@ai-hero/sandcastle 0.6.4 → 0.6.6

package/dist/mountUtils-CCA-bbpK.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Shared mount utilities for Docker and Podman sandbox providers.
+ *
+ * Handles host/sandbox path resolution, tilde expansion, user mount
+ * validation, image naming, and Windows path normalization.
+ */
+
+/**
+ * SELinux volume label suffix applied to bind mounts.
+ *
+ * - `"z"` — shared label. No-op on non-SELinux systems.
+ * - `"Z"` — private label; only this container can access the mount.
+ * - `false` — disable labeling entirely.
+ */
+type SelinuxLabel = "z" | "Z" | false;
+/**
+ * Derive the default image name from the repo directory.
+ * Returns `sandcastle:<dir-name>` where dir-name is the last path segment,
+ * lowercased and sanitized for image tag rules.
+ *
+ * Handles both POSIX (`/`) and Windows (`\`) path separators.
+ */
+declare const defaultImageName: (repoDir: string) => string;
+
+export { type SelinuxLabel as S, defaultImageName as d };

package/dist/sandboxes/daytona.d.ts

@@ -1,13 +1,15 @@
+import { I as IsolatedSandboxProvider } from '../SandboxProvider-EkSMuBp8.js';
+import { CreateSandboxFromImageParams, CreateSandboxFromSnapshotParams } from '@daytona/sdk';
+
 /**
  * Daytona isolated sandbox provider.
  *
  * Creates ephemeral Daytona sandboxes via `@daytona/sdk`.
  * Requires `@daytona/sdk` as a peer dependency.
  */
-import { type IsolatedSandboxProvider } from "../SandboxProvider.js";
-import type { CreateSandboxFromImageParams, CreateSandboxFromSnapshotParams } from "@daytona/sdk";
+
 /** Options for the Daytona sandbox provider. */
-export interface DaytonaOptions {
+interface DaytonaOptions {
     /**
      * Daytona API key for authentication.
      * Falls back to the `DAYTONA_API_KEY` environment variable if not provided.
@@ -53,5 +55,6 @@ export interface DaytonaOptions {
  * const provider = daytona({ apiKey: "dyt_my_key" });
  * ```
  */
-export declare const daytona: (options?: DaytonaOptions | undefined) => IsolatedSandboxProvider;
-//# sourceMappingURL=daytona.d.ts.map
+declare const daytona: (options?: DaytonaOptions) => IsolatedSandboxProvider;
+
+export { type DaytonaOptions, daytona };

package/dist/sandboxes/daytona.js

@@ -1,128 +1,122 @@
-/**
- * Daytona isolated sandbox provider.
- *
- * Creates ephemeral Daytona sandboxes via `@daytona/sdk`.
- * Requires `@daytona/sdk` as a peer dependency.
- */
-import { readdir, stat } from "node:fs/promises";
-import { join, relative } from "node:path";
-import { createIsolatedSandboxProvider, } from "../SandboxProvider.js";
-import { BoundedTail, MAX_TAIL_CHARS } from "../boundedTail.js";
-/**
- * Create a Daytona isolated sandbox provider.
- *
- * Sandboxes are ephemeral — each `create()` call spins up a new Daytona
- * sandbox and `close()` destroys it.
- *
- * @example
- * ```ts
- * import { daytona } from "@ai-hero/sandcastle/sandboxes/daytona";
- *
- * const provider = daytona({ apiKey: "dyt_my_key" });
- * ```
- */
-export const daytona = (options) => createIsolatedSandboxProvider({
-    name: "daytona",
-    env: options?.env,
-    create: async () => {
-        const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;
-        const { Daytona } = (await import("@daytona/sdk"));
-        const config = {};
-        if (options?.apiKey)
-            config.apiKey = options.apiKey;
-        if (options?.apiUrl)
-            config.apiUrl = options.apiUrl;
-        if (options?.target)
-            config.target = options.target;
-        const client = new Daytona(config);
-        const sandbox = await client.create(options?.create);
-        const worktreePath = (await sandbox.getWorkDir()) ??
-            (await sandbox.getUserHomeDir()) ??
