@cloudflare/sandbox 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @cloudflare/sandbox
 
+## 0.1.3
+
+### Patch Changes
+
+- [#32](https://github.com/cloudflare/sandbox-sdk/pull/32) [`1a42464`](https://github.com/cloudflare/sandbox-sdk/commit/1a4246479369c5d0160705caf192aa1816540d52) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Bring back package README
+
+## 0.1.2
+
+### Patch Changes
+
+- [#30](https://github.com/cloudflare/sandbox-sdk/pull/30) [`30e5c25`](https://github.com/cloudflare/sandbox-sdk/commit/30e5c25cf7d4b07f9049724206c531e2d5d29d5c) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Remove actions timeout
+
+- [#29](https://github.com/cloudflare/sandbox-sdk/pull/29) [`d78508f`](https://github.com/cloudflare/sandbox-sdk/commit/d78508f7287a59e0423edd2999c2c83e9e34ccfd) Thanks [@ghostwriternr](https://github.com/ghostwriternr)! - Create multi-platform Docker image and switch to Cloudflare official repo
+
 ## 0.1.1
 
 ### Patch Changes

package/Dockerfile

@@ -1,4 +1,5 @@
 # Sandbox base image with development tools, Python, Node.js, and Bun
+FROM oven/bun:latest AS bun-source
 FROM ubuntu:22.04
 
 # Prevent interactive prompts during package installation
@@ -50,11 +51,9 @@ RUN apt-get update && apt-get install -y ca-certificates curl gnupg \
     && apt-get install -y nodejs \
     && rm -rf /var/lib/apt/lists/*
 
-# Install Bun using the official installation script
-RUN curl -fsSL https://bun.sh/install | bash \
-    && mv /root/.bun/bin/bun /usr/local/bin/bun \
-    && mv /root/.bun/bin/bunx /usr/local/bin/bunx \
-    && rm -rf /root/.bun
+# Install Bun from official image (avoids architecture compatibility issues)
+COPY --from=bun-source /usr/local/bin/bun /usr/local/bin/bun
+COPY --from=bun-source /usr/local/bin/bunx /usr/local/bin/bunx
 
 # Install global npm packages as root
 RUN npm install -g yarn pnpm

package/README.md

@@ -0,0 +1,562 @@
+<div align="center">
+  <h1>📦 Cloudflare Sandbox SDK</h1>
+  <h3><strong>Run sandboxed code environments on Cloudflare's edge network</strong></h3>
+  <p>
+    <a href="https://www.npmjs.com/package/@cloudflare/sandbox"><img src="https://img.shields.io/npm/v/@cloudflare/sandbox.svg" alt="npm version"></a>
+    <a href="https://github.com/cloudflare/sandbox-sdk"><img src="https://img.shields.io/badge/status-experimental-orange.svg" alt="status"></a>
+  </p>
+</div>
+
+<!-- START doctoc generated TOC please keep comment here to allow auto update -->
+<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->
+
+- [✨ Overview](#overview)
+- [🎯 Features](#features)
+- [🚀 Quick Start](#quick-start)
+  - [Installation](#installation)
+  - [Basic Setup](#basic-setup)
+- [📚 API Reference](#api-reference)
+  - [Core Methods](#core-methods)
+- [🌐 Port Forwarding](#port-forwarding)
+  - [Utility Methods](#utility-methods)
+- [💡 Examples](#examples)
+  - [Run a Node.js App](#run-a-nodejs-app)
+  - [Build and Test Code](#build-and-test-code)
+  - [Interactive Development Environment](#interactive-development-environment)
+  - [Expose Services with Preview URLs](#expose-services-with-preview-urls)
+- [🏗️ Architecture](#architecture)
+- [🛠️ Advanced Usage](#advanced-usage)
+  - [AsyncIterable Streaming Support](#asynciterable-streaming-support)
+  - [Session Management](#session-management)
+- [🔍 Debugging](#debugging)
+- [🚧 Known Limitations](#known-limitations)
+- [🤝 Contributing](#contributing)
+- [📄 License](#license)
+- [🙌 Acknowledgments](#acknowledgments)
+
+<!-- END doctoc generated TOC please keep comment here to allow auto update -->
+
+<h2 id="overview">✨ Overview</h2>
+
+The Cloudflare Sandbox SDK enables you to run isolated code environments directly on Cloudflare's edge network using Durable Objects and the Cloudflare Containers. Execute commands, manage files, run services, and expose them via public URLs - all within secure, sandboxed containers.
+
+<h2 id="features">🎯 Features</h2>
+
+- **🔒 Secure Isolation**: Each sandbox runs in its own container with full process isolation
+- **⚡ Edge-Native**: Runs on Cloudflare's global network for low latency worldwide
+- **📁 File System Access**: Read, write, and manage files within the sandbox
+- **🔧 Command Execution**: Run any command or process inside the container
+- **🌐 Preview URLs**: Expose services running in your sandbox via public URLs
+- **🔄 Git Integration**: Clone repositories directly into sandboxes
+- **🚀 Streaming Support**: Real-time output streaming for long-running commands
+- **🎮 Session Management**: Maintain state across multiple operations
+
+<h2 id="quick-start">🚀 Quick Start</h2>
+
+### Installation
+
+```bash
+npm install @cloudflare/sandbox
+```
+
+### Basic Setup
+
+1. **Create a Dockerfile** (temporary requirement, will be removed in future releases):
+
+```dockerfile
+FROM docker.io/cloudflare/sandbox:0.1.3
+
+EXPOSE 3000
+
+# Run the same command as the original image
+CMD ["bun", "index.ts"]
+```
+
+2. **Configure wrangler.json**:
+
+> **NOTE**: In an upcoming release, this step will be removed entirely and you can reference a single Docker image published by us directly in your wrangler configuration below.
+
+```jsonc
+{
+  // ...
+  "containers": [
+    {
+      "class_name": "Sandbox",
+      "image": "./Dockerfile",
+      "max_instances": 1
+    }
+  ],
+  "durable_objects": {
+    "bindings": [
+      {
+        "class_name": "Sandbox",
+        "name": "Sandbox"
+      }
+    ]
+  },
+  "migrations": [
+    {
+      "new_sqlite_classes": ["Sandbox"],
+      "tag": "v1"
+    }
+  ]
+}
+```
+
+3. **Create your Worker**:
+
+```typescript
+import { getSandbox } from "@cloudflare/sandbox";
+
+// Export the Sandbox class in your Worker
+export { Sandbox } from "@cloudflare/sandbox";
+
+export default {
+  async fetch(request: Request, env: Env) {
+    const sandbox = getSandbox(env.Sandbox, "my-sandbox");
+
+    // Execute a command
+    const result = await sandbox.exec("echo 'Hello from the edge!'");
+    return new Response(result.stdout);
+  },
+};
+```
+
+<h2 id="api-reference">📚 API Reference</h2>
+
+### Core Methods
+
+#### Command Execution
+
+**`exec(command, options?)`** - Enhanced command execution that always returns results
+
+```typescript
+// Simple execution
+const result = await sandbox.exec("npm install express");
+console.log(result.stdout, result.exitCode);
+
+// With streaming callbacks
+const result = await sandbox.exec("npm run build", {
+  stream: true,
+  onOutput: (stream, data) => console.log(`[${stream}] ${data}`)
+});
+```
+
+**`execStream(command, options?)`** - Dedicated streaming method returning SSE stream
+
+```typescript
+import { parseSSEStream, type ExecEvent } from '@cloudflare/sandbox';
+
+const stream = await sandbox.execStream("npm run test");
+for await (const event of parseSSEStream<ExecEvent>(stream)) {
+  switch (event.type) {
+    case 'stdout':
+      console.log(`Test output: ${event.data}`);
+      break;
+    case 'complete':
+      console.log(`Tests ${event.exitCode === 0 ? 'passed' : 'failed'}`);
+      break;
+  }
+}
+```
+
+**`startProcess(command, options?)`** - Start background processes with lifecycle management
+
+```typescript
+const process = await sandbox.startProcess("node server.js");
+console.log(`Started process ${process.id} with PID ${process.pid}`);
+
+// Monitor the process
+const logStream = await sandbox.streamProcessLogs(process.id);
+for await (const log of parseSSEStream<LogEvent>(logStream)) {
+  console.log(`Server: ${log.data}`);
+}
+```
+
+#### `writeFile(path, content, options?)`
+
+Write content to a file.
+
+```typescript
+await sandbox.writeFile("/app.js", "console.log('Hello!');");
+```
+
+#### `readFile(path, options?)`
+
+Read a file from the sandbox.
+
+```typescript
+const file = await sandbox.readFile("/package.json");
+console.log(file.content);
+```
+
+#### `gitCheckout(repoUrl, options?)`
+
+Clone a git repository.
+
+```typescript
+await sandbox.gitCheckout("https://github.com/user/repo", {
+  branch: "main",
+  targetDir: "my-project",
+});
+```
+
+#### `setEnvVars(envVars)`
+
+Set environment variables dynamically in the sandbox.
+
+> **Important**: This method must be called immediately after `getSandbox()` and before any other operations. Once a sandbox instance starts up, environment variables cannot be changed
+for that instance.
+
+```typescript
+const sandbox = getSandbox(env.Sandbox, "my-sandbox");
+
+// Set environment variables FIRST, before any other operations
+await sandbox.setEnvVars({
+  NODE_ENV: "production",
+  API_KEY: "your-api-key",
+  DATABASE_URL: "postgresql://localhost:5432/mydb"
+});
+
+// Now you can run commands - environment variables are available
+const result = await sandbox.exec("echo $NODE_ENV");
+console.log(result.stdout); // "production"
+```
+
+#### Process Management
+
+- `listProcesses()` - List all running processes
+- `getProcess(id)` - Get detailed process status
+- `killProcess(id, signal?)` - Terminate specific processes
+- `killAllProcesses()` - Kill all processes
+- `streamProcessLogs(id, options?)` - Stream logs from running processes
+- `getProcessLogs(id)` - Get accumulated process output
+
+#### File System Methods
+
+- `writeFile(path, content, options?)` - Write content to a file
+- `readFile(path, options?)` - Read a file from the sandbox
+- `mkdir(path, options?)` - Create a directory
+- `deleteFile(path)` - Delete a file
+- `renameFile(oldPath, newPath)` - Rename a file
+- `moveFile(sourcePath, destinationPath)` - Move a file
+- `gitCheckout(repoUrl, options?)` - Clone git repositories
+
+#### Network Methods
+
+- `exposePort(port, options?)` - Expose a port and get a public URL
+- `unexposePort(port)` - Remove port exposure
+- `getExposedPorts()` - List all exposed ports with their URLs
+
+<h2 id="port-forwarding">🌐 Port Forwarding</h2>
+
+The SDK automatically handles preview URL routing for exposed ports. Just add one line to your worker:
+
+```typescript
+import { proxyToSandbox, getSandbox } from "@cloudflare/sandbox";
+
+export default {
+  async fetch(request, env) {
+    // Route requests to exposed container ports via their preview URLs
+    const proxyResponse = await proxyToSandbox(request, env);
+    if (proxyResponse) return proxyResponse;
+
+    // Your custom routes here
+    // ...
+  },
+};
+```
+
+When you expose a port, the SDK returns a preview URL that automatically routes to your service:
+
+```typescript
+const preview = await sandbox.exposePort(3000);
+console.log(preview.url); // https://3000-sandbox-id.your-worker.dev
+```
+
+The SDK handles:
+
+- Subdomain routing (`3000-sandbox-id.domain.com`) for both production and local development
+- All localhost variants (127.0.0.1, ::1, etc.)
+- Request forwarding with proper headers
+
+> **Important for Local Development**: When developing locally with `wrangler dev`, you must explicitly expose ports in your Dockerfile using the `EXPOSE` instruction. This is **only required for local development** - in production, all container ports are automatically accessible.
+
+```dockerfile
+# In your Dockerfile (only needed for local dev)
+FROM oven/bun:latest
+
+# Expose the ports you'll be using
+EXPOSE 3000  # For a web server
+EXPOSE 8080  # For an API server
+EXPOSE 3001  # For any additional services
+
+# Your container setup...
+```
+
+Without the `EXPOSE` instruction in local development, you'll see this error:
+
+```
+connect(): Connection refused: container port not found. Make sure you exposed the port in your container definition.
+```
+
+For more details, see the [Cloudflare Containers local development guide](https://developers.cloudflare.com/containers/local-dev/#exposing-ports).
+
+### Utility Methods
+
+- `ping()` - Health check for the sandbox
+- `containerFetch(request)` - Direct container communication
+
+<h2 id="examples">💡 Examples</h2>
+
+### Run a Node.js App
+
+```typescript
+const sandbox = getSandbox(env.Sandbox, "node-app");
+
+// Write a simple Express server
+await sandbox.writeFile(
+  "/app.js",
+  `
+  const express = require('express');
+  const app = express();
+
+  app.get('/', (req, res) => {
+    res.json({ message: 'Hello from Cloudflare!' });
+  });
+
+  app.listen(3000);
+`
+);
+
+// Install dependencies and start the server
+await sandbox.exec("npm init -y");
+await sandbox.exec("npm install express");
+const server = await sandbox.startProcess("node app.js");
+
+// Expose it to the internet
+const preview = await sandbox.exposePort(3000);
+console.log(`API available at: ${preview.url}`);
+```
+
+### Build and Test Code
+
+```typescript
+const sandbox = getSandbox(env.Sandbox, "test-env");
+
+// Clone a repository
+await sandbox.gitCheckout("https://github.com/user/project");
+
+// Run tests
+const testResult = await sandbox.exec("npm test");
+
+// Build the project
+const buildResult = await sandbox.exec("npm run build");
+
+return new Response(
+  JSON.stringify({
+    tests: testResult.exitCode === 0 ? "passed" : "failed",
+    build: buildResult.exitCode === 0 ? "success" : "failed",
+    output: testResult.stdout,
+  })
+);
+```
+
+### Interactive Development Environment
+
+```typescript
+// Create a development sandbox with hot reload
+const sandbox = getSandbox(env.Sandbox, "dev-env");
+
+// Set up the project
+await sandbox.gitCheckout("https://github.com/user/my-app");
+await sandbox.exec("npm install");
+
+// Start dev server
+const devServer = await sandbox.startProcess("npm run dev");
+
+// Expose the dev server
+const preview = await sandbox.exposePort(3000, { name: "dev-server" });
+
+// Make changes and see them live!
+await sandbox.writeFile("/src/App.jsx", updatedCode);
+```
+
+### Expose Services with Preview URLs
+
+```typescript
+// Create and start a web server
+await sandbox.writeFile(
+  "/server.js",
+  `Bun.serve({
+    port: 8080,
+    fetch(req) {
+      return new Response("Hello from sandbox!");
+    }
+  });`
+);
+
+const server = await sandbox.startProcess("bun run /server.js");
+
+// Expose the port - returns a public URL
+const preview = await sandbox.exposePort(8080);
+console.log(`Service available at: ${preview.url}`);
+
+// Note: Your Worker needs to handle preview URL routing.
+// See the example in examples/basic/src/index.ts for the routing implementation.
+```
+
+<h2 id="architecture">🏗️ Architecture</h2>
+
+The SDK leverages Cloudflare's infrastructure:
+
+- **Durable Objects**: Manages sandbox lifecycle and state
+- **Containers**: Provides isolated execution environments
+- **Workers**: Handles HTTP routing and API interface
+- **Edge Network**: Enables global distribution and low latency
+
+<h2 id="advanced-usage">🛠️ Advanced Usage</h2>
+
+### AsyncIterable Streaming Support
+
+The SDK provides powerful streaming capabilities with typed AsyncIterable support:
+
+```typescript
+import { parseSSEStream, type ExecEvent } from '@cloudflare/sandbox';
+
+// Stream command execution
+const stream = await sandbox.execStream('npm run build');
+for await (const event of parseSSEStream<ExecEvent>(stream)) {
+  switch (event.type) {
+    case 'start':
+      console.log(`Build started: ${event.command}`);
+      break;
+    case 'stdout':
+      console.log(`Build: ${event.data}`);
+      break;
+    case 'complete':
+      console.log(`Exit code: ${event.exitCode}`);
+      break;
+    case 'error':
+      console.error(`Error: ${event.error}`);
+      break;
+  }
+}
+```
+
+#### Streaming Utilities
+
+The SDK exports utilities for working with Server-Sent Event streams:
+
+- **`parseSSEStream<T>(stream)`** - Convert ReadableStream to typed AsyncIterable
+- **`responseToAsyncIterable<T>(response)`** - Convert SSE Response to AsyncIterable
+- **`asyncIterableToSSEStream<T>(iterable)`** - Convert AsyncIterable back to SSE stream
+
+#### Advanced Streaming Examples
+
+**CI/CD Build System:**
+```typescript
+export async function runBuild(env: Env, buildId: string) {
+  const sandbox = getSandbox(env.SANDBOX, buildId);
+  const stream = await sandbox.execStream('npm run build');
+
+  for await (const event of parseSSEStream<ExecEvent>(stream)) {
+    switch (event.type) {
+      case 'start':
+        await env.BUILDS.put(buildId, { status: 'running' });
+        break;
+      case 'complete':
+        await env.BUILDS.put(buildId, {
+          status: event.exitCode === 0 ? 'success' : 'failed',
+          exitCode: event.exitCode
+        });
+        break;
+    }
+  }
+}
+```
+
+**System Monitoring:**
+```typescript
+const monitor = await sandbox.startProcess('tail -f /var/log/system.log');
+const logStream = await sandbox.streamProcessLogs(monitor.id);
+
+for await (const log of parseSSEStream<LogEvent>(logStream)) {
+  if (log.type === 'stdout' && log.data.includes('ERROR')) {
+    await env.ALERTS.send({
+      severity: 'high',
+      message: log.data,
+      timestamp: log.timestamp
+    });
+  }
+}
+```
+
+### Session Management
+
+Maintain context across commands:
+
+```typescript
+const sessionId = crypto.randomUUID();
+
+// Commands in the same session share working directory
+await sandbox.exec("cd /app", { sessionId });
+await sandbox.exec("npm install", { sessionId });
+const app = await sandbox.startProcess("npm start", { sessionId });
+```
+
+<h2 id="debugging">🔍 Debugging</h2>
+
+Enable verbose logging:
+
+```typescript
+const sandbox = getSandbox(env.Sandbox, "debug-sandbox");
+sandbox.client.onCommandStart = (cmd, args) =>
+  console.log(`Starting: ${cmd} ${args.join(" ")}`);
+sandbox.client.onOutput = (stream, data) => console.log(`[${stream}] ${data}`);
+sandbox.client.onCommandComplete = (success, code) =>
+  console.log(`Completed: ${success} (${code})`);
+```
+
+<h2 id="known-limitations">🚧 Known Limitations</h2>
+
+- Maximum container runtime is limited by Durable Object constraints
+- WebSocket support for preview URLs coming soon
+- Some system calls may be restricted in the container environment
+
+<h2 id="contributing">🤝 Contributing</h2>
+
+We welcome contributions! Please see our [Contributing Guide](CONTRIBUTING.md) for details.
+
+```bash
+# Clone the repo
+git clone https://github.com/cloudflare/sandbox-sdk
+cd sandbox-sdk
+
+# Install dependencies
+npm install
+
+# Run tests
+npm test
+
+# Build the project
+npm run build
+```
+
+<h2 id="license">📄 License</h2>
+
+[MIT License](LICENSE)
+
+<h2 id="acknowledgments">🙌 Acknowledgments</h2>
+
+Built with ❤️ by the Cloudflare team. Special thanks to all early adopters and contributors.
+
+---
+
+<div align="center">
+  <p>
+    <a href="https://github.com/cloudflare/sandbox-sdk/issues">Issues</a> •
+    <a href="https://discord.gg/cloudflaredev">Discord</a> •
+    <a href="https://twitter.com/CloudflareDev">Twitter</a>
+  </p>
+</div>

