@ash-ai/sandbox 0.0.1

package/dist/pool.js

@@ -0,0 +1,251 @@
+import { DEFAULT_MAX_SANDBOXES, DEFAULT_IDLE_TIMEOUT_MS, IDLE_SWEEP_INTERVAL_MS } from '@ash-ai/shared';
+import { deleteSessionState, deleteCloudState } from './state-persistence.js';
+export class SandboxPool {
+    live = new Map();
+    sessionIndex = new Map(); // sessionId → sandboxId
+    manager;
+    db;
+    dataDir;
+    maxCapacity;
+    idleTimeoutMs;
+    onBeforeEvict;
+    sweepTimer = null;
+    resumeWarmHits = 0;
+    resumeColdHits = 0;
+    constructor(opts) {
+        this.manager = opts.manager;
+        this.db = opts.db;
+        this.dataDir = opts.dataDir;
+        this.maxCapacity = opts.maxCapacity ?? DEFAULT_MAX_SANDBOXES;
+        this.idleTimeoutMs = opts.idleTimeoutMs ?? DEFAULT_IDLE_TIMEOUT_MS;
+        this.onBeforeEvict = opts.onBeforeEvict;
+    }
+    // --- Lifecycle ---
+    async init() {
+        const marked = await this.db.markAllSandboxesCold();
+        if (marked > 0) {
+            console.log(`[pool] Startup: marked ${marked} stale sandbox(es) as cold`);
+        }
+    }
+    async create(opts) {
+        // Enforce capacity — evict if needed
+        const count = await this.db.countSandboxes();
+        if (count >= this.maxCapacity) {
+            const evicted = await this.evictOne();
+            if (!evicted) {
+                throw new Error('Sandbox capacity reached and no evictable sandboxes (all running)');
+            }
+        }
+        const sandbox = await this.manager.create(opts);
+        // Insert DB row directly as 'warm' — no intermediate warming state needed
+        // since the manager.create() call above is the only thing that could fail.
+        await this.db.insertSandbox(sandbox.id, opts.agentName, sandbox.workspaceDir, opts.sessionId);
+        await this.db.updateSandboxState(sandbox.id, 'warm');
+        // Cache in live map
+        const entry = {
+            sandbox,
+            state: 'warm',
+            sessionId: opts.sessionId,
+            agentName: opts.agentName,
+        };
+        this.live.set(sandbox.id, entry);
+        if (opts.sessionId) {
+            this.sessionIndex.set(opts.sessionId, sandbox.id);
+        }
+        return sandbox;
+    }
+    get(sandboxId) {
+        const entry = this.live.get(sandboxId);
+        if (!entry)
+            return undefined;
+        // Check if process is dead
+        if (entry.sandbox.process.exitCode !== null) {
+            this.live.delete(sandboxId);
+            if (entry.sessionId) {
+                this.sessionIndex.delete(entry.sessionId);
+            }
+            // Fire-and-forget DB update to cold
+            this.db.updateSandboxState(sandboxId, 'cold').catch((err) => console.error(`[pool] Failed to mark dead sandbox ${sandboxId} as cold:`, err));
+            return undefined;
+        }
+        return entry.sandbox;
+    }
+    getEntry(sandboxId) {
+        return this.live.get(sandboxId);
+    }
+    getSandboxForSession(sessionId) {
+        const sandboxId = this.sessionIndex.get(sessionId);
+        if (!sandboxId)
+            return undefined;
+        return this.get(sandboxId);
+    }
+    async destroy(sandboxId) {
+        const entry = this.live.get(sandboxId);
+        // Kill process via manager
+        await this.manager.destroy(sandboxId);
+        // Remove from in-memory maps
+        if (entry) {
+            this.live.delete(sandboxId);
+            if (entry.sessionId) {
+                this.sessionIndex.delete(entry.sessionId);
+            }
+        }
+        // Delete DB row
+        await this.db.deleteSandbox(sandboxId);
+    }
+    async destroyAll() {
+        const ids = [...this.live.keys()];
+        await Promise.all(ids.map((id) => this.destroy(id)));
+        // Also clean cold entries from DB
+        // (destroyAll is for full shutdown — clean everything)
+    }
+    // --- State transitions ---
+    markRunning(sandboxId) {
+        const entry = this.live.get(sandboxId);
+        if (!entry)
+            return;
+        entry.state = 'running';
+        // Fire-and-forget DB update
+        this.db.updateSandboxState(sandboxId, 'running').catch((err) => console.error(`[pool] Failed to update sandbox ${sandboxId} state to running:`, err));
+        this.db.touchSandbox(sandboxId).catch(() => { });
+    }
+    markWaiting(sandboxId) {
+        const entry = this.live.get(sandboxId);
+        if (!entry)
+            return;
+        entry.state = 'waiting';
+        // Fire-and-forget DB update
+        this.db.updateSandboxState(sandboxId, 'waiting').catch((err) => console.error(`[pool] Failed to update sandbox ${sandboxId} state to waiting:`, err));
+        this.db.touchSandbox(sandboxId).catch(() => { });
+    }
+    // --- Eviction ---
+    async evictOne() {