-            "/home/daytona";
-        return {
-            worktreePath,
-            exec: async (command, opts) => {
-                const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;
-                if (opts?.onLine) {
-                    const onLine = opts.onLine;
-                    const sessionId = `sandcastle-${crypto.randomUUID()}`;
-                    await sandbox.process.createSession(sessionId);
-                    try {
-                        const execResponse = await sandbox.process.executeSessionCommand(sessionId, {
-                            command: `cd ${opts?.cwd ?? worktreePath} && ${effectiveCommand}`,
-                            async: true,
-                        });
-                        const cmdId = execResponse.cmdId;
-                        const stdoutTail = new BoundedTail(maxOutputTailChars, "\n");
-                        const stderrTail = new BoundedTail(maxOutputTailChars, "");
-                        let partial = "";
-                        await sandbox.process.getSessionCommandLogs(sessionId, cmdId, (chunk) => {
-                            const text = partial + chunk;
-                            const lines = text.split("\n");
-                            partial = lines.pop() ?? "";
-                            for (const line of lines) {
-                                stdoutTail.push(line);
-                                onLine(line);
-                            }
-                        }, (chunk) => {
-                            stderrTail.push(chunk);
-                        });
-                        if (partial) {
-                            stdoutTail.push(partial);
-                            onLine(partial);
-                        }
-                        const cmdInfo = await sandbox.process.getSessionCommand(sessionId, cmdId);
-                        return {
-                            stdout: stdoutTail.toString(),
-                            stderr: stderrTail.toString(),
-                            exitCode: cmdInfo.exitCode ?? 0,
-                        };
-                    }
-                    finally {
-                        await sandbox.process.deleteSession(sessionId).catch(() => { });
-                    }
-                }
-                const response = await sandbox.process.executeCommand(effectiveCommand, opts?.cwd ?? worktreePath);
-                return {
-                    stdout: response.result,
-                    stderr: "",
-                    exitCode: response.exitCode,
-                };
-            },
-            copyIn: async (hostPath, sandboxPath) => {
-                const info = await stat(hostPath);
-                if (info.isDirectory()) {
-                    const walk = async (dir) => {
-                        const entries = await readdir(dir, { withFileTypes: true });
-                        const files = [];
-                        for (const entry of entries) {
-                            const full = join(dir, entry.name);
-                            if (entry.isDirectory()) {
-                                files.push(...(await walk(full)));
-                            }
-                            else {
-                                files.push(full);
-                            }
-                        }
-                        return files;
-                    };
-                    const files = await walk(hostPath);
-                    for (const file of files) {
-                        const rel = relative(hostPath, file);
-                        await sandbox.fs.uploadFile(file, join(sandboxPath, rel));
-                    }
+import { createRequire } from 'node:module';
+import { createIsolatedSandboxProvider } from '../chunk-BIWNFKGV.js';
+import { MAX_TAIL_CHARS, BoundedTail } from '../chunk-NGBM7T3E.js';
+import { stat, readdir } from 'fs/promises';
+import { relative, join } from 'path';
+
+createRequire(import.meta.url);
+var daytona = (options) => createIsolatedSandboxProvider({
+  name: "daytona",
+  env: options?.env,
+  create: async () => {
+    const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;
+    const { Daytona } = await import('@daytona/sdk');
+    const config = {};
+    if (options?.apiKey) config.apiKey = options.apiKey;
+    if (options?.apiUrl) config.apiUrl = options.apiUrl;
+    if (options?.target) config.target = options.target;
+    const client = new Daytona(config);
+    const sandbox = await client.create(options?.create);
+    const worktreePath = await sandbox.getWorkDir() ?? await sandbox.getUserHomeDir() ?? "/home/daytona";
+    return {
+      worktreePath,
+      exec: async (command, opts) => {
+        const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;
+        if (opts?.onLine) {
+          const onLine = opts.onLine;
+          const sessionId = `sandcastle-${crypto.randomUUID()}`;
+          await sandbox.process.createSession(sessionId);
+          try {
+            const execResponse = await sandbox.process.executeSessionCommand(
+              sessionId,
