@cloudflare/sandbox 0.10.2 → 0.10.3

package/Dockerfile

@@ -2,9 +2,53 @@
 ARG BUN_VERSION=1
 # Node version — override via --build-arg NODE_VERSION=24
 ARG NODE_VERSION=24
+# cloudflared release — shared across glibc and musl image variants.
+# Bump this together with the architecture-specific checksums below.
+ARG CLOUDFLARED_VERSION=2026.3.0
 FROM oven/bun:${BUN_VERSION} AS bun-binary
 FROM node:${NODE_VERSION}-slim AS node-runtime
 
+# ============================================================================
+# cloudflared (Cloudflare Tunnel daemon) — enables sandbox.tunnels.*
+# Version pin lives at the top of this Dockerfile as a global ARG, shared
+# by every image variant so they ship the same release.
+# ============================================================================
+FROM alpine:3.21 AS cloudflared-binary
+
+ARG TARGETARCH
+ARG CLOUDFLARED_VERSION
+ARG CLOUDFLARED_SHA256_AMD64=4a9e50e6d6d798e90fcd01933151a90bf7edd99a0a55c28ad18f2e16263a5c30
+ARG CLOUDFLARED_SHA256_ARM64=0755ba4cbab59980e6148367fcf53a8f3ec85a97deefd63c2420cf7850769bee
+
+# Inject the host's extra CA bundle when downloading behind a TLS-intercepting
+# proxy (e.g. Cloudflare WARP / Zero Trust). No-op when the secret isn't passed.
+RUN --mount=type=secret,id=wrangler_ca \
+    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
+        cat /run/secrets/wrangler_ca >> /etc/ssl/certs/ca-certificates.crt; \
+        mkdir -p /usr/local/share/ca-certificates && \
+        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt; \
+    fi && \
+    apk add --no-cache ca-certificates curl && \
+    if [ -f /usr/local/share/ca-certificates/wrangler-dev-ca.crt ]; then \
+        update-ca-certificates; \
+    fi
+
+RUN set -eux; \
+    arch="${TARGETARCH:-}"; \
+    if [ -z "$arch" ]; then \
+      arch="$(apk --print-arch)"; \
+    fi; \
+    case "$arch" in \
+      amd64|x86_64) suffix=amd64; sha="${CLOUDFLARED_SHA256_AMD64}" ;; \
+      arm64|aarch64) suffix=arm64; sha="${CLOUDFLARED_SHA256_ARM64}" ;; \
+      *) echo "Unsupported arch for cloudflared: $arch" >&2; exit 1 ;; \
+    esac; \
+    url="https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-${suffix}"; \
+    curl -fsSL -o /cloudflared "$url"; \
+    echo "$sha  /cloudflared" | sha256sum -c -; \
+    chmod +x /cloudflared; \
+    /cloudflared --version
+
 # Sandbox container images (default and python variants)
 # Multi-stage build optimized for Turborepo monorepo
 
@@ -152,26 +196,8 @@ COPY --from=builder /app/packages/sandbox-container/dist/runtime/executors/javas
 # Users with custom startup scripts that call `bun /container-server/dist/index.js` need this
 COPY --from=builder /app/packages/sandbox-container/dist/index.js ./dist/
 
-# ============================================================================
-# cloudflared (Cloudflare Tunnel daemon) — enables sandbox.tunnels.*
-# Pinned version with sha256 verification per architecture.
-# Skipped in the musl/Alpine stage (no musl prebuilt).
-# ============================================================================
-ARG CLOUDFLARED_VERSION=2026.3.0
-ARG CLOUDFLARED_SHA256_AMD64=4a9e50e6d6d798e90fcd01933151a90bf7edd99a0a55c28ad18f2e16263a5c30
-ARG CLOUDFLARED_SHA256_ARM64=0755ba4cbab59980e6148367fcf53a8f3ec85a97deefd63c2420cf7850769bee
-RUN set -eux; \
-    arch="$(dpkg --print-architecture)"; \
-    case "$arch" in \
-      amd64) suffix=amd64; sha="${CLOUDFLARED_SHA256_AMD64}" ;; \
-      arm64) suffix=arm64; sha="${CLOUDFLARED_SHA256_ARM64}" ;; \
-      *) echo "Unsupported arch for cloudflared: $arch" >&2; exit 1 ;; \
-    esac; \
-    url="https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-${suffix}"; \
-    curl -fsSL -o /usr/local/bin/cloudflared "$url"; \
-    echo "$sha  /usr/local/bin/cloudflared" | sha256sum -c -; \
-    chmod +x /usr/local/bin/cloudflared; \
-    cloudflared --version
+COPY --from=cloudflared-binary /cloudflared /usr/local/bin/cloudflared
+RUN cloudflared --version
 
