@cloudflare/sandbox 0.12.12 → 0.12.13

package/Dockerfile

@@ -4,7 +4,7 @@ ARG BUN_VERSION=1
 ARG NODE_VERSION=24
 # cloudflared release — shared across glibc and musl image variants.
 # Bump this together with the architecture-specific checksums below.
-ARG CLOUDFLARED_VERSION=2026.3.0
+ARG CLOUDFLARED_VERSION=2026.10.2
 # fuse-overlayfs release — backs the copy-on-write layer of restored backups.
 # Pinned upstream because Ubuntu 22.04 ships 1.7.1, which returns EEXIST when
 # a restored directory is deleted, recreated and listed before files are
@@ -42,8 +42,8 @@ FROM release-downloader AS cloudflared-binary
 
 ARG TARGETARCH
 ARG CLOUDFLARED_VERSION
-ARG CLOUDFLARED_SHA256_AMD64=4a9e50e6d6d798e90fcd01933151a90bf7edd99a0a55c28ad18f2e16263a5c30
-ARG CLOUDFLARED_SHA256_ARM64=0755ba4cbab59980e6148367fcf53a8f3ec85a97deefd63c2420cf7850769bee
+ARG CLOUDFLARED_SHA256_AMD64=35fbdd2beb378436c7da377d7358cea8e33f9c94a6705d1d8036bf9b0d6d8005
+ARG CLOUDFLARED_SHA256_ARM64=b7e55b4d9702c2ab5f8348f780bb1db044527fc555367714c78e0595750a4665
 
 RUN set -eux; \
     arch="${TARGETARCH:-}"; \
@@ -286,8 +286,12 @@ RUN ln -s /usr/local/python/bin/python3.11 /usr/local/bin/python3.11 && \
 # Set Python 3.11 as default python3
 RUN update-alternatives --install /usr/bin/python3 python3 /usr/local/bin/python3.11 1
 
-# Install Python packages for data science and code interpreter
+# Install Python packages for data science and code interpreter.
+# pip trusts its vendored certifi bundle on top of the system store, so the pip
+# that ships with python-build-standalone is upgraded first. 26.2.2 is the
+# first release whose bundle rejects the compromised eMudhra intermediates.
 RUN --mount=type=cache,target=/root/.cache/pip \
+    pip3 install --no-cache-dir --upgrade 'pip>=26.2.2' && \
     pip3 install --no-cache-dir matplotlib numpy pandas ipython
 
 # Copy Python executor

package/dist/bridge/index.js

@@ -1,6 +1,6 @@
 import "../dist-CqPJfREN.js";
 import "../errors-CHhwDJNh.js";
-import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-BYPanejK.js";
+import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-BGDk-c1Y.js";
 import { DurableObject, env, tracing } from "cloudflare:workers";
 import { Hono } from "hono";
 

