@cloudflare/sandbox 0.12.2 → 0.12.3

package/dist/bridge/index.js

@@ -1,6 +1,6 @@
 import "../dist-B_eXrP83.js";
-import "../errors-aRUdk9K8.js";
-import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-BXMrasVs.js";
+import "../errors-CpkKPbWC.js";
+import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-DI6suZAc.js";
 import { DurableObject, env } from "cloudflare:workers";
 import { Hono } from "hono";
 

package/dist/{contexts-B0_bcx9f.d.ts → contexts-mjA8ZsDG.d.ts}

@@ -70,6 +70,8 @@ declare const ErrorCode: {
   readonly UNKNOWN_ERROR: "UNKNOWN_ERROR";
   readonly INTERNAL_ERROR: "INTERNAL_ERROR";
   readonly RPC_TRANSPORT_ERROR: "RPC_TRANSPORT_ERROR";
+  readonly CONTAINER_UNAVAILABLE: "CONTAINER_UNAVAILABLE";
+  readonly OPERATION_INTERRUPTED: "OPERATION_INTERRUPTED";
 };
 type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];
 //#endregion
@@ -198,6 +200,26 @@ interface OpencodeStartupContext {
   stderr?: string;
   command?: string;
 }
+/**
+ * Container availability error context. Surfaced when the sandbox container
+ * cannot accept the incoming RPC connection. The container may be starting
+ * up, undergoing a runtime replacement, or temporarily unhealthy. The
+ * caller should retry the same operation.
+ */
+interface ContainerUnavailableContext {
+  /**
+   * Categorical reason distinguishing startup unavailability from runtime
+   * replacement and exhausted upgrade retries.
+   */
+  reason: 'container_starting' | 'container_unhealthy' | 'container_replaced' | 'rpc_upgrade_failed';
+  /**
+   * Always true — this error represents a transient unavailability, not a
+   * permanent failure. Callers should retry the same operation.
+   */
+  retryable: true;
+  /** Suggested delay in milliseconds before the next retry attempt. */
+  retryAfterMs?: number;
+}
 /**
  * RPC transport error contexts. Surfaced when the capnweb WebSocket session
  * fails on the SDK side rather than the container reporting a structured
@@ -227,6 +249,47 @@ interface RPCTransportContext {
   /** WebSocket close reason, when available (kind === 'peer_closed'). */
   closeReason?: string;
 }
+/**
+ * Reason a sandbox-owned operation was interrupted. Callers may branch on
+ * this to decide whether to retry the full operation.
+ */
+type OperationInterruptedReason = /** The container runtime was replaced while the operation was in progress. */
+'runtime_replaced'
+/** The RPC session was disposed mid-operation. */ | 'transport_disposed'
+/** The sandbox lifetime changed (destroy() was called). Not retryable. */ | 'sandbox_lifetime_changed'
+/** Internal recovery attempts were exhausted. Not retryable. */ | 'recovery_exhausted';
+/**
+ * Operation interruption context. Surfaced when a sandbox-owned operation
+ * (such as backup restore) was interrupted by a runtime replacement or
+ * sandbox lifetime change. Public-safe: does not include internal ids.
+ */
+interface OperationInterruptedContext {
+  /**
+   * Categorical reason. Use `retryable` to decide whether to retry rather
+   * than branching on the reason string.
+   */
+  reason: OperationInterruptedReason;
+  /** Name of the operation that was interrupted (e.g. 'backup.restore'). */
+  operation: string;
+  /** Lifecycle phase at which the interruption was detected. */
+  phase: string;
+  /**
+   * Whether the operation's container-local side effects reached the runtime.
+   * `false` means the operation was interrupted before admission; `true`
+   * means effects were committed; `'unknown'` means the operation may or may
+   * not have committed.
+   */
+  admitted: boolean | 'unknown';
+  /**
+   * Whether the caller can safely retry the full operation from the beginning.
+   * `sandbox_lifetime_changed` and `recovery_exhausted` set this to false.
+   */
+  retryable: boolean;
+  /** Number of internal recovery attempts made before surfacing this error. */
+  recoveryAttempts?: number;
+  /** Maximum number of internal recovery attempts allowed. */
+  maxRecoveryAttempts?: number;
+}
 //#endregion
-export { InvalidBackupConfigContext as a, ProcessReadyTimeoutContext as c, SessionTerminatedContext as d, ErrorResponse as f, BackupRestoreContext as i, RPCTransportContext as l, ErrorCode as m, BackupExpiredContext as n, OpencodeStartupContext as o, OperationType as p, BackupNotFoundContext as r, ProcessExitedBeforeReadyContext as s, BackupCreateContext as t, RPCTransportErrorKind as u };
-//# sourceMappingURL=contexts-B0_bcx9f.d.ts.map
+export { ErrorCode as _, ContainerUnavailableContext as a, OperationInterruptedContext as c, ProcessReadyTimeoutContext as d, RPCTransportContext as f, OperationType as g, ErrorResponse as h, BackupRestoreContext as i, OperationInterruptedReason as l, SessionTerminatedContext as m, BackupExpiredContext as n, InvalidBackupConfigContext as o, RPCTransportErrorKind as p, BackupNotFoundContext as r, OpencodeStartupContext as s, BackupCreateContext as t, ProcessExitedBeforeReadyContext as u };
+//# sourceMappingURL=contexts-mjA8ZsDG.d.ts.map

package/dist/contexts-mjA8ZsDG.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contexts-mjA8ZsDG.d.ts","names":["ErrorCode","ErrorCode","Operation","OperationType","ErrorResponse","TContext","Record","ServiceError","ServiceResult","T","OperationType","FileNotFoundContext","FileExistsContext","FileTooLargeContext","FileSystemContext","CommandNotFoundContext","CommandErrorContext","ProcessNotFoundContext","ProcessErrorContext","SessionAlreadyExistsContext","SessionDestroyedContext","SessionTerminatedContext","ProcessReadyTimeoutContext","ProcessExitedBeforeReadyContext","PortAlreadyExposedContext","PortNotExposedContext","InvalidPortContext","PortErrorContext","GitRepositoryNotFoundContext","GitAuthFailedContext","GitBranchNotFoundContext","GitErrorContext","InterpreterNotReadyContext","ContextNotFoundContext","CodeExecutionContext","ValidationFailedContext","Array","BucketMountContext","MissingCredentialsContext","InvalidMountConfigContext","BackupCreateContext","BackupRestoreContext","BackupNotFoundContext","BackupExpiredContext","InvalidBackupConfigContext","OpencodeStartupContext","InternalErrorContext","ContainerUnavailableContext","RPCTransportErrorKind","RPCTransportContext","OperationInterruptedReason","OperationInterruptedContext"],"sources":["../../shared/dist/errors/codes.d.ts","../../shared/dist/errors/types.d.ts","../../shared/dist/errors/contexts.d.ts"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport declare const ErrorCode: {\n    readonly FILE_NOT_FOUND: \"FILE_NOT_FOUND\";\n    readonly PERMISSION_DENIED: \"PERMISSION_DENIED\";\n    readonly FILE_EXISTS: \"FILE_EXISTS\";\n    readonly IS_DIRECTORY: \"IS_DIRECTORY\";\n    readonly NOT_DIRECTORY: \"NOT_DIRECTORY\";\n    readonly FILE_TOO_LARGE: \"FILE_TOO_LARGE\";\n    readonly NO_SPACE: \"NO_SPACE\";\n    readonly TOO_MANY_FILES: \"TOO_MANY_FILES\";\n    readonly RESOURCE_BUSY: \"RESOURCE_BUSY\";\n    readonly READ_ONLY: \"READ_ONLY\";\n    readonly NAME_TOO_LONG: \"NAME_TOO_LONG\";\n    readonly TOO_MANY_LINKS: \"TOO_MANY_LINKS\";\n    readonly FILESYSTEM_ERROR: \"FILESYSTEM_ERROR\";\n    readonly COMMAND_NOT_FOUND: \"COMMAND_NOT_FOUND\";\n    readonly COMMAND_PERMISSION_DENIED: \"COMMAND_PERMISSION_DENIED\";\n    readonly INVALID_COMMAND: \"INVALID_COMMAND\";\n    readonly COMMAND_EXECUTION_ERROR: \"COMMAND_EXECUTION_ERROR\";\n    readonly STREAM_START_ERROR: \"STREAM_START_ERROR\";\n    readonly PROCESS_NOT_FOUND: \"PROCESS_NOT_FOUND\";\n    readonly PROCESS_PERMISSION_DENIED: \"PROCESS_PERMISSION_DENIED\";\n    readonly PROCESS_ERROR: \"PROCESS_ERROR\";\n    readonly SESSION_ALREADY_EXISTS: \"SESSION_ALREADY_EXISTS\";\n    readonly SESSION_DESTROYED: \"SESSION_DESTROYED\";\n    readonly SESSION_TERMINATED: \"SESSION_TERMINATED\";\n    readonly PORT_ALREADY_EXPOSED: \"PORT_ALREADY_EXPOSED\";\n    readonly PORT_IN_USE: \"PORT_IN_USE\";\n    readonly PORT_NOT_EXPOSED: \"PORT_NOT_EXPOSED\";\n    readonly INVALID_PORT_NUMBER: \"INVALID_PORT_NUMBER\";\n    readonly INVALID_PORT: \"INVALID_PORT\";\n    readonly SERVICE_NOT_RESPONDING: \"SERVICE_NOT_RESPONDING\";\n    readonly PORT_OPERATION_ERROR: \"PORT_OPERATION_ERROR\";\n    readonly CUSTOM_DOMAIN_REQUIRED: \"CUSTOM_DOMAIN_REQUIRED\";\n    readonly GIT_REPOSITORY_NOT_FOUND: \"GIT_REPOSITORY_NOT_FOUND\";\n    readonly GIT_BRANCH_NOT_FOUND: \"GIT_BRANCH_NOT_FOUND\";\n    readonly GIT_AUTH_FAILED: \"GIT_AUTH_FAILED\";\n    readonly GIT_NETWORK_ERROR: \"GIT_NETWORK_ERROR\";\n    readonly INVALID_GIT_URL: \"INVALID_GIT_URL\";\n    readonly GIT_CLONE_FAILED: \"GIT_CLONE_FAILED\";\n    readonly GIT_CHECKOUT_FAILED: \"GIT_CHECKOUT_FAILED\";\n    readonly GIT_OPERATION_FAILED: \"GIT_OPERATION_FAILED\";\n    readonly BUCKET_MOUNT_ERROR: \"BUCKET_MOUNT_ERROR\";\n    readonly BUCKET_UNMOUNT_ERROR: \"BUCKET_UNMOUNT_ERROR\";\n    readonly S3FS_MOUNT_ERROR: \"S3FS_MOUNT_ERROR\";\n    readonly MISSING_CREDENTIALS: \"MISSING_CREDENTIALS\";\n    readonly INVALID_MOUNT_CONFIG: \"INVALID_MOUNT_CONFIG\";\n    readonly BACKUP_CREATE_FAILED: \"BACKUP_CREATE_FAILED\";\n    readonly BACKUP_RESTORE_FAILED: \"BACKUP_RESTORE_FAILED\";\n    readonly BACKUP_NOT_FOUND: \"BACKUP_NOT_FOUND\";\n    readonly BACKUP_EXPIRED: \"BACKUP_EXPIRED\";\n    readonly INVALID_BACKUP_CONFIG: \"INVALID_BACKUP_CONFIG\";\n    readonly INTERPRETER_NOT_READY: \"INTERPRETER_NOT_READY\";\n    readonly CONTEXT_NOT_FOUND: \"CONTEXT_NOT_FOUND\";\n    readonly CODE_EXECUTION_ERROR: \"CODE_EXECUTION_ERROR\";\n    readonly PYTHON_NOT_AVAILABLE: \"PYTHON_NOT_AVAILABLE\";\n    readonly JAVASCRIPT_NOT_AVAILABLE: \"JAVASCRIPT_NOT_AVAILABLE\";\n    readonly OPENCODE_STARTUP_FAILED: \"OPENCODE_STARTUP_FAILED\";\n    readonly PROCESS_READY_TIMEOUT: \"PROCESS_READY_TIMEOUT\";\n    readonly PROCESS_EXITED_BEFORE_READY: \"PROCESS_EXITED_BEFORE_READY\";\n    readonly WATCH_NOT_FOUND: \"WATCH_NOT_FOUND\";\n    readonly WATCH_START_ERROR: \"WATCH_START_ERROR\";\n    readonly WATCH_STOP_ERROR: \"WATCH_STOP_ERROR\";\n    readonly VALIDATION_FAILED: \"VALIDATION_FAILED\";\n    readonly INVALID_JSON_RESPONSE: \"INVALID_JSON_RESPONSE\";\n    readonly UNKNOWN_ERROR: \"UNKNOWN_ERROR\";\n    readonly INTERNAL_ERROR: \"INTERNAL_ERROR\";\n    readonly RPC_TRANSPORT_ERROR: \"RPC_TRANSPORT_ERROR\";\n    readonly CONTAINER_UNAVAILABLE: \"CONTAINER_UNAVAILABLE\";\n    readonly OPERATION_INTERRUPTED: \"OPERATION_INTERRUPTED\";\n};\nexport type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];\n//# sourceMappingURL=codes.d.ts.map","import type { ErrorCode } from './codes';\n/**\n * Standard operation types\n */\nexport declare const Operation: {\n    readonly FILE_READ: \"file.read\";\n    readonly FILE_WRITE: \"file.write\";\n    readonly FILE_DELETE: \"file.delete\";\n    readonly FILE_MOVE: \"file.move\";\n    readonly FILE_RENAME: \"file.rename\";\n    readonly FILE_STAT: \"file.stat\";\n    readonly DIRECTORY_CREATE: \"directory.create\";\n    readonly DIRECTORY_LIST: \"directory.list\";\n    readonly COMMAND_EXECUTE: \"command.execute\";\n    readonly COMMAND_STREAM: \"command.stream\";\n    readonly PROCESS_START: \"process.start\";\n    readonly PROCESS_KILL: \"process.kill\";\n    readonly PROCESS_LIST: \"process.list\";\n    readonly PROCESS_GET: \"process.get\";\n    readonly PROCESS_LOGS: \"process.logs\";\n    readonly GIT_CLONE: \"git.clone\";\n    readonly GIT_CHECKOUT: \"git.checkout\";\n    readonly GIT_OPERATION: \"git.operation\";\n    readonly BACKUP_CREATE: \"backup.create\";\n    readonly BACKUP_RESTORE: \"backup.restore\";\n    readonly BACKUP_UNMOUNT: \"backup.unmount\";\n    readonly CODE_EXECUTE: \"code.execute\";\n    readonly CODE_CONTEXT_CREATE: \"code.context.create\";\n    readonly CODE_CONTEXT_DELETE: \"code.context.delete\";\n};\nexport type OperationType = (typeof Operation)[keyof typeof Operation];\n/**\n * Standard error response format with generic context type\n * TContext allows type-safe access to error-specific context\n */\nexport interface ErrorResponse<TContext = Record<string, unknown>> {\n    /**\n     * Error type code (machine-readable)\n     */\n    code: ErrorCode;\n    /**\n     * Human-readable error message\n     */\n    message: string;\n    /**\n     * Operation that was attempted (useful for debugging and logging)\n     */\n    operation?: OperationType;\n    /**\n     * Structured error context with relevant details\n     * Type varies based on error code\n     */\n    context: TContext;\n    /**\n     * HTTP status code (for client SDK)\n     */\n    httpStatus: number;\n    /**\n     * Timestamp when error occurred\n     */\n    timestamp: string;\n    /**\n     * Actionable suggestion for fixing the error\n     */\n    suggestion?: string;\n    /**\n     * Link to documentation\n     */\n    documentation?: string;\n}\n/**\n * Container ServiceError (lightweight, enriched by handlers)\n */\nexport interface ServiceError {\n    message: string;\n    code: ErrorCode;\n    details?: Record<string, unknown>;\n}\n/**\n * ServiceResult type for container services\n */\nexport type ServiceResult<T> = {\n    success: true;\n    data: T;\n} | {\n    success: false;\n    error: ServiceError;\n};\n//# sourceMappingURL=types.d.ts.map","import type { OperationType } from './types';\n/**\n * File system error contexts\n */\nexport interface FileNotFoundContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileExistsContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileTooLargeContext {\n    path: string;\n    operation: OperationType;\n    maxSize: number;\n    actualSize: number;\n}\nexport interface FileSystemContext {\n    path: string;\n    operation: OperationType;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Command error contexts\n */\nexport interface CommandNotFoundContext {\n    command: string;\n}\nexport interface CommandErrorContext {\n    command: string;\n    exitCode?: number;\n    stdout?: string;\n    stderr?: string;\n}\n/**\n * Process error contexts\n */\nexport interface ProcessNotFoundContext {\n    processId: string;\n}\nexport interface ProcessErrorContext {\n    processId: string;\n    pid?: number;\n    exitCode?: number;\n    stderr?: string;\n}\nexport interface SessionAlreadyExistsContext {\n    sessionId: string;\n    /**\n     * `CLOUDFLARE_PLACEMENT_ID` captured from the container at the moment the\n     * duplicate create was detected. Included so a restarted DO can learn the\n     * container's placement ID from an idempotent session-create. `null` when\n     * the env var is not set (for example, in local development).\n     */\n    containerPlacementId?: string | null;\n}\nexport interface SessionDestroyedContext {\n    sessionId: string;\n}\nexport interface SessionTerminatedContext {\n    sessionId: string;\n    exitCode: number | null;\n}\n/**\n * Process readiness error contexts\n */\nexport interface ProcessReadyTimeoutContext {\n    processId: string;\n    command: string;\n    condition: string;\n    timeout: number;\n}\nexport interface ProcessExitedBeforeReadyContext {\n    processId: string;\n    command: string;\n    condition: string;\n    exitCode: number;\n}\n/**\n * Port error contexts\n */\nexport interface PortAlreadyExposedContext {\n    port: number;\n    portName?: string;\n}\nexport interface PortNotExposedContext {\n    port: number;\n}\nexport interface InvalidPortContext {\n    port: number;\n    reason: string;\n}\nexport interface PortErrorContext {\n    port: number;\n    portName?: string;\n    stderr?: string;\n}\n/**\n * Git error contexts\n */\nexport interface GitRepositoryNotFoundContext {\n    repository: string;\n}\nexport interface GitAuthFailedContext {\n    repository: string;\n}\nexport interface GitBranchNotFoundContext {\n    branch: string;\n    repository?: string;\n}\nexport interface GitErrorContext {\n    repository?: string;\n    branch?: string;\n    targetDir?: string;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Code interpreter error contexts\n */\nexport interface InterpreterNotReadyContext {\n    retryAfter?: number;\n    progress?: number;\n}\nexport interface ContextNotFoundContext {\n    contextId: string;\n}\nexport interface CodeExecutionContext {\n    contextId?: string;\n    ename?: string;\n    evalue?: string;\n    traceback?: string[];\n}\n/**\n * Validation error contexts\n */\nexport interface ValidationFailedContext {\n    validationErrors: Array<{\n        field: string;\n        message: string;\n        code?: string;\n    }>;\n}\n/**\n * Bucket mounting error contexts\n */\nexport interface BucketMountContext {\n    bucket: string;\n    mountPath: string;\n    endpoint: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface MissingCredentialsContext {\n    bucket: string;\n    endpoint: string;\n}\nexport interface InvalidMountConfigContext {\n    bucket?: string;\n    mountPath?: string;\n    endpoint?: string;\n    reason?: string;\n}\n/**\n * Backup error contexts\n */\nexport interface BackupCreateContext {\n    dir: string;\n    backupId?: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupRestoreContext {\n    dir: string;\n    backupId: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupNotFoundContext {\n    backupId: string;\n}\nexport interface BackupExpiredContext {\n    backupId: string;\n    expiredAt?: string;\n}\nexport interface InvalidBackupConfigContext {\n    reason: string;\n}\n/**\n * OpenCode error contexts\n */\nexport interface OpencodeStartupContext {\n    port: number;\n    stderr?: string;\n    command?: string;\n}\n/**\n * Generic error contexts\n */\nexport interface InternalErrorContext {\n    originalError?: string;\n    stack?: string;\n    [key: string]: unknown;\n}\n/**\n * Container availability error context. Surfaced when the sandbox container\n * cannot accept the incoming RPC connection. The container may be starting\n * up, undergoing a runtime replacement, or temporarily unhealthy. The\n * caller should retry the same operation.\n */\nexport interface ContainerUnavailableContext {\n    /**\n     * Categorical reason distinguishing startup unavailability from runtime\n     * replacement and exhausted upgrade retries.\n     */\n    reason: 'container_starting' | 'container_unhealthy' | 'container_replaced' | 'rpc_upgrade_failed';\n    /**\n     * Always true — this error represents a transient unavailability, not a\n     * permanent failure. Callers should retry the same operation.