niceeval 0.13.3 → 0.13.4-canary.39

package/dist/sandbox/layer.d.cts

@@ -93,6 +93,8 @@ export interface DockerSandboxResources {
     readonly cpus?: number;
     readonly memoryBytes?: number;
     readonly pidsLimit?: number;
+    /** Dedicated, control-owned storage mounted at /var/lib/docker for inner DinD. */
+    readonly dockerDataBytes?: number;
     /** 把镜像 rootfs 设为只读；需要写入的路径必须逐一声明为有界 tmpfs。 */
     readonly readOnlyRootfs?: boolean;
     readonly tmpfs?: Readonly<globalThis.Record<string, DockerSandboxTmpfsOptions>>;
@@ -113,6 +115,7 @@ export interface ManagedDockerResources extends DockerSandboxResources {
     readonly cpus: number;
     readonly memoryBytes: number;
     readonly pidsLimit: number;
+    readonly dockerDataBytes: number;
     readonly readOnlyRootfs: true;
 }
 export interface DockerSandboxReadiness {
@@ -134,6 +137,8 @@ export type DockerSandboxAccess = {
 } | {
     readonly mode: "dind";
     readonly isolation: "raw-privileged";
+    /** Required only when resources.dockerDataBytes requests control-owned storage. */
+    readonly storageProfile?: string;
 } | {
     readonly mode: "dind";
     readonly isolation: "managed-rootless";
@@ -149,6 +154,7 @@ export type DockerSandboxOptions = (DockerSandboxCommonOptions & {
     } | {
         readonly mode: "dind";
         readonly isolation: "raw-privileged";
+        readonly storageProfile?: string;
     };
     readonly resources?: DockerSandboxResources;
 }) | (DockerSandboxCommonOptions & {
@@ -173,11 +179,6 @@ export interface VercelSandboxOptions {
     /** 按序前置到受管 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md)。 */
     readonly pathPrepend?: readonly string[];
 }
-export interface LocalSandboxOptions {
-    readonly dir?: string;
-    /** 按序前置到受管 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md)。 */
-    readonly pathPrepend?: readonly string[];
-}
 export interface CustomProviderSandboxOptions {
     readonly name: string;
     readonly targetPlatform: SandboxTargetPlatform;
@@ -430,7 +431,6 @@ export interface SandboxTemplateDefinition {
 export interface BuiltinSandboxPlannerServices {
     /** 只读 control-plane 探测；测试可注入确定值或 typed failure。 */
     readonly dockerBuildPlatform: Effect.Effect<string, SandboxProviderPlanningError>;
-    readonly hostPlatform: SandboxTargetPlatform;
 }
 export interface BuiltinSandboxFactories {
     readonly dockerComposeSandbox: (options: DockerComposeSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
@@ -438,7 +438,6 @@ export interface BuiltinSandboxFactories {
     readonly dockerImageSourceLayer: (options: DockerImageSourceOptions) => SandboxLayer<"template-bearing", "prepare-only">;
     readonly e2bSandbox: (options: E2BSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
     readonly vercelSandbox: (options: VercelSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
-    readonly localSandbox: (options?: LocalSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 }
 export interface CommandOnlySandboxLayerState {
     readonly kind: "command-only";
@@ -524,10 +523,6 @@ export interface VercelProviderPlan {
     readonly lifetime: SandboxProviderLifetime;
     readonly pathPrepend: readonly string[];
 }
-export interface LocalProviderPlan {
-    readonly directory: string;
-    readonly pathPrepend: readonly string[];
-}
 export interface CustomProviderPlan {
     readonly name: string;
 }
@@ -544,7 +539,6 @@ export declare function createBuiltinSandboxFactories(services: BuiltinSandboxPl
 export declare const dockerComposeSandbox: (options: DockerComposeSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 export declare const e2bSandbox: (options: E2BSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 export declare const vercelSandbox: (options: VercelSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
-export declare const localSandbox: (options?: LocalSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 /**
  * 统一的单容器 Docker factory。Docker access用判别联合选择显式socket、raw DinD或managed DinD；
  * 宿主路径/profile只保存到私有runtime binding。本函数不连接Docker，provider接线由后续层负责。

package/dist/sandbox/layer.d.mts

@@ -93,6 +93,8 @@ export interface DockerSandboxResources {
     readonly cpus?: number;
     readonly memoryBytes?: number;
     readonly pidsLimit?: number;
+    /** Dedicated, control-owned storage mounted at /var/lib/docker for inner DinD. */
+    readonly dockerDataBytes?: number;
     /** 把镜像 rootfs 设为只读；需要写入的路径必须逐一声明为有界 tmpfs。 */
     readonly readOnlyRootfs?: boolean;
     readonly tmpfs?: Readonly<globalThis.Record<string, DockerSandboxTmpfsOptions>>;
@@ -113,6 +115,7 @@ export interface ManagedDockerResources extends DockerSandboxResources {
     readonly cpus: number;
     readonly memoryBytes: number;
     readonly pidsLimit: number;
+    readonly dockerDataBytes: number;
     readonly readOnlyRootfs: true;
 }
 export interface DockerSandboxReadiness {
@@ -134,6 +137,8 @@ export type DockerSandboxAccess = {
 } | {
     readonly mode: "dind";
     readonly isolation: "raw-privileged";
+    /** Required only when resources.dockerDataBytes requests control-owned storage. */
+    readonly storageProfile?: string;
 } | {
     readonly mode: "dind";
     readonly isolation: "managed-rootless";
@@ -149,6 +154,7 @@ export type DockerSandboxOptions = (DockerSandboxCommonOptions & {
     } | {
         readonly mode: "dind";
         readonly isolation: "raw-privileged";
+        readonly storageProfile?: string;
     };
     readonly resources?: DockerSandboxResources;
 }) | (DockerSandboxCommonOptions & {
@@ -173,11 +179,6 @@ export interface VercelSandboxOptions {
     /** 按序前置到受管 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md)。 */
     readonly pathPrepend?: readonly string[];
 }
-export interface LocalSandboxOptions {
-    readonly dir?: string;
-    /** 按序前置到受管 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md)。 */
-    readonly pathPrepend?: readonly string[];
-}
 export interface CustomProviderSandboxOptions {
     readonly name: string;
     readonly targetPlatform: SandboxTargetPlatform;
@@ -430,7 +431,6 @@ export interface SandboxTemplateDefinition {
 export interface BuiltinSandboxPlannerServices {
     /** 只读 control-plane 探测；测试可注入确定值或 typed failure。 */
     readonly dockerBuildPlatform: Effect.Effect<string, SandboxProviderPlanningError>;
-    readonly hostPlatform: SandboxTargetPlatform;
 }
 export interface BuiltinSandboxFactories {
     readonly dockerComposeSandbox: (options: DockerComposeSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
@@ -438,7 +438,6 @@ export interface BuiltinSandboxFactories {
     readonly dockerImageSourceLayer: (options: DockerImageSourceOptions) => SandboxLayer<"template-bearing", "prepare-only">;
     readonly e2bSandbox: (options: E2BSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
     readonly vercelSandbox: (options: VercelSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
-    readonly localSandbox: (options?: LocalSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 }
 export interface CommandOnlySandboxLayerState {
     readonly kind: "command-only";
@@ -524,10 +523,6 @@ export interface VercelProviderPlan {
     readonly lifetime: SandboxProviderLifetime;
     readonly pathPrepend: readonly string[];
 }
-export interface LocalProviderPlan {
-    readonly directory: string;
-    readonly pathPrepend: readonly string[];
-}
 export interface CustomProviderPlan {
     readonly name: string;
 }
@@ -544,7 +539,6 @@ export declare function createBuiltinSandboxFactories(services: BuiltinSandboxPl
 export declare const dockerComposeSandbox: (options: DockerComposeSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 export declare const e2bSandbox: (options: E2BSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 export declare const vercelSandbox: (options: VercelSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
-export declare const localSandbox: (options?: LocalSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 /**
  * 统一的单容器 Docker factory。Docker access用判别联合选择显式socket、raw DinD或managed DinD；
  * 宿主路径/profile只保存到私有runtime binding。本函数不连接Docker，provider接线由后续层负责。

