oh-my-pi/packages/coding-agent/src/eval/py/executor.ts

import { getProjectDir, logger } from "@oh-my-pi/pi-utils";
import { Settings } from "../../config/settings";
import { OutputSink } from "../../session/streaming-output";
import type { ToolSession } from "../../tools";
import { resolveOutputMaxColumns, resolveOutputSinkHeadBytes } from "../../tools/output-meta";
import type { JsStatusEvent } from "../js/shared/types";
import type { KernelDisplayOutput } from "./display";
import {
	checkPythonKernelAvailability,
	type KernelExecuteOptions,
	type KernelExecuteResult,
	PythonKernel,
} from "./kernel";
import { ensurePyToolBridge, registerPyToolBridge } from "./tool-bridge";

const IDLE_TIMEOUT_MS = 5 * 60 * 1000; // 5 minutes
const MAX_KERNEL_SESSIONS = 4;
const CLEANUP_INTERVAL_MS = 30 * 1000; // 30 seconds
const OWNER_CLEANUP_KERNEL_SHUTDOWN_TIMEOUT_MS = 2_000;

export type PythonKernelMode = "session" | "per-call";

export interface PythonExecutorOptions {
	/** Working directory for command execution */
	cwd?: string;
	/** Timeout in milliseconds */
	timeoutMs?: number;
	/** Absolute wall-clock deadline in milliseconds since epoch */
	deadlineMs?: number;
	/** Callback for streaming output chunks (already sanitized) */
	onChunk?: (chunk: string) => Promise<void> | void;
	/** AbortSignal for cancellation */
	signal?: AbortSignal;
	/** Session identifier for kernel reuse */
	sessionId?: string;
	/** Logical owner identifier for retained kernel cleanup */
	kernelOwnerId?: string;
	/** Kernel mode (session reuse vs per-call) */
	kernelMode?: PythonKernelMode;
	/** Restart the kernel before executing */
	reset?: boolean;
	/** Session file path for accessing task outputs */
	sessionFile?: string;
	/**
	 * Effective artifacts directory for the current session. Subagents share
	 * the parent's directory, so this can differ from `sessionFile`'s sibling
	 * dir. When present, exported to the kernel as `PI_ARTIFACTS_DIR` and
	 * preferred over `PI_SESSION_FILE`-derived paths.
	 */
	artifactsDir?: string;
	/** Artifact path/id for full output storage */
	artifactPath?: string;
	artifactId?: string;
	/**
	 * ToolSession used to resolve host-side `tool.<name>(args)` calls made from
	 * the Python prelude's bridge proxy. When omitted, the bridge env vars are
	 * not injected and any `tool.foo(...)` raises in Python.
	 */
	toolSession?: ToolSession;
	/** Callback for status events emitted by tool bridge invocations. */
	emitStatus?: (event: JsStatusEvent) => void;
	/** @internal Bridge session id, set by `executePython` before delegating. */
	bridgeSessionId?: string;
	/** @internal Bridge endpoint info, set by `executePython` before delegating. */
	bridge?: { url: string; token: string };
}

export interface PythonKernelExecutor {
	execute: (code: string, options?: KernelExecuteOptions) => Promise<KernelExecuteResult>;
}

export interface PythonResult {
	/** Combined stdout + stderr output (sanitized, possibly truncated) */
	output: string;
	/** Execution exit code (0 ok, 1 error, undefined if cancelled) */
	exitCode: number | undefined;
	/** Whether the execution was cancelled via signal */
	cancelled: boolean;
	/** Whether the output was truncated */
	truncated: boolean;
	/** Artifact ID if full output was saved to artifact storage */
	artifactId?: string;
	/** Total number of lines in the output stream */
	totalLines: number;
	/** Total number of bytes in the output stream */
	totalBytes: number;
	/** Number of lines included in the output text */
	outputLines: number;
	/** Number of bytes included in the output text */
	outputBytes: number;
	/** Rich display outputs captured from display_data/execute_result */
	displayOutputs: KernelDisplayOutput[];
	/** Whether stdin was requested */
	stdinRequested: boolean;
}

