@cloudflare/sandbox 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @cloudflare/sandbox
 
+## 0.1.2
+
+### Patch Changes
+
+- [#30](https://github.com/cloudflare/sandbox-sdk/pull/30) [`30e5c25`](https://github.com/cloudflare/sandbox-sdk/commit/30e5c25cf7d4b07f9049724206c531e2d5d29d5c) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Remove actions timeout
+
+- [#29](https://github.com/cloudflare/sandbox-sdk/pull/29) [`d78508f`](https://github.com/cloudflare/sandbox-sdk/commit/d78508f7287a59e0423edd2999c2c83e9e34ccfd) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Create multi-platform Docker image and switch to Cloudflare official repo
+
 ## 0.1.1
 
 ### Patch Changes

package/Dockerfile

@@ -1,4 +1,5 @@
 # Sandbox base image with development tools, Python, Node.js, and Bun
+FROM oven/bun:latest AS bun-source
 FROM ubuntu:22.04
 
 # Prevent interactive prompts during package installation
@@ -50,11 +51,9 @@ RUN apt-get update && apt-get install -y ca-certificates curl gnupg \
     && apt-get install -y nodejs \
     && rm -rf /var/lib/apt/lists/*
 
-# Install Bun using the official installation script
-RUN curl -fsSL https://bun.sh/install | bash \
-    && mv /root/.bun/bin/bun /usr/local/bin/bun \
-    && mv /root/.bun/bin/bunx /usr/local/bin/bunx \
-    && rm -rf /root/.bun
+# Install Bun from official image (avoids architecture compatibility issues)
+COPY --from=bun-source /usr/local/bin/bun /usr/local/bin/bun
+COPY --from=bun-source /usr/local/bin/bunx /usr/local/bin/bunx
 
 # Install global npm packages as root
 RUN npm install -g yarn pnpm

package/dist/{chunk-ISFOIYQC.js → chunk-YZRU4CKO.js}

@@ -121,6 +121,8 @@ function getSandbox(ns, id) {
   return stub;
 }
 var Sandbox = class extends Container {
+  defaultPort = 3e3;
+  // Default port for the container's Bun server
   sleepAfter = "3m";
   // Sleep the sandbox if no requests are made in this timeframe
   client;
@@ -582,4 +584,4 @@ export {
   proxyToSandbox,
   isLocalhostPattern
 };
-//# sourceMappingURL=chunk-ISFOIYQC.js.map
+//# sourceMappingURL=chunk-YZRU4CKO.js.map