+        const candidate = await this.db.getBestEvictionCandidate();
+        if (!candidate)
+            return false;
+        if (candidate.state === 'cold') {
+            // Cold eviction — delete persisted state + DB row
+            if (candidate.sessionId) {
+                deleteSessionState(this.dataDir, candidate.sessionId);
+                deleteCloudState(candidate.sessionId).catch((err) => console.error(`[pool] Cloud delete failed for ${candidate.sessionId}:`, err));
+            }
+            await this.db.deleteSandbox(candidate.id);
+            return true;
+        }
+        if (candidate.state === 'warm') {
+            // Warm eviction — kill sandbox (no active session work)
+            await this.manager.destroy(candidate.id);
+            this.live.delete(candidate.id);
+            if (candidate.sessionId) {
+                this.sessionIndex.delete(candidate.sessionId);
+            }
+            await this.db.deleteSandbox(candidate.id);
+            return true;
+        }
+        // Waiting eviction — kill sandbox (idle session), preserve state
+        const entry = this.live.get(candidate.id);
+        if (entry && this.onBeforeEvict) {
+            await this.onBeforeEvict(entry);
+        }
+        await this.manager.destroy(candidate.id);
+        this.live.delete(candidate.id);
+        if (candidate.sessionId) {
+            this.sessionIndex.delete(candidate.sessionId);
+        }
+        // Mark cold (session is paused, state persisted by onBeforeEvict)
+        await this.db.updateSandboxState(candidate.id, 'cold');
+        return true;
+    }
+    // --- Idle sweep ---
+    async sweepIdle() {
+        const threshold = new Date(Date.now() - this.idleTimeoutMs).toISOString();
+        const idleSandboxes = await this.db.getIdleSandboxes(threshold);
+        let swept = 0;
+        for (const record of idleSandboxes) {
+            const entry = this.live.get(record.id);
+            if (!entry)
+                continue; // not live — skip
+            // Evict: persist state, kill, mark cold
+            if (this.onBeforeEvict) {
+                await this.onBeforeEvict(entry);
+            }
+            await this.manager.destroy(record.id);
+            this.live.delete(record.id);
+            if (entry.sessionId) {
+                this.sessionIndex.delete(entry.sessionId);
+            }
+            await this.db.updateSandboxState(record.id, 'cold');
+            swept++;
+        }
+        if (swept > 0) {
+            console.log(`[pool] Idle sweep: evicted ${swept} sandbox(es)`);
+        }
+        return swept;
+    }
+    startIdleSweep() {
+        if (this.sweepTimer)
+            return;
+        this.sweepTimer = setInterval(() => {
+            this.sweepIdle().catch((err) => console.error('[pool] Idle sweep error:', err));
+        }, IDLE_SWEEP_INTERVAL_MS);
+        // Unref so the timer doesn't keep the process alive
+        this.sweepTimer.unref();
+    }
+    stopIdleSweep() {
+        if (this.sweepTimer) {
+            clearInterval(this.sweepTimer);
+            this.sweepTimer = null;
+        }
+    }
+    // --- Resume metrics ---
+    recordWarmHit() { this.resumeWarmHits++; }
+    recordColdHit() { this.resumeColdHits++; }
+    // --- Stats ---
+    get stats() {
+        // Count live states from in-memory map
+        let warming = 0, warm = 0, waiting = 0, running = 0;
+        for (const entry of this.live.values()) {
+            switch (entry.state) {
+                case 'warming':
+                    warming++;
+                    break;
+                case 'warm':
+                    warm++;
+                    break;
+                case 'waiting':
+                    waiting++;
+                    break;
+                case 'running':
+                    running++;
+                    break;
+            }
+        }
+        // We can't synchronously get cold count from DB, so we compute total from what we know.
+        // For accurate cold count, use statsAsync().
+        return {
+            total: this.live.size, // live only — call statsAsync for full count
+            cold: 0,
+            warming,
+            warm,
+            waiting,
+            running,
+            maxCapacity: this.maxCapacity,
+            resumeWarmHits: this.resumeWarmHits,
+            resumeColdHits: this.resumeColdHits,
+        };
+    }
+    async statsAsync() {
+        const baseStats = this.stats;
+        const totalDb = await this.db.countSandboxes();
+        const cold = totalDb - this.live.size;
+        return {
+            ...baseStats,
+            total: totalDb,
+            cold: Math.max(0, cold),
+        };
+    }
+    get activeCount() {
+        return this.live.size;
+    }
+}
+//# sourceMappingURL=pool.js.map

