@vm0/runner 2.14.0 → 3.0.0

package/index.js

@@ -189,7 +189,7 @@ async function completeJob(apiUrl, context, exitCode, error) {
 }
 
 // src/lib/executor.ts
-import path5 from "path";
+import path4 from "path";
 
 // src/lib/firecracker/vm.ts
 import { execSync as execSync2, spawn } from "child_process";
@@ -207,7 +207,7 @@ var FirecrackerClient = class {
   /**
    * Make HTTP request to Firecracker API
    */
-  async request(method, path7, body) {
+  async request(method, path6, body) {
     return new Promise((resolve, reject) => {
       const bodyStr = body !== void 0 ? JSON.stringify(body) : void 0;
       const headers = {
@@ -220,11 +220,11 @@ var FirecrackerClient = class {
         headers["Content-Length"] = Buffer.byteLength(bodyStr);
       }
       console.log(
-        `[FC API] ${method} ${path7}${bodyStr ? ` (${Buffer.byteLength(bodyStr)} bytes)` : ""}`
+        `[FC API] ${method} ${path6}${bodyStr ? ` (${Buffer.byteLength(bodyStr)} bytes)` : ""}`
       );
       const options = {
         socketPath: this.socketPath,
-        path: path7,
+        path: path6,
         method,
         headers,
         // Disable agent to ensure fresh connection for each request
@@ -969,11 +969,14 @@ var FirecrackerVM = class {
   socketPath;
   vmOverlayPath;
   // Per-VM sparse overlay for writes
+  vsockPath;
+  // Vsock UDS path for host-guest communication
   constructor(config) {
     this.config = config;
     this.workDir = config.workDir || `/tmp/vm0-vm-${config.vmId}`;
     this.socketPath = path2.join(this.workDir, "firecracker.sock");
     this.vmOverlayPath = path2.join(this.workDir, "overlay.ext4");
+    this.vsockPath = path2.join(this.workDir, "vsock.sock");
   }
   /**
    * Get current VM state
@@ -999,6 +1002,12 @@ var FirecrackerVM = class {
   getSocketPath() {
     return this.socketPath;
   }
+  /**
+   * Get the vsock UDS path for host-guest communication
+   */
+  getVsockPath() {
+    return this.vsockPath;
+  }
   /**
    * Start the VM
    * This spawns Firecracker, configures it via API, and boots the VM
@@ -1124,6 +1133,12 @@ var FirecrackerVM = class {
       guest_mac: this.networkConfig.guestMac,
       host_dev_name: this.networkConfig.tapDevice
     });
+    console.log(`[VM ${this.config.vmId}] Vsock: ${this.vsockPath}`);
+    await this.client.setVsock({
+      vsock_id: "vsock0",
+      guest_cid: 3,
+      uds_path: this.vsockPath
+    });
   }
   /**
    * Stop the VM gracefully
@@ -1206,80 +1221,194 @@ var FirecrackerVM = class {
   }
 };
 
-// src/lib/firecracker/guest.ts
-import { exec as exec3, execSync as execSync3 } from "child_process";
-import { promisify as promisify3 } from "util";
-import fs4 from "fs";
-import path3 from "path";
-import os from "os";
-var execAsync3 = promisify3(exec3);
-var DEFAULT_SSH_OPTIONS = [
-  "-o",
-  "StrictHostKeyChecking=no",
-  "-o",
-  "UserKnownHostsFile=/dev/null",
-  "-o",
-  "LogLevel=ERROR",
-  "-o",
-  "ConnectTimeout=10",
-  "-o",
-  "ServerAliveInterval=5",
-  "-o",
-  "ServerAliveCountMax=3"
-];
-var SSHClient = class {
-  config;
-  sshOptions;
-  constructor(config) {
-    this.config = config;
-    this.sshOptions = [...DEFAULT_SSH_OPTIONS];
-    if (config.privateKeyPath) {
-      this.sshOptions.push("-i", config.privateKeyPath);
+// src/lib/firecracker/vsock.ts
+import * as net from "net";
+import * as fs4 from "fs";
+import * as crypto from "crypto";
+var VSOCK_PORT = 1e3;
+var CONNECT_TIMEOUT_MS = 5e3;
+var HEADER_SIZE = 4;
+var MAX_MESSAGE_SIZE = 1024 * 1024;
+var DEFAULT_EXEC_TIMEOUT_MS = 3e5;
+function encode(msg) {
+  const json = Buffer.from(JSON.stringify(msg), "utf-8");
+  const header = Buffer.alloc(HEADER_SIZE);
+  header.writeUInt32BE(json.length, 0);
+  return Buffer.concat([header, json]);
+}
+var Decoder = class {
+  buf = Buffer.alloc(0);
+  decode(data) {
+    this.buf = Buffer.concat([this.buf, data]);
+    const messages = [];
+    while (this.buf.length >= HEADER_SIZE) {
+      const len = this.buf.readUInt32BE(0);
+      if (len > MAX_MESSAGE_SIZE) throw new Error(`Message too large: ${len}`);
+      const total = HEADER_SIZE + len;
+      if (this.buf.length < total) break;
+      const json = this.buf.subarray(HEADER_SIZE, total);
+      messages.push(JSON.parse(json.toString("utf-8")));
+      this.buf = this.buf.subarray(total);
+    }
+    return messages;
+  }
+};
+var VsockClient = class {
+  vsockPath;
+  socket = null;
+  connected = false;
+  pendingRequests = /* @__PURE__ */ new Map();
+  constructor(vsockPath) {
+    this.vsockPath = vsockPath;
+  }
+  /**
+   * Connect to the guest agent via vsock
+   */
+  async connect() {
+    if (this.connected && this.socket) {
+      return;
     }
-    if (config.connectTimeout) {
-      const idx = this.sshOptions.indexOf("ConnectTimeout=10");
-      if (idx !== -1) {
-        this.sshOptions[idx] = `ConnectTimeout=${config.connectTimeout}`;
+    return new Promise((resolve, reject) => {
+      if (!fs4.existsSync(this.vsockPath)) {
+        reject(new Error(`Vsock socket not found: ${this.vsockPath}`));
+        return;
       }
+      const socket = net.createConnection(this.vsockPath);
+      const decoder = new Decoder();
+      let fcConnected = false;
+      let gotReady = false;
+      let pingId = null;
+      let connectionEstablished = false;
+      const timeout = setTimeout(() => {
+        socket.destroy();
+        reject(new Error("Vsock connection timeout"));
+      }, CONNECT_TIMEOUT_MS);
+      socket.on("connect", () => {
+        socket.write(`CONNECT ${VSOCK_PORT}
+`);
+      });
+      socket.on("data", (data) => {
+        if (!fcConnected) {
+          const str = data.toString();
+          if (str.startsWith("OK ")) {
+            fcConnected = true;
+          } else {
+            clearTimeout(timeout);
+            socket.destroy();
+            reject(new Error(`Firecracker connect failed: ${str.trim()}`));
+          }
+          return;
+        }
+        try {
+          for (const msg of decoder.decode(data)) {
+            if (!connectionEstablished) {
+              if (!gotReady && msg.type === "ready") {
+                gotReady = true;
+                pingId = crypto.randomUUID();
+                const ping = { type: "ping", id: pingId, payload: {} };
+                socket.write(encode(ping));
+              } else if (msg.type === "pong" && msg.id === pingId) {
+                clearTimeout(timeout);
+                this.socket = socket;
+                this.connected = true;
+                connectionEstablished = true;
+                resolve();
+              }
+            } else {
+              this.handleMessage(msg);
+            }
+          }
+        } catch (e) {
+          clearTimeout(timeout);
+          socket.destroy();
+          reject(new Error(`Failed to parse message: ${e}`));
+        }
+      });
+      socket.on("error", (err) => {
+        clearTimeout(timeout);
+        this.connected = false;
+        this.socket = null;
+        reject(new Error(`Vsock error: ${err.message}`));
+      });
+      socket.on("close", () => {
+        clearTimeout(timeout);
+        this.connected = false;
+        this.socket = null;
+        if (!gotReady) {
+          reject(new Error("Vsock closed before ready"));
+        }
+        for (const [id, req] of this.pendingRequests) {
+          clearTimeout(req.timeout);
+          req.reject(new Error("Connection closed"));
+          this.pendingRequests.delete(id);
+        }
+      });
+    });
+  }
+  /**
+   * Handle incoming message and route to pending request
+   */
+  handleMessage(msg) {
+    const pending = this.pendingRequests.get(msg.id);
+    if (pending) {
+      clearTimeout(pending.timeout);
+      this.pendingRequests.delete(msg.id);
+      pending.resolve(msg);
     }
   }
   /**
-   * Build SSH command prefix
+   * Send a request and wait for response
    */
-  buildSSHCommand() {
-    return [
-      "ssh",
-      ...this.sshOptions,
-      `${this.config.user}@${this.config.host}`
-    ];
+  async request(type, payload, timeoutMs) {
+    await this.connect();
+    if (!this.socket) {
+      throw new Error("Not connected");
+    }
+    const id = crypto.randomUUID();
+    const msg = { type, id, payload };
+    return new Promise((resolve, reject) => {
+      const timeout = setTimeout(() => {
+        this.pendingRequests.delete(id);
+        reject(new Error(`Request timeout: ${type}`));
+      }, timeoutMs);
+      this.pendingRequests.set(id, {
+        resolve,
+        reject,
+        timeout
+      });
+      this.socket.write(encode(msg));
+    });
   }
   /**
    * Execute a command on the remote VM
-   * @param command - The command to execute
-   * @param timeoutMs - Optional timeout in milliseconds (default: 300000ms = 5 minutes)
    */
   async exec(command, timeoutMs) {
-    const sshCmd = this.buildSSHCommand();
-    const escapedCommand = command.replace(/'/g, "'\\''");
-    const fullCmd = [...sshCmd, `'${escapedCommand}'`].join(" ");
+    const actualTimeout = timeoutMs ?? DEFAULT_EXEC_TIMEOUT_MS;
     try {
-      const { stdout, stderr } = await execAsync3(fullCmd, {
-        maxBuffer: 50 * 1024 * 1024,
-        // 50MB buffer
-        timeout: timeoutMs ?? 3e5
-        // Default 5 minutes, customizable per call
-      });
+      const response = await this.request(
+        "exec",
+        { command, timeoutMs: actualTimeout },
+        actualTimeout + 5e3
+        // Add buffer for network latency
+      );
+      if (response.type === "error") {
+        const errorPayload = response.payload;
+        return {
+          exitCode: 1,
+          stdout: "",
+          stderr: errorPayload.message
+        };
+      }
       return {
-        exitCode: 0,
-        stdout: stdout || "",
-        stderr: stderr || ""
+        exitCode: response.payload.exitCode,
+        stdout: response.payload.stdout,
+        stderr: response.payload.stderr
       };
-    } catch (error) {
-      const execError = error;
+    } catch (e) {
       return {
-        exitCode: execError.code ?? 1,
-        stdout: execError.stdout || "",
-        stderr: execError.stderr || execError.message || "Unknown error"
+        exitCode: 1,
+        stdout: "",
+        stderr: e instanceof Error ? e.message : String(e)
       };
     }
   }
@@ -1297,7 +1426,6 @@ var SSHClient = class {
   }
   /**
    * Write content to a file on the remote VM
-   * Uses base64 encoding to safely transfer any content
    */
   async writeFile(remotePath, content) {
     const encoded = Buffer.from(content).toString("base64");
@@ -1317,7 +1445,6 @@ var SSHClient = class {
   }
   /**
    * Write content to a file on the remote VM using sudo
-   * Used for writing to privileged locations like /usr/local/bin
    */
   async writeFileWithSudo(remotePath, content) {
     const encoded = Buffer.from(content).toString("base64");
@@ -1348,8 +1475,7 @@ var SSHClient = class {
     return result.stdout;
   }
   /**
-   * Check if SSH connection is available
-   * Uses a short timeout (15s) to ensure waitUntilReachable() respects its outer timeout
+   * Check if vsock connection is available
    */
   async isReachable() {
     try {
@@ -1360,7 +1486,7 @@ var SSHClient = class {
     }
   }
   /**
-   * Wait for SSH to become available
+   * Wait for vsock to become available
    */
   async waitUntilReachable(timeoutMs = 12e4, intervalMs = 2e3) {
     const start = Date.now();
@@ -1377,12 +1503,10 @@ var SSHClient = class {
         }
       });
     }
-    throw new Error(
-      `SSH not reachable after ${timeoutMs}ms at ${this.config.host}`
-    );
+    throw new Error(`Vsock not reachable after ${timeoutMs}ms`);
   }
   /**
-   * Create a directory on the remote VM (mkdir -p)
+   * Create a directory on the remote VM
    */
   async mkdir(remotePath) {
     await this.execOrThrow(`mkdir -p '${remotePath}'`);
@@ -1395,30 +1519,27 @@ var SSHClient = class {
     return result.exitCode === 0;
   }
   /**
-   * Get the host IP
+   * Get the vsock path (for logging/debugging)
    */
-  getHost() {
-    return this.config.host;
-  }
-};
-function createVMSSHClient(guestIp, user = "root", privateKeyPath) {
-  return new SSHClient({
-    host: guestIp,
-    user,
-    privateKeyPath
-  });
-}
-function getRunnerSSHKeyPath() {
-  const runnerKeyPath = "/opt/vm0-runner/ssh/id_rsa";
-  if (fs4.existsSync(runnerKeyPath)) {
-    return runnerKeyPath;
+  getVsockPath() {
+    return this.vsockPath;
   }
-  const userKeyPath = path3.join(os.homedir(), ".ssh", "id_rsa");
-  if (fs4.existsSync(userKeyPath)) {
-    return userKeyPath;
+  /**
+   * Close the connection
+   */
+  close() {
+    if (this.socket) {
+      this.socket.end();
+      this.socket = null;
+    }
+    this.connected = false;
+    for (const [id, req] of this.pendingRequests) {
+      clearTimeout(req.timeout);
+      req.reject(new Error("Connection closed"));
+      this.pendingRequests.delete(id);
+    }
   }
-  return "";
-}
+};
 
 // ../../node_modules/.pnpm/@ts-rest+core@3.53.0-rc.1_@types+node@24.3.0/node_modules/@ts-rest/core/index.esm.mjs
 var util;
@@ -1768,8 +1889,8 @@ function getErrorMap() {
   return overrideErrorMap;
 }
 var makeIssue = (params) => {
-  const { data, path: path7, errorMaps, issueData } = params;
-  const fullPath = [...path7, ...issueData.path || []];
+  const { data, path: path6, errorMaps, issueData } = params;
+  const fullPath = [...path6, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -1868,11 +1989,11 @@ var errorUtil;
   errorUtil2.toString = (message) => typeof message === "string" ? message : message === null || message === void 0 ? void 0 : message.message;
 })(errorUtil || (errorUtil = {}));
 var ParseInputLazyPath = class {
-  constructor(parent, value, path7, key) {
+  constructor(parent, value, path6, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path7;
+    this._path = path6;
     this._key = key;
   }
   get path() {
@@ -5744,7 +5865,7 @@ var runEventsContract = c3.router({
       id: z6.string().min(1, "Run ID is required")
     }),
     query: z6.object({
-      since: z6.coerce.number().default(0),
+      since: z6.coerce.number().default(-1),
       limit: z6.coerce.number().default(100)
     }),
     responses: {
@@ -6127,7 +6248,7 @@ import { z as z8 } from "zod";
 var c5 = initContract();
 var agentEventSchema = z8.object({
   type: z8.string(),
-  sequenceNumber: z8.number().int().positive()
+  sequenceNumber: z8.number().int().nonnegative()
 }).passthrough();
 var artifactSnapshotSchema = z8.object({
   artifactName: z8.string(),
@@ -7762,7 +7883,7 @@ var publicVolumeDownloadContract = c18.router({
 });
 