\n     */\n    retryable: true;\n    /** Suggested delay in milliseconds before the next retry attempt. */\n    retryAfterMs?: number;\n}\n/**\n * RPC transport error contexts. Surfaced when the capnweb WebSocket session\n * fails on the SDK side rather than the container reporting a structured\n * error. Always retryable — the next call will open a fresh connection.\n */\nexport type RPCTransportErrorKind = \n/** Server closed the WebSocket (container crash, DO eviction, network blip). */\n'peer_closed'\n/** Underlying socket fired the `error` event. */\n | 'connection_failed'\n/** WebSocket upgrade failed before the session was established. */\n | 'upgrade_failed'\n/** Peer sent a non-string frame; capnweb's wire format is JSON text only. */\n | 'invalid_frame'\n/** Peer sent a frame the wire-format parser rejected (capnweb readLoop SyntaxError). */\n | 'protocol_error'\n/** Session was disposed (locally or remotely) while a call was pending. */\n | 'session_disposed'\n/** Anything else that bubbled up from the transport with no recognisable shape. */\n | 'unknown';\nexport interface RPCTransportContext {\n    /** Categorical bucket so callers can branch on `peer_closed` vs `upgrade_failed` etc. */\n    kind: RPCTransportErrorKind;\n    /** Original error message, verbatim from capnweb / our DeferredTransport. */\n    originalMessage: string;\n    /**\n     * The underlying Error's `name` property. capnweb preserves this across\n     * the wire for the standard built-ins (TypeError, SyntaxError, etc.), so\n     * it's a more reliable hint than the message string for those cases.\n     */\n    errorName: string;\n    /** WebSocket close code, when available (kind === 'peer_closed'). */\n    closeCode?: number;\n    /** WebSocket close reason, when available (kind === 'peer_closed'). */\n    closeReason?: string;\n}\n/**\n * Reason a sandbox-owned operation was interrupted. Callers may branch on\n * this to decide whether to retry the full operation.\n */\nexport type OperationInterruptedReason = \n/** The container runtime was replaced while the operation was in progress. */\n'runtime_replaced'\n/** The RPC session was disposed mid-operation. */\n | 'transport_disposed'\n/** The sandbox lifetime changed (destroy() was called). Not retryable. */\n | 'sandbox_lifetime_changed'\n/** Internal recovery attempts were exhausted. Not retryable. */\n | 'recovery_exhausted';\n/**\n * Operation interruption context. Surfaced when a sandbox-owned operation\n * (such as backup restore) was interrupted by a runtime replacement or\n * sandbox lifetime change. Public-safe: does not include internal ids.\n */\nexport interface OperationInterruptedContext {\n    /**\n     * Categorical reason. Use `retryable` to decide whether to retry rather\n     * than branching on the reason string.\n     */\n    reason: OperationInterruptedReason;\n    /** Name of the operation that was interrupted (e.g. 'backup.restore'). */\n    operation: string;\n    /** Lifecycle phase at which the interruption was detected. */\n    phase: string;\n    /**\n     * Whether the operation's container-local side effects reached the runtime.\n     * `false` means the operation was interrupted before admission; `true`\n     * means effects were committed; `'unknown'` means the operation may or may\n     * not have committed.\n     */\n    admitted: boolean | 'unknown';\n    /**\n     * Whether the caller can safely retry the full operation from the beginning.\n     * `sandbox_lifetime_changed` and `recovery_exhausted` set this to false.\n     */\n    retryable: boolean;\n    /** Number of internal recovery attempts made before surfacing this error. */\n    recoveryAttempts?: number;\n    /** Maximum number of internal recovery attempts allowed. */\n    maxRecoveryAttempts?: number;\n}\n//# sourceMappingURL=contexts.d.ts.map"],"mappings":";;AAIA;AAsEA;;cAtEqBA;;ECAAE,SAAAA,iBAyBpB,EAAA,mBAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,YAAa,EAAAC,cAAA;EAAYC,SAAAA,aAAAA,EAAAA,eAAAA;EAIhCL,SAAAA,cAAAA,EAAAA,gBAAAA;EAQME,SAAAA,QAAAA,EAAAA,UAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,aAAA,EAAA,eAAA;;;;ECSJgB,SAAAA,gBAAAA,EAAwB,kBAAA;EAOxBC,SAAAA,iBAAAA,EAAAA,mBAA0B;EAM1BC,SAAAA,yBAA+B,EAAA,2BAAA;EA8F/BiB,SAAAA,eAAmB,EAAA,iBAAA;EAMnBC,SAAAA,uBAAoB,EAAA,yBAAA;EAMpBC,SAAAA,kBAAqB,EAAA,oBAAA;EAGrBC,SAAAA,iBAAoB,EAAA,mBAAA;EAIpBC,SAAAA,yBAA0B,EAAA,2BAAA;EAM1BC,SAAAA,aAAAA,EAAAA,eAAsB;EAmBtBE,SAAAA,sBAA2B,EAAA,wBAAA;EAmBhCC,SAAAA,iBAAqB,EAAA,mBAAA;EAehBC,SAAAA,kBAAmB,EAAA,oBAE1BD;EAkBEE,SAAAA,oBAA0B,EAAA,sBAAA;EAcrBC,SAAAA,WAAAA,EAAAA,aAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KF9MhCnD,SAAAA,WAAoBA,wBAAwBA;;;AAtExD;AAsEA;;cCtEqBE;;EAAAA,SAAAA,UAyBpB,EAAA,YAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,SAAa,EAAA,WAAAC;EAAYC,SAAAA,WAAAA,EAAAA,aAAAA;EAIhCL,SAAAA,SAAAA,EAAAA,WAAAA;EAQME,SAAAA,gBAAAA,EAAAA,kBAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,eAAA,EAAA,iBAAA;;;;ECSJgB,SAAAA,YAAAA,EAAAA,cAAwB;EAOxBC,SAAAA,WAAAA,EAAAA,aAA0B;EAM1BC,SAAAA,YAAAA,EAAAA,cAA+B;EA8F/BiB,SAAAA,SAAAA,EAAAA,WAAmB;EAMnBC,SAAAA,YAAAA,EAAoB,cAAA;EAMpBC,SAAAA,aAAAA,EAAqB,eAAA;EAGrBC,SAAAA,aAAAA,EAAoB,eAAA;EAIpBC,SAAAA,cAAAA,EAAAA,gBAA0B;EAM1BC,SAAAA,cAAAA,EAAsB,gBAAA;EAmBtBE,SAAAA,YAAAA,EAAAA,cAA2B;EAmBhCC,SAAAA,mBAAqB,EAAA,qBAAA;EAehBC,SAAAA,mBAAmB,EAAA,qBAE1BD;AAkBV,CAAA;AAciBG,KD1PLhD,aAAAA,GC0PKgD,CAAAA,OD1PmBjD,SC0PQ,CAAA,CAKhCgD,MAAAA,OD/PgDhD,SC+PhDgD,CAAAA;;;;;UD1PK9C,yBAAyBE;;;;QAIhCL;;;;;;;;cAQME;;;;;WAKHE;;;;;;;;;;;;;;;;;;;;;UCSIgB,wBAAAA;;;;;;;UAOAC,0BAAAA;;;;;;UAMAC,+BAAAA;;;;;;;;;UA8FAiB,mBAAAA;;;;;;UAMAC,oBAAAA;;;;;;UAMAC,qBAAAA;;;UAGAC,oBAAAA;;;;UAIAC,0BAAAA;;;;;;UAMAC,sBAAAA;;;;;;;;;;;UAmBAE,2BAAAA;;;;;;;;;;;;;;;;;;;KAmBLC,qBAAAA;;;;;;;;UAeKC,mBAAAA;;QAEPD;;;;;;;;;;;;;;;;;;KAkBEE,0BAAAA;;;;;;;;;;UAcKC,2BAAAA;;;;;UAKLD"}

package/dist/{errors-aRUdk9K8.js → errors-CpkKPbWC.js}

@@ -69,7 +69,9 @@ const ErrorCode = {
 	INVALID_JSON_RESPONSE: "INVALID_JSON_RESPONSE",
 	UNKNOWN_ERROR: "UNKNOWN_ERROR",
 	INTERNAL_ERROR: "INTERNAL_ERROR",
-	RPC_TRANSPORT_ERROR: "RPC_TRANSPORT_ERROR"
+	RPC_TRANSPORT_ERROR: "RPC_TRANSPORT_ERROR",
+	CONTAINER_UNAVAILABLE: "CONTAINER_UNAVAILABLE",
+	OPERATION_INTERRUPTED: "OPERATION_INTERRUPTED"
