niceeval 0.13.3 → 0.13.4-canary.39

package/dist/cli/record.d.cts

@@ -1,40 +0,0 @@
-import { Effect, Layer } from "effect";
-import type { RecordAttachmentMigrationTarget } from "../record/host/types.cjs";
-import { RecordAutoMigrationGitSaveRequired, RecordMigrationRequired } from "../record/reader/errors.cjs";
-import { RecordFileSystem } from "../record/platform/services.cjs";
-export type RecordCliCommand = "clean" | "migrate";
-export interface RunRecordCliCommandInput {
-    readonly command: RecordCliCommand;
-    readonly cwd: string;
-    /** An actual Record root, never a `.niceeval` parent directory. */
-    readonly record?: string;
-    readonly yes: boolean;
-}
-/** The outer CLI owns process streams and exit; this value is its pure receipt. */
-export interface RecordCliCommandOutput {
-    readonly exitCode: 0 | 1;
-    readonly stdout: string;
-    readonly stderr: string;
-}
-export declare const NodeRecordCliLive: Layer.Layer<import("../coordination/record-leases.cjs").RecordCoordination | RecordFileSystem | import("../record/platform/services.cjs").RecordEntropy | import("../record/platform/services.cjs").RecordGit, never, never>;
-export interface AutomaticRecordMigrationReceipt {
-    readonly restoreCommit: string;
-    readonly attachments: readonly RecordAttachmentMigrationTarget[];
-}
-/**
- * Preflight for ordinary CLI entry points. Every Scope is closed before the
- * next lease kind is acquired: read check -> exclusive maintenance -> caller's
- * fresh ordinary open.
- */
-export declare function ensureAutomaticRecordMigration(input: {
-    readonly cwd: string;
-    readonly record?: string;
-}): Effect.Effect<never, import("../record/index.cjs").RecordRootConstructionError, never> | Effect.Effect<Readonly<{
-    restoreCommit: string;
-    attachments: readonly RecordAttachmentMigrationTarget[];
-}> | null, import("../record/platform/errors.cjs").RecordMaintenanceBusy | import("../record/platform/errors.cjs").RecordGitCommandError | import("../record/platform/errors.cjs").RecordFileSystemError | import("../coordination/record-leases.cjs").RecordCoordinationIdentityMismatch | import("../record/reader/errors.cjs").RecordBootstrapInvalid | RecordMigrationRequired | import("../record/reader/errors.cjs").RecordFormatUnsupported | import("../record/reader/errors.cjs").RecordMigrationInterruptedState | import("../record/reader/errors.cjs").RecordMigrationPlanStale | import("../record/reader/errors.cjs").RecordMigrationGitRestoreRequired | RecordAutoMigrationGitSaveRequired | import("../record/reader/errors.cjs").RecordMigrationInvalid | import("../record/reader/errors.cjs").RecordMigrationRecoveryRequired, import("../coordination/record-leases.cjs").RecordCoordination | RecordFileSystem | import("../record/platform/services.cjs").RecordGit>;
-/**
- * Effect-native command handling for the Record maintenance surface. The
- * CLI owns the one Promise adaptation at its actual process boundary.
- */
-export declare function runRecordCliCommand(input: RunRecordCliCommandInput): Effect.Effect<RecordCliCommandOutput>;

package/dist/cli/record.d.mts

@@ -1,40 +0,0 @@
-import { Effect, Layer } from "effect";
-import type { RecordAttachmentMigrationTarget } from "../record/host/types.mjs";
-import { RecordAutoMigrationGitSaveRequired, RecordMigrationRequired } from "../record/reader/errors.mjs";
-import { RecordFileSystem } from "../record/platform/services.mjs";
-export type RecordCliCommand = "clean" | "migrate";
-export interface RunRecordCliCommandInput {
-    readonly command: RecordCliCommand;
-    readonly cwd: string;
-    /** An actual Record root, never a `.niceeval` parent directory. */
-    readonly record?: string;
-    readonly yes: boolean;
-}
-/** The outer CLI owns process streams and exit; this value is its pure receipt. */
-export interface RecordCliCommandOutput {
-    readonly exitCode: 0 | 1;
-    readonly stdout: string;
-    readonly stderr: string;
-}
-export declare const NodeRecordCliLive: Layer.Layer<import("../coordination/record-leases.mjs").RecordCoordination | RecordFileSystem | import("../record/platform/services.mjs").RecordEntropy | import("../record/platform/services.mjs").RecordGit, never, never>;
-export interface AutomaticRecordMigrationReceipt {
-    readonly restoreCommit: string;
-    readonly attachments: readonly RecordAttachmentMigrationTarget[];
-}
-/**
- * Preflight for ordinary CLI entry points. Every Scope is closed before the
- * next lease kind is acquired: read check -> exclusive maintenance -> caller's
- * fresh ordinary open.
- */
-export declare function ensureAutomaticRecordMigration(input: {
-    readonly cwd: string;
-    readonly record?: string;
-}): Effect.Effect<never, import("../record/index.mjs").RecordRootConstructionError, never> | Effect.Effect<Readonly<{
-    restoreCommit: string;
-    attachments: readonly RecordAttachmentMigrationTarget[];
-}> | null, import("../record/platform/errors.mjs").RecordMaintenanceBusy | import("../record/platform/errors.mjs").RecordGitCommandError | import("../record/platform/errors.mjs").RecordFileSystemError | import("../coordination/record-leases.mjs").RecordCoordinationIdentityMismatch | import("../record/reader/errors.mjs").RecordBootstrapInvalid | RecordMigrationRequired | import("../record/reader/errors.mjs").RecordFormatUnsupported | import("../record/reader/errors.mjs").RecordMigrationInterruptedState | import("../record/reader/errors.mjs").RecordMigrationPlanStale | import("../record/reader/errors.mjs").RecordMigrationGitRestoreRequired | RecordAutoMigrationGitSaveRequired | import("../record/reader/errors.mjs").RecordMigrationInvalid | import("../record/reader/errors.mjs").RecordMigrationRecoveryRequired, import("../coordination/record-leases.mjs").RecordCoordination | RecordFileSystem | import("../record/platform/services.mjs").RecordGit>;
-/**
- * Effect-native command handling for the Record maintenance surface. The
- * CLI owns the one Promise adaptation at its actual process boundary.
- */
-export declare function runRecordCliCommand(input: RunRecordCliCommandInput): Effect.Effect<RecordCliCommandOutput>;

package/dist/cli/record.d.ts

@@ -1,40 +0,0 @@
-import { Effect, Layer } from "effect";
-import type { RecordAttachmentMigrationTarget } from "../record/host/types.js";
-import { RecordAutoMigrationGitSaveRequired, RecordMigrationRequired } from "../record/reader/errors.js";
-import { RecordFileSystem } from "../record/platform/services.js";
-export type RecordCliCommand = "clean" | "migrate";
-export interface RunRecordCliCommandInput {
-    readonly command: RecordCliCommand;
-    readonly cwd: string;
-    /** An actual Record root, never a `.niceeval` parent directory. */
-    readonly record?: string;
-    readonly yes: boolean;
-}
-/** The outer CLI owns process streams and exit; this value is its pure receipt. */
-export interface RecordCliCommandOutput {
-    readonly exitCode: 0 | 1;
-    readonly stdout: string;
-    readonly stderr: string;
-}
-export declare const NodeRecordCliLive: Layer.Layer<import("../coordination/record-leases.js").RecordCoordination | RecordFileSystem | import("../record/platform/services.js").RecordEntropy | import("../record/platform/services.js").RecordGit, never, never>;
-export interface AutomaticRecordMigrationReceipt {
-    readonly restoreCommit: string;
-    readonly attachments: readonly RecordAttachmentMigrationTarget[];
-}
-/**
- * Preflight for ordinary CLI entry points. Every Scope is closed before the
- * next lease kind is acquired: read check -> exclusive maintenance -> caller's
- * fresh ordinary open.
