@anvia/sandbox 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Indra Zulfi
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,136 @@
+import { AnyTool } from '@anvia/core/tool';
+
+type SandboxFileType = "file" | "directory" | "symlink" | "other";
+type SandboxNetworkMode = boolean | "none" | "host" | string;
+interface Sandbox {
+    readonly provider: string;
+    createSession(options?: SandboxCreateSessionOptions): Promise<SandboxSession>;
+}
+interface SandboxSession {
+    readonly id: string;
+    readonly provider: string;
+    readonly workdir: string;
+    exec(options: SandboxExecOptions): Promise<SandboxExecResult>;
+    readFile(path: string): Promise<Uint8Array>;
+    readTextFile(path: string): Promise<string>;
+    writeFile(path: string, data: string | Uint8Array): Promise<void>;
+    writeTextFile(path: string, content: string): Promise<void>;
+    listFiles(path?: string): Promise<SandboxFileEntry[]>;
+    destroy(): Promise<void>;
+}
+interface SandboxCreateSessionOptions {
+    id?: string;
+    manifest?: SandboxManifest;
+    metadata?: Record<string, string>;
+}
+interface SandboxManifest {
+    files?: Record<string, string | Uint8Array>;
+    directories?: string[];
+    env?: Record<string, string>;
+}
+interface SandboxLimits {
+    timeoutMs?: number;
+    maxOutputBytes?: number;
+    memoryMb?: number;
+    cpus?: number;
+    pidsLimit?: number;
+}
+interface SandboxExecOptions {
+    command: string;
+    args?: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+    timeoutMs?: number;
+    input?: string | Uint8Array;
+    signal?: AbortSignal;
+    onStdout?: (chunk: Uint8Array) => void;
+    onStderr?: (chunk: Uint8Array) => void;
+}
+interface SandboxExecResult {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    durationMs: number;
+    timedOut: boolean;
+    aborted: boolean;
+    stdoutTruncated: boolean;
+    stderrTruncated: boolean;
+}
+interface SandboxFileEntry {
+    path: string;
+    type: SandboxFileType;
+    size?: number;
+}
+interface DockerSandboxSecurityOptions {
+    readonlyRootfs?: boolean;
+    noNewPrivileges?: boolean;
+    dropCapabilities?: string[];
+}
+interface DockerSandboxOptions {
+    image?: string;
+    pull?: "missing" | "always" | "never";
+    workdir?: string;
+    network?: SandboxNetworkMode;
+    user?: string;
+    dockerPath?: string;
+    labels?: Record<string, string>;
+    limits?: SandboxLimits;
+    security?: DockerSandboxSecurityOptions;
+}
+interface SandboxToolsOptions {
+    include?: SandboxToolName[];
+    execTimeoutMs?: number;
+}
+type SandboxToolName = "exec_command" | "read_file" | "write_file" | "list_files";
+type SandboxToolsFactory = (session: SandboxSession, options?: SandboxToolsOptions) => AnyTool[];
+
+declare class DockerSandbox implements Sandbox {
+    readonly provider = "docker";
+    private readonly image;
+    private readonly pull;
+    private readonly workdir;
+    private readonly network;
+    private readonly dockerPath;
+    private readonly labels;
+    private readonly limits;
+    private readonly security;
+    private readonly user;
+    constructor(options?: DockerSandboxOptions);
+    createSession(options?: SandboxCreateSessionOptions): Promise<SandboxSession>;
+    private ensureImage;
+    private createRunArgs;
+    private appendNetworkArgs;
+    private appendLimitArgs;
+    private appendSecurityArgs;
+    private cliOptions;
+    private cleanup;
+}
+
+declare class SandboxError extends Error {
+    readonly cause?: unknown | undefined;
+    constructor(message: string, cause?: unknown | undefined);
+}
+declare class SandboxDockerUnavailableError extends SandboxError {
+}
+declare class SandboxDockerCommandError extends SandboxError {
+    readonly result: {
+        stdout: string;
+        stderr: string;
+        exitCode: number;
+    };
+    constructor(message: string, result: {
+        stdout: string;
+        stderr: string;
+        exitCode: number;
+    });
+}
+declare class SandboxSessionDestroyedError extends SandboxError {
+}
+declare class SandboxPathError extends SandboxError {
+}
+declare class SandboxTimeoutError extends SandboxError {
+}
+
+declare function createSandboxTools(session: SandboxSession, options?: SandboxToolsOptions): AnyTool[];
+
+export { DockerSandbox, type DockerSandboxOptions, type DockerSandboxSecurityOptions, type Sandbox, type SandboxCreateSessionOptions, SandboxDockerCommandError, SandboxDockerUnavailableError, SandboxError, type SandboxExecOptions, type SandboxExecResult, type SandboxFileEntry, type SandboxFileType, type SandboxLimits, type SandboxManifest, type SandboxNetworkMode, SandboxPathError, type SandboxSession, SandboxSessionDestroyedError, SandboxTimeoutError, type SandboxToolName, type SandboxToolsFactory, type SandboxToolsOptions, createSandboxTools };

package/dist/index.js

@@ -0,0 +1,648 @@
+// src/docker-sandbox.ts
+import { randomUUID } from "crypto";
+import { mkdtemp, rm, writeFile } from "fs/promises";
+import os from "os";
+import path2 from "path";
+
+// src/docker-cli.ts
+import { spawn } from "child_process";
+
+// src/errors.ts
+var SandboxError = class extends Error {
+  constructor(message, cause) {
+    super(message);
+    this.cause = cause;
+    this.name = new.target.name;
+  }
+  cause;
+};
+var SandboxDockerUnavailableError = class extends SandboxError {
+};
+var SandboxDockerCommandError = class extends SandboxError {
+  constructor(message, result) {
+    super(message);
+    this.result = result;
+  }
+  result;
+};
+var SandboxSessionDestroyedError = class extends SandboxError {
+};
+var SandboxPathError = class extends SandboxError {
+};
+var SandboxTimeoutError = class extends SandboxError {
+};
+
+// src/docker-cli.ts
+var defaultMaxOutputBytes = 1024 * 1024;
+async function runDockerCli(args, options) {
+  const startedAt = Date.now();
+  const maxOutputBytes = options.maxOutputBytes ?? defaultMaxOutputBytes;
+  const stdout = createOutputCollector(maxOutputBytes, options.onStdout);
+  const stderr = createOutputCollector(maxOutputBytes, options.onStderr);
+  return new Promise((resolve, reject) => {
+    const child = spawn(options.dockerPath, args, {
+      stdio: ["pipe", "pipe", "pipe"]
+    });
+    let timedOut = false;
+    let aborted = false;
+    let settled = false;
+    const timeout = options.timeoutMs === void 0 ? void 0 : setTimeout(() => {
+      timedOut = true;
+      child.kill("SIGKILL");
+    }, options.timeoutMs);
+    const abort = () => {
+      aborted = true;
+      child.kill("SIGKILL");
+    };
+    if (options.signal?.aborted === true) {
+      abort();
+    } else {
+      options.signal?.addEventListener("abort", abort, { once: true });
+    }
+    child.stdout.on("data", (chunk) => stdout.accept(chunk));
+    child.stderr.on("data", (chunk) => stderr.accept(chunk));
+    child.on("error", (error) => {
+      if (settled) {
+        return;
+      }
+      settled = true;
+      clearTimeout(timeout);
+      options.signal?.removeEventListener("abort", abort);
+      if (error.code === "ENOENT") {
+        reject(new SandboxDockerUnavailableError("Docker CLI was not found.", error));
+        return;
+      }
+      reject(error);
+    });
+    child.on("close", (code) => {
+      if (settled) {
+        return;
+      }
+      settled = true;
+      clearTimeout(timeout);
+      options.signal?.removeEventListener("abort", abort);
+      resolve({
+        stdout: stdout.text(),
+        stderr: stderr.text(),
+        exitCode: code ?? 1,
+        durationMs: Date.now() - startedAt,
+        timedOut,
+        aborted,
+        stdoutTruncated: stdout.truncated,
+        stderrTruncated: stderr.truncated
+      });
+    });
+    if (options.input !== void 0) {
+      child.stdin.end(options.input);
+    } else {
+      child.stdin.end();
+    }
+  });
+}
+async function assertDockerCli(args, options) {
+  const result = await runDockerCli(args, options);
+  if (result.exitCode !== 0) {
+    throw new SandboxDockerCommandError(`Docker command failed: docker ${args.join(" ")}`, result);
+  }
+  return result.stdout.trim();
+}
+function createOutputCollector(maxBytes, onChunk) {
+  const chunks = [];
+  let length = 0;
+  let truncated = false;
+  return {
+    get truncated() {
+      return truncated;
+    },
+    accept(chunk) {
+      onChunk?.(chunk);
+      if (length >= maxBytes) {
+        truncated = true;
+        return;
+      }
+      const remaining = maxBytes - length;
+      const next = chunk.length > remaining ? chunk.subarray(0, remaining) : chunk;
+      chunks.push(next);
+      length += next.length;
+      if (next.length < chunk.length) {
+        truncated = true;
+      }
+    },
+    text() {
+      return Buffer.concat(chunks, length).toString("utf8");
+    }
+  };
+}
+
+// src/path.ts
+import path from "path";
+function normalizeSandboxPath(input, options = {}) {
+  if (input.length === 0) {
+    throw new SandboxPathError("Sandbox path cannot be empty.");
+  }
+  if (input.includes("\0")) {
+    throw new SandboxPathError("Sandbox path cannot contain null bytes.");
+  }
+  const normalized = path.posix.normalize(input.replaceAll("\\", "/"));
+  if (path.posix.isAbsolute(normalized)) {
+    throw new SandboxPathError(`Sandbox path must be relative: ${input}`);
+  }
+  if (normalized === ".." || normalized.startsWith("../")) {
+    throw new SandboxPathError(`Sandbox path cannot leave the workspace: ${input}`);
+  }
+  if (normalized === "." && options.allowRoot !== true) {
+    throw new SandboxPathError(
+      "Sandbox path must refer to a file or directory inside the workspace."
