@ai-hero/sandcastle 0.10.0 → 0.12.0

package/README.md

@@ -57,7 +57,7 @@ import { run, claudeCode } from "@ai-hero/sandcastle";
 import { docker } from "@ai-hero/sandcastle/sandboxes/docker";
 
 await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(), // or podman(), vercel(), or your own provider
   promptFile: ".sandcastle/prompt.md",
 });
@@ -84,7 +84,7 @@ import { noSandbox } from "@ai-hero/sandcastle/sandboxes/no-sandbox";
 
 // Docker, Podman, and Vercel are interchangeable in run() and createSandbox():
 await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(),
   prompt: "...",
 });
@@ -92,7 +92,7 @@ await run({
 // No-sandbox runs the agent directly on the host — accepted by run(),
 // createSandbox(), and interactive(). Skips container isolation entirely:
 await interactive({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: noSandbox(),
   prompt: "...", // optional — omit to launch the TUI with no initial prompt
   cwd: "/path/to/other-repo", // optional — defaults to process.cwd()
@@ -110,7 +110,7 @@ import { run, claudeCode } from "@ai-hero/sandcastle";
 import { docker } from "@ai-hero/sandcastle/sandboxes/docker";
 
 const result = await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(),
   promptFile: ".sandcastle/prompt.md",
 });
@@ -130,7 +130,7 @@ import { docker } from "@ai-hero/sandcastle/sandboxes/docker";
 const result = await run({
   // Agent provider — required. Pass a model string to claudeCode().
   // Optional second arg for provider-specific options like effort level.
-  agent: claudeCode("claude-opus-4-7", { effort: "high" }),
+  agent: claudeCode("claude-opus-4-8", { effort: "high" }),
 
   // Sandbox provider — required. Any SandboxProvider works (docker, podman, vercel, or custom).
   // Provider-specific config (like imageName, mounts) lives inside the provider factory call.
@@ -276,7 +276,7 @@ await using sandbox = await createSandbox({
 });
 
 const result = await sandbox.run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   prompt: "Fix issue #42 in this repo.",
 });
 
@@ -297,7 +297,7 @@ await using sandbox = await createSandbox({
 
 // Step 1: implement
 const implResult = await sandbox.run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   promptFile: ".sandcastle/implement.md",
   maxIterations: 5,
 });
@@ -311,6 +311,35 @@ const reviewResult = await sandbox.run({
 
 Commits from all `run()` calls accumulate on the same branch. The sandbox container stays alive between runs, so installed dependencies and build artifacts persist.
 
+`sandbox.exec()` lets the harness run shell commands directly in the same warm sandbox — handy for gating an implement step on a quick verification before kicking off the review:
+
+```typescript
+await using sandbox = await createSandbox({
+  branch: "agent/fix-42",
+  sandbox: docker(),
+  hooks: { sandbox: { onSandboxReady: [{ command: "npm install" }] } },
+});
+
+await sandbox.run({
+  agent: claudeCode("claude-opus-4-8"),
+  promptFile: ".sandcastle/implement.md",
+  maxIterations: 5,
+});
+
+// Verify before review — non-zero exitCode is returned, not thrown.
+const tests = await sandbox.exec("npm test");
+if (tests.exitCode !== 0) {
+  throw new Error(`Tests failed:\n${tests.stdout}\n${tests.stderr}`);
+}
+
+await sandbox.run({
+  agent: claudeCode("claude-sonnet-4-6"),
+  prompt: "Review the changes and fix any issues.",
+});
+```
+
+`cwd` defaults to the sandbox repo path, matching `interactive()`. Pass `cwd` to override.
+
 #### Automatic cleanup with `await using`
 
 `await using` calls `sandbox.close()` automatically when the block exits. If the sandbox has uncommitted changes, the worktree is preserved on disk; if clean, both container and worktree are removed.
@@ -342,40 +371,44 @@ if (closeResult.preservedWorktreePath) {
 
 #### `Sandbox`
 
-| Property / Method       | Type                                                               | Description                                  |
-| ----------------------- | ------------------------------------------------------------------ | -------------------------------------------- |
-| `branch`                | string                                                             | The branch the sandbox is on                 |
-| `worktreePath`          | string                                                             | Host path to the worktree                    |
-| `run(options)`          | `(SandboxRunOptions) => Promise<SandboxRunResult>`                 | Invoke an agent inside the existing sandbox  |
-| `interactive(options)`  | `(SandboxInteractiveOptions) => Promise<SandboxInteractiveResult>` | Launch an interactive session in the sandbox |
-| `close()`               | `() => Promise<CloseResult>`                                       | Tear down the container and sandbox          |
-| `[Symbol.asyncDispose]` | `() => Promise<void>`                                              | Auto teardown via `await using`              |
+| Property / Method       | Type                                                                     | Description                                                                                                               |
+| ----------------------- | ------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------- |
+| `branch`                | string                                                                   | The branch the sandbox is on                                                                                              |
+| `worktreePath`          | string                                                                   | Host path to the worktree                                                                                                 |
+| `run(options)`          | `(SandboxRunOptions) => Promise<SandboxRunResult>`                       | Invoke an agent inside the existing sandbox                                                                               |
+| `interactive(options)`  | `(SandboxInteractiveOptions) => Promise<SandboxInteractiveResult>`       | Launch an interactive session in the sandbox                                                                              |
+| `exec(cmd, options?)`   | `(command: string, options?: SandboxExecOptions) => Promise<ExecResult>` | Run a shell command in the sandbox. `cwd` defaults to the sandbox repo path. Non-zero `exitCode` is returned, not thrown. |
+| `close()`               | `() => Promise<CloseResult>`                                             | Tear down the container and sandbox                                                                                       |
+| `[Symbol.asyncDispose]` | `() => Promise<void>`                                                    | Auto teardown via `await using`                                                                                           |
 
 #### `SandboxRunOptions`
 
-| Option                     | Type               | Default                       | Description                                                                          |
-| -------------------------- | ------------------ | ----------------------------- | ------------------------------------------------------------------------------------ |
-| `agent`                    | AgentProvider      | —                             | **Required.** Agent provider (e.g. `claudeCode("claude-opus-4-7")`)                  |
-| `prompt`                   | string             | —                             | Inline prompt (mutually exclusive with `promptFile`)                                 |
-| `promptFile`               | string             | —                             | Path to prompt file (mutually exclusive with `prompt`)                               |
-| `promptArgs`               | PromptArgs         | —                             | Key-value map for `{{KEY}}` placeholder substitution                                 |
-| `maxIterations`            | number             | `1`                           | Maximum iterations to run                                                            |
-| `completionSignal`         | string \| string[] | `<promise>COMPLETE</promise>` | String(s) the agent emits to stop the iteration loop early                           |
-| `idleTimeoutSeconds`       | number             | `600`                         | Idle timeout in seconds — resets on each agent output event                          |
-| `completionTimeoutSeconds` | number             | `60`                          | Grace window after the completion signal is seen but the agent process hasn't exited |
-| `name`                     | string             | —                             | Display name for the run                                                             |
-| `logging`                  | object             | file (auto-generated)         | `{ type: 'file', path }` or `{ type: 'stdout' }`                                     |
-| `signal`                   | AbortSignal        | —                             | Cancels the run when aborted; handle stays usable afterward                          |
+| Option                     | Type               | Default                       | Description                                                                                                                          |
+| -------------------------- | ------------------ | ----------------------------- | ------------------------------------------------------------------------------------------------------------------------------------ |
+| `agent`                    | AgentProvider      | —                             | **Required.** Agent provider (e.g. `claudeCode("claude-opus-4-8")`)                                                                  |
+| `prompt`                   | string             | —                             | Inline prompt (mutually exclusive with `promptFile`)                                                                                 |
+| `promptFile`               | string             | —                             | Path to prompt file (mutually exclusive with `prompt`)                                                                               |
+| `promptArgs`               | PromptArgs         | —                             | Key-value map for `{{KEY}}` placeholder substitution                                                                                 |
+| `maxIterations`            | number             | `1`                           | Maximum iterations to run                                                                                                            |
+| `completionSignal`         | string \| string[] | `<promise>COMPLETE</promise>` | String(s) the agent emits to stop the iteration loop early                                                                           |
+| `idleTimeoutSeconds`       | number             | `600`                         | Idle timeout in seconds — resets on each agent output event                                                                          |
+| `completionTimeoutSeconds` | number             | `60`                          | Grace window after the completion signal is seen but the agent process hasn't exited                                                 |
+| `name`                     | string             | —                             | Display name for the run                                                                                                             |
+| `logging`                  | object             | file (auto-generated)         | `{ type: 'file', path }` or `{ type: 'stdout' }`                                                                                     |
+| `resumeSession`            | string             | —                             | Resume a prior session by ID for agents that support resume. Incompatible with `maxIterations > 1`. Session file must exist on host. |
+| `signal`                   | AbortSignal        | —                             | Cancels the run when aborted; handle stays usable afterward                                                                          |
 
 #### `SandboxRunResult`
 
-| Field              | Type                | Description                                                        |
-| ------------------ | ------------------- | ------------------------------------------------------------------ |
-| `iterations`       | `IterationResult[]` | Per-iteration results (use `.length` for the count)                |
-| `completionSignal` | string?             | The matched completion signal string, or `undefined` if none fired |
-| `stdout`           | string              | Combined agent output from all iterations                          |
-| `commits`          | `{ sha }[]`         | Commits created during the run                                     |
-| `logFilePath`      | string?             | Path to the log file (only when logging to a file)                 |
+| Field                      | Type                                                                                     | Description                                                                                                                         |
+| -------------------------- | ---------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------- |
+| `iterations`               | `IterationResult[]`                                                                      | Per-iteration results (use `.length` for the count)                                                                                 |
+| `completionSignal`         | string?                                                                                  | The matched completion signal string, or `undefined` if none fired                                                                  |
+| `stdout`                   | string                                                                                   | Combined agent output from all iterations                                                                                           |
+| `commits`                  | `{ sha }[]`                                                                              | Commits created during the run                                                                                                      |
+| `logFilePath`              | string?                                                                                  | Path to the log file (only when logging to a file)                                                                                  |
+| `resume(prompt, options?)` | `(prompt: string, options?: ResumeSandboxRunResultOptions) => Promise<SandboxRunResult>` | Continue the captured session for one iteration inside the same warm sandbox. Present only when the provider captured a session id. |
+| `fork(prompt, options?)`   | `(prompt: string, options?: ResumeSandboxRunResultOptions) => Promise<SandboxRunResult>` | Fork the captured session for one iteration inside the same warm sandbox. The parent session is left intact (ADR 0018).             |
 
 #### `CloseResult`
 
@@ -405,13 +438,13 @@ console.log(wt.branch); // "agent/fix-42"
 
 // Run an interactive session in the worktree (defaults to noSandbox)
 await wt.interactive({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   prompt: "Explore the codebase and understand the bug.",
 });
 
 // Run an AFK agent in the worktree (sandbox is required)
 const result = await wt.run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker({ imageName: "sandcastle:myrepo" }),
   prompt: "Fix issue #42.",
   maxIterations: 3,
@@ -434,6 +467,8 @@ await sandbox.close();
 
 `wt.close()` checks for uncommitted changes: if the worktree is dirty, it's preserved on disk; if clean, it's removed. `await using` calls `close()` automatically. The worktree persists after `run()`, `interactive()`, and `createSandbox()` complete, so you can hand it to another agent or inspect it.
 
+With `branchStrategy: { type: "merge-to-head" }`, each `wt.run()` / `wt.interactive()` merges the agent's commits back to the host's current branch before returning, and the worktree's source branch is preserved across calls so subsequent ones can reuse the same handle. (This differs from top-level `run()`, where the temp branch is deleted after the merge.)
+
 **Split ownership**: When a sandbox is created via `wt.createSandbox()`, `sandbox.close()` tears down the container only — the worktree remains. `wt.close()` is responsible for worktree cleanup. This differs from the top-level `createSandbox()`, where `sandbox.close()` owns both container and worktree.
 
 #### `CreateWorktreeOptions`
@@ -657,7 +692,7 @@ import { docker } from "@ai-hero/sandcastle/sandboxes/docker";
 import { z } from "zod";
 
 const result = await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(),
   prompt: `Analyze the code, and output the result as JSON inside <result> tags.
     The result must match this schema:
@@ -675,7 +710,24 @@ console.log(result.output.score); // typed as number
 
 `Output.string({ tag })` extracts the tag contents as a plain string (trimmed, no JSON parsing). Both helpers require `maxIterations` to be `1` (the default). The resolved prompt must contain the configured opening tag literal.
 
