@vm0/runner 2.13.5 → 2.15.0

package/index.js

@@ -16,7 +16,8 @@ var SANDBOX_DEFAULTS = {
   max_concurrent: 1,
   vcpu: 2,
   memory_mb: 2048,
-  poll_interval_ms: 5e3
+  poll_interval_ms: 5e3,
+  guest_protocol: "vsock"
 };
 var PROXY_DEFAULTS = {
   port: 8080
@@ -35,7 +36,8 @@ var runnerConfigSchema = z.object({
     max_concurrent: z.number().int().min(1).default(SANDBOX_DEFAULTS.max_concurrent),
     vcpu: z.number().int().min(1).default(SANDBOX_DEFAULTS.vcpu),
     memory_mb: z.number().int().min(128).default(SANDBOX_DEFAULTS.memory_mb),
-    poll_interval_ms: z.number().int().min(1e3).default(SANDBOX_DEFAULTS.poll_interval_ms)
+    poll_interval_ms: z.number().int().min(1e3).default(SANDBOX_DEFAULTS.poll_interval_ms),
+    guest_protocol: z.enum(["vsock", "ssh"]).default(SANDBOX_DEFAULTS.guest_protocol)
   }).default(SANDBOX_DEFAULTS),
   firecracker: z.object({
     binary: z.string().min(1, "Firecracker binary path is required"),
@@ -62,7 +64,8 @@ var debugConfigSchema = z.object({
     max_concurrent: z.number().int().min(1).default(SANDBOX_DEFAULTS.max_concurrent),
     vcpu: z.number().int().min(1).default(SANDBOX_DEFAULTS.vcpu),
     memory_mb: z.number().int().min(128).default(SANDBOX_DEFAULTS.memory_mb),
-    poll_interval_ms: z.number().int().min(1e3).default(SANDBOX_DEFAULTS.poll_interval_ms)
+    poll_interval_ms: z.number().int().min(1e3).default(SANDBOX_DEFAULTS.poll_interval_ms),
+    guest_protocol: z.enum(["vsock", "ssh"]).default(SANDBOX_DEFAULTS.guest_protocol)
   }).default(SANDBOX_DEFAULTS),
   firecracker: z.object({
     binary: z.string().min(1, "Firecracker binary path is required"),
@@ -969,11 +972,14 @@ var FirecrackerVM = class {
   socketPath;
   vmOverlayPath;
   // Per-VM sparse overlay for writes
+  vsockPath;
+  // Vsock UDS path for host-guest communication
   constructor(config) {
     this.config = config;
     this.workDir = config.workDir || `/tmp/vm0-vm-${config.vmId}`;
     this.socketPath = path2.join(this.workDir, "firecracker.sock");
     this.vmOverlayPath = path2.join(this.workDir, "overlay.ext4");
+    this.vsockPath = path2.join(this.workDir, "vsock.sock");
   }
   /**
    * Get current VM state
@@ -999,6 +1005,12 @@ var FirecrackerVM = class {
   getSocketPath() {
     return this.socketPath;
   }
+  /**
+   * Get the vsock UDS path for host-guest communication
+   */
+  getVsockPath() {
+    return this.vsockPath;
+  }
   /**
    * Start the VM
    * This spawns Firecracker, configures it via API, and boots the VM
@@ -1124,6 +1136,12 @@ var FirecrackerVM = class {
       guest_mac: this.networkConfig.guestMac,
       host_dev_name: this.networkConfig.tapDevice
     });
+    console.log(`[VM ${this.config.vmId}] Vsock: ${this.vsockPath}`);
+    await this.client.setVsock({
+      vsock_id: "vsock0",
+      guest_cid: 3,
+      uds_path: this.vsockPath
+    });
   }
   /**
    * Stop the VM gracefully
@@ -1401,13 +1419,6 @@ var SSHClient = class {
     return this.config.host;
   }
 };
-function createVMSSHClient(guestIp, user = "root", privateKeyPath) {
-  return new SSHClient({
-    host: guestIp,
-    user,
-    privateKeyPath
-  });
-}
 function getRunnerSSHKeyPath() {
   const runnerKeyPath = "/opt/vm0-runner/ssh/id_rsa";
   if (fs4.existsSync(runnerKeyPath)) {
@@ -1420,6 +1431,326 @@ function getRunnerSSHKeyPath() {
   return "";
 }
 
+// src/lib/firecracker/vsock.ts
+import * as net from "net";
+import * as fs5 from "fs";
+import * as crypto from "crypto";
+var VSOCK_PORT = 1e3;
+var CONNECT_TIMEOUT_MS = 5e3;
+var HEADER_SIZE = 4;
+var MAX_MESSAGE_SIZE = 1024 * 1024;
+var DEFAULT_EXEC_TIMEOUT_MS = 3e5;
+function encode(msg) {
+  const json = Buffer.from(JSON.stringify(msg), "utf-8");
+  const header = Buffer.alloc(HEADER_SIZE);
+  header.writeUInt32BE(json.length, 0);
+  return Buffer.concat([header, json]);
+}
+var Decoder = class {
+  buf = Buffer.alloc(0);
+  decode(data) {
+    this.buf = Buffer.concat([this.buf, data]);
+    const messages = [];
+    while (this.buf.length >= HEADER_SIZE) {
+      const len = this.buf.readUInt32BE(0);
+      if (len > MAX_MESSAGE_SIZE) throw new Error(`Message too large: ${len}`);
+      const total = HEADER_SIZE + len;
+      if (this.buf.length < total) break;
+      const json = this.buf.subarray(HEADER_SIZE, total);
+      messages.push(JSON.parse(json.toString("utf-8")));
+      this.buf = this.buf.subarray(total);
+    }
+    return messages;
+  }
+};
+var VsockClient = class {
+  vsockPath;
+  socket = null;
+  connected = false;
+  pendingRequests = /* @__PURE__ */ new Map();
+  constructor(vsockPath) {
+    this.vsockPath = vsockPath;
+  }
+  /**
+   * Connect to the guest agent via vsock
+   */
+  async connect() {
+    if (this.connected && this.socket) {
+      return;
+    }
+    return new Promise((resolve, reject) => {
+      if (!fs5.existsSync(this.vsockPath)) {
+        reject(new Error(`Vsock socket not found: ${this.vsockPath}`));
+        return;
+      }
+      const socket = net.createConnection(this.vsockPath);
+      const decoder = new Decoder();
+      let fcConnected = false;
+      let gotReady = false;
+      let pingId = null;
+      let connectionEstablished = false;
+      const timeout = setTimeout(() => {
+        socket.destroy();
+        reject(new Error("Vsock connection timeout"));
+      }, CONNECT_TIMEOUT_MS);
+      socket.on("connect", () => {
+        socket.write(`CONNECT ${VSOCK_PORT}
+`);
+      });
+      socket.on("data", (data) => {
+        if (!fcConnected) {
+          const str = data.toString();
+          if (str.startsWith("OK ")) {
+            fcConnected = true;
+          } else {
+            clearTimeout(timeout);
+            socket.destroy();
+            reject(new Error(`Firecracker connect failed: ${str.trim()}`));
+          }
+          return;
+        }
+        try {
+          for (const msg of decoder.decode(data)) {
+            if (!connectionEstablished) {
+              if (!gotReady && msg.type === "ready") {
+                gotReady = true;
+                pingId = crypto.randomUUID();
+                const ping = { type: "ping", id: pingId, payload: {} };
+                socket.write(encode(ping));
+              } else if (msg.type === "pong" && msg.id === pingId) {
+                clearTimeout(timeout);
+                this.socket = socket;
+                this.connected = true;
+                connectionEstablished = true;
+                resolve();
+              }
+            } else {
+              this.handleMessage(msg);
+            }
+          }
+        } catch (e) {
+          clearTimeout(timeout);
+          socket.destroy();
+          reject(new Error(`Failed to parse message: ${e}`));
+        }
+      });
+      socket.on("error", (err) => {
+        clearTimeout(timeout);
+        this.connected = false;
+        this.socket = null;
+        reject(new Error(`Vsock error: ${err.message}`));
+      });
+      socket.on("close", () => {
+        clearTimeout(timeout);
+        this.connected = false;
+        this.socket = null;
+        if (!gotReady) {
+          reject(new Error("Vsock closed before ready"));
+        }
+        for (const [id, req] of this.pendingRequests) {
+          clearTimeout(req.timeout);
+          req.reject(new Error("Connection closed"));
+          this.pendingRequests.delete(id);
+        }
+      });
+    });
+  }
+  /**
+   * Handle incoming message and route to pending request
+   */
+  handleMessage(msg) {
+    const pending = this.pendingRequests.get(msg.id);
+    if (pending) {
+      clearTimeout(pending.timeout);
+      this.pendingRequests.delete(msg.id);
+      pending.resolve(msg);
+    }
+  }
+  /**
+   * Send a request and wait for response
+   */
+  async request(type, payload, timeoutMs) {
+    await this.connect();
+    if (!this.socket) {
+      throw new Error("Not connected");
+    }
+    const id = crypto.randomUUID();
+    const msg = { type, id, payload };
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        this.pendingRequests.delete(id);
+        reject(new Error(`Request timeout: ${type}`));
+      }, timeoutMs);
+      this.pendingRequests.set(id, {
+        resolve,
+        reject,
+        timeout
+      });
+      this.socket.write(encode(msg));
+    });
+  }
+  /**
+   * Execute a command on the remote VM
+   */
+  async exec(command, timeoutMs) {
+    const actualTimeout = timeoutMs ?? DEFAULT_EXEC_TIMEOUT_MS;
+    try {
+      const response = await this.request(
+        "exec",
+        { command, timeoutMs: actualTimeout },
+        actualTimeout + 5e3
+        // Add buffer for network latency
+      );
+      if (response.type === "error") {
+        const errorPayload = response.payload;
+        return {
+          exitCode: 1,
+          stdout: "",
+          stderr: errorPayload.message
+        };
+      }
+      return {
+        exitCode: response.payload.exitCode,
+        stdout: response.payload.stdout,
+        stderr: response.payload.stderr
+      };
+    } catch (e) {
+      return {
+        exitCode: 1,
+        stdout: "",
+        stderr: e instanceof Error ? e.message : String(e)
+      };
+    }
+  }
+  /**
+   * Execute a command and throw on non-zero exit
+   */
+  async execOrThrow(command) {
+    const result = await this.exec(command);
+    if (result.exitCode !== 0) {
+      throw new Error(
+        `Command failed (exit ${result.exitCode}): ${result.stderr || result.stdout}`
+      );
+    }
+    return result.stdout;
+  }
+  /**
+   * Write content to a file on the remote VM
+   */
+  async writeFile(remotePath, content) {
+    const encoded = Buffer.from(content).toString("base64");
+    const maxChunkSize = 65e3;
+    if (encoded.length <= maxChunkSize) {
+      await this.execOrThrow(`echo '${encoded}' | base64 -d > '${remotePath}'`);
+    } else {
+      await this.execOrThrow(`rm -f '${remotePath}'`);
+      for (let i = 0; i < encoded.length; i += maxChunkSize) {
+        const chunk = encoded.slice(i, i + maxChunkSize);
+        const operator = i === 0 ? ">" : ">>";
+        await this.execOrThrow(
+          `echo '${chunk}' | base64 -d ${operator} '${remotePath}'`
+        );
+      }
+    }
+  }
+  /**
+   * Write content to a file on the remote VM using sudo
+   */
+  async writeFileWithSudo(remotePath, content) {
+    const encoded = Buffer.from(content).toString("base64");
+    const maxChunkSize = 65e3;
+    if (encoded.length <= maxChunkSize) {
+      await this.execOrThrow(
+        `echo '${encoded}' | base64 -d | sudo tee '${remotePath}' > /dev/null`
+      );
+    } else {
+      await this.execOrThrow(`sudo rm -f '${remotePath}'`);
+      for (let i = 0; i < encoded.length; i += maxChunkSize) {
+        const chunk = encoded.slice(i, i + maxChunkSize);
+        const teeFlag = i === 0 ? "" : "-a";
+        await this.execOrThrow(
+          `echo '${chunk}' | base64 -d | sudo tee ${teeFlag} '${remotePath}' > /dev/null`
+        );
+      }
+    }
+  }
+  /**
+   * Read a file from the remote VM
+   */
+  async readFile(remotePath) {
+    const result = await this.exec(`cat '${remotePath}'`);
+    if (result.exitCode !== 0) {
+      throw new Error(`Failed to read file: ${result.stderr}`);
+    }
+    return result.stdout;
+  }
+  /**
+   * Check if vsock connection is available
+   */
+  async isReachable() {
+    try {
+      const result = await this.exec("echo ok", 15e3);
+      return result.exitCode === 0 && result.stdout.trim() === "ok";
+    } catch {
+      return false;
+    }
+  }
+  /**
+   * Wait for vsock to become available
+   */
+  async waitUntilReachable(timeoutMs = 12e4, intervalMs = 2e3) {
+    const start = Date.now();
+    while (Date.now() - start < timeoutMs) {
+      if (await this.isReachable()) {
+        return;
+      }
+      await new Promise((resolve) => {
+        const remaining = timeoutMs - (Date.now() - start);
+        if (remaining > 0) {
+          setTimeout(resolve, Math.min(intervalMs, remaining));
+        } else {
+          resolve();
+        }
+      });
+    }
+    throw new Error(`Vsock not reachable after ${timeoutMs}ms`);
+  }
+  /**
+   * Create a directory on the remote VM
+   */
+  async mkdir(remotePath) {
+    await this.execOrThrow(`mkdir -p '${remotePath}'`);
+  }
+  /**
+   * Check if a file/directory exists on the remote VM
+   */
+  async exists(remotePath) {
+    const result = await this.exec(`test -e '${remotePath}'`);
+    return result.exitCode === 0;
+  }
+  /**
+   * Get the vsock path (for logging/debugging)
+   */
+  getVsockPath() {
+    return this.vsockPath;
+  }
+  /**
+   * Close the connection
+   */
+  close() {
+    if (this.socket) {
+      this.socket.end();
+      this.socket = null;
+    }
+    this.connected = false;
+    for (const [id, req] of this.pendingRequests) {
+      clearTimeout(req.timeout);
+      req.reject(new Error("Connection closed"));
+      this.pendingRequests.delete(id);
+    }
+  }
+};
+
 // ../../node_modules/.pnpm/@ts-rest+core@3.53.0-rc.1_@types+node@24.3.0/node_modules/@ts-rest/core/index.esm.mjs
 var util;
 (function(util2) {
@@ -5744,7 +6075,7 @@ var runEventsContract = c3.router({
       id: z6.string().min(1, "Run ID is required")
     }),
     query: z6.object({
-      since: z6.coerce.number().default(0),
+      since: z6.coerce.number().default(-1),
       limit: z6.coerce.number().default(100)
     }),
     responses: {
@@ -6127,7 +6458,7 @@ import { z as z8 } from "zod";
 var c5 = initContract();
 var agentEventSchema = z8.object({
   type: z8.string(),
-  sequenceNumber: z8.number().int().positive()
+  sequenceNumber: z8.number().int().nonnegative()
 }).passthrough();
 var artifactSnapshotSchema = z8.object({
   artifactName: z8.string(),
@@ -7762,7 +8093,7 @@ var publicVolumeDownloadContract = c18.router({
 });
 