interface KernelSession {
	id: string;
	kernel: PythonKernel;
	queue: Promise<void>;
	restartCount: number;
	dead: boolean;
	needsRestart: boolean;
	disposing: boolean;
	disposeCapacityPromise?: Promise<void>;
	resolveDisposeCapacity?: () => void;
	disposeAttemptPromise?: Promise<void>;
	resolveDisposeAttempt?: () => void;
	disposeResultPromise?: Promise<KernelDisposalResult>;
	disposeResultTimeoutMs?: number;
	nextDisposalRetryAt?: number;
	lastUsedAt: number;
	ownerIds: Set<string>;
	hasFallbackOwner: boolean;
	heartbeatTimer?: NodeJS.Timeout;
}

const kernelSessions = new Map<string, KernelSession>();
const disposingKernelSessions = new Set<KernelSession>();
let cleanupTimer: NodeJS.Timeout | null = null;

interface KernelSessionExecutionOptions {
	sessionFile?: string;
	artifactsDir?: string;
	signal?: AbortSignal;
	deadlineMs?: number;
	kernelOwnerId?: string;
	/** Bridge session identifier exported into the kernel env as PI_TOOL_BRIDGE_SESSION. */
	bridgeSessionId?: string;
	/** Cached bridge connection info. When present, env vars for tool.<name>() get injected. */
	bridge?: { url: string; token: string };
}

class PythonExecutionCancelledError extends Error {
	readonly timedOut: boolean;

	constructor(timedOut: boolean) {
		super(timedOut ? "Command timed out" : "Command aborted");
		this.name = timedOut ? "TimeoutError" : "AbortError";
		this.timedOut = timedOut;
	}
}

function getExecutionDeadlineMs(options?: Pick<PythonExecutorOptions, "deadlineMs" | "timeoutMs">): number | undefined {
	if (options?.deadlineMs !== undefined) return options.deadlineMs;
	if (options?.timeoutMs === undefined) return undefined;
	return Date.now() + options.timeoutMs;
}

/**
 * Build the env block exposed to the Python kernel. Includes the session file
 * (for things that need the raw session path) and the effective artifacts
 * directory (preferred by the prelude when resolving output IDs, so subagents
 * see the parent's flat dir instead of a non-existent sibling).
 */
function buildKernelEnv(options: {
	sessionFile?: string;
	artifactsDir?: string;
	bridgeSessionId?: string;
	bridge?: { url: string; token: string };
}): Record<string, string> | undefined {
	const env: Record<string, string> = {};
	if (options.sessionFile) env.PI_SESSION_FILE = options.sessionFile;
	if (options.artifactsDir) env.PI_ARTIFACTS_DIR = options.artifactsDir;
	if (options.bridge && options.bridgeSessionId) {
		env.PI_TOOL_BRIDGE_URL = options.bridge.url;
		env.PI_TOOL_BRIDGE_TOKEN = options.bridge.token;
		env.PI_TOOL_BRIDGE_SESSION = options.bridgeSessionId;
	}
	return Object.keys(env).length > 0 ? env : undefined;
}

function getRemainingTimeoutMs(deadlineMs?: number): number | undefined {
	if (deadlineMs === undefined) return undefined;
	return deadlineMs - Date.now();
}

function requireRemainingTimeoutMs(deadlineMs?: number): number | undefined {
	const remainingMs = getRemainingTimeoutMs(deadlineMs);
	if (remainingMs === undefined) return undefined;
	if (remainingMs <= 0) {
		throw new PythonExecutionCancelledError(true);
	}
	return remainingMs;
}

function isCancellationError(error: unknown): boolean {
	return (
		error instanceof PythonExecutionCancelledError ||
		(error instanceof DOMException && (error.name === "AbortError" || error.name === "TimeoutError")) ||
		(error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError"))
	);
}

function isTimedOutCancellation(error: unknown, signal?: AbortSignal): boolean {
	if (error instanceof PythonExecutionCancelledError) return error.timedOut;
	if (error instanceof DOMException) return error.name === "TimeoutError";
	if (error instanceof Error && error.name === "TimeoutError") return true;
	const reason = signal?.reason;
	if (reason instanceof DOMException) return reason.name === "TimeoutError";
	return reason instanceof Error ? reason.name === "TimeoutError" : false;
}

async function waitForPromiseWithCancellation<T>(
	promise: Promise<T>,
	options: Pick<KernelSessionExecutionOptions, "signal" | "deadlineMs">,
): Promise<T> {
	if (options.signal?.aborted) {
		throw new PythonExecutionCancelledError(isTimedOutCancellation(options.signal.reason, options.signal));
	}

