eve 0.83.3 → 0.84.1

package/dist/src/execution/runtime-context.js

@@ -1 +1 @@
-import{ConversationContextKey}from"#shared/conversation-context.js";import{ContextContainer,contextStorage}from"#context/container.js";import{AgentSessionRuntimeOverridesKey,AuthKey,CapabilitiesKey,ChannelDeliveryKey,ChannelInstrumentationKey,ChannelRequestIdKey,ContinuationHookTokensKey,ContinuationTokenKey,ConversationIdKey,DynamicSubagentAgentConfigKey,InitiatorAuthKey,LegacyRemoteAgentCallerKey,OccurrenceIdKey,ParentSessionKey,ParentTraceContextKey,ScheduleIdKey,ScheduleInstanceKey,SessionCallbackKey,SessionTitleKey,ToolStubsKey,TraceRootKey}from"#context/keys.js";import{BundleKey}from"#runtime/sessions/runtime-context-keys.js";import{resolveInstrumentationEnvironment}from"#internal/application/dev-environment.js";import{readConversationId}from"#shared/conversation-identity.js";import{setChannelContext}from"#execution/channel-context.js";import{deriveSessionTitle}from"#execution/eve-workflow-attributes.js";import{buildConversationContext}from"#channel/conversation-context.js";function buildRunContext(e){let{bundle:t,run:n}=e,r=new ContextContainer,i=n.auth,a=readConversationId(n.conversationId);if(a!==void 0&&r.set(ConversationIdKey,a),r.set(BundleKey,t),setChannelContext(r,n.adapter,{channelName:n.channelName}),r.set(ConversationContextKey,buildConversationContext(n,resolveInstrumentationEnvironment())),n.parent===void 0||n.traceRoot?.kind===`own`){let e=deriveSessionTitle(n.title??n.input.message);e!==void 0&&r.set(SessionTitleKey,e)}if(n.channelMetadata!==void 0){let e=r.get(ChannelInstrumentationKey);r.set(ChannelInstrumentationKey,{channelType:e?.channelType??n.channelMetadata.channelType,kind:e?.kind??n.channelMetadata.kind,metadata:n.channelMetadata.metadata})}n.continuationToken!==void 0&&(r.set(ContinuationTokenKey,n.continuationToken),r.set(ContinuationHookTokensKey,[n.continuationToken]));let o=n.schedule?.occurrenceId??contextStorage.getStore()?.get(OccurrenceIdKey);o!==void 0&&r.set(OccurrenceIdKey,o),r.set(AuthKey,i),n.toolStubs!==void 0&&r.set(ToolStubsKey,n.toolStubs),(n.initiatorAuth!==void 0||n.input.message!==void 0)&&r.set(InitiatorAuthKey,n.initiatorAuth??i),e.dynamicSubagentAgentConfig!==void 0&&r.set(DynamicSubagentAgentConfigKey,e.dynamicSubagentAgentConfig),e.agentSessionRuntimeOverrides!==void 0&&r.set(AgentSessionRuntimeOverridesKey,e.agentSessionRuntimeOverrides),n.capabilities!==void 0&&r.set(CapabilitiesKey,n.capabilities),n.requestId!==void 0&&r.set(ChannelRequestIdKey,n.requestId);let s=n.schedule?.instance??contextStorage.getStore()?.get(ScheduleInstanceKey);s!==void 0&&r.set(ScheduleInstanceKey,s);let c=n.schedule?.definition??contextStorage.getStore()?.get(ScheduleIdKey);return c!==void 0&&r.set(ScheduleIdKey,c),n.delivery!==void 0&&r.set(ChannelDeliveryKey,n.delivery),n.callback!==void 0&&r.set(SessionCallbackKey,n.callback),n.legacyRemoteAgentCaller!==void 0&&r.set(LegacyRemoteAgentCallerKey,n.legacyRemoteAgentCaller),n.parent!==void 0&&r.set(ParentSessionKey,n.parent),n.traceRoot!==void 0&&r.set(TraceRootKey,n.traceRoot),n.parentTraceContext!==void 0&&r.set(ParentTraceContextKey,n.parentTraceContext),r}export{buildRunContext};
+import{resolveInstrumentationEnvironment}from"#internal/application/dev-environment.js";import{ConversationContextKey}from"#shared/conversation-context.js";import{ContextContainer,contextStorage}from"#context/container.js";import{AgentSessionRuntimeOverridesKey,AuthKey,CapabilitiesKey,ChannelDeliveryKey,ChannelInstrumentationKey,ChannelRequestIdKey,ContinuationHookTokensKey,ContinuationTokenKey,ConversationIdKey,DynamicSubagentAgentConfigKey,EarlierRemoteCallerKey,InitiatorAuthKey,OccurrenceIdKey,ParentSessionKey,ParentTraceContextKey,ScheduleIdKey,ScheduleInstanceKey,SessionCallbackKey,SessionTitleKey,ToolStubsKey,TraceRootKey}from"#context/keys.js";import{BundleKey}from"#runtime/sessions/runtime-context-keys.js";import{readConversationId}from"#shared/conversation-identity.js";import{setChannelContext}from"#execution/channel-context.js";import{deriveSessionTitle}from"#execution/eve-workflow-attributes.js";import{buildConversationContext}from"#channel/conversation-context.js";function buildRunContext(e){let{bundle:t,run:n}=e,r=new ContextContainer,i=n.auth,a=readConversationId(n.conversationId);if(a!==void 0&&r.set(ConversationIdKey,a),r.set(BundleKey,t),setChannelContext(r,n.adapter,{channelName:n.channelName}),r.set(ConversationContextKey,buildConversationContext(n,resolveInstrumentationEnvironment())),n.parent===void 0||n.traceRoot?.kind===`own`){let e=deriveSessionTitle(n.title??n.input.message);e!==void 0&&r.set(SessionTitleKey,e)}if(n.channelMetadata!==void 0){let e=r.get(ChannelInstrumentationKey);r.set(ChannelInstrumentationKey,{channelType:e?.channelType??n.channelMetadata.channelType,kind:e?.kind??n.channelMetadata.kind,metadata:n.channelMetadata.metadata})}n.continuationToken!==void 0&&(r.set(ContinuationTokenKey,n.continuationToken),r.set(ContinuationHookTokensKey,[n.continuationToken]));let o=n.schedule?.occurrenceId??contextStorage.getStore()?.get(OccurrenceIdKey);o!==void 0&&r.set(OccurrenceIdKey,o),r.set(AuthKey,i),n.toolStubs!==void 0&&r.set(ToolStubsKey,n.toolStubs),(n.initiatorAuth!==void 0||n.input.message!==void 0)&&r.set(InitiatorAuthKey,n.initiatorAuth??i),e.dynamicSubagentAgentConfig!==void 0&&r.set(DynamicSubagentAgentConfigKey,e.dynamicSubagentAgentConfig),e.agentSessionRuntimeOverrides!==void 0&&r.set(AgentSessionRuntimeOverridesKey,e.agentSessionRuntimeOverrides),n.capabilities!==void 0&&r.set(CapabilitiesKey,n.capabilities),n.requestId!==void 0&&r.set(ChannelRequestIdKey,n.requestId);let s=n.schedule?.instance??contextStorage.getStore()?.get(ScheduleInstanceKey);s!==void 0&&r.set(ScheduleInstanceKey,s);let c=n.schedule?.definition??contextStorage.getStore()?.get(ScheduleIdKey);return c!==void 0&&r.set(ScheduleIdKey,c),n.delivery!==void 0&&r.set(ChannelDeliveryKey,n.delivery),n.callback!==void 0&&r.set(SessionCallbackKey,n.callback),n.callback!==void 0&&n.earlierCallerProtocol!==void 0&&r.set(EarlierRemoteCallerKey,n.earlierCallerProtocol),n.parent!==void 0&&r.set(ParentSessionKey,n.parent),n.traceRoot!==void 0&&r.set(TraceRootKey,n.traceRoot),n.parentTraceContext!==void 0&&r.set(ParentTraceContextKey,n.parentTraceContext),r}export{buildRunContext};

package/dist/src/execution/sandbox/abort-bound-session.js

@@ -1 +1 @@
-function bindSandboxAbortSignal(e,t){let compose=e=>AbortSignal.any(e===void 0?[t]:[t,e]);return{...e,run:t=>e.run({...t,abortSignal:compose(t.abortSignal)}),spawn:t=>e.spawn({...t,abortSignal:compose(t.abortSignal)}),readFile:t=>e.readFile({...t,abortSignal:compose(t.abortSignal)}),readBinaryFile:t=>e.readBinaryFile({...t,abortSignal:compose(t.abortSignal)}),readTextFile:t=>e.readTextFile({...t,abortSignal:compose(t.abortSignal)}),writeFile:t=>e.writeFile({...t,abortSignal:compose(t.abortSignal)}),writeBinaryFile:t=>e.writeBinaryFile({...t,abortSignal:compose(t.abortSignal)}),writeTextFile:t=>e.writeTextFile({...t,abortSignal:compose(t.abortSignal)}),writeFiles:t=>e.writeFiles({...t,abortSignal:compose(t.abortSignal)}),removePath:t=>e.removePath({...t,abortSignal:compose(t.abortSignal)})}}export{bindSandboxAbortSignal};
+function bindSandboxAbortSignal(e,t){let compose=e=>AbortSignal.any(e===void 0?[t]:[t,e]);return{...e,run:t=>e.run({...t,signal:compose(t.signal)}),spawn:t=>e.spawn({...t,signal:compose(t.signal)}),readFile:t=>e.readFile({...t,signal:compose(t.signal)}),readBinaryFile:t=>e.readBinaryFile({...t,signal:compose(t.signal)}),readTextFile:t=>e.readTextFile({...t,signal:compose(t.signal)}),writeFile:t=>e.writeFile({...t,signal:compose(t.signal)}),writeBinaryFile:t=>e.writeBinaryFile({...t,signal:compose(t.signal)}),writeTextFile:t=>e.writeTextFile({...t,signal:compose(t.signal)}),writeFiles:t=>e.writeFiles({...t,signal:compose(t.signal)}),removePath:t=>e.removePath({...t,signal:compose(t.signal)})}}export{bindSandboxAbortSignal};

package/dist/src/execution/sandbox/bash.js

@@ -1,4 +1,4 @@
-import{randomUUID}from"node:crypto";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{shellQuote}from"#execution/sandbox/shell-quote.js";import{streamToBuffer}from"#execution/sandbox/stream-utils.js";import{MAX_OUTPUT_BYTES,truncateTail}from"#execution/sandbox/truncate-output.js";const BASH_YIELD_SECONDS=30;async function executeBashOnSandbox(e,t,n={}){let r=formatCommand(t.command);logDevelopmentSandboxCommand(`eve: starting sandbox command: ${r}`);let i=await withDevelopmentSandboxProgress(r,()=>runCommand(e,t.command,n.abortSignal));return logDevelopmentSandboxCommand(i.status===`running`?`eve: sandbox command still running as pid ${i.pid}: ${r}`:`eve: sandbox command finished (exit ${i.exitCode}): ${r}`),i}async function runCommand(e,t,n){n?.throwIfAborted();let r=randomUUID().slice(0,8),i=`/tmp/.eve/jobs/${r}`,a=new AbortController,cancel=()=>{a.abort(n?.reason),Promise.resolve(e.run({command:`kill -TERM -- -"$(cat ${shellQuote(i)}/pid 2>/dev/null)" 2>/dev/null; rm -rf ${shellQuote(i)}`})).catch(()=>{})};n?.addEventListener(`abort`,cancel,{once:!0});try{let n=await e.spawn({abortSignal:a.signal,command:launchCommand(t,i)}),o=Promise.all([readText(n.stdout),readText(n.stderr),n.wait()]).then(([e,t,{exitCode:n}])=>({exitCode:n,stderr:t,stdout:e})),s=await waitUpTo(o,3e4);if(s!==void 0)return completed(s.exitCode,s);let c=await claimRunningJob(e,i,r);if(c===void 0){let e=await o;return completed(e.exitCode,e)}return o.catch(()=>{}),c}finally{n?.removeEventListener(`abort`,cancel)}}function launchCommand(e,t){return[`if command -v bash >/dev/null 2>&1 && kill -0 "$$" 2>/dev/null; then`,`  set -- ${shellQuote(t)} ${shellQuote(e)}`,`  eval ${shellQuote(`d=$1
+import{randomUUID}from"node:crypto";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{shellQuote}from"#execution/sandbox/shell-quote.js";import{streamToBuffer}from"#execution/sandbox/stream-utils.js";import{MAX_OUTPUT_BYTES,truncateTail}from"#execution/sandbox/truncate-output.js";const BASH_YIELD_SECONDS=30;async function executeBashOnSandbox(e,t,n={}){let r=formatCommand(t.command);logDevelopmentSandboxCommand(`eve: starting sandbox command: ${r}`);let i=await withDevelopmentSandboxProgress(r,()=>runCommand(e,t.command,n.abortSignal));return logDevelopmentSandboxCommand(i.status===`running`?`eve: sandbox command still running as pid ${i.pid}: ${r}`:`eve: sandbox command finished (exit ${i.exitCode}): ${r}`),i}async function runCommand(e,t,n){n?.throwIfAborted();let r=randomUUID().slice(0,8),i=`/tmp/.eve/jobs/${r}`,a=new AbortController,cancel=()=>{a.abort(n?.reason),Promise.resolve(e.run({command:`kill -TERM -- -"$(cat ${shellQuote(i)}/pid 2>/dev/null)" 2>/dev/null; rm -rf ${shellQuote(i)}`})).catch(()=>{})};n?.addEventListener(`abort`,cancel,{once:!0});try{let n=await e.spawn({signal:a.signal,command:launchCommand(t,i)}),o=Promise.all([readText(n.stdout),readText(n.stderr),n.wait()]).then(([e,t,{exitCode:n}])=>({exitCode:n,stderr:t,stdout:e})),s=await waitUpTo(o,3e4);if(s!==void 0)return completed(s.exitCode,s);let c=await claimRunningJob(e,i,r);if(c===void 0){let e=await o;return completed(e.exitCode,e)}return o.catch(()=>{}),c}finally{n?.removeEventListener(`abort`,cancel)}}function launchCommand(e,t){return[`if command -v bash >/dev/null 2>&1 && kill -0 "$$" 2>/dev/null; then`,`  set -- ${shellQuote(t)} ${shellQuote(e)}`,`  eval ${shellQuote(`d=$1
 mkdir -p "$d" 2>/dev/null || { eval "$2"; exit; }
 trap 'exit 0' USR1
 echo "$$" > "$d/launcher"

package/dist/src/execution/sandbox/bindings/docker-cli.d.ts

@@ -24,6 +24,7 @@ export interface DockerRunOptions {
  * shape so the sandbox engine can adapt it directly.
  */
 export interface DockerProcess {
+    readonly stdin?: WritableStream<Uint8Array>;
     readonly stdout: ReadableStream<Uint8Array>;
     readonly stderr: ReadableStream<Uint8Array>;
     wait(): Promise<{
@@ -42,6 +43,7 @@ export interface DockerCli {
     /** Spawns `docker <args>` with streaming stdout/stderr. */
     stream(args: readonly string[], options?: {
         readonly signal?: AbortSignal;
+        readonly stdin?: boolean;
     }): DockerProcess;
 }
 /**