+              {
+                command: `cd ${opts?.cwd ?? worktreePath} && ${effectiveCommand}`,
+                async: true
+              }
+            );
+            const cmdId = execResponse.cmdId;
+            const stdoutTail = new BoundedTail(maxOutputTailChars, "\n");
+            const stderrTail = new BoundedTail(maxOutputTailChars, "");
+            let partial = "";
+            await sandbox.process.getSessionCommandLogs(
+              sessionId,
+              cmdId,
+              (chunk) => {
+                const text = partial + chunk;
+                const lines = text.split("\n");
+                partial = lines.pop() ?? "";
+                for (const line of lines) {
+                  stdoutTail.push(line);
+                  onLine(line);
                 }
-                else {
-                    await sandbox.fs.uploadFile(hostPath, sandboxPath);
-                }
-            },
-            copyFileOut: async (sandboxPath, hostPath) => {
-                await sandbox.fs.downloadFile(sandboxPath, hostPath);
-            },
-            close: async () => {
-                await client.delete(sandbox);
-            },
+              },
+              (chunk) => {
+                stderrTail.push(chunk);
+              }
+            );
+            if (partial) {
+              stdoutTail.push(partial);
+              onLine(partial);
+            }
+            const cmdInfo = await sandbox.process.getSessionCommand(
+              sessionId,
+              cmdId
+            );
+            return {
+              stdout: stdoutTail.toString(),
+              stderr: stderrTail.toString(),
+              exitCode: cmdInfo.exitCode ?? 0
+            };
+          } finally {
+            await sandbox.process.deleteSession(sessionId).catch(() => {
+            });
+          }
+        }
+        const response = await sandbox.process.executeCommand(
+          effectiveCommand,
+          opts?.cwd ?? worktreePath
+        );
+        return {
+          stdout: response.result,
+          stderr: "",
+          exitCode: response.exitCode
         };
-    },
+      },
+      copyIn: async (hostPath, sandboxPath) => {
+        const info = await stat(hostPath);
+        if (info.isDirectory()) {
+          const walk = async (dir) => {
+            const entries = await readdir(dir, { withFileTypes: true });
+            const files2 = [];
+            for (const entry of entries) {
+              const full = join(dir, entry.name);
+              if (entry.isDirectory()) {
+                files2.push(...await walk(full));
+              } else {
+                files2.push(full);
+              }
+            }
+            return files2;
+          };
+          const files = await walk(hostPath);
+          for (const file of files) {
+            const rel = relative(hostPath, file);
+            await sandbox.fs.uploadFile(file, join(sandboxPath, rel));
+          }
+        } else {
+          await sandbox.fs.uploadFile(hostPath, sandboxPath);
+        }
+      },
+      copyFileOut: async (sandboxPath, hostPath) => {
+        await sandbox.fs.downloadFile(sandboxPath, hostPath);
+      },
+      close: async () => {
+        await client.delete(sandbox);
+      }
+    };
+  }
 });
+
+export { daytona };
+//# sourceMappingURL=daytona.js.map
 //# sourceMappingURL=daytona.js.map

package/dist/sandboxes/daytona.js.map

@@ -1 +1 @@
-{"version":3,"file":"daytona.js","sourceRoot":"","sources":["../../src/sandboxes/daytona.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EACL,6BAA6B,GAI9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAmDhE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAwB,EAA2B,EAAE,CAC3E,6BAA6B,CAAC;IAC5B,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,OAAO,EAAE,GAAG;IACjB,MAAM,EAAE,KAAK,IAAoC,EAAE;QACjD,MAAM,kBAAkB,GAAG,OAAO,EAAE,kBAAkB,IAAI,cAAc,CAAC;QACzE,MAAM,EAAE,OAAO,EAAE,GACf,CAAC,MAAM,MAAM,CAAC,cAAc,CAAC,CAAkC,CAAC;QAElE,MAAM,MAAM,GAAkB,EAAE,CAAC;QACjC,IAAI,OAAO,EAAE,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACpD,IAAI,OAAO,EAAE,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QACpD,IAAI,OAAO,EAAE,MAAM;YAAE,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAEpD,MAAM,MAAM,GAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAa,CAAC,CAAC;QAE5D,MAAM,YAAY,GAChB,CAAC,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;YAC5B,CAAC,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;YAChC,eAAe,CAAC;QAElB,OAAO;YACL,YAAY;YAEZ,IAAI,EAAE,KAAK,EACT,OAAe,EACf,IAIC,EACoB,EAAE;gBACvB,MAAM,gBAAgB,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;gBAClE,IAAI,IAAI,EAAE,MAAM,EAAE,CAAC;oBACjB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;oBAC3B,MAAM,SAAS,GAAG,cAAc,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;oBACtD,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;oBAE/C,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAC9D,SAAS,EACT;4BACE,OAAO,EAAE,MAAM,IAAI,EAAE,GAAG,IAAI,YAAY,OAAO,gBAAgB,EAAE;4BACjE,KAAK,EAAE,IAAI;yBACZ,CACF,CAAC;wBAEF,MAAM,KAAK,GAAG,YAAY,CAAC,KAAM,CAAC;wBAElC,