	const remainingMs = getRemainingTimeoutMs(options.deadlineMs);
	if (remainingMs !== undefined && remainingMs <= 0) {
		throw new PythonExecutionCancelledError(true);
	}

	if (!options.signal && remainingMs === undefined) {
		return await promise;
	}

	return await new Promise<T>((resolve, reject) => {
		const cleanups: Array<() => void> = [];
		const finish = (callback: () => void) => {
			while (cleanups.length > 0) {
				cleanups.pop()?.();
			}
			callback();
		};

		const onAbort = () => {
			finish(() =>
				reject(new PythonExecutionCancelledError(isTimedOutCancellation(options.signal?.reason, options.signal))),
			);
		};

		if (options.signal) {
			options.signal.addEventListener("abort", onAbort, { once: true });
			cleanups.push(() => options.signal?.removeEventListener("abort", onAbort));
		}

		if (remainingMs !== undefined) {
			const timeout = setTimeout(() => {
				finish(() => reject(new PythonExecutionCancelledError(true)));
			}, remainingMs);
			timeout.unref();
			cleanups.push(() => clearTimeout(timeout));
		}

		promise.then(
			value => finish(() => resolve(value)),
			error => finish(() => reject(error)),
		);
	});
}

async function waitForQueueTurn(
	queue: Promise<void>,
	options: Pick<KernelSessionExecutionOptions, "signal" | "deadlineMs">,
): Promise<void> {
	await waitForPromiseWithCancellation(queue, options);
}

function formatTimeoutAnnotation(timeoutMs?: number): string | undefined {
	if (timeoutMs === undefined) return "Command timed out";
	const secs = Math.max(1, Math.round(timeoutMs / 1000));
	return `Command timed out after ${secs} seconds`;
}

function createCancelledPythonResult(timedOut: boolean, timeoutMs?: number): PythonResult {
	const output = timedOut ? (formatTimeoutAnnotation(timeoutMs) ?? "Command timed out") : "";
	const outputBytes = Buffer.byteLength(output, "utf-8");
	const outputLines = output.length > 0 ? 1 : 0;
	return {
		output,
		exitCode: undefined,
		cancelled: true,
		truncated: false,
		totalLines: outputLines,
		totalBytes: outputBytes,
		outputLines,
		outputBytes,
		displayOutputs: [],
		stdinRequested: false,
	};
}

function buildKernelStartOptions(
	cwd: string,
	env: Record<string, string> | undefined,
	options: KernelSessionExecutionOptions,
) {
	return {
		cwd,
		env,
		signal: options.signal,
		deadlineMs: options.deadlineMs,
	};
}

function startCleanupTimer(): void {
	if (cleanupTimer) return;
	cleanupTimer = setInterval(() => {
		void cleanupIdleSessions();
	}, CLEANUP_INTERVAL_MS);
	cleanupTimer.unref();
}

function stopCleanupTimer(): void {
	if (cleanupTimer) {
		clearInterval(cleanupTimer);
		cleanupTimer = null;
	}
}

function attachKernelOwner(sessionId: string, ownerId?: string): boolean {
	const session = kernelSessions.get(sessionId);
	if (!session || session.disposing) return false;
	if (ownerId !== undefined) {
		if (session.hasFallbackOwner) {
			session.ownerIds.delete(sessionId);
			session.hasFallbackOwner = false;
		}
		session.ownerIds.add(ownerId);
	} else if (session.hasFallbackOwner || session.ownerIds.size === 0) {
		session.ownerIds.add(sessionId);
		session.hasFallbackOwner = true;
	}
	session.lastUsedAt = Date.now();
	return true;
}

function getRetainedKernelSessionCount(): number {
	return kernelSessions.size + disposingKernelSessions.size;
}

function syncCleanupTimer(): void {
	if (kernelSessions.size === 0 && disposingKernelSessions.size === 0) {
		stopCleanupTimer();
		return;
	}
	startCleanupTimer();
}

function retryPendingKernelSessionDisposals(now: number = Date.now()): void {
	for (const session of disposingKernelSessions.values()) {
		if (session.disposeResultPromise) continue;
		if (session.nextDisposalRetryAt !== undefined && session.nextDisposalRetryAt > now) continue;
		session.nextDisposalRetryAt = undefined;
		void disposeKernelSession(session);
	}
}