-When extraction or validation fails, `run()` throws a `StructuredOutputError`. Alongside `tag`, `rawMatched`, `cause`, `commits`, `branch`, and `preservedWorktreePath`, the error carries the `sessionId` (and `sessionFilePath`, when the session was captured) of the run that produced the bad output. You can resume that session to ask the agent to re-emit corrected output, without repeating the work:
+When extraction or validation fails, `run()` throws a `StructuredOutputError`. Alongside `tag`, `rawMatched`, `cause`, `commits`, `branch`, and `preservedWorktreePath`, the error carries the `sessionId` (and `sessionFilePath`, when the session was captured) of the run that produced the bad output.
+
+Pass `maxRetries` to have Sandcastle handle the retry loop for you. Each retry resumes the same agent session and feeds back a token-efficient description of the error, so the agent can re-emit a corrected tag without redoing the work. Retries require an agent provider that supports session resumption (`claudeCode`, `codex`, `pi`) — calling `run()` with `maxRetries > 0` against a non-resumable provider (`cursor`, `opencode`, `copilot`) throws immediately.
+
+```ts
+const result = await run({
+  agent: claudeCode("claude-opus-4-8"),
+  sandbox: docker(),
+  prompt: "Analyze the code and emit JSON inside <result> tags.",
+  output: Output.object({
+    tag: "result",
+    schema: z.object({ summary: z.string(), score: z.number() }),
+    maxRetries: 2, // 2 retries on top of the initial attempt
+  }),
+});
+```
+
+If you need to drive the retry loop manually — for example, to customise the feedback prompt or rotate models on each attempt — leave `maxRetries` at its default of `0` and resume the failed session yourself:
 
 ```ts
 import { run, Output, StructuredOutputError } from "@ai-hero/sandcastle";
@@ -781,7 +833,7 @@ Removes the Podman image.
 
 | Option                     | Type               | Default                       | Description                                                                                                                                                                                                                  |
 | -------------------------- | ------------------ | ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `agent`                    | AgentProvider      | —                             | **Required.** Agent provider (e.g. `claudeCode("claude-opus-4-7")`, `pi("claude-sonnet-4-6")`, `codex("gpt-5.4")`, `cursor("composer-2")`, `opencode("opencode/big-pickle")`, `copilot("claude-sonnet-4.5")`)                |
+| `agent`                    | AgentProvider      | —                             | **Required.** Agent provider (e.g. `claudeCode("claude-opus-4-8")`, `pi("claude-sonnet-4-6")`, `codex("gpt-5.4")`, `cursor("composer-2")`, `opencode("opencode/big-pickle")`, `copilot("claude-sonnet-4.5")`)                |
 | `sandbox`                  | SandboxProvider    | —                             | **Required.** Sandbox provider (e.g. `docker()`, `podman()`, `docker({ imageName: "sandcastle:local" })`)                                                                                                                    |
 | `cwd`                      | string             | `process.cwd()`               | Host repo directory — anchor for `.sandcastle/` artifacts and git operations. Relative paths resolve against `process.cwd()`.                                                                                                |
 | `prompt`                   | string             | —                             | Inline prompt (mutually exclusive with `promptFile`)                                                                                                                                                                         |
@@ -844,7 +896,7 @@ Pass `resumeSession` to `run()` to continue a prior Claude Code, Codex, or Pi co
 
 ```typescript
 const result = await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(),
   prompt: "Continue where you left off",
   resumeSession: "abc-123-def",
@@ -882,7 +934,7 @@ Fork enables fan-out workflows where a single parent run is the starting point f
 
 ```typescript
 const parent = await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(),
   prompt: "Read the codebase and summarise the data model",
 });
@@ -906,7 +958,7 @@ const [reviewA, reviewB] = await Promise.all([
 The `claudeCode()` factory accepts an optional second argument for provider-specific options:
 
 ```typescript
-agent: claudeCode("claude-opus-4-7", { effort: "high" });
+agent: claudeCode("claude-opus-4-8", { effort: "high" });
 ```
 
 | Option            | Type                                                                                           | Default | Description                                                                                                                                                                                         |
@@ -951,7 +1003,7 @@ Both **agent providers** and **sandbox providers** accept an optional `env: Reco
 
 ```typescript
 await run({
-  agent: claudeCode("claude-opus-4-7", {
+  agent: claudeCode("claude-opus-4-8", {
     env: { ANTHROPIC_API_KEY: "sk-ant-..." },
   }),
   sandbox: docker({
@@ -1232,19 +1284,19 @@ import { docker } from "@ai-hero/sandcastle/sandboxes/docker";
 
 // head — direct write, bind-mount only (default for bind-mount providers)
 await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(),
   prompt: "…",
 });
 // merge-to-head — temp branch, merge back (default for isolated providers)
 await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: tempDir(),
   prompt: "…",
 });
 // branch — explicit named branch
 await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: docker(),
   branchStrategy: { type: "branch", branch: "agent/fix-42" },
   prompt: "…",
@@ -1259,7 +1311,7 @@ Pass your custom provider via the `sandbox` option — it works the same as the
 import { run, claudeCode } from "@ai-hero/sandcastle";
 
 const result = await run({
-  agent: claudeCode("claude-opus-4-7"),
+  agent: claudeCode("claude-opus-4-8"),
   sandbox: localProcess(), // your custom provider
   prompt: "Fix issue #42 in this repo.",
 });

package/dist/{chunk-72UVAC7B.js → chunk-62WN33RK.js}

@@ -16,15 +16,19 @@ var noSandbox = (options) => ({
       worktreePath,
       exec: (command, opts) => {
         const cwd = opts?.cwd ?? worktreePath;
+        const isWindows = process.platform === "win32";
+        const shellCmd = isWindows ? "cmd.exe" : "sh";
+        const shellArgs = isWindows ? ["/d", "/s", "/c", command] : ["-c", command];
         return new Promise((resolve, reject) => {
-          const proc = spawn("sh", ["-c", command], {
+          const proc = spawn(shellCmd, shellArgs, {
             cwd,
             env: processEnv,
             stdio: [
               opts?.stdin !== void 0 ? "pipe" : "ignore",
               "pipe",
               "pipe"
-            ]
+            ],
+            windowsVerbatimArguments: isWindows
           });
           if (opts?.stdin !== void 0) {
             proc.stdin.write(opts.stdin);
@@ -77,7 +81,8 @@ var noSandbox = (options) => ({
           const proc = spawn(cmd, rest, {
             cwd: opts.cwd ?? worktreePath,
             env: processEnv,
-            stdio: [opts.stdin, opts.stdout, opts.stderr]
+            stdio: [opts.stdin, opts.stdout, opts.stderr],
+            shell: process.platform === "win32"
           });
           proc.on("error", (error) => {
             reject(new Error(`exec failed: ${error.message}`));
@@ -95,5 +100,5 @@ var noSandbox = (options) => ({
 });
 
 export { noSandbox };
-//# sourceMappingURL=chunk-72UVAC7B.js.map
-//# sourceMappingURL=chunk-72UVAC7B.js.map
+//# sourceMappingURL=chunk-62WN33RK.js.map
+//# sourceMappingURL=chunk-62WN33RK.js.map

package/dist/chunk-62WN33RK.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandboxes/no-sandbox.ts"],"names":[],"mappings":";;;;;;AA4CO,IAAM,SAAA,GAAY,CAAC,OAAA,MAAmD;AAAA,EAC3E,GAAA,EAAK,MAAA;AAAA,EACL,IAAA,EAAM,YAAA;AAAA,EACN,GAAA,EAAK,OAAA,EAAS,GAAA,IAAO,EAAC;AAAA,EACtB,MAAA,EAAQ,OAAO,aAAA,KAA4C;AACzD,IAAA,MAAM,eAAe,aAAA,CAAc,YAAA;AACnC,IAAA,MAAM,aAAa,EAAE,GAAG,QAAQ,GAAA,EAAK,GAAG,cAAc,GAAA,EAAI;AAC1D,IAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAE1D,IAAA,MAAM,MAAA,GAA0B;AAAA,MAC9B,YAAA;AAAA,MAEA,IAAA,EAAM,CACJ,OAAA,EACA,IAAA,KAMwB;AAExB,QAAA,MAAM,GAAA,GAAM,MAAM,GAAA,IAAO,YAAA;AACzB,QAAA,MAAM,SAAA,GAAY,QAAQ,QAAA,KAAa,OAAA;AAKvC,QAAA,MAAM,QAAA,GAAW,YAAY,SAAA,GAAY,IAAA;AACzC,QAAA,MAAM,SAAA,GAAY,SAAA,GACd,CAAC,IAAA,EAAM,IAAA,EAAM,MAAM,OAAO,CAAA,GAC1B,CAAC,IAAA,EAAM,OAAO,CAAA;AAElB,QAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,UAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,SAAA,EAAW;AAAA,YACtC,GAAA;AAAA,YACA,GAAA,EAAK,UAAA;AAAA,YACL,KAAA,EAAO;AAAA,cACL,IAAA,EAAM,KAAA,KAAU,MAAA,GAAY,MAAA,GAAS,QAAA;AAAA,cACrC,MAAA;AAAA,cACA;AAAA,aACF;AAAA,YACA,wBAAA,EAA0B;AAAA,WAC3B,CAAA;AAED,UAAA,IAAI,IAAA,EAAM,UAAU,MAAA,EAAW;AAC7B,YAAA,IAAA,CAAK,KAAA,CAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAC5B,YAAA,IAAA,CAAK,MAAO,GAAA,EAAI;AAAA,UAClB;AAEA,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAU;AAC1B,YAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,aAAA,EAAgB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,UACnD,CAAC,CAAA;AAED,UAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,YAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,YAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,IAAI,CAAA;AAC3D,YAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,EAAE,CAAA;AACzD,YAAA,MAAM,KAAK,eAAA,CAAgB,EAAE,KAAA,EAAO,IAAA,CAAK,QAAS,CAAA;AAClD,YAAA,EAAA,CAAG,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACtB,cAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AACpB,cAAA,MAAA,CAAO,IAAI,CAAA;AAAA,YACb,CAAC,CAAA;AACD,YAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,cAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,YAClC,CAAC,CAAA;AACD,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,cAAA,OAAA,CAAQ;AAAA,gBACN,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,gBAC5B,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,gBAC5B,UAAU,IAAA,IAAQ;AAAA,eACnB,CAAA;AAAA,YACH,CAAC,CAAA;AAAA,UACH,CAAA,MAAO;AACL,YAAA,MAAM,eAAyB,EAAC;AAChC,YAAA,MAAM,eAAyB,EAAC;AAChC,YAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,cAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,YACpC,CAAC,CAAA;AACD,YAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,cAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,YACpC,CAAC,CAAA;AACD,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,cAAA,OAAA,CAAQ;AAAA,gBACN,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,gBAC5B,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,gBAC5B,UAAU,IAAA,IAAQ;AAAA,eACnB,CAAA;AAAA,YACH,CAAC,CAAA;AAAA,UACH;AAAA,QACF,CAAC,CAAA;AAAA,MACH,CAAA;AAAA,MAEA,eAAA,EAAiB,CACf,IAAA,EACA,IAAA,KACkC;AAClC,QAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,UAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,IAAA;AAIvB,UAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,EAAM,IAAA,EAAM;AAAA,YAC7B,GAAA,EAAK,KAAK,GAAA,IAAO,YAAA;AAAA,YACjB,GAAA,EAAK,UAAA;AAAA,YACL,OAAO,CAAC,IAAA,CAAK,OAAO,IAAA,CAAK,MAAA,EAAQ,KAAK,MAAM,CAAA;AAAA,YAC5C,KAAA,EAAO,QAAQ,QAAA,KAAa;AAAA,WAC7B,CAAA;AAED,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACjC,YAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,aAAA,EAAgB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,UACnD,CAAC,CAAA;AAED,UAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACxC,YAAA,OAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,IAAQ,CAAA,EAAG,CAAA;AAAA,UACjC,CAAC,CAAA;AAAA,QACH,CAAC,CAAA;AAAA,MACH,CAAA;AAAA,MAEA,OAAO,YAA2B;AAAA,MAElC;AAAA,KACF;AAEA,IAAA,OAAO,MAAA;AAAA,EACT;AACF,CAAA","file":"chunk-62WN33RK.js","sourcesContent":["/**\n * No-sandbox provider — runs the agent directly on the host with no container isolation.\n *\n * Usage:\n *   import { noSandbox } from \"sandcastle/sandboxes/no-sandbox\";\n *   await interactive({ agent: claudeCode(\"claude-opus-4-8\"), sandbox: noSandbox() });\n *\n * Accepted by `run()`, `interactive()`, and `createSandbox()`. Skips\n * container isolation entirely — the agent executes on the host. Does not\n * pass `--dangerously-skip-permissions` to the agent — the user manages\n * permissions themselves.\n */\n\nimport { spawn, type StdioOptions } from \"node:child_process\";\nimport { createInterface } from \"node:readline\";\nimport type {\n  NoSandboxProvider,\n  NoSandboxHandle,\n  ExecResult,\n  InteractiveExecOptions,\n} from \"../SandboxProvider.js\";\nimport { BoundedTail, MAX_TAIL_CHARS } from \"../boundedTail.js\";\n\nexport interface NoSandboxOptions {\n  /** Environment variables injected by this provider. Merged at launch time. */\n  readonly env?: Record<string, string>;\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n}\n\n/**\n * Create a no-sandbox provider.\n *\n * The returned provider runs the agent directly on the host. All three\n * branch strategies are supported (head, merge-to-head, branch),\n * defaulting to head.\n */\nexport const noSandbox = (options?: NoSandboxOptions): NoSandboxProvider => ({\n  tag: \"none\",\n  name: \"no-sandbox\",\n  env: options?.env ?? {},\n  create: async (createOptions): Promise<NoSandboxHandle> => {\n    const worktreePath = createOptions.worktreePath;\n    const processEnv = { ...process.env, ...createOptions.env };\n    const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n\n    const handle: NoSandboxHandle = {\n      worktreePath,\n\n      exec: (\n        command: string,\n        opts?: {\n          onLine?: (line: string) => void;\n          cwd?: string;\n          sudo?: boolean;\n          stdin?: string;\n        },\n      ): Promise<ExecResult> => {\n        // sudo is a no-op for no-sandbox — the user is already on the host\n        const cwd = opts?.cwd ?? worktreePath;\n        const isWindows = process.platform === \"win32\";\n        // PowerShell and cmd.exe don't ship `sh`, so on Windows route the\n        // command string through cmd.exe instead. `/d` skips AutoRun, `/s`\n        // preserves the quoted command verbatim, `/c` runs it and exits.\n        // `windowsVerbatimArguments` keeps Node from re-quoting our args.\n        const shellCmd = isWindows ? \"cmd.exe\" : \"sh\";\n        const shellArgs = isWindows\n          ? [\"/d\", \"/s\", \"/c\", command]\n          : [\"-c\", command];\n\n        return new Promise((resolve, reject) => {\n          const proc = spawn(shellCmd, shellArgs, {\n            cwd,\n            env: processEnv,\n            stdio: [\n              opts?.stdin !== undefined ? \"pipe\" : \"ignore\",\n              \"pipe\",\n              \"pipe\",\n            ],\n            windowsVerbatimArguments: isWindows,\n          });\n\n          if (opts?.stdin !== undefined) {\n            proc.stdin!.write(opts.stdin);\n            proc.stdin!.end();\n          }\n\n          proc.on(\"error\", (error) => {\n            reject(new Error(`exec failed: ${error.message}`));\n          });\n\n          if (opts?.onLine) {\n            const onLine = opts.onLine;\n            const stdoutTail = new BoundedTail(maxOutputTailChars, \"\\n\");\n            const stderrTail = new BoundedTail(maxOutputTailChars, \"\");\n            const rl = createInterface({ input: proc.stdout! });\n            rl.on(\"line\", (line) => {\n              stdoutTail.push(line);\n              onLine(line);\n            });\n            proc.stderr!.on(\"data\", (chunk: Buffer) => {\n              stderrTail.push(chunk.toString());\n            });\n            proc.on(\"close\", (code) => {\n              resolve({\n                stdout: stdoutTail.toString(),\n                stderr: stderrTail.toString(),\n                exitCode: code ?? 0,\n              });\n            });\n          } else {\n            const stdoutChunks: string[] = [];\n            const stderrChunks: string[] = [];\n            proc.stdout!.on(\"data\", (chunk: Buffer) => {\n              stdoutChunks.push(chunk.toString());\n            });\n            proc.stderr!.on(\"data\", (chunk: Buffer) => {\n              stderrChunks.push(chunk.toString());\n            });\n            proc.on(\"close\", (code) => {\n              resolve({\n                stdout: stdoutChunks.join(\"\"),\n                stderr: stderrChunks.join(\"\"),\n                exitCode: code ?? 0,\n              });\n            });\n          }\n        });\n      },\n\n      interactiveExec: (\n        args: string[],\n        opts: InteractiveExecOptions,\n      ): Promise<{ exitCode: number }> => {\n        return new Promise((resolve, reject) => {\n          const [cmd, ...rest] = args;\n          // Agent CLIs on Windows are typically installed as `.cmd`/`.ps1`\n          // npm wrappers; bare `spawn(\"claude\", …)` only resolves `.exe`\n          // without `shell: true`, so let cmd.exe handle PATHEXT lookup.\n          const proc = spawn(cmd!, rest, {\n            cwd: opts.cwd ?? worktreePath,\n            env: processEnv,\n            stdio: [opts.stdin, opts.stdout, opts.stderr] as StdioOptions,\n            shell: process.platform === \"win32\",\n          });\n\n          proc.on(\"error\", (error: Error) => {\n            reject(new Error(`exec failed: ${error.message}`));\n          });\n\n          proc.on(\"close\", (code: number | null) => {\n            resolve({ exitCode: code ?? 0 });\n          });\n        });\n      },\n\n      close: async (): Promise<void> => {\n        // No-op — no container to tear down\n      },\n    };\n\n    return handle;\n  },\n});\n"]}