- */
-export declare function ensureAutomaticRecordMigration(input: {
-    readonly cwd: string;
-    readonly record?: string;
-}): Effect.Effect<never, import("../record/index.js").RecordRootConstructionError, never> | Effect.Effect<Readonly<{
-    restoreCommit: string;
-    attachments: readonly RecordAttachmentMigrationTarget[];
-}> | null, import("../record/platform/errors.js").RecordMaintenanceBusy | import("../record/platform/errors.js").RecordGitCommandError | import("../record/platform/errors.js").RecordFileSystemError | import("../coordination/record-leases.js").RecordCoordinationIdentityMismatch | import("../record/reader/errors.js").RecordBootstrapInvalid | RecordMigrationRequired | import("../record/reader/errors.js").RecordFormatUnsupported | import("../record/reader/errors.js").RecordMigrationInterruptedState | import("../record/reader/errors.js").RecordMigrationPlanStale | import("../record/reader/errors.js").RecordMigrationGitRestoreRequired | RecordAutoMigrationGitSaveRequired | import("../record/reader/errors.js").RecordMigrationInvalid | import("../record/reader/errors.js").RecordMigrationRecoveryRequired, import("../coordination/record-leases.js").RecordCoordination | RecordFileSystem | import("../record/platform/services.js").RecordGit>;
-/**
- * Effect-native command handling for the Record maintenance surface. The
- * CLI owns the one Promise adaptation at its actual process boundary.
- */
-export declare function runRecordCliCommand(input: RunRecordCliCommandInput): Effect.Effect<RecordCliCommandOutput>;

package/dist/cli/record.js

@@ -1,10 +0,0 @@
-import { createRequire as __niceevalCreateRequire } from "node:module";
-const __niceevalRequire = __niceevalCreateRequire(import.meta.url);
-const __niceevalCanonical = __niceevalRequire("./record.cjs");
-const __niceevalExport0 = __niceevalCanonical["NodeRecordCliLive"];
-export { __niceevalExport0 as NodeRecordCliLive };
-const __niceevalExport1 = __niceevalCanonical["ensureAutomaticRecordMigration"];
-export { __niceevalExport1 as ensureAutomaticRecordMigration };
-const __niceevalExport2 = __niceevalCanonical["runRecordCliCommand"];
-export { __niceevalExport2 as runRecordCliCommand };
-//# sourceMappingURL=record.js.map

package/dist/cli/record.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"record.js","sources":[],"names":[],"mappings":""}

package/dist/sandbox/local.cjs

@@ -1,361 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.LocalSandbox = void 0;
-// Local 沙箱 provider:宿主机本地目录直接当 workdir 跑,零隔离、零仪式
-// (契约见 docs/feature/sandbox/local.md)。runCommand 按 argv 直接 spawn 宿主进程(不经 shell);
-// runShell 交给宿主 bash(与其它 provider 的 runShell 语义一致);文件 IO 走本地 fs——
-// 「沙箱」就是宿主文件系统本身,没有远端控制面、没有预制环境、没有留存。
-//
-// 变更分类账的 GIT_DIR 不能像其它 provider 那样固定在同一个宿主路径:多数 provider 每次创建都是
-// 全新隔离文件系统,固定路径天然不冲突;本地档的"沙箱"是宿主机本身,同机先后或并发跑的多个
-// attempt 共享同一个 /tmp,固定路径会在多次运行之间互相踩踏用户看不到的 git 索引。这里改用
-// mkdtemp 出的每实例私有目录,经 sandbox/ledger-paths.ts 登记给 runner/ledger.ts 消费——
-// ledger.ts 不需要认识"local"这个名字,只需要知道"这个 sandboxId 有没有登记覆盖路径"。
-const node_child_process_1 = require("node:child_process");
-const node_util_1 = require("node:util");
-const promises_1 = require("node:fs/promises");
-const node_fs_1 = require("node:fs");
-const node_os_1 = require("node:os");
-const node_path_1 = require("node:path");
-const node_crypto_1 = require("node:crypto");
-const paths_ts_1 = require("./paths.cjs");
-const deadline_ts_1 = require("./deadline.cjs");
-const local_files_ts_1 = require("./local-files.cjs");
-const download_directory_ts_1 = require("./download-directory.cjs");
-const operations_ts_1 = require("./operations.cjs");
-const backend_ts_1 = require("./backend.cjs");
-const ledger_paths_ts_1 = require("./ledger-paths.cjs");
-const index_ts_1 = require("../i18n/index.cjs");
-const managed_process_ts_1 = require("./managed-process.cjs");
-const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
-/** 从给定目录向上解析 git 仓库根;不在任何 git 仓库内时给出两条出路。 */
-async function resolveGitRoot(cwd) {
-    try {
-        const { stdout } = await execFileAsync("git", ["rev-parse", "--show-toplevel"], { cwd });
-        return stdout.trim();
-    }
-    catch {
-        throw new Error((0, index_ts_1.t)("local.notARepo"));
-    }
-}
-/** 显式 dir:相对路径按 cwd 解析;必须已存在且可写(不自动创建)。 */
-async function resolveExplicitDir(dir, cwd) {
-    const abs = (0, node_path_1.resolve)(cwd, dir);
-    try {
-        await (0, promises_1.access)(abs, node_fs_1.constants.W_OK);
-    }
-    catch (e) {
-        const err = e;
-        if (err.code === "ENOENT")
-            throw new Error((0, index_ts_1.t)("local.dirMissing", { dir: abs }));
-        throw new Error((0, index_ts_1.t)("local.dirNotWritable", { dir: abs, message: err.message }));
-    }
-    const info = await (0, promises_1.stat)(abs);
-    if (!info.isDirectory())
-        throw new Error((0, index_ts_1.t)("local.dirNotWritable", { dir: abs, message: "not a directory" }));
-    return abs;
-}
-async function resolveWorkdir(dir, cwd) {
-    return dir !== undefined ? resolveExplicitDir(dir, cwd) : resolveGitRoot(cwd);
-}
-/** argv 直接 spawn(不经 shell)与「bash -c script」共用的执行核心。 */
-function runSpawned(command, args, opts) {
-    return new Promise((resolvePromise, reject) => {
-        // detached(POSIX):超时时能杀掉整个进程组,不只是直接子进程——agent 命令常常自己再
-        // 起子进程(npm 脚本、shell 管道),只杀顶层容易留下孤儿。Windows 没有进程组这个概念,
-        // 退化成直接 kill 顶层进程。
-        const posix = process.platform !== "win32";
-        const child = (0, node_child_process_1.spawn)(command, args, { cwd: opts.cwd, env: opts.env, detached: posix });
-        let stdout = "";
-        let stderr = "";
-        let callbackChain = Promise.resolve();
-        let settled = false;
-        const killTree = () => {
-            if (posix && child.pid !== undefined) {
-                try {
-                    process.kill(-child.pid, "SIGKILL");
-                }
-                catch {
-                    child.kill("SIGKILL");
-                }
-            }
-            else {
-                child.kill("SIGKILL");
-            }
-        };
-        let termination;
-        const timer = opts.timeout === undefined ? undefined : setTimeout(() => {
-            termination = "timeout";
-            killTree();
-        }, opts.timeout);
-        const onAbort = () => {
-            termination = "abort";
-            killTree();
-        };
-        opts.signal?.addEventListener("abort", onAbort, { once: true });
-        if (opts.signal?.aborted)
-            onAbort();
-        child.stdout?.on("data", (chunk) => {
-            const text = chunk.toString("utf-8");
-            stdout += text;