function beginDisposingKernelSession(session: KernelSession): boolean {
	if (session.disposing) return false;
	session.disposing = true;
	disposingKernelSessions.add(session);
	if (kernelSessions.get(session.id) === session) {
		kernelSessions.delete(session.id);
	}
	if (session.heartbeatTimer) {
		clearInterval(session.heartbeatTimer);
		session.heartbeatTimer = undefined;
	}
	syncCleanupTimer();
	return true;
}

function finishDisposingKernelSession(session: KernelSession): void {
	disposingKernelSessions.delete(session);
	session.resolveDisposeCapacity?.();
	session.resolveDisposeCapacity = undefined;
	session.disposeCapacityPromise = undefined;
	session.resolveDisposeAttempt = undefined;
	session.disposeAttemptPromise = undefined;
	session.disposeResultPromise = undefined;
	session.disposeResultTimeoutMs = undefined;
	session.nextDisposalRetryAt = undefined;
	syncCleanupTimer();
}

async function waitForDisposalCapacity(
	options: Pick<KernelSessionExecutionOptions, "signal" | "deadlineMs">,
): Promise<void> {
	retryPendingKernelSessionDisposals();

	const disposalPromises: Promise<void>[] = [];
	let nextRetryAt: number | undefined;
	for (const session of disposingKernelSessions.values()) {
		if (session.disposeCapacityPromise) {
			disposalPromises.push(
				session.disposeCapacityPromise.then(
					() => undefined,
					() => undefined,
				),
			);
		}
		if (session.disposeAttemptPromise) {
			disposalPromises.push(
				session.disposeAttemptPromise.then(
					() => undefined,
					() => undefined,
				),
			);
		}
		if (session.nextDisposalRetryAt !== undefined) {
			nextRetryAt =
				nextRetryAt === undefined
					? session.nextDisposalRetryAt
					: Math.min(nextRetryAt, session.nextDisposalRetryAt);
		}
	}
	if (disposalPromises.length > 0) {
		await waitForPromiseWithCancellation(Promise.race(disposalPromises), options);
		return;
	}
	if (nextRetryAt === undefined) return;
	await waitForPromiseWithCancellation(
		Bun.sleep(Math.max(0, nextRetryAt - Date.now())).then(() => undefined),
		options,
	);
}

async function ensureKernelSessionCapacity(
	options: Pick<KernelSessionExecutionOptions, "signal" | "deadlineMs">,
): Promise<void> {
	while (getRetainedKernelSessionCount() >= MAX_KERNEL_SESSIONS) {
		if (disposingKernelSessions.size > 0) {
			await waitForDisposalCapacity(options);
			continue;
		}
		if (kernelSessions.size === 0) {
			await waitForDisposalCapacity(options);
			continue;
		}
		await evictOldestSession();
	}
}

async function cleanupIdleSessions(): Promise<void> {
	const now = Date.now();
	const toDispose: KernelSession[] = [];

	for (const session of kernelSessions.values()) {
		if (session.dead || now - session.lastUsedAt > IDLE_TIMEOUT_MS) {
			toDispose.push(session);
		}
	}

	if (toDispose.length > 0) {
		logger.debug("Cleaning up idle kernel sessions", { count: toDispose.length });
		await Promise.allSettled(toDispose.map(session => disposeKernelSession(session)));
	}

	retryPendingKernelSessionDisposals(now);
	syncCleanupTimer();
}

async function evictOldestSession(): Promise<void> {
	let oldest: KernelSession | null = null;
	for (const session of kernelSessions.values()) {
		if (!oldest || session.lastUsedAt < oldest.lastUsedAt) {
			oldest = session;
		}
	}
	if (oldest) {
		logger.debug("Evicting oldest kernel session", { id: oldest.id });
		await disposeKernelSession(oldest);
	}
}

export async function disposeAllKernelSessions(): Promise<void> {
	stopCleanupTimer();
	const sessions = Array.from(new Set([...kernelSessions.values(), ...disposingKernelSessions.values()]));
	await Promise.allSettled(sessions.map(session => disposeKernelSession(session)));
}