 // ../../packages/core/src/sandbox/scripts/dist/bundled.ts
-var RUN_AGENT_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/run-agent.ts\nimport * as fs7 from "fs";\nimport { spawn, execSync as execSync4 } from "child_process";\nimport * as readline from "readline";\n\n// src/sandbox/scripts/src/lib/common.ts\nimport * as fs from "fs";\nvar RUN_ID = process.env.VM0_RUN_ID ?? "";\nvar API_URL = process.env.VM0_API_URL ?? "";\nvar API_TOKEN = process.env.VM0_API_TOKEN ?? "";\nvar PROMPT = process.env.VM0_PROMPT ?? "";\nvar VERCEL_BYPASS = process.env.VERCEL_PROTECTION_BYPASS ?? "";\nvar RESUME_SESSION_ID = process.env.VM0_RESUME_SESSION_ID ?? "";\nvar CLI_AGENT_TYPE = process.env.CLI_AGENT_TYPE ?? "claude-code";\nvar OPENAI_MODEL = process.env.OPENAI_MODEL ?? "";\nvar WORKING_DIR = process.env.VM0_WORKING_DIR ?? "";\nvar ARTIFACT_DRIVER = process.env.VM0_ARTIFACT_DRIVER ?? "";\nvar ARTIFACT_MOUNT_PATH = process.env.VM0_ARTIFACT_MOUNT_PATH ?? "";\nvar ARTIFACT_VOLUME_NAME = process.env.VM0_ARTIFACT_VOLUME_NAME ?? "";\nvar ARTIFACT_VERSION_ID = process.env.VM0_ARTIFACT_VERSION_ID ?? "";\nvar WEBHOOK_URL = `${API_URL}/api/webhooks/agent/events`;\nvar CHECKPOINT_URL = `${API_URL}/api/webhooks/agent/checkpoints`;\nvar COMPLETE_URL = `${API_URL}/api/webhooks/agent/complete`;\nvar HEARTBEAT_URL = `${API_URL}/api/webhooks/agent/heartbeat`;\nvar TELEMETRY_URL = `${API_URL}/api/webhooks/agent/telemetry`;\nvar PROXY_URL = `${API_URL}/api/webhooks/agent/proxy`;\nvar STORAGE_PREPARE_URL = `${API_URL}/api/webhooks/agent/storages/prepare`;\nvar STORAGE_COMMIT_URL = `${API_URL}/api/webhooks/agent/storages/commit`;\nvar HEARTBEAT_INTERVAL = 60;\nvar TELEMETRY_INTERVAL = 30;\nvar HTTP_CONNECT_TIMEOUT = 10;\nvar HTTP_MAX_TIME = 30;\nvar HTTP_MAX_TIME_UPLOAD = 60;\nvar HTTP_MAX_RETRIES = 3;\nvar SESSION_ID_FILE = `/tmp/vm0-session-${RUN_ID}.txt`;\nvar SESSION_HISTORY_PATH_FILE = `/tmp/vm0-session-history-${RUN_ID}.txt`;\nvar EVENT_ERROR_FLAG = `/tmp/vm0-event-error-${RUN_ID}`;\nvar SYSTEM_LOG_FILE = `/tmp/vm0-main-${RUN_ID}.log`;\nvar AGENT_LOG_FILE = `/tmp/vm0-agent-${RUN_ID}.log`;\nvar METRICS_LOG_FILE = `/tmp/vm0-metrics-${RUN_ID}.jsonl`;\nvar NETWORK_LOG_FILE = `/tmp/vm0-network-${RUN_ID}.jsonl`;\nvar TELEMETRY_LOG_POS_FILE = `/tmp/vm0-telemetry-log-pos-${RUN_ID}.txt`;\nvar TELEMETRY_METRICS_POS_FILE = `/tmp/vm0-telemetry-metrics-pos-${RUN_ID}.txt`;\nvar TELEMETRY_NETWORK_POS_FILE = `/tmp/vm0-telemetry-network-pos-${RUN_ID}.txt`;\nvar TELEMETRY_SANDBOX_OPS_POS_FILE = `/tmp/vm0-telemetry-sandbox-ops-pos-${RUN_ID}.txt`;\nvar SANDBOX_OPS_LOG_FILE = `/tmp/vm0-sandbox-ops-${RUN_ID}.jsonl`;\nvar METRICS_INTERVAL = 5;\nfunction validateConfig() {\n  if (!WORKING_DIR) {\n    throw new Error("VM0_WORKING_DIR is required but not set");\n  }\n  return true;\n}\nfunction recordSandboxOp(actionType, durationMs, success, error) {\n  const entry = {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    action_type: actionType,\n    duration_ms: durationMs,\n    success\n  };\n  if (error) {\n    entry.error = error;\n  }\n  fs.appendFileSync(SANDBOX_OPS_LOG_FILE, JSON.stringify(entry) + "\\n");\n}\n\n// src/sandbox/scripts/src/lib/log.ts\nvar SCRIPT_NAME = process.env.LOG_SCRIPT_NAME ?? "run-agent";\nvar DEBUG_MODE = process.env.VM0_DEBUG === "1";\nfunction timestamp() {\n  return (/* @__PURE__ */ new Date()).toISOString().replace(/\\.\\d{3}Z$/, "Z");\n}\nfunction logInfo(msg) {\n  console.error(`[${timestamp()}] [INFO] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logWarn(msg) {\n  console.error(`[${timestamp()}] [WARN] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logError(msg) {\n  console.error(`[${timestamp()}] [ERROR] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logDebug(msg) {\n  if (DEBUG_MODE) {\n    console.error(`[${timestamp()}] [DEBUG] [sandbox:${SCRIPT_NAME}] ${msg}`);\n  }\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nimport * as fs2 from "fs";\n\n// src/sandbox/scripts/src/lib/http-client.ts\nimport { execSync } from "child_process";\nfunction sleep(ms) {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\nasync function httpPostJson(url, data, maxRetries = HTTP_MAX_RETRIES) {\n  const headers = {\n    "Content-Type": "application/json",\n    Authorization: `Bearer ${API_TOKEN}`\n  };\n  if (VERCEL_BYPASS) {\n    headers["x-vercel-protection-bypass"] = VERCEL_BYPASS;\n  }\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP POST attempt ${attempt}/${maxRetries} to ${url}`);\n    try {\n      const controller = new AbortController();\n      const timeoutId = setTimeout(\n        () => controller.abort(),\n        HTTP_MAX_TIME * 1e3\n      );\n      const response = await fetch(url, {\n        method: "POST",\n        headers,\n        body: JSON.stringify(data),\n        signal: controller.signal\n      });\n      clearTimeout(timeoutId);\n      if (response.ok) {\n        const text = await response.text();\n        if (text) {\n          return JSON.parse(text);\n        }\n        return {};\n      }\n      logWarn(\n        `HTTP POST failed (attempt ${attempt}/${maxRetries}): HTTP ${response.status}`\n      );\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("abort")) {\n        logWarn(`HTTP POST failed (attempt ${attempt}/${maxRetries}): Timeout`);\n      } else {\n        logWarn(\n          `HTTP POST failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP POST failed after ${maxRetries} attempts to ${url}`);\n  return null;\n}\nasync function httpPutPresigned(presignedUrl, filePath, contentType = "application/octet-stream", maxRetries = HTTP_MAX_RETRIES) {\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP PUT presigned attempt ${attempt}/${maxRetries}`);\n    try {\n      const curlCmd = [\n        "curl",\n        "-f",\n        "-X",\n        "PUT",\n        "-H",\n        `Content-Type: ${contentType}`,\n        "--data-binary",\n        `@${filePath}`,\n        "--connect-timeout",\n        String(HTTP_CONNECT_TIMEOUT),\n        "--max-time",\n        String(HTTP_MAX_TIME_UPLOAD),\n        "--silent",\n        `"${presignedUrl}"`\n      ].join(" ");\n      execSync(curlCmd, {\n        timeout: HTTP_MAX_TIME_UPLOAD * 1e3,\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      return true;\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("ETIMEDOUT") || errorMsg.includes("timeout")) {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): Timeout`\n        );\n      } else {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP PUT presigned failed after ${maxRetries} attempts`);\n  return false;\n}\n\n// src/sandbox/scripts/src/lib/secret-masker.ts\nvar MASK_PLACEHOLDER = "***";\nvar MIN_SECRET_LENGTH = 5;\nvar _masker = null;\nvar SecretMasker = class {\n  patterns;\n  /**\n   * Initialize masker with secret values.\n   *\n   * @param secretValues - List of secret values to mask\n   */\n  constructor(secretValues) {\n    this.patterns = /* @__PURE__ */ new Set();\n    for (const secret of secretValues) {\n      if (!secret || secret.length < MIN_SECRET_LENGTH) {\n        continue;\n      }\n      this.patterns.add(secret);\n      try {\n        const b64 = Buffer.from(secret).toString("base64");\n        if (b64.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(b64);\n        }\n      } catch {\n      }\n      try {\n        const urlEnc = encodeURIComponent(secret);\n        if (urlEnc !== secret && urlEnc.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(urlEnc);\n        }\n      } catch {\n      }\n    }\n  }\n  /**\n   * Recursively mask all occurrences of secrets in the data.\n   *\n   * @param data - Data to mask (string, list, dict, or primitive)\n   * @returns Masked data with the same structure\n   */\n  mask(data) {\n    return this.deepMask(data);\n  }\n  deepMask(data) {\n    if (typeof data === "string") {\n      let result = data;\n      for (const pattern of this.patterns) {\n        result = result.split(pattern).join(MASK_PLACEHOLDER);\n      }\n      return result;\n    }\n    if (Array.isArray(data)) {\n      return data.map((item) => this.deepMask(item));\n    }\n    if (data !== null && typeof data === "object") {\n      const result = {};\n      for (const [key, value] of Object.entries(\n        data\n      )) {\n        result[key] = this.deepMask(value);\n      }\n      return result;\n    }\n    return data;\n  }\n};\nfunction createMasker() {\n  const secretValuesStr = process.env.VM0_SECRET_VALUES ?? "";\n  if (!secretValuesStr) {\n    return new SecretMasker([]);\n  }\n  const secretValues = [];\n  for (const encodedValue of secretValuesStr.split(",")) {\n    const trimmed = encodedValue.trim();\n    if (trimmed) {\n      try {\n        const decoded = Buffer.from(trimmed, "base64").toString("utf-8");\n        if (decoded) {\n          secretValues.push(decoded);\n        }\n      } catch {\n      }\n    }\n  }\n  return new SecretMasker(secretValues);\n}\nfunction getMasker() {\n  if (_masker === null) {\n    _masker = createMasker();\n  }\n  return _masker;\n}\nfunction maskData(data) {\n  return getMasker().mask(data);\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nasync function sendEvent(event, sequenceNumber) {\n  const eventType = event.type ?? "";\n  const eventSubtype = event.subtype ?? "";\n  let sessionId = null;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (eventType === "thread.started") {\n      sessionId = event.thread_id ?? "";\n    }\n  } else {\n    if (eventType === "system" && eventSubtype === "init") {\n      sessionId = event.session_id ?? "";\n    }\n  }\n  if (sessionId && !fs2.existsSync(SESSION_ID_FILE)) {\n    logInfo(`Captured session ID: ${sessionId}`);\n    fs2.writeFileSync(SESSION_ID_FILE, sessionId);\n    const homeDir = process.env.HOME ?? "/home/user";\n    let sessionHistoryPath;\n    if (CLI_AGENT_TYPE === "codex") {\n      const codexHome = process.env.CODEX_HOME ?? `${homeDir}/.codex`;\n      sessionHistoryPath = `CODEX_SEARCH:${codexHome}/sessions:${sessionId}`;\n    } else {\n      const projectName = WORKING_DIR.replace(/^\\//, "").replace(/\\//g, "-");\n      sessionHistoryPath = `${homeDir}/.claude/projects/-${projectName}/${sessionId}.jsonl`;\n    }\n    fs2.writeFileSync(SESSION_HISTORY_PATH_FILE, sessionHistoryPath);\n    logInfo(`Session history will be at: ${sessionHistoryPath}`);\n  }\n  const eventWithSequence = {\n    ...event,\n    sequenceNumber\n  };\n  const maskedEvent = maskData(eventWithSequence);\n  const payload = {\n    runId: RUN_ID,\n    events: [maskedEvent]\n  };\n  const result = await httpPostJson(WEBHOOK_URL, payload);\n  if (result === null) {\n    logError("Failed to send event after retries");\n    fs2.writeFileSync(EVENT_ERROR_FLAG, "1");\n    return false;\n  }\n  return true;\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nimport * as fs4 from "fs";\nimport * as path2 from "path";\n\n// src/sandbox/scripts/src/lib/direct-upload.ts\nimport * as fs3 from "fs";\nimport * as path from "path";\nimport * as crypto from "crypto";\nimport { execSync as execSync2 } from "child_process";\nfunction computeFileHash(filePath) {\n  const hash = crypto.createHash("sha256");\n  const buffer = fs3.readFileSync(filePath);\n  hash.update(buffer);\n  return hash.digest("hex");\n}\nfunction collectFileMetadata(dirPath) {\n  const files = [];\n  function walkDir(currentPath, relativePath) {\n    const items = fs3.readdirSync(currentPath);\n    for (const item of items) {\n      if (item === ".git" || item === ".vm0") {\n        continue;\n      }\n      const fullPath = path.join(currentPath, item);\n      const relPath = relativePath ? path.join(relativePath, item) : item;\n      const stat = fs3.statSync(fullPath);\n      if (stat.isDirectory()) {\n        walkDir(fullPath, relPath);\n      } else if (stat.isFile()) {\n        try {\n          const fileHash = computeFileHash(fullPath);\n          files.push({\n            path: relPath,\n            hash: fileHash,\n            size: stat.size\n          });\n        } catch (error) {\n          logWarn(`Could not process file ${relPath}: ${error}`);\n        }\n      }\n    }\n  }\n  walkDir(dirPath, "");\n  return files;\n}\nfunction createArchive(dirPath, tarPath) {\n  try {\n    execSync2(\n      `tar -czf "${tarPath}" --exclude=\'.git\' --exclude=\'.vm0\' -C "${dirPath}" .`,\n      { stdio: ["pipe", "pipe", "pipe"] }\n    );\n    return true;\n  } catch (error) {\n    logError(`Failed to create archive: ${error}`);\n    return false;\n  }\n}\nfunction createManifest(files, manifestPath) {\n  try {\n    const manifest = {\n      version: 1,\n      files,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    fs3.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));\n    return true;\n  } catch (error) {\n    logError(`Failed to create manifest: ${error}`);\n    return false;\n  }\n}\nasync function createDirectUploadSnapshot(mountPath, storageName, storageType = "artifact", runId, message) {\n  logInfo(\n    `Creating direct upload snapshot for \'${storageName}\' (type: ${storageType})`\n  );\n  logInfo("Computing file hashes...");\n  const hashStart = Date.now();\n  const files = collectFileMetadata(mountPath);\n  recordSandboxOp("artifact_hash_compute", Date.now() - hashStart, true);\n  logInfo(`Found ${files.length} files`);\n  if (files.length === 0) {\n    logInfo("No files to upload, creating empty version");\n  }\n  logInfo("Calling prepare endpoint...");\n  const prepareStart = Date.now();\n  const preparePayload = {\n    storageName,\n    storageType,\n    files\n  };\n  if (runId) {\n    preparePayload.runId = runId;\n  }\n  const prepareResponse = await httpPostJson(\n    STORAGE_PREPARE_URL,\n    preparePayload\n  );\n  if (!prepareResponse) {\n    logError("Failed to call prepare endpoint");\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  const versionId = prepareResponse.versionId;\n  if (!versionId) {\n    logError(`Invalid prepare response: ${JSON.stringify(prepareResponse)}`);\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, true);\n  if (prepareResponse.existing) {\n    logInfo(`Version already exists (deduplicated): ${versionId.slice(0, 8)}`);\n    logInfo("Updating HEAD pointer...");\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse || !commitResponse.success) {\n      logError(`Failed to update HEAD: ${JSON.stringify(commitResponse)}`);\n      return null;\n    }\n    return { versionId, deduplicated: true };\n  }\n  const uploads = prepareResponse.uploads;\n  if (!uploads) {\n    logError("No upload URLs in prepare response");\n    return null;\n  }\n  const archiveInfo = uploads.archive;\n  const manifestInfo = uploads.manifest;\n  if (!archiveInfo || !manifestInfo) {\n    logError("Missing archive or manifest upload info");\n    return null;\n  }\n  const tempDir = fs3.mkdtempSync(`/tmp/direct-upload-${storageName}-`);\n  try {\n    logInfo("Creating archive...");\n    const archiveStart = Date.now();\n    const archivePath = path.join(tempDir, "archive.tar.gz");\n    if (!createArchive(mountPath, archivePath)) {\n      logError("Failed to create archive");\n      recordSandboxOp(\n        "artifact_archive_create",\n        Date.now() - archiveStart,\n        false\n      );\n      return null;\n    }\n    recordSandboxOp("artifact_archive_create", Date.now() - archiveStart, true);\n    logInfo("Creating manifest...");\n    const manifestPath = path.join(tempDir, "manifest.json");\n    if (!createManifest(files, manifestPath)) {\n      logError("Failed to create manifest");\n      return null;\n    }\n    logInfo("Uploading archive to S3...");\n    const s3UploadStart = Date.now();\n    if (!await httpPutPresigned(\n      archiveInfo.presignedUrl,\n      archivePath,\n      "application/gzip"\n    )) {\n      logError("Failed to upload archive to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    logInfo("Uploading manifest to S3...");\n    if (!await httpPutPresigned(\n      manifestInfo.presignedUrl,\n      manifestPath,\n      "application/json"\n    )) {\n      logError("Failed to upload manifest to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, true);\n    logInfo("Calling commit endpoint...");\n    const commitStart = Date.now();\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    if (message) {\n      commitPayload.message = message;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse) {\n      logError("Failed to call commit endpoint");\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    if (!commitResponse.success) {\n      logError(`Commit failed: ${JSON.stringify(commitResponse)}`);\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_commit_api", Date.now() - commitStart, true);\n    logInfo(`Direct upload snapshot created: ${versionId.slice(0, 8)}`);\n    return { versionId };\n  } finally {\n    try {\n      fs3.rmSync(tempDir, { recursive: true, force: true });\n    } catch {\n    }\n  }\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nfunction findJsonlFiles(dir) {\n  const files = [];\n  function walk(currentDir) {\n    try {\n      const items = fs4.readdirSync(currentDir);\n      for (const item of items) {\n        const fullPath = path2.join(currentDir, item);\n        const stat = fs4.statSync(fullPath);\n        if (stat.isDirectory()) {\n          walk(fullPath);\n        } else if (item.endsWith(".jsonl")) {\n          files.push(fullPath);\n        }\n      }\n    } catch {\n    }\n  }\n  walk(dir);\n  return files;\n}\nfunction findCodexSessionFile(sessionsDir, sessionId) {\n  const files = findJsonlFiles(sessionsDir);\n  logInfo(`Searching for Codex session ${sessionId} in ${files.length} files`);\n  for (const filepath of files) {\n    const filename = path2.basename(filepath);\n    if (filename.includes(sessionId) || filename.replace(/-/g, "").includes(sessionId.replace(/-/g, ""))) {\n      logInfo(`Found Codex session file: ${filepath}`);\n      return filepath;\n    }\n  }\n  if (files.length > 0) {\n    files.sort((a, b) => {\n      const statA = fs4.statSync(a);\n      const statB = fs4.statSync(b);\n      return statB.mtimeMs - statA.mtimeMs;\n    });\n    const mostRecent = files[0] ?? null;\n    if (mostRecent) {\n      logInfo(\n        `Session ID not found in filenames, using most recent: ${mostRecent}`\n      );\n    }\n    return mostRecent;\n  }\n  return null;\n}\nasync function createCheckpoint() {\n  const checkpointStart = Date.now();\n  logInfo("Creating checkpoint...");\n  const sessionIdStart = Date.now();\n  if (!fs4.existsSync(SESSION_ID_FILE)) {\n    logError("No session ID found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_id_read",\n      Date.now() - sessionIdStart,\n      false,\n      "Session ID file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const cliAgentSessionId = fs4.readFileSync(SESSION_ID_FILE, "utf-8").trim();\n  recordSandboxOp("session_id_read", Date.now() - sessionIdStart, true);\n  const sessionHistoryStart = Date.now();\n  if (!fs4.existsSync(SESSION_HISTORY_PATH_FILE)) {\n    logError("No session history path found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history path file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const sessionHistoryPathRaw = fs4.readFileSync(SESSION_HISTORY_PATH_FILE, "utf-8").trim();\n  let sessionHistoryPath;\n  if (sessionHistoryPathRaw.startsWith("CODEX_SEARCH:")) {\n    const parts = sessionHistoryPathRaw.split(":");\n    if (parts.length !== 3) {\n      logError(`Invalid Codex search marker format: ${sessionHistoryPathRaw}`);\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Invalid Codex search marker"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const sessionsDir = parts[1] ?? "";\n    const codexSessionId = parts[2] ?? "";\n    logInfo(`Searching for Codex session in ${sessionsDir}`);\n    const foundPath = findCodexSessionFile(sessionsDir, codexSessionId);\n    if (!foundPath) {\n      logError(\n        `Could not find Codex session file for ${codexSessionId} in ${sessionsDir}`\n      );\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Codex session file not found"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    sessionHistoryPath = foundPath;\n  } else {\n    sessionHistoryPath = sessionHistoryPathRaw;\n  }\n  if (!fs4.existsSync(sessionHistoryPath)) {\n    logError(\n      `Session history file not found at ${sessionHistoryPath}, checkpoint creation failed`\n    );\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  let cliAgentSessionHistory;\n  try {\n    cliAgentSessionHistory = fs4.readFileSync(sessionHistoryPath, "utf-8");\n  } catch (error) {\n    logError(`Failed to read session history: ${error}`);\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      String(error)\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  if (!cliAgentSessionHistory.trim()) {\n    logError("Session history is empty, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history empty"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const lineCount = cliAgentSessionHistory.trim().split("\\n").length;\n  logInfo(`Session history loaded (${lineCount} lines)`);\n  recordSandboxOp(\n    "session_history_read",\n    Date.now() - sessionHistoryStart,\n    true\n  );\n  let artifactSnapshot = null;\n  if (ARTIFACT_DRIVER && ARTIFACT_VOLUME_NAME) {\n    logInfo(`Processing artifact with driver: ${ARTIFACT_DRIVER}`);\n    if (ARTIFACT_DRIVER !== "vas") {\n      logError(\n        `Unknown artifact driver: ${ARTIFACT_DRIVER} (only \'vas\' is supported)`\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    logInfo(\n      `Creating VAS snapshot for artifact \'${ARTIFACT_VOLUME_NAME}\' at ${ARTIFACT_MOUNT_PATH}`\n    );\n    logInfo("Using direct S3 upload...");\n    const snapshot = await createDirectUploadSnapshot(\n      ARTIFACT_MOUNT_PATH,\n      ARTIFACT_VOLUME_NAME,\n      "artifact",\n      RUN_ID,\n      `Checkpoint from run ${RUN_ID}`\n    );\n    if (!snapshot) {\n      logError("Failed to create VAS snapshot for artifact");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const artifactVersion = snapshot.versionId;\n    if (!artifactVersion) {\n      logError("Failed to extract versionId from snapshot");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    artifactSnapshot = {\n      artifactName: ARTIFACT_VOLUME_NAME,\n      artifactVersion\n    };\n    logInfo(\n      `VAS artifact snapshot created: ${ARTIFACT_VOLUME_NAME}@${artifactVersion}`\n    );\n  } else {\n    logInfo(\n      "No artifact configured, creating checkpoint without artifact snapshot"\n    );\n  }\n  logInfo("Calling checkpoint API...");\n  const checkpointPayload = {\n    runId: RUN_ID,\n    cliAgentType: CLI_AGENT_TYPE,\n    cliAgentSessionId,\n    cliAgentSessionHistory\n  };\n  if (artifactSnapshot) {\n    checkpointPayload.artifactSnapshot = artifactSnapshot;\n  }\n  const apiCallStart = Date.now();\n  const result = await httpPostJson(\n    CHECKPOINT_URL,\n    checkpointPayload\n  );\n  if (result && result.checkpointId) {\n    const checkpointId = result.checkpointId;\n    logInfo(`Checkpoint created successfully: ${checkpointId}`);\n    recordSandboxOp("checkpoint_api_call", Date.now() - apiCallStart, true);\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, true);\n    return true;\n  } else {\n    logError(\n      `Checkpoint API returned invalid response: ${JSON.stringify(result)}`\n    );\n    recordSandboxOp(\n      "checkpoint_api_call",\n      Date.now() - apiCallStart,\n      false,\n      "Invalid API response"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n}\n\n// src/sandbox/scripts/src/lib/metrics.ts\nimport * as fs5 from "fs";\nimport { execSync as execSync3 } from "child_process";\nvar shutdownRequested = false;\nfunction getCpuPercent() {\n  try {\n    const content = fs5.readFileSync("/proc/stat", "utf-8");\n    const line = content.split("\\n")[0];\n    if (!line) {\n      return 0;\n    }\n    const parts = line.split(/\\s+/);\n    if (parts[0] !== "cpu") {\n      return 0;\n    }\n    const values = parts.slice(1).map((x) => parseInt(x, 10));\n    const idleVal = values[3];\n    const iowaitVal = values[4];\n    if (idleVal === void 0 || iowaitVal === void 0) {\n      return 0;\n    }\n    const idle = idleVal + iowaitVal;\n    const total = values.reduce((a, b) => a + b, 0);\n    if (total === 0) {\n      return 0;\n    }\n    const cpuPercent = 100 * (1 - idle / total);\n    return Math.round(cpuPercent * 100) / 100;\n  } catch (error) {\n    logDebug(`Failed to get CPU percent: ${error}`);\n    return 0;\n  }\n}\nfunction getMemoryInfo() {\n  try {\n    const result = execSync3("free -b", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    for (const line of lines) {\n      if (line.startsWith("Mem:")) {\n        const parts = line.split(/\\s+/);\n        const totalStr = parts[1];\n        const usedStr = parts[2];\n        if (!totalStr || !usedStr) {\n          return [0, 0];\n        }\n        const total = parseInt(totalStr, 10);\n        const used = parseInt(usedStr, 10);\n        return [used, total];\n      }\n    }\n    return [0, 0];\n  } catch (error) {\n    logDebug(`Failed to get memory info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction getDiskInfo() {\n  try {\n    const result = execSync3("df -B1 /", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    if (lines.length < 2) {\n      return [0, 0];\n    }\n    const dataLine = lines[1];\n    if (!dataLine) {\n      return [0, 0];\n    }\n    const parts = dataLine.split(/\\s+/);\n    const totalStr = parts[1];\n    const usedStr = parts[2];\n    if (!totalStr || !usedStr) {\n      return [0, 0];\n    }\n    const total = parseInt(totalStr, 10);\n    const used = parseInt(usedStr, 10);\n    return [used, total];\n  } catch (error) {\n    logDebug(`Failed to get disk info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction collectMetrics() {\n  const cpu = getCpuPercent();\n  const [memUsed, memTotal] = getMemoryInfo();\n  const [diskUsed, diskTotal] = getDiskInfo();\n  return {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    cpu,\n    mem_used: memUsed,\n    mem_total: memTotal,\n    disk_used: diskUsed,\n    disk_total: diskTotal\n  };\n}\nfunction metricsCollectorLoop() {\n  logInfo(`Metrics collector started, writing to ${METRICS_LOG_FILE}`);\n  const writeMetrics = () => {\n    if (shutdownRequested) {\n      logInfo("Metrics collector stopped");\n      return;\n    }\n    try {\n      const metrics = collectMetrics();\n      fs5.appendFileSync(METRICS_LOG_FILE, JSON.stringify(metrics) + "\\n");\n      logDebug(\n        `Metrics collected: cpu=${metrics.cpu}%, mem=${metrics.mem_used}/${metrics.mem_total}`\n      );\n    } catch (error) {\n      logError(`Failed to collect/write metrics: ${error}`);\n    }\n    setTimeout(writeMetrics, METRICS_INTERVAL * 1e3);\n  };\n  writeMetrics();\n}\nfunction startMetricsCollector() {\n  shutdownRequested = false;\n  setTimeout(metricsCollectorLoop, 0);\n}\nfunction stopMetricsCollector() {\n  shutdownRequested = true;\n}\n\n// src/sandbox/scripts/src/lib/upload-telemetry.ts\nimport * as fs6 from "fs";\nvar shutdownRequested2 = false;\nfunction readFileFromPosition(filePath, posFile) {\n  let lastPos = 0;\n  if (fs6.existsSync(posFile)) {\n    try {\n      const content = fs6.readFileSync(posFile, "utf-8").trim();\n      lastPos = parseInt(content, 10) || 0;\n    } catch {\n      lastPos = 0;\n    }\n  }\n  let newContent = "";\n  let newPos = lastPos;\n  if (fs6.existsSync(filePath)) {\n    try {\n      const fd = fs6.openSync(filePath, "r");\n      const stats = fs6.fstatSync(fd);\n      const bufferSize = stats.size - lastPos;\n      if (bufferSize > 0) {\n        const buffer = Buffer.alloc(bufferSize);\n        fs6.readSync(fd, buffer, 0, bufferSize, lastPos);\n        newContent = buffer.toString("utf-8");\n        newPos = stats.size;\n      }\n      fs6.closeSync(fd);\n    } catch (error) {\n      logDebug(`Failed to read ${filePath}: ${error}`);\n    }\n  }\n  return [newContent, newPos];\n}\nfunction savePosition(posFile, position) {\n  try {\n    fs6.writeFileSync(posFile, String(position));\n  } catch (error) {\n    logDebug(`Failed to save position to ${posFile}: ${error}`);\n  }\n}\nfunction readJsonlFromPosition(filePath, posFile) {\n  const [content, newPos] = readFileFromPosition(filePath, posFile);\n  const entries = [];\n  if (content) {\n    for (const line of content.trim().split("\\n")) {\n      if (line) {\n        try {\n          entries.push(JSON.parse(line));\n        } catch {\n        }\n      }\n    }\n  }\n  return [entries, newPos];\n}\nfunction readMetricsFromPosition(posFile) {\n  return readJsonlFromPosition(METRICS_LOG_FILE, posFile);\n}\nfunction readNetworkLogsFromPosition(posFile) {\n  return readJsonlFromPosition(NETWORK_LOG_FILE, posFile);\n}\nfunction readSandboxOpsFromPosition(posFile) {\n  return readJsonlFromPosition(SANDBOX_OPS_LOG_FILE, posFile);\n}\nasync function uploadTelemetry() {\n  const [systemLog, logPos] = readFileFromPosition(\n    SYSTEM_LOG_FILE,\n    TELEMETRY_LOG_POS_FILE\n  );\n  const [metrics, metricsPos] = readMetricsFromPosition(\n    TELEMETRY_METRICS_POS_FILE\n  );\n  const [networkLogs, networkPos] = readNetworkLogsFromPosition(\n    TELEMETRY_NETWORK_POS_FILE\n  );\n  const [sandboxOps, sandboxOpsPos] = readSandboxOpsFromPosition(\n    TELEMETRY_SANDBOX_OPS_POS_FILE\n  );\n  if (!systemLog && metrics.length === 0 && networkLogs.length === 0 && sandboxOps.length === 0) {\n    logDebug("No new telemetry data to upload");\n    return true;\n  }\n  const maskedSystemLog = systemLog ? maskData(systemLog) : "";\n  const maskedNetworkLogs = networkLogs.length > 0 ? maskData(networkLogs) : [];\n  const payload = {\n    runId: RUN_ID,\n    systemLog: maskedSystemLog,\n    metrics,\n    // Metrics don\'t contain secrets (just numbers)\n    networkLogs: maskedNetworkLogs,\n    sandboxOperations: sandboxOps\n    // Sandbox ops don\'t contain secrets (just timing data)\n  };\n  logDebug(\n    `Uploading telemetry: ${systemLog.length} bytes log, ${metrics.length} metrics, ${networkLogs.length} network logs, ${sandboxOps.length} sandbox ops`\n  );\n  const result = await httpPostJson(TELEMETRY_URL, payload, 1);\n  if (result) {\n    savePosition(TELEMETRY_LOG_POS_FILE, logPos);\n    savePosition(TELEMETRY_METRICS_POS_FILE, metricsPos);\n    savePosition(TELEMETRY_NETWORK_POS_FILE, networkPos);\n    savePosition(TELEMETRY_SANDBOX_OPS_POS_FILE, sandboxOpsPos);\n    logDebug(\n      `Telemetry uploaded successfully: ${result.id ?? "unknown"}`\n    );\n    return true;\n  } else {\n    logWarn("Failed to upload telemetry (will retry next interval)");\n    return false;\n  }\n}\nasync function telemetryUploadLoop() {\n  logInfo(`Telemetry upload started (interval: ${TELEMETRY_INTERVAL}s)`);\n  const runUpload = async () => {\n    if (shutdownRequested2) {\n      logInfo("Telemetry upload stopped");\n      return;\n    }\n    try {\n      await uploadTelemetry();\n    } catch (error) {\n      logError(`Telemetry upload error: ${error}`);\n    }\n    setTimeout(() => void runUpload(), TELEMETRY_INTERVAL * 1e3);\n  };\n  await runUpload();\n}\nfunction startTelemetryUpload() {\n  shutdownRequested2 = false;\n  setTimeout(() => void telemetryUploadLoop(), 0);\n}\nfunction stopTelemetryUpload() {\n  shutdownRequested2 = true;\n}\nasync function finalTelemetryUpload() {\n  logInfo("Performing final telemetry upload...");\n  return uploadTelemetry();\n}\n\n// src/sandbox/scripts/src/run-agent.ts\nvar shutdownRequested3 = false;\nfunction heartbeatLoop() {\n  const sendHeartbeat = async () => {\n    if (shutdownRequested3) {\n      return;\n    }\n    try {\n      if (await httpPostJson(HEARTBEAT_URL, { runId: RUN_ID })) {\n        logInfo("Heartbeat sent");\n      } else {\n        logWarn("Heartbeat failed");\n      }\n    } catch (error) {\n      logWarn(`Heartbeat error: ${error}`);\n    }\n    setTimeout(() => {\n      sendHeartbeat().catch(() => {\n      });\n    }, HEARTBEAT_INTERVAL * 1e3);\n  };\n  sendHeartbeat().catch(() => {\n  });\n}\nasync function cleanup(exitCode, errorMessage) {\n  logInfo("\\u25B7 Cleanup");\n  const telemetryStart = Date.now();\n  let telemetrySuccess = true;\n  try {\n    await finalTelemetryUpload();\n  } catch (error) {\n    telemetrySuccess = false;\n    logError(`Final telemetry upload failed: ${error}`);\n  }\n  recordSandboxOp(\n    "final_telemetry_upload",\n    Date.now() - telemetryStart,\n    telemetrySuccess\n  );\n  logInfo(`Calling complete API with exitCode=${exitCode}`);\n  const completePayload = {\n    runId: RUN_ID,\n    exitCode\n  };\n  if (errorMessage) {\n    completePayload.error = errorMessage;\n  }\n  const completeStart = Date.now();\n  let completeSuccess = false;\n  try {\n    if (await httpPostJson(COMPLETE_URL, completePayload)) {\n      logInfo("Complete API called successfully");\n      completeSuccess = true;\n    } else {\n      logError("Failed to call complete API (sandbox may not be cleaned up)");\n    }\n  } catch (error) {\n    logError(`Complete API call failed: ${error}`);\n  }\n  recordSandboxOp(\n    "complete_api_call",\n    Date.now() - completeStart,\n    completeSuccess\n  );\n  shutdownRequested3 = true;\n  stopMetricsCollector();\n  stopTelemetryUpload();\n  logInfo("Background processes stopped");\n  if (exitCode === 0) {\n    logInfo("\\u2713 Sandbox finished successfully");\n  } else {\n    logInfo(`\\u2717 Sandbox failed (exit code ${exitCode})`);\n  }\n}\nasync function run() {\n  validateConfig();\n  logInfo(`\\u25B6 VM0 Sandbox ${RUN_ID}`);\n  logInfo("\\u25B7 Initialization");\n  const initStartTime = Date.now();\n  logInfo(`Working directory: ${WORKING_DIR}`);\n  const heartbeatStart = Date.now();\n  heartbeatLoop();\n  logInfo("Heartbeat started");\n  recordSandboxOp("heartbeat_start", Date.now() - heartbeatStart, true);\n  const metricsStart = Date.now();\n  startMetricsCollector();\n  logInfo("Metrics collector started");\n  recordSandboxOp("metrics_collector_start", Date.now() - metricsStart, true);\n  const telemetryStart = Date.now();\n  startTelemetryUpload();\n  logInfo("Telemetry upload started");\n  recordSandboxOp("telemetry_upload_start", Date.now() - telemetryStart, true);\n  const workingDirStart = Date.now();\n  try {\n    fs7.mkdirSync(WORKING_DIR, { recursive: true });\n    process.chdir(WORKING_DIR);\n  } catch (error) {\n    recordSandboxOp(\n      "working_dir_setup",\n      Date.now() - workingDirStart,\n      false,\n      String(error)\n    );\n    throw new Error(\n      `Failed to create/change to working directory: ${WORKING_DIR} - ${error}`\n    );\n  }\n  recordSandboxOp("working_dir_setup", Date.now() - workingDirStart, true);\n  if (CLI_AGENT_TYPE === "codex") {\n    const homeDir = process.env.HOME ?? "/home/user";\n    const codexHome = `${homeDir}/.codex`;\n    fs7.mkdirSync(codexHome, { recursive: true });\n    process.env.CODEX_HOME = codexHome;\n    logInfo(`Codex home directory: ${codexHome}`);\n    const codexLoginStart = Date.now();\n    let codexLoginSuccess = false;\n    const apiKey = process.env.OPENAI_API_KEY ?? "";\n    if (apiKey) {\n      try {\n        execSync4("codex login --with-api-key", {\n          input: apiKey,\n          encoding: "utf-8",\n          stdio: ["pipe", "pipe", "pipe"]\n        });\n        logInfo("Codex authenticated with API key");\n        codexLoginSuccess = true;\n      } catch (error) {\n        logError(`Codex login failed: ${error}`);\n      }\n    } else {\n      logError("OPENAI_API_KEY not set");\n    }\n    recordSandboxOp(\n      "codex_login",\n      Date.now() - codexLoginStart,\n      codexLoginSuccess\n    );\n  }\n  const initDurationMs = Date.now() - initStartTime;\n  recordSandboxOp("init_total", initDurationMs, true);\n  logInfo(`\\u2713 Initialization complete (${Math.floor(initDurationMs / 1e3)}s)`);\n  logInfo("\\u25B7 Execution");\n  const execStartTime = Date.now();\n  logInfo(`Starting ${CLI_AGENT_TYPE} execution...`);\n  logInfo(`Prompt: ${PROMPT}`);\n  const useMock = process.env.USE_MOCK_CLAUDE === "true";\n  let cmd;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (useMock) {\n      throw new Error("Mock mode not supported for Codex");\n    }\n    const codexArgs = [\n      "exec",\n      "--json",\n      "--dangerously-bypass-approvals-and-sandbox",\n      "--skip-git-repo-check",\n      "-C",\n      WORKING_DIR\n    ];\n    if (OPENAI_MODEL) {\n      codexArgs.push("-m", OPENAI_MODEL);\n    }\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      codexArgs.push("resume", RESUME_SESSION_ID, PROMPT);\n    } else {\n      logInfo("Starting new session");\n      codexArgs.push(PROMPT);\n    }\n    cmd = ["codex", ...codexArgs];\n  } else {\n    const claudeArgs = [\n      "--print",\n      "--verbose",\n      "--output-format",\n      "stream-json",\n      "--dangerously-skip-permissions"\n    ];\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      claudeArgs.push("--resume", RESUME_SESSION_ID);\n    } else {\n      logInfo("Starting new session");\n    }\n    const claudeBin = useMock ? "/usr/local/bin/vm0-agent/mock-claude.mjs" : "claude";\n    if (useMock) {\n      logInfo("Using mock-claude for testing");\n    }\n    cmd = [claudeBin, ...claudeArgs, PROMPT];\n  }\n  let agentExitCode = 0;\n  const stderrLines = [];\n  let logFile = null;\n  try {\n    logFile = fs7.createWriteStream(AGENT_LOG_FILE);\n    const cmdExe = cmd[0];\n    if (!cmdExe) {\n      throw new Error("Empty command");\n    }\n    const proc = spawn(cmdExe, cmd.slice(1), {\n      stdio: ["ignore", "pipe", "pipe"]\n    });\n    const exitPromise = new Promise((resolve) => {\n      let resolved = false;\n      proc.on("error", (err) => {\n        if (!resolved) {\n          resolved = true;\n          logError(`Failed to spawn ${CLI_AGENT_TYPE}: ${err.message}`);\n          stderrLines.push(`Spawn error: ${err.message}`);\n          resolve(1);\n        }\n      });\n      proc.on("close", (code) => {\n        if (!resolved) {\n          resolved = true;\n          resolve(code ?? 1);\n        }\n      });\n    });\n    if (proc.stderr) {\n      const stderrRl = readline.createInterface({ input: proc.stderr });\n      stderrRl.on("line", (line) => {\n        stderrLines.push(line);\n        if (logFile && !logFile.destroyed) {\n          logFile.write(`[STDERR] ${line}\n`);\n        }\n      });\n    }\n    if (proc.stdout) {\n      const stdoutRl = readline.createInterface({ input: proc.stdout });\n      let eventSequence = 0;\n      for await (const line of stdoutRl) {\n        if (logFile && !logFile.destroyed) {\n          logFile.write(line + "\\n");\n        }\n        const stripped = line.trim();\n        if (!stripped) {\n          continue;\n        }\n        try {\n          const event = JSON.parse(stripped);\n          eventSequence++;\n          await sendEvent(event, eventSequence);\n          if (event.type === "result") {\n            const resultContent = event.result;\n            if (resultContent) {\n              console.log(resultContent);\n            }\n          }\n        } catch {\n          logDebug(`Non-JSON line from agent: ${stripped.slice(0, 100)}`);\n        }\n      }\n    }\n    agentExitCode = await exitPromise;\n  } catch (error) {\n    logError(`Failed to execute ${CLI_AGENT_TYPE}: ${error}`);\n    agentExitCode = 1;\n  } finally {\n    if (logFile && !logFile.destroyed) {\n      logFile.end();\n    }\n  }\n  console.log();\n  let finalExitCode = agentExitCode;\n  let errorMessage = "";\n  if (fs7.existsSync(EVENT_ERROR_FLAG)) {\n    logError("Some events failed to send, marking run as failed");\n    finalExitCode = 1;\n    errorMessage = "Some events failed to send";\n  }\n  const execDurationMs = Date.now() - execStartTime;\n  recordSandboxOp("cli_execution", execDurationMs, agentExitCode === 0);\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`\\u2713 Execution complete (${Math.floor(execDurationMs / 1e3)}s)`);\n  } else {\n    logInfo(`\\u2717 Execution failed (${Math.floor(execDurationMs / 1e3)}s)`);\n  }\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`${CLI_AGENT_TYPE} completed successfully`);\n    logInfo("\\u25B7 Checkpoint");\n    const checkpointStartTime = Date.now();\n    const checkpointSuccess = await createCheckpoint();\n    const checkpointDuration = Math.floor(\n      (Date.now() - checkpointStartTime) / 1e3\n    );\n    if (checkpointSuccess) {\n      logInfo(`\\u2713 Checkpoint complete (${checkpointDuration}s)`);\n    } else {\n      logInfo(`\\u2717 Checkpoint failed (${checkpointDuration}s)`);\n    }\n    if (!checkpointSuccess) {\n      logError("Checkpoint creation failed, marking run as failed");\n      finalExitCode = 1;\n      errorMessage = "Checkpoint creation failed";\n    }\n  } else {\n    if (agentExitCode !== 0) {\n      logInfo(`${CLI_AGENT_TYPE} failed with exit code ${agentExitCode}`);\n      if (stderrLines.length > 0) {\n        errorMessage = stderrLines.map((line) => line.trim()).join(" ");\n        logInfo(`Captured stderr: ${errorMessage}`);\n      } else {\n        errorMessage = `Agent exited with code ${agentExitCode}`;\n      }\n    }\n  }\n  return [finalExitCode, errorMessage];\n}\nasync function main() {\n  let exitCode = 1;\n  let errorMessage = "Unexpected termination";\n  try {\n    [exitCode, errorMessage] = await run();\n  } catch (error) {\n    if (error instanceof Error) {\n      exitCode = 1;\n      errorMessage = error.message;\n      logError(`Error: ${errorMessage}`);\n    } else {\n      exitCode = 1;\n      errorMessage = `Unexpected error: ${error}`;\n      logError(errorMessage);\n    }\n  } finally {\n    await cleanup(exitCode, errorMessage);\n  }\n  return exitCode;\n}\nmain().then((code) => process.exit(code)).catch((error) => {\n  console.error("Fatal error:", error);\n  process.exit(1);\n});\n';