 # Inject the host's extra CA bundle when running locally behind a TLS-
 # intercepting proxy (e.g. Cloudflare WARP / Zero Trust). See
@@ -338,6 +364,11 @@ RUN apk add --no-cache bash file git curl libstdc++ libgcc s3fs-fuse fuse
 
 RUN sed -i 's/#user_allow_other/user_allow_other/' /etc/fuse.conf
 
+# The Alpine variant uses the same cloudflared release asset as the glibc
+# variants. It is a static binary that runs on musl without gcompat.
+COPY --from=cloudflared-binary /cloudflared /usr/local/bin/cloudflared
+RUN cloudflared --version
+
 COPY --from=builder /app/packages/sandbox-container/dist/sandbox-musl /container-server/sandbox
 
 WORKDIR /container-server

package/README.md

@@ -137,8 +137,6 @@ Notes:
   seconds while DNS propagates, even after `get()` resolves.
 - `*.trycloudflare.com` buffers `text/event-stream` responses.
   WebSockets work fine.
-- The musl/Alpine image variant does not ship cloudflared (no upstream
-  musl prebuilt); `sandbox.tunnels` is unavailable on that variant.
 - Local builds behind a TLS-intercepting proxy (e.g. Cloudflare WARP)
   need the host CA bundle injected at build time — see
   [DOCKER_README.md](../../DOCKER_README.md).

package/dist/bridge/index.js

@@ -1,6 +1,6 @@
 import "../dist-B_eXrP83.js";
 import "../errors-8Hvune8K.js";
-import { h as streamFile, n as getSandbox } from "../sandbox-BcEq4aUF.js";
+import { h as streamFile, n as getSandbox } from "../sandbox-B-MUmsli.js";
 import { DurableObject, env } from "cloudflare:workers";
 import { Hono } from "hono";
 

