@amends-dev/sandbox-e2b 0.0.0-stage → 0.2.0

package/E2bSandboxProvider.d.ts

@@ -0,0 +1,63 @@
+/**
+ * E2B sandboxes, resumed through provider-owned metadata and stopped with filesystem-only
+ * persistence so processes do not return on resume. E2B assigns its own machine IDs; logical
+ * IDs are metadata, not an atomic distributed name reservation. See the package README.
+ *
+ * @since 0.1.0
+ */
+import { Sandbox, SandboxError, SandboxProvider } from "@amends-dev/sandbox";
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
+import * as Schema from "effect/Schema";
+/**
+ * Connection settings and defaults for machines created by this provider.
+ *
+ * @category options
+ * @since 0.1.0
+ */
+export interface Options {
+    readonly apiKey: Redacted.Redacted<string>;
+    readonly apiUrl?: string;
+    readonly domain?: string;
+    /** E2B template or snapshot ID; defaults to E2B's base image. */
+    readonly template?: string;
+    /** E2B's running lifetime; defaults to one hour, then pauses with files preserved. */
+    readonly timeoutMs?: number;
+    readonly requestTimeoutMs?: number;
+}
+/**
+ * Overrides under `providerOptions.e2b`. Invalid options fail before any allocation.
+ *
+ * @category options
+ * @since 0.1.0
+ */
+export declare const ProviderOptions: Schema.Struct<{
+    readonly template: Schema.optionalKey<Schema.String>;
+    readonly timeoutMs: Schema.optionalKey<Schema.Int>;
+}>;
+/** @category options
+ * @since 0.1.0
+ */
+export type ProviderOptions = typeof ProviderOptions.Type;
+/**
+ * Constructs the provider using Effect's Crypto service for generated logical IDs.
+ * Templates prepare each sandbox before its requested network policy is applied.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export declare const make: (options: Options) => Effect.Effect<{
+    readonly create: <E = never>(options?: SandboxProvider.CreateOptions<E>) => Effect.Effect<Sandbox.Sandbox["Service"], SandboxError.SandboxError | E>;
+    readonly createScoped: <E = never>(options?: SandboxProvider.CreateOptions<E>) => Effect.Effect<Sandbox.Sandbox["Service"], SandboxError.SandboxError | E, import("effect/Scope").Scope>;
+    readonly resume: (id: Sandbox.SandboxId) => Effect.Effect<Sandbox.Sandbox["Service"], SandboxError.SandboxError>;
+}, never, Crypto.Crypto>;
+/**
+ * Provides sandboxes through E2B using `make`.
+ *
+ * @category layers
+ * @since 0.1.0
+ */
+export declare const layer: (options: Options) => Layer.Layer<SandboxProvider.SandboxProvider, never, Crypto.Crypto>;
+//# sourceMappingURL=E2bSandboxProvider.d.ts.map

package/E2bSandboxProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"E2bSandboxProvider.d.ts","sourceRoot":"","sources":["../src/E2bSandboxProvider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAW,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAErF,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAOvC;;;;;GAKG;AACH,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,sFAAsF;IACtF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CACnC;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;EAG1B,CAAA;AAEF;;GAEG;AACH,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAC,IAAI,CAAA;AAOzD;;;;;;GAMG;AACH,eAAO,MAAM,IAAI;;;;wBA6Kf,CAAA;AAEF;;;;;GAKG;AACH,eAAO,MAAM,KAAK,YAAa,OAAO,uEAAiE,CAAA"}

package/E2bSandboxProvider.js

@@ -0,0 +1,160 @@
+/**
+ * E2B sandboxes, resumed through provider-owned metadata and stopped with filesystem-only
+ * persistence so processes do not return on resume. E2B assigns its own machine IDs; logical
+ * IDs are metadata, not an atomic distributed name reservation. See the package README.
+ *
+ * @since 0.1.0
+ */
+import { Network, Sandbox, SandboxError, SandboxProvider } from "@amends-dev/sandbox";
+import { Sandbox as E2bSandbox } from "e2b";
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import * as Exit from "effect/Exit";
+import * as Layer from "effect/Layer";
+import * as Redacted from "effect/Redacted";
+import * as Schema from "effect/Schema";
+import * as Semaphore from "effect/Semaphore";
+import { call, providerId, sandboxError } from "./internal/call.js";
+import { makeFileSystem } from "./internal/files.js";
+import { networkSettingsOf } from "./internal/network.js";
+import { makeChildProcessSpawner } from "./internal/processes.js";
+/**
+ * Overrides under `providerOptions.e2b`. Invalid options fail before any allocation.
+ *
+ * @category options
+ * @since 0.1.0
+ */
+export const ProviderOptions = Schema.Struct({
+    template: Schema.optionalKey(Schema.String.check(Schema.isMinLength(1))),
+    timeoutMs: Schema.optionalKey(Schema.Int.check(Schema.isGreaterThan(0)))
+});
+const ownerKey = "amends-provider";
+const idKey = "amends-id";
+const creationKey = "amends-creation";
+const portDirectory = "/var/tmp/amends/ports";
+/**
+ * Constructs the provider using Effect's Crypto service for generated logical IDs.
+ * Templates prepare each sandbox before its requested network policy is applied.
+ *
+ * @category constructors
+ * @since 0.1.0
+ */
+export const make = Effect.fnUntraced(function* (options) {
+    const crypto = yield* Crypto.Crypto;
+    const creates = yield* Semaphore.make(1);
+    const connection = {
+        apiKey: Redacted.value(options.apiKey),
+        // Explicit defaults avoid ambient SDK configuration changing which account endpoint is used.
+        apiUrl: options.apiUrl ?? `https://api.${options.domain ?? "e2b.app"}`,
+        domain: options.domain ?? "e2b.app",
+        debug: false,
+        retries: 0,
+        ...(options.requestTimeoutMs === undefined ? {} : { requestTimeoutMs: options.requestTimeoutMs })
+    };
+    const findSandboxes = Effect.fnUntraced(function* (id, creation) {
+        const paginator = E2bSandbox.list({
+            ...connection,
+            query: {
+                metadata: {
+                    [ownerKey]: providerId,
+                    [idKey]: id,
+                    ...(creation === undefined ? {} : { [creationKey]: creation })
+                },
+                state: ["running", "paused"]
+            }
+        });
+        const found = [];
+        while (paginator.hasNext)
+            found.push(...(yield* call(() => paginator.nextItems())));
+        return found;
+    });
+    const openSandbox = Effect.fnUntraced(function* (sandbox, id) {
+        const workingDirectory = (yield* call(() => sandbox.commands.run("pwd -P"))).stdout.trim();
+        const fileSystem = makeFileSystem(sandbox, workingDirectory);
+        const exposePorts = (ports) => Effect.forEach(ports, (port) => call(() => sandbox.files.write(`${portDirectory}/${port}`, "")), {
+            discard: true
+        });
+        return Sandbox.Sandbox.of({
+            id,
+            workingDirectory,
+            fileSystem,
+            childProcessSpawner: yield* makeChildProcessSpawner(sandbox, workingDirectory).pipe(Effect.provideService(Crypto.Crypto, crypto)),
+            exposePorts,
+            endpoint: (port, protocol) => Effect.flatMap(call(() => sandbox.files.exists(`${portDirectory}/${port}`)), (exposed) => exposed
+                ? Effect.succeed({
+                    url: `${protocol === "ws" ? "wss" : "https"}://${sandbox.getHost(port)}`,
+                    headers: sandbox.trafficAccessToken === undefined
+                        ? {}
+                        : { "e2b-traffic-access-token": Redacted.make(sandbox.trafficAccessToken) }
+                })
+                : Effect.fail(sandboxError(new SandboxError.NotFoundError({ description: `Port ${port} is not exposed` })))),
+            stop: Effect.flatMap(call(() => sandbox.getInfo()), (info) => info.state === "paused" ? Effect.void : Effect.asVoid(call(() => sandbox.pause({ mode: "filesystem" })))),
+            destroy: Effect.asVoid(call(() => sandbox.kill())).pipe(Effect.catchReason("SandboxError", "NotFoundError", () => Effect.void)),
+            setNetworkPolicy: (policy) => Effect.flatMap(networkSettingsOf(policy), (settings) => call(() => sandbox.updateNetwork(settings))),
+            setRequestTransformations: () => Effect.fail(sandboxError(new SandboxError.UnsupportedError({
+                description: "E2B's host-only transformations cannot enforce request path and header matching"
+            })))
+        });
+    });
+    const create = Effect.fn("E2bSandboxProvider.create")(function* (createOptions = {}) {
+        const providerOptions = yield* Schema.decodeUnknownEffect(ProviderOptions)(createOptions.providerOptions?.[providerId] ?? {}, { onExcessProperty: "error" }).pipe(Effect.mapError((error) => sandboxError(new SandboxError.InvalidOptionsError({ description: error.message }))));
+        const policy = yield* networkSettingsOf(createOptions.networkPolicy ?? Network.NetworkPolicy.cases.AllowAll.make({}));
+        const id = createOptions.id ??
+            Sandbox.SandboxId.make(yield* crypto
+                .randomUUIDv4()
+                .pipe(Effect.mapError((error) => sandboxError(new SandboxError.UnknownError({ description: error.message })))));
+        if ((yield* findSandboxes(id)).length > 0) {
+            return yield* sandboxError(new SandboxError.AlreadyExistsError({ description: `Sandbox ${id} already exists` }));
+        }
+        const template = providerOptions.template ?? options.template;
+        const creation = yield* crypto
+            .randomUUIDv4()
+            .pipe(Effect.mapError((error) => sandboxError(new SandboxError.UnknownError({ description: error.message }))));
+        return yield* Effect.acquireUseRelease(call(() => E2bSandbox.create({
+            ...connection,
+            ...(template === undefined ? {} : { template }),
+            timeoutMs: providerOptions.timeoutMs ?? options.timeoutMs ?? 3_600_000,
+            metadata: { [ownerKey]: providerId, [idKey]: id, [creationKey]: creation },
+            lifecycle: { onTimeout: { action: "pause", mode: "filesystem" }, autoResume: false },
+            network: { allowPublicTraffic: false, ...(createOptions.template === undefined ? policy : {}) }
+        })).pipe(
+        // A failed response can still have allocated. Locate only this attempt, never a rival's ID.
+        Effect.tapError(() => findSandboxes(id, creation).pipe(Effect.flatMap((allocated) => Effect.forEach(allocated, (sandbox) => call(() => E2bSandbox.kill(sandbox.sandboxId, connection)), {
+            discard: true
+        })), Effect.ignore))), (sandbox) => Effect.gen(function* () {
+            // Only this call's machine is cleaned up on failure. Never delete a competing creator's.
+            const matches = yield* findSandboxes(id);
+            if (matches.some((other) => other.sandboxId !== sandbox.sandboxId)) {
+                return yield* sandboxError(new SandboxError.AlreadyExistsError({ description: `Another host created sandbox ${id} concurrently` }));
+            }
+            const opened = yield* openSandbox(sandbox, id);
+            yield* opened.exposePorts(createOptions.ports ?? []);
+            if (createOptions.template !== undefined) {
+                yield* createOptions.template.prepare.pipe(Effect.provide(Sandbox.layerServices(opened)));
+                yield* call(() => sandbox.updateNetwork(policy));
+            }
+            return opened;
+        }), (sandbox, exit) => (Exit.isSuccess(exit) ? Effect.void : Effect.orDie(call(() => sandbox.kill()))));
+    }, (effect) => creates.withPermit(effect));
+    const resume = Effect.fn("E2bSandboxProvider.resume")(function* (id) {
+        const matches = yield* findSandboxes(id);
+        if (matches.length > 1) {
+            return yield* sandboxError(new SandboxError.UnknownError({ description: `Conflicting E2B machines claim logical sandbox ${id}` }));
+        }
+        const info = matches[0];
+        if (info === undefined) {
+            return yield* sandboxError(new SandboxError.NotFoundError({ description: `Sandbox ${id} does not exist` }));
+        }
+        const sandbox = yield* call(() => E2bSandbox.connect(info.sandboxId, { ...connection, timeoutMs: options.timeoutMs ?? 3_600_000 }));
+        return yield* openSandbox(sandbox, id);
+    });
+    return SandboxProvider.make({ create, resume });
+});
+/**
+ * Provides sandboxes through E2B using `make`.
+ *
+ * @category layers
+ * @since 0.1.0
+ */
+export const layer = (options) => Layer.effect(SandboxProvider.SandboxProvider, make(options));
+//# sourceMappingURL=E2bSandboxProvider.js.map