+    );
+  }
+  return normalized;
+}
+function containerPath(workdir, relativePath) {
+  const normalizedWorkdir = path.posix.normalize(workdir);
+  const normalizedPath = normalizeSandboxPath(relativePath, { allowRoot: true });
+  return normalizedPath === "." ? normalizedWorkdir : path.posix.join(normalizedWorkdir, normalizedPath);
+}
+function parentSandboxPath(relativePath) {
+  const normalized = normalizeSandboxPath(relativePath);
+  const parent = path.posix.dirname(normalized);
+  return parent === "." ? "." : parent;
+}
+
+// src/docker-sandbox.ts
+var defaultImage = "node:22-bookworm";
+var defaultWorkdir = "/workspace";
+var defaultTimeoutMs = 3e4;
+var defaultMaxOutputBytes2 = 1024 * 1024;
+var DockerSandbox = class {
+  provider = "docker";
+  image;
+  pull;
+  workdir;
+  network;
+  dockerPath;
+  labels;
+  limits;
+  security;
+  user;
+  constructor(options = {}) {
+    this.image = options.image ?? defaultImage;
+    this.pull = options.pull ?? "missing";
+    this.workdir = options.workdir ?? defaultWorkdir;
+    this.network = options.network ?? false;
+    this.dockerPath = options.dockerPath ?? "docker";
+    this.labels = options.labels ?? {};
+    this.limits = options.limits ?? {};
+    this.security = {
+      readonlyRootfs: options.security?.readonlyRootfs ?? false,
+      noNewPrivileges: options.security?.noNewPrivileges ?? true,
+      dropCapabilities: options.security?.dropCapabilities ?? ["ALL"]
+    };
+    this.user = options.user;
+  }
+  async createSession(options = {}) {
+    await this.ensureImage();
+    const id = sanitizeResourceId(options.id ?? randomUUID());
+    const containerName = `anvia-sandbox-${id}`;
+    const volumeName = `anvia-sandbox-${id}-workspace`;
+    await assertDockerCli(["volume", "create", volumeName], this.cliOptions());
+    try {
+      await assertDockerCli(this.createRunArgs(containerName, volumeName, options.metadata), {
+        ...this.cliOptions(),
+        timeoutMs: this.limits.timeoutMs ?? defaultTimeoutMs
+      });
+      const session = new DockerSandboxSession({
+        id,
+        containerName,
+        volumeName,
+        workdir: this.workdir,
+        dockerPath: this.dockerPath,
+        limits: this.limits,
+        env: options.manifest?.env ?? {}
+      });
+      await session.applyManifest(options.manifest);
+      return session;
+    } catch (error) {
+      await this.cleanup(containerName, volumeName);
+      throw error;
+    }
+  }
+  async ensureImage() {
+    if (this.pull === "always") {
+      await assertDockerCli(["pull", this.image], this.cliOptions());
+      return;
+    }
+    if (this.pull === "missing") {
+      const inspect = await runDockerCli(["image", "inspect", this.image], this.cliOptions());
+      if (inspect.exitCode !== 0) {
+        await assertDockerCli(["pull", this.image], this.cliOptions());
+      }
+    }
+  }
+  createRunArgs(containerName, volumeName, metadata) {
+    const args = [
+      "run",
+      "-d",
+      "--name",
+      containerName,
+      "-v",
+      `${volumeName}:${this.workdir}`,
+      "-w",
+      this.workdir,
+      "--label",
+      "anvia.sandbox=true"
+    ];
+    for (const [key, value] of Object.entries(this.labels)) {
+      args.push("--label", `${key}=${value}`);
+    }
+    if (metadata !== void 0) {
+      for (const [key, value] of Object.entries(metadata)) {
+        args.push("--label", `anvia.sandbox.metadata.${key}=${value}`);
+      }
+    }
+    this.appendNetworkArgs(args);
+    this.appendLimitArgs(args);
+    this.appendSecurityArgs(args);
+    if (this.user !== void 0) {
+      args.push("-u", this.user);
+    }
+    args.push(
+      this.image,
+      "sh",
+      "-c",
+      "trap 'exit 0' TERM INT; while :; do sleep 3600 & wait $!; done"
+    );
+    return args;
+  }
+  appendNetworkArgs(args) {
+    if (this.network === false || this.network === "none") {
+      args.push("--network", "none");
+      return;
+    }
+    if (this.network !== true) {
+      args.push("--network", this.network);
+    }
+  }
+  appendLimitArgs(args) {
+    if (this.limits.memoryMb !== void 0) {
+      args.push("--memory", `${this.limits.memoryMb}m`);
+    }
+    if (this.limits.cpus !== void 0) {
+      args.push("--cpus", String(this.limits.cpus));
+    }
+    if (this.limits.pidsLimit !== void 0) {
+      args.push("--pids-limit", String(this.limits.pidsLimit));
+    }
+  }
+  appendSecurityArgs(args) {
+    if (this.security.readonlyRootfs) {
+      args.push("--read-only");
+    }
+    if (this.security.noNewPrivileges) {
+      args.push("--security-opt", "no-new-privileges");
+    }
+    for (const capability of this.security.dropCapabilities) {
+      args.push("--cap-drop", capability);
+    }
+  }
+  cliOptions() {
+    return {
+      dockerPath: this.dockerPath,
+      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes2
+    };
+  }
+  async cleanup(containerName, volumeName) {
+    await runDockerCli(["rm", "-f", containerName], this.cliOptions()).catch(() => void 0);
+    await runDockerCli(["volume", "rm", "-f", volumeName], this.cliOptions()).catch(
+      () => void 0
+    );
+  }
+};
+var DockerSandboxSession = class {
+  provider = "docker";
+  id;
+  workdir;
+  containerName;
+  volumeName;
+  dockerPath;
+  limits;
+  env;
+  destroyed = false;
+  constructor(options) {
+    this.id = options.id;
+    this.containerName = options.containerName;
+    this.volumeName = options.volumeName;
+    this.workdir = options.workdir;
+    this.dockerPath = options.dockerPath;
+    this.limits = options.limits;
+    this.env = options.env;
+  }
+  async applyManifest(manifest) {
+    this.assertActive();
+    for (const directory of manifest?.directories ?? []) {
+      await this.mkdir(directory);
+    }
+    for (const [filePath, content] of Object.entries(manifest?.files ?? {})) {
+      await this.writeFile(filePath, content);
+    }
+  }
+  async exec(options) {
+    this.assertActive();
+    if (options.command.trim().length === 0) {
+      throw new SandboxDockerCommandError("Sandbox command cannot be empty.", {
+        stdout: "",
+        stderr: "",
+        exitCode: 1
+      });
+    }
+    const args = ["exec"];
+    if (options.input !== void 0) {
+      args.push("-i");
+    }
+    const cwd = containerPath(this.workdir, options.cwd ?? ".");
+    args.push("-w", cwd);
+    for (const [key, value] of Object.entries({ ...this.env, ...options.env })) {
+      args.push("-e", `${key}=${value}`);
+    }
+    args.push(this.containerName, options.command, ...options.args ?? []);
+    const cliOptions = {
+      dockerPath: this.dockerPath,
+      timeoutMs: options.timeoutMs ?? this.limits.timeoutMs ?? defaultTimeoutMs,
+      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes2,
+      ...options.input === void 0 ? {} : { input: options.input },
+      ...options.signal === void 0 ? {} : { signal: options.signal },
+      ...options.onStdout === void 0 ? {} : { onStdout: options.onStdout },
+      ...options.onStderr === void 0 ? {} : { onStderr: options.onStderr }
+    };
+    const result = await runDockerCli(args, cliOptions);
+    if (result.timedOut) {
+      return {
+        ...result,
+        exitCode: result.exitCode === 0 ? 124 : result.exitCode
+      };
+    }
+    return result;
+  }
+  async readFile(filePath) {
+    this.assertActive();
+    const normalized = normalizeSandboxPath(filePath);
+    const tempDir = await mkdtemp(path2.join(os.tmpdir(), "anvia-sandbox-read-"));
+    const target = path2.join(tempDir, path2.basename(normalized));
+    try {
+      await assertDockerCli(
+        ["cp", `${this.containerName}:${containerPath(this.workdir, normalized)}`, target],
+        this.cliOptions()
+      );
+      const { readFile } = await import("fs/promises");
+      return await readFile(target);
+    } finally {
+      await rm(tempDir, { recursive: true, force: true });
+    }
+  }
+  async readTextFile(filePath) {
+    const bytes = await this.readFile(filePath);
+    return new TextDecoder().decode(bytes);
+  }
+  async writeFile(filePath, data) {
+    this.assertActive();
+    const normalized = normalizeSandboxPath(filePath);
+    await this.mkdir(parentSandboxPath(normalized));
+    const tempDir = await mkdtemp(path2.join(os.tmpdir(), "anvia-sandbox-write-"));
+    const source = path2.join(tempDir, path2.basename(normalized));
+    try {
+      await writeFile(source, data);
+      await assertDockerCli(
+        ["cp", source, `${this.containerName}:${containerPath(this.workdir, normalized)}`],
+        this.cliOptions()
+      );
+    } finally {
+      await rm(tempDir, { recursive: true, force: true });
+    }
+  }
+  async writeTextFile(filePath, content) {
+    await this.writeFile(filePath, content);
+  }
+  async listFiles(filePath = ".") {
+    this.assertActive();
+    const normalized = normalizeSandboxPath(filePath, { allowRoot: true });
+    const target = containerPath(this.workdir, normalized);
+    const result = await this.exec({
+      command: "find",
+      args: [target, "-mindepth", "1", "-maxdepth", "1", "-printf", "%p	%y	%s\n"]
+    });
+    if (result.timedOut) {
+      throw new SandboxTimeoutError(`Listing files timed out for ${filePath}.`);
+    }
+    if (result.exitCode !== 0) {
+      throw new SandboxDockerCommandError(`Unable to list sandbox path: ${filePath}`, result);
+    }
+    return result.stdout.split("\n").filter((line) => line.trim().length > 0).map((line) => this.parseFindEntry(line));
+  }
+  async destroy() {
+    if (this.destroyed) {
+      return;
+    }
+    this.destroyed = true;
+    await runDockerCli(["rm", "-f", this.containerName], this.cliOptions()).catch(() => void 0);
+    await runDockerCli(["volume", "rm", "-f", this.volumeName], this.cliOptions()).catch(
+      () => void 0
+    );
+  }
+  async mkdir(directoryPath) {
+    const normalized = normalizeSandboxPath(directoryPath, { allowRoot: true });
+    const result = await this.exec({
+      command: "mkdir",
+      args: ["-p", containerPath(this.workdir, normalized)]
+    });
+    if (result.exitCode !== 0) {
+      throw new SandboxDockerCommandError(
+        `Unable to create sandbox directory: ${directoryPath}`,
+        result
+      );
+    }
+  }
+  parseFindEntry(line) {
+    const [rawPath, rawType, rawSize] = line.split("	");
+    const absolutePath = rawPath ?? "";
+    const relativePath = absolutePath.startsWith(`${this.workdir}/`) ? absolutePath.slice(this.workdir.length + 1) : absolutePath;
+    const size = rawSize === void 0 ? void 0 : Number(rawSize);
+    const entry = {
+      path: relativePath,
+      type: mapFindType(rawType)
+    };
+    if (size !== void 0 && Number.isFinite(size)) {
+      entry.size = size;
+    }
+    return entry;
+  }
+  cliOptions() {
+    return {
+      dockerPath: this.dockerPath,
+      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes2
+    };
+  }
+  assertActive() {
+    if (this.destroyed) {
+      throw new SandboxSessionDestroyedError(`Sandbox session ${this.id} has been destroyed.`);
+    }
+  }
+};
+function sanitizeResourceId(id) {
+  const sanitized = id.toLowerCase().replaceAll(/[^a-z0-9_.-]/g, "-").replaceAll(/^-+|-+$/g, "");
+  return sanitized.length > 0 ? sanitized : randomUUID();
+}
+function mapFindType(type) {
+  if (type === "f") {
+    return "file";
+  }
+  if (type === "d") {
+    return "directory";
+  }
+  if (type === "l") {
+    return "symlink";
+  }
+  return "other";
+}
+
+// src/tools.ts
+import { createTool } from "@anvia/core/tool";
+import { z } from "zod";
+var execCommandInput = z.object({
+  command: z.string().min(1).describe("Executable to run inside the sandbox workspace."),
+  args: z.array(z.string()).optional().describe("Command arguments."),
+  cwd: z.string().optional().describe("Relative working directory inside the sandbox."),
+  env: z.record(z.string(), z.string()).optional().describe("Environment variables for this command."),
+  timeoutMs: z.number().int().positive().max(3e5).optional().describe("Optional command timeout in milliseconds."),
+  input: z.string().optional().describe("Optional stdin text to pass to the command.")