package/dist/src/execution/sandbox/bindings/docker-cli.js

@@ -1,2 +1,2 @@
-import{Readable}from"node:stream";import{spawn,spawnSync}from"node:child_process";var DockerUnavailableError=class extends Error{hint="Install and start Docker Desktop, OrbStack, Colima, or another runtime exposing a Docker-compatible `docker` CLI (or point EVE_DOCKER_PATH at one, e.g. Podman). Alternatively use the dependency-free JustBashSandbox, VercelSandbox, or DefaultSandbox to pick by availability.";constructor(e){super("The Docker sandbox provider requires Docker, but the `docker` CLI was not found.",{cause:e}),this.name=`DockerUnavailableError`}},DockerDaemonUnavailableError=class extends Error{hint="Start Docker Desktop (or your Docker-compatible runtime) and retry. Alternatively use the dependency-free JustBashSandbox (installed automatically by `eve dev`, or `pnpm add -D just-bash`), VercelSandbox, or DefaultSandbox to pick by availability.";constructor(e){super(`The Docker sandbox provider requires a running Docker daemon, but it is not reachable. Docker reported: ${e}`),this.name=`DockerDaemonUnavailableError`}};async function assertDockerDaemonAvailable(e){let t=await e.run([`version`,`--format`,`{{.Server.Version}}`]);if(t.exitCode!==0)throw new DockerDaemonUnavailableError(firstLine(t.stderr)||`exit ${t.exitCode}`)}function resolveDockerExecutable(){let e=process.env.EVE_DOCKER_PATH?.trim();return e!==void 0&&e.length>0?e:`docker`}let cachedLinuxDockerAvailability;const LINUX_DOCKER_AVAILABILITY_ENV=`EVE_DEVELOPMENT_LINUX_DOCKER_AVAILABLE`;function isLinuxDockerDaemonAvailableSync(){return cachedLinuxDockerAvailability??=readAdoptedAvailability()??probeLinuxDockerDaemonSync(),cachedLinuxDockerAvailability}function peekLinuxDockerDaemonAvailability(){return cachedLinuxDockerAvailability}function readAdoptedAvailability(){let e=process.env[LINUX_DOCKER_AVAILABILITY_ENV];return e===`1`||e!==`0`&&void 0}function probeLinuxDockerDaemonSync(){try{let e=spawnSync(resolveDockerExecutable(),[`version`,`--format`,`{{.Server.Os}}`],{encoding:`utf8`,stdio:[`ignore`,`pipe`,`ignore`],timeout:5e3});return e.status===0&&e.stdout.trim().toLowerCase()===`linux`}catch{return!1}}function createDockerCli(){return{async run(e,t={}){throwIfAborted(t.signal);let n=spawn(resolveDockerExecutable(),e,{signal:t.signal,stdio:[t.stdin===void 0?`ignore`:`pipe`,`pipe`,`pipe`]}),r=[],i=[];n.stdout?.on(`data`,e=>r.push(e)),n.stderr?.on(`data`,e=>i.push(e)),t.stdin!==void 0&&n.stdin?.end(t.stdin);let a=await new Promise((e,t)=>{n.on(`error`,e=>t(adaptSpawnError(e))),n.on(`close`,t=>e(t??1))}),o=Buffer.concat(r);return{exitCode:a,stderr:Buffer.concat(i).toString(`utf8`),stdout:o.toString(`utf8`),stdoutBytes:o}},stream(e,t={}){throwIfAborted(t.signal);let n=spawn(resolveDockerExecutable(),e,{signal:t.signal,stdio:[`ignore`,`pipe`,`pipe`]}),r=new Promise((e,t)=>{n.on(`error`,e=>t(adaptSpawnError(e))),n.on(`close`,t=>e(t??1))});return r.catch(()=>{}),{stdout:Readable.toWeb(n.stdout),stderr:Readable.toWeb(n.stderr),async wait(){return{exitCode:await r}},async kill(){n.kill(`SIGKILL`),await r.catch(()=>{})}}}}}function adaptSpawnError(e){return e.code===`ENOENT`?new DockerUnavailableError(e):e.code===`ABORT_ERR`?new DOMException(`The operation was aborted.`,`AbortError`):e}function throwIfAborted(e){if(e?.aborted)throw new DOMException(`The operation was aborted.`,`AbortError`)}function firstLine(e){return e.split(`
+import{Readable,Writable}from"node:stream";import{spawn,spawnSync}from"node:child_process";var DockerUnavailableError=class extends Error{hint="Install and start Docker Desktop, OrbStack, Colima, or another runtime exposing a Docker-compatible `docker` CLI (or point EVE_DOCKER_PATH at one, e.g. Podman). Alternatively use the dependency-free JustBashSandbox, VercelSandbox, or DefaultSandbox to pick by availability.";constructor(e){super("The Docker sandbox provider requires Docker, but the `docker` CLI was not found.",{cause:e}),this.name=`DockerUnavailableError`}},DockerDaemonUnavailableError=class extends Error{hint="Start Docker Desktop (or your Docker-compatible runtime) and retry. Alternatively use the dependency-free JustBashSandbox (installed automatically by `eve dev`, or `pnpm add -D just-bash`), VercelSandbox, or DefaultSandbox to pick by availability.";constructor(e){super(`The Docker sandbox provider requires a running Docker daemon, but it is not reachable. Docker reported: ${e}`),this.name=`DockerDaemonUnavailableError`}};async function assertDockerDaemonAvailable(e){let t=await e.run([`version`,`--format`,`{{.Server.Version}}`]);if(t.exitCode!==0)throw new DockerDaemonUnavailableError(firstLine(t.stderr)||`exit ${t.exitCode}`)}function resolveDockerExecutable(){let e=process.env.EVE_DOCKER_PATH?.trim();return e!==void 0&&e.length>0?e:`docker`}let cachedLinuxDockerAvailability;const LINUX_DOCKER_AVAILABILITY_ENV=`EVE_DEVELOPMENT_LINUX_DOCKER_AVAILABLE`;function isLinuxDockerDaemonAvailableSync(){return cachedLinuxDockerAvailability??=readAdoptedAvailability()??probeLinuxDockerDaemonSync(),cachedLinuxDockerAvailability}function peekLinuxDockerDaemonAvailability(){return cachedLinuxDockerAvailability}function readAdoptedAvailability(){let e=process.env[LINUX_DOCKER_AVAILABILITY_ENV];return e===`1`||e!==`0`&&void 0}function probeLinuxDockerDaemonSync(){try{let e=spawnSync(resolveDockerExecutable(),[`version`,`--format`,`{{.Server.Os}}`],{encoding:`utf8`,stdio:[`ignore`,`pipe`,`ignore`],timeout:5e3,windowsHide:!0});return e.status===0&&e.stdout.trim().toLowerCase()===`linux`}catch{return!1}}function createDockerCli(){return{async run(e,t={}){throwIfAborted(t.signal);let n=spawn(resolveDockerExecutable(),e,{signal:t.signal,stdio:[t.stdin===void 0?`ignore`:`pipe`,`pipe`,`pipe`],windowsHide:!0}),r=[],i=[];n.stdout?.on(`data`,e=>r.push(e)),n.stderr?.on(`data`,e=>i.push(e)),t.stdin!==void 0&&n.stdin?.end(t.stdin);let a=await new Promise((e,t)=>{n.on(`error`,e=>t(adaptSpawnError(e))),n.on(`close`,t=>e(t??1))}),o=Buffer.concat(r);return{exitCode:a,stderr:Buffer.concat(i).toString(`utf8`),stdout:o.toString(`utf8`),stdoutBytes:o}},stream(e,t={}){throwIfAborted(t.signal);let n=spawn(resolveDockerExecutable(),e,{signal:t.signal,stdio:[`pipe`,`pipe`,`pipe`],windowsHide:!0});t.stdin!==!0&&n.stdin.end();let r=new Promise((e,t)=>{n.on(`error`,e=>t(adaptSpawnError(e))),n.on(`close`,t=>e(t??1))});return r.catch(()=>{}),{stdin:t.stdin===!0?Writable.toWeb(n.stdin):void 0,stdout:Readable.toWeb(n.stdout),stderr:Readable.toWeb(n.stderr),async wait(){return{exitCode:await r}},async kill(){n.kill(`SIGKILL`),await r.catch(()=>{})}}}}}function adaptSpawnError(e){return e.code===`ENOENT`?new DockerUnavailableError(e):e.code===`ABORT_ERR`?new DOMException(`The operation was aborted.`,`AbortError`):e}function throwIfAborted(e){if(e?.aborted)throw new DOMException(`The operation was aborted.`,`AbortError`)}function firstLine(e){return e.split(`
 `,1)[0]?.trim()??``}export{DockerDaemonUnavailableError,DockerUnavailableError,LINUX_DOCKER_AVAILABILITY_ENV,assertDockerDaemonAvailable,createDockerCli,isLinuxDockerDaemonAvailableSync,peekLinuxDockerDaemonAvailability};

package/dist/src/execution/sandbox/bindings/docker-connection.js

@@ -1,2 +1,2 @@
 import{randomUUID}from"node:crypto";import{shellQuote}from"#execution/sandbox/shell-quote.js";import{dirname}from"node:path/posix";import{stopDockerContainerIfRunning}from"#execution/sandbox/bindings/docker-container.js";import{setDockerNetworkPolicy}from"#execution/sandbox/bindings/docker-network.js";import{expectDockerSuccess}from"#execution/sandbox/bindings/docker-utils.js";const DOCKER_KILL_TREE_SCRIPT=[`pid_file="$1"`,`target="$(cat "$pid_file" 2>/dev/null)" || exit 0`,`[ -n "$target" ] || exit 0`,`kill_tree() {`,`  local parent="$1" dir child ppid line`,`  for dir in /proc/[0-9]*; do`,'    child="${dir#/proc/}"',`    ppid=""`,`    while IFS= read -r line; do`,`      case "$line" in`,'        PPid:*) ppid="${line#PPid:}"; ppid="${ppid//[^0-9]/}"; break ;;',`      esac`,`    done < "$dir/status" 2>/dev/null`,`    [ "$ppid" = "$parent" ] && kill_tree "$child"`,`  done`,`  kill -9 "$parent" 2>/dev/null`,`}`,`kill_tree "$target"`,`rm -f "$pid_file"`,`exit 0`].join(`
-`);function createDockerConnection(e){let{cli:t,containerIdentity:n}=e;async function killSpawnTree(e){await t.run([`exec`,n,`bash`,`-c`,DOCKER_KILL_TREE_SCRIPT,`eve-kill-tree`,e]).catch(()=>{})}return{extensions:{setNetworkPolicy:e=>setDockerNetworkPolicy(t,n,e)},async spawn(e){let r=[`exec`,`-w`,e.workingDirectory];for(let[t,n]of Object.entries(e.env))r.push(`-e`,`${t}=${n}`);let i=`/tmp/.eve-sbx-spawn-${randomUUID()}.pid`,a=`echo "$$" > ${shellQuote(i)}; bash -lc ${shellQuote(e.command)}; status=$?; rm -f ${shellQuote(i)}; exit $status`;r.push(n,`bash`,`-c`,a);let o=t.stream(r,{signal:e.abortSignal});return e.abortSignal?.addEventListener(`abort`,()=>void killSpawnTree(i),{once:!0}),{stdout:o.stdout,stderr:o.stderr,async wait(){return await o.wait()},async kill(){await killSpawnTree(i),await o.kill()}}},async readFile(e){let r=shellQuote(e.path),i=await t.run([`exec`,n,`bash`,`-lc`,`if [ -e ${r} ]; then exec cat ${r}; else exit 43; fi`],{signal:e.abortSignal});return i.exitCode===43?null:(expectDockerSuccess(i,`read "${e.path}" from sandbox container`),i.stdoutBytes)},async removePath(e){let r=`${e.recursive===!0?`r`:``}${e.force===!0?`f`:``}`,i=[`exec`,n,`rm`,...r.length>0?[`-${r}`]:[],`--`,e.path],a=await t.run(i,{signal:e.abortSignal});expectDockerSuccess(a,`remove "${e.path}" from sandbox container`)},stop:()=>stopDockerContainerIfRunning(t,n),async writeFiles(e){for(let r of e.files){let i=await t.run([`exec`,`-i`,n,`bash`,`-lc`,`mkdir -p ${shellQuote(dirname(r.path))} && cat > ${shellQuote(r.path)}`],{signal:e.abortSignal,stdin:r.content});expectDockerSuccess(i,`write "${r.path}" into sandbox container`)}}}}export{createDockerConnection};
+`);function createDockerConnection(e){let{cli:t,containerIdentity:n}=e;async function killSpawnTree(e){await t.run([`exec`,n,`bash`,`-c`,DOCKER_KILL_TREE_SCRIPT,`eve-kill-tree`,e]).catch(()=>{})}return{extensions:{setNetworkPolicy:e=>setDockerNetworkPolicy(t,n,e)},async spawn(e){let r=[`exec`,...e.stdin===!0?[`-i`]:[],`-w`,e.workingDirectory];for(let[t,n]of Object.entries(e.env))r.push(`-e`,`${t}=${n}`);let i=`/tmp/.eve-sbx-spawn-${randomUUID()}.pid`,a=`echo "$$" > ${shellQuote(i)}; bash -lc ${shellQuote(e.command)}; status=$?; rm -f ${shellQuote(i)}; exit $status`;r.push(n,`bash`,`-c`,a);let o=t.stream(r,{signal:e.signal,stdin:e.stdin});return e.signal?.addEventListener(`abort`,()=>void killSpawnTree(i),{once:!0}),{stdin:o.stdin,stdout:o.stdout,stderr:o.stderr,async wait(){return await o.wait()},async kill(){await killSpawnTree(i),await o.kill()}}},async readFile(e){let r=shellQuote(e.path),i=await t.run([`exec`,n,`bash`,`-lc`,`if [ -e ${r} ]; then exec cat ${r}; else exit 43; fi`],{signal:e.signal});return i.exitCode===43?null:(expectDockerSuccess(i,`read "${e.path}" from sandbox container`),i.stdoutBytes)},async removePath(e){let r=`${e.recursive===!0?`r`:``}${e.force===!0?`f`:``}`,i=[`exec`,n,`rm`,...r.length>0?[`-${r}`]:[],`--`,e.path],a=await t.run(i,{signal:e.signal});expectDockerSuccess(a,`remove "${e.path}" from sandbox container`)},stop:()=>stopDockerContainerIfRunning(t,n),async writeFiles(e){for(let r of e.files){let i=await t.run([`exec`,`-i`,n,`bash`,`-lc`,`mkdir -p ${shellQuote(dirname(r.path))} && cat > ${shellQuote(r.path)}`],{signal:e.signal,stdin:r.content});expectDockerSuccess(i,`write "${r.path}" into sandbox container`)}}}}export{createDockerConnection};

package/dist/src/execution/sandbox/bindings/docker.js

@@ -1 +1 @@
-import{randomUUID}from"node:crypto";import{isObject}from"#shared/guards.js";import{toErrorMessage}from"#shared/errors.js";import{DOCKER_RESOURCES_MOUNT_PATH,runDockerBaseSetup,startDockerContainer}from"#execution/sandbox/bindings/docker-container.js";import{assertDockerNetworkPolicy}from"#execution/sandbox/bindings/docker-network.js";import{expectDockerSuccess}from"#execution/sandbox/bindings/docker-utils.js";import{SandboxSessionGoneError,SandboxTemplateNotProvisionedError}from"#public/sandbox/provider.js";import{assertDockerDaemonAvailable,createDockerCli}from"#execution/sandbox/bindings/docker-cli.js";import{createDockerConnection}from"#execution/sandbox/bindings/docker-connection.js";import{createDockerSandboxOptionsHash,resolveDockerSandboxOptions}from"#execution/sandbox/bindings/docker-options.js";import{DOCKER_TEMPLATE_IMAGE_REPOSITORY,commitDockerTemplateImage,dockerImageExists,dockerTemplateImageReference,ensureDockerBaseImage,pruneDockerSandboxTemplates,resolveDockerTemplateMarkerPath,touchDockerTemplateMarker}from"#execution/sandbox/bindings/docker-templates.js";import{buildSandboxDockerfile,dockerfileImageReference,materializeSandboxDockerfile}from"#execution/sandbox/dockerfile.js";import{createSandboxProviderIdentity}from"#execution/sandbox/provider-identity.js";import{invalidPreparedSandboxArtifactError,invalidSandboxSessionStateError}from"#shared/sandbox-recorded-data-error.js";const DOCKER_PROVIDER_NAME=`docker`;function createDockerSandboxProvider(e,t){let n=t??createDockerCli(),r=resolveDockerSandboxOptions(e),i=createDockerSandboxOptionsHash(r),a;function ensureDaemon(){return a??=assertDockerDaemonAvailable(n).catch(e=>{throw a=void 0,e}),a}async function inspectContainerRunning(e){let t=await n.run([`container`,`inspect`,`--format`,`{{.State.Running}}`,e]);if(t.exitCode===0)return t.stdout.trim()===`true`;/no such (?:container|object)/iu.test(t.stderr)||(a=void 0,expectDockerSuccess(t,`inspect sandbox session container "${e}"`))}async function openDockerSession(e,t,i,a,o){await ensureDaemon();let s=await inspectContainerRunning(a);if(s===void 0){if(!o)throw new SandboxSessionGoneError(`Docker sandbox session container "${a}" no longer exists.`);let c=requirePreparedDockerArtifact(i);if(!await dockerImageExists(n,c.imageReference))throw new SandboxTemplateNotProvisionedError({providerName:DOCKER_PROVIDER_NAME,reason:"The Docker daemon has no image with that name: it was removed, for example by `docker image prune -a`, or the build used another Docker daemon.",templateKey:c.imageReference});try{await startDockerContainer({cli:n,containerName:a,image:c.imageReference,initialNetworkPolicy:t?.networkPolicy??`allow-all`,options:r,role:`session`,tags:{agent:e.session.id,sessionId:e.session.id}}),s=!0}catch(e){if(s=/is already in use/u.test(toErrorMessage(e))?await inspectContainerRunning(a):void 0,s===void 0)throw e}}return s||expectDockerSuccess(await n.run([`start`,a]),`restart sandbox session container "${a}"`),createDockerConnection({cli:n,containerIdentity:await resolveDockerHandleIdentity(n,a)})}return{async onSessionEnd(e,t,{abortSignal:r}){await ensureDaemon();let i=t?.containerName??dockerSessionName(e),a=await n.run([`rm`,`-f`,i],{signal:r});a.exitCode!==0&&!/no such container/iu.test(a.stderr)&&expectDockerSuccess(a,`delete sandbox session container "${i}"`)},async prepare(e){e.log(`checking Docker daemon`),await ensureDaemon();let t=await materializeSandboxDockerfile({files:e.files,storagePath:e.storagePath}),a=e.templateKey({dockerfile:t?.contentHash,optionsHash:i,version:2}).slice(0,24),o={optionsHash:i,templateKey:a},s=dockerTemplateImageReference(o),c=resolveDockerTemplateMarkerPath(e.storagePath,o);if(e.log(`checking cached template image "${s}"`),await dockerImageExists(n,s))return e.log(`reusing cached template image`),await touchDockerTemplateMarker(c,s),{imageReference:s};let l=await e.resourcesDirectory(),u=r.image;t===void 0?(e.log(`checking base image "${r.image}"`),await ensureDockerBaseImage(n,r)):(u=dockerfileImageReference({dockerfile:t,templateKey:a}),e.log(`building sandbox Dockerfile "${t.path}"`),await buildSandboxDockerfile({cli:n,dockerfile:t,imageReference:u}));let d=`${a}-build-${randomUUID().slice(0,8)}`;e.log(`starting template build container`),await startDockerContainer({cli:n,containerName:d,image:u,initialNetworkPolicy:`allow-all`,options:r,resourcesPath:l,role:`template-build`});try{let t=await resolveDockerHandleIdentity(n,d);e.log(`preparing base runtime inside container`),await runDockerBaseSetup(n,t),await e.populate(createDockerConnection({cli:n,containerIdentity:t}),l===void 0?void 0:{mountedAt:DOCKER_RESOURCES_MOUNT_PATH}),e.log(`stopping template build container`),expectDockerSuccess(await n.run([`stop`,`-t`,`0`,t]),`stop template build container "${d}"`),e.log(`committing template image "${s}"`),await commitDockerTemplateImage({cli:n,containerIdentity:t,imageReference:s,templateKey:a})===`reused`&&e.log(`reusing concurrently published template image`),await touchDockerTemplateMarker(c,s)}finally{await n.run([`rm`,`-f`,d]).catch(()=>{}),t!==void 0&&await n.run([`rmi`,u]).catch(()=>{})}return{imageReference:s}},async resume(e,t,n){return await openDockerSession(e,void 0,t,requireDockerSessionState(n).containerName,!1)},async start(e,t,n){t?.networkPolicy!==void 0&&assertDockerNetworkPolicy(t.networkPolicy);let r=dockerSessionName(e);return{connection:await openDockerSession(e,t,n,r,!0),state:{containerName:r,version:2}}}}}function dockerSessionName(e){return`eve-sbx-${createSandboxProviderIdentity({namespace:e.storagePath,sessionId:e.session.id,version:2}).slice(0,32)}`}function requirePreparedDockerArtifact(e){if(!isObject(e)||typeof e.imageReference!=`string`)throw invalidPreparedSandboxArtifactError(`Docker sandbox`);return{imageReference:e.imageReference}}function requireDockerSessionState(e){if(!isObject(e)||e.version!==2||typeof e.containerName!=`string`)throw invalidSandboxSessionStateError(`Docker sandbox`);return{containerName:e.containerName,version:2}}async function resolveDockerHandleIdentity(e,t){let n=await e.run([`container`,`inspect`,`--format`,`{{.Id}}`,t]);expectDockerSuccess(n,`resolve sandbox container identity for "${t}"`);let r=n.stdout.trim();if(r.length===0)throw Error(`Docker returned an empty identity for sandbox container "${t}".`);return r}export{DOCKER_PROVIDER_NAME,DOCKER_TEMPLATE_IMAGE_REPOSITORY,createDockerSandboxProvider,pruneDockerSandboxTemplates};
+import{randomUUID}from"node:crypto";import{isObject}from"#shared/guards.js";import{toErrorMessage}from"#shared/errors.js";import{DOCKER_RESOURCES_MOUNT_PATH,runDockerBaseSetup,startDockerContainer}from"#execution/sandbox/bindings/docker-container.js";import{assertDockerNetworkPolicy}from"#execution/sandbox/bindings/docker-network.js";import{expectDockerSuccess}from"#execution/sandbox/bindings/docker-utils.js";import{SandboxSessionGoneError,SandboxTemplateNotProvisionedError}from"#public/sandbox/provider.js";import{assertDockerDaemonAvailable,createDockerCli}from"#execution/sandbox/bindings/docker-cli.js";import{createDockerConnection}from"#execution/sandbox/bindings/docker-connection.js";import{createDockerSandboxOptionsHash,resolveDockerSandboxOptions}from"#execution/sandbox/bindings/docker-options.js";import{DOCKER_TEMPLATE_IMAGE_REPOSITORY,commitDockerTemplateImage,dockerImageExists,dockerTemplateImageReference,ensureDockerBaseImage,pruneDockerSandboxTemplates,resolveDockerTemplateMarkerPath,touchDockerTemplateMarker}from"#execution/sandbox/bindings/docker-templates.js";import{buildSandboxDockerfile,dockerfileImageReference,materializeSandboxDockerfile}from"#execution/sandbox/dockerfile.js";import{createSandboxProviderIdentity}from"#execution/sandbox/provider-identity.js";import{invalidPreparedSandboxArtifactError,invalidSandboxSessionStateError}from"#shared/sandbox-recorded-data-error.js";const DOCKER_PROVIDER_NAME=`docker`;function createDockerSandboxProvider(e,t){let n=t??createDockerCli(),r=resolveDockerSandboxOptions(e),i=createDockerSandboxOptionsHash(r),a;function ensureDaemon(){return a??=assertDockerDaemonAvailable(n).catch(e=>{throw a=void 0,e}),a}async function inspectContainerRunning(e){let t=await n.run([`container`,`inspect`,`--format`,`{{.State.Running}}`,e]);if(t.exitCode===0)return t.stdout.trim()===`true`;/no such (?:container|object)/iu.test(t.stderr)||(a=void 0,expectDockerSuccess(t,`inspect sandbox session container "${e}"`))}async function openDockerSession(e,t,i,a,o){await ensureDaemon();let s=await inspectContainerRunning(a);if(s===void 0){if(!o)throw new SandboxSessionGoneError(`Docker sandbox session container "${a}" no longer exists.`);let c=requirePreparedDockerArtifact(i);if(!await dockerImageExists(n,c.imageReference))throw new SandboxTemplateNotProvisionedError({providerName:DOCKER_PROVIDER_NAME,reason:"The Docker daemon has no image with that name: it was removed, for example by `docker image prune -a`, or the build used another Docker daemon.",templateKey:c.imageReference});try{await startDockerContainer({cli:n,containerName:a,image:c.imageReference,initialNetworkPolicy:t?.networkPolicy??`allow-all`,options:r,role:`session`,tags:{agent:e.session.id,sessionId:e.session.id}}),s=!0}catch(e){if(s=/is already in use/u.test(toErrorMessage(e))?await inspectContainerRunning(a):void 0,s===void 0)throw e}}return s||expectDockerSuccess(await n.run([`start`,a]),`restart sandbox session container "${a}"`),createDockerConnection({cli:n,containerIdentity:await resolveDockerHandleIdentity(n,a)})}return{async onSessionEnd(e,t,{signal:r}){await ensureDaemon();let i=t?.containerName??dockerSessionName(e),a=await n.run([`rm`,`-f`,i],{signal:r});a.exitCode!==0&&!/no such container/iu.test(a.stderr)&&expectDockerSuccess(a,`delete sandbox session container "${i}"`)},async prepare(e){e.log(`checking Docker daemon`),await ensureDaemon();let t=await materializeSandboxDockerfile({files:e.files,storagePath:e.storagePath}),a=e.templateKey({dockerfile:t?.contentHash,optionsHash:i,version:2}).slice(0,24),o={optionsHash:i,templateKey:a},s=dockerTemplateImageReference(o),c=resolveDockerTemplateMarkerPath(e.storagePath,o);if(e.log(`checking cached template image "${s}"`),await dockerImageExists(n,s))return e.log(`reusing cached template image`),await touchDockerTemplateMarker(c,s),{imageReference:s};let l=await e.resourcesDirectory(),u=r.image;t===void 0?(e.log(`checking base image "${r.image}"`),await ensureDockerBaseImage(n,r)):(u=dockerfileImageReference({dockerfile:t,templateKey:a}),e.log(`building sandbox Dockerfile "${t.path}"`),await buildSandboxDockerfile({cli:n,dockerfile:t,imageReference:u}));let d=`${a}-build-${randomUUID().slice(0,8)}`;e.log(`starting template build container`),await startDockerContainer({cli:n,containerName:d,image:u,initialNetworkPolicy:`allow-all`,options:r,resourcesPath:l,role:`template-build`});try{let t=await resolveDockerHandleIdentity(n,d);e.log(`preparing base runtime inside container`),await runDockerBaseSetup(n,t),await e.populate(createDockerConnection({cli:n,containerIdentity:t}),l===void 0?void 0:{mountedAt:DOCKER_RESOURCES_MOUNT_PATH}),e.log(`stopping template build container`),expectDockerSuccess(await n.run([`stop`,`-t`,`0`,t]),`stop template build container "${d}"`),e.log(`committing template image "${s}"`),await commitDockerTemplateImage({cli:n,containerIdentity:t,imageReference:s,templateKey:a})===`reused`&&e.log(`reusing concurrently published template image`),await touchDockerTemplateMarker(c,s)}finally{await n.run([`rm`,`-f`,d]).catch(()=>{}),t!==void 0&&await n.run([`rmi`,u]).catch(()=>{})}return{imageReference:s}},async resume(e,t,n){return await openDockerSession(e,void 0,t,requireDockerSessionState(n).containerName,!1)},async start(e,t,n){t?.networkPolicy!==void 0&&assertDockerNetworkPolicy(t.networkPolicy);let r=dockerSessionName(e);return{connection:await openDockerSession(e,t,n,r,!0),state:{containerName:r,version:2}}}}}function dockerSessionName(e){return`eve-sbx-${createSandboxProviderIdentity({namespace:e.storagePath,sessionId:e.session.id,version:2}).slice(0,32)}`}function requirePreparedDockerArtifact(e){if(!isObject(e)||typeof e.imageReference!=`string`)throw invalidPreparedSandboxArtifactError(`Docker sandbox`);return{imageReference:e.imageReference}}function requireDockerSessionState(e){if(!isObject(e)||e.version!==2||typeof e.containerName!=`string`)throw invalidSandboxSessionStateError(`Docker sandbox`);return{containerName:e.containerName,version:2}}async function resolveDockerHandleIdentity(e,t){let n=await e.run([`container`,`inspect`,`--format`,`{{.Id}}`,t]);expectDockerSuccess(n,`resolve sandbox container identity for "${t}"`);let r=n.stdout.trim();if(r.length===0)throw Error(`Docker returned an empty identity for sandbox container "${t}".`);return r}export{DOCKER_PROVIDER_NAME,DOCKER_TEMPLATE_IMAGE_REPOSITORY,createDockerSandboxProvider,pruneDockerSandboxTemplates};

