@aiassesstech/sam 0.2.4 → 0.3.0

package/dist/sandbox/sandbox-manager.js

@@ -0,0 +1,373 @@
+/**
+ * SandboxManager — Docker container lifecycle for code execution
+ *
+ * Handles the per-execution container lifecycle:
+ *   1. Create container with resource limits
+ *   2. Copy input files into /workspace
+ *   3. Execute code as builder user
+ *   4. Capture stdout/stderr/exit code
+ *   5. Extract output files from /workspace
+ *   6. Destroy container
+ *
+ * VPS constraint: Only one sandbox runs at a time (4GB RAM CX23).
+ * All Docker operations use CLI commands via child_process.
+ */
+import { execFile, spawn } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import * as crypto from 'node:crypto';
+import { promisify } from 'node:util';
+import { DEFAULT_SANDBOX_CONFIG } from './types.js';
+const execFileAsync = promisify(execFile);
+export class SandboxManager {
+    config;
+    artifactBase;
+    busy = false;
+    constructor(config = {}, openclawHome) {
+        this.config = { ...DEFAULT_SANDBOX_CONFIG, ...config };
+        const home = openclawHome || process.env.OPENCLAW_HOME ||
+            path.join(process.env.HOME || '/root', '.openclaw');
+        this.artifactBase = path.join(home, this.config.artifactDir);
+        fs.mkdirSync(this.artifactBase, { recursive: true });
+    }
+    async execute(language, code, files = [], opts = {}) {
+        if (this.busy) {
+            throw new Error('Sandbox busy — only one execution at a time (VPS resource constraint)');
+        }
+        this.busy = true;
+        const startTime = Date.now();
+        const containerId = `sam-sandbox-${Date.now()}`;
+        const timeout = opts.timeoutMs ?? this.config.timeoutMs;
+        try {
+            await this.createContainer(containerId, opts.networkEnabled ?? this.config.networkEnabled);
+            for (const file of files) {
+                await this.writeFileToContainer(containerId, file);
+            }
+            const entryFile = this.writeEntryScript(language, code);
+            await this.writeFileToContainer(containerId, entryFile);
+            const cmd = this.buildExecCommand(language);
+            const { stdout, stderr, exitCode, timedOut } = await this.execInContainer(containerId, cmd, timeout);
+            const filesCreated = await this.listContainerFiles(containerId);
+            if (opts.erId) {
+                await this.extractArtifacts(containerId, opts.erId);
+            }
+            const executionTimeMs = Date.now() - startTime;
+            return {
+                stdout,
+                stderr,
+                exitCode,
+                executionTimeMs,
+                memoryPeakMb: 0,
+                filesCreated,
+                timedOut,
+                containerId,
+            };
+        }
+        finally {
+            await this.destroyContainer(containerId).catch(() => { });
+            this.busy = false;
+        }
+    }
+    async getStatus() {
+        const dockerAvailable = await this.isDockerAvailable();
+        const imageExists = dockerAvailable ? await this.imageExists() : false;
+        const runningContainers = dockerAvailable ? await this.countRunningContainers() : 0;
+        const artifactDiskUsageMb = this.getArtifactDiskUsage();
+        return {
+            dockerAvailable,
+            imageExists,
+            runningContainers,
+            artifactDiskUsageMb,
+        };
+    }
+    async buildImage() {
+        const dockerfilePath = this.findDockerfile();
+        if (!dockerfilePath) {
+            return { success: false, output: 'Dockerfile not found' };
+        }
+        try {
+            const { stdout, stderr } = await execFileAsync('docker', [
+                'build', '-t', this.config.image, '-f', dockerfilePath, path.dirname(dockerfilePath),
+            ], { timeout: 5 * 60 * 1000 });
+            return { success: true, output: stdout + stderr };
+        }
+        catch (err) {
+            return { success: false, output: err.stderr || err.message };
+        }
+    }
+    async cleanup() {
+        let removed = 0;
+        try {
+            const { stdout } = await execFileAsync('docker', [
+                'ps', '-a', '--filter', 'name=sam-sandbox-', '--format', '{{.ID}}',
+            ]);
+            const ids = stdout.trim().split('\n').filter(Boolean);
+            for (const id of ids) {
+                await execFileAsync('docker', ['rm', '-f', id]).catch(() => { });
+                removed++;
+            }
+        }
+        catch { /* no containers */ }
+        const reclaimedMb = this.cleanupOldArtifacts();
+        return { removed, reclaimedMb };
+    }
+    // Artifact management
+    listArtifacts(erId) {
+        if (!fs.existsSync(this.artifactBase))
+            return [];
+        const dirs = fs.readdirSync(this.artifactBase, { withFileTypes: true })