package/dist/sandbox/layer.d.ts

@@ -93,6 +93,8 @@ export interface DockerSandboxResources {
     readonly cpus?: number;
     readonly memoryBytes?: number;
     readonly pidsLimit?: number;
+    /** Dedicated, control-owned storage mounted at /var/lib/docker for inner DinD. */
+    readonly dockerDataBytes?: number;
     /** 把镜像 rootfs 设为只读；需要写入的路径必须逐一声明为有界 tmpfs。 */
     readonly readOnlyRootfs?: boolean;
     readonly tmpfs?: Readonly<globalThis.Record<string, DockerSandboxTmpfsOptions>>;
@@ -113,6 +115,7 @@ export interface ManagedDockerResources extends DockerSandboxResources {
     readonly cpus: number;
     readonly memoryBytes: number;
     readonly pidsLimit: number;
+    readonly dockerDataBytes: number;
     readonly readOnlyRootfs: true;
 }
 export interface DockerSandboxReadiness {
@@ -134,6 +137,8 @@ export type DockerSandboxAccess = {
 } | {
     readonly mode: "dind";
     readonly isolation: "raw-privileged";
+    /** Required only when resources.dockerDataBytes requests control-owned storage. */
+    readonly storageProfile?: string;
 } | {
     readonly mode: "dind";
     readonly isolation: "managed-rootless";
@@ -149,6 +154,7 @@ export type DockerSandboxOptions = (DockerSandboxCommonOptions & {
     } | {
         readonly mode: "dind";
         readonly isolation: "raw-privileged";
+        readonly storageProfile?: string;
     };
     readonly resources?: DockerSandboxResources;
 }) | (DockerSandboxCommonOptions & {
@@ -173,11 +179,6 @@ export interface VercelSandboxOptions {
     /** 按序前置到受管 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md)。 */
     readonly pathPrepend?: readonly string[];
 }
-export interface LocalSandboxOptions {
-    readonly dir?: string;
-    /** 按序前置到受管 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md)。 */
-    readonly pathPrepend?: readonly string[];
-}
 export interface CustomProviderSandboxOptions {
     readonly name: string;
     readonly targetPlatform: SandboxTargetPlatform;
@@ -430,7 +431,6 @@ export interface SandboxTemplateDefinition {
 export interface BuiltinSandboxPlannerServices {
     /** 只读 control-plane 探测；测试可注入确定值或 typed failure。 */
     readonly dockerBuildPlatform: Effect.Effect<string, SandboxProviderPlanningError>;
-    readonly hostPlatform: SandboxTargetPlatform;
 }
 export interface BuiltinSandboxFactories {
     readonly dockerComposeSandbox: (options: DockerComposeSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
@@ -438,7 +438,6 @@ export interface BuiltinSandboxFactories {
     readonly dockerImageSourceLayer: (options: DockerImageSourceOptions) => SandboxLayer<"template-bearing", "prepare-only">;
     readonly e2bSandbox: (options: E2BSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
     readonly vercelSandbox: (options: VercelSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
-    readonly localSandbox: (options?: LocalSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 }
 export interface CommandOnlySandboxLayerState {
     readonly kind: "command-only";
@@ -524,10 +523,6 @@ export interface VercelProviderPlan {
     readonly lifetime: SandboxProviderLifetime;
     readonly pathPrepend: readonly string[];
 }
-export interface LocalProviderPlan {
-    readonly directory: string;
-    readonly pathPrepend: readonly string[];
-}
 export interface CustomProviderPlan {
     readonly name: string;
 }
@@ -544,7 +539,6 @@ export declare function createBuiltinSandboxFactories(services: BuiltinSandboxPl
 export declare const dockerComposeSandbox: (options: DockerComposeSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 export declare const e2bSandbox: (options: E2BSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 export declare const vercelSandbox: (options: VercelSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
-export declare const localSandbox: (options?: LocalSandboxOptions) => SandboxLayer<"template-bearing", "prepare-only">;
 /**
  * 统一的单容器 Docker factory。Docker access用判别联合选择显式socket、raw DinD或managed DinD；
  * 宿主路径/profile只保存到私有runtime binding。本函数不连接Docker，provider接线由后续层负责。