package/dist/src/execution/sandbox/bindings/eve-image.d.ts

@@ -1,4 +1,2 @@
-export declare function resolveEveSandboxImage(): string;
-export declare function resolveVercelEveSandboxImage(): string;
 export declare const DEFAULT_EVE_SANDBOX_IMAGE: string;
 export declare const VERCEL_EVE_SANDBOX_IMAGE: string;

package/dist/src/execution/sandbox/bindings/eve-image.js

@@ -1 +1 @@
-import{resolveInstalledPackageInfo}from"#internal/application/package.js";import{stripVersionBuildMetadata}from"#shared/package-version.js";function resolveEveSandboxImage(){return`ghcr.io/vercel/eve:${resolveEveSandboxImageTag()}`}function resolveVercelEveSandboxImage(){return`vcr.vercel.com/vercel/eve/base:${resolveEveSandboxImageTag()}`}function resolveEveSandboxImageTag(){let e=process.env.EVE_SANDBOX_IMAGE_TAG?.trim();return e!==void 0&&e.length>0?e:stripVersionBuildMetadata(resolveInstalledPackageInfo().version)}const DEFAULT_EVE_SANDBOX_IMAGE=resolveEveSandboxImage(),VERCEL_EVE_SANDBOX_IMAGE=resolveVercelEveSandboxImage();export{DEFAULT_EVE_SANDBOX_IMAGE,VERCEL_EVE_SANDBOX_IMAGE,resolveEveSandboxImage,resolveVercelEveSandboxImage};
+const tag=process.env.EVE_SANDBOX_IMAGE_TAG?.trim()||`dockerfile-fc0279bf1664`,DEFAULT_EVE_SANDBOX_IMAGE=`ghcr.io/vercel/eve:${tag}`,VERCEL_EVE_SANDBOX_IMAGE=`vcr.vercel.com/vercel/eve/base:${tag}`;export{DEFAULT_EVE_SANDBOX_IMAGE,VERCEL_EVE_SANDBOX_IMAGE};

package/dist/src/execution/sandbox/bindings/just-bash-runtime.js

@@ -1 +1 @@
-import{mkdir,readFile,writeFile}from"node:fs/promises";import{isObject}from"#shared/guards.js";import{dirname}from"node:path";import{loadOptionalEnginePackage}from"#internal/application/optional-package-install.js";import{shellQuote}from"#execution/sandbox/shell-quote.js";import{WORKSPACE_ROOT}from"#runtime/workspace/types.js";import{SANDBOX_AGENT_ENV}from"#public/sandbox/provider.js";import{pathExists}from"#execution/sandbox/bindings/local-provider-utils.js";import{adaptMultiplexedCommandToSandboxProcess}from"#execution/sandbox/multiplexed-command.js";import{importOptionalEnginePackage}from"#internal/application/optional-package-import.js";const JUST_BASH_PACKAGE={importModule:async()=>await import(`just-bash`),missingMessage:"The just-bash sandbox provider requires the `just-bash` package, which is not bundled with eve. Install it in your application (for example `pnpm add -D just-bash`), or use DockerSandbox or DefaultSandbox instead.",packageName:`just-bash`};async function installJustBashModule(e){return await loadOptionalEnginePackage({...JUST_BASH_PACKAGE,appRoot:e.appRoot,autoInstall:e.autoInstall,ignoredOptionalDependencies:[`@mongodb-js/zstd`,`node-liblzma`]})}async function importJustBashModule(e){return await importOptionalEnginePackage({...JUST_BASH_PACKAGE,appRoot:e})}async function createBashSandbox(e){let{justBash:t}=e,n=resolveLocalSandboxFilesystemRootPath(e.rootPath),r=resolveLocalSandboxMetadataPath(e.rootPath),i=await readLocalMetadata(r);await mkdir(n,{recursive:!0});let a=new t.ReadWriteFs({allowSymlinks:!0,maxFileReadSize:2**53-1,root:n}),o=a;if(e.filesystem!==void 0)try{o=await e.filesystem({defaultFilesystem:a,resolveProjectPath:t=>e.resolveProjectPath(t),storagePath:e.storagePath,justBash:t})}catch(e){throw Error(`Failed to create the custom just-bash filesystem.`,{cause:e})}await o.mkdir(WORKSPACE_ROOT,{recursive:!0});let s=await t.Sandbox.create({cwd:WORKSPACE_ROOT,customCommands:e.customCommands===void 0?void 0:[...e.customCommands],env:i===null?void 0:{...i.env},fs:o,network:{dangerouslyAllowFullInternetAccess:!0}});return{async captureState(){await writeLocalMetadata(r,{env:{...s.bashEnvInstance.getEnv()},version:1})},async readFile({path:e}){try{return await o.readFileBuffer(e)}catch(t){if(!await o.exists(e))return null;throw t}},async removePath(e){await o.rm(e.path,{force:e.force,recursive:e.recursive})},async spawn(e){if(e.abortSignal?.aborted)throw new DOMException(`The operation was aborted.`,`AbortError`);let t=`( cd ${shellQuote(e.workingDirectory)} && {\n${e.command}\n} )`,n=await s.runCommand({args:[t],cmd:`eval`,detached:!0,env:{...SANDBOX_AGENT_ENV,...e.env},signal:e.abortSignal});return adaptMultiplexedCommandToSandboxProcess({command:n,getOutput:e=>e.type})},async stop(){await s.stop()},async writeFiles({files:e}){for(let t of e)await o.mkdir(dirname(t.path),{recursive:!0}),await o.writeFile(t.path,t.content)}}}function resolveLocalSandboxFilesystemRootPath(e){return`${e}/fs`}function resolveLocalSandboxMetadataPath(e){return`${e}/metadata.json`}async function readLocalMetadata(e){if(!await pathExists(e))return null;let t=JSON.parse(await readFile(e,`utf8`));return!isObject(t)||t.version!==1||!isStringRecord(t.env)?null:{env:t.env,version:1}}async function writeLocalMetadata(e,t){await mkdir(dirname(e),{recursive:!0}),await writeFile(e,`${JSON.stringify(t,null,2)}\n`)}function isStringRecord(e){return isObject(e)&&Object.values(e).every(e=>typeof e==`string`)}export{createBashSandbox,importJustBashModule,installJustBashModule};
+import{mkdir,readFile,writeFile}from"node:fs/promises";import{isObject}from"#shared/guards.js";import{dirname}from"node:path";import{loadOptionalEnginePackage}from"#internal/application/optional-package-install.js";import{shellQuote}from"#execution/sandbox/shell-quote.js";import{WORKSPACE_ROOT}from"#runtime/workspace/types.js";import{SANDBOX_AGENT_ENV}from"#public/sandbox/provider.js";import{pathExists}from"#execution/sandbox/bindings/local-provider-utils.js";import{adaptMultiplexedCommandToSandboxProcess}from"#execution/sandbox/multiplexed-command.js";import{importOptionalEnginePackage}from"#internal/application/optional-package-import.js";const JUST_BASH_PACKAGE={importModule:async()=>await import(`just-bash`),missingMessage:"The just-bash sandbox provider requires the `just-bash` package, which is not bundled with eve. Install it in your application (for example `pnpm add -D just-bash`), or use DockerSandbox or DefaultSandbox instead.",packageName:`just-bash`};async function installJustBashModule(e){return await loadOptionalEnginePackage({...JUST_BASH_PACKAGE,appRoot:e.appRoot,autoInstall:e.autoInstall,ignoredOptionalDependencies:[`@mongodb-js/zstd`,`node-liblzma`]})}async function importJustBashModule(e){return await importOptionalEnginePackage({...JUST_BASH_PACKAGE,appRoot:e})}async function createBashSandbox(e){let{justBash:t}=e,n=resolveLocalSandboxFilesystemRootPath(e.rootPath),r=resolveLocalSandboxMetadataPath(e.rootPath),i=await readLocalMetadata(r);await mkdir(n,{recursive:!0});let a=new t.ReadWriteFs({allowSymlinks:!0,maxFileReadSize:2**53-1,root:n}),o=a;if(e.filesystem!==void 0)try{o=await e.filesystem({defaultFilesystem:a,resolveProjectPath:t=>e.resolveProjectPath(t),storagePath:e.storagePath,justBash:t})}catch(e){throw Error(`Failed to create the custom just-bash filesystem.`,{cause:e})}await o.mkdir(WORKSPACE_ROOT,{recursive:!0});let s=await t.Sandbox.create({cwd:WORKSPACE_ROOT,customCommands:[t.defineCommand(`realpath`,async(e,t)=>{let n=e.at(-1);if(e.length!==4||e[0]!==`-e`||e[1]!==`-z`||e[2]!==`--`||!n)return{stdout:``,stderr:`realpath: expected -e -z -- path`,exitCode:2};try{let e=await t.fs.realpath(n);return await t.fs.stat(e),{stdout:e+`\0`,stderr:``,exitCode:0}}catch(e){return{stdout:``,stderr:`realpath: ${String(e)}`,exitCode:1}}}),...e.customCommands??[]],env:i===null?void 0:{...i.env},fs:o,network:{dangerouslyAllowFullInternetAccess:!0}});return{async captureState(){await writeLocalMetadata(r,{env:{...s.bashEnvInstance.getEnv()},version:1})},async readFile({path:e}){try{return await o.readFileBuffer(e)}catch(t){if(!await o.exists(e))return null;throw t}},async removePath(e){await o.rm(e.path,{force:e.force,recursive:e.recursive})},async spawn(e){if(e.signal?.aborted)throw new DOMException(`The operation was aborted.`,`AbortError`);if(e.stdin===!0)throw Error("The just-bash sandbox does not support `stdin` on spawn yet.");let t=`( cd ${shellQuote(e.workingDirectory)} && {\n${e.command}\n} )`,n=await s.runCommand({args:[t],cmd:`eval`,detached:!0,env:{...SANDBOX_AGENT_ENV,...e.env},signal:e.signal});return adaptMultiplexedCommandToSandboxProcess({command:n,getOutput:e=>e.type})},async stop(){await s.stop()},async writeFiles({files:e}){for(let t of e)await o.mkdir(dirname(t.path),{recursive:!0}),await o.writeFile(t.path,t.content)}}}function resolveLocalSandboxFilesystemRootPath(e){return`${e}/fs`}function resolveLocalSandboxMetadataPath(e){return`${e}/metadata.json`}async function readLocalMetadata(e){if(!await pathExists(e))return null;let t=JSON.parse(await readFile(e,`utf8`));return!isObject(t)||t.version!==1||!isStringRecord(t.env)?null:{env:t.env,version:1}}async function writeLocalMetadata(e,t){await mkdir(dirname(e),{recursive:!0}),await writeFile(e,`${JSON.stringify(t,null,2)}\n`)}function isStringRecord(e){return isObject(e)&&Object.values(e).every(e=>typeof e==`string`)}export{createBashSandbox,importJustBashModule,installJustBashModule};