package/dist/{chunk-NSFQW6ML.js → chunk-CP3TYXZA.js}

@@ -1,5 +1,5 @@
 import { createRequire } from 'node:module';
-import { Effect_exports, resolveUserMounts, processFileMountParents, defaultImageName, registerShutdown, DockerError, formatVolumeMount } from './chunk-5VM5QZ26.js';
+import { Effect_exports, resolveUserMounts, processFileMountParents, defaultImageName, registerShutdown, DockerError, formatVolumeMount } from './chunk-VOG34SRF.js';
 import { createBindMountSandboxProvider } from './chunk-BIWNFKGV.js';
 import { MAX_TAIL_CHARS, BoundedTail } from './chunk-NGBM7T3E.js';
 import { execFile, execFileSync, spawn } from 'child_process';
@@ -358,5 +358,5 @@ var checkImageUid = (imageName, expectedUid) => new Promise((resolve2, reject) =
 });
 
 export { buildImage, docker, removeImage };
-//# sourceMappingURL=chunk-NSFQW6ML.js.map
-//# sourceMappingURL=chunk-NSFQW6ML.js.map
+//# sourceMappingURL=chunk-CP3TYXZA.js.map
+//# sourceMappingURL=chunk-CP3TYXZA.js.map

package/dist/{chunk-NSFQW6ML.js.map → chunk-CP3TYXZA.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/DockerLifecycle.ts","../src/sandboxes/docker.ts"],"names":["resolve","execFile"],"mappings":";;;;;;;;;;AAMA,IAAM,aAAa,CAAC,IAAA,KAClB,cAAA,CAAO,KAAA,CAAM,CAAC,MAAA,KAAW;AACvB,EAAA,QAAA;AAAA,IACE,QAAA;AAAA,IACA,IAAA;AAAA,IACA,EAAE,SAAA,EAAW,EAAA,GAAK,IAAA,GAAO,IAAA,EAAK;AAAA,IAC9B,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAA,KAAW;AACzB,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA;AAAA,UACE,cAAA,CAAO,IAAA;AAAA,YACL,IAAI,WAAA,CAAY;AAAA,cACd,OAAA,EAAS,CAAA,OAAA,EAAU,IAAA,CAAK,CAAC,CAAC,YAAY,MAAA,EAAQ,QAAA,EAAS,IAAK,KAAA,CAAM,OAAO,CAAA;AAAA,aAC1E;AAAA;AACH,SACF;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAA,CAAO,cAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,CAAC,CAAA;AAAA,MAC1C;AAAA,IACF;AAAA,GACF;AACF,CAAC,CAAA;AASI,IAAM,aAAa,CACxB,SAAA,EACA,eACA,OAAA,KAKA,cAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,gBAAgB,MAAA,CAAO,OAAA,CAAQ,SAAS,SAAA,IAAa,EAAE,CAAA,CAAE,OAAA;AAAA,IAC7D,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM,CAAC,aAAA,EAAe,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE;AAAA,GACzC;AACA,EAAA,IAAI,SAAS,UAAA,EAAY;AACvB,IAAA,OAAO,UAAA,CAAW;AAAA,MAChB,OAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAG,aAAA;AAAA,MACH,IAAA;AAAA,MACA,OAAA,CAAQ,QAAQ,UAAU,CAAA;AAAA,MAC1B,QAAQ,GAAA;AAAI,KACb,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,OAAO,UAAA,CAAW;AAAA,MAChB,OAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAG,aAAA;AAAA,MACH,QAAQ,aAAa;AAAA,KACtB,CAAA;AAAA,EACH;AACF,CAAC;AAkCI,IAAM,cAAA,GAAiB,CAC5B,aAAA,EACA,SAAA,EACA,KACA,OAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AAEtB,EAAA,MAAM,QAAA,GAAW,OAAO,UAAA,CAAW;AAAA,IACjC,IAAA;AAAA,IACA,IAAA;AAAA,IACA,UAAA;AAAA,IACA,SAAS,aAAa,CAAA,CAAA,CAAA;AAAA,IACtB,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,IAAI,QAAA,CAAS,IAAA,EAAK,KAAM,aAAA,EAAe;AACrC,IAAA,OAAO,cAAA,CAAO,IAAA;AAAA,MACZ,IAAI,WAAA,CAAY;AAAA,QACd,OAAA,EAAS,cAAc,aAAa,CAAA,oCAAA;AAAA,OACrC;AAAA,KACH;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAQ,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM;AAAA,IACvD,IAAA;AAAA,IACA,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA;AAAA,GACV,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,SAAS,YAAA,IAAgB,GAAA;AAC9C,EAAA,MAAM,eAAe,OAAA,EAAS,YAAA,IAAgB,EAAC,EAAG,OAAA,CAAQ,CAAC,KAAA,KAAU;AAAA,IACnE,IAAA;AAAA,IACA,iBAAA,CAAkB,OAAO,YAAY;AAAA,GACtC,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,SAAS,OAAA,GAAU,CAAC,MAAM,OAAA,CAAQ,OAAO,IAAI,EAAC;AACnE,EAAA,MAAM,SAAA,GAAY,SAAS,IAAA,GAAO,CAAC,UAAU,OAAA,CAAQ,IAAI,IAAI,EAAC;AAC9D,EAAA,MAAM,QAAA,GAAW,OAAA,EAAS,OAAA,GACtB,KAAA,CAAM,QAAQ,OAAA,CAAQ,OAAO,CAAA,GAC3B,OAAA,CAAQ,OAAA,GACR,CAAC,OAAA,CAAQ,OAAO,IAClB,EAAC;AACL,EAAA,MAAM,YAAA,GAAe,SAAS,OAAA,CAAQ,CAAC,MAAM,CAAC,WAAA,EAAa,CAAC,CAAC,CAAA;AAC7D,EAAA,MAAM,iBAAiB,OAAA,EAAS,MAAA,IAAU,EAAC,EAAG,OAAA,CAAQ,CAAC,CAAA,KAAM;AAAA,IAC3D,aAAA;AAAA,IACA,OAAO,CAAC;AAAA,GACT,CAAA;AACD,EAAA,MAAM,eAAe,OAAA,EAAS,OAAA,IAAW,EAAC,EAAG,OAAA,CAAQ,CAAC,CAAA,KAAM;AAAA,IAC1D,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,SAAA,GACJ,OAAA,EAAS,IAAA,KAAS,MAAA,GAAY,CAAC,QAAA,EAAU,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAC,CAAA,GAAI,EAAC;AAEpE,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,KAAA;AAAA,IACA,IAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA,GAAG,QAAA;AAAA,IACH,GAAG,WAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,GAAG,aAAA;AAAA,IACH,GAAG,WAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH;AAAA,GACD,CAAA;AACH,CAAC,CAAA;AAKI,IAAM,eAAA,GAAkB,CAC7B,aAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AAEtB,EAAA,OAAO,eAAO,MAAA,CAAO,UAAA,CAAW,CAAC,MAAA,EAAQ,aAAa,CAAC,CAAC,CAAA;AAExD,EAAA,OAAO,eAAO,MAAA,CAAO,UAAA,CAAW,CAAC,IAAA,EAAM,aAAa,CAAC,CAAC,CAAA;AACxD,CAAC,CAAA;AAKI,IAAM,WAAA,GAAc,CACzB,SAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AACtB,EAAA,OAAO,UAAA,CAAW,CAAC,KAAA,EAAO,SAAS,CAAC,CAAA;AACtC,CAAC;;;AC9DI,IAAM,MAAA,GAAS,CAAC,OAAA,KAA6C;AAClE,EAAA,MAAM,sBAAsB,OAAA,EAAS,SAAA;AACrC,EAAA,MAAM,YAAA,GAAe,SAAS,YAAA,IAAgB,GAAA;AAC9C,EAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAC1D,EAAA,MAAM,cAAA,GAAiB,aAAA;AACvB,EAAA,MAAM,UAAA,GAAa,SAAS,MAAA,GACxB,iBAAA,CAAkB,QAAQ,MAAA,EAAQ,cAAc,IAChD,EAAC;AAGL,EAAA,MAAM,kBAAA,GAAqB,uBAAA;AAAA,IACzB,UAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO,8BAAA,CAA+B;AAAA,IACpC,IAAA,EAAM,QAAA;AAAA,IACN,KAAK,OAAA,EAAS,GAAA;AAAA,IACd,cAAA;AAAA,IACA,MAAA,EAAQ,OACN,aAAA,KACoC;AACpC,MAAA,MAAM,aAAA,GAAgB,CAAA,WAAA,EAAc,UAAA,EAAY,CAAA,CAAA;AAEhD,MAAA,MAAM,YAAA,GACJ,cAAc,MAAA,CAAO,IAAA;AAAA,QACnB,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,KAAa,aAAA,CAAc;AAAA,SACnC,WAAA,IAAe,uBAAA;AAGpB,MAAA,MAAM,YAAY,CAAC,GAAG,aAAA,CAAc,MAAA,EAAQ,GAAG,UAAU,CAAA;AACzD,MAAA,MAAM,YAAA,GAAe,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACzC,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,UAAU,CAAA,CAAE;AAAA,OACd,CAAE,CAAA;AAGF,MAAA,MAAM,SAAA,GACJ,mBAAA,IAAuB,gBAAA,CAAiB,aAAA,CAAc,YAAY,CAAA;AAEpE,MAAA,MAAM,YAAA,GAAe,OAAA,EAAS,YAAA,IAAgB,OAAA,CAAQ,UAAS,IAAK,GAAA;AACpE,MAAA,MAAM,YAAA,GAAe,OAAA,EAAS,YAAA,IAAgB,OAAA,CAAQ,UAAS,IAAK,GAAA;AAGpE,MAAA,MAAM,aAAA,CAAc,WAAW,YAAY,CAAA;AAG3C,MAAA,MAAM,cAAA,CAAO,UAAA;AAAA,QACX,cAAA;AAAA,UACE,aAAA;AAAA,UACA,SAAA;AAAA,UACA;AAAA,YACE,GAAG,aAAA,CAAc,GAAA;AAAA,YACjB,IAAA,EAAM;AAAA,WACR;AAAA,UACA;AAAA,YACE,YAAA;AAAA,YACA,OAAA,EAAS,YAAA;AAAA,YACT,IAAA,EAAM,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AAAA,YACrC,SAAS,OAAA,EAAS,OAAA;AAAA,YAClB,QAAQ,OAAA,EAAS,MAAA;AAAA,YACjB,SAAS,OAAA,EAAS,OAAA;AAAA,YAClB,MAAM,OAAA,EAAS,IAAA;AAAA,YACf;AAAA;AACF;AACF,OACF;AAGA,MAAA,KAAA,MAAW,OAAO,kBAAA,EAAoB;AACpC,QAAA,MAAM,IAAI,OAAA,CAAc,CAACA,QAAAA,EAAS,MAAA,KAAW;AAC3C,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA;AAAA,cACE,MAAA;AAAA,cACA,QAAA;AAAA,cACA,KAAA;AAAA,cACA,aAAA;AAAA,cACA,IAAA;AAAA,cACA,IAAA;AAAA,cACA,CAAA,gCAAA,CAAA;AAAA,cACA,IAAA;AAAA,cACA,GAAA;AAAA,cACA,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAY,CAAA;AAAA,aACjC;AAAA,YACA,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA;AAAA,kBACE,IAAI,KAAA;AAAA,oBACF,CAAA,mCAAA,EAAsC,GAAG,CAAA,gBAAA,EAAmB,KAAA,CAAM,OAAO,CAAA;AAAA;AAC3E,iBACF;AAAA,cACF,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AAKA,MAAA,MAAM,sBAAsB,MAAM;AAChC,QAAA,IAAI;AACF,UAAA,YAAA,CAAa,QAAA,EAAU,CAAC,IAAA,EAAM,IAAA,EAAM,aAAa,CAAA,EAAG;AAAA,YAClD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF,CAAA;AACA,MAAA,MAAM,kBAAA,GAAqB,iBAAiB,mBAAmB,CAAA;AAE/D,MAAA,MAAM,MAAA,GAAiC;AAAA,QACrC,YAAA;AAAA,QAEA,IAAA,EAAM,CACJ,OAAA,EACA,IAAA,KAMwB;AACxB,UAAA,MAAM,gBAAA,GAAmB,IAAA,EAAM,IAAA,GAAO,CAAA,KAAA,EAAQ,OAAO,CAAA,CAAA,GAAK,OAAA;AAC1D,UAAA,MAAM,IAAA,GAAO,CAAC,MAAM,CAAA;AACpB,UAAA,IAAI,IAAA,EAAM,KAAA,KAAU,MAAA,EAAW,IAAA,CAAK,KAAK,IAAI,CAAA;AAC7C,UAAA,IAAI,MAAM,GAAA,EAAK,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,GAAG,CAAA;AACvC,UAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAe,IAAA,EAAM,IAAA,EAAM,gBAAgB,CAAA;AAErD,UAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,YAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,IAAA,EAAM;AAAA,cACjC,KAAA,EAAO;AAAA,gBACL,IAAA,EAAM,KAAA,KAAU,MAAA,GAAY,MAAA,GAAS,QAAA;AAAA,gBACrC,MAAA;AAAA,gBACA;AAAA;AACF,aACD,CAAA;AAED,YAAA,IAAI,IAAA,EAAM,UAAU,MAAA,EAAW;AAC7B,cAAA,IAAA,CAAK,KAAA,CAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAC5B,cAAA,IAAA,CAAK,MAAO,GAAA,EAAI;AAAA,YAClB;AAEA,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAU;AAC1B,cAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,YAC1D,CAAC,CAAA;AAED,YAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,cAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,cAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,IAAI,CAAA;AAC3D,cAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,EAAE,CAAA;AACzD,cAAA,MAAM,KAAK,eAAA,CAAgB,EAAE,KAAA,EAAO,IAAA,CAAK,QAAS,CAAA;AAClD,cAAA,EAAA,CAAG,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACtB,gBAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AACpB,gBAAA,MAAA,CAAO,IAAI,CAAA;AAAA,cACb,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cAClC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,gBAAAA,QAAAA,CAAQ;AAAA,kBACN,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,kBAC5B,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,kBAC5B,UAAU,IAAA,IAAQ;AAAA,iBACnB,CAAA;AAAA,cACH,CAAC,CAAA;AAAA,YACH,CAAA,MAAO;AACL,cAAA,MAAM,eAAyB,EAAC;AAChC,cAAA,MAAM,eAAyB,EAAC;AAChC,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cACpC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cACpC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,gBAAAA,QAAAA,CAAQ;AAAA,kBACN,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,kBAC5B,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,kBAC5B,UAAU,IAAA,IAAQ;AAAA,iBACnB,CAAA;AAAA,cACH,CAAC,CAAA;AAAA,YACH;AAAA,UACF,CAAC,CAAA;AAAA,QACH,CAAA;AAAA,QAEA,eAAA,EAAiB,CACf,IAAA,EACA,IAAA,KACkC;AAClC,UAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,YAAA,MAAM,UAAA,GAAa,CAAC,MAAM,CAAA;AAE1B,YAAA,IACE,OAAA,IAAW,IAAA,CAAK,KAAA,IACf,IAAA,CAAK,MAA8B,KAAA,EACpC;AACA,cAAA,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,YACvB,CAAA,MAAO;AACL,cAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,YACtB;AACA,YAAA,IAAI,KAAK,GAAA,EAAK,UAAA,CAAW,IAAA,CAAK,IAAA,EAAM,KAAK,GAAG,CAAA;AAC5C,YAAA,UAAA,CAAW,IAAA,CAAK,aAAA,EAAe,GAAG,IAAI,CAAA;AAEtC,YAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,UAAA,EAAY;AAAA,cACvC,OAAO,CAAC,IAAA,CAAK,OAAO,IAAA,CAAK,MAAA,EAAQ,KAAK,MAAM;AAAA,aAC7C,CAAA;AAED,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACjC,cAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,YAC1D,CAAC,CAAA;AAED,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACxC,cAAAA,QAAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,IAAQ,GAAG,CAAA;AAAA,YACjC,CAAC,CAAA;AAAA,UACH,CAAC,CAAA;AAAA,QACH,CAAA;AAAA,QAEA,UAAA,EAAY,CAAC,QAAA,EAAkB,WAAA,KAC7B,IAAI,OAAA,CAAQ,CAACA,UAAS,MAAA,KAAW;AAC/B,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA,CAAC,IAAA,EAAM,QAAA,EAAU,GAAG,aAAa,CAAA,CAAA,EAAI,WAAW,CAAA,CAAE,CAAA;AAAA,YAClD,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0B,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,cAC7D,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,QAEH,WAAA,EAAa,CAAC,WAAA,EAAqB,QAAA,KACjC,IAAI,OAAA,CAAQ,CAACA,UAAS,MAAA,KAAW;AAC/B,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA,CAAC,IAAA,EAAM,CAAA,EAAG,aAAa,CAAA,CAAA,EAAI,WAAW,IAAI,QAAQ,CAAA;AAAA,YAClD,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,cAC9D,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,QAEH,OAAO,YAA2B;AAChC,UAAA,kBAAA,EAAmB;AACnB,UAAA,MAAM,cAAA,CAAO,UAAA,CAAW,eAAA,CAAgB,aAAa,CAAC,CAAA;AAAA,QACxD;AAAA,OACF;AAEA,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,GACD,CAAA;AACH;AAKA,IAAM,aAAA,GAAgB,CAAC,SAAA,EAAmB,WAAA,KACxC,IAAI,OAAA,CAAc,CAACA,UAAS,MAAA,KAAW;AACrC,EAAAC,QAAAA;AAAA,IACE,QAAA;AAAA,IACA,CAAC,OAAA,EAAS,SAAA,EAAW,SAAA,EAAW,YAAY,kBAAkB,CAAA;AAAA,IAC9D,CAAC,OAAO,MAAA,KAAW;AACjB,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,UAAU,SAAS,CAAA,yEAAA;AAAA;AACrB,SACF;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA,GAAA,CAAa,MAAA,IAAU,EAAA,EAAI,QAAA,GAAW,IAAA,EAAK;AACjD,MAAA,IAAI,CAAC,SAAA,EAAW;AAEd,QAAAD,QAAAA,EAAQ;AACR,QAAA;AAAA,MACF;AACA,MAAA,MAAM,OAAA,GAAU,SAAA,CAAU,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AACtC,MAAA,MAAM,QAAA,GAAW,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA;AACrC,MAAA,IAAI,KAAA,CAAM,QAAQ,CAAA,EAAG;AAEnB,QAAAA,QAAAA,EAAQ;AACR,QAAA;AAAA,MACF;AACA,MAAA,IAAI,aAAa,WAAA,EAAa;AAC5B,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,wBAAwB,SAAS,CAAA,qBAAA,EAAwB,QAAQ,CAAA,0BAAA,EACpC,WAAW,mFAEb,QAAQ,CAAA,gCAAA;AAAA;AACrC,SACF;AAAA,MACF,CAAA,MAAO;AACL,QAAAA,QAAAA,EAAQ;AAAA,MACV;AAAA,IACF;AAAA,GACF;AACF,CAAC,CAAA","file":"chunk-NSFQW6ML.js","sourcesContent":["import { Effect } from \"effect\";\nimport { execFile } from \"node:child_process\";\nimport { resolve } from \"node:path\";\nimport { DockerError } from \"./errors.js\";\nimport { formatVolumeMount, type SelinuxLabel } from \"./mountUtils.js\";\n\nconst dockerExec = (args: string[]): Effect.Effect<string, DockerError> =>\n  Effect.async((resume) => {\n    execFile(\n      \"docker\",\n      args,\n      { maxBuffer: 10 * 1024 * 1024 },\n      (error, stdout, stderr) => {\n        if (error) {\n          resume(\n            Effect.fail(\n              new DockerError({\n                message: `docker ${args[0]} failed: ${stderr?.toString() || error.message}`,\n              }),\n            ),\n          );\n        } else {\n          resume(Effect.succeed(stdout.toString()));\n        }\n      },\n    );\n  });\n\n/**\n * Build the sandcastle Docker image.