 // ../../packages/core/src/sandbox/scripts/dist/bundled.ts
-var RUN_AGENT_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/run-agent.ts\nimport * as fs7 from "fs";\nimport { spawn, execSync as execSync4 } from "child_process";\nimport * as readline from "readline";\n\n// src/sandbox/scripts/src/lib/common.ts\nimport * as fs from "fs";\nvar RUN_ID = process.env.VM0_RUN_ID ?? "";\nvar API_URL = process.env.VM0_API_URL ?? "";\nvar API_TOKEN = process.env.VM0_API_TOKEN ?? "";\nvar PROMPT = process.env.VM0_PROMPT ?? "";\nvar VERCEL_BYPASS = process.env.VERCEL_PROTECTION_BYPASS ?? "";\nvar RESUME_SESSION_ID = process.env.VM0_RESUME_SESSION_ID ?? "";\nvar CLI_AGENT_TYPE = process.env.CLI_AGENT_TYPE ?? "claude-code";\nvar OPENAI_MODEL = process.env.OPENAI_MODEL ?? "";\nvar WORKING_DIR = process.env.VM0_WORKING_DIR ?? "";\nvar ARTIFACT_DRIVER = process.env.VM0_ARTIFACT_DRIVER ?? "";\nvar ARTIFACT_MOUNT_PATH = process.env.VM0_ARTIFACT_MOUNT_PATH ?? "";\nvar ARTIFACT_VOLUME_NAME = process.env.VM0_ARTIFACT_VOLUME_NAME ?? "";\nvar ARTIFACT_VERSION_ID = process.env.VM0_ARTIFACT_VERSION_ID ?? "";\nvar WEBHOOK_URL = `${API_URL}/api/webhooks/agent/events`;\nvar CHECKPOINT_URL = `${API_URL}/api/webhooks/agent/checkpoints`;\nvar COMPLETE_URL = `${API_URL}/api/webhooks/agent/complete`;\nvar HEARTBEAT_URL = `${API_URL}/api/webhooks/agent/heartbeat`;\nvar TELEMETRY_URL = `${API_URL}/api/webhooks/agent/telemetry`;\nvar PROXY_URL = `${API_URL}/api/webhooks/agent/proxy`;\nvar STORAGE_PREPARE_URL = `${API_URL}/api/webhooks/agent/storages/prepare`;\nvar STORAGE_COMMIT_URL = `${API_URL}/api/webhooks/agent/storages/commit`;\nvar HEARTBEAT_INTERVAL = 60;\nvar TELEMETRY_INTERVAL = 30;\nvar HTTP_CONNECT_TIMEOUT = 10;\nvar HTTP_MAX_TIME = 30;\nvar HTTP_MAX_TIME_UPLOAD = 60;\nvar HTTP_MAX_RETRIES = 3;\nvar SESSION_ID_FILE = `/tmp/vm0-session-${RUN_ID}.txt`;\nvar SESSION_HISTORY_PATH_FILE = `/tmp/vm0-session-history-${RUN_ID}.txt`;\nvar EVENT_ERROR_FLAG = `/tmp/vm0-event-error-${RUN_ID}`;\nvar SYSTEM_LOG_FILE = `/tmp/vm0-main-${RUN_ID}.log`;\nvar AGENT_LOG_FILE = `/tmp/vm0-agent-${RUN_ID}.log`;\nvar METRICS_LOG_FILE = `/tmp/vm0-metrics-${RUN_ID}.jsonl`;\nvar NETWORK_LOG_FILE = `/tmp/vm0-network-${RUN_ID}.jsonl`;\nvar TELEMETRY_LOG_POS_FILE = `/tmp/vm0-telemetry-log-pos-${RUN_ID}.txt`;\nvar TELEMETRY_METRICS_POS_FILE = `/tmp/vm0-telemetry-metrics-pos-${RUN_ID}.txt`;\nvar TELEMETRY_NETWORK_POS_FILE = `/tmp/vm0-telemetry-network-pos-${RUN_ID}.txt`;\nvar TELEMETRY_SANDBOX_OPS_POS_FILE = `/tmp/vm0-telemetry-sandbox-ops-pos-${RUN_ID}.txt`;\nvar SANDBOX_OPS_LOG_FILE = `/tmp/vm0-sandbox-ops-${RUN_ID}.jsonl`;\nvar METRICS_INTERVAL = 5;\nfunction validateConfig() {\n  if (!WORKING_DIR) {\n    throw new Error("VM0_WORKING_DIR is required but not set");\n  }\n  return true;\n}\nfunction recordSandboxOp(actionType, durationMs, success, error) {\n  const entry = {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    action_type: actionType,\n    duration_ms: durationMs,\n    success\n  };\n  if (error) {\n    entry.error = error;\n  }\n  fs.appendFileSync(SANDBOX_OPS_LOG_FILE, JSON.stringify(entry) + "\\n");\n}\n\n// src/sandbox/scripts/src/lib/log.ts\nvar SCRIPT_NAME = process.env.LOG_SCRIPT_NAME ?? "run-agent";\nvar DEBUG_MODE = process.env.VM0_DEBUG === "1";\nfunction timestamp() {\n  return (/* @__PURE__ */ new Date()).toISOString().replace(/\\.\\d{3}Z$/, "Z");\n}\nfunction logInfo(msg) {\n  console.error(`[${timestamp()}] [INFO] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logWarn(msg) {\n  console.error(`[${timestamp()}] [WARN] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logError(msg) {\n  console.error(`[${timestamp()}] [ERROR] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logDebug(msg) {\n  if (DEBUG_MODE) {\n    console.error(`[${timestamp()}] [DEBUG] [sandbox:${SCRIPT_NAME}] ${msg}`);\n  }\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nimport * as fs2 from "fs";\n\n// src/sandbox/scripts/src/lib/http-client.ts\nimport { execSync } from "child_process";\nfunction sleep(ms) {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\nasync function httpPostJson(url, data, maxRetries = HTTP_MAX_RETRIES) {\n  const headers = {\n    "Content-Type": "application/json",\n    Authorization: `Bearer ${API_TOKEN}`\n  };\n  if (VERCEL_BYPASS) {\n    headers["x-vercel-protection-bypass"] = VERCEL_BYPASS;\n  }\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP POST attempt ${attempt}/${maxRetries} to ${url}`);\n    try {\n      const controller = new AbortController();\n      const timeoutId = setTimeout(\n        () => controller.abort(),\n        HTTP_MAX_TIME * 1e3\n      );\n      const response = await fetch(url, {\n        method: "POST",\n        headers,\n        body: JSON.stringify(data),\n        signal: controller.signal\n      });\n      clearTimeout(timeoutId);\n      if (response.ok) {\n        const text = await response.text();\n        if (text) {\n          return JSON.parse(text);\n        }\n        return {};\n      }\n      logWarn(\n        `HTTP POST failed (attempt ${attempt}/${maxRetries}): HTTP ${response.status}`\n      );\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("abort")) {\n        logWarn(`HTTP POST failed (attempt ${attempt}/${maxRetries}): Timeout`);\n      } else {\n        logWarn(\n          `HTTP POST failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP POST failed after ${maxRetries} attempts to ${url}`);\n  return null;\n}\nasync function httpPutPresigned(presignedUrl, filePath, contentType = "application/octet-stream", maxRetries = HTTP_MAX_RETRIES) {\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP PUT presigned attempt ${attempt}/${maxRetries}`);\n    try {\n      const curlCmd = [\n        "curl",\n        "-f",\n        "-X",\n        "PUT",\n        "-H",\n        `Content-Type: ${contentType}`,\n        "--data-binary",\n        `@${filePath}`,\n        "--connect-timeout",\n        String(HTTP_CONNECT_TIMEOUT),\n        "--max-time",\n        String(HTTP_MAX_TIME_UPLOAD),\n        "--silent",\n        `"${presignedUrl}"`\n      ].join(" ");\n      execSync(curlCmd, {\n        timeout: HTTP_MAX_TIME_UPLOAD * 1e3,\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      return true;\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("ETIMEDOUT") || errorMsg.includes("timeout")) {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): Timeout`\n        );\n      } else {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP PUT presigned failed after ${maxRetries} attempts`);\n  return false;\n}\n\n// src/sandbox/scripts/src/lib/secret-masker.ts\nvar MASK_PLACEHOLDER = "***";\nvar MIN_SECRET_LENGTH = 5;\nvar _masker = null;\nvar SecretMasker = class {\n  patterns;\n  /**\n   * Initialize masker with secret values.\n   *\n   * @param secretValues - List of secret values to mask\n   */\n  constructor(secretValues) {\n    this.patterns = /* @__PURE__ */ new Set();\n    for (const secret of secretValues) {\n      if (!secret || secret.length < MIN_SECRET_LENGTH) {\n        continue;\n      }\n      this.patterns.add(secret);\n      try {\n        const b64 = Buffer.from(secret).toString("base64");\n        if (b64.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(b64);\n        }\n      } catch {\n      }\n      try {\n        const urlEnc = encodeURIComponent(secret);\n        if (urlEnc !== secret && urlEnc.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(urlEnc);\n        }\n      } catch {\n      }\n    }\n  }\n  /**\n   * Recursively mask all occurrences of secrets in the data.\n   *\n   * @param data - Data to mask (string, list, dict, or primitive)\n   * @returns Masked data with the same structure\n   */\n  mask(data) {\n    return this.deepMask(data);\n  }\n  deepMask(data) {\n    if (typeof data === "string") {\n      let result = data;\n      for (const pattern of this.patterns) {\n        result = result.split(pattern).join(MASK_PLACEHOLDER);\n      }\n      return result;\n    }\n    if (Array.isArray(data)) {\n      return data.map((item) => this.deepMask(item));\n    }\n    if (data !== null && typeof data === "object") {\n      const result = {};\n      for (const [key, value] of Object.entries(\n        data\n      )) {\n        result[key] = this.deepMask(value);\n      }\n      return result;\n    }\n    return data;\n  }\n};\nfunction createMasker() {\n  const secretValuesStr = process.env.VM0_SECRET_VALUES ?? "";\n  if (!secretValuesStr) {\n    return new SecretMasker([]);\n  }\n  const secretValues = [];\n  for (const encodedValue of secretValuesStr.split(",")) {\n    const trimmed = encodedValue.trim();\n    if (trimmed) {\n      try {\n        const decoded = Buffer.from(trimmed, "base64").toString("utf-8");\n        if (decoded) {\n          secretValues.push(decoded);\n        }\n      } catch {\n      }\n    }\n  }\n  return new SecretMasker(secretValues);\n}\nfunction getMasker() {\n  if (_masker === null) {\n    _masker = createMasker();\n  }\n  return _masker;\n}\nfunction maskData(data) {\n  return getMasker().mask(data);\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nasync function sendEvent(event, sequenceNumber) {\n  const eventType = event.type ?? "";\n  const eventSubtype = event.subtype ?? "";\n  let sessionId = null;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (eventType === "thread.started") {\n      sessionId = event.thread_id ?? "";\n    }\n  } else {\n    if (eventType === "system" && eventSubtype === "init") {\n      sessionId = event.session_id ?? "";\n    }\n  }\n  if (sessionId && !fs2.existsSync(SESSION_ID_FILE)) {\n    logInfo(`Captured session ID: ${sessionId}`);\n    fs2.writeFileSync(SESSION_ID_FILE, sessionId);\n    const homeDir = process.env.HOME ?? "/home/user";\n    let sessionHistoryPath;\n    if (CLI_AGENT_TYPE === "codex") {\n      const codexHome = process.env.CODEX_HOME ?? `${homeDir}/.codex`;\n      sessionHistoryPath = `CODEX_SEARCH:${codexHome}/sessions:${sessionId}`;\n    } else {\n      const projectName = WORKING_DIR.replace(/^\\//, "").replace(/\\//g, "-");\n      sessionHistoryPath = `${homeDir}/.claude/projects/-${projectName}/${sessionId}.jsonl`;\n    }\n    fs2.writeFileSync(SESSION_HISTORY_PATH_FILE, sessionHistoryPath);\n    logInfo(`Session history will be at: ${sessionHistoryPath}`);\n  }\n  const eventWithSequence = {\n    ...event,\n    sequenceNumber\n  };\n  const maskedEvent = maskData(eventWithSequence);\n  const payload = {\n    runId: RUN_ID,\n    events: [maskedEvent]\n  };\n  const result = await httpPostJson(WEBHOOK_URL, payload);\n  if (result === null) {\n    logError("Failed to send event after retries");\n    fs2.writeFileSync(EVENT_ERROR_FLAG, "1");\n    return false;\n  }\n  return true;\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nimport * as fs4 from "fs";\nimport * as path2 from "path";\n\n// src/sandbox/scripts/src/lib/direct-upload.ts\nimport * as fs3 from "fs";\nimport * as path from "path";\nimport * as crypto from "crypto";\nimport { execSync as execSync2 } from "child_process";\nfunction computeFileHash(filePath) {\n  const hash = crypto.createHash("sha256");\n  const buffer = fs3.readFileSync(filePath);\n  hash.update(buffer);\n  return hash.digest("hex");\n}\nfunction collectFileMetadata(dirPath) {\n  const files = [];\n  function walkDir(currentPath, relativePath) {\n    const items = fs3.readdirSync(currentPath);\n    for (const item of items) {\n      if (item === ".git" || item === ".vm0") {\n        continue;\n      }\n      const fullPath = path.join(currentPath, item);\n      const relPath = relativePath ? path.join(relativePath, item) : item;\n      const stat = fs3.statSync(fullPath);\n      if (stat.isDirectory()) {\n        walkDir(fullPath, relPath);\n      } else if (stat.isFile()) {\n        try {\n          const fileHash = computeFileHash(fullPath);\n          files.push({\n            path: relPath,\n            hash: fileHash,\n            size: stat.size\n          });\n        } catch (error) {\n          logWarn(`Could not process file ${relPath}: ${error}`);\n        }\n      }\n    }\n  }\n  walkDir(dirPath, "");\n  return files;\n}\nfunction createArchive(dirPath, tarPath) {\n  try {\n    execSync2(\n      `tar -czf "${tarPath}" --exclude=\'.git\' --exclude=\'.vm0\' -C "${dirPath}" .`,\n      { stdio: ["pipe", "pipe", "pipe"] }\n    );\n    return true;\n  } catch (error) {\n    logError(`Failed to create archive: ${error}`);\n    return false;\n  }\n}\nfunction createManifest(files, manifestPath) {\n  try {\n    const manifest = {\n      version: 1,\n      files,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    fs3.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));\n    return true;\n  } catch (error) {\n    logError(`Failed to create manifest: ${error}`);\n    return false;\n  }\n}\nasync function createDirectUploadSnapshot(mountPath, storageName, storageType = "artifact", runId, message) {\n  logInfo(\n    `Creating direct upload snapshot for \'${storageName}\' (type: ${storageType})`\n  );\n  logInfo("Computing file hashes...");\n  const hashStart = Date.now();\n  const files = collectFileMetadata(mountPath);\n  recordSandboxOp("artifact_hash_compute", Date.now() - hashStart, true);\n  logInfo(`Found ${files.length} files`);\n  if (files.length === 0) {\n    logInfo("No files to upload, creating empty version");\n  }\n  logInfo("Calling prepare endpoint...");\n  const prepareStart = Date.now();\n  const preparePayload = {\n    storageName,\n    storageType,\n    files\n  };\n  if (runId) {\n    preparePayload.runId = runId;\n  }\n  const prepareResponse = await httpPostJson(\n    STORAGE_PREPARE_URL,\n    preparePayload\n  );\n  if (!prepareResponse) {\n    logError("Failed to call prepare endpoint");\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  const versionId = prepareResponse.versionId;\n  if (!versionId) {\n    logError(`Invalid prepare response: ${JSON.stringify(prepareResponse)}`);\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, true);\n  if (prepareResponse.existing) {\n    logInfo(`Version already exists (deduplicated): ${versionId.slice(0, 8)}`);\n    logInfo("Updating HEAD pointer...");\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse || !commitResponse.success) {\n      logError(`Failed to update HEAD: ${JSON.stringify(commitResponse)}`);\n      return null;\n    }\n    return { versionId, deduplicated: true };\n  }\n  const uploads = prepareResponse.uploads;\n  if (!uploads) {\n    logError("No upload URLs in prepare response");\n    return null;\n  }\n  const archiveInfo = uploads.archive;\n  const manifestInfo = uploads.manifest;\n  if (!archiveInfo || !manifestInfo) {\n    logError("Missing archive or manifest upload info");\n    return null;\n  }\n  const tempDir = fs3.mkdtempSync(`/tmp/direct-upload-${storageName}-`);\n  try {\n    logInfo("Creating archive...");\n    const archiveStart = Date.now();\n    const archivePath = path.join(tempDir, "archive.tar.gz");\n    if (!createArchive(mountPath, archivePath)) {\n      logError("Failed to create archive");\n      recordSandboxOp(\n        "artifact_archive_create",\n        Date.now() - archiveStart,\n        false\n      );\n      return null;\n    }\n    recordSandboxOp("artifact_archive_create", Date.now() - archiveStart, true);\n    logInfo("Creating manifest...");\n    const manifestPath = path.join(tempDir, "manifest.json");\n    if (!createManifest(files, manifestPath)) {\n      logError("Failed to create manifest");\n      return null;\n    }\n    logInfo("Uploading archive to S3...");\n    const s3UploadStart = Date.now();\n    if (!await httpPutPresigned(\n      archiveInfo.presignedUrl,\n      archivePath,\n      "application/gzip"\n    )) {\n      logError("Failed to upload archive to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    logInfo("Uploading manifest to S3...");\n    if (!await httpPutPresigned(\n      manifestInfo.presignedUrl,\n      manifestPath,\n      "application/json"\n    )) {\n      logError("Failed to upload manifest to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, true);\n    logInfo("Calling commit endpoint...");\n    const commitStart = Date.now();\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    if (message) {\n      commitPayload.message = message;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse) {\n      logError("Failed to call commit endpoint");\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    if (!commitResponse.success) {\n      logError(`Commit failed: ${JSON.stringify(commitResponse)}`);\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_commit_api", Date.now() - commitStart, true);\n    logInfo(`Direct upload snapshot created: ${versionId.slice(0, 8)}`);\n    return { versionId };\n  } finally {\n    try {\n      fs3.rmSync(tempDir, { recursive: true, force: true });\n    } catch {\n    }\n  }\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nfunction findJsonlFiles(dir) {\n  const files = [];\n  function walk(currentDir) {\n    try {\n      const items = fs4.readdirSync(currentDir);\n      for (const item of items) {\n        const fullPath = path2.join(currentDir, item);\n        const stat = fs4.statSync(fullPath);\n        if (stat.isDirectory()) {\n          walk(fullPath);\n        } else if (item.endsWith(".jsonl")) {\n          files.push(fullPath);\n        }\n      }\n    } catch {\n    }\n  }\n  walk(dir);\n  return files;\n}\nfunction findCodexSessionFile(sessionsDir, sessionId) {\n  const files = findJsonlFiles(sessionsDir);\n  logInfo(`Searching for Codex session ${sessionId} in ${files.length} files`);\n  for (const filepath of files) {\n    const filename = path2.basename(filepath);\n    if (filename.includes(sessionId) || filename.replace(/-/g, "").includes(sessionId.replace(/-/g, ""))) {\n      logInfo(`Found Codex session file: ${filepath}`);\n      return filepath;\n    }\n  }\n  if (files.length > 0) {\n    files.sort((a, b) => {\n      const statA = fs4.statSync(a);\n      const statB = fs4.statSync(b);\n      return statB.mtimeMs - statA.mtimeMs;\n    });\n    const mostRecent = files[0] ?? null;\n    if (mostRecent) {\n      logInfo(\n        `Session ID not found in filenames, using most recent: ${mostRecent}`\n      );\n    }\n    return mostRecent;\n  }\n  return null;\n}\nasync function createCheckpoint() {\n  const checkpointStart = Date.now();\n  logInfo("Creating checkpoint...");\n  const sessionIdStart = Date.now();\n  if (!fs4.existsSync(SESSION_ID_FILE)) {\n    logError("No session ID found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_id_read",\n      Date.now() - sessionIdStart,\n      false,\n      "Session ID file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const cliAgentSessionId = fs4.readFileSync(SESSION_ID_FILE, "utf-8").trim();\n  recordSandboxOp("session_id_read", Date.now() - sessionIdStart, true);\n  const sessionHistoryStart = Date.now();\n  if (!fs4.existsSync(SESSION_HISTORY_PATH_FILE)) {\n    logError("No session history path found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history path file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const sessionHistoryPathRaw = fs4.readFileSync(SESSION_HISTORY_PATH_FILE, "utf-8").trim();\n  let sessionHistoryPath;\n  if (sessionHistoryPathRaw.startsWith("CODEX_SEARCH:")) {\n    const parts = sessionHistoryPathRaw.split(":");\n    if (parts.length !== 3) {\n      logError(`Invalid Codex search marker format: ${sessionHistoryPathRaw}`);\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Invalid Codex search marker"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const sessionsDir = parts[1] ?? "";\n    const codexSessionId = parts[2] ?? "";\n    logInfo(`Searching for Codex session in ${sessionsDir}`);\n    const foundPath = findCodexSessionFile(sessionsDir, codexSessionId);\n    if (!foundPath) {\n      logError(\n        `Could not find Codex session file for ${codexSessionId} in ${sessionsDir}`\n      );\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Codex session file not found"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    sessionHistoryPath = foundPath;\n  } else {\n    sessionHistoryPath = sessionHistoryPathRaw;\n  }\n  if (!fs4.existsSync(sessionHistoryPath)) {\n    logError(\n      `Session history file not found at ${sessionHistoryPath}, checkpoint creation failed`\n    );\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  let cliAgentSessionHistory;\n  try {\n    cliAgentSessionHistory = fs4.readFileSync(sessionHistoryPath, "utf-8");\n  } catch (error) {\n    logError(`Failed to read session history: ${error}`);\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      String(error)\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  if (!cliAgentSessionHistory.trim()) {\n    logError("Session history is empty, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history empty"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const lineCount = cliAgentSessionHistory.trim().split("\\n").length;\n  logInfo(`Session history loaded (${lineCount} lines)`);\n  recordSandboxOp(\n    "session_history_read",\n    Date.now() - sessionHistoryStart,\n    true\n  );\n  let artifactSnapshot = null;\n  if (ARTIFACT_DRIVER && ARTIFACT_VOLUME_NAME) {\n    logInfo(`Processing artifact with driver: ${ARTIFACT_DRIVER}`);\n    if (ARTIFACT_DRIVER !== "vas") {\n      logError(\n        `Unknown artifact driver: ${ARTIFACT_DRIVER} (only \'vas\' is supported)`\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    logInfo(\n      `Creating VAS snapshot for artifact \'${ARTIFACT_VOLUME_NAME}\' at ${ARTIFACT_MOUNT_PATH}`\n    );\n    logInfo("Using direct S3 upload...");\n    const snapshot = await createDirectUploadSnapshot(\n      ARTIFACT_MOUNT_PATH,\n      ARTIFACT_VOLUME_NAME,\n      "artifact",\n      RUN_ID,\n      `Checkpoint from run ${RUN_ID}`\n    );\n    if (!snapshot) {\n      logError("Failed to create VAS snapshot for artifact");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const artifactVersion = snapshot.versionId;\n    if (!artifactVersion) {\n      logError("Failed to extract versionId from snapshot");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    artifactSnapshot = {\n      artifactName: ARTIFACT_VOLUME_NAME,\n      artifactVersion\n    };\n    logInfo(\n      `VAS artifact snapshot created: ${ARTIFACT_VOLUME_NAME}@${artifactVersion}`\n    );\n  } else {\n    logInfo(\n      "No artifact configured, creating checkpoint without artifact snapshot"\n    );\n  }\n  logInfo("Calling checkpoint API...");\n  const checkpointPayload = {\n    runId: RUN_ID,\n    cliAgentType: CLI_AGENT_TYPE,\n    cliAgentSessionId,\n    cliAgentSessionHistory\n  };\n  if (artifactSnapshot) {\n    checkpointPayload.artifactSnapshot = artifactSnapshot;\n  }\n  const apiCallStart = Date.now();\n  const result = await httpPostJson(\n    CHECKPOINT_URL,\n    checkpointPayload\n  );\n  if (result && result.checkpointId) {\n    const checkpointId = result.checkpointId;\n    logInfo(`Checkpoint created successfully: ${checkpointId}`);\n    recordSandboxOp("checkpoint_api_call", Date.now() - apiCallStart, true);\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, true);\n    return true;\n  } else {\n    logError(\n      `Checkpoint API returned invalid response: ${JSON.stringify(result)}`\n    );\n    recordSandboxOp(\n      "checkpoint_api_call",\n      Date.now() - apiCallStart,\n      false,\n      "Invalid API response"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n}\n\n// src/sandbox/scripts/src/lib/metrics.ts\nimport * as fs5 from "fs";\nimport { execSync as execSync3 } from "child_process";\nvar shutdownRequested = false;\nfunction getCpuPercent() {\n  try {\n    const content = fs5.readFileSync("/proc/stat", "utf-8");\n    const line = content.split("\\n")[0];\n    if (!line) {\n      return 0;\n    }\n    const parts = line.split(/\\s+/);\n    if (parts[0] !