+});
+var readFileInput = z.object({
+  path: z.string().min(1).describe("Relative file path inside the sandbox.")
+});
+var writeFileInput = z.object({
+  path: z.string().min(1).describe("Relative file path inside the sandbox."),
+  content: z.string().describe("Complete text content to write.")
+});
+var listFilesInput = z.object({
+  path: z.string().optional().describe("Relative directory path inside the sandbox. Defaults to root.")
+});
+var textOutput = z.string();
+function createSandboxTools(session, options = {}) {
+  const include = new Set(
+    options.include ?? ["exec_command", "read_file", "write_file", "list_files"]
+  );
+  const tools = [];
+  if (include.has("exec_command")) {
+    tools.push(createExecCommandTool(session, options));
+  }
+  if (include.has("read_file")) {
+    tools.push(createReadFileTool(session));
+  }
+  if (include.has("write_file")) {
+    tools.push(createWriteFileTool(session));
+  }
+  if (include.has("list_files")) {
+    tools.push(createListFilesTool(session));
+  }
+  return tools;
+}
+function createExecCommandTool(session, options) {
+  return createTool({
+    name: "exec_command",
+    description: "Run a command inside the sandbox workspace. Use structured args instead of shell quoting.",
+    input: execCommandInput,
+    output: textOutput,
+    execute: async ({ command, args, cwd, env, timeoutMs, input }) => {
+      const execOptions = {
+        command
+      };
+      if (args !== void 0) {
+        execOptions.args = args;
+      }
+      if (cwd !== void 0) {
+        execOptions.cwd = cwd;
+      }
+      if (env !== void 0) {
+        execOptions.env = env;
+      }
+      const effectiveTimeoutMs = timeoutMs ?? options.execTimeoutMs;
+      if (effectiveTimeoutMs !== void 0) {
+        execOptions.timeoutMs = effectiveTimeoutMs;
+      }
+      if (input !== void 0) {
+        execOptions.input = input;
+      }
+      const result = await session.exec(execOptions);
+      return formatExecResult(result);
+    }
+  });
+}
+function createReadFileTool(session) {
+  return createTool({
+    name: "read_file",
+    description: "Read a text file from the sandbox workspace.",
+    input: readFileInput,
+    output: textOutput,
+    execute: async ({ path: path3 }) => session.readTextFile(path3)
+  });
+}
+function createWriteFileTool(session) {
+  return createTool({
+    name: "write_file",
+    description: "Write a text file inside the sandbox workspace. Creates parent directories.",
+    input: writeFileInput,
+    output: textOutput,
+    execute: async ({ path: path3, content }) => {
+      await session.writeTextFile(path3, content);
+      return `Wrote ${path3}`;
+    }
+  });
+}
+function createListFilesTool(session) {
+  return createTool({
+    name: "list_files",
+    description: "List files and directories inside the sandbox workspace.",
+    input: listFilesInput,
+    output: textOutput,
+    execute: async ({ path: path3 }) => {
+      const entries = await session.listFiles(path3);
+      if (entries.length === 0) {
+        return "No files found.";
+      }
+      return entries.map((entry) => {
+        const size = entry.size === void 0 ? "" : ` ${entry.size}b`;
+        return `${entry.type}${size}	${entry.path}`;
+      }).join("\n");
+    }
+  });
+}
+function formatExecResult(result) {
+  const parts = [`exit_code: ${result.exitCode}`];
+  if (result.timedOut) {
+    parts.push("timed_out: true");
+  }
+  if (result.aborted) {
+    parts.push("aborted: true");
+  }
+  if (result.stdout.length > 0) {
+    parts.push(`stdout:
+${result.stdout.trimEnd()}`);
+  }
+  if (result.stderr.length > 0) {
+    parts.push(`stderr:
+${result.stderr.trimEnd()}`);
+  }
+  if (result.stdoutTruncated || result.stderrTruncated) {
+    parts.push("output_truncated: true");
+  }
+  return parts.join("\n\n");
+}
+export {
+  DockerSandbox,
+  SandboxDockerCommandError,
+  SandboxDockerUnavailableError,
+  SandboxError,
+  SandboxPathError,
+  SandboxSessionDestroyedError,
+  SandboxTimeoutError,
+  createSandboxTools
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/docker-sandbox.ts","../src/docker-cli.ts","../src/errors.ts","../src/path.ts","../src/tools.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { mkdtemp, rm, writeFile } from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport { assertDockerCli, runDockerCli } from \"./docker-cli\";\nimport {\n  SandboxDockerCommandError,\n  SandboxSessionDestroyedError,\n  SandboxTimeoutError,\n} from \"./errors\";\nimport { containerPath, normalizeSandboxPath, parentSandboxPath } from \"./path\";\nimport type {\n  DockerSandboxOptions,\n  Sandbox,\n  SandboxCreateSessionOptions,\n  SandboxExecOptions,\n  SandboxExecResult,\n  SandboxFileEntry,\n  SandboxFileType,\n  SandboxLimits,\n  SandboxManifest,\n  SandboxNetworkMode,\n  SandboxSession,\n} from \"./types\";\n\nconst defaultImage = \"node:22-bookworm\";\nconst defaultWorkdir = \"/workspace\";\nconst defaultTimeoutMs = 30_000;\nconst defaultMaxOutputBytes = 1024 * 1024;\n\nexport class DockerSandbox implements Sandbox {\n  readonly provider = \"docker\";\n\n  private readonly image: string;\n  private readonly pull: \"missing\" | \"always\" | \"never\";\n  private readonly workdir: string;\n  private readonly network: SandboxNetworkMode;\n  private readonly dockerPath: string;\n  private readonly labels: Record<string, string>;\n  private readonly limits: SandboxLimits;\n  private readonly security: Required<NonNullable<DockerSandboxOptions[\"security\"]>>;\n  private readonly user: string | undefined;\n\n  constructor(options: DockerSandboxOptions = {}) {\n    this.image = options.image ?? defaultImage;\n    this.pull = options.pull ?? \"missing\";\n    this.workdir = options.workdir ?? defaultWorkdir;\n    this.network = options.network ?? false;\n    this.dockerPath = options.dockerPath ?? \"docker\";\n    this.labels = options.labels ?? {};\n    this.limits = options.limits ?? {};\n    this.security = {\n      readonlyRootfs: options.security?.readonlyRootfs ?? false,\n      noNewPrivileges: options.security?.noNewPrivileges ?? true,\n      dropCapabilities: options.security?.dropCapabilities ?? [\"ALL\"],\n    };\n    this.user = options.user;\n  }\n\n  async createSession(options: SandboxCreateSessionOptions = {}): Promise<SandboxSession> {\n    await this.ensureImage();\n\n    const id = sanitizeResourceId(options.id ?? randomUUID());\n    const containerName = `anvia-sandbox-${id}`;\n    const volumeName = `anvia-sandbox-${id}-workspace`;\n\n    await assertDockerCli([\"volume\", \"create\", volumeName], this.cliOptions());\n\n    try {\n      await assertDockerCli(this.createRunArgs(containerName, volumeName, options.metadata), {\n        ...this.cliOptions(),\n        timeoutMs: this.limits.timeoutMs ?? defaultTimeoutMs,\n      });\n\n      const session = new DockerSandboxSession({\n        id,\n        containerName,\n        volumeName,\n        workdir: this.workdir,\n        dockerPath: this.dockerPath,\n        limits: this.limits,\n        env: options.manifest?.env ?? {},\n      });\n\n      await session.applyManifest(options.manifest);\n      return session;\n    } catch (error) {\n      await this.cleanup(containerName, volumeName);\n      throw error;\n    }\n  }\n\n  private async ensureImage(): Promise<void> {\n    if (this.pull === \"always\") {\n      await assertDockerCli([\"pull\", this.image], this.cliOptions());\n      return;\n    }\n\n    if (this.pull === \"missing\") {\n      const inspect = await runDockerCli([\"image\", \"inspect\", this.image], this.cliOptions());\n      if (inspect.exitCode !