package/dist/src/execution/sandbox/bindings/vercel.js

@@ -1 +1 @@
-import{randomBytes}from"node:crypto";import{isObject}from"#shared/guards.js";import{SANDBOX_AGENT_ENV,SandboxSessionGoneError,SandboxTemplateNotProvisionedError}from"#public/sandbox/provider.js";import{VERCEL_EVE_SANDBOX_IMAGE}from"#execution/sandbox/bindings/eve-image.js";import{createSandboxProviderIdentity}from"#execution/sandbox/provider-identity.js";import{invalidPreparedSandboxArtifactError,invalidSandboxSessionStateError}from"#shared/sandbox-recorded-data-error.js";import{adaptMultiplexedCommandToSandboxProcess}from"#execution/sandbox/multiplexed-command.js";import{isVercelSandboxMissingError,isVercelSandboxNameConflictError,isVercelSnapshotNotFoundError,isVercelSnapshotUnavailableError}from"#execution/sandbox/bindings/vercel-errors.js";import{getNamedVercelSandbox,isVercelSnapshotCreated}from"#execution/sandbox/bindings/vercel-lookup.js";import{ensureVercelSandboxTags,errorMessage,resolveVercelSandboxTags}from"#execution/sandbox/bindings/vercel-options.js";import{applyInitialVercelNetworkPolicy,createVercelNetworkPolicySetter,ensureVercelSandboxBaseRuntime,withBaseSetupNetworkPolicy}from"#execution/sandbox/bindings/vercel-base-runtime.js";import{createVercelEveImageSandbox}from"#execution/sandbox/bindings/vercel-create-sdk.js";import{deleteNamedVercelSandbox,deleteUnusableVercelSandbox,stopVercelSandbox}from"#execution/sandbox/bindings/vercel-lifecycle.js";import{normalizeVercelReadStream}from"#execution/sandbox/bindings/vercel-read-stream.js";import{withToolSessionRetention}from"#execution/sandbox/bindings/vercel-tool-sessions.js";function createVercelSandbox(e={}){let t=e.loadSandboxModule??(async()=>await import(`#compiled/@vercel/sandbox/index.js`)),n={...e.createOptions,env:{...SANDBOX_AGENT_ENV,...e.createOptions?.env},timeout:e.createOptions?.timeout??DEFAULT_SANDBOX_TIMEOUT_MS},r=e.createSandbox??createVercelEveImageSandbox,i=n.source===void 0&&(n.image??VERCEL_EVE_SANDBOX_IMAGE)===VERCEL_EVE_SANDBOX_IMAGE;return{async onSessionEnd(e,r,{abortSignal:i}){await deleteNamedVercelSandbox({createOptions:n,sandboxModule:await t(),sandboxName:r?.sandboxName??vercelSessionName(e.session.id),signal:i})},async prepare(e){if(e.isEmpty&&n.source===void 0)return{};try{let i=`eve-sbx-tpl-vercel-${e.templateKey({createOptions:vercelIdentityOptions(n),resolvedImage:n.source===void 0?n.image??VERCEL_EVE_SANDBOX_IMAGE:void 0,version:4}).slice(0,32)}`;return{snapshotId:await ensureTemplate({context:e,createOptions:n,createSandbox:r,loadSandboxModule:t,templateKey:i})}}catch(e){throw Error(`Failed to prepare Vercel sandbox snapshot: ${errorMessage(e)}`,{cause:e})}},async resume(e,r,i){requirePreparedVercelTemplate(r);let a=requireVercelSessionState(i),o=await t(),s=await getNamedVercelSandbox({createOptions:n,sandboxModule:o,sandboxName:a.sandboxName});if(s===null)throw new SandboxSessionGoneError(`Vercel sandbox session "${a.sandboxName}" no longer exists.`);return await ensureVercelSandboxBaseRuntime(s),createVercelConnection(s)},async start(e,t,n){let r=vercelSessionName(e.session.id);return{connection:createVercelConnection(await openSession(e,t,n,r)),state:{sandboxName:r,version:3}}},toolSessions:!0};async function openSession(e,a,o,s){let c=requirePreparedVercelTemplate(o),{mounts:l,...u}=a??{},d=e.kind===`tool-session`,f={...n,...u,env:{...SANDBOX_AGENT_ENV,...u.env??n.env}},p=d?withToolSessionRetention(f):f,m=resolveVercelSandboxTags(p.tags,{sessionId:e.session.id}),h=await t(),g={createOptions:p,createSandbox:r,mounts:l===void 0?void 0:toVercelMounts(l),sandboxModule:h,sessionKey:s,snapshotId:c.snapshotId,tags:m};try{let t=await ensureUsableSession({expired:d?isVercelSnapshotNotFoundError:isVercelSnapshotUnavailableError,inheritsBaseRuntime:c.snapshotId!==void 0&&l===void 0&&i,input:g,session:await ensureSession(g)}),r=u.networkPolicy??n.networkPolicy;if(t.created&&c.snapshotId===void 0&&r!==void 0)try{await applyInitialVercelNetworkPolicy(t.sandbox,r)}catch(n){try{await deleteNamedVercelSandbox({createOptions:p,sandboxModule:h,sandboxName:t.sandbox.name})}catch(t){throw AggregateError([n,t],`Failed to apply network policy and discard Vercel sandbox session "${e.session.id}".`,{cause:n})}throw n}return t.sandbox}catch(t){throw isVercelSnapshotUnavailableError(t)&&c.snapshotId!==void 0?new SandboxTemplateNotProvisionedError({providerName:`vercel`,reason:`The Vercel Sandbox snapshot expired or was deleted.`,templateKey:c.snapshotId}):Error(`Failed to open Vercel sandbox session "${e.session.id}": ${errorMessage(t)}`,{cause:t})}}}function vercelSessionName(e){return`eve-sbx-vercel-${createSandboxProviderIdentity({sessionId:e,version:2}).slice(0,32)}`}function vercelIdentityOptions(e){if(e===void 0)return;let t=new Set([`fetch`,`projectId`,`signal`,`teamId`,`token`]);return Object.fromEntries(Object.entries(e).filter(([e])=>!t.has(e)))}function requireVercelSessionState(e){if(!isObject(e)||e.version!==3||typeof e.sandboxName!=`string`)throw invalidSandboxSessionStateError(`Vercel sandbox`);return{sandboxName:e.sandboxName,version:3}}function requirePreparedVercelTemplate(e){if(!isObject(e)||e.snapshotId!==void 0&&typeof e.snapshotId!=`string`)throw invalidPreparedSandboxArtifactError(`Vercel sandbox`);return e.snapshotId===void 0?{}:{snapshotId:e.snapshotId}}function toVercelMounts(e){return Object.fromEntries(Object.entries(e).map(([e,t])=>[e,`mode`in t?{drive:t.drive,mode:t.mode}:{drive:t.name,mode:`read-write`}]))}async function ensureTemplate(e){let t=await e.loadSandboxModule(),n=await getNamedVercelSandbox({createOptions:e.createOptions,sandboxModule:t,sandboxName:e.templateKey}),r=n?.sourceSnapshotId;if(r!==void 0&&await isVercelSnapshotCreated({createOptions:e.createOptions,sandboxModule:t,snapshotId:r}))return e.context.log(`reusing prepared sandbox template`),r;let i=await prepareTemplateSnapshot(e,t);return await publishTemplatePointer(e,t,n,i).catch(t=>{e.context.log(`could not publish sandbox template: ${errorMessage(t)}`)}),i}async function prepareTemplateSnapshot(e,t){let n=await e.createSandbox({sandboxModule:t,createOptions:withBaseSetupNetworkPolicy({...e.createOptions,name:`${e.templateKey}-${randomBytes(4).toString(`hex`)}`,persistent:!1})});try{return e.context.log(`preparing base runtime inside sandbox`),await ensureVercelSandboxBaseRuntime(n),await applyInitialVercelNetworkPolicy(n,e.createOptions.networkPolicy),await e.context.populate(createVercelConnection(n)),await ensureVercelSandboxBaseRuntime(n),(await n.snapshot()).snapshotId}finally{await n.delete().catch(t=>{e.context.log(`could not delete sandbox ${n.name}: ${errorMessage(t)}`)})}}async function publishTemplatePointer(e,t,n,r){if(n!==null)try{await n.delete()}catch(e){if(!isVercelSandboxMissingError(e))throw e}let{image:i,runtime:a,source:o,...s}=e.createOptions,c;try{c=await e.createSandbox({sandboxModule:t,createOptions:{...s,name:e.templateKey,persistent:!1,source:{snapshotId:r,type:`snapshot`}}})}catch(e){if(isVercelSandboxNameConflictError(e))return;throw e}await stopVercelSandbox(c)}async function ensureUsableSession(e){let ensureBaseRuntime=async t=>{t.created&&e.inheritsBaseRuntime||await ensureVercelSandboxBaseRuntime(t.sandbox)};try{return await ensureBaseRuntime(e.session),e.session}catch(t){if(e.session.created||!e.expired(t))throw t}try{await deleteUnusableVercelSandbox({createOptions:e.input.createOptions,sandboxModule:e.input.sandboxModule,sandboxName:e.session.sandbox.name})}catch(e){if(!isVercelSandboxMissingError(e))throw e}let t=await ensureSession(e.input);return await ensureBaseRuntime(t),t}async function ensureSession(e){let t=e.sessionKey,n=await getNamedVercelSandbox({createOptions:e.createOptions,sandboxModule:e.sandboxModule,sandboxName:t});if(n!==null)return await ensureVercelSandboxTags(n,e.tags),{created:!1,sandbox:n};let r=createSessionCreateParams(e,t);e.tags!==void 0&&(r.tags=e.tags);try{return{created:!0,sandbox:await e.createSandbox({createOptions:r,sandboxModule:e.sandboxModule})}}catch(n){if(!isVercelSandboxNameConflictError(n))throw n;let r=await getNamedVercelSandbox({...e,sandboxName:t});if(r===null)throw n;return{created:!1,sandbox:r}}}function createSessionCreateParams(e,t){let n={...e.createOptions};if(e.mounts!==void 0&&(n.mounts=e.mounts),e.snapshotId===void 0)return withBaseSetupNetworkPolicy({...n,name:t,persistent:!0});let{image:r,runtime:i,source:a,...o}=n;return{...o,name:t,persistent:!0,source:{snapshotId:e.snapshotId,type:`snapshot`}}}function createVercelConnection(e){return{extensions:{name:e.name,setNetworkPolicy:createVercelNetworkPolicySetter(e)},async readFile(t){return normalizeVercelReadStream(await e.readFile({path:t.path}))},async removePath(t){await e.fs.rm(t.path,{force:t.force,recursive:t.recursive,signal:t.abortSignal})},async spawn(t){let n=await e.runCommand({args:[`-lc`,t.command],cmd:`bash`,cwd:t.workingDirectory,detached:!0,env:t.env,signal:t.abortSignal});return adaptMultiplexedCommandToSandboxProcess({abortSignal:t.abortSignal,command:n,getOutput:e=>e.stream})},async stop(){await stopVercelSandbox(e)},async writeFiles(t){t.files.length!==0&&await e.writeFiles(await resolveVercelWriteFiles(e,t.files,t.abortSignal),{signal:t.abortSignal})}}}async function resolveVercelWriteFiles(e,t,n){let r=[],i=[],a=0;for(let o of t){let t=Buffer.byteLength(o.path)+1;i.length>0&&a+t>65536&&(r.push(...await resolveVercelPaths(e,i,n)),i=[],a=0),i.push(o.path),a+=t}return r.push(...await resolveVercelPaths(e,i,n)),t.map((e,t)=>{let n=r[t];if(n===void 0||!n.startsWith(`/`))throw Error(`Failed to resolve Vercel Sandbox write path: ${e.path}`);return{content:e.content,path:n}})}async function resolveVercelPaths(e,t,n){let r=await e.runCommand({args:[`-m`,`-z`,`--`,...t],cmd:`realpath`,signal:n});if(r.exitCode!==0){let e=(await r.stderr()).trim();throw Error(`Failed to resolve Vercel Sandbox write paths with realpath: ${e}`)}let i=(await r.stdout()).split(`\0`).slice(0,-1);if(i.length!==t.length)throw Error(`Failed to resolve Vercel Sandbox write paths: realpath printed ${i.length} paths for ${t.length} files.`);return i}const DEFAULT_SANDBOX_TIMEOUT_MS=18e5;export{createVercelSandbox};
+import{randomBytes}from"node:crypto";import{isObject}from"#shared/guards.js";import{SANDBOX_AGENT_ENV,SandboxSessionGoneError,SandboxTemplateNotProvisionedError}from"#public/sandbox/provider.js";import{VERCEL_EVE_SANDBOX_IMAGE}from"#execution/sandbox/bindings/eve-image.js";import{createSandboxProviderIdentity}from"#execution/sandbox/provider-identity.js";import{invalidPreparedSandboxArtifactError,invalidSandboxSessionStateError}from"#shared/sandbox-recorded-data-error.js";import{adaptMultiplexedCommandToSandboxProcess}from"#execution/sandbox/multiplexed-command.js";import{isVercelSandboxMissingError,isVercelSandboxNameConflictError,isVercelSnapshotNotFoundError,isVercelSnapshotUnavailableError}from"#execution/sandbox/bindings/vercel-errors.js";import{getNamedVercelSandbox,isVercelSnapshotCreated}from"#execution/sandbox/bindings/vercel-lookup.js";import{ensureVercelSandboxTags,errorMessage,resolveVercelSandboxTags}from"#execution/sandbox/bindings/vercel-options.js";import{applyInitialVercelNetworkPolicy,createVercelNetworkPolicySetter,ensureVercelSandboxBaseRuntime,toVercelNetworkPolicy,withBaseSetupNetworkPolicy}from"#execution/sandbox/bindings/vercel-base-runtime.js";import{createVercelEveImageSandbox}from"#execution/sandbox/bindings/vercel-create-sdk.js";import{deleteNamedVercelSandbox,deleteUnusableVercelSandbox,stopVercelSandbox}from"#execution/sandbox/bindings/vercel-lifecycle.js";import{normalizeVercelReadStream}from"#execution/sandbox/bindings/vercel-read-stream.js";import{withToolSessionRetention}from"#execution/sandbox/bindings/vercel-tool-sessions.js";function createVercelSandbox(e={}){let t=e.loadSandboxModule??(async()=>await import(`#compiled/@vercel/sandbox/index.js`)),n={...e.createOptions,env:{...SANDBOX_AGENT_ENV,...e.createOptions?.env},timeout:e.createOptions?.timeout??DEFAULT_SANDBOX_TIMEOUT_MS},r=e.createSandbox??createVercelEveImageSandbox,i=n.source===void 0&&(n.image??VERCEL_EVE_SANDBOX_IMAGE)===VERCEL_EVE_SANDBOX_IMAGE;return{async onSessionEnd(e,r,{signal:i}){await deleteNamedVercelSandbox({createOptions:n,sandboxModule:await t(),sandboxName:r?.sandboxName??vercelSessionName(e.session.id),signal:i})},async prepare(e){if(e.isEmpty&&n.source===void 0)return{};try{let i=`eve-sbx-tpl-vercel-${e.templateKey({createOptions:vercelIdentityOptions(n),resolvedImage:n.source===void 0?n.image??VERCEL_EVE_SANDBOX_IMAGE:void 0,version:4}).slice(0,32)}`;return{snapshotId:await ensureTemplate({context:e,createOptions:n,createSandbox:r,loadSandboxModule:t,templateKey:i})}}catch(e){throw Error(`Failed to prepare Vercel sandbox snapshot: ${errorMessage(e)}`,{cause:e})}},async resume(e,r,i){requirePreparedVercelTemplate(r);let a=requireVercelSessionState(i),o=await t(),s=await getNamedVercelSandbox({createOptions:n,sandboxModule:o,sandboxName:a.sandboxName});if(s===null)throw new SandboxSessionGoneError(`Vercel sandbox session "${a.sandboxName}" no longer exists.`);return await ensureVercelSandboxBaseRuntime(s),createVercelConnection(s)},async start(e,t,n){let r=vercelSessionName(e.session.id);return{connection:createVercelConnection(await openSession(e,t,n,r)),state:{sandboxName:r,version:3}}},toolSessions:!0};async function openSession(e,a,o,s){let c=requirePreparedVercelTemplate(o),{mounts:l,networkPolicy:u,...d}=a??{},f=e.kind===`tool-session`,p={...n,...d,...u===void 0?{}:{networkPolicy:toVercelNetworkPolicy(u)},env:{...SANDBOX_AGENT_ENV,...d.env??n.env}},m=f?withToolSessionRetention(p):p,h=resolveVercelSandboxTags(m.tags,{sessionId:e.session.id}),g=await t(),_={createOptions:m,createSandbox:r,mounts:l===void 0?void 0:toVercelMounts(l),sandboxModule:g,sessionKey:s,snapshotId:c.snapshotId,tags:h};try{let t=await ensureUsableSession({expired:f?isVercelSnapshotNotFoundError:isVercelSnapshotUnavailableError,inheritsBaseRuntime:c.snapshotId!==void 0&&l===void 0&&i,input:_,session:await ensureSession(_)}),n=m.networkPolicy;if(t.created&&c.snapshotId===void 0&&n!==void 0)try{await applyInitialVercelNetworkPolicy(t.sandbox,n)}catch(n){try{await deleteNamedVercelSandbox({createOptions:m,sandboxModule:g,sandboxName:t.sandbox.name})}catch(t){throw AggregateError([n,t],`Failed to apply network policy and discard Vercel sandbox session "${e.session.id}".`,{cause:n})}throw n}return t.sandbox}catch(t){throw isVercelSnapshotUnavailableError(t)&&c.snapshotId!==void 0?new SandboxTemplateNotProvisionedError({providerName:`vercel`,reason:`The Vercel Sandbox snapshot expired or was deleted.`,templateKey:c.snapshotId}):Error(`Failed to open Vercel sandbox session "${e.session.id}": ${errorMessage(t)}`,{cause:t})}}}function vercelSessionName(e){return`eve-sbx-vercel-${createSandboxProviderIdentity({sessionId:e,version:2}).slice(0,32)}`}function vercelIdentityOptions(e){if(e===void 0)return;let t=new Set([`fetch`,`projectId`,`signal`,`teamId`,`token`]);return Object.fromEntries(Object.entries(e).filter(([e])=>!t.has(e)))}function requireVercelSessionState(e){if(!isObject(e)||e.version!==3||typeof e.sandboxName!=`string`)throw invalidSandboxSessionStateError(`Vercel sandbox`);return{sandboxName:e.sandboxName,version:3}}function requirePreparedVercelTemplate(e){if(!isObject(e)||e.snapshotId!==void 0&&typeof e.snapshotId!=`string`)throw invalidPreparedSandboxArtifactError(`Vercel sandbox`);return e.snapshotId===void 0?{}:{snapshotId:e.snapshotId}}function toVercelMounts(e){return Object.fromEntries(Object.entries(e).map(([e,t])=>[e,`mode`in t?{drive:t.drive,mode:t.mode}:{drive:t.name,mode:`read-write`}]))}async function ensureTemplate(e){let t=await e.loadSandboxModule(),n=await getNamedVercelSandbox({createOptions:e.createOptions,sandboxModule:t,sandboxName:e.templateKey}),r=n?.sourceSnapshotId;if(r!==void 0&&await isVercelSnapshotCreated({createOptions:e.createOptions,sandboxModule:t,snapshotId:r}))return e.context.log(`reusing prepared sandbox template`),r;let i=await prepareTemplateSnapshot(e,t);return await publishTemplatePointer(e,t,n,i).catch(t=>{e.context.log(`could not publish sandbox template: ${errorMessage(t)}`)}),i}async function prepareTemplateSnapshot(e,t){let n=await e.createSandbox({sandboxModule:t,createOptions:withBaseSetupNetworkPolicy({...e.createOptions,name:`${e.templateKey}-${randomBytes(4).toString(`hex`)}`,persistent:!1})});try{return e.context.log(`preparing base runtime inside sandbox`),await ensureVercelSandboxBaseRuntime(n),await applyInitialVercelNetworkPolicy(n,e.createOptions.networkPolicy),await e.context.populate(createVercelConnection(n)),await ensureVercelSandboxBaseRuntime(n),(await n.snapshot()).snapshotId}finally{await n.delete().catch(t=>{e.context.log(`could not delete sandbox ${n.name}: ${errorMessage(t)}`)})}}async function publishTemplatePointer(e,t,n,r){if(n!==null)try{await n.delete()}catch(e){if(!isVercelSandboxMissingError(e))throw e}let{image:i,runtime:a,source:o,...s}=e.createOptions,c;try{c=await e.createSandbox({sandboxModule:t,createOptions:{...s,name:e.templateKey,persistent:!1,source:{snapshotId:r,type:`snapshot`}}})}catch(e){if(isVercelSandboxNameConflictError(e))return;throw e}await stopVercelSandbox(c)}async function ensureUsableSession(e){let ensureBaseRuntime=async t=>{t.created&&e.inheritsBaseRuntime||await ensureVercelSandboxBaseRuntime(t.sandbox)};try{return await ensureBaseRuntime(e.session),e.session}catch(t){if(e.session.created||!e.expired(t))throw t}try{await deleteUnusableVercelSandbox({createOptions:e.input.createOptions,sandboxModule:e.input.sandboxModule,sandboxName:e.session.sandbox.name})}catch(e){if(!isVercelSandboxMissingError(e))throw e}let t=await ensureSession(e.input);return await ensureBaseRuntime(t),t}async function ensureSession(e){let t=e.sessionKey,n=await getNamedVercelSandbox({createOptions:e.createOptions,sandboxModule:e.sandboxModule,sandboxName:t});if(n!==null)return await ensureVercelSandboxTags(n,e.tags),{created:!1,sandbox:n};let r=createSessionCreateParams(e,t);e.tags!==void 0&&(r.tags=e.tags);try{return{created:!0,sandbox:await e.createSandbox({createOptions:r,sandboxModule:e.sandboxModule})}}catch(n){if(!isVercelSandboxNameConflictError(n))throw n;let r=await getNamedVercelSandbox({...e,sandboxName:t});if(r===null)throw n;return{created:!1,sandbox:r}}}function createSessionCreateParams(e,t){let n={...e.createOptions};if(e.mounts!==void 0&&(n.mounts=e.mounts),e.snapshotId===void 0)return withBaseSetupNetworkPolicy({...n,name:t,persistent:!0});let{image:r,runtime:i,source:a,...o}=n;return{...o,name:t,persistent:!0,source:{snapshotId:e.snapshotId,type:`snapshot`}}}function createVercelConnection(e){return{extensions:{name:e.name,setNetworkPolicy:createVercelNetworkPolicySetter(e)},async readFile(t){return normalizeVercelReadStream(await e.readFile({path:t.path}))},async removePath(t){await e.fs.rm(t.path,{force:t.force,recursive:t.recursive,signal:t.signal})},async spawn(t){let n=await e.runCommand({args:[`-lc`,t.command],cmd:`bash`,cwd:t.workingDirectory,detached:!0,env:t.env,signal:t.signal,stdin:t.stdin});return adaptMultiplexedCommandToSandboxProcess({abortSignal:t.signal,command:n,getOutput:e=>e.stream,stdin:t.stdin===!0?n:void 0})},async stop(){await stopVercelSandbox(e)},async writeFiles(t){t.files.length!==0&&await e.writeFiles(await resolveVercelWriteFiles(e,t.files,t.signal),{signal:t.signal})}}}async function resolveVercelWriteFiles(e,t,n){let r=[],i=[],a=0;for(let o of t){let t=Buffer.byteLength(o.path)+1;i.length>0&&a+t>65536&&(r.push(...await resolveVercelPaths(e,i,n)),i=[],a=0),i.push(o.path),a+=t}return r.push(...await resolveVercelPaths(e,i,n)),t.map((e,t)=>{let n=r[t];if(n===void 0||!n.startsWith(`/`))throw Error(`Failed to resolve Vercel Sandbox write path: ${e.path}`);return{content:e.content,path:n}})}async function resolveVercelPaths(e,t,n){let r=await e.runCommand({args:[`-m`,`-z`,`--`,...t],cmd:`realpath`,signal:n});if(r.exitCode!==0){let e=(await r.stderr()).trim();throw Error(`Failed to resolve Vercel Sandbox write paths with realpath: ${e}`)}let i=(await r.stdout()).split(`\0`).slice(0,-1);if(i.length!==t.length)throw Error(`Failed to resolve Vercel Sandbox write paths: realpath printed ${i.length} paths for ${t.length} files.`);return i}const DEFAULT_SANDBOX_TIMEOUT_MS=18e5;export{createVercelSandbox};