== "cpu") {\n      return 0;\n    }\n    const values = parts.slice(1).map((x) => parseInt(x, 10));\n    const idleVal = values[3];\n    const iowaitVal = values[4];\n    if (idleVal === void 0 || iowaitVal === void 0) {\n      return 0;\n    }\n    const idle = idleVal + iowaitVal;\n    const total = values.reduce((a, b) => a + b, 0);\n    if (total === 0) {\n      return 0;\n    }\n    const cpuPercent = 100 * (1 - idle / total);\n    return Math.round(cpuPercent * 100) / 100;\n  } catch (error) {\n    logDebug(`Failed to get CPU percent: ${error}`);\n    return 0;\n  }\n}\nfunction getMemoryInfo() {\n  try {\n    const result = execSync3("free -b", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    for (const line of lines) {\n      if (line.startsWith("Mem:")) {\n        const parts = line.split(/\\s+/);\n        const totalStr = parts[1];\n        const usedStr = parts[2];\n        if (!totalStr || !usedStr) {\n          return [0, 0];\n        }\n        const total = parseInt(totalStr, 10);\n        const used = parseInt(usedStr, 10);\n        return [used, total];\n      }\n    }\n    return [0, 0];\n  } catch (error) {\n    logDebug(`Failed to get memory info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction getDiskInfo() {\n  try {\n    const result = execSync3("df -B1 /", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    if (lines.length < 2) {\n      return [0, 0];\n    }\n    const dataLine = lines[1];\n    if (!dataLine) {\n      return [0, 0];\n    }\n    const parts = dataLine.split(/\\s+/);\n    const totalStr = parts[1];\n    const usedStr = parts[2];\n    if (!totalStr || !usedStr) {\n      return [0, 0];\n    }\n    const total = parseInt(totalStr, 10);\n    const used = parseInt(usedStr, 10);\n    return [used, total];\n  } catch (error) {\n    logDebug(`Failed to get disk info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction collectMetrics() {\n  const cpu = getCpuPercent();\n  const [memUsed, memTotal] = getMemoryInfo();\n  const [diskUsed, diskTotal] = getDiskInfo();\n  return {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    cpu,\n    mem_used: memUsed,\n    mem_total: memTotal,\n    disk_used: diskUsed,\n    disk_total: diskTotal\n  };\n}\nfunction metricsCollectorLoop() {\n  logInfo(`Metrics collector started, writing to ${METRICS_LOG_FILE}`);\n  const writeMetrics = () => {\n    if (shutdownRequested) {\n      logInfo("Metrics collector stopped");\n      return;\n    }\n    try {\n      const metrics = collectMetrics();\n      fs5.appendFileSync(METRICS_LOG_FILE, JSON.stringify(metrics) + "\\n");\n      logDebug(\n        `Metrics collected: cpu=${metrics.cpu}%, mem=${metrics.mem_used}/${metrics.mem_total}`\n      );\n    } catch (error) {\n      logError(`Failed to collect/write metrics: ${error}`);\n    }\n    setTimeout(writeMetrics, METRICS_INTERVAL * 1e3);\n  };\n  writeMetrics();\n}\nfunction startMetricsCollector() {\n  shutdownRequested = false;\n  setTimeout(metricsCollectorLoop, 0);\n}\nfunction stopMetricsCollector() {\n  shutdownRequested = true;\n}\n\n// src/sandbox/scripts/src/lib/upload-telemetry.ts\nimport * as fs6 from "fs";\nvar shutdownRequested2 = false;\nfunction readFileFromPosition(filePath, posFile) {\n  let lastPos = 0;\n  if (fs6.existsSync(posFile)) {\n    try {\n      const content = fs6.readFileSync(posFile, "utf-8").trim();\n      lastPos = parseInt(content, 10) || 0;\n    } catch {\n      lastPos = 0;\n    }\n  }\n  let newContent = "";\n  let newPos = lastPos;\n  if (fs6.existsSync(filePath)) {\n    try {\n      const fd = fs6.openSync(filePath, "r");\n      const stats = fs6.fstatSync(fd);\n      const bufferSize = stats.size - lastPos;\n      if (bufferSize > 0) {\n        const buffer = Buffer.alloc(bufferSize);\n        fs6.readSync(fd, buffer, 0, bufferSize, lastPos);\n        newContent = buffer.toString("utf-8");\n        newPos = stats.size;\n      }\n      fs6.closeSync(fd);\n    } catch (error) {\n      logDebug(`Failed to read ${filePath}: ${error}`);\n    }\n  }\n  return [newContent, newPos];\n}\nfunction savePosition(posFile, position) {\n  try {\n    fs6.writeFileSync(posFile, String(position));\n  } catch (error) {\n    logDebug(`Failed to save position to ${posFile}: ${error}`);\n  }\n}\nfunction readJsonlFromPosition(filePath, posFile) {\n  const [content, newPos] = readFileFromPosition(filePath, posFile);\n  const entries = [];\n  if (content) {\n    for (const line of content.trim().split("\\n")) {\n      if (line) {\n        try {\n          entries.push(JSON.parse(line));\n        } catch {\n        }\n      }\n    }\n  }\n  return [entries, newPos];\n}\nfunction readMetricsFromPosition(posFile) {\n  return readJsonlFromPosition(METRICS_LOG_FILE, posFile);\n}\nfunction readNetworkLogsFromPosition(posFile) {\n  return readJsonlFromPosition(NETWORK_LOG_FILE, posFile);\n}\nfunction readSandboxOpsFromPosition(posFile) {\n  return readJsonlFromPosition(SANDBOX_OPS_LOG_FILE, posFile);\n}\nasync function uploadTelemetry() {\n  const [systemLog, logPos] = readFileFromPosition(\n    SYSTEM_LOG_FILE,\n    TELEMETRY_LOG_POS_FILE\n  );\n  const [metrics, metricsPos] = readMetricsFromPosition(\n    TELEMETRY_METRICS_POS_FILE\n  );\n  const [networkLogs, networkPos] = readNetworkLogsFromPosition(\n    TELEMETRY_NETWORK_POS_FILE\n  );\n  const [sandboxOps, sandboxOpsPos] = readSandboxOpsFromPosition(\n    TELEMETRY_SANDBOX_OPS_POS_FILE\n  );\n  if (!systemLog && metrics.length === 0 && networkLogs.length === 0 && sandboxOps.length === 0) {\n    logDebug("No new telemetry data to upload");\n    return true;\n  }\n  const maskedSystemLog = systemLog ? maskData(systemLog) : "";\n  const maskedNetworkLogs = networkLogs.length > 0 ? maskData(networkLogs) : [];\n  const payload = {\n    runId: RUN_ID,\n    systemLog: maskedSystemLog,\n    metrics,\n    // Metrics don\'t contain secrets (just numbers)\n    networkLogs: maskedNetworkLogs,\n    sandboxOperations: sandboxOps\n    // Sandbox ops don\'t contain secrets (just timing data)\n  };\n  logDebug(\n    `Uploading telemetry: ${systemLog.length} bytes log, ${metrics.length} metrics, ${networkLogs.length} network logs, ${sandboxOps.length} sandbox ops`\n  );\n  const result = await httpPostJson(TELEMETRY_URL, payload, 1);\n  if (result) {\n    savePosition(TELEMETRY_LOG_POS_FILE, logPos);\n    savePosition(TELEMETRY_METRICS_POS_FILE, metricsPos);\n    savePosition(TELEMETRY_NETWORK_POS_FILE, networkPos);\n    savePosition(TELEMETRY_SANDBOX_OPS_POS_FILE, sandboxOpsPos);\n    logDebug(\n      `Telemetry uploaded successfully: ${result.id ?? "unknown"}`\n    );\n    return true;\n  } else {\n    logWarn("Failed to upload telemetry (will retry next interval)");\n    return false;\n  }\n}\nasync function telemetryUploadLoop() {\n  logInfo(`Telemetry upload started (interval: ${TELEMETRY_INTERVAL}s)`);\n  const runUpload = async () => {\n    if (shutdownRequested2) {\n      logInfo("Telemetry upload stopped");\n      return;\n    }\n    try {\n      await uploadTelemetry();\n    } catch (error) {\n      logError(`Telemetry upload error: ${error}`);\n    }\n    setTimeout(() => void runUpload(), TELEMETRY_INTERVAL * 1e3);\n  };\n  await runUpload();\n}\nfunction startTelemetryUpload() {\n  shutdownRequested2 = false;\n  setTimeout(() => void telemetryUploadLoop(), 0);\n}\nfunction stopTelemetryUpload() {\n  shutdownRequested2 = true;\n}\nasync function finalTelemetryUpload() {\n  logInfo("Performing final telemetry upload...");\n  return uploadTelemetry();\n}\n\n// src/sandbox/scripts/src/run-agent.ts\nvar shutdownRequested3 = false;\nfunction heartbeatLoop() {\n  const sendHeartbeat = async () => {\n    if (shutdownRequested3) {\n      return;\n    }\n    try {\n      if (await httpPostJson(HEARTBEAT_URL, { runId: RUN_ID })) {\n        logInfo("Heartbeat sent");\n      } else {\n        logWarn("Heartbeat failed");\n      }\n    } catch (error) {\n      logWarn(`Heartbeat error: ${error}`);\n    }\n    setTimeout(() => {\n      sendHeartbeat().catch(() => {\n      });\n    }, HEARTBEAT_INTERVAL * 1e3);\n  };\n  sendHeartbeat().catch(() => {\n  });\n}\nasync function cleanup(exitCode, errorMessage) {\n  logInfo("\\u25B7 Cleanup");\n  const telemetryStart = Date.now();\n  let telemetrySuccess = true;\n  try {\n    await finalTelemetryUpload();\n  } catch (error) {\n    telemetrySuccess = false;\n    logError(`Final telemetry upload failed: ${error}`);\n  }\n  recordSandboxOp(\n    "final_telemetry_upload",\n    Date.now() - telemetryStart,\n    telemetrySuccess\n  );\n  logInfo(`Calling complete API with exitCode=${exitCode}`);\n  const completePayload = {\n    runId: RUN_ID,\n    exitCode\n  };\n  if (errorMessage) {\n    completePayload.error = errorMessage;\n  }\n  const completeStart = Date.now();\n  let completeSuccess = false;\n  try {\n    if (await httpPostJson(COMPLETE_URL, completePayload)) {\n      logInfo("Complete API called successfully");\n      completeSuccess = true;\n    } else {\n      logError("Failed to call complete API (sandbox may not be cleaned up)");\n    }\n  } catch (error) {\n    logError(`Complete API call failed: ${error}`);\n  }\n  recordSandboxOp(\n    "complete_api_call",\n    Date.now() - completeStart,\n    completeSuccess\n  );\n  shutdownRequested3 = true;\n  stopMetricsCollector();\n  stopTelemetryUpload();\n  logInfo("Background processes stopped");\n  if (exitCode === 0) {\n    logInfo("\\u2713 Sandbox finished successfully");\n  } else {\n    logInfo(`\\u2717 Sandbox failed (exit code ${exitCode})`);\n  }\n}\nasync function run() {\n  validateConfig();\n  logInfo(`\\u25B6 VM0 Sandbox ${RUN_ID}`);\n  logInfo("\\u25B7 Initialization");\n  const initStartTime = Date.now();\n  logInfo(`Working directory: ${WORKING_DIR}`);\n  const heartbeatStart = Date.now();\n  heartbeatLoop();\n  logInfo("Heartbeat started");\n  recordSandboxOp("heartbeat_start", Date.now() - heartbeatStart, true);\n  const metricsStart = Date.now();\n  startMetricsCollector();\n  logInfo("Metrics collector started");\n  recordSandboxOp("metrics_collector_start", Date.now() - metricsStart, true);\n  const telemetryStart = Date.now();\n  startTelemetryUpload();\n  logInfo("Telemetry upload started");\n  recordSandboxOp("telemetry_upload_start", Date.now() - telemetryStart, true);\n  const workingDirStart = Date.now();\n  try {\n    fs7.mkdirSync(WORKING_DIR, { recursive: true });\n    process.chdir(WORKING_DIR);\n  } catch (error) {\n    recordSandboxOp(\n      "working_dir_setup",\n      Date.now() - workingDirStart,\n      false,\n      String(error)\n    );\n    throw new Error(\n      `Failed to create/change to working directory: ${WORKING_DIR} - ${error}`\n    );\n  }\n  recordSandboxOp("working_dir_setup", Date.now() - workingDirStart, true);\n  if (CLI_AGENT_TYPE === "codex") {\n    const homeDir = process.env.HOME ?? "/home/user";\n    const codexHome = `${homeDir}/.codex`;\n    fs7.mkdirSync(codexHome, { recursive: true });\n    process.env.CODEX_HOME = codexHome;\n    logInfo(`Codex home directory: ${codexHome}`);\n    const codexLoginStart = Date.now();\n    let codexLoginSuccess = false;\n    const apiKey = process.env.OPENAI_API_KEY ?? "";\n    if (apiKey) {\n      try {\n        execSync4("codex login --with-api-key", {\n          input: apiKey,\n          encoding: "utf-8",\n          stdio: ["pipe", "pipe", "pipe"]\n        });\n        logInfo("Codex authenticated with API key");\n        codexLoginSuccess = true;\n      } catch (error) {\n        logError(`Codex login failed: ${error}`);\n      }\n    } else {\n      logError("OPENAI_API_KEY not set");\n    }\n    recordSandboxOp(\n      "codex_login",\n      Date.now() - codexLoginStart,\n      codexLoginSuccess\n    );\n  }\n  const initDurationMs = Date.now() - initStartTime;\n  recordSandboxOp("init_total", initDurationMs, true);\n  logInfo(`\\u2713 Initialization complete (${Math.floor(initDurationMs / 1e3)}s)`);\n  logInfo("\\u25B7 Execution");\n  const execStartTime = Date.now();\n  logInfo(`Starting ${CLI_AGENT_TYPE} execution...`);\n  logInfo(`Prompt: ${PROMPT}`);\n  const useMock = process.env.USE_MOCK_CLAUDE === "true";\n  let cmd;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (useMock) {\n      throw new Error("Mock mode not supported for Codex");\n    }\n    const codexArgs = [\n      "exec",\n      "--json",\n      "--dangerously-bypass-approvals-and-sandbox",\n      "--skip-git-repo-check",\n      "-C",\n      WORKING_DIR\n    ];\n    if (OPENAI_MODEL) {\n      codexArgs.push("-m", OPENAI_MODEL);\n    }\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      codexArgs.push("resume", RESUME_SESSION_ID, PROMPT);\n    } else {\n      logInfo("Starting new session");\n      codexArgs.push(PROMPT);\n    }\n    cmd = ["codex", ...codexArgs];\n  } else {\n    const claudeArgs = [\n      "--print",\n      "--verbose",\n      "--output-format",\n      "stream-json",\n      "--dangerously-skip-permissions"\n    ];\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      claudeArgs.push("--resume", RESUME_SESSION_ID);\n    } else {\n      logInfo("Starting new session");\n    }\n    const claudeBin = useMock ? "/usr/local/bin/vm0-agent/mock-claude.mjs" : "claude";\n    if (useMock) {\n      logInfo("Using mock-claude for testing");\n    }\n    cmd = [claudeBin, ...claudeArgs, PROMPT];\n  }\n  let agentExitCode = 0;\n  const stderrLines = [];\n  let logFile = null;\n  try {\n    logFile = fs7.createWriteStream(AGENT_LOG_FILE);\n    const cmdExe = cmd[0];\n    if (!cmdExe) {\n      throw new Error("Empty command");\n    }\n    const proc = spawn(cmdExe, cmd.slice(1), {\n      stdio: ["ignore", "pipe", "pipe"]\n    });\n    const exitPromise = new Promise((resolve) => {\n      let resolved = false;\n      proc.on("error", (err) => {\n        if (!resolved) {\n          resolved = true;\n          logError(`Failed to spawn ${CLI_AGENT_TYPE}: ${err.message}`);\n          stderrLines.push(`Spawn error: ${err.message}`);\n          resolve(1);\n        }\n      });\n      proc.on("close", (code) => {\n        if (!resolved) {\n          resolved = true;\n          resolve(code ?? 1);\n        }\n      });\n    });\n    if (proc.stderr) {\n      const stderrRl = readline.createInterface({ input: proc.stderr });\n      stderrRl.on("line", (line) => {\n        stderrLines.push(line);\n        if (logFile && !logFile.destroyed) {\n          logFile.write(`[STDERR] ${line}\n`);\n        }\n      });\n    }\n    if (proc.stdout) {\n      const stdoutRl = readline.createInterface({ input: proc.stdout });\n      let eventSequence = 0;\n      for await (const line of stdoutRl) {\n        if (logFile && !logFile.destroyed) {\n          logFile.write(line + "\\n");\n        }\n        const stripped = line.trim();\n        if (!stripped) {\n          continue;\n        }\n        try {\n          const event = JSON.parse(stripped);\n          eventSequence++;\n          await sendEvent(event, eventSequence);\n          if (event.type === "result") {\n            const resultContent = event.result;\n            if (resultContent) {\n              console.log(resultContent);\n            }\n          }\n        } catch {\n          logDebug(`Non-JSON line from agent: ${stripped.slice(0, 100)}`);\n        }\n      }\n    }\n    agentExitCode = await exitPromise;\n  } catch (error) {\n    logError(`Failed to execute ${CLI_AGENT_TYPE}: ${error}`);\n    agentExitCode = 1;\n  } finally {\n    if (logFile && !logFile.destroyed) {\n      logFile.end();\n    }\n  }\n  console.log();\n  let finalExitCode = agentExitCode;\n  let errorMessage = "";\n  if (fs7.existsSync(EVENT_ERROR_FLAG)) {\n    logError("Some events failed to send, marking run as failed");\n    finalExitCode = 1;\n    errorMessage = "Some events failed to send";\n  }\n  const execDurationMs = Date.now() - execStartTime;\n  recordSandboxOp("cli_execution", execDurationMs, agentExitCode === 0);\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`\\u2713 Execution complete (${Math.floor(execDurationMs / 1e3)}s)`);\n  } else {\n    logInfo(`\\u2717 Execution failed (${Math.floor(execDurationMs / 1e3)}s)`);\n  }\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`${CLI_AGENT_TYPE} completed successfully`);\n    logInfo("\\u25B7 Checkpoint");\n    const checkpointStartTime = Date.now();\n    const checkpointSuccess = await createCheckpoint();\n    const checkpointDuration = Math.floor(\n      (Date.now() - checkpointStartTime) / 1e3\n    );\n    if (checkpointSuccess) {\n      logInfo(`\\u2713 Checkpoint complete (${checkpointDuration}s)`);\n    } else {\n      logInfo(`\\u2717 Checkpoint failed (${checkpointDuration}s)`);\n    }\n    if (!checkpointSuccess) {\n      logError("Checkpoint creation failed, marking run as failed");\n      finalExitCode = 1;\n      errorMessage = "Checkpoint creation failed";\n    }\n  } else {\n    if (agentExitCode !== 0) {\n      logInfo(`${CLI_AGENT_TYPE} failed with exit code ${agentExitCode}`);\n      if (stderrLines.length > 0) {\n        errorMessage = stderrLines.map((line) => line.trim()).join(" ");\n        logInfo(`Captured stderr: ${errorMessage}`);\n      } else {\n        errorMessage = `Agent exited with code ${agentExitCode}`;\n      }\n    }\n  }\n  return [finalExitCode, errorMessage];\n}\nasync function main() {\n  let exitCode = 1;\n  let errorMessage = "Unexpected termination";\n  try {\n    [exitCode, errorMessage] = await run();\n  } catch (error) {\n    if (error instanceof Error) {\n      exitCode = 1;\n      errorMessage = error.message;\n      logError(`Error: ${errorMessage}`);\n    } else {\n      exitCode = 1;\n      errorMessage = `Unexpected error: ${error}`;\n      logError(errorMessage);\n    }\n  } finally {\n    await cleanup(exitCode, errorMessage);\n  }\n  return exitCode;\n}\nmain().then((code) => process.exit(code)).catch((error) => {\n  console.error("Fatal error:", error);\n  process.exit(1);\n});\n';
+var RUN_AGENT_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/run-agent.ts\nimport * as fs7 from "fs";\nimport { spawn, execSync as execSync4 } from "child_process";\nimport * as readline from "readline";\n\n// src/sandbox/scripts/src/lib/common.ts\nimport * as fs from "fs";\nvar RUN_ID = process.env.VM0_RUN_ID ?? "";\nvar API_URL = process.env.VM0_API_URL ?? "";\nvar API_TOKEN = process.env.VM0_API_TOKEN ?? "";\nvar PROMPT = process.env.VM0_PROMPT ?? "";\nvar VERCEL_BYPASS = process.env.VERCEL_PROTECTION_BYPASS ?? "";\nvar RESUME_SESSION_ID = process.env.VM0_RESUME_SESSION_ID ?? "";\nvar CLI_AGENT_TYPE = process.env.CLI_AGENT_TYPE ?? "claude-code";\nvar OPENAI_MODEL = process.env.OPENAI_MODEL ?? "";\nvar WORKING_DIR = process.env.VM0_WORKING_DIR ?? "";\nvar ARTIFACT_DRIVER = process.env.VM0_ARTIFACT_DRIVER ?? "";\nvar ARTIFACT_MOUNT_PATH = process.env.VM0_ARTIFACT_MOUNT_PATH ?? "";\nvar ARTIFACT_VOLUME_NAME = process.env.VM0_ARTIFACT_VOLUME_NAME ?? "";\nvar ARTIFACT_VERSION_ID = process.env.VM0_ARTIFACT_VERSION_ID ?? "";\nvar WEBHOOK_URL = `${API_URL}/api/webhooks/agent/events`;\nvar CHECKPOINT_URL = `${API_URL}/api/webhooks/agent/checkpoints`;\nvar COMPLETE_URL = `${API_URL}/api/webhooks/agent/complete`;\nvar HEARTBEAT_URL = `${API_URL}/api/webhooks/agent/heartbeat`;\nvar TELEMETRY_URL = `${API_URL}/api/webhooks/agent/telemetry`;\nvar PROXY_URL = `${API_URL}/api/webhooks/agent/proxy`;\nvar STORAGE_PREPARE_URL = `${API_URL}/api/webhooks/agent/storages/prepare`;\nvar STORAGE_COMMIT_URL = `${API_URL}/api/webhooks/agent/storages/commit`;\nvar HEARTBEAT_INTERVAL = 60;\nvar TELEMETRY_INTERVAL = 30;\nvar HTTP_CONNECT_TIMEOUT = 10;\nvar HTTP_MAX_TIME = 30;\nvar HTTP_MAX_TIME_UPLOAD = 60;\nvar HTTP_MAX_RETRIES = 3;\nvar SESSION_ID_FILE = `/tmp/vm0-session-${RUN_ID}.txt`;\nvar SESSION_HISTORY_PATH_FILE = `/tmp/vm0-session-history-${RUN_ID}.txt`;\nvar EVENT_ERROR_FLAG = `/tmp/vm0-event-error-${RUN_ID}`;\nvar SYSTEM_LOG_FILE = `/tmp/vm0-main-${RUN_ID}.log`;\nvar AGENT_LOG_FILE = `/tmp/vm0-agent-${RUN_ID}.log`;\nvar METRICS_LOG_FILE = `/tmp/vm0-metrics-${RUN_ID}.jsonl`;\nvar NETWORK_LOG_FILE = `/tmp/vm0-network-${RUN_ID}.jsonl`;\nvar TELEMETRY_LOG_POS_FILE = `/tmp/vm0-telemetry-log-pos-${RUN_ID}.txt`;\nvar TELEMETRY_METRICS_POS_FILE = `/tmp/vm0-telemetry-metrics-pos-${RUN_ID}.txt`;\nvar TELEMETRY_NETWORK_POS_FILE = `/tmp/vm0-telemetry-network-pos-${RUN_ID}.txt`;\nvar TELEMETRY_SANDBOX_OPS_POS_FILE = `/tmp/vm0-telemetry-sandbox-ops-pos-${RUN_ID}.txt`;\nvar SANDBOX_OPS_LOG_FILE = `/tmp/vm0-sandbox-ops-${RUN_ID}.jsonl`;\nvar METRICS_INTERVAL = 5;\nfunction validateConfig() {\n  if (!WORKING_DIR) {\n    throw new Error("VM0_WORKING_DIR is required but not set");\n  }\n  return true;\n}\nfunction recordSandboxOp(actionType, durationMs, success, error) {\n  const entry = {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    action_type: actionType,\n    duration_ms: durationMs,\n    success\n  };\n  if (error) {\n    entry.error = error;\n  }\n  fs.appendFileSync(SANDBOX_OPS_LOG_FILE, JSON.stringify(entry) + "\\n");\n}\n\n// src/sandbox/scripts/src/lib/log.ts\nvar SCRIPT_NAME = process.env.LOG_SCRIPT_NAME ?? "run-agent";\nvar DEBUG_MODE = process.env.VM0_DEBUG === "1";\nfunction timestamp() {\n  return (/* @__PURE__ */ new Date()).toISOString().replace(/\\.\\d{3}Z$/, "Z");\n}\nfunction logInfo(msg) {\n  console.error(`[${timestamp()}] [INFO] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logWarn(msg) {\n  console.error(`[${timestamp()}] [WARN] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logError(msg) {\n  console.error(`[${timestamp()}] [ERROR] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logDebug(msg) {\n  if (DEBUG_MODE) {\n    console.error(`[${timestamp()}] [DEBUG] [sandbox:${SCRIPT_NAME}] ${msg}`);\n  }\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nimport * as fs2 from "fs";\n\n// src/sandbox/scripts/src/lib/http-client.ts\nimport { execSync } from "child_process";\nfunction sleep(ms) {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\nasync function httpPostJson(url, data, maxRetries = HTTP_MAX_RETRIES) {\n  const headers = {\n    "Content-Type": "application/json",\n    Authorization: `Bearer ${API_TOKEN}`\n  };\n  if (VERCEL_BYPASS) {\n    headers["x-vercel-protection-bypass"] = VERCEL_BYPASS;\n  }\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP POST attempt ${attempt}/${maxRetries} to ${url}`);\n    try {\n      const controller = new AbortController();\n      const timeoutId = setTimeout(\n        () => controller.abort(),\n        HTTP_MAX_TIME * 1e3\n      );\n      const response = await fetch(url, {\n        method: "POST",\n        headers,\n        body: JSON.stringify(data),\n        signal: controller.signal\n      });\n      clearTimeout(timeoutId);\n      if (response.ok) {\n        const text = await response.text();\n        if (text) {\n          return JSON.parse(text);\n        }\n        return {};\n      }\n      logWarn(\n        `HTTP POST failed (attempt ${attempt}/${maxRetries}): HTTP ${response.status}`\n      );\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("abort")) {\n        logWarn(`HTTP POST failed (attempt ${attempt}/${maxRetries}): Timeout`);\n      } else {\n        logWarn(\n          `HTTP POST failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP POST failed after ${maxRetries} attempts to ${url}`);\n  return null;\n}\nasync function httpPutPresigned(presignedUrl, filePath, contentType = "application/octet-stream", maxRetries = HTTP_MAX_RETRIES) {\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP PUT presigned attempt ${attempt}/${maxRetries}`);\n    try {\n      const curlCmd = [\n        "curl",\n        "-f",\n        "-X",\n        "PUT",\n        "-H",\n        `Content-Type: ${contentType}`,\n        "--data-binary",\n        `@${filePath}`,\n        "--connect-timeout",\n        String(HTTP_CONNECT_TIMEOUT),\n        "--max-time",\n        String(HTTP_MAX_TIME_UPLOAD),\n        "--silent",\n        `"${presignedUrl}"`\n      ].join(" ");\n      execSync(curlCmd, {\n        timeout: HTTP_MAX_TIME_UPLOAD * 1e3,\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      return true;\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("ETIMEDOUT") || errorMsg.includes("timeout")) {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): Timeout`\n        );\n      } else {\n        logWarn(\n          `HTTP PUT presigned failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP PUT presigned failed after ${maxRetries} attempts`);\n  return false;\n}\n\n// src/sandbox/scripts/src/lib/secret-masker.ts\nvar MASK_PLACEHOLDER = "***";\nvar MIN_SECRET_LENGTH = 5;\nvar _masker = null;\nvar SecretMasker = class {\n  patterns;\n  /**\n   * Initialize masker with secret values.\n   *\n   * @param secretValues - List of secret values to mask\n   */\n  constructor(secretValues) {\n    this.patterns = /* @__PURE__ */ new Set();\n    for (const secret of secretValues) {\n      if (!secret || secret.length < MIN_SECRET_LENGTH) {\n        continue;\n      }\n      this.patterns.add(secret);\n      try {\n        const b64 = Buffer.from(secret).toString("base64");\n        if (b64.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(b64);\n        }\n      } catch {\n      }\n      try {\n        const urlEnc = encodeURIComponent(secret);\n        if (urlEnc !== secret && urlEnc.length >= MIN_SECRET_LENGTH) {\n          this.patterns.add(urlEnc);\n        }\n      } catch {\n      }\n    }\n  }\n  /**\n   * Recursively mask all occurrences of secrets in the data.