+            .filter((d) => d.isDirectory())
+            .filter((d) => !erId || d.name.startsWith(erId));
+        return dirs.map((d) => {
+            const dirPath = path.join(this.artifactBase, d.name);
+            const files = this.readdirDeep(dirPath);
+            const sizeMb = files.reduce((sum, f) => {
+                try {
+                    return sum + fs.statSync(f).size;
+                }
+                catch {
+                    return sum;
+                }
+            }, 0) / (1024 * 1024);
+            const parts = d.name.split('_');
+            return {
+                erId: parts[0] || d.name,
+                timestamp: parts[1] || new Date().toISOString(),
+                files: files.map((f) => path.relative(dirPath, f)),
+                sizeMb: Math.round(sizeMb * 100) / 100,
+            };
+        });
+    }
+    async packageArtifact(erId, selfReviewNotes) {
+        const artifacts = this.listArtifacts(erId);
+        if (artifacts.length === 0)
+            throw new Error(`No artifacts found for ${erId}`);
+        const latest = artifacts[artifacts.length - 1];
+        const artifactDir = path.join(this.artifactBase, `${latest.erId}_${latest.timestamp}`);
+        const manifest = {
+            erId,
+            buildTimestamp: new Date().toISOString(),
+            files: latest.files.map((f) => {
+                const fullPath = path.join(artifactDir, f);
+                const content = fs.existsSync(fullPath) ? fs.readFileSync(fullPath) : Buffer.alloc(0);
+                return {
+                    filename: f,
+                    sizeBytes: content.length,
+                    sha256: crypto.createHash('sha256').update(content).digest('hex'),
+                };
+            }),
+            selfReviewNotes,
+        };
+        fs.writeFileSync(path.join(artifactDir, 'manifest.json'), JSON.stringify(manifest, null, 2));
+        const tarPath = path.join(this.artifactBase, `${erId}-artifact.tar.gz`);
+        await execFileAsync('tar', ['-czf', tarPath, '-C', this.artifactBase, path.basename(artifactDir)]);
+        return tarPath;
+    }
+    // ── Private: Docker Operations ─────────────────────────────────
+    async createContainer(id, networkEnabled) {
+        const args = [
+            'run', '-d',
+            '--name', id,
+            '--cpus', String(this.config.cpuLimit),
+            '--memory', this.config.memoryLimit,
+            '--pids-limit', String(this.config.maxPids),
+            '--read-only',
+            '--tmpfs', `/workspace:rw,size=${this.config.diskLimit}`,
+            '--tmpfs', '/tmp:rw,size=100m',
+        ];
+        if (!networkEnabled) {
+            args.push('--network', 'none');
+        }
+        args.push(this.config.image, 'sleep', '3600');
+        await execFileAsync('docker', args);
+    }
+    async writeFileToContainer(containerId, file) {
+        const tmpDir = fs.mkdtempSync(path.join('/tmp', 'sam-sandbox-'));
+        const tmpFile = path.join(tmpDir, file.filename);
+        const dir = path.dirname(tmpFile);
+        fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(tmpFile, file.content);
+        await execFileAsync('docker', ['cp', tmpFile, `${containerId}:/workspace/${file.filename}`]);
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    }
+    async execInContainer(containerId, command, timeoutMs) {
+        return new Promise((resolve) => {
+            let stdout = '';
+            let stderr = '';
+            let timedOut = false;
+            const proc = spawn('docker', ['exec', containerId, ...command], {
+                timeout: timeoutMs,
+            });
+            proc.stdout.on('data', (d) => { stdout += d.toString(); });
+            proc.stderr.on('data', (d) => { stderr += d.toString(); });
+            const timer = setTimeout(() => {
+                timedOut = true;
+                proc.kill('SIGTERM');
+                setTimeout(() => proc.kill('SIGKILL'), 5000);
+            }, timeoutMs);
+            proc.on('close', (code) => {
+                clearTimeout(timer);
+                resolve({
+                    stdout: stdout.slice(0, 500_000),
+                    stderr: stderr.slice(0, 500_000),
+                    exitCode: code ?? 1,
+                    timedOut,
+                });
+            });
+            proc.on('error', (err) => {
+                clearTimeout(timer);
+                resolve({ stdout, stderr: stderr + err.message, exitCode: 1, timedOut: false });
+            });
+        });
+    }
+    async listContainerFiles(containerId) {
+        try {
+            const { stdout } = await execFileAsync('docker', [
+                'exec', containerId, 'find', '/workspace', '-type', 'f', '-not', '-name', '._sam_entry.*',
+            ]);
+            return stdout.trim().split('\n').filter(Boolean)