+var RUN_AGENT_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/run-agent.ts\nimport * as fs7 from "fs";\nimport { spawn, execSync as execSync4 } from "child_process";\nimport * as readline from "readline";\n\n// src/sandbox/scripts/src/lib/common.ts\nimport * as fs from "fs";\nvar RUN_ID = process.env.VM0_RUN_ID ?? "";\nvar API_URL = process.env.VM0_API_URL ?? "";\nvar API_TOKEN = process.env.VM0_API_TOKEN ?? "";\nvar PROMPT = process.env.VM0_PROMPT ?? "";\nvar VERCEL_BYPASS = process.env.VERCEL_PROTECTION_BYPASS ?? "";\nvar RESUME_SESSION_ID = process.env.VM0_RESUME_SESSION_ID ?? "";\nvar CLI_AGENT_TYPE = process.env.CLI_AGENT_TYPE ?? "claude-code";\nvar OPENAI_MODEL = process.env.OPENAI_MODEL ?? "";\nvar WORKING_DIR = process.env.VM0_WORKING_DIR ?? "";\nvar ARTIFACT_DRIVER = process.env.VM0_ARTIFACT_DRIVER ?? "";\nvar ARTIFACT_MOUNT_PATH = process.env.VM0_ARTIFACT_MOUNT_PATH ?? "";\nvar ARTIFACT_VOLUME_NAME = process.env.VM0_ARTIFACT_VOLUME_NAME ?? "";\nvar ARTIFACT_VERSION_ID = process.env.VM0_ARTIFACT_VERSION_ID ?? "";\nvar WEBHOOK_URL = `${API_URL}/api/webhooks/agent/events`;\nvar CHECKPOINT_URL = `${API_URL}/api/webhooks/agent/checkpoints`;\nvar COMPLETE_URL = `${API_URL}/api/webhooks/agent/complete`;\nvar HEARTBEAT_URL = `${API_URL}/api/webhooks/agent/heartbeat`;\nvar TELEMETRY_URL = `${API_URL}/api/webhooks/agent/telemetry`;\nvar PROXY_URL = `${API_URL}/api/webhooks/agent/proxy`;\nvar STORAGE_PREPARE_URL = `${API_URL}/api/webhooks/agent/storages/prepare`;\nvar STORAGE_COMMIT_URL = `${API_URL}/api/webhooks/agent/storages/commit`;\nvar HEARTBEAT_INTERVAL = 60;\nvar TELEMETRY_INTERVAL = 30;\nvar HTTP_CONNECT_TIMEOUT = 10;\nvar HTTP_MAX_TIME = 30;\nvar HTTP_MAX_TIME_UPLOAD = 60;\nvar HTTP_MAX_RETRIES = 3;\nvar SESSION_ID_FILE = `/tmp/vm0-session-${RUN_ID}.txt`;\nvar SESSION_HISTORY_PATH_FILE = `/tmp/vm0-session-history-${RUN_ID}.txt`;\nvar EVENT_ERROR_FLAG = `/tmp/vm0-event-error-${RUN_ID}`;\nvar SYSTEM_LOG_FILE = `/tmp/vm0-main-${RUN_ID}.log`;\nvar AGENT_LOG_FILE = `/tmp/vm0-agent-${RUN_ID}.log`;\nvar METRICS_LOG_FILE = `/tmp/vm0-metrics-${RUN_ID}.jsonl`;\nvar NETWORK_LOG_FILE = `/tmp/vm0-network-${RUN_ID}.jsonl`;\nvar TELEMETRY_LOG_POS_FILE = `/tmp/vm0-telemetry-log-pos-${RUN_ID}.txt`;\nvar TELEMETRY_METRICS_POS_FILE = `/tmp/vm0-telemetry-metrics-pos-${RUN_ID}.txt`;\nvar TELEMETRY_NETWORK_POS_FILE = `/tmp/vm0-telemetry-network-pos-${RUN_ID}.txt`;\nvar TELEMETRY_SANDBOX_OPS_POS_FILE = `/tmp/vm0-telemetry-sandbox-ops-pos-${RUN_ID}.txt`;\nvar SANDBOX_OPS_LOG_FILE = `/tmp/vm0-sandbox-ops-${RUN_ID}.jsonl`;\nvar METRICS_INTERVAL = 5;\nfunction validateConfig() {\n  if (!WORKING_DIR) {\n    throw new Error("VM0_WORKING_DIR is required but not set");\n  }\n  return true;\n}\nfunction recordSandboxOp(actionType, durationMs, success, error) {\n  const entry = {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    action_type: actionType,\n    duration_ms: durationMs,\n    success\n  };\n  if (error) {\n    entry.error = error;\n  }\n  fs.appendFileSync(SANDBOX_OPS_LOG_FILE, JSON.stringify(entry) + "\\n");\n}\n\n// src/sandbox/scripts/src/lib/log.ts\nvar SCRIPT_NAME = process.env.LOG_SCRIPT_NAME ?? "run-agent";\nvar DEBUG_MODE = process.env.VM0_DEBUG === "1";\nfunction timestamp() {\n  return (/* @__PURE__ */ new Date()).toISOString().replace(/\\.\\d{3}Z$/, "Z");\n}\nfunction logInfo(msg) {\n  console.error(`[${timestamp()}] [INFO] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logWarn(msg) {\n  console.error(`[${timestamp()}] [WARN] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logError(msg) {\n  console.error(`[${timestamp()}] [ERROR] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logDebug(msg) {\n  if (DEBUG_MODE) {\n    console.error(`[${timestamp()}] [DEBUG] [sandbox:${SCRIPT_NAME}] ${msg}`);\n  }\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nimport * as fs2 from "fs";\n\n// src/sandbox/scripts/src/lib/http-client.ts\nimport { execSync } from "child_process";\nfunction sleep(ms) {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\nasync function httpPostJson(url, data, maxRetries = HTTP_MAX_RETRIES) {\n  const headers = {\n    "Content-Type": "application/json",\n    Authorization: `Bearer ${API_TOKEN}`\n  };\n  if (VERCEL_BYPASS) {\n    headers["x-vercel-protection-bypass"] = VERCEL_BYPASS;\n  }\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP POST attempt ${attempt}/${maxRetries} to ${url}`);\n    try {\n      const controller = new AbortController();\n      const timeoutId = setTimeout(\n        () => controller.abort(),\n        HTTP_MAX_TIME * 1e3\n      );\n      const response = await fetch(url, {\n        method: "POST",\n        headers,\n        body: JSON.stringify(data),\n        signal: controller.signal\n      });\n      clearTimeout(timeoutId);\n      if (response.ok) {\n        const text = await response.text();\n        if (text) {\n          return JSON.parse(text);\n        }\n        return {};\n      }\n      logWarn(\n        `HTTP POST failed (attempt ${attempt}/${maxRetries}): HTTP ${response.status}`\n      );\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("abort")) {\n        logWarn(`HTTP POST failed (attempt ${attempt}/${maxRetries}): Timeout`);\n      } else {\n        logWarn(\n          `HTTP POST failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP POST failed after ${maxRetries} attempts to ${url}`);\n  return null;\n}\nasync function httpPutPresigned(presignedUrl, filePath, contentType = "application/octet-stream", maxRetries = HTTP_MAX_RETRIES) {\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP PUT presigned attempt ${attempt}/${maxRetries}`);\n    try {\n      const curlCmd = [\n        "curl",\n        "-f",\n        "-X",\n        "PUT",\n        "-H",\n        `Content-Type: ${contentType}`,\n        "--data-binary",\n        `@${filePath}`,\n        "--connect-timeout",\n        String(HTTP_CONNECT_TIMEOUT),\n        "--max-time",\n        String(HTTP_MAX_TIME_UPLOAD),\n        "--silent",\n        `"${presignedUrl}"`\n      ].join(" ");\n      execSync(curlCmd, {\n        timeout: HTTP_MAX_TIME_UPLOAD * 1e3,\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      return true;\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("ETIMEDOUT") || errorMsg.includes("timeout")) {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): Timeout`\n        );\n      } else {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP PUT presigned failed after ${maxRetries} attempts`);\n  return false;\n}\n\n// src/sandbox/scripts/src/lib/secret-masker.ts\nvar MASK_PLACEHOLDER = "***";\nvar MIN_SECRET_LENGTH = 5;\nvar _masker = null;\nvar SecretMasker = class {\n  patterns;\n  /**\n   * Initialize masker with secret values.\n   *\n   * @param secretValues - List of secret values to mask\n   */\n  constructor(secretValues) {\n    this.patterns = /* @__PURE__ */ new Set();\n    for (const secret of secretValues) {\n      if (!secret || secret.length < MIN_SECRET_LENGTH) {\n        continue;\n      }\n      this.patterns.add(secret);\n      try {\n        const b64 = Buffer.from(secret).toString("base64");\n        if (b64.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(b64);\n        }\n      } catch {\n      }\n      try {\n        const urlEnc = encodeURIComponent(secret);\n        if (urlEnc !== secret && urlEnc.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(urlEnc);\n        }\n      } catch {\n      }\n    }\n  }\n  /**\n   * Recursively mask all occurrences of secrets in the data.\n   *\n   * @param data - Data to mask (string, list, dict, or primitive)\n   * @returns Masked data with the same structure\n   */\n  mask(data) {\n    return this.deepMask(data);\n  }\n  deepMask(data) {\n    if (typeof data === "string") {\n      let result = data;\n      for (const pattern of this.patterns) {\n        result = result.split(pattern).join(MASK_PLACEHOLDER);\n      }\n      return result;\n    }\n    if (Array.isArray(data)) {\n      return data.map((item) => this.deepMask(item));\n    }\n    if (data !== null && typeof data === "object") {\n      const result = {};\n      for (const [key, value] of Object.entries(\n        data\n      )) {\n        result[key] = this.deepMask(value);\n      }\n      return result;\n    }\n    return data;\n  }\n};\nfunction createMasker() {\n  const secretValuesStr = process.env.VM0_SECRET_VALUES ?? "";\n  if (!secretValuesStr) {\n    return new SecretMasker([]);\n  }\n  const secretValues = [];\n  for (const encodedValue of secretValuesStr.split(",")) {\n    const trimmed = encodedValue.trim();\n    if (trimmed) {\n      try {\n        const decoded = Buffer.from(trimmed, "base64").toString("utf-8");\n        if (decoded) {\n          secretValues.push(decoded);\n        }\n      } catch {\n      }\n    }\n  }\n  return new SecretMasker(secretValues);\n}\nfunction getMasker() {\n  if (_masker === null) {\n    _masker = createMasker();\n  }\n  return _masker;\n}\nfunction maskData(data) {\n  return getMasker().mask(data);\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nasync function sendEvent(event, sequenceNumber) {\n  const eventType = event.type ?? "";\n  const eventSubtype = event.subtype ?? "";\n  let sessionId = null;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (eventType === "thread.started") {\n      sessionId = event.thread_id ?? "";\n    }\n  } else {\n    if (eventType === "system" && eventSubtype === "init") {\n      sessionId = event.session_id ?? "";\n    }\n  }\n  if (sessionId && !fs2.existsSync(SESSION_ID_FILE)) {\n    logInfo(`Captured session ID: ${sessionId}`);\n    fs2.writeFileSync(SESSION_ID_FILE, sessionId);\n    const homeDir = process.env.HOME ?? "/home/user";\n    let sessionHistoryPath;\n    if (CLI_AGENT_TYPE === "codex") {\n      const codexHome = process.env.CODEX_HOME ?? `${homeDir}/.codex`;\n      sessionHistoryPath = `CODEX_SEARCH:${codexHome}/sessions:${sessionId}`;\n    } else {\n      const projectName = WORKING_DIR.replace(/^\\//, "").replace(/\\//g, "-");\n      sessionHistoryPath = `${homeDir}/.claude/projects/-${projectName}/${sessionId}.jsonl`;\n    }\n    fs2.writeFileSync(SESSION_HISTORY_PATH_FILE, sessionHistoryPath);\n    logInfo(`Session history will be at: ${sessionHistoryPath}`);\n  }\n  const eventWithSequence = {\n    ...event,\n    sequenceNumber\n  };\n  const maskedEvent = maskData(eventWithSequence);\n  const payload = {\n    runId: RUN_ID,\n    events: [maskedEvent]\n  };\n  const result = await httpPostJson(WEBHOOK_URL, payload);\n  if (result === null) {\n    logError("Failed to send event after retries");\n    fs2.writeFileSync(EVENT_ERROR_FLAG, "1");\n    return false;\n  }\n  return true;\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nimport * as fs4 from "fs";\nimport * as path2 from "path";\n\n// src/sandbox/scripts/src/lib/direct-upload.ts\nimport * as fs3 from "fs";\nimport * as path from "path";\nimport * as crypto from "crypto";\nimport { execSync as execSync2 } from "child_process";\nfunction computeFileHash(filePath) {\n  const hash = crypto.createHash("sha256");\n  const buffer = fs3.readFileSync(filePath);\n  hash.update(buffer);\n  return hash.digest("hex");\n}\nfunction collectFileMetadata(dirPath) {\n  const files = [];\n  function walkDir(currentPath, relativePath) {\n    const items = fs3.readdirSync(currentPath);\n    for (const item of items) {\n      if (item === ".git" || item === ".vm0") {\n        continue;\n      }\n      const fullPath = path.join(currentPath, item);\n      const relPath = relativePath ? path.join(relativePath, item) : item;\n      const stat = fs3.statSync(fullPath);\n      if (stat.isDirectory()) {\n        walkDir(fullPath, relPath);\n      } else if (stat.isFile()) {\n        try {\n          const fileHash = computeFileHash(fullPath);\n          files.push({\n            path: relPath,\n            hash: fileHash,\n            size: stat.size\n          });\n        } catch (error) {\n          logWarn(`Could not process file ${relPath}: ${error}`);\n        }\n      }\n    }\n  }\n  walkDir(dirPath, "");\n  return files;\n}\nfunction createArchive(dirPath, tarPath) {\n  try {\n    execSync2(\n      `tar -czf "${tarPath}" --exclude=\'.git\' --exclude=\'.vm0\' -C "${dirPath}" .`,\n      { stdio: ["pipe", "pipe", "pipe"] }\n    );\n    return true;\n  } catch (error) {\n    logError(`Failed to create archive: ${error}`);\n    return false;\n  }\n}\nfunction createManifest(files, manifestPath) {\n  try {\n    const manifest = {\n      version: 1,\n      files,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    fs3.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));\n    return true;\n  } catch (error) {\n    logError(`Failed to create manifest: ${error}`);\n    return false;\n  }\n}\nasync function createDirectUploadSnapshot(mountPath, storageName, storageType = "artifact", runId, message) {\n  logInfo(\n    `Creating direct upload snapshot for \'${storageName}\' (type: ${storageType})`\n  );\n  logInfo("Computing file hashes...");\n  const hashStart = Date.now();\n  const files = collectFileMetadata(mountPath);\n  recordSandboxOp("artifact_hash_compute", Date.now() - hashStart, true);\n  logInfo(`Found ${files.length} files`);\n  if (files.length === 0) {\n    logInfo("No files to upload, creating empty version");\n  }\n  logInfo("Calling prepare endpoint...");\n  const prepareStart = Date.now();\n  const preparePayload = {\n    storageName,\n    storageType,\n    files\n  };\n  if (runId) {\n    preparePayload.runId = runId;\n  }\n  const prepareResponse = await httpPostJson(\n    STORAGE_PREPARE_URL,\n    preparePayload\n  );\n  if (!prepareResponse) {\n    logError("Failed to call prepare endpoint");\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  const versionId = prepareResponse.versionId;\n  if (!versionId) {\n    logError(`Invalid prepare response: ${JSON.stringify(prepareResponse)}`);\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, true);\n  if (prepareResponse.existing) {\n    logInfo(`Version already exists (deduplicated): ${versionId.slice(0, 8)}`);\n    logInfo("Updating HEAD pointer...");\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse || !commitResponse.success) {\n      logError(`Failed to update HEAD: ${JSON.stringify(commitResponse)}`);\n      return null;\n    }\n    return { versionId, deduplicated: true };\n  }\n  const uploads = prepareResponse.uploads;\n  if (!uploads) {\n    logError("No upload URLs in prepare response");\n    return null;\n  }\n  const archiveInfo = uploads.archive;\n  const manifestInfo = uploads.manifest;\n  if (!archiveInfo || !manifestInfo) {\n    logError("Missing archive or manifest upload info");\n    return null;\n  }\n  const tempDir = fs3.mkdtempSync(`/tmp/direct-upload-${storageName}-`);\n  try {\n    logInfo("Creating archive...");\n    const archiveStart = Date.now();\n    const archivePath = path.join(tempDir, "archive.tar.gz");\n    if (!createArchive(mountPath, archivePath)) {\n      logError("Failed to create archive");\n      recordSandboxOp(\n        "artifact_archive_create",\n        Date.now() - archiveStart,\n        false\n      );\n      return null;\n    }\n    recordSandboxOp("artifact_archive_create", Date.now() - archiveStart, true);\n    logInfo("Creating manifest...");\n    const manifestPath = path.join(tempDir, "manifest.json");\n    if (!createManifest(files, manifestPath)) {\n      logError("Failed to create manifest");\n      return null;\n    }\n    logInfo("Uploading archive to S3...");\n    const s3UploadStart = Date.now();\n    if (!await httpPutPresigned(\n      archiveInfo.presignedUrl,\n      archivePath,\n      "application/gzip"\n    )) {\n      logError("Failed to upload archive to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    logInfo("Uploading manifest to S3...");\n    if (!await httpPutPresigned(\n      manifestInfo.presignedUrl,\n      manifestPath,\n      "application/json"\n    )) {\n      logError("Failed to upload manifest to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, true);\n    logInfo("Calling commit endpoint...");\n    const commitStart = Date.now();\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    if (message) {\n      commitPayload.message = message;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse) {\n      logError("Failed to call commit endpoint");\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    if (!commitResponse.success) {\n      logError(`Commit failed: ${JSON.stringify(commitResponse)}`);\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_commit_api", Date.now() - commitStart, true);\n    logInfo(`Direct upload snapshot created: ${versionId.slice(0, 8)}`);\n    return { versionId };\n  } finally {\n    try {\n      fs3.rmSync(tempDir, { recursive: true, force: true });\n    } catch {\n    }\n  }\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nfunction findJsonlFiles(dir) {\n  const files = [];\n  function walk(currentDir) {\n    try {\n      const items = fs4.readdirSync(currentDir);\n      for (const item of items) {\n        const fullPath = path2.join(currentDir, item);\n        const stat = fs4.statSync(fullPath);\n        if (stat.isDirectory()) {\n          walk(fullPath);\n        } else if (item.endsWith(".jsonl")) {\n          files.push(fullPath);\n        }\n      }\n    } catch {\n    }\n  }\n  walk(dir);\n  return files;\n}\nfunction findCodexSessionFile(sessionsDir, sessionId) {\n  const files = findJsonlFiles(sessionsDir);\n  logInfo(`Searching for Codex session ${sessionId} in ${files.length} files`);\n  for (const filepath of files) {\n    const filename = path2.basename(filepath);\n    if (filename.includes(sessionId) || filename.replace(/-/g, "").includes(sessionId.replace(/-/g, ""))) {\n      logInfo(`Found Codex session file: ${filepath}`);\n      return filepath;\n    }\n  }\n  if (files.length > 0) {\n    files.sort((a, b) => {\n      const statA = fs4.statSync(a);\n      const statB = fs4.statSync(b);\n      return statB.mtimeMs - statA.mtimeMs;\n    });\n    const mostRecent = files[0] ?? null;\n    if (mostRecent) {\n      logInfo(\n        `Session ID not found in filenames, using most recent: ${mostRecent}`\n      );\n    }\n    return mostRecent;\n  }\n  return null;\n}\nasync function createCheckpoint() {\n  const checkpointStart = Date.now();\n  logInfo("Creating checkpoint...");\n  const sessionIdStart = Date.now();\n  if (!fs4.existsSync(SESSION_ID_FILE)) {\n    logError("No session ID found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_id_read",\n      Date.now() - sessionIdStart,\n      false,\n      "Session ID file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const cliAgentSessionId = fs4.readFileSync(SESSION_ID_FILE, "utf-8").trim();\n  recordSandboxOp("session_id_read", Date.now() - sessionIdStart, true);\n  const sessionHistoryStart = Date.now();\n  if (!fs4.existsSync(SESSION_HISTORY_PATH_FILE)) {\n    logError("No session history path found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history path file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const sessionHistoryPathRaw = fs4.readFileSync(SESSION_HISTORY_PATH_FILE, "utf-8").trim();\n  let sessionHistoryPath;\n  if (sessionHistoryPathRaw.startsWith("CODEX_SEARCH:")) {\n    const parts = sessionHistoryPathRaw.split(":");\n    if (parts.length !== 3) {\n      logError(`Invalid Codex search marker format: ${sessionHistoryPathRaw}`);\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Invalid Codex search marker"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const sessionsDir = parts[1] ?? "";\n    const codexSessionId = parts[2] ?? "";\n    logInfo(`Searching for Codex session in ${sessionsDir}`);\n    const foundPath = findCodexSessionFile(sessionsDir, codexSessionId);\n    if (!foundPath) {\n      logError(\n        `Could not find Codex session file for ${codexSessionId} in ${sessionsDir}`\n      );\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Codex session file not found"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    sessionHistoryPath = foundPath;\n  } else {\n    sessionHistoryPath = sessionHistoryPathRaw;\n  }\n  if (!fs4.existsSync(sessionHistoryPath)) {\n    logError(\n      `Session history file not found at ${sessionHistoryPath}, checkpoint creation failed`\n    );\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  let cliAgentSessionHistory;\n  try {\n    cliAgentSessionHistory = fs4.readFileSync(sessionHistoryPath, "utf-8");\n  } catch (error) {\n    logError(`Failed to read session history: ${error}`);\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      String(error)\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  if (!cliAgentSessionHistory.trim()) {\n    logError("Session history is empty, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history empty"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const lineCount = cliAgentSessionHistory.trim().split("\\n").length;\n  logInfo(`Session history loaded (${lineCount} lines)`);\n  recordSandboxOp(\n    "session_history_read",\n    Date.now() - sessionHistoryStart,\n    true\n  );\n  let artifactSnapshot = null;\n  if (ARTIFACT_DRIVER && ARTIFACT_VOLUME_NAME) {\n    logInfo(`Processing artifact with driver: ${ARTIFACT_DRIVER}`);\n    if (ARTIFACT_DRIVER !== "vas") {\n      logError(\n        `Unknown artifact driver: ${ARTIFACT_DRIVER} (only \'vas\' is supported)`\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    logInfo(\n      `Creating VAS snapshot for artifact \'${ARTIFACT_VOLUME_NAME}\' at ${ARTIFACT_MOUNT_PATH}`\n    );\n    logInfo("Using direct S3 upload...");\n    const snapshot = await createDirectUploadSnapshot(\n      ARTIFACT_MOUNT_PATH,\n      ARTIFACT_VOLUME_NAME,\n      "artifact",\n      RUN_ID,\n      `Checkpoint from run ${RUN_ID}`\n    );\n    if (!snapshot) {\n      logError("Failed to create VAS snapshot for artifact");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const artifactVersion = snapshot.versionId;\n    if (!artifactVersion) {\n      logError("Failed to extract versionId from snapshot");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    artifactSnapshot = {\n      artifactName: ARTIFACT_VOLUME_NAME,\n      artifactVersion\n    };\n    logInfo(\n      `VAS artifact snapshot created: ${ARTIFACT_VOLUME_NAME}@${artifactVersion}`\n    );\n  } else {\n    logInfo(\n      "No artifact configured, creating checkpoint without artifact snapshot"\n    );\n  }\n  logInfo("Calling checkpoint API...");\n  const checkpointPayload = {\n    runId: RUN_ID,\n    cliAgentType: CLI_AGENT_TYPE,\n    cliAgentSessionId,\n    cliAgentSessionHistory\n  };\n  if (artifactSnapshot) {\n    checkpointPayload.artifactSnapshot = artifactSnapshot;\n  }\n  const apiCallStart = Date.now();\n  const result = await httpPostJson(\n    CHECKPOINT_URL,\n    checkpointPayload\n  );\n  if (result && result.checkpointId) {\n    const checkpointId = result.checkpointId;\n    logInfo(`Checkpoint created successfully: ${checkpointId}`);\n    recordSandboxOp("checkpoint_api_call", Date.now() - apiCallStart, true);\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, true);\n    return true;\n  } else {\n    logError(\n      `Checkpoint API returned invalid response: ${JSON.stringify(result)}`\n    );\n    recordSandboxOp(\n      "checkpoint_api_call",\n      Date.now() - apiCallStart,\n      false,\n      "Invalid API response"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n}\n\n// src/sandbox/scripts/src/lib/metrics.ts\nimport * as fs5 from "fs";\nimport { execSync as execSync3 } from "child_process";\nvar shutdownRequested = false;\nfunction getCpuPercent() {\n  try {\n    const content = fs5.readFileSync("/proc/stat", "utf-8");\n    const line = content.split("\\n")[0];\n    if (!line) {\n      return 0;\n    }\n    const parts = line.split(/\\s+/);\n    if (parts[0] !== "cpu") {\n      return 0;\n    }\n    const values = parts.slice(1).map((x) => parseInt(x, 10));\n    const idleVal = values[3];\n    const iowaitVal = values[4];\n    if (idleVal === void 0 || iowaitVal === void 0) {\n      return 0;\n    }\n    const idle = idleVal + iowaitVal;\n    const total = values.reduce((a, b) => a + b, 0);\n    if (total === 0) {\n      return 0;\n    }\n    const cpuPercent = 100 * (1 - idle / total);\n    return Math.round(cpuPercent * 100) / 100;\n  } catch (error) {\n    logDebug(`Failed to get CPU percent: ${error}`);\n    return 0;\n  }\n}\nfunction getMemoryInfo() {\n  try {\n    const result = execSync3("free -b", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    for (const line of lines) {\n      if (line.startsWith("Mem:")) {\n        const parts = line.split(/\\s+/);\n        const totalStr = parts[1];\n        const usedStr = parts[2];\n        if (!totalStr || !usedStr) {\n          return [0, 0];\n        }\n        const total = parseInt(totalStr, 10);\n        const used = parseInt(usedStr, 10);\n        return [used, total];\n      }\n    }\n    return [0, 0];\n  } catch (error) {\n    logDebug(`Failed to get memory info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction getDiskInfo() {\n  try {\n    const result = execSync3("df -B1 /", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    if (lines.length < 2) {\n      return [0, 0];\n    }\n    const dataLine = lines[1];\n    if (!dataLine) {\n      return [0, 0];\n    }\n    const parts = dataLine.split(/\\s+/);\n    const totalStr = parts[1];\n    const usedStr = parts[2];\n    if (!totalStr || !usedStr) {\n      return [0, 0];\n    }\n    const total = parseInt(totalStr, 10);\n    const used = parseInt(usedStr, 10);\n    return [used, total];\n  } catch (error) {\n    logDebug(`Failed to get disk info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction collectMetrics() {\n  const cpu = getCpuPercent();\n  const [memUsed, memTotal] = getMemoryInfo();\n  const [diskUsed, diskTotal] = getDiskInfo();\n  return {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    cpu,\n    mem_used: memUsed,\n    mem_total: memTotal,\n    disk_used: diskUsed,\n    disk_total: diskTotal\n  };\n}\nfunction metricsCollectorLoop() {\n  logInfo(`Metrics collector started, writing to ${METRICS_LOG_FILE}`);\n  const writeMetrics = () => {\n    if (shutdownRequested) {\n      logInfo("Metrics collector stopped");\n      return;\n    }\n    try {\n      const metrics = collectMetrics();\n      fs5.appendFileSync(METRICS_LOG_FILE, JSON.stringify(metrics) + "\\n");\n      logDebug(\n        `Metrics collected: cpu=${metrics.cpu}%, mem=${metrics.mem_used}/${metrics.mem_total}`\n      );\n    } catch (error) {\n      logError(`Failed to collect/write metrics: ${error}`);\n    }\n    setTimeout(writeMetrics, METRICS_INTERVAL * 1e3);\n  };\n  writeMetrics();\n}\nfunction startMetricsCollector() {\n  shutdownRequested = false;\n  setTimeout(metricsCollectorLoop, 0);\n}\nfunction stopMetricsCollector() {\n  shutdownRequested = true;\n}\n\n// src/sandbox/scripts/src/lib/upload-telemetry.ts\nimport * as fs6 from "fs";\nvar shutdownRequested2 = false;\nfunction readFileFromPosition(filePath, posFile) {\n  let lastPos = 0;\n  if (fs6.existsSync(posFile)) {\n    try {\n      const content = fs6.readFileSync(posFile, "utf-8").trim();\n      lastPos = parseInt(content, 10) || 0;\n    } catch {\n      lastPos = 0;\n    }\n  }\n  let newContent = "";\n  let newPos = lastPos;\n  if (fs6.existsSync(filePath)) {\n    try {\n      const fd = fs6.openSync(filePath, "r");\n      const stats = fs6.fstatSync(fd);\n      const bufferSize = stats.size - lastPos;\n      if (bufferSize > 0) {\n        const buffer = Buffer.alloc(bufferSize);\n        fs6.readSync(fd, buffer, 0, bufferSize, lastPos);\n        newContent = buffer.toString("utf-8");\n        newPos = stats.size;\n      }\n      fs6.closeSync(fd);\n    } catch (error) {\n      logDebug(`Failed to read ${filePath}: ${error}`);\n    }\n  }\n  return [newContent, newPos];\n}\nfunction savePosition(posFile, position) {\n  try {\n    fs6.writeFileSync(posFile, String(position));\n  } catch (error) {\n    logDebug(`Failed to save position to ${posFile}: ${error}`);\n  }\n}\nfunction readJsonlFromPosition(filePath, posFile) {\n  const [content, newPos] = readFileFromPosition(filePath, posFile);\n  const entries = [];\n  if (content) {\n    for (const line of content.trim().split("\\n")) {\n      if (line) {\n        try {\n          entries.push(JSON.parse(line));\n        } catch {\n        }\n      }\n    }\n  }\n  return [entries, newPos];\n}\nfunction readMetricsFromPosition(posFile) {\n  return readJsonlFromPosition(METRICS_LOG_FILE, posFile);\n}\nfunction readNetworkLogsFromPosition(posFile) {\n  return readJsonlFromPosition(NETWORK_LOG_FILE, posFile);\n}\nfunction readSandboxOpsFromPosition(posFile) {\n  return readJsonlFromPosition(SANDBOX_OPS_LOG_FILE, posFile);\n}\nasync function uploadTelemetry() {\n  const [systemLog, logPos] = readFileFromPosition(\n    SYSTEM_LOG_FILE,\n    TELEMETRY_LOG_POS_FILE\n  );\n  const [metrics, metricsPos] = readMetricsFromPosition(\n    TELEMETRY_METRICS_POS_FILE\n  );\n  const [networkLogs, networkPos] = readNetworkLogsFromPosition(\n    TELEMETRY_NETWORK_POS_FILE\n  );\n  const [sandboxOps, sandboxOpsPos] = readSandboxOpsFromPosition(\n    TELEMETRY_SANDBOX_OPS_POS_FILE\n  );\n  if (!systemLog && metrics.length === 0 && networkLogs.length === 0 && sandboxOps.length === 0) {\n    logDebug("No new telemetry data to upload");\n    return true;\n  }\n  const maskedSystemLog = systemLog ? maskData(systemLog) : "";\n  const maskedNetworkLogs = networkLogs.length > 0 ? maskData(networkLogs) : [];\n  const payload = {\n    runId: RUN_ID,\n    systemLog: maskedSystemLog,\n    metrics,\n    // Metrics don\'t contain secrets (just numbers)\n    networkLogs: maskedNetworkLogs,\n    sandboxOperations: sandboxOps\n    // Sandbox ops don\'t contain secrets (just timing data)\n  };\n  logDebug(\n    `Uploading telemetry: ${systemLog.length} bytes log, ${metrics.length} metrics, ${networkLogs.length} network logs, ${sandboxOps.length} sandbox ops`\n  );\n  const result = await httpPostJson(TELEMETRY_URL, payload, 1);\n  if (result) {\n    savePosition(TELEMETRY_LOG_POS_FILE, logPos);\n    savePosition(TELEMETRY_METRICS_POS_FILE, metricsPos);\n    savePosition(TELEMETRY_NETWORK_POS_FILE, networkPos);\n    savePosition(TELEMETRY_SANDBOX_OPS_POS_FILE, sandboxOpsPos);\n    logDebug(\n      `Telemetry uploaded successfully: ${result.id ?? "unknown"}`\n    );\n    return true;\n  } else {\n    logWarn("Failed to upload telemetry (will retry next interval)");\n    return false;\n  }\n}\nasync function telemetryUploadLoop() {\n  logInfo(`Telemetry upload started (interval: ${TELEMETRY_INTERVAL}s)`);\n  const runUpload = async () => {\n    if (shutdownRequested2) {\n      logInfo("Telemetry upload stopped");\n      return;\n    }\n    try {\n      await uploadTelemetry();\n    } catch (error) {\n      logError(`Telemetry upload error: ${error}`);\n    }\n    setTimeout(() => void runUpload(), TELEMETRY_INTERVAL * 1e3);\n  };\n  await runUpload();\n}\nfunction startTelemetryUpload() {\n  shutdownRequested2 = false;\n  setTimeout(() => void telemetryUploadLoop(), 0);\n}\nfunction stopTelemetryUpload() {\n  shutdownRequested2 = true;\n}\nasync function finalTelemetryUpload() {\n  logInfo("Performing final telemetry upload...");\n  return uploadTelemetry();\n}\n\n// src/sandbox/scripts/src/run-agent.ts\nvar shutdownRequested3 = false;\nfunction heartbeatLoop() {\n  const sendHeartbeat = async () => {\n    if (shutdownRequested3) {\n      return;\n    }\n    try {\n      if (await httpPostJson(HEARTBEAT_URL, { runId: RUN_ID })) {\n        logInfo("Heartbeat sent");\n      } else {\n        logWarn("Heartbeat failed");\n      }\n    } catch (error) {\n      logWarn(`Heartbeat error: ${error}`);\n    }\n    setTimeout(() => {\n      sendHeartbeat().catch(() => {\n      });\n    }, HEARTBEAT_INTERVAL * 1e3);\n  };\n  sendHeartbeat().catch(() => {\n  });\n}\nasync function cleanup(exitCode, errorMessage) {\n  logInfo("\\u25B7 Cleanup");\n  const telemetryStart = Date.now();\n  let telemetrySuccess = true;\n  try {\n    await finalTelemetryUpload();\n  } catch (error) {\n    telemetrySuccess = false;\n    logError(`Final telemetry upload failed: ${error}`);\n  }\n  recordSandboxOp(\n    "final_telemetry_upload",\n    Date.now() - telemetryStart,\n    telemetrySuccess\n  );\n  logInfo(`Calling complete API with exitCode=${exitCode}`);\n  const completePayload = {\n    runId: RUN_ID,\n    exitCode\n  };\n  if (errorMessage) {\n    completePayload.error = errorMessage;\n  }\n  const completeStart = Date.now();\n  let completeSuccess = false;\n  try {\n    if (await httpPostJson(COMPLETE_URL, completePayload)) {\n      logInfo("Complete API called successfully");\n      completeSuccess = true;\n    } else {\n      logError("Failed to call complete API (sandbox may not be cleaned up)");\n    }\n  } catch (error) {\n    logError(`Complete API call failed: ${error}`);\n  }\n  recordSandboxOp(\n    "complete_api_call",\n    Date.now() - completeStart,\n    completeSuccess\n  );\n  shutdownRequested3 = true;\n  stopMetricsCollector();\n  stopTelemetryUpload();\n  logInfo("Background processes stopped");\n  if (exitCode === 0) {\n    logInfo("\\u2713 Sandbox finished successfully");\n  } else {\n    logInfo(`\\u2717 Sandbox failed (exit code ${exitCode})`);\n  }\n}\nasync function run() {\n  validateConfig();\n  logInfo(`\\u25B6 VM0 Sandbox ${RUN_ID}`);\n  logInfo("\\u25B7 Initialization");\n  const initStartTime = Date.now();\n  logInfo(`Working directory: ${WORKING_DIR}`);\n  const heartbeatStart = Date.now();\n  heartbeatLoop();\n  logInfo("Heartbeat started");\n  recordSandboxOp("heartbeat_start", Date.now() - heartbeatStart, true);\n  const metricsStart = Date.now();\n  startMetricsCollector();\n  logInfo("Metrics collector started");\n  recordSandboxOp("metrics_collector_start", Date.now() - metricsStart, true);\n  const telemetryStart = Date.now();\n  startTelemetryUpload();\n  logInfo("Telemetry upload started");\n  recordSandboxOp("telemetry_upload_start", Date.now() - telemetryStart, true);\n  const workingDirStart = Date.now();\n  try {\n    fs7.mkdirSync(WORKING_DIR, { recursive: true });\n    process.chdir(WORKING_DIR);\n  } catch (error) {\n    recordSandboxOp(\n      "working_dir_setup",\n      Date.now() - workingDirStart,\n      false,\n      String(error)\n    );\n    throw new Error(\n      `Failed to create/change to working directory: ${WORKING_DIR} - ${error}`\n    );\n  }\n  recordSandboxOp("working_dir_setup", Date.now() - workingDirStart, true);\n  if (CLI_AGENT_TYPE === "codex") {\n    const homeDir = process.env.HOME ?? "/home/user";\n    const codexHome = `${homeDir}/.codex`;\n    fs7.mkdirSync(codexHome, { recursive: true });\n    process.env.CODEX_HOME = codexHome;\n    logInfo(`Codex home directory: ${codexHome}`);\n    const codexLoginStart = Date.now();\n    let codexLoginSuccess = false;\n    const apiKey = process.env.OPENAI_API_KEY ?? "";\n    if (apiKey) {\n      try {\n        execSync4("codex login --with-api-key", {\n          input: apiKey,\n          encoding: "utf-8",\n          stdio: ["pipe", "pipe", "pipe"]\n        });\n        logInfo("Codex authenticated with API key");\n        codexLoginSuccess = true;\n      } catch (error) {\n        logError(`Codex login failed: ${error}`);\n      }\n    } else {\n      logError("OPENAI_API_KEY not set");\n    }\n    recordSandboxOp(\n      "codex_login",\n      Date.now() - codexLoginStart,\n      codexLoginSuccess\n    );\n  }\n  const initDurationMs = Date.now() - initStartTime;\n  recordSandboxOp("init_total", initDurationMs, true);\n  logInfo(`\\u2713 Initialization complete (${Math.floor(initDurationMs / 1e3)}s)`);\n  logInfo("\\u25B7 Execution");\n  const execStartTime = Date.now();\n  logInfo(`Starting ${CLI_AGENT_TYPE} execution...`);\n  logInfo(`Prompt: ${PROMPT}`);\n  const useMock = process.env.USE_MOCK_CLAUDE === "true";\n  let cmd;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (useMock) {\n      throw new Error("Mock mode not supported for Codex");\n    }\n    const codexArgs = [\n      "exec",\n      "--json",\n      "--dangerously-bypass-approvals-and-sandbox",\n      "--skip-git-repo-check",\n      "-C",\n      WORKING_DIR\n    ];\n    if (OPENAI_MODEL) {\n      codexArgs.push("-m", OPENAI_MODEL);\n    }\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      codexArgs.push("resume", RESUME_SESSION_ID, PROMPT);\n    } else {\n      logInfo("Starting new session");\n      codexArgs.push(PROMPT);\n    }\n    cmd = ["codex", ...codexArgs];\n  } else {\n    const claudeArgs = [\n      "--print",\n      "--verbose",\n      "--output-format",\n      "stream-json",\n      "--dangerously-skip-permissions"\n    ];\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      claudeArgs.push("--resume", RESUME_SESSION_ID);\n    } else {\n      logInfo("Starting new session");\n    }\n    const claudeBin = useMock ? "/usr/local/bin/vm0-agent/mock-claude.mjs" : "claude";\n    if (useMock) {\n      logInfo("Using mock-claude for testing");\n    }\n    cmd = [claudeBin, ...claudeArgs, PROMPT];\n  }\n  let agentExitCode = 0;\n  const stderrLines = [];\n  let logFile = null;\n  try {\n    logFile = fs7.createWriteStream(AGENT_LOG_FILE);\n    const cmdExe = cmd[0];\n    if (!cmdExe) {\n      throw new Error("Empty command");\n    }\n    const proc = spawn(cmdExe, cmd.slice(1), {\n      stdio: ["ignore", "pipe", "pipe"]\n    });\n    const exitPromise = new Promise((resolve) => {\n      let resolved = false;\n      proc.on("error", (err) => {\n        if (!resolved) {\n          resolved = true;\n          logError(`Failed to spawn ${CLI_AGENT_TYPE}: ${err.message}`);\n          stderrLines.push(`Spawn error: ${err.message}`);\n          resolve(1);\n        }\n      });\n      proc.on("close", (code) => {\n        if (!resolved) {\n          resolved = true;\n          resolve(code ?? 1);\n        }\n      });\n    });\n    if (proc.stderr) {\n      const stderrRl = readline.createInterface({ input: proc.stderr });\n      stderrRl.on("line", (line) => {\n        stderrLines.push(line);\n        if (logFile && !logFile.destroyed) {\n          logFile.write(`[STDERR] ${line}\n`);\n        }\n      });\n    }\n    if (proc.stdout) {\n      const stdoutRl = readline.createInterface({ input: proc.stdout });\n      let eventSequence = 0;\n      for await (const line of stdoutRl) {\n        if (logFile && !logFile.destroyed) {\n          logFile.write(line + "\\n");\n        }\n        const stripped = line.trim();\n        if (!stripped) {\n          continue;\n        }\n        try {\n          const event = JSON.parse(stripped);\n          await sendEvent(event, eventSequence);\n          eventSequence++;\n          if (event.type === "result") {\n            const resultContent = event.result;\n            if (resultContent) {\n              console.log(resultContent);\n            }\n          }\n        } catch {\n          logDebug(`Non-JSON line from agent: ${stripped.slice(0, 100)}`);\n        }\n      }\n    }\n    agentExitCode = await exitPromise;\n  } catch (error) {\n    logError(`Failed to execute ${CLI_AGENT_TYPE}: ${error}`);\n    agentExitCode = 1;\n  } finally {\n    if (logFile && !logFile.destroyed) {\n      logFile.end();\n    }\n  }\n  console.log();\n  let finalExitCode = agentExitCode;\n  let errorMessage = "";\n  if (fs7.existsSync(EVENT_ERROR_FLAG)) {\n    logError("Some events failed to send, marking run as failed");\n    finalExitCode = 1;\n    errorMessage = "Some events failed to send";\n  }\n  const execDurationMs = Date.now() - execStartTime;\n  recordSandboxOp("cli_execution", execDurationMs, agentExitCode === 0);\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`\\u2713 Execution complete (${Math.floor(execDurationMs / 1e3)}s)`);\n  } else {\n    logInfo(`\\u2717 Execution failed (${Math.floor(execDurationMs / 1e3)}s)`);\n  }\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`${CLI_AGENT_TYPE} completed successfully`);\n    logInfo("\\u25B7 Checkpoint");\n    const checkpointStartTime = Date.now();\n    const checkpointSuccess = await createCheckpoint();\n    const checkpointDuration = Math.floor(\n      (Date.now() - checkpointStartTime) / 1e3\n    );\n    if (checkpointSuccess) {\n      logInfo(`\\u2713 Checkpoint complete (${checkpointDuration}s)`);\n    } else {\n      logInfo(`\\u2717 Checkpoint failed (${checkpointDuration}s)`);\n    }\n    if (!checkpointSuccess) {\n      logError("Checkpoint creation failed, marking run as failed");\n      finalExitCode = 1;\n      errorMessage = "Checkpoint creation failed";\n    }\n  } else {\n    if (agentExitCode !== 0) {\n      logInfo(`${CLI_AGENT_TYPE} failed with exit code ${agentExitCode}`);\n      if (stderrLines.length > 0) {\n        errorMessage = stderrLines.map((line) => line.trim()).join(" ");\n        logInfo(`Captured stderr: ${errorMessage}`);\n      } else {\n        errorMessage = `Agent exited with code ${agentExitCode}`;\n      }\n    }\n  }\n  return [finalExitCode, errorMessage];\n}\nasync function main() {\n  let exitCode = 1;\n  let errorMessage = "Unexpected termination";\n  try {\n    [exitCode, errorMessage] = await run();\n  } catch (error) {\n    if (error instanceof Error) {\n      exitCode = 1;\n      errorMessage = error.message;\n      logError(`Error: ${errorMessage}`);\n    } else {\n      exitCode = 1;\n      errorMessage = `Unexpected error: ${error}`;\n      logError(errorMessage);\n    }\n  } finally {\n    await cleanup(exitCode, errorMessage);\n  }\n  return exitCode;\n}\nmain().then((code) => process.exit(code)).catch((error) => {\n  console.error("Fatal error:", error);\n  process.exit(1);\n});\n';
 var DOWNLOAD_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/download.ts\nimport * as fs2 from "fs";\nimport * as path from "path";\nimport * as os from "os";\nimport { execSync as execSync2 } from "child_process";\n\n// src/sandbox/scripts/src/lib/common.ts\nimport * as fs from "fs";\nvar RUN_ID = process.env.VM0_RUN_ID ?? "";\nvar API_URL = process.env.VM0_API_URL ?? "";\nvar API_TOKEN = process.env.VM0_API_TOKEN ?? "";\nvar PROMPT = process.env.VM0_PROMPT ?? "";\nvar VERCEL_BYPASS = process.env.VERCEL_PROTECTION_BYPASS ?? "";\nvar RESUME_SESSION_ID = process.env.VM0_RESUME_SESSION_ID ?? "";\nvar CLI_AGENT_TYPE = process.env.CLI_AGENT_TYPE ?? "claude-code";\nvar OPENAI_MODEL = process.env.OPENAI_MODEL ?? "";\nvar WORKING_DIR = process.env.VM0_WORKING_DIR ?? "";\nvar ARTIFACT_DRIVER = process.env.VM0_ARTIFACT_DRIVER ?? "";\nvar ARTIFACT_MOUNT_PATH = process.env.VM0_ARTIFACT_MOUNT_PATH ?? "";\nvar ARTIFACT_VOLUME_NAME = process.env.VM0_ARTIFACT_VOLUME_NAME ?? "";\nvar ARTIFACT_VERSION_ID = process.env.VM0_ARTIFACT_VERSION_ID ?? "";\nvar WEBHOOK_URL = `${API_URL}/api/webhooks/agent/events`;\nvar CHECKPOINT_URL = `${API_URL}/api/webhooks/agent/checkpoints`;\nvar COMPLETE_URL = `${API_URL}/api/webhooks/agent/complete`;\nvar HEARTBEAT_URL = `${API_URL}/api/webhooks/agent/heartbeat`;\nvar TELEMETRY_URL = `${API_URL}/api/webhooks/agent/telemetry`;\nvar PROXY_URL = `${API_URL}/api/webhooks/agent/proxy`;\nvar STORAGE_PREPARE_URL = `${API_URL}/api/webhooks/agent/storages/prepare`;\nvar STORAGE_COMMIT_URL = `${API_URL}/api/webhooks/agent/storages/commit`;\nvar HTTP_MAX_TIME_UPLOAD = 60;\nvar HTTP_MAX_RETRIES = 3;\nvar SESSION_ID_FILE = `/tmp/vm0-session-${RUN_ID}.txt`;\nvar SESSION_HISTORY_PATH_FILE = `/tmp/vm0-session-history-${RUN_ID}.txt`;\nvar EVENT_ERROR_FLAG = `/tmp/vm0-event-error-${RUN_ID}`;\nvar SYSTEM_LOG_FILE = `/tmp/vm0-main-${RUN_ID}.log`;\nvar AGENT_LOG_FILE = `/tmp/vm0-agent-${RUN_ID}.log`;\nvar METRICS_LOG_FILE = `/tmp/vm0-metrics-${RUN_ID}.jsonl`;\nvar NETWORK_LOG_FILE = `/tmp/vm0-network-${RUN_ID}.jsonl`;\nvar TELEMETRY_LOG_POS_FILE = `/tmp/vm0-telemetry-log-pos-${RUN_ID}.txt`;\nvar TELEMETRY_METRICS_POS_FILE = `/tmp/vm0-telemetry-metrics-pos-${RUN_ID}.txt`;\nvar TELEMETRY_NETWORK_POS_FILE = `/tmp/vm0-telemetry-network-pos-${RUN_ID}.txt`;\nvar TELEMETRY_SANDBOX_OPS_POS_FILE = `/tmp/vm0-telemetry-sandbox-ops-pos-${RUN_ID}.txt`;\nvar SANDBOX_OPS_LOG_FILE = `/tmp/vm0-sandbox-ops-${RUN_ID}.jsonl`;\nfunction recordSandboxOp(actionType, durationMs, success, error) {\n  const entry = {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    action_type: actionType,\n    duration_ms: durationMs,\n    success\n  };\n  if (error) {\n    entry.error = error;\n  }\n  fs.appendFileSync(SANDBOX_OPS_LOG_FILE, JSON.stringify(entry) + "\\n");\n}\n\n// src/sandbox/scripts/src/lib/log.ts\nvar SCRIPT_NAME = process.env.LOG_SCRIPT_NAME ?? "run-agent";\nvar DEBUG_MODE = process.env.VM0_DEBUG === "1";\nfunction timestamp() {\n  return (/* @__PURE__ */ new Date()).toISOString().replace(/\\.\\d{3}Z$/, "Z");\n}\nfunction logInfo(msg) {\n  console.error(`[${timestamp()}] [INFO] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logWarn(msg) {\n  console.error(`[${timestamp()}] [WARN] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logError(msg) {\n  console.error(`[${timestamp()}] [ERROR] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logDebug(msg) {\n  if (DEBUG_MODE) {\n    console.error(`[${timestamp()}] [DEBUG] [sandbox:${SCRIPT_NAME}] ${msg}`);\n  }\n}\n\n// src/sandbox/scripts/src/lib/http-client.ts\nimport { execSync } from "child_process";\nfunction sleep(ms) {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\nasync function httpDownload(url, destPath, maxRetries = HTTP_MAX_RETRIES) {\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP download attempt ${attempt}/${maxRetries} from ${url}`);\n    try {\n      const curlCmd = ["curl", "-fsSL", "-o", destPath, `"${url}"`].join(" ");\n      execSync(curlCmd, {\n        timeout: HTTP_MAX_TIME_UPLOAD * 1e3,\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      return true;\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("ETIMEDOUT") || errorMsg.includes("timeout")) {\n        logWarn(\n          `HTTP download failed (attempt ${attempt}/${maxRetries}): Timeout`\n        );\n      } else {\n        logWarn(\n          `HTTP download failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP download failed after ${maxRetries} attempts from ${url}`);\n  return false;\n}\n\n// src/sandbox/scripts/src/download.ts\nasync function downloadStorage(mountPath, archiveUrl) {\n  logInfo(`Downloading storage to ${mountPath}`);\n  const tempTar = path.join(\n    os.tmpdir(),\n    `storage-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`\n  );\n  try {\n    if (!await httpDownload(archiveUrl, tempTar)) {\n      logError(`Failed to download archive for ${mountPath}`);\n      return false;\n    }\n    fs2.mkdirSync(mountPath, { recursive: true });\n    try {\n      execSync2(`tar -xzf "${tempTar}" -C "${mountPath}"`, {\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n    } catch {\n      logInfo(`Archive appears empty for ${mountPath}`);\n    }\n    logInfo(`Successfully extracted to ${mountPath}`);\n    return true;\n  } finally {\n    try {\n      fs2.unlinkSync(tempTar);\n    } catch {\n    }\n  }\n}\nasync function main() {\n  const args = process.argv.slice(2);\n  if (args.length < 1) {\n    logError("Usage: node download.mjs <manifest_path>");\n    process.exit(1);\n  }\n  const manifestPath = args[0] ?? "";\n  if (!manifestPath || !fs2.existsSync(manifestPath)) {\n    logError(`Manifest file not found: ${manifestPath}`);\n    process.exit(1);\n  }\n  logInfo(`Starting storage download from manifest: ${manifestPath}`);\n  let manifest;\n  try {\n    const content = fs2.readFileSync(manifestPath, "utf-8");\n    manifest = JSON.parse(content);\n  } catch (error) {\n    logError(`Failed to load manifest: ${error}`);\n    process.exit(1);\n  }\n  const storages = manifest.storages ?? [];\n  const artifact = manifest.artifact;\n  const storageCount = storages.length;\n  const hasArtifact = artifact !== void 0;\n  logInfo(`Found ${storageCount} storages, artifact: ${hasArtifact}`);\n  const downloadTotalStart = Date.now();\n  let downloadSuccess = true;\n  for (const storage of storages) {\n    const mountPath = storage.mountPath;\n    const archiveUrl = storage.archiveUrl;\n    if (archiveUrl && archiveUrl !== "null") {\n      const storageStart = Date.now();\n      const success = await downloadStorage(mountPath, archiveUrl);\n      recordSandboxOp("storage_download", Date.now() - storageStart, success);\n      if (!success) {\n        downloadSuccess = false;\n      }\n    }\n  }\n  if (artifact) {\n    const artifactMount = artifact.mountPath;\n    const artifactUrl = artifact.archiveUrl;\n    if (artifactUrl && artifactUrl !== "null") {\n      const artifactStart = Date.now();\n      const success = await downloadStorage(artifactMount, artifactUrl);\n      recordSandboxOp("artifact_download", Date.now() - artifactStart, success);\n      if (!success) {\n        downloadSuccess = false;\n      }\n    }\n  }\n  recordSandboxOp(\n    "download_total",\n    Date.now() - downloadTotalStart,\n    downloadSuccess\n  );\n  logInfo("All storages downloaded successfully");\n}\nmain().catch((error) => {\n  logError(`Fatal error: ${error}`);\n  process.exit(1);\n});\n';
 var MOCK_CLAUDE_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/mock-claude.ts\nimport * as fs from "fs";\nimport * as path from "path";\nimport { execSync } from "child_process";\nfunction parseArgs(args) {\n  const result = {\n    outputFormat: "text",\n    print: false,\n    verbose: false,\n    dangerouslySkipPermissions: false,\n    resume: null,\n    prompt: ""\n  };\n  const remaining = [];\n  let i = 0;\n  while (i < args.length) {\n    const arg = args[i];\n    if (arg === "--output-format" && i + 1 < args.length) {\n      result.outputFormat = args[i + 1] ?? "text";\n      i += 2;\n    } else if (arg === "--print") {\n      result.print = true;\n      i++;\n    } else if (arg === "--verbose") {\n      result.verbose = true;\n      i++;\n    } else if (arg === "--dangerously-skip-permissions") {\n      result.dangerouslySkipPermissions = true;\n      i++;\n    } else if (arg === "--resume" && i + 1 < args.length) {\n      result.resume = args[i + 1] ?? null;\n      i += 2;\n    } else if (arg) {\n      remaining.push(arg);\n      i++;\n    } else {\n      i++;\n    }\n  }\n  if (remaining.length > 0) {\n    result.prompt = remaining[0] ?? "";\n  }\n  return result;\n}\nfunction createSessionHistory(sessionId, cwd) {\n  const projectName = cwd.replace(/^\\//, "").replace(/\\//g, "-");\n  const homeDir = process.env.HOME ?? "/home/user";\n  const sessionDir = `${homeDir}/.claude/projects/-${projectName}`;\n  fs.mkdirSync(sessionDir, { recursive: true });\n  return path.join(sessionDir, `${sessionId}.jsonl`);\n}\nfunction main() {\n  const sessionId = `mock-${Date.now() * 1e3 + Math.floor(Math.random() * 1e3)}`;\n  const args = parseArgs(process.argv.slice(2));\n  const prompt = args.prompt;\n  const outputFormat = args.outputFormat;\n  if (prompt.startsWith("@fail:")) {\n    const errorMsg = prompt.slice(6);\n    console.error(errorMsg);\n    process.exit(1);\n  }\n  const cwd = process.cwd();\n  if (outputFormat === "stream-json") {\n    const sessionHistoryFile = createSessionHistory(sessionId, cwd);\n    const events = [];\n    const initEvent = {\n      type: "system",\n      subtype: "init",\n      cwd,\n      session_id: sessionId,\n      tools: ["Bash"],\n      model: "mock-claude"\n    };\n    console.log(JSON.stringify(initEvent));\n    events.push(initEvent);\n    const textEvent = {\n      type: "assistant",\n      message: {\n        role: "assistant",\n        content: [{ type: "text", text: "Executing command..." }]\n      },\n      session_id: sessionId\n    };\n    console.log(JSON.stringify(textEvent));\n    events.push(textEvent);\n    const toolUseEvent = {\n      type: "assistant",\n      message: {\n        role: "assistant",\n        content: [\n          {\n            type: "tool_use",\n            id: "toolu_mock_001",\n            name: "Bash",\n            input: { command: prompt }\n          }\n        ]\n      },\n      session_id: sessionId\n    };\n    console.log(JSON.stringify(toolUseEvent));\n    events.push(toolUseEvent);\n    let output;\n    let exitCode;\n    try {\n      output = execSync(`bash -c ${JSON.stringify(prompt)}`, {\n        encoding: "utf-8",\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      exitCode = 0;\n    } catch (error) {\n      const execError = error;\n      output = (execError.stdout ?? "") + (execError.stderr ?? "");\n      exitCode = execError.status ?? 1;\n    }\n    const isError = exitCode !== 0;\n    const toolResultEvent = {\n      type: "user",\n      message: {\n        role: "user",\n        content: [\n          {\n            type: "tool_result",\n            tool_use_id: "toolu_mock_001",\n            content: output,\n            is_error: isError\n          }\n        ]\n      },\n      session_id: sessionId\n    };\n    console.log(JSON.stringify(toolResultEvent));\n    events.push(toolResultEvent);\n    const resultEvent = {\n      type: "result",\n      subtype: exitCode === 0 ? "success" : "error",\n      is_error: exitCode !== 0,\n      duration_ms: 100,\n      num_turns: 1,\n      result: output,\n      session_id: sessionId,\n      total_cost_usd: 0,\n      usage: { input_tokens: 0, output_tokens: 0 }\n    };\n    console.log(JSON.stringify(resultEvent));\n    events.push(resultEvent);\n    const historyContent = events.map((e) => JSON.stringify(e)).join("\\n") + "\\n";\n    fs.writeFileSync(sessionHistoryFile, historyContent);\n    process.exit(exitCode);\n  } else {\n    try {\n      execSync(`bash -c ${JSON.stringify(prompt)}`, {\n        stdio: "inherit"\n      });\n      process.exit(0);\n    } catch (error) {\n      const execError = error;\n      process.exit(execError.status ?? 1);\n    }\n  }\n}\nvar isMainModule = process.argv[1]?.endsWith("mock-claude.mjs") || process.argv[1]?.endsWith("mock-claude.ts");\nif (isMainModule) {\n  main();\n}\nexport {\n  createSessionHistory,\n  parseArgs\n};\n';
 var ENV_LOADER_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/env-loader.ts\nimport * as fs from "fs";\nimport { spawn } from "child_process";\nvar ENV_JSON_PATH = "/tmp/vm0-env.json";\nconsole.log("[env-loader] Starting...");\nif (fs.existsSync(ENV_JSON_PATH)) {\n  console.log(`[env-loader] Loading environment from ${ENV_JSON_PATH}`);\n  try {\n    const content = fs.readFileSync(ENV_JSON_PATH, "utf-8");\n    const envData = JSON.parse(content);\n    for (const [key, value] of Object.entries(envData)) {\n      process.env[key] = value;\n    }\n    console.log(\n      `[env-loader] Loaded ${Object.keys(envData).length} environment variables`\n    );\n  } catch (error) {\n    console.error(`[env-loader] ERROR loading JSON: ${error}`);\n    process.exit(1);\n  }\n} else {\n  console.error(\n    `[env-loader] ERROR: Environment file not found: ${ENV_JSON_PATH}`\n  );\n  process.exit(1);\n}\nvar criticalVars = [\n  "VM0_RUN_ID",\n  "VM0_API_URL",\n  "VM0_WORKING_DIR",\n  "VM0_PROMPT"\n];\nfor (const varName of criticalVars) {\n  const val = process.env[varName] ?? "";\n  if (val) {\n    const display = val.length > 50 ? val.substring(0, 50) + "..." : val;\n    console.log(`[env-loader] ${varName}=${display}`);\n  } else {\n    console.log(`[env-loader] WARNING: ${varName} is empty`);\n  }\n}\nvar runAgentPath = "/usr/local/bin/vm0-agent/run-agent.mjs";\nconsole.log(`[env-loader] Executing ${runAgentPath}`);\nvar child = spawn("node", [runAgentPath], {\n  stdio: "inherit",\n  env: process.env\n});\nchild.on("close", (code) => {\n  process.exit(code ?? 1);\n});\n';
@@ -7795,7 +8126,7 @@ var FEATURE_SWITCHES = {
 var ENV_LOADER_PATH = "/usr/local/bin/vm0-agent/env-loader.mjs";
 