-            const onStdout = opts.onStdout;
-            if (onStdout !== undefined)
-                callbackChain = callbackChain.then(() => onStdout(text));
-        });
-        child.stderr?.on("data", (chunk) => {
-            const text = chunk.toString("utf-8");
-            stderr += text;
-            const onStderr = opts.onStderr;
-            if (onStderr !== undefined)
-                callbackChain = callbackChain.then(() => onStderr(text));
-        });
-        child.on("error", (err) => {
-            if (settled)
-                return;
-            settled = true;
-            if (timer !== undefined)
-                clearTimeout(timer);
-            opts.signal?.removeEventListener("abort", onAbort);
-            reject(err);
-        });
-        child.on("close", (code, signal) => {
-            if (settled)
-                return;
-            settled = true;
-            if (timer !== undefined)
-                clearTimeout(timer);
-            opts.signal?.removeEventListener("abort", onAbort);
-            callbackChain
-                .then(() => {
-                if (termination === "abort") {
-                    reject(opts.signal?.reason ?? new DOMException("sandbox command aborted", "AbortError"));
-                    return;
-                }
-                if (termination === "timeout" && signal === "SIGKILL" && code === null && opts.timeout !== undefined) {
-                    reject(new deadline_ts_1.SandboxCommandTimeoutError((0, index_ts_1.t)("local.commandTimeout", { timeoutMs: opts.timeout }), opts.timeout, opts.explicitTimeout === true));
-                    return;
-                }
-                resolvePromise({ stdout, stderr, exitCode: code ?? 0 });
-            })
-                .catch(reject);
-        });
-    });
-}
-/**
- * Local 沙箱:宿主机的一个本地目录。实现 ../types.ts 的 Sandbox 接口。
- * 契约见 docs/feature/sandbox/local.md;实现要点见 docs/feature/sandbox/architecture.md
- * 「Local provider(宿主机,零隔离)」。
- */
-class LocalSandbox {
-    workdir;
-    otlpHost = "localhost";
-    sandboxId;
-    timeout;
-    deadlineAt;
-    ledgerBase;
-    /** factory `pathPrepend`;按声明顺序前置到宿主 PATH,省略 = 空数组。 */
-    pathPrepend;
-    capabilities = {
-        rootCommands: backend_ts_1.unsupportedBackendCapability,
-        appendLog: backend_ts_1.unsupportedBackendCapability,
-        suspend: backend_ts_1.unsupportedBackendCapability,
-        ensureLifetime: backend_ts_1.unsupportedBackendCapability,
-        setCommandDeadline: (0, backend_ts_1.supportedBackendCapability)((deadlineAt) => this.setCommandDeadline(deadlineAt)),
-        managedProcess: (0, backend_ts_1.supportedBackendCapability)((input) => this.startManagedProcess(input)),
-    };
-    async startManagedProcess(input) {
-        const [command, ...args] = input.argv;
-        const output = new managed_process_ts_1.ManagedProcessOutput();
-        const env = {
-            ...process.env,
-            ...input.env,
-            ...(this.pathPrepend.length === 0
-                ? {}
-                : { PATH: `${this.pathPrepend.join(":")}:${process.env.PATH ?? ""}` }),
-        };
-        const posix = process.platform !== "win32";
-        const child = (0, node_child_process_1.spawn)(command, args, {
-            cwd: (0, paths_ts_1.resolveSandboxPath)(this.workdir, input.cwd),
-            env,
-            detached: posix,
-            stdio: ["pipe", "pipe", "pipe"],
-        });
-        child.stdout.on("data", (bytes) => output.push({ _tag: "Stdout", bytes: new Uint8Array(bytes) }));
-        child.stderr.on("data", (bytes) => output.push({ _tag: "Stderr", bytes: new Uint8Array(bytes) }));
-        const exit = new Promise((resolve, reject) => {
-            child.once("error", (error) => { output.end(); reject(error); });
-            child.once("close", (exitCode, signal) => {
-                output.end();
-                resolve({ exitCode, ...(signal === null ? {} : { signal }) });
-            });
-        });
-        const terminate = async () => {
-            stdinState = "closing";
-            if (child.exitCode !== null || child.signalCode !== null)
-                return;
-            if (posix && child.pid !== undefined) {
-                try {
-                    process.kill(-child.pid, "SIGKILL");
-                }
-                catch {
-                    child.kill("SIGKILL");
-                }
-            }
-            else
-                child.kill("SIGKILL");
-            await exit.catch(() => undefined);
-        };
-        let stdinState = "open";
-        let closeReceipt;
-        let terminateReceipt;
-        return {
-            output,
-            writeStdin: (bytes) => new Promise((resolve, reject) => {
-                if (stdinState !== "open") {
-                    reject(new Error("managed process stdin is closed"));
-                    return;
-                }
-                child.stdin.write(bytes, (error) => error ? reject(error) : resolve());
-            }),
-            closeStdin: () => closeReceipt ??= new Promise((resolve) => {
-                stdinState = "closing";
-                child.stdin.end(() => { stdinState = "closed"; resolve(); });
-            }),
-            wait: () => exit,
-            terminate: () => terminateReceipt ??= terminate(),
-        };
-    }
-    constructor(workdir, ledgerBase, pathPrepend, timeout, deadlineAt) {
-        this.workdir = workdir;
-        this.ledgerBase = ledgerBase;
-        this.pathPrepend = pathPrepend;
-        this.timeout = timeout;
-        this.deadlineAt = deadlineAt;
-        this.sandboxId = `local-${(0, node_crypto_1.randomUUID)().slice(0, 8)}`;
-    }
-    /** 解析 workdir + 备好变更分类账的私有临时目录；Local provider 不参与 provisioning 重试。 */
-    static async create(options = {}) {
-        const workdir = await resolveWorkdir(options.dir, options.cwd ?? process.cwd());
-        const ledgerBase = await (0, promises_1.mkdtemp)((0, node_path_1.join)((0, node_os_1.tmpdir)(), "niceeval-local-ledger-"));
-        const sandbox = new LocalSandbox(workdir, ledgerBase, options.pathPrepend ?? [], options.timeout, options.deadlineAt);
-        // runner/ledger.ts 按 sandboxId 读取这份登记——本地档的"沙箱"是宿主机本身,固定的宿主路径
-        // 会在同机多次运行之间互相踩踏,每实例必须有自己的一份(见文件头注释)。
-        (0, ledger_paths_ts_1.registerLedgerPaths)(sandbox.sandboxId, {
-            gitDir: (0, node_path_1.join)(ledgerBase, "ledger.git"),
-            exportDir: (0, node_path_1.join)(ledgerBase, "export"),
-        });
-        return sandbox;
-    }
-    /** 复用下由池在每次借出时换成承接者自己的 deadline(见 sandbox/deadline.ts)。 */
-    setCommandDeadline(deadlineAt) {
-        this.deadlineAt = deadlineAt;