== 0) {\n        await assertDockerCli([\"pull\", this.image], this.cliOptions());\n      }\n    }\n  }\n\n  private createRunArgs(\n    containerName: string,\n    volumeName: string,\n    metadata: Record<string, string> | undefined,\n  ): string[] {\n    const args = [\n      \"run\",\n      \"-d\",\n      \"--name\",\n      containerName,\n      \"-v\",\n      `${volumeName}:${this.workdir}`,\n      \"-w\",\n      this.workdir,\n      \"--label\",\n      \"anvia.sandbox=true\",\n    ];\n\n    for (const [key, value] of Object.entries(this.labels)) {\n      args.push(\"--label\", `${key}=${value}`);\n    }\n\n    if (metadata !== undefined) {\n      for (const [key, value] of Object.entries(metadata)) {\n        args.push(\"--label\", `anvia.sandbox.metadata.${key}=${value}`);\n      }\n    }\n\n    this.appendNetworkArgs(args);\n    this.appendLimitArgs(args);\n    this.appendSecurityArgs(args);\n\n    if (this.user !== undefined) {\n      args.push(\"-u\", this.user);\n    }\n\n    args.push(\n      this.image,\n      \"sh\",\n      \"-c\",\n      \"trap 'exit 0' TERM INT; while :; do sleep 3600 & wait $!; done\",\n    );\n    return args;\n  }\n\n  private appendNetworkArgs(args: string[]): void {\n    if (this.network === false || this.network === \"none\") {\n      args.push(\"--network\", \"none\");\n      return;\n    }\n\n    if (this.network !== true) {\n      args.push(\"--network\", this.network);\n    }\n  }\n\n  private appendLimitArgs(args: string[]): void {\n    if (this.limits.memoryMb !== undefined) {\n      args.push(\"--memory\", `${this.limits.memoryMb}m`);\n    }\n\n    if (this.limits.cpus !== undefined) {\n      args.push(\"--cpus\", String(this.limits.cpus));\n    }\n\n    if (this.limits.pidsLimit !== undefined) {\n      args.push(\"--pids-limit\", String(this.limits.pidsLimit));\n    }\n  }\n\n  private appendSecurityArgs(args: string[]): void {\n    if (this.security.readonlyRootfs) {\n      args.push(\"--read-only\");\n    }\n\n    if (this.security.noNewPrivileges) {\n      args.push(\"--security-opt\", \"no-new-privileges\");\n    }\n\n    for (const capability of this.security.dropCapabilities) {\n      args.push(\"--cap-drop\", capability);\n    }\n  }\n\n  private cliOptions() {\n    return {\n      dockerPath: this.dockerPath,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n    };\n  }\n\n  private async cleanup(containerName: string, volumeName: string): Promise<void> {\n    await runDockerCli([\"rm\", \"-f\", containerName], this.cliOptions()).catch(() => undefined);\n    await runDockerCli([\"volume\", \"rm\", \"-f\", volumeName], this.cliOptions()).catch(\n      () => undefined,\n    );\n  }\n}\n\nclass DockerSandboxSession implements SandboxSession {\n  readonly provider = \"docker\";\n  readonly id: string;\n  readonly workdir: string;\n\n  private readonly containerName: string;\n  private readonly volumeName: string;\n  private readonly dockerPath: string;\n  private readonly limits: SandboxLimits;\n  private readonly env: Record<string, string>;\n  private destroyed = false;\n\n  constructor(options: {\n    id: string;\n    containerName: string;\n    volumeName: string;\n    workdir: string;\n    dockerPath: string;\n    limits: SandboxLimits;\n    env: Record<string, string>;\n  }) {\n    this.id = options.id;\n    this.containerName = options.containerName;\n    this.volumeName = options.volumeName;\n    this.workdir = options.workdir;\n    this.dockerPath = options.dockerPath;\n    this.limits = options.limits;\n    this.env = options.env;\n  }\n\n  async applyManifest(manifest: SandboxManifest | undefined): Promise<void> {\n    this.assertActive();\n\n    for (const directory of manifest?.directories ?? []) {\n      await this.mkdir(directory);\n    }\n\n    for (const [filePath, content] of Object.entries(manifest?.files ?? {})) {\n      await this.writeFile(filePath, content);\n    }\n  }\n\n  async exec(options: SandboxExecOptions): Promise<SandboxExecResult> {\n    this.assertActive();\n\n    if (options.command.trim().length === 0) {\n      throw new SandboxDockerCommandError(\"Sandbox command cannot be empty.\", {\n        stdout: \"\",\n        stderr: \"\",\n        exitCode: 1,\n      });\n    }\n\n    const args = [\"exec\"];\n\n    if (options.input !== undefined) {\n      args.push(\"-i\");\n    }\n\n    const cwd = containerPath(this.workdir, options.cwd ?? \".\");\n    args.push(\"-w\", cwd);\n\n    for (const [key, value] of Object.entries({ ...this.env, ...options.env })) {\n      args.push(\"-e\", `${key}=${value}`);\n    }\n\n    args.push(this.containerName, options.command, ...(options.args ?? []));\n\n    const cliOptions = {\n      dockerPath: this.dockerPath,\n      timeoutMs: options.timeoutMs ?? this.limits.timeoutMs ?? defaultTimeoutMs,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n      ...(options.input === undefined ? {} : { input: options.input }),\n      ...(options.signal === undefined ? {} : { signal: options.signal }),\n      ...(options.onStdout === undefined ? {} : { onStdout: options.onStdout }),\n      ...(options.onStderr === undefined ? {} : { onStderr: options.onStderr }),\n    };\n\n    const result = await runDockerCli(args, cliOptions);\n\n    if (result.timedOut) {\n      return {\n        ...result,\n        exitCode: result.exitCode === 0 ? 124 : result.exitCode,\n      };\n    }\n\n    return result;\n  }\n\n  async readFile(filePath: string): Promise<Uint8Array> {\n    this.assertActive();\n    const normalized = normalizeSandboxPath(filePath);\n    const tempDir = await mkdtemp(path.join(os.tmpdir(), \"anvia-sandbox-read-\"));\n    const target = path.join(tempDir, path.basename(normalized));\n\n    try {\n      await assertDockerCli(\n        [\"cp\", `${this.containerName}:${containerPath(this.workdir, normalized)}`, target],\n        this.cliOptions(),\n      );\n      const { readFile } = await import(\"node:fs/promises\");\n      return await readFile(target);\n    } finally {\n      await rm(tempDir, { recursive: true, force: true });\n    }\n  }\n\n  async readTextFile(filePath: string): Promise<string> {\n    const bytes = await this.readFile(filePath);\n    return new TextDecoder().decode(bytes);\n  }\n\n  async writeFile(filePath: string, data: string | Uint8Array): Promise<void> {\n    this.assertActive();\n    const normalized = normalizeSandboxPath(filePath);\n    await this.mkdir(parentSandboxPath(normalized));\n\n    const tempDir = await mkdtemp(path.join(os.tmpdir(), \"anvia-sandbox-write-\"));\n    const source = path.join(tempDir, path.basename(normalized));\n\n    try {\n      await writeFile(source, data);\n      await assertDockerCli(\n        [\"cp\", source, `${this.containerName}:${containerPath(this.workdir, normalized)}`],\n        this.cliOptions(),\n      );\n    } finally {\n      await rm(tempDir, { recursive: true, force: true });\n    }\n  }\n\n  async writeTextFile(filePath: string, content: string): Promise<void> {\n    await this.writeFile(filePath, content);\n  }\n\n  async listFiles(filePath = \".\"): Promise<SandboxFileEntry[]> {\n    this.assertActive();\n    const normalized = normalizeSandboxPath(filePath, { allowRoot: true });\n    const target = containerPath(this.workdir, normalized);\n    const result = await this.exec({\n      command: \"find\",\n      args: [target, \"-mindepth\", \"1\", \"-maxdepth\", \"1\", \"-printf\", \"%p\\t%y\\t%s\\n\"],\n    });\n\n    if (result.timedOut) {\n      throw new SandboxTimeoutError(`Listing files timed out for ${filePath}.