package/E2bSandboxProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"E2bSandboxProvider.js","sourceRoot":"","sources":["../src/E2bSandboxProvider.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EAAE,OAAO,IAAI,UAAU,EAAyC,MAAM,KAAK,CAAA;AAClF,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAA;AACrC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,SAAS,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAmBjE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;CACzE,CAAC,CAAA;AAOF,MAAM,QAAQ,GAAG,iBAAiB,CAAA;AAClC,MAAM,KAAK,GAAG,WAAW,CAAA;AACzB,MAAM,WAAW,GAAG,iBAAiB,CAAA;AACrC,MAAM,aAAa,GAAG,uBAAuB,CAAA;AAE7C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAgB;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACxC,MAAM,UAAU,GAAmB;QACjC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtC,6FAA6F;QAC7F,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,eAAe,OAAO,CAAC,MAAM,IAAI,SAAS,EAAE;QACtE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS;QACnC,KAAK,EAAE,KAAK;QACZ,OAAO,EAAE,CAAC;QACV,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;KAClG,CAAA;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAqB,EAAE,QAAiB;QACzF,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC;YAChC,GAAG,UAAU;YACb,KAAK,EAAE;gBACL,QAAQ,EAAE;oBACR,CAAC,QAAQ,CAAC,EAAE,UAAU;oBACtB,CAAC,KAAK,CAAC,EAAE,EAAE;oBACX,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,CAAC;iBAC/D;gBACD,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;aAC7B;SACF,CAAC,CAAA;QACF,MAAM,KAAK,GAAuB,EAAE,CAAA;QACpC,OAAO,SAAS,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAA;QACnF,OAAO,KAAK,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAmB,EAAE,EAAqB;QACzF,MAAM,gBAAgB,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;QAC1F,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;QAC5D,MAAM,WAAW,GAAG,CAAC,KAAkC,EAAE,EAAE,CACzD,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,aAAa,IAAI,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;YAC/F,OAAO,EAAE,IAAI;SACd,CAAC,CAAA;QACJ,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,EAAE;YACF,gBAAgB;YAChB,UAAU;YACV,mBAAmB,EAAE,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,IAAI,CACjF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAC7C;YACD,WAAW;YACX,QAAQ,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAC3B,MAAM,CAAC,OAAO,CACZ,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC,CAAC,EAC5D,CAAC,OAAO,EAAE,EAAE,CACV,OAAO;gBACL,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;oBACb,GAAG,EAAE,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBACxE,OAAO,EACL,OAAO,CAAC,kBAAkB,KAAK,SAAS;wBACtC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,0BAA0B,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE;iBAChF,CAAC;gBACJ,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,YAAY,CAAC,IAAI,YAAY,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,QAAQ,IAAI,iBAAiB,EAAE,CAAC,CAAC,CAC7F,CACR;YACH,IAAI,EAAE,MAAM,CAAC,OAAO,CAClB,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAC7B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAC3G;YACD,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CACrD,MAAM,CAAC,WAAW,CAAC,cAAc,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CACvE;YACD,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAC3B,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;YACtG,yBAAyB,EAAE,GAAG,EAAE,CAC9B,MAAM,CAAC,IAAI,CACT,YAAY,CACV,IAAI,YAAY,CAAC,gBAAgB,CAAC;gBAChC,WAAW,EAAE,iFAAiF;aAC/F,CAAC,CACH,CACF;SACJ,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CACnD,QAAQ,CAAC,EAAa,aAAa,GAAqC,EAAE;QACxE,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CACxE,aAAa,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,EACjD,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAC9B,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAC/G,CAAA;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,iBAAiB,CACrC,aAAa,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAC7E,CAAA;QACD,MAAM,EAAE,GACN,aAAa,CAAC,EAAE;YAChB,OAAO,CAAC,SAAS,CAAC,IAAI,CACpB,KAAK,CAAC,CAAC,MAAM;iBACV,YAAY,EAAE;iBACd,IAAI,CACH,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CACxG,CACJ,CAAA;QACH,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAA;QAClH,CAAC;QACD,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAA;QAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM;aAC3B,YAAY,EAAE;aACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;QAChH,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACpC,IAAI,CAAC,GAAG,EAAE,CACR,UAAU,CAAC,MAAM,CAAC;YAChB,GAAG,UAAU;YACb,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;YAC/C,SAAS,EAAE,eAAe,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,SAAS;YACtE,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE;YAC1E,SAAS,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;YACpF,OAAO,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,GAAG,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAChG,CAAC,CACH,CAAC,IAAI;QACJ,4FAA4F;QAC5F,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,aAAa,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3B,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE;YACjG,OAAO,EAAE,IAAI;SACd,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd,CACF,CACF,EACD,CAAC,OAAO,EAAE,EAAE,CACV,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,yFAAyF;YACzF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;YACxC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnE,OAAO,KAAK,CAAC,CAAC,YAAY,CACxB,IAAI,YAAY,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,gCAAgC,EAAE,eAAe,EAAE,CAAC,CACxG,CAAA;YACH,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;YAC9C,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;YACpD,IAAI,aAAa,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;gBACzC,KAAK,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;gBACzF,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAA;YAClD,CAAC;YACD,OAAO,MAAM,CAAA;QACf,CAAC,CAAC,EACJ,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CACnG,CAAA;IACH,CAAC,EACD,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CACvC,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAqB;QACpF,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;QACxC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,YAAY,CACxB,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,kDAAkD,EAAE,EAAE,EAAE,CAAC,CACvG,CAAA;QACH,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACvB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAA;QAC7G,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CACjG,CAAA;QACD,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,OAAO,eAAe,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;AACjD,CAAC,CAAC,CAAA;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAA"}