-    }
-    /** 宿主 env:`process.env` 叠加 `pathPrepend` 前置后的 PATH,`opts.env` 仍可覆盖任意键(含 PATH)。 */
-    hostEnv(opts) {
-        const pathBase = this.pathPrepend.length > 0
-            ? { PATH: [...this.pathPrepend, ...(process.env.PATH ?? "").split(":")].join(":") }
-            : {};
-        return { ...process.env, ...pathBase, ...opts.env };
-    }
-    async runCommand(cmd, args = [], opts = {}) {
-        if (opts.user !== undefined)
-            throw new Error((0, index_ts_1.t)("local.userUnsupported", { user: opts.user }));
-        const limit = (0, deadline_ts_1.commandLimit)(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });
-        return runSpawned(cmd, [...args], {
-            cwd: (0, paths_ts_1.resolveSandboxPath)(this.workdir, opts.cwd),
-            env: this.hostEnv(opts),
-            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),
-            explicitTimeout: limit.explicit,
-            onStdout: opts.onStdout,
-            onStderr: opts.onStderr,
-            signal: opts.signal,
-        });
-    }
-    async runShell(script, opts = {}) {
-        if (opts.user !== undefined)
-            throw new Error((0, index_ts_1.t)("local.userUnsupported", { user: opts.user }));
-        const limit = (0, deadline_ts_1.commandLimit)(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });
-        return runSpawned("bash", ["-c", script], {
-            cwd: (0, paths_ts_1.resolveSandboxPath)(this.workdir, opts.cwd),
-            env: this.hostEnv(opts),
-            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),
-            explicitTimeout: limit.explicit,
-            onStdout: opts.onStdout,
-            onStderr: opts.onStderr,
-            signal: opts.signal,
-        });
-    }
-    async runCommandOrThrow(cmd, args = [], opts = {}) {
-        return (0, operations_ts_1.successfulCommandResult)(await this.runCommand(cmd, args, opts), opts.sensitiveValues);
-    }
-    async runShellOrThrow(script, opts = {}) {
-        return (0, operations_ts_1.successfulCommandResult)(await this.runShell(script, opts), opts.sensitiveValues);
-    }
-    async readText(path) {
-        return (0, promises_1.readFile)((0, paths_ts_1.resolveSandboxPath)(this.workdir, path), "utf-8");
-    }
-    async pathExists(path) {
-        try {
-            await (0, promises_1.access)((0, paths_ts_1.resolveSandboxPath)(this.workdir, path));
-            return true;
-        }
-        catch {
-            return false;
-        }
-    }
-    async writeText(path, content) {
-        await this.writeBytes(path, Buffer.from(content, "utf-8"));
-    }
-    async writeCollectedFiles(files, targetDir) {
-        const target = (0, paths_ts_1.resolveSandboxPath)(this.workdir, targetDir);
-        for (const file of files) {
-            const dest = (0, paths_ts_1.resolveSandboxPath)(target, file.path);
-            await (0, promises_1.mkdir)((0, node_path_1.dirname)(dest), { recursive: true });
-            await (0, promises_1.writeFile)(dest, file.content);
-        }
-    }
-    async readBytes(path) {
-        return (0, promises_1.readFile)((0, paths_ts_1.resolveSandboxPath)(this.workdir, path));
-    }
-    async writeBytes(path, content) {
-        const dest = (0, paths_ts_1.resolveSandboxPath)(this.workdir, path);
-        await (0, promises_1.mkdir)((0, node_path_1.dirname)(dest), { recursive: true });
-        await (0, promises_1.writeFile)(dest, content);
-    }
-    async uploadFile(source, targetPath) {
-        await this.writeBytes(targetPath, await (0, promises_1.readFile)((0, paths_ts_1.resolveLocalPath)(undefined, source)));
-    }
-    async uploadDirectory(sourceDir, targetDir, opts = {}) {
-        const files = await (0, local_files_ts_1.collectLocalFiles)((0, paths_ts_1.resolveLocalPath)(undefined, sourceDir), opts.ignore);
-        await this.writeCollectedFiles(files, targetDir);
-    }
-    async downloadFile(sourcePath, target) {
-        const destination = (0, paths_ts_1.resolveLocalPath)(undefined, target);
-        await (0, promises_1.mkdir)((0, node_path_1.dirname)(destination), { recursive: true });
-        await (0, promises_1.writeFile)(destination, await this.readBytes(sourcePath));
-    }
-    /**
-     * 与 vercel/e2b 共用同一套「find 列路径 + 逐文件读取」模板(见 download-directory.ts):
-     * 复用是为了让 ignore 的 basename 剪除语义与落盘行为在三个 provider 间保持逐字节一致,
-     * 不是本地档做不了更直接的 fs 递归拷贝——用同一份实现,行为差异这个物种直接不存在。
-     */
-    async downloadDirectory(sourceDir, targetDir, opts = {}) {
-        const remoteDir = (0, paths_ts_1.resolveSandboxPath)(this.workdir, sourceDir);
-        await (0, download_directory_ts_1.downloadDirectoryByList)({
-            localDir: (0, paths_ts_1.resolveLocalPath)(undefined, targetDir),
-            ignore: opts.ignore ?? [],
-            runShell: (script) => this.runShell(script, { cwd: remoteDir }),
-            readOne: (relPath) => this.readBytes(`${remoteDir}/${relPath}`),
-        });
-    }
-    /**
-     * 只清 runner 私有资源(分类账的私有 GIT_DIR 临时目录),不动工作树任何文件——本地档从不
-     * 销毁"沙箱",因为宿主机本身不是可销毁的资源(见 docs/feature/sandbox/local.md「只观察,不还原」)。
-     */
-    async stop() {
-        (0, ledger_paths_ts_1.unregisterLedgerPaths)(this.sandboxId);
-        await (0, promises_1.rm)(this.ledgerBase, { recursive: true, force: true }).catch(() => { });
-    }
-}
-exports.LocalSandbox = LocalSandbox;
-//# sourceMappingURL=local.cjs.map

package/dist/sandbox/local.cjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["local.ts"],"names":[],"mappings":";;;AAAA,iDAAiD;AACjD,iFAAiF;AACjF,kEAAkE;AAClE,sCAAsC;AACtC,EAAE;AACF,gEAAgE;AAChE,gDAAgD;AAChD,wDAAwD;AACxD,wEAAwE;AACxE,4DAA4D;AAC5D,2DAAqD;AACrD,yCAAsC;AACtC,+CAAsH;AACtH,qCAAmD;AACnD,qCAAiC;AACjC,yCAAkE;AAClE,6CAAyC;AAEzC,yCAAkE;AAClE,+CAAyE;AACzE,qDAA8E;AAC9E,mEAAkE;AAClE,mDAA0D;AAC1D,6CAAsH;AACtH,uDAA+E;AAC/E,+CAAqC;AACrC,6DAA4D;AAC5D,MAAM,aAAa,GAAG,IAAA,qBAAS,EAAC,6BAAQ,CAAC,CAAC;AAoB1C,6CAA6C;AAC7C,KAAK,UAAU,cAAc,CAAC,GAAW;IACrC,IAAI,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,gBAAgB,CAAC,CAAC,CAAC;IACzC,CAAC;AACL,CAAC;AACD,2CAA2C;AAC3C,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,GAAW;IACtD,MAAM,GAAG,GAAG,IAAA,mBAAW,EAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC;QACD,MAAM,IAAA,iBAAM,EAAC,GAAG,EAAE,mBAAW,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,CAAC,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,CAA0B,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YACrB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QACnB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,GAAG,CAAC;AACf,CAAC;AACD,KAAK,UAAU,cAAc,CAAC,GAAuB,EAAE,GAAW;IAC9D,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAClF,CAAC;AAWD,uDAAuD;AACvD,SAAS,UAAU,CAAC,OAAe,EAAE,IAAc,EAAE,IAAe;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,EAAE;QAC1C,sDAAsD;QACtD,sDAAsD;QACtD,mBAAmB;QACnB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;QACtF,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,aAAa,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,QAAQ,GAAG,GAAS,EAAE;YACxB,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;gBACD,MAAM,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;YACL,CAAC;iBACI,CAAC;gBACF,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,CAAC;QACL,CAAC,CAAC;QACF,IAAI,WAA4C,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;YACnE,WAAW,GAAG,SAAS,CAAC;YACxB,QAAQ,EAAE,CAAC;QACf,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACjB,MAAM,OAAO,GAAG,GAAS,EAAE;YACvB,WAAW,GAAG,OAAO,CAAC;YACtB,QAAQ,EAAE,CAAC;QACf,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YACpB,OAAO,EAAE,CAAC;QACd,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,QAAQ,KAAK,SAAS;gBACtB,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACvC,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,IAAI,IAAI,CAAC;YACf,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,QAAQ,KAAK,SAAS;gBACtB,aAAa,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACtB,IAAI,OAAO;gBACP,OAAO;YACX,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAC/B,IAAI,OAAO;gBACP,OAAO;YACX,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,KAAK,SAAS;gBACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACxB,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,aAAa;iBACR,IAAI,CAAC,GAAG,EAAE;gBACX,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,YAAY,CAAC,yBAAyB,EAAE,YAAY,CAAC,CAAC,CAAC;oBACzF,OAAO;gBACX,CAAC;gBACD,IAAI,WAAW,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;oBACnG,MAAM,CAAC,IAAI,wCAA0B,CAAC,IAAA,YAAC,EAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC;oBAC5I,OAAO;gBACX,CAAC;gBACD,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC,CAAC;iBACG,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AACD;;;;GAIG;AACH,MAAa,YAAY;IACZ,OAAO,CAAS;IAChB,QAAQ,GAAG,WAAW,CAAC;IACvB,SAAS,CAAS;IACV,OAAO,CAAU;IAC1B,UAAU,CAAU;IACX,UAAU,CAAS;IACpC,sDAAsD;IACrC,WAAW,CAAoB;IACvC,YAAY,GAAG;QACpB,YAAY,EAAE,yCAA4B;QAC1C,SAAS,EAAE,yCAA4B;QACvC,OAAO,EAAE,yCAA4B;QACrC,cAAc,EAAE,yCAA4B;QAC5C,kBAAkB,EAAE,IAAA,uCAA0B,EAAC,CAAC,UAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC5G,cAAc,EAAE,IAAA,uCAA0B,EAAC,CAAC,KAA0B,EAAE,EAAE,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;KAC9G,CAAC;IACM,KAAK,CAAC,mBAAmB,CAAC,KAA0B;QACxD,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;QACtC,MAAM,MAAM,GAAG,IAAI,yCAAoB,EAAE,CAAC;QAC1C,MAAM,GAAG,GAAsB;YAC3B,GAAG,OAAO,CAAC,GAAG;YACd,GAAG,KAAK,CAAC,GAAG;YACZ,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;gBAC7B,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC;SAC7E,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3C,MAAM,KAAK,GAAG,IAAA,0BAAK,EAAC,OAAO,EAAE,IAAI,EAAE;YAC/B,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC;YAChD,GAAG;YACH,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,IAAI,OAAO,CAA2C,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACrC,MAAM,CAAC,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;YAClE,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;YACxC,UAAU,GAAG,SAAS,CAAC;YACvB,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI;gBACpD,OAAO;YACX,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACD,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBACxC,CAAC;gBACD,MAAM,CAAC;oBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,CAAC;YACL,CAAC;;gBAEG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC,CAAC;QACF,IAAI,UAAU,GAAkC,MAAM,CAAC;QACvD,IAAI,YAAuC,CAAC;QAC5C,IAAI,gBAA2C,CAAC;QAChD,OAAO;YACH,MAAM;YACN,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACzD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;oBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBACrD,OAAO;gBACX,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3E,CAAC,CAAC;YACF,UAAU,EAAE,GAAG,EAAE,CAAC,YAAY,KAAK,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC7D,UAAU,GAAG,SAAS,CAAC;gBACvB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC;YACF,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI;YAChB,SAAS,EAAE,GAAG,EAAE,CAAC,gBAAgB,KAAK,SAAS,EAAE;SACpD,CAAC;IACN,CAAC;IACD,YAAoB,OAAe,EAAE,UAAkB,EAAE,WAA8B,EAAE,OAAgB,EAAE,UAAmB;QAC1H,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACzD,CAAC;IACD,sEAAsE;IACtE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAA+B,EAAE;QACjD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChF,MAAM,UAAU,GAAG,MAAM,IAAA,kBAAO,EAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,IAAI,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtH,8DAA8D;QAC9D,sCAAsC;QACtC,IAAA,qCAAmB,EAAC,OAAO,CAAC,SAAS,EAAE;YACnC,MAAM,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,YAAY,CAAC;YACtC,SAAS,EAAE,IAAA,gBAAI,EAAC,UAAU,EAAE,QAAQ,CAAC;SACxC,CAAC,CAAC;QACH,OAAO,OAAO,CAAC;IACnB,CAAC;IACD,2DAA2D;IAC3D,kBAAkB,CAAC,UAAmB;QAClC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,CAAC;IACD,kFAAkF;IAC1E,OAAO,CAAC,IAAoB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;YACxC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;YACnF,CAAC,CAAC,EAAE,CAAC;QACT,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACxD,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAW,EAAE,OAA0B,EAAE,EAAE,OAAuB,EAAE;QACjF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,0BAAY,EAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;YAC9B,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAc,EAAE,OAAuB,EAAE;QACpD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YACvB,MAAM,IAAI,KAAK,CAAC,IAAA,YAAC,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,IAAA,0BAAY,EAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;QAClG,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE;YACtC,GAAG,EAAE,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC;YAC/C,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YACvB,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,eAAe,EAAE,KAAK,CAAC,QAAQ;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;SACtB,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,iBAAiB,CAAC,GAAW,EAAE,OAA0B,EAAE,EAAE,OAAuB,EAAE;QACxF,OAAO,IAAA,uCAAuB,EAAC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IACjG,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,OAAuB,EAAE;QAC3D,OAAO,IAAA,uCAAuB,EAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5F,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,IAAY;QACvB,OAAO,IAAA,mBAAU,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,IAAI,CAAC;YACD,MAAM,IAAA,iBAAM,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QACzC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IACO,KAAK,CAAC,mBAAmB,CAAC,KAAoC,EAAE,SAAkB;QACtF,MAAM,MAAM,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,IAAA,oBAAW,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;IACL,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,IAAY;QACxB,OAAO,IAAA,mBAAU,EAAC,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,IAAY,EAAE,OAAmB;QAC9C,MAAM,IAAI,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,IAAA,oBAAW,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,MAAoB,EAAE,UAAkB;QACrD,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,IAAA,mBAAU,EAAC,IAAA,2BAAgB,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,SAAuB,EAAE,SAAkB,EAAE,OAE/D,EAAE;QACF,MAAM,KAAK,GAAG,MAAM,IAAA,kCAAiB,EAAC,IAAA,2BAAgB,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,MAAoB;QACvD,MAAM,WAAW,GAAG,IAAA,2BAAgB,EAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,MAAM,IAAA,gBAAK,EAAC,IAAA,mBAAO,EAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,IAAA,oBAAW,EAAC,WAAW,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACrE,CAAC;IACD;;;;OAIG;IACH,KAAK,CAAC,iBAAiB,CAAC,SAAiB,EAAE,SAAuB,EAAE,OAEhE,EAAE;QACF,MAAM,SAAS,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,IAAA,+CAAuB,EAAC;YAC1B,QAAQ,EAAE,IAAA,2BAAgB,EAAC,SAAS,EAAE,SAAS,CAAC;YAChD,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YAC/D,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;SAClE,CAAC,CAAC;IACP,CAAC;IACD;;;OAGG;IACH,KAAK,CAAC,IAAI;QACN,IAAA,uCAAqB,EAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtC,MAAM,IAAA,aAAE,EAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACjF,CAAC;CACJ;AAtND,oCAsNC","sourcesContent":["// Local 沙箱 provider:宿主机本地目录直接当 workdir 跑,零隔离、零仪式\n// (契约见 docs/feature/sandbox/local.md)。runCommand 按 argv 直接 spawn 宿主进程(不经 shell);\n// runShell 交给宿主 bash(与其它 provider 的 runShell 语义一致);文件 IO 走本地 fs——\n// 「沙箱」就是宿主文件系统本身,没有远端控制面、没有预制环境、没有留存。\n//\n// 变更分类账的 GIT_DIR 不能像其它 provider 那样固定在同一个宿主路径:多数 provider 每次创建都是\n// 全新隔离文件系统,固定路径天然不冲突;本地档的\"沙箱\"是宿主机本身,同机先后或并发跑的多个\n// attempt 共享同一个 /tmp,固定路径会在多次运行之间互相踩踏用户看不到的 git 索引。这里改用\n// mkdtemp 出的每实例私有目录,经 sandbox/ledger-paths.ts 登记给 runner/ledger.ts 消费——\n// ledger.ts 不需要认识\"local\"这个名字,只需要知道\"这个 sandboxId 有没有登记覆盖路径\"。\nimport { spawn, execFile } from \"node:child_process\";\nimport { promisify } from \"node:util\";\nimport { mkdtemp, mkdir, rm, readFile as fsReadFile, writeFile as fsWriteFile, access, stat } from \"node:fs/promises\";\nimport { constants as fsConstants } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join, resolve as resolvePath } from \"node:path\";\nimport { randomUUID } from \"node:crypto\";\nimport type { CommandOptions, CommandResult, ManagedProcess, ManagedProcessStart, SuccessfulCommandResult } from \"../types.ts\";\nimport { resolveLocalPath, resolveSandboxPath } from \"./paths.ts\";\nimport { commandLimit, SandboxCommandTimeoutError } from \"./deadline.ts\";\nimport { collectLocalFiles, type CollectedLocalFile } from \"./local-files.ts\";\nimport { downloadDirectoryByList } from \"./download-directory.ts\";\nimport { successfulCommandResult } from \"./operations.ts\";\nimport { supportedBackendCapability, unsupportedBackendCapability, type SandboxProviderBackend, } from \"./backend.ts\";\nimport { registerLedgerPaths, unregisterLedgerPaths } from \"./ledger-paths.ts\";\nimport { t } from \"../i18n/index.ts\";\nimport { ManagedProcessOutput } from \"./managed-process.ts\";\nconst execFileAsync = promisify(execFile);\nexport interface LocalSandboxOptions {\n    /** 显式 workdir;省略时从当前目录向上解析 git 仓库根。 */\n    dir?: string;\n    /** attempt 的超时上限(毫秒),单条命令未显式传 `timeout` 时的上限来源;省略 = 没有上限。 */\n    timeout?: number;\n    /** attempt deadline 的截止时刻(epoch ms);单条命令按剩余量取上限(见 deadline.ts)。 */\n    deadlineAt?: number;\n    /**\n     * 按序前置到宿主 `PATH` 的目录;省略 = 不改 PATH(见 docs/feature/sandbox/library.md\n     * 「PATH:受管变量与 pathPrepend」)。\n     */\n    pathPrepend?: readonly string[];\n    /**\n     * 内部测试用:覆盖「当前目录」的解析起点(省略 `dir` 时向上找 git 根、显式 `dir` 时的相对路径\n     * 基准都从它算)。生产路径(runtime.ts 的 provider materializer)从不传这个字段,恒用\n     * `process.cwd()`——不是公开 spec 的一部分,`localSandbox()` 工厂不暴露它。\n     */\n    cwd?: string;\n}\n/** 从给定目录向上解析 git 仓库根;不在任何 git 仓库内时给出两条出路。 */\nasync function resolveGitRoot(cwd: string): Promise<string> {\n    try {\n        const { stdout } = await execFileAsync(\"git\", [\"rev-parse\", \"--show-toplevel\"], { cwd });\n        return stdout.trim();\n    }\n    catch {\n        throw new Error(t(\"local.notARepo\"));\n    }\n}\n/** 显式 dir:相对路径按 cwd 解析;必须已存在且可写(不自动创建)。 */\nasync function resolveExplicitDir(dir: string, cwd: string): Promise<string> {\n    const abs = resolvePath(cwd, dir);\n    try {\n        await access(abs, fsConstants.W_OK);\n    }\n    catch (e) {\n        const err = e as NodeJS.ErrnoException;\n        if (err.code === \"ENOENT\")\n            throw new Error(t(\"local.dirMissing\", { dir: abs }));\n        throw new Error(t(\"local.dirNotWritable\", { dir: abs, message: err.message }));\n    }\n    const info = await stat(abs);\n    if (!info.isDirectory())\n        throw new Error(t(\"local.dirNotWritable\", { dir: abs, message: \"not a directory\" }));\n    return abs;\n}\nasync function resolveWorkdir(dir: string | undefined, cwd: string): Promise<string> {\n    return dir !== undefined ? resolveExplicitDir(dir, cwd) : resolveGitRoot(cwd);\n}\ninterface SpawnOpts {\n    cwd: string;\n    env: NodeJS.ProcessEnv;\n    /** 缺席 = 这条命令没有上限(四层解析链一个都没声明)。 */\n    timeout?: number;\n    explicitTimeout?: boolean;\n    onStdout?: CommandOptions[\"onStdout\"];\n    onStderr?: CommandOptions[\"onStderr\"];\n    signal?: AbortSignal;\n}\n/** argv 直接 spawn(不经 shell)与「bash -c script」共用的执行核心。 */\nfunction runSpawned(command: string, args: string[], opts: SpawnOpts): Promise<CommandResult> {\n    return new Promise((resolvePromise, reject) => {\n        // detached(POSIX):超时时能杀掉整个进程组,不只是直接子进程——agent 命令常常自己再\n        // 起子进程(npm 脚本、shell 管道),只杀顶层容易留下孤儿。Windows 没有进程组这个概念,\n        // 退化成直接 kill 顶层进程。\n        const posix = process.platform !== \"win32\";\n        const child = spawn(command, args, { cwd: opts.cwd, env: opts.env, detached: posix });\n        let stdout = \"\";\n        let stderr = \"\";\n        let callbackChain = Promise.resolve();\n        let settled = false;\n        const killTree = (): void => {\n            if (posix && child.pid !