\n *\n * When `dockerfile` is provided, uses `docker build -f <dockerfile> <cwd>`\n * so COPY instructions resolve relative to the current working directory.\n * Otherwise, uses `docker build <dockerfileDir>` (the default .sandcastle/ directory).\n */\nexport const buildImage = (\n  imageName: string,\n  dockerfileDir: string,\n  options?: {\n    readonly dockerfile?: string;\n    readonly buildArgs?: Record<string, string>;\n  },\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    const buildArgFlags = Object.entries(options?.buildArgs ?? {}).flatMap(\n      ([k, v]) => [\"--build-arg\", `${k}=${v}`],\n    );\n    if (options?.dockerfile) {\n      yield* dockerExec([\n        \"build\",\n        \"-t\",\n        imageName,\n        ...buildArgFlags,\n        \"-f\",\n        resolve(options.dockerfile),\n        process.cwd(),\n      ]);\n    } else {\n      yield* dockerExec([\n        \"build\",\n        \"-t\",\n        imageName,\n        ...buildArgFlags,\n        resolve(dockerfileDir),\n      ]);\n    }\n  });\n\nexport interface VolumeMount {\n  readonly hostPath: string;\n  readonly sandboxPath: string;\n  readonly readonly?: boolean;\n}\n\nexport interface StartContainerOptions {\n  readonly volumeMounts?: readonly VolumeMount[];\n  readonly workdir?: string;\n  /** Run the container as this uid:gid instead of the Dockerfile's USER. */\n  readonly user?: string;\n  /** Docker network(s) to attach the container to. Passed as `--network` flags. */\n  readonly network?: string | readonly string[];\n  /** Supplementary groups to add the container user to. Passed as `--group-add` flags. */\n  readonly groups?: readonly (string | number)[];\n  /** Host devices to expose to the container. Passed as `--device` flags. */\n  readonly devices?: readonly string[];\n  /** Limit CPU resources via `--cpus` (e.g. `1.5`). Fractional values allowed. */\n  readonly cpus?: number;\n  /**\n   * SELinux volume label suffix applied to bind mounts (default `\"z\"`).\n   *\n   * - `\"z\"` — shared label. No-op on non-SELinux systems.\n   * - `\"Z\"` — private label; only this container can access the mount.\n   * - `false` — disable labeling entirely.\n   */\n  readonly selinuxLabel?: SelinuxLabel;\n}\n\n/**\n * Start a new container with environment variables injected.\n */\nexport const startContainer = (\n  containerName: string,\n  imageName: string,\n  env: Record<string, string>,\n  options?: StartContainerOptions,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    // Check if container already exists\n    const existing = yield* dockerExec([\n      \"ps\",\n      \"-a\",\n      \"--filter\",\n      `name=^${containerName}$`,\n      \"--format\",\n      \"{{.Names}}\",\n    ]);\n\n    if (existing.trim() === containerName) {\n      yield* Effect.fail(\n        new DockerError({\n          message: `Container '${containerName}' already exists. Run cleanup first.`,\n        }),\n      );\n    }\n\n    const envFlags = Object.entries(env).flatMap(([k, v]) => [\n      \"-e\",\n      `${k}=${v}`,\n    ]);\n\n    const selinuxLabel = options?.selinuxLabel ?? \"z\";\n    const volumeFlags = (options?.volumeMounts ?? []).flatMap((mount) => [\n      \"-v\",\n      formatVolumeMount(mount, selinuxLabel),\n    ]);\n\n    const workdirFlags = options?.workdir ? [\"-w\", options.workdir] : [];\n    const userFlags = options?.user ? [\"--user\", options.user] : [];\n    const networks = options?.network\n      ? Array.isArray(options.network)\n        ? options.network\n        : [options.network]\n      : [];\n    const networkFlags = networks.flatMap((n) => [\"--network\", n]);\n    const groupAddFlags = (options?.groups ?? []).flatMap((g) => [\n      \"--group-add\",\n      String(g),\n    ]);\n    const deviceFlags = (options?.devices ?? []).flatMap((d) => [\n      \"--device\",\n      d,\n    ]);\n    const cpusFlags =\n      options?.cpus !== undefined ? [\"--cpus\", String(options.cpus)] : [];\n\n    yield* dockerExec([\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      ...envFlags,\n      ...volumeFlags,\n      ...workdirFlags,\n      ...userFlags,\n      ...networkFlags,\n      ...groupAddFlags,\n      ...deviceFlags,\n      ...cpusFlags,\n      imageName,\n    ]);\n  });\n\n/**\n * Stop and remove a container without removing the image.\n */\nexport const removeContainer = (\n  containerName: string,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    // Stop container (ignore errors if already stopped)\n    yield* Effect.ignore(dockerExec([\"stop\", containerName]));\n    // Remove container (ignore errors if not found)\n    yield* Effect.ignore(dockerExec([\"rm\", containerName]));\n  });\n\n/**\n * Remove a Docker image.\n */\nexport const removeImage = (\n  imageName: string,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    yield* dockerExec([\"rmi\", imageName]);\n  });\n","/**\n * Docker sandbox provider — wraps DockerLifecycle into a SandboxProvider.\n *\n * Usage:\n *   import { docker } from \"sandcastle/sandboxes/docker\";\n *   await run({ agent: claudeCode(\"claude-opus-4-7\"), sandbox: docker() });\n */\n\nimport {\n  execFile,\n  execFileSync,\n  spawn,\n  type StdioOptions,\n} from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { createInterface } from \"node:readline\";\nimport { Effect } from \"effect\";\nimport { startContainer, removeContainer } from \"../DockerLifecycle.js\";\nimport {\n  createBindMountSandboxProvider,\n  type SandboxProvider,\n  type BindMountCreateOptions,\n  type BindMountSandboxHandle,\n  type ExecResult,\n  type InteractiveExecOptions,\n} from \"../SandboxProvider.js\";\nimport type { MountConfig } from \"../MountConfig.js\";\nimport type { SelinuxLabel } from \"../mountUtils.js\";\nimport {\n  defaultImageName,\n  resolveUserMounts,\n  processFileMountParents,\n} from \"../mountUtils.js\";\nimport { BoundedTail, MAX_TAIL_CHARS } from \"../boundedTail.js\";\nimport { registerShutdown } from \"../shutdownRegistry.js\";\n\nexport interface DockerOptions {\n  /** Docker image name (default: derived from repo directory name). */\n  readonly imageName?: string;\n  /**\n   * The UID of the `agent` user inside the container image (default: host UID via `process.getuid()`, or 1000).\n   *\n   * Must match the UID baked into the image at build time. Used as the `--user` flag value\n   * and checked against the image's configured UID in the pre-flight diagnostic.\n   */\n  readonly containerUid?: number;\n  /**\n   * The GID of the `agent` user inside the container image (default: host GID via `process.getgid()`, or 1000).\n   *\n   * Must match the GID baked into the image at build time. Used as the `--user` flag value.\n   */\n  readonly containerGid?: number;\n  /**\n   * SELinux volume label suffix applied to bind mounts.\n   *\n   * - `\"z\"` — shared label (default). No-op on non-SELinux systems.\n   * - `\"Z\"` — private label; only this container can access the mount.\n   * - `false` — disable labeling entirely.\n   */\n  readonly selinuxLabel?: SelinuxLabel;\n  /**\n   * Additional host directories to bind-mount into the sandbox.\n   *\n   * Each entry specifies a `hostPath` (tilde-expanded) and `sandboxPath`.\n   * If `hostPath` does not exist, sandbox creation fails with a clear error.\n   */\n  readonly mounts?: readonly MountConfig[];\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n  /**\n   * Docker network(s) to attach the container to.\n   *\n   * - `\"my-network\"` → `--network my-network`\n   * - `[\"net1\", \"net2\"]` → `--network net1 --network net2`\n   *\n   * When omitted, Docker's default bridge network is used.\n   */\n  readonly network?: string | readonly string[];\n  /**\n   * Supplementary groups to add the container user to, via `--group-add`.\n   *\n   * Accepts group names or numeric GIDs:\n   *\n   * - `[\"docker\"]` → `--group-add docker`\n   * - `[999]` → `--group-add 999`\n   * - `[\"docker\", 999]` → `--group-add docker --group-add 999`\n   *\n   * Useful for granting access to a bind-mounted Docker socket (Docker-outside-of-Docker).\n   * When omitted, no `--group-add` flags are added.\n   */\n  readonly groups?: readonly (string | number)[];\n  /**\n   * Host devices to expose to the container, via `--device`.\n   *\n   * Each entry is a full device spec in `host[:container[:permissions]]` form:\n   *\n   * - `[\"/dev/kvm\"]` → `--device /dev/kvm`\n   * - `[\"/dev/sda:/dev/xvda:rwm\"]` → `--device /dev/sda:/dev/xvda:rwm`\n   * - `[\"/dev/kvm\", \"/dev/fuse\"]` → `--device /dev/kvm --device /dev/fuse`\n   *\n   * When omitted, no `--device` flags are added.\n   */\n  readonly devices?: readonly string[];\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n  /**\n   * Limit the CPU resources available to the container, via `--cpus`.\n   *\n   * Maps directly to `docker run --cpus`. Accepts fractional values:\n   *\n   * - `2` → `--cpus 2` (at most 2 CPUs)\n   * - `1.5` → `--cpus 1.5` (at most 1.5 CPUs)\n   *\n   * When omitted, no `--cpus` flag is added and the container is unconstrained.\n   */\n  readonly cpus?: number;\n}\n\n/**\n * Create a Docker sandbox provider.\n *\n * The returned provider creates Docker containers with bind-mounts\n * for the worktree and git directories.\n */\nexport const docker = (options?: DockerOptions): SandboxProvider => {\n  const configuredImageName = options?.imageName;\n  const selinuxLabel = options?.selinuxLabel ?? \"z\";\n  const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n  const sandboxHomedir = \"/home/agent\";\n  const userMounts = options?.mounts\n    ? resolveUserMounts(options.mounts, sandboxHomedir)\n    : [];\n  // Validate file mounts and collect parent dirs to create at container start.\n  // Throws at construction time if any file mount parent is outside sandboxHomedir.\n  const parentDirsToCreate = processFileMountParents(\n    userMounts,\n    sandboxHomedir,\n  );\n\n  return createBindMountSandboxProvider({\n    name: \"docker\",\n    env: options?.env,\n    sandboxHomedir,\n    create: async (\n      createOptions: BindMountCreateOptions,\n    ): Promise<BindMountSandboxHandle> => {\n      const containerName = `sandcastle-${randomUUID()}`;\n\n      const worktreePath =\n        createOptions.mounts.find(\n          (m) => m.hostPath === createOptions.worktreePath,\n        )?.sandboxPath ?? \"/home/agent/workspace\";\n\n      // Build volume mount list (internal mounts + user-provided mounts)\n      const allMounts = [...createOptions.mounts, ...userMounts];\n      const volumeMounts = allMounts.map((m) => ({\n        hostPath: m.hostPath,\n        sandboxPath: m.sandboxPath,\n        readonly: m.readonly,\n      }));\n\n      // Resolve image name\n      const imageName =\n        configuredImageName ?? defaultImageName(createOptions.hostRepoPath);\n\n      const containerUid = options?.containerUid ?? process.getuid?.() ?? 1000;\n      const containerGid = options?.containerGid ?? process.getgid?.() ?? 1000;\n\n      // Pre-flight: verify image exists and UID matches\n      await checkImageUid(imageName, containerUid);\n\n      // Start container\n      await Effect.runPromise(\n        startContainer(\n          containerName,\n          imageName,\n          {\n            ...createOptions.env,\n            HOME: \"/home/agent\",\n          },\n          {\n            volumeMounts,\n            workdir: worktreePath,\n            user: `${containerUid}:${containerGid}`,\n            network: options?.network,\n            groups: options?.groups,\n            devices: options?.devices,\n            cpus: options?.cpus,\n            selinuxLabel,\n          },\n        ),\n      );\n\n      // Create parent directories for file mounts and chown to the container user\n      for (const dir of parentDirsToCreate) {\n        await new Promise<void>((resolve, reject) => {\n          execFile(\n            \"docker\",\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              containerName,\n              \"sh\",\n              \"-c\",\n              `mkdir -p \"$1\" && chown \"$2\" \"$1\"`,\n              \"sh\",\n              dir,\n              `${containerUid}:${containerGid}`,\n            ],\n            (error) => {\n              if (error) {\n                reject(\n                  new Error(\n                    `Failed to create parent directory '${dir}' in container: ${error.message}`,\n                  ),\n                );\n              } else {\n                resolve();\n              }\n            },\n          );\n        });\n      }\n\n      // Register synchronous container cleanup via the shared shutdown registry\n      // so concurrent sandboxes share a single exit/SIGINT/SIGTERM listener\n      // instead of tripping Node's MaxListenersExceededWarning.