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Sarib Mahmood
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,100 @@
-# Temporary Holding Version
+# E2B sandbox provider
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+`@amends-dev/sandbox-e2b` implements the [sandbox contract](../../packages/sandbox/README.md)
+with E2B's TypeScript SDK. Hosts install this adapter; shared packages depend only on the contract.
+
+```ts
+import { E2bSandboxProvider } from "@amends-dev/sandbox-e2b"
+import { BunCrypto } from "@effect/platform-bun"
+import { Config, Effect, Layer } from "effect"
+
+const sandboxes = Layer.unwrap(
+  Effect.map(Config.Redacted("E2B_API_KEY"), (apiKey) => E2bSandboxProvider.layer({ apiKey }))
+).pipe(Layer.provide(BunCrypto.layer))
+```
+
+`make` constructs the provider and needs Effect's `Crypto` service. `layer` delegates to it.
+Options include `apiKey`, `apiUrl`, `domain`, `template`, `timeoutMs`, and `requestTimeoutMs`.
+`providerOptions.e2b` can override `template` and `timeoutMs` for a create. The SDK version is
+pinned in the root catalog. Credentials are supplied explicitly; the adapter does not read them
+from SDK environment variables.
+
+## Identity and lifecycle
+
+Each logical sandbox ID is recorded in E2B metadata beside `amends-provider=e2b`. Resume queries
+both running and paused sandboxes, including every page, so a fresh host can find the same machine.
+Unknown IDs fail without allocation. A duplicate logical ID fails without modifying the existing
+machine. Sandboxes outlive the provider; `createScoped` destroys its sandbox on scope exit.
+
+**E2B does not provide atomic reservation of a custom sandbox name.** Creates are serialized within
+one provider and check metadata before and after allocation. A detected concurrent create deletes
+only its own allocation. Two hosts can still race while each sees no other allocation. If duplicates
+exist, resume fails with `UnknownError` instead of selecting a machine arbitrarily. Applications
+that create the same explicit ID on different hosts must serialize those creates externally. IDs
+generated by the adapter are UUIDs. E2B volumes are not used for naming because they require access
+to a separate private beta.
+
+`stop` uses `pause({ mode: "filesystem" })`, which preserves files and ends processes. Resume
+cold-boots the machine. Repeated stop and destroy succeed. E2B requires a maximum running lifetime:
+the default here is one hour, after which E2B pauses with filesystem-only persistence. Set
+`timeoutMs` within the account's permitted limit. The host must resume the sandbox and restart its
+services after that pause; the adapter does not renew timeouts in the background. Auto-resume on
+port traffic is disabled because it cannot restart services after a filesystem-only pause.
+
+A contract template prepares each new machine, then its network policy applies. Preparation failure
+or interruption destroys that allocation before returning. Template snapshots are not cached;
+`template` can select an E2B template or previously prepared snapshot supplied by the operator.
+
+## Files, processes, and ports
+
+The image must provide Linux `/proc`, POSIX shells, Python 3 for the conformance server, and GNU
+core utilities including `setsid`, `stat`, `find`, `base64`, and `mktemp`. E2B's base image supplies
+the tools used by the adapter. File reads and writes transfer whole files. File handles, watch,
+glob, and append flags are unsupported and fail with `PlatformError`. Exclusive-write checks and
+mode application use multiple API calls and are not atomic against other writers.
+
+Each command runs in a process group with stdout and stderr written to private files. Polling
+reads them as bytes, preserving non-UTF-8 data and final output without a newline. stdin uses E2B's
+byte API and closes when its sink ends. Environment scripts avoid placing environment values in
+recorded command lines. Commands support cwd, environment replacement or extension, pipelines,
+shell mode, ignored streams, and sinks. Extra file descriptors and host-inherited streams fail.
+
+Scope exit kills a referenced command's process group and removes its scratch directory.
+`unref` leaves the process running after its scope closes. `kill` uses SIGKILL regardless of the
+requested signal. Handles capture the Linux boot ID and refuse to signal an old PID after resume.
+Unreferenced commands keep their output files until removed by sandbox code or sandbox destruction.
+Output polling costs API requests and holds at most one MiB per read, while output files can grow
+until their command's scope closes. Output is unavailable while the sandbox is paused.
+
+Port markers in `/var/tmp/amends/ports` survive pause and make ports exposed through one handle
+visible to another. Independent markers avoid lost updates when hosts expose different ports.
+Endpoints use HTTPS or WSS and E2B's `e2b-traffic-access-token` header; other headers, including
+`Authorization`, remain available to the application. E2B's private traffic mode applies to the
+machine, while port markers describe which endpoints this adapter returns; they are not per-port
+firewall rules.
+
+## Network policies
+
+Allow-all, deny-all, and allow lists of hosts and CIDRs without denied exceptions are supported.
+An allow list with `deniedCidrs` fails with `UnsupportedError` before allocation: E2B's allow rules
+override deny rules, while the contract requires the opposite. An empty allow list blocks egress.
+Host filtering follows E2B's HTTP Host/TLS SNI filtering on ports 80/443 and its DNS exception;
+other protocols require IP/CIDR allowances. See [E2B's network documentation](https://docs.e2b.dev/network/internet-access).
+
+Request transformations fail with `UnsupportedError`. E2B's per-host transforms lack the contract's
+path-prefix and matching-header conditions; the adapter never broadens credential injection.
+
+## Verification
+
+```sh
+bun run --cwd adapters/sandbox-e2b typecheck
+bun run test -- adapters/sandbox-e2b/test/provider.test.ts
+AMENDS_TEST_E2B=1 E2B_API_KEY=... bun run test -- adapters/sandbox-e2b/test
+```
+
+The default tests exercise the real SDK against a local fake control plane, including error mapping,
+network preflight, duplicate detection, cleanup ownership, pagination, and lifecycle payloads.
+Live tests run the shared conformance suites and E2B-specific reboot, binary stdin/EOF, and network
+regressions. They allocate paid cloud machines and are skipped unless both variables are set.
+Live verification requires an E2B region that supports filesystem-only persistence; a rejected
+pause remains an error and is never silently substituted with memory persistence.

package/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Sandboxes on E2B for the `@amends-dev/sandbox` contract.
+ *
+ * @since 0.1.0
+ */
+/**
+ * @since 0.1.0
+ */
+export * as E2bSandboxProvider from "./E2bSandboxProvider.ts";
+//# sourceMappingURL=index.d.ts.map

package/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH;;GAEG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA"}

package/index.js

@@ -0,0 +1,11 @@
+/**
+ * Sandboxes on E2B for the `@amends-dev/sandbox` contract.
+ *
+ * @since 0.1.0
+ */
+// @barrel: Auto-generated exports. Do not edit manually.
+/**
+ * @since 0.1.0
+ */
+export * as E2bSandboxProvider from "./E2bSandboxProvider.js";
+//# sourceMappingURL=index.js.map

package/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,yDAAyD;AAEzD;;GAEG;AACH,OAAO,KAAK,kBAAkB,MAAM,yBAAyB,CAAA"}

package/internal/call.d.ts

@@ -0,0 +1,13 @@
+/** Maps E2B SDK failures to the sandbox and Effect platform contracts. */
+import { SandboxError } from "@amends-dev/sandbox";
+import * as Effect from "effect/Effect";
+import * as PlatformError from "effect/PlatformError";
+export declare const providerId = "e2b";
+export declare const sandboxError: (reason: SandboxError.SandboxErrorReason, cause?: unknown) => SandboxError.SandboxError;
+export declare const call: <A>(request: () => Promise<A>) => Effect.Effect<A, SandboxError.SandboxError, never>;
+export declare const fromE2bError: (error: unknown) => SandboxError.SandboxError;
+export type PlatformModule = "FileSystem" | "ChildProcess";
+export declare const callPlatform: <A>(module: PlatformModule, method: string, request: () => Promise<A>, path?: string) => Effect.Effect<A, PlatformError.PlatformError, never>;
+export declare const toPlatformError: (module: PlatformModule, method: string, error: unknown, path?: string) => PlatformError.PlatformError;
+export declare const systemErrorTagOf: (error: unknown) => PlatformError.SystemErrorTag;
+//# sourceMappingURL=call.d.ts.map

package/internal/call.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.d.ts","sourceRoot":"","sources":["../../src/internal/call.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AASlD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAErD,eAAO,MAAM,UAAU,QAAQ,CAAA;AAE/B,eAAO,MAAM,YAAY,WAAY,YAAY,CAAC,kBAAkB,UAAU,OAAO,8BACb,CAAA;AAExE,eAAO,MAAM,IAAI,GAAI,CAAC,WAAW,MAAM,OAAO,CAAC,CAAC,CAAC,uDAA6D,CAAA;AAE9G,eAAO,MAAM,YAAY,UAAW,OAAO,8BAAyC,CAAA;AA0BpF,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,cAAc,CAAA;AAE1D,eAAO,MAAM,YAAY,GAAI,CAAC,UAAU,cAAc,UAAU,MAAM,WAAW,MAAM,OAAO,CAAC,CAAC,CAAC,SAAS,MAAM,yDACX,CAAA;AAErG,eAAO,MAAM,eAAe,WAAY,cAAc,UAAU,MAAM,SAAS,OAAO,SAAS,MAAM,gCAQjG,CAAA;AAEJ,eAAO,MAAM,gBAAgB,UAAW,OAAO,KAAG,aAAa,CAAC,cAe/D,CAAA"}

package/internal/call.js

@@ -0,0 +1,66 @@
+/** Maps E2B SDK failures to the sandbox and Effect platform contracts. */
+import { SandboxError } from "@amends-dev/sandbox";
+import { AuthenticationError, InvalidArgumentError, NotFoundError, SandboxError as E2bError, ServiceBusyError, TimeoutError } from "e2b";
+import * as Effect from "effect/Effect";
+import * as PlatformError from "effect/PlatformError";
+export const providerId = "e2b";
+export const sandboxError = (reason, cause) => new SandboxError.SandboxError({ provider: providerId, reason, cause });
+export const call = (request) => Effect.tryPromise({ try: request, catch: fromE2bError });
+export const fromE2bError = (error) => sandboxError(reasonOf(error), error);
+const reasonOf = (error) => {
+    const description = error instanceof Error ? error.message : String(error);
+    if (error instanceof NotFoundError)
+        return new SandboxError.NotFoundError({ description });
+    if (error instanceof AuthenticationError)
+        return new SandboxError.AuthenticationError({ description });
+    if (error instanceof InvalidArgumentError)
+        return new SandboxError.InvalidOptionsError({ description });
+    if (error instanceof E2bError) {
+        if (error.statusCode === 401 || error.statusCode === 403)
+            return new SandboxError.AuthenticationError({ description });
+        if (error.statusCode === 404)
+            return new SandboxError.NotFoundError({ description });
+        if (error.statusCode === 400 || error.statusCode === 422)
+            return new SandboxError.InvalidOptionsError({ description });
+        // E2B owns machine IDs; a conflict is a lifecycle transition, not our metadata name check.
+        if (error.statusCode === 409)
+            return new SandboxError.UnavailableError({ description });
+    }
+    if (error instanceof TimeoutError ||
+        error instanceof ServiceBusyError ||
+        (error instanceof E2bError && (error.statusCode === 429 || (error.statusCode ?? 0) >= 500))) {
+        return new SandboxError.UnavailableError({ description });
+    }
+    return new SandboxError.UnknownError({ description });
+};
+export const callPlatform = (module, method, request, path) => Effect.tryPromise({ try: request, catch: (error) => toPlatformError(module, method, error, path) });
+export const toPlatformError = (module, method, error, path) => PlatformError.systemError({
+    _tag: systemErrorTagOf(error),
+    module,
+    method,
+    pathOrDescriptor: path,
+    description: error instanceof Error ? error.message : String(error),
+    cause: error
+});
+export const systemErrorTagOf = (error) => {
+    if (error instanceof NotFoundError || (error instanceof E2bError && error.statusCode === 404))
+        return "NotFound";
+    if (error instanceof AuthenticationError ||
+        (error instanceof E2bError && (error.statusCode === 401 || error.statusCode === 403)))
+        return "PermissionDenied";
+    if (error instanceof TimeoutError)
+        return "TimedOut";
+    const message = error instanceof Error ? error.message : String(error);
+    if (/no such file or directory|file not found/i.test(message))
+        return "NotFound";
+    if (/file exists|already exists/i.test(message))
+        return "AlreadyExists";
+    if (/permission denied|operation not permitted/i.test(message))
+        return "PermissionDenied";
+    if (/not a directory|is a directory|too many levels of symbolic links/i.test(message))
+        return "BadResource";
+    if (/resource busy/i.test(message))
+        return "Busy";
+    return "Unknown";
+};
+//# sourceMappingURL=call.js.map