`);\n    }\n\n    if (result.exitCode !== 0) {\n      throw new SandboxDockerCommandError(`Unable to list sandbox path: ${filePath}`, result);\n    }\n\n    return result.stdout\n      .split(\"\\n\")\n      .filter((line) => line.trim().length > 0)\n      .map((line) => this.parseFindEntry(line));\n  }\n\n  async destroy(): Promise<void> {\n    if (this.destroyed) {\n      return;\n    }\n\n    this.destroyed = true;\n    await runDockerCli([\"rm\", \"-f\", this.containerName], this.cliOptions()).catch(() => undefined);\n    await runDockerCli([\"volume\", \"rm\", \"-f\", this.volumeName], this.cliOptions()).catch(\n      () => undefined,\n    );\n  }\n\n  private async mkdir(directoryPath: string): Promise<void> {\n    const normalized = normalizeSandboxPath(directoryPath, { allowRoot: true });\n    const result = await this.exec({\n      command: \"mkdir\",\n      args: [\"-p\", containerPath(this.workdir, normalized)],\n    });\n\n    if (result.exitCode !== 0) {\n      throw new SandboxDockerCommandError(\n        `Unable to create sandbox directory: ${directoryPath}`,\n        result,\n      );\n    }\n  }\n\n  private parseFindEntry(line: string): SandboxFileEntry {\n    const [rawPath, rawType, rawSize] = line.split(\"\\t\");\n    const absolutePath = rawPath ?? \"\";\n    const relativePath = absolutePath.startsWith(`${this.workdir}/`)\n      ? absolutePath.slice(this.workdir.length + 1)\n      : absolutePath;\n    const size = rawSize === undefined ? undefined : Number(rawSize);\n    const entry: SandboxFileEntry = {\n      path: relativePath,\n      type: mapFindType(rawType),\n    };\n\n    if (size !== undefined && Number.isFinite(size)) {\n      entry.size = size;\n    }\n\n    return entry;\n  }\n\n  private cliOptions() {\n    return {\n      dockerPath: this.dockerPath,\n      maxOutputBytes: this.limits.maxOutputBytes ?? defaultMaxOutputBytes,\n    };\n  }\n\n  private assertActive(): void {\n    if (this.destroyed) {\n      throw new SandboxSessionDestroyedError(`Sandbox session ${this.id} has been destroyed.`);\n    }\n  }\n}\n\nfunction sanitizeResourceId(id: string): string {\n  const sanitized = id\n    .toLowerCase()\n    .replaceAll(/[^a-z0-9_.-]/g, \"-\")\n    .replaceAll(/^-+|-+$/g, \"\");\n  return sanitized.length > 0 ? sanitized : randomUUID();\n}\n\nfunction mapFindType(type: string | undefined): SandboxFileType {\n  if (type === \"f\") {\n    return \"file\";\n  }\n  if (type === \"d\") {\n    return \"directory\";\n  }\n  if (type === \"l\") {\n    return \"symlink\";\n  }\n  return \"other\";\n}\n","import { spawn } from \"node:child_process\";\nimport { SandboxDockerCommandError, SandboxDockerUnavailableError } from \"./errors\";\n\nexport interface DockerCliResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  durationMs: number;\n  timedOut: boolean;\n  aborted: boolean;\n  stdoutTruncated: boolean;\n  stderrTruncated: boolean;\n}\n\nexport interface DockerCliOptions {\n  dockerPath: string;\n  timeoutMs?: number;\n  maxOutputBytes?: number;\n  input?: string | Uint8Array;\n  signal?: AbortSignal;\n  onStdout?: (chunk: Uint8Array) => void;\n  onStderr?: (chunk: Uint8Array) => void;\n}\n\nconst defaultMaxOutputBytes = 1024 * 1024;\n\nexport async function runDockerCli(\n  args: string[],\n  options: DockerCliOptions,\n): Promise<DockerCliResult> {\n  const startedAt = Date.now();\n  const maxOutputBytes = options.maxOutputBytes ?? defaultMaxOutputBytes;\n  const stdout = createOutputCollector(maxOutputBytes, options.onStdout);\n  const stderr = createOutputCollector(maxOutputBytes, options.onStderr);\n\n  return new Promise((resolve, reject) => {\n    const child = spawn(options.dockerPath, args, {\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    let timedOut = false;\n    let aborted = false;\n    let settled = false;\n\n    const timeout =\n      options.timeoutMs === undefined\n        ? undefined\n        : setTimeout(() => {\n            timedOut = true;\n            child.kill(\"SIGKILL\");\n          }, options.timeoutMs);\n\n    const abort = () => {\n      aborted = true;\n      child.kill(\"SIGKILL\");\n    };\n\n    if (options.signal?.aborted === true) {\n      abort();\n    } else {\n      options.signal?.addEventListener(\"abort\", abort, { once: true });\n    }\n\n    child.stdout.on(\"data\", (chunk: Buffer) => stdout.accept(chunk));\n    child.stderr.on(\"data\", (chunk: Buffer) => stderr.accept(chunk));\n\n    child.on(\"error\", (error) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      clearTimeout(timeout);\n      options.signal?.removeEventListener(\"abort\", abort);\n\n      if ((error as NodeJS.ErrnoException).code === \"ENOENT\") {\n        reject(new SandboxDockerUnavailableError(\"Docker CLI was not found.\", error));\n        return;\n      }\n\n      reject(error);\n    });\n\n    child.on(\"close\", (code) => {\n      if (settled) {\n        return;\n      }\n      settled = true;\n      clearTimeout(timeout);\n      options.signal?.removeEventListener(\"abort\", abort);\n\n      resolve({\n        stdout: stdout.text(),\n        stderr: stderr.text(),\n        exitCode: code ?? 1,\n        durationMs: Date.now() - startedAt,\n        timedOut,\n        aborted,\n        stdoutTruncated: stdout.truncated,\n        stderrTruncated: stderr.truncated,\n      });\n    });\n\n    if (options.input !== undefined) {\n      child.stdin.end(options.input);\n    } else {\n      child.stdin.end();\n    }\n  });\n}\n\nexport async function assertDockerCli(args: string[], options: DockerCliOptions): Promise<string> {\n  const result = await runDockerCli(args, options);\n\n  if (result.exitCode !== 0) {\n    throw new SandboxDockerCommandError(`Docker command failed: docker ${args.join(\" \")}`, result);\n  }\n\n  return result.stdout.trim();\n}\n\nfunction createOutputCollector(maxBytes: number, onChunk?: (chunk: Uint8Array) => void) {\n  const chunks: Buffer[] = [];\n  let length = 0;\n  let truncated = false;\n\n  return {\n    get truncated() {\n      return truncated;\n    },\n    accept(chunk: Buffer) {\n      onChunk?.(chunk);\n\n      if (length >= maxBytes) {\n        truncated = true;\n        return;\n      }\n\n      const remaining = maxBytes - length;\n      const next = chunk.length > remaining ? chunk.subarray(0, remaining) : chunk;\n      chunks.push(next);\n      length += next.length;\n\n      if (next.length < chunk.length) {\n        truncated = true;\n      }\n    },\n    text() {\n      return Buffer.concat(chunks, length).toString(\"utf8\");\n    },\n  };\n}\n","export class SandboxError extends Error {\n  constructor(\n    message: string,\n    readonly cause?: unknown,\n  ) {\n    super(message);\n    this.name = new.target.name;\n  }\n}\n\nexport class SandboxDockerUnavailableError extends SandboxError {}\n\nexport class SandboxDockerCommandError extends SandboxError {\n  constructor(\n    message: string,\n    readonly result: {\n      stdout: string;\n      stderr: string;\n      exitCode: number;\n    },\n  ) {\n    super(message);\n  }\n}\n\nexport class SandboxSessionDestroyedError extends SandboxError {}\n\nexport class SandboxPathError extends SandboxError {}\n\nexport class SandboxTimeoutError extends SandboxError {}\n","import path from \"node:path\";\nimport { SandboxPathError } from \"./errors\";\n\nexport function normalizeSandboxPath(input: string, options: { allowRoot?: boolean } = {}): string {\n  if (input.length === 0) {\n    throw new SandboxPathError(\"Sandbox path cannot be empty.