package/dist/sandbox/layer.js

@@ -21,22 +21,20 @@ const __niceevalExport8 = __niceevalCanonical["e2bSandbox"];
 export { __niceevalExport8 as e2bSandbox };
 const __niceevalExport9 = __niceevalCanonical["isSandboxLayer"];
 export { __niceevalExport9 as isSandboxLayer };
-const __niceevalExport10 = __niceevalCanonical["localSandbox"];
-export { __niceevalExport10 as localSandbox };
-const __niceevalExport11 = __niceevalCanonical["planSandboxTemplate"];
-export { __niceevalExport11 as planSandboxTemplate };
-const __niceevalExport12 = __niceevalCanonical["sandboxLayer"];
-export { __niceevalExport12 as sandboxLayer };
-const __niceevalExport13 = __niceevalCanonical["sandboxLayerStateOf"];
-export { __niceevalExport13 as sandboxLayerStateOf };
-const __niceevalExport14 = __niceevalCanonical["sandboxProviderBindingOf"];
-export { __niceevalExport14 as sandboxProviderBindingOf };
-const __niceevalExport15 = __niceevalCanonical["sandboxProviderPlan"];
-export { __niceevalExport15 as sandboxProviderPlan };
-const __niceevalExport16 = __niceevalCanonical["sandboxTemplateCommandPlanLocator"];
-export { __niceevalExport16 as sandboxTemplateCommandPlanLocator };
-const __niceevalExport17 = __niceevalCanonical["sandboxTemplateIdentity"];
-export { __niceevalExport17 as sandboxTemplateIdentity };
-const __niceevalExport18 = __niceevalCanonical["vercelSandbox"];
-export { __niceevalExport18 as vercelSandbox };
+const __niceevalExport10 = __niceevalCanonical["planSandboxTemplate"];
+export { __niceevalExport10 as planSandboxTemplate };
+const __niceevalExport11 = __niceevalCanonical["sandboxLayer"];
+export { __niceevalExport11 as sandboxLayer };
+const __niceevalExport12 = __niceevalCanonical["sandboxLayerStateOf"];
+export { __niceevalExport12 as sandboxLayerStateOf };
+const __niceevalExport13 = __niceevalCanonical["sandboxProviderBindingOf"];
+export { __niceevalExport13 as sandboxProviderBindingOf };
+const __niceevalExport14 = __niceevalCanonical["sandboxProviderPlan"];
+export { __niceevalExport14 as sandboxProviderPlan };
+const __niceevalExport15 = __niceevalCanonical["sandboxTemplateCommandPlanLocator"];
+export { __niceevalExport15 as sandboxTemplateCommandPlanLocator };
+const __niceevalExport16 = __niceevalCanonical["sandboxTemplateIdentity"];
+export { __niceevalExport16 as sandboxTemplateIdentity };
+const __niceevalExport17 = __niceevalCanonical["vercelSandbox"];
+export { __niceevalExport17 as vercelSandbox };
 //# sourceMappingURL=layer.js.map

package/dist/sandbox/ledger-paths.cjs

@@ -1,22 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_LEDGER_GIT_DIR = void 0;
-exports.registerLedgerPaths = registerLedgerPaths;
-exports.unregisterLedgerPaths = unregisterLedgerPaths;
-exports.ledgerPathsFor = ledgerPathsFor;
-/** 云 provider 的私有分类账默认 git 目录；runner 与 detached 读回共用这一口径。 */
+exports.DEFAULT_LEDGER_EXPORT_DIR = exports.DEFAULT_LEDGER_GIT_DIR = void 0;
+/** 隔离 provider 内的私有分类账路径；runner 与 detached keep 共用唯一口径。 */
 exports.DEFAULT_LEDGER_GIT_DIR = "/tmp/.niceeval-ledger";
-const overrides = new Map();
-/** provider 在创建沙箱实例时登记一份专属路径(如 local 在 create() 里调用)。 */
-function registerLedgerPaths(sandboxId, paths) {
-    overrides.set(sandboxId, paths);
-}
-/** provider 在 stop() 里注销(不影响磁盘上的目录本身——删除由调用方另行负责)。 */
-function unregisterLedgerPaths(sandboxId) {
-    overrides.delete(sandboxId);
-}
-/** ledger.ts 的读取入口:没有登记过就返回 undefined,调用方落到自己的默认常量。 */
-function ledgerPathsFor(sandboxId) {
-    return overrides.get(sandboxId);
-}
+/** 整相导出文件的 runner 私有落点，与 ledger 使用同一固定前缀。 */
+exports.DEFAULT_LEDGER_EXPORT_DIR = "/tmp/.niceeval-ledger-export";
 //# sourceMappingURL=ledger-paths.cjs.map

package/dist/sandbox/ledger-paths.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-paths.js","sourceRoot":"","sources":["ledger-paths.ts"],"names":[],"mappings":";;;AAoBA,kDAEC;AAED,sDAEC;AAED,wCAEC;AAdD,6DAA6D;AAChD,QAAA,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;AACjD,yDAAyD;AACzD,SAAgB,mBAAmB,CAAC,SAAiB,EAAE,KAAkB;IACrE,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AACD,sDAAsD;AACtD,SAAgB,qBAAqB,CAAC,SAAiB;IACnD,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AACD,uDAAuD;AACvD,SAAgB,cAAc,CAAC,SAAiB;IAC5C,OAAO,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACpC,CAAC","sourcesContent":["// 变更分类账(runner/ledger.ts)GIT_DIR / 导出目录的覆盖登记表,按 sandboxId 做键。\n//\n// 多数 provider 每次创建都是全新隔离文件系统(容器 / microVM),固定的沙箱内路径天然不会跨\n// 实例互相踩踏。宿主本身即工作树的 provider(如 local)不享有这份隔离——同一台宿主机上先后\n// 或并发跑的多个 attempt 共享同一个 /tmp,分类账若固定用同一个宿主路径,会在同机多次运行之间\n// 相互覆盖彼此的 git 索引与 HEAD。\n//\n// 这里不是在 ledger.ts 里认 provider 名分支:ledger.ts 只问「这个 sandboxId 有没有登记过覆盖\n// 路径,没有就用默认值」,登记者是谁、为什么要登记完全不需要 ledger.ts 关心(核心不出现\n// `provider == local` 分支,见 docs/architecture.md)。\nexport interface LedgerPaths {\n    /** 覆盖 runner/ledger.ts 的 GIT_DIR(私有分类账 git 目录)。 */\n    gitDir: string;\n    /** 覆盖 runner/ledger.ts 的整相导出目录。 */\n    exportDir: string;\n}\n/** 云 provider 的私有分类账默认 git 目录；runner 与 detached 读回共用这一口径。 */\nexport const DEFAULT_LEDGER_GIT_DIR = \"/tmp/.niceeval-ledger\";\nconst overrides = new Map<string, LedgerPaths>();\n/** provider 在创建沙箱实例时登记一份专属路径(如 local 在 create() 里调用)。 */\nexport function registerLedgerPaths(sandboxId: string, paths: LedgerPaths): void {\n    overrides.set(sandboxId, paths);\n}\n/** provider 在 stop() 里注销(不影响磁盘上的目录本身——删除由调用方另行负责)。 */\nexport function unregisterLedgerPaths(sandboxId: string): void {\n    overrides.delete(sandboxId);\n}\n/** ledger.ts 的读取入口:没有登记过就返回 undefined,调用方落到自己的默认常量。 */\nexport function ledgerPathsFor(sandboxId: string): LedgerPaths | undefined {\n    return overrides.get(sandboxId);\n}\n"]}
+{"version":3,"file":"ledger-paths.js","sourceRoot":"","sources":["ledger-paths.ts"],"names":[],"mappings":";;;AAAA,2DAA2D;AAC9C,QAAA,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,6CAA6C;AAChC,QAAA,yBAAyB,GAAG,8BAA8B,CAAC","sourcesContent":["/** 隔离 provider 内的私有分类账路径；runner 与 detached keep 共用唯一口径。 */\nexport const DEFAULT_LEDGER_GIT_DIR = \"/tmp/.niceeval-ledger\";\n/** 整相导出文件的 runner 私有落点，与 ledger 使用同一固定前缀。 */\nexport const DEFAULT_LEDGER_EXPORT_DIR = \"/tmp/.niceeval-ledger-export\";\n"]}