package/internal/call.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call.js","sourceRoot":"","sources":["../../src/internal/call.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,aAAa,EACb,YAAY,IAAI,QAAQ,EACxB,gBAAgB,EAChB,YAAY,EACb,MAAM,KAAK,CAAA;AACZ,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AAErD,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,CAAA;AAE/B,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAuC,EAAE,KAAe,EAAE,EAAE,CACvF,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;AAExE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAI,OAAyB,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAA;AAE9G,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAA;AAEpF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmC,EAAE;IACnE,MAAM,WAAW,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1E,IAAI,KAAK,YAAY,aAAa;QAAE,OAAO,IAAI,YAAY,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1F,IAAI,KAAK,YAAY,mBAAmB;QAAE,OAAO,IAAI,YAAY,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACtG,IAAI,KAAK,YAAY,oBAAoB;QAAE,OAAO,IAAI,YAAY,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACvG,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG;YACtD,OAAO,IAAI,YAAY,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QAC9D,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG;YAAE,OAAO,IAAI,YAAY,CAAC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QACpF,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG;YACtD,OAAO,IAAI,YAAY,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;QAC9D,2FAA2F;QAC3F,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG;YAAE,OAAO,IAAI,YAAY,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IACzF,CAAC;IACD,IACE,KAAK,YAAY,YAAY;QAC7B,KAAK,YAAY,gBAAgB;QACjC,CAAC,KAAK,YAAY,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAC3F,CAAC;QACD,OAAO,IAAI,YAAY,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,CAAA;AACvD,CAAC,CAAA;AAID,MAAM,CAAC,MAAM,YAAY,GAAG,CAAI,MAAsB,EAAE,MAAc,EAAE,OAAyB,EAAE,IAAa,EAAE,EAAE,CAClH,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;AAErG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAsB,EAAE,MAAc,EAAE,KAAc,EAAE,IAAa,EAAE,EAAE,CACvG,aAAa,CAAC,WAAW,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC,KAAK,CAAC;IAC7B,MAAM;IACN,MAAM;IACN,gBAAgB,EAAE,IAAI;IACtB,WAAW,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACnE,KAAK,EAAE,KAAK;CACb,CAAC,CAAA;AAEJ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAgC,EAAE;IAC/E,IAAI,KAAK,YAAY,aAAa,IAAI,CAAC,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC;QAAE,OAAO,UAAU,CAAA;IAChH,IACE,KAAK,YAAY,mBAAmB;QACpC,CAAC,KAAK,YAAY,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC;QAErF,OAAO,kBAAkB,CAAA;IAC3B,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,UAAU,CAAA;IACpD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,IAAI,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAA;IAChF,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAA;IACvE,IAAI,4CAA4C,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAA;IACzF,IAAI,mEAAmE,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,aAAa,CAAA;IAC3G,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAA;IACjD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA"}

package/internal/files.d.ts

@@ -0,0 +1,12 @@
+/**
+ * An E2B sandbox's files, read and written whole through E2B's file API, so that a read
+ * holds the whole file in memory, whatever its size, and otherwise worked on with the sandbox's
+ * POSIX tools, one command each, which E2B runs and answers at once. Paths are the sandbox's;
+ * a relative one is resolved against the working directory. A failure is the error the tool's
+ * message names, as Effect's own file systems name an `errno`.
+ */
+import { type Sandbox as E2BSandbox } from "e2b";
+import * as FileSystem from "effect/FileSystem";
+/** The file system of `sandbox`, whose relative paths start in `workingDirectory`. */
+export declare const makeFileSystem: (sandbox: E2BSandbox, workingDirectory: string) => FileSystem.FileSystem;
+//# sourceMappingURL=files.d.ts.map

package/internal/files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.d.ts","sourceRoot":"","sources":["../../src/internal/files.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAoB,KAAK,OAAO,IAAI,UAAU,EAAE,MAAM,KAAK,CAAA;AAGlE,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAgB/C,sFAAsF;AACtF,eAAO,MAAM,cAAc,YAAa,UAAU,oBAAoB,MAAM,KAAG,UAAU,CAAC,UA2LzF,CAAA"}

package/internal/files.js

@@ -0,0 +1,178 @@
+/**
+ * An E2B sandbox's files, read and written whole through E2B's file API, so that a read
+ * holds the whole file in memory, whatever its size, and otherwise worked on with the sandbox's
+ * POSIX tools, one command each, which E2B runs and answers at once. Paths are the sandbox's;
+ * a relative one is resolved against the working directory. A failure is the error the tool's
+ * message names, as Effect's own file systems name an `errno`.
+ */
+import { CommandExitError } from "e2b";
+import * as ByteSize from "effect/ByteSize";
+import * as Effect from "effect/Effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Option from "effect/Option";
+import * as PlatformError from "effect/PlatformError";
+import * as Stream from "effect/Stream";
+import { callPlatform, systemErrorTagOf, toPlatformError } from "./call.js";
+import { quote } from "./shell.js";
+/** Defines `fail path message`, which fails a script with a message of the tools' own. */
+const defineFail = `fail() { printf '%s: %s\\n' "$1" "$2" >&2; exit 1; }`;
+/** Fails a script for a path that does not exist, as the tools would. */
+const existing = '[ -e "$1" ] || fail "$1" "No such file or directory"';
+/** The flag `flag`, with the space before it, when `condition` holds. */
+const when = (condition, flag) => (condition === true ? ` ${flag}` : "");
+/** The file system of `sandbox`, whose relative paths start in `workingDirectory`. */
+export const makeFileSystem = (sandbox, workingDirectory) => {
+    const resolve = (path) => (path.startsWith("/") ? path : `${workingDirectory}/${path}`);
+    /**
+     * Runs `script` in sh with `args` as its positional parameters, the first being the path it works
+     * on, and returns what it prints. `fail path message` fails it with a message of the tools' own.
+     */
+    const run = (method, script, args) => Effect.tryPromise({
+        try: () => sandbox.commands
+            .run(`sh -c ${quote(`${defineFail}; ${script}`)} sh ${args.map(quote).join(" ")}`, { envs: { LC_ALL: "C" } })
+            .catch((error) => {
+            if (error instanceof CommandExitError)
+                return error;
+            throw error;
+        }),
+        catch: (error) => toPlatformError("FileSystem", method, error, args[0])
+    }).pipe(Effect.flatMap(({ exitCode, stdout, stderr }) => exitCode === 0
+        ? Effect.succeed(stdout)
+        : Effect.fail(PlatformError.systemError({
+            _tag: systemErrorTagOf(stderr),
+            module: "FileSystem",
+            method,
+            pathOrDescriptor: args[0],
+            description: stderr.trim()
+        }))));
+    const makeTempDirectory = (options) => Effect.map(run("makeTempDirectory", 'mktemp -d -- "${1:-${TMPDIR:-/tmp}}/${2}XXXXXX"', [
+        options?.directory === undefined ? "" : resolve(options.directory),
+        options?.prefix ?? ""
+    ]), withoutNewline);
+    // A temporary file is made in a temporary directory of its own, as Effect's own file systems do.
+    const makeTempFile = (options) => Effect.map(run("makeTempFile", [
+        'directory=$(mktemp -d -- "${1:-${TMPDIR:-/tmp}}/${2}XXXXXX")',
+        'mktemp --suffix="$3" -- "$directory/XXXXXXXXXXXX"'
+    ].join(" && "), [
+        options?.directory === undefined ? "" : resolve(options.directory),
+        options?.prefix ?? "",
+        options?.suffix ?? ""
+    ]), withoutNewline);
+    const remove = (path, options) => Effect.asVoid(run("remove", `rm${when(options?.recursive, "-r")}${when(options?.force, "-f")} -- "$1"`, [resolve(path)]));
+    return FileSystem.make({
+        access: (path, options) => Effect.asVoid(run("access", [
+            existing,
+            ...(options?.readable === true ? ['[ -r "$1" ] || fail "$1" "Permission denied"'] : []),
+            ...(options?.writable === true ? ['[ -w "$1" ] || fail "$1" "Permission denied"'] : [])
+        ].join("; "), [resolve(path)])),
+        // `-n` leaves existing files as they are, as Node's `cp` does without `force`.
+        copy: (fromPath, toPath, options) => Effect.asVoid(run("copy", `cp -RT${when(options?.overwrite !== true, "-n")}` +
+            `${when(options?.preserveTimestamps, "--preserve=timestamps")} -- "$1" "$2"`, [resolve(fromPath), resolve(toPath)])),
+        copyFile: (fromPath, toPath) => Effect.asVoid(run("copyFile", 'cp -T -- "$1" "$2"', [resolve(fromPath), resolve(toPath)])),
+        chmod: (path, mode) => Effect.asVoid(run("chmod", `chmod ${mode.toString(8)} -- "$1"`, [resolve(path)])),
+        chown: (path, uid, gid) => Effect.asVoid(run("chown", `chown ${uid}:${gid} -- "$1"`, [resolve(path)])),
+        glob: () => Effect.fail(unsupported("glob", "An E2B sandbox's files cannot be globbed")),
+        link: (fromPath, toPath) => Effect.asVoid(run("link", 'ln -- "$1" "$2"', [resolve(fromPath), resolve(toPath)])),
+        makeDirectory: (path, options) => {
+            const mode = options?.mode === undefined ? "" : ` -m ${options.mode.toString(8)}`;
+            return Effect.asVoid(run("makeDirectory", `mkdir${when(options?.recursive, "-p")}${mode} -- "$1"`, [resolve(path)]));
+        },
+        makeTempDirectory,
+        makeTempDirectoryScoped: (options) => Effect.acquireRelease(makeTempDirectory(options), (directory) => Effect.orDie(remove(directory, { recursive: true }))),
+        makeTempFile,
+        makeTempFileScoped: (options) => Effect.acquireRelease(makeTempFile(options), (file) => Effect.orDie(remove(file.slice(0, file.lastIndexOf("/")), { recursive: true }))),
+        open: () => Effect.fail(unsupported("open", "An E2B sandbox's files are read and written whole")),
+        readDirectory: (path, options) => Effect.map(run("readDirectory", [
+            existing,
+            '[ -d "$1" ] || fail "$1" "Not a directory"',
+            `cd -- "$1" && find . -mindepth 1${when(options?.recursive !== true, "-maxdepth 1")} -printf '%P\\0'`
+        ].join("; "), [resolve(path)]), 
+        // Names end in NUL, which no name holds.
+        (names) => names.split("\0").slice(0, -1)),
+        readFile: (path) => Effect.map(callPlatform("FileSystem", "readFile", () => sandbox.files.read(resolve(path), { format: "bytes" }), resolve(path)), (buffer) => new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength)),
+        readLink: (path) => run("readLink", 'readlink -vn -- "$1"', [resolve(path)]),
+        realPath: (path) => Effect.map(run("realPath", 'realpath -e -- "$1"', [resolve(path)]), withoutNewline),
+        remove,
+        rename: (oldPath, newPath) => Effect.asVoid(run("rename", 'mv -T -- "$1" "$2"', [resolve(oldPath), resolve(newPath)])),
+        stat: (path) => Effect.map(run("stat", `stat -L -c '%f %s %.9Y %.9X %.9W %d %i %h %u %g %r %o %b' -- "$1"`, [resolve(path)]), fileInfoOf),
+        // A link's target is kept as given; a relative one is relative to the link's directory.
+        symlink: (target, path) => Effect.asVoid(run("symlink", 'ln -s -- "$1" "$2"', [target, resolve(path)])),
+        truncate: (path, length) => Effect.asVoid(run("truncate", [existing, `truncate -s ${length ?? 0} -- "$1"`].join("; "), [resolve(path)])),
+        utimes: (path, atime, mtime) => Effect.asVoid(run("utimes", [existing, 'touch -c -a -d "@$2" -- "$1" && touch -c -m -d "@$3" -- "$1"'].join("; "), [
+            resolve(path),
+            secondsOf(atime),
+            secondsOf(mtime)
+        ])),
+        watch: () => Stream.fail(unsupported("watch", "An E2B sandbox's files cannot be watched")),
+        writeFile: Effect.fnUntraced(function* (path, data, options) {
+            const flag = options?.flag ?? "w";
+            if (flag !== "w" && flag !== "w+" && flag !== "wx" && flag !== "wx+") {
+                return yield* unsupported("writeFile", `An E2B sandbox's files are not opened with ${flag}`);
+            }
+            const resolved = resolve(path);
+            // E2B makes a file's missing directories, and writes over a file it is asked not to,
+            // so the directory and the file are checked first, as opening the file would.
+            const created = yield* run("writeFile", [
+                '[ -d "$(dirname -- "$1")" ] || fail "$1" "No such file or directory"',
+                ...(flag.startsWith("wx") ? ['[ ! -e "$1" ] || fail "$1" "File exists"'] : []),
+                '[ -e "$1" ] || printf created'
+            ].join("; "), [resolved]);
+            yield* callPlatform("FileSystem", "writeFile", () => sandbox.files.write(resolved, new Uint8Array(data).buffer), resolved);
+            // A mode applies to the file the write creates, as when a file is opened.
+            if (options?.mode !== undefined && created === "created") {
+                yield* run("writeFile", `chmod ${options.mode.toString(8)} -- "$1"`, [resolved]);
+            }
+        })
+    });
+};
+/** The file information `stat` prints in the format the file system asks it for. */
+const fileInfoOf = (printed) => {
+    const [mode, size, mtime, atime, birthtime, dev, ino, nlink, uid, gid, rdev, blksize, blocks] = withoutNewline(printed).split(" ");
+    const modeBits = Number.parseInt(mode ?? "0", 16);
+    return {
+        type: fileTypeOf(modeBits),
+        mtime: dateOf(mtime),
+        atime: dateOf(atime),
+        birthtime: dateOf(birthtime),
+        dev: BigInt(dev ?? "0"),
+        ino: Option.some(BigInt(ino ?? "0")),
+        mode: modeBits,
+        nlink: Option.some(BigInt(nlink ?? "0")),
+        uid: Option.some(Number(uid)),
+        gid: Option.some(Number(gid)),
+        rdev: Option.some(BigInt(rdev ?? "0")),
+        size: ByteSize.bytes(BigInt(size ?? "0")),
+        blksize: Option.some(ByteSize.bytes(BigInt(blksize ?? "0"))),
+        blocks: Option.some(BigInt(blocks ?? "0"))
+    };
+};
+/** The type a file's mode names in its format bits. */
+const fileTypeOf = (mode) => {
+    switch (mode & 0o170000) {
+        case 0o100000:
+            return "File";
+        case 0o040000:
+            return "Directory";
+        case 0o120000:
+            return "SymbolicLink";
+        case 0o060000:
+            return "BlockDevice";
+        case 0o020000:
+            return "CharacterDevice";
+        case 0o010000:
+            return "FIFO";
+        case 0o140000:
+            return "Socket";
+        default:
+            return "Unknown";
+    }
+};
+/** A time `stat` prints in seconds, which it prints as 0 or `-` when the file system keeps none. */
+const dateOf = (seconds) => {
+    const value = Number(seconds);
+    return Number.isFinite(value) && value > 0 ? Option.some(new Date(value * 1000)) : Option.none();
+};
+const secondsOf = (time) => String(typeof time === "number" ? time : time.getTime() / 1000);
+const withoutNewline = (printed) => (printed.endsWith("\n") ? printed.slice(0, -1) : printed);
+const unsupported = (method, description) => PlatformError.badArgument({ module: "FileSystem", method, description });
+//# sourceMappingURL=files.js.map