\");\n  }\n\n  if (input.includes(\"\\0\")) {\n    throw new SandboxPathError(\"Sandbox path cannot contain null bytes.\");\n  }\n\n  const normalized = path.posix.normalize(input.replaceAll(\"\\\\\", \"/\"));\n\n  if (path.posix.isAbsolute(normalized)) {\n    throw new SandboxPathError(`Sandbox path must be relative: ${input}`);\n  }\n\n  if (normalized === \"..\" || normalized.startsWith(\"../\")) {\n    throw new SandboxPathError(`Sandbox path cannot leave the workspace: ${input}`);\n  }\n\n  if (normalized === \".\" && options.allowRoot !== true) {\n    throw new SandboxPathError(\n      \"Sandbox path must refer to a file or directory inside the workspace.\",\n    );\n  }\n\n  return normalized;\n}\n\nexport function containerPath(workdir: string, relativePath: string): string {\n  const normalizedWorkdir = path.posix.normalize(workdir);\n  const normalizedPath = normalizeSandboxPath(relativePath, { allowRoot: true });\n  return normalizedPath === \".\"\n    ? normalizedWorkdir\n    : path.posix.join(normalizedWorkdir, normalizedPath);\n}\n\nexport function parentSandboxPath(relativePath: string): string {\n  const normalized = normalizeSandboxPath(relativePath);\n  const parent = path.posix.dirname(normalized);\n  return parent === \".\" ? \".\" : parent;\n}\n","import { type AnyTool, createTool } from \"@anvia/core/tool\";\nimport { z } from \"zod\";\nimport type {\n  SandboxExecOptions,\n  SandboxExecResult,\n  SandboxSession,\n  SandboxToolName,\n  SandboxToolsOptions,\n} from \"./types\";\n\nconst execCommandInput = z.object({\n  command: z.string().min(1).describe(\"Executable to run inside the sandbox workspace.\"),\n  args: z.array(z.string()).optional().describe(\"Command arguments.\"),\n  cwd: z.string().optional().describe(\"Relative working directory inside the sandbox.\"),\n  env: z\n    .record(z.string(), z.string())\n    .optional()\n    .describe(\"Environment variables for this command.\"),\n  timeoutMs: z\n    .number()\n    .int()\n    .positive()\n    .max(300_000)\n    .optional()\n    .describe(\"Optional command timeout in milliseconds.\"),\n  input: z.string().optional().describe(\"Optional stdin text to pass to the command.\"),\n});\n\nconst readFileInput = z.object({\n  path: z.string().min(1).describe(\"Relative file path inside the sandbox.\"),\n});\n\nconst writeFileInput = z.object({\n  path: z.string().min(1).describe(\"Relative file path inside the sandbox.\"),\n  content: z.string().describe(\"Complete text content to write.\"),\n});\n\nconst listFilesInput = z.object({\n  path: z\n    .string()\n    .optional()\n    .describe(\"Relative directory path inside the sandbox. Defaults to root.\"),\n});\n\nconst textOutput = z.string();\n\nexport function createSandboxTools(\n  session: SandboxSession,\n  options: SandboxToolsOptions = {},\n): AnyTool[] {\n  const include = new Set<SandboxToolName>(\n    options.include ?? [\"exec_command\", \"read_file\", \"write_file\", \"list_files\"],\n  );\n  const tools: AnyTool[] = [];\n\n  if (include.has(\"exec_command\")) {\n    tools.push(createExecCommandTool(session, options));\n  }\n\n  if (include.has(\"read_file\")) {\n    tools.push(createReadFileTool(session));\n  }\n\n  if (include.has(\"write_file\")) {\n    tools.push(createWriteFileTool(session));\n  }\n\n  if (include.has(\"list_files\")) {\n    tools.push(createListFilesTool(session));\n  }\n\n  return tools;\n}\n\nfunction createExecCommandTool(session: SandboxSession, options: SandboxToolsOptions): AnyTool {\n  return createTool({\n    name: \"exec_command\",\n    description:\n      \"Run a command inside the sandbox workspace. Use structured args instead of shell quoting.\",\n    input: execCommandInput,\n    output: textOutput,\n    execute: async ({ command, args, cwd, env, timeoutMs, input }) => {\n      const execOptions: SandboxExecOptions = {\n        command,\n      };\n\n      if (args !== undefined) {\n        execOptions.args = args;\n      }\n      if (cwd !== undefined) {\n        execOptions.cwd = cwd;\n      }\n      if (env !== undefined) {\n        execOptions.env = env;\n      }\n      const effectiveTimeoutMs = timeoutMs ?? options.execTimeoutMs;\n      if (effectiveTimeoutMs !== undefined) {\n        execOptions.timeoutMs = effectiveTimeoutMs;\n      }\n      if (input !== undefined) {\n        execOptions.input = input;\n      }\n\n      const result = await session.exec(execOptions);\n\n      return formatExecResult(result);\n    },\n  });\n}\n\nfunction createReadFileTool(session: SandboxSession): AnyTool {\n  return createTool({\n    name: \"read_file\",\n    description: \"Read a text file from the sandbox workspace.\",\n    input: readFileInput,\n    output: textOutput,\n    execute: async ({ path }) => session.readTextFile(path),\n  });\n}\n\nfunction createWriteFileTool(session: SandboxSession): AnyTool {\n  return createTool({\n    name: \"write_file\",\n    description: \"Write a text file inside the sandbox workspace. Creates parent directories.\",\n    input: writeFileInput,\n    output: textOutput,\n    execute: async ({ path, content }) => {\n      await session.writeTextFile(path, content);\n      return `Wrote ${path}`;\n    },\n  });\n}\n\nfunction createListFilesTool(session: SandboxSession): AnyTool {\n  return createTool({\n    name: \"list_files\",\n    description: \"List files and directories inside the sandbox workspace.\",\n    input: listFilesInput,\n    output: textOutput,\n    execute: async ({ path }) => {\n      const entries = await session.listFiles(path);\n\n      if (entries.length === 0) {\n        return \"No files found.\";\n      }\n\n      return entries\n        .map((entry) => {\n          const size = entry.size === undefined ? \"\" : ` ${entry.size}b`;\n          return `${entry.type}${size}\\t${entry.path}`;\n        })\n        .join(\"\\n\");\n    },\n  });\n}\n\nfunction formatExecResult(result: SandboxExecResult): string {\n  const parts = [`exit_code: ${result.exitCode}`];\n\n  if (result.timedOut) {\n    parts.push(\"timed_out: true\");\n  }\n\n  if (result.aborted) {\n    parts.push(\"aborted: true\");\n  }\n\n  if (result.stdout.length > 0) {\n    parts.push(`stdout:\\n${result.stdout.trimEnd()}`);\n  }\n\n  if (result.stderr.length > 0) {\n    parts.push(`stderr:\\n${result.stderr.trimEnd()}`);\n  }\n\n  if (result.stdoutTruncated || result.stderrTruncated) {\n    parts.push(\"output_truncated: true\");\n  }\n\n  return