package/dist/chunk-YZRU4CKO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox.ts","../src/request-handler.ts"],"sourcesContent":["import { Container, getContainer } from \"@cloudflare/containers\";\nimport { HttpClient } from \"./client\";\nimport { isLocalhostPattern } from \"./request-handler\";\nimport {\n  logSecurityEvent,\n  SecurityError,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\nimport type {\n  ExecOptions,\n  ExecResult,\n  ISandbox,\n  Process,\n  ProcessOptions,\n  ProcessStatus,\n  StreamOptions\n} from \"./types\";\nimport {\n  ProcessNotFoundError,\n  SandboxError\n} from \"./types\";\n\nexport function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {\n  const stub = getContainer(ns, id);\n\n  // Store the name on first access\n  stub.setSandboxName?.(id);\n\n  return stub;\n}\n\nexport class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {\n  defaultPort = 3000; // Default port for the container's Bun server\n  sleepAfter = \"3m\"; // Sleep the sandbox if no requests are made in this timeframe\n  client: HttpClient;\n  private sandboxName: string | null = null;\n\n  constructor(ctx: DurableObjectState, env: Env) {\n    super(ctx, env);\n    this.client = new HttpClient({\n      onCommandComplete: (success, exitCode, _stdout, _stderr, command) => {\n        console.log(\n          `[Container] Command completed: ${command}, Success: ${success}, Exit code: ${exitCode}`\n        );\n      },\n      onCommandStart: (command) => {\n        console.log(\n          `[Container] Command started: ${command}`\n        );\n      },\n      onError: (error, _command) => {\n        console.error(`[Container] Command error: ${error}`);\n      },\n      onOutput: (stream, data, _command) => {\n        console.log(`[Container] [${stream}] ${data}`);\n      },\n      port: 3000, // Control plane port\n      stub: this,\n    });\n\n    // Load the sandbox name from storage on initialization\n    this.ctx.blockConcurrencyWhile(async () => {\n      this.sandboxName = await this.ctx.storage.get<string>('sandboxName') || null;\n    });\n  }\n\n  // RPC method to set the sandbox name\n  async setSandboxName(name: string): Promise<void> {\n    if (!this.sandboxName) {\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name via RPC: ${name}`);\n    }\n  }\n\n  // RPC method to set environment variables\n  async setEnvVars(envVars: Record<string, string>): Promise<void> {\n    this.envVars = { ...this.envVars, ...envVars };\n    console.log(`[Sandbox] Updated environment variables`);\n  }\n\n  override onStart() {\n    console.log(\"Sandbox successfully started\");\n  }\n\n  override onStop() {\n    console.log(\"Sandbox successfully shut down\");\n    if (this.client) {\n      this.client.clearSession();\n    }\n  }\n\n  override onError(error: unknown) {\n    console.log(\"Sandbox error:\", error);\n  }\n\n  // Override fetch to route internal container requests to appropriate ports\n  override async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Capture and store the sandbox name from the header if present\n    if (!this.sandboxName && request.headers.has('X-Sandbox-Name')) {\n      const name = request.headers.get('X-Sandbox-Name')!;\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name: ${this.sandboxName}`);\n    }\n\n    // Determine which port to route to\n    const port = this.determinePort(url);\n\n    // Route to the appropriate port\n    return await this.containerFetch(request, port);\n  }\n\n  private determinePort(url: URL): number {\n    // Extract port from proxy requests (e.g., /proxy/8080/*)\n    const proxyMatch = url.pathname.match(/^\\/proxy\\/(\\d+)/);\n    if (proxyMatch) {\n      return parseInt(proxyMatch[1]);\n    }\n\n    // All other requests go to control plane on port 3000\n    // This includes /api/* endpoints and any other control requests\n    return 3000;\n  }\n\n  // Enhanced exec method - always returns ExecResult with optional streaming\n  // This replaces the old exec method to match ISandbox interface\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const startTime = Date.now();\n    const timestamp = new Date().toISOString();\n\n    // Handle timeout\n    let timeoutId: NodeJS.Timeout | undefined;\n\n    try {\n      // Handle cancellation\n      if (options?.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n\n      let result: ExecResult;\n\n      if (options?.stream && options?.onOutput) {\n        // Streaming with callbacks - we need to collect the final result\n        result = await this.executeWithStreaming(command, options, startTime, timestamp);\n      } else {\n        // Regular execution\n        const response = await this.client.execute(\n          command,\n          options?.sessionId\n        );\n\n        const duration = Date.now() - startTime;\n        result = this.mapExecuteResponseToExecResult(response, duration, options?.sessionId);\n      }\n\n      // Call completion callback if provided\n      if (options?.onComplete) {\n        options.onComplete(result);\n      }\n\n      return result;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n      throw error;\n    } finally {\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n    }\n  }\n\n  private async executeWithStreaming(\n    command: string,\n    options: ExecOptions,\n    startTime: number,\n    timestamp: string\n  ): Promise<ExecResult> {\n    let stdout = '';\n    let stderr = '';\n\n    try {\n      const stream = await this.client.executeCommandStream(command, options.sessionId);\n      const { parseSSEStream } = await import('./sse-parser');\n\n      for await (const event of parseSSEStream<import('./types').ExecEvent>(stream)) {\n        // Check for cancellation\n        if (options.signal?.aborted) {\n          throw new Error('Operation was aborted');\n        }\n\n        switch (event.type) {\n          case 'stdout':\n          case 'stderr':\n            if (event.data) {\n              // Update accumulated output\n              if (event.type === 'stdout') stdout += event.data;\n              if (event.type === 'stderr') stderr += event.data;\n\n              // Call user's callback\n              if (options.onOutput) {\n                options.onOutput(event.type, event.data);\n              }\n            }\n            break;\n\n          case 'complete': {\n            // Use result from complete event if available\n            const duration = Date.now() - startTime;\n            return event.result || {\n              success: event.exitCode === 0,\n              exitCode: event.exitCode || 0,\n              stdout,\n              stderr,\n              command,\n              duration,\n              timestamp,\n              sessionId: options.sessionId\n            };\n          }\n\n          case 'error':\n            throw new Error(event.error || 'Command execution failed');\n        }\n      }\n\n      // If we get here without a complete event, something went wrong\n      throw new Error('Stream ended without completion event');\n\n    } catch (error) {\n      if (options.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n      throw error;\n    }\n  }\n\n  private mapExecuteResponseToExecResult(\n    response: import('./client').ExecuteResponse,\n    duration: number,\n    sessionId?: string\n  ): ExecResult {\n    return {\n      success: response.success,\n      exitCode: response.exitCode,\n      stdout: response.stdout,\n      stderr: response.stderr,\n      command: response.command,\n      duration,\n      timestamp: response.timestamp,\n      sessionId\n    };\n  }\n\n\n  // Background process management\n  async startProcess(command: string, options?: ProcessOptions): Promise<Process> {\n    // Use the new HttpClient method to start the process\n    try {\n      const response = await this.client.startProcess(command, {\n        processId: options?.processId,\n        sessionId: options?.sessionId,\n        timeout: options?.timeout,\n        env: options?.env,\n        cwd: options?.cwd,\n        encoding: options?.encoding,\n        autoCleanup: options?.autoCleanup\n      });\n\n      const process = response.process;\n      const processObj: Process = {\n        id: process.id,\n        pid: process.pid,\n        command: process.command,\n        status: process.status as ProcessStatus,\n        startTime: new Date(process.startTime),\n        endTime: undefined,\n        exitCode: undefined,\n        sessionId: process.sessionId,\n\n        async kill(): Promise<void> {\n          throw new Error('Method will be replaced');\n        },\n        async getStatus(): Promise<ProcessStatus> {\n          throw new Error('Method will be replaced');\n        },\n        async getLogs(): Promise<{ stdout: string; stderr: string }> {\n          throw new Error('Method will be replaced');\n        }\n      };\n\n      // Bind context properly\n      processObj.kill = async (signal?: string) => {\n        await this.killProcess(process.id, signal);\n      };\n\n      processObj.getStatus = async () => {\n        const current = await this.getProcess(process.id);\n        return current?.status || 'error';\n      };\n\n      processObj.getLogs = async () => {\n        const logs = await this.getProcessLogs(process.