 };
 
 //#endregion
@@ -109,6 +111,7 @@ const ERROR_STATUS_MAP = {
 	[ErrorCode.PORT_IN_USE]: 409,
 	[ErrorCode.RESOURCE_BUSY]: 409,
 	[ErrorCode.SESSION_ALREADY_EXISTS]: 409,
+	[ErrorCode.OPERATION_INTERRUPTED]: 409,
 	[ErrorCode.SESSION_DESTROYED]: 410,
 	[ErrorCode.SESSION_TERMINATED]: 410,
 	[ErrorCode.FILE_TOO_LARGE]: 413,
@@ -124,6 +127,7 @@ const ERROR_STATUS_MAP = {
 	[ErrorCode.INTERPRETER_NOT_READY]: 503,
 	[ErrorCode.OPENCODE_STARTUP_FAILED]: 503,
 	[ErrorCode.RPC_TRANSPORT_ERROR]: 503,
+	[ErrorCode.CONTAINER_UNAVAILABLE]: 503,
 	[ErrorCode.PROCESS_READY_TIMEOUT]: 408,
 	[ErrorCode.PROCESS_EXITED_BEFORE_READY]: 500,
 	[ErrorCode.NO_SPACE]: 500,
@@ -191,6 +195,8 @@ function getSuggestion(code, context) {
 		case ErrorCode.INVALID_BACKUP_CONFIG: return `Invalid backup configuration: ${context.reason}`;
 		case ErrorCode.BACKUP_CREATE_FAILED: return "Backup creation failed. Check that the directory exists and you have sufficient disk space";
 		case ErrorCode.BACKUP_RESTORE_FAILED: return "Backup restoration failed. The archive may be corrupted or the target directory may be in use";
+		case ErrorCode.CONTAINER_UNAVAILABLE: return "The sandbox container is temporarily unavailable. Retry the same operation — it will succeed once the container is ready.";
+		case ErrorCode.OPERATION_INTERRUPTED: return "The sandbox operation was interrupted by a runtime change. Retry only if the operation is idempotent, or verify sandbox state before retrying.";
 		case ErrorCode.RPC_TRANSPORT_ERROR: switch (context.kind) {
 			case "peer_closed": return "The container closed the WebSocket mid-call (likely a container restart, eviction, or crash). Retry the call — the SDK will open a fresh connection.";
 			case "connection_failed": return "The WebSocket connection failed. Retry the call; if the failure persists, check container health and network connectivity.";
@@ -206,4 +212,4 @@ function getSuggestion(code, context) {
 
 //#endregion
 export { getHttpStatus as n, ErrorCode as r, getSuggestion as t };
-//# sourceMappingURL=errors-aRUdk9K8.js.map
+//# sourceMappingURL=errors-CpkKPbWC.js.map

package/dist/errors-CpkKPbWC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-CpkKPbWC.js","names":[],"sources":["../../shared/dist/errors/codes.js","../../shared/dist/errors/status-map.js","../../shared/dist/errors/suggestions.js"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport const ErrorCode = {\n    // File System Errors (404)\n    FILE_NOT_FOUND: 'FILE_NOT_FOUND',\n    // Permission Errors (403)\n    PERMISSION_DENIED: 'PERMISSION_DENIED',\n    // File System Errors (409)\n    FILE_EXISTS: 'FILE_EXISTS',\n    // File System Errors (400)\n    IS_DIRECTORY: 'IS_DIRECTORY',\n    NOT_DIRECTORY: 'NOT_DIRECTORY',\n    // File Too Large Errors (413)\n    FILE_TOO_LARGE: 'FILE_TOO_LARGE',\n    // File System Errors (500)\n    NO_SPACE: 'NO_SPACE',\n    TOO_MANY_FILES: 'TOO_MANY_FILES',\n    RESOURCE_BUSY: 'RESOURCE_BUSY',\n    READ_ONLY: 'READ_ONLY',\n    NAME_TOO_LONG: 'NAME_TOO_LONG',\n    TOO_MANY_LINKS: 'TOO_MANY_LINKS',\n    FILESYSTEM_ERROR: 'FILESYSTEM_ERROR',\n    // Command Errors (404)\n    COMMAND_NOT_FOUND: 'COMMAND_NOT_FOUND',\n    // Command Errors (403/400)\n    COMMAND_PERMISSION_DENIED: 'COMMAND_PERMISSION_DENIED',\n    INVALID_COMMAND: 'INVALID_COMMAND',\n    // Command Errors (500)\n    COMMAND_EXECUTION_ERROR: 'COMMAND_EXECUTION_ERROR',\n    STREAM_START_ERROR: 'STREAM_START_ERROR',\n    // Process Errors (404)\n    PROCESS_NOT_FOUND: 'PROCESS_NOT_FOUND',\n    // Process Errors (403/500)\n    PROCESS_PERMISSION_DENIED: 'PROCESS_PERMISSION_DENIED',\n    PROCESS_ERROR: 'PROCESS_ERROR',\n    // Session Errors (409)\n    SESSION_ALREADY_EXISTS: 'SESSION_ALREADY_EXISTS',\n    // Session Errors (410)\n    SESSION_DESTROYED: 'SESSION_DESTROYED',\n    SESSION_TERMINATED: 'SESSION_TERMINATED',\n    // Port Errors (409)\n    PORT_ALREADY_EXPOSED: 'PORT_ALREADY_EXPOSED',\n    PORT_IN_USE: 'PORT_IN_USE',\n    // Port Errors (404)\n    PORT_NOT_EXPOSED: 'PORT_NOT_EXPOSED',\n    // Port Errors (400)\n    INVALID_PORT_NUMBER: 'INVALID_PORT_NUMBER',\n    INVALID_PORT: 'INVALID_PORT',\n    // Port Errors (502/500)\n    SERVICE_NOT_RESPONDING: 'SERVICE_NOT_RESPONDING',\n    PORT_OPERATION_ERROR: 'PORT_OPERATION_ERROR',\n    // Port Errors (400)\n    CUSTOM_DOMAIN_REQUIRED: 'CUSTOM_DOMAIN_REQUIRED',\n    // Git Errors (404)\n    GIT_REPOSITORY_NOT_FOUND: 'GIT_REPOSITORY_NOT_FOUND',\n    GIT_BRANCH_NOT_FOUND: 'GIT_BRANCH_NOT_FOUND',\n    // Git Errors (401)\n    GIT_AUTH_FAILED: 'GIT_AUTH_FAILED',\n    // Git Errors (502)\n    GIT_NETWORK_ERROR: 'GIT_NETWORK_ERROR',\n    // Git Errors (400)\n    INVALID_GIT_URL: 'INVALID_GIT_URL',\n    // Git Errors (500)\n    GIT_CLONE_FAILED: 'GIT_CLONE_FAILED',\n    GIT_CHECKOUT_FAILED: 'GIT_CHECKOUT_FAILED',\n    GIT_OPERATION_FAILED: 'GIT_OPERATION_FAILED',\n    // Bucket mounting errors\n    BUCKET_MOUNT_ERROR: 'BUCKET_MOUNT_ERROR',\n    BUCKET_UNMOUNT_ERROR: 'BUCKET_UNMOUNT_ERROR',\n    S3FS_MOUNT_ERROR: 'S3FS_MOUNT_ERROR',\n    MISSING_CREDENTIALS: 'MISSING_CREDENTIALS',\n    INVALID_MOUNT_CONFIG: 'INVALID_MOUNT_CONFIG',\n    // Backup Errors (500)\n    BACKUP_CREATE_FAILED: 'BACKUP_CREATE_FAILED',\n    BACKUP_RESTORE_FAILED: 'BACKUP_RESTORE_FAILED',\n    // Backup Errors (404)\n    BACKUP_NOT_FOUND: 'BACKUP_NOT_FOUND',\n    // Backup Errors (400)\n    BACKUP_EXPIRED: 'BACKUP_EXPIRED',\n    INVALID_BACKUP_CONFIG: 'INVALID_BACKUP_CONFIG',\n    // Code Interpreter Errors (503)\n    INTERPRETER_NOT_READY: 'INTERPRETER_NOT_READY',\n    // Code Interpreter Errors (404)\n    CONTEXT_NOT_FOUND: 'CONTEXT_NOT_FOUND',\n    // Code Interpreter Errors (500)\n    CODE_EXECUTION_ERROR: 'CODE_EXECUTION_ERROR',\n    // Code Interpreter Errors (501) - Feature not available in image variant\n    PYTHON_NOT_AVAILABLE: 'PYTHON_NOT_AVAILABLE',\n    JAVASCRIPT_NOT_AVAILABLE: 'JAVASCRIPT_NOT_AVAILABLE',\n    // OpenCode Errors (503)\n    OPENCODE_STARTUP_FAILED: 'OPENCODE_STARTUP_FAILED',\n    // Process Readiness Errors (408/500)\n    PROCESS_READY_TIMEOUT: 'PROCESS_READY_TIMEOUT',\n    PROCESS_EXITED_BEFORE_READY: 'PROCESS_EXITED_BEFORE_READY',\n    // File Watch Errors (404)\n    WATCH_NOT_FOUND: 'WATCH_NOT_FOUND',\n    // File Watch Errors (500)\n    WATCH_START_ERROR: 'WATCH_START_ERROR',\n    WATCH_STOP_ERROR: 'WATCH_STOP_ERROR',\n    // Validation Errors (400)\n    VALIDATION_FAILED: 'VALIDATION_FAILED',\n    // Generic Errors (400/500)\n    INVALID_JSON_RESPONSE: 'INVALID_JSON_RESPONSE',\n    UNKNOWN_ERROR: 'UNKNOWN_ERROR',\n    INTERNAL_ERROR: 'INTERNAL_ERROR',\n    // RPC Transport Errors (503) — capnweb WebSocket session-level failures\n    // raised on the SDK side, not by the container. The container went away\n    // mid-call (peer close), the WebSocket failed before/after upgrade, the\n    // peer sent a frame the transport cannot handle, or the session was\n    // disposed while a call was in flight.