package/dist/sandbox/ledger-paths.d.cts

@@ -1,14 +1,4 @@
-export interface LedgerPaths {
-    /** 覆盖 runner/ledger.ts 的 GIT_DIR(私有分类账 git 目录)。 */
-    gitDir: string;
-    /** 覆盖 runner/ledger.ts 的整相导出目录。 */
-    exportDir: string;
-}
-/** 云 provider 的私有分类账默认 git 目录；runner 与 detached 读回共用这一口径。 */
+/** 隔离 provider 内的私有分类账路径；runner 与 detached keep 共用唯一口径。 */
 export declare const DEFAULT_LEDGER_GIT_DIR = "/tmp/.niceeval-ledger";
-/** provider 在创建沙箱实例时登记一份专属路径(如 local 在 create() 里调用)。 */
-export declare function registerLedgerPaths(sandboxId: string, paths: LedgerPaths): void;
-/** provider 在 stop() 里注销(不影响磁盘上的目录本身——删除由调用方另行负责)。 */
-export declare function unregisterLedgerPaths(sandboxId: string): void;
-/** ledger.ts 的读取入口:没有登记过就返回 undefined,调用方落到自己的默认常量。 */
-export declare function ledgerPathsFor(sandboxId: string): LedgerPaths | undefined;
+/** 整相导出文件的 runner 私有落点，与 ledger 使用同一固定前缀。 */
+export declare const DEFAULT_LEDGER_EXPORT_DIR = "/tmp/.niceeval-ledger-export";

package/dist/sandbox/ledger-paths.d.mts

@@ -1,14 +1,4 @@
-export interface LedgerPaths {
-    /** 覆盖 runner/ledger.ts 的 GIT_DIR(私有分类账 git 目录)。 */
-    gitDir: string;
-    /** 覆盖 runner/ledger.ts 的整相导出目录。 */
-    exportDir: string;
-}
-/** 云 provider 的私有分类账默认 git 目录；runner 与 detached 读回共用这一口径。 */
+/** 隔离 provider 内的私有分类账路径；runner 与 detached keep 共用唯一口径。 */
 export declare const DEFAULT_LEDGER_GIT_DIR = "/tmp/.niceeval-ledger";
-/** provider 在创建沙箱实例时登记一份专属路径(如 local 在 create() 里调用)。 */
-export declare function registerLedgerPaths(sandboxId: string, paths: LedgerPaths): void;
-/** provider 在 stop() 里注销(不影响磁盘上的目录本身——删除由调用方另行负责)。 */
-export declare function unregisterLedgerPaths(sandboxId: string): void;
-/** ledger.ts 的读取入口:没有登记过就返回 undefined,调用方落到自己的默认常量。 */
-export declare function ledgerPathsFor(sandboxId: string): LedgerPaths | undefined;
+/** 整相导出文件的 runner 私有落点，与 ledger 使用同一固定前缀。 */
+export declare const DEFAULT_LEDGER_EXPORT_DIR = "/tmp/.niceeval-ledger-export";

package/dist/sandbox/ledger-paths.d.ts

@@ -1,14 +1,4 @@
-export interface LedgerPaths {
-    /** 覆盖 runner/ledger.ts 的 GIT_DIR(私有分类账 git 目录)。 */
-    gitDir: string;
-    /** 覆盖 runner/ledger.ts 的整相导出目录。 */
-    exportDir: string;
-}
-/** 云 provider 的私有分类账默认 git 目录；runner 与 detached 读回共用这一口径。 */
+/** 隔离 provider 内的私有分类账路径；runner 与 detached keep 共用唯一口径。 */
 export declare const DEFAULT_LEDGER_GIT_DIR = "/tmp/.niceeval-ledger";
-/** provider 在创建沙箱实例时登记一份专属路径(如 local 在 create() 里调用)。 */
-export declare function registerLedgerPaths(sandboxId: string, paths: LedgerPaths): void;
-/** provider 在 stop() 里注销(不影响磁盘上的目录本身——删除由调用方另行负责)。 */
-export declare function unregisterLedgerPaths(sandboxId: string): void;
-/** ledger.ts 的读取入口:没有登记过就返回 undefined,调用方落到自己的默认常量。 */
-export declare function ledgerPathsFor(sandboxId: string): LedgerPaths | undefined;
+/** 整相导出文件的 runner 私有落点，与 ledger 使用同一固定前缀。 */
+export declare const DEFAULT_LEDGER_EXPORT_DIR = "/tmp/.niceeval-ledger-export";

package/dist/sandbox/ledger-paths.js

@@ -1,12 +1,8 @@
 import { createRequire as __niceevalCreateRequire } from "node:module";
 const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
 const __niceevalCanonical = __niceevalRequire("./ledger-paths.cjs");
-const __niceevalExport0 = __niceevalCanonical["DEFAULT_LEDGER_GIT_DIR"];
-export { __niceevalExport0 as DEFAULT_LEDGER_GIT_DIR };
-const __niceevalExport1 = __niceevalCanonical["ledgerPathsFor"];
-export { __niceevalExport1 as ledgerPathsFor };
-const __niceevalExport2 = __niceevalCanonical["registerLedgerPaths"];
-export { __niceevalExport2 as registerLedgerPaths };
-const __niceevalExport3 = __niceevalCanonical["unregisterLedgerPaths"];
-export { __niceevalExport3 as unregisterLedgerPaths };
+const __niceevalExport0 = __niceevalCanonical["DEFAULT_LEDGER_EXPORT_DIR"];
+export { __niceevalExport0 as DEFAULT_LEDGER_EXPORT_DIR };
+const __niceevalExport1 = __niceevalCanonical["DEFAULT_LEDGER_GIT_DIR"];
+export { __niceevalExport1 as DEFAULT_LEDGER_GIT_DIR };
 //# sourceMappingURL=ledger-paths.js.map

package/dist/sandbox/registry.cjs

@@ -9,7 +9,7 @@ exports.stopAllSandboxes = stopAllSandboxes;
 //
 // 中断(Ctrl+C)时,正常路径靠 Effect 的 Sample finalizer 跑 sb.stop() 停容器。但 finalizer
 // 这条路不是 100% 可靠:vsb.stop() 这类远端调用可能慢/挂,用户等不及再按一次 Ctrl+C,进程
-// 就被硬退了 —— 沙箱成了孤儿(只有本身带超时的 provider 才会自己回收它;local 这类不会)。
+// 就被硬退了 —— 沙箱成了孤儿(只有本身带超时的 provider 才会自己回收它)。
 //
 // 这里维护一份独立于 Effect 的登记表,让 cli 在「二次中断 / graceful 清理超时 / 正常返回后」
 // 都能直接、带超时地强停所有还活着的沙箱。stop 不再静默吞异常(原 `.catch(() => {})`),失败打到