+                .map((f) => f.replace('/workspace/', ''));
+        }
+        catch {
+            return [];
+        }
+    }
+    async extractArtifacts(containerId, erId) {
+        const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+        const destDir = path.join(this.artifactBase, `${erId}_${timestamp}`);
+        fs.mkdirSync(destDir, { recursive: true });
+        try {
+            await execFileAsync('docker', ['cp', `${containerId}:/workspace/.`, destDir]);
+        }
+        catch {
+            console.warn(`[sam] Could not extract artifacts for ${erId}`);
+        }
+    }
+    async destroyContainer(containerId) {
+        await execFileAsync('docker', ['rm', '-f', containerId]).catch(() => { });
+    }
+    async isDockerAvailable() {
+        try {
+            await execFileAsync('docker', ['info'], { timeout: 5000 });
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async imageExists() {
+        try {
+            await execFileAsync('docker', ['image', 'inspect', this.config.image]);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async countRunningContainers() {
+        try {
+            const { stdout } = await execFileAsync('docker', [
+                'ps', '--filter', 'name=sam-sandbox-', '--format', '{{.ID}}',
+            ]);
+            return stdout.trim().split('\n').filter(Boolean).length;
+        }
+        catch {
+            return 0;
+        }
+    }
+    // ── Private: Helpers ───────────────────────────────────────────
+    writeEntryScript(language, code) {
+        const runners = {
+            nodejs: { filename: '._sam_entry.js', wrap: (c) => c },
+            python: { filename: '._sam_entry.py', wrap: (c) => c },
+            bash: { filename: '._sam_entry.sh', wrap: (c) => `#!/bin/bash\nset -euo pipefail\n${c}` },
+        };
+        const runner = runners[language];
+        return { filename: runner.filename, content: runner.wrap(code) };
+    }
+    buildExecCommand(language) {
+        const cmds = {
+            nodejs: ['node', '/workspace/._sam_entry.js'],
+            python: ['python3', '/workspace/._sam_entry.py'],
+            bash: ['bash', '/workspace/._sam_entry.sh'],
+        };
+        return cmds[language];
+    }
+    findDockerfile() {
+        const candidates = [
+            path.join(process.cwd(), 'docker', 'Dockerfile'),
+            path.join(__dirname, '..', '..', 'docker', 'Dockerfile'),
+        ];
+        // When running via npx, resolve relative to the package
+        try {
+            const pkgDir = path.resolve(__dirname, '..', '..');
+            candidates.push(path.join(pkgDir, 'docker', 'Dockerfile'));
+        }
+        catch { /* ignore */ }
+        for (const c of candidates) {
+            if (fs.existsSync(c))
+                return c;
+        }
+        return null;
+    }
+    getArtifactDiskUsage() {
+        if (!fs.existsSync(this.artifactBase))
+            return 0;
+        const files = this.readdirDeep(this.artifactBase);
+        const bytes = files.reduce((sum, f) => {
+            try {
+                return sum + fs.statSync(f).size;
+            }
+            catch {
+                return sum;
+            }
+        }, 0);
+        return Math.round(bytes / (1024 * 1024) * 100) / 100;
+    }
+    cleanupOldArtifacts() {
+        if (!fs.existsSync(this.artifactBase))
+            return 0;
+        const cutoff = Date.now() - (7 * 24 * 60 * 60 * 1000);
+        let reclaimedBytes = 0;
+        const entries = fs.readdirSync(this.artifactBase, { withFileTypes: true });
+        for (const entry of entries) {
+            if (!entry.isDirectory())
+                continue;
+            const dirPath = path.join(this.artifactBase, entry.name);
+            try {
+                const stat = fs.statSync(dirPath);
+                if (stat.mtimeMs < cutoff) {
+                    const files = this.readdirDeep(dirPath);
+                    reclaimedBytes += files.reduce((s, f) => {
+                        try {
+                            return s + fs.statSync(f).size;
+                        }
+                        catch {
+                            return s;
+                        }
+                    }, 0);
+                    fs.rmSync(dirPath, { recursive: true, force: true });
+                }
+            }
+            catch { /* skip */ }
+        }
+        return Math.round(reclaimedBytes / (1024 * 1024) * 100) / 100;
+    }
+    readdirDeep(dir) {
+        const results = [];
+        if (!fs.existsSync(dir))
+            return results;
+        const entries = fs.readdirSync(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            const fullPath = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                results.push(...this.readdirDeep(fullPath));
+            }
+            else {
+                results.push(fullPath);