package/dist/pool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pool.js","sourceRoot":"","sources":["../src/pool.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAExG,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAsC9E,MAAM,OAAO,WAAW;IACd,IAAI,GAAG,IAAI,GAAG,EAAqB,CAAC;IACpC,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,wBAAwB;IAElE,OAAO,CAAiB;IACxB,EAAE,CAAY;IACd,OAAO,CAAS;IAChB,WAAW,CAAS;IACpB,aAAa,CAAS;IACtB,aAAa,CAAuC;IACpD,UAAU,GAA0B,IAAI,CAAC;IACzC,cAAc,GAAG,CAAC,CAAC;IACnB,cAAc,GAAG,CAAC,CAAC;IAE3B,YAAY,IAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAC5B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC;QAC7D,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;QACnE,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IAC1C,CAAC;IAED,oBAAoB;IAEpB,KAAK,CAAC,IAAI;QACR,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC;QACpD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,0BAA0B,MAAM,4BAA4B,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA+C;QAC1D,qCAAqC;QACrC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,KAAK,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAEhD,0EAA0E;QAC1E,2EAA2E;QAC3E,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9F,MAAM,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAErD,oBAAoB;QACpB,MAAM,KAAK,GAAc;YACvB,OAAO;YACP,KAAK,EAAE,MAAM;YACb,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,GAAG,CAAC,SAAiB;QACnB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,2BAA2B;QAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC;YACD,oCAAoC;YACpC,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC1D,OAAO,CAAC,KAAK,CAAC,sCAAsC,SAAS,WAAW,EAAE,GAAG,CAAC,CAC/E,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,oBAAoB,CAAC,SAAiB;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAEvC,2BAA2B;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEtC,6BAA6B;QAC7B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,GAAG,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAClC,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,kCAAkC;QAClC,uDAAuD;IACzD,CAAC;IAED,4BAA4B;IAE5B,WAAW,CAAC,SAAiB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,4BAA4B;QAC5B,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7D,OAAO,CAAC,KAAK,CAAC,mCAAmC,SAAS,oBAAoB,EAAE,GAAG,CAAC,CACrF,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,WAAW,CAAC,SAAiB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,4BAA4B;QAC5B,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7D,OAAO,CAAC,KAAK,CAAC,mCAAmC,SAAS,oBAAoB,EAAE,GAAG,CAAC,CACrF,CAAC;QACF,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,mBAAmB;IAEX,KAAK,CAAC,QAAQ;QACpB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,wBAAwB,EAAE,CAAC;QAC3D,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAE7B,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC/B,kDAAkD;YAClD,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACxB,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;gBACtD,gBAAgB,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAClD,OAAO,CAAC,KAAK,CAAC,kCAAkC,SAAS,CAAC,SAAS,GAAG,EAAE,GAAG,CAAC,CAC7E,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC/B,wDAAwD;YACxD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC/B,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACxB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAChD,CAAC;YACD,MAAM,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,iEAAiE;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,KAAK,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QACD,kEAAkE;QAClE,MAAM,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACvD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qBAAqB;IAErB,KAAK,CAAC,SAAS;QACb,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1E,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,KAAK,GAAG,CAAC,CAAC;QAEd,KAAK,MAAM,MAAM,IAAI,aAAa,EAAE,CAAC;YACnC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,KAAK;gBAAE,SAAS,CAAC,kBAAkB;YAExC,wCAAwC;YACxC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,MAAM,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAC5B,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5C,CAAC;YACD,MAAM,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACpD,KAAK,EAAE,CAAC;QACV,CAAC;QAED,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,cAAc,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,cAAc;QACZ,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAC5B,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE;YACjC,IAAI,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,GAAG,CAAC,CAC/C,CAAC;QACJ,CAAC,EAAE,sBAAsB,CAAC,CAAC;QAC3B,oDAAoD;QACpD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,aAAa;QACX,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED,yBAAyB;IAEzB,aAAa,KAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAChD,aAAa,KAAW,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;IAEhD,gBAAgB;IAEhB,IAAI,KAAK;QACP,uCAAuC;QACvC,IAAI,OAAO,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC;QACpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACvC,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAC;oBAAC,MAAM;gBACjC,KAAK,MAAM;oBAAE,IAAI,EAAE,CAAC;oBAAC,MAAM;gBAC3B,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAC;oBAAC,MAAM;gBACjC,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAC;oBAAC,MAAM;YACnC,CAAC;QACH,CAAC;QAED,wFAAwF;QACxF,6CAA6C;QAC7C,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,6CAA6C;YACpE,IAAI,EAAE,CAAC;YACP,OAAO;YACP,IAAI;YACJ,OAAO;YACP,OAAO;YACP,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,cAAc,EAAE,IAAI,CAAC,cAAc;SACpC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QACtC,OAAO;YACL,GAAG,SAAS;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC;SACxB,CAAC;IACJ,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF"}