package/dist/sandbox/registry.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["registry.ts"],"names":[],"mappings":";;AAiBA,0CAEC;AAED,8CAEC;AACD,4CAEC;AAMD,kCA6BC;AAKD,4CAYC;AA9ED,oBAAoB;AACpB,EAAE;AACF,0EAA0E;AAC1E,2DAA2D;AAC3D,yDAAyD;AACzD,EAAE;AACF,8DAA8D;AAC9D,8DAA8D;AAC9D,uBAAuB;AACvB,mCAAgC;AAEhC,+CAAqC;AACrC,wDAA8D;AAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;AAChC,oDAAoD;AACpD,yDAAyD;AACzD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,SAAgB,eAAe,CAAC,EAAW;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC;AACD,sDAAsD;AACtD,SAAgB,iBAAiB,CAAC,EAAW;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AACD,SAAgB,gBAAgB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC;AACrB,CAAC;AACD;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAAC,EAAW,EAAE,SAAS,GAAG,uBAAuB;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACD,iEAAiE;QACjE,4DAA4D;QAC5D,MAAM,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,UAAU,CAAC;YACtC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE;YACpB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;SAC1B,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,WAAW,CAAC;YACvB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;SACtE,CAAC,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,+DAA+D;QAC/D,oDAAoD;QACpD,IAAA,0BAAgB,EAAC;YACb,GAAG,EAAE,qBAAqB;YAC1B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,IAAA,YAAC,EAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;YAC9E,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACP,CAAC;YACO,CAAC;QACL,IAAI,OAAO;YACP,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;AACL,CAAC;AACD;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CAAC,SAAS,GAAG,uBAAuB;IACtE,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAChB,OAAO,CAAC,CAAC;IACb,IAAA,0BAAgB,EAAC;QACb,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC,MAAM,CAAC;AACtB,CAAC","sourcesContent":["// 活动沙箱登记表 + 强制清理兜底。\n//\n// 中断(Ctrl+C)时,正常路径靠 Effect 的 Sample finalizer 跑 sb.stop() 停容器。但 finalizer\n// 这条路不是 100% 可靠:vsb.stop() 这类远端调用可能慢/挂,用户等不及再按一次 Ctrl+C,进程\n// 就被硬退了 —— 沙箱成了孤儿(只有本身带超时的 provider 才会自己回收它;local 这类不会)。\n//\n// 这里维护一份独立于 Effect 的登记表,让 cli 在「二次中断 / graceful 清理超时 / 正常返回后」\n// 都能直接、带超时地强停所有还活着的沙箱。stop 不再静默吞异常(原 `.catch(() => {})`),失败打到\n// stderr,这样孤儿至少留下痕迹可查。\nimport { Effect } from \"effect\";\nimport type { Sandbox } from \"../types.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { reportDiagnostic } from \"../runner/feedback/sink.ts\";\nconst live = new Set<Sandbox>();\n// 单个 stop 的默认超时:vsb.stop() 偶发慢/挂,清理不能无限等。到点就放弃、记一笔,\n// 让流程继续走到退出 —— 没停掉的沙箱会继续运行并计费,直到 provider 自己的超时(如果有)回收它。\nconst DEFAULT_STOP_TIMEOUT_MS = 8000;\nexport function registerSandbox(sb: Sandbox): void {\n    live.add(sb);\n}\n/** 留存提交成功后把沙箱移出本次 run 的内存强清集合(不 stop——现场归持久注册表管理)。 */\nexport function unregisterSandbox(sb: Sandbox): void {\n    live.delete(sb);\n}\nexport function liveSandboxCount(): number {\n    return live.size;\n}\n/**\n * 带超时地停单个沙箱。只有真实成功才从登记表移除；失败 / 超时保留所有权，让同轮后续\n * 强清可以重试，进程退出后也仍可由 provider 元数据认领。异常打到 stderr 不再静默吞。\n * 供 Sample finalizer 与兜底强清共用,避免重复实现 stop 语义。\n */\nexport async function stopSandbox(sb: Sandbox, timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<void> {\n    let stopped = false;\n    try {\n        // 超时走 Effect Clock/Sleep:到点 timeoutFail 中断等待 fiber,不再手工维护 timer。\n        // sb.stop() 是 provider Promise 叶子,原样保留,失败/超时都不从登记表移除,供同轮重试。\n        await Effect.runPromise(Effect.tryPromise({\n            try: () => sb.stop(),\n            catch: (cause) => cause,\n        }).pipe(Effect.timeoutFail({\n            duration: timeoutMs,\n            onTimeout: () => new Error(t(\"sandbox.stopTimeout\", { timeoutMs })),\n        })));\n        stopped = true;\n    }\n    catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        // 稳定 key 不含具体 sandbox id:同一类失败(如 provider 限流导致大批 stop 超时)去重折叠成\n        // 一条永久事件、count 累加,而不是刷屏出几十行几乎相同的诊断;具体是哪个沙箱失败进 data。\n        reportDiagnostic({\n            key: \"sandbox-stop-failed\",\n            severity: \"warning\",\n            message: t(\"sandbox.stopFailed\", { id: sb.sandboxId, message: msg }).trimEnd(),\n            data: { sandboxId: sb.sandboxId, message: msg },\n        });\n    }\n    finally {\n        if (stopped)\n            live.delete(sb);\n    }\n}\n/**\n * 兜底强清:并发停掉所有还登记着的沙箱(各自带超时、各自兜错,绝不抛)。返回尝试停的数量。\n * cli 在二次中断 / graceful 清理超时 / 正常返回后调用 —— 正常跑完时登记表已空,是个 no-op。\n */\nexport async function stopAllSandboxes(timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<number> {\n    const all = [...live];\n    if (all.length === 0)\n        return 0;\n    reportDiagnostic({\n        key: \"sandbox-force-cleanup\",\n        severity: \"warning\",\n        message: t(\"sandbox.forceCleanup\", { count: all.length }).trimEnd(),\n        data: { count: all.length },\n    });\n    await Promise.allSettled(all.map((sb) => stopSandbox(sb, timeoutMs)));\n    return all.length;\n}\n"]}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["registry.ts"],"names":[],"mappings":";;AAiBA,0CAEC;AAED,8CAEC;AACD,4CAEC;AAMD,kCA6BC;AAKD,4CAYC;AA9ED,oBAAoB;AACpB,EAAE;AACF,0EAA0E;AAC1E,2DAA2D;AAC3D,8CAA8C;AAC9C,EAAE;AACF,8DAA8D;AAC9D,8DAA8D;AAC9D,uBAAuB;AACvB,mCAAgC;AAEhC,+CAAqC;AACrC,wDAA8D;AAC9D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;AAChC,oDAAoD;AACpD,yDAAyD;AACzD,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,SAAgB,eAAe,CAAC,EAAW;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACjB,CAAC;AACD,sDAAsD;AACtD,SAAgB,iBAAiB,CAAC,EAAW;IACzC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AACD,SAAgB,gBAAgB;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC;AACrB,CAAC;AACD;;;;GAIG;AACI,KAAK,UAAU,WAAW,CAAC,EAAW,EAAE,SAAS,GAAG,uBAAuB;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACD,iEAAiE;QACjE,4DAA4D;QAC5D,MAAM,eAAM,CAAC,UAAU,CAAC,eAAM,CAAC,UAAU,CAAC;YACtC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE;YACpB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;SAC1B,CAAC,CAAC,IAAI,CAAC,eAAM,CAAC,WAAW,CAAC;YACvB,QAAQ,EAAE,SAAS;YACnB,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;SACtE,CAAC,CAAC,CAAC,CAAC;QACL,OAAO,GAAG,IAAI,CAAC;IACnB,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,+DAA+D;QAC/D,oDAAoD;QACpD,IAAA,0BAAgB,EAAC;YACb,GAAG,EAAE,qBAAqB;YAC1B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,IAAA,YAAC,EAAC,oBAAoB,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;YAC9E,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE;SAClD,CAAC,CAAC;IACP,CAAC;YACO,CAAC;QACL,IAAI,OAAO;YACP,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;AACL,CAAC;AACD;;;GAGG;AACI,KAAK,UAAU,gBAAgB,CAAC,SAAS,GAAG,uBAAuB;IACtE,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAChB,OAAO,CAAC,CAAC;IACb,IAAA,0BAAgB,EAAC;QACb,GAAG,EAAE,uBAAuB;QAC5B,QAAQ,EAAE,SAAS;QACnB,OAAO,EAAE,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;QACnE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE;KAC9B,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,GAAG,CAAC,MAAM,CAAC;AACtB,CAAC","sourcesContent":["// 活动沙箱登记表 + 强制清理兜底。\n//\n// 中断(Ctrl+C)时,正常路径靠 Effect 的 Sample finalizer 跑 sb.stop() 停容器。但 finalizer\n// 这条路不是 100% 可靠:vsb.stop() 这类远端调用可能慢/挂,用户等不及再按一次 Ctrl+C,进程\n// 就被硬退了 —— 沙箱成了孤儿(只有本身带超时的 provider 才会自己回收它)。\n//\n// 这里维护一份独立于 Effect 的登记表,让 cli 在「二次中断 / graceful 清理超时 / 正常返回后」\n// 都能直接、带超时地强停所有还活着的沙箱。stop 不再静默吞异常(原 `.catch(() => {})`),失败打到\n// stderr,这样孤儿至少留下痕迹可查。\nimport { Effect } from \"effect\";\nimport type { Sandbox } from \"../types.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { reportDiagnostic } from \"../runner/feedback/sink.ts\";\nconst live = new Set<Sandbox>();\n// 单个 stop 的默认超时:vsb.stop() 偶发慢/挂,清理不能无限等。到点就放弃、记一笔,\n// 让流程继续走到退出 —— 没停掉的沙箱会继续运行并计费,直到 provider 自己的超时(如果有)回收它。\nconst DEFAULT_STOP_TIMEOUT_MS = 8000;\nexport function registerSandbox(sb: Sandbox): void {\n    live.add(sb);\n}\n/** 留存提交成功后把沙箱移出本次 run 的内存强清集合(不 stop——现场归持久注册表管理)。 */\nexport function unregisterSandbox(sb: Sandbox): void {\n    live.delete(sb);\n}\nexport function liveSandboxCount(): number {\n    return live.size;\n}\n/**\n * 带超时地停单个沙箱。只有真实成功才从登记表移除；失败 / 超时保留所有权，让同轮后续\n * 强清可以重试，进程退出后也仍可由 provider 元数据认领。异常打到 stderr 不再静默吞。\n * 供 Sample finalizer 与兜底强清共用,避免重复实现 stop 语义。\n */\nexport async function stopSandbox(sb: Sandbox, timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<void> {\n    let stopped = false;\n    try {\n        // 超时走 Effect Clock/Sleep:到点 timeoutFail 中断等待 fiber,不再手工维护 timer。\n        // sb.stop() 是 provider Promise 叶子,原样保留,失败/超时都不从登记表移除,供同轮重试。\n        await Effect.runPromise(Effect.tryPromise({\n            try: () => sb.stop(),\n            catch: (cause) => cause,\n        }).pipe(Effect.timeoutFail({\n            duration: timeoutMs,\n            onTimeout: () => new Error(t(\"sandbox.stopTimeout\", { timeoutMs })),\n        })));\n        stopped = true;\n    }\n    catch (e) {\n        const msg = e instanceof Error ? e.message : String(e);\n        // 稳定 key 不含具体 sandbox id:同一类失败(如 provider 限流导致大批 stop 超时)去重折叠成\n        // 一条永久事件、count 累加,而不是刷屏出几十行几乎相同的诊断;具体是哪个沙箱失败进 data。\n        reportDiagnostic({\n            key: \"sandbox-stop-failed\",\n            severity: \"warning\",\n            message: t(\"sandbox.stopFailed\", { id: sb.sandboxId, message: msg }).trimEnd(),\n            data: { sandboxId: sb.sandboxId, message: msg },\n        });\n    }\n    finally {\n        if (stopped)\n            live.delete(sb);\n    }\n}\n/**\n * 兜底强清:并发停掉所有还登记着的沙箱(各自带超时、各自兜错,绝不抛)。返回尝试停的数量。\n * cli 在二次中断 / graceful 清理超时 / 正常返回后调用 —— 正常跑完时登记表已空,是个 no-op。\n */\nexport async function stopAllSandboxes(timeoutMs = DEFAULT_STOP_TIMEOUT_MS): Promise<number> {\n    const all = [...live];\n    if (all.length === 0)\n        return 0;\n    reportDiagnostic({\n        key: \"sandbox-force-cleanup\",\n        severity: \"warning\",\n        message: t(\"sandbox.forceCleanup\", { count: all.length }).trimEnd(),\n        data: { count: all.length },\n    });\n    await Promise.allSettled(all.map((sb) => stopSandbox(sb, timeoutMs)));\n    return all.length;\n}\n"]}