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;wBAC7D,MAAM,UAAU,GAAG,IAAI,WAAW,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;wBAC3D,IAAI,OAAO,GAAG,EAAE,CAAC;wBAEjB,MAAM,OAAO,CAAC,OAAO,CAAC,qBAAqB,CACzC,SAAS,EACT,KAAK,EACL,CAAC,KAAa,EAAE,EAAE;4BAChB,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,CAAC;4BAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;4BAC/B,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;4BAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gCACzB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gCACtB,MAAM,CAAC,IAAI,CAAC,CAAC;4BACf,CAAC;wBACH,CAAC,EACD,CAAC,KAAa,EAAE,EAAE;4BAChB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACzB,CAAC,CACF,CAAC;wBAEF,IAAI,OAAO,EAAE,CAAC;4BACZ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;4BACzB,MAAM,CAAC,OAAO,CAAC,CAAC;wBAClB,CAAC;wBAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,iBAAiB,CACrD,SAAS,EACT,KAAK,CACN,CAAC;wBAEF,OAAO;4BACL,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;4BAC7B,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;4BAC7B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,CAAC;yBAChC,CAAC;oBACJ,CAAC;4BAAS,CAAC;wBACT,MAAM,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;oBACjE,CAAC;gBACH,CAAC;gBAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,cAAc,CACnD,gBAAgB,EAChB,IAAI,EAAE,GAAG,IAAI,YAAY,CAC1B,CAAC;gBACF,OAAO;oBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,MAAM,EAAE,EAAE;oBACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;iBAC5B,CAAC;YACJ,CAAC;YAED,MAAM,EAAE,KAAK,EACX,QAAgB,EAChB,WAAmB,EACJ,EAAE;gBACjB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAClC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACvB,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAqB,EAAE;wBACpD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC5D,MAAM,KAAK,GAAa,EAAE,CAAC;wBAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;4BAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;4BACnC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gCACxB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;4BACpC,CAAC;iCAAM,CAAC;gCACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BACnB,CAAC;wBACH,CAAC;wBACD,OAAO,KAAK,CAAC;oBACf,CAAC,CAAC;oBACF,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;wBACzB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;wBACrC,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;gBACrD,CAAC;YACH,CAAC;YAED,WAAW,EAAE,KAAK,EAChB,WAAmB,EACnB,QAAgB,EACD,EAAE;gBACjB,MAAM,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;YAED,KAAK,EAAE,KAAK,IAAmB,EAAE;gBAC/B,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;SACF,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}
+{"version":3,"sources":["../../src/sandboxes/daytona.ts"],"names":["files"],"mappings":";;;;;;;AA+EO,IAAM,OAAA,GAAU,CAAC,OAAA,KACtB,6BAAA,CAA8B;AAAA,EAC5B,IAAA,EAAM,SAAA;AAAA,EACN,KAAK,OAAA,EAAS,GAAA;AAAA,EACd,QAAQ,YAA4C;AAClD,IAAA,MAAM,kBAAA,GAAqB,SAAS,kBAAA,IAAsB,cAAA;AAC1D,IAAA,MAAM,EAAE,OAAA,EAAQ,GACb,MAAM,OAAO,cAAc,CAAA;AAE9B,IAAA,MAAM,SAAwB,EAAC;AAC/B,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,MAAA,CAAO,MAAA,GAAS,OAAA,CAAQ,MAAA;AAC7C,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,MAAA,CAAO,MAAA,GAAS,OAAA,CAAQ,MAAA;AAC7C,IAAA,IAAI,OAAA,EAAS,MAAA,EAAQ,MAAA,CAAO,MAAA,GAAS,OAAA,CAAQ,MAAA;AAE7C,IAAA,MAAM,MAAA,GAAwB,IAAI,OAAA,CAAQ,MAAM,CAAA;AAChD,IAAA,MAAM,OAAA,GAAU,MAAM,MAAA,CAAO,MAAA,CAAO,SAAS,MAAa,CAAA;AAE1D,IAAA,MAAM,YAAA,GACH,MAAM,OAAA,CAAQ,UAAA,MACd,MAAM,OAAA,CAAQ,gBAAe,IAC9B,eAAA;AAEF,IAAA,OAAO;AAAA,MACL,YAAA;AAAA,MAEA,IAAA,EAAM,OACJ,OAAA,EACA,IAAA,KAKwB;AACxB,QAAA,MAAM,gBAAA,GAAmB,IAAA,EAAM,IAAA,GAAO,CAAA,KAAA,EAAQ,OAAO,CAAA,CAAA,GAAK,OAAA;AAC1D,QAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,UAAA,MAAM,SAAS,IAAA,CAAK,MAAA;AACpB,UAAA,MAAM,SAAA,GAAY,CAAA,WAAA,EAAc,MAAA,CAAO,UAAA,EAAY,CAAA,CAAA;AACnD,UAAA,MAAM,OAAA,CAAQ,OAAA,CAAQ,aAAA,CAAc,SAAS,CAAA;AAE7C,UAAA,IAAI;AACF,YAAA,MAAM,YAAA,GAAe,MAAM,OAAA,CAAQ,OAAA,CAAQ,qBAAA;AAAA,cACzC,SAAA;AAAA,cACA;AAAA,gBACE,SAAS,CAAA,GAAA,EAAM,IAAA,EAAM,GAAA,IAAO,YAAY,OAAO,gBAAgB,CAAA,CAAA;AAAA,gBAC/D,KAAA,EAAO;AAAA;AACT,aACF;AAEA,YAAA,MAAM,QAAQ,YAAA,CAAa,KAAA;AAE3B,YAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,IAAI,CAAA;AAC3D,YAAA,MAAM,UAAA,GAAa,IAAI,WAAA,CAAY,kBAAA,EAAoB,EAAE,CAAA;AACzD,YAAA,IAAI,OAAA,GAAU,EAAA;AAEd,YAAA,MAAM,QAAQ,OAAA,CAAQ,qBAAA;AAAA,cACpB,SAAA;AAAA,cACA,KAAA;AAAA,cACA,CAAC,KAAA,KAAkB;AACjB,gBAAA,MAAM,OAAO,OAAA,GAAU,KAAA;AACvB,gBAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AAC7B,gBAAA,OAAA,GAAU,KAAA,CAAM,KAAI,IAAK,EAAA;AACzB,gBAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,kBAAA,UAAA,CAAW,KAAK,IAAI,CAAA;AACpB,kBAAA,MAAA,CAAO,IAAI,CAAA;AAAA,gBACb;AAAA,cACF,CAAA;AAAA,cACA,CAAC,KAAA,KAAkB;AACjB,gBAAA,UAAA,CAAW,KAAK,KAAK,CAAA;AAAA,cACvB;AAAA,aACF;AAEA,YAAA,IAAI,OAAA,EAAS;AACX,cAAA,UAAA,CAAW,KAAK,OAAO,CAAA;AACvB,cAAA,MAAA,CAAO,OAAO,CAAA;AAAA,YAChB;AAEA,YAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,iBAAA;AAAA,cACpC,SAAA;AAAA,cACA;AAAA,aACF;AAEA,YAAA,OAAO;AAAA,cACL,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,cAC5B,MAAA,EAAQ,WAAW,QAAA,EAAS;AAAA,cAC5B,QAAA,EAAU,QAAQ,QAAA,IAAY;AAAA,aAChC;AAAA,UACF,CAAA,SAAE;AACA,YAAA,MAAM,QAAQ,OAAA,CAAQ,aAAA,CAAc,SAAS,CAAA,CAAE,MAAM,MAAM;AAAA,YAAC,CAAC,CAAA;AAAA,UAC/D;AAAA,QACF;AAEA,QAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAA,CAAQ,cAAA;AAAA,UACrC,gBAAA;AAAA,UACA,MAAM,GAAA,IAAO;AAAA,SACf;AACA,QAAA,OAAO;AAAA,UACL,QAAQ,QAAA,CAAS,MAAA;AAAA,UACjB,MAAA,EAAQ,EAAA;AAAA,UACR,UAAU,QAAA,CAAS;AAAA,SACrB;AAAA,MACF,CAAA;AAAA,MAEA,MAAA,EAAQ,OACN,QAAA,EACA,WAAA,KACkB;AAClB,QAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,QAAQ,CAAA;AAChC,QAAA,IAAI,IAAA,CAAK,aAAY,EAAG;AACtB,UAAA,MAAM,IAAA,GAAO,OAAO,GAAA,KAAmC;AACrD,YAAA,MAAM,UAAU,MAAM,OAAA,CAAQ,KAAK,EAAE,aAAA,EAAe,MAAM,CAAA;AAC1D,YAAA,MAAMA,SAAkB,EAAC;AACzB,YAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,cAAA,MAAM,IAAA,GAAO,IAAA,CAAK,GAAA,EAAK,KAAA,CAAM,IAAI,CAAA;AACjC,cAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,gBAAAA,OAAM,IAAA,CAAK,GAAI,MAAM,IAAA,CAAK,IAAI,CAAE,CAAA;AAAA,cAClC,CAAA,MAAO;AACL,gBAAAA,MAAAA,CAAM,KAAK,IAAI,CAAA;AAAA,cACjB;AAAA,YACF;AACA,YAAA,OAAOA,MAAAA;AAAA,UACT,CAAA;AACA,UAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,QAAQ,CAAA;AACjC,UAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,YAAA,MAAM,GAAA,GAAM,QAAA,CAAS,QAAA,EAAU,IAAI,CAAA;AACnC,YAAA,MAAM,QAAQ,EAAA,CAAG,UAAA,CAAW,MAAM,IAAA,CAAK,WAAA,EAAa,GAAG,CAAC,CAAA;AAAA,UAC1D;AAAA,QACF,CAAA,MAAO;AACL,UAAA,MAAM,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,QAAA,EAAU,WAAW,CAAA;AAAA,QACnD;AAAA,MACF,CAAA;AAAA,MAEA,WAAA,EAAa,OACX,WAAA,EACA,QAAA,KACkB;AAClB,QAAA,MAAM,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,WAAA,EAAa,QAAQ,CAAA;AAAA,MACrD,CAAA;AAAA,MAEA,OAAO,YAA2B;AAChC,QAAA,MAAM,MAAA,CAAO,OAAO,OAAO,CAAA;AAAA,MAC7B;AAAA,KACF;AAAA,EACF;AACF,CAAC","file":"daytona.js","sourcesContent":["/**\n * Daytona isolated sandbox provider.\n *\n * Creates ephemeral Daytona sandboxes via `@daytona/sdk`.\n * Requires `@daytona/sdk` as a peer dependency.\n */\n\nimport { readdir, stat } from \"node:fs/promises\";\nimport { join, relative } from \"node:path\";\nimport {\n  createIsolatedSandboxProvider,\n  type ExecResult,\n  type IsolatedSandboxHandle,\n  type IsolatedSandboxProvider,\n} from \"../SandboxProvider.js\";\nimport { BoundedTail, MAX_TAIL_CHARS } from \"../boundedTail.js\";\n\nimport type {\n  Daytona as DaytonaClient,\n  DaytonaConfig,\n  CreateSandboxFromImageParams,\n  CreateSandboxFromSnapshotParams,\n} from \"@daytona/sdk\";\n\n/** Options for the Daytona sandbox provider. */\nexport interface DaytonaOptions {\n  /**\n   * Daytona API key for authentication.\n   * Falls back to the `DAYTONA_API_KEY` environment variable if not provided.\n   */\n  readonly apiKey?: string;\n\n  /**\n   * Daytona API URL.\n   * Falls back to the `DAYTONA_API_URL` environment variable if not provided.\n   */\n  readonly apiUrl?: string;\n\n  /**\n   * Target environment for sandboxes.\n   * Falls back to the `DAYTONA_TARGET` environment variable if not provided.\n   */\n  readonly target?: string;\n\n  /**\n   * Options passed through to the Daytona SDK when creating a sandbox.\n   * Supports both image-based and snapshot-based creation.\n   */\n  readonly create?:\n    | CreateSandboxFromImageParams\n    | CreateSandboxFromSnapshotParams;\n\n  /** Environment variables injected by this provider. Merged at launch time with env resolver and agent provider env. */\n  readonly env?: Record<string, string>;\n\n  /**\n   * Maximum number of characters of streamed `exec` output retained per stream\n   * (stdout and stderr) when an `onLine` callback is supplied (default: 64KiB).\n   *\n   * Output is delivered live to `onLine` regardless; this only bounds the tail\n   * returned in `ExecResult`, preventing a long-running agent's output from\n   * overflowing V8's max string length and crashing the run.\n   */\n  readonly maxOutputTailChars?: number;\n}\n\n/**\n * Create a Daytona isolated sandbox provider.\n *\n * Sandboxes are ephemeral — each `create()` call spins up a new Daytona\n * sandbox and `close()` destroys it.\n *\n * @example\n * ```ts\n * import { daytona } from \"@ai-hero/sandcastle/sandboxes/daytona\";\n *\n * const provider = daytona({ apiKey: \"dyt_my_key\" });\n * ```\n */\nexport const daytona = (options?: DaytonaOptions): IsolatedSandboxProvider =>\n  createIsolatedSandboxProvider({\n    name: \"daytona\",\n    env: options?.env,\n    create: async (): Promise<IsolatedSandboxHandle> => {\n      const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;\n      const { Daytona } =\n        (await import(\"@daytona/sdk\")) as typeof import(\"@daytona/sdk\");\n\n      const config: DaytonaConfig = {};\n      if (options?.apiKey) config.apiKey = options.apiKey;\n      if (options?.apiUrl) config.apiUrl = options.apiUrl;\n      if (options?.target) config.target = options.target;\n\n      const client: DaytonaClient = new Daytona(config);\n      const sandbox = await client.create(options?.create as any);\n\n      const worktreePath =\n        (await sandbox.getWorkDir()) ??\n        (await sandbox.getUserHomeDir()) ??