package/dist/resource-limits.d.ts

@@ -0,0 +1,21 @@
+import { type ChildProcess, type SpawnOptions } from 'node:child_process';
+import type { SandboxLimits } from '@ash-ai/shared';
+import { DEFAULT_SANDBOX_LIMITS } from '@ash-ai/shared';
+export { DEFAULT_SANDBOX_LIMITS };
+export interface SpawnResult {
+    child: ChildProcess;
+    cleanup: () => void;
+}
+export interface SandboxSpawnOpts {
+    sandboxId: string;
+    workspaceDir: string;
+    agentDir: string;
+}
+export declare function createCgroup(sandboxId: string, limits: SandboxLimits): string;
+export declare function addToCgroup(cgroupPath: string, pid: number): void;
+export declare function removeCgroup(cgroupPath: string): void;
+export declare function spawnWithLimits(command: string, args: string[], opts: SpawnOptions, limits: SandboxLimits, sandboxOpts: SandboxSpawnOpts): SpawnResult;
+export declare function isOomExit(code: number | null, signal: string | null): boolean;
+export declare function getDirSizeKb(dir: string): number;
+export declare function startDiskMonitor(workspaceDir: string, limitMb: number, onExceeded: () => void, intervalMs?: number): NodeJS.Timeout;
+//# sourceMappingURL=resource-limits.d.ts.map

package/dist/resource-limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-limits.d.ts","sourceRoot":"","sources":["../src/resource-limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG3F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAA0B,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAMlC,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,YAAY,CAAC;IACpB,OAAO,EAAE,MAAM,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAwBD,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,CAqB7E;AAED,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAEjE;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAMrD;AA6CD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,gBAAgB,GAC5B,WAAW,CAOb;AAmCD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAE7E;AAMD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED,wBAAgB,gBAAgB,CAC9B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,IAAI,EACtB,UAAU,GAAE,MAA+B,GAC1C,MAAM,CAAC,OAAO,CAWhB"}

package/dist/resource-limits.js

@@ -0,0 +1,139 @@
+import { execSync, spawn } from 'node:child_process';
+import { writeFileSync, mkdirSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { DEFAULT_SANDBOX_LIMITS, DISK_CHECK_INTERVAL_MS } from '@ash-ai/shared';
+export { DEFAULT_SANDBOX_LIMITS };
+// =============================================================================
+// Platform detection
+// =============================================================================
+function hasCgroups() {
+    if (process.platform !== 'linux')
+        return false;
+    try {
+        // Check that the ash cgroup parent exists and is writable
+        // (docker-entrypoint.sh sets this up, or it exists on native Linux with proper perms)
+        execSync('test -d /sys/fs/cgroup/ash && test -w /sys/fs/cgroup/ash', { stdio: 'ignore' });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+// =============================================================================
+// Linux: cgroups v2
+// =============================================================================
+const CGROUP_ROOT = '/sys/fs/cgroup/ash';
+export function createCgroup(sandboxId, limits) {
+    const cgroupPath = join(CGROUP_ROOT, sandboxId);
+    mkdirSync(cgroupPath, { recursive: true });
+    // Memory limit
+    const memoryBytes = limits.memoryMb * 1024 * 1024;
+    writeFileSync(join(cgroupPath, 'memory.max'), String(memoryBytes));
+    try {
+        writeFileSync(join(cgroupPath, 'memory.swap.max'), '0');
+    }
+    catch {
+        // swap controller may not be enabled
+    }
+    // CPU limit (100000 period, quota scales with cpuPercent)
+    const cpuQuota = limits.cpuPercent * 1000;
+    writeFileSync(join(cgroupPath, 'cpu.max'), `${cpuQuota} 100000`);
+    // Process limit (fork bomb protection)
+    writeFileSync(join(cgroupPath, 'pids.max'), String(limits.maxProcesses));
+    return cgroupPath;
+}
+export function addToCgroup(cgroupPath, pid) {
+    writeFileSync(join(cgroupPath, 'cgroup.procs'), String(pid));
+}
+export function removeCgroup(cgroupPath) {
+    try {
+        rmSync(cgroupPath, { recursive: true, force: true });
+    }
+    catch {
+        // may already be gone or processes still inside
+    }
+}
+// =============================================================================
+// Fallback: ulimit (macOS dev without Docker)
+// =============================================================================
+function buildUlimitPrefix(limits) {
+    const parts = [];
+    // ulimit -v (virtual memory) doesn't work on macOS — skip it there
+    if (process.platform !== 'darwin') {
+        parts.push(`ulimit -v ${limits.memoryMb * 1024}`);
+    }
+    // ulimit -u (max user processes) — on macOS this applies to the entire user,
+    // not just the subprocess tree. Setting it to 64 when the user already has 60+
+    // processes causes "fork: Resource temporarily unavailable". Skip on macOS.
+    if (process.platform !== 'darwin') {
+        parts.push(`ulimit -u ${limits.maxProcesses}`);
+    }
+    parts.push(`ulimit -f ${limits.diskMb * 1024}`); // Max file size (KB blocks)
+    return parts.join(' && ');
+}
+function spawnWithUlimit(command, args, opts, limits) {
+    const prefix = buildUlimitPrefix(limits);
+    const escapedArgs = args.map((a) => `'${a.replace(/'/g, "'\\''")}'`).join(' ');
+    // Use bash (not sh) — Debian's sh is dash which doesn't support ulimit -u
+    const shell = process.platform === 'linux' ? 'bash' : 'sh';
+    const child = spawn(shell, ['-c', `${prefix} && exec ${command} ${escapedArgs}`], opts);
+    return { child, cleanup: () => { } };
+}
+// =============================================================================
+// Unified spawn
+// =============================================================================
+export function spawnWithLimits(command, args, opts, limits, sandboxOpts) {
+    if (hasCgroups()) {
+        return spawnWithCgroups(command, args, opts, limits, sandboxOpts);
+    }
+    // macOS or unprivileged Linux — ulimit fallback
+    return spawnWithUlimit(command, args, opts, limits);
+}
+function spawnWithCgroups(command, args, opts, limits, sandboxOpts) {
+    let cgroupPath;
+    try {
+        cgroupPath = createCgroup(sandboxOpts.sandboxId, limits);
+    }
+    catch (err) {
+        console.error(`[resource-limits] cgroups available but failed to create: ${err}`);
+        return spawnWithUlimit(command, args, opts, limits);
+    }
+    const child = spawn(command, args, opts);
+    if (child.pid) {
+        try {
+            addToCgroup(cgroupPath, child.pid);
+        }
+        catch (err) {
+            console.error(`[resource-limits] Failed to add PID ${child.pid} to cgroup: ${err}`);
+        }
+    }
+    const cleanup = () => removeCgroup(cgroupPath);
+    return { child, cleanup };
+}
+// =============================================================================
+// OOM detection
+// =============================================================================
+export function isOomExit(code, signal) {
+    return signal === 'SIGKILL' || code === 137;
+}
+// =============================================================================
+// Disk usage monitoring
+// =============================================================================
+export function getDirSizeKb(dir) {
+    const output = execSync(`du -sk '${dir}'`, { timeout: 5000 }).toString().trim();
+    return parseInt(output.split('\t')[0], 10);
+}
+export function startDiskMonitor(workspaceDir, limitMb, onExceeded, intervalMs = DISK_CHECK_INTERVAL_MS) {
+    return setInterval(() => {
+        try {
+            const sizeKb = getDirSizeKb(workspaceDir);
+            if (sizeKb > limitMb * 1024) {
+                onExceeded();
+            }
+        }
+        catch {
+            // du failed — workspace may be gone
+        }
+    }, intervalMs);
+}
+//# sourceMappingURL=resource-limits.js.map