package/dist/src/execution/sandbox/ensure.js

@@ -1 +1 @@
-import{randomUUID}from"node:crypto";import{createLogger}from"#internal/logging.js";import{getRuntimeCompiledArtifactsSandboxAppRoot}from"#runtime/compiled-artifacts-source.js";import{contextStorage}from"#context/container.js";import{resolve}from"node:path";import{resolveSandboxCacheDirectory}from"#internal/application/paths.js";import{getSandboxEnvironmentRuntime,runWithSandboxConstructorRuntime}from"#shared/sandbox-environment.js";import{buildCallbackContext,withRuntimeSandboxLifecycle}from"#context/build-callback-context.js";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{trackActiveSandboxConnection,untrackActiveSandboxConnection}from"#execution/sandbox/active-connections.js";import{isToolSessionId}from"#execution/tool-session/id.js";import{ToolSessionSandboxUnsupportedError}from"#shared/sandbox-tool-session-error.js";import{loadSandboxPreparedArtifact}from"#runtime/sandbox/prepared-artifacts.js";import{createConnectionSession}from"#execution/sandbox/session.js";import{ensureDevelopmentSandboxesPrepared}from"#execution/sandbox/development-lazy-prewarm.js";import{owningSandboxDefinition}from"#runtime/sandbox/registry.js";import{getSessionEndWithArtifact,resolvePersistedSandboxSessionState}from"#sandbox/state.js";import{isSandboxPreparedArtifact}from"#shared/sandbox-provider.js";import{SandboxSessionGoneError}from"#shared/sandbox-session-gone-error.js";import{SandboxTemplateNotProvisionedError}from"#shared/sandbox-template-error.js";const pendingSandboxStarts=new Map,log=createLogger(`execution.sandbox`);async function ensureSandboxAccess(e){let t=e.registry.sandbox,n=t===null?void 0:owningSandboxDefinition(t),r=resolvePersistedSandboxSessionState(e.state?.session,n?.kind===`independent`?getSandboxEnvironmentRuntime(n.environment):void 0),i,a,o,s,c=e.shutdownTracking??`session`,l=getRuntimeCompiledArtifactsSandboxAppRoot(e.compiledArtifactsSource)??process.cwd(),captured=()=>({session:r});if(t===null)return{async captureState(){return captured()},async end(){},async get(){return null},async open(){return null},prepare(){},async release(){},resumeRecorded(){},async settle(){},async stop(){}};let u=owningSandboxDefinition(t),d=t.inheritance?.nodeId??e.nodeId;function providerContext(t){let n=contextStorage.getStore()===void 0?{auth:{current:null,initiator:null},id:e.sessionId,turn:{id:t,sequence:0}}:buildCallbackContext().session;return{kind:isToolSessionId(e.sessionId)?`tool-session`:`session`,resolveProjectPath:e=>resolve(l,e),session:{...n,id:e.sessionId},storagePath:resolveSandboxCacheDirectory(l)}}function activeDefinition(){if(u.kind!==`independent`)throw Error(`Sandbox "${u.logicalPath}" uses defineParentSandbox(), but this agent has no parent sandbox to share. Only a declared subagent can share its parent's sandbox. Give this agent its own sandbox with defineSandbox() and an exported environment.`);return u}async function loadArtifact(t){let n=await loadSandboxPreparedArtifact({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:d,providerName:t.providerName});if(n===void 0)throw new SandboxTemplateNotProvisionedError({nodeId:d,providerName:t.providerName});return n}async function open(e,t,n,a){if(o!==void 0)throw Error("A sandbox definition can open only one sandbox. Call `environment.open()` once in the defineSandbox() selector and return that sandbox.");let s=activeDefinition();if(n!==s.environment)throw Error(`Sandbox "${s.logicalPath}" opened an environment other than the one it exports as \`environment\`. Call \`open()\` on the exported environment. A selector cannot open an environment created inside the selector or exported by another sandbox file.`);if(e!==getSandboxEnvironmentRuntime(s.environment))throw Error(`Sandbox "${s.logicalPath}" selected a different provider.`);if(r!==null)throw Error(`Sandbox "${s.logicalPath}" already opened this session's sandbox. Call \`environment.open()\` once in the defineSandbox() selector and return that sandbox.`);let c=await loadArtifact(e);return o=(async()=>{let n=await e.implementation.start(a,t,c);if(!isSandboxPreparedArtifact(n.state))throw Error(`Sandbox provider "${e.providerName}" returned non-serializable session state.`);let i=await openSandbox(e,a,n.connection,n.state);return r={generation:randomUUID(),providerName:e.providerName,state:n.state,stateProtocolVersion:e.stateProtocolVersion},i})().catch(e=>{throw o=void 0,e}),i=await o,i.sandbox}async function resumePersisted(e){if(r===null)throw Error(`Sandbox session state is missing.`);let t=getSandboxEnvironmentRuntime(activeDefinition().environment);if(r.providerName!==t.providerName)throw new SandboxSessionGoneError(`This session's sandbox was created by provider "${r.providerName}", but the agent now selects provider "${t.providerName}". eve cannot move a sandbox between providers, so the session continues in a fresh sandbox without the old sandbox's files.`);if(r.stateProtocolVersion!==t.stateProtocolVersion)throw new SandboxSessionGoneError(`Sandbox session state protocol ${r.stateProtocolVersion} is incompatible with provider "${t.providerName}" protocol ${t.stateProtocolVersion}.`);let n=await loadArtifact(t),a=r.state;return o=t.implementation.resume(e,n,a).then(n=>openSandbox(t,e,n,a)).catch(e=>{throw o=void 0,e}),i=await o,track(i),i}async function resolveOpened(t){let n=activeDefinition(),i=getSandboxEnvironmentRuntime(n.environment),a=providerContext(`sandbox-initialization`);if(a.kind===`tool-session`&&i.implementation.toolSessions!==!0)throw new ToolSessionSandboxUnsupportedError(i.providerName);if(isEveDevEnvironment()&&e.compiledArtifactsSource.kind===`disk`&&await ensureDevelopmentSandboxesPrepared({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:d,providerName:i.providerName}),r===null&&t.resumeOnly)throw Error(`This session has not recorded a sandbox to resume.`);if(r!==null)try{return await resumePersisted(a)}catch(n){if(!SandboxSessionGoneError.is(n)||t.resumeOnly)throw n;log.warn(`session sandbox is gone, starting a fresh one`,{error:n,providerName:r.providerName,sessionId:e.sessionId}),r=null}let o=[l,d,e.sessionId].join(`\0`),s=pendingSandboxStarts.get(o);for(;s!==void 0;){if(r=await s,r!==null)return await resumePersisted(a);s=pendingSandboxStarts.get(o)}let c=startOpened(a),u=c.then(()=>r,()=>null);pendingSandboxStarts.set(o,u);try{return await c}finally{pendingSandboxStarts.get(o)===u&&pendingSandboxStarts.delete(o)}}async function startOpened(e){let t=activeDefinition();try{let n=await runWithSandboxConstructorRuntime({open:({environment:t,options:n,provider:r})=>open(r,n,t,e)},async()=>t.selector({session:e.session}));if(i===void 0||n!==i.sandbox)throw Error(`Sandbox "${t.logicalPath}" must return the sandbox it opens.`)}catch(e){throw await i?.close().catch(()=>void 0),i=void 0,o=void 0,r=null,e}return track(i),i}function requireOpened(e={resumeOnly:!1}){return s===void 0&&(s=resolveOpened(e).catch(e=>{throw s=void 0,e})),s}async function openSession(){try{return(await requireOpened()).sandbox}catch(e){if(!SandboxSessionGoneError.is(e))throw e;return(await requireOpened()).sandbox}}let f=Promise.resolve();function enqueue(t,n={retry:!0}){let report=t=>{log.warn(`background sandbox preparation failed; it runs again when it is needed`,{error:t,sessionId:e.sessionId})};f=f.then(async()=>{try{await t()}catch(e){n.retry?await t().catch(report):report(e)}})}function track(t){c!==`none`&&trackActiveSandboxConnection({connection:t,providerName:t.providerName,sessionId:e.sessionId})}function forgetOpened(){let e=i;return i=void 0,o=void 0,s=void 0,e}function forgetSandbox(t){forgetOpened(),a=void 0,untrackActiveSandboxConnection({providerName:t,sessionId:e.sessionId}),r=null}return{environment:u.kind===`independent`?u.environment:void 0,async captureState(){return o!==void 0&&await o,captured()},async delete(t){if(e.ownsSandbox===!1)throw Error(`Only the owning session can delete this sandbox.`);await f;let n=await requireOpened();await n.delete(t),forgetSandbox(n.providerName)},async end(t){if(e.ownsSandbox===!1)return;await f,s!==void 0&&await s.catch(()=>void 0),await i?.close().catch(t=>{log.warn(`failed to close a sandbox connection at session end`,{error:t,sessionId:e.sessionId})});let n=getSandboxEnvironmentRuntime(activeDefinition().environment),a=r?.providerName===n.providerName&&r.stateProtocolVersion===n.stateProtocolVersion?r.state:null,o=providerContext(`sandbox-cleanup`),c=getSessionEndWithArtifact(n.implementation);c===void 0?await n.implementation.onSessionEnd(o,a,{reason:t}):await c(o,a,{artifact:await loadSandboxPreparedArtifact({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:d,providerName:n.providerName}),reason:t}),forgetSandbox(n.providerName)},async get(){return await f,await openSession()},open:openSession,prepare(e){enqueue(e===void 0?requireOpened:()=>e(openSession))},resumeRecorded(){r!==null&&enqueue(()=>requireOpened({resumeOnly:!0}),{retry:!1})},async settle(){await f},async release(){await f,s!==void 0&&await s.catch(()=>void 0);let t=forgetOpened();a!==void 0&&c!==`session`&&(untrackActiveSandboxConnection({connection:a,providerName:a.providerName,sessionId:e.sessionId}),a=void 0),!(t===void 0||c===`session`&&!t.closable)&&(untrackActiveSandboxConnection({connection:t,providerName:t.providerName,sessionId:e.sessionId}),await t.close())},async stop(){await f;let t=await requireOpened();if(await t.stop(),forgetOpened(),!t.closable){a=t;return}untrackActiveSandboxConnection({connection:t,providerName:t.providerName,sessionId:e.sessionId})}};async function openSandbox(t,n,r,i){let a;try{a=createConnectionSession(r)}catch(t){throw await r.close?.().catch(t=>{log.warn(`failed to close a sandbox connection eve could not use`,{error:t,sessionId:e.sessionId})}),t}let o=shared(()=>r.stop()),s=once(async()=>await r.close?.()),c={closable:r.close!==void 0,close:s,async delete(e){try{await s()}finally{await t.implementation.onSessionEnd(n,i,{abortSignal:e?.abortSignal,reason:`deleted`})}},providerName:t.providerName,sandbox:withRuntimeSandboxLifecycle(a,e=>c.delete(e),()=>c.stop()),async stop(){try{await o()}finally{await s()}}};return c}}function shared(e){let t;return()=>t??=e().finally(()=>{t=void 0})}function once(e){let t;return()=>t??=e().catch(e=>{throw t=void 0,e})}export{ensureSandboxAccess};
+import{randomUUID}from"node:crypto";import{createLogger}from"#internal/logging.js";import{getRuntimeCompiledArtifactsSandboxAppRoot}from"#runtime/compiled-artifacts-source.js";import{isEveDevEnvironment}from"#internal/application/dev-environment.js";import{contextStorage}from"#context/container.js";import{resolve}from"node:path";import{resolveSandboxCacheDirectory}from"#internal/application/paths.js";import{getSandboxEnvironmentRuntime,runWithSandboxConstructorRuntime}from"#shared/sandbox-environment.js";import{buildCallbackContext,withRuntimeSandboxLifecycle}from"#context/build-callback-context.js";import{trackActiveSandboxConnection,untrackActiveSandboxConnection}from"#execution/sandbox/active-connections.js";import{isToolSessionId}from"#execution/tool-session/id.js";import{ToolSessionSandboxUnsupportedError}from"#shared/sandbox-tool-session-error.js";import{loadSandboxPreparedArtifact}from"#runtime/sandbox/prepared-artifacts.js";import{createConnectionSession}from"#execution/sandbox/session.js";import{ensureDevelopmentSandboxesPrepared}from"#execution/sandbox/development-lazy-prewarm.js";import{owningSandboxDefinition}from"#runtime/sandbox/registry.js";import{getSessionEndWithArtifact,resolvePersistedSandboxSessionState}from"#sandbox/state.js";import{isSandboxPreparedArtifact}from"#shared/sandbox-provider.js";import{SandboxSessionGoneError}from"#shared/sandbox-session-gone-error.js";import{SandboxTemplateNotProvisionedError}from"#shared/sandbox-template-error.js";const pendingSandboxStarts=new Map,log=createLogger(`execution.sandbox`);async function ensureSandboxAccess(e){let t=e.registry.sandbox,n=t===null?void 0:owningSandboxDefinition(t),r=resolvePersistedSandboxSessionState(e.state?.session,n?.kind===`independent`?getSandboxEnvironmentRuntime(n.environment):void 0),i,a,o,s,c=e.shutdownTracking??`session`,l=getRuntimeCompiledArtifactsSandboxAppRoot(e.compiledArtifactsSource)??process.cwd(),captured=()=>({session:r});if(t===null)return{async captureState(){return captured()},async end(){},async get(){return null},async open(){return null},prepare(){},async release(){},resumeRecorded(){},async settle(){},async stop(){}};let u=owningSandboxDefinition(t),d=t.inheritance?.nodeId??e.nodeId;function providerContext(t){let n=contextStorage.getStore()===void 0?{auth:{current:null,initiator:null},id:e.sessionId,turn:{id:t,sequence:0}}:buildCallbackContext().session;return{kind:isToolSessionId(e.sessionId)?`tool-session`:`session`,resolveProjectPath:e=>resolve(l,e),session:{...n,id:e.sessionId},storagePath:resolveSandboxCacheDirectory(l)}}function activeDefinition(){if(u.kind!==`independent`)throw Error(`Sandbox "${u.logicalPath}" uses defineParentSandbox(), but this agent has no parent sandbox to share. Only a declared subagent can share its parent's sandbox. Give this agent its own sandbox with defineSandbox() and an exported environment.`);return u}async function loadArtifact(t){let n=await loadSandboxPreparedArtifact({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:d,providerName:t.providerName});if(n===void 0)throw new SandboxTemplateNotProvisionedError({nodeId:d,providerName:t.providerName});return n}async function open(e,t,n,a){if(o!==void 0)throw Error("A sandbox definition can open only one sandbox. Call `environment.open()` once in the defineSandbox() selector and return that sandbox.");let s=activeDefinition();if(n!==s.environment)throw Error(`Sandbox "${s.logicalPath}" opened an environment other than the one it exports as \`environment\`. Call \`open()\` on the exported environment. A selector cannot open an environment created inside the selector or exported by another sandbox file.`);if(e!==getSandboxEnvironmentRuntime(s.environment))throw Error(`Sandbox "${s.logicalPath}" selected a different provider.`);if(r!==null)throw Error(`Sandbox "${s.logicalPath}" already opened this session's sandbox. Call \`environment.open()\` once in the defineSandbox() selector and return that sandbox.`);let c=await loadArtifact(e);return o=(async()=>{let n=await e.implementation.start(a,t,c);if(!isSandboxPreparedArtifact(n.state))throw Error(`Sandbox provider "${e.providerName}" returned non-serializable session state.`);let i=await openSandbox(e,a,n.connection,n.state);return r={generation:randomUUID(),providerName:e.providerName,state:n.state,stateProtocolVersion:e.stateProtocolVersion},i})().catch(e=>{throw o=void 0,e}),i=await o,i.sandbox}async function resumePersisted(e){if(r===null)throw Error(`Sandbox session state is missing.`);let t=getSandboxEnvironmentRuntime(activeDefinition().environment);if(r.providerName!==t.providerName)throw new SandboxSessionGoneError(`This session's sandbox was created by provider "${r.providerName}", but the agent now selects provider "${t.providerName}". eve cannot move a sandbox between providers, so the session continues in a fresh sandbox without the old sandbox's files.`);if(r.stateProtocolVersion!==t.stateProtocolVersion)throw new SandboxSessionGoneError(`Sandbox session state protocol ${r.stateProtocolVersion} is incompatible with provider "${t.providerName}" protocol ${t.stateProtocolVersion}.`);let n=await loadArtifact(t),a=r.state;return o=t.implementation.resume(e,n,a).then(n=>openSandbox(t,e,n,a)).catch(e=>{throw o=void 0,e}),i=await o,track(i),i}async function resolveOpened(t){let n=activeDefinition(),i=getSandboxEnvironmentRuntime(n.environment),a=providerContext(`sandbox-initialization`);if(a.kind===`tool-session`&&i.implementation.toolSessions!==!0)throw new ToolSessionSandboxUnsupportedError(i.providerName);if(isEveDevEnvironment()&&e.compiledArtifactsSource.kind===`disk`&&await ensureDevelopmentSandboxesPrepared({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:d,providerName:i.providerName}),r===null&&t.resumeOnly)throw Error(`This session has not recorded a sandbox to resume.`);if(r!==null)try{return await resumePersisted(a)}catch(n){if(!SandboxSessionGoneError.is(n)||t.resumeOnly)throw n;log.warn(`session sandbox is gone, starting a fresh one`,{error:n,providerName:r.providerName,sessionId:e.sessionId}),r=null}let o=[l,d,e.sessionId].join(`\0`),s=pendingSandboxStarts.get(o);for(;s!==void 0;){if(r=await s,r!==null)return await resumePersisted(a);s=pendingSandboxStarts.get(o)}let c=startOpened(a),u=c.then(()=>r,()=>null);pendingSandboxStarts.set(o,u);try{return await c}finally{pendingSandboxStarts.get(o)===u&&pendingSandboxStarts.delete(o)}}async function startOpened(e){let t=activeDefinition();try{let n=await runWithSandboxConstructorRuntime({open:({environment:t,options:n,provider:r})=>open(r,n,t,e)},async()=>t.selector({session:e.session}));if(i===void 0||n!==i.sandbox)throw Error(`Sandbox "${t.logicalPath}" must return the sandbox it opens.`)}catch(e){throw await i?.close().catch(()=>void 0),i=void 0,o=void 0,r=null,e}return track(i),i}function requireOpened(e={resumeOnly:!1}){return s===void 0&&(s=resolveOpened(e).catch(e=>{throw s=void 0,e})),s}async function openSession(){try{return(await requireOpened()).sandbox}catch(e){if(!SandboxSessionGoneError.is(e))throw e;return(await requireOpened()).sandbox}}let f=Promise.resolve();function enqueue(t,n={retry:!0}){let report=t=>{log.warn(`background sandbox preparation failed; it runs again when it is needed`,{error:t,sessionId:e.sessionId})};f=f.then(async()=>{try{await t()}catch(e){n.retry?await t().catch(report):report(e)}})}function track(t){c!==`none`&&trackActiveSandboxConnection({connection:t,providerName:t.providerName,sessionId:e.sessionId})}function forgetOpened(){let e=i;return i=void 0,o=void 0,s=void 0,e}function forgetSandbox(t){forgetOpened(),a=void 0,untrackActiveSandboxConnection({providerName:t,sessionId:e.sessionId}),r=null}return{environment:u.kind===`independent`?u.environment:void 0,async captureState(){return o!==void 0&&await o,captured()},async delete(t){if(e.ownsSandbox===!1)throw Error(`Only the owning session can delete this sandbox.`);await f;let n=await requireOpened();await n.delete(t),forgetSandbox(n.providerName)},async end(t){if(e.ownsSandbox===!1)return;await f,s!==void 0&&await s.catch(()=>void 0),await i?.close().catch(t=>{log.warn(`failed to close a sandbox connection at session end`,{error:t,sessionId:e.sessionId})});let n=getSandboxEnvironmentRuntime(activeDefinition().environment),a=r?.providerName===n.providerName&&r.stateProtocolVersion===n.stateProtocolVersion?r.state:null,o=providerContext(`sandbox-cleanup`),c=getSessionEndWithArtifact(n.implementation);c===void 0?await n.implementation.onSessionEnd(o,a,{reason:t}):await c(o,a,{artifact:await loadSandboxPreparedArtifact({compiledArtifactsSource:e.compiledArtifactsSource,nodeId:d,providerName:n.providerName}),reason:t}),forgetSandbox(n.providerName)},async get(){return await f,await openSession()},open:openSession,prepare(e){enqueue(e===void 0?requireOpened:()=>e(openSession))},resumeRecorded(){r!==null&&enqueue(()=>requireOpened({resumeOnly:!0}),{retry:!1})},async settle(){await f},async release(){await f,s!==void 0&&await s.catch(()=>void 0);let t=forgetOpened();a!==void 0&&c!==`session`&&(untrackActiveSandboxConnection({connection:a,providerName:a.providerName,sessionId:e.sessionId}),a=void 0),!(t===void 0||c===`session`&&!t.closable)&&(untrackActiveSandboxConnection({connection:t,providerName:t.providerName,sessionId:e.sessionId}),await t.close())},async stop(){await f;let t=await requireOpened();if(await t.stop(),forgetOpened(),!t.closable){a=t;return}untrackActiveSandboxConnection({connection:t,providerName:t.providerName,sessionId:e.sessionId})}};async function openSandbox(t,n,r,i){let a;try{a=createConnectionSession(r)}catch(t){throw await r.close?.().catch(t=>{log.warn(`failed to close a sandbox connection eve could not use`,{error:t,sessionId:e.sessionId})}),t}let o=shared(()=>r.stop()),s=once(async()=>await r.close?.()),c={closable:r.close!==void 0,close:s,async delete(e){try{await s()}finally{await t.implementation.onSessionEnd(n,i,{signal:e?.signal,reason:`deleted`})}},providerName:t.providerName,sandbox:withRuntimeSandboxLifecycle(a,e=>c.delete(e),()=>c.stop()),async stop(){try{await o()}finally{await s()}}};return c}}function shared(e){let t;return()=>t??=e().finally(()=>{t=void 0})}function once(e){let t;return()=>t??=e().catch(e=>{throw t=void 0,e})}export{ensureSandboxAccess};