export async function disposeKernelSessionsByOwner(ownerId: string): Promise<void> {
	const sessionsToDispose: KernelSession[] = [];
	for (const session of new Set([...kernelSessions.values(), ...disposingKernelSessions.values()])) {
		if (!session.ownerIds.delete(ownerId)) continue;
		if (session.ownerIds.size === 0) {
			sessionsToDispose.push(session);
		}
	}
	await Promise.allSettled(
		sessionsToDispose.map(session => disposeKernelSession(session, OWNER_CLEANUP_KERNEL_SHUTDOWN_TIMEOUT_MS)),
	);
	syncCleanupTimer();
}

async function ensureKernelAvailable(
	cwd: string,
	options: Pick<KernelSessionExecutionOptions, "signal" | "deadlineMs"> = {},
): Promise<void> {
	const availability = await waitForPromiseWithCancellation(checkPythonKernelAvailability(cwd), options);
	if (!availability.ok) {
		throw new Error(availability.reason ?? "Python kernel unavailable");
	}
}

function ensureKernelHeartbeat(session: KernelSession): void {
	if (session.heartbeatTimer) return;
	session.heartbeatTimer = setInterval(() => {
		if (session.dead || session.needsRestart) return;
		if (!session.kernel.isAlive()) {
			session.dead = true;
		}
	}, 5000);
	session.heartbeatTimer.unref();
}

async function createKernelSession(
	sessionId: string,
	cwd: string,
	options: KernelSessionExecutionOptions = {},
): Promise<KernelSession> {
	requireRemainingTimeoutMs(options.deadlineMs);
	const env = buildKernelEnv(options);
	const startOptions = buildKernelStartOptions(cwd, env, options);

	const kernel = await logger.time("createKernelSession:PythonKernel.start", PythonKernel.start, startOptions);

	const hasFallbackOwner = options.kernelOwnerId === undefined;
	const initialOwnerId = options.kernelOwnerId ?? sessionId;
	const session: KernelSession = {
		id: sessionId,
		kernel,
		queue: Promise.resolve(),
		restartCount: 0,
		dead: false,
		needsRestart: false,
		disposing: false,
		disposeResultPromise: undefined,
		nextDisposalRetryAt: undefined,
		lastUsedAt: Date.now(),
		ownerIds: new Set([initialOwnerId]),
		hasFallbackOwner,
	};

	ensureKernelHeartbeat(session);

	return session;
}

async function restartKernelSession(
	session: KernelSession,
	cwd: string,
	options: KernelSessionExecutionOptions = {},
): Promise<void> {
	session.restartCount += 1;
	if (session.restartCount > 1) {
		throw new Error("Python kernel restarted too many times in this session");
	}
	requireRemainingTimeoutMs(options.deadlineMs);
	try {
		const deadKernel = session.dead || !session.kernel.isAlive();
		const shutdownTimeoutMs = requireRemainingTimeoutMs(options.deadlineMs);
		const shutdownResult = await session.kernel.shutdown({ signal: options.signal, timeoutMs: shutdownTimeoutMs });
		if (!shutdownResult.confirmed && !deadKernel) {
			throw new Error("Failed to confirm crashed kernel shutdown before restart");
		}
		if (!shutdownResult.confirmed) {
			logger.warn("Proceeding with retained kernel restart after unconfirmed dead-kernel shutdown", {
				sessionId: session.id,
			});
		}
		const env = buildKernelEnv(options);
		const startOptions = buildKernelStartOptions(cwd, env, options);
		const kernel = await PythonKernel.start(startOptions);
		session.kernel = kernel;
		session.dead = false;
		session.needsRestart = false;
		session.lastUsedAt = Date.now();
		ensureKernelHeartbeat(session);
	} catch (err) {
		session.restartCount = 0;
		logger.warn("Failed to restart kernel", { error: err instanceof Error ? err.message : String(err) });
		throw err;
	}
}

type KernelDisposalResult = { status: "confirmed" } | { status: "unconfirmed" } | { status: "failed"; err: unknown };
type KernelDisposalWaitResult = KernelDisposalResult | { status: "timedOut" };

function createKernelDisposalResultPromise(session: KernelSession, timeoutMs?: number): Promise<KernelDisposalResult> {
	return Promise.resolve()
		.then(() => session.kernel.shutdown(timeoutMs === undefined ? undefined : { timeoutMs }))
		.then(
			result => (result.confirmed ? { status: "confirmed" as const } : { status: "unconfirmed" as const }),
			(err: unknown) => ({ status: "failed" as const, err }),
		);
}