\n        \"/home/daytona\";\n\n      return {\n        worktreePath,\n\n        exec: async (\n          command: string,\n          opts?: {\n            onLine?: (line: string) => void;\n            cwd?: string;\n            sudo?: boolean;\n          },\n        ): Promise<ExecResult> => {\n          const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;\n          if (opts?.onLine) {\n            const onLine = opts.onLine;\n            const sessionId = `sandcastle-${crypto.randomUUID()}`;\n            await sandbox.process.createSession(sessionId);\n\n            try {\n              const execResponse = await sandbox.process.executeSessionCommand(\n                sessionId,\n                {\n                  command: `cd ${opts?.cwd ?? worktreePath} && ${effectiveCommand}`,\n                  async: true,\n                },\n              );\n\n              const cmdId = execResponse.cmdId!;\n\n              const stdoutTail = new BoundedTail(maxOutputTailChars, \"\\n\");\n              const stderrTail = new BoundedTail(maxOutputTailChars, \"\");\n              let partial = \"\";\n\n              await sandbox.process.getSessionCommandLogs(\n                sessionId,\n                cmdId,\n                (chunk: string) => {\n                  const text = partial + chunk;\n                  const lines = text.split(\"\\n\");\n                  partial = lines.pop() ?? \"\";\n                  for (const line of lines) {\n                    stdoutTail.push(line);\n                    onLine(line);\n                  }\n                },\n                (chunk: string) => {\n                  stderrTail.push(chunk);\n                },\n              );\n\n              if (partial) {\n                stdoutTail.push(partial);\n                onLine(partial);\n              }\n\n              const cmdInfo = await sandbox.process.getSessionCommand(\n                sessionId,\n                cmdId,\n              );\n\n              return {\n                stdout: stdoutTail.toString(),\n                stderr: stderrTail.toString(),\n                exitCode: cmdInfo.exitCode ?? 0,\n              };\n            } finally {\n              await sandbox.process.deleteSession(sessionId).catch(() => {});\n            }\n          }\n\n          const response = await sandbox.process.executeCommand(\n            effectiveCommand,\n            opts?.cwd ?? worktreePath,\n          );\n          return {\n            stdout: response.result,\n            stderr: \"\",\n            exitCode: response.exitCode,\n          };\n        },\n\n        copyIn: async (\n          hostPath: string,\n          sandboxPath: string,\n        ): Promise<void> => {\n          const info = await stat(hostPath);\n          if (info.isDirectory()) {\n            const walk = async (dir: string): Promise<string[]> => {\n              const entries = await readdir(dir, { withFileTypes: true });\n              const files: string[] = [];\n              for (const entry of entries) {\n                const full = join(dir, entry.name);\n                if (entry.isDirectory()) {\n                  files.push(...(await walk(full)));\n                } else {\n                  files.push(full);\n                }\n              }\n              return files;\n            };\n            const files = await walk(hostPath);\n            for (const file of files) {\n              const rel = relative(hostPath, file);\n              await sandbox.fs.uploadFile(file, join(sandboxPath, rel));\n            }\n          } else {\n            await sandbox.fs.uploadFile(hostPath, sandboxPath);\n          }\n        },\n\n        copyFileOut: async (\n          sandboxPath: string,\n          hostPath: string,\n        ): Promise<void> => {\n          await sandbox.fs.downloadFile(sandboxPath, hostPath);\n        },\n\n        close: async (): Promise<void> => {\n          await client.delete(sandbox);\n        },\n      };\n    },\n  });\n"]}

package/dist/sandboxes/docker.d.ts

@@ -1,3 +1,8 @@
+import { S as SandboxProvider } from '../SandboxProvider-EkSMuBp8.js';
+import { M as MountConfig } from '../MountConfig-CmXclHA5.js';
+import { S as SelinuxLabel } from '../mountUtils-CCA-bbpK.js';
+export { d as defaultImageName } from '../mountUtils-CCA-bbpK.js';
+
 /**
  * Docker sandbox provider — wraps DockerLifecycle into a SandboxProvider.
  *
@@ -5,11 +10,8 @@
  *   import { docker } from "sandcastle/sandboxes/docker";
  *   await run({ agent: claudeCode("claude-opus-4-7"), sandbox: docker() });
  */
-import { type SandboxProvider } from "../SandboxProvider.js";
-import type { MountConfig } from "../MountConfig.js";
-import type { SelinuxLabel } from "../mountUtils.js";
-import { defaultImageName } from "../mountUtils.js";
-export interface DockerOptions {
+
+interface DockerOptions {
     /** Docker image name (default: derived from repo directory name). */
     readonly imageName?: string;
     /**
@@ -103,6 +105,6 @@ export interface DockerOptions {
  * The returned provider creates Docker containers with bind-mounts
  * for the worktree and git directories.
  */
-export declare const docker: (options?: DockerOptions | undefined) => SandboxProvider;
-export { defaultImageName };
-//# sourceMappingURL=docker.d.ts.map
+declare const docker: (options?: DockerOptions) => SandboxProvider;
+
+export { type DockerOptions, docker };

package/dist/sandboxes/docker.js

@@ -1,256 +1,9 @@
-/**
- * Docker sandbox provider — wraps DockerLifecycle into a SandboxProvider.
- *
- * Usage:
- *   import { docker } from "sandcastle/sandboxes/docker";
- *   await run({ agent: claudeCode("claude-opus-4-7"), sandbox: docker() });
- */
-import { execFile, execFileSync, spawn, } from "node:child_process";
-import { randomUUID } from "node:crypto";
-import { createInterface } from "node:readline";
-import { Effect } from "effect";
-import { startContainer, removeContainer } from "../DockerLifecycle.js";
-import { createBindMountSandboxProvider, } from "../SandboxProvider.js";
-import { defaultImageName, resolveUserMounts, processFileMountParents, } from "../mountUtils.js";
-import { BoundedTail, MAX_TAIL_CHARS } from "../boundedTail.js";
-import { registerShutdown } from "../shutdownRegistry.js";
-/**
- * Create a Docker sandbox provider.
- *
- * The returned provider creates Docker containers with bind-mounts
- * for the worktree and git directories.
- */
-export const docker = (options) => {
-    const configuredImageName = options?.imageName;
-    const selinuxLabel = options?.selinuxLabel ?? "z";
-    const maxOutputTailChars = options?.maxOutputTailChars ?? MAX_TAIL_CHARS;
-    const sandboxHomedir = "/home/agent";
-    const userMounts = options?.mounts
-        ? resolveUserMounts(options.mounts, sandboxHomedir)
-        : [];
-    // Validate file mounts and collect parent dirs to create at container start.
-    // Throws at construction time if any file mount parent is outside sandboxHomedir.
-    const parentDirsToCreate = processFileMountParents(userMounts, sandboxHomedir);
-    return createBindMountSandboxProvider({
-        name: "docker",
-        env: options?.env,
-        sandboxHomedir,
-        create: async (createOptions) => {
-            const containerName = `sandcastle-${randomUUID()}`;
-            const worktreePath = createOptions.mounts.find((m) => m.hostPath === createOptions.worktreePath)?.sandboxPath ?? "/home/agent/workspace";
-            // Build volume mount list (internal mounts + user-provided mounts)
-            const allMounts = [...createOptions.mounts, ...userMounts];
-            const volumeMounts = allMounts.map((m) => ({
-                hostPath: m.hostPath,
-                sandboxPath: m.sandboxPath,
-                readonly: m.readonly,
-            }));
-            // Resolve image name
-            const imageName = configuredImageName ?? defaultImageName(createOptions.hostRepoPath);
-            const containerUid = options?.containerUid ?? process.getuid?.() ?? 1000;
-            const containerGid = options?.containerGid ?? process.getgid?.() ?? 1000;
-            // Pre-flight: verify image exists and UID matches
-            await checkImageUid(imageName, containerUid);
-            // Start container
-            await Effect.runPromise(startContainer(containerName, imageName, {
-                ...createOptions.env,
-                HOME: "/home/agent",
-            }, {
-                volumeMounts,
-                workdir: worktreePath,
-                user: `${containerUid}:${containerGid}`,
-                network: options?.network,
-                groups: options?.groups,
-                devices: options?.devices,
-                cpus: options?.cpus,
-                selinuxLabel,
-            }));
-            // Create parent directories for file mounts and chown to the container user
-            for (const dir of parentDirsToCreate) {
-                await new Promise((resolve, reject) => {
-                    execFile("docker", [
-                        "exec",
-                        "--user",
-                        "0:0",
-                        containerName,
-                        "sh",
-                        "-c",
-                        `mkdir -p "$1" && chown "$2" "$1"`,
-                        "sh",
-                        dir,
-                        `${containerUid}:${containerGid}`,
-                    ], (error) => {
-                        if (error) {
-                            reject(new Error(`Failed to create parent directory '${dir}' in container: ${error.message}`));
-                        }
-                        else {
-                            resolve();
-                        }
-                    });
-                });
-            }
-            // Register synchronous container cleanup via the shared shutdown registry
-            // so concurrent sandboxes share a single exit/SIGINT/SIGTERM listener
-            // instead of tripping Node's MaxListenersExceededWarning.