package/internal/files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"files.js","sourceRoot":"","sources":["../../src/internal/files.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,gBAAgB,EAA8B,MAAM,KAAK,CAAA;AAClE,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3E,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAElC,0FAA0F;AAC1F,MAAM,UAAU,GAAG,sDAAsD,CAAA;AAEzE,yEAAyE;AACzE,MAAM,QAAQ,GAAG,sDAAsD,CAAA;AAEvE,yEAAyE;AACzE,MAAM,IAAI,GAAG,CAAC,SAA8B,EAAE,IAAY,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAErG,sFAAsF;AACtF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAmB,EAAE,gBAAwB,EAAyB,EAAE;IACrG,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,gBAAgB,IAAI,IAAI,EAAE,CAAC,CAAA;IAE/F;;;OAGG;IACH,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,IAA2B,EAAE,EAAE,CAC1E,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE,CACR,OAAO,CAAC,QAAQ;aACb,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,UAAU,KAAK,MAAM,EAAE,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;aAC5G,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,IAAI,KAAK,YAAY,gBAAgB;gBAAE,OAAO,KAAK,CAAA;YACnD,MAAM,KAAK,CAAA;QACb,CAAC,CAAC;QACN,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;KACxE,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,CAC9C,QAAQ,KAAK,CAAC;QACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,WAAW,CAAC;YACxB,IAAI,EAAE,gBAAgB,CAAC,MAAM,CAAC;YAC9B,MAAM,EAAE,YAAY;YACpB,MAAM;YACN,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC;YACzB,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE;SAC3B,CAAC,CACH,CACN,CACF,CAAA;IAEH,MAAM,iBAAiB,GAA+C,CAAC,OAAO,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CACR,GAAG,CAAC,mBAAmB,EAAE,iDAAiD,EAAE;QAC1E,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAClE,OAAO,EAAE,MAAM,IAAI,EAAE;KACtB,CAAC,EACF,cAAc,CACf,CAAA;IAEH,iGAAiG;IACjG,MAAM,YAAY,GAA0C,CAAC,OAAO,EAAE,EAAE,CACtE,MAAM,CAAC,GAAG,CACR,GAAG,CACD,cAAc,EACd;QACE,8DAA8D;QAC9D,mDAAmD;KACpD,CAAC,IAAI,CAAC,MAAM,CAAC,EACd;QACE,OAAO,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAClE,OAAO,EAAE,MAAM,IAAI,EAAE;QACrB,OAAO,EAAE,MAAM,IAAI,EAAE;KACtB,CACF,EACD,cAAc,CACf,CAAA;IAEH,MAAM,MAAM,GAAoC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAChE,MAAM,CAAC,MAAM,CACX,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAC3G,CAAA;IAEH,OAAO,UAAU,CAAC,IAAI,CAAC;QACrB,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CACxB,MAAM,CAAC,MAAM,CACX,GAAG,CACD,QAAQ,EACR;YACE,QAAQ;YACR,GAAG,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,OAAO,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAChB,CACF;QACH,+EAA+E;QAC/E,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAClC,MAAM,CAAC,MAAM,CACX,GAAG,CACD,MAAM,EACN,SAAS,IAAI,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE;YAChD,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,CAAC,eAAe,EAC9E,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CACrC,CACF;QACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAC7B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,oBAAoB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5F,KAAK,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACxG,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,GAAG,IAAI,GAAG,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtG,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,0CAA0C,CAAC,CAAC;QACxF,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC/G,aAAa,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;YAC/B,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAA;YACjF,OAAO,MAAM,CAAC,MAAM,CAClB,GAAG,CAAC,eAAe,EAAE,QAAQ,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAC/F,CAAA;QACH,CAAC;QACD,iBAAiB;QACjB,uBAAuB,EAAE,CAAC,OAAO,EAAE,EAAE,CACnC,MAAM,CAAC,cAAc,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAC9D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CACrD;QACH,YAAY;QACZ,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9B,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAChF;QACH,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,mDAAmD,CAAC,CAAC;QACjG,aAAa,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAC/B,MAAM,CAAC,GAAG,CACR,GAAG,CACD,eAAe,EACf;YACE,QAAQ;YACR,4CAA4C;YAC5C,mCAAmC,IAAI,CAAC,OAAO,EAAE,SAAS,KAAK,IAAI,EAAE,aAAa,CAAC,kBAAkB;SACtG,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAChB;QACD,yCAAyC;QACzC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAC1C;QACH,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACjB,MAAM,CAAC,GAAG,CACR,YAAY,CACV,YAAY,EACZ,UAAU,EACV,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAC5D,OAAO,CAAC,IAAI,CAAC,CACd,EACD,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAChF;QACH,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,sBAAsB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5E,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;QACvG,MAAM;QACN,MAAM,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAC3B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,MAAM,CAAC,GAAG,CACR,GAAG,CAAC,MAAM,EAAE,mEAAmE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EACjG,UAAU,CACX;QACH,wFAAwF;QACxF,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,oBAAoB,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvG,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CACzB,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,eAAe,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9G,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAC7B,MAAM,CAAC,MAAM,CACX,GAAG,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,8DAA8D,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACnG,OAAO,CAAC,IAAI,CAAC;YACb,SAAS,CAAC,KAAK,CAAC;YAChB,SAAS,CAAC,KAAK,CAAC;SACjB,CAAC,CACH;QACH,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,0CAA0C,CAAC,CAAC;QAC1F,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO;YACzD,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,IAAI,GAAG,CAAA;YACjC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,WAAW,EAAE,8CAA8C,IAAI,EAAE,CAAC,CAAA;YAC9F,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;YAC9B,qFAAqF;YACrF,8EAA8E;YAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,GAAG,CACxB,WAAW,EACX;gBACE,sEAAsE;gBACtE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,+BAA+B;aAChC,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,CAAC,QAAQ,CAAC,CACX,CAAA;YACD,KAAK,CAAC,CAAC,YAAY,CACjB,YAAY,EACZ,WAAW,EACX,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,EAChE,QAAQ,CACT,CAAA;YACD,0EAA0E;YAC1E,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBACzD,KAAK,CAAC,CAAC,GAAG,CAAC,WAAW,EAAE,SAAS,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAA;YAClF,CAAC;QACH,CAAC,CAAC;KACH,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,oFAAoF;AACpF,MAAM,UAAU,GAAG,CAAC,OAAe,EAAwB,EAAE;IAC3D,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,GAC3F,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC,CAAA;IACjD,OAAO;QACL,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC;QAC1B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;QAC5B,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC;QACvB,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;QACpC,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;QACxC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QACtC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC;KAC3C,CAAA;AACH,CAAC,CAAA;AAED,uDAAuD;AACvD,MAAM,UAAU,GAAG,CAAC,IAAY,EAAwB,EAAE;IACxD,QAAQ,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAA;QACf,KAAK,QAAQ;YACX,OAAO,WAAW,CAAA;QACpB,KAAK,QAAQ;YACX,OAAO,cAAc,CAAA;QACvB,KAAK,QAAQ;YACX,OAAO,aAAa,CAAA;QACtB,KAAK,QAAQ;YACX,OAAO,iBAAiB,CAAA;QAC1B,KAAK,QAAQ;YACX,OAAO,MAAM,CAAA;QACf,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAA;QACjB;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC,CAAA;AAED,oGAAoG;AACpG,MAAM,MAAM,GAAG,CAAC,OAA2B,EAAuB,EAAE;IAClE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAA;AAClG,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAAC,IAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAA;AAE1G,MAAM,cAAc,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;AAErG,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,WAAmB,EAAE,EAAE,CAC1D,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA"}