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      };\n\n      // Call onStart callback if provided\n      if (options?.onStart) {\n        options.onStart(processObj);\n      }\n\n      return processObj;\n\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n\n      throw error;\n    }\n  }\n\n  async listProcesses(): Promise<Process[]> {\n    const response = await this.client.listProcesses();\n\n    return response.processes.map(processData => ({\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    }));\n  }\n\n  async getProcess(id: string): Promise<Process | null> {\n    const response = await this.client.getProcess(id);\n    if (!response.process) {\n      return null;\n    }\n\n    const processData = response.process;\n    return {\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    };\n  }\n\n  async killProcess(id: string, _signal?: string): Promise<void> {\n    try {\n      // Note: signal parameter is not currently supported by the HttpClient implementation\n      await this.client.killProcess(id);\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw new SandboxError(\n        `Failed to kill process ${id}: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'KILL_PROCESS_FAILED'\n      );\n    }\n  }\n\n  async killAllProcesses(): Promise<number> {\n    const response = await this.client.killAllProcesses();\n    return response.killedCount;\n  }\n\n  async cleanupCompletedProcesses(): Promise<number> {\n    // For now, this would need to be implemented as a container endpoint\n    // as we no longer maintain local process storage\n    // We'll return 0 as a placeholder until the container endpoint is added\n    return 0;\n  }\n\n  async getProcessLogs(id: string): Promise<{ stdout: string; stderr: string }> {\n    try {\n      const response = await this.client.getProcessLogs(id);\n      return {\n        stdout: response.stdout,\n        stderr: response.stderr\n      };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw error;\n    }\n  }\n\n\n  // Streaming methods - return ReadableStream for RPC compatibility\n  async execStream(command: string, options?: StreamOptions): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient (need to add this method)\n    const stream = await this.client.executeCommandStream(command, options?.sessionId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async streamProcessLogs(processId: string, options?: { signal?: AbortSignal }): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient\n    const stream = await this.client.streamProcessLogs(processId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async gitCheckout(\n    repoUrl: string,\n    options: { branch?: string; targetDir?: string }\n  ) {\n    return this.client.gitCheckout(repoUrl, options.branch, options.targetDir);\n  }\n\n  async mkdir(\n    path: string,\n    options: { recursive?: boolean } = {}\n  ) {\n    return this.client.mkdir(path, options.recursive);\n  }\n\n  async writeFile(\n    path: string,\n    content: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.writeFile(path, content, options.encoding);\n  }\n\n  async deleteFile(path: string) {\n    return this.client.deleteFile(path);\n  }\n\n  async renameFile(\n    oldPath: string,\n    newPath: string\n  ) {\n    return this.client.renameFile(oldPath, newPath);\n  }\n\n  async moveFile(\n    sourcePath: string,\n    destinationPath: string\n  ) {\n    return this.client.moveFile(sourcePath, destinationPath);\n  }\n\n  async readFile(\n    path: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.readFile(path, options.encoding);\n  }\n\n  async exposePort(port: number, options: { name?: string; hostname: string }) {\n    await this.client.exposePort(port, options?.name);\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    const url = this.constructPreviewUrl(port, this.sandboxName, options.hostname);\n\n    return {\n      url,\n      port,\n      name: options?.name,\n    };\n  }\n\n  async unexposePort(port: number) {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_UNEXPOSE', {\n        port\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    await this.client.unexposePort(port);\n\n    logSecurityEvent('PORT_UNEXPOSED', {\n      port\n    }, 'low');\n  }\n\n  async getExposedPorts(hostname: string) {\n    const response = await this.client.getExposedPorts();\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    return response.ports.map(port => ({\n      url: this.constructPreviewUrl(port.port, this.sandboxName!, hostname),\n      port: port.port,\n      name: port.name,\n      exposedAt: port.exposedAt,\n    }));\n  }\n\n\n  private constructPreviewUrl(port: number, sandboxId: string, hostname: string): string {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_REJECTED', {\n        port,\n        sandboxId,\n        hostname\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    let sanitizedSandboxId: string;\n    try {\n      sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n    } catch (error) {\n      logSecurityEvent('INVALID_SANDBOX_ID_REJECTED', {\n        sandboxId,\n        port,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw error;\n    }\n\n    const isLocalhost = isLocalhostPattern(hostname);\n\n    if (isLocalhost) {\n      // Unified subdomain approach for localhost (RFC 6761)\n      const [host, portStr] = hostname.split(':');\n      const mainPort = portStr || '80';\n\n      // Use URL constructor for safe URL building\n      try {\n        const baseUrl = new URL(`http://${host}:${mainPort}`);\n        // Construct subdomain safely\n        const subdomainHost = `${port}-${sanitizedSandboxId}.${host}`;\n        baseUrl.hostname = subdomainHost;\n\n        const finalUrl = baseUrl.toString();\n\n        logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          resultUrl: finalUrl,\n          environment: 'localhost'\n        }, 'low');\n\n        return finalUrl;\n      } catch (error) {\n        logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          error: error instanceof Error ? error.message : 'Unknown error'\n        }, 'high');\n        throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n      }\n    }\n\n    // Production subdomain logic - enforce HTTPS\n    try {\n      // Always use HTTPS for production (non-localhost)\n      const protocol = \"https\";\n      const baseUrl = new URL(`${protocol}://${hostname}`);\n\n      // Construct subdomain safely\n      const subdomainHost = `${port}-${sanitizedSandboxId}.${hostname}`;\n      baseUrl.hostname = subdomainHost;\n\n      const finalUrl = baseUrl.toString();\n\n      logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        resultUrl: finalUrl,\n        environment: 'production'\n      }, 'low');\n\n      return finalUrl;\n    } catch (error) {\n      logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n    }\n  }\n}\n","import { getSandbox, type Sandbox } from \"./sandbox\";\nimport {\n  logSecurityEvent,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\n\nexport interface SandboxEnv {\n  Sandbox: DurableObjectNamespace<Sandbox>;\n}\n\nexport interface RouteInfo {\n  port: number;\n  sandboxId: string;\n  path: string;\n}\n\nexport async function proxyToSandbox<E extends SandboxEnv>(\n  request: Request,\n  env: E\n): Promise<Response | null> {\n  try {\n    const url = new URL(request.url);\n    const routeInfo = extractSandboxRoute(url);\n\n    if (!routeInfo) {\n      return null; // Not a request to an exposed container port\n    }\n\n    const { sandboxId, port, path } = routeInfo;\n    const sandbox = getSandbox(env.Sandbox, sandboxId);\n\n    // Build proxy request with proper headers\n    let proxyUrl: string;\n\n    // Route based on the target port\n    if (port !== 3000) {\n      // Route directly to user's service on the specified port\n      proxyUrl = `http://localhost:${port}${path}${url.search}`;\n    } else {\n      // Port 3000 is our control plane - route normally\n      proxyUrl = `http://localhost:3000${path}${url.search}`;\n    }\n\n    const proxyRequest = new Request(proxyUrl, {\n      method: request.method,\n      headers: {\n        ...Object.fromEntries(request.headers),\n        'X-Original-URL': request.url,\n        'X-Forwarded-Host': url.hostname,\n        'X-Forwarded-Proto': url.protocol.replace(':', ''),\n        'X-Sandbox-Name': sandboxId, // Pass the friendly name\n      },\n      body: request.body,\n    });\n\n    return sandbox.containerFetch(proxyRequest, port);\n  } catch (error) {\n    console.error('[Sandbox] Proxy routing error:', error);\n    return new Response('Proxy routing error', { status: 500 });\n  }\n}\n\nfunction extractSandboxRoute(url: URL): RouteInfo | null {\n  // Parse subdomain pattern: port-sandboxId.domain\n  const subdomainMatch = url.hostname.match(/^(\\d{4,5})-([^.-][^.]*[^.-]|[^.-])\\.(.+)$/);\n\n  if (!subdomainMatch) {\n    // Log malformed subdomain attempts\n    if (url.hostname.includes('-') && url.hostname.includes('.')) {\n      logSecurityEvent('MALFORMED_SUBDOMAIN_ATTEMPT', {\n        hostname: url.hostname,\n        url: url.toString()\n      }, 'medium');\n    }\n    return null;\n  }\n\n  const portStr = subdomainMatch[1];\n  const sandboxId = subdomainMatch[2];\n  const domain = subdomainMatch[3];\n\n  const port = parseInt(portStr, 10);\n  if (!validatePort(port)) {\n    logSecurityEvent('INVALID_PORT_IN_SUBDOMAIN', {\n      port,\n      portStr,\n      sandboxId,\n      hostname: url.hostname,\n      url: url.toString()\n    }, 'high');\n    return null;\n  }\n\n  let sanitizedSandboxId: string;\n  try {\n    sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n  } catch (error) {\n    logSecurityEvent('INVALID_SANDBOX_ID_IN_SUBDOMAIN', {\n      sandboxId,\n      port,\n      hostname: url.hostname,\n      url: url.toString(),\n      error: error instanceof Error ? error.message : 'Unknown error'\n    }, 'high');\n    return null;\n  }\n\n  // DNS subdomain length limit is 63 characters\n  if (sandboxId.length > 63) {\n    logSecurityEvent('SANDBOX_ID_LENGTH_VIOLATION', {\n      sandboxId,\n      length: sandboxId.length,\n      port,\n      hostname: url.hostname\n    }, 'medium');\n    return null;\n  }\n\n  logSecurityEvent('SANDBOX_ROUTE_EXTRACTED', {\n    port,\n    sandboxId: sanitizedSandboxId,\n    domain,\n    path: url.pathname || \"/\",\n    hostname: url.hostname\n  }, 'low');\n\n  return {\n    port,\n    sandboxId: sanitizedSandboxId,\n    path: url.pathname || \"/\",\n  };\n}\n\nexport function isLocalhostPattern(hostname: string): boolean {\n  const hostPart = hostname.split(\":\")[0];\n  return (\n    hostPart === \"localhost\" ||\n    hostPart === \"127.0.0.1\" ||\n    hostPart === \"::1\" ||\n    hostPart === \"[::1]\" ||\n    hostPart === \"0.0.0.0\"\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,WAAW,oBAAoB;;;ACiBxC,eAAsB,eACpB,SACA,KAC0B;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,YAAY,oBAAoB,GAAG;AAEzC,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,WAAW,MAAM,KAAK,IAAI;AAClC,UAAM,UAAU,WAAW,IAAI,SAAS,SAAS;AAGjD,QAAI;AAGJ,QAAI,SAAS,KAAM;AAEjB,iBAAW,oBAAoB,IAAI,GAAG,IAAI,GAAG,IAAI,MAAM;AAAA,IACzD,OAAO;AAEL,iBAAW,wBAAwB,IAAI,GAAG,IAAI,MAAM;AAAA,IACtD;AAEA,UAAM,eAAe,IAAI,QAAQ,UAAU;AAAA,MACzC,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,YAAY,QAAQ,OAAO;AAAA,QACrC,kBAAkB,QAAQ;AAAA,QAC1B,oBAAoB,IAAI;AAAA,QACxB,qBAAqB,IAAI,SAAS,QAAQ,KAAK,EAAE;AAAA,QACjD,kBAAkB;AAAA;AAAA,MACpB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AAED,WAAO,QAAQ,eAAe,cAAc,IAAI;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,WAAO,IAAI,SAAS,uBAAuB,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5D;AACF;AAEA,SAAS,oBAAoB,KAA4B;AAEvD,QAAM,iBAAiB,IAAI,SAAS,MAAM,2CAA2C;AAErF,MAAI,CAAC,gBAAgB;AAEnB,QAAI,IAAI,SAAS,SAAS,GAAG,KAAK,IAAI,SAAS,SAAS,GAAG,GAAG;AAC5D,uBAAiB,+BAA+B;AAAA,QAC9C,UAAU,IAAI;AAAA,QACd,KAAK,IAAI,SAAS;AAAA,MACpB,GAAG,QAAQ;AAAA,IACb;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,eAAe,CAAC;AAChC,QAAM,YAAY,eAAe,CAAC;AAClC,QAAM,SAAS,eAAe,CAAC;AAE/B,QAAM,OAAO,SAAS,SAAS,EAAE;AACjC,MAAI,CAAC,aAAa,IAAI,GAAG;AACvB,qBAAiB,6BAA6B;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,IACpB,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,yBAAqB,kBAAkB,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,qBAAiB,mCAAmC;AAAA,MAClD;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,MAClB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,SAAS,IAAI;AACzB,qBAAiB,+BAA+B;AAAA,MAC9C;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB;AAAA,MACA,UAAU,IAAI;AAAA,IAChB,GAAG,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,mBAAiB,2BAA2B;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,MAAM,IAAI,YAAY;AAAA,IACtB,UAAU,IAAI;AAAA,EAChB,GAAG,KAAK;AAER,SAAO;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX,MAAM,IAAI,YAAY;AAAA,EACxB;AACF;AAEO,SAAS,mBAAmB,UAA2B;AAC5D,QAAM,WAAW,SAAS,MAAM,GAAG,EAAE,CAAC;AACtC,SACE,aAAa,eACb,aAAa,eACb,aAAa,SACb,aAAa,WACb,aAAa;AAEjB;;;ADxHO,SAAS,WAAW,IAAqC,IAAY;AAC1E,QAAM,OAAO,aAAa,IAAI,EAAE;AAGhC,OAAK,iBAAiB,EAAE;AAExB,SAAO;AACT;AAEO,IAAM,UAAN,cAAqC,UAAmC;AAAA,EAC7E,cAAc;AAAA;AAAA,EACd,aAAa;AAAA;AAAA,EACb;AAAA,EACQ,cAA6B;AAAA,EAErC,YAAY,KAAyB,KAAU;AAC7C,UAAM,KAAK,GAAG;AACd,SAAK,SAAS,IAAI,WAAW;AAAA,MAC3B,mBAAmB,CAAC,SAAS,UAAU,SAAS,SAAS,YAAY;AACnE,gBAAQ;AAAA,UACN,kCAAkC,OAAO,cAAc,OAAO,gBAAgB,QAAQ;AAAA,QACxF;AAAA,MACF;AAAA,MACA,gBAAgB,CAAC,YAAY;AAC3B,gBAAQ;AAAA,UACN,gCAAgC,OAAO;AAAA,QACzC;AAAA,MACF;AAAA,MACA,SAAS,CAAC,OAAO,aAAa;AAC5B,gBAAQ,MAAM,8BAA8B,KAAK,EAAE;AAAA,MACrD;AAAA,MACA,UAAU,CAAC,QAAQ,MAAM,aAAa;AACpC,gBAAQ,IAAI,gBAAgB,MAAM,KAAK,IAAI,EAAE;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAGD,SAAK,IAAI,sBAAsB,YAAY;AACzC,WAAK,cAAc,MAAM,KAAK,IAAI,QAAQ,IAAY,aAAa,KAAK;AAAA,IAC1E,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,eAAe,MAA6B;AAChD,QAAI,CAAC,KAAK,aAAa;AACrB,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,0CAA0C,IAAI,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAW,SAAgD;AAC/D,SAAK,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,QAAQ;AAC7C,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAAA,EAES,UAAU;AACjB,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AAAA,EAES,SAAS;AAChB,YAAQ,IAAI,gCAAgC;AAC5C,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,aAAa;AAAA,IAC3B;AAAA,EACF;AAAA,EAES,QAAQ,OAAgB;AAC/B,YAAQ,IAAI,kBAAkB,KAAK;AAAA,EACrC;AAAA;AAAA,EAGA,MAAe,MAAM,SAAqC;AACxD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAG/B,QAAI,CAAC,KAAK,eAAe,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAC9D,YAAM,OAAO,QAAQ,QAAQ,IAAI,gBAAgB;AACjD,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,kCAAkC,KAAK,WAAW,EAAE;AAAA,IAClE;AAGA,UAAM,OAAO,KAAK,cAAc,GAAG;AAGnC,WAAO,MAAM,KAAK,eAAe,SAAS,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAc,KAAkB;AAEtC,UAAM,aAAa,IAAI,SAAS,MAAM,iBAAiB;AACvD,QAAI,YAAY;AACd,aAAO,SAAS,WAAW,CAAC,CAAC;AAAA,IAC/B;AAIA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,SAAiB,SAA4C;AACtE,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAGzC,QAAI;AAEJ,QAAI;AAEF,UAAI,SAAS,QAAQ,SAAS;AAC5B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,UAAI;AAEJ,UAAI,SAAS,UAAU,SAAS,UAAU;AAExC,iBAAS,MAAM,KAAK,qBAAqB,SAAS,SAAS,WAAW,SAAS;AAAA,MACjF,OAAO;AAEL,cAAM,WAAW,MAAM,KAAK,OAAO;AAAA,UACjC;AAAA,UACA,SAAS;AAAA,QACX;AAEA,cAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,iBAAS,KAAK,+BAA+B,UAAU,UAAU,SAAS,SAAS;AAAA,MACrF;AAGA,UAAI,SAAS,YAAY;AACvB,gBAAQ,WAAW,MAAM;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AACA,YAAM;AAAA,IACR,UAAE;AACA,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBACZ,SACA,SACA,WACA,WACqB;AACrB,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,QAAQ,SAAS;AAChF,YAAM,EAAE,eAAe,IAAI,MAAM,OAAO,iBAAc;AAEtD,uBAAiB,SAAS,eAA4C,MAAM,GAAG;AAE7E,YAAI,QAAQ,QAAQ,SAAS;AAC3B,gBAAM,IAAI,MAAM,uBAAuB;AAAA,QACzC;AAEA,gBAAQ,MAAM,MAAM;AAAA,UAClB,KAAK;AAAA,UACL,KAAK;AACH,gBAAI,MAAM,MAAM;AAEd,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAC7C,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAG7C,kBAAI,QAAQ,UAAU;AACpB,wBAAQ,SAAS,MAAM,MAAM,MAAM,IAAI;AAAA,cACzC;AAAA,YACF;AACA;AAAA,UAEF,KAAK,YAAY;AAEf,kBAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,mBAAO,MAAM,UAAU;AAAA,cACrB,SAAS,MAAM,aAAa;AAAA,cAC5B,UAAU,MAAM,YAAY;AAAA,cAC5B;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW,QAAQ;AAAA,YACrB;AAAA,UACF;AAAA,UAEA,KAAK;AACH,kBAAM,IAAI,MAAM,MAAM,SAAS,0BAA0B;AAAA,QAC7D;AAAA,MACF;AAGA,YAAM,IAAI,MAAM,uCAAuC;AAAA,IAEzD,SAAS,OAAO;AACd,UAAI,QAAQ,QAAQ,SAAS;AAC3B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,+BACN,UACA,UACA,WACY;AACZ,WAAO;AAAA,MACL,SAAS,SAAS;AAAA,MAClB,UAAU,SAAS;AAAA,MACnB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,MACjB,SAAS,SAAS;AAAA,MAClB;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,aAAa,SAAiB,SAA4C;AAE9E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,aAAa,SAAS;AAAA,QACvD,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS;AAAA,QACpB,SAAS,SAAS;AAAA,QAClB,KAAK,SAAS;AAAA,QACd,KAAK,SAAS;AAAA,QACd,UAAU,SAAS;AAAA,QACnB,aAAa,SAAS;AAAA,MACxB,CAAC;AAED,YAAM,UAAU,SAAS;AACzB,YAAM,aAAsB;AAAA,QAC1B,IAAI,QAAQ;AAAA,QACZ,KAAK,QAAQ;AAAA,QACb,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACrC,SAAS;AAAA,QACT,UAAU;AAAA,QACV,WAAW,QAAQ;AAAA,QAEnB,MAAM,OAAsB;AAC1B,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,YAAoC;AACxC,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,UAAuD;AAC3D,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,MACF;AAGA,iBAAW,OAAO,OAAO,WAAoB;AAC3C,cAAM,KAAK,YAAY,QAAQ,IAAI,MAAM;AAAA,MAC3C;AAEA,iBAAW,YAAY,YAAY;AACjC,cAAM,UAAU,MAAM,KAAK,WAAW,QAAQ,EAAE;AAChD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAEA,iBAAW,UAAU,YAAY;AAC/B,cAAM,OAAO,MAAM,KAAK,eAAe,QAAQ,EAAE;AACjD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAGA,UAAI,SAAS,SAAS;AACpB,gBAAQ,QAAQ,UAAU;AAAA,MAC5B;AAEA,aAAO;AAAA,IAET,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,gBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,cAAc;AAEjD,WAAO,SAAS,UAAU,IAAI,kBAAgB;AAAA,MAC5C,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAAqC;AACpD,UAAM,WAAW,MAAM,KAAK,OAAO,WAAW,EAAE;AAChD,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,SAAS;AAC7B,WAAO;AAAA,MACL,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,IAAY,SAAiC;AAC7D,QAAI;AAEF,YAAM,KAAK,OAAO,YAAY,EAAE;AAAA,IAClC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,EAAE,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,iBAAiB;AACpD,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAM,4BAA6C;AAIjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,IAAyD;AAC5E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,eAAe,EAAE;AACpD,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,WAAW,SAAiB,SAA8D;AAE9F,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,SAAS,SAAS;AAGjF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAAkB,WAAmB,SAAyE;AAElH,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,kBAAkB,SAAS;AAG5D,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,YAAY,SAAS,QAAQ,QAAQ,QAAQ,SAAS;AAAA,EAC3E;AAAA,EAEA,MAAM,MACJ,MACA,UAAmC,CAAC,GACpC;AACA,WAAO,KAAK,OAAO,MAAM,MAAM,QAAQ,SAAS;AAAA,EAClD;AAAA,EAEA,MAAM,UACJ,MACA,SACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,UAAU,MAAM,SAAS,QAAQ,QAAQ;AAAA,EAC9D;AAAA,EAEA,MAAM,WAAW,MAAc;AAC7B,WAAO,KAAK,OAAO,WAAW,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,WACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,WAAW,SAAS,OAAO;AAAA,EAChD;AAAA,EAEA,MAAM,SACJ,YACA,iBACA;AACA,WAAO,KAAK,OAAO,SAAS,YAAY,eAAe;AAAA,EACzD;AAAA,EAEA,MAAM,SACJ,MACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ;AAAA,EACpD;AAAA,EAEA,MAAM,WAAW,MAAc,SAA8C;AAC3E,UAAM,KAAK,OAAO,WAAW,MAAM,SAAS,IAAI;AAGhD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,UAAM,MAAM,KAAK,oBAAoB,MAAM,KAAK,aAAa,QAAQ,QAAQ;AAE7E,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAc;AAC/B,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,UAAM,KAAK,OAAO,aAAa,IAAI;AAEnC,qBAAiB,kBAAkB;AAAA,MACjC;AAAA,IACF,GAAG,KAAK;AAAA,EACV;AAAA,EAEA,MAAM,gBAAgB,UAAkB;AACtC,UAAM,WAAW,MAAM,KAAK,OAAO,gBAAgB;AAGnD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,WAAO,SAAS,MAAM,IAAI,WAAS;AAAA,MACjC,KAAK,KAAK,oBAAoB,KAAK,MAAM,KAAK,aAAc,QAAQ;AAAA,MACpE,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAAA,EAGQ,oBAAoB,MAAc,WAAmB,UAA0B;AACrF,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,QACA;AAAA,QACA;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,QAAI;AACJ,QAAI;AACF,2BAAqB,kBAAkB,SAAS;AAAA,IAClD,SAAS,OAAO;AACd,uBAAiB,+BAA+B;AAAA,QAC9C;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM;AAAA,IACR;AAEA,UAAM,cAAc,mBAAmB,QAAQ;AAE/C,QAAI,aAAa;AAEf,YAAM,CAAC,MAAM,OAAO,IAAI,SAAS,MAAM,GAAG;AAC1C,YAAM,WAAW,WAAW;AAG5B,UAAI;AACF,cAAM,UAAU,IAAI,IAAI,UAAU,IAAI,IAAI,QAAQ,EAAE;AAEpD,cAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,IAAI;AAC3D,gBAAQ,WAAW;AAEnB,cAAM,WAAW,QAAQ,SAAS;AAElC,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf,GAAG,KAAK;AAER,eAAO;AAAA,MACT,SAAS,OAAO;AACd,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,GAAG,MAAM;AACT,cAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,MACxH;AAAA,IACF;AAGA,QAAI;AAEF,YAAM,WAAW;AACjB,YAAM,UAAU,IAAI,IAAI,GAAG,QAAQ,MAAM,QAAQ,EAAE;AAGnD,YAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,QAAQ;AAC/D,cAAQ,WAAW;AAEnB,YAAM,WAAW,QAAQ,SAAS;AAElC,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,WAAW;AAAA,QACX,aAAa;AAAA,MACf,GAAG,KAAK;AAER,aAAO;AAAA,IACT,SAAS,OAAO;AACd,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,IACxH;AAAA,EACF;AACF;","names":[]}