-            const removeContainerSync = () => {
-                try {
-                    execFileSync("docker", ["rm", "-f", containerName], {
-                        stdio: "ignore",
-                    });
-                }
-                catch {
-                    /* best-effort */
-                }
-            };
-            const unregisterShutdown = registerShutdown(removeContainerSync);
-            const handle = {
-                worktreePath,
-                exec: (command, opts) => {
-                    const effectiveCommand = opts?.sudo ? `sudo ${command}` : command;
-                    const args = ["exec"];
-                    if (opts?.stdin !== undefined)
-                        args.push("-i");
-                    if (opts?.cwd)
-                        args.push("-w", opts.cwd);
-                    args.push(containerName, "sh", "-c", effectiveCommand);
-                    return new Promise((resolve, reject) => {
-                        const proc = spawn("docker", args, {
-                            stdio: [
-                                opts?.stdin !== undefined ? "pipe" : "ignore",
-                                "pipe",
-                                "pipe",
-                            ],
-                        });
-                        if (opts?.stdin !== undefined) {
-                            proc.stdin.write(opts.stdin);
-                            proc.stdin.end();
-                        }
-                        proc.on("error", (error) => {
-                            reject(new Error(`docker exec failed: ${error.message}`));
-                        });
-                        if (opts?.onLine) {
-                            const onLine = opts.onLine;
-                            const stdoutTail = new BoundedTail(maxOutputTailChars, "\n");
-                            const stderrTail = new BoundedTail(maxOutputTailChars, "");
-                            const rl = createInterface({ input: proc.stdout });
-                            rl.on("line", (line) => {
-                                stdoutTail.push(line);
-                                onLine(line);
-                            });
-                            proc.stderr.on("data", (chunk) => {
-                                stderrTail.push(chunk.toString());
-                            });
-                            proc.on("close", (code) => {
-                                resolve({
-                                    stdout: stdoutTail.toString(),
-                                    stderr: stderrTail.toString(),
-                                    exitCode: code ?? 0,
-                                });
-                            });
-                        }
-                        else {
-                            const stdoutChunks = [];
-                            const stderrChunks = [];
-                            proc.stdout.on("data", (chunk) => {
-                                stdoutChunks.push(chunk.toString());
-                            });
-                            proc.stderr.on("data", (chunk) => {
-                                stderrChunks.push(chunk.toString());
-                            });
-                            proc.on("close", (code) => {
-                                resolve({
-                                    stdout: stdoutChunks.join(""),
-                                    stderr: stderrChunks.join(""),
-                                    exitCode: code ?? 0,
-                                });
-                            });
-                        }
-                    });
-                },
-                interactiveExec: (args, opts) => {
-                    return new Promise((resolve, reject) => {
-                        const dockerArgs = ["exec"];
-                        // Allocate a pseudo-terminal when stdin looks like a TTY
-                        if ("isTTY" in opts.stdin &&
-                            opts.stdin.isTTY) {
-                            dockerArgs.push("-it");
-                        }
-                        else {
-                            dockerArgs.push("-i");
-                        }
-                        if (opts.cwd)
-                            dockerArgs.push("-w", opts.cwd);
-                        dockerArgs.push(containerName, ...args);
-                        const proc = spawn("docker", dockerArgs, {
-                            stdio: [opts.stdin, opts.stdout, opts.stderr],
-                        });
-                        proc.on("error", (error) => {
-                            reject(new Error(`docker exec failed: ${error.message}`));
-                        });
-                        proc.on("close", (code) => {
-                            resolve({ exitCode: code ?? 0 });
-                        });
-                    });
-                },
-                copyFileIn: (hostPath, sandboxPath) => new Promise((resolve, reject) => {
-                    execFile("docker", ["cp", hostPath, `${containerName}:${sandboxPath}`], (error) => {
-                        if (error) {
-                            reject(new Error(`docker cp (in) failed: ${error.message}`));
-                        }
-                        else {
-                            resolve();
-                        }
-                    });
-                }),
-                copyFileOut: (sandboxPath, hostPath) => new Promise((resolve, reject) => {
-                    execFile("docker", ["cp", `${containerName}:${sandboxPath}`, hostPath], (error) => {
-                        if (error) {
-                            reject(new Error(`docker cp (out) failed: ${error.message}`));
-                        }
-                        else {
-                            resolve();
-                        }
-                    });
-                }),
-                close: async () => {
-                    unregisterShutdown();
-                    await Effect.runPromise(removeContainer(containerName));
-                },
-            };
-            return handle;
-        },
-    });
-};
-// Re-export for backwards compatibility
-export { defaultImageName };
-const checkImageUid = (imageName, expectedUid) => new Promise((resolve, reject) => {
-    execFile("docker", ["image", "inspect", imageName, "--format", "{{.Config.User}}"], (error, stdout) => {
-        if (error) {
-            reject(new Error(`Image '${imageName}' not found locally. Build it first with 'sandcastle docker build-image'.`));
-            return;
-        }
-        const imageUser = (stdout ?? "").toString().trim();
-        if (!imageUser) {
-            // No USER directive in image — skip check
-            resolve();
-            return;
-        }
-        const uidPart = imageUser.split(":")[0];
-        const imageUid = parseInt(uidPart, 10);
-        if (isNaN(imageUid)) {
-            // Non-numeric user (e.g. "agent") — can't compare, skip check
-            resolve();
-            return;
-        }
-        if (imageUid !== expectedUid) {
-            reject(new Error(`UID mismatch: image '${imageName}' was built with UID ${imageUid}, ` +
-                `but the expected UID is ${expectedUid}. ` +
-                `Rebuild the image with 'sandcastle docker build-image', ` +
-                `or pass containerUid: ${imageUid} to docker() to match the image.`));
-        }
-        else {
-            resolve();
-        }
-    });
-});
+import { createRequire } from 'node:module';
+export { docker } from '../chunk-UPDEQ2U7.js';
+export { defaultImageName } from '../chunk-Z7O2WNRU.js';
+import '../chunk-BIWNFKGV.js';
+import '../chunk-NGBM7T3E.js';
+
+createRequire(import.meta.url);
+//# sourceMappingURL=docker.js.map
 //# sourceMappingURL=docker.js.map