opencode-swarm 7.144.4 → 7.144.6

package/dist/cli/index-q1exe2b3.js

@@ -1,256 +0,0 @@
-// @bun
-import {
-  init_logger,
-  warn
-} from "./index-zgwm4ryv.js";
-import {
-  __esm,
-  __export
-} from "./index-a76rekgs.js";
-
-// src/sandbox/win32/runner-client.ts
-var exports_runner_client = {};
-__export(exports_runner_client, {
-  probe: () => probe,
-  execute: () => execute,
-  buildDefaultPolicy: () => buildDefaultPolicy,
-  _resetProbeCache: () => _resetProbeCache,
-  _internals: () => _internals,
-  RUNNER_EXIT_CODES: () => RUNNER_EXIT_CODES
-});
-import { spawn, spawnSync } from "child_process";
-import * as fs from "fs";
-import * as os from "os";
-import * as path from "path";
-import { fileURLToPath } from "url";
-function findRunnerBinary() {
-  const arch = process.arch === "x64" ? "x64" : "arm64";
-  const platform = "win32";
-  const packagePaths = [
-    path.resolve(_runtimeDir, "..", "..", "..", "binaries", `${platform}-${arch}`, "swarm-sandbox-runner.exe"),
-    path.resolve(_runtimeDir, "..", "..", "..", "..", "binaries", `${platform}-${arch}`, "swarm-sandbox-runner.exe")
-  ];
-  for (const p of packagePaths) {
-    try {
-      if (fs.existsSync(p)) {
-        return p;
-      }
-    } catch {}
-  }
-  try {
-    const result = spawnSync("where", ["swarm-sandbox-runner.exe"], {
-      windowsHide: true,
-      encoding: "utf-8",
-      timeout: 2000,
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    if (result.status === 0 && result.stdout?.trim()) {
-      return result.stdout.trim().split(`
-`)[0]?.trim() ?? null;
-    }
-  } catch {}
-  return null;
-}
-function probe() {
-  if (_cachedProbe !== undefined) {
-    return _cachedProbe;
-  }
-  if (process.platform !== "win32") {
-    _cachedProbe = {
-      available: false,
-      mode: "none",
-      capabilities: null,
-      error: "not Windows"
-    };
-    return _cachedProbe;
-  }
-  const binary = _internals.findRunnerBinary();
-  if (!binary) {
-    _cachedProbe = {
-      available: false,
-      mode: "none",
-      capabilities: null,
-      error: "runner binary not found"
-    };
-    warn("Sandbox runner binary not found \u2014 degrading to weak sandbox");
-    return _cachedProbe;
-  }
-  try {
-    const result = _internals.spawnRunner(binary, ["--probe"], {
-      windowsHide: true,
-      encoding: "utf-8",
-      timeout: 2000,
-      stdio: ["ignore", "pipe", "pipe"],
-      cwd: os.tmpdir()
-    });
-    if (result.error) {
-      _cachedProbe = {
-        available: false,
-        mode: "none",
-        capabilities: null,
-        error: `probe spawn error: ${result.error.code ?? result.error.message}`
-      };
-      warn(`Sandbox runner probe failed: ${_cachedProbe.error}`);
-      return _cachedProbe;
-    }
-    if (result.status !== 0) {
-      _cachedProbe = {
-        available: false,
-        mode: "none",
-        capabilities: null,
-        error: `probe exited with code ${result.status}`
-      };
-      warn(`Sandbox runner probe failed: ${_cachedProbe.error}`);
-      return _cachedProbe;
-    }
-    const capabilities = JSON.parse(result.stdout?.trim() ?? "{}");
-    let mode = "none";
-    if (capabilities.app_container_available) {
-      mode = "app-container";
-    } else if (capabilities.restricted_token_available) {
-      mode = "restricted-token";
-    }
-    _cachedProbe = {
-      available: mode !== "none",
-      mode,
-      capabilities
-    };
-    return _cachedProbe;
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    _cachedProbe = {
-      available: false,
-      mode: "none",
-      capabilities: null,
-      error: `probe threw: ${msg}`
-    };
-    warn(`Sandbox runner probe threw: ${msg}`);
-    return _cachedProbe;
-  }
-}