package/dist/{client-Da-mLX4p.d.ts → client-BAuciZya.d.ts}

@@ -3,6 +3,7 @@ import { ISandbox, ExecOptions, ExecResult, ProcessOptions, Process, StreamOptio
 
 declare function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string): DurableObjectStub<Sandbox<unknown>>;
 declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {
+    defaultPort: number;
     sleepAfter: string;
     client: HttpClient;
     private sandboxName;

package/dist/client.d.ts

@@ -1,3 +1,3 @@
-export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, H as HttpClient, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, W as WriteFileResponse } from './client-Da-mLX4p.js';
+export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, H as HttpClient, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, W as WriteFileResponse } from './client-BAuciZya.js';
 import './types.js';
 import '@cloudflare/containers';

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, S as Sandbox, W as WriteFileResponse, g as getSandbox } from './client-Da-mLX4p.js';
+export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, S as Sandbox, W as WriteFileResponse, g as getSandbox } from './client-BAuciZya.js';
 export { RouteInfo, SandboxEnv, proxyToSandbox } from './request-handler.js';
 export { asyncIterableToSSEStream, parseSSEStream, responseToAsyncIterable } from './sse-parser.js';
 export { ExecEvent, LogEvent } from './types.js';

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   Sandbox,
   getSandbox,
   proxyToSandbox
-} from "./chunk-ISFOIYQC.js";
+} from "./chunk-YZRU4CKO.js";
 import "./chunk-G4XT4SP7.js";
 import "./chunk-6UAWTJ5S.js";
 import {

package/dist/request-handler.d.ts

@@ -1,4 +1,4 @@
-import { S as Sandbox } from './client-Da-mLX4p.js';
+import { S as Sandbox } from './client-BAuciZya.js';
 import '@cloudflare/containers';
 import './types.js';
 

package/dist/request-handler.js

@@ -1,7 +1,7 @@
 import {
   isLocalhostPattern,
   proxyToSandbox
-} from "./chunk-ISFOIYQC.js";
+} from "./chunk-YZRU4CKO.js";
 import "./chunk-G4XT4SP7.js";
 import "./chunk-6UAWTJ5S.js";
 import "./chunk-6THNBO4S.js";

package/dist/sandbox.d.ts

@@ -1,3 +1,3 @@
-export { S as Sandbox, g as getSandbox } from './client-Da-mLX4p.js';
+export { S as Sandbox, g as getSandbox } from './client-BAuciZya.js';
 import '@cloudflare/containers';
 import './types.js';

package/dist/sandbox.js

@@ -1,7 +1,7 @@
 import {
   Sandbox,
   getSandbox
-} from "./chunk-ISFOIYQC.js";
+} from "./chunk-YZRU4CKO.js";
 import "./chunk-G4XT4SP7.js";
 import "./chunk-6UAWTJ5S.js";
 import "./chunk-6THNBO4S.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/sandbox",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "repository": {
     "type": "git",
     "url": "https://github.com/cloudflare/sandbox-sdk"
@@ -18,8 +18,9 @@
   ],
   "scripts": {
     "build": "rm -rf dist && tsup src/*.ts --outDir dist --dts --sourcemap --format esm",
-    "docker:build": "docker build -t ghostwriternr/cloudflare-sandbox:$npm_package_version .",
-    "docker:publish": "docker push docker.io/ghostwriternr/cloudflare-sandbox:$npm_package_version"
+    "docker:local": "docker build . -t cloudflare/sandbox-test:$npm_package_version",
+    "docker:publish": "docker buildx build --platform linux/amd64,linux/arm64 -t cloudflare/sandbox:$npm_package_version --push .",
+    "docker:publish:beta": "docker buildx build --platform linux/amd64,linux/arm64 -t cloudflare/sandbox:$npm_package_version-beta --push ."
   },
   "exports": {
     ".": {

package/src/sandbox.ts

@@ -31,6 +31,7 @@ export function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {
 }
 
 export class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {
+  defaultPort = 3000; // Default port for the container's Bun server
   sleepAfter = "3m"; // Sleep the sandbox if no requests are made in this timeframe
   client: HttpClient;
   private sandboxName: string | null = null;