package/dist/{chunk-ISFOIYQC.js → chunk-YZRU4CKO.js}

@@ -121,6 +121,8 @@ function getSandbox(ns, id) {
   return stub;
 }
 var Sandbox = class extends Container {
+  defaultPort = 3e3;
+  // Default port for the container's Bun server
   sleepAfter = "3m";
   // Sleep the sandbox if no requests are made in this timeframe
   client;
@@ -582,4 +584,4 @@ export {
   proxyToSandbox,
   isLocalhostPattern
 };
-//# sourceMappingURL=chunk-ISFOIYQC.js.map
+//# sourceMappingURL=chunk-YZRU4CKO.js.map

package/dist/chunk-YZRU4CKO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox.ts","../src/request-handler.ts"],"sourcesContent":["import { Container, getContainer } from \"@cloudflare/containers\";\nimport { HttpClient } from \"./client\";\nimport { isLocalhostPattern } from \"./request-handler\";\nimport {\n  logSecurityEvent,\n  SecurityError,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\nimport type {\n  ExecOptions,\n  ExecResult,\n  ISandbox,\n  Process,\n  ProcessOptions,\n  ProcessStatus,\n  StreamOptions\n} from \"./types\";\nimport {\n  ProcessNotFoundError,\n  SandboxError\n} from \"./types\";\n\nexport function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {\n  const stub = getContainer(ns, id);\n\n  // Store the name on first access\n  stub.setSandboxName?.(id);\n\n  return stub;\n}\n\nexport class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {\n  defaultPort = 3000; // Default port for the container's Bun server\n  sleepAfter = \"3m\"; // Sleep the sandbox if no requests are made in this timeframe\n  client: HttpClient;\n  private sandboxName: string | null = null;\n\n  constructor(ctx: DurableObjectState, env: Env) {\n    super(ctx, env);\n    this.client = new HttpClient({\n      onCommandComplete: (success, exitCode, _stdout, _stderr, command) => {\n        console.log(\n          `[Container] Command completed: ${command}, Success: ${success}, Exit code: ${exitCode}`\n        );\n      },\n      onCommandStart: (command) => {\n        console.log(\n          `[Container] Command started: ${command}`\n        );\n      },\n      onError: (error, _command) => {\n        console.error(`[Container] Command error: ${error}`);\n      },\n      onOutput: (stream, data, _command) => {\n        console.log(`[Container] [${stream}] ${data}`);\n      },\n      port: 3000, // Control plane port\n      stub: this,\n    });\n\n    // Load the sandbox name from storage on initialization\n    this.ctx.blockConcurrencyWhile(async () => {\n      this.sandboxName = await this.ctx.storage.get<string>('sandboxName') || null;\n    });\n  }\n\n  // RPC method to set the sandbox name\n  async setSandboxName(name: string): Promise<void> {\n    if (!this.sandboxName) {\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name via RPC: ${name}`);\n    }\n  }\n\n  // RPC method to set environment variables\n  async setEnvVars(envVars: Record<string, string>): Promise<void> {\n    this.envVars = { ...this.envVars, ...envVars };\n    console.log(`[Sandbox] Updated environment variables`);\n  }\n\n  override onStart() {\n    console.log(\"Sandbox successfully started\");\n  }\n\n  override onStop() {\n    console.log(\"Sandbox successfully shut down\");\n    if (this.client) {\n      this.client.clearSession();\n    }\n  }\n\n  override onError(error: unknown) {\n    console.log(\"Sandbox error:\", error);\n  }\n\n  // Override fetch to route internal container requests to appropriate ports\n  override async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Capture and store the sandbox name from the header if present\n    if (!this.sandboxName && request.headers.has('X-Sandbox-Name')) {\n      const name = request.headers.get('X-Sandbox-Name')!;\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name: ${this.sandboxName}`);\n    }\n\n    // Determine which port to route to\n    const port = this.determinePort(url);\n\n    // Route to the appropriate port\n    return await this.containerFetch(request, port);\n  }\n\n  private determinePort(url: URL): number {\n    // Extract port from proxy requests (e.g., /proxy/8080/*)\n    const proxyMatch = url.pathname.match(/^\\/proxy\\/(\\d+)/);\n    if (proxyMatch) {\n      return parseInt(proxyMatch[1]);\n    }\n\n    // All other requests go to control plane on port 3000\n    // This includes /api/* endpoints and any other control requests\n    return 3000;\n  }\n\n  // Enhanced exec method - always returns ExecResult with optional streaming\n  // This replaces the old exec method to match ISandbox interface\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const startTime = Date.now();\n    const timestamp = new Date().toISOString();\n\n    // Handle timeout\n    let timeoutId: NodeJS.Timeout | undefined;\n\n    try {\n      // Handle cancellation\n      if (options?.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n\n      let result: ExecResult;\n\n      if (options?.stream && options?.onOutput) {\n        // Streaming with callbacks - we need to collect the final result\n        result = await this.executeWithStreaming(command, options, startTime, timestamp);\n      } else {\n        // Regular execution\n        const response = await this.client.execute(\n          command,\n          options?.sessionId\n        );\n\n        const duration = Date.now() - startTime;\n        result = this.mapExecuteResponseToExecResult(response, duration, options?.sessionId);\n      }\n\n      // Call completion callback if provided\n      if (options?.onComplete) {\n        options.onComplete(result);\n      }\n\n      return result;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n      throw error;\n    } finally {\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n    }\n  }\n\n  private async executeWithStreaming(\n    command: string,\n    options: ExecOptions,\n    startTime: number,\n    timestamp: string\n  ): Promise<ExecResult> {\n    let stdout = '';\n    let stderr = '';\n\n    try {\n      const stream = await this.client.executeCommandStream(command, options.sessionId);\n      const { parseSSEStream } = await import('./sse-parser');\n\n      for await (const event of parseSSEStream<import('./types').ExecEvent>(stream)) {\n        // Check for cancellation\n        if (options.signal?.aborted) {\n          throw new Error('Operation was aborted');\n        }\n\n        switch (event.type) {\n          case 'stdout':\n          case 'stderr':\n            if (event.data) {\n              // Update accumulated output\n              if (event.type === 'stdout') stdout += event.data;\n              if (event.type === 'stderr') stderr += event.data;\n\n              // Call user's callback\n              if (options.onOutput) {\n                options.onOutput(event.type, event.data);\n              }\n            }\n            break;\n\n          case 'complete': {\n            // Use result from complete event if available\n            const duration = Date.now() - startTime;\n            return event.result || {\n              success: event.exitCode === 0,\n              exitCode: event.exitCode || 0,\n              stdout,\n              stderr,\n              command,\n              duration,\n              timestamp,\n              sessionId: options.sessionId\n            };\n          }\n\n          case 'error':\n            throw new Error(event.error || 'Command execution failed');\n        }\n      }\n\n      // If we get here without a complete event, something went wrong\n      throw new Error('Stream ended without completion event');\n\n    } catch (error) {\n      if (options.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n      throw error;\n    }\n  }\n\n  private mapExecuteResponseToExecResult(\n    response: import('./client').ExecuteResponse,\n    duration: number,\n    sessionId?: string\n  ): ExecResult {\n    return {\n      success: response.success,\n      exitCode: response.exitCode,\n      stdout: response.stdout,\n      stderr: response.stderr,\n      command: response.command,\n      duration,\n      timestamp: response.timestamp,\n      sessionId\n    };\n  }\n\n\n  // Background process management\n  async startProcess(command: string, options?: ProcessOptions): Promise<Process> {\n    // Use the new HttpClient method to start the process\n    try {\n      const response = await this.client.startProcess(command, {\n        processId: options?.processId,\n        sessionId: options?.sessionId,\n        timeout: options?.timeout,\n        env: options?.env,\n        cwd: options?.cwd,\n        encoding: options?.encoding,\n        autoCleanup: options?.autoCleanup\n      });\n\n      const process = response.process;\n      const processObj: Process = {\n        id: process.id,\n        pid: process.pid,\n        command: process.command,\n        status: process.status as ProcessStatus,\n        startTime: new Date(process.startTime),\n        endTime: undefined,\n        exitCode: undefined,\n        sessionId: process.sessionId,\n\n        async kill(): Promise<void> {\n          throw new Error('Method will be replaced');\n        },\n        async getStatus(): Promise<ProcessStatus> {\n          throw new Error('Method will be replaced');\n        },\n        async getLogs(): Promise<{ stdout: string; stderr: string }> {\n          throw new Error('Method will be replaced');\n        }\n      };\n\n      // Bind context properly\n      processObj.kill = async (signal?: string) => {\n        await this.killProcess(process.id, signal);\n      };\n\n      processObj.getStatus = async () => {\n        const current = await this.getProcess(process.id);\n        return current?.status || 'error';\n      };\n\n      processObj.getLogs = async () => {\n        const logs = await this.getProcessLogs(process.