\n   *\n   * @param data - Data to mask (string, list, dict, or primitive)\n   * @returns Masked data with the same structure\n   */\n  mask(data) {\n    return this.deepMask(data);\n  }\n  deepMask(data) {\n    if (typeof data === "string") {\n      let result = data;\n      for (const pattern of this.patterns) {\n        result = result.split(pattern).join(MASK_PLACEHOLDER);\n      }\n      return result;\n    }\n    if (Array.isArray(data)) {\n      return data.map((item) => this.deepMask(item));\n    }\n    if (data !== null && typeof data === "object") {\n      const result = {};\n      for (const [key, value] of Object.entries(\n        data\n      )) {\n        result[key] = this.deepMask(value);\n      }\n      return result;\n    }\n    return data;\n  }\n};\nfunction createMasker() {\n  const secretValuesStr = process.env.VM0_SECRET_VALUES ?? "";\n  if (!secretValuesStr) {\n    return new SecretMasker([]);\n  }\n  const secretValues = [];\n  for (const encodedValue of secretValuesStr.split(",")) {\n    const trimmed = encodedValue.trim();\n    if (trimmed) {\n      try {\n        const decoded = Buffer.from(trimmed, "base64").toString("utf-8");\n        if (decoded) {\n          secretValues.push(decoded);\n        }\n      } catch {\n      }\n    }\n  }\n  return new SecretMasker(secretValues);\n}\nfunction getMasker() {\n  if (_masker === null) {\n    _masker = createMasker();\n  }\n  return _masker;\n}\nfunction maskData(data) {\n  return getMasker().mask(data);\n}\n\n// src/sandbox/scripts/src/lib/events.ts\nasync function sendEvent(event, sequenceNumber) {\n  const eventType = event.type ?? "";\n  const eventSubtype = event.subtype ?? "";\n  let sessionId = null;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (eventType === "thread.started") {\n      sessionId = event.thread_id ?? "";\n    }\n  } else {\n    if (eventType === "system" && eventSubtype === "init") {\n      sessionId = event.session_id ?? "";\n    }\n  }\n  if (sessionId && !fs2.existsSync(SESSION_ID_FILE)) {\n    logInfo(`Captured session ID: ${sessionId}`);\n    fs2.writeFileSync(SESSION_ID_FILE, sessionId);\n    const homeDir = process.env.HOME ?? "/home/user";\n    let sessionHistoryPath;\n    if (CLI_AGENT_TYPE === "codex") {\n      const codexHome = process.env.CODEX_HOME ?? `${homeDir}/.codex`;\n      sessionHistoryPath = `CODEX_SEARCH:${codexHome}/sessions:${sessionId}`;\n    } else {\n      const projectName = WORKING_DIR.replace(/^\\//, "").replace(/\\//g, "-");\n      sessionHistoryPath = `${homeDir}/.claude/projects/-${projectName}/${sessionId}.jsonl`;\n    }\n    fs2.writeFileSync(SESSION_HISTORY_PATH_FILE, sessionHistoryPath);\n    logInfo(`Session history will be at: ${sessionHistoryPath}`);\n  }\n  const eventWithSequence = {\n    ...event,\n    sequenceNumber\n  };\n  const maskedEvent = maskData(eventWithSequence);\n  const payload = {\n    runId: RUN_ID,\n    events: [maskedEvent]\n  };\n  const result = await httpPostJson(WEBHOOK_URL, payload);\n  if (result === null) {\n    logError("Failed to send event after retries");\n    fs2.writeFileSync(EVENT_ERROR_FLAG, "1");\n    return false;\n  }\n  return true;\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nimport * as fs4 from "fs";\nimport * as path2 from "path";\n\n// src/sandbox/scripts/src/lib/direct-upload.ts\nimport * as fs3 from "fs";\nimport * as path from "path";\nimport * as crypto from "crypto";\nimport { execSync as execSync2 } from "child_process";\nfunction computeFileHash(filePath) {\n  const hash = crypto.createHash("sha256");\n  const buffer = fs3.readFileSync(filePath);\n  hash.update(buffer);\n  return hash.digest("hex");\n}\nfunction collectFileMetadata(dirPath) {\n  const files = [];\n  function walkDir(currentPath, relativePath) {\n    const items = fs3.readdirSync(currentPath);\n    for (const item of items) {\n      if (item === ".git" || item === ".vm0") {\n        continue;\n      }\n      const fullPath = path.join(currentPath, item);\n      const relPath = relativePath ? path.join(relativePath, item) : item;\n      const stat = fs3.statSync(fullPath);\n      if (stat.isDirectory()) {\n        walkDir(fullPath, relPath);\n      } else if (stat.isFile()) {\n        try {\n          const fileHash = computeFileHash(fullPath);\n          files.push({\n            path: relPath,\n            hash: fileHash,\n            size: stat.size\n          });\n        } catch (error) {\n          logWarn(`Could not process file ${relPath}: ${error}`);\n        }\n      }\n    }\n  }\n  walkDir(dirPath, "");\n  return files;\n}\nfunction createArchive(dirPath, tarPath) {\n  try {\n    execSync2(\n      `tar -czf "${tarPath}" --exclude=\'.git\' --exclude=\'.vm0\' -C "${dirPath}" .`,\n      { stdio: ["pipe", "pipe", "pipe"] }\n    );\n    return true;\n  } catch (error) {\n    logError(`Failed to create archive: ${error}`);\n    return false;\n  }\n}\nfunction createManifest(files, manifestPath) {\n  try {\n    const manifest = {\n      version: 1,\n      files,\n      createdAt: (/* @__PURE__ */ new Date()).toISOString()\n    };\n    fs3.writeFileSync(manifestPath, JSON.stringify(manifest, null, 2));\n    return true;\n  } catch (error) {\n    logError(`Failed to create manifest: ${error}`);\n    return false;\n  }\n}\nasync function createDirectUploadSnapshot(mountPath, storageName, storageType = "artifact", runId, message) {\n  logInfo(\n    `Creating direct upload snapshot for \'${storageName}\' (type: ${storageType})`\n  );\n  logInfo("Computing file hashes...");\n  const hashStart = Date.now();\n  const files = collectFileMetadata(mountPath);\n  recordSandboxOp("artifact_hash_compute", Date.now() - hashStart, true);\n  logInfo(`Found ${files.length} files`);\n  if (files.length === 0) {\n    logInfo("No files to upload, creating empty version");\n  }\n  logInfo("Calling prepare endpoint...");\n  const prepareStart = Date.now();\n  const preparePayload = {\n    storageName,\n    storageType,\n    files\n  };\n  if (runId) {\n    preparePayload.runId = runId;\n  }\n  const prepareResponse = await httpPostJson(\n    STORAGE_PREPARE_URL,\n    preparePayload\n  );\n  if (!prepareResponse) {\n    logError("Failed to call prepare endpoint");\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  const versionId = prepareResponse.versionId;\n  if (!versionId) {\n    logError(`Invalid prepare response: ${JSON.stringify(prepareResponse)}`);\n    recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, false);\n    return null;\n  }\n  recordSandboxOp("artifact_prepare_api", Date.now() - prepareStart, true);\n  if (prepareResponse.existing) {\n    logInfo(`Version already exists (deduplicated): ${versionId.slice(0, 8)}`);\n    logInfo("Updating HEAD pointer...");\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse || !commitResponse.success) {\n      logError(`Failed to update HEAD: ${JSON.stringify(commitResponse)}`);\n      return null;\n    }\n    return { versionId, deduplicated: true };\n  }\n  const uploads = prepareResponse.uploads;\n  if (!uploads) {\n    logError("No upload URLs in prepare response");\n    return null;\n  }\n  const archiveInfo = uploads.archive;\n  const manifestInfo = uploads.manifest;\n  if (!archiveInfo || !manifestInfo) {\n    logError("Missing archive or manifest upload info");\n    return null;\n  }\n  const tempDir = fs3.mkdtempSync(`/tmp/direct-upload-${storageName}-`);\n  try {\n    logInfo("Creating archive...");\n    const archiveStart = Date.now();\n    const archivePath = path.join(tempDir, "archive.tar.gz");\n    if (!createArchive(mountPath, archivePath)) {\n      logError("Failed to create archive");\n      recordSandboxOp(\n        "artifact_archive_create",\n        Date.now() - archiveStart,\n        false\n      );\n      return null;\n    }\n    recordSandboxOp("artifact_archive_create", Date.now() - archiveStart, true);\n    logInfo("Creating manifest...");\n    const manifestPath = path.join(tempDir, "manifest.json");\n    if (!createManifest(files, manifestPath)) {\n      logError("Failed to create manifest");\n      return null;\n    }\n    logInfo("Uploading archive to S3...");\n    const s3UploadStart = Date.now();\n    if (!await httpPutPresigned(\n      archiveInfo.presignedUrl,\n      archivePath,\n      "application/gzip"\n    )) {\n      logError("Failed to upload archive to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    logInfo("Uploading manifest to S3...");\n    if (!await httpPutPresigned(\n      manifestInfo.presignedUrl,\n      manifestPath,\n      "application/json"\n    )) {\n      logError("Failed to upload manifest to S3");\n      recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_s3_upload", Date.now() - s3UploadStart, true);\n    logInfo("Calling commit endpoint...");\n    const commitStart = Date.now();\n    const commitPayload = {\n      storageName,\n      storageType,\n      versionId,\n      files\n    };\n    if (runId) {\n      commitPayload.runId = runId;\n    }\n    if (message) {\n      commitPayload.message = message;\n    }\n    const commitResponse = await httpPostJson(\n      STORAGE_COMMIT_URL,\n      commitPayload\n    );\n    if (!commitResponse) {\n      logError("Failed to call commit endpoint");\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    if (!commitResponse.success) {\n      logError(`Commit failed: ${JSON.stringify(commitResponse)}`);\n      recordSandboxOp("artifact_commit_api", Date.now() - commitStart, false);\n      return null;\n    }\n    recordSandboxOp("artifact_commit_api", Date.now() - commitStart, true);\n    logInfo(`Direct upload snapshot created: ${versionId.slice(0, 8)}`);\n    return { versionId };\n  } finally {\n    try {\n      fs3.rmSync(tempDir, { recursive: true, force: true });\n    } catch {\n    }\n  }\n}\n\n// src/sandbox/scripts/src/lib/checkpoint.ts\nfunction findJsonlFiles(dir) {\n  const files = [];\n  function walk(currentDir) {\n    try {\n      const items = fs4.readdirSync(currentDir);\n      for (const item of items) {\n        const fullPath = path2.join(currentDir, item);\n        const stat = fs4.statSync(fullPath);\n        if (stat.isDirectory()) {\n          walk(fullPath);\n        } else if (item.endsWith(".jsonl")) {\n          files.push(fullPath);\n        }\n      }\n    } catch {\n    }\n  }\n  walk(dir);\n  return files;\n}\nfunction findCodexSessionFile(sessionsDir, sessionId) {\n  const files = findJsonlFiles(sessionsDir);\n  logInfo(`Searching for Codex session ${sessionId} in ${files.length} files`);\n  for (const filepath of files) {\n    const filename = path2.basename(filepath);\n    if (filename.includes(sessionId) || filename.replace(/-/g, "").includes(sessionId.replace(/-/g, ""))) {\n      logInfo(`Found Codex session file: ${filepath}`);\n      return filepath;\n    }\n  }\n  if (files.length > 0) {\n    files.sort((a, b) => {\n      const statA = fs4.statSync(a);\n      const statB = fs4.statSync(b);\n      return statB.mtimeMs - statA.mtimeMs;\n    });\n    const mostRecent = files[0] ?? null;\n    if (mostRecent) {\n      logInfo(\n        `Session ID not found in filenames, using most recent: ${mostRecent}`\n      );\n    }\n    return mostRecent;\n  }\n  return null;\n}\nasync function createCheckpoint() {\n  const checkpointStart = Date.now();\n  logInfo("Creating checkpoint...");\n  const sessionIdStart = Date.now();\n  if (!fs4.existsSync(SESSION_ID_FILE)) {\n    logError("No session ID found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_id_read",\n      Date.now() - sessionIdStart,\n      false,\n      "Session ID file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const cliAgentSessionId = fs4.readFileSync(SESSION_ID_FILE, "utf-8").trim();\n  recordSandboxOp("session_id_read", Date.now() - sessionIdStart, true);\n  const sessionHistoryStart = Date.now();\n  if (!fs4.existsSync(SESSION_HISTORY_PATH_FILE)) {\n    logError("No session history path found, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history path file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const sessionHistoryPathRaw = fs4.readFileSync(SESSION_HISTORY_PATH_FILE, "utf-8").trim();\n  let sessionHistoryPath;\n  if (sessionHistoryPathRaw.startsWith("CODEX_SEARCH:")) {\n    const parts = sessionHistoryPathRaw.split(":");\n    if (parts.length !== 3) {\n      logError(`Invalid Codex search marker format: ${sessionHistoryPathRaw}`);\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Invalid Codex search marker"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const sessionsDir = parts[1] ?? "";\n    const codexSessionId = parts[2] ?? "";\n    logInfo(`Searching for Codex session in ${sessionsDir}`);\n    const foundPath = findCodexSessionFile(sessionsDir, codexSessionId);\n    if (!foundPath) {\n      logError(\n        `Could not find Codex session file for ${codexSessionId} in ${sessionsDir}`\n      );\n      recordSandboxOp(\n        "session_history_read",\n        Date.now() - sessionHistoryStart,\n        false,\n        "Codex session file not found"\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    sessionHistoryPath = foundPath;\n  } else {\n    sessionHistoryPath = sessionHistoryPathRaw;\n  }\n  if (!fs4.existsSync(sessionHistoryPath)) {\n    logError(\n      `Session history file not found at ${sessionHistoryPath}, checkpoint creation failed`\n    );\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history file not found"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  let cliAgentSessionHistory;\n  try {\n    cliAgentSessionHistory = fs4.readFileSync(sessionHistoryPath, "utf-8");\n  } catch (error) {\n    logError(`Failed to read session history: ${error}`);\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      String(error)\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  if (!cliAgentSessionHistory.trim()) {\n    logError("Session history is empty, checkpoint creation failed");\n    recordSandboxOp(\n      "session_history_read",\n      Date.now() - sessionHistoryStart,\n      false,\n      "Session history empty"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n  const lineCount = cliAgentSessionHistory.trim().split("\\n").length;\n  logInfo(`Session history loaded (${lineCount} lines)`);\n  recordSandboxOp(\n    "session_history_read",\n    Date.now() - sessionHistoryStart,\n    true\n  );\n  let artifactSnapshot = null;\n  if (ARTIFACT_DRIVER && ARTIFACT_VOLUME_NAME) {\n    logInfo(`Processing artifact with driver: ${ARTIFACT_DRIVER}`);\n    if (ARTIFACT_DRIVER !== "vas") {\n      logError(\n        `Unknown artifact driver: ${ARTIFACT_DRIVER} (only \'vas\' is supported)`\n      );\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    logInfo(\n      `Creating VAS snapshot for artifact \'${ARTIFACT_VOLUME_NAME}\' at ${ARTIFACT_MOUNT_PATH}`\n    );\n    logInfo("Using direct S3 upload...");\n    const snapshot = await createDirectUploadSnapshot(\n      ARTIFACT_MOUNT_PATH,\n      ARTIFACT_VOLUME_NAME,\n      "artifact",\n      RUN_ID,\n      `Checkpoint from run ${RUN_ID}`\n    );\n    if (!snapshot) {\n      logError("Failed to create VAS snapshot for artifact");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    const artifactVersion = snapshot.versionId;\n    if (!artifactVersion) {\n      logError("Failed to extract versionId from snapshot");\n      recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n      return false;\n    }\n    artifactSnapshot = {\n      artifactName: ARTIFACT_VOLUME_NAME,\n      artifactVersion\n    };\n    logInfo(\n      `VAS artifact snapshot created: ${ARTIFACT_VOLUME_NAME}@${artifactVersion}`\n    );\n  } else {\n    logInfo(\n      "No artifact configured, creating checkpoint without artifact snapshot"\n    );\n  }\n  logInfo("Calling checkpoint API...");\n  const checkpointPayload = {\n    runId: RUN_ID,\n    cliAgentType: CLI_AGENT_TYPE,\n    cliAgentSessionId,\n    cliAgentSessionHistory\n  };\n  if (artifactSnapshot) {\n    checkpointPayload.artifactSnapshot = artifactSnapshot;\n  }\n  const apiCallStart = Date.now();\n  const result = await httpPostJson(\n    CHECKPOINT_URL,\n    checkpointPayload\n  );\n  if (result && result.checkpointId) {\n    const checkpointId = result.checkpointId;\n    logInfo(`Checkpoint created successfully: ${checkpointId}`);\n    recordSandboxOp("checkpoint_api_call", Date.now() - apiCallStart, true);\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, true);\n    return true;\n  } else {\n    logError(\n      `Checkpoint API returned invalid response: ${JSON.stringify(result)}`\n    );\n    recordSandboxOp(\n      "checkpoint_api_call",\n      Date.now() - apiCallStart,\n      false,\n      "Invalid API response"\n    );\n    recordSandboxOp("checkpoint_total", Date.now() - checkpointStart, false);\n    return false;\n  }\n}\n\n// src/sandbox/scripts/src/lib/metrics.ts\nimport * as fs5 from "fs";\nimport { execSync as execSync3 } from "child_process";\nvar shutdownRequested = false;\nfunction getCpuPercent() {\n  try {\n    const content = fs5.readFileSync("/proc/stat", "utf-8");\n    const line = content.split("\\n")[0];\n    if (!line) {\n      return 0;\n    }\n    const parts = line.split(/\\s+/);\n    if (parts[0] !== "cpu") {\n      return 0;\n    }\n    const values = parts.slice(1).map((x) => parseInt(x, 10));\n    const idleVal = values[3];\n    const iowaitVal = values[4];\n    if (idleVal === void 0 || iowaitVal === void 0) {\n      return 0;\n    }\n    const idle = idleVal + iowaitVal;\n    const total = values.reduce((a, b) => a + b, 0);\n    if (total === 0) {\n      return 0;\n    }\n    const cpuPercent = 100 * (1 - idle / total);\n    return Math.round(cpuPercent * 100) / 100;\n  } catch (error) {\n    logDebug(`Failed to get CPU percent: ${error}`);\n    return 0;\n  }\n}\nfunction getMemoryInfo() {\n  try {\n    const result = execSync3("free -b", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    for (const line of lines) {\n      if (line.startsWith("Mem:")) {\n        const parts = line.split(/\\s+/);\n        const totalStr = parts[1];\n        const usedStr = parts[2];\n        if (!totalStr || !usedStr) {\n          return [0, 0];\n        }\n        const total = parseInt(totalStr, 10);\n        const used = parseInt(usedStr, 10);\n        return [used, total];\n      }\n    }\n    return [0, 0];\n  } catch (error) {\n    logDebug(`Failed to get memory info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction getDiskInfo() {\n  try {\n    const result = execSync3("df -B1 /", {\n      encoding: "utf-8",\n      timeout: 5e3,\n      stdio: ["pipe", "pipe", "pipe"]\n    });\n    const lines = result.trim().split("\\n");\n    if (lines.length < 2) {\n      return [0, 0];\n    }\n    const dataLine = lines[1];\n    if (!dataLine) {\n      return [0, 0];\n    }\n    const parts = dataLine.split(/\\s+/);\n    const totalStr = parts[1];\n    const usedStr = parts[2];\n    if (!totalStr || !usedStr) {\n      return [0, 0];\n    }\n    const total = parseInt(totalStr, 10);\n    const used = parseInt(usedStr, 10);\n    return [used, total];\n  } catch (error) {\n    logDebug(`Failed to get disk info: ${error}`);\n    return [0, 0];\n  }\n}\nfunction collectMetrics() {\n  const cpu = getCpuPercent();\n  const [memUsed, memTotal] = getMemoryInfo();\n  const [diskUsed, diskTotal] = getDiskInfo();\n  return {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    cpu,\n    mem_used: memUsed,\n    mem_total: memTotal,\n    disk_used: diskUsed,\n    disk_total: diskTotal\n  };\n}\nfunction metricsCollectorLoop() {\n  logInfo(`Metrics collector started, writing to ${METRICS_LOG_FILE}`);\n  const writeMetrics = () => {\n    if (shutdownRequested) {\n      logInfo("Metrics collector stopped");\n      return;\n    }\n    try {\n      const metrics = collectMetrics();\n      fs5.appendFileSync(METRICS_LOG_FILE, JSON.stringify(metrics) + "\\n");\n      logDebug(\n        `Metrics collected: cpu=${metrics.cpu}%, mem=${metrics.mem_used}/${metrics.mem_total}`\n      );\n    } catch (error) {\n      logError(`Failed to collect/write metrics: ${error}`);\n    }\n    setTimeout(writeMetrics, METRICS_INTERVAL * 1e3);\n  };\n  writeMetrics();\n}\nfunction startMetricsCollector() {\n  shutdownRequested = false;\n  setTimeout(metricsCollectorLoop, 0);\n}\nfunction stopMetricsCollector() {\n  shutdownRequested = true;\n}\n\n// src/sandbox/scripts/src/lib/upload-telemetry.ts\nimport * as fs6 from "fs";\nvar shutdownRequested2 = false;\nfunction readFileFromPosition(filePath, posFile) {\n  let lastPos = 0;\n  if (fs6.existsSync(posFile)) {\n    try {\n      const content = fs6.readFileSync(posFile, "utf-8").trim();\n      lastPos = parseInt(content, 10) || 0;\n    } catch {\n      lastPos = 0;\n    }\n  }\n  let newContent = "";\n  let newPos = lastPos;\n  if (fs6.existsSync(filePath)) {\n    try {\n      const fd = fs6.openSync(filePath, "r");\n      const stats = fs6.fstatSync(fd);\n      const bufferSize = stats.size - lastPos;\n      if (bufferSize > 0) {\n        const buffer = Buffer.alloc(bufferSize);\n        fs6.readSync(fd, buffer, 0, bufferSize, lastPos);\n        newContent = buffer.toString("utf-8");\n        newPos = stats.size;\n      }\n      fs6.closeSync(fd);\n    } catch (error) {\n      logDebug(`Failed to read ${filePath}: ${error}`);\n    }\n  }\n  return [newContent, newPos];\n}\nfunction savePosition(posFile, position) {\n  try {\n    fs6.writeFileSync(posFile, String(position));\n  } catch (error) {\n    logDebug(`Failed to save position to ${posFile}: ${error}`);\n  }\n}\nfunction readJsonlFromPosition(filePath, posFile) {\n  const [content, newPos] = readFileFromPosition(filePath, posFile);\n  const entries = [];\n  if (content) {\n    for (const line of content.trim().split("\\n")) {\n      if (line) {\n        try {\n          entries.push(JSON.parse(line));\n        } catch {\n        }\n      }\n    }\n  }\n  return [entries, newPos];\n}\nfunction readMetricsFromPosition(posFile) {\n  return readJsonlFromPosition(METRICS_LOG_FILE, posFile);\n}\nfunction readNetworkLogsFromPosition(posFile) {\n  return readJsonlFromPosition(NETWORK_LOG_FILE, posFile);\n}\nfunction readSandboxOpsFromPosition(posFile) {\n  return readJsonlFromPosition(SANDBOX_OPS_LOG_FILE, posFile);\n}\nasync function uploadTelemetry() {\n  const [systemLog, logPos] = readFileFromPosition(\n    SYSTEM_LOG_FILE,\n    TELEMETRY_LOG_POS_FILE\n  );\n  const [metrics, metricsPos] = readMetricsFromPosition(\n    TELEMETRY_METRICS_POS_FILE\n  );\n  const [networkLogs, networkPos] = readNetworkLogsFromPosition(\n    TELEMETRY_NETWORK_POS_FILE\n  );\n  const [sandboxOps, sandboxOpsPos] = readSandboxOpsFromPosition(\n    TELEMETRY_SANDBOX_OPS_POS_FILE\n  );\n  if (!systemLog && metrics.length === 0 && networkLogs.length === 0 && sandboxOps.length === 0) {\n    logDebug("No new telemetry data to upload");\n    return true;\n  }\n  const maskedSystemLog = systemLog ? maskData(systemLog) : "";\n  const maskedNetworkLogs = networkLogs.length > 0 ? maskData(networkLogs) : [];\n  const payload = {\n    runId: RUN_ID,\n    systemLog: maskedSystemLog,\n    metrics,\n    // Metrics don\'t contain secrets (just numbers)\n    networkLogs: maskedNetworkLogs,\n    sandboxOperations: sandboxOps\n    // Sandbox ops don\'t contain secrets (just timing data)\n  };\n  logDebug(\n    `Uploading telemetry: ${systemLog.length} bytes log, ${metrics.length} metrics, ${networkLogs.length} network logs, ${sandboxOps.length} sandbox ops`\n  );\n  const result = await httpPostJson(TELEMETRY_URL, payload, 1);\n  if (result) {\n    savePosition(TELEMETRY_LOG_POS_FILE, logPos);\n    savePosition(TELEMETRY_METRICS_POS_FILE, metricsPos);\n    savePosition(TELEMETRY_NETWORK_POS_FILE, networkPos);\n    savePosition(TELEMETRY_SANDBOX_OPS_POS_FILE, sandboxOpsPos);\n    logDebug(\n      `Telemetry uploaded successfully: ${result.id ?? "unknown"}`\n    );\n    return true;\n  } else {\n    logWarn("Failed to upload telemetry (will retry next interval)");\n    return false;\n  }\n}\nasync function telemetryUploadLoop() {\n  logInfo(`Telemetry upload started (interval: ${TELEMETRY_INTERVAL}s)`);\n  const runUpload = async () => {\n    if (shutdownRequested2) {\n      logInfo("Telemetry upload stopped");\n      return;\n    }\n    try {\n      await uploadTelemetry();\n    } catch (error) {\n      logError(`Telemetry upload error: ${error}`);\n    }\n    setTimeout(() => void runUpload(), TELEMETRY_INTERVAL * 1e3);\n  };\n  await runUpload();\n}\nfunction startTelemetryUpload() {\n  shutdownRequested2 = false;\n  setTimeout(() => void telemetryUploadLoop(), 0);\n}\nfunction stopTelemetryUpload() {\n  shutdownRequested2 = true;\n}\nasync function finalTelemetryUpload() {\n  logInfo("Performing final