function getOrStartKernelDisposalResultPromise(
	session: KernelSession,
	timeoutMs?: number,
): Promise<KernelDisposalResult> {
	if (!session.disposeResultPromise) {
		session.disposeResultTimeoutMs = timeoutMs;
		const releaseDisposalAttempt = Promise.withResolvers<void>();
		session.disposeAttemptPromise = releaseDisposalAttempt.promise;
		session.resolveDisposeAttempt = releaseDisposalAttempt.resolve;
		const disposeResultPromise = createKernelDisposalResultPromise(session, timeoutMs);
		void disposeResultPromise.then(result => {
			if (result.status === "confirmed") {
				finishDisposingKernelSession(session);
				return;
			}
			if (session.disposing) {
				session.nextDisposalRetryAt = Date.now() + CLEANUP_INTERVAL_MS;
				syncCleanupTimer();
			}
		});
		const disposalAttemptPromise = disposeResultPromise.finally(() => {
			releaseDisposalAttempt.resolve();
			if (session.disposeResultPromise === disposalAttemptPromise) {
				session.disposeResultPromise = undefined;
				session.disposeResultTimeoutMs = undefined;
			}
			if (session.disposeAttemptPromise === releaseDisposalAttempt.promise) {
				session.disposeAttemptPromise = undefined;
				session.resolveDisposeAttempt = undefined;
			}
		});
		session.disposeResultPromise = disposalAttemptPromise;
	}
	return session.disposeResultPromise;
}

async function waitForKernelSessionDisposal(
	session: KernelSession,
	timeoutMs?: number,
): Promise<KernelDisposalWaitResult | undefined> {
	const disposeResultPromise = session.disposeResultPromise;
	if (!disposeResultPromise) {
		return undefined;
	}
	if (timeoutMs === undefined) {
		return await disposeResultPromise;
	}

	let timeoutId: NodeJS.Timeout | undefined;
	const result = await Promise.race([
		disposeResultPromise,
		new Promise<{ status: "timedOut" }>(resolve => {
			timeoutId = setTimeout(() => resolve({ status: "timedOut" }), timeoutMs);
			timeoutId.unref();
		}),
	]);

	if (timeoutId) {
		clearTimeout(timeoutId);
	}
	return result;
}

function retryKernelSessionDisposalInBackground(session: KernelSession): void {
	session.nextDisposalRetryAt = undefined;
	void disposeKernelSession(session);
}

async function disposeKernelSession(session: KernelSession, shutdownTimeoutMs?: number): Promise<void> {
	if (!session.disposing) {
		if (!beginDisposingKernelSession(session)) return;
		const releaseDisposalCapacity = Promise.withResolvers<void>();
		session.disposeCapacityPromise = releaseDisposalCapacity.promise;
		session.resolveDisposeCapacity = releaseDisposalCapacity.resolve;
	}

	if (
		shutdownTimeoutMs === undefined &&
		session.disposeResultPromise &&
		session.disposeResultTimeoutMs !== undefined
	) {
		const inheritedResult = await session.disposeResultPromise;
		if (inheritedResult.status === "confirmed") {
			finishDisposingKernelSession(session);
			return;
		}
		session.disposeResultPromise = undefined;
		session.disposeResultTimeoutMs = undefined;
		logger.warn("Retained kernel shutdown was not confirmed during owner cleanup; retrying without timeout", {
			sessionId: session.id,
		});
	}

	const inheritedBackgroundRetryTimeoutMs =
		shutdownTimeoutMs === undefined && session.disposeResultPromise && session.disposeResultTimeoutMs === undefined
			? OWNER_CLEANUP_KERNEL_SHUTDOWN_TIMEOUT_MS
			: shutdownTimeoutMs;