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      };\n\n      // Call onStart callback if provided\n      if (options?.onStart) {\n        options.onStart(processObj);\n      }\n\n      return processObj;\n\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n\n      throw error;\n    }\n  }\n\n  async listProcesses(): Promise<Process[]> {\n    const response = await this.client.listProcesses();\n\n    return response.processes.map(processData => ({\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    }));\n  }\n\n  async getProcess(id: string): Promise<Process | null> {\n    const response = await this.client.getProcess(id);\n    if (!response.process) {\n      return null;\n    }\n\n    const processData = response.process;\n    return {\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    };\n  }\n\n  async killProcess(id: string, _signal?: string): Promise<void> {\n    try {\n      // Note: signal parameter is not currently supported by the HttpClient implementation\n      await this.client.killProcess(id);\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw new SandboxError(\n        `Failed to kill process ${id}: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'KILL_PROCESS_FAILED'\n      );\n    }\n  }\n\n  async killAllProcesses(): Promise<number> {\n    const response = await this.client.killAllProcesses();\n    return response.killedCount;\n  }\n\n  async cleanupCompletedProcesses(): Promise<number> {\n    // For now, this would need to be implemented as a container endpoint\n    // as we no longer maintain local process storage\n    // We'll return 0 as a placeholder until the container endpoint is added\n    return 0;\n  }\n\n  async getProcessLogs(id: string): Promise<{ stdout: string; stderr: string }> {\n    try {\n      const response = await this.client.getProcessLogs(id);\n      return {\n        stdout: response.stdout,\n        stderr: response.stderr\n      };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw error;\n    }\n  }\n\n\n  // Streaming methods - return ReadableStream for RPC compatibility\n  async execStream(command: string, options?: StreamOptions): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient (need to add this method)\n    const stream = await this.client.executeCommandStream(command, options?.sessionId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async streamProcessLogs(processId: string, options?: { signal?: AbortSignal }): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient\n    const stream = await this.client.streamProcessLogs(processId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async gitCheckout(\n    repoUrl: string,\n    options: { branch?: string; targetDir?: string }\n  ) {\n    return this.client.gitCheckout(repoUrl, options.branch, options.targetDir);\n  }\n\n  async mkdir(\n    path: string,\n    options: { recursive?: boolean } = {}\n  ) {\n    return this.client.mkdir(path, options.recursive);\n  }\n\n  async writeFile(\n    path: string,\n    content: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.writeFile(path, content, options.encoding);\n  }\n\n  async deleteFile(path: string) {\n    return this.client.deleteFile(path);\n  }\n\n  async renameFile(\n    oldPath: string,\n    newPath: string\n  ) {\n    return this.client.renameFile(oldPath, newPath);\n  }\n\n  async moveFile(\n    sourcePath: string,\n    destinationPath: string\n  ) {\n    return this.client.moveFile(sourcePath, destinationPath);\n  }\n\n  async readFile(\n    path: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.readFile(path, options.encoding);\n  }\n\n  async exposePort(port: number, options: { name?: string; hostname: string }) {\n    await this.client.exposePort(port, options?.name);\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    const url = this.constructPreviewUrl(port, this.sandboxName, options.hostname);\n\n    return {\n      url,\n      port,\n      name: options?.name,\n    };\n  }\n\n  async unexposePort(port: number) {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_UNEXPOSE', {\n        port\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    await this.client.unexposePort(port);\n\n    logSecurityEvent('PORT_UNEXPOSED', {\n      port\n    }, 'low');\n  }\n\n  async getExposedPorts(hostname: string) {\n    const response = await this.client.getExposedPorts();\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    return response.ports.map(port => ({\n      url: this.constructPreviewUrl(port.port, this.sandboxName!, hostname),\n      port: port.port,\n      name: port.name,\n      exposedAt: port.exposedAt,\n    }));\n  }\n\n\n  private constructPreviewUrl(port: number, sandboxId: string, hostname: string): string {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_REJECTED', {\n        port,\n        sandboxId,\n        hostname\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    let sanitizedSandboxId: string;\n    try {\n      sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n    } catch (error) {\n      logSecurityEvent('INVALID_SANDBOX_ID_REJECTED', {\n        sandboxId,\n        port,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw error;\n    }\n\n    const isLocalhost = isLocalhostPattern(hostname);\n\n    if (isLocalhost) {\n      // Unified subdomain approach for localhost (RFC 6761)\n      const [host, portStr] = hostname.split(':');\n      const mainPort = portStr || '80';\n\n      // Use URL constructor for safe URL building\n      try {\n        const baseUrl = new URL(`http://${host}:${mainPort}`);\n        // Construct subdomain safely\n        const subdomainHost = `${port}-${sanitizedSandboxId}.${host}`;\n        baseUrl.hostname = subdomainHost;\n\n        const finalUrl = baseUrl.toString();\n\n        logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          resultUrl: finalUrl,\n          environment: 'localhost'\n        }, 'low');\n\n        return finalUrl;\n      } catch (error) {\n        logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          error: error instanceof Error ? error.message : 'Unknown error'\n        }, 'high');\n        throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n      }\n    }\n\n    // Production subdomain logic - enforce HTTPS\n    try {\n      // Always use HTTPS for production (non-localhost)\n      const protocol = \"https\";\n      const baseUrl = new URL(`${protocol}://${hostname}`);\n\n      // Construct subdomain safely\n      const subdomainHost = `${port}-${sanitizedSandboxId}.${hostname}`;\n      baseUrl.hostname = subdomainHost;\n\n      const finalUrl = baseUrl.toString();\n\n      logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        resultUrl: finalUrl,\n        environment: 'production'\n      }, 'low');\n\n      return finalUrl;\n    } catch (error) {\n      logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n    }\n  }\n}\n","import { getSandbox, type Sandbox } from \"./sandbox\";\nimport {\n  logSecurityEvent,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\n\nexport interface SandboxEnv {\n  Sandbox: DurableObjectNamespace<Sandbox>;\n}\n\nexport interface RouteInfo {\n  port: number;\n  sandboxId: string;\n  path: string;\n}\n\nexport async function proxyToSandbox<E extends SandboxEnv>(\n  request: Request,\n  env: E\n): Promise<Response | null> {\n  try {\n    const url = new URL(request.url);\n    const routeInfo = extractSandboxRoute(url);\n\n    if (!routeInfo) {\n      return null; // Not a request to an exposed container port\n    }\n\n    const { sandboxId, port, path } = routeInfo;\n    const sandbox = getSandbox(env.Sandbox, sandboxId);\n\n    // Build proxy request with proper headers\n    let proxyUrl: string;\n\n    // Route based on the target port\n    if (port !== 3000) {\n      // Route directly to user's service on the specified port\n      proxyUrl = `http://localhost:${port}${path}${url.search}`;\n    } else {\n      // Port 3000 is our control plane - route normally\n      proxyUrl = `http://localhost:3000${path}${url.search}`;\n    }\n\n    const proxyRequest = new Request(proxyUrl, {\n      method: request.method,\n      headers: {\n        ...Object.fromEntries(request.headers),\n        'X-Original-URL': request.url,\n        'X-Forwarded-Host': url.hostname,\n        'X-Forwarded-Proto': url.protocol.replace(':', ''),\n        'X-Sandbox-Name': sandboxId, // Pass the friendly name\n      },\n      body: request.body,\n    });\n\n    return sandbox.containerFetch(proxyRequest, port);\n  } catch (error) {\n    console.error('[Sandbox] Proxy routing error:', error);\n    return new Response('Proxy routing error', { status: 500 });\n  }\n}\n\nfunction extractSandboxRoute(url: URL): RouteInfo | null {\n  // Parse subdomain pattern: port-sandboxId.domain\n  const subdomainMatch = url.hostname.match(/^(\\d{4,5})-([^.-][^.]*[^.-]|[^.-])\\.(.+)$/);\n\n  if (!subdomainMatch) {\n    // Log malformed subdomain attempts\n    if (url.hostname.includes('-') && url.hostname.includes('.')) {\n      logSecurityEvent('MALFORMED_SUBDOMAIN_ATTEMPT', {\n        hostname: url.hostname,\n        url: url.toString()\n      }, 'medium');\n    }\n    return null;\n  }\n\n  const portStr = subdomainMatch[1];\n  const sandboxId = subdomainMatch[2];\n  const domain = subdomainMatch[3];\n\n  const port = parseInt(portStr, 10);\n  if (!validatePort(port)) {\n    logSecurityEvent('INVALID_PORT_IN_SUBDOMAIN', {\n      port,\n      portStr,\n      sandboxId,\n      hostname: url.hostname,\n      url: url.toString()\n    }, 'high');\n    return null;\n  }\n\n  let sanitizedSandboxId: string;\n  try {\n    sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n  } catch (error) {\n    logSecurityEvent('INVALID_SANDBOX_ID_IN_SUBDOMAIN', {\n      sandboxId,\n      port,\n      hostname: url.hostname,\n      url: url.toString(),\n      error: error instanceof Error ? error.message : 'Unknown error'\n    }, 'high');\n    return null;\n  }\n\n  // DNS subdomain length limit is 63 characters\n  if (sandboxId.length > 63) {\n    logSecurityEvent('SANDBOX_ID_LENGTH_VIOLATION', {\n      sandboxId,\n      length: sandboxId.length,\n      port,\n      hostname: url.hostname\n    }, 'medium');\n    return null;\n  }\n\n  logSecurityEvent('SANDBOX_ROUTE_EXTRACTED', {\n    port,\n    sandboxId: sanitizedSandboxId,\n    domain,\n    path: url.pathname || \"/\",\n    hostname: url.hostname\n  }, 'low');\n\n  return {\n    port,\n    sandboxId: sanitizedSandboxId,\n    path: url.pathname || \"/\",\n  };\n}\n\nexport function isLocalhostPattern(hostname: string): boolean {\n  const hostPart = hostname.split(\":\")[0];\n  return (\n    hostPart === \"localhost\" ||\n    hostPart === \"127.0.0.1\" ||\n    hostPart === \"::1\" ||\n    hostPart === \"[::1]\" ||\n    hostPart === \"0.0.0.0\"\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,WAAW,oBAAoB;;;ACiBxC,eAAsB,eACpB,SACA,KAC0B;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,YAAY,oBAAoB,GAAG;AAEzC,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,WAAW,MAAM,KAAK,IAAI;AAClC,UAAM,UAAU,WAAW,IAAI,SAAS,SAAS;AAGjD,QAAI;AAGJ,QAAI,SAAS,KAAM;AAEjB,iBAAW,oBAAoB,IAAI,GAAG,IAAI,GAAG,IAAI,MAAM;AAAA,IACzD,OAAO;AAEL,iBAAW,wBAAwB,IAAI,GAAG,IAAI,MAAM;AAAA,IACtD;AAEA,UAAM,eAAe,IAAI,QAAQ,UAAU;AAAA,MACzC,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,YAAY,QAAQ,OAAO;AAAA,QACrC,kBAAkB,QAAQ;AAAA,QAC1B,oBAAoB,IAAI;AAAA,QACxB,qBAAqB,IAAI,SAAS,QAAQ,KAAK,EAAE;AAAA,QACjD,kBAAkB;AAAA;AAAA,MACpB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AAED,WAAO,QAAQ,eAAe,cAAc,IAAI;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,WAAO,IAAI,SAAS,uBAAuB,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5D;AACF;AAEA,SAAS,oBAAoB,KAA4B;AAEvD,QAAM,iBAAiB,IAAI,SAAS,MAAM,2CAA2C;AAErF,MAAI,CAAC,gBAAgB;AAEnB,QAAI,IAAI,SAAS,SAAS,GAAG,KAAK,IAAI,SAAS,SAAS,GAAG,GAAG;AAC5D,uBAAiB,+BAA+B;AAAA,QAC9C,UAAU,IAAI;AAAA,QACd,KAAK,IAAI,SAAS;AAAA,MACpB,GAAG,QAAQ;AAAA,IACb;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,eAAe,CAAC;AAChC,QAAM,YAAY,eAAe,CAAC;AAClC,QAAM,SAAS,eAAe,CAAC;AAE/B,QAAM,OAAO,SAAS,SAAS,EAAE;AACjC,MAAI,CAAC,aAAa,IAAI,GAAG;AACvB,qBAAiB,6BAA6B;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,IACpB,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,yBAAqB,kBAAkB,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,qBAAiB,mCAAmC;AAAA,MAClD;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,MAClB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,SAAS,IAAI;AACzB,qBAAiB,+BAA+B;AAAA,MAC9C;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB;AAAA,MACA,UAAU,IAAI;AAAA,IAChB,GAAG,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,mBAAiB,2BAA2B;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,MAAM,IAAI,YAAY;AAAA,IACtB,UAAU,IAAI;AAAA,EAChB,GAAG,KAAK;AAER,SAAO;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX,MAAM,IAAI,YAAY;AAAA,EACxB;AACF;AAEO,SAAS,mBAAmB,UAA2B;AAC5D,QAAM,WAAW,SAAS,MAAM,GAAG,EAAE,CAAC;AACtC,SACE,aAAa,eACb,aAAa,eACb,aAAa,SACb,aAAa,WACb,aAAa;AAEjB;;;ADxHO,SAAS,WAAW,IAAqC,IAAY;AAC1E,QAAM,OAAO,aAAa,IAAI,EAAE;AAGhC,OAAK,iBAAiB,EAAE;AAExB,SAAO;AACT;AAEO,IAAM,UAAN,cAAqC,UAAmC;AAAA,EAC7E,cAAc;AAAA;AAAA,EACd,aAAa;AAAA;AAAA,EACb;AAAA,EACQ,cAA6B;AAAA,EAErC,YAAY,KAAyB,KAAU;AAC7C,UAAM,KAAK,GAAG;AACd,SAAK,SAAS,IAAI,WAAW;AAAA,MAC3B,mBAAmB,CAAC,SAAS,UAAU,SAAS,SAAS,YAAY;AACnE,gBAAQ;AAAA,UACN,kCAAkC,OAAO,cAAc,OAAO,gBAAgB,QAAQ;AAAA,QACxF;AAAA,MACF;AAAA,MACA,gBAAgB,CAAC,YAAY;AAC3B,gBAAQ;AAAA,UACN,gCAAgC,OAAO;AAAA,QACzC;AAAA,MACF;AAAA,MACA,SAAS,CAAC,OAAO,aAAa;AAC5B,gBAAQ,MAAM,8BAA8B,KAAK,EAAE;AAAA,MACrD;AAAA,MACA,UAAU,CAAC,QAAQ,MAAM,aAAa;AACpC,gBAAQ,IAAI,gBAAgB,MAAM,KAAK,IAAI,EAAE;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAGD,SAAK,IAAI,sBAAsB,YAAY;AACzC,WAAK,cAAc,MAAM,KAAK,IAAI,QAAQ,IAAY,aAAa,KAAK;AAAA,IAC1E,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,eAAe,MAA6B;AAChD,QAAI,CAAC,KAAK,aAAa;AACrB,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,0CAA0C,IAAI,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAW,SAAgD;AAC/D,SAAK,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,QAAQ;AAC7C,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAAA,EAES,UAAU;AACjB,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AAAA,EAES,SAAS;AAChB,YAAQ,IAAI,gCAAgC;AAC5C,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,aAAa;AAAA,IAC3B;AAAA,EACF;AAAA,EAES,QAAQ,OAAgB;AAC/B,YAAQ,IAAI,kBAAkB,KAAK;AAAA,EACrC;AAAA;AAAA,EAGA,MAAe,MAAM,SAAqC;AACxD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAG/B,QAAI,CAAC,KAAK,eAAe,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAC9D,YAAM,OAAO,QAAQ,QAAQ,IAAI,gBAAgB;AACjD,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,kCAAkC,KAAK,WAAW,EAAE;AAAA,IAClE;AAGA,UAAM,OAAO,KAAK,cAAc,GAAG;AAGnC,WAAO,MAAM,KAAK,eAAe,SAAS,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAc,KAAkB;AAEtC,UAAM,aAAa,IAAI,SAAS,MAAM,iBAAiB;AACvD,QAAI,YAAY;AACd,aAAO,SAAS,WAAW,CAAC,CAAC;AAAA,IAC/B;AAIA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,SAAiB,SAA4C;AACtE,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAGzC,QAAI;AAEJ,QAAI;AAEF,UAAI,SAAS,QAAQ,SAAS;AAC5B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,UAAI;AAEJ,UAAI,SAAS,UAAU,SAAS,UAAU;AAExC,iBAAS,MAAM,KAAK,qBAAqB,SAAS,SAAS,WAAW,SAAS;AAAA,MACjF,OAAO;AAEL,cAAM,WAAW,MAAM,KAAK,OAAO;AAAA,UACjC;AAAA,UACA,SAAS;AAAA,QACX;AAEA,cAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,iBAAS,KAAK,+BAA+B,UAAU,UAAU,SAAS,SAAS;AAAA,MACrF;AAGA,UAAI,SAAS,YAAY;AACvB,gBAAQ,WAAW,MAAM;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AACA,YAAM;AAAA,IACR,UAAE;AACA,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBACZ,SACA,SACA,WACA,WACqB;AACrB,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,QAAQ,SAAS;AAChF,YAAM,EAAE,eAAe,IAAI,MAAM,OAAO,iBAAc;AAEtD,uBAAiB,SAAS,eAA4C,MAAM,GAAG;AAE7E,YAAI,QAAQ,QAAQ,SAAS;AAC3B,gBAAM,IAAI,MAAM,uBAAuB;AAAA,QACzC;AAEA,gBAAQ,MAAM,MAAM;AAAA,UAClB,KAAK;AAAA,UACL,KAAK;AACH,gBAAI,MAAM,MAAM;AAEd,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAC7C,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAG7C,kBAAI,QAAQ,UAAU;AACpB,wBAAQ,SAAS,MAAM,MAAM,MAAM,IAAI;AAAA,cACzC;AAAA,YACF;AACA;AAAA,UAEF,KAAK,YAAY;AAEf,kBAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,mBAAO,MAAM,UAAU;AAAA,cACrB,SAAS,MAAM,aAAa;AAAA,cAC5B,UAAU,MAAM,YAAY;AAAA,cAC5B;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW,QAAQ;AAAA,YACrB;AAAA,UACF;AAAA,UAEA,KAAK;AACH,kBAAM,IAAI,MAAM,MAAM,SAAS,0BAA0B;AAAA,QAC7D;AAAA,MACF;AAGA,YAAM,IAAI,MAAM,uCAAuC;AAAA,IAEzD,SAAS,OAAO;AACd,UAAI,QAAQ,QAAQ,SAAS;AAC3B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,+BACN,UACA,UACA,WACY;AACZ,WAAO;AAAA,MACL,SAAS,SAAS;AAAA,MAClB,UAAU,SAAS;AAAA,MACnB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,MACjB,SAAS,SAAS;AAAA,MAClB;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,aAAa,SAAiB,SAA4C;AAE9E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,aAAa,SAAS;AAAA,QACvD,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS;AAAA,QACpB,SAAS,SAAS;AAAA,QAClB,KAAK,SAAS;AAAA,QACd,KAAK,SAAS;AAAA,QACd,UAAU,SAAS;AAAA,QACnB,aAAa,SAAS;AAAA,MACxB,CAAC;AAED,YAAM,UAAU,SAAS;AACzB,YAAM,aAAsB;AAAA,QAC1B,IAAI,QAAQ;AAAA,QACZ,KAAK,QAAQ;AAAA,QACb,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACrC,SAAS;AAAA,QACT,UAAU;AAAA,QACV,WAAW,QAAQ;AAAA,QAEnB,MAAM,OAAsB;AAC1B,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,YAAoC;AACxC,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,UAAuD;AAC3D,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,MACF;AAGA,iBAAW,OAAO,OAAO,WAAoB;AAC3C,cAAM,KAAK,YAAY,QAAQ,IAAI,MAAM;AAAA,MAC3C;AAEA,iBAAW,YAAY,YAAY;AACjC,cAAM,UAAU,MAAM,KAAK,WAAW,QAAQ,EAAE;AAChD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAEA,iBAAW,UAAU,YAAY;AAC/B,cAAM,OAAO,MAAM,KAAK,eAAe,QAAQ,EAAE;AACjD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAGA,UAAI,SAAS,SAAS;AACpB,gBAAQ,QAAQ,UAAU;AAAA,MAC5B;AAEA,aAAO;AAAA,IAET,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,gBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,cAAc;AAEjD,WAAO,SAAS,UAAU,IAAI,kBAAgB;AAAA,MAC5C,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAAqC;AACpD,UAAM,WAAW,MAAM,KAAK,OAAO,WAAW,EAAE;AAChD,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,SAAS;AAC7B,WAAO;AAAA,MACL,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,IAAY,SAAiC;AAC7D,QAAI;AAEF,YAAM,KAAK,OAAO,YAAY,EAAE;AAAA,IAClC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,EAAE,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,iBAAiB;AACpD,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAM,4BAA6C;AAIjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,IAAyD;AAC5E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,eAAe,EAAE;AACpD,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,WAAW,SAAiB,SAA8D;AAE9F,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,SAAS,SAAS;AAGjF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAAkB,WAAmB,SAAyE;AAElH,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,kBAAkB,SAAS;AAG5D,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,YAAY,SAAS,QAAQ,QAAQ,QAAQ,SAAS;AAAA,EAC3E;AAAA,EAEA,MAAM,MACJ,MACA,UAAmC,CAAC,GACpC;AACA,WAAO,KAAK,OAAO,MAAM,MAAM,QAAQ,SAAS;AAAA,EAClD;AAAA,EAEA,MAAM,UACJ,MACA,SACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,UAAU,MAAM,SAAS,QAAQ,QAAQ;AAAA,EAC9D;AAAA,EAEA,MAAM,WAAW,MAAc;AAC7B,WAAO,KAAK,OAAO,WAAW,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,WACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,WAAW,SAAS,OAAO;AAAA,EAChD;AAAA,EAEA,MAAM,SACJ,YACA,iBACA;AACA,WAAO,KAAK,OAAO,SAAS,YAAY,eAAe;AAAA,EACzD;AAAA,EAEA,MAAM,SACJ,MACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ;AAAA,EACpD;AAAA,EAEA,MAAM,WAAW,MAAc,SAA8C;AAC3E,UAAM,KAAK,OAAO,WAAW,MAAM,SAAS,IAAI;AAGhD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,UAAM,MAAM,KAAK,oBAAoB,MAAM,KAAK,aAAa,QAAQ,QAAQ;AAE7E,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAc;AAC/B,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,UAAM,KAAK,OAAO,aAAa,IAAI;AAEnC,qBAAiB,kBAAkB;AAAA,MACjC;AAAA,IACF,GAAG,KAAK;AAAA,EACV;AAAA,EAEA,MAAM,gBAAgB,UAAkB;AACtC,UAAM,WAAW,MAAM,KAAK,OAAO,gBAAgB;AAGnD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,WAAO,SAAS,MAAM,IAAI,WAAS;AAAA,MACjC,KAAK,KAAK,oBAAoB,KAAK,MAAM,KAAK,aAAc,QAAQ;AAAA,MACpE,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAAA,EAGQ,oBAAoB,MAAc,WAAmB,UAA0B;AACrF,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,QACA;AAAA,QACA;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,QAAI;AACJ,QAAI;AACF,2BAAqB,kBAAkB,SAAS;AAAA,IAClD,SAAS,OAAO;AACd,uBAAiB,+BAA+B;AAAA,QAC9C;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM;AAAA,IACR;AAEA,UAAM,cAAc,mBAAmB,QAAQ;AAE/C,QAAI,aAAa;AAEf,YAAM,CAAC,MAAM,OAAO,IAAI,SAAS,MAAM,GAAG;AAC1C,YAAM,WAAW,WAAW;AAG5B,UAAI;AACF,cAAM,UAAU,IAAI,IAAI,UAAU,IAAI,IAAI,QAAQ,EAAE;AAEpD,cAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,IAAI;AAC3D,gBAAQ,WAAW;AAEnB,cAAM,WAAW,QAAQ,SAAS;AAElC,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf,GAAG,KAAK;AAER,eAAO;AAAA,MACT,SAAS,OAAO;AACd,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,GAAG,MAAM;AACT,cAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,MACxH;AAAA,IACF;AAGA,QAAI;AAEF,YAAM,WAAW;AACjB,YAAM,UAAU,IAAI,IAAI,GAAG,QAAQ,MAAM,QAAQ,EAAE;AAGnD,YAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,QAAQ;AAC/D,cAAQ,WAAW;AAEnB,YAAM,WAAW,QAAQ,SAAS;AAElC,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,WAAW;AAAA,QACX,aAAa;AAAA,MACf,GAAG,KAAK;AAER,aAAO;AAAA,IACT,SAAS,OAAO;AACd,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,IACxH;AAAA,EACF;AACF;","names":[]}

