget";
-}
-/** Best-effort line extraction from a program-side thrown error stack. */
-function extractLine(err) {
-    const s = err instanceof Error ? err.stack ?? "" : String(err ?? "");
-    const m = /:(\d+):/.exec(s);
-    if (m) {
-        const n = Number(m[1]);
-        if (Number.isFinite(n))
-            return n;
-    }
-    const m2 = /line[:#]?\s*(\d+)/i.exec(s);
-    return m2 ? Number(m2[1]) : undefined;
-}
-//# sourceMappingURL=driver.js.map

package/dist/tm/ptc/driver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"driver.js","sourceRoot":"","sources":["../../../src/tm/ptc/driver.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAA;AAIrC,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAE9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAWxC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,IAAkC,EAAE,MAAiB;IAChF,KAAK,MAAM,CAAA;IACX,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,IAAI,cAAc,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IAC1D,CAAC;IACD,sEAAsE;IACtE,kCAAkC;IAClC,OAAO,EAAE,MAAM,EAAE,IAAI,YAAY,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AACxD,CAAC;AAcD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,CAAgB;IAC3C,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAC7B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAA;IACnB,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,SAAS,CAAA;IAC9C,0EAA0E;IAC1E,IAAI,MAAiB,CAAA;IACrB,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,GAAG,CAAC,CAAC,MAAM,CAAA;IACnB,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAA;QACnD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAA;QACnB,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAA;IACzB,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,gCAAgC;IAChC,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACpC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,OAAO;YACL,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM,EAAE,cAAc;YACtB,KAAK,EAAE,EAAE;YACT,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;YACV,KAAK,EAAE,CAAC;YACR,EAAE,EAAE,CAAC;YACL,MAAM,EAAE,MAAM,CAAC,IAAI;YACnB,QAAQ;YACR,WAAW,EAAE,SAAS;YACtB,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE;gBACX,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,aAAa,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU;aACxD;YACD,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,CAAC,CAAC,YAAY;SAC7B,CAAA;IACH,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtE,wCAAwC;IACxC,MAAM,MAAM,GAAG,KAAK,EAAE,GAAc,EAAE,WAAmB,CAAC,CAAC,YAAY,EAA0B,EAAE;QACjG,MAAM,KAAK,GAAc,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAA;QACvE,MAAM,IAAI,GAAG,gBAAgB,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE;YAClE,GAAG;YACH,UAAU;YACV,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,CAAC,CAAA;QAEF,gCAAgC;QAChC,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACxB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,MAAM;YACb,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,cAAc,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC3E,OAAO,EAAE,CAAC,CAAC,OAAO;SACnB,CAAC,CAAA;QAEF,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAA;QAChC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,EAAE,CAAC,CAAA;QACjD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAErD,IAAI,MAAiB,CAAA;QACrB,IAAI,WAAoB,CAAA;QACxB,IAAI,QAAQ,GAAG,KAAK,CAAA;QACpB,IAAI,WAAyC,CAAA;QAC7C,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE;gBACtD,eAAe,EAAE,UAAU;gBAC3B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;aAC/B,CAAC,CAAA;YACF,QAAQ,GAAG,IAAI,CAAA;YACf,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAC9D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC9B,CAAC;iBAAM,IAAI,GAAG,YAAY,eAAe,EAAE,CAAC;gBAC1C,mEAAmE;gBACnE,MAAM,GAAG,eAAe,CAAA;gBACxB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;gBAC7B,WAAW,GAAG;oBACZ,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClC,CAAA;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,cAAc,CAAA;gBACvB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;gBAC7B,WAAW,GAAG;oBACZ,IAAI,EAAE,YAAY;oBAClB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,cAAc,CAAC;oBAC3E,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClC,CAAA;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;QAED,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,CAAA;QACxB,MAAM,OAAO,GAAkB;YAC7B,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,MAAM;YACN,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM;YAC/C,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM;YACjD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,EAAE;YACF,MAAM,EAAE,GAAG,CAAC,IAAI;YAChB,QAAQ;YACR,WAAW;YACX,QAAQ;YACR,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,YAAY,EAAE,QAAQ;SACvB,CAAA;QACD,CAAC,CAAC,KAAK,EAAE,gBAAgB,CAAC;YACxB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,QAAQ;YACjB,KAAK,EAAE,QAAQ;YACf,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,QAAQ;YACxB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,EAAE,EAAE,OAAO,CAAC,EAAE;SACf,CAAC,CAAA;QACF,OAAO,OAAO,CAAA;IAChB,CAAC,CAAA;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,2EAA2E;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,wEAAwE;IACxE,oEAAoE;IACpE,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAA;QACnC,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YAC3D,mCAAmC;YACnC,MAAM,YAAY,GAAG,IAAI,cAAc,EAAE,CAAA;YACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,YAAY,KAAK,CAAC,CAAA;YACnE,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAAA;YACxB,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAA;YAC1B,QAAQ,CAAC,YAAY,GAAG,CAAC,CAAC,YAAY,CAAA;YACtC,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAA;AACvB,CAAC;AAED,SAAS,OAAO,CAAC,MAAkD;IACjE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC1C,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,sBAAsB,CAAA;IAC5D,OAAO,qBAAqB,CAAA;AAC9B,CAAC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,GAAY;IAC/B,MAAM,CAAC,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IACpE,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IAC3B,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACtB,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAA;IAClC,CAAC;IACD,MAAM,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACvC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACvC,CAAC"}