+            }
+        }
+        return results;
+    }
+}
+//# sourceMappingURL=sandbox-manager.js.map

package/dist/sandbox/sandbox-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-manager.js","sourceRoot":"","sources":["../../src/sandbox/sandbox-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAStC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,OAAO,cAAc;IACjB,MAAM,CAAgB;IACtB,YAAY,CAAS;IACrB,IAAI,GAAG,KAAK,CAAC;IAErB,YAAY,SAAiC,EAAE,EAAE,YAAqB;QACpE,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,sBAAsB,EAAE,GAAG,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa;YACpD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,OAAO,CACX,QAAyB,EACzB,IAAY,EACZ,QAAuB,EAAE,EACzB,OAAwE,EAAE;QAE1E,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QAED,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,eAAe,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAExD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAE3F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YACrD,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACxD,MAAM,IAAI,CAAC,oBAAoB,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;YAExD,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;YAErG,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAEhE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAE/C,OAAO;gBACL,MAAM;gBACN,MAAM;gBACN,QAAQ;gBACR,eAAe;gBACf,YAAY,EAAE,CAAC;gBACf,YAAY;gBACZ,QAAQ;gBACR,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvD,MAAM,WAAW,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACvE,MAAM,iBAAiB,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,mBAAmB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAExD,OAAO;YACL,eAAe;YACf,WAAW;YACX,iBAAiB;YACjB,mBAAmB;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;QAC5D,CAAC;QAED,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;gBACvD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;aACrF,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YAE/B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;QACpD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAC/D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;gBAC/C,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS;aACnE,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtD,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;gBACrB,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAChE,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,CAAC;QAE/B,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,sBAAsB;IAEtB,aAAa,CAAC,IAAa;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,EAAE,CAAC;QAEjD,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aACpE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;aAC9B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAEnD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;gBACrC,IAAI,CAAC;oBAAC,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,GAAG,CAAC;gBAAC,CAAC;YACjE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;YAEtB,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI;gBACxB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC/C,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAClD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,GAAG,GAAG;aACvC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,eAAwB;QAC1D,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QAEvF,MAAM,QAAQ,GAAqB;YACjC,IAAI;YACJ,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACxC,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtF,OAAO;oBACL,QAAQ,EAAE,CAAC;oBACX,SAAS,EAAE,OAAO,CAAC,MAAM;oBACzB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAClE,CAAC;YACJ,CAAC,CAAC;YACF,eAAe;SAChB,CAAC;QAEF,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,eAAe,CAAC,EACvC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAClC,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,kBAAkB,CAAC,CAAC;QACxE,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACnG,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,kEAAkE;IAE1D,KAAK,CAAC,eAAe,CAAC,EAAU,EAAE,cAAuB;QAC/D,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,IAAI;YACX,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YACtC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YACnC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAC3C,aAAa;YACb,SAAS,EAAE,sBAAsB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE;YACxD,SAAS,EAAE,mBAAmB;SAC/B,CAAC;QAEF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAE9C,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,WAAmB,EAAE,IAAiB;QACvE,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAExC,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,WAAW,eAAe,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAE7F,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,WAAmB,EACnB,OAAiB,EACjB,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YAErB