package/dist/{client-Da-mLX4p.d.ts → client-BAuciZya.d.ts}

@@ -3,6 +3,7 @@ import { ISandbox, ExecOptions, ExecResult, ProcessOptions, Process, StreamOptio
 
 declare function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string): DurableObjectStub<Sandbox<unknown>>;
 declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {
+    defaultPort: number;
     sleepAfter: string;
     client: HttpClient;
     private sandboxName;

package/dist/client.d.ts

@@ -1,3 +1,3 @@
-export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, H as HttpClient, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, W as WriteFileResponse } from './client-Da-mLX4p.js';
+export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, H as HttpClient, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, W as WriteFileResponse } from './client-BAuciZya.js';
 import './types.js';
 import '@cloudflare/containers';

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, S as Sandbox, W as WriteFileResponse, g as getSandbox } from './client-Da-mLX4p.js';
+export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, S as Sandbox, W as WriteFileResponse, g as getSandbox } from './client-BAuciZya.js';
 export { RouteInfo, SandboxEnv, proxyToSandbox } from './request-handler.js';
 export { asyncIterableToSSEStream, parseSSEStream, responseToAsyncIterable } from './sse-parser.js';
 export { ExecEvent, LogEvent } from './types.js';

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   Sandbox,
   getSandbox,
   proxyToSandbox
-} from "./chunk-ISFOIYQC.js";
+} from "./chunk-YZRU4CKO.js";
 import "./chunk-G4XT4SP7.js";
 import "./chunk-6UAWTJ5S.js";
 import {

package/dist/request-handler.d.ts

@@ -1,4 +1,4 @@
-import { S as Sandbox } from './client-Da-mLX4p.js';
+import { S as Sandbox } from './client-BAuciZya.js';
 import '@cloudflare/containers';
 import './types.js';
 

package/dist/request-handler.js

@@ -1,7 +1,7 @@
 import {
   isLocalhostPattern,
   proxyToSandbox
-} from "./chunk-ISFOIYQC.js";
+} from "./chunk-YZRU4CKO.js";
 import "./chunk-G4XT4SP7.js";
 import "./chunk-6UAWTJ5S.js";
 import "./chunk-6THNBO4S.js";

package/dist/sandbox.d.ts

@@ -1,3 +1,3 @@
-export { S as Sandbox, g as getSandbox } from './client-Da-mLX4p.js';
+export { S as Sandbox, g as getSandbox } from './client-BAuciZya.js';
 import '@cloudflare/containers';
 import './types.js';

package/dist/sandbox.js

@@ -1,7 +1,7 @@
 import {
   Sandbox,
   getSandbox
-} from "./chunk-ISFOIYQC.js";
+} from "./chunk-YZRU4CKO.js";
 import "./chunk-G4XT4SP7.js";
 import "./chunk-6UAWTJ5S.js";
 import "./chunk-6THNBO4S.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/sandbox",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "repository": {
     "type": "git",
     "url": "https://github.com/cloudflare/sandbox-sdk"
@@ -18,8 +18,9 @@
   ],
   "scripts": {
     "build": "rm -rf dist && tsup src/*.ts --outDir dist --dts --sourcemap --format esm",
-    "docker:build": "docker build -t ghostwriternr/cloudflare-sandbox:$npm_package_version .",
-    "docker:publish": "docker push docker.io/ghostwriternr/cloudflare-sandbox:$npm_package_version"
+    "docker:local": "docker build . -t cloudflare/sandbox-test:$npm_package_version",
+    "docker:publish": "docker buildx build --platform linux/amd64,linux/arm64 -t cloudflare/sandbox:$npm_package_version --push .",
+    "docker:publish:beta": "docker buildx build --platform linux/amd64,linux/arm64 -t cloudflare/sandbox:$npm_package_version-beta --push ."
   },
   "exports": {
     ".": {

package/src/sandbox.ts

@@ -31,6 +31,7 @@ export function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {
 }
 
 export class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {
+  defaultPort = 3000; // Default port for the container's Bun server
   sleepAfter = "3m"; // Sleep the sandbox if no requests are made in this timeframe
   client: HttpClient;
   private sandboxName: string | null = null;