\n    RPC_TRANSPORT_ERROR: 'RPC_TRANSPORT_ERROR',\n    // Container Availability Errors (503) — raised when the sandbox container\n    // is not yet ready to accept requests or was replaced while a connection\n    // attempt was in progress. Always retryable from the caller's perspective.\n    CONTAINER_UNAVAILABLE: 'CONTAINER_UNAVAILABLE',\n    // Operation Lifecycle Errors (409) — raised when a sandbox-owned operation\n    // (e.g. backup restore) was interrupted by a runtime replacement or sandbox\n    // lifetime change after the operation had already been admitted. The caller\n    // should retry the full operation from the beginning.\n    OPERATION_INTERRUPTED: 'OPERATION_INTERRUPTED'\n};\n","import { ErrorCode } from './codes';\n/**\n * Maps error codes to HTTP status codes\n * Centralized mapping ensures consistency across SDK\n */\nexport const ERROR_STATUS_MAP = {\n    // 404 Not Found\n    [ErrorCode.FILE_NOT_FOUND]: 404,\n    [ErrorCode.COMMAND_NOT_FOUND]: 404,\n    [ErrorCode.PROCESS_NOT_FOUND]: 404,\n    [ErrorCode.PORT_NOT_EXPOSED]: 404,\n    [ErrorCode.GIT_REPOSITORY_NOT_FOUND]: 404,\n    [ErrorCode.GIT_BRANCH_NOT_FOUND]: 404,\n    [ErrorCode.CONTEXT_NOT_FOUND]: 404,\n    [ErrorCode.WATCH_NOT_FOUND]: 404,\n    // 400 Bad Request\n    [ErrorCode.IS_DIRECTORY]: 400,\n    [ErrorCode.NOT_DIRECTORY]: 400,\n    [ErrorCode.INVALID_COMMAND]: 400,\n    [ErrorCode.INVALID_PORT_NUMBER]: 400,\n    [ErrorCode.INVALID_PORT]: 400,\n    [ErrorCode.INVALID_GIT_URL]: 400,\n    [ErrorCode.CUSTOM_DOMAIN_REQUIRED]: 400,\n    [ErrorCode.INVALID_JSON_RESPONSE]: 400,\n    [ErrorCode.NAME_TOO_LONG]: 400,\n    [ErrorCode.VALIDATION_FAILED]: 400,\n    [ErrorCode.MISSING_CREDENTIALS]: 400,\n    [ErrorCode.INVALID_MOUNT_CONFIG]: 400,\n    // 401 Unauthorized\n    [ErrorCode.GIT_AUTH_FAILED]: 401,\n    // 403 Forbidden\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.COMMAND_PERMISSION_DENIED]: 403,\n    [ErrorCode.PROCESS_PERMISSION_DENIED]: 403,\n    [ErrorCode.READ_ONLY]: 403,\n    // 409 Conflict\n    [ErrorCode.FILE_EXISTS]: 409,\n    [ErrorCode.PORT_ALREADY_EXPOSED]: 409,\n    [ErrorCode.PORT_IN_USE]: 409,\n    [ErrorCode.RESOURCE_BUSY]: 409,\n    [ErrorCode.SESSION_ALREADY_EXISTS]: 409,\n    [ErrorCode.OPERATION_INTERRUPTED]: 409,\n    // 410 Gone\n    [ErrorCode.SESSION_DESTROYED]: 410,\n    [ErrorCode.SESSION_TERMINATED]: 410,\n    // 413 Content Too Large\n    [ErrorCode.FILE_TOO_LARGE]: 413,\n    // 502 Bad Gateway\n    [ErrorCode.SERVICE_NOT_RESPONDING]: 502,\n    [ErrorCode.GIT_NETWORK_ERROR]: 502,\n    // Backup errors\n    [ErrorCode.BACKUP_NOT_FOUND]: 404,\n    [ErrorCode.BACKUP_EXPIRED]: 400,\n    [ErrorCode.INVALID_BACKUP_CONFIG]: 400,\n    [ErrorCode.BACKUP_CREATE_FAILED]: 500,\n    [ErrorCode.BACKUP_RESTORE_FAILED]: 500,\n    // 501 Not Implemented (feature not available in image variant)\n    [ErrorCode.PYTHON_NOT_AVAILABLE]: 501,\n    [ErrorCode.JAVASCRIPT_NOT_AVAILABLE]: 501,\n    // 503 Service Unavailable\n    [ErrorCode.INTERPRETER_NOT_READY]: 503,\n    [ErrorCode.OPENCODE_STARTUP_FAILED]: 503,\n    [ErrorCode.RPC_TRANSPORT_ERROR]: 503,\n    [ErrorCode.CONTAINER_UNAVAILABLE]: 503,\n    // 408 Request Timeout\n    [ErrorCode.PROCESS_READY_TIMEOUT]: 408,\n    // 500 Internal Server Error\n    [ErrorCode.PROCESS_EXITED_BEFORE_READY]: 500,\n    [ErrorCode.NO_SPACE]: 500,\n    [ErrorCode.TOO_MANY_FILES]: 500,\n    [ErrorCode.TOO_MANY_LINKS]: 500,\n    [ErrorCode.FILESYSTEM_ERROR]: 500,\n    [ErrorCode.COMMAND_EXECUTION_ERROR]: 500,\n    [ErrorCode.STREAM_START_ERROR]: 500,\n    [ErrorCode.PROCESS_ERROR]: 500,\n    [ErrorCode.PORT_OPERATION_ERROR]: 500,\n    [ErrorCode.GIT_CLONE_FAILED]: 500,\n    [ErrorCode.GIT_CHECKOUT_FAILED]: 500,\n    [ErrorCode.GIT_OPERATION_FAILED]: 500,\n    [ErrorCode.CODE_EXECUTION_ERROR]: 500,\n    [ErrorCode.BUCKET_MOUNT_ERROR]: 500,\n    [ErrorCode.BUCKET_UNMOUNT_ERROR]: 500,\n    [ErrorCode.S3FS_MOUNT_ERROR]: 500,\n    [ErrorCode.WATCH_START_ERROR]: 500,\n    [ErrorCode.WATCH_STOP_ERROR]: 500,\n    [ErrorCode.UNKNOWN_ERROR]: 500,\n    [ErrorCode.INTERNAL_ERROR]: 500\n};\n/**\n * Get HTTP status code for an error code\n * Falls back to 500 for unknown errors\n */\nexport function getHttpStatus(code) {\n    return ERROR_STATUS_MAP[code] || 500;\n}\n","import { ErrorCode } from './codes';\n/**\n * Get actionable suggestion for an error code\n * Used by handlers when enriching ServiceError → ErrorResponse\n */\nexport function getSuggestion(code, context) {\n    switch (code) {\n        case ErrorCode.FILE_NOT_FOUND:\n            return `Ensure the file exists at ${context.path} before attempting to access it`;\n        case ErrorCode.FILE_EXISTS:\n            return `File already exists at ${context.path}. Use a different path or delete the existing file first`;\n        case ErrorCode.COMMAND_NOT_FOUND:\n            return `Check that \"${context.command}\" is installed and available in the system PATH`;\n        case ErrorCode.PROCESS_NOT_FOUND:\n            return 'Verify the process ID is correct and the process has not already exited';\n        case ErrorCode.PORT_NOT_EXPOSED:\n            return `Port ${context.port} is not currently available for this operation`;\n        case ErrorCode.PORT_ALREADY_EXPOSED:\n            return `Port ${context.port} already has preview URL authorization or activation state`;\n        case ErrorCode.PORT_IN_USE:\n            return `Port ${context.port} is already in use by another service. Choose a different port`;\n        case ErrorCode.SESSION_ALREADY_EXISTS:\n            return `Session \"${context.sessionId}\" already exists. Use a different session ID or reuse the existing session`;\n        case ErrorCode.SESSION_DESTROYED:\n            return `Session \"${context.sessionId}\" was destroyed. Create a new session to continue executing commands`;\n        case ErrorCode.SESSION_TERMINATED:\n            return `Session \"${context.sessionId}\" ended because its shell exited (exit code: ${context.exitCode ?? 