== undefined) {\n                try {\n                    process.kill(-child.pid, \"SIGKILL\");\n                }\n                catch {\n                    child.kill(\"SIGKILL\");\n                }\n            }\n            else {\n                child.kill(\"SIGKILL\");\n            }\n        };\n        let termination: \"timeout\" | \"abort\" | undefined;\n        const timer = opts.timeout === undefined ? undefined : setTimeout(() => {\n            termination = \"timeout\";\n            killTree();\n        }, opts.timeout);\n        const onAbort = (): void => {\n            termination = \"abort\";\n            killTree();\n        };\n        opts.signal?.addEventListener(\"abort\", onAbort, { once: true });\n        if (opts.signal?.aborted)\n            onAbort();\n        child.stdout?.on(\"data\", (chunk: Buffer) => {\n            const text = chunk.toString(\"utf-8\");\n            stdout += text;\n            const onStdout = opts.onStdout;\n            if (onStdout !== undefined)\n                callbackChain = callbackChain.then(() => onStdout(text));\n        });\n        child.stderr?.on(\"data\", (chunk: Buffer) => {\n            const text = chunk.toString(\"utf-8\");\n            stderr += text;\n            const onStderr = opts.onStderr;\n            if (onStderr !== undefined)\n                callbackChain = callbackChain.then(() => onStderr(text));\n        });\n        child.on(\"error\", (err) => {\n            if (settled)\n                return;\n            settled = true;\n            if (timer !== undefined)\n                clearTimeout(timer);\n            opts.signal?.removeEventListener(\"abort\", onAbort);\n            reject(err);\n        });\n        child.on(\"close\", (code, signal) => {\n            if (settled)\n                return;\n            settled = true;\n            if (timer !== undefined)\n                clearTimeout(timer);\n            opts.signal?.removeEventListener(\"abort\", onAbort);\n            callbackChain\n                .then(() => {\n                if (termination === \"abort\") {\n                    reject(opts.signal?.reason ?? new DOMException(\"sandbox command aborted\", \"AbortError\"));\n                    return;\n                }\n                if (termination === \"timeout\" && signal === \"SIGKILL\" && code === null && opts.timeout !== undefined) {\n                    reject(new SandboxCommandTimeoutError(t(\"local.commandTimeout\", { timeoutMs: opts.timeout }), opts.timeout, opts.explicitTimeout === true));\n                    return;\n                }\n                resolvePromise({ stdout, stderr, exitCode: code ?? 0 });\n            })\n                .catch(reject);\n        });\n    });\n}\n/**\n * Local 沙箱:宿主机的一个本地目录。实现 ../types.ts 的 Sandbox 接口。\n * 契约见 docs/feature/sandbox/local.md;实现要点见 docs/feature/sandbox/architecture.md\n * 「Local provider(宿主机,零隔离)」。\n */\nexport class LocalSandbox implements SandboxProviderBackend {\n    readonly workdir: string;\n    readonly otlpHost = \"localhost\";\n    readonly sandboxId: string;\n    private readonly timeout?: number;\n    private deadlineAt?: number;\n    private readonly ledgerBase: string;\n    /** factory `pathPrepend`;按声明顺序前置到宿主 PATH,省略 = 空数组。 */\n    private readonly pathPrepend: readonly string[];\n    readonly capabilities = {\n        rootCommands: unsupportedBackendCapability,\n        appendLog: unsupportedBackendCapability,\n        suspend: unsupportedBackendCapability,\n        ensureLifetime: unsupportedBackendCapability,\n        setCommandDeadline: supportedBackendCapability((deadlineAt?: number) => this.setCommandDeadline(deadlineAt)),\n        managedProcess: supportedBackendCapability((input: ManagedProcessStart) => this.startManagedProcess(input)),\n    };\n    private async startManagedProcess(input: ManagedProcessStart): Promise<ManagedProcess> {\n        const [command, ...args] = input.argv;\n        const output = new ManagedProcessOutput();\n        const env: NodeJS.ProcessEnv = {\n            ...process.env,\n            ...input.env,\n            ...(this.pathPrepend.length === 0\n                ? {}\n                : { PATH: `${this.pathPrepend.join(\":\")}:${process.env.PATH ?? \"\"}` }),\n        };\n        const posix = process.platform !== \"win32\";\n        const child = spawn(command, args, {\n            cwd: resolveSandboxPath(this.workdir, input.cwd),\n            env,\n            detached: posix,\n            stdio: [\"pipe\", \"pipe\", \"pipe\"],\n        });\n        child.stdout.on(\"data\", (bytes: Buffer) => output.push({ _tag: \"Stdout\", bytes: new Uint8Array(bytes) }));\n        child.stderr.on(\"data\", (bytes: Buffer) => output.push({ _tag: \"Stderr\", bytes: new Uint8Array(bytes) }));\n        const exit = new Promise<import(\"../types.ts\").ManagedProcessExit>((resolve, reject) => {\n            child.once(\"error\", (error) => { output.end(); reject(error); });\n            child.once(\"close\", (exitCode, signal) => {\n                output.end();\n                resolve({ exitCode, ...(signal === null ? {} : { signal }) });\n            });\n        });\n        const terminate = async (): Promise<void> => {\n            stdinState = \"closing\";\n            if (child.exitCode !== null || child.signalCode !== null)\n                return;\n            if (posix && child.pid !== undefined) {\n                try {\n                    process.kill(-child.pid, \"SIGKILL\");\n                }\n                catch {\n                    child.kill(\"SIGKILL\");\n                }\n            }\n            else\n                child.kill(\"SIGKILL\");\n            await exit.catch(() => undefined);\n        };\n        let stdinState: \"open\" | \"closing\" | \"closed\" = \"open\";\n        let closeReceipt: Promise<void> | undefined;\n        let terminateReceipt: Promise<void> | undefined;\n        return {\n            output,\n            writeStdin: (bytes) => new Promise<void>((resolve, reject) => {\n                if (stdinState !== \"open\") {\n                    reject(new Error(\"managed process stdin is closed\"));\n                    return;\n                }\n                child.stdin.write(bytes, (error) => error ? reject(error) : resolve());\n            }),\n            closeStdin: () => closeReceipt ??= new Promise<void>((resolve) => {\n                stdinState = \"closing\";\n                child.stdin.end(() => { stdinState = \"closed\"; resolve(); });\n            }),\n            wait: () => exit,\n            terminate: () => terminateReceipt ??