package/dist/resource-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resource-limits.js","sourceRoot":"","sources":["../src/resource-limits.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAwC,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAE,CAAC;AAiBlC,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,SAAS,UAAU;IACjB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QACH,0DAA0D;QAC1D,sFAAsF;QACtF,QAAQ,CAAC,0DAA0D,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,oBAAoB;AACpB,gFAAgF;AAEhF,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEzC,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAqB;IACnE,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;IAChD,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3C,eAAe;IACf,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC;IAClD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IAC1C,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,QAAQ,SAAS,CAAC,CAAC;IAEjE,uCAAuC;IACvC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC;IAEzE,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,GAAW;IACzD,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,UAAkB;IAC7C,IAAI,CAAC;QACH,MAAM,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,8CAA8C;AAC9C,gFAAgF;AAEhF,SAAS,iBAAiB,CAAC,MAAqB;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,mEAAmE;IACnE,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,QAAQ,GAAG,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAED,6EAA6E;IAC7E,+EAA+E;IAC/E,4EAA4E;IAC5E,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,aAAa,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,CAAC,CAAC,CAAE,4BAA4B;IAE9E,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,eAAe,CACtB,OAAe,EACf,IAAc,EACd,IAAkB,EAClB,MAAqB;IAErB,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/E,0EAA0E;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,MAAM,YAAY,OAAO,IAAI,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAExF,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,IAAc,EACd,IAAkB,EAClB,MAAqB,EACrB,WAA6B;IAE7B,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACpE,CAAC;IAED,gDAAgD;IAChD,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,OAAe,EACf,IAAc,EACd,IAAkB,EAClB,MAAqB,EACrB,WAA6B;IAE7B,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,UAAU,GAAG,YAAY,CAAC,WAAW,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,6DAA6D,GAAG,EAAE,CAAC,CAAC;QAClF,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAEzC,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,IAAI,CAAC;YACH,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,KAAK,CAAC,GAAG,eAAe,GAAG,EAAE,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,gFAAgF;AAChF,gBAAgB;AAChB,gFAAgF;AAEhF,MAAM,UAAU,SAAS,CAAC,IAAmB,EAAE,MAAqB;IAClE,OAAO,MAAM,KAAK,SAAS,IAAI,IAAI,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,gFAAgF;AAChF,wBAAwB;AACxB,gFAAgF;AAEhF,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,WAAW,GAAG,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IAChF,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,YAAoB,EACpB,OAAe,EACf,UAAsB,EACtB,aAAqB,sBAAsB;IAE3C,OAAO,WAAW,CAAC,GAAG,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;YAC1C,IAAI,MAAM,GAAG,OAAO,GAAG,IAAI,EAAE,CAAC;gBAC5B,UAAU,EAAE,CAAC;YACf,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oCAAoC;QACtC,CAAC;IACH,CAAC,EAAE,UAAU,CAAC,CAAC;AACjB,CAAC"}