package/internal/network.d.ts

@@ -0,0 +1,17 @@
+/** E2B allows destinations before evaluating deny rules; denied exceptions cannot be represented. */
+import { SandboxError } from "@amends-dev/sandbox";
+import * as Effect from "effect/Effect";
+export declare const networkSettingsOf: (value: {
+    readonly _tag: "AllowAll";
+} | {
+    readonly _tag: "DenyAll";
+} | {
+    readonly _tag: "AllowList";
+    readonly allowedHosts: readonly string[];
+    readonly allowedCidrs: readonly string[];
+    readonly deniedCidrs: readonly string[];
+}) => Effect.Effect<never, SandboxError.SandboxError, never> | Effect.Effect<{
+    allowOut: string[];
+    denyOut: string[];
+}, never, never>;
+//# sourceMappingURL=network.d.ts.map

package/internal/network.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.d.ts","sourceRoot":"","sources":["../../src/internal/network.ts"],"names":[],"mappings":"AAAA,qGAAqG;AAErG,OAAO,EAAW,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,eAAO,MAAM,iBAAiB;;;;;;;;;;;;gBAW5B,CAAA"}

package/internal/network.js

@@ -0,0 +1,12 @@
+/** E2B allows destinations before evaluating deny rules; denied exceptions cannot be represented. */
+import { Network, SandboxError } from "@amends-dev/sandbox";
+import * as Effect from "effect/Effect";
+import { sandboxError } from "./call.js";
+export const networkSettingsOf = Network.NetworkPolicy.match({
+    AllowAll: () => Effect.succeed({ allowOut: [], denyOut: [] }),
+    DenyAll: () => Effect.succeed({ allowOut: [], denyOut: ["0.0.0.0/0"] }),
+    AllowList: ({ allowedHosts, allowedCidrs, deniedCidrs }) => deniedCidrs.length > 0
+        ? Effect.fail(sandboxError(new SandboxError.UnsupportedError({ description: "E2B's allow rules override denied CIDR exceptions" })))
+        : Effect.succeed({ allowOut: [...allowedHosts, ...allowedCidrs], denyOut: ["0.0.0.0/0"] })
+});
+//# sourceMappingURL=network.js.map

package/internal/network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"network.js","sourceRoot":"","sources":["../../src/internal/network.ts"],"names":[],"mappings":"AAAA,qGAAqG;AAErG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAExC,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC;IAC3D,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7D,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;IACvE,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CACzD,WAAW,CAAC,MAAM,GAAG,CAAC;QACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,YAAY,CACV,IAAI,YAAY,CAAC,gBAAgB,CAAC,EAAE,WAAW,EAAE,mDAAmD,EAAE,CAAC,CACxG,CACF;QACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC;CAC/F,CAAC,CAAA"}

package/internal/processes.d.ts

@@ -0,0 +1,30 @@
+/**
+ * E2B commands run in their own process groups. Output is read from files byte for byte because
+ * the SDK decodes stdout and stderr as UTF-8. Closing a referenced process scope kills its group;
+ * an unreferenced process remains until the sandbox stops. Polling reads output without retaining
+ * an unbounded SDK event stream or buffering all output on the host.
+ */
+import { type Sandbox as E2bSandbox } from "e2b";
+import * as Crypto from "effect/Crypto";
+import * as Effect from "effect/Effect";
+import * as PlatformError from "effect/PlatformError";
+import * as ChildProcess from "effect/process/ChildProcess";
+import * as ChildProcessSpawner from "effect/process/ChildProcessSpawner";
+import * as Stream from "effect/Stream";
+export declare const makeChildProcessSpawner: (sandbox: E2bSandbox, workingDirectory: string) => Effect.Effect<{
+    spawn(command: ChildProcess.Command): Effect.Effect<ChildProcessSpawner.ChildProcessHandle, PlatformError.PlatformError, import("effect/Scope").Scope>;
+    exitCode(command: ChildProcess.Command): Effect.Effect<ChildProcessSpawner.ExitCode, PlatformError.PlatformError>;
+    streamString(command: ChildProcess.Command, options?: {
+        readonly includeStderr?: boolean | undefined;
+    }): Stream.Stream<string, PlatformError.PlatformError>;
+    streamLines(command: ChildProcess.Command, options?: {
+        readonly includeStderr?: boolean | undefined;
+    }): Stream.Stream<string, PlatformError.PlatformError>;
+    lines(command: ChildProcess.Command, options?: {
+        readonly includeStderr?: boolean | undefined;
+    }): Effect.Effect<Array<string>, PlatformError.PlatformError>;
+    string(command: ChildProcess.Command, options?: {
+        readonly includeStderr?: boolean | undefined;
+    }): Effect.Effect<string, PlatformError.PlatformError>;
+}, never, Crypto.Crypto>;
+//# sourceMappingURL=processes.d.ts.map

package/internal/processes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.d.ts","sourceRoot":"","sources":["../../src/internal/processes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAgD,KAAK,OAAO,IAAI,UAAU,EAAE,MAAM,KAAK,CAAA;AAC9F,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAGvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAC3D,OAAO,KAAK,mBAAmB,MAAM,oCAAoC,CAAA;AAIzE,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAevC,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;wBAyLlC,CAAA"}

package/internal/processes.js

@@ -0,0 +1,238 @@
+/**
+ * E2B commands run in their own process groups. Output is read from files byte for byte because
+ * the SDK decodes stdout and stderr as UTF-8. Closing a referenced process scope kills its group;
+ * an unreferenced process remains until the sandbox stops. Polling reads output without retaining
+ * an unbounded SDK event stream or buffering all output on the host.
+ */
+import { SandboxNotFoundError, SandboxNotRunningError } from "e2b";
+import * as Crypto from "effect/Crypto";
+import * as Data from "effect/Data";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as Option from "effect/Option";
+import * as PlatformError from "effect/PlatformError";
+import * as ChildProcess from "effect/process/ChildProcess";
+import * as ChildProcessSpawner from "effect/process/ChildProcessSpawner";
+import * as Ref from "effect/Ref";
+import * as Schedule from "effect/Schedule";
+import * as Sink from "effect/Sink";
+import * as Stream from "effect/Stream";
+import { callPlatform } from "./call.js";
+import { quote } from "./shell.js";
+const Status = Data.taggedEnum();
+const isRunning = Status.$is("Running");
+const untilExit = Schedule.min([Schedule.exponential("50 millis"), Schedule.spaced("1 second")]);
+const delayAfter = (idle) => Duration.millis(Math.min(50 * 2 ** idle, 1000));
+const readLimit = 1024 * 1024;
+export const makeChildProcessSpawner = Effect.fnUntraced(function* (sandbox, workingDirectory) {
+    const crypto = yield* Crypto.Crypto;
+    const spawn = Effect.fnUntraced(function* (command) {
+        const unsupported = unsupportedOption(command);
+        if (unsupported !== undefined) {
+            return yield* PlatformError.badArgument({ module: "ChildProcess", method: "spawn", description: unsupported });
+        }
+        const directory = `/tmp/amends-process-${yield* crypto.randomUUIDv4()}`;
+        const referenced = yield* Ref.make(true);
+        const killed = yield* Ref.make(false);
+        const execute = (method, script) => callPlatform("ChildProcess", method, () => sandbox.commands.run(script));
+        const remove = Effect.asVoid(execute("cleanup", `rm -rf -- ${quote(directory)}`));
+        // Every scratch file is owned by this process scope, including failures before spawn returns.
+        yield* Effect.acquireRelease(execute("spawn", `mkdir -m 700 -- ${quote(directory)}`), () => Effect.flatMap(Ref.get(referenced), (value) => (value ? Effect.ignore(remove) : Effect.void)));
+        const environmentScripts = new Map(standardCommandsOf(command).flatMap((standard, index) => standard.options.env === undefined ? [] : [[standard, `${directory}/environment-${index}`]]));
+        yield* Effect.forEach(environmentScripts, ([standard, file]) => callPlatform("ChildProcess", "spawn", () => sandbox.files.write(file, environmentScriptOf(standard))), { discard: true });
+        const line = commandLine(command, workingDirectory, environmentScripts);
+        const body = [
+            `cat /proc/sys/kernel/random/boot_id > ${quote(`${directory}/boot`)}`,
+            `printf '%s' "$$" > ${quote(`${directory}/pid`)}`,
+            `{ ${line}; } >${quote(`${directory}/stdout`)} 2>${quote(`${directory}/stderr`)}`,
+            `printf '%s' "$?" >${quote(`${directory}/exit`)}`
+        ].join("; ");
+        // A filesystem-only resume may reuse a PID. Old handles must never signal a new process.
+        const sameBoot = `cmp -s /proc/sys/kernel/random/boot_id ${quote(`${directory}/boot`)}`;
+        const input = stdinOf(command);
+        const killGroup = Effect.gen(function* () {
+            yield* execute("kill", `if ${sameBoot} && [ -f ${quote(`${directory}/pid`)} ]; then ` +
+                `group=$(cat ${quote(`${directory}/pid`)}); ` +
+                // A live leader must still be our unique shell. An exited leader can leave children
+                // in the group, whose group ID Linux reserves until the last member has left.
+                `if [ ! -e "/proc/$group/cmdline" ] || ` +
+                `tr '\\0' '\\n' <"/proc/$group/cmdline" | grep -Fq -- ${quote(directory)}; then ` +
+                `kill -KILL -- -"$group" 2>/dev/null || true; fi; fi`);
+            yield* Ref.set(killed, true);
+        }).pipe(Effect.catchIf((error) => error.reason.cause instanceof SandboxNotRunningError || error.reason.cause instanceof SandboxNotFoundError, () => Effect.void));
+        const process = yield* Effect.acquireRelease(callPlatform("ChildProcess", "spawn", () => sandbox.commands.run(`exec setsid -w sh -c ${quote(body)}`, {
+            background: true,
+            stdin: input !== "ignore",
+            timeoutMs: 0,
+            cwd: workingDirectory
+        })), (handle) => Effect.gen(function* () {
+            if (yield* Ref.get(referenced)) {
+                yield* Effect.ignore(killGroup);
+                // If starting failed before the group wrote its marker, terminate the SDK process.
+                yield* callPlatform("ChildProcess", "cleanup", () => sandbox.files.exists(`${directory}/pid`)).pipe(Effect.flatMap((ready) => ready ? Effect.void : callPlatform("ChildProcess", "kill", () => handle.kill())), Effect.ignore);
+            }
+            yield* Effect.ignore(callPlatform("ChildProcess", "disconnect", () => handle.disconnect()));
+        }));
+        // The group leader may be a child of setsid. Wait for its marker before callers can kill it.
+        yield* callPlatform("ChildProcess", "spawn", () => sandbox.files.exists(`${directory}/pid`)).pipe(Effect.repeat({
+            until: (ready) => ready,
+            schedule: Schedule.spaced("10 millis").pipe(Schedule.upTo({ duration: "1 second" }))
+        }), Effect.flatMap((ready) => ready
+            ? Effect.void
+            : Effect.fail(PlatformError.systemError({
+                _tag: "TimedOut",
+                module: "ChildProcess",
+                method: "spawn",
+                description: "E2B process group did not start"
+            }))));
+        // Detach the SDK event reader; status and output below remain available through sandbox APIs.
+        yield* callPlatform("ChildProcess", "disconnect", () => process.disconnect());
+        const readStatus = Effect.gen(function* () {
+            if (yield* Ref.get(killed))
+                return Status.Ended();
+            const info = yield* callPlatform("ChildProcess", "status", () => sandbox.getInfo());
+            if (info.state !== "running")
+                return Status.Ended();
+            const result = yield* execute("status", `if ! ${sameBoot}; then printf ended; elif [ -f ${quote(`${directory}/exit`)} ]; then ` +
+                `cat ${quote(`${directory}/exit`)}; elif kill -0 -- -$(cat ${quote(`${directory}/pid`)}) 2>/dev/null; then ` +
+                `printf running; else printf ended; fi`);
+            if (result.stdout === "running")
+                return Status.Running();
+            if (result.stdout === "ended")
+                return Status.Ended();
+            const exitCode = Number(result.stdout);
+            return Number.isInteger(exitCode) ? Status.Exited({ exitCode }) : Status.Ended();
+        }).pipe(Effect.catchIf((error) => error.reason.cause instanceof SandboxNotFoundError || error.reason.cause instanceof SandboxNotRunningError, () => Effect.succeed(Status.Ended())));
+        const awaitExit = Effect.repeat(readStatus, { until: (status) => !isRunning(status), schedule: untilExit });
+        const readOutput = (output, offset) => Effect.map(execute("read", `tail -c +${offset + 1} -- ${quote(`${directory}/${output}`)} 2>/dev/null` +
+            ` | head -c ${readLimit} | base64 -w0`), ({ stdout }) => new Uint8Array(Buffer.from(stdout, "base64")));
+        const outputOf = (output) => Stream.paginate({ offset: 0, idle: 0, ended: false }, Effect.fnUntraced(function* ({ offset, idle, ended }) {
+            const bytes = yield* readOutput(output, offset);
+            if (bytes.length > 0)
+                return [[bytes], Option.some({ offset: offset + bytes.length, idle: 0, ended })];
+            if (ended)
+                return [[], Option.none()];
+            const status = yield* readStatus;
+            if (isRunning(status))
+                yield* Effect.sleep(delayAfter(idle));
+            return [[], Option.some({ offset, idle: idle + 1, ended: !isRunning(status) })];
+        }));
+        const stdin = input === "ignore"
+            ? Sink.drain
+            : Sink.forEach((bytes) => callPlatform("ChildProcess", "stdin", () => sandbox.commands.sendStdin(process.pid, bytes))).pipe(Sink.mapEffect(() => callPlatform("ChildProcess", "stdin", () => sandbox.commands.closeStdin(process.pid))));
+        if (Stream.isStream(input))
+            yield* Effect.forkScoped(Stream.run(input, stdin));
+        const stdout = outputStreamOf(command, "stdout", () => outputOf("stdout"));
+        const stderr = outputStreamOf(command, "stderr", () => outputOf("stderr"));
+        return ChildProcessSpawner.makeHandle({
+            pid: ChildProcessSpawner.ProcessId(process.pid),
+            exitCode: Effect.flatMap(awaitExit, (status) => Status.$is("Exited")(status)
+                ? Effect.succeed(ChildProcessSpawner.ExitCode(status.exitCode))
+                : Effect.fail(PlatformError.systemError({
+                    _tag: "Unknown",
+                    module: "ChildProcess",
+                    method: "exitCode",
+                    description: "The process was killed or ended with its sandbox"
+                }))),
+            isRunning: Effect.map(readStatus, isRunning),
+            kill: () => killGroup,
+            stdin,
+            stdout,
+            stderr,
+            all: Stream.merge(stdout, stderr),
+            getInputFd: () => Sink.drain,
+            getOutputFd: () => Stream.empty,
+            unref: Effect.as(Ref.set(referenced, false), Ref.set(referenced, true))
+        });
+    });
+    return ChildProcessSpawner.make(spawn);
+});
+/** Why E2B cannot run `command` as asked, or `undefined` when it can. */
+const unsupportedOption = (command) => {
+    if (ChildProcess.isPipedCommand(command)) {
+        const { from = "stdout", to = "stdin" } = command.options;
+        if (from.startsWith("fd") || to !== "stdin") {
+            return "A E2B sandbox pipes only stdout, stderr, or both into stdin";
+        }
+        return unsupportedOption(command.left) ?? unsupportedOption(command.right);
+    }
+    const { additionalFds = {}, stdout, stderr } = command.options;
+    if (Object.keys(additionalFds).length > 0) {
+        return "A E2B sandbox gives processes no file descriptors beyond stdin, stdout, and stderr";
+    }
+    const streams = [stdinOf(command), outputOptionOf(stdout), outputOptionOf(stderr)];
+    if (streams.some((stream) => stream === "inherit" || stream === "overlapped")) {
+        return "A process in a E2B sandbox cannot share the host's standard streams";
+    }
+    return undefined;
+};
+/**
+ * The sh line that runs `command` in `workingDirectory`, or in the directory its `cwd` names,
+ * resolved against `workingDirectory`, each command of a pipe in a subshell of its own. A command
+ * given an environment runs through the script `environmentScripts` names for it.
+ */
+const commandLine = (command, workingDirectory, environmentScripts) => {
+    if (ChildProcess.isPipedCommand(command)) {
+        const from = command.options.from ?? "stdout";
+        const redirect = from === "stdout" ? "" : from === "all" ? " 2>&1" : " 2>&1 >/dev/null";
+        const left = commandLine(command.left, workingDirectory, environmentScripts);
+        const right = commandLine(command.right, workingDirectory, environmentScripts);
+        return `${left}${redirect} | ${right}`;
+    }
+    const { cwd, shell, stdout, stderr } = command.options;
+    const directory = cwd === undefined ? workingDirectory : cwd.startsWith("/") ? cwd : `${workingDirectory}/${cwd}`;
+    const program = shell === undefined || shell === false
+        ? [command.command, ...command.args]
+        : [shell === true ? "/bin/sh" : shell, "-c", [command.command, ...command.args].join(" ")];
+    const redirects = [
+        stdinOf(command) === "ignore" ? " </dev/null" : "",
+        outputOptionOf(stdout) === "ignore" ? " >/dev/null" : "",
+        outputOptionOf(stderr) === "ignore" ? " 2>/dev/null" : ""
+    ].join("");
+    const environmentScript = environmentScripts.get(command);
+    const words = [...(environmentScript === undefined ? [] : ["sh", environmentScript]), ...program].map(quote).join(" ");
+    return `(cd ${quote(directory)} && exec ${words}${redirects})`;
+};
+/** The commands `command` runs, in order: itself, or each command of its pipe. */
+const standardCommandsOf = (command) => ChildProcess.isPipedCommand(command)
+    ? [...standardCommandsOf(command.left), ...standardCommandsOf(command.right)]
+    : [command];
+/**
+ * A script that deletes itself, then runs the command its arguments name with `command`'s
+ * environment: only `env`, without `extendEnv`, or the sandbox's own with `env` over it. An
+ * undefined value unsets the variable.
+ */
+const environmentScriptOf = (command) => {
+    const entries = Object.entries(command.options.env ?? {});
+    const set = entries.flatMap(([name, value]) => (value === undefined ? [] : [`${name}=${value}`]));
+    const unset = entries.flatMap(([name, value]) => (value === undefined ? ["-u", name] : []));
+    const words = ["env", ...(command.options.extendEnv === true ? unset : ["-i"]), ...set];
+    return `rm -f -- "$0"\nexec ${words.map(quote).join(" ")} "$@"\n`;
+};
+/** The input of the first command `command` runs. */
+const stdinOf = (command) => {
+    if (ChildProcess.isPipedCommand(command))
+        return stdinOf(command.left);
+    const { stdin } = command.options;
+    if (stdin === undefined)
+        return "pipe";
+    return typeof stdin === "string" || Stream.isStream(stdin) ? stdin : stdin.stream;
+};
+const outputOptionOf = (option) => {
+    if (option === undefined)
+        return "pipe";
+    return typeof option === "string" || Sink.isSink(option) ? option : (option.stream ?? "pipe");
+};
+/**
+ * The handle's stream of what the last command `command` runs writes to `output`: nothing when it
+ * is ignored, and passed through the sink the command gives for it.
+ */
+const outputStreamOf = (command, output, stream) => {
+    if (ChildProcess.isPipedCommand(command))
+        return outputStreamOf(command.right, output, stream);
+    const option = outputOptionOf(command.options[output]);
+    if (option === "ignore")
+        return Stream.empty;
+    return Sink.isSink(option) ? Stream.transduce(stream(), option) : stream();
+};
+//# sourceMappingURL=processes.js.map