'unknown'}). Session-local state (env vars, cwd, shell functions) has been lost. Retry the call to start a fresh session, or call createSession() with the same id to recreate it explicitly`;\n        case ErrorCode.INVALID_PORT:\n            return `Port must be between 1 and 65535. Port ${context.port} is ${context.reason}`;\n        case ErrorCode.GIT_REPOSITORY_NOT_FOUND:\n            return 'Verify the repository URL is correct and accessible';\n        case ErrorCode.GIT_AUTH_FAILED:\n            return 'Check authentication credentials or use a public repository';\n        case ErrorCode.GIT_BRANCH_NOT_FOUND:\n            return `Branch \"${context.branch}\" does not exist in the repository. Check the branch name or use the default branch`;\n        case ErrorCode.INTERPRETER_NOT_READY:\n            return context.retryAfter\n                ? `Code interpreter is starting up. Retry after ${context.retryAfter} seconds`\n                : 'Code interpreter is not ready. Please wait a moment and try again';\n        case ErrorCode.CONTEXT_NOT_FOUND:\n            return `Context \"${context.contextId}\" does not exist. Create a context first using createContext()`;\n        case ErrorCode.VALIDATION_FAILED:\n            return 'Check the request parameters and ensure they match the required format';\n        case ErrorCode.NO_SPACE:\n            return 'Not enough disk space available. Consider cleaning up temporary files or increasing storage';\n        case ErrorCode.PERMISSION_DENIED:\n            return 'Operation not permitted. Check file/directory permissions';\n        case ErrorCode.IS_DIRECTORY:\n            return `Cannot perform this operation on a directory. Path ${context.path} is a directory`;\n        case ErrorCode.NOT_DIRECTORY:\n            return `Expected a directory but found a file at ${context.path}`;\n        case ErrorCode.RESOURCE_BUSY:\n            return 'Resource is currently in use. Wait for the current operation to complete';\n        case ErrorCode.READ_ONLY:\n            return 'Cannot modify a read-only resource';\n        case ErrorCode.SERVICE_NOT_RESPONDING:\n            return 'Service is not responding. Check if the service is running and accessible';\n        case ErrorCode.BACKUP_NOT_FOUND:\n            return `Backup \"${context.backupId}\" does not exist. Verify the backup ID is correct`;\n        case ErrorCode.BACKUP_EXPIRED:\n            return `Backup \"${context.backupId}\" has expired. Create a new backup`;\n        case ErrorCode.INVALID_BACKUP_CONFIG:\n            return `Invalid backup configuration: ${context.reason}`;\n        case ErrorCode.BACKUP_CREATE_FAILED:\n            return 'Backup creation failed. Check that the directory exists and you have sufficient disk space';\n        case ErrorCode.BACKUP_RESTORE_FAILED:\n            return 'Backup restoration failed. The archive may be corrupted or the target directory may be in use';\n        case ErrorCode.CONTAINER_UNAVAILABLE:\n            return 'The sandbox container is temporarily unavailable. Retry the same operation — it will succeed once the container is ready.';\n        case ErrorCode.OPERATION_INTERRUPTED:\n            return 'The sandbox operation was interrupted by a runtime change. Retry only if the operation is idempotent, or verify sandbox state before retrying.';\n        case ErrorCode.RPC_TRANSPORT_ERROR: {\n            const kind = context.kind;\n            switch (kind) {\n                case 'peer_closed':\n                    return 'The container closed the WebSocket mid-call (likely a container restart, eviction, or crash). Retry the call — the SDK will open a fresh connection.';\n                case 'connection_failed':\n                    return 'The WebSocket connection failed. Retry the call; if the failure persists, check container health and network connectivity.';\n                case 'upgrade_failed':\n                    return 'The WebSocket upgrade was rejected by the container. Verify the container is running and reachable on the configured port.';\n                case 'invalid_frame':\n                    return 'The container sent a frame the RPC transport cannot handle. This usually indicates a version mismatch between the SDK and the container image.';\n                case 'protocol_error':\n                    return 'The peer sent a malformed RPC message (could not parse the wire format). This usually indicates a version mismatch between the SDK and the container image.';\n                case 'session_disposed':\n                    return 'The RPC session was disposed while a call was in flight. Avoid reusing stubs after disconnect(); the next method call will reconnect automatically.';\n                default:\n                    return 'The RPC transport raised an error. Retry the call — the SDK will open a fresh connection.';\n            }\n        }\n        // Generic fallback for other errors\n        default:\n            return undefined;\n    }\n}\n"],"mappings":";;;;;AAIA,MAAa,YAAY;CAErB,gBAAgB;CAEhB,mBAAmB;CAEnB,aAAa;CAEb,cAAc;CACd,eAAe;CAEf,gBAAgB;CAEhB,UAAU;CACV,gBAAgB;CAChB,eAAe;CACf,WAAW;CACX,eAAe;CACf,gBAAgB;CAChB,kBAAkB;CAElB,mBAAmB;CAEnB,2BAA2B;CAC3B,iBAAiB;CAEjB,yBAAyB;CACzB,oBAAoB;CAEpB,mBAAmB;CAEnB,2BAA2B;CAC3B,eAAe;CAEf,wBAAwB;CAExB,mBAAmB;CACnB,oBAAoB;CAEpB,sBAAsB;CACtB,aAAa;CAEb,kBAAkB;CAElB,qBAAqB;CACrB,cAAc;CAEd,wBAAwB;CACxB,sBAAsB;CAEtB,wBAAwB;CAExB,0BAA0B;CAC1B,sBAAsB;CAEtB,iBAAiB;CAEjB,mBAAmB;CAEnB,iBAAiB;CAEjB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,oBAAoB;CACpB,sBAAsB;CACtB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,sBAAsB;CACtB,uBAAuB;CAEvB,kBAAkB;CAElB,gBAAgB;CAChB,uBAAuB;CAEvB,uBAAuB;CAEvB,mBAAmB;CAEnB,sBAAsB;CAEtB,sBAAsB;CACtB,0BAA0B;CAE1B,yBAAyB;CAEzB,uBAAuB;CACvB,6BAA6B;CAE7B,iBAAiB;CAEjB,mBAAmB;CACnB,kBAAkB;CAElB,mBAAmB;CAEnB,uBAAuB;CACvB,eAAe;CACf,gBAAgB;CAMhB,qBAAqB;CAIrB,uBAAuB;CAKvB,uBAAuB;CAC1B;;;;;;;;ACrHD,MAAa,mBAAmB;EAE3B,UAAU,iBAAiB;EAC3B,UAAU,oBAAoB;EAC9B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,2BAA2B;EACrC,UAAU,uBAAuB;EACjC,UAAU,oBAAoB;EAC9B,UAAU,kBAAkB;EAE5B,UAAU,eAAe;EACzB,UAAU,gBAAgB;EAC1B,UAAU,kBAAkB;EAC5B,UAAU,sBAAsB;EAChC,UAAU,eAAe;EACzB,UAAU,kBAAkB;EAC5B,UAAU,yBAAyB;EACnC,UAAU,wBAAwB;EAClC,UAAU,gBAAgB;EAC1B,UAAU,oBAAoB;EAC9B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EAEjC,UAAU,kBAAkB;EAE5B,UAAU,oBAAoB;EAC9B,UAAU,4BAA4B;EACtC,UAAU,4BAA4B;EACtC,UAAU,YAAY;EAEtB,UAAU,cAAc;EACxB,UAAU,uBAAuB;EACjC,UAAU,cAAc;EACxB,UAAU,gBAAgB;EAC1B,UAAU,yBAAyB;EACnC,UAAU,wBAAwB;EAElC,UAAU,oBAAoB;EAC9B,UAAU,qBAAqB;EAE/B,UAAU,iBAAiB;EAE3B,UAAU,yBAAyB;EACnC,UAAU,oBAAoB;EAE9B,UAAU,mBAAmB;EAC7B,UAAU,iBAAiB;EAC3B,UAAU,wBAAwB;EAClC,UAAU,uBAAuB;EACjC,UAAU,wBAAwB;EAElC,UAAU,uBAAuB;EACjC,UAAU,2BAA2B;EAErC,UAAU,wBAAwB;EAClC,UAAU,0BAA0B;EACpC,UAAU,sBAAsB;EAChC,UAAU,wBAAwB;EAElC,UAAU,wBAAwB;EAElC,UAAU,8BAA8B;EACxC,UAAU,WAAW;EACrB,UAAU,iBAAiB;EAC3B,UAAU,iBAAiB;EAC3B,UAAU,mBAAmB;EAC7B,UAAU,0BAA0B;EACpC,UAAU,qBAAqB;EAC/B,UAAU,gBAAgB;EAC1B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EACjC,UAAU,uBAAuB;EACjC,UAAU,qBAAqB;EAC/B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,gBAAgB;EAC1B,UAAU,iBAAiB;CAC/B;;;;;AAKD,SAAgB,cAAc,MAAM;AAChC,QAAO,iBAAiB,SAAS;;;;;;;;;ACxFrC,SAAgB,cAAc,MAAM,SAAS;AACzC,SAAQ,MAAR;EACI,KAAK,UAAU,eACX,QAAO,6BAA6B,QAAQ,KAAK;EACrD,KAAK,UAAU,YACX,QAAO,0BAA0B,QAAQ,KAAK;EAClD,KAAK,UAAU,kBACX,QAAO,eAAe,QAAQ,QAAQ;EAC1C,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,qBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,YACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,uBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,mBACX,QAAO,YAAY,QAAQ,UAAU,+CAA+C,QAAQ,YAAY,UAAU;EACtH,KAAK,UAAU,aACX,QAAO,0CAA0C,QAAQ,KAAK,MAAM,QAAQ;EAChF,KAAK,UAAU,yBACX,QAAO;EACX,KAAK,UAAU,gBACX,QAAO;EACX,KAAK,UAAU,qBACX,QAAO,WAAW,QAAQ,OAAO;EACrC,KAAK,UAAU,sBACX,QAAO,QAAQ,aACT,gDAAgD,QAAQ,WAAW,YACnE;EACV,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,SACX,QAAO;EACX,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,aACX,QAAO,sDAAsD,QAAQ,KAAK;EAC9E,KAAK,UAAU,cACX,QAAO,4CAA4C,QAAQ;EAC/D,KAAK,UAAU,cACX,QAAO;EACX,KAAK,UAAU,UACX,QAAO;EACX,KAAK,UAAU,uBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,eACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,sBACX,QAAO,iCAAiC,QAAQ;EACpD,KAAK,UAAU,qBACX,QAAO;EACX,KAAK,UAAU,sBACX,QAAO;EACX,KAAK,UAAU,sBACX,QAAO;EACX,KAAK,UAAU,sBACX,QAAO;EACX,KAAK,UAAU,oBAEX,SADa,QAAQ,MACrB;GACI,KAAK,cACD,QAAO;GACX,KAAK,oBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,gBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,mBACD,QAAO;GACX,QACI,QAAO;;EAInB,QACI"}

package/dist/index.d.ts

@@ -1,8 +1,22 @@
-import { $ as FileStreamEvent, A as RequestConfig, At as CreateContextOptions, B as BackupOptions, C as CommandClient, Ct as WaitForPortOptions, D as ContainerStub, Dt as isProcessStatus, E as BaseApiResponse, Et as isProcess, F as SandboxInterpreterAPI, G as CheckChangesResult, H as BucketCredentials, I as TunnelInfo, J as ExecOptions, K as DirectoryBackup, L as TunnelOptions, M as SessionRequest, Mt as ExecutionResult, N as NamedTunnelInfo, Nt as RunCodeOptions, O as ErrorResponse, Ot as PtyOptions, P as QuickTunnelInfo, Q as FileMetadata, R as ExecuteRequest, S as WriteFileRequest, St as WaitForLogResult, T as BackupClient, Tt as isExecResult, U as BucketProvider, V as BaseExecOptions, W as CheckChangesOptions, X as ExecutionSession, Y as ExecResult, Z as FileChunk, _ as GitClient, _t as RestoreBackupResult, a as CommandsResponse, at as LogEvent, b as MkdirRequest, bt as SessionOptions, c as DeleteSessionRequest, ct as ProcessCleanupResult, d as UtilityClient, dt as ProcessListResult, et as FileWatchSSEEvent, f as ProcessClient, ft as ProcessLogsResult, g as GitCheckoutRequest, gt as RemoteMountBucketOptions, h as InterpreterClient, ht as ProcessStatus, i as SandboxClient, it as LocalMountBucketOptions, j as ResponseHandler, jt as Execution, k as HttpClientOptions, kt as CodeContext, l as DeleteSessionResponse, lt as ProcessInfoResult, m as ExecutionCallbacks, mt as ProcessStartResult, n as Sandbox, nt as ISandbox, o as CreateSessionRequest, ot as MountBucketOptions, p as PortClient, pt as ProcessOptions, q as ExecEvent, r as getSandbox, rt as ListFilesOptions, s as CreateSessionResponse, st as Process, t as ContainerProxy, tt as GitCheckoutResult, u as PingResponse, ut as ProcessKillResult, v as FileClient, vt as SandboxOptions, w as ExecuteResponse, wt as WatchOptions, x as ReadFileRequest, xt as StreamOptions, y as FileOperationRequest, yt as SandboxTransport, z as StartProcessRequest } from "./sandbox-C8l-pMlL.js";
-import { a as InvalidBackupConfigContext, c as ProcessReadyTimeoutContext, d as SessionTerminatedContext, f as ErrorResponse$1, i as BackupRestoreContext, l as RPCTransportContext, m as ErrorCode, n as BackupExpiredContext, p as OperationType, r as BackupNotFoundContext, s as ProcessExitedBeforeReadyContext, t as BackupCreateContext, u as RPCTransportErrorKind } from "./contexts-B0_bcx9f.js";
+import { $ as FileStreamEvent, A as RequestConfig, At as CreateContextOptions, B as BackupOptions, C as CommandClient, Ct as WaitForPortOptions, D as ContainerStub, Dt as isProcessStatus, E as BaseApiResponse, Et as isProcess, F as SandboxInterpreterAPI, G as CheckChangesResult, H as BucketCredentials, I as TunnelInfo, J as ExecOptions, K as DirectoryBackup, L as TunnelOptions, M as SessionRequest, Mt as ExecutionResult, N as NamedTunnelInfo, Nt as RunCodeOptions, O as ErrorResponse, Ot as PtyOptions, P as QuickTunnelInfo, Q as FileMetadata, R as ExecuteRequest, S as WriteFileRequest, St as WaitForLogResult, T as BackupClient, Tt as isExecResult, U as BucketProvