const PACKAGE_URL_DOWNLOAD_TIMEOUT_MS = 60_000;

const PACKAGE_URL_MAX_BYTES = 250 * 1024 * 1024;

const PACKAGE_URL_MAX_REDIRECTS = 5;

const COMMAND_STDOUT_CAPTURE_MAX_CHARS = 8 * 1024 * 1024;

const COMMAND_STDERR_CAPTURE_MAX_CHARS = 128 * 1024;

const TRUSTED_PACKAGE_SOURCE_POLICY = ".github/package-trusted-sources.json";

const TRUSTED_PACKAGE_SOURCE_TOKEN_ENV = "OPENCLAW_TRUSTED_PACKAGE_TOKEN";

const BLOCKED_PACKAGE_HOSTNAMES = new Set([

...spawnOptions,

});

let timedOut = false;

let killTimer;

const timeout =

options.timeoutMs === undefined

? undefined

: setTimeout(() => {

timedOut = true;

child.kill("SIGTERM");

setTimeout(() => child.kill("SIGKILL"), 5_000).unref?.();

killTimer = setTimeout(() => child.kill("SIGKILL"), 5_000);

killTimer.unref?.();

}, options.timeoutMs);

timeout?.unref?.();

let stdout = "";

let stderr = "";

let stdout = { text: "", truncatedChars: 0 };

let stderr = { text: "", truncatedChars: 0 };

if (options.capture) {

child.stdout.on("data", (chunk) => {

stdout += String(chunk);

stdout = appendBoundedCommandOutput(stdout, chunk, COMMAND_STDOUT_CAPTURE_MAX_CHARS);

});

child.stderr.on("data", (chunk) => {

stderr += String(chunk);

stderr = appendBoundedCommandOutput(stderr, chunk, COMMAND_STDERR_CAPTURE_MAX_CHARS);

});

}

child.on("error", reject);

child.on("close", (status, signal) => {

if (timeout) {

clearTimeout(timeout);

}

if (killTimer) {

clearTimeout(killTimer);

}

if (timedOut) {

reject(new Error(`${command} ${args.join(" ")} timed out after ${options.timeoutMs}ms`));

return;

}

if (status === 0) {

resolve(stdout);

if (stdout.truncatedChars > 0) {

reject(

new Error(

`${command} ${args.join(" ")} produced more than ${COMMAND_STDOUT_CAPTURE_MAX_CHARS} captured stdout chars`,

),

);

return;

}

resolve(stdout.text);

return;

}

const detail = stderr.trim() ? `\n${stderr.trim()}` : "";

const stderrText = formatCapturedCommandOutput(stderr).trim();

const detail = stderrText ? `\n${stderrText}` : "";

reject(new Error(`${command} ${args.join(" ")} failed with ${status ?? signal}${detail}`));

});

});

}

function appendBoundedCommandOutput(buffer, chunk, maxChars) {

const nextText = buffer.text + String(chunk);

if (nextText.length <= maxChars) {

return { text: nextText, truncatedChars: buffer.truncatedChars };

}

const truncatedChars = buffer.truncatedChars + nextText.length - maxChars;

return { text: nextText.slice(-maxChars), truncatedChars };

}

function formatCapturedCommandOutput(buffer) {

if (buffer.truncatedChars === 0) {

return buffer.text;

}

return `[output truncated ${buffer.truncatedChars} chars; showing tail]\n${buffer.text}`;

}

export const runCommandForTest = run;

async function walkFiles(dir) {

const entries = await fs.readdir(dir, { withFileTypes: true });

const files = [];