telemetry upload...");\n  return uploadTelemetry();\n}\n\n// src/sandbox/scripts/src/run-agent.ts\nvar shutdownRequested3 = false;\nfunction heartbeatLoop() {\n  const sendHeartbeat = async () => {\n    if (shutdownRequested3) {\n      return;\n    }\n    try {\n      if (await httpPostJson(HEARTBEAT_URL, { runId: RUN_ID })) {\n        logInfo("Heartbeat sent");\n      } else {\n        logWarn("Heartbeat failed");\n      }\n    } catch (error) {\n      logWarn(`Heartbeat error: ${error}`);\n    }\n    setTimeout(() => {\n      sendHeartbeat().catch(() => {\n      });\n    }, HEARTBEAT_INTERVAL * 1e3);\n  };\n  sendHeartbeat().catch(() => {\n  });\n}\nasync function cleanup(exitCode, errorMessage) {\n  logInfo("\\u25B7 Cleanup");\n  const telemetryStart = Date.now();\n  let telemetrySuccess = true;\n  try {\n    await finalTelemetryUpload();\n  } catch (error) {\n    telemetrySuccess = false;\n    logError(`Final telemetry upload failed: ${error}`);\n  }\n  recordSandboxOp(\n    "final_telemetry_upload",\n    Date.now() - telemetryStart,\n    telemetrySuccess\n  );\n  logInfo(`Calling complete API with exitCode=${exitCode}`);\n  const completePayload = {\n    runId: RUN_ID,\n    exitCode\n  };\n  if (errorMessage) {\n    completePayload.error = errorMessage;\n  }\n  const completeStart = Date.now();\n  let completeSuccess = false;\n  try {\n    if (await httpPostJson(COMPLETE_URL, completePayload)) {\n      logInfo("Complete API called successfully");\n      completeSuccess = true;\n    } else {\n      logError("Failed to call complete API (sandbox may not be cleaned up)");\n    }\n  } catch (error) {\n    logError(`Complete API call failed: ${error}`);\n  }\n  recordSandboxOp(\n    "complete_api_call",\n    Date.now() - completeStart,\n    completeSuccess\n  );\n  shutdownRequested3 = true;\n  stopMetricsCollector();\n  stopTelemetryUpload();\n  logInfo("Background processes stopped");\n  if (exitCode === 0) {\n    logInfo("\\u2713 Sandbox finished successfully");\n  } else {\n    logInfo(`\\u2717 Sandbox failed (exit code ${exitCode})`);\n  }\n}\nasync function run() {\n  validateConfig();\n  logInfo(`\\u25B6 VM0 Sandbox ${RUN_ID}`);\n  logInfo("\\u25B7 Initialization");\n  const initStartTime = Date.now();\n  logInfo(`Working directory: ${WORKING_DIR}`);\n  const heartbeatStart = Date.now();\n  heartbeatLoop();\n  logInfo("Heartbeat started");\n  recordSandboxOp("heartbeat_start", Date.now() - heartbeatStart, true);\n  const metricsStart = Date.now();\n  startMetricsCollector();\n  logInfo("Metrics collector started");\n  recordSandboxOp("metrics_collector_start", Date.now() - metricsStart, true);\n  const telemetryStart = Date.now();\n  startTelemetryUpload();\n  logInfo("Telemetry upload started");\n  recordSandboxOp("telemetry_upload_start", Date.now() - telemetryStart, true);\n  const workingDirStart = Date.now();\n  try {\n    fs7.mkdirSync(WORKING_DIR, { recursive: true });\n    process.chdir(WORKING_DIR);\n  } catch (error) {\n    recordSandboxOp(\n      "working_dir_setup",\n      Date.now() - workingDirStart,\n      false,\n      String(error)\n    );\n    throw new Error(\n      `Failed to create/change to working directory: ${WORKING_DIR} - ${error}`\n    );\n  }\n  recordSandboxOp("working_dir_setup", Date.now() - workingDirStart, true);\n  if (CLI_AGENT_TYPE === "codex") {\n    const homeDir = process.env.HOME ?? "/home/user";\n    const codexHome = `${homeDir}/.codex`;\n    fs7.mkdirSync(codexHome, { recursive: true });\n    process.env.CODEX_HOME = codexHome;\n    logInfo(`Codex home directory: ${codexHome}`);\n    const codexLoginStart = Date.now();\n    let codexLoginSuccess = false;\n    const apiKey = process.env.OPENAI_API_KEY ?? "";\n    if (apiKey) {\n      try {\n        execSync4("codex login --with-api-key", {\n          input: apiKey,\n          encoding: "utf-8",\n          stdio: ["pipe", "pipe", "pipe"]\n        });\n        logInfo("Codex authenticated with API key");\n        codexLoginSuccess = true;\n      } catch (error) {\n        logError(`Codex login failed: ${error}`);\n      }\n    } else {\n      logError("OPENAI_API_KEY not set");\n    }\n    recordSandboxOp(\n      "codex_login",\n      Date.now() - codexLoginStart,\n      codexLoginSuccess\n    );\n  }\n  const initDurationMs = Date.now() - initStartTime;\n  recordSandboxOp("init_total", initDurationMs, true);\n  logInfo(`\\u2713 Initialization complete (${Math.floor(initDurationMs / 1e3)}s)`);\n  logInfo("\\u25B7 Execution");\n  const execStartTime = Date.now();\n  logInfo(`Starting ${CLI_AGENT_TYPE} execution...`);\n  logInfo(`Prompt: ${PROMPT}`);\n  const useMock = process.env.USE_MOCK_CLAUDE === "true";\n  let cmd;\n  if (CLI_AGENT_TYPE === "codex") {\n    if (useMock) {\n      throw new Error("Mock mode not supported for Codex");\n    }\n    const codexArgs = [\n      "exec",\n      "--json",\n      "--dangerously-bypass-approvals-and-sandbox",\n      "--skip-git-repo-check",\n      "-C",\n      WORKING_DIR\n    ];\n    if (OPENAI_MODEL) {\n      codexArgs.push("-m", OPENAI_MODEL);\n    }\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      codexArgs.push("resume", RESUME_SESSION_ID, PROMPT);\n    } else {\n      logInfo("Starting new session");\n      codexArgs.push(PROMPT);\n    }\n    cmd = ["codex", ...codexArgs];\n  } else {\n    const claudeArgs = [\n      "--print",\n      "--verbose",\n      "--output-format",\n      "stream-json",\n      "--dangerously-skip-permissions"\n    ];\n    if (RESUME_SESSION_ID) {\n      logInfo(`Resuming session: ${RESUME_SESSION_ID}`);\n      claudeArgs.push("--resume", RESUME_SESSION_ID);\n    } else {\n      logInfo("Starting new session");\n    }\n    const claudeBin = useMock ? "/usr/local/bin/vm0-agent/mock-claude.mjs" : "claude";\n    if (useMock) {\n      logInfo("Using mock-claude for testing");\n    }\n    cmd = [claudeBin, ...claudeArgs, PROMPT];\n  }\n  let agentExitCode = 0;\n  const stderrLines = [];\n  let logFile = null;\n  try {\n    logFile = fs7.createWriteStream(AGENT_LOG_FILE);\n    const cmdExe = cmd[0];\n    if (!cmdExe) {\n      throw new Error("Empty command");\n    }\n    const proc = spawn(cmdExe, cmd.slice(1), {\n      stdio: ["ignore", "pipe", "pipe"]\n    });\n    const exitPromise = new Promise((resolve) => {\n      let resolved = false;\n      proc.on("error", (err) => {\n        if (!resolved) {\n          resolved = true;\n          logError(`Failed to spawn ${CLI_AGENT_TYPE}: ${err.message}`);\n          stderrLines.push(`Spawn error: ${err.message}`);\n          resolve(1);\n        }\n      });\n      proc.on("close", (code) => {\n        if (!resolved) {\n          resolved = true;\n          resolve(code ?? 1);\n        }\n      });\n    });\n    if (proc.stderr) {\n      const stderrRl = readline.createInterface({ input: proc.stderr });\n      stderrRl.on("line", (line) => {\n        stderrLines.push(line);\n        if (logFile && !logFile.destroyed) {\n          logFile.write(`[STDERR] ${line}\n`);\n        }\n      });\n    }\n    if (proc.stdout) {\n      const stdoutRl = readline.createInterface({ input: proc.stdout });\n      let eventSequence = 0;\n      for await (const line of stdoutRl) {\n        if (logFile && !logFile.destroyed) {\n          logFile.write(line + "\\n");\n        }\n        const stripped = line.trim();\n        if (!stripped) {\n          continue;\n        }\n        try {\n          const event = JSON.parse(stripped);\n          await sendEvent(event, eventSequence);\n          eventSequence++;\n          if (event.type === "result") {\n            const resultContent = event.result;\n            if (resultContent) {\n              console.log(resultContent);\n            }\n          }\n        } catch {\n          logDebug(`Non-JSON line from agent: ${stripped.slice(0, 100)}`);\n        }\n      }\n    }\n    agentExitCode = await exitPromise;\n  } catch (error) {\n    logError(`Failed to execute ${CLI_AGENT_TYPE}: ${error}`);\n    agentExitCode = 1;\n  } finally {\n    if (logFile && !logFile.destroyed) {\n      logFile.end();\n    }\n  }\n  console.log();\n  let finalExitCode = agentExitCode;\n  let errorMessage = "";\n  if (fs7.existsSync(EVENT_ERROR_FLAG)) {\n    logError("Some events failed to send, marking run as failed");\n    finalExitCode = 1;\n    errorMessage = "Some events failed to send";\n  }\n  const execDurationMs = Date.now() - execStartTime;\n  recordSandboxOp("cli_execution", execDurationMs, agentExitCode === 0);\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`\\u2713 Execution complete (${Math.floor(execDurationMs / 1e3)}s)`);\n  } else {\n    logInfo(`\\u2717 Execution failed (${Math.floor(execDurationMs / 1e3)}s)`);\n  }\n  if (agentExitCode === 0 && finalExitCode === 0) {\n    logInfo(`${CLI_AGENT_TYPE} completed successfully`);\n    logInfo("\\u25B7 Checkpoint");\n    const checkpointStartTime = Date.now();\n    const checkpointSuccess = await createCheckpoint();\n    const checkpointDuration = Math.floor(\n      (Date.now() - checkpointStartTime) / 1e3\n    );\n    if (checkpointSuccess) {\n      logInfo(`\\u2713 Checkpoint complete (${checkpointDuration}s)`);\n    } else {\n      logInfo(`\\u2717 Checkpoint failed (${checkpointDuration}s)`);\n    }\n    if (!checkpointSuccess) {\n      logError("Checkpoint creation failed, marking run as failed");\n      finalExitCode = 1;\n      errorMessage = "Checkpoint creation failed";\n    }\n  } else {\n    if (agentExitCode !== 0) {\n      logInfo(`${CLI_AGENT_TYPE} failed with exit code ${agentExitCode}`);\n      if (stderrLines.length > 0) {\n        errorMessage = stderrLines.map((line) => line.trim()).join(" ");\n        logInfo(`Captured stderr: ${errorMessage}`);\n      } else {\n        errorMessage = `Agent exited with code ${agentExitCode}`;\n      }\n    }\n  }\n  return [finalExitCode, errorMessage];\n}\nasync function main() {\n  let exitCode = 1;\n  let errorMessage = "Unexpected termination";\n  try {\n    [exitCode, errorMessage] = await run();\n  } catch (error) {\n    if (error instanceof Error) {\n      exitCode = 1;\n      errorMessage = error.message;\n      logError(`Error: ${errorMessage}`);\n    } else {\n      exitCode = 1;\n      errorMessage = `Unexpected error: ${error}`;\n      logError(errorMessage);\n    }\n  } finally {\n    await cleanup(exitCode, errorMessage);\n  }\n  return exitCode;\n}\nmain().then((code) => process.exit(code)).catch((error) => {\n  console.error("Fatal error:", error);\n  process.exit(1);\n});\n';
 var DOWNLOAD_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/download.ts\nimport * as fs2 from "fs";\nimport * as path from "path";\nimport * as os from "os";\nimport { execSync as execSync2 } from "child_process";\n\n// src/sandbox/scripts/src/lib/common.ts\nimport * as fs from "fs";\nvar RUN_ID = process.env.VM0_RUN_ID ?? "";\nvar API_URL = process.env.VM0_API_URL ?? "";\nvar API_TOKEN = process.env.VM0_API_TOKEN ?? "";\nvar PROMPT = process.env.VM0_PROMPT ?? "";\nvar VERCEL_BYPASS = process.env.VERCEL_PROTECTION_BYPASS ?? "";\nvar RESUME_SESSION_ID = process.env.VM0_RESUME_SESSION_ID ?? "";\nvar CLI_AGENT_TYPE = process.env.CLI_AGENT_TYPE ?? "claude-code";\nvar OPENAI_MODEL = process.env.OPENAI_MODEL ?? "";\nvar WORKING_DIR = process.env.VM0_WORKING_DIR ?? "";\nvar ARTIFACT_DRIVER = process.env.VM0_ARTIFACT_DRIVER ?? "";\nvar ARTIFACT_MOUNT_PATH = process.env.VM0_ARTIFACT_MOUNT_PATH ?? "";\nvar ARTIFACT_VOLUME_NAME = process.env.VM0_ARTIFACT_VOLUME_NAME ?? "";\nvar ARTIFACT_VERSION_ID = process.env.VM0_ARTIFACT_VERSION_ID ?? "";\nvar WEBHOOK_URL = `${API_URL}/api/webhooks/agent/events`;\nvar CHECKPOINT_URL = `${API_URL}/api/webhooks/agent/checkpoints`;\nvar COMPLETE_URL = `${API_URL}/api/webhooks/agent/complete`;\nvar HEARTBEAT_URL = `${API_URL}/api/webhooks/agent/heartbeat`;\nvar TELEMETRY_URL = `${API_URL}/api/webhooks/agent/telemetry`;\nvar PROXY_URL = `${API_URL}/api/webhooks/agent/proxy`;\nvar STORAGE_PREPARE_URL = `${API_URL}/api/webhooks/agent/storages/prepare`;\nvar STORAGE_COMMIT_URL = `${API_URL}/api/webhooks/agent/storages/commit`;\nvar HTTP_MAX_TIME_UPLOAD = 60;\nvar HTTP_MAX_RETRIES = 3;\nvar SESSION_ID_FILE = `/tmp/vm0-session-${RUN_ID}.txt`;\nvar SESSION_HISTORY_PATH_FILE = `/tmp/vm0-session-history-${RUN_ID}.txt`;\nvar EVENT_ERROR_FLAG = `/tmp/vm0-event-error-${RUN_ID}`;\nvar SYSTEM_LOG_FILE = `/tmp/vm0-main-${RUN_ID}.log`;\nvar AGENT_LOG_FILE = `/tmp/vm0-agent-${RUN_ID}.log`;\nvar METRICS_LOG_FILE = `/tmp/vm0-metrics-${RUN_ID}.jsonl`;\nvar NETWORK_LOG_FILE = `/tmp/vm0-network-${RUN_ID}.jsonl`;\nvar TELEMETRY_LOG_POS_FILE = `/tmp/vm0-telemetry-log-pos-${RUN_ID}.txt`;\nvar TELEMETRY_METRICS_POS_FILE = `/tmp/vm0-telemetry-metrics-pos-${RUN_ID}.txt`;\nvar TELEMETRY_NETWORK_POS_FILE = `/tmp/vm0-telemetry-network-pos-${RUN_ID}.txt`;\nvar TELEMETRY_SANDBOX_OPS_POS_FILE = `/tmp/vm0-telemetry-sandbox-ops-pos-${RUN_ID}.txt`;\nvar SANDBOX_OPS_LOG_FILE = `/tmp/vm0-sandbox-ops-${RUN_ID}.jsonl`;\nfunction recordSandboxOp(actionType, durationMs, success, error) {\n  const entry = {\n    ts: (/* @__PURE__ */ new Date()).toISOString(),\n    action_type: actionType,\n    duration_ms: durationMs,\n    success\n  };\n  if (error) {\n    entry.error = error;\n  }\n  fs.appendFileSync(SANDBOX_OPS_LOG_FILE, JSON.stringify(entry) + "\\n");\n}\n\n// src/sandbox/scripts/src/lib/log.ts\nvar SCRIPT_NAME = process.env.LOG_SCRIPT_NAME ?? "run-agent";\nvar DEBUG_MODE = process.env.VM0_DEBUG === "1";\nfunction timestamp() {\n  return (/* @__PURE__ */ new Date()).toISOString().replace(/\\.\\d{3}Z$/, "Z");\n}\nfunction logInfo(msg) {\n  console.error(`[${timestamp()}] [INFO] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logWarn(msg) {\n  console.error(`[${timestamp()}] [WARN] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logError(msg) {\n  console.error(`[${timestamp()}] [ERROR] [sandbox:${SCRIPT_NAME}] ${msg}`);\n}\nfunction logDebug(msg) {\n  if (DEBUG_MODE) {\n    console.error(`[${timestamp()}] [DEBUG] [sandbox:${SCRIPT_NAME}] ${msg}`);\n  }\n}\n\n// src/sandbox/scripts/src/lib/http-client.ts\nimport { execSync } from "child_process";\nfunction sleep(ms) {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\nasync function httpDownload(url, destPath, maxRetries = HTTP_MAX_RETRIES) {\n  for (let attempt = 1; attempt <= maxRetries; attempt++) {\n    logDebug(`HTTP download attempt ${attempt}/${maxRetries} from ${url}`);\n    try {\n      const curlCmd = ["curl", "-fsSL", "-o", destPath, `"${url}"`].join(" ");\n      execSync(curlCmd, {\n        timeout: HTTP_MAX_TIME_UPLOAD * 1e3,\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      return true;\n    } catch (error) {\n      const errorMsg = error instanceof Error ? error.message : String(error);\n      if (errorMsg.includes("ETIMEDOUT") || errorMsg.includes("timeout")) {\n        logWarn(\n          `HTTP download failed (attempt ${attempt}/${maxRetries}): Timeout`\n        );\n      } else {\n        logWarn(\n          `HTTP download failed (attempt ${attempt}/${maxRetries}): ${errorMsg}`\n        );\n      }\n      if (attempt < maxRetries) {\n        await sleep(1e3);\n      }\n    }\n  }\n  logError(`HTTP download failed after ${maxRetries} attempts from ${url}`);\n  return false;\n}\n\n// src/sandbox/scripts/src/download.ts\nasync function downloadStorage(mountPath, archiveUrl) {\n  logInfo(`Downloading storage to ${mountPath}`);\n  const tempTar = path.join(\n    os.tmpdir(),\n    `storage-${Date.now()}-${Math.random().toString(36).slice(2)}.tar.gz`\n  );\n  try {\n    if (!await httpDownload(archiveUrl, tempTar)) {\n      logError(`Failed to download archive for ${mountPath}`);\n      return false;\n    }\n    fs2.mkdirSync(mountPath, { recursive: true });\n    try {\n      execSync2(`tar -xzf "${tempTar}" -C "${mountPath}"`, {\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n    } catch {\n      logInfo(`Archive appears empty for ${mountPath}`);\n    }\n    logInfo(`Successfully extracted to ${mountPath}`);\n    return true;\n  } finally {\n    try {\n      fs2.unlinkSync(tempTar);\n    } catch {\n    }\n  }\n}\nasync function main() {\n  const args = process.argv.slice(2);\n  if (args.length < 1) {\n    logError("Usage: node download.mjs <manifest_path>");\n    process.exit(1);\n  }\n  const manifestPath = args[0] ?? "";\n  if (!manifestPath || !fs2.existsSync(manifestPath)) {\n    logError(`Manifest file not found: ${manifestPath}`);\n    process.exit(1);\n  }\n  logInfo(`Starting storage download from manifest: ${manifestPath}`);\n  let manifest;\n  try {\n    const content = fs2.readFileSync(manifestPath, "utf-8");\n    manifest = JSON.parse(content);\n  } catch (error) {\n    logError(`Failed to load manifest: ${error}`);\n    process.exit(1);\n  }\n  const storages = manifest.storages ?? [];\n  const artifact = manifest.artifact;\n  const storageCount = storages.length;\n  const hasArtifact = artifact !== void 0;\n  logInfo(`Found ${storageCount} storages, artifact: ${hasArtifact}`);\n  const downloadTotalStart = Date.now();\n  let downloadSuccess = true;\n  for (const storage of storages) {\n    const mountPath = storage.mountPath;\n    const archiveUrl = storage.archiveUrl;\n    if (archiveUrl && archiveUrl !== "null") {\n      const storageStart = Date.now();\n      const success = await downloadStorage(mountPath, archiveUrl);\n      recordSandboxOp("storage_download", Date.now() - storageStart, success);\n      if (!success) {\n        downloadSuccess = false;\n      }\n    }\n  }\n  if (artifact) {\n    const artifactMount = artifact.mountPath;\n    const artifactUrl = artifact.archiveUrl;\n    if (artifactUrl && artifactUrl !== "null") {\n      const artifactStart = Date.now();\n      const success = await downloadStorage(artifactMount, artifactUrl);\n      recordSandboxOp("artifact_download", Date.now() - artifactStart, success);\n      if (!success) {\n        downloadSuccess = false;\n      }\n    }\n  }\n  recordSandboxOp(\n    "download_total",\n    Date.now() - downloadTotalStart,\n    downloadSuccess\n  );\n  logInfo("All storages downloaded successfully");\n}\nmain().catch((error) => {\n  logError(`Fatal error: ${error}`);\n  process.exit(1);\n});\n';
 var MOCK_CLAUDE_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/mock-claude.ts\nimport * as fs from "fs";\nimport * as path from "path";\nimport { execSync } from "child_process";\nfunction parseArgs(args) {\n  const result = {\n    outputFormat: "text",\n    print: false,\n    verbose: false,\n    dangerouslySkipPermissions: false,\n    resume: null,\n    prompt: ""\n  };\n  const remaining = [];\n  let i = 0;\n  while (i < args.length) {\n    const arg = args[i];\n    if (arg === "--output-format" && i + 1 < args.length) {\n      result.outputFormat = args[i + 1] ?? "text";\n      i += 2;\n    } else if (arg === "--print") {\n      result.print = true;\n      i++;\n    } else if (arg === "--verbose") {\n      result.verbose = true;\n      i++;\n    } else if (arg === "--dangerously-skip-permissions") {\n      result.dangerouslySkipPermissions = true;\n      i++;\n    } else if (arg === "--resume" && i + 1 < args.length) {\n      result.resume = args[i + 1] ?? null;\n      i += 2;\n    } else if (arg) {\n      remaining.push(arg);\n      i++;\n    } else {\n      i++;\n    }\n  }\n  if (remaining.length > 0) {\n    result.prompt = remaining[0] ?? "";\n  }\n  return result;\n}\nfunction createSessionHistory(sessionId, cwd) {\n  const projectName = cwd.replace(/^\\//, "").replace(/\\//g, "-");\n  const homeDir = process.env.HOME ?? "/home/user";\n  const sessionDir = `${homeDir}/.claude/projects/-${projectName}`;\n  fs.mkdirSync(sessionDir, { recursive: true });\n  return path.join(sessionDir, `${sessionId}.jsonl`);\n}\nfunction main() {\n  const sessionId = `mock-${Date.now() * 1e3 + Math.floor(Math.random() * 1e3)}`;\n  const args = parseArgs(process.argv.slice(2));\n  const prompt = args.prompt;\n  const outputFormat = args.outputFormat;\n  if (prompt.startsWith("@fail:")) {\n    const errorMsg = prompt.slice(6);\n    console.error(errorMsg);\n    process.exit(1);\n  }\n  const cwd = process.cwd();\n  if (outputFormat === "stream-json") {\n    const sessionHistoryFile = createSessionHistory(sessionId, cwd);\n    const events = [];\n    const initEvent = {\n      type: "system",\n      subtype: "init",\n      cwd,\n      session_id: sessionId,\n      tools: ["Bash"],\n      model: "mock-claude"\n    };\n    console.log(JSON.stringify(initEvent));\n    events.push(initEvent);\n    const textEvent = {\n      type: "assistant",\n      message: {\n        role: "assistant",\n        content: [{ type: "text", text: "Executing command..." }]\n      },\n      session_id: sessionId\n    };\n    console.log(JSON.stringify(textEvent));\n    events.push(textEvent);\n    const toolUseEvent = {\n      type: "assistant",\n      message: {\n        role: "assistant",\n        content: [\n          {\n            type: "tool_use",\n            id: "toolu_mock_001",\n            name: "Bash",\n            input: { command: prompt }\n          }\n        ]\n      },\n      session_id: sessionId\n    };\n    console.log(JSON.stringify(toolUseEvent));\n    events.push(toolUseEvent);\n    let output;\n    let exitCode;\n    try {\n      output = execSync(`bash -c ${JSON.stringify(prompt)}`, {\n        encoding: "utf-8",\n        stdio: ["pipe", "pipe", "pipe"]\n      });\n      exitCode = 0;\n    } catch (error) {\n      const execError = error;\n      output = (execError.stdout ?? "") + (execError.stderr ?? "");\n      exitCode = execError.status ?? 1;\n    }\n    const isError = exitCode !== 0;\n    const toolResultEvent = {\n      type: "user",\n      message: {\n        role: "user",\n        content: [\n          {\n            type: "tool_result",\n            tool_use_id: "toolu_mock_001",\n            content: output,\n            is_error: isError\n          }\n        ]\n      },\n      session_id: sessionId\n    };\n    console.log(JSON.stringify(toolResultEvent));\n    events.push(toolResultEvent);\n    const resultEvent = {\n      type: "result",\n      subtype: exitCode === 0 ? "success" : "error",\n      is_error: exitCode !== 0,\n      duration_ms: 100,\n      num_turns: 1,\n      result: output,\n      session_id: sessionId,\n      total_cost_usd: 0,\n      usage: { input_tokens: 0, output_tokens: 0 }\n    };\n    console.log(JSON.stringify(resultEvent));\n    events.push(resultEvent);\n    const historyContent = events.map((e) => JSON.stringify(e)).join("\\n") + "\\n";\n    fs.writeFileSync(sessionHistoryFile, historyContent);\n    process.exit(exitCode);\n  } else {\n    try {\n      execSync(`bash -c ${JSON.stringify(prompt)}`, {\n        stdio: "inherit"\n      });\n      process.exit(0);\n    } catch (error) {\n      const execError = error;\n      process.exit(execError.status ?? 1);\n    }\n  }\n}\nvar isMainModule = process.argv[1]?.endsWith("mock-claude.mjs") || process.argv[1]?.endsWith("mock-claude.ts");\nif (isMainModule) {\n  main();\n}\nexport {\n  createSessionHistory,\n  parseArgs\n};\n';
 var ENV_LOADER_SCRIPT = '#!/usr/bin/env node\n\n// src/sandbox/scripts/src/env-loader.ts\nimport * as fs from "fs";\nimport { spawn } from "child_process";\nvar ENV_JSON_PATH = "/tmp/vm0-env.json";\nconsole.log("[env-loader] Starting...");\nif (fs.existsSync(ENV_JSON_PATH)) {\n  console.log(`[env-loader] Loading environment from ${ENV_JSON_PATH}`);\n  try {\n    const content = fs.readFileSync(ENV_JSON_PATH, "utf-8");\n    const envData = JSON.parse(content);\n    for (const [key, value] of Object.entries(envData)) {\n      process.env[key] = value;\n    }\n    console.log(\n      `[env-loader] Loaded ${Object.keys(envData).length} environment variables`\n    );\n  } catch (error) {\n    console.error(`[env-loader] ERROR loading JSON: ${error}`);\n    process.exit(1);\n  }\n} else {\n  console.error(\n    `[env-loader] ERROR: Environment file not found: ${ENV_JSON_PATH}`\n  );\n  process.exit(1);\n}\nvar criticalVars = [\n  "VM0_RUN_ID",\n  "VM0_API_URL",\n  "VM0_WORKING_DIR",\n  "VM0_PROMPT"\n];\nfor (const varName of criticalVars) {\n  const val = process.env[varName] ?? "";\n  if (val) {\n    const display = val.length > 50 ? val.substring(0, 50) + "..." : val;\n    console.log(`[env-loader] ${varName}=${display}`);\n  } else {\n    console.log(`[env-loader] WARNING: ${varName} is empty`);\n  }\n}\nvar runAgentPath = "/usr/local/bin/vm0-agent/run-agent.mjs";\nconsole.log(`[env-loader] Executing ${runAgentPath}`);\nvar child = spawn("node", [runAgentPath], {\n  stdio: "inherit",\n  env: process.env\n});\nchild.on("close", (code) => {\n  process.exit(code ?? 1);\n});\n';
@@ -7782,13 +7903,39 @@ var SCRIPT_PATHS = {
 };
 