package/dist/index.js

@@ -1,6 +1,6 @@
 import { c as isProcessStatus, d as createLogger, o as isExecResult, p as TraceContext, s as isProcess } from "./dist-CqPJfREN.js";
 import "./errors-CHhwDJNh.js";
-import { A as PortClient, B as InvalidBackupConfigError, C as collectFile, D as SandboxClient, E as isPlatformTransientError, F as BackupCreateError, G as SessionTerminatedError, H as ProcessExitedBeforeReadyError, I as BackupExpiredError, L as BackupNotFoundError, M as FileClient, N as CommandClient, O as UtilityClient, P as BackupClient, R as BackupRestoreError, T as isDurableObjectCodeUpdateReset, U as ProcessReadyTimeoutError, V as OperationInterruptedError, W as RPCTransportError, _ as responseToAsyncIterable, a as PREVIEW_PROXY_HEADER, b as sanitizeSandboxId, c as PREVIEW_PROXY_SANDBOX_ID_HEADER, d as BucketUnmountError, f as InvalidMountConfigError, g as parseSSEStream, h as asyncIterableToSSEStream, i as proxyTerminal, j as GitClient, k as ProcessClient, l as PREVIEW_PROXY_TOKEN_HEADER, m as S3FSMountError, n as Sandbox, o as PREVIEW_PROXY_HEADERS, p as MissingCredentialsError, r as getSandbox, s as PREVIEW_PROXY_PORT_HEADER, t as ContainerProxy, u as BucketMountError, v as CodeInterpreter, w as streamFile, x as validatePort, z as ContainerUnavailableError } from "./sandbox-BYPanejK.js";
+import { A as PortClient, B as InvalidBackupConfigError, C as collectFile, D as SandboxClient, E as isPlatformTransientError, F as BackupCreateError, G as SessionTerminatedError, H as ProcessExitedBeforeReadyError, I as BackupExpiredError, L as BackupNotFoundError, M as FileClient, N as CommandClient, O as UtilityClient, P as BackupClient, R as BackupRestoreError, T as isDurableObjectCodeUpdateReset, U as ProcessReadyTimeoutError, V as OperationInterruptedError, W as RPCTransportError, _ as responseToAsyncIterable, a as PREVIEW_PROXY_HEADER, b as sanitizeSandboxId, c as PREVIEW_PROXY_SANDBOX_ID_HEADER, d as BucketUnmountError, f as InvalidMountConfigError, g as parseSSEStream, h as asyncIterableToSSEStream, i as proxyTerminal, j as GitClient, k as ProcessClient, l as PREVIEW_PROXY_TOKEN_HEADER, m as S3FSMountError, n as Sandbox, o as PREVIEW_PROXY_HEADERS, p as MissingCredentialsError, r as getSandbox, s as PREVIEW_PROXY_PORT_HEADER, t as ContainerProxy, u as BucketMountError, v as CodeInterpreter, w as streamFile, x as validatePort, z as ContainerUnavailableError } from "./sandbox-BGDk-c1Y.js";
 
 //#region src/request-handler.ts
 function createProxyLogger(request) {

package/dist/opencode/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/opencode/types.ts","../../src/opencode/opencode.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOiB,UAAA,eAAA,CAMN;EAYM;EAaA,IAAA,CAAA,EAAA,MAAA;EAAyB;EAEhC,SAAA,CAAA,EAAA,MAAA;EAEA;EAAc,MAAA,CAAA,EA7Bb,MA6Ba;EAMX;;;;;EAAkC,GAAA,CAAA,EA7BvC,MA6BuC,CAAA,MAAA,EAAA,MAAA,CAAA;;;;AC+Q/C;AACW,UDvSM,cAAA,CCuSN;EACC;EACD,IAAA,EAAA,MAAA;EAAR;EAAO,GAAA,EAAA,MAAA;EAqEY;EAAyB,KAAA,EAAA,EDxWpC,OCwWoC,CAAA,IAAA,CAAA;;;;;;AAGrC,UDpWO,cCoWP,CAAA,UDpWgC,cCoWhC,CAAA,CAAA;EAyCM;EACL,MAAA,ED5YD,OC4YC;EACA;EACD,MAAA,ED5YA,cC4YA;;;;AAoDV;AACW,cD3bE,oBAAA,SAA6B,KAAA,CC2b/B;EACA,SAAA,IAAA,EAAA,yBAAA;EACD,SAAA,OAAA,ED3biB,sBC2bjB;EACP,WAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EDxbU,sBCwbV,EAAA,OAAA,CAAA,EDvbW,YCubX;;;;;;;ADveH;AAkBA;AAaA;;;;;AAUA;;;;;;;;;AC+QA;;;;;;AAwEA;;;;;;;;AA4CA;;;;;;;AAuDA;;;;;;AAIc,iBA/KQ,oBAAA,CA+KR,OAAA,EA9KH,OA8KG,CAAA,OAAA,CAAA,EAAA,OAAA,CAAA,EA7KF,eA6KE,CAAA,EA5KX,OA4KW,CA5KH,cA4KG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAvGQ,yBAAyB,yBACpC,4BACC,kBACT,QAAQ,eAAe;;;;;;;;iBAyCV,qBAAA,UACL,kBACA,0BACD,iBACP,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDK,eAAA,UACL,kBACA,0BACD,iBACP,WAAW,QAAQ"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/opencode/types.ts","../../src/opencode/opencode.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAOiB,UAAA,eAAA,CAAe;EAkBf;EAaA,IAAA,CAAA,EAAA,MAAA;EAAyB;EAEhC,SAAA,CAAA,EAAA,MAAA;EAEA;EAAc,MAAA,CAAA,EA7Bb,MA6Ba;EAMX;;;;;EAAkC,GAAA,CAAA,EA7BvC,MA6BuC,CAAA,MAAA,EAAA,MAAA,CAAA;;;;AC+Q/C;AACW,UDvSM,cAAA,CCuSN;EACC;EACD,IAAA,EAAA,MAAA;EAAR;EAAO,GAAA,EAAA,MAAA;EAqEY;EAAyB,KAAA,EAAA,EDxWpC,OCwWoC,CAAA,IAAA,CAAA;;;;;;AAGrC,UDpWO,cCoWP,CAAA,UDpWgC,cCoWhC,CAAA,CAAA;EAyCM;EACL,MAAA,ED5YD,OC4YC;EACA;EACD,MAAA,ED5YA,cC4YA;;;;AAoDV;AACW,cD3bE,oBAAA,SAA6B,KAAA,CC2b/B;EACA,SAAA,IAAA,EAAA,yBAAA;EACD,SAAA,OAAA,ED3biB,sBC2bjB;EACP,WAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EDxbU,sBCwbV,EAAA,OAAA,CAAA,EDvbW,YCubX;;;;;;;ADveH;AAkBA;AAaA;;;;;AAUA;;;;;;;;;AC+QA;;;;;;AAwEA;;;;;;;;AA4CA;;;;;;;AAuDA;;;;;;AAIc,iBA/KQ,oBAAA,CA+KR,OAAA,EA9KH,OA8KG,CAAA,OAAA,CAAA,EAAA,OAAA,CAAA,EA7KF,eA6KE,CAAA,EA5KX,OA4KW,CA5KH,cA4KG,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAvGQ,yBAAyB,yBACpC,4BACC,kBACT,QAAQ,eAAe;;;;;;;;iBAyCV,qBAAA,UACL,kBACA,0BACD,iBACP,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmDK,eAAA,UACL,kBACA,0BACD,iBACP,WAAW,QAAQ"}