package/dist/snapshot-gcs.d.ts

@@ -0,0 +1,13 @@
+import type { SnapshotStore } from './snapshot-store.js';
+export declare class GcsSnapshotStore implements SnapshotStore {
+    private storage;
+    private bucket;
+    private prefix;
+    constructor(bucket: string, prefix: string);
+    private key;
+    upload(sessionId: string, tarPath: string): Promise<boolean>;
+    download(sessionId: string, destPath: string): Promise<boolean>;
+    exists(sessionId: string): Promise<boolean>;
+    delete(sessionId: string): Promise<void>;
+}
+//# sourceMappingURL=snapshot-gcs.d.ts.map

package/dist/snapshot-gcs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-gcs.d.ts","sourceRoot":"","sources":["../src/snapshot-gcs.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,qBAAa,gBAAiB,YAAW,aAAa;IACpD,OAAO,CAAC,OAAO,CAAU;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAM1C,OAAO,CAAC,GAAG;IAIL,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAY5D,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAc/D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU3C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQ/C"}

package/dist/snapshot-gcs.js

@@ -0,0 +1,63 @@
+import { Storage } from '@google-cloud/storage';
+import { createReadStream, createWriteStream } from 'node:fs';
+import { pipeline } from 'node:stream/promises';
+export class GcsSnapshotStore {
+    storage;
+    bucket;
+    prefix;
+    constructor(bucket, prefix) {
+        this.bucket = bucket;
+        this.prefix = prefix;
+        this.storage = new Storage(); // Uses ADC (Application Default Credentials)
+    }
+    key(sessionId) {
+        return `${this.prefix}${sessionId}/workspace.tar.gz`;
+    }
+    async upload(sessionId, tarPath) {
+        try {
+            const file = this.storage.bucket(this.bucket).file(this.key(sessionId));
+            const stream = createReadStream(tarPath);
+            await pipeline(stream, file.createWriteStream({ contentType: 'application/gzip' }));
+            return true;
+        }
+        catch (err) {
+            console.error(`[snapshot-gcs] Upload failed for ${sessionId}:`, err);
+            return false;
+        }
+    }
+    async download(sessionId, destPath) {
+        try {
+            const file = this.storage.bucket(this.bucket).file(this.key(sessionId));
+            const [exists] = await file.exists();
+            if (!exists)
+                return false;
+            const ws = createWriteStream(destPath);
+            await pipeline(file.createReadStream(), ws);
+            return true;
+        }
+        catch (err) {
+            console.error(`[snapshot-gcs] Download failed for ${sessionId}:`, err);
+            return false;
+        }
+    }
+    async exists(sessionId) {
+        try {
+            const file = this.storage.bucket(this.bucket).file(this.key(sessionId));
+            const [exists] = await file.exists();
+            return exists;
+        }
+        catch {
+            return false;
+        }
+    }
+    async delete(sessionId) {
+        try {
+            const file = this.storage.bucket(this.bucket).file(this.key(sessionId));
+            await file.delete({ ignoreNotFound: true });
+        }
+        catch (err) {
+            console.error(`[snapshot-gcs] Delete failed for ${sessionId}:`, err);
+        }
+    }
+}
+//# sourceMappingURL=snapshot-gcs.js.map

package/dist/snapshot-gcs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-gcs.js","sourceRoot":"","sources":["../src/snapshot-gcs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,MAAM,OAAO,gBAAgB;IACnB,OAAO,CAAU;IACjB,MAAM,CAAS;IACf,MAAM,CAAS;IAEvB,YAAY,MAAc,EAAE,MAAc;QACxC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC,CAAC,6CAA6C;IAC7E,CAAC;IAEO,GAAG,CAAC,SAAiB;QAC3B,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,mBAAmB,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,OAAe;QAC7C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;YACrE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,QAAgB;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACrC,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1B,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;YACvE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACxE,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF"}

package/dist/snapshot-s3.d.ts

@@ -0,0 +1,13 @@
+import type { SnapshotStore } from './snapshot-store.js';
+export declare class S3SnapshotStore implements SnapshotStore {
+    private client;
+    private bucket;
+    private prefix;
+    constructor(bucket: string, prefix: string, region?: string);
+    private key;
+    upload(sessionId: string, tarPath: string): Promise<boolean>;
+    download(sessionId: string, destPath: string): Promise<boolean>;
+    exists(sessionId: string): Promise<boolean>;
+    delete(sessionId: string): Promise<void>;
+}
+//# sourceMappingURL=snapshot-s3.d.ts.map