parts.join(\"\\n\\n\");\n}\n"],"mappings":";AAAA,SAAS,kBAAkB;AAC3B,SAAS,SAAS,IAAI,iBAAiB;AACvC,OAAO,QAAQ;AACf,OAAOA,WAAU;;;ACHjB,SAAS,aAAa;;;ACAf,IAAM,eAAN,cAA2B,MAAM;AAAA,EACtC,YACE,SACS,OACT;AACA,UAAM,OAAO;AAFJ;AAGT,SAAK,OAAO,WAAW;AAAA,EACzB;AAAA,EAJW;AAKb;AAEO,IAAM,gCAAN,cAA4C,aAAa;AAAC;AAE1D,IAAM,4BAAN,cAAwC,aAAa;AAAA,EAC1D,YACE,SACS,QAKT;AACA,UAAM,OAAO;AANJ;AAAA,EAOX;AAAA,EAPW;AAQb;AAEO,IAAM,+BAAN,cAA2C,aAAa;AAAC;AAEzD,IAAM,mBAAN,cAA+B,aAAa;AAAC;AAE7C,IAAM,sBAAN,cAAkC,aAAa;AAAC;;;ADLvD,IAAM,wBAAwB,OAAO;AAErC,eAAsB,aACpB,MACA,SAC0B;AAC1B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,SAAS,sBAAsB,gBAAgB,QAAQ,QAAQ;AACrE,QAAM,SAAS,sBAAsB,gBAAgB,QAAQ,QAAQ;AAErE,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,MAAM,QAAQ,YAAY,MAAM;AAAA,MAC5C,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,IAChC,CAAC;AAED,QAAI,WAAW;AACf,QAAI,UAAU;AACd,QAAI,UAAU;AAEd,UAAM,UACJ,QAAQ,cAAc,SAClB,SACA,WAAW,MAAM;AACf,iBAAW;AACX,YAAM,KAAK,SAAS;AAAA,IACtB,GAAG,QAAQ,SAAS;AAE1B,UAAM,QAAQ,MAAM;AAClB,gBAAU;AACV,YAAM,KAAK,SAAS;AAAA,IACtB;AAEA,QAAI,QAAQ,QAAQ,YAAY,MAAM;AACpC,YAAM;AAAA,IACR,OAAO;AACL,cAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,KAAK,CAAC;AAAA,IACjE;AAEA,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,OAAO,KAAK,CAAC;AAC/D,UAAM,OAAO,GAAG,QAAQ,CAAC,UAAkB,OAAO,OAAO,KAAK,CAAC;AAE/D,UAAM,GAAG,SAAS,CAAC,UAAU;AAC3B,UAAI,SAAS;AACX;AAAA,MACF;AACA,gBAAU;AACV,mBAAa,OAAO;AACpB,cAAQ,QAAQ,oBAAoB,SAAS,KAAK;AAElD,UAAK,MAAgC,SAAS,UAAU;AACtD,eAAO,IAAI,8BAA8B,6BAA6B,KAAK,CAAC;AAC5E;AAAA,MACF;AAEA,aAAO,KAAK;AAAA,IACd,CAAC;AAED,UAAM,GAAG,SAAS,CAAC,SAAS;AAC1B,UAAI,SAAS;AACX;AAAA,MACF;AACA,gBAAU;AACV,mBAAa,OAAO;AACpB,cAAQ,QAAQ,oBAAoB,SAAS,KAAK;AAElD,cAAQ;AAAA,QACN,QAAQ,OAAO,KAAK;AAAA,QACpB,QAAQ,OAAO,KAAK;AAAA,QACpB,UAAU,QAAQ;AAAA,QAClB,YAAY,KAAK,IAAI,IAAI;AAAA,QACzB;AAAA,QACA;AAAA,QACA,iBAAiB,OAAO;AAAA,QACxB,iBAAiB,OAAO;AAAA,MAC1B,CAAC;AAAA,IACH,CAAC;AAED,QAAI,QAAQ,UAAU,QAAW;AAC/B,YAAM,MAAM,IAAI,QAAQ,KAAK;AAAA,IAC/B,OAAO;AACL,YAAM,MAAM,IAAI;AAAA,IAClB;AAAA,EACF,CAAC;AACH;AAEA,eAAsB,gBAAgB,MAAgB,SAA4C;AAChG,QAAM,SAAS,MAAM,aAAa,MAAM,OAAO;AAE/C,MAAI,OAAO,aAAa,GAAG;AACzB,UAAM,IAAI,0BAA0B,iCAAiC,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM;AAAA,EAC/F;AAEA,SAAO,OAAO,OAAO,KAAK;AAC5B;AAEA,SAAS,sBAAsB,UAAkB,SAAuC;AACtF,QAAM,SAAmB,CAAC;AAC1B,MAAI,SAAS;AACb,MAAI,YAAY;AAEhB,SAAO;AAAA,IACL,IAAI,YAAY;AACd,aAAO;AAAA,IACT;AAAA,IACA,OAAO,OAAe;AACpB,gBAAU,KAAK;AAEf,UAAI,UAAU,UAAU;AACtB,oBAAY;AACZ;AAAA,MACF;AAEA,YAAM,YAAY,WAAW;AAC7B,YAAM,OAAO,MAAM,SAAS,YAAY,MAAM,SAAS,GAAG,SAAS,IAAI;AACvE,aAAO,KAAK,IAAI;AAChB,gBAAU,KAAK;AAEf,UAAI,KAAK,SAAS,MAAM,QAAQ;AAC9B,oBAAY;AAAA,MACd;AAAA,IACF;AAAA,IACA,OAAO;AACL,aAAO,OAAO,OAAO,QAAQ,MAAM,EAAE,SAAS,MAAM;AAAA,IACtD;AAAA,EACF;AACF;;;AEtJA,OAAO,UAAU;AAGV,SAAS,qBAAqB,OAAe,UAAmC,CAAC,GAAW;AACjG,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,iBAAiB,+BAA+B;AAAA,EAC5D;AAEA,MAAI,MAAM,SAAS,IAAI,GAAG;AACxB,UAAM,IAAI,iBAAiB,yCAAyC;AAAA,EACtE;AAEA,QAAM,aAAa,KAAK,MAAM,UAAU,MAAM,WAAW,MAAM,GAAG,CAAC;AAEnE,MAAI,KAAK,MAAM,WAAW,UAAU,GAAG;AACrC,UAAM,IAAI,iBAAiB,kCAAkC,KAAK,EAAE;AAAA,EACtE;AAEA,MAAI,eAAe,QAAQ,WAAW,WAAW,KAAK,GAAG;AACvD,UAAM,IAAI,iBAAiB,4CAA4C,KAAK,EAAE;AAAA,EAChF;AAEA,MAAI,eAAe,OAAO,QAAQ,cAAc,MAAM;AACpD,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,cAAc,SAAiB,cAA8B;AAC3E,QAAM,oBAAoB,KAAK,MAAM,UAAU,OAAO;AACtD,QAAM,iBAAiB,qBAAqB,cAAc,EAAE,WAAW,KAAK,CAAC;AAC7E,SAAO,mBAAmB,MACtB,oBACA,KAAK,MAAM,KAAK,mBAAmB,cAAc;AACvD;AAEO,SAAS,kBAAkB,cAA8B;AAC9D,QAAM,aAAa,qBAAqB,YAAY;AACpD,QAAM,SAAS,KAAK,MAAM,QAAQ,UAAU;AAC5C,SAAO,WAAW,MAAM,MAAM;AAChC;;;AHlBA,IAAM,eAAe;AACrB,IAAM,iBAAiB;AACvB,IAAM,mBAAmB;AACzB,IAAMC,yBAAwB,OAAO;AAE9B,IAAM,gBAAN,MAAuC;AAAA,EACnC,WAAW;AAAA,EAEH;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEjB,YAAY,UAAgC,CAAC,GAAG;AAC9C,SAAK,QAAQ,QAAQ,SAAS;AAC9B,SAAK,OAAO,QAAQ,QAAQ;AAC5B,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,aAAa,QAAQ,cAAc;AACxC,SAAK,SAAS,QAAQ,UAAU,CAAC;AACjC,SAAK,SAAS,QAAQ,UAAU,CAAC;AACjC,SAAK,WAAW;AAAA,MACd,gBAAgB,QAAQ,UAAU,kBAAkB;AAAA,MACpD,iBAAiB,QAAQ,UAAU,mBAAmB;AAAA,MACtD,kBAAkB,QAAQ,UAAU,oBAAoB,CAAC,KAAK;AAAA,IAChE;AACA,SAAK,OAAO,QAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,cAAc,UAAuC,CAAC,GAA4B;AACtF,UAAM,KAAK,YAAY;AAEvB,UAAM,KAAK,mBAAmB,QAAQ,MAAM,WAAW,CAAC;AACxD,UAAM,gBAAgB,iBAAiB,EAAE;AACzC,UAAM,aAAa,iBAAiB,EAAE;AAEtC,UAAM,gBAAgB,CAAC,UAAU,UAAU,UAAU,GAAG,KAAK,WAAW,CAAC;AAEzE,QAAI;AACF,YAAM,gBAAgB,KAAK,cAAc,eAAe,YAAY,QAAQ,QAAQ,GAAG;AAAA,QACrF,GAAG,KAAK,WAAW;AAAA,QACnB,WAAW,KAAK,OAAO,aAAa;AAAA,MACtC,CAAC;AAED,YAAM,UAAU,IAAI,qBAAqB;AAAA,QACvC;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,KAAK;AAAA,QACd,YAAY,KAAK;AAAA,QACjB,QAAQ,KAAK;AAAA,QACb,KAAK,QAAQ,UAAU,OAAO,CAAC;AAAA,MACjC,CAAC;AAED,YAAM,QAAQ,cAAc,QAAQ,QAAQ;AAC5C,aAAO;AAAA,IACT,SAAS,OAAO;AACd,YAAM,KAAK,QAAQ,eAAe,UAAU;AAC5C,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,cAA6B;AACzC,QAAI,KAAK,SAAS,UAAU;AAC1B,YAAM,gBAAgB,CAAC,QAAQ,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AAC7D;AAAA,IACF;AAEA,QAAI,KAAK,SAAS,WAAW;AAC3B,YAAM,UAAU,MAAM,aAAa,CAAC,SAAS,WAAW,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AACtF,UAAI,QAAQ,aAAa,GAAG;AAC1B,cAAM,gBAAgB,CAAC,QAAQ,KAAK,KAAK,GAAG,KAAK,WAAW,CAAC;AAAA,MAC/D;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,cACN,eACA,YACA,UACU;AACV,UAAM,OAAO;AAAA,MACX;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,UAAU,IAAI,KAAK,OAAO;AAAA,MAC7B;AAAA,MACA,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAEA,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,MAAM,GAAG;AACtD,WAAK,KAAK,WAAW,GAAG,GAAG,IAAI,KAAK,EAAE;AAAA,IACxC;AAEA,QAAI,aAAa,QAAW;AAC1B,iBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG;AACnD,aAAK,KAAK,WAAW,0BAA0B,GAAG,IAAI,KAAK,EAAE;AAAA,MAC/D;AAAA,IACF;AAEA,SAAK,kBAAkB,IAAI;AAC3B,SAAK,gBAAgB,IAAI;AACzB,SAAK,mBAAmB,IAAI;AAE5B,QAAI,KAAK,SAAS,QAAW;AAC3B,WAAK,KAAK,MAAM,KAAK,IAAI;AAAA,IAC3B;AAEA,SAAK;AAAA,MACH,KAAK;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAAA,EAEQ,kBAAkB,MAAsB;AAC9C,QAAI,KAAK,YAAY,SAAS,KAAK,YAAY,QAAQ;AACrD,WAAK,KAAK,aAAa,MAAM;AAC7B;AAAA,IACF;AAEA,QAAI,KAAK,YAAY,MAAM;AACzB,WAAK,KAAK,aAAa,KAAK,OAAO;AAAA,IACrC;AAAA,EACF;AAAA,EAEQ,gBAAgB,MAAsB;AAC5C,QAAI,KAAK,OAAO,aAAa,QAAW;AACtC,WAAK,KAAK,YAAY,GAAG,KAAK,OAAO,QAAQ,GAAG;AAAA,IAClD;AAEA,QAAI,KAAK,OAAO,SAAS,QAAW;AAClC,WAAK,KAAK,UAAU,OAAO,KAAK,OAAO,IAAI,CAAC;AAAA,IAC9C;AAEA,QAAI,KAAK,OAAO,cAAc,QAAW;AACvC,WAAK,KAAK,gBAAgB,OAAO,KAAK,OAAO,SAAS,CAAC;AAAA,IACzD;AAAA,EACF;AAAA,EAEQ,mBAAmB,MAAsB;AAC/C,QAAI,KAAK,SAAS,gBAAgB;AAChC,WAAK,KAAK,aAAa;AAAA,IACzB;AAEA,QAAI,KAAK,SAAS,iBAAiB;AACjC,WAAK,KAAK,kBAAkB,mBAAmB;AAAA,IACjD;AAEA,eAAW,cAAc,KAAK,SAAS,kBAAkB;AACvD,WAAK,KAAK,cAAc,UAAU;AAAA,IACpC;AAAA,EACF;AAAA,EAEQ,aAAa;AACnB,WAAO;AAAA,MACL,YAAY,KAAK;AAAA,MACjB,gBAAgB,KAAK,OAAO,kBAAkBA;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,MAAc,QAAQ,eAAuB,YAAmC;AAC9E,UAAM,aAAa,CAAC,MAAM,MAAM,aAAa,GAAG,KAAK,WAAW,CAAC,EAAE,MAAM,MAAM,MAAS;AACxF,UAAM,aAAa,CAAC,UAAU,MAAM,MAAM,UAAU,GAAG,KAAK,WAAW,CAAC,EAAE;AAAA,MACxE,MAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,IAAM,uBAAN,MAAqD;AAAA,EAC1C,WAAW;AAAA,EACX;AAAA,EACA;AAAA,EAEQ;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACT,YAAY;AAAA,EAEpB,YAAY,SAQT;AACD,SAAK,KAAK,QAAQ;AAClB,SAAK,gBAAgB,QAAQ;AAC7B,SAAK,aAAa,QAAQ;AAC1B,SAAK,UAAU,QAAQ;AACvB,SAAK,aAAa,QAAQ;AAC1B,SAAK,SAAS,QAAQ;AACtB,SAAK,MAAM,QAAQ;AAAA,EACrB;AAAA,EAEA,MAAM,cAAc,UAAsD;AACxE,SAAK,aAAa;AAElB,eAAW,aAAa,UAAU,eAAe,CAAC,GAAG;AACnD,YAAM,KAAK,MAAM,SAAS;AAAA,IAC5B;AAEA,eAAW,CAAC,UAAU,OAAO,KAAK,OAAO,QAAQ,UAAU,SAAS,CAAC,CAAC,GAAG;AACvE,YAAM,KAAK,UAAU,UAAU,OAAO;AAAA,IACxC;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,SAAyD;AAClE,SAAK,aAAa;AAElB,QAAI,QAAQ,QAAQ,KAAK,EAAE,WAAW,GAAG;AACvC,YAAM,IAAI,0BAA0B,oCAAoC;AAAA,QACtE,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,UAAM,OAAO,CAAC,MAAM;AAEpB,QAAI,QAAQ,UAAU,QAAW;AAC/B,WAAK,KAAK,IAAI;AAAA,IAChB;AAEA,UAAM,MAAM,cAAc,KAAK,SAAS,QAAQ,OAAO,GAAG;AAC1D,SAAK,KAAK,MAAM,GAAG;AAEnB,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,EAAE,GAAG,KAAK,KAAK,GAAG,QAAQ,IAAI,CAAC,GAAG;AAC1E,WAAK,KAAK,MAAM,GAAG,GAAG,IAAI,KAAK,EAAE;AAAA,IACnC;AAEA,SAAK,KAAK,KAAK,eAAe,QAAQ,SAAS,GAAI,QAAQ,QAAQ,CAAC,CAAE;AAEtE,UAAM,aAAa;AAAA,MACjB,YAAY,KAAK;AAAA,MACjB,WAAW,QAAQ,aAAa,KAAK,OAAO,aAAa;AAAA,MACzD,gBAAgB,KAAK,OAAO,kBAAkBA;AAAA,MAC9C,GAAI,QAAQ,UAAU,SAAY,CAAC,IAAI,EAAE,OAAO,QAAQ,MAAM;AAAA,MAC9D,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,EAAE,QAAQ,QAAQ,OAAO;AAAA,MACjE,