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as StartProcessRequest, A as DesktopStopResponse, At as ProcessOptions, B as ExecuteResponse, Bt as WaitForPortOptions, C as ClickOptions, Ct as PortListResult, D as DesktopStartOptions, Dt as ProcessKillResult, E as DesktopClient, Et as ProcessInfoResult, F as ScreenshotRegion, Ft as SandboxOptions, G as HttpClientOptions, Gt as PtyOptions, H as BaseApiResponse, Ht as isExecResult, I as ScreenshotResponse, It as SandboxTransport, J as SessionRequest, Jt as Execution, K as RequestConfig, Kt as CodeContext, L as ScrollDirection, Lt as SessionOptions, M as ScreenSizeResponse, Mt as ProcessStatus, N as ScreenshotBytesResponse, Nt as RemoteMountBucketOptions, O as DesktopStartResponse, Ot as ProcessListResult, P as ScreenshotOptions, Pt as RestoreBackupResult, Q as ExposePortRequest, R as TypeOptions, Rt as StreamOptions, S as WriteFileRequest, St as PortExposeResult, T as Desktop, Tt as ProcessCleanupResult, U as ContainerStub, Ut as isProcess, V as BackupClient, Vt as WatchOptions, W as ErrorResponse, Wt as isProcessStatus, X as TunnelInfo, Xt as RunCodeOptions, Y as SandboxInterpreterAPI, Yt as ExecutionResult, Z as ExecuteRequest, _ as GitClient, _t as ListFilesOptions, a as CreateSessionRequest, at as CheckChangesResult, b as MkdirRequest, bt as MountBucketOptions, c as DeleteSessionResponse, ct as ExecOptions, d as ProcessClient, dt as FileChunk, et as BackupOptions, f as PortClient, ft as FileMetadata, g as GitCheckoutRequest, gt as ISandbox, h as InterpreterClient, ht as GitCheckoutResult, i as CommandsResponse, it as CheckChangesOptions, j as KeyInput, jt as ProcessStartResult, k as DesktopStatusResponse, kt as ProcessLogsResult, l as PingResponse, lt as ExecResult, m as ExecutionCallbacks, mt as FileWatchSSEEvent, n as getSandbox, nt as BucketCredentials, o as CreateSessionResponse, ot as DirectoryBackup, p as UnexposePortRequest, pt as FileStreamEvent, q as ResponseHandler, qt as CreateContextOptions, r as SandboxClient, rt as BucketProvider, s as DeleteSessionRequest, st as ExecEvent, t as Sandbox, tt as BaseExecOptions, u as UtilityClient, ut as ExecutionSession, v as FileClient, vt as LocalMountBucketOptions, w as CursorPositionResponse, wt as Process, x as ReadFileRequest, xt as PortCloseResult, y as FileOperationRequest, yt as LogEvent, z as CommandClient, zt as WaitForLogResult } from "./sandbox-KdzTTnWq.js";
+import { $ as StartProcessRequest, A as DesktopStopResponse, At as ProcessOptions, B as ExecuteResponse, Bt as WaitForPortOptions, C as ClickOptions, Ct as PortListResult, D as DesktopStartOptions, Dt as ProcessKillResult, E as DesktopClient, Et as ProcessInfoResult, F as ScreenshotRegion, Ft as SandboxOptions, G as HttpClientOptions, Gt as PtyOptions, H as BaseApiResponse, Ht as isExecResult, I as ScreenshotResponse, It as SandboxTransport, J as SessionRequest, Jt as Execution, K as RequestConfig, Kt as CodeContext, L as ScrollDirection, Lt as SessionOptions, M as ScreenSizeResponse, Mt as ProcessStatus, N as ScreenshotBytesResponse, Nt as RemoteMountBucketOptions, O as DesktopStartResponse, Ot as ProcessListResult, P as ScreenshotOptions, Pt as RestoreBackupResult, Q as ExposePortRequest, R as TypeOptions, Rt as StreamOptions, S as WriteFileRequest, St as PortExposeResult, T as Desktop, Tt as ProcessCleanupResult, U as ContainerStub, Ut as isProcess, V as BackupClient, Vt as WatchOptions, W as ErrorResponse, Wt as isProcessStatus, X as TunnelInfo, Xt as RunCodeOptions, Y as SandboxInterpreterAPI, Yt as ExecutionResult, Z as ExecuteRequest, _ as GitClient, _t as ListFilesOptions, a as CreateSessionRequest, at as CheckChangesResult, b as MkdirRequest, bt as MountBucketOptions, c as DeleteSessionResponse, ct as ExecOptions, d as ProcessClient, dt as FileChunk, et as BackupOptions, f as PortClient, ft as FileMetadata, g as GitCheckoutRequest, gt as ISandbox, h as InterpreterClient, ht as GitCheckoutResult, i as CommandsResponse, it as CheckChangesOptions, j as KeyInput, jt as ProcessStartResult, k as DesktopStatusResponse, kt as ProcessLogsResult, l as PingResponse, lt as ExecResult, m as ExecutionCallbacks, mt as FileWatchSSEEvent, n as getSandbox, nt as BucketCredentials, o as CreateSessionResponse, ot as DirectoryBackup, p as UnexposePortRequest, pt as FileStreamEvent, q as ResponseHandler, qt as CreateContextOptions, r as SandboxClient, rt as BucketProvider, s as DeleteSessionRequest, st as ExecEvent, t as Sandbox, tt as BaseExecOptions, u as UtilityClient, ut as ExecutionSession, v as FileClient, vt as LocalMountBucketOptions, w as CursorPositionResponse, wt as Process, x as ReadFileRequest, xt as PortCloseResult, y as FileOperationRequest, yt as LogEvent, z as CommandClient, zt as WaitForLogResult } from "./sandbox-CwcSm_60.js";
 import { a as DesktopCoordinateErrorContext, d as RPCTransportContext, f as RPCTransportErrorKind, g as ErrorCode, h as OperationType, i as BackupRestoreContext, l as ProcessExitedBeforeReadyContext, m as ErrorResponse$1, n as BackupExpiredContext, o as DesktopErrorContext, p as SessionTerminatedContext, r as BackupNotFoundContext, s as InvalidBackupConfigContext, t as BackupCreateContext, u as ProcessReadyTimeoutContext } from "./contexts-D_shbnJs.js";
 import { ContainerProxy } from "@cloudflare/containers";
 