= terminate(),\n        };\n    }\n    private constructor(workdir: string, ledgerBase: string, pathPrepend: readonly string[], timeout?: number, deadlineAt?: number) {\n        this.workdir = workdir;\n        this.ledgerBase = ledgerBase;\n        this.pathPrepend = pathPrepend;\n        this.timeout = timeout;\n        this.deadlineAt = deadlineAt;\n        this.sandboxId = `local-${randomUUID().slice(0, 8)}`;\n    }\n    /** 解析 workdir + 备好变更分类账的私有临时目录；Local provider 不参与 provisioning 重试。 */\n    static async create(options: LocalSandboxOptions = {}): Promise<LocalSandbox> {\n        const workdir = await resolveWorkdir(options.dir, options.cwd ?? process.cwd());\n        const ledgerBase = await mkdtemp(join(tmpdir(), \"niceeval-local-ledger-\"));\n        const sandbox = new LocalSandbox(workdir, ledgerBase, options.pathPrepend ?? [], options.timeout, options.deadlineAt);\n        // runner/ledger.ts 按 sandboxId 读取这份登记——本地档的\"沙箱\"是宿主机本身,固定的宿主路径\n        // 会在同机多次运行之间互相踩踏,每实例必须有自己的一份(见文件头注释)。\n        registerLedgerPaths(sandbox.sandboxId, {\n            gitDir: join(ledgerBase, \"ledger.git\"),\n            exportDir: join(ledgerBase, \"export\"),\n        });\n        return sandbox;\n    }\n    /** 复用下由池在每次借出时换成承接者自己的 deadline(见 sandbox/deadline.ts)。 */\n    setCommandDeadline(deadlineAt?: number): void {\n        this.deadlineAt = deadlineAt;\n    }\n    /** 宿主 env:`process.env` 叠加 `pathPrepend` 前置后的 PATH,`opts.env` 仍可覆盖任意键(含 PATH)。 */\n    private hostEnv(opts: CommandOptions): NodeJS.ProcessEnv {\n        const pathBase = this.pathPrepend.length > 0\n            ? { PATH: [...this.pathPrepend, ...(process.env.PATH ?? \"\").split(\":\")].join(\":\") }\n            : {};\n        return { ...process.env, ...pathBase, ...opts.env };\n    }\n    async runCommand(cmd: string, args: readonly string[] = [], opts: CommandOptions = {}): Promise<CommandResult> {\n        if (opts.user !== undefined)\n            throw new Error(t(\"local.userUnsupported\", { user: opts.user }));\n        const limit = commandLimit(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });\n        return runSpawned(cmd, [...args], {\n            cwd: resolveSandboxPath(this.workdir, opts.cwd),\n            env: this.hostEnv(opts),\n            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),\n            explicitTimeout: limit.explicit,\n            onStdout: opts.onStdout,\n            onStderr: opts.onStderr,\n            signal: opts.signal,\n        });\n    }\n    async runShell(script: string, opts: CommandOptions = {}): Promise<CommandResult> {\n        if (opts.user !== undefined)\n            throw new Error(t(\"local.userUnsupported\", { user: opts.user }));\n        const limit = commandLimit(opts, { commandTimeoutMs: this.timeout, deadlineAt: this.deadlineAt });\n        return runSpawned(\"bash\", [\"-c\", script], {\n            cwd: resolveSandboxPath(this.workdir, opts.cwd),\n            env: this.hostEnv(opts),\n            ...(limit.timeoutMs !== undefined ? { timeout: limit.timeoutMs } : {}),\n            explicitTimeout: limit.explicit,\n            onStdout: opts.onStdout,\n            onStderr: opts.onStderr,\n            signal: opts.signal,\n        });\n    }\n    async runCommandOrThrow(cmd: string, args: readonly string[] = [], opts: CommandOptions = {}): Promise<SuccessfulCommandResult> {\n        return successfulCommandResult(await this.runCommand(cmd, args, opts), opts.sensitiveValues);\n    }\n    async runShellOrThrow(script: string, opts: CommandOptions = {}): Promise<SuccessfulCommandResult> {\n        return successfulCommandResult(await this.runShell(script, opts), opts.sensitiveValues);\n    }\n    async readText(path: string): Promise<string> {\n        return fsReadFile(resolveSandboxPath(this.workdir, path), \"utf-8\");\n    }\n    async pathExists(path: string): Promise<boolean> {\n        try {\n            await access(resolveSandboxPath(this.workdir, path));\n            return true;\n        }\n        catch {\n            return false;\n        }\n    }\n    async writeText(path: string, content: string): Promise<void> {\n        await this.writeBytes(path, Buffer.from(content, \"utf-8\"));\n    }\n    private async writeCollectedFiles(files: readonly CollectedLocalFile[], targetDir?: string): Promise<void> {\n        const target = resolveSandboxPath(this.workdir, targetDir);\n        for (const file of files) {\n            const dest = resolveSandboxPath(target, file.path);\n            await mkdir(dirname(dest), { recursive: true });\n            await fsWriteFile(dest, file.content);\n        }\n    }\n    async readBytes(path: string): Promise<Uint8Array> {\n        return fsReadFile(resolveSandboxPath(this.workdir, path));\n    }\n    async writeBytes(path: string, content: Uint8Array): Promise<void> {\n        const dest = resolveSandboxPath(this.workdir, path);\n        await mkdir(dirname(dest), { recursive: true });\n        await fsWriteFile(dest, content);\n    }\n    async uploadFile(source: string | URL, targetPath: string): Promise<void> {\n        await this.writeBytes(targetPath, await fsReadFile(resolveLocalPath(undefined, source)));\n    }\n    async uploadDirectory(sourceDir: string | URL, targetDir?: string, opts: {\n        readonly ignore?: readonly string[];\n    } = {}): Promise<void> {\n        const files = await collectLocalFiles(resolveLocalPath(undefined, sourceDir), opts.ignore);\n        await this.writeCollectedFiles(files, targetDir);\n    }\n    async downloadFile(sourcePath: string, target: string | URL): Promise<void> {\n        const destination = resolveLocalPath(undefined, target);\n        await mkdir(dirname(destination), { recursive: true });\n        await fsWriteFile(destination, await this.readBytes(sourcePath));\n    }\n    /**\n     * 与 vercel/e2b 共用同一套「find 列路径 + 逐文件读取」模板(见 download-directory.ts):\n     * 复用是为了让 ignore 的 basename 剪除语义与落盘行为在三个 provider 间保持逐字节一致,\n     * 不是本地档做不了更直接的 fs 递归拷贝——用同一份实现,行为差异这个物种直接不存在。\n     */\n    async downloadDirectory(sourceDir: string, targetDir: string | URL, opts: {\n        readonly ignore?: readonly string[];\n    } = {}): Promise<void> {\n        const remoteDir = resolveSandboxPath(this.workdir, sourceDir);\n        await downloadDirectoryByList({\n            localDir: resolveLocalPath(undefined, targetDir),\n            ignore: opts.ignore ?? [],\n            runShell: (script) => this.runShell(script, { cwd: remoteDir }),\n            readOne: (relPath) => this.readBytes(`${remoteDir}/${relPath}`),\n        });\n    }\n    /**\n     * 只清 runner 私有资源(分类账的私有 GIT_DIR 临时目录),不动工作树任何文件——本地档从不\n     * 销毁\"沙箱\",因为宿主机本身不是可销毁的资源(见 docs/feature/sandbox/local.md「只观察,不还原」)。\n     */\n    async stop(): Promise<void> {\n        unregisterLedgerPaths(this.sandboxId);\n        await rm(this.ledgerBase, { recursive: true, force: true }).catch(() => { });\n    }\n}\n"]}