	getOrStartKernelDisposalResultPromise(session, shutdownTimeoutMs);
	const result = await waitForKernelSessionDisposal(session, inheritedBackgroundRetryTimeoutMs);
	if (!result) {
		return;
	}
	if (result.status === "timedOut") {
		logger.warn(
			shutdownTimeoutMs === undefined
				? "Timed out waiting for retained kernel shutdown during global cleanup; retained capacity remains reserved"
				: "Timed out shutting down retained kernel during owner cleanup",
			{
				sessionId: session.id,
				timeoutMs: inheritedBackgroundRetryTimeoutMs,
			},
		);
		if (shutdownTimeoutMs !== undefined) {
			retryKernelSessionDisposalInBackground(session);
		}
		return;
	}
	if (result.status === "confirmed") {
		finishDisposingKernelSession(session);
		return;
	}
	if (result.status === "unconfirmed") {
		logger.warn(
			shutdownTimeoutMs === undefined
				? "Kernel shutdown was not confirmed; retained capacity remains reserved"
				: "Retained kernel shutdown was not confirmed during owner cleanup",
			{ sessionId: session.id },
		);
		if (shutdownTimeoutMs !== undefined) {
			retryKernelSessionDisposalInBackground(session);
		}
		return;
	}
	logger.warn(
		shutdownTimeoutMs === undefined
			? "Failed to shutdown kernel"
			: "Failed to shutdown retained kernel during owner cleanup",
		{
			sessionId: session.id,
			error: result.err instanceof Error ? result.err.message : String(result.err),
		},
	);
	if (shutdownTimeoutMs !== undefined) {
		retryKernelSessionDisposalInBackground(session);
	}
	return;
}

async function withKernelSession<T>(
	sessionId: string,
	cwd: string,
	handler: (kernel: PythonKernel) => Promise<T>,
	options: KernelSessionExecutionOptions = {},
): Promise<T> {
	let session = kernelSessions.get(sessionId);
	if (session?.disposing) {
		session = undefined;
	}
	if (!session) {
		await ensureKernelSessionCapacity(options);
		requireRemainingTimeoutMs(options.deadlineMs);
		if (options.signal?.aborted) {
			throw new PythonExecutionCancelledError(isTimedOutCancellation(options.signal.reason, options.signal));
		}
		session = await logger.time("kernel:createKernelSession", createKernelSession, sessionId, cwd, options);
		kernelSessions.set(sessionId, session);
		startCleanupTimer();
	}
	attachKernelOwner(sessionId, options.kernelOwnerId);

	if (session.disposing) {
		return await withKernelSession(sessionId, cwd, handler, options);
	}

	const run = async (): Promise<T> => {
		session!.lastUsedAt = Date.now();
		if (session!.dead || session!.needsRestart || !session!.kernel.isAlive()) {
			await logger.time("kernel:restartKernelSession", restartKernelSession, session!, cwd, options);
		}
		try {
			const result = await logger.time("kernel:withSession:handler", handler, session!.kernel);
			session!.restartCount = 0;
			return result;
		} catch (err) {
			if (!session!.dead && !session!.needsRestart && session!.kernel.isAlive()) {
				throw err;
			}
			await logger.time("kernel:restartKernelSession", restartKernelSession, session!, cwd, options);
			const result = await logger.time("kernel:postRestart:handler", handler, session!.kernel);
			session!.restartCount = 0;
			return result;
		}
	};

	const queue = session.queue;
	let releaseTurn: (() => void) | undefined;
	const turn = new Promise<void>(resolve => {
		releaseTurn = resolve;
	});
	session.queue = queue
		.then(
			() => turn,
			() => turn,
		)
		.then(
			() => undefined,
			() => undefined,
		);

	try {
		await waitForQueueTurn(queue, options);
		if (session.disposing) {
			return await withKernelSession(sessionId, cwd, handler, options);
		}
		return await run();
	} finally {
		releaseTurn?.();
	}
}

async function executeWithKernel(
	kernel: PythonKernelExecutor,
	code: string,
	options: PythonExecutorOptions | undefined,
): Promise<PythonResult> {
	const settings = await Settings.init();
	const sink = new OutputSink({
		onChunk: options?.onChunk,
		artifactPath: options?.artifactPath,
		artifactId: options?.artifactId,
		headBytes: resolveOutputSinkHeadBytes(settings),
		maxColumns: resolveOutputMaxColumns(settings),
	});
	const displayOutputs: KernelDisplayOutput[] = [];
	const deadlineMs = getExecutionDeadlineMs(options);
	let executionTimeoutMs: number | undefined;

	const emitStatus =
		options?.emitStatus ??
		((event: JsStatusEvent) => {
			displayOutputs.push({ type: "status", event });
		});
	const unregisterBridge =
		options?.toolSession && options?.bridgeSessionId
			? registerPyToolBridge(options.bridgeSessionId, {
					toolSession: options.toolSession,
					signal: options.signal,
					emitStatus,
				})
			: null;