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,EAAE;gBAC9D,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,GAAG,IAAI,CAAC;gBAChB,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACrB,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/C,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;gBACxB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC;oBACN,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;oBAChC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC;oBAChC,QAAQ,EAAE,IAAI,IAAI,CAAC;oBACnB,QAAQ;iBACT,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACvB,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAClF,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,WAAmB;QAClD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;gBAC/C,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe;aAC1F,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;iBAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,WAAmB,EAAE,IAAY;QAC9D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC;QACrE,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3C,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,GAAG,WAAW,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;QAChF,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,WAAmB;QAChD,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,iBAAiB;QAC7B,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC;YACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB;QAClC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE;gBAC/C,IAAI,EAAE,UAAU,EAAE,mBAAmB,EAAE,UAAU,EAAE,SAAS;aAC7D,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,kEAAkE;IAE1D,gBAAgB,CAAC,QAAyB,EAAE,IAAY;QAC9D,MAAM,OAAO,GAA+E;YAC1F,MAAM,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE;YACtD,MAAM,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE;YACtD,IAAI,EAAE,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mCAAmC,CAAC,EAAE,EAAE;SAC1F,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,CAAC;IAEO,gBAAgB,CAAC,QAAyB;QAChD,MAAM,IAAI,GAAsC;YAC9C,MAAM,EAAE,CAAC,MAAM,EAAE,2BAA2B,CAAC;YAC7C,MAAM,EAAE,CAAC,SAAS,EAAE,2BAA2B,CAAC;YAChD,IAAI,EAAE,CAAC,MAAM,EAAE,2BAA2B,CAAC;SAC5C,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAEO,cAAc;QACpB,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,YAAY,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC;SACzD,CAAC;QAEF,wDAAwD;QACxD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACnD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;QAC7D,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;QAExB,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,oBAAoB;QAC1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;YACpC,IAAI,CAAC;gBAAC,OAAO,GAAG,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,GAAG,CAAC;YAAC,CAAC;QACjE,CAAC,EAAE,CAAC,CAAC,CAAC;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IACvD,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACtD,IAAI,cAAc,GAAG,CAAC,CAAC;QAEvB,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;gBAAE,SAAS;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBAClC,IAAI,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,CAAC;oBAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;oBACxC,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;wBACtC,IAAI,CAAC;4BAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;wBAAC,CAAC;wBAAC,MAAM,CAAC;4BAAC,OAAO,CAAC,CAAC;wBAAC,CAAC;oBAC7D,CAAC,EAAE,CAAC,CAAC,CAAC;oBACN,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;YAAC,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC;QACxB,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;IAChE,CAAC;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC;QACxC,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9C,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/sandbox/types.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Sandbox Types — Docker execution environment types
+ */
+export interface SandboxConfig {
+    image: string;
+    cpuLimit: number;
+    memoryLimit: string;
+    diskLimit: string;
+    timeoutMs: number;
+    maxPids: number;
+    networkEnabled: boolean;
+    artifactDir: string;
+}
+export declare const DEFAULT_SANDBOX_CONFIG: SandboxConfig;
+export interface SandboxFile {
+    filename: string;
+    content: string;
+}
+export interface ExecutionResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    executionTimeMs: number;
+    memoryPeakMb: number;
+    filesCreated: string[];
+    timedOut: boolean;
+    containerId: string;
+}
+export interface TestResult {
+    passed: number;
+    failed: number;
+    skipped: number;
+    failureDetails: Array<{
+        testName: string;
+        error: string;
+        expected?: string;
+        actual?: string;
+    }>;
+    executionTimeMs: number;
+    rawOutput: string;
+}
+export interface ArtifactManifest {
+    erId: string;
+    buildTimestamp: string;
+    files: Array<{