package/dist/tm/ptc/engines.d.ts

@@ -1,43 +0,0 @@
-/**
- * tm_ptc_run — the three engines behind the frozen `PtcEngine` seam.
- * Split out of the former monolithic ptc.ts; behavior unchanged.
- *
- * M1 legacy: InlineSequentialEngine (test-only — runs on the MAIN thread,
- * no sandbox, no timeout; a post-await busy loop blocks the host event loop
- * irrecoverably).
- * M2 primary: WorkerEngine (worker_threads + MessagePort RPC, env:{},
- * resourceLimits, hard `terminate()` wall-clock kill; bootstrap as a
- * build-time string; the program body runs inside a node:vm sandbox —
- * whitelist { tm, console, setTimeout, clearTimeout }, no node globals —
- * with the run's timeoutMs as the in-engine script timeout).
- * M2 fallback: InlineVmEngine (node:vm runInContext — the script timeout
- * kills PRE-await synchronous busy-loops; a POST-await busy loop blocks the
- * host event loop irrecoverably, documented — prefer worker/auto).
- *
- * C1 fix batch: BOTH vm engines now build their `tm` facade IN-CONTEXT via
- * `vm.compileFunction` (parsingContext) and compile the context with
- * `codeGeneration:{strings:false,wasm:false}`, so an injected facade's
- * `.constructor` is the sandbox Function
- * and `tm.read.constructor("return process")()` / `eval` / `new Function` THROW
- * instead of escaping into the worker/plugin realm.  A started worker that
- * then crashes is reported as a program fault (never auto-replayed on the
- * more-privileged inline realm) — see engines WorkerEngine error/exit handling.
- */
-import type { PtcBridge, PtcEngine, PtcEngineName, PtcEngineRunOpts } from "./contract.js";
-export declare class InlineSequentialEngine implements PtcEngine {
-    readonly name: PtcEngineName;
-    run(program: string, bridge: PtcBridge, signal: AbortSignal): Promise<unknown>;
-}
-export declare class WorkerEngine implements PtcEngine {
-    readonly name: PtcEngineName;
-    run(program: string, bridge: PtcBridge, signal: AbortSignal, opts?: PtcEngineRunOpts): Promise<unknown>;
-}
-export declare class InlineVmEngine implements PtcEngine {
-    readonly name: PtcEngineName;
-    /** Script execution timeout in ms (kills pre-await synchronous
-     *  busy-loops).  Injectable so tests can pin the kill fast. */
-    private readonly compileTimeoutMs;
-    constructor(compileTimeoutMs?: number);
-    run(program: string, bridge: PtcBridge, signal: AbortSignal): Promise<unknown>;
-}
-//# sourceMappingURL=engines.d.ts.map

package/dist/tm/ptc/engines.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"engines.d.ts","sourceRoot":"","sources":["../../../src/tm/ptc/engines.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAGH,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,gBAAgB,EAAiC,MAAM,eAAe,CAAA;AAuHzH,qBAAa,sBAAuB,YAAW,SAAS;IACtD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAW;IACjC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAyBrF;AAID,qBAAa,YAAa,YAAW,SAAS;IAC5C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAW;IAEjC,GAAG,CACP,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,WAAW,EACnB,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,OAAO,CAAC;CAkOpB;AAID,qBAAa,cAAe,YAAW,SAAS;IAC9C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAW;IACvC;mEAC+D;IAC/D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;gBAC7B,gBAAgB,SAAS;IAI/B,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAoFrF"}