 // src/lib/proxy/vm-registry.ts
-import fs5 from "fs";
+import fs6 from "fs";
 var DEFAULT_REGISTRY_PATH = "/tmp/vm0-vm-registry.json";
 var VMRegistry = class {
   registryPath;
@@ -7809,8 +8140,8 @@ var VMRegistry = class {
    */
   load() {
     try {
-      if (fs5.existsSync(this.registryPath)) {
-        const content = fs5.readFileSync(this.registryPath, "utf-8");
+      if (fs6.existsSync(this.registryPath)) {
+        const content = fs6.readFileSync(this.registryPath, "utf-8");
         return JSON.parse(content);
       }
     } catch {
@@ -7824,8 +8155,8 @@ var VMRegistry = class {
     this.data.updatedAt = Date.now();
     const content = JSON.stringify(this.data, null, 2);
     const tempPath = `${this.registryPath}.tmp`;
-    fs5.writeFileSync(tempPath, content, { mode: 420 });
-    fs5.renameSync(tempPath, this.registryPath);
+    fs6.writeFileSync(tempPath, content, { mode: 420 });
+    fs6.renameSync(tempPath, this.registryPath);
   }
   /**
    * Register a VM with its IP address
@@ -7900,7 +8231,7 @@ function initVMRegistry(registryPath) {
 