\n      const removeContainerSync = () => {\n        try {\n          execFileSync(\"docker\", [\"rm\", \"-f\", containerName], {\n            stdio: \"ignore\",\n          });\n        } catch {\n          /* best-effort */\n        }\n      };\n      const unregisterShutdown = registerShutdown(removeContainerSync);\n\n      const handle: BindMountSandboxHandle = {\n        worktreePath,\n\n        exec: (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n            stdin?: string;\n          },\n        ): Promise<ExecResult> => {\n          const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;\n          const args = [\"exec\"];\n          if (opts?.stdin !== undefined) args.push(\"-i\");\n          if (opts?.cwd) args.push(\"-w\", opts.cwd);\n          args.push(containerName, \"sh\", \"-c\", effectiveCommand);\n\n          return new Promise((resolve, reject) => {\n            const proc = spawn(\"docker\", args, {\n              stdio: [\n                opts?.stdin !== undefined ? \"pipe\" : \"ignore\",\n                \"pipe\",\n                \"pipe\",\n              ],\n            });\n\n            if (opts?.stdin !== undefined) {\n              proc.stdin!.write(opts.stdin);\n              proc.stdin!.end();\n            }\n\n            proc.on(\"error\", (error) => {\n              reject(new Error(`docker exec failed: ${error.message}`));\n            });\n\n            if (opts?.onLine) {\n              const onLine = opts.onLine;\n              const stdoutTail = new BoundedTail(maxOutputTailChars, \"\\n\");\n              const stderrTail = new BoundedTail(maxOutputTailChars, \"\");\n              const rl = createInterface({ input: proc.stdout! });\n              rl.on(\"line\", (line) => {\n                stdoutTail.push(line);\n                onLine(line);\n              });\n              proc.stderr!.on(\"data\", (chunk: Buffer) => {\n                stderrTail.push(chunk.toString());\n              });\n              proc.on(\"close\", (code) => {\n                resolve({\n                  stdout: stdoutTail.toString(),\n                  stderr: stderrTail.toString(),\n                  exitCode: code ?? 0,\n                });\n              });\n            } else {\n              const stdoutChunks: string[] = [];\n              const stderrChunks: string[] = [];\n              proc.stdout!.on(\"data\", (chunk: Buffer) => {\n                stdoutChunks.push(chunk.toString());\n              });\n              proc.stderr!.on(\"data\", (chunk: Buffer) => {\n                stderrChunks.push(chunk.toString());\n              });\n              proc.on(\"close\", (code) => {\n                resolve({\n                  stdout: stdoutChunks.join(\"\"),\n                  stderr: stderrChunks.join(\"\"),\n                  exitCode: code ?? 0,\n                });\n              });\n            }\n          });\n        },\n\n        interactiveExec: (\n          args: string[],\n          opts: InteractiveExecOptions,\n        ): Promise<{ exitCode: number }> => {\n          return new Promise((resolve, reject) => {\n            const dockerArgs = [\"exec\"];\n            // Allocate a pseudo-terminal when stdin looks like a TTY\n            if (\n              \"isTTY\" in opts.stdin &&\n              (opts.stdin as { isTTY?: boolean }).isTTY\n            ) {\n              dockerArgs.push(\"-it\");\n            } else {\n              dockerArgs.push(\"-i\");\n            }\n            if (opts.cwd) dockerArgs.push(\"-w\", opts.cwd);\n            dockerArgs.push(containerName, ...args);\n\n            const proc = spawn(\"docker\", dockerArgs, {\n              stdio: [opts.stdin, opts.stdout, opts.stderr] as StdioOptions,\n            });\n\n            proc.on(\"error\", (error: Error) => {\n              reject(new Error(`docker exec failed: ${error.message}`));\n            });\n\n            proc.on(\"close\", (code: number | null) => {\n              resolve({ exitCode: code ?? 0 });\n            });\n          });\n        },\n\n        copyFileIn: (hostPath: string, sandboxPath: string): Promise<void> =>\n          new Promise((resolve, reject) => {\n            execFile(\n              \"docker\",\n              [\"cp\", hostPath, `${containerName}:${sandboxPath}`],\n              (error) => {\n                if (error) {\n                  reject(new Error(`docker cp (in) failed: ${error.message}`));\n                } else {\n                  resolve();\n                }\n              },\n            );\n          }),\n\n        copyFileOut: (sandboxPath: string, hostPath: string): Promise<void> =>\n          new Promise((resolve, reject) => {\n            execFile(\n              \"docker\",\n              [\"cp\", `${containerName}:${sandboxPath}`, hostPath],\n              (error) => {\n                if (error) {\n                  reject(new Error(`docker cp (out) failed: ${error.message}`));\n                } else {\n                  resolve();\n                }\n              },\n            );\n          }),\n\n        close: async (): Promise<void> => {\n          unregisterShutdown();\n          await Effect.runPromise(removeContainer(containerName));\n        },\n      };\n\n      return handle;\n    },\n  });\n};\n\n// Re-export for backwards compatibility\nexport { defaultImageName };\n\nconst checkImageUid = (imageName: string, expectedUid: number): Promise<void> =>\n  new Promise<void>((resolve, reject) => {\n    execFile(\n      \"docker\",\n      [\"image\", \"inspect\", imageName, \"--format\", \"{{.Config.User}}\"],\n      (error, stdout) => {\n        if (error) {\n          reject(\n            new Error(\n              `Image '${imageName}' not found locally. Build it first with 'sandcastle docker build-image'.`,\n            ),\n          );\n          return;\n        }\n        const imageUser = (stdout ?? \"\").toString().trim();\n        if (!imageUser) {\n          // No USER directive in image — skip check\n          resolve();\n          return;\n        }\n        const uidPart = imageUser.split(\":\")[0]!;\n        const imageUid = parseInt(uidPart, 10);\n        if (isNaN(imageUid)) {\n          // Non-numeric user (e.g. \"agent\") — can't compare, skip check\n          resolve();\n          return;\n        }\n        if (imageUid !== expectedUid) {\n          reject(\n            new Error(\n              `UID mismatch: image '${imageName}' was built with UID ${imageUid}, ` +\n                `but the expected UID is ${expectedUid}. ` +\n                `Rebuild the image with 'sandcastle docker build-image', ` +\n                `or pass containerUid: ${imageUid} to docker() to match the image.`,\n            ),\n          );\n        } else {\n          resolve();\n        }\n      },\n    );\n  });\n"]}
+{"version":3,"sources":["../src/DockerLifecycle.ts","../src/sandboxes/docker.ts"],"names":["resolve","execFile"],"mappings":";;;;;;;;;;AAMA,IAAM,aAAa,CAAC,IAAA,KAClB,cAAA,CAAO,KAAA,CAAM,CAAC,MAAA,KAAW;AACvB,EAAA,QAAA;AAAA,IACE,QAAA;AAAA,IACA,IAAA;AAAA,IACA,EAAE,SAAA,EAAW,EAAA,GAAK,IAAA,GAAO,IAAA,EAAK;AAAA,IAC9B,CAAC,KAAA,EAAO,MAAA,EAAQ,MAAA,KAAW;AACzB,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA;AAAA,UACE,cAAA,CAAO,IAAA;AAAA,YACL,IAAI,WAAA,CAAY;AAAA,cACd,OAAA,EAAS,CAAA,OAAA,EAAU,IAAA,CAAK,CAAC,CAAC,YAAY,MAAA,EAAQ,QAAA,EAAS,IAAK,KAAA,CAAM,OAAO,CAAA;AAAA,aAC1E;AAAA;AACH,SACF;AAAA,MACF,CAAA,MAAO;AACL,QAAA,MAAA,CAAO,cAAA,CAAO,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU,CAAC,CAAA;AAAA,MAC1C;AAAA,IACF;AAAA,GACF;AACF,CAAC,CAAA;AASI,IAAM,aAAa,CACxB,SAAA,EACA,eACA,OAAA,KAKA,cAAA,CAAO,IAAI,aAAa;AACtB,EAAA,MAAM,gBAAgB,MAAA,CAAO,OAAA,CAAQ,SAAS,SAAA,IAAa,EAAE,CAAA,CAAE,OAAA;AAAA,IAC7D,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM,CAAC,aAAA,EAAe,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA,CAAE;AAAA,GACzC;AACA,EAAA,IAAI,SAAS,UAAA,EAAY;AACvB,IAAA,OAAO,UAAA,CAAW;AAAA,MAChB,OAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAG,aAAA;AAAA,MACH,IAAA;AAAA,MACA,OAAA,CAAQ,QAAQ,UAAU,CAAA;AAAA,MAC1B,QAAQ,GAAA;AAAI,KACb,CAAA;AAAA,EACH,CAAA,MAAO;AACL,IAAA,OAAO,UAAA,CAAW;AAAA,MAChB,OAAA;AAAA,MACA,IAAA;AAAA,MACA,SAAA;AAAA,MACA,GAAG,aAAA;AAAA,MACH,QAAQ,aAAa;AAAA,KACtB,CAAA;AAAA,EACH;AACF,CAAC;AAkCI,IAAM,cAAA,GAAiB,CAC5B,aAAA,EACA,SAAA,EACA,KACA,OAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AAEtB,EAAA,MAAM,QAAA,GAAW,OAAO,UAAA,CAAW;AAAA,IACjC,IAAA;AAAA,IACA,IAAA;AAAA,IACA,UAAA;AAAA,IACA,SAAS,aAAa,CAAA,CAAA,CAAA;AAAA,IACtB,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AAED,EAAA,IAAI,QAAA,CAAS,IAAA,EAAK,KAAM,aAAA,EAAe;AACrC,IAAA,OAAO,cAAA,CAAO,IAAA;AAAA,MACZ,IAAI,WAAA,CAAY;AAAA,QACd,OAAA,EAAS,cAAc,aAAa,CAAA,oCAAA;AAAA,OACrC;AAAA,KACH;AAAA,EACF;AAEA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,CAAE,QAAQ,CAAC,CAAC,CAAA,EAAG,CAAC,CAAA,KAAM;AAAA,IACvD,IAAA;AAAA,IACA,CAAA,EAAG,CAAC,CAAA,CAAA,EAAI,CAAC,CAAA;AAAA,GACV,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,SAAS,YAAA,IAAgB,GAAA;AAC9C,EAAA,MAAM,eAAe,OAAA,EAAS,YAAA,IAAgB,EAAC,EAAG,OAAA,CAAQ,CAAC,KAAA,KAAU;AAAA,IACnE,IAAA;AAAA,IACA,iBAAA,CAAkB,OAAO,YAAY;AAAA,GACtC,CAAA;AAED,EAAA,MAAM,YAAA,GAAe,SAAS,OAAA,GAAU,CAAC,MAAM,OAAA,CAAQ,OAAO,IAAI,EAAC;AACnE,EAAA,MAAM,SAAA,GAAY,SAAS,IAAA,GAAO,CAAC,UAAU,OAAA,CAAQ,IAAI,IAAI,EAAC;AAC9D,EAAA,MAAM,QAAA,GAAW,OAAA,EAAS,OAAA,GACtB,KAAA,CAAM,QAAQ,OAAA,CAAQ,OAAO,CAAA,GAC3B,OAAA,CAAQ,OAAA,GACR,CAAC,OAAA,CAAQ,OAAO,IAClB,EAAC;AACL,EAAA,MAAM,YAAA,GAAe,SAAS,OAAA,CAAQ,CAAC,MAAM,CAAC,WAAA,EAAa,CAAC,CAAC,CAAA;AAC7D,EAAA,MAAM,iBAAiB,OAAA,EAAS,MAAA,IAAU,EAAC,EAAG,OAAA,CAAQ,CAAC,CAAA,KAAM;AAAA,IAC3D,aAAA;AAAA,IACA,OAAO,CAAC;AAAA,GACT,CAAA;AACD,EAAA,MAAM,eAAe,OAAA,EAAS,OAAA,IAAW,EAAC,EAAG,OAAA,CAAQ,CAAC,CAAA,KAAM;AAAA,IAC1D,UAAA;AAAA,IACA;AAAA,GACD,CAAA;AACD,EAAA,MAAM,SAAA,GACJ,OAAA,EAAS,IAAA,KAAS,MAAA,GAAY,CAAC,QAAA,EAAU,MAAA,CAAO,OAAA,CAAQ,IAAI,CAAC,CAAA,GAAI,EAAC;AAEpE,EAAA,OAAO,UAAA,CAAW;AAAA,IAChB,KAAA;AAAA,IACA,IAAA;AAAA,IACA,QAAA;AAAA,IACA,aAAA;AAAA,IACA,GAAG,QAAA;AAAA,IACH,GAAG,WAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH,GAAG,YAAA;AAAA,IACH,GAAG,aAAA;AAAA,IACH,GAAG,WAAA;AAAA,IACH,GAAG,SAAA;AAAA,IACH;AAAA,GACD,CAAA;AACH,CAAC,CAAA;AAKI,IAAM,eAAA,GAAkB,CAC7B,aAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AAEtB,EAAA,OAAO,eAAO,MAAA,CAAO,UAAA,CAAW,CAAC,MAAA,EAAQ,aAAa,CAAC,CAAC,CAAA;AAExD,EAAA,OAAO,eAAO,MAAA,CAAO,UAAA,CAAW,CAAC,IAAA,EAAM,aAAa,CAAC,CAAC,CAAA;AACxD,CAAC,CAAA;AAKI,IAAM,WAAA,GAAc,CACzB,SAAA,KAEA,cAAA,CAAO,IAAI,aAAa;AACtB,EAAA,OAAO,UAAA,CAAW,CAAC,KAAA,EAAO,SAAS,CAAC,CAAA;AACtC,CAAC;;;AC9DI,IAAM,MAAA,GAAS,CAAC,OAAA,KAA6C;AAClE,EAAA,MAAM,sBAAsB,OAAA,EAAS,SAAA;AACrC,EAAA,MAAM,YAAA,GAAe,SAAS,YAAA,IAAgB,GAAA;AAC9C,EAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAC1D,EAAA,MAAM,cAAA,GAAiB,aAAA;AACvB,EAAA,MAAM,UAAA,GAAa,SAAS,MAAA,GACxB,iBAAA,CAAkB,QAAQ,MAAA,EAAQ,cAAc,IAChD,EAAC;AAGL,EAAA,MAAM,kBAAA,GAAqB,uBAAA;AAAA,IACzB,UAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,OAAO,8BAAA,CAA+B;AAAA,IACpC,IAAA,EAAM,QAAA;AAAA,IACN,KAAK,OAAA,EAAS,GAAA;AAAA,IACd,cAAA;AAAA,IACA,MAAA,EAAQ,OACN,aAAA,KACoC;AACpC,MAAA,MAAM,aAAA,GAAgB,CAAA,WAAA,EAAc,UAAA,EAAY,CAAA,CAAA;AAEhD,MAAA,MAAM,YAAA,GACJ,cAAc,MAAA,CAAO,IAAA;AAAA,QACnB,CAAC,CAAA,KAAM,CAAA,CAAE,QAAA,KAAa,aAAA,CAAc;AAAA,SACnC,WAAA,IAAe,uBAAA;AAGpB,MAAA,MAAM,YAAY,CAAC,GAAG,aAAA,CAAc,MAAA,EAAQ,GAAG,UAAU,CAAA;AACzD,MAAA,MAAM,YAAA,GAAe,SAAA,CAAU,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACzC,UAAU,CAAA,CAAE,QAAA;AAAA,QACZ,aAAa,CAAA,CAAE,WAAA;AAAA,QACf,UAAU,CAAA,CAAE;AAAA,OACd,CAAE,CAAA;AAGF,MAAA,MAAM,SAAA,GACJ,mBAAA,IAAuB,gBAAA,CAAiB,aAAA,CAAc,YAAY,CAAA;AAEpE,MAAA,MAAM,YAAA,GAAe,OAAA,EAAS,YAAA,IAAgB,OAAA,CAAQ,UAAS,IAAK,GAAA;AACpE,MAAA,MAAM,YAAA,GAAe,OAAA,EAAS,YAAA,IAAgB,OAAA,CAAQ,UAAS,IAAK,GAAA;AAGpE,MAAA,MAAM,aAAA,CAAc,WAAW,YAAY,CAAA;AAG3C,MAAA,MAAM,cAAA,CAAO,UAAA;AAAA,QACX,cAAA;AAAA,UACE,aAAA;AAAA,UACA,SAAA;AAAA,UACA;AAAA,YACE,GAAG,aAAA,CAAc,GAAA;AAAA,YACjB,IAAA,EAAM;AAAA,WACR;AAAA,UACA;AAAA,YACE,YAAA;AAAA,YACA,OAAA,EAAS,YAAA;AAAA,YACT,IAAA,EAAM,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAY,CAAA,CAAA;AAAA,YACrC,SAAS,OAAA,EAAS,OAAA;AAAA,YAClB,QAAQ,OAAA,EAAS,MAAA;AAAA,YACjB,SAAS,OAAA,EAAS,OAAA;AAAA,YAClB,MAAM,OAAA,EAAS,IAAA;AAAA,YACf;AAAA;AACF;AACF,OACF;AAGA,MAAA,KAAA,MAAW,OAAO,kBAAA,EAAoB;AACpC,QAAA,MAAM,IAAI,OAAA,CAAc,CAACA,QAAAA,EAAS,MAAA,KAAW;AAC3C,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA;AAAA,cACE,MAAA;AAAA,cACA,QAAA;AAAA,cACA,KAAA;AAAA,cACA,aAAA;AAAA,cACA,IAAA;AAAA,cACA,IAAA;AAAA,cACA,CAAA,gCAAA,CAAA;AAAA,cACA,IAAA;AAAA,cACA,GAAA;AAAA,cACA,CAAA,EAAG,YAAY,CAAA,CAAA,EAAI,YAAY,CAAA;AAAA,aACjC;AAAA,YACA,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA;AAAA,kBACE,IAAI,KAAA;AAAA,oBACF,CAAA,mCAAA,EAAsC,GAAG,CAAA,gBAAA,EAAmB,KAAA,CAAM,OAAO,CAAA;AAAA;AAC3E,iBACF;AAAA,cACF,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,MACH;AAKA,MAAA,MAAM,sBAAsB,MAAM;AAChC,QAAA,IAAI;AACF,UAAA,YAAA,CAAa,QAAA,EAAU,CAAC,IAAA,EAAM,IAAA,EAAM,aAAa,CAAA,EAAG;AAAA,YAClD,KAAA,EAAO;AAAA,WACR,CAAA;AAAA,QACH,CAAA,CAAA,MAAQ;AAAA,QAER;AAAA,MACF,CAAA;AACA,MAAA,MAAM,kBAAA,GAAqB,iBAAiB,mBAAmB,CAAA;AAE/D,MAAA,MAAM,MAAA,GAAiC;AAAA,QACrC,YAAA;AAAA,QAEA,IAAA,EAAM,CACJ,OAAA,EACA,IAAA,KAMwB;AACxB,UAAA,MAAM,gBAAA,GAAmB,IAAA,EAAM,IAAA,GAAO,CAAA,KAAA,EAAQ,OAAO,CAAA,CAAA,GAAK,OAAA;AAC1D,UAAA,MAAM,IAAA,GAAO,CAAC,MAAM,CAAA;AACpB,UAAA,IAAI,IAAA,EAAM,KAAA,KAAU,MAAA,EAAW,IAAA,CAAK,KAAK,IAAI,CAAA;AAC7C,UAAA,IAAI,MAAM,GAAA,EAAK,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,GAAG,CAAA;AACvC,UAAA,IAAA,CAAK,IAAA,CAAK,aAAA,EAAe,IAAA,EAAM,IAAA,EAAM,gBAAgB,CAAA;AAErD,UAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,YAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,IAAA,EAAM;AAAA,cACjC,KAAA,EAAO;AAAA,gBACL,IAAA,EAAM,KAAA,KAAU,MAAA,GAAY,MAAA,GAAS,QAAA;AAAA,gBACrC,MAAA;AAAA,gBACA;AAAA;AACF,aACD,CAAA;AAED,YAAA,IAAI,IAAA,EAAM,UAAU,MAAA,EAAW;AAC7B,cAAA,IAAA,CAAK,KAAA,CAAO,KAAA,CAAM,IAAA,CAAK,KAAK,CAAA;AAC5B,cAAA,IAAA,CAAK,MAAO,GAAA,EAAI;AAAA,YAClB;AAEA,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAU;AAC1B,cAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,YAC1D,CAAC,CAAA;AAED,YAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,cAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,cAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,IAAI,CAAA;AAC3D,cAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,EAAE,CAAA;AACzD,cAAA,MAAM,KAAK,eAAA,CAAgB,EAAE,KAAA,EAAO,IAAA,CAAK,QAAS,CAAA;AAClD,cAAA,EAAA,CAAG,EAAA,CAAG,MAAA,EAAQ,CAAC,IAAA,KAAS;AACtB,gBAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AACpB,gBAAA,MAAA,CAAO,IAAI,CAAA;AAAA,cACb,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cAClC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,gBAAAA,QAAAA,CAAQ;AAAA,kBACN,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,kBAC5B,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,kBAC5B,UAAU,IAAA,IAAQ;AAAA,iBACnB,CAAA;AAAA,cACH,CAAC,CAAA;AAAA,YACH,CAAA,MAAO;AACL,cAAA,MAAM,eAAyB,EAAC;AAChC,cAAA,MAAM,eAAyB,EAAC;AAChC,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cACpC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,MAAA,CAAQ,EAAA,CAAG,MAAA,EAAQ,CAAC,KAAA,KAAkB;AACzC,gBAAA,YAAA,CAAa,IAAA,CAAK,KAAA,CAAM,QAAA,EAAU,CAAA;AAAA,cACpC,CAAC,CAAA;AACD,cAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS;AACzB,gBAAAA,QAAAA,CAAQ;AAAA,kBACN,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,kBAC5B,MAAA,EAAQ,YAAA,CAAa,IAAA,CAAK,EAAE,CAAA;AAAA,kBAC5B,UAAU,IAAA,IAAQ;AAAA,iBACnB,CAAA;AAAA,cACH,CAAC,CAAA;AAAA,YACH;AAAA,UACF,CAAC,CAAA;AAAA,QACH,CAAA;AAAA,QAEA,eAAA,EAAiB,CACf,IAAA,EACA,IAAA,KACkC;AAClC,UAAA,OAAO,IAAI,OAAA,CAAQ,CAACA,QAAAA,EAAS,MAAA,KAAW;AACtC,YAAA,MAAM,UAAA,GAAa,CAAC,MAAM,CAAA;AAE1B,YAAA,IACE,OAAA,IAAW,IAAA,CAAK,KAAA,IACf,IAAA,CAAK,MAA8B,KAAA,EACpC;AACA,cAAA,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,YACvB,CAAA,MAAO;AACL,cAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,YACtB;AACA,YAAA,IAAI,KAAK,GAAA,EAAK,UAAA,CAAW,IAAA,CAAK,IAAA,EAAM,KAAK,GAAG,CAAA;AAC5C,YAAA,UAAA,CAAW,IAAA,CAAK,aAAA,EAAe,GAAG,IAAI,CAAA;AAEtC,YAAA,MAAM,IAAA,GAAO,KAAA,CAAM,QAAA,EAAU,UAAA,EAAY;AAAA,cACvC,OAAO,CAAC,IAAA,CAAK,OAAO,IAAA,CAAK,MAAA,EAAQ,KAAK,MAAM;AAAA,aAC7C,CAAA;AAED,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,KAAA,KAAiB;AACjC,cAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,oBAAA,EAAuB,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,YAC1D,CAAC,CAAA;AAED,YAAA,IAAA,CAAK,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAwB;AACxC,cAAAA,QAAAA,CAAQ,EAAE,QAAA,EAAU,IAAA,IAAQ,GAAG,CAAA;AAAA,YACjC,CAAC,CAAA;AAAA,UACH,CAAC,CAAA;AAAA,QACH,CAAA;AAAA,QAEA,UAAA,EAAY,CAAC,QAAA,EAAkB,WAAA,KAC7B,IAAI,OAAA,CAAQ,CAACA,UAAS,MAAA,KAAW;AAC/B,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA,CAAC,IAAA,EAAM,QAAA,EAAU,GAAG,aAAa,CAAA,CAAA,EAAI,WAAW,CAAA,CAAE,CAAA;AAAA,YAClD,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0B,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,cAC7D,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,QAEH,WAAA,EAAa,CAAC,WAAA,EAAqB,QAAA,KACjC,IAAI,OAAA,CAAQ,CAACA,UAAS,MAAA,KAAW;AAC/B,UAAAC,QAAAA;AAAA,YACE,QAAA;AAAA,YACA,CAAC,IAAA,EAAM,CAAA,EAAG,aAAa,CAAA,CAAA,EAAI,WAAW,IAAI,QAAQ,CAAA;AAAA,YAClD,CAAC,KAAA,KAAU;AACT,cAAA,IAAI,KAAA,EAAO;AACT,gBAAA,MAAA,CAAO,IAAI,KAAA,CAAM,CAAA,wBAAA,EAA2B,KAAA,CAAM,OAAO,EAAE,CAAC,CAAA;AAAA,cAC9D,CAAA,MAAO;AACL,gBAAAD,QAAAA,EAAQ;AAAA,cACV;AAAA,YACF;AAAA,WACF;AAAA,QACF,CAAC,CAAA;AAAA,QAEH,OAAO,YAA2B;AAChC,UAAA,kBAAA,EAAmB;AACnB,UAAA,MAAM,cAAA,CAAO,UAAA,CAAW,eAAA,CAAgB,aAAa,CAAC,CAAA;AAAA,QACxD;AAAA,OACF;AAEA,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,GACD,CAAA;AACH;AAKA,IAAM,aAAA,GAAgB,CAAC,SAAA,EAAmB,WAAA,KACxC,IAAI,OAAA,CAAc,CAACA,UAAS,MAAA,KAAW;AACrC,EAAAC,QAAAA;AAAA,IACE,QAAA;AAAA,IACA,CAAC,OAAA,EAAS,SAAA,EAAW,SAAA,EAAW,YAAY,kBAAkB,CAAA;AAAA,IAC9D,CAAC,OAAO,MAAA,KAAW;AACjB,MAAA,IAAI,KAAA,EAAO;AACT,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,UAAU,SAAS,CAAA,yEAAA;AAAA;AACrB,SACF;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAM,SAAA,GAAA,CAAa,MAAA,IAAU,EAAA,EAAI,QAAA,GAAW,IAAA,EAAK;AACjD,MAAA,IAAI,CAAC,SAAA,EAAW;AAEd,QAAAD,QAAAA,EAAQ;AACR,QAAA;AAAA,MACF;AACA,MAAA,MAAM,OAAA,GAAU,SAAA,CAAU,KAAA,CAAM,GAAG,EAAE,CAAC,CAAA;AACtC,MAAA,MAAM,QAAA,GAAW,QAAA,CAAS,OAAA,EAAS,EAAE,CAAA;AACrC,MAAA,IAAI,KAAA,CAAM,QAAQ,CAAA,EAAG;AAEnB,QAAAA,QAAAA,EAAQ;AACR,QAAA;AAAA,MACF;AACA,MAAA,IAAI,aAAa,WAAA,EAAa;AAC5B,QAAA,MAAA;AAAA,UACE,IAAI,KAAA;AAAA,YACF,wBAAwB,SAAS,CAAA,qBAAA,EAAwB,QAAQ,CAAA,0BAAA,EACpC,WAAW,mFAEb,QAAQ,CAAA,gCAAA;AAAA;AACrC,SACF;AAAA,MACF,CAAA,MAAO;AACL,QAAAA,QAAAA,EAAQ;AAAA,MACV;AAAA,IACF;AAAA,GACF;AACF,CAAC,CAAA","file":"chunk-CP3TYXZA.js","sourcesContent":["import { Effect } from \"effect\";\nimport { execFile } from \"node:child_process\";\nimport { resolve } from \"node:path\";\nimport { DockerError } from \"./errors.js\";\nimport { formatVolumeMount, type SelinuxLabel } from \"./mountUtils.js\";\n\nconst dockerExec = (args: string[]): Effect.Effect<string, DockerError> =>\n  Effect.async((resume) => {\n    execFile(\n      \"docker\",\n      args,\n      { maxBuffer: 10 * 1024 * 1024 },\n      (error, stdout, stderr) => {\n        if (error) {\n          resume(\n            Effect.fail(\n              new DockerError({\n                message: `docker ${args[0]} failed: ${stderr?.toString() || error.message}`,\n              }),\n            ),\n          );\n        } else {\n          resume(Effect.succeed(stdout.toString()));\n        }\n      },\n    );\n  });\n\n/**\n * Build the sandcastle Docker image.\n *\n * When `dockerfile` is provided, uses `docker build -f <dockerfile> <cwd>`\n * so COPY instructions resolve relative to the current working directory.\n * Otherwise, uses `docker build <dockerfileDir>` (the default .sandcastle/ directory).\n */\nexport const buildImage = (\n  imageName: string,\n  dockerfileDir: string,\n  options?: {\n    readonly dockerfile?: string;\n    readonly buildArgs?: Record<string, string>;\n  },\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    const buildArgFlags = Object.entries(options?.buildArgs ?? {}).flatMap(\n      ([k, v]) => [\"--build-arg\", `${k}=${v}`],\n    );\n    if (options?.dockerfile) {\n      yield* dockerExec([\n        \"build\",\n        \"-t\",\n        imageName,\n        ...buildArgFlags,\n        \"-f\",\n        resolve(options.dockerfile),\n        process.cwd(),\n      ]);\n    } else {\n      yield* dockerExec([\n        \"build\",\n        \"-t\",\n        imageName,\n        ...buildArgFlags,\n        resolve(dockerfileDir),\n      ]);\n    }\n  });\n\nexport interface VolumeMount {\n  readonly hostPath: string;\n  readonly sandboxPath: string;\n  readonly readonly?: boolean;\n}\n\nexport interface StartContainerOptions {\n  readonly volumeMounts?: readonly VolumeMount[];\n  readonly workdir?: string;\n  /** Run the container as this uid:gid instead of the Dockerfile's USER. */\n  readonly user?: string;\n  /** Docker network(s) to attach the container to. Passed as `--network` flags. */\n  readonly network?: string | readonly string[];\n  /** Supplementary groups to add the container user to. Passed as `--group-add` flags. */\n  readonly groups?: readonly (string | number)[];\n  /** Host devices to expose to the container. Passed as `--device` flags. */\n  readonly devices?: readonly string[];\n  /** Limit CPU resources via `--cpus` (e.g. `1.5`). Fractional values allowed. */\n  readonly cpus?: number;\n  /**\n   * SELinux volume label suffix applied to bind mounts (default `\"z\"`).\n   *\n   * - `\"z\"` — shared label. No-op on non-SELinux systems.\n   * - `\"Z\"` — private label; only this container can access the mount.\n   * - `false` — disable labeling entirely.\n   */\n  readonly selinuxLabel?: SelinuxLabel;\n}\n\n/**\n * Start a new container with environment variables injected.\n */\nexport const startContainer = (\n  containerName: string,\n  imageName: string,\n  env: Record<string, string>,\n  options?: StartContainerOptions,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    // Check if container already exists\n    const existing = yield* dockerExec([\n      \"ps\",\n      \"-a\",\n      \"--filter\",\n      `name=^${containerName}$`,\n      \"--format\",\n      \"{{.Names}}\",\n    ]);\n\n    if (existing.trim() === containerName) {\n      yield* Effect.fail(\n        new DockerError({\n          message: `Container '${containerName}' already exists. Run cleanup first.`,\n        }),\n      );\n    }\n\n    const envFlags = Object.entries(env).flatMap(([k, v]) => [\n      \"-e\",\n      `${k}=${v}`,\n    ]);\n\n    const selinuxLabel = options?.selinuxLabel ?? \"z\";\n    const volumeFlags = (options?.volumeMounts ?? []).flatMap((mount) => [\n      \"-v\",\n      formatVolumeMount(mount, selinuxLabel),\n    ]);\n\n    const workdirFlags = options?.workdir ? [\"-w\", options.workdir] : [];\n    const userFlags = options?.user ? [\"--user\", options.user] : [];\n    const networks = options?.network\n      ? Array.isArray(options.network)\n        ? options.network\n        : [options.network]\n      : [];\n    const networkFlags = networks.flatMap((n) => [\"--network\", n]);\n    const groupAddFlags = (options?.groups ?? []).flatMap((g) => [\n      \"--group-add\",\n      String(g),\n    ]);\n    const deviceFlags = (options?.devices ?? []).flatMap((d) => [\n      \"--device\",\n      d,\n    ]);\n    const cpusFlags =\n      options?.cpus !== undefined ? [\"--cpus\", String(options.cpus)] : [];\n\n    yield* dockerExec([\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      ...envFlags,\n      ...volumeFlags,\n      ...workdirFlags,\n      ...userFlags,\n      ...networkFlags,\n      ...groupAddFlags,\n      ...deviceFlags,\n      ...cpusFlags,\n      imageName,\n    ]);\n  });\n\n/**\n * Stop and remove a container without removing the image.\n */\nexport const removeContainer = (\n  containerName: string,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    // Stop container (ignore errors if already stopped)\n    yield* Effect.ignore(dockerExec([\"stop\", containerName]));\n    // Remove container (ignore errors if not found)\n    yield* Effect.ignore(dockerExec([\"rm\", containerName]));\n  });\n\n/**\n * Remove a Docker image.\n */\nexport const removeImage = (\n  imageName: string,\n): Effect.Effect<void, DockerError> =>\n  Effect.gen(function* () {\n    yield* dockerExec([\"rmi\", imageName]);\n  });\n","/**\n * Docker sandbox provider — wraps DockerLifecycle into a SandboxProvider.\n *\n * Usage:\n *   import { docker } from \"sandcastle/sandboxes/docker\";\n *   await run({ agent: claudeCode(\"claude-opus-4-8\"), sandbox: docker() });\n */\n\nimport {\n  execFile,\n  execFileSync,\n  spawn,\n  type StdioOptions,\n} from \"node:child_process\";\nimport { randomUUID } from \"node:crypto\";\nimport { createInterface } from \"node:readline\";\nimport { Effect } from \"effect\";\nimport { startContainer, removeContainer } from \"../DockerLifecycle.js\";\nimport {\n  createBindMountSandboxProvider,\n  type SandboxProvider,\n  type BindMountCreateOptions,\n  type BindMountSandboxHandle,\n  type ExecResult,\n  type InteractiveExecOptions,\n} from \"../SandboxProvider.js\";\nimport type { MountConfig } from \"../MountConfig.js\";\nimport type { SelinuxLabel } from \"../mountUtils.js\";\nimport {\n  defaultImageName,\n  resolveUserMounts,\n  processFileMountParents,\n} from \"../mountUtils.js\";\nimport { BoundedTail, MAX_TAIL_CHARS } from \"../boundedTail.js\";\nimport { registerShutdown } from \"../shutdownRegistry.js\";\n\nexport interface DockerOptions {\n  /** Docker image name (default: derived from repo directory name). */\n  readonly imageName?: string;\n  /**\n   * The UID of the `agent` user inside the container image (default: host UID via `process.getuid()`, or 1000).\n   *\n   * Must match the UID baked into the image at build time. Used as the `--user` flag value\n   * and checked against the image's configured UID in the pre-flight diagnostic.\n   */\n  readonly containerUid?: number;\n  /**\n   * The GID of the `agent` user inside the container image (default: host GID via `process.getgid()`, or 1000).