package/internal/processes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processes.js","sourceRoot":"","sources":["../../src/internal/processes.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAA8B,MAAM,KAAK,CAAA;AAC9F,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,YAAY,MAAM,6BAA6B,CAAA;AAC3D,OAAO,KAAK,mBAAmB,MAAM,oCAAoC,CAAA;AACzE,OAAO,KAAK,GAAG,MAAM,YAAY,CAAA;AACjC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAOlC,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAU,CAAA;AACxC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;AAChG,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC,CAAA;AACpF,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,CAAA;AAE7B,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAmB,EAAE,gBAAwB;IAC/G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAA;IAEnC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAA6B;QACtE,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC9C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAA;QAChH,CAAC;QACD,MAAM,SAAS,GAAG,uBAAuB,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAA;QACvE,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACxC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrC,MAAM,OAAO,GAAG,CAAC,MAAc,EAAE,MAAc,EAAE,EAAE,CACjD,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;QACjF,8FAA8F;QAC9F,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CACzF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAC9F,CAAA;QACD,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,kBAAkB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CACtD,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,SAAS,gBAAgB,KAAK,EAAE,CAAU,CAAC,CACrG,CACF,CAAA;QACD,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CACnB,kBAAkB,EAClB,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,CACnB,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,EACvG,EAAE,OAAO,EAAE,IAAI,EAAE,CAClB,CAAA;QACD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG;YACX,yCAAyC,KAAK,CAAC,GAAG,SAAS,OAAO,CAAC,EAAE;YACrE,sBAAsB,KAAK,CAAC,GAAG,SAAS,MAAM,CAAC,EAAE;YACjD,KAAK,IAAI,QAAQ,KAAK,CAAC,GAAG,SAAS,SAAS,CAAC,MAAM,KAAK,CAAC,GAAG,SAAS,SAAS,CAAC,EAAE;YACjF,qBAAqB,KAAK,CAAC,GAAG,SAAS,OAAO,CAAC,EAAE;SAClD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACZ,yFAAyF;QACzF,MAAM,QAAQ,GAAG,0CAA0C,KAAK,CAAC,GAAG,SAAS,OAAO,CAAC,EAAE,CAAA;QACvF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;QAC9B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACpC,KAAK,CAAC,CAAC,OAAO,CACZ,MAAM,EACN,MAAM,QAAQ,YAAY,KAAK,CAAC,GAAG,SAAS,MAAM,CAAC,WAAW;gBAC5D,eAAe,KAAK,CAAC,GAAG,SAAS,MAAM,CAAC,KAAK;gBAC7C,oFAAoF;gBACpF,8EAA8E;gBAC9E,wCAAwC;gBACxC,wDAAwD,KAAK,CAAC,SAAS,CAAC,SAAS;gBACjF,qDAAqD,CACxD,CAAA;YACD,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC9B,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CACZ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY,sBAAsB,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY,oBAAoB,EAC5G,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAClB,CACF,CAAA;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAC1C,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE;YAC1D,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,KAAK,KAAK,QAAQ;YACzB,SAAS,EAAE,CAAC;YACZ,GAAG,EAAE,gBAAgB;SACtB,CAAC,CACH,EACD,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;gBAC/B,mFAAmF;gBACnF,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,CACjG,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAChF,EACD,MAAM,CAAC,MAAM,CACd,CAAA;YACH,CAAC;YACD,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;QAC7F,CAAC,CAAC,CACL,CAAA;QACD,6FAA6F;QAC7F,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,CAC/F,MAAM,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;YACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;SACrF,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK;YACH,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,WAAW,CAAC;gBACxB,IAAI,EAAE,UAAU;gBAChB,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,iCAAiC;aAC/C,CAAC,CACH,CACN,CACF,CAAA;QACD,8FAA8F;QAC9F,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;QAE7E,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACrC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,MAAM,CAAC,KAAK,EAAE,CAAA;YACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;YACnF,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,KAAK,EAAE,CAAA;YACnD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,OAAO,CAC3B,QAAQ,EACR,QAAQ,QAAQ,kCAAkC,KAAK,CAAC,GAAG,SAAS,OAAO,CAAC,WAAW;gBACrF,OAAO,KAAK,CAAC,GAAG,SAAS,OAAO,CAAC,4BAA4B,KAAK,CAAC,GAAG,SAAS,MAAM,CAAC,sBAAsB;gBAC5G,uCAAuC,CAC1C,CAAA;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,OAAO,EAAE,CAAA;YACxD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,MAAM,CAAC,KAAK,EAAE,CAAA;YACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;YACtC,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAA;QAClF,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CACZ,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY,oBAAoB,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY,sBAAsB,EAC5G,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CACrC,CACF,CAAA;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAA;QAC3G,MAAM,UAAU,GAAG,CAAC,MAA2B,EAAE,MAAc,EAAE,EAAE,CACjE,MAAM,CAAC,GAAG,CACR,OAAO,CACL,MAAM,EACN,YAAY,MAAM,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,SAAS,IAAI,MAAM,EAAE,CAAC,cAAc;YACxE,cAAc,SAAS,eAAe,CACzC,EACD,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAC9D,CAAA;QACH,MAAM,QAAQ,GAAG,CAAC,MAA2B,EAAE,EAAE,CAC/C,MAAM,CAAC,QAAQ,CACb,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EACpC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE;YAClD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;YAC/C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAClB,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAU,CAAA;YAC3F,IAAI,KAAK;gBAAE,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,EAAE,CAAU,CAAA;YAC9C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAA;YAChC,IAAI,SAAS,CAAC,MAAM,CAAC;gBAAE,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5D,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAU,CAAA;QAC1F,CAAC,CAAC,CACH,CAAA;QACH,MAAM,KAAK,GACT,KAAK,KAAK,QAAQ;YAChB,CAAC,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAiB,EAAE,EAAE,CACjC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAC5F,CAAC,IAAI,CACJ,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAC5G,CAAA;QACP,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;QAC9E,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC1E,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC1E,OAAO,mBAAmB,CAAC,UAAU,CAAC;YACpC,GAAG,EAAE,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC;YAC/C,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC;gBAC1B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAC/D,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,aAAa,CAAC,WAAW,CAAC;oBACxB,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE,cAAc;oBACtB,MAAM,EAAE,UAAU;oBAClB,WAAW,EAAE,kDAAkD;iBAChE,CAAC,CACH,CACN;YACD,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC;YAC5C,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS;YACrB,KAAK;YACL,MAAM;YACN,MAAM;YACN,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC;YACjC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK;YAC5B,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK;YAC/B,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;SACxE,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;AACxC,CAAC,CAAC,CAAA;AAEF,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,CAAC,OAA6B,EAAsB,EAAE;IAC9E,IAAI,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE,IAAI,GAAG,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAA;QACzD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YAC5C,OAAO,6DAA6D,CAAA;QACtE,CAAC;QACD,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;IAC5E,CAAC;IACD,MAAM,EAAE,aAAa,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAA;IAC9D,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,oFAAoF,CAAA;IAC7F,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;IAClF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;QAC9E,OAAO,qEAAqE,CAAA;IAC9E,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,WAAW,GAAG,CAClB,OAA6B,EAC7B,gBAAwB,EACxB,kBAAqE,EAC7D,EAAE;IACV,IAAI,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAA;QAC7C,MAAM,QAAQ,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAA;QACvF,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;QAC5E,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;QAC9E,OAAO,GAAG,IAAI,GAAG,QAAQ,MAAM,KAAK,EAAE,CAAA;IACxC,CAAC;IACD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAA;IACtD,MAAM,SAAS,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,gBAAgB,IAAI,GAAG,EAAE,CAAA;IACjH,MAAM,OAAO,GACX,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;QACpC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;QACpC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC9F,MAAM,SAAS,GAAG;QAChB,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;QAClD,cAAc,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;QACxD,cAAc,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;KAC1D,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACV,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACzD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACtH,OAAO,OAAO,KAAK,CAAC,SAAS,CAAC,YAAY,KAAK,GAAG,SAAS,GAAG,CAAA;AAChE,CAAC,CAAA;AAED,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,CAAC,OAA6B,EAA+C,EAAE,CACxG,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC;IAClC,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;AAEf;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,CAAC,OAAqC,EAAE,EAAE;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAA;IACzD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,CAAA;IACjG,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC3F,MAAM,KAAK,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAA;IACvF,OAAO,uBAAuB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAA;AACnE,CAAC,CAAA;AAED,qDAAqD;AACrD,MAAM,OAAO,GAAG,CAAC,OAA6B,EAA6B,EAAE;IAC3E,IAAI,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,OAAO,CAAA;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAA;AACnF,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CACrB,MAA0E,EAC9C,EAAE;IAC9B,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAA;IACvC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAA;AAC/F,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,cAAc,GAAG,CACrB,OAA6B,EAC7B,MAA2B,EAC3B,MAAoE,EACZ,EAAE;IAC1D,IAAI,YAAY,CAAC,cAAc,CAAC,OAAO,CAAC;QAAE,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9F,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAA;IACtD,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,KAAK,CAAA;IAC5C,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAA;AAC5E,CAAC,CAAA"}

package/internal/shell.d.ts

@@ -0,0 +1,3 @@
+/** Quotes `word` for `sh`, so that it is one word whatever it holds. */
+export declare const quote: (word: string) => string;
+//# sourceMappingURL=shell.d.ts.map

package/internal/shell.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.d.ts","sourceRoot":"","sources":["../../src/internal/shell.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,eAAO,MAAM,KAAK,SAAU,MAAM,WAAyC,CAAA"}

package/internal/shell.js

@@ -0,0 +1,3 @@
+/** Quotes `word` for `sh`, so that it is one word whatever it holds. */
+export const quote = (word) => `'${word.replaceAll("'", `'\\''`)}'`;
+//# sourceMappingURL=shell.js.map

package/internal/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../src/internal/shell.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAA"}

package/package.json

@@ -1,6 +1,38 @@
 {
   "name": "@amends-dev/sandbox-e2b",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.2.0",
+  "description": "Sandboxes on E2B for the @amends-dev/sandbox contract.",
+  "license": "MIT",
+  "homepage": "https://github.com/amends-dev/amends/tree/main/adapters/sandbox-e2b#readme",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/amends-dev/amends.git",
+    "directory": "adapters/sandbox-e2b"
+  },
+  "bugs": {
+    "url": "https://github.com/amends-dev/amends/issues"
+  },
+  "keywords": [
+    "agent",
+    "e2b",
+    "effect",
+    "sandbox"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": "./index.js",
+    "./*": "./*.js",
+    "./internal/*": null
+  },
+  "dependencies": {
+    "@amends-dev/sandbox": "^0.2.0",
+    "e2b": "^2.56.0"
+  },
+  "peerDependencies": {
+    "effect": "^4.0.5"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}