 // ../../packages/core/src/feature-switch.ts
-var PricingSwitch = {
-  key: "pricing" /* Pricing */,
-  maintainer: "ethan@vm0.ai",
-  enabled: false
-};
 var FEATURE_SWITCHES = {
-  ["pricing" /* Pricing */]: PricingSwitch
+  ["pricing" /* Pricing */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false
+  },
+  ["dummy" /* Dummy */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: true
+  },
+  ["platformOnboarding" /* PlatformOnboarding */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false
+  },
+  ["platformAgents" /* PlatformAgents */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false
+  },
+  ["platformSecrets" /* PlatformSecrets */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false
+  },
+  ["platformArtifacts" /* PlatformArtifacts */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false
+  },
+  ["platformApiKeys" /* PlatformApiKeys */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false
+  },
+  ["platformLogs" /* PlatformLogs */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false
+  }
 };
 
 // src/lib/scripts/index.ts
@@ -7901,7 +8048,7 @@ function initVMRegistry(registryPath) {
 // src/lib/proxy/proxy-manager.ts
 import { spawn as spawn2 } from "child_process";
 import fs6 from "fs";
-import path4 from "path";
+import path3 from "path";
 
 // src/lib/proxy/mitm-addon-script.ts
 var RUNNER_MITM_ADDON_SCRIPT = `#!/usr/bin/env python3
@@ -8394,7 +8541,7 @@ var ProxyManager = class {
   process = null;
   isRunning = false;
   constructor(config) {
-    const addonPath = path4.join(config.caDir, "mitm_addon.py");
+    const addonPath = path3.join(config.caDir, "mitm_addon.py");
     this.config = {
       ...DEFAULT_PROXY_OPTIONS,
       ...config,
@@ -8421,7 +8568,7 @@ var ProxyManager = class {
    * Ensure the addon script exists at the configured path
    */
   ensureAddonScript() {
-    const addonDir = path4.dirname(this.config.addonPath);
+    const addonDir = path3.dirname(this.config.addonPath);
     if (!fs6.existsSync(addonDir)) {
       fs6.mkdirSync(addonDir, { recursive: true });
     }
@@ -8439,7 +8586,7 @@ var ProxyManager = class {
     if (!fs6.existsSync(this.config.caDir)) {
       throw new Error(`Proxy CA directory not found: ${this.config.caDir}`);
     }
-    const caCertPath = path4.join(this.config.caDir, "mitmproxy-ca.pem");
+    const caCertPath = path3.join(this.config.caDir, "mitmproxy-ca.pem");
     if (!fs6.existsSync(caCertPath)) {
       throw new Error(`Proxy CA certificate not found: ${caCertPath}`);
     }
@@ -8911,17 +9058,17 @@ function getAllScripts() {
 }
 