package/dist/chunk-ISFOIYQC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sandbox.ts","../src/request-handler.ts"],"sourcesContent":["import { Container, getContainer } from \"@cloudflare/containers\";\nimport { HttpClient } from \"./client\";\nimport { isLocalhostPattern } from \"./request-handler\";\nimport {\n  logSecurityEvent,\n  SecurityError,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\nimport type {\n  ExecOptions,\n  ExecResult,\n  ISandbox,\n  Process,\n  ProcessOptions,\n  ProcessStatus,\n  StreamOptions\n} from \"./types\";\nimport {\n  ProcessNotFoundError,\n  SandboxError\n} from \"./types\";\n\nexport function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {\n  const stub = getContainer(ns, id);\n\n  // Store the name on first access\n  stub.setSandboxName?.(id);\n\n  return stub;\n}\n\nexport class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {\n  sleepAfter = \"3m\"; // Sleep the sandbox if no requests are made in this timeframe\n  client: HttpClient;\n  private sandboxName: string | null = null;\n\n  constructor(ctx: DurableObjectState, env: Env) {\n    super(ctx, env);\n    this.client = new HttpClient({\n      onCommandComplete: (success, exitCode, _stdout, _stderr, command) => {\n        console.log(\n          `[Container] Command completed: ${command}, Success: ${success}, Exit code: ${exitCode}`\n        );\n      },\n      onCommandStart: (command) => {\n        console.log(\n          `[Container] Command started: ${command}`\n        );\n      },\n      onError: (error, _command) => {\n        console.error(`[Container] Command error: ${error}`);\n      },\n      onOutput: (stream, data, _command) => {\n        console.log(`[Container] [${stream}] ${data}`);\n      },\n      port: 3000, // Control plane port\n      stub: this,\n    });\n\n    // Load the sandbox name from storage on initialization\n    this.ctx.blockConcurrencyWhile(async () => {\n      this.sandboxName = await this.ctx.storage.get<string>('sandboxName') || null;\n    });\n  }\n\n  // RPC method to set the sandbox name\n  async setSandboxName(name: string): Promise<void> {\n    if (!this.sandboxName) {\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name via RPC: ${name}`);\n    }\n  }\n\n  // RPC method to set environment variables\n  async setEnvVars(envVars: Record<string, string>): Promise<void> {\n    this.envVars = { ...this.envVars, ...envVars };\n    console.log(`[Sandbox] Updated environment variables`);\n  }\n\n  override onStart() {\n    console.log(\"Sandbox successfully started\");\n  }\n\n  override onStop() {\n    console.log(\"Sandbox successfully shut down\");\n    if (this.client) {\n      this.client.clearSession();\n    }\n  }\n\n  override onError(error: unknown) {\n    console.log(\"Sandbox error:\", error);\n  }\n\n  // Override fetch to route internal container requests to appropriate ports\n  override async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Capture and store the sandbox name from the header if present\n    if (!this.sandboxName && request.headers.has('X-Sandbox-Name')) {\n      const name = request.headers.get('X-Sandbox-Name')!;\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name: ${this.sandboxName}`);\n    }\n\n    // Determine which port to route to\n    const port = this.determinePort(url);\n\n    // Route to the appropriate port\n    return await this.containerFetch(request, port);\n  }\n\n  private determinePort(url: URL): number {\n    // Extract port from proxy requests (e.g., /proxy/8080/*)\n    const proxyMatch = url.pathname.match(/^\\/proxy\\/(\\d+)/);\n    if (proxyMatch) {\n      return parseInt(proxyMatch[1]);\n    }\n\n    // All other requests go to control plane on port 3000\n    // This includes /api/* endpoints and any other control requests\n    return 3000;\n  }\n\n  // Enhanced exec method - always returns ExecResult with optional streaming\n  // This replaces the old exec method to match ISandbox interface\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const startTime = Date.now();\n    const timestamp = new Date().toISOString();\n\n    // Handle timeout\n    let timeoutId: NodeJS.Timeout | undefined;\n\n    try {\n      // Handle cancellation\n      if (options?.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n\n      let result: ExecResult;\n\n      if (options?.stream && options?.onOutput) {\n        // Streaming with callbacks - we need to collect the final result\n        result = await this.executeWithStreaming(command, options, startTime, timestamp);\n      } else {\n        // Regular execution\n        const response = await this.client.execute(\n          command,\n          options?.sessionId\n        );\n\n        const duration = Date.now() - startTime;\n        result = this.mapExecuteResponseToExecResult(response, duration, options?.sessionId);\n      }\n\n      // Call completion callback if provided\n      if (options?.onComplete) {\n        options.onComplete(result);\n      }\n\n      return result;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n      throw error;\n    } finally {\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n    }\n  }\n\n  private async executeWithStreaming(\n    command: string,\n    options: ExecOptions,\n    startTime: number,\n    timestamp: string\n  ): Promise<ExecResult> {\n    let stdout = '';\n    let stderr = '';\n\n    try {\n      const stream = await this.client.executeCommandStream(command, options.sessionId);\n      const { parseSSEStream } = await import('./sse-parser');\n\n      for await (const event of parseSSEStream<import('./types').ExecEvent>(stream)) {\n        // Check for cancellation\n        if (options.signal?.aborted) {\n          throw new Error('Operation was aborted');\n        }\n\n        switch (event.type) {\n          case 'stdout':\n          case 'stderr':\n            if (event.data) {\n              // Update accumulated output\n              if (event.type === 'stdout') stdout += event.data;\n              if (event.type === 'stderr') stderr += event.data;\n\n              // Call user's callback\n              if (options.onOutput) {\n                options.onOutput(event.type, event.data);\n              }\n            }\n            break;\n\n          case 'complete': {\n            // Use result from complete event if available\n            const duration = Date.now() - startTime;\n            return event.result || {\n              success: event.exitCode === 0,\n              exitCode: event.exitCode || 0,\n              stdout,\n              stderr,\n              command,\n              duration,\n              timestamp,\n              sessionId: options.sessionId\n            };\n          }\n\n          case 'error':\n            throw new Error(event.error || 'Command execution failed');\n        }\n      }\n\n      // If we get here without a complete event, something went wrong\n      throw new Error('Stream ended without completion event');\n\n    } catch (error) {\n      if (options.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n      throw error;\n    }\n  }\n\n  private mapExecuteResponseToExecResult(\n    response: import('./client').ExecuteResponse,\n    duration: number,\n    sessionId?: string\n  ): ExecResult {\n    return {\n      success: response.success,\n      exitCode: response.exitCode,\n      stdout: response.stdout,\n      stderr: response.stderr,\n      command: response.command,\n      duration,\n      timestamp: response.timestamp,\n      sessionId\n    };\n  }\n\n\n  // Background process management\n  async startProcess(command: string, options?: ProcessOptions): Promise<Process> {\n    // Use the new HttpClient method to start the process\n    try {\n      const response = await this.client.startProcess(command, {\n        processId: options?.processId,\n        sessionId: options?.sessionId,\n        timeout: options?.timeout,\n        env: options?.env,\n        cwd: options?.cwd,\n        encoding: options?.encoding,\n        autoCleanup: options?.autoCleanup\n      });\n\n      const process = response.process;\n      const processObj: Process = {\n        id: process.id,\n        pid: process.pid,\n        command: process.command,\n        status: process.status as ProcessStatus,\n        startTime: new Date(process.startTime),\n        endTime: undefined,\n        exitCode: undefined,\n        sessionId: process.sessionId,\n\n        async kill(): Promise<void> {\n          throw new Error('Method will be replaced');\n        },\n        async getStatus(): Promise<ProcessStatus> {\n          throw new Error('Method will be replaced');\n        },\n        async getLogs(): Promise<{ stdout: string; stderr: string }> {\n          throw new Error('Method will be replaced');\n        }\n      };\n\n      // Bind context properly\n      processObj.kill = async (signal?: string) => {\n        await this.killProcess(process.id, signal);\n      };\n\n      processObj.getStatus = async () => {\n        const current = await this.getProcess(process.id);\n        return current?.status || 'error';\n      };\n\n      processObj.getLogs = async () => {\n        const logs = await this.getProcessLogs(process.