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,MACvE,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,IACzE;AAEA,UAAM,SAAS,MAAM,aAAa,MAAM,UAAU;AAElD,QAAI,OAAO,UAAU;AACnB,aAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,OAAO,aAAa,IAAI,MAAM,OAAO;AAAA,MACjD;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,UAAuC;AACpD,SAAK,aAAa;AAClB,UAAM,aAAa,qBAAqB,QAAQ;AAChD,UAAM,UAAU,MAAM,QAAQC,MAAK,KAAK,GAAG,OAAO,GAAG,qBAAqB,CAAC;AAC3E,UAAM,SAASA,MAAK,KAAK,SAASA,MAAK,SAAS,UAAU,CAAC;AAE3D,QAAI;AACF,YAAM;AAAA,QACJ,CAAC,MAAM,GAAG,KAAK,aAAa,IAAI,cAAc,KAAK,SAAS,UAAU,CAAC,IAAI,MAAM;AAAA,QACjF,KAAK,WAAW;AAAA,MAClB;AACA,YAAM,EAAE,SAAS,IAAI,MAAM,OAAO,aAAkB;AACpD,aAAO,MAAM,SAAS,MAAM;AAAA,IAC9B,UAAE;AACA,YAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,UAAmC;AACpD,UAAM,QAAQ,MAAM,KAAK,SAAS,QAAQ;AAC1C,WAAO,IAAI,YAAY,EAAE,OAAO,KAAK;AAAA,EACvC;AAAA,EAEA,MAAM,UAAU,UAAkB,MAA0C;AAC1E,SAAK,aAAa;AAClB,UAAM,aAAa,qBAAqB,QAAQ;AAChD,UAAM,KAAK,MAAM,kBAAkB,UAAU,CAAC;AAE9C,UAAM,UAAU,MAAM,QAAQA,MAAK,KAAK,GAAG,OAAO,GAAG,sBAAsB,CAAC;AAC5E,UAAM,SAASA,MAAK,KAAK,SAASA,MAAK,SAAS,UAAU,CAAC;AAE3D,QAAI;AACF,YAAM,UAAU,QAAQ,IAAI;AAC5B,YAAM;AAAA,QACJ,CAAC,MAAM,QAAQ,GAAG,KAAK,aAAa,IAAI,cAAc,KAAK,SAAS,UAAU,CAAC,EAAE;AAAA,QACjF,KAAK,WAAW;AAAA,MAClB;AAAA,IACF,UAAE;AACA,YAAM,GAAG,SAAS,EAAE,WAAW,MAAM,OAAO,KAAK,CAAC;AAAA,IACpD;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,UAAkB,SAAgC;AACpE,UAAM,KAAK,UAAU,UAAU,OAAO;AAAA,EACxC;AAAA,EAEA,MAAM,UAAU,WAAW,KAAkC;AAC3D,SAAK,aAAa;AAClB,UAAM,aAAa,qBAAqB,UAAU,EAAE,WAAW,KAAK,CAAC;AACrE,UAAM,SAAS,cAAc,KAAK,SAAS,UAAU;AACrD,UAAM,SAAS,MAAM,KAAK,KAAK;AAAA,MAC7B,SAAS;AAAA,MACT,MAAM,CAAC,QAAQ,aAAa,KAAK,aAAa,KAAK,WAAW,YAAc;AAAA,IAC9E,CAAC;AAED,QAAI,OAAO,UAAU;AACnB,YAAM,IAAI,oBAAoB,+BAA+B,QAAQ,GAAG;AAAA,IAC1E;AAEA,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI,0BAA0B,gCAAgC,QAAQ,IAAI,MAAM;AAAA,IACxF;AAEA,WAAO,OAAO,OACX,MAAM,IAAI,EACV,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,SAAS,CAAC,EACvC,IAAI,CAAC,SAAS,KAAK,eAAe,IAAI,CAAC;AAAA,EAC5C;AAAA,EAEA,MAAM,UAAyB;AAC7B,QAAI,KAAK,WAAW;AAClB;AAAA,IACF;AAEA,SAAK,YAAY;AACjB,UAAM,aAAa,CAAC,MAAM,MAAM,KAAK,aAAa,GAAG,KAAK,WAAW,CAAC,EAAE,MAAM,MAAM,MAAS;AAC7F,UAAM,aAAa,CAAC,UAAU,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,WAAW,CAAC,EAAE;AAAA,MAC7E,MAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,MAAM,eAAsC;AACxD,UAAM,aAAa,qBAAqB,eAAe,EAAE,WAAW,KAAK,CAAC;AAC1E,UAAM,SAAS,MAAM,KAAK,KAAK;AAAA,MAC7B,SAAS;AAAA,MACT,MAAM,CAAC,MAAM,cAAc,KAAK,SAAS,UAAU,CAAC;AAAA,IACtD,CAAC;AAED,QAAI,OAAO,aAAa,GAAG;AACzB,YAAM,IAAI;AAAA,QACR,uCAAuC,aAAa;AAAA,QACpD;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,eAAe,MAAgC;AACrD,UAAM,CAAC,SAAS,SAAS,OAAO,IAAI,KAAK,MAAM,GAAI;AACnD,UAAM,eAAe,WAAW;AAChC,UAAM,eAAe,aAAa,WAAW,GAAG,KAAK,OAAO,GAAG,IAC3D,aAAa,MAAM,KAAK,QAAQ,SAAS,CAAC,IAC1C;AACJ,UAAM,OAAO,YAAY,SAAY,SAAY,OAAO,OAAO;AAC/D,UAAM,QAA0B;AAAA,MAC9B,MAAM;AAAA,MACN,MAAM,YAAY,OAAO;AAAA,IAC3B;AAEA,QAAI,SAAS,UAAa,OAAO,SAAS,IAAI,GAAG;AAC/C,YAAM,OAAO;AAAA,IACf;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,aAAa;AACnB,WAAO;AAAA,MACL,YAAY,KAAK;AAAA,MACjB,gBAAgB,KAAK,OAAO,kBAAkBD;AAAA,IAChD;AAAA,EACF;AAAA,EAEQ,eAAqB;AAC3B,QAAI,KAAK,WAAW;AAClB,YAAM,IAAI,6BAA6B,mBAAmB,KAAK,EAAE,sBAAsB;AAAA,IACzF;AAAA,EACF;AACF;AAEA,SAAS,mBAAmB,IAAoB;AAC9C,QAAM,YAAY,GACf,YAAY,EACZ,WAAW,iBAAiB,GAAG,EAC/B,WAAW,YAAY,EAAE;AAC5B,SAAO,UAAU,SAAS,IAAI,YAAY,WAAW;AACvD;AAEA,SAAS,YAAY,MAA2C;AAC9D,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,MAAI,SAAS,KAAK;AAChB,WAAO;AAAA,EACT;AACA,SAAO;AACT;;;AI3bA,SAAuB,kBAAkB;AACzC,SAAS,SAAS;AASlB,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,iDAAiD;AAAA,EACrF,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,oBAAoB;AAAA,EAClE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,gDAAgD;AAAA,EACpF,KAAK,EACF,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC,EAC7B,SAAS,EACT,SAAS,yCAAyC;AAAA,EACrD,WAAW,EACR,OAAO,EACP,IAAI,EACJ,SAAS,EACT,IAAI,GAAO,EACX,SAAS,EACT,SAAS,2CAA2C;AAAA,EACvD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,6CAA6C;AACrF,CAAC;AAED,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wCAAwC;AAC3E,CAAC;AAED,IAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,wCAAwC;AAAA,EACzE,SAAS,EAAE,OAAO,EAAE,SAAS,iCAAiC;AAChE,CAAC;AAED,IAAM,iBAAiB,EAAE,OAAO;AAAA,EAC9B,MAAM,EACH,OAAO,EACP,SAAS,EACT,SAAS,+DAA+D;AAC7E,CAAC;AAED,IAAM,aAAa,EAAE,OAAO;AAErB,SAAS,mBACd,SACA,UAA+B,CAAC,GACrB;AACX,QAAM,UAAU,IAAI;AAAA,IAClB,QAAQ,WAAW,CAAC,gBAAgB,aAAa,cAAc,YAAY;AAAA,EAC7E;AACA,QAAM,QAAmB,CAAC;AAE1B,MAAI,QAAQ,IAAI,cAAc,GAAG;AAC/B,UAAM,KAAK,sBAAsB,SAAS,OAAO,CAAC;AAAA,EACpD;AAEA,MAAI,QAAQ,IAAI,WAAW,GAAG;AAC5B,UAAM,KAAK,mBAAmB,OAAO,CAAC;AAAA,EACxC;AAEA,MAAI,QAAQ,IAAI,YAAY,GAAG;AAC7B,UAAM,KAAK,oBAAoB,OAAO,CAAC;AAAA,EACzC;AAEA,MAAI,QAAQ,IAAI,YAAY,GAAG;AAC7B,UAAM,KAAK,oBAAoB,OAAO,CAAC;AAAA,EACzC;AAEA,SAAO;AACT;AAEA,SAAS,sBAAsB,SAAyB,SAAuC;AAC7F,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aACE;AAAA,IACF,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,SAAS,MAAM,KAAK,KAAK,WAAW,MAAM,MAAM;AAChE,YAAM,cAAkC;AAAA,QACtC;AAAA,MACF;AAEA,UAAI,SAAS,QAAW;AACtB,oBAAY,OAAO;AAAA,MACrB;AACA,UAAI,QAAQ,QAAW;AACrB,oBAAY,MAAM;AAAA,MACpB;AACA,UAAI,QAAQ,QAAW;AACrB,oBAAY,MAAM;AAAA,MACpB;AACA,YAAM,qBAAqB,aAAa,QAAQ;AAChD,UAAI,uBAAuB,QAAW;AACpC,oBAAY,YAAY;AAAA,MAC1B;AACA,UAAI,UAAU,QAAW;AACvB,oBAAY,QAAQ;AAAA,MACtB;AAEA,YAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAE7C,aAAO,iBAAiB,MAAM;AAAA,IAChC;AAAA,EACF,CAAC;AACH;AAEA,SAAS,mBAAmB,SAAkC;AAC5D,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAE,MAAK,MAAM,QAAQ,aAAaA,KAAI;AAAA,EACxD,CAAC;AACH;AAEA,SAAS,oBAAoB,SAAkC;AAC7D,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAA,OAAM,QAAQ,MAAM;AACpC,YAAM,QAAQ,cAAcA,OAAM,OAAO;AACzC,aAAO,SAASA,KAAI;AAAA,IACtB;AAAA,EACF,CAAC;AACH;AAEA,SAAS,oBAAoB,SAAkC;AAC7D,SAAO,WAAW;AAAA,IAChB,MAAM;AAAA,IACN,aAAa;AAAA,IACb,OAAO;AAAA,IACP,QAAQ;AAAA,IACR,SAAS,OAAO,EAAE,MAAAA,MAAK,MAAM;AAC3B,YAAM,UAAU,MAAM,QAAQ,UAAUA,KAAI;AAE5C,UAAI,QAAQ,WAAW,GAAG;AACxB,eAAO;AAAA,MACT;AAEA,aAAO,QACJ,IAAI,CAAC,UAAU;AACd,cAAM,OAAO,MAAM,SAAS,SAAY,KAAK,IAAI,MAAM,IAAI;AAC3D,eAAO,GAAG,MAAM,IAAI,GAAG,IAAI,IAAK,MAAM,IAAI;AAAA,MAC5C,CAAC,EACA,KAAK,IAAI;AAAA,IACd;AAAA,EACF,CAAC;AACH;AAEA,SAAS,iBAAiB,QAAmC;AAC3D,QAAM,QAAQ,CAAC,cAAc,OAAO,QAAQ,EAAE;AAE9C,MAAI,OAAO,UAAU;AACnB,UAAM,KAAK,iBAAiB;AAAA,EAC9B;AAEA,MAAI,OAAO,SAAS;AAClB,UAAM,KAAK,eAAe;AAAA,EAC5B;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,KAAK;AAAA,EAAY,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,EAClD;AAEA,MAAI,OAAO,OAAO,SAAS,GAAG;AAC5B,UAAM,KAAK;AAAA,EAAY,OAAO,OAAO,QAAQ,CAAC,EAAE;AAAA,EAClD;AAEA,MAAI,OAAO,mBAAmB,OAAO,iBAAiB;AACpD,UAAM,KAAK,wBAAwB;AAAA,EACrC;AAEA,SAAO,MAAM,KAAK,MAAM;AAC1B;","names":["path","defaultMaxOutputBytes","path","path"]}

package/package.json

@@ -0,0 +1,44 @@
+{
+  "name": "@anvia/sandbox",
+  "version": "0.2.0",
+  "description": "Sandboxed workspace tools for Anvia agents.",
+  "author": "anvia",
+  "maintainer": "Indra Zulfi",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/anvia-hq/anvia",
+    "directory": "packages/tools/sandbox"
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "zod": "^4.4.3",
+    "@anvia/core": "0.5.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.9.1",
+    "tsup": "^8.5.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.8"
+  },
+  "scripts": {
+    "build": "pnpm run build:deps && tsup src/index.ts --format esm --dts --sourcemap --clean",
+    "build:deps": "pnpm --filter @anvia/core build",
+    "test": "pnpm run build:deps && vitest run",
+    "typecheck": "pnpm run build:deps && tsc --noEmit"
+  }
+}