	try {
		executionTimeoutMs = requireRemainingTimeoutMs(deadlineMs);
		const result = await kernel.execute(code, {
			signal: options?.signal,
			timeoutMs: executionTimeoutMs,
			onChunk: text => sink.push(text),
			onDisplay: output => void displayOutputs.push(output),
		});

		if (result.cancelled) {
			const annotation = result.timedOut ? formatTimeoutAnnotation(executionTimeoutMs) : undefined;
			return {
				exitCode: undefined,
				cancelled: true,
				displayOutputs,
				stdinRequested: result.stdinRequested,
				...(await sink.dump(annotation)),
			};
		}

		if (result.stdinRequested) {
			return {
				exitCode: 1,
				cancelled: false,
				displayOutputs,
				stdinRequested: true,
				...(await sink.dump("Kernel requested stdin; interactive input is not supported.")),
			};
		}

		const exitCode = result.status === "ok" ? 0 : 1;
		return {
			exitCode,
			cancelled: false,
			displayOutputs,
			stdinRequested: false,
			...(await sink.dump()),
		};
	} catch (err) {
		if (isCancellationError(err) || options?.signal?.aborted) {
			const timedOut = isTimedOutCancellation(err, options?.signal);
			return {
				exitCode: undefined,
				cancelled: true,
				displayOutputs,
				stdinRequested: false,
				...(await sink.dump(timedOut ? formatTimeoutAnnotation(executionTimeoutMs) : undefined)),
			};
		}
		const error = err instanceof Error ? err : new Error(String(err));
		logger.error("Python execution failed", { error: error.message });
		throw error;
	} finally {
		unregisterBridge?.();
	}
}

export async function executePythonWithKernel(
	kernel: PythonKernelExecutor,
	code: string,
	options?: PythonExecutorOptions,
): Promise<PythonResult> {
	return await executeWithKernel(kernel, code, options);
}

export async function executePython(code: string, options?: PythonExecutorOptions): Promise<PythonResult> {
	const cwd = options?.cwd ?? getProjectDir();
	const deadlineMs = getExecutionDeadlineMs(options);
	const executionOptions: PythonExecutorOptions = {
		...(options ?? {}),
		deadlineMs,
	};

	try {
		requireRemainingTimeoutMs(deadlineMs);
		if (executionOptions.signal?.aborted) {
			throw new PythonExecutionCancelledError(
				isTimedOutCancellation(executionOptions.signal.reason, executionOptions.signal),
			);
		}

		await ensureKernelAvailable(cwd);

		const kernelMode = executionOptions.kernelMode ?? "session";

		if (executionOptions.toolSession && !executionOptions.bridge) {
			try {
				executionOptions.bridge = await ensurePyToolBridge();
			} catch (err) {
				logger.warn("Failed to start Python tool bridge", {
					error: err instanceof Error ? err.message : String(err),
				});
			}
		}

		if (kernelMode === "per-call") {
			if (executionOptions.bridge && !executionOptions.bridgeSessionId) {
				executionOptions.bridgeSessionId = `py-bridge:${crypto.randomUUID()}`;
			}
			const env = buildKernelEnv(executionOptions);
			requireRemainingTimeoutMs(deadlineMs);
			const startOptions = buildKernelStartOptions(cwd, env, executionOptions);
			const kernel = await PythonKernel.start(startOptions);
			try {
				return await executeWithKernel(kernel, code, executionOptions);
			} finally {
				await kernel.shutdown();
			}
		}

		const sessionId = executionOptions.sessionId ?? `session:${cwd}`;
		if (executionOptions.bridge && !executionOptions.bridgeSessionId) {
			executionOptions.bridgeSessionId = sessionId;
		}
		if (executionOptions.reset) {
			const existing = kernelSessions.get(sessionId);
			if (existing) {
				await disposeKernelSession(existing);
				if (existing.disposing && existing.nextDisposalRetryAt !== undefined) {
					retryKernelSessionDisposalInBackground(existing);
				}
			}
		}
		return await withKernelSession(
			sessionId,
			cwd,
			async kernel => executeWithKernel(kernel, code, executionOptions),
			executionOptions,
		);
	} catch (err) {
		if (isCancellationError(err) || executionOptions.signal?.aborted) {
			return createCancelledPythonResult(isTimedOutCancellation(err, executionOptions.signal));
		}
		throw err;
	}
}