+        filename: string;
+        sizeBytes: number;
+        sha256: string;
+    }>;
+    testResults?: {
+        passed: number;
+        failed: number;
+        skipped: number;
+    };
+    selfReviewNotes?: string;
+}
+export type SandboxLanguage = 'nodejs' | 'python' | 'bash';
+export interface SandboxStatus {
+    dockerAvailable: boolean;
+    imageExists: boolean;
+    imageVersion?: string;
+    runningContainers: number;
+    artifactDiskUsageMb: number;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/sandbox/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,sBAAsB,EAAE,aASpC,CAAC;AAEF,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,KAAK,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC,CAAC;IACH,eAAe,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,KAAK,CAAC;QACX,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC,CAAC;IACH,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;CAC7B"}

package/dist/sandbox/types.js

@@ -0,0 +1,14 @@
+/**
+ * Sandbox Types — Docker execution environment types
+ */
+export const DEFAULT_SANDBOX_CONFIG = {
+    image: 'sam-sandbox:latest',
+    cpuLimit: 1,
+    memoryLimit: '512m',
+    diskLimit: '1g',
+    timeoutMs: 10 * 60 * 1000,
+    maxPids: 256,
+    networkEnabled: false,
+    artifactDir: '.sam-artifacts',
+};
+//# sourceMappingURL=types.js.map

package/dist/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAaH,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACnD,KAAK,EAAE,oBAAoB;IAC3B,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;IACzB,OAAO,EAAE,GAAG;IACZ,cAAc,EAAE,KAAK;IACrB,WAAW,EAAE,gBAAgB;CAC9B,CAAC"}

package/dist/tools/sam-artifact.d.ts

@@ -0,0 +1,43 @@
+/**
+ * sam_artifact — Package build artifacts for Archie review
+ *
+ * Actions: list, package, cleanup
+ */
+import type { SandboxManager } from '../sandbox/sandbox-manager.js';
+export declare function createArtifactTool(sandbox: SandboxManager): {
+    name: string;
+    description: string;
+    parameters: {
+        type: "object";
+        properties: {
+            action: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            er_id: {
+                type: string;
+                description: string;
+            };
+            self_review_notes: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+    execute(_toolCallId: string, params: Record<string, unknown>): Promise<{
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError?: undefined;
+    } | {
+        content: {
+            type: string;
+            text: string;
+        }[];
+        isError: boolean;
+    }>;
+};
+//# sourceMappingURL=sam-artifact.d.ts.map

package/dist/tools/sam-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sam-artifact.d.ts","sourceRoot":"","sources":["../../src/tools/sam-artifact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,cAAc;;;;;;;;;;;;;;;;;;;;kBAyB5B,MAAM,EAAE;;yBAEP,MAAM,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;;;;;;;;;;;;;EAwErE"}

package/dist/tools/sam-artifact.js

@@ -0,0 +1,102 @@
+/**
+ * sam_artifact — Package build artifacts for Archie review
+ *
+ * Actions: list, package, cleanup
+ */
+export function createArtifactTool(sandbox) {
+    return {
+        name: 'sam_artifact',
+        description: 'Manage build artifacts. ' +
+            'list: Show all artifacts with ER-ID, timestamp, file count, size. ' +
+            'package: Create tar.gz of artifact directory with manifest.json. ' +
+            'cleanup: Remove artifacts older than 7 days.',
+        parameters: {
+            type: 'object',
+            properties: {
+                action: {
+                    type: 'string',
+                    enum: ['list', 'package', 'cleanup'],
+                    description: 'Artifact management action',
+                },
+                er_id: {
+                    type: 'string',
+                    description: 'Engineering Request ID (required for package, optional filter for list)',
+                },
+                self_review_notes: {
+                    type: 'string',
+                    description: 'Self-review notes to include in the artifact manifest (for package)',
+                },
+            },
+            required: ['action'],
+        },
+        async execute(_toolCallId, params) {
+            try {
+                const action = params.action;
+                const erId = params.er_id;
+                if (action === 'list') {
+                    const artifacts = sandbox.listArtifacts(erId);
+                    return {
+                        content: [{
+                                type: 'text',
+                                text: JSON.stringify({
+                                    action: 'list',
+                                    count: artifacts.length,
+                                    artifacts: artifacts.map((a) => ({