 // src/lib/vm-setup/vm-setup.ts
-async function uploadScripts(ssh) {
+async function uploadScripts(guest) {
   const scripts = getAllScripts();
-  await ssh.execOrThrow(`sudo mkdir -p ${SCRIPT_PATHS.baseDir}`);
+  await guest.execOrThrow(`sudo mkdir -p ${SCRIPT_PATHS.baseDir}`);
   for (const script of scripts) {
-    await ssh.writeFileWithSudo(script.path, script.content);
+    await guest.writeFileWithSudo(script.path, script.content);
   }
-  await ssh.execOrThrow(
+  await guest.execOrThrow(
     `sudo chmod +x ${SCRIPT_PATHS.baseDir}/*.mjs 2>/dev/null || true`
   );
 }
-async function downloadStorages(ssh, manifest) {
+async function downloadStorages(guest, manifest) {
   const totalArchives = manifest.storages.filter((s) => s.archiveUrl).length + (manifest.artifact?.archiveUrl ? 1 : 0);
   if (totalArchives === 0) {
     console.log(`[Executor] No archives to download`);
@@ -8929,8 +9076,8 @@ async function downloadStorages(ssh, manifest) {
   }
   console.log(`[Executor] Downloading ${totalArchives} archive(s)...`);
   const manifestJson = JSON.stringify(manifest);
-  await ssh.writeFile("/tmp/storage-manifest.json", manifestJson);
-  const result = await ssh.exec(
+  await guest.writeFile("/tmp/storage-manifest.json", manifestJson);
+  const result = await guest.exec(
     `node ${SCRIPT_PATHS.download} /tmp/storage-manifest.json`
   );
   if (result.exitCode !== 0) {
@@ -8938,7 +9085,7 @@ async function downloadStorages(ssh, manifest) {
   }
   console.log(`[Executor] Storage download completed`);
 }
-async function restoreSessionHistory(ssh, resumeSession, workingDir, cliAgentType) {
+async function restoreSessionHistory(guest, resumeSession, workingDir, cliAgentType) {
   const { sessionId, sessionHistory } = resumeSession;
   let sessionPath;
   if (cliAgentType === "codex") {
@@ -8952,13 +9099,13 @@ async function restoreSessionHistory(ssh, resumeSession, workingDir, cliAgentTyp
   }
   console.log(`[Executor] Restoring session history to ${sessionPath}`);
   const dirPath = sessionPath.substring(0, sessionPath.lastIndexOf("/"));
-  await ssh.execOrThrow(`mkdir -p "${dirPath}"`);
-  await ssh.writeFile(sessionPath, sessionHistory);
+  await guest.execOrThrow(`mkdir -p "${dirPath}"`);
+  await guest.writeFile(sessionPath, sessionHistory);
   console.log(
     `[Executor] Session history restored (${sessionHistory.split("\n").length} lines)`
   );
 }
-async function installProxyCA(ssh, caCertPath) {
+async function installProxyCA(guest, caCertPath) {
   if (!fs8.existsSync(caCertPath)) {
     throw new Error(
       `Proxy CA certificate not found at ${caCertPath}. Run generate-proxy-ca.sh first.`
@@ -8968,18 +9115,18 @@ async function installProxyCA(ssh, caCertPath) {
   console.log(
     `[Executor] Installing proxy CA certificate (${caCert.length} bytes)`
   );
-  await ssh.writeFileWithSudo(
+  await guest.writeFileWithSudo(
     "/usr/local/share/ca-certificates/vm0-proxy-ca.crt",
     caCert
   );
-  await ssh.execOrThrow("sudo update-ca-certificates");
+  await guest.execOrThrow("sudo update-ca-certificates");
   console.log(`[Executor] Proxy CA certificate installed successfully`);
 }
-async function configureDNS(ssh) {
+async function configureDNS(guest) {
   const dnsConfig = `nameserver 8.8.8.8
 nameserver 8.8.4.4
 nameserver 1.1.1.1`;
-  await ssh.execOrThrow(
+  await guest.execOrThrow(
     `sudo sh -c 'rm -f /etc/resolv.conf && echo "${dnsConfig}" > /etc/resolv.conf'`
   );
 }
@@ -8995,11 +9142,11 @@ var CURL_ERROR_MESSAGES = {
   60: "TLS certificate error (proxy CA not trusted)",
   22: "HTTP error from server"
 };
-async function runPreflightCheck(ssh, apiUrl, runId, sandboxToken, bypassSecret) {
+async function runPreflightCheck(guest, apiUrl, runId, sandboxToken, bypassSecret) {
   const heartbeatUrl = `${apiUrl}/api/webhooks/agent/heartbeat`;
   const bypassHeader = bypassSecret ? ` -H "x-vercel-protection-bypass: ${bypassSecret}"` : "";
   const curlCmd = `curl -sf --connect-timeout 5 --max-time 10 "${heartbeatUrl}" -X POST -H "Content-Type: application/json" -H "Authorization: Bearer ${sandboxToken}"${bypassHeader} -d '{"runId":"${runId}"}'`;
-  const result = await ssh.exec(curlCmd, 2e4);
+  const result = await guest.exec(curlCmd, 2e4);
   if (result.exitCode === 0) {
     return { success: true };
   }
@@ -9045,7 +9192,7 @@ async function executeJob(context, config, options = {}) {
   const log = options.logger ?? ((msg) => console.log(msg));
   log(`[Executor] Starting job ${context.runId} in VM ${vmId}`);
   try {
-    const workspacesDir = path5.join(process.cwd(), "workspaces");
+    const workspacesDir = path4.join(process.cwd(), "workspaces");
     const vmConfig = {
       vmId,
       vcpus: config.sandbox.vcpu,
@@ -9053,7 +9200,7 @@ async function executeJob(context, config, options = {}) {
       kernelPath: config.firecracker.kernel,
       rootfsPath: config.firecracker.rootfs,
       firecrackerBinary: config.firecracker.binary,
-      workDir: path5.join(workspacesDir, `vm0-${vmId}`)
+      workDir: path4.join(workspacesDir, `vm0-${vmId}`)
     };
     log(`[Executor] Creating VM ${vmId}...`);
     vm = new FirecrackerVM(vmConfig);
@@ -9063,14 +9210,15 @@ async function executeJob(context, config, options = {}) {
       throw new Error("VM started but no IP address available");
     }
     log(`[Executor] VM ${vmId} started, guest IP: ${guestIp}`);
-    const privateKeyPath = getRunnerSSHKeyPath();
-    const ssh = createVMSSHClient(guestIp, "user", privateKeyPath || void 0);
-    log(`[Executor] Waiting for SSH on ${guestIp}...`);
+    const vsockPath = vm.getVsockPath();
+    const guest = new VsockClient(vsockPath);
+    log(`[Executor] Using vsock for guest communication: ${vsockPath}`);
+    log(`[Executor] Verifying vsock connectivity...`);
     await withSandboxTiming(
-      "ssh_wait",
-      () => ssh.waitUntilReachable(12e4, 2e3)
+      "guest_wait",
+      () => guest.waitUntilReachable(3e4, 1e3)
     );
-    log(`[Executor] SSH ready on ${guestIp}`);
+    log(`[Executor] Guest client ready`);
     const firewallConfig = context.experimentalFirewall;
     if (firewallConfig?.enabled) {
       const mitmEnabled = firewallConfig.experimental_mitm ?? false;
@@ -9085,29 +9233,29 @@ async function executeJob(context, config, options = {}) {
         sealSecretsEnabled
       });
       if (mitmEnabled) {
-        const caCertPath = path5.join(
+        const caCertPath = path4.join(
           config.proxy.ca_dir,
           "mitmproxy-ca-cert.pem"
         );
-        await installProxyCA(ssh, caCertPath);
+        await installProxyCA(guest, caCertPath);
       }
     }
     log(`[Executor] Configuring DNS...`);
-    await configureDNS(ssh);
+    await configureDNS(guest);
     log(`[Executor] Uploading scripts...`);
-    await withSandboxTiming("script_upload", () => uploadScripts(ssh));
+    await withSandboxTiming("script_upload", () => uploadScripts(guest));
     log(`[Executor] Scripts uploaded to ${SCRIPT_PATHS.baseDir}`);
     if (context.storageManifest) {
       await withSandboxTiming(
         "storage_download",
-        () => downloadStorages(ssh, context.storageManifest)
+        () => downloadStorages(guest, context.storageManifest)
       );
     }
     if (context.resumeSession) {
       await withSandboxTiming(
         "session_restore",
         () => restoreSessionHistory(
-          ssh,
+          guest,
           context.resumeSession,
           context.workingDir,
           context.cliAgentType || "claude-code"
@@ -9119,12 +9267,12 @@ async function executeJob(context, config, options = {}) {
     log(
       `[Executor] Writing env JSON (${envJson.length} bytes) to ${ENV_JSON_PATH}`
     );
-    await ssh.writeFile(ENV_JSON_PATH, envJson);
+    await guest.writeFile(ENV_JSON_PATH, envJson);
     if (!options.benchmarkMode) {
       log(`[Executor] Running preflight connectivity check...`);
       const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
       const preflight = await runPreflightCheck(
-        ssh,
+        guest,
         config.server.url,
         context.runId,
         context.sandboxToken,
@@ -9151,24 +9299,24 @@ async function executeJob(context, config, options = {}) {
     const startTime = Date.now();
     if (options.benchmarkMode) {
       log(`[Executor] Running command directly (benchmark mode)...`);
-      await ssh.exec(
+      await guest.exec(
         `nohup sh -c '${context.prompt}; echo $? > ${exitCodeFile}' > ${systemLogFile} 2>&1 &`
       );
       log(`[Executor] Command started in background`);
     } else {
       log(`[Executor] Running agent via env-loader (background)...`);
-      await ssh.exec(
+      await guest.exec(
         `nohup sh -c 'node ${ENV_LOADER_PATH}; echo $? > ${exitCodeFile}' > ${systemLogFile} 2>&1 &`
       );
       log(`[Executor] Agent started in background`);
     }
     const pollIntervalMs = 2e3;
-    const maxWaitMs = 24 * 60 * 60 * 1e3;
+    const maxWaitMs = 2 * 60 * 60 * 1e3;
     let exitCode = 1;
     let completed = false;
     while (Date.now() - startTime < maxWaitMs) {
       await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
-      const checkResult = await ssh.exec(`cat ${exitCodeFile} 2>/dev/null`);
+      const checkResult = await guest.exec(`cat ${exitCodeFile} 2>/dev/null`);
       if (checkResult.exitCode === 0 && checkResult.stdout.trim()) {
         const parsed = parseInt(checkResult.stdout.trim(), 10);
         exitCode = Number.isNaN(parsed) ? 1 : parsed;
@@ -9176,17 +9324,17 @@ async function executeJob(context, config, options = {}) {
         break;
       }
       if (!options.benchmarkMode) {
-        const processCheck = await ssh.exec(
+        const processCheck = await guest.exec(
           `pgrep -f "env-loader.mjs" > /dev/null 2>&1 && echo "RUNNING" || echo "DEAD"`
         );
         if (processCheck.stdout.trim() === "DEAD") {
           log(
             `[Executor] Agent process died unexpectedly without writing exit code`
           );
-          const logContent = await ssh.exec(
+          const logContent = await guest.exec(
             `tail -50 ${systemLogFile} 2>/dev/null`
           );
-          const dmesgCheck = await ssh.exec(
+          const dmesgCheck = await guest.exec(
             `dmesg | tail -20 | grep -iE "killed|oom" 2>/dev/null`
           );
           let errorMsg = "Agent process terminated unexpectedly";
@@ -9232,7 +9380,9 @@ async function executeJob(context, config, options = {}) {
       success: exitCode === 0
     });
     log(`[Executor] Agent finished in ${duration}s with exit code ${exitCode}`);
-    const logResult = await ssh.exec(`tail -100 ${systemLogFile} 2>/dev/null`);
+    const logResult = await guest.exec(
+      `tail -100 ${systemLogFile} 2>/dev/null`
+    );
     if (logResult.stdout) {
       log(
         `[Executor] Log output (${logResult.stdout.length} chars): ${logResult.stdout.substring(0, 500)}`
@@ -9508,12 +9658,12 @@ var startCommand = new Command("start").description("Start the runner").option("
 