package/dist/sandbox/runtime.cjs

@@ -10,7 +10,6 @@ exports.buildDockerfileAgentImageWithServices = buildDockerfileAgentImageWithSer
 exports.materializeDockerImageProviderPlan = materializeDockerImageProviderPlan;
 exports.materializeE2BProviderPlan = materializeE2BProviderPlan;
 exports.materializeVercelProviderPlan = materializeVercelProviderPlan;
-exports.materializeLocalProviderPlan = materializeLocalProviderPlan;
 exports.materializeCustomProviderPlan = materializeCustomProviderPlan;
 exports.materializeCustomCaseProviderPlan = materializeCustomCaseProviderPlan;
 exports.collectDockerComposeProviderBuildPreparation = collectDockerComposeProviderBuildPreparation;
@@ -79,15 +78,16 @@ function deadlineOptions(deadline) {
 function configuredLifetime(value) {
     return value._tag === "Configured" ? value.milliseconds : undefined;
 }
-async function managedContainerSession(binding, resources) {
+async function managedContainerSession(binding, resources, signal) {
     const lease = await (0, runtime_ts_1.createDockerProfileLease)(binding);
     try {
         const reservation = await (0, runtime_ts_1.acquireDockerProfileReservation)(lease, "container", {
             cpus: resources.cpus ?? 0,
             memoryBytes: resources.memoryBytes ?? 0,
             pids: resources.pidsLimit ?? 0,
+            ephemeralDiskBytes: resources.dockerDataBytes ?? 0,
             containers: 1,
-        });
+        }, signal);
         const labels = Object.freeze({
             "niceeval.profile-id": binding.profile.profileId,
             "niceeval.invocation-id": lease.invocationId,
@@ -254,10 +254,10 @@ function materializeDockerfileProviderPlan(plan, context) {
                 const { DockerSandbox, classifyProvisionError, reconcileProvision } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./docker.cjs"));
                 const managed = plan.profileBinding === undefined
                     ? undefined
-                    : yield* (0, backend_ts_1.providerBoundaryEffect)(() => managedContainerSession(plan.profileBinding, plan.resources));
+                    : yield* (0, backend_ts_1.providerBoundaryEffect)(() => managedContainerSession(plan.profileBinding, plan.resources, context.signal));
                 const provisionToken = managed?.reservation.provisionToken ?? (0, node_crypto_1.randomUUID)();
                 return yield* effect_1.Effect.gen(function* () {
-                    const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => DockerSandbox.create({
+                    const createOptions = {
                         ...deadlineOptions(context.deadline),
                         runtime: "node24",
                         image: resolved.locator,
@@ -273,7 +273,9 @@ function materializeDockerfileProviderPlan(plan, context) {
                         runIdentity: (0, run_identity_ts_1.currentRunIdentity)(),
                         ...(plan.profileBinding === undefined ? {} : {
                             dockerSocketPath: plan.profileBinding.dockerSocketPath,
-                            dns: plan.profileBinding.profile.policy.network.dns.servers,
+                            ...(plan.profileBinding.profile.policy.level === "managed-rootless/v1"
+                                ? { dns: plan.profileBinding.profile.policy.network.dns.servers }
+                                : {}),
                             managedLabels: managed?.labels,
                             rootlessAttestation: {
                                 daemonId: plan.profileBinding.daemonId,
@@ -281,14 +283,12 @@ function materializeDockerfileProviderPlan(plan, context) {
                             },
                             afterStop: managed?.finish,
                         }),
-                    })), classifyProvisionError, boundProvisionSlot(context), context.feedback, (0, backend_ts_1.providerBoundaryEffect)(() => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath)));
-                    if (managed !== undefined) {
-                        yield* (0, backend_ts_1.providerBoundaryEffect)(() => (0, runtime_ts_1.commitDockerProfileReservation)(managed.lease, managed.reservation.reservationId, {
-                            containerId: backend.sandboxId,
-                            ...(backend.managedNetworkId === undefined ? {} : { networkId: backend.managedNetworkId }),
-                            attemptId: context.evalId,
-                        }));
-                    }
+                    };
+                    const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => managed === undefined
+                        ? DockerSandbox.create(createOptions)
+                        : DockerSandbox.createControlled(createOptions, (create) => (0, runtime_ts_1.createDockerProfileContainer)(managed.lease, managed.reservation.reservationId, { ...create, attemptId: context.evalId }))), classifyProvisionError, boundProvisionSlot(context), context.feedback, managed === undefined
+                        ? (0, backend_ts_1.providerBoundaryEffect)(() => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath))
+                        : effect_1.Effect.void);
                     return wrapSingleSandbox(backend, context, { image: resolved.locator });
                 }).pipe(effect_1.Effect.onError(() => managed === undefined
                     ? effect_1.Effect.void
@@ -384,10 +384,10 @@ function materializeDockerImageProviderPlan(plan, context) {
         const { DockerSandbox, classifyProvisionError, reconcileProvision } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./docker.cjs"));
         const managed = plan.profileBinding === undefined
             ? undefined
-            : yield* (0, backend_ts_1.providerBoundaryEffect)(() => managedContainerSession(plan.profileBinding, plan.resources));
+            : yield* (0, backend_ts_1.providerBoundaryEffect)(() => managedContainerSession(plan.profileBinding, plan.resources, context.signal));
         const provisionToken = managed?.reservation.provisionToken ?? (0, node_crypto_1.randomUUID)();
         return yield* effect_1.Effect.gen(function* () {
-            const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => DockerSandbox.create({
+            const createOptions = {
                 ...deadlineOptions(context.deadline),
                 runtime: "node24",
                 image: plan.image,
@@ -403,7 +403,9 @@ function materializeDockerImageProviderPlan(plan, context) {
                 runIdentity: (0, run_identity_ts_1.currentRunIdentity)(),
                 ...(plan.profileBinding === undefined ? {} : {
                     dockerSocketPath: plan.profileBinding.dockerSocketPath,
-                    dns: plan.profileBinding.profile.policy.network.dns.servers,
+                    ...(plan.profileBinding.profile.policy.level === "managed-rootless/v1"
+                        ? { dns: plan.profileBinding.profile.policy.network.dns.servers }
+                        : {}),
                     managedLabels: managed?.labels,
                     rootlessAttestation: {
                         daemonId: plan.profileBinding.daemonId,
@@ -411,14 +413,12 @@ function materializeDockerImageProviderPlan(plan, context) {
                     },
                     afterStop: managed?.finish,
                 }),
-            })), classifyProvisionError, boundProvisionSlot(context), context.feedback, (0, backend_ts_1.providerBoundaryEffect)(() => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath)));
-            if (managed !== undefined) {
-                yield* (0, backend_ts_1.providerBoundaryEffect)(() => (0, runtime_ts_1.commitDockerProfileReservation)(managed.lease, managed.reservation.reservationId, {
-                    containerId: backend.sandboxId,
-                    ...(backend.managedNetworkId === undefined ? {} : { networkId: backend.managedNetworkId }),
-                    attemptId: context.evalId,
-                }));
-            }
+            };
+            const backend = yield* (0, retry_ts_1.withProvisionRetry)((0, backend_ts_1.providerBoundaryEffect)(() => managed === undefined
+                ? DockerSandbox.create(createOptions)
+                : DockerSandbox.createControlled(createOptions, (create) => (0, runtime_ts_1.createDockerProfileContainer)(managed.lease, managed.reservation.reservationId, { ...create, attemptId: context.evalId }))), classifyProvisionError, boundProvisionSlot(context), context.feedback, managed === undefined
+                ? (0, backend_ts_1.providerBoundaryEffect)(() => reconcileProvision(provisionToken, plan.profileBinding?.dockerSocketPath))
+                : effect_1.Effect.void);
             return wrapSingleSandbox(backend, context, { image: plan.image });
         }).pipe(effect_1.Effect.onError(() => managed === undefined
             ? effect_1.Effect.void
@@ -457,16 +457,6 @@ function materializeVercelProviderPlan(plan, context) {
         return wrapSingleSandbox(backend, context, { snapshotId: plan.snapshotId });
     }));
 }
-function materializeLocalProviderPlan(plan, context) {
-    return materializationEffect(context, effect_1.Effect.gen(function* () {
-        const { LocalSandbox } = yield* (0, backend_ts_1.providerBoundaryEffect)(() => __niceevalDynamicImport("./local.cjs"));
-        return wrapSingleSandbox(yield* (0, backend_ts_1.providerBoundaryEffect)(() => LocalSandbox.create({
-            ...deadlineOptions(context.deadline),
-            dir: plan.directory,
-            pathPrepend: plan.pathPrepend,
-        })), context, { directory: plan.directory });
-    }));
-}
 function materializeCustomProviderPlan(plan, context, create) {
     return effect_1.Effect.flatMap(create({ deadline: context.deadline, runtime: "node24", feedback: context.feedback }).pipe(effect_1.Effect.mapError((cause) => runtimeFailure(context, "sandbox.materialization-failed", cause))), (sandbox) => effect_1.Effect.try({
         try: () => wrapSingleSandbox((0, backend_ts_1.customSandboxBackend)(sandbox), context, { provider: plan.name }),
@@ -657,8 +647,8 @@ function collectDockerfileProviderBuildPreparation(plan, published, evalId) {
                         let network;
                         try {
                             reservation = await (0, runtime_ts_1.acquireDockerProfileReservation)(lease, "build", {
-                                cpus: 0, memoryBytes: 0, pids: 0, containers: 0,
-                            });
+                                cpus: 0, memoryBytes: 0, pids: 0, containers: 0, ephemeralDiskBytes: 0,
+                            }, buildContext.signal);
                             const labels = Object.freeze({
                                 "niceeval.profile-id": plan.profileBinding.profile.profileId,
                                 "niceeval.invocation-id": lease.invocationId,