 // src/lib/proxy/proxy-manager.ts
 import { spawn as spawn2 } from "child_process";
-import fs6 from "fs";
+import fs7 from "fs";
 import path4 from "path";
 
 // src/lib/proxy/mitm-addon-script.ts
@@ -8422,10 +8753,10 @@ var ProxyManager = class {
    */
   ensureAddonScript() {
     const addonDir = path4.dirname(this.config.addonPath);
-    if (!fs6.existsSync(addonDir)) {
-      fs6.mkdirSync(addonDir, { recursive: true });
+    if (!fs7.existsSync(addonDir)) {
+      fs7.mkdirSync(addonDir, { recursive: true });
     }
-    fs6.writeFileSync(this.config.addonPath, RUNNER_MITM_ADDON_SCRIPT, {
+    fs7.writeFileSync(this.config.addonPath, RUNNER_MITM_ADDON_SCRIPT, {
       mode: 493
     });
     console.log(
@@ -8436,11 +8767,11 @@ var ProxyManager = class {
    * Validate proxy configuration
    */
   validateConfig() {
-    if (!fs6.existsSync(this.config.caDir)) {
+    if (!fs7.existsSync(this.config.caDir)) {
       throw new Error(`Proxy CA directory not found: ${this.config.caDir}`);
     }
     const caCertPath = path4.join(this.config.caDir, "mitmproxy-ca.pem");
-    if (!fs6.existsSync(caCertPath)) {
+    if (!fs7.existsSync(caCertPath)) {
       throw new Error(`Proxy CA certificate not found: ${caCertPath}`);
     }
     this.ensureAddonScript();
@@ -8830,17 +9161,17 @@ function buildEnvironmentVariables(context, apiUrl) {
 }
 