-async function execute(command, policy, mode = "auto") {
-  const binary = _internals.findRunnerBinary();
-  if (!binary) {
-    throw new Error("runner binary not found");
-  }
-  const policyJson = JSON.stringify(policy);
-  const args = ["--policy-stdin", "--mode", mode, "--", ...command];
-  return new Promise((resolve2, reject) => {
-    let proc;
-    const timeout = setTimeout(() => {
-      proc?.kill();
-      reject(new Error("runner execution timeout"));
-    }, policy.wall_clock_timeout_ms + 5000);
-    const unref = timeout.unref;
-    if (typeof unref === "function") {
-      unref.call(timeout);
-    }
-    try {
-      proc = _internals.spawnAsync(binary, args, {
-        windowsHide: true,
-        stdio: ["pipe", "pipe", "pipe"],
-        cwd: policy.workspace_roots[0] ?? os.tmpdir()
-      });
-    } catch (err) {
-      clearTimeout(timeout);
-      reject(err);
-      return;
-    }
-    proc.stdin?.write(policyJson);
-    proc.stdin?.end();
-    let stdout = "";
-    let stderr = "";
-    const events = [];
-    proc.stdout?.on("data", (chunk) => {
-      stdout += chunk.toString();
-    });
-    proc.stderr?.on("data", (chunk) => {
-      const lines = chunk.toString().split(`
-`);
-      for (const line of lines) {
-        const trimmed = line.trim();
-        if (!trimmed)
-          continue;
-        try {
-          const event = JSON.parse(trimmed);
-          if (event.type) {
-            events.push(event);
-            continue;
-          }
-        } catch {}
-        stderr += `${trimmed}
-`;
-      }
-    });
-    proc.on("error", (err) => {
-      clearTimeout(timeout);
-      reject(err);
-    });
-    proc.on("close", (code) => {
-      clearTimeout(timeout);
-      const startEvent = events.find((e) => e.type === "start");
-      const runnerMode = startEvent?.mode ?? mode;
-      resolve2({
-        exitCode: code ?? 1,
-        stdout,
-        stderr,
-        events,
-        mode: runnerMode
-      });
-    });
-  });
-}
-function _resetProbeCache() {
-  _cachedProbe = undefined;
-}
-function buildDefaultPolicy(workspaceRoot, runId) {
-  const id = runId ?? `swarm-${crypto.randomUUID?.() ?? Date.now()}`;
-  const appData = process.env.LOCALAPPDATA ?? path.join(os.homedir(), "AppData", "Local");
-  const tempRoot = path.join(appData, "opencode-swarm", "sandbox", id, "temp");
-  return {
-    schema_version: 1,
-    run_id: id,
-    workspace_roots: [workspaceRoot],
-    writable_roots: [workspaceRoot],
-    read_only_subpaths: [".git", ".codex", ".agents", ".swarm"],
-    temp_root: tempRoot,
-    temp_cap_bytes: 524288000,
-    memory_cap_bytes: 2147483648,
-    child_process_cap: 16,
-    wall_clock_timeout_ms: 600000,
-    network_mode: "off",
-    env_allowlist: ["PATH", "TEMP", "TMP", "USERPROFILE", "SYSTEMROOT"],
-    env_overrides: {
-      HTTP_PROXY: "http://127.0.0.1:1",
-      HTTPS_PROXY: "http://127.0.0.1:1"
-    },
-    path_stubs: ["ssh.exe", "curl.exe", "wget.exe", "scp.exe", "sftp.exe"],
-    private_desktop: true,
-    deny_alternate_data_streams: true,
-    deny_unc_paths: true,
-    deny_device_paths: true,
-    deny_symlink_egress: true
-  };
-}
-var _runtimeDir, RUNNER_EXIT_CODES, _cachedProbe, _internals;
-var init_runner_client = __esm(() => {
-  init_logger();
-  _runtimeDir = fileURLToPath(new URL(".", import.meta.url));
-  RUNNER_EXIT_CODES = {
-    SUCCESS: 0,
-    CHILD_NON_ZERO: 1,
-    POLICY_VIOLATION: 64,
-    QUOTA_EXCEEDED: 65,
-    WALL_CLOCK_TIMEOUT: 66,
-    LAUNCHER_MISCONFIG: 67,
-    OS_API_FAILURE: 68,
-    PROBE_FAILED: 69
-  };
-  _internals = {
-    findRunnerBinary,
-    spawnRunner: spawnSync,
-    spawnAsync: spawn
-  };
-});
-
-export { _internals, probe, execute, buildDefaultPolicy, exports_runner_client, init_runner_client };