+                                        erId: a.erId,
+                                        timestamp: a.timestamp,
+                                        fileCount: a.files.length,
+                                        sizeMb: a.sizeMb,
+                                    })),
+                                }, null, 2),
+                            }],
+                    };
+                }
+                if (action === 'package') {
+                    if (!erId) {
+                        return {
+                            content: [{ type: 'text', text: 'er_id is required for package action' }],
+                            isError: true,
+                        };
+                    }
+                    const selfReviewNotes = params.self_review_notes;
+                    const tarPath = await sandbox.packageArtifact(erId, selfReviewNotes);
+                    return {
+                        content: [{
+                                type: 'text',
+                                text: JSON.stringify({
+                                    action: 'package',
+                                    erId,
+                                    artifactPath: tarPath,
+                                    message: `Artifact packaged for Archie review: ${tarPath}`,
+                                }, null, 2),
+                            }],
+                    };
+                }
+                if (action === 'cleanup') {
+                    const result = await sandbox.cleanup();
+                    return {
+                        content: [{
+                                type: 'text',
+                                text: JSON.stringify({
+                                    action: 'cleanup',
+                                    containersRemoved: result.removed,
+                                    diskReclaimedMb: result.reclaimedMb,
+                                }, null, 2),
+                            }],
+                    };
+                }
+                return {
+                    content: [{ type: 'text', text: `Unknown action: ${action}` }],
+                    isError: true,
+                };
+            }
+            catch (err) {
+                return {
+                    content: [{ type: 'text', text: `sam_artifact error: ${err instanceof Error ? err.message : String(err)}` }],
+                    isError: true,
+                };
+            }
+        },
+    };
+}
+//# sourceMappingURL=sam-artifact.js.map

package/dist/tools/sam-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sam-artifact.js","sourceRoot":"","sources":["../../src/tools/sam-artifact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,kBAAkB,CAAC,OAAuB;IACxD,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,WAAW,EACT,0BAA0B;YAC1B,oEAAoE;YACpE,mEAAmE;YACnE,8CAA8C;QAChD,UAAU,EAAE;YACV,IAAI,EAAE,QAAiB;YACvB,UAAU,EAAE;gBACV,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;oBACpC,WAAW,EAAE,4BAA4B;iBAC1C;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,yEAAyE;iBACvF;gBACD,iBAAiB,EAAE;oBACjB,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,qEAAqE;iBACnF;aACF;YACD,QAAQ,EAAE,CAAC,QAAQ,CAAa;SACjC;QACD,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,MAA+B;YAChE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAgB,CAAC;gBACvC,MAAM,IAAI,GAAG,MAAM,CAAC,KAA2B,CAAC;gBAEhD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;oBAC9C,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,MAAM,EAAE,MAAM;oCACd,KAAK,EAAE,SAAS,CAAC,MAAM;oCACvB,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wCAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;wCACZ,SAAS,EAAE,CAAC,CAAC,SAAS;wCACtB,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM;wCACzB,MAAM,EAAE,CAAC,CAAC,MAAM;qCACjB,CAAC,CAAC;iCACJ,EAAE,IAAI,EAAE,CAAC,CAAC;6BACZ,CAAC;qBACH,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,IAAI,CAAC,IAAI,EAAE,CAAC;wBACV,OAAO;4BACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,EAAE,CAAC;4BACzE,OAAO,EAAE,IAAI;yBACd,CAAC;oBACJ,CAAC;oBACD,MAAM,eAAe,GAAG,MAAM,CAAC,iBAAuC,CAAC;oBACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;oBACrE,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,MAAM,EAAE,SAAS;oCACjB,IAAI;oCACJ,YAAY,EAAE,OAAO;oCACrB,OAAO,EAAE,wCAAwC,OAAO,EAAE;iCAC3D,EAAE,IAAI,EAAE,CAAC,CAAC;6BACZ,CAAC;qBACH,CAAC;gBACJ,CAAC;gBAED,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;oBACvC,OAAO;wBACL,OAAO,EAAE,CAAC;gCACR,IAAI,EAAE,MAAM;gCACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oCACnB,MAAM,EAAE,SAAS;oCACjB,iBAAiB,EAAE,MAAM,CAAC,OAAO;oCACjC,eAAe,EAAE,MAAM,CAAC,WAAW;iCACpC,EAAE,IAAI,EAAE,CAAC,CAAC;6BACZ,CAAC;qBACH,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,MAAM,EAAE,EAAE,CAAC;oBAC9D,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;oBAC5G,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}