package/dist/snapshot-s3.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-s3.d.ts","sourceRoot":"","sources":["../src/snapshot-s3.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,qBAAa,eAAgB,YAAW,aAAa;IACnD,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;gBAEX,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAM3D,OAAO,CAAC,GAAG;IAIL,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAgB5D,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB/D,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAY3C,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAU/C"}

package/dist/snapshot-s3.js

@@ -0,0 +1,75 @@
+import { S3Client, PutObjectCommand, GetObjectCommand, HeadObjectCommand, DeleteObjectCommand } from '@aws-sdk/client-s3';
+import { createReadStream, createWriteStream } from 'node:fs';
+import { pipeline } from 'node:stream/promises';
+export class S3SnapshotStore {
+    client;
+    bucket;
+    prefix;
+    constructor(bucket, prefix, region) {
+        this.bucket = bucket;
+        this.prefix = prefix;
+        this.client = new S3Client({ region: region || process.env.ASH_S3_REGION || 'us-east-1' });
+    }
+    key(sessionId) {
+        return `${this.prefix}${sessionId}/workspace.tar.gz`;
+    }
+    async upload(sessionId, tarPath) {
+        try {
+            const stream = createReadStream(tarPath);
+            await this.client.send(new PutObjectCommand({
+                Bucket: this.bucket,
+                Key: this.key(sessionId),
+                Body: stream,
+                ContentType: 'application/gzip',
+            }));
+            return true;
+        }
+        catch (err) {
+            console.error(`[snapshot-s3] Upload failed for ${sessionId}:`, err);
+            return false;
+        }
+    }
+    async download(sessionId, destPath) {
+        try {
+            const resp = await this.client.send(new GetObjectCommand({
+                Bucket: this.bucket,
+                Key: this.key(sessionId),
+            }));
+            if (!resp.Body)
+                return false;
+            const ws = createWriteStream(destPath);
+            await pipeline(resp.Body, ws);
+            return true;
+        }
+        catch (err) {
+            if (err instanceof Error && err.name === 'NoSuchKey')
+                return false;
+            console.error(`[snapshot-s3] Download failed for ${sessionId}:`, err);
+            return false;
+        }
+    }
+    async exists(sessionId) {
+        try {
+            await this.client.send(new HeadObjectCommand({
+                Bucket: this.bucket,
+                Key: this.key(sessionId),
+            }));
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    async delete(sessionId) {
+        try {
+            await this.client.send(new DeleteObjectCommand({
+                Bucket: this.bucket,
+                Key: this.key(sessionId),
+            }));
+        }
+        catch (err) {
+            console.error(`[snapshot-s3] Delete failed for ${sessionId}:`, err);
+        }
+    }
+}
+//# sourceMappingURL=snapshot-s3.js.map

package/dist/snapshot-s3.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot-s3.js","sourceRoot":"","sources":["../src/snapshot-s3.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC1H,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAIhD,MAAM,OAAO,eAAe;IAClB,MAAM,CAAW;IACjB,MAAM,CAAS;IACf,MAAM,CAAS;IAEvB,YAAY,MAAc,EAAE,MAAc,EAAE,MAAe;QACzD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,WAAW,EAAE,CAAC,CAAC;IAC7F,CAAC;IAEO,GAAG,CAAC,SAAiB;QAC3B,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,SAAS,mBAAmB,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,OAAe;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACzC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;gBAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBACxB,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,kBAAkB;aAChC,CAAC,CAAC,CAAC;YACJ,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB,EAAE,QAAgB;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;gBACvD,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;aACzB,CAAC,CAAC,CAAC;YACJ,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC;YAC7B,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAgB,EAAE,EAAE,CAAC,CAAC;YAC1C,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,KAAK,CAAC;YACnE,OAAO,CAAC,KAAK,CAAC,qCAAqC,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;YACtE,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,iBAAiB,CAAC;gBAC3C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;aACzB,CAAC,CAAC,CAAC;YACJ,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC;gBAC7C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;aACzB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,mCAAmC,SAAS,GAAG,EAAE,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;CACF"}