package/dist/{sandbox-BYPanejK.js → sandbox-BGDk-c1Y.js}

@@ -7399,7 +7399,7 @@ function createTunnelsHandler(host) {
 * This file is auto-updated by .github/changeset-version.ts during releases
 * DO NOT EDIT MANUALLY - Changes will be overwritten on the next version bump
 */
-const SDK_VERSION = "0.12.12";
+const SDK_VERSION = "0.12.13";
 
 //#endregion
 //#region src/sandbox.ts
@@ -11886,4 +11886,4 @@ var Sandbox = class Sandbox extends Container {
 
 //#endregion
 export { PortClient as A, InvalidBackupConfigError as B, collectFile as C, SandboxClient as D, isPlatformTransientError as E, BackupCreateError as F, SessionTerminatedError as G, ProcessExitedBeforeReadyError as H, BackupExpiredError as I, BackupNotFoundError as L, FileClient as M, CommandClient as N, UtilityClient as O, BackupClient as P, BackupRestoreError as R, validateTunnelName as S, isDurableObjectCodeUpdateReset as T, ProcessReadyTimeoutError as U, OperationInterruptedError as V, RPCTransportError as W, responseToAsyncIterable as _, PREVIEW_PROXY_HEADER as a, sanitizeSandboxId as b, PREVIEW_PROXY_SANDBOX_ID_HEADER as c, BucketUnmountError as d, InvalidMountConfigError as f, parseSSEStream as g, asyncIterableToSSEStream as h, proxyTerminal as i, GitClient as j, ProcessClient as k, PREVIEW_PROXY_TOKEN_HEADER as l, S3FSMountError as m, Sandbox as n, PREVIEW_PROXY_HEADERS as o, MissingCredentialsError as p, getSandbox as r, PREVIEW_PROXY_PORT_HEADER as s, ContainerProxy$1 as t, BucketMountError as u, CodeInterpreter as v, streamFile as w, validatePort as x, SandboxSecurityError as y, ContainerUnavailableError as z };
-//# sourceMappingURL=sandbox-BYPanejK.js.map
+//# sourceMappingURL=sandbox-BGDk-c1Y.js.map