package/dist/index.js

@@ -1,6 +1,6 @@
 import { a as isExecResult, o as isProcess, s as isProcessStatus } from "./dist-B_eXrP83.js";
 import "./errors-8Hvune8K.js";
-import { A as DesktopInvalidOptionsError, C as CommandClient, D as BackupNotFoundError, E as BackupExpiredError, F as InvalidBackupConfigError, I as ProcessExitedBeforeReadyError, L as ProcessReadyTimeoutError, M as DesktopProcessCrashedError, N as DesktopStartFailedError, O as BackupRestoreError, P as DesktopUnavailableError, R as RPCTransportError, S as DesktopClient, T as BackupCreateError, _ as UtilityClient, a as BucketMountError, b as GitClient, c as MissingCredentialsError, d as parseSSEStream, f as responseToAsyncIterable, g as SandboxClient, h as streamFile, i as proxyTerminal, j as DesktopNotStartedError, k as DesktopInvalidCoordinatesError, l as S3FSMountError, m as collectFile, n as getSandbox, o as BucketUnmountError, p as CodeInterpreter, r as proxyToSandbox, s as InvalidMountConfigError, t as Sandbox, u as asyncIterableToSSEStream, v as ProcessClient, w as BackupClient, x as FileClient, y as PortClient, z as SessionTerminatedError } from "./sandbox-BcEq4aUF.js";
+import { A as DesktopInvalidOptionsError, C as CommandClient, D as BackupNotFoundError, E as BackupExpiredError, F as InvalidBackupConfigError, I as ProcessExitedBeforeReadyError, L as ProcessReadyTimeoutError, M as DesktopProcessCrashedError, N as DesktopStartFailedError, O as BackupRestoreError, P as DesktopUnavailableError, R as RPCTransportError, S as DesktopClient, T as BackupCreateError, _ as UtilityClient, a as BucketMountError, b as GitClient, c as MissingCredentialsError, d as parseSSEStream, f as responseToAsyncIterable, g as SandboxClient, h as streamFile, i as proxyTerminal, j as DesktopNotStartedError, k as DesktopInvalidCoordinatesError, l as S3FSMountError, m as collectFile, n as getSandbox, o as BucketUnmountError, p as CodeInterpreter, r as proxyToSandbox, s as InvalidMountConfigError, t as Sandbox, u as asyncIterableToSSEStream, v as ProcessClient, w as BackupClient, x as FileClient, y as PortClient, z as SessionTerminatedError } from "./sandbox-B-MUmsli.js";
 import { ContainerProxy } from "@cloudflare/containers";
 
 export { BackupClient, BackupCreateError, BackupExpiredError, BackupNotFoundError, BackupRestoreError, BucketMountError, BucketUnmountError, CodeInterpreter, CommandClient, ContainerProxy, DesktopClient, DesktopInvalidCoordinatesError, DesktopInvalidOptionsError, DesktopNotStartedError, DesktopProcessCrashedError, DesktopStartFailedError, DesktopUnavailableError, FileClient, GitClient, InvalidBackupConfigError, InvalidMountConfigError, MissingCredentialsError, PortClient, ProcessClient, ProcessExitedBeforeReadyError, ProcessReadyTimeoutError, RPCTransportError, S3FSMountError, Sandbox, SandboxClient, SessionTerminatedError, UtilityClient, asyncIterableToSSEStream, collectFile, getSandbox, isExecResult, isProcess, isProcessStatus, parseSSEStream, proxyTerminal, proxyToSandbox, responseToAsyncIterable, streamFile };

package/dist/openai/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Sandbox } from "../sandbox-KdzTTnWq.js";
+import { t as Sandbox } from "../sandbox-CwcSm_60.js";
 import { ApplyPatchOperation, ApplyPatchResult, Editor as Editor$1, Shell as Shell$1, ShellAction, ShellResult } from "@openai/agents";
 