 // src/lib/network-logs/network-logs.ts
-import fs7 from "fs";
+import fs8 from "fs";
 function getNetworkLogPath(runId) {
   return `/tmp/vm0-network-${runId}.jsonl`;
 }
 function readNetworkLogs(runId) {
   const logPath = getNetworkLogPath(runId);
-  if (!fs7.existsSync(logPath)) {
+  if (!fs8.existsSync(logPath)) {
     return [];
   }
   try {
-    const content = fs7.readFileSync(logPath, "utf-8");
+    const content = fs8.readFileSync(logPath, "utf-8");
     const lines = content.split("\n").filter((line) => line.trim());
     return lines.map((line) => JSON.parse(line));
   } catch (err) {
@@ -8853,8 +9184,8 @@ function readNetworkLogs(runId) {
 function cleanupNetworkLogs(runId) {
   const logPath = getNetworkLogPath(runId);
   try {
-    if (fs7.existsSync(logPath)) {
-      fs7.unlinkSync(logPath);
+    if (fs8.existsSync(logPath)) {
+      fs8.unlinkSync(logPath);
     }
   } catch (err) {
     console.error(
@@ -8897,7 +9228,7 @@ async function uploadNetworkLogs(apiUrl, sandboxToken, runId) {
 }
 
 // src/lib/vm-setup/vm-setup.ts
-import fs8 from "fs";
+import fs9 from "fs";
 
 // src/lib/scripts/utils.ts
 function getAllScripts() {
@@ -8911,17 +9242,17 @@ function getAllScripts() {
 }
 
 // src/lib/vm-setup/vm-setup.ts
-async function uploadScripts(ssh) {
+async function uploadScripts(guest) {
   const scripts = getAllScripts();
-  await ssh.execOrThrow(`sudo mkdir -p ${SCRIPT_PATHS.baseDir}`);
+  await guest.execOrThrow(`sudo mkdir -p ${SCRIPT_PATHS.baseDir}`);
   for (const script of scripts) {
-    await ssh.writeFileWithSudo(script.path, script.content);
+    await guest.writeFileWithSudo(script.path, script.content);
   }
-  await ssh.execOrThrow(
+  await guest.execOrThrow(
     `sudo chmod +x ${SCRIPT_PATHS.baseDir}/*.mjs 2>/dev/null || true`
   );
 }
-async function downloadStorages(ssh, manifest) {
+async function downloadStorages(guest, manifest) {
   const totalArchives = manifest.storages.filter((s) => s.archiveUrl).length + (manifest.artifact?.archiveUrl ? 1 : 0);
   if (totalArchives === 0) {
     console.log(`[Executor] No archives to download`);
@@ -8929,8 +9260,8 @@ async function downloadStorages(ssh, manifest) {
   }
   console.log(`[Executor] Downloading ${totalArchives} archive(s)...`);
   const manifestJson = JSON.stringify(manifest);
-  await ssh.writeFile("/tmp/storage-manifest.json", manifestJson);
-  const result = await ssh.exec(
+  await guest.writeFile("/tmp/storage-manifest.json", manifestJson);
+  const result = await guest.exec(
     `node ${SCRIPT_PATHS.download} /tmp/storage-manifest.json`
   );
   if (result.exitCode !== 0) {
@@ -8938,7 +9269,7 @@ async function downloadStorages(ssh, manifest) {
   }
   console.log(`[Executor] Storage download completed`);
 }
-async function restoreSessionHistory(ssh, resumeSession, workingDir, cliAgentType) {
+async function restoreSessionHistory(guest, resumeSession, workingDir, cliAgentType) {
   const { sessionId, sessionHistory } = resumeSession;
   let sessionPath;
   if (cliAgentType === "codex") {
@@ -8952,34 +9283,34 @@ async function restoreSessionHistory(ssh, resumeSession, workingDir, cliAgentTyp
   }
   console.log(`[Executor] Restoring session history to ${sessionPath}`);
   const dirPath = sessionPath.substring(0, sessionPath.lastIndexOf("/"));
-  await ssh.execOrThrow(`mkdir -p "${dirPath}"`);
-  await ssh.writeFile(sessionPath, sessionHistory);
+  await guest.execOrThrow(`mkdir -p "${dirPath}"`);
+  await guest.writeFile(sessionPath, sessionHistory);
   console.log(
     `[Executor] Session history restored (${sessionHistory.split("\n").length} lines)`
   );
 }
-async function installProxyCA(ssh, caCertPath) {
-  if (!fs8.existsSync(caCertPath)) {
+async function installProxyCA(guest, caCertPath) {
+  if (!fs9.existsSync(caCertPath)) {
     throw new Error(
       `Proxy CA certificate not found at ${caCertPath}. Run generate-proxy-ca.sh first.`
     );
   }
-  const caCert = fs8.readFileSync(caCertPath, "utf-8");
+  const caCert = fs9.readFileSync(caCertPath, "utf-8");
   console.log(
     `[Executor] Installing proxy CA certificate (${caCert.length} bytes)`
   );
-  await ssh.writeFileWithSudo(
+  await guest.writeFileWithSudo(
     "/usr/local/share/ca-certificates/vm0-proxy-ca.crt",
     caCert
   );
-  await ssh.execOrThrow("sudo update-ca-certificates");
+  await guest.execOrThrow("sudo update-ca-certificates");
   console.log(`[Executor] Proxy CA certificate installed successfully`);
 }
-async function configureDNS(ssh) {
+async function configureDNS(guest) {
   const dnsConfig = `nameserver 8.8.8.8
 nameserver 8.8.4.4
 nameserver 1.1.1.1`;
-  await ssh.execOrThrow(
+  await guest.execOrThrow(
     `sudo sh -c 'rm -f /etc/resolv.conf && echo "${dnsConfig}" > /etc/resolv.conf'`
   );
 }
@@ -8995,11 +9326,11 @@ var CURL_ERROR_MESSAGES = {
   60: "TLS certificate error (proxy CA not trusted)",
   22: "HTTP error from server"
 };
-async function runPreflightCheck(ssh, apiUrl, runId, sandboxToken, bypassSecret) {
+async function runPreflightCheck(guest, apiUrl, runId, sandboxToken, bypassSecret) {
   const heartbeatUrl = `${apiUrl}/api/webhooks/agent/heartbeat`;
   const bypassHeader = bypassSecret ? ` -H "x-vercel-protection-bypass: ${bypassSecret}"` : "";
   const curlCmd = `curl -sf --connect-timeout 5 --max-time 10 "${heartbeatUrl}" -X POST -H "Content-Type: application/json" -H "Authorization: Bearer ${sandboxToken}"${bypassHeader} -d '{"runId":"${runId}"}'`;
-  const result = await ssh.exec(curlCmd, 2e4);
+  const result = await guest.exec(curlCmd, 2e4);
   if (result.exitCode === 0) {
     return { success: true };
   }
@@ -9063,14 +9394,27 @@ async function executeJob(context, config, options = {}) {
       throw new Error("VM started but no IP address available");
     }
     log(`[Executor] VM ${vmId} started, guest IP: ${guestIp}`);
-    const privateKeyPath = getRunnerSSHKeyPath();
-    const ssh = createVMSSHClient(guestIp, "user", privateKeyPath || void 0);
-    log(`[Executor] Waiting for SSH on ${guestIp}...`);
+    const guestProtocol = config.sandbox.guest_protocol;
+    let guest;
+    if (guestProtocol === "ssh") {
+      const sshKeyPath = getRunnerSSHKeyPath();
+      guest = new SSHClient({
+        host: guestIp,
+        user: "user",
+        privateKeyPath: sshKeyPath || void 0
+      });
+      log(`[Executor] Using SSH for guest communication: ${guestIp}`);
+    } else {
+      const vsockPath = vm.getVsockPath();
+      guest = new VsockClient(vsockPath);
+      log(`[Executor] Using vsock for guest communication: ${vsockPath}`);
+    }
+    log(`[Executor] Verifying ${guestProtocol} connectivity...`);
     await withSandboxTiming(
-      "ssh_wait",
-      () => ssh.waitUntilReachable(12e4, 2e3)
+      "guest_wait",
+      () => guest.waitUntilReachable(3e4, 1e3)
     );
-    log(`[Executor] SSH ready on ${guestIp}`);
+    log(`[Executor] Guest client ready (${guestProtocol})`);
     const firewallConfig = context.experimentalFirewall;
     if (firewallConfig?.enabled) {
       const mitmEnabled = firewallConfig.experimental_mitm ?? false;
@@ -9089,25 +9433,25 @@ async function executeJob(context, config, options = {}) {
           config.proxy.ca_dir,
           "mitmproxy-ca-cert.pem"
         );
-        await installProxyCA(ssh, caCertPath);
+        await installProxyCA(guest, caCertPath);
       }
     }
     log(`[Executor] Configuring DNS...`);
-    await configureDNS(ssh);
+    await configureDNS(guest);
     log(`[Executor] Uploading scripts...`);
-    await withSandboxTiming("script_upload", () => uploadScripts(ssh));
+    await withSandboxTiming("script_upload", () => uploadScripts(guest));
     log(`[Executor] Scripts uploaded to ${SCRIPT_PATHS.baseDir}`);
     if (context.storageManifest) {
       await withSandboxTiming(
         "storage_download",
-        () => downloadStorages(ssh, context.storageManifest)
+        () => downloadStorages(guest, context.storageManifest)
       );
     }
     if (context.resumeSession) {
       await withSandboxTiming(
         "session_restore",
         () => restoreSessionHistory(
-          ssh,
+          guest,
           context.resumeSession,
           context.workingDir,
           context.cliAgentType || "claude-code"
@@ -9119,12 +9463,12 @@ async function executeJob(context, config, options = {}) {
     log(
       `[Executor] Writing env JSON (${envJson.length} bytes) to ${ENV_JSON_PATH}`
     );
-    await ssh.writeFile(ENV_JSON_PATH, envJson);
+    await guest.writeFile(ENV_JSON_PATH, envJson);
     if (!options.benchmarkMode) {
       log(`[Executor] Running preflight connectivity check...`);
       const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
       const preflight = await runPreflightCheck(
-        ssh,
+        guest,
         config.server.url,
         context.runId,
         context.sandboxToken,
@@ -9151,24 +9495,24 @@ async function executeJob(context, config, options = {}) {
     const startTime = Date.now();
     if (options.benchmarkMode) {
       log(`[Executor] Running command directly (benchmark mode)...`);
-      await ssh.exec(
+      await guest.exec(
         `nohup sh -c '${context.prompt}; echo $? > ${exitCodeFile}' > ${systemLogFile} 2>&1 &`
       );
       log(`[Executor] Command started in background`);
     } else {
       log(`[Executor] Running agent via env-loader (background)...`);
-      await ssh.exec(
+      await guest.exec(
         `nohup sh -c 'node ${ENV_LOADER_PATH}; echo $? > ${exitCodeFile}' > ${systemLogFile} 2>&1 &`
       );
       log(`[Executor] Agent started in background`);
     }
     const pollIntervalMs = 2e3;
-    const maxWaitMs = 24 * 60 * 60 * 1e3;
+    const maxWaitMs = 2 * 60 * 60 * 1e3;
     let exitCode = 1;
     let completed = false;
     while (Date.now() - startTime < maxWaitMs) {
       await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-      const checkResult = await ssh.exec(`cat ${exitCodeFile} 2>/dev/null`);
+      const checkResult = await guest.exec(`cat ${exitCodeFile} 2>/dev/null`);
       if (checkResult.exitCode === 0 && checkResult.stdout.trim()) {
         const parsed = parseInt(checkResult.stdout.trim(), 10);
         exitCode = Number.isNaN(parsed) ? 1 : parsed;
@@ -9176,17 +9520,17 @@ async function executeJob(context, config, options = {}) {
         break;
       }
       if (!options.benchmarkMode) {
-        const processCheck = await ssh.exec(
+        const processCheck = await guest.exec(
           `pgrep -f "env-loader.mjs" > /dev/null 2>&1 && echo "RUNNING" || echo "DEAD"`
         );
         if (processCheck.stdout.trim() === "DEAD") {
           log(
             `[Executor] Agent process died unexpectedly without writing exit code`
           );
-          const logContent = await ssh.exec(
+          const logContent = await guest.exec(
             `tail -50 ${systemLogFile} 2>/dev/null`
           );
-          const dmesgCheck = await ssh.exec(
+          const dmesgCheck = await guest.exec(
             `dmesg | tail -20 | grep -iE "killed|oom" 2>/dev/null`
           );
           let errorMsg = "Agent process terminated unexpectedly";
@@ -9232,7 +9576,9 @@ async function executeJob(context, config, options = {}) {
       success: exitCode === 0
     });
     log(`[Executor] Agent finished in ${duration}s with exit code ${exitCode}`);
-    const logResult = await ssh.exec(`tail -100 ${systemLogFile} 2>/dev/null`);
+    const logResult = await guest.exec(
+      `tail -100 ${systemLogFile} 2>/dev/null`
+    );
     if (logResult.stdout) {
       log(
         `[Executor] Log output (${logResult.stdout.length} chars): ${logResult.stdout.substring(0, 500)}`
@@ -9318,196 +9664,201 @@ async function executeJob2(context, config) {
     console.log(`  Job ${context.runId} reported as ${result.status}`);
   }
 }
-var startCommand = new Command("start").description("Start the runner").option("--config <path>", "Config file path", "./runner.yaml").action(async (options) => {
-  try {
-    const config = loadConfig(options.config);
-    validateFirecrackerPaths(config.firecracker);
-    console.log("Config valid");
-    const datasetSuffix = process.env.AXIOM_DATASET_SUFFIX;
-    if (!datasetSuffix) {
-      throw new Error(
-        "AXIOM_DATASET_SUFFIX is required. Set to 'dev' or 'prod'."
-      );
-    }
-    initMetrics({
-      serviceName: "vm0-runner",
-      runnerLabel: config.name,
-      axiomToken: process.env.AXIOM_TOKEN,
-      environment: datasetSuffix
-    });
-    const networkCheck = checkNetworkPrerequisites();
-    if (!networkCheck.ok) {
-      console.error("Network prerequisites not met:");
-      for (const error of networkCheck.errors) {
-        console.error(`  - ${error}`);
-      }
-      process.exit(1);
-    }
-    console.log("Setting up network bridge...");
-    await setupBridge();
-    console.log("Flushing bridge ARP cache...");
-    await flushBridgeArpCache();
-    console.log("Cleaning up orphaned proxy rules...");
-    await cleanupOrphanedProxyRules(config.name);
-    console.log("Cleaning up orphaned IP allocations...");
-    await cleanupOrphanedAllocations();
-    console.log("Initializing network proxy...");
-    initVMRegistry();
-    const proxyManager = initProxyManager({
-      apiUrl: config.server.url,
-      port: config.proxy.port,
-      caDir: config.proxy.ca_dir
-    });
-    let proxyEnabled = false;
+var startCommand = new Command("start").description("Start the runner").option("--config <path>", "Config file path", "./runner.yaml").action(
+  // eslint-disable-next-line complexity -- TODO: refactor complex function
+  async (options) => {
     try {
-      await proxyManager.start();
-      proxyEnabled = true;
-      console.log("Network proxy initialized successfully");
-    } catch (err) {
-      console.warn(
-        `Network proxy not available: ${err instanceof Error ? err.message : "Unknown error"}`
-      );
-      console.warn(
-        "Jobs with experimentalFirewall enabled will run without network interception"
-      );
-    }
-    const statusFilePath = join2(dirname(options.config), "status.json");
-    const startedAt = /* @__PURE__ */ new Date();
-    const state = { mode: "running" };
-    const updateStatus = () => {
-      writeStatusFile(statusFilePath, state.mode, startedAt);
-    };
-    console.log(
-      `Starting runner '${config.name}' for group '${config.group}'...`
-    );
-    console.log(`Max concurrent jobs: ${config.sandbox.max_concurrent}`);
-    console.log(`Status file: ${statusFilePath}`);
-    console.log("Press Ctrl+C to stop");
-    console.log("");
-    updateStatus();
-    let running = true;
-    process.on("SIGINT", () => {
-      console.log("\nShutting down...");
-      running = false;
-      state.mode = "stopped";
-      updateStatus();
-    });
-    process.on("SIGTERM", () => {
-      console.log("\nShutting down...");
-      running = false;
-      state.mode = "stopped";
-      updateStatus();
-    });
-    process.on("SIGUSR1", () => {
-      if (state.mode === "running") {
-        console.log("\n[Maintenance] Entering drain mode...");
-        console.log(
-          `[Maintenance] Active jobs: ${activeRuns.size} (will wait for completion)`
+      const config = loadConfig(options.config);
+      validateFirecrackerPaths(config.firecracker);
+      console.log("Config valid");
+      const datasetSuffix = process.env.AXIOM_DATASET_SUFFIX;
+      if (!datasetSuffix) {
+        throw new Error(
+          "AXIOM_DATASET_SUFFIX is required. Set to 'dev' or 'prod'."
         );
-        state.mode = "draining";
-        updateStatus();
       }
-    });
-    const jobPromises = /* @__PURE__ */ new Set();
-    while (running) {
-      if (state.mode === "draining") {
-        if (activeRuns.size === 0) {
-          console.log("[Maintenance] All jobs completed, exiting drain mode");
-          running = false;
-          break;
-        }
-        if (jobPromises.size > 0) {
-          await Promise.race(jobPromises);
-          updateStatus();
-        }
-        continue;
-      }
-      if (activeRuns.size >= config.sandbox.max_concurrent) {
-        if (jobPromises.size > 0) {
-          await Promise.race(jobPromises);
-          updateStatus();
+      initMetrics({
+        serviceName: "vm0-runner",
+        runnerLabel: config.name,
+        axiomToken: process.env.AXIOM_TOKEN,
+        environment: datasetSuffix
+      });
+      const networkCheck = checkNetworkPrerequisites();
+      if (!networkCheck.ok) {
+        console.error("Network prerequisites not met:");
+        for (const error of networkCheck.errors) {
+          console.error(`  - ${error}`);
         }
-        continue;
+        process.exit(1);
       }
+      console.log("Setting up network bridge...");
+      await setupBridge();
+      console.log("Flushing bridge ARP cache...");
+      await flushBridgeArpCache();
+      console.log("Cleaning up orphaned proxy rules...");
+      await cleanupOrphanedProxyRules(config.name);
+      console.log("Cleaning up orphaned IP allocations...");
+      await cleanupOrphanedAllocations();
+      console.log("Initializing network proxy...");
+      initVMRegistry();
+      const proxyManager = initProxyManager({
+        apiUrl: config.server.url,
+        port: config.proxy.port,
+        caDir: config.proxy.ca_dir
+      });
+      let proxyEnabled = false;
       try {
-        const job = await withRunnerTiming(
-          "poll",
-          () => pollForJob(config.server, config.group)
+        await proxyManager.start();
+        proxyEnabled = true;
+        console.log("Network proxy initialized successfully");
+      } catch (err) {
+        console.warn(
+          `Network proxy not available: ${err instanceof Error ? err.message : "Unknown error"}`
+        );
+        console.warn(
+          "Jobs with experimentalFirewall enabled will run without network interception"
         );
-        if (!job) {
-          await new Promise(
-            (resolve) => setTimeout(resolve, config.sandbox.poll_interval_ms)
+      }
+      const statusFilePath = join2(dirname(options.config), "status.json");
+      const startedAt = /* @__PURE__ */ new Date();
+      const state = { mode: "running" };
+      const updateStatus = () => {
+        writeStatusFile(statusFilePath, state.mode, startedAt);
+      };
+      console.log(
+        `Starting runner '${config.name}' for group '${config.group}'...`
+      );
+      console.log(`Max concurrent jobs: ${config.sandbox.max_concurrent}`);
+      console.log(`Status file: ${statusFilePath}`);
+      console.log("Press Ctrl+C to stop");
+      console.log("");
+      updateStatus();
+      let running = true;
+      process.on("SIGINT", () => {
+        console.log("\nShutting down...");
+        running = false;
+        state.mode = "stopped";
+        updateStatus();
+      });
+      process.on("SIGTERM", () => {
+        console.log("\nShutting down...");
+        running = false;
+        state.mode = "stopped";
+        updateStatus();
+      });
+      process.on("SIGUSR1", () => {
+        if (state.mode === "running") {
+          console.log("\n[Maintenance] Entering drain mode...");
+          console.log(
+            `[Maintenance] Active jobs: ${activeRuns.size} (will wait for completion)`
           );
+          state.mode = "draining";
+          updateStatus();
+        }
+      });
+      const jobPromises = /* @__PURE__ */ new Set();
+      while (running) {
+        if (state.mode === "draining") {
+          if (activeRuns.size === 0) {
+            console.log(
+              "[Maintenance] All jobs completed, exiting drain mode"
+            );
+            running = false;
+            break;
+          }
+          if (jobPromises.size > 0) {
+            await Promise.race(jobPromises);
+            updateStatus();
+          }
+          continue;
+        }
+        if (activeRuns.size >= config.sandbox.max_concurrent) {
+          if (jobPromises.size > 0) {
+            await Promise.race(jobPromises);
+            updateStatus();
+          }
           continue;
         }
-        console.log(`Found job: ${job.runId}`);
         try {
-          const context = await withRunnerTiming(
-            "claim",
-            () => claimJob(config.server, job.runId)
+          const job = await withRunnerTiming(
+            "poll",
+            () => pollForJob(config.server, config.group)
           );
-          console.log(`Claimed job: ${context.runId}`);
-          activeRuns.add(context.runId);
-          updateStatus();
-          const jobPromise = executeJob2(context, config).catch((error) => {
-            console.error(
-              `Job ${context.runId} failed:`,
-              error instanceof Error ? error.message : "Unknown error"
+          if (!job) {
+            await new Promise(
+              (resolve) => setTimeout(resolve, config.sandbox.poll_interval_ms)
+            );
+            continue;
+          }
+          console.log(`Found job: ${job.runId}`);
+          try {
+            const context = await withRunnerTiming(
+              "claim",
+              () => claimJob(config.server, job.runId)
             );
-          }).finally(() => {
-            activeRuns.delete(context.runId);
-            jobPromises.delete(jobPromise);
+            console.log(`Claimed job: ${context.runId}`);
+            activeRuns.add(context.runId);
             updateStatus();
-          });
-          jobPromises.add(jobPromise);
+            const jobPromise = executeJob2(context, config).catch((error) => {
+              console.error(
+                `Job ${context.runId} failed:`,
+                error instanceof Error ? error.message : "Unknown error"
+              );
+            }).finally(() => {
+              activeRuns.delete(context.runId);
+              jobPromises.delete(jobPromise);
+              updateStatus();
+            });
+            jobPromises.add(jobPromise);
+          } catch (error) {
+            console.log(
+              `Could not claim job ${job.runId}:`,
+              error instanceof Error ? error.message : "Unknown error"
+            );
+          }
         } catch (error) {
-          console.log(
-            `Could not claim job ${job.runId}:`,
+          console.error(
+            "Polling error:",
             error instanceof Error ? error.message : "Unknown error"
           );
+          await new Promise((resolve) => setTimeout(resolve, 2e3));
         }
-      } catch (error) {
-        console.error(
-          "Polling error:",
-          error instanceof Error ? error.message : "Unknown error"
+      }
+      if (jobPromises.size > 0) {
+        console.log(
+          `Waiting for ${jobPromises.size} active job(s) to complete...`
         );
-        await new Promise((resolve) => setTimeout(resolve, 2e3));
+        await Promise.all(jobPromises);
       }
+      if (proxyEnabled) {
+        console.log("Stopping network proxy...");
+        await getProxyManager().stop();
+      }
+      console.log("Flushing metrics...");
+      await flushMetrics();
+      await shutdownMetrics();
+      state.mode = "stopped";
+      updateStatus();
+      console.log("Runner stopped");
+      process.exit(0);
+    } catch (error) {
+      if (error instanceof Error) {
+        console.error(`Error: ${error.message}`);
+      } else {
+        console.error("An unknown error occurred");
+      }
+      process.exit(1);
     }
-    if (jobPromises.size > 0) {
-      console.log(
-        `Waiting for ${jobPromises.size} active job(s) to complete...`
-      );
-      await Promise.all(jobPromises);
-    }
-    if (proxyEnabled) {
-      console.log("Stopping network proxy...");
-      await getProxyManager().stop();
-    }
-    console.log("Flushing metrics...");
-    await flushMetrics();
-    await shutdownMetrics();
-    state.mode = "stopped";
-    updateStatus();
-    console.log("Runner stopped");
-    process.exit(0);
-  } catch (error) {
-    if (error instanceof Error) {
-      console.error(`Error: ${error.message}`);
-    } else {
-      console.error("An unknown error occurred");
-    }
-    process.exit(1);
   }
-});
+);
 