package/dist/chunk-ISFOIYQC.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sandbox.ts","../src/request-handler.ts"],"sourcesContent":["import { Container, getContainer } from \"@cloudflare/containers\";\nimport { HttpClient } from \"./client\";\nimport { isLocalhostPattern } from \"./request-handler\";\nimport {\n  logSecurityEvent,\n  SecurityError,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\nimport type {\n  ExecOptions,\n  ExecResult,\n  ISandbox,\n  Process,\n  ProcessOptions,\n  ProcessStatus,\n  StreamOptions\n} from \"./types\";\nimport {\n  ProcessNotFoundError,\n  SandboxError\n} from \"./types\";\n\nexport function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {\n  const stub = getContainer(ns, id);\n\n  // Store the name on first access\n  stub.setSandboxName?.(id);\n\n  return stub;\n}\n\nexport class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {\n  sleepAfter = \"3m\"; // Sleep the sandbox if no requests are made in this timeframe\n  client: HttpClient;\n  private sandboxName: string | null = null;\n\n  constructor(ctx: DurableObjectState, env: Env) {\n    super(ctx, env);\n    this.client = new HttpClient({\n      onCommandComplete: (success, exitCode, _stdout, _stderr, command) => {\n        console.log(\n          `[Container] Command completed: ${command}, Success: ${success}, Exit code: ${exitCode}`\n        );\n      },\n      onCommandStart: (command) => {\n        console.log(\n          `[Container] Command started: ${command}`\n        );\n      },\n      onError: (error, _command) => {\n        console.error(`[Container] Command error: ${error}`);\n      },\n      onOutput: (stream, data, _command) => {\n        console.log(`[Container] [${stream}] ${data}`);\n      },\n      port: 3000, // Control plane port\n      stub: this,\n    });\n\n    // Load the sandbox name from storage on initialization\n    this.ctx.blockConcurrencyWhile(async () => {\n      this.sandboxName = await this.ctx.storage.get<string>('sandboxName') || null;\n    });\n  }\n\n  // RPC method to set the sandbox name\n  async setSandboxName(name: string): Promise<void> {\n    if (!this.sandboxName) {\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name via RPC: ${name}`);\n    }\n  }\n\n  // RPC method to set environment variables\n  async setEnvVars(envVars: Record<string, string>): Promise<void> {\n    this.envVars = { ...this.envVars, ...envVars };\n    console.log(`[Sandbox] Updated environment variables`);\n  }\n\n  override onStart() {\n    console.log(\"Sandbox successfully started\");\n  }\n\n  override onStop() {\n    console.log(\"Sandbox successfully shut down\");\n    if (this.client) {\n      this.client.clearSession();\n    }\n  }\n\n  override onError(error: unknown) {\n    console.log(\"Sandbox error:\", error);\n  }\n\n  // Override fetch to route internal container requests to appropriate ports\n  override async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Capture and store the sandbox name from the header if present\n    if (!this.sandboxName && request.headers.has('X-Sandbox-Name')) {\n      const name = request.headers.get('X-Sandbox-Name')!;\n      this.sandboxName = name;\n      await this.ctx.storage.put('sandboxName', name);\n      console.log(`[Sandbox] Stored sandbox name: ${this.sandboxName}`);\n    }\n\n    // Determine which port to route to\n    const port = this.determinePort(url);\n\n    // Route to the appropriate port\n    return await this.containerFetch(request, port);\n  }\n\n  private determinePort(url: URL): number {\n    // Extract port from proxy requests (e.g., /proxy/8080/*)\n    const proxyMatch = url.pathname.match(/^\\/proxy\\/(\\d+)/);\n    if (proxyMatch) {\n      return parseInt(proxyMatch[1]);\n    }\n\n    // All other requests go to control plane on port 3000\n    // This includes /api/* endpoints and any other control requests\n    return 3000;\n  }\n\n  // Enhanced exec method - always returns ExecResult with optional streaming\n  // This replaces the old exec method to match ISandbox interface\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const startTime = Date.now();\n    const timestamp = new Date().toISOString();\n\n    // Handle timeout\n    let timeoutId: NodeJS.Timeout | undefined;\n\n    try {\n      // Handle cancellation\n      if (options?.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n\n      let result: ExecResult;\n\n      if (options?.stream && options?.onOutput) {\n        // Streaming with callbacks - we need to collect the final result\n        result = await this.executeWithStreaming(command, options, startTime, timestamp);\n      } else {\n        // Regular execution\n        const response = await this.client.execute(\n          command,\n          options?.sessionId\n        );\n\n        const duration = Date.now() - startTime;\n        result = this.mapExecuteResponseToExecResult(response, duration, options?.sessionId);\n      }\n\n      // Call completion callback if provided\n      if (options?.onComplete) {\n        options.onComplete(result);\n      }\n\n      return result;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n      throw error;\n    } finally {\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n    }\n  }\n\n  private async executeWithStreaming(\n    command: string,\n    options: ExecOptions,\n    startTime: number,\n    timestamp: string\n  ): Promise<ExecResult> {\n    let stdout = '';\n    let stderr = '';\n\n    try {\n      const stream = await this.client.executeCommandStream(command, options.sessionId);\n      const { parseSSEStream } = await import('./sse-parser');\n\n      for await (const event of parseSSEStream<import('./types').ExecEvent>(stream)) {\n        // Check for cancellation\n        if (options.signal?.aborted) {\n          throw new Error('Operation was aborted');\n        }\n\n        switch (event.type) {\n          case 'stdout':\n          case 'stderr':\n            if (event.data) {\n              // Update accumulated output\n              if (event.type === 'stdout') stdout += event.data;\n              if (event.type === 'stderr') stderr += event.data;\n\n              // Call user's callback\n              if (options.onOutput) {\n                options.onOutput(event.type, event.data);\n              }\n            }\n            break;\n\n          case 'complete': {\n            // Use result from complete event if available\n            const duration = Date.now() - startTime;\n            return event.result || {\n              success: event.exitCode === 0,\n              exitCode: event.exitCode || 0,\n              stdout,\n              stderr,\n              command,\n              duration,\n              timestamp,\n              sessionId: options.sessionId\n            };\n          }\n\n          case 'error':\n            throw new Error(event.error || 'Command execution failed');\n        }\n      }\n\n      // If we get here without a complete event, something went wrong\n      throw new Error('Stream ended without completion event');\n\n    } catch (error) {\n      if (options.signal?.aborted) {\n        throw new Error('Operation was aborted');\n      }\n      throw error;\n    }\n  }\n\n  private mapExecuteResponseToExecResult(\n    response: import('./client').ExecuteResponse,\n    duration: number,\n    sessionId?: string\n  ): ExecResult {\n    return {\n      success: response.success,\n      exitCode: response.exitCode,\n      stdout: response.stdout,\n      stderr: response.stderr,\n      command: response.command,\n      duration,\n      timestamp: response.timestamp,\n      sessionId\n    };\n  }\n\n\n  // Background process management\n  async startProcess(command: string, options?: ProcessOptions): Promise<Process> {\n    // Use the new HttpClient method to start the process\n    try {\n      const response = await this.client.startProcess(command, {\n        processId: options?.processId,\n        sessionId: options?.sessionId,\n        timeout: options?.timeout,\n        env: options?.env,\n        cwd: options?.cwd,\n        encoding: options?.encoding,\n        autoCleanup: options?.autoCleanup\n      });\n\n      const process = response.process;\n      const processObj: Process = {\n        id: process.id,\n        pid: process.pid,\n        command: process.command,\n        status: process.status as ProcessStatus,\n        startTime: new Date(process.startTime),\n        endTime: undefined,\n        exitCode: undefined,\n        sessionId: process.sessionId,\n\n        async kill(): Promise<void> {\n          throw new Error('Method will be replaced');\n        },\n        async getStatus(): Promise<ProcessStatus> {\n          throw new Error('Method will be replaced');\n        },\n        async getLogs(): Promise<{ stdout: string; stderr: string }> {\n          throw new Error('Method will be replaced');\n        }\n      };\n\n      // Bind context properly\n      processObj.kill = async (signal?: string) => {\n        await this.killProcess(process.id, signal);\n      };\n\n      processObj.getStatus = async () => {\n        const current = await this.getProcess(process.id);\n        return current?.status || 'error';\n      };\n\n      processObj.getLogs = async () => {\n        const logs = await this.getProcessLogs(process.