\n   *\n   * Must match the GID baked into the image at build time. Used as the `--user` flag value.\n   */\n  readonly containerGid?: number;\n  /**\n   * SELinux volume label suffix applied to bind mounts.\n   *\n   * - `\"z\"` — shared label (default). No-op on non-SELinux systems.\n   * - `\"Z\"` — private label; only this container can access the mount.\n   * - `false` — disable labeling entirely.\n   */\n  readonly selinuxLabel?: SelinuxLabel;\n  /**\n   * Additional host directories to bind-mount into the sandbox.\n   *\n   * Each entry specifies a `hostPath` (tilde-expanded) and `sandboxPath`.\n   * If `hostPath` does not exist, sandbox creation fails with a clear error.\n   */\n  readonly mounts?: readonly MountConfig[];\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n  /**\n   * Docker network(s) to attach the container to.\n   *\n   * - `\"my-network\"` → `--network my-network`\n   * - `[\"net1\", \"net2\"]` → `--network net1 --network net2`\n   *\n   * When omitted, Docker's default bridge network is used.\n   */\n  readonly network?: string | readonly string[];\n  /**\n   * Supplementary groups to add the container user to, via `--group-add`.\n   *\n   * Accepts group names or numeric GIDs:\n   *\n   * - `[\"docker\"]` → `--group-add docker`\n   * - `[999]` → `--group-add 999`\n   * - `[\"docker\", 999]` → `--group-add docker --group-add 999`\n   *\n   * Useful for granting access to a bind-mounted Docker socket (Docker-outside-of-Docker).\n   * When omitted, no `--group-add` flags are added.\n   */\n  readonly groups?: readonly (string | number)[];\n  /**\n   * Host devices to expose to the container, via `--device`.\n   *\n   * Each entry is a full device spec in `host[:container[:permissions]]` form:\n   *\n   * - `[\"/dev/kvm\"]` → `--device /dev/kvm`\n   * - `[\"/dev/sda:/dev/xvda:rwm\"]` → `--device /dev/sda:/dev/xvda:rwm`\n   * - `[\"/dev/kvm\", \"/dev/fuse\"]` → `--device /dev/kvm --device /dev/fuse`\n   *\n   * When omitted, no `--device` flags are added.\n   */\n  readonly devices?: readonly string[];\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n  /**\n   * Limit the CPU resources available to the container, via `--cpus`.\n   *\n   * Maps directly to `docker run --cpus`. Accepts fractional values:\n   *\n   * - `2` → `--cpus 2` (at most 2 CPUs)\n   * - `1.5` → `--cpus 1.5` (at most 1.5 CPUs)\n   *\n   * When omitted, no `--cpus` flag is added and the container is unconstrained.\n   */\n  readonly cpus?: number;\n}\n\n/**\n * Create a Docker sandbox provider.\n *\n * The returned provider creates Docker containers with bind-mounts\n * for the worktree and git directories.\n */\nexport const docker = (options?: DockerOptions): SandboxProvider => {\n  const configuredImageName = options?.imageName;\n  const selinuxLabel = options?.selinuxLabel ?? \"z\";\n  const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n  const sandboxHomedir = \"/home/agent\";\n  const userMounts = options?.mounts\n    ? resolveUserMounts(options.mounts, sandboxHomedir)\n    : [];\n  // Validate file mounts and collect parent dirs to create at container start.\n  // Throws at construction time if any file mount parent is outside sandboxHomedir.\n  const parentDirsToCreate = processFileMountParents(\n    userMounts,\n    sandboxHomedir,\n  );\n\n  return createBindMountSandboxProvider({\n    name: \"docker\",\n    env: options?.env,\n    sandboxHomedir,\n    create: async (\n      createOptions: BindMountCreateOptions,\n    ): Promise<BindMountSandboxHandle> => {\n      const containerName = `sandcastle-${randomUUID()}`;\n\n      const worktreePath =\n        createOptions.mounts.find(\n          (m) => m.hostPath === createOptions.worktreePath,\n        )?.sandboxPath ?? \"/home/agent/workspace\";\n\n      // Build volume mount list (internal mounts + user-provided mounts)\n      const allMounts = [...createOptions.mounts, ...userMounts];\n      const volumeMounts = allMounts.map((m) => ({\n        hostPath: m.hostPath,\n        sandboxPath: m.sandboxPath,\n        readonly: m.readonly,\n      }));\n\n      // Resolve image name\n      const imageName =\n        configuredImageName ?? defaultImageName(createOptions.hostRepoPath);\n\n      const containerUid = options?.containerUid ?? process.getuid?.() ?? 1000;\n      const containerGid = options?.containerGid ?? process.getgid?.() ?? 1000;\n\n      // Pre-flight: verify image exists and UID matches\n      await checkImageUid(imageName, containerUid);\n\n      // Start container\n      await Effect.runPromise(\n        startContainer(\n          containerName,\n          imageName,\n          {\n            ...createOptions.env,\n            HOME: \"/home/agent\",\n          },\n          {\n            volumeMounts,\n            workdir: worktreePath,\n            user: `${containerUid}:${containerGid}`,\n            network: options?.network,\n            groups: options?.groups,\n            devices: options?.devices,\n            cpus: options?.cpus,\n            selinuxLabel,\n          },\n        ),\n      );\n\n      // Create parent directories for file mounts and chown to the container user\n      for (const dir of parentDirsToCreate) {\n        await new Promise<void>((resolve, reject) => {\n          execFile(\n            \"docker\",\n            [\n              \"exec\",\n              \"--user\",\n              \"0:0\",\n              containerName,\n              \"sh\",\n              \"-c\",\n              `mkdir -p \"$1\" && chown \"$2\" \"$1\"`,\n              \"sh\",\n              dir,\n              `${containerUid}:${containerGid}`,\n            ],\n            (error) => {\n              if (error) {\n                reject(\n                  new Error(\n                    `Failed to create parent directory '${dir}' in container: ${error.message}`,\n                  ),\n                );\n              } else {\n                resolve();\n              }\n            },\n          );\n        });\n      }\n\n      // Register synchronous container cleanup via the shared shutdown registry\n      // so concurrent sandboxes share a single exit/SIGINT/SIGTERM listener\n      // instead of tripping Node's MaxListenersExceededWarning.\n      const removeContainerSync = () => {\n        try {\n          execFileSync(\"docker\", [\"rm\", \"-f\", containerName], {\n            stdio: \"ignore\",\n          });\n        } catch {\n          /* best-effort */\n        }\n      };\n      const unregisterShutdown = registerShutdown(removeContainerSync);\n\n      const handle: BindMountSandboxHandle = {\n        worktreePath,\n\n        exec: (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n            stdin?: string;\n          },\n        ): Promise<ExecResult> => {\n          const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;\n          const args = [\"exec\"];\n          if (opts?.stdin !== undefined) args.push(\"-i\");\n          if (opts?.cwd) args.push(\"-w\", opts.cwd);\n          args.push(containerName, \"sh\", \"-c\", effectiveCommand);\n\n          return new Promise((resolve, reject) => {\n            const proc = spawn(\"docker\", args, {\n              stdio: [\n                opts?.stdin !== undefined ? \"pipe\" : \"ignore\",\n                \"pipe\",\n                \"pipe\",\n              ],\n            });\n\n            if (opts?.stdin !== undefined) {\n              proc.stdin!.write(opts.stdin);\n              proc.stdin!.end();\n            }\n\n            proc.on(\"error\", (error) => {\n              reject(new Error(`docker exec failed: ${error.message}`));\n            });\n\n            if (opts?.onLine) {\n              const onLine = opts.onLine;\n              const stdoutTail = new BoundedTail(maxOutputTailChars, \"\\n\");\n              const stderrTail = new BoundedTail(maxOutputTailChars, \"\");\n              const rl = createInterface({ input: proc.stdout! });\n              rl.on(\"line\", (line) => {\n                stdoutTail.push(line);\n                onLine(line);\n              });\n              proc.stderr!.on(\"data\", (chunk: Buffer) => {\n                stderrTail.push(chunk.toString());\n              });\n              proc.on(\"close\", (code) => {\n                resolve({\n                  stdout: stdoutTail.toString(),\n                  stderr: stderrTail.toString(),\n                  exitCode: code ?? 0,\n                });\n              });\n            } else {\n              const stdoutChunks: string[] = [];\n              const stderrChunks: string[] = [];\n              proc.stdout!.on(\"data\", (chunk: Buffer) => {\n                stdoutChunks.push(chunk.toString());\n              });\n              proc.stderr!.on(\"data\", (chunk: Buffer) => {\n                stderrChunks.push(chunk.toString());\n              });\n              proc.on(\"close\", (code) => {\n                resolve({\n                  stdout: stdoutChunks.join(\"\"),\n                  stderr: stderrChunks.join(\"\"),\n                  exitCode: code ?? 0,\n                });\n              });\n            }\n          });\n        },\n\n        interactiveExec: (\n          args: string[],\n          opts: InteractiveExecOptions,\n        ): Promise<{ exitCode: number }> => {\n          return new Promise((resolve, reject) => {\n            const dockerArgs = [\"exec\"];\n            // Allocate a pseudo-terminal when stdin looks like a TTY\n            if (\n              \"isTTY\" in opts.stdin &&\n              (opts.stdin as { isTTY?: boolean }).isTTY\n            ) {\n              dockerArgs.push(\"-it\");\n            } else {\n              dockerArgs.push(\"-i\");\n            }\n            if (opts.cwd) dockerArgs.push(\"-w\", opts.cwd);\n            dockerArgs.push(containerName, ...args);\n\n            const proc = spawn(\"docker\", dockerArgs, {\n              stdio: [opts.stdin, opts.stdout, opts.stderr] as StdioOptions,\n            });\n\n            proc.on(\"error\", (error: Error) => {\n              reject(new Error(`docker exec failed: ${error.message}`));\n            });\n\n            proc.on(\"close\", (code: number | null) => {\n              resolve({ exitCode: code ?? 0 });\n            });\n          });\n        },\n\n        copyFileIn: (hostPath: string, sandboxPath: string): Promise<void> =>\n          new Promise((resolve, reject) => {\n            execFile(\n              \"docker\",\n              [\"cp\", hostPath, `${containerName}:${sandboxPath}`],\n              (error) => {\n                if (error) {\n                  reject(new Error(`docker cp (in) failed: ${error.message}`));\n                } else {\n                  resolve();\n                }\n              },\n            );\n          }),\n\n        copyFileOut: (sandboxPath: string, hostPath: string): Promise<void> =>\n          new Promise((resolve, reject) => {\n            execFile(\n              \"docker\",\n              [\"cp\", `${containerName}:${sandboxPath}`, hostPath],\n              (error) => {\n                if (error) {\n                  reject(new Error(`docker cp (out) failed: ${error.message}`));\n                } else {\n                  resolve();\n                }\n              },\n            );\n          }),\n\n        close: async (): Promise<void> => {\n          unregisterShutdown();\n          await Effect.runPromise(removeContainer(containerName));\n        },\n      };\n\n      return handle;\n    },\n  });\n};\n\n// Re-export for backwards compatibility\nexport { defaultImageName };\n\nconst checkImageUid = (imageName: string, expectedUid: number): Promise<void> =>\n  new Promise<void>((resolve, reject) => {\n    execFile(\n      \"docker\",\n      [\"image\", \"inspect\", imageName, \"--format\", \"{{.Config.User}}\"],\n      (error, stdout) => {\n        if (error) {\n          reject(\n            new Error(\n              `Image '${imageName}' not found locally. Build it first with 'sandcastle docker build-image'.`,\n            ),\n          );\n          return;\n        }\n        const imageUser = (stdout ?? \"\").toString().trim();\n        if (!imageUser) {\n          // No USER directive in image — skip check\n          resolve();\n          return;\n        }\n        const uidPart = imageUser.split(\":\")[0]!;\n        const imageUid = parseInt(uidPart, 10);\n        if (isNaN(imageUid)) {\n          // Non-numeric user (e.g. \"agent\") — can't compare, skip check\n          resolve();\n          return;\n        }\n        if (imageUid !== expectedUid) {\n          reject(\n            new Error(\n              `UID mismatch: image '${imageName}' was built with UID ${imageUid}, ` +\n                `but the expected UID is ${expectedUid}. ` +\n                `Rebuild the image with 'sandcastle docker build-image', ` +\n                `or pass containerUid: ${imageUid} to docker() to match the image.`,\n            ),\n          );\n        } else {\n          resolve();\n        }\n      },\n    );\n  });\n"]}