 // src/commands/doctor.ts
 import { Command as Command2 } from "commander";
-import { existsSync as existsSync3, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
+import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync2 } from "fs";
 import { dirname as dirname2, join as join3 } from "path";
 
 // src/lib/firecracker/process.ts
-import { readdirSync, readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
-import path6 from "path";
+import { readdirSync, readFileSync as readFileSync2, existsSync as existsSync3 } from "fs";
+import path5 from "path";
 function parseFirecrackerCmdline(cmdline) {
   const args = cmdline.split("\0");
   if (!args[0]?.includes("firecracker")) return null;
@@ -9546,8 +9696,8 @@ function findFirecrackerProcesses() {
   for (const entry of entries) {
     if (!/^\d+$/.test(entry)) continue;
     const pid = parseInt(entry, 10);
-    const cmdlinePath = path6.join(procDir, entry, "cmdline");
-    if (!existsSync2(cmdlinePath)) continue;
+    const cmdlinePath = path5.join(procDir, entry, "cmdline");
+    if (!existsSync3(cmdlinePath)) continue;
     try {
       const cmdline = readFileSync2(cmdlinePath, "utf-8");
       const parsed = parseFirecrackerCmdline(cmdline);
@@ -9603,8 +9753,8 @@ function findMitmproxyProcess() {
   for (const entry of entries) {
     if (!/^\d+$/.test(entry)) continue;
     const pid = parseInt(entry, 10);
-    const cmdlinePath = path6.join(procDir, entry, "cmdline");
-    if (!existsSync2(cmdlinePath)) continue;
+    const cmdlinePath = path5.join(procDir, entry, "cmdline");
+    if (!existsSync3(cmdlinePath)) continue;
     try {
       const cmdline = readFileSync2(cmdlinePath, "utf-8");
       const parsed = parseMitmproxyCmdline(cmdline);
@@ -9629,7 +9779,7 @@ var doctorCommand = new Command2("doctor").description("Diagnose runner health,
       const workspacesDir = join3(configDir, "workspaces");
       console.log(`Runner: ${config.name}`);
       let status = null;
-      if (existsSync3(statusFilePath)) {
+      if (existsSync4(statusFilePath)) {
         try {
           status = JSON.parse(
             readFileSync3(statusFilePath, "utf-8")
@@ -9693,7 +9843,7 @@ var doctorCommand = new Command2("doctor").description("Diagnose runner health,
       console.log("");
       const processes = findFirecrackerProcesses();
       const tapDevices = await listTapDevices();
-      const workspaces = existsSync3(workspacesDir) ? readdirSync2(workspacesDir).filter((d) => d.startsWith("vm0-")) : [];
+      const workspaces = existsSync4(workspacesDir) ? readdirSync2(workspacesDir).filter((d) => d.startsWith("vm0-")) : [];
       const jobs = [];
       const statusVmIds = /* @__PURE__ */ new Set();
       const allocations = getAllocations();
@@ -9823,7 +9973,7 @@ function formatUptime(ms) {
 
 // src/commands/kill.ts
 import { Command as Command3 } from "commander";
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4, writeFileSync as writeFileSync3, rmSync } from "fs";
 import { dirname as dirname3, join as join4 } from "path";
 import * as readline2 from "readline";
 var killCommand = new Command3("kill").description("Force terminate a run and clean up all resources").argument("<run-id>", "Run ID (full UUID or short 8-char vmId)").option("--config <path>", "Config file path", "./runner.yaml").option("--force", "Skip confirmation prompt").action(
@@ -9888,7 +10038,7 @@ var killCommand = new Command3("kill").description("Force terminate a run and cl
           message: error instanceof Error ? error.message : "Unknown error"
         });
       }
-      if (existsSync4(workspaceDir)) {
+      if (existsSync5(workspaceDir)) {
         try {
           rmSync(workspaceDir, { recursive: true, force: true });
           results.push({
@@ -9910,7 +10060,7 @@ var killCommand = new Command3("kill").description("Force terminate a run and cl
           message: "Not found (already cleaned)"
         });
       }
-      if (runId && existsSync4(statusFilePath)) {
+      if (runId && existsSync5(statusFilePath)) {
         try {
           const status = JSON.parse(
             readFileSync4(statusFilePath, "utf-8")
@@ -9969,7 +10119,7 @@ function resolveRunId(input, statusFilePath) {
     const vmId = input.split("-")[0];
     return { vmId: vmId ?? input, runId: input };
   }
-  if (existsSync4(statusFilePath)) {
+  if (existsSync5(statusFilePath)) {
     try {
       const status = JSON.parse(
         readFileSync4(statusFilePath, "utf-8")
@@ -10000,7 +10150,7 @@ async function confirm(message) {
 
 // src/commands/benchmark.ts
 import { Command as Command4 } from "commander";
-import crypto from "crypto";
+import crypto2 from "crypto";
 
 // src/lib/timing.ts
 var Timer = class {
@@ -10035,7 +10185,7 @@ var Timer = class {
 // src/commands/benchmark.ts
 function createBenchmarkContext(prompt, options) {
   return {
-    runId: crypto.randomUUID(),
+    runId: crypto2.randomUUID(),
     prompt,
     agentComposeVersionId: "benchmark-local",
     vars: null,
@@ -10090,7 +10240,7 @@ var benchmarkCommand = new Command4("benchmark").description(
 });
 
 // src/index.ts
-var version = true ? "2.14.0" : "0.1.0";
+var version = true ? "3.0.0" : "0.1.0";
 program.name("vm0-runner").version(version).description("Self-hosted runner for VM0 agents");
 program.addCommand(startCommand);
 program.addCommand(doctorCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/runner",
-  "version": "2.14.0",
+  "version": "3.0.0",
   "description": "Self-hosted runner for VM0 agents",
   "repository": {
     "type": "git",