package/dist/src/{extensions/code/extension/lib → execution/sandbox}/grep-search.d.ts

@@ -1,4 +1,4 @@
-import { type WorkspaceSandbox } from "./workspace-root.ts";
+import { type WorkspaceSandbox } from "#execution/sandbox/workspace-root.js";
 export declare const MAX_GREP_LIMIT = 200;
 export declare const MAX_GREP_COMMAND_BYTES: number;
 export declare const MAX_GREP_LINE_BYTES: number;
@@ -22,7 +22,7 @@ export interface GrepSearchResult {
     readonly path: string;
     readonly truncated: boolean;
 }
-interface GrepToolInput {
+export interface GrepToolInput {
     readonly context?: number;
     readonly glob?: string;
     readonly ignoreCase?: boolean;
@@ -43,6 +43,7 @@ export declare function buildRipgrepCommand(input: GrepCommandInput): string;
 export declare function buildPosixGrepCommand(input: GrepCommandInput): string;
 export declare function processGrepOutput(input: {
     readonly commandTruncated?: boolean;
+    readonly contextLines?: number;
     readonly limit: number;
     readonly outputMode: GrepOutputMode;
     readonly path: string;

package/dist/src/execution/sandbox/grep-search.js

@@ -0,0 +1,6 @@
+import{shellQuote}from"#execution/sandbox/shell-quote.js";import{resolveInWorkspace}from"#execution/sandbox/workspace-root.js";const MAX_GREP_LIMIT=200,MAX_GREP_COMMAND_BYTES=262144,MAX_GREP_LINE_BYTES=8192,MAX_GREP_RETURN_BYTES=65536,REGEX_META=/[\\^$.*+?()[\]{}|]/u,GREP_OUTPUT_MODES=[`files_with_matches`,`content`,`count`];function shouldUseFixedStrings(e,t){return t===!0||t!==!1&&!REGEX_META.test(e)}function effectiveOutputMode(e){return e??`files_with_matches`}function effectiveLimit(e){return Math.min(Math.max(1,e??50),200)}function assertNoParentSegments(e,t){if(t!==void 0&&t.split(/[\\/]/u).includes(`..`)||e.split(`/`).includes(`..`))throw Error(`grep path must not contain '..'`);return e}async function executeGrepSearch(e,t,n){if(e.path===`$HOME`||e.path?.startsWith(`$HOME/`)||e.path?.startsWith("${HOME}/"))throw Error(`grep is limited to the sandbox workspace; $HOME paths are not supported. Choose a workspace path or use read_file/glob for home-scoped files.`);let r=assertNoParentSegments(t.resolvePath(e.path??``),e.path),{path:i}=await resolveInWorkspace(t,r,`grep path`,n),a=effectiveOutputMode(e.outputMode),o=effectiveLimit(e.limit),s=buildSearchCommand({contextLines:e.context??0,glob:e.glob,ignoreCase:e.ignoreCase===!0,limit:o,literal:shouldUseFixedStrings(e.pattern,e.literal),outputMode:a,path:i,pattern:e.pattern}),c=await t.run({signal:n,command:s}),l=truncateUtf8(c.stdout,MAX_GREP_COMMAND_BYTES),u=l.truncated;if(c.exitCode!==0&&c.exitCode!==1&&!(c.exitCode===141&&u)||c.exitCode===1&&c.stderr.trim().length>0){let e=c.stderr.trim()||l.value.trim()||`no command output`;throw Error(`grep failed (exit ${c.exitCode}): ${truncateUtf8(e,MAX_GREP_LINE_BYTES).value}`)}return processGrepOutput({commandTruncated:u,contextLines:e.context??0,limit:o,outputMode:a,path:r,stdout:l.value})}function buildSearchCommand(e){return[`set -o pipefail`,`{`,`  if command -v rg >/dev/null 2>&1; then`,`    ${buildRipgrepCommand(e)}`,`  else`,`    ${buildPosixGrepCommand(e)}`,`  fi`,`} 2> >({ head -c ${MAX_GREP_LINE_BYTES}; cat >/dev/null; } >&2) | head -c 262145`].join(`
+`)}function buildRipgrepCommand(e){let t=[`rg`,`--hidden`,`--glob`,shellQuote(`!.git/*`)];switch(e.ignoreCase&&t.push(`--ignore-case`),e.literal&&t.push(`--fixed-strings`),e.glob!==void 0&&t.push(`--glob`,shellQuote(e.glob)),e.outputMode){case`files_with_matches`:t.push(`--files-with-matches`,`--max-count`,`1`);break;case`count`:t.push(`--count`,`--with-filename`);break;case`content`:t.push(`--line-number`,`--with-filename`,`--json`),e.contextLines>0&&t.push(`--context`,String(e.contextLines)),t.push(`--max-count`,String(e.limit+1))}return t.push(`-e`,shellQuote(e.pattern),shellQuote(e.path)),t.join(` `)}function buildPosixGrepCommand(e){let t=[`grep`,`-r`,`--exclude-dir=.git`];switch(e.ignoreCase&&t.push(`-i`),e.literal?t.push(`-F`):t.push(`-E`),e.glob!==void 0&&t.push(`--include=${shellQuote(e.glob)}`),e.outputMode){case`files_with_matches`:t.push(`-l`);break;case`count`:t.push(`-c`,`-H`);break;case`content`:t.push(`-n`,`-H`,`-Z`),e.contextLines>0&&t.push(`-C`,String(e.contextLines)),t.push(`-m`,String(e.limit+1))}return t.push(`-e`,shellQuote(e.pattern),shellQuote(e.path)),t.join(` `)}function processGrepOutput(e){let t=e.stdout.split(`
+`),n=[],r=`
+
+[Output truncated. Narrow path or glob, or lower context.]`,i=MAX_GREP_RETURN_BYTES-Buffer.byteLength(r),a=0,o=0,s=0,c,l=e.commandTruncated===!0,appendLine=e=>{let t=Buffer.byteLength(e)+(n.length===0?0:1);return a+t>i?!1:(n.push(e),a+=t,!0)};for(let r=0;r<t.length;r+=1){let i=t[r]??``;if(i.length===0&&r===t.length-1)continue;if(i===`--`){if(n.length>0&&!appendLine(i)){l=!0;break}continue}let a=i,u=e.outputMode!==`content`;if(e.outputMode===`content`){let n=normalizeContentLine(i,e.commandTruncated===!0&&r===t.length-1);if(n.skip)continue;if((e.contextLines??0)>0&&n.location!==void 0){if(c&&(c.path!==n.location.path||n.location.number>c.number+1)&&!appendLine(`--`)){l=!0;break}c=n.location}a=n.line,u=n.isMatch}let d=0;if(e.outputMode===`count`&&(d=parseCountLine(a),d===0))continue;if(s>=e.limit){l=!0;break}let f=truncateUtf8(a,MAX_GREP_LINE_BYTES);if(f.truncated&&(l=!0),!appendLine(f.value)){l=!0;break}s+=1,e.outputMode===`count`?o+=d:u&&(o+=1)}if(n.length===0)return{content:l?`[Output truncated. Narrow path or glob, or lower context.]`:`No matches found`,matchCount:0,outputMode:e.outputMode,path:e.path,truncated:l};let u=n.join(`
+`);return l&&(u+=r),{content:u,matchCount:o,outputMode:e.outputMode,path:e.path,truncated:l}}function normalizeContentLine(e,t=!1){if(e.startsWith(`{`)){let n;try{n=JSON.parse(e)}catch(n){if(t)return partialContentLine(e);throw n}if(typeof n==`object`&&n&&`type`in n&&`data`in n){if(n.type!==`match`&&n.type!==`context`)return{isMatch:!1,line:``,skip:!0};let e=n.data,t=n.type===`match`?`:`:`-`,r=(e.lines.text??Buffer.from(e.lines.bytes??``,`base64`).toString(`utf8`)).replace(/\n$/u,``),i=e.path.text??Buffer.from(e.path.bytes??``,`base64`).toString(`utf8`);return{isMatch:n.type===`match`,line:`${i}${t}${e.line_number}${t}${r}`,location:{path:i,number:e.line_number}}}}let n=e.lastIndexOf(`\0`);if(n===-1)return{isMatch:!1,line:e};let r=e.slice(0,n),i=e.slice(n+1),a=/^(\d+)([:-])(.*)$/u.exec(i);if(a===null)return{isMatch:!1,line:`${r}:${i}`};let[,o,s,c]=a;return{isMatch:s===`:`,line:`${r}${s}${o}${s}${c}`}}function partialContentLine(e){let t=/^\s*\{\s*"type"\s*:\s*"(match|context)"/u.exec(e)?.[1];if(t===void 0)return{isMatch:!1,line:``,skip:!0};let field=t=>{let n=RegExp(`"${t}"\\s*:\\s*\\{\\s*"(text|bytes)"\\s*:\\s*"((?:[^"\\\\]|\\\\.)*)`,`u`).exec(e);if(n===null)return;let r=n[2].slice(0,MAX_GREP_LINE_BYTES);for(let e=0;e<=6&&e<=r.length;e+=1)try{let t=JSON.parse(`"${r.slice(0,r.length-e)}"`);return n[1]===`bytes`?Buffer.from(t,`base64`).toString(`utf8`):t}catch{}},n=field(`path`)??`[path truncated]`,r=field(`lines`)??`[line preview truncated]`,i=/"line_number"\s*:\s*(\d+)/u.exec(e)?.[1];return{isMatch:t===`match`,line:`${n}:${i??`[position truncated]`}:${r}`}}function parseCountLine(e){let t=e.lastIndexOf(`:`);if(t===-1)return 0;let n=Number(e.slice(t+1));return Number.isFinite(n)&&n>0?n:0}function truncateUtf8(e,t){if(Buffer.byteLength(e)<=t)return{truncated:!1,value:e};let n=0,r=``;for(let i of e){let e=Buffer.byteLength(i);if(n+e>t)break;r+=i,n+=e}return{truncated:!0,value:r}}export{GREP_OUTPUT_MODES,MAX_GREP_COMMAND_BYTES,MAX_GREP_LIMIT,MAX_GREP_LINE_BYTES,MAX_GREP_RETURN_BYTES,assertNoParentSegments,buildPosixGrepCommand,buildRipgrepCommand,buildSearchCommand,effectiveLimit,effectiveOutputMode,executeGrepSearch,processGrepOutput,shouldUseFixedStrings};

package/dist/src/execution/sandbox/multiplexed-command.d.ts

@@ -13,10 +13,19 @@ interface MultiplexedCommand<Log extends {
         readonly exitCode: number;
     }>;
 }
+interface StdinCommand {
+    closeStdin(options: {
+        readonly abortSignal?: AbortSignal;
+    }): PromiseLike<void>;
+    writeStdin(data: Uint8Array, options: {
+        readonly abortSignal?: AbortSignal;
+    }): PromiseLike<void>;
+}
 /**
  * Adapts a detached command with one tagged log iterator to a sandbox process
  * with independent stdout and stderr streams. Aborting `abortSignal` kills the
- * command and rejects `wait()` and both streams.
+ * command and rejects `wait()` and both streams. `stdin`, when given, backs
+ * the process's writable `stdin` stream.
  */
 export declare function adaptMultiplexedCommandToSandboxProcess<Log extends {
     readonly data: string;
@@ -24,5 +33,6 @@ export declare function adaptMultiplexedCommandToSandboxProcess<Log extends {
     readonly abortSignal?: AbortSignal;
     readonly command: MultiplexedCommand<Log>;
     readonly getOutput: (log: Log) => OutputName;
+    readonly stdin?: StdinCommand;
 }): SandboxProcess;
 export {};

package/dist/src/execution/sandbox/multiplexed-command.js

@@ -1 +1 @@
-function createOutputChannel(){let e=!1,t;return{stream:new ReadableStream({cancel(){e=!0},start(e){t=e}}),close(){e||t.close()},enqueue(n){e||t.enqueue(n)},error(n){e||t.error(n)}}}function adaptMultiplexedCommandToSandboxProcess(e){let{abortSignal:t,command:n}=e,r=new TextEncoder,i=createOutputChannel(),a=createOutputChannel(),o={stderr:a,stdout:i},s=(async()=>{try{for await(let i of n.logs({signal:t}))o[e.getOutput(i)].enqueue(r.encode(i.data));i.close(),a.close()}catch(e){let n=t?.aborted?t.reason:e;throw i.error(n),a.error(n),n}})(),c,l,kill=()=>l??=Promise.resolve().then(()=>n.kill()),killOnAbort=()=>void kill().catch(()=>void 0),disarmKill=()=>t?.removeEventListener(`abort`,killOnAbort);return t?.aborted&&killOnAbort(),t?.addEventListener(`abort`,killOnAbort,{once:!0}),s.then(disarmKill,()=>void 0),{stderr:a.stream,stdout:i.stream,wait(){return c??=Promise.resolve().then(async()=>{let e=await n.wait({signal:t});return disarmKill(),await s,{exitCode:e.exitCode}})},kill}}export{adaptMultiplexedCommandToSandboxProcess};
+function createOutputChannel(){let e=!1,t;return{stream:new ReadableStream({cancel(){e=!0},start(e){t=e}}),close(){e||t.close()},enqueue(n){e||t.enqueue(n)},error(n){e||t.error(n)}}}function createStdinStream(e,t){let n;return new WritableStream({start(e){n=AbortSignal.any([...t,e.signal])},async write(t){await e.writeStdin(t,{abortSignal:n})},async close(){await e.closeStdin({abortSignal:n})},async abort(){let n=AbortSignal.any([...t]);n.aborted||await e.closeStdin({abortSignal:n})}})}function adaptMultiplexedCommandToSandboxProcess(e){let{abortSignal:t,command:n}=e,r=new TextEncoder,i=createOutputChannel(),a=createOutputChannel(),o={stderr:a,stdout:i},s=(async()=>{try{for await(let i of n.logs({signal:t}))o[e.getOutput(i)].enqueue(r.encode(i.data));i.close(),a.close()}catch(e){let n=t?.aborted?t.reason:e;throw i.error(n),a.error(n),n}})(),c,l,u=new AbortController,kill=()=>(u.abort(),l??=Promise.resolve().then(()=>n.kill())),killOnAbort=()=>void kill().catch(()=>void 0),disarmKill=()=>t?.removeEventListener(`abort`,killOnAbort);return t?.aborted&&killOnAbort(),t?.addEventListener(`abort`,killOnAbort,{once:!0}),s.then(disarmKill,()=>void 0),{stdin:e.stdin===void 0?void 0:createStdinStream(e.stdin,t===void 0?[u.signal]:[u.signal,t]),stderr:a.stream,stdout:i.stream,wait(){return c??=Promise.resolve().then(async()=>{let e=await n.wait({signal:t});return disarmKill(),await s,{exitCode:e.exitCode}})},kill}}export{adaptMultiplexedCommandToSandboxProcess};