package/dist/{chunk-52CIJF45.js → chunk-DJRHWPEH.js}

@@ -1,5 +1,5 @@
 import { createRequire } from 'node:module';
-import { BaseProto, succeed2, Path, TypeId, pipe, mergeAll, provideMerge, makeRunMain, constVoid, try_, BadArgument, effect, CommandExecutor, FileSystem, map3, makeExecutor, scoped2, Terminal, provide2, layerManager, flatten2, stdin, unwrapScoped, flatMap3, make5, async, getOrElse, constUndefined, fail2, unsafeDone, succeed, sync, _void, match, zipRight, acquireRelease, isDone, orElse2, _await, ignore, ExitCode, negate, ProcessId, transduce, ProcessTypeId, drain, identity, tap, forkDaemon, run, fnUntraced, make6 as make6$1, gen, get3, make9, addFinalizer2, scoped, PlatformWorker, serviceOption, WatchBackend, make8, suspend, fromChannel2, fromChannel, asVoid, fromNullable, void_, uninterruptible, makePlatform, WorkerError, as, addFinalizer, interruptible, timeout, catchAllCause, tryPromise, orDie, flatMap, unwrap, SystemError, flatMap4, zip, embedInput, complete, failCause, suspend2, make2, effectify, map, Size, FileDescriptor, asyncScoped, WatchEventUpdate, matchEffect, WatchEventRemove, WatchEventCreate, ensuring, void_2, unsafeMakeLatch, fromEffect, write, unsafeFromArray, ensuring2, fail, FileTypeId, unsafeMakeSemaphore, none, some, Effect_exports, Display } from './chunk-5VM5QZ26.js';
+import { BaseProto, succeed2, Path, TypeId, pipe, mergeAll, provideMerge, makeRunMain, constVoid, try_, BadArgument, effect, CommandExecutor, FileSystem, map3, makeExecutor, scoped2, Terminal, provide2, layerManager, flatten2, stdin, unwrapScoped, flatMap3, make5, async, getOrElse, constUndefined, fail2, unsafeDone, succeed, sync, _void, match, zipRight, acquireRelease, isDone, orElse2, _await, ignore, ExitCode, negate, ProcessId, transduce, ProcessTypeId, drain, identity, tap, forkDaemon, run, fnUntraced, make6 as make6$1, gen, get3, make9, addFinalizer2, scoped, PlatformWorker, serviceOption, WatchBackend, make8, suspend, fromChannel2, fromChannel, asVoid, fromNullable, void_, uninterruptible, makePlatform, WorkerError, as, addFinalizer, interruptible, timeout, catchAllCause, tryPromise, orDie, flatMap, unwrap, SystemError, flatMap4, zip, embedInput, complete, failCause, suspend2, make2, effectify, map, Size, FileDescriptor, asyncScoped, WatchEventUpdate, matchEffect, WatchEventRemove, WatchEventCreate, ensuring, void_2, unsafeMakeLatch, fromEffect, write, unsafeFromArray, ensuring2, fail, FileTypeId, unsafeMakeSemaphore, none, some, Effect_exports, Display } from './chunk-VOG34SRF.js';
 import { __commonJS, __require, __export, __toESM, __reExport } from './chunk-NGBM7T3E.js';
 import * as ChildProcess from 'child_process';
 import 'stream';
@@ -25565,5 +25565,5 @@ undici/lib/web/websocket/frame.js:
 */
 
 export { NodeContext_exports, NodeFileSystem_exports2 as NodeFileSystem_exports, NodeRuntime_exports, formatErrorMessage, withFriendlyErrors };
-//# sourceMappingURL=chunk-52CIJF45.js.map
-//# sourceMappingURL=chunk-52CIJF45.js.map
+//# sourceMappingURL=chunk-DJRHWPEH.js.map
+//# sourceMappingURL=chunk-DJRHWPEH.js.map