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      };\n\n      // Call onStart callback if provided\n      if (options?.onStart) {\n        options.onStart(processObj);\n      }\n\n      return processObj;\n\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n\n      throw error;\n    }\n  }\n\n  async listProcesses(): Promise<Process[]> {\n    const response = await this.client.listProcesses();\n\n    return response.processes.map(processData => ({\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    }));\n  }\n\n  async getProcess(id: string): Promise<Process | null> {\n    const response = await this.client.getProcess(id);\n    if (!response.process) {\n      return null;\n    }\n\n    const processData = response.process;\n    return {\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || 'error';\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      }\n    };\n  }\n\n  async killProcess(id: string, _signal?: string): Promise<void> {\n    try {\n      // Note: signal parameter is not currently supported by the HttpClient implementation\n      await this.client.killProcess(id);\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw new SandboxError(\n        `Failed to kill process ${id}: ${error instanceof Error ? error.message : 'Unknown error'}`,\n        'KILL_PROCESS_FAILED'\n      );\n    }\n  }\n\n  async killAllProcesses(): Promise<number> {\n    const response = await this.client.killAllProcesses();\n    return response.killedCount;\n  }\n\n  async cleanupCompletedProcesses(): Promise<number> {\n    // For now, this would need to be implemented as a container endpoint\n    // as we no longer maintain local process storage\n    // We'll return 0 as a placeholder until the container endpoint is added\n    return 0;\n  }\n\n  async getProcessLogs(id: string): Promise<{ stdout: string; stderr: string }> {\n    try {\n      const response = await this.client.getProcessLogs(id);\n      return {\n        stdout: response.stdout,\n        stderr: response.stderr\n      };\n    } catch (error) {\n      if (error instanceof Error && error.message.includes('Process not found')) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw error;\n    }\n  }\n\n\n  // Streaming methods - return ReadableStream for RPC compatibility\n  async execStream(command: string, options?: StreamOptions): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient (need to add this method)\n    const stream = await this.client.executeCommandStream(command, options?.sessionId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async streamProcessLogs(processId: string, options?: { signal?: AbortSignal }): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error('Operation was aborted');\n    }\n\n    // Get the stream from HttpClient\n    const stream = await this.client.streamProcessLogs(processId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async gitCheckout(\n    repoUrl: string,\n    options: { branch?: string; targetDir?: string }\n  ) {\n    return this.client.gitCheckout(repoUrl, options.branch, options.targetDir);\n  }\n\n  async mkdir(\n    path: string,\n    options: { recursive?: boolean } = {}\n  ) {\n    return this.client.mkdir(path, options.recursive);\n  }\n\n  async writeFile(\n    path: string,\n    content: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.writeFile(path, content, options.encoding);\n  }\n\n  async deleteFile(path: string) {\n    return this.client.deleteFile(path);\n  }\n\n  async renameFile(\n    oldPath: string,\n    newPath: string\n  ) {\n    return this.client.renameFile(oldPath, newPath);\n  }\n\n  async moveFile(\n    sourcePath: string,\n    destinationPath: string\n  ) {\n    return this.client.moveFile(sourcePath, destinationPath);\n  }\n\n  async readFile(\n    path: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.readFile(path, options.encoding);\n  }\n\n  async exposePort(port: number, options: { name?: string; hostname: string }) {\n    await this.client.exposePort(port, options?.name);\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    const url = this.constructPreviewUrl(port, this.sandboxName, options.hostname);\n\n    return {\n      url,\n      port,\n      name: options?.name,\n    };\n  }\n\n  async unexposePort(port: number) {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_UNEXPOSE', {\n        port\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    await this.client.unexposePort(port);\n\n    logSecurityEvent('PORT_UNEXPOSED', {\n      port\n    }, 'low');\n  }\n\n  async getExposedPorts(hostname: string) {\n    const response = await this.client.getExposedPorts();\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error('Sandbox name not available. Ensure sandbox is accessed through getSandbox()');\n    }\n\n    return response.ports.map(port => ({\n      url: this.constructPreviewUrl(port.port, this.sandboxName!, hostname),\n      port: port.port,\n      name: port.name,\n      exposedAt: port.exposedAt,\n    }));\n  }\n\n\n  private constructPreviewUrl(port: number, sandboxId: string, hostname: string): string {\n    if (!validatePort(port)) {\n      logSecurityEvent('INVALID_PORT_REJECTED', {\n        port,\n        sandboxId,\n        hostname\n      }, 'high');\n      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);\n    }\n\n    let sanitizedSandboxId: string;\n    try {\n      sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n    } catch (error) {\n      logSecurityEvent('INVALID_SANDBOX_ID_REJECTED', {\n        sandboxId,\n        port,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw error;\n    }\n\n    const isLocalhost = isLocalhostPattern(hostname);\n\n    if (isLocalhost) {\n      // Unified subdomain approach for localhost (RFC 6761)\n      const [host, portStr] = hostname.split(':');\n      const mainPort = portStr || '80';\n\n      // Use URL constructor for safe URL building\n      try {\n        const baseUrl = new URL(`http://${host}:${mainPort}`);\n        // Construct subdomain safely\n        const subdomainHost = `${port}-${sanitizedSandboxId}.${host}`;\n        baseUrl.hostname = subdomainHost;\n\n        const finalUrl = baseUrl.toString();\n\n        logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          resultUrl: finalUrl,\n          environment: 'localhost'\n        }, 'low');\n\n        return finalUrl;\n      } catch (error) {\n        logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          error: error instanceof Error ? error.message : 'Unknown error'\n        }, 'high');\n        throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n      }\n    }\n\n    // Production subdomain logic - enforce HTTPS\n    try {\n      // Always use HTTPS for production (non-localhost)\n      const protocol = \"https\";\n      const baseUrl = new URL(`${protocol}://${hostname}`);\n\n      // Construct subdomain safely\n      const subdomainHost = `${port}-${sanitizedSandboxId}.${hostname}`;\n      baseUrl.hostname = subdomainHost;\n\n      const finalUrl = baseUrl.toString();\n\n      logSecurityEvent('PREVIEW_URL_CONSTRUCTED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        resultUrl: finalUrl,\n        environment: 'production'\n      }, 'low');\n\n      return finalUrl;\n    } catch (error) {\n      logSecurityEvent('URL_CONSTRUCTION_FAILED', {\n        port,\n        sandboxId: sanitizedSandboxId,\n        hostname,\n        error: error instanceof Error ? error.message : 'Unknown error'\n      }, 'high');\n      throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : 'Unknown error'}`);\n    }\n  }\n}\n","import { getSandbox, type Sandbox } from \"./sandbox\";\nimport {\n  logSecurityEvent,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\n\nexport interface SandboxEnv {\n  Sandbox: DurableObjectNamespace<Sandbox>;\n}\n\nexport interface RouteInfo {\n  port: number;\n  sandboxId: string;\n  path: string;\n}\n\nexport async function proxyToSandbox<E extends SandboxEnv>(\n  request: Request,\n  env: E\n): Promise<Response | null> {\n  try {\n    const url = new URL(request.url);\n    const routeInfo = extractSandboxRoute(url);\n\n    if (!routeInfo) {\n      return null; // Not a request to an exposed container port\n    }\n\n    const { sandboxId, port, path } = routeInfo;\n    const sandbox = getSandbox(env.Sandbox, sandboxId);\n\n    // Build proxy request with proper headers\n    let proxyUrl: string;\n\n    // Route based on the target port\n    if (port !== 3000) {\n      // Route directly to user's service on the specified port\n      proxyUrl = `http://localhost:${port}${path}${url.search}`;\n    } else {\n      // Port 3000 is our control plane - route normally\n      proxyUrl = `http://localhost:3000${path}${url.search}`;\n    }\n\n    const proxyRequest = new Request(proxyUrl, {\n      method: request.method,\n      headers: {\n        ...Object.fromEntries(request.headers),\n        'X-Original-URL': request.url,\n        'X-Forwarded-Host': url.hostname,\n        'X-Forwarded-Proto': url.protocol.replace(':', ''),\n        'X-Sandbox-Name': sandboxId, // Pass the friendly name\n      },\n      body: request.body,\n    });\n\n    return sandbox.containerFetch(proxyRequest, port);\n  } catch (error) {\n    console.error('[Sandbox] Proxy routing error:', error);\n    return new Response('Proxy routing error', { status: 500 });\n  }\n}\n\nfunction extractSandboxRoute(url: URL): RouteInfo | null {\n  // Parse subdomain pattern: port-sandboxId.domain\n  const subdomainMatch = url.hostname.match(/^(\\d{4,5})-([^.-][^.]*[^.-]|[^.-])\\.(.+)$/);\n\n  if (!subdomainMatch) {\n    // Log malformed subdomain attempts\n    if (url.hostname.includes('-') && url.hostname.includes('.')) {\n      logSecurityEvent('MALFORMED_SUBDOMAIN_ATTEMPT', {\n        hostname: url.hostname,\n        url: url.toString()\n      }, 'medium');\n    }\n    return null;\n  }\n\n  const portStr = subdomainMatch[1];\n  const sandboxId = subdomainMatch[2];\n  const domain = subdomainMatch[3];\n\n  const port = parseInt(portStr, 10);\n  if (!validatePort(port)) {\n    logSecurityEvent('INVALID_PORT_IN_SUBDOMAIN', {\n      port,\n      portStr,\n      sandboxId,\n      hostname: url.hostname,\n      url: url.toString()\n    }, 'high');\n    return null;\n  }\n\n  let sanitizedSandboxId: string;\n  try {\n    sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n  } catch (error) {\n    logSecurityEvent('INVALID_SANDBOX_ID_IN_SUBDOMAIN', {\n      sandboxId,\n      port,\n      hostname: url.hostname,\n      url: url.toString(),\n      error: error instanceof Error ? error.message : 'Unknown error'\n    }, 'high');\n    return null;\n  }\n\n  // DNS subdomain length limit is 63 characters\n  if (sandboxId.length > 63) {\n    logSecurityEvent('SANDBOX_ID_LENGTH_VIOLATION', {\n      sandboxId,\n      length: sandboxId.length,\n      port,\n      hostname: url.hostname\n    }, 'medium');\n    return null;\n  }\n\n  logSecurityEvent('SANDBOX_ROUTE_EXTRACTED', {\n    port,\n    sandboxId: sanitizedSandboxId,\n    domain,\n    path: url.pathname || \"/\",\n    hostname: url.hostname\n  }, 'low');\n\n  return {\n    port,\n    sandboxId: sanitizedSandboxId,\n    path: url.pathname || \"/\",\n  };\n}\n\nexport function isLocalhostPattern(hostname: string): boolean {\n  const hostPart = hostname.split(\":\")[0];\n  return (\n    hostPart === \"localhost\" ||\n    hostPart === \"127.0.0.1\" ||\n    hostPart === \"::1\" ||\n    hostPart === \"[::1]\" ||\n    hostPart === \"0.0.0.0\"\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;AAAA,SAAS,WAAW,oBAAoB;;;ACiBxC,eAAsB,eACpB,SACA,KAC0B;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,YAAY,oBAAoB,GAAG;AAEzC,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,WAAW,MAAM,KAAK,IAAI;AAClC,UAAM,UAAU,WAAW,IAAI,SAAS,SAAS;AAGjD,QAAI;AAGJ,QAAI,SAAS,KAAM;AAEjB,iBAAW,oBAAoB,IAAI,GAAG,IAAI,GAAG,IAAI,MAAM;AAAA,IACzD,OAAO;AAEL,iBAAW,wBAAwB,IAAI,GAAG,IAAI,MAAM;AAAA,IACtD;AAEA,UAAM,eAAe,IAAI,QAAQ,UAAU;AAAA,MACzC,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,YAAY,QAAQ,OAAO;AAAA,QACrC,kBAAkB,QAAQ;AAAA,QAC1B,oBAAoB,IAAI;AAAA,QACxB,qBAAqB,IAAI,SAAS,QAAQ,KAAK,EAAE;AAAA,QACjD,kBAAkB;AAAA;AAAA,MACpB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AAED,WAAO,QAAQ,eAAe,cAAc,IAAI;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,WAAO,IAAI,SAAS,uBAAuB,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5D;AACF;AAEA,SAAS,oBAAoB,KAA4B;AAEvD,QAAM,iBAAiB,IAAI,SAAS,MAAM,2CAA2C;AAErF,MAAI,CAAC,gBAAgB;AAEnB,QAAI,IAAI,SAAS,SAAS,GAAG,KAAK,IAAI,SAAS,SAAS,GAAG,GAAG;AAC5D,uBAAiB,+BAA+B;AAAA,QAC9C,UAAU,IAAI;AAAA,QACd,KAAK,IAAI,SAAS;AAAA,MACpB,GAAG,QAAQ;AAAA,IACb;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,eAAe,CAAC;AAChC,QAAM,YAAY,eAAe,CAAC;AAClC,QAAM,SAAS,eAAe,CAAC;AAE/B,QAAM,OAAO,SAAS,SAAS,EAAE;AACjC,MAAI,CAAC,aAAa,IAAI,GAAG;AACvB,qBAAiB,6BAA6B;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,IACpB,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,yBAAqB,kBAAkB,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,qBAAiB,mCAAmC;AAAA,MAClD;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,MAClB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,SAAS,IAAI;AACzB,qBAAiB,+BAA+B;AAAA,MAC9C;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB;AAAA,MACA,UAAU,IAAI;AAAA,IAChB,GAAG,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,mBAAiB,2BAA2B;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,MAAM,IAAI,YAAY;AAAA,IACtB,UAAU,IAAI;AAAA,EAChB,GAAG,KAAK;AAER,SAAO;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX,MAAM,IAAI,YAAY;AAAA,EACxB;AACF;AAEO,SAAS,mBAAmB,UAA2B;AAC5D,QAAM,WAAW,SAAS,MAAM,GAAG,EAAE,CAAC;AACtC,SACE,aAAa,eACb,aAAa,eACb,aAAa,SACb,aAAa,WACb,aAAa;AAEjB;;;ADxHO,SAAS,WAAW,IAAqC,IAAY;AAC1E,QAAM,OAAO,aAAa,IAAI,EAAE;AAGhC,OAAK,iBAAiB,EAAE;AAExB,SAAO;AACT;AAEO,IAAM,UAAN,cAAqC,UAAmC;AAAA,EAC7E,aAAa;AAAA;AAAA,EACb;AAAA,EACQ,cAA6B;AAAA,EAErC,YAAY,KAAyB,KAAU;AAC7C,UAAM,KAAK,GAAG;AACd,SAAK,SAAS,IAAI,WAAW;AAAA,MAC3B,mBAAmB,CAAC,SAAS,UAAU,SAAS,SAAS,YAAY;AACnE,gBAAQ;AAAA,UACN,kCAAkC,OAAO,cAAc,OAAO,gBAAgB,QAAQ;AAAA,QACxF;AAAA,MACF;AAAA,MACA,gBAAgB,CAAC,YAAY;AAC3B,gBAAQ;AAAA,UACN,gCAAgC,OAAO;AAAA,QACzC;AAAA,MACF;AAAA,MACA,SAAS,CAAC,OAAO,aAAa;AAC5B,gBAAQ,MAAM,8BAA8B,KAAK,EAAE;AAAA,MACrD;AAAA,MACA,UAAU,CAAC,QAAQ,MAAM,aAAa;AACpC,gBAAQ,IAAI,gBAAgB,MAAM,KAAK,IAAI,EAAE;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAGD,SAAK,IAAI,sBAAsB,YAAY;AACzC,WAAK,cAAc,MAAM,KAAK,IAAI,QAAQ,IAAY,aAAa,KAAK;AAAA,IAC1E,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,eAAe,MAA6B;AAChD,QAAI,CAAC,KAAK,aAAa;AACrB,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,0CAA0C,IAAI,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAW,SAAgD;AAC/D,SAAK,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,QAAQ;AAC7C,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAAA,EAES,UAAU;AACjB,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AAAA,EAES,SAAS;AAChB,YAAQ,IAAI,gCAAgC;AAC5C,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,aAAa;AAAA,IAC3B;AAAA,EACF;AAAA,EAES,QAAQ,OAAgB;AAC/B,YAAQ,IAAI,kBAAkB,KAAK;AAAA,EACrC;AAAA;AAAA,EAGA,MAAe,MAAM,SAAqC;AACxD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAG/B,QAAI,CAAC,KAAK,eAAe,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAC9D,YAAM,OAAO,QAAQ,QAAQ,IAAI,gBAAgB;AACjD,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,kCAAkC,KAAK,WAAW,EAAE;AAAA,IAClE;AAGA,UAAM,OAAO,KAAK,cAAc,GAAG;AAGnC,WAAO,MAAM,KAAK,eAAe,SAAS,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAc,KAAkB;AAEtC,UAAM,aAAa,IAAI,SAAS,MAAM,iBAAiB;AACvD,QAAI,YAAY;AACd,aAAO,SAAS,WAAW,CAAC,CAAC;AAAA,IAC/B;AAIA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,SAAiB,SAA4C;AACtE,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAGzC,QAAI;AAEJ,QAAI;AAEF,UAAI,SAAS,QAAQ,SAAS;AAC5B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,UAAI;AAEJ,UAAI,SAAS,UAAU,SAAS,UAAU;AAExC,iBAAS,MAAM,KAAK,qBAAqB,SAAS,SAAS,WAAW,SAAS;AAAA,MACjF,OAAO;AAEL,cAAM,WAAW,MAAM,KAAK,OAAO;AAAA,UACjC;AAAA,UACA,SAAS;AAAA,QACX;AAEA,cAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,iBAAS,KAAK,+BAA+B,UAAU,UAAU,SAAS,SAAS;AAAA,MACrF;AAGA,UAAI,SAAS,YAAY;AACvB,gBAAQ,WAAW,MAAM;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AACA,YAAM;AAAA,IACR,UAAE;AACA,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBACZ,SACA,SACA,WACA,WACqB;AACrB,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,QAAQ,SAAS;AAChF,YAAM,EAAE,eAAe,IAAI,MAAM,OAAO,iBAAc;AAEtD,uBAAiB,SAAS,eAA4C,MAAM,GAAG;AAE7E,YAAI,QAAQ,QAAQ,SAAS;AAC3B,gBAAM,IAAI,MAAM,uBAAuB;AAAA,QACzC;AAEA,gBAAQ,MAAM,MAAM;AAAA,UAClB,KAAK;AAAA,UACL,KAAK;AACH,gBAAI,MAAM,MAAM;AAEd,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAC7C,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAG7C,kBAAI,QAAQ,UAAU;AACpB,wBAAQ,SAAS,MAAM,MAAM,MAAM,IAAI;AAAA,cACzC;AAAA,YACF;AACA;AAAA,UAEF,KAAK,YAAY;AAEf,kBAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,mBAAO,MAAM,UAAU;AAAA,cACrB,SAAS,MAAM,aAAa;AAAA,cAC5B,UAAU,MAAM,YAAY;AAAA,cAC5B;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW,QAAQ;AAAA,YACrB;AAAA,UACF;AAAA,UAEA,KAAK;AACH,kBAAM,IAAI,MAAM,MAAM,SAAS,0BAA0B;AAAA,QAC7D;AAAA,MACF;AAGA,YAAM,IAAI,MAAM,uCAAuC;AAAA,IAEzD,SAAS,OAAO;AACd,UAAI,QAAQ,QAAQ,SAAS;AAC3B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,+BACN,UACA,UACA,WACY;AACZ,WAAO;AAAA,MACL,SAAS,SAAS;AAAA,MAClB,UAAU,SAAS;AAAA,MACnB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,MACjB,SAAS,SAAS;AAAA,MAClB;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,aAAa,SAAiB,SAA4C;AAE9E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,aAAa,SAAS;AAAA,QACvD,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS;AAAA,QACpB,SAAS,SAAS;AAAA,QAClB,KAAK,SAAS;AAAA,QACd,KAAK,SAAS;AAAA,QACd,UAAU,SAAS;AAAA,QACnB,aAAa,SAAS;AAAA,MACxB,CAAC;AAED,YAAM,UAAU,SAAS;AACzB,YAAM,aAAsB;AAAA,QAC1B,IAAI,QAAQ;AAAA,QACZ,KAAK,QAAQ;AAAA,QACb,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACrC,SAAS;AAAA,QACT,UAAU;AAAA,QACV,WAAW,QAAQ;AAAA,QAEnB,MAAM,OAAsB;AAC1B,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,YAAoC;AACxC,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,UAAuD;AAC3D,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,MACF;AAGA,iBAAW,OAAO,OAAO,WAAoB;AAC3C,cAAM,KAAK,YAAY,QAAQ,IAAI,MAAM;AAAA,MAC3C;AAEA,iBAAW,YAAY,YAAY;AACjC,cAAM,UAAU,MAAM,KAAK,WAAW,QAAQ,EAAE;AAChD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAEA,iBAAW,UAAU,YAAY;AAC/B,cAAM,OAAO,MAAM,KAAK,eAAe,QAAQ,EAAE;AACjD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAGA,UAAI,SAAS,SAAS;AACpB,gBAAQ,QAAQ,UAAU;AAAA,MAC5B;AAEA,aAAO;AAAA,IAET,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,gBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,cAAc;AAEjD,WAAO,SAAS,UAAU,IAAI,kBAAgB;AAAA,MAC5C,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAAqC;AACpD,UAAM,WAAW,MAAM,KAAK,OAAO,WAAW,EAAE;AAChD,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,SAAS;AAC7B,WAAO;AAAA,MACL,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,IAAY,SAAiC;AAC7D,QAAI;AAEF,YAAM,KAAK,OAAO,YAAY,EAAE;AAAA,IAClC,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,EAAE,KAAK,iBAAiB,QAAQ,MAAM,UAAU,eAAe;AAAA,QACzF;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,iBAAiB;AACpD,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAM,4BAA6C;AAIjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eAAe,IAAyD;AAC5E,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,eAAe,EAAE;AACpD,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF,SAAS,OAAO;AACd,UAAI,iBAAiB,SAAS,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AACzE,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,WAAW,SAAiB,SAA8D;AAE9F,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,qBAAqB,SAAS,SAAS,SAAS;AAGjF,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBAAkB,WAAmB,SAAyE;AAElH,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,kBAAkB,SAAS;AAG5D,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,YAAY,SAAS,QAAQ,QAAQ,QAAQ,SAAS;AAAA,EAC3E;AAAA,EAEA,MAAM,MACJ,MACA,UAAmC,CAAC,GACpC;AACA,WAAO,KAAK,OAAO,MAAM,MAAM,QAAQ,SAAS;AAAA,EAClD;AAAA,EAEA,MAAM,UACJ,MACA,SACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,UAAU,MAAM,SAAS,QAAQ,QAAQ;AAAA,EAC9D;AAAA,EAEA,MAAM,WAAW,MAAc;AAC7B,WAAO,KAAK,OAAO,WAAW,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,WACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,WAAW,SAAS,OAAO;AAAA,EAChD;AAAA,EAEA,MAAM,SACJ,YACA,iBACA;AACA,WAAO,KAAK,OAAO,SAAS,YAAY,eAAe;AAAA,EACzD;AAAA,EAEA,MAAM,SACJ,MACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ;AAAA,EACpD;AAAA,EAEA,MAAM,WAAW,MAAc,SAA8C;AAC3E,UAAM,KAAK,OAAO,WAAW,MAAM,SAAS,IAAI;AAGhD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,UAAM,MAAM,KAAK,oBAAoB,MAAM,KAAK,aAAa,QAAQ,QAAQ;AAE7E,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAc;AAC/B,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,UAAM,KAAK,OAAO,aAAa,IAAI;AAEnC,qBAAiB,kBAAkB;AAAA,MACjC;AAAA,IACF,GAAG,KAAK;AAAA,EACV;AAAA,EAEA,MAAM,gBAAgB,UAAkB;AACtC,UAAM,WAAW,MAAM,KAAK,OAAO,gBAAgB;AAGnD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AAEA,WAAO,SAAS,MAAM,IAAI,WAAS;AAAA,MACjC,KAAK,KAAK,oBAAoB,KAAK,MAAM,KAAK,aAAc,QAAQ;AAAA,MACpE,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAAA,EAGQ,oBAAoB,MAAc,WAAmB,UAA0B;AACrF,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB,uBAAiB,yBAAyB;AAAA,QACxC;AAAA,QACA;AAAA,QACA;AAAA,MACF,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,wBAAwB,IAAI,gDAAgD;AAAA,IACtG;AAEA,QAAI;AACJ,QAAI;AACF,2BAAqB,kBAAkB,SAAS;AAAA,IAClD,SAAS,OAAO;AACd,uBAAiB,+BAA+B;AAAA,QAC9C;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM;AAAA,IACR;AAEA,UAAM,cAAc,mBAAmB,QAAQ;AAE/C,QAAI,aAAa;AAEf,YAAM,CAAC,MAAM,OAAO,IAAI,SAAS,MAAM,GAAG;AAC1C,YAAM,WAAW,WAAW;AAG5B,UAAI;AACF,cAAM,UAAU,IAAI,IAAI,UAAU,IAAI,IAAI,QAAQ,EAAE;AAEpD,cAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,IAAI;AAC3D,gBAAQ,WAAW;AAEnB,cAAM,WAAW,QAAQ,SAAS;AAElC,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf,GAAG,KAAK;AAER,eAAO;AAAA,MACT,SAAS,OAAO;AACd,yBAAiB,2BAA2B;AAAA,UAC1C;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD,GAAG,MAAM;AACT,cAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,MACxH;AAAA,IACF;AAGA,QAAI;AAEF,YAAM,WAAW;AACjB,YAAM,UAAU,IAAI,IAAI,GAAG,QAAQ,MAAM,QAAQ,EAAE;AAGnD,YAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,QAAQ;AAC/D,cAAQ,WAAW;AAEnB,YAAM,WAAW,QAAQ,SAAS;AAElC,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,WAAW;AAAA,QACX,aAAa;AAAA,MACf,GAAG,KAAK;AAER,aAAO;AAAA,IACT,SAAS,OAAO;AACd,uBAAiB,2BAA2B;AAAA,QAC1C;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAClD,GAAG,MAAM;AACT,YAAM,IAAI,cAAc,oCAAoC,iBAAiB,QAAQ,MAAM,UAAU,eAAe,EAAE;AAAA,IACxH;AAAA,EACF;AACF;","names":[]}