 //#region src/openai/index.d.ts

package/dist/opencode/index.d.ts

@@ -1,4 +1,4 @@
-import { t as Sandbox } from "../sandbox-KdzTTnWq.js";
+import { t as Sandbox } from "../sandbox-CwcSm_60.js";
 import { c as OpencodeStartupContext } from "../contexts-D_shbnJs.js";
 import { OpencodeClient } from "@opencode-ai/sdk/v2/client";
 import { Config } from "@opencode-ai/sdk/v2";

package/dist/opencode/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/opencode/types.ts","../../src/opencode/opencode.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOiB,UAAA,eAAA,CAMN;EAQM;EAaA,IAAA,CAAA,EAAA,MAAA;EAAyB;EAEhC,SAAA,CAAA,EAAA,MAAA;EAEA;EAAc,MAAA,CAAA,EAzBb,MAyBa;EAMX;EAEc,GAAA,CAAA,EA/BnB,MA+BmB,CAAA,MAAA,EAAA,MAAA,CAAA;;;;;UAzBV,cAAA;;;ECsSK;EACX,GAAA,EAAA,MAAA;EACC;EACD,KAAA,EAAA,EDnSA,OCmSA,CAAA,IAAA,CAAA;;;AAqEX;;;AAEY,UDnWK,cCmWL,CAAA,UDnW8B,cCmW9B,CAAA,CAAA;EACc;EAAf,MAAA,EDlWD,OCkWC;EAAR;EAAO,MAAA,EDhWA,cCgWA;AA0BV;;;;AAIW,cDxXE,oBAAA,SAA6B,KAAA,CCwX/B;EAAR,SAAA,IAAA,EAAA,yBAAA;EAAO,SAAA,OAAA,EDtXiB,sBCsXjB;EAmDM,WAAA,CAAA,OAAe,EAAA,MAAA,EAAA,OAAA,EDralB,sBCqakB,EAAA,OAAA,CAAA,EDpajB,YCoaiB;;;;;;;ADhd/B;AAcA;AAaA;;;;;AAUA;;;;;;;;;AC+QA;;;;;;AAwEA;;;;;;;;AA6BA;;;;;;;AAuDA;;;;;;AAIc,iBAhKQ,oBAAA,CAgKR,OAAA,EA/JH,OA+JG,CAAA,OAAA,CAAA,EAAA,OAAA,CAAA,EA9JF,eA8JE,CAAA,EA7JX,OA6JW,CA7JH,cA6JG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAxFQ,yBAAyB,yBACpC,4BACC,kBACT,QAAQ,eAAe;;;;;;;;iBA0BV,qBAAA,UACL,kBACA,0BACD,iBACP,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDK,eAAA,UACL,kBACA,0BACD,iBACP,WAAW,QAAQ"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/opencode/types.ts","../../src/opencode/opencode.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOiB,UAAA,eAAA,CAAe;EAcf;EAaA,IAAA,CAAA,EAAA,MAAA;EAAyB;EAEhC,SAAA,CAAA,EAAA,MAAA;EAEA;EAAc,MAAA,CAAA,EAzBb,MAyBa;EAMX;EAEc,GAAA,CAAA,EA/BnB,MA+BmB,CAAA,MAAA,EAAA,MAAA,CAAA;;;;;UAzBV,cAAA;;;ECsSK;EACX,GAAA,EAAA,MAAA;EACC;EACD,KAAA,EAAA,EDnSA,OCmSA,CAAA,IAAA,CAAA;;;AAqEX;;;AAEY,UDnWK,cCmWL,CAAA,UDnW8B,cCmW9B,CAAA,CAAA;EACc;EAAf,MAAA,EDlWD,OCkWC;EAAR;EAAO,MAAA,EDhWA,cCgWA;AA0BV;;;;AAIW,cDxXE,oBAAA,SAA6B,KAAA,CCwX/B;EAAR,SAAA,IAAA,EAAA,yBAAA;EAAO,SAAA,OAAA,EDtXiB,sBCsXjB;EAmDM,WAAA,CAAA,OAAe,EAAA,MAAA,EAAA,OAAA,EDralB,sBCqakB,EAAA,OAAA,CAAA,EDpajB,YCoaiB;;;;;;;ADhd/B;AAcA;AAaA;;;;;AAUA;;;;;;;;;AC+QA;;;;;;AAwEA;;;;;;;;AA6BA;;;;;;;AAuDA;;;;;;AAIc,iBAhKQ,oBAAA,CAgKR,OAAA,EA/JH,OA+JG,CAAA,OAAA,CAAA,EAAA,OAAA,CAAA,EA9JF,eA8JE,CAAA,EA7JX,OA6JW,CA7JH,cA6JG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAxFQ,yBAAyB,yBACpC,4BACC,kBACT,QAAQ,eAAe;;;;;;;;iBA0BV,qBAAA,UACL,kBACA,0BACD,iBACP,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDK,eAAA,UACL,kBACA,0BACD,iBACP,WAAW,QAAQ"}