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      };\n\n      // Call onStart callback if provided\n      if (options?.onStart) {\n        options.onStart(processObj);\n      }\n\n      return processObj;\n\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n\n      throw error;\n    }\n  }\n\n  async listProcesses(): Promise<Process[]> {\n    const response = await this.client.listProcesses();\n\n    return response.processes.map(processData => ({\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    }));\n  }\n\n  async getProcess(id: string): Promise<Process | null> {\n    const response = await this.client.getProcess(id);\n    if (!response.process) {\n      return null;\n    }\n\n    const processData = response.process;\n    return {\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    };\n  }\n\n  async killProcess(id: string, _signal?: string): Promise<void> {\n    try {\n      // Note: signal parameter is not currently supported by the HttpClient implementation\n      await this.client.killProcess(id);\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw new SandboxError(\n        `Failed to kill process ${id}: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'KILL_PROCESS_FAILED'\n      );\n    }\n  }\n\n  async killAllProcesses(): Promise<number> {\n    const response = await this.client.killAllProcesses();\n    return response.killedCount;\n  }\n\n  async cleanupCompletedProcesses(): Promise<number> {\n    // For now, this would need to be implemented as a container endpoint\n    // as we no longer maintain local process storage\n    // We'll return 0 as a placeholder until the container endpoint is added\n    return 0;\n  }\n\n  async getProcessLogs(id: string): Promise<{ stdout: string; stderr: string }> {\n    try {\n      const response = await this.client.getProcessLogs(id);\n      return {\n        stdout: response.stdout,\n        stderr: response.stderr\n      };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw error;\n    }\n  }\n\n\n  // Streaming methods - return ReadableStream for RPC compatibility\n  async execStream(command: string, options?: StreamOptions): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient (need to add this method)\n    const stream = await this.client.executeCommandStream(command, options?.sessionId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async streamProcessLogs(processId: string, options?: { signal?: AbortSignal }): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient\n    const stream = await this.client.streamProcessLogs(processId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async gitCheckout(\n    repoUrl: string,\n    options: { branch?: string; targetDir?: string }\n  ) {\n    return this.client.gitCheckout(repoUrl, options.branch, options.targetDir);\n  }\n\n  async mkdir(\n    path: string,\n    options: { recursive?: boolean } = {}\n  ) {\n    return this.client.mkdir(path, options.recursive);\n  }\n\n  async writeFile(\n    path: string,\n    content: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.writeFile(path, content, options.encoding);\n  }\n\n  async deleteFile(path: string) {\n    return this.client.deleteFile(path);\n  }\n\n  async renameFile(\n    oldPath: string,\n    newPath: string\n  ) {\n    return this.client.renameFile(oldPath, newPath);\n  }\n\n  async moveFile(\n    sourcePath: string,\n    destinationPath: string\n  ) {\n    return this.client.moveFile(sourcePath, destinationPath);\n  }\n\n  async readFile(\n    path: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.readFile(path, options.encoding);\n  }\n\n  async exposePort(port: number, options: { name?: string; hostname: string }) {\n    await this.client.exposePort(port, options?.name);\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    const url = this.constructPreviewUrl(port, this.sandboxName, options.hostname);\n\n    return {\n      url,\n      port,\n      name: options?.name,\n    };\n  }\n\n  async unexposePort(port: number) {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_UNEXPOSE', {\n        port\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    await this.client.unexposePort(port);\n\n    logSecurityEvent('PORT_UNEXPOSED', {\n      port\n    }, 'low');\n  }\n\n  async getExposedPorts(hostname: string) {\n    const response = await this.client.getExposedPorts();\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    return response.ports.map(port => ({\n      url: this.constructPreviewUrl(port.port, this.sandboxName!, hostname),\n      port: port.port,\n      name: port.name,\n      exposedAt: port.exposedAt,\n    }));\n  }\n\n\n  private constructPreviewUrl(port: number, sandboxId: string, hostname: string): string {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_REJECTED', {\n        port,\n        sandboxId,\n        hostname\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    let sanitizedSandboxId: string;\n    try {\n      sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n    } catch (error) {\n      logSecurityEvent('INVALID_SANDBOX_ID_REJECTED', {\n        sandboxId,\n        port,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw error;\n    }\n\n    const isLocalhost = isLocalhostPattern(hostname);\n\n    if (isLocalhost) {\n      // Unified subdomain approach for localhost (RFC 6761)\n      const [host, portStr] = hostname.split(':');\n      const mainPort = portStr || '80';\n\n      // Use URL constructor for safe URL building\n      try {\n        const baseUrl = new URL(`http://${host}:${mainPort}`);\n        // Construct subdomain safely\n        const subdomainHost = `${port}-${sanitizedSandboxId}.${host}`;\n        baseUrl.hostname = subdomainHost;\n\n        const finalUrl = baseUrl.toString();\n\n        logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          resultUrl: finalUrl,\n          environment: 'localhost'\n        }, 'low');\n\n        return finalUrl;\n      } catch (error) {\n        logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          error: error instanceof Error ? error.message : 'Unknown error'\n        }, 'high');\n        throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n      }\n    }\n\n    // Production subdomain logic - enforce HTTPS\n    try {\n      // Always use HTTPS for production (non-localhost)\n      const protocol = \"https\";\n      const baseUrl = new URL(`${protocol}://${hostname}`);\n\n      // Construct subdomain safely\n      const subdomainHost = `${port}-${sanitizedSandboxId}.${hostname}`;\n      baseUrl.hostname = subdomainHost;\n\n      const finalUrl = baseUrl.toString();\n\n      logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        resultUrl: finalUrl,\n        environment: 'production'\n      }, 'low');\n\n      return finalUrl;\n    } catch (error) {\n      logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n    }\n  }\n}\n","import { getSandbox, type Sandbox } from \"./sandbox\";\nimport {\n  logSecurityEvent,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\n\nexport interface SandboxEnv {\n  Sandbox: DurableObjectNamespace<Sandbox>;\n}\n\nexport interface RouteInfo {\n  port: number;\n  sandboxId: string;\n  path: string;\n}\n\nexport async function proxyToSandbox<E extends SandboxEnv>(\n  request: Request,\n  env: E\n): Promise<Response | null> {\n  try {\n    const url = new URL(request.url);\n    const routeInfo = extractSandboxRoute(url);\n\n    if (!routeInfo) {\n      return null; // Not a request to an exposed container port\n    }\n\n    const { sandboxId, port, path } = routeInfo;\n    const sandbox = getSandbox(env.Sandbox, sandboxId);\n\n    // Build proxy request with proper headers\n    let proxyUrl: string;\n\n    // Route based on the target port\n    if (port !== 3000) {\n      // Route directly to user's service on the specified port\n      proxyUrl = `http://localhost:${port}${path}${url.search}`;\n    } else {\n      // Port 3000 is our control plane - route normally\n      proxyUrl = `http://localhost:3000${path}${url.search}`;\n    }\n\n    const proxyRequest = new Request(proxyUrl, {\n      method: request.method,\n      headers: {\n        ...Object.fromEntries(request.headers),\n        'X-Original-URL': request.url,\n        'X-Forwarded-Host': url.hostname,\n        'X-Forwarded-Proto': url.protocol.replace(':', ''),\n        'X-Sandbox-Name': sandboxId, // Pass the friendly name\n      },\n      body: request.body,\n    });\n\n    return sandbox.containerFetch(proxyRequest, port);\n  } catch (error) {\n    console.error('[Sandbox] Proxy routing error:', error);\n    return new Response('Proxy routing error', { status: 500 });\n  }\n}\n\nfunction extractSandboxRoute(url: URL): RouteInfo | null {\n  // Parse subdomain pattern: port-sandboxId.domain\n  const subdomainMatch = url.hostname.match(/^(\\d{4,5})-([^.-][^.]*[^.-]|[^.-])\\.(.+)$/);\n\n  if (!subdomainMatch) {\n    // Log malformed subdomain attempts\n    if (url.hostname.includes('-') && url.hostname.includes('.')) {\n      logSecurityEvent('MALFORMED_SUBDOMAIN_ATTEMPT', {\n        hostname: url.hostname,\n        url: url.toString()\n      }, 'medium');\n    }\n    return null;\n  }\n\n  const portStr = subdomainMatch[1];\n  const sandboxId = subdomainMatch[2];\n  const domain = subdomainMatch[3];\n\n  const port = parseInt(portStr, 10);\n  if (!validatePort(port)) {\n    logSecurityEvent('INVALID_PORT_IN_SUBDOMAIN', {\n      port,\n      portStr,\n      sandboxId,\n      hostname: url.hostname,\n      url: url.toString()\n    }, 'high');\n    return null;\n  }\n\n  let sanitizedSandboxId: string;\n  try {\n    sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n  } catch (error) {\n    logSecurityEvent('INVALID_SANDBOX_ID_IN_SUBDOMAIN', {\n      sandboxId,\n      port,\n      hostname: url.hostname,\n      url: url.toString(),\n      error: error instanceof Error ? error.message : 'Unknown error'\n    }, 'high');\n    return null;\n  }\n\n  // DNS subdomain length limit is 63 characters\n  if (sandboxId.length > 63) {\n    logSecurityEvent('SANDBOX_ID_LENGTH_VIOLATION', {\n      sandboxId,\n      length: sandboxId.length,\n      port,\n      hostname: url.hostname\n    }, 'medium');\n    return null;\n  }\n\n  logSecurityEvent('SANDBOX_ROUTE_EXTRACTED', {\n    port,\n    sandboxId: sanitizedSandboxId,\n    domain,\n    path: url.pathname || \"/\",\n    hostname: url.hostname\n  }, 'low');\n\n  return {\n    port,\n    sandboxId: sanitizedSandboxId,\n    path: url.pathname || \"/\",\n  };\n}\n\nexport function isLocalhostPattern(hostname: string): boolean {\n  const hostPart = hostname.split(\":\")[0];\n  return (\n    hostPart === \"localhost\" ||\n    hostPart === \"127.0.0.1\" ||\n    hostPart === \"::1\" ||\n    hostPart === \"[::1]\" ||\n    hostPart === \"0.0.0.0\"\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,WAAW,oBAAoB;;;ACiBxC,eAAsB,eACpB,SACA,KAC0B;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,YAAY,oBAAoB,GAAG;AAEzC,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,WAAW,MAAM,KAAK,IAAI;AAClC,UAAM,UAAU,WAAW,IAAI,SAAS,SAAS;AAGjD,QAAI;AAGJ,QAAI,SAAS,KAAM;AAEjB,iBAAW,oBAAoB,IAAI,GAAG,IAAI,GAAG,IAAI,MAAM;AAAA,IACzD,OAAO;AAEL,iBAAW,wBAAwB,IAAI,GAAG,IAAI,MAAM;AAAA,IACtD;AAEA,UAAM,eAAe,IAAI,QAAQ,UAAU;AAAA,MACzC,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,YAAY,QAAQ,OAAO;AAAA,QACrC,kBAAkB,QAAQ;AAAA,QAC1B,oBAAoB,IAAI;AAAA,QACxB,qBAAqB,IAAI,SAAS,QAAQ,KAAK,EAAE;AAAA,QACjD,kBAAkB;AAAA;AAAA,MACpB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AAED,WAAO,QAAQ,eAAe,cAAc,IAAI;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,WAAO,IAAI,SAAS,uBAAuB,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5D;AACF;AAEA,SAAS,oBAAoB,KAA4B;AAEvD,QAAM,iBAAiB,IAAI,SAAS,MAAM,2CAA2C;AAErF,MAAI,CAAC,gBAAgB;AAEnB,QAAI,IAAI,SAAS,SAAS,GAAG,KAAK,IAAI,SAAS,SAAS,GAAG,GAAG;AAC5D,uBAAiB,+BAA+B;AAAA,QAC9C,UAAU,IAAI;AAAA,QACd,KAAK,IAAI,SAAS;AAAA,MACpB,GAAG,QAAQ;AAAA,IACb;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,eAAe,CAAC;AAChC,QAAM,YAAY,eAAe,CAAC;AAClC,QAAM,SAAS,eAAe,CAAC;AAE/B,QAAM,OAAO,SAAS,SAAS,EAAE;AACjC,MAAI,CAAC,aAAa,IAAI,GAAG;AACvB,qBAAiB,6BAA6B;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,IACpB,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,yBAAqB,kBAAkB,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,qBAAiB,mCAAmC;AAAA,MAClD;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,MAClB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,SAAS,IAAI;AACzB,qBAAiB,+BAA+B;AAAA,MAC9C;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB;AAAA,MACA,UAAU,IAAI;AAAA,IAChB,GAAG,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,mBAAiB,2BAA2B;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,MAAM,IAAI,YAAY;AAAA,IACtB,UAAU,IAAI;AAAA,EAChB,GAAG,KAAK;AAER,SAAO;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX,MAAM,IAAI,YAAY;AAAA,EACxB;AACF;AAEO,SAAS,mBAAmB,UAA2B;AAC5D,QAAM,WAAW,SAAS,MAAM,GAAG,EAAE,CAAC;AACtC,SACE,aAAa,eACb,aAAa,eACb,aAAa,SACb,aAAa,WACb,aAAa;AAEjB;;;ADxHO,SAAS,WAAW,IAAqC,IAAY;AAC1E,QAAM,OAAO,aAAa,IAAI,EAAE;AAGhC,OAAK,iBAAiB,EAAE;AAExB,SAAO;AACT;AAEO,IAAM,UAAN,cAAqC,UAAmC;AAAA,EAC7E,aAAa;AAAA;AAAA,EACb;AAAA,EACQ,cAA6B;AAAA,EAErC,YAAY,KAAyB,KAAU;AAC7C,UAAM,KAAK,GAAG;AACd,SAAK,SAAS,IAAI,WAAW;AAAA,MAC3B,mBAAmB,CAAC,SAAS,UAAU,SAAS,SAAS,YAAY;AACnE,gBAAQ;AAAA,UACN,kCAAkC,OAAO,cAAc,OAAO,gBAAgB,QAAQ;AAAA,QACxF;AAAA,MACF;AAAA,MACA,gBAAgB,CAAC,YAAY;AAC3B,gBAAQ;AAAA,UACN,gCAAgC,OAAO;AAAA,QACzC;AAAA,MACF;AAAA,MACA,SAAS,CAAC,OAAO,aAAa;AAC5B,gBAAQ,MAAM,8BAA8B,KAAK,EAAE;AAAA,MACrD;AAAA,MACA,UAAU,CAAC,QAAQ,MAAM,aAAa;AACpC,gBAAQ,IAAI,gBAAgB,MAAM,KAAK,IAAI,EAAE;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAGD,SAAK,IAAI,sBAAsB,YAAY;AACzC,WAAK,cAAc,MAAM,KAAK,IAAI,QAAQ,IAAY,aAAa,KAAK;AAAA,IAC1E,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,eAAe,MAA6B;AAChD,QAAI,CAAC,KAAK,aAAa;AACrB,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,0CAA0C,IAAI,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAW,SAAgD;AAC/D,SAAK,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,QAAQ;AAC7C,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAAA,EAES,UAAU;AACjB,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AAAA,EAES,SAAS;AAChB,YAAQ,IAAI,gCAAgC;AAC5C,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,aAAa;AAAA,IAC3B;AAAA,EACF;AAAA,EAES,QAAQ,OAAgB;AAC/B,YAAQ,IAAI,kBAAkB,KAAK;AAAA,EACrC;AAAA;AAAA,EAGA,MAAe,MAAM,SAAqC;AACxD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAG/B,QAAI,CAAC,KAAK,eAAe,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAC9D,YAAM,OAAO,QAAQ,QAAQ,IAAI,gBAAgB;AACjD,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,kCAAkC,KAAK,WAAW,EAAE;AAAA,IAClE;AAGA,UAAM,OAAO,KAAK,cAAc,GAAG;AAGnC,WAAO,MAAM,KAAK,eAAe,SAAS,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAc,KAAkB;AAEtC,UAAM,aAAa,IAAI,SAAS,MAAM,iBAAiB;AACvD,QAAI,YAAY;AACd,aAAO,SAAS,WAAW,CAAC,CAAC;AAAA,IAC/B;AAIA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,SAAiB,SAA4C;AACtE,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAGzC,QAAI;AAEJ,QAAI;AAEF,UAAI,SAAS,QAAQ,SAAS;AAC5B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,UAAI;AAEJ,UAAI,SAAS,UAAU,SAAS,UAAU;AAExC,iBAAS,MAAM,KAAK,qBAAqB,SAAS,SAAS,WAAW,SAAS;AAAA,MACjF,OAAO;AAEL,cAAM,WAAW,MAAM,KAAK,OAAO;AAAA,UACjC;AAAA,UACA,SAAS;AAAA,QACX;AAEA,cAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,iBAAS,KAAK,+BAA+B,UAAU,UAAU,SAAS,SAAS;AAAA,MACrF;AAGA,UAAI,SAAS,YAAY;AACvB,gBAAQ,WAAW,MAAM;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AACA,YAAM;AAAA,IACR,UAAE;AACA,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBACZ,SACA,SACA,WACA,WACqB;AACrB,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,QAAQ,SAAS;AAChF,YAAM,EAAE,eAAe,IAAI,MAAM,OAAO,iBAAc;AAEtD,uBAAiB,SAAS,eAA4C,MAAM,GAAG;AAE7E,YAAI,QAAQ,QAAQ,SAAS;AAC3B,gBAAM,IAAI,MAAM,uBAAuB;AAAA,QACzC;AAEA,gBAAQ,MAAM,MAAM;AAAA,UAClB,KAAK;AAAA,UACL,KAAK;AACH,gBAAI,MAAM,MAAM;AAEd,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAC7C,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAG7C,kBAAI,QAAQ,UAAU;AACpB,wBAAQ,SAAS,MAAM,MAAM,MAAM,IAAI;AAAA,cACzC;AAAA,YACF;AACA;AAAA,UAEF,KAAK,YAAY;AAEf,kBAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,mBAAO,MAAM,UAAU;AAAA,cACrB,SAAS,MAAM,aAAa;AAAA,cAC5B,UAAU,MAAM,YAAY;AAAA,cAC5B;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW,QAAQ;AAAA,YACrB;AAAA,UACF;AAAA,UAEA,KAAK;AACH,kBAAM,IAAI,MAAM,MAAM,SAAS,0BAA0B;AAAA,QAC7D;AAAA,MACF;AAGA,YAAM,IAAI,MAAM,uCAAuC;AAAA,IAEzD,SAAS,OAAO;AACd,UAAI,QAAQ,QAAQ,SAAS;AAC3B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,+BACN,UACA,UACA,WACY;AACZ,WAAO;AAAA,MACL,SAAS,SAAS;AAAA,MAClB,UAAU,SAAS;AAAA,MACnB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,MACjB,SAAS,SAAS;AAAA,MAClB;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,aAAa,SAAiB,SAA4C;AAE9E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,aAAa,SAAS;AAAA,QACvD,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS;AAAA,QACpB,SAAS,SAAS;AAAA,QAClB,KAAK,SAAS;AAAA,QACd,KAAK,SAAS;AAAA,QACd,UAAU,SAAS;AAAA,QACnB,aAAa,SAAS;AAAA,MACxB,CAAC;AAED,YAAM,UAAU,SAAS;AACzB,YAAM,aAAsB;AAAA,QAC1B,IAAI,QAAQ;AAAA,QACZ,KAAK,QAAQ;AAAA,QACb,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACrC,SAAS;AAAA,QACT,UAAU;AAAA,QACV,WAAW,QAAQ;AAAA,QAEnB,MAAM,OAAsB;AAC1B,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,YAAoC;AACxC,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,UAAuD;AAC3D,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,MACF;AAGA,iBAAW,OAAO,OAAO,WAAoB;AAC3C,cAAM,KAAK,YAAY,QAAQ,IAAI,MAAM;AAAA,MAC3C;AAEA,iBAAW,YAAY,YAAY;AACjC,cAAM,UAAU,MAAM,KAAK,WAAW,QAAQ,EAAE;AAChD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAEA,iBAAW,UAAU,YAAY;AAC/B,cAAM,OAAO,MAAM,KAAK,eAAe,QAAQ,EAAE;AACjD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAGA,UAAI,SAAS,SAAS;AACpB,gBAAQ,QAAQ,UAAU;AAAA,MAC5B;AAEA,aAAO;AAAA,IAET,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,gBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,cAAc;AAEjD,WAAO,SAAS,UAAU,IAAI,kBAAgB;AAAA,MAC5C,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAAqC;AACpD,UAAM,WAAW,MAAM,KAAK,OAAO,WAAW,EAAE;AAChD,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,SAAS;AAC7B,WAAO;AAAA,MACL,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,IAAY,SAAiC;AAC7D,QAAI;AAEF,YAAM,KAAK,OAAO,YAAY,EAAE;AAAA,IAClC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,EAAE,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,iBAAiB;AACpD,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAM,4BAA6C;AAIjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,IAAyD;AAC5E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,eAAe,EAAE;AACpD,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,WAAW,SAAiB,SAA8D;AAE9F,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,SAAS,SAAS;AAGjF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAAkB,WAAmB,SAAyE;AAElH,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,kBAAkB,SAAS;AAG5D,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,YAAY,SAAS,QAAQ,QAAQ,QAAQ,SAAS;AAAA,EAC3E;AAAA,EAEA,MAAM,MACJ,MACA,UAAmC,CAAC,GACpC;AACA,WAAO,KAAK,OAAO,MAAM,MAAM,QAAQ,SAAS;AAAA,EAClD;AAAA,EAEA,MAAM,UACJ,MACA,SACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,UAAU,MAAM,SAAS,QAAQ,QAAQ;AAAA,EAC9D;AAAA,EAEA,MAAM,WAAW,MAAc;AAC7B,WAAO,KAAK,OAAO,WAAW,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,WACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,WAAW,SAAS,OAAO;AAAA,EAChD;AAAA,EAEA,MAAM,SACJ,YACA,iBACA;AACA,WAAO,KAAK,OAAO,SAAS,YAAY,eAAe;AAAA,EACzD;AAAA,EAEA,MAAM,SACJ,MACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ;AAAA,EACpD;AAAA,EAEA,MAAM,WAAW,MAAc,SAA8C;AAC3E,UAAM,KAAK,OAAO,WAAW,MAAM,SAAS,IAAI;AAGhD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,UAAM,MAAM,KAAK,oBAAoB,MAAM,KAAK,aAAa,QAAQ,QAAQ;AAE7E,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAc;AAC/B,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,UAAM,KAAK,OAAO,aAAa,IAAI;AAEnC,qBAAiB,kBAAkB;AAAA,MACjC;AAAA,IACF,GAAG,KAAK;AAAA,EACV;AAAA,EAEA,MAAM,gBAAgB,UAAkB;AACtC,UAAM,WAAW,MAAM,KAAK,OAAO,gBAAgB;AAGnD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,WAAO,SAAS,MAAM,IAAI,WAAS;AAAA,MACjC,KAAK,KAAK,oBAAoB,KAAK,MAAM,KAAK,aAAc,QAAQ;AAAA,MACpE,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAAA,EAGQ,oBAAoB,MAAc,WAAmB,UAA0B;AACrF,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,QACA;AAAA,QACA;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,QAAI;AACJ,QAAI;AACF,2BAAqB,kBAAkB,SAAS;AAAA,IAClD,SAAS,OAAO;AACd,uBAAiB,+BAA+B;AAAA,QAC9C;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM;AAAA,IACR;AAEA,UAAM,cAAc,mBAAmB,QAAQ;AAE/C,QAAI,aAAa;AAEf,YAAM,CAAC,MAAM,OAAO,IAAI,SAAS,MAAM,GAAG;AAC1C,YAAM,WAAW,WAAW;AAG5B,UAAI;AACF,cAAM,UAAU,IAAI,IAAI,UAAU,IAAI,IAAI,QAAQ,EAAE;AAEpD,cAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,IAAI;AAC3D,gBAAQ,WAAW;AAEnB,cAAM,WAAW,QAAQ,SAAS;AAElC,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf,GAAG,KAAK;AAER,eAAO;AAAA,MACT,SAAS,OAAO;AACd,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,GAAG,MAAM;AACT,cAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,MACxH;AAAA,IACF;AAGA,QAAI;AAEF,YAAM,WAAW;AACjB,YAAM,UAAU,IAAI,IAAI,GAAG,QAAQ,MAAM,QAAQ,EAAE;AAGnD,YAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,QAAQ;AAC/D,cAAQ,WAAW;AAEnB,YAAM,WAAW,QAAQ,SAAS;AAElC,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,WAAW;AAAA,QACX,aAAa;AAAA,MACf,GAAG,KAAK;AAER,aAAO;AAAA,IACT,SAAS,OAAO;AACd,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,IACxH;AAAA,EACF;AACF;","names":[]}