 // src/commands/doctor.ts
 import { Command as Command2 } from "commander";
-import { existsSync as existsSync3, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
 import { dirname as dirname2, join as join3 } from "path";
 
 // src/lib/firecracker/process.ts
-import { readdirSync, readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
+import { readdirSync, readFileSync as readFileSync2, existsSync as existsSync3 } from "fs";
 import path6 from "path";
 function parseFirecrackerCmdline(cmdline) {
   const args = cmdline.split("\0");
@@ -9542,7 +9893,7 @@ function findFirecrackerProcesses() {
     if (!/^\d+$/.test(entry)) continue;
     const pid = parseInt(entry, 10);
     const cmdlinePath = path6.join(procDir, entry, "cmdline");
-    if (!existsSync2(cmdlinePath)) continue;
+    if (!existsSync3(cmdlinePath)) continue;
     try {
       const cmdline = readFileSync2(cmdlinePath, "utf-8");
       const parsed = parseFirecrackerCmdline(cmdline);
@@ -9599,7 +9950,7 @@ function findMitmproxyProcess() {
     if (!/^\d+$/.test(entry)) continue;
     const pid = parseInt(entry, 10);
     const cmdlinePath = path6.join(procDir, entry, "cmdline");
-    if (!existsSync2(cmdlinePath)) continue;
+    if (!existsSync3(cmdlinePath)) continue;
     try {
       const cmdline = readFileSync2(cmdlinePath, "utf-8");
       const parsed = parseMitmproxyCmdline(cmdline);
@@ -9614,194 +9965,197 @@ function findMitmproxyProcess() {
 }
 
 // src/commands/doctor.ts
-var doctorCommand = new Command2("doctor").description("Diagnose runner health, check network, and detect issues").option("--config <path>", "Config file path", "./runner.yaml").action(async (options) => {
-  try {
-    const config = loadConfig(options.config);
-    const configDir = dirname2(options.config);
-    const statusFilePath = join3(configDir, "status.json");
-    const workspacesDir = join3(configDir, "workspaces");
-    console.log(`Runner: ${config.name}`);
-    let status = null;
-    if (existsSync3(statusFilePath)) {
-      try {
-        status = JSON.parse(
-          readFileSync3(statusFilePath, "utf-8")
-        );
-        console.log(`Mode: ${status.mode}`);
-        if (status.started_at) {
-          const started = new Date(status.started_at);
-          const uptime = formatUptime(Date.now() - started.getTime());
-          console.log(
-            `Started: ${started.toLocaleString()} (uptime: ${uptime})`
+var doctorCommand = new Command2("doctor").description("Diagnose runner health, check network, and detect issues").option("--config <path>", "Config file path", "./runner.yaml").action(
+  // eslint-disable-next-line complexity -- TODO: refactor complex function
+  async (options) => {
+    try {
+      const config = loadConfig(options.config);
+      const configDir = dirname2(options.config);
+      const statusFilePath = join3(configDir, "status.json");
+      const workspacesDir = join3(configDir, "workspaces");
+      console.log(`Runner: ${config.name}`);
+      let status = null;
+      if (existsSync4(statusFilePath)) {
+        try {
+          status = JSON.parse(
+            readFileSync3(statusFilePath, "utf-8")
           );
+          console.log(`Mode: ${status.mode}`);
+          if (status.started_at) {
+            const started = new Date(status.started_at);
+            const uptime = formatUptime(Date.now() - started.getTime());
+            console.log(
+              `Started: ${started.toLocaleString()} (uptime: ${uptime})`
+            );
+          }
+        } catch {
+          console.log("Mode: unknown (status.json unreadable)");
         }
-      } catch {
-        console.log("Mode: unknown (status.json unreadable)");
-      }
-    } else {
-      console.log("Mode: unknown (no status.json)");
-    }
-    console.log("");
-    console.log("API Connectivity:");
-    try {
-      await pollForJob(config.server, config.group);
-      console.log(`  \u2713 Connected to ${config.server.url}`);
-      console.log("  \u2713 Authentication: OK");
-    } catch (error) {
-      console.log(`  \u2717 Cannot connect to ${config.server.url}`);
-      console.log(
-        `    Error: ${error instanceof Error ? error.message : "Unknown error"}`
-      );
-    }
-    console.log("");
-    console.log("Network:");
-    const warnings = [];
-    const bridgeStatus = await checkBridgeStatus();
-    if (bridgeStatus.exists) {
-      console.log(`  \u2713 Bridge ${BRIDGE_NAME2} (${bridgeStatus.ip})`);
-    } else {
-      console.log(`  \u2717 Bridge ${BRIDGE_NAME2} not found`);
-      warnings.push({
-        message: `Network bridge ${BRIDGE_NAME2} does not exist`
-      });
-    }
-    const proxyPort = config.proxy.port;
-    const mitmProc = findMitmproxyProcess();
-    const portInUse = await isPortInUse(proxyPort);
-    if (mitmProc) {
-      console.log(
-        `  \u2713 Proxy mitmproxy (PID ${mitmProc.pid}) on :${proxyPort}`
-      );
-    } else if (portInUse) {
-      console.log(
-        `  \u26A0\uFE0F Proxy port :${proxyPort} in use but mitmproxy process not found`
-      );
-      warnings.push({
-        message: `Port ${proxyPort} is in use but mitmproxy process not detected`
-      });
-    } else {
-      console.log(`  \u2717 Proxy mitmproxy not running`);
-      warnings.push({ message: "Proxy mitmproxy is not running" });
-    }
-    console.log("");
-    const processes = findFirecrackerProcesses();
-    const tapDevices = await listTapDevices();
-    const workspaces = existsSync3(workspacesDir) ? readdirSync2(workspacesDir).filter((d) => d.startsWith("vm0-")) : [];
-    const jobs = [];
-    const statusVmIds = /* @__PURE__ */ new Set();
-    const allocations = getAllocations();
-    if (status?.active_run_ids) {
-      for (const runId of status.active_run_ids) {
-        const vmId = runId.split("-")[0];
-        if (!vmId) continue;
-        statusVmIds.add(vmId);
-        const proc = processes.find((p) => p.vmId === vmId);
-        const ip = getIPForVm(vmId) ?? "not allocated";
-        jobs.push({
-          runId,
-          vmId,
-          ip,
-          hasProcess: !!proc,
-          pid: proc?.pid
-        });
+      } else {
+        console.log("Mode: unknown (no status.json)");
       }
-    }
-    const ipToVmIds = /* @__PURE__ */ new Map();
-    for (const [ip, allocation] of allocations) {
-      const existing = ipToVmIds.get(ip) ?? [];
-      existing.push(allocation.vmId);
-      ipToVmIds.set(ip, existing);
-    }
-    const maxConcurrent = config.sandbox.max_concurrent;
-    console.log(`Runs (${jobs.length} active, max ${maxConcurrent}):`);
-    if (jobs.length === 0) {
-      console.log("  No active runs");
-    } else {
-      console.log(
-        "  Run ID                                VM ID       IP              Status"
-      );
-      for (const job of jobs) {
-        const ipConflict = (ipToVmIds.get(job.ip)?.length ?? 0) > 1;
-        let statusText;
-        if (ipConflict) {
-          statusText = "\u26A0\uFE0F IP conflict!";
-        } else if (job.hasProcess) {
-          statusText = `\u2713 Running (PID ${job.pid})`;
-        } else {
-          statusText = "\u26A0\uFE0F No process";
-        }
+      console.log("");
+      console.log("API Connectivity:");
+      try {
+        await pollForJob(config.server, config.group);
+        console.log(`  \u2713 Connected to ${config.server.url}`);
+        console.log("  \u2713 Authentication: OK");
+      } catch (error) {
+        console.log(`  \u2717 Cannot connect to ${config.server.url}`);
         console.log(
-          `  ${job.runId}  ${job.vmId}    ${job.ip.padEnd(15)} ${statusText}`
+          `    Error: ${error instanceof Error ? error.message : "Unknown error"}`
         );
       }
-    }
-    console.log("");
-    for (const job of jobs) {
-      if (!job.hasProcess) {
+      console.log("");
+      console.log("Network:");
+      const warnings = [];
+      const bridgeStatus = await checkBridgeStatus();
+      if (bridgeStatus.exists) {
+        console.log(`  \u2713 Bridge ${BRIDGE_NAME2} (${bridgeStatus.ip})`);
+      } else {
+        console.log(`  \u2717 Bridge ${BRIDGE_NAME2} not found`);
         warnings.push({
-          message: `Run ${job.vmId} in status.json but no Firecracker process running`
+          message: `Network bridge ${BRIDGE_NAME2} does not exist`
         });
       }
-    }
-    for (const [ip, vmIds] of ipToVmIds) {
-      if (vmIds.length > 1) {
+      const proxyPort = config.proxy.port;
+      const mitmProc = findMitmproxyProcess();
+      const portInUse = await isPortInUse(proxyPort);
+      if (mitmProc) {
+        console.log(
+          `  \u2713 Proxy mitmproxy (PID ${mitmProc.pid}) on :${proxyPort}`
+        );
+      } else if (portInUse) {
+        console.log(
+          `  \u26A0\uFE0F Proxy port :${proxyPort} in use but mitmproxy process not found`
+        );
         warnings.push({
-          message: `IP conflict: ${ip} assigned to ${vmIds.join(", ")}`
+          message: `Port ${proxyPort} is in use but mitmproxy process not detected`
         });
+      } else {
+        console.log(`  \u2717 Proxy mitmproxy not running`);
+        warnings.push({ message: "Proxy mitmproxy is not running" });
       }
-    }
-    const processVmIds = new Set(processes.map((p) => p.vmId));
-    for (const proc of processes) {
-      if (!statusVmIds.has(proc.vmId)) {
-        warnings.push({
-          message: `Orphan process: PID ${proc.pid} (vmId ${proc.vmId}) not in status.json`
-        });
+      console.log("");
+      const processes = findFirecrackerProcesses();
+      const tapDevices = await listTapDevices();
+      const workspaces = existsSync4(workspacesDir) ? readdirSync2(workspacesDir).filter((d) => d.startsWith("vm0-")) : [];
+      const jobs = [];
+      const statusVmIds = /* @__PURE__ */ new Set();
+      const allocations = getAllocations();
+      if (status?.active_run_ids) {
+        for (const runId of status.active_run_ids) {
+          const vmId = runId.split("-")[0];
+          if (!vmId) continue;
+          statusVmIds.add(vmId);
+          const proc = processes.find((p) => p.vmId === vmId);
+          const ip = getIPForVm(vmId) ?? "not allocated";
+          jobs.push({
+            runId,
+            vmId,
+            ip,
+            hasProcess: !!proc,
+            pid: proc?.pid
+          });
+        }
       }
-    }
-    for (const tap of tapDevices) {
-      const vmId = tap.replace("tap", "");
-      if (!processVmIds.has(vmId) && !statusVmIds.has(vmId)) {
-        warnings.push({
-          message: `Orphan TAP device: ${tap} (no matching job or process)`
-        });
+      const ipToVmIds = /* @__PURE__ */ new Map();
+      for (const [ip, allocation] of allocations) {
+        const existing = ipToVmIds.get(ip) ?? [];
+        existing.push(allocation.vmId);
+        ipToVmIds.set(ip, existing);
       }
-    }
-    for (const ws of workspaces) {
-      const vmId = ws.replace("vm0-", "");
-      if (!processVmIds.has(vmId) && !statusVmIds.has(vmId)) {
+      const maxConcurrent = config.sandbox.max_concurrent;
+      console.log(`Runs (${jobs.length} active, max ${maxConcurrent}):`);
+      if (jobs.length === 0) {
+        console.log("  No active runs");
+      } else {
+        console.log(
+          "  Run ID                                VM ID       IP              Status"
+        );
+        for (const job of jobs) {
+          const ipConflict = (ipToVmIds.get(job.ip)?.length ?? 0) > 1;
+          let statusText;
+          if (ipConflict) {
+            statusText = "\u26A0\uFE0F IP conflict!";
+          } else if (job.hasProcess) {
+            statusText = `\u2713 Running (PID ${job.pid})`;
+          } else {
+            statusText = "\u26A0\uFE0F No process";
+          }
+          console.log(
+            `  ${job.runId}  ${job.vmId}    ${job.ip.padEnd(15)} ${statusText}`
+          );
+        }
+      }
+      console.log("");
+      for (const job of jobs) {
+        if (!job.hasProcess) {
+          warnings.push({
+            message: `Run ${job.vmId} in status.json but no Firecracker process running`
+          });
+        }
+      }
+      for (const [ip, vmIds] of ipToVmIds) {
+        if (vmIds.length > 1) {
+          warnings.push({
+            message: `IP conflict: ${ip} assigned to ${vmIds.join(", ")}`
+          });
+        }
+      }
+      const processVmIds = new Set(processes.map((p) => p.vmId));
+      for (const proc of processes) {
+        if (!statusVmIds.has(proc.vmId)) {
+          warnings.push({
+            message: `Orphan process: PID ${proc.pid} (vmId ${proc.vmId}) not in status.json`
+          });
+        }
+      }
+      for (const tap of tapDevices) {
+        const vmId = tap.replace("tap", "");
+        if (!processVmIds.has(vmId) && !statusVmIds.has(vmId)) {
+          warnings.push({
+            message: `Orphan TAP device: ${tap} (no matching job or process)`
+          });
+        }
+      }
+      for (const ws of workspaces) {
+        const vmId = ws.replace("vm0-", "");
+        if (!processVmIds.has(vmId) && !statusVmIds.has(vmId)) {
+          warnings.push({
+            message: `Orphan workspace: ${ws} (no matching job or process)`
+          });
+        }
+      }
+      const activeVmIps = new Set(jobs.map((j) => j.ip));
+      const iptablesRules = await listIptablesNatRules();
+      const orphanedIptables = await findOrphanedIptablesRules(
+        iptablesRules,
+        activeVmIps,
+        proxyPort
+      );
+      for (const rule of orphanedIptables) {
         warnings.push({
-          message: `Orphan workspace: ${ws} (no matching job or process)`
+          message: `Orphan iptables rule: redirect ${rule.sourceIp}:${rule.destPort} -> :${rule.redirectPort}`
         });
       }
-    }
-    const activeVmIps = new Set(jobs.map((j) => j.ip));
-    const iptablesRules = await listIptablesNatRules();
-    const orphanedIptables = await findOrphanedIptablesRules(
-      iptablesRules,
-      activeVmIps,
-      proxyPort
-    );
-    for (const rule of orphanedIptables) {
-      warnings.push({
-        message: `Orphan iptables rule: redirect ${rule.sourceIp}:${rule.destPort} -> :${rule.redirectPort}`
-      });
-    }
-    console.log("Warnings:");
-    if (warnings.length === 0) {
-      console.log("  None");
-    } else {
-      for (const w of warnings) {
-        console.log(`  - ${w.message}`);
+      console.log("Warnings:");
+      if (warnings.length === 0) {
+        console.log("  None");
+      } else {
+        for (const w of warnings) {
+          console.log(`  - ${w.message}`);
+        }
       }
+      process.exit(warnings.length > 0 ? 1 : 0);
+    } catch (error) {
+      console.error(
+        `Error: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
+      process.exit(1);
     }
-    process.exit(warnings.length > 0 ? 1 : 0);
-  } catch (error) {
-    console.error(
-      `Error: ${error instanceof Error ? error.message : "Unknown error"}`
-    );
-    process.exit(1);
   }
-});
+);
 function formatUptime(ms) {
   const seconds = Math.floor(ms / 1e3);
   const minutes = Math.floor(seconds / 60);
@@ -9815,10 +10169,11 @@ function formatUptime(ms) {
 
 // src/commands/kill.ts
 import { Command as Command3 } from "commander";
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "fs";
 import { dirname as dirname3, join as join4 } from "path";
 import * as readline2 from "readline";
 var killCommand = new Command3("kill").description("Force terminate a run and clean up all resources").argument("<run-id>", "Run ID (full UUID or short 8-char vmId)").option("--config <path>", "Config file path", "./runner.yaml").option("--force", "Skip confirmation prompt").action(
+  // eslint-disable-next-line complexity -- TODO: refactor complex function
   async (runIdArg, options) => {
     try {
       loadConfig(options.config);
@@ -9879,7 +10234,7 @@ var killCommand = new Command3("kill").description("Force terminate a run and cl
           message: error instanceof Error ? error.message : "Unknown error"
         });
       }
-      if (existsSync4(workspaceDir)) {
+      if (existsSync5(workspaceDir)) {
         try {
           rmSync(workspaceDir, { recursive: true, force: true });
           results.push({
@@ -9901,7 +10256,7 @@ var killCommand = new Command3("kill").description("Force terminate a run and cl
           message: "Not found (already cleaned)"
         });
       }
-      if (runId && existsSync4(statusFilePath)) {
+      if (runId && existsSync5(statusFilePath)) {
         try {
           const status = JSON.parse(
             readFileSync4(statusFilePath, "utf-8")
@@ -9960,7 +10315,7 @@ function resolveRunId(input, statusFilePath) {
     const vmId = input.split("-")[0];
     return { vmId: vmId ?? input, runId: input };
   }
-  if (existsSync4(statusFilePath)) {
+  if (existsSync5(statusFilePath)) {
     try {
       const status = JSON.parse(
         readFileSync4(statusFilePath, "utf-8")
@@ -9990,8 +10345,8 @@ async function confirm(message) {
 }
 
 // src/commands/benchmark.ts
-import { Command as Command4 } from "commander";
-import crypto from "crypto";
+import { Command as Command4, Option } from "commander";
+import crypto2 from "crypto";
 
 // src/lib/timing.ts
 var Timer = class {
@@ -10026,7 +10381,7 @@ var Timer = class {
 // src/commands/benchmark.ts
 function createBenchmarkContext(prompt, options) {
   return {
-    runId: crypto.randomUUID(),
+    runId: crypto2.randomUUID(),
     prompt,
     agentComposeVersionId: "benchmark-local",
     vars: null,
@@ -10043,11 +10398,19 @@ function createBenchmarkContext(prompt, options) {
 }
 var benchmarkCommand = new Command4("benchmark").description(
   "Run a VM performance benchmark (executes bash command directly)"
-).argument("<prompt>", "The bash command to execute in the VM").option("--config <path>", "Config file path", "./runner.yaml").option("--working-dir <path>", "Working directory in VM", "/home/user").option("--agent-type <type>", "Agent type", "claude-code").action(async (prompt, options) => {
+).argument("<prompt>", "The bash command to execute in the VM").option("--config <path>", "Config file path", "./runner.yaml").option("--working-dir <path>", "Working directory in VM", "/home/user").option("--agent-type <type>", "Agent type", "claude-code").addOption(
+  new Option(
+    "--guest-protocol <protocol>",
+    "Guest communication protocol"
+  ).choices(["vsock", "ssh"])
+).action(async (prompt, options) => {
   const timer = new Timer();
   try {
     timer.log("Loading configuration...");
     const config = loadDebugConfig(options.config);
+    if (options.guestProtocol) {
+      config.sandbox.guest_protocol = options.guestProtocol;
+    }
     validateFirecrackerPaths(config.firecracker);
     timer.log("Checking network prerequisites...");
     const networkCheck = checkNetworkPrerequisites();
@@ -10081,7 +10444,7 @@ var benchmarkCommand = new Command4("benchmark").description(
 });
 
 // src/index.ts
-var version = true ? "2.13.5" : "0.1.0";
+var version = true ? "2.15.0" : "0.1.0";
 program.name("vm0-runner").version(version).description("Self-hosted runner for VM0 agents");
 program.addCommand(startCommand);
 program.addCommand(doctorCommand);