package/dist/src/execution/sandbox/read-file.d.ts

@@ -15,7 +15,7 @@ export interface ReadFileResult {
     readonly content: string;
     /**
      * Set when the file is a PNG, JPEG, GIF, or WebP image or a PDF that the
-     * model reads natively. Carries no bytes, so `action.result` stays small.
+     * model reads natively. Carries no bytes, so `call.settled` stays small.
      */
     readonly file?: MediaMetadata;
     readonly nextOffset?: number;

package/dist/src/execution/sandbox/session.js

@@ -1,3 +1,3 @@
-import{bufferToStream,streamToBuffer}from"./stream-utils.js";import{posix}from"node:path";import{WORKSPACE_ROOT}from"#runtime/workspace/types.js";const SANDBOX_AGENT_ENV={AI_AGENT:`eve`};function createConnectionSession(e){let t=e.workspaceRoot??WORKSPACE_ROOT;if(!posix.isAbsolute(t))throw Error(`Sandbox connection workspaceRoot must be an absolute path, but received "${t}".`);let resolveSandboxPath=e=>posix.resolve(t,e);async function read(t){return await e.readFile({abortSignal:t.abortSignal,path:resolveSandboxPath(t.path)})}async function readBytes(e){let t=await read(e);return t===null?null:ArrayBuffer.isView(t)?Buffer.from(t):await streamToBuffer(t)}async function write(t,n){await e.writeFiles({abortSignal:t.abortSignal,files:[{content:n,path:resolveSandboxPath(t.path)}]})}async function spawn(t){return await e.spawn({abortSignal:t.abortSignal,command:t.command,env:t.env??{},workingDirectory:resolveSandboxPath(t.workingDirectory??`.`)})}let n={resolvePath:resolveSandboxPath,async run(e){let t=await spawn(e),[n,r,{exitCode:i}]=await Promise.all([collectStreamToString(t.stdout),collectStreamToString(t.stderr),t.wait()]);return{exitCode:i,stderr:r,stdout:n}},spawn,async readFile(e){let t=await read(e);return t===null||!ArrayBuffer.isView(t)?t:bufferToStream(new Uint8Array(t.buffer,t.byteOffset,t.byteLength))},readBinaryFile:e=>readBytes(e),async readTextFile(e){validateReadTextFileOptions(e);let t=await readBytes(e);return t===null?null:applyLineRange(decodeBytes(t,e.encoding??`utf-8`),e)},async writeFile(e){await write(e,await streamToBuffer(e.content))},async writeBinaryFile(e){await write(e,Buffer.from(e.content))},async writeTextFile(e){let t=e.encoding??`utf-8`;await write(e,Buffer.from(e.content,t))},async writeFiles(t){await e.writeFiles({abortSignal:t.abortSignal,files:t.files.map(e=>({content:e.content,path:resolveSandboxPath(e.path)}))})},async removePath(t){await e.removePath({abortSignal:t.abortSignal,force:t.force,path:resolveSandboxPath(t.path),recursive:t.recursive})}},r=e.extensions??{},i=Object.keys(r).filter(e=>Object.hasOwn(n,e)||e===`delete`||e===`stop`);if(i.length>0)throw Error(`Sandbox connection extensions cannot replace the session members eve provides: ${i.join(`, `)}. Rename them.`);return{...r,...n}}async function collectStreamToString(e){let t=await streamToBuffer(e);return new TextDecoder().decode(t)}function validateReadTextFileOptions(e){let{startLine:t,endLine:n}=e;if(t!==void 0&&(!Number.isInteger(t)||t<1))throw Error(`startLine must be a positive integer (1-based).`);if(n!==void 0&&(!Number.isInteger(n)||n<1))throw Error(`endLine must be a positive integer (1-based).`);if(t!==void 0&&n!==void 0&&t>n)throw Error(`startLine must not be greater than endLine.`)}function splitLinesPreservingEndings(e){let t=[],n=0;for(let r=0;r<e.length;r++)e[r]===`\r`?r+1<e.length&&e[r+1]===`
+import{bufferToStream,streamToBuffer}from"./stream-utils.js";import{posix}from"node:path";import{WORKSPACE_ROOT}from"#runtime/workspace/types.js";const SANDBOX_AGENT_ENV={AI_AGENT:`eve`};function createConnectionSession(e){let t=e.workspaceRoot??WORKSPACE_ROOT;if(!posix.isAbsolute(t))throw Error(`Sandbox connection workspaceRoot must be an absolute path, but received "${t}".`);let resolveSandboxPath=e=>posix.resolve(t,e);async function read(t){return await e.readFile({signal:t.signal,path:resolveSandboxPath(t.path)})}async function readBytes(e){let t=await read(e);return t===null?null:ArrayBuffer.isView(t)?Buffer.from(t):await streamToBuffer(t)}async function write(t,n){await e.writeFiles({signal:t.signal,files:[{content:n,path:resolveSandboxPath(t.path)}]})}async function spawn(t){let n=await e.spawn({signal:t.signal,stdin:t.stdin,command:t.command,env:t.env??{},workingDirectory:resolveSandboxPath(t.workingDirectory??`.`)});if(t.stdin===!0&&n.stdin===void 0)throw await Promise.resolve(n.kill()).catch(()=>void 0),Error("This sandbox provider does not support `stdin` on spawn.");return n}let n={resolvePath:resolveSandboxPath,async run(e){let t=await spawn(e),[n,r,{exitCode:i}]=await Promise.all([collectStreamToString(t.stdout),collectStreamToString(t.stderr),t.wait()]);return{exitCode:i,stderr:r,stdout:n}},spawn,async readFile(e){let t=await read(e);return t===null||!ArrayBuffer.isView(t)?t:bufferToStream(new Uint8Array(t.buffer,t.byteOffset,t.byteLength))},readBinaryFile:e=>readBytes(e),async readTextFile(e){validateReadTextFileOptions(e);let t=await readBytes(e);return t===null?null:applyLineRange(decodeBytes(t,e.encoding??`utf-8`),e)},async writeFile(e){await write(e,await streamToBuffer(e.content))},async writeBinaryFile(e){await write(e,Buffer.from(e.content))},async writeTextFile(e){let t=e.encoding??`utf-8`;await write(e,Buffer.from(e.content,t))},async writeFiles(t){await e.writeFiles({signal:t.signal,files:t.files.map(e=>({content:e.content,path:resolveSandboxPath(e.path)}))})},async removePath(t){await e.removePath({signal:t.signal,force:t.force,path:resolveSandboxPath(t.path),recursive:t.recursive})}},r=e.extensions??{},i=Object.keys(r).filter(e=>Object.hasOwn(n,e)||e===`delete`||e===`stop`);if(i.length>0)throw Error(`Sandbox connection extensions cannot replace the session members eve provides: ${i.join(`, `)}. Rename them.`);return{...r,...n}}async function collectStreamToString(e){let t=await streamToBuffer(e);return new TextDecoder().decode(t)}function validateReadTextFileOptions(e){let{startLine:t,endLine:n}=e;if(t!==void 0&&(!Number.isInteger(t)||t<1))throw Error(`startLine must be a positive integer (1-based).`);if(n!==void 0&&(!Number.isInteger(n)||n<1))throw Error(`endLine must be a positive integer (1-based).`);if(t!==void 0&&n!==void 0&&t>n)throw Error(`startLine must not be greater than endLine.`)}function splitLinesPreservingEndings(e){let t=[],n=0;for(let r=0;r<e.length;r++)e[r]===`\r`?r+1<e.length&&e[r+1]===`
 `?(t.push(e.slice(n,r+2)),n=r+2,r++):(t.push(e.slice(n,r+1)),n=r+1):e[r]===`
 `&&(t.push(e.slice(n,r+1)),n=r+1);return n<e.length&&t.push(e.slice(n)),t}function applyLineRange(e,t){if(t.startLine===void 0&&t.endLine===void 0)return e;let n=splitLinesPreservingEndings(e),r=n.length,i=t.startLine??1,a=Math.min(t.endLine??r,r);return i>r?``:n.slice(i-1,a).join(``)}function decodeBytes(e,t){return t===`utf-8`||t===`utf8`?new TextDecoder(`utf-8`,{fatal:!0}).decode(e):Buffer.from(e.buffer,e.byteOffset,e.byteLength).toString(t)}export{SANDBOX_AGENT_ENV,createConnectionSession};

package/dist/src/execution/sandbox/workspace-root.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The single containment check for sandbox paths that tools read or write.
+ * The workspace root differs by provider (`/workspace`, `/app`, ...), so the
+ * boundary is the real path of `resolvePath("")`, never a literal prefix.
+ */
+export interface WorkspaceSandbox {
+    resolvePath(path: string): string;
+    run(input: {
+        signal?: AbortSignal;
+        command: string;
+    }): PromiseLike<{
+        exitCode: number;
+        stderr: string;
+        stdout: string;
+    }>;
+}
+/** NUL-delimited output keeps paths that contain newlines unambiguous. */
+export declare function sandboxRealPath(sandbox: WorkspaceSandbox, path: string, label: string, abortSignal?: AbortSignal): Promise<string>;
+/**
+ * Resolves `path` (default: the workspace root) to a real path inside the real
+ * workspace. Symlinks are followed before the check, so a link cannot escape.
+ */
+export declare function resolveInWorkspace(sandbox: WorkspaceSandbox, path: string | undefined, label: string, abortSignal?: AbortSignal): Promise<{
+    readonly path: string;
+    readonly workspace: string;
+}>;
+/**
+ * An absolute directory inside the workspace (default: the workspace root).
+ * Git is not required; `validateRepositoryRoot` adds that check.
+ */
+export declare function resolveWorkspaceDirectory(sandbox: WorkspaceSandbox, root?: string): Promise<string>;

package/dist/src/execution/sandbox/workspace-root.js

@@ -0,0 +1 @@
+import{shellQuote}from"#execution/sandbox/shell-quote.js";async function sandboxRealPath(e,t,n,r){let i=await e.run({signal:r,command:`realpath -e -z -- ${shellQuote(t)}`});if(i.exitCode!==0){let e=i.stderr.trim()||i.stdout.trim()||`no command output`;throw Error(`${n} could not be resolved: ${e.slice(0,2e3)}`)}let a=i.stdout.endsWith(`\0`)?i.stdout.slice(0,-1):i.stdout;if(a.length===0||a.includes(`\0`))throw Error(`${n} returned an invalid realpath`);return a}async function resolveInWorkspace(e,t,n,r){let i=await sandboxRealPath(e,e.resolvePath(``),`sandbox workspace`,r);if(t===void 0)return{path:i,workspace:i};let a=await sandboxRealPath(e,t,n,r);if(!(i===`/`||a===i||a.startsWith(`${i}/`)))throw Error(`${n} resolves outside the workspace ${i}: ${a}`);return{path:a,workspace:i}}async function resolveWorkspaceDirectory(e,t){if(t!==void 0&&!t.startsWith(`/`))throw Error(`root must be an absolute sandbox path`);return(await resolveInWorkspace(e,t,`root`)).path}export{resolveInWorkspace,resolveWorkspaceDirectory,sandboxRealPath};

package/dist/src/execution/session/active-turn.d.ts

@@ -1,3 +1,4 @@
+import type { ControlOrigin } from "#execution/session/input-queue.js";
 import type { DeliverHookPayload, TurnCaller } from "#channel/types.js";
 import { type SteeringOptions } from "#execution/session/input-queue.js";
 import type { SessionExecutionInput } from "#execution/session/turn.js";
@@ -21,7 +22,7 @@ export type RuntimeEvent = {
     readonly kind: "timeout";
     readonly callId: string;
 }
-/** A delivery or sign-in callback was admitted; a held request may be answered. */
+/** A delivery or sign-in callback was admitted; a paused turn's request may be answered. */
  | {
     readonly kind: "input";
 } | "cancelled";
@@ -36,6 +37,7 @@ export type RuntimeEvent = {
  * or local tool execution. Both retain ordered admission at the next boundary.
  */
 export declare class ActiveTurn {
+    #private;
     private readonly admitted;
     private readonly routedToChildren;
     private readonly mappedForHeldRequest;
@@ -54,6 +56,8 @@ export declare class ActiveTurn {
     compacted: boolean;
     constructor(input: SessionExecutionInput, owner: {
         readonly caller: TurnCaller | undefined;
+        /** A clear or a compact runs, not a turn: a cancel, which stops turns, leaves it to finish. */
+        readonly control?: boolean;
         readonly principal: string;
     }, control?: TurnControl);
     private readonly signalSteering;
@@ -62,7 +66,7 @@ export declare class ActiveTurn {
     get steeringSignal(): AbortSignal;
     private resetSteering;
     /** Admits everything the pump accepted while the last step ran. */
-    admitBoundary(): Promise<void>;
+    admitBoundary(settled?: boolean): Promise<void>;
     /**
      * Steering admitted during this turn, routed to children first and coalesced.
      * The next step reads it as input, so its signal must not interrupt that
@@ -71,9 +75,9 @@ export declare class ActiveTurn {
     takeSteering(options?: SteeringOptions): Promise<DeliverHookPayload | undefined>;
     /**
      * Removes the admitted run messages the session applies at once instead of
-     * in a runtime wait, or only those of `kind`.
+     * in a runtime wait, or only those `only` accepts.
      */
-    takeBoundaryMessages(kind?: "agent-started"): WorkflowToolRunMessage[];
+    takeBoundaryMessages(only?: (message: WorkflowToolRunMessage) => boolean): WorkflowToolRunMessage[];
     /**
      * Removes the run messages read after one the session just took, as long as
      * each is one it applies as it reads it and they fit one batch. Those it
@@ -93,7 +97,7 @@ export declare class ActiveTurn {
      * responder: an approver need not be the turn's own person. Returns
      * `undefined` when no admitted delivery answers one.
      */
-    takeInputResponses(requestIds: ReadonlySet<string>): Promise<DeliverHookPayload | undefined>;
+    takeAnswers(requestIds: ReadonlySet<string>): Promise<DeliverHookPayload | undefined>;
     /** Resolves with the id of the call whose timer won, or `undefined` once inbox input is ready. */
     private waitForInboxOrTimer;
     private cancelsThisTurn;
@@ -105,6 +109,8 @@ export declare class ActiveTurn {
      * answered nothing, so its message is for the model.
      */
     private routeAdmittedToChildren;
-    /** Stops the turn, as `session.cancel()` does; a hook's `ctx.cancel()` uses it too. */
+    /** The cancel control that stopped this turn, when it named its delivery. */
+    get cancelledBy(): ControlOrigin | undefined;
+    /** Also used by hooks on workflow reports while the turn waits. */
     abort(): void;
 }

package/dist/src/execution/session/active-turn.js

@@ -1 +1 @@
-import{coalesceDeliveries}from"#harness/messages.js";import{activeTurnId,storedProjection,turnPosition}from"#harness/session-machine/view.js";import{readDurableSession}from"#execution/durable-session-read.js";import{TurnCancelledError}from"#harness/turn-cancellation.js";import{mapHeldInputResponsesStep}from"#execution/proxied-deliver-step.js";import{routeDeliverToChildren}from"#execution/route-child-delivery.js";import{admitSessionInboxPayload}from"#execution/session/admission.js";import{isSteeringDelivery,isSteeringMessage}from"#execution/session/input-queue.js";import{routeSelectedDelivery}from"#execution/session/route-selected-delivery.js";import{createTurnControl}from"#execution/session/turn-control.js";import{decodeSessionInboxPayload}from"#execution/session-inbox/protocol.js";import{runMessageBatchBudget}from"#execution/tools/workflow/messages.js";import{isAppliedRunMessage,takeLeadingAppliedRunMessages}from"#execution/session-workflow-tool-run.js";var ActiveTurn=class{admitted=new Set;routedToChildren=new Set;mappedForHeldRequest=new Set;runtimeResults=[];controller;expectedTurnId;input;identity;unsubscribe;unsubscribeDelivery;steeringController;caller;compacted=!1;constructor(e,t,n=createTurnControl()){this.controller=n.cancellation,this.steeringController=n.steering,this.input=e,this.caller=t.caller,this.identity={callerCallId:t.caller?.callId,principal:t.principal},this.expectedTurnId=activeTurnId(turnPosition(storedProjection(readDurableSession(e.cursor.sessionState).state))),this.unsubscribe=e.inbox.onInterrupt(e=>{this.cancelsThisTurn(e)&&this.abort()}),this.unsubscribeDelivery=e.inbox.onDelivery(this.signalSteering)}signalSteering=e=>{let t;try{t=decodeSessionInboxPayload(e)}catch{return}t.kind===`deliver`&&!this.input.queue.isDuplicate(t)&&isSteeringMessage(t,this.identity)&&!this.input.cursor.sessionState.hasProxyInputRequests&&this.steeringController.abort()};get signal(){return this.controller.signal}dispose(){this.unsubscribe(),this.unsubscribeDelivery()}get steeringSignal(){return this.steeringController.signal}resetSteering(){this.steeringController.signal.aborted&&(this.unsubscribeDelivery(),this.steeringController=new AbortController,this.unsubscribeDelivery=this.input.inbox.onDelivery(this.signalSteering))}async admitBoundary(){let e=this.input.inbox.drain();for(let t of e)await this.admit(t)}async takeSteering(e){let t=[];for(;;){let n=this.input.queue.takeSteering(this.admitted,this.identity,e);if(n===void 0)break;for(let e of n.sequences)this.admitted.delete(e);let r=await routeSelectedDelivery(n,this.input.cursor);if(r.kind===`cancel-turn`){this.abort();break}r.kind===`turn`&&t.push(r.delivery)}if(this.resetSteering(),t.length===0)return;let n=t.length===1?t[0]:coalesceDeliveries(t);return n.caller!==void 0&&(this.caller=n.caller),n}takeBoundaryMessages(e){let t=[],n=[];for(let r of this.runtimeResults){let i=asBoundaryMessage(r);i===void 0||e!==void 0&&i.kind!==e?n.push(r):t.push(i)}return this.runtimeResults.splice(0,this.runtimeResults.length,...n),t}takeAppliedRunMessages(){let e=runMessageBatchBudget(),t=[];for(let n=this.runtimeResults[0];n!==void 0;n=this.runtimeResults[0]){if(n===`cancelled`||n.kind!==`workflow`||!isAppliedRunMessage(n.message)||!e(n.message))return t;t.push(n.message),this.runtimeResults.shift()}return[...t,...takeLeadingAppliedRunMessages(this.input.inbox,e)]}async nextRuntimeEvent(e){for(;;){let t=await this.routeAdmittedToChildren();if(this.signal.aborted)return`cancelled`;if(t)return{kind:`steering`};let n=this.runtimeResults.shift();if(n!==void 0)return n;let r=await this.waitForInboxOrTimer(e);if(r!==void 0)return{callId:r,kind:`timeout`};let i=await this.input.inbox.next();if(i===void 0)throw Error(`Session inbox closed before runtime actions completed.`);if(await this.admit(i))return{kind:`input`}}}async takeInputResponses(e){for(let t of this.admitted){let n=this.input.queue.delivery(t);if(n===void 0)continue;let r=n.payloads.flatMap(e=>e.inputResponses??[]);if(r.length===0)continue;if(!r.some(t=>e.has(t.requestId))){if(this.mappedForHeldRequest.has(t))continue;this.mappedForHeldRequest.add(t);let r=n,i=await this.input.cursor.advance(t=>mapHeldInputResponsesStep({delivery:r,requestIds:[...e],...t}));if(i.delivery===void 0)continue;n=i.delivery}this.admitted.delete(t);let i=isSteeringDelivery(n,this.identity,{heldOnPerson:!0})?void 0:splitAnswers(n);return this.input.queue.replaceDelivery(t,i?.rest),i?.answers??n}}async waitForInboxOrTimer(e){if(e.length===0||this.input.inbox.hasPending())return;let t=this.input.inbox.whenPending().then(()=>void 0);return await Promise.race([t,...e])}cancelsThisTurn(e){return e.kind===`reset`||e.kind===`session-failure`?!0:e.kind===`cancel`?e.turnId===void 0||e.turnId===this.expectedTurnId:!1}async admit(e){let t=await admitSessionInboxPayload(e,this.input);switch(t.kind){case`delivery`:return this.admitted.add(t.admission.sequence),!0;case`runtime-action-result`:return this.runtimeResults.push({kind:`runtime-action-result`,results:t.payload.results}),!1;case`workflow`:return this.runtimeResults.push({kind:`workflow`,message:t.message}),!1;case`cancel`:return this.cancelsThisTurn(e)&&this.abort(),!1;case`consumed`:return e.kind===`authorization-callback`}}async routeAdmittedToChildren(){let e=!1;for(let t of this.admitted){if(this.routedToChildren.has(t))continue;let n=this.input.queue.delivery(t);if(n===void 0){this.admitted.delete(t);continue}this.routedToChildren.add(t);let r=await this.input.cursor.advance(e=>routeDeliverToChildren({delivery:n,...e}));if(r.kind===`cancel-turn`)return this.input.queue.replaceDelivery(t,void 0),this.admitted.delete(t),this.abort(),!1;if(this.input.queue.replaceDelivery(t,r.remainder),r.remainder===void 0){this.admitted.delete(t);continue}isSteeringMessage(r.remainder,this.identity)&&(e=!0)}return e}abort(){this.controller.signal.aborted||this.controller.abort(new TurnCancelledError)}};function asBoundaryMessage(e){if(e!==`cancelled`&&e.kind===`workflow`&&(e.message.from.taskId!==void 0||e.message.kind===`agent-started`))return e.message}function splitAnswers(e){let t=e.payloads.flatMap(e=>e.inputResponses===void 0?[]:[{inputResponses:e.inputResponses}]),n=e.payloads.flatMap(e=>{let{inputResponses:t,...n}=e;return Object.keys(n).length===0?[]:[n]});return{answers:{...e,payloads:t},rest:n.length===0?void 0:{...e,payloads:n}}}export{ActiveTurn};
+import{answersDeliveryId}from"#shared/answers-delivery-id.js";import{activeTurnId,storedProjection,turnPosition}from"#harness/session-machine/view.js";import{coalesceDeliveries,selectDeliveryPayloads}from"#harness/messages.js";import{readDurableSession}from"#execution/durable-session-read.js";import{mapHeldAnswersStep}from"#execution/proxied-deliver-step.js";import{controlDeliveryOf}from"#execution/session/control-delivery.js";import{settleControlDeliveryStep}from"#execution/session/settle-control-delivery-step.js";import{routeDeliverToChildren}from"#execution/route-child-delivery.js";import{admitSessionInboxPayload}from"#execution/session/admission.js";import{isSteeringDelivery,isSteeringMessage}from"#execution/session/input-queue.js";import{routeSelectedDelivery}from"#execution/session/route-selected-delivery.js";import{createTurnControl}from"#execution/session/turn-control.js";import{decodeSessionInboxPayload}from"#execution/session-inbox/protocol.js";import{isAgentSessionMessage,runMessageBatchBudget}from"#execution/tools/workflow/messages.js";import{isAppliedRunMessage,takeLeadingAppliedRunMessages}from"#execution/session-workflow-tool-run.js";import{TurnCancelledError}from"#harness/turn-cancellation.js";var ActiveTurn=class{admitted=new Set;routedToChildren=new Set;mappedForHeldRequest=new Set;runtimeResults=[];controller;#e;#t;expectedTurnId;input;identity;unsubscribe;unsubscribeDelivery;steeringController;caller;compacted=!1;constructor(e,t,n=createTurnControl()){this.controller=n.cancellation,this.steeringController=n.steering,this.input=e,this.caller=t.caller,this.#t=t.control===!0,this.identity={callerCallId:t.caller?.callId,principal:t.principal},this.expectedTurnId=activeTurnId(turnPosition(storedProjection(readDurableSession(e.cursor.sessionState).state))),this.unsubscribe=e.inbox.onInterrupt(e=>{this.cancelsThisTurn(e)&&this.abort()}),this.unsubscribeDelivery=e.inbox.onDelivery(this.signalSteering)}signalSteering=e=>{let t;try{t=decodeSessionInboxPayload(e)}catch{return}t.kind===`deliver`&&!this.input.queue.isDuplicate(t)&&isSteeringMessage(t,this.identity)&&!this.input.cursor.sessionState.hasProxyInputRequests&&this.steeringController.abort()};get signal(){return this.controller.signal}dispose(){this.unsubscribe(),this.unsubscribeDelivery()}get steeringSignal(){return this.steeringController.signal}resetSteering(){this.steeringController.signal.aborted&&(this.unsubscribeDelivery(),this.steeringController=new AbortController,this.unsubscribeDelivery=this.input.inbox.onDelivery(this.signalSteering))}async admitBoundary(e=!1){let t=this.input.inbox.drain();for(let n of t)await this.admit(n,e)}async takeSteering(e){let t=[];for(;;){let n=this.input.queue.takeSteering(this.admitted,this.identity,e);if(n===void 0)break;for(let e of n.sequences)this.admitted.delete(e);let r=await routeSelectedDelivery(n,this.input.cursor);if(r.kind===`cancel-turn`){this.abort();break}r.kind===`turn`&&t.push(r.delivery)}if(this.resetSteering(),t.length===0)return;let n=t.length===1?t[0]:coalesceDeliveries(t);return n.caller!==void 0&&(this.caller=n.caller),n}takeBoundaryMessages(e){let t=[],n=[];for(let r of this.runtimeResults){let i=asBoundaryMessage(r);i===void 0||e!==void 0&&!e(i)?n.push(r):t.push(i)}return this.runtimeResults.splice(0,this.runtimeResults.length,...n),t}takeAppliedRunMessages(){let e=runMessageBatchBudget(),t=[];for(let n=this.runtimeResults[0];n!==void 0;n=this.runtimeResults[0]){if(n===`cancelled`||n.kind!==`workflow`||!isAppliedRunMessage(n.message)||!e(n.message))return t;t.push(n.message),this.runtimeResults.shift()}return[...t,...takeLeadingAppliedRunMessages(this.input.inbox,e)]}async nextRuntimeEvent(e){for(;;){let t=await this.routeAdmittedToChildren();if(this.signal.aborted)return`cancelled`;if(t)return{kind:`steering`};let n=this.runtimeResults.shift();if(n!==void 0)return n;let r=await this.waitForInboxOrTimer(e);if(r!==void 0)return{callId:r,kind:`timeout`};let i=await this.input.inbox.next();if(i===void 0)throw Error(`Session inbox closed before runtime actions completed.`);if(await this.admit(i))return{kind:`input`}}}async takeAnswers(e){for(let t of this.admitted){let n=this.input.queue.delivery(t);if(n===void 0)continue;let r=n.payloads.flatMap(e=>e.answers??[]);if(r.length===0)continue;if(!r.some(t=>e.has(t.interactionId))){if(this.mappedForHeldRequest.has(t))continue;this.mappedForHeldRequest.add(t);let r=n,i=await this.input.cursor.advance(t=>mapHeldAnswersStep({delivery:r,requestIds:[...e],...t}));if(i.delivery===void 0)continue;n=i.delivery}this.admitted.delete(t);let i=isSteeringDelivery(n,this.identity,{heldOnPerson:!0})?void 0:splitAnswers(n);return this.input.queue.replaceDelivery(t,i?.rest),i?.answers??n}}async waitForInboxOrTimer(e){if(e.length===0||this.input.inbox.hasPending())return;let t=this.input.inbox.whenPending().then(()=>void 0);return await Promise.race([t,...e])}cancelsThisTurn(e){return e.kind===`reset`||e.kind===`session-failure`?!0:e.kind!==`cancel`||this.#t?!1:e.turnId===void 0||e.turnId===this.expectedTurnId}async admit(e,t=!1){let n=await admitSessionInboxPayload(e,this.input);switch(n.kind){case`delivery`:return this.admitted.add(n.admission.sequence),!0;case`runtime-action-result`:return this.runtimeResults.push({kind:`runtime-action-result`,results:n.payload.results}),!1;case`workflow`:return this.runtimeResults.push({kind:`workflow`,message:n.message}),!1;case`cancel`:if((!t||e.kind!==`cancel`)&&this.cancelsThisTurn(e)&&this.#e===void 0)this.#e??=n.origin,this.abort();else if(n.origin!==void 0){let e=controlDeliveryOf(n.origin);await this.input.cursor.advance(t=>settleControlDeliveryStep({...t,settlement:{control:e,outcome:`ignored`,source:`cancel`}}))}return!1;case`consumed`:return e.kind===`authorization-callback`}}async routeAdmittedToChildren(){let e=!1;for(let t of this.admitted){if(this.routedToChildren.has(t))continue;let n=this.input.queue.delivery(t);if(n===void 0){this.admitted.delete(t);continue}this.routedToChildren.add(t);let r=await this.input.cursor.advance(e=>routeDeliverToChildren({delivery:n,...e}));if(r.kind===`cancel-turn`)return this.input.queue.replaceDelivery(t,void 0),this.admitted.delete(t),this.abort(),!1;if(this.input.queue.replaceDelivery(t,r.remainder),r.remainder===void 0){this.admitted.delete(t);continue}isSteeringMessage(r.remainder,this.identity)&&(e=!0)}return e}get cancelledBy(){return this.#e}abort(){this.controller.signal.aborted||this.controller.abort(new TurnCancelledError)}};function asBoundaryMessage(e){if(e!==`cancelled`&&e.kind===`workflow`&&(e.message.from.taskId!==void 0||isAgentSessionMessage(e.message)))return e.message}function splitAnswers(e){let t=e.payloads.flatMap((e,t)=>e.answers===void 0?[]:[{index:t,payload:{answers:e.answers}}]),n=e.payloads.flatMap((e,t)=>{if(e.message===void 0)return[];let{answers:n,...r}=e;return[{index:t,payload:r}]}),r=selectDeliveryPayloads(e,t),i=new Set(n.map(({index:e})=>e));return{answers:{...r,deliveryMetadata:r.deliveryMetadata?.map(e=>({...e,deliveryId:i.has(t[e.payloadIndex].index)?answersDeliveryId(e.deliveryId):e.deliveryId}))},rest:n.length===0?void 0:selectDeliveryPayloads(e,n)}}export{ActiveTurn};

package/dist/src/execution/session/admission.d.ts

@@ -1,5 +1,6 @@
-import type { RuntimeActionResultHookPayload } from "#channel/types.js";
-import type { DeliveryAdmission, SessionInputQueue } from "#execution/session/input-queue.js";
+import type { SessionStateCursor } from "#execution/session/state-cursor.js";
+import type { RuntimeActionResultHookPayload, SessionControlIdentity } from "#channel/types.js";
+import type { ControlOrigin, DeliveryAdmission, SessionInputQueue } from "#execution/session/input-queue.js";
 import { type SessionInboxPayload } from "#execution/session-inbox/inbox.js";
 import type { WorkflowToolRunMessage } from "#execution/tools/workflow/messages.js";
 /** One canonical admission result, after wire decoding but before turn policy. */
@@ -8,6 +9,7 @@ type SessionAdmission = {
     readonly kind: "delivery";
 } | {
     readonly kind: "cancel";
+    readonly origin?: ControlOrigin;
 } | {
     readonly kind: "consumed";
 } | {
@@ -24,5 +26,8 @@ type SessionAdmission = {
  */
 export declare function admitSessionInboxPayload(value: SessionInboxPayload, input: {
     readonly queue: SessionInputQueue;
+    readonly cursor: SessionStateCursor;
 }): Promise<SessionAdmission>;
+/** The delivery a control arrived as. */
+export declare function controlOrigin(command: SessionControlIdentity): ControlOrigin;
 export {};

package/dist/src/execution/session/admission.js

@@ -1 +1 @@
-import{getWorkflowMetadata}from"#compiled/@workflow/core/index.js";import{isWorkflowMessage}from"#execution/session-inbox/inbox.js";import{SessionInboxPayloadError,decodeSessionInboxPayload}from"#execution/session-inbox/protocol.js";import{reportDroppedWirePayloadStep}from"#execution/report-dropped-wire-payload-step.js";async function admitSessionInboxPayload(e,t){if(e.kind===`session-failure`)throw Error(e.error);if(e.kind===`runtime-action-result`)return{kind:`runtime-action-result`,payload:e};if(isWorkflowMessage(e))return{kind:`workflow`,message:e};if(e.kind===`authorization-callback`)return t.queue.enqueueAuthorization(e.payloads),{kind:`consumed`};if(e.kind===`subagent-input-request`||e.kind===`subagent-authorization-event`)return{kind:`consumed`};let n;try{n=decodeSessionInboxPayload(e)}catch(e){if(!(e instanceof SessionInboxPayloadError))throw e;return await reportDroppedWirePayloadStep({detail:e.message,family:`session-inbox`}),{kind:`consumed`}}switch(n.kind){case`session-prewarm`:return n.expectedOwnerRunId===getWorkflowMetadata().workflowRunId&&t.queue.prepareOnDeployment(n.targetDeploymentId),{kind:`consumed`};case`deliver`:{let e=t.queue.enqueueDelivery(n);return e===void 0?{kind:`consumed`}:{admission:e,kind:`delivery`}}case`clear`:case`compact`:return t.queue.enqueueControl(n.kind),{kind:`consumed`};case`session-timeout`:return n.ownerRunId===getWorkflowMetadata().workflowRunId&&t.queue.enqueueControl(`expired`),{kind:`consumed`};case`reset`:return t.queue.enqueueControl(`reset`),{kind:`cancel`};case`cancel`:return{kind:`cancel`}}}export{admitSessionInboxPayload};
+import{getWorkflowMetadata}from"#compiled/@workflow/core/index.js";import{isWorkflowMessage}from"#execution/session-inbox/inbox.js";import{SessionInboxPayloadError,decodeSessionInboxPayload}from"#execution/session-inbox/protocol.js";import{settleDuplicateDeliveryStep}from"#execution/session/settle-duplicate-delivery-step.js";import{reportDroppedWirePayloadStep}from"#execution/report-dropped-wire-payload-step.js";async function admitSessionInboxPayload(e,t){if(e.kind===`session-failure`)throw Error(e.error);if(e.kind===`runtime-action-result`)return{kind:`runtime-action-result`,payload:e};if(isWorkflowMessage(e))return{kind:`workflow`,message:e};if(e.kind===`authorization-callback`)return t.queue.enqueueAuthorization(e.payloads),{kind:`consumed`};if(e.kind===`subagent-interaction`)return{kind:`consumed`};let n;try{n=decodeSessionInboxPayload(e)}catch(e){if(!(e instanceof SessionInboxPayloadError))throw e;return await reportDroppedWirePayloadStep({detail:e.message,family:`session-inbox`}),{kind:`consumed`}}switch(n.kind){case`session-prewarm`:return n.expectedOwnerRunId===getWorkflowMetadata().workflowRunId&&t.queue.prepareOnDeployment(n.targetDeploymentId),{kind:`consumed`};case`deliver`:{let e=t.queue.enqueueDelivery(n);return e===void 0?(await t.cursor.advance(e=>settleDuplicateDeliveryStep({...e,delivery:n})),{kind:`consumed`}):{admission:e,kind:`delivery`}}case`clear`:case`compact`:return t.queue.enqueueControl(n.kind,controlOrigin(n)),{kind:`consumed`};case`session-timeout`:return n.ownerRunId===getWorkflowMetadata().workflowRunId&&t.queue.enqueueControl(`expired`),{kind:`consumed`};case`reset`:return t.queue.enqueueControl(`reset`,controlOrigin(n)),{kind:`cancel`};case`cancel`:{let e=controlOrigin(n);return e===void 0?{kind:`cancel`}:{kind:`cancel`,origin:e}}}}function controlOrigin(e){return e.auth===void 0?{deliveryId:e.deliveryId}:{auth:e.auth,deliveryId:e.deliveryId}}export{admitSessionInboxPayload,controlOrigin};

package/dist/src/execution/session/answer-caller.d.ts

@@ -1,9 +1,9 @@
 import type { SessionAuthContext } from "#channel/types.js";
-import type { SessionStateMap, StepInput } from "#harness/types.js";
+import type { SessionStateMap, HarnessStepInput } from "#harness/types.js";
 /**
  * Answering a request does not make the responder the turn's caller. When
  * `stepInput` only answers pending requests, returns it with each approval
- * answer carrying its responder, so approval policies and the approved call
+ * answer naming its responder, so approval policies and the approved call
  * see the responder while the turn keeps its caller. Returns `undefined` when
  * the input carries anything else, such as a message or a stale answer; its
  * sender becomes the caller.
@@ -11,5 +11,5 @@ import type { SessionStateMap, StepInput } from "#harness/types.js";
 export declare function attributeAnswers(input: {
     readonly responder: SessionAuthContext | null;
     readonly state: SessionStateMap | undefined;
-    readonly stepInput: StepInput | undefined;
-}): StepInput | undefined;
+    readonly stepInput: HarnessStepInput | undefined;
+}): HarnessStepInput | undefined;

package/dist/src/execution/session/answer-caller.js

@@ -1 +1 @@
-import{openInputs}from"#protocol/session-projection.js";import{storedProjection}from"#harness/session-machine/view.js";function attributeAnswers(e){let{stepInput:t}=e,n=t?.inputResponses??[];if(t===void 0||t.message!==void 0||n.length===0)return;let r=new Map(openInputs(storedProjection(e.state)).flatMap(e=>e.taskId===void 0&&e.callId===void 0?[[e.request.requestId,e.request.kind]]:[]));if(!n.every(e=>r.has(e.requestId)))return;let i=n.filter(e=>r.get(e.requestId)===`tool-approval`),a=n.filter(e=>r.get(e.requestId)!==`tool-approval`),{inputResponses:o,...s}=t,c={...s,attributedInputResponses:[...t.attributedInputResponses??[],...i.map(t=>({auth:e.responder,response:t}))]};return a.length===0?c:{...c,inputResponses:a}}export{attributeAnswers};
+import{openRequests}from"#protocol/session-projection/reader.js";import{interactionOwner}from"#protocol/session-projection/selectors.js";import{storedProjection}from"#harness/session-machine/view.js";function attributeAnswers(e){let{stepInput:t}=e,n=t?.answers??[];if(t===void 0||t.message!==void 0||n.length===0)return;let r=storedProjection(e.state).view,i=new Map(openRequests(r).flatMap(e=>e.origin===void 0&&interactionOwner(r,e).taskId===void 0?[[e.interactionId,e.request.kind]]:[]));if(n.every(e=>i.has(e.interactionId)))return{...t,answers:n.map(t=>i.get(t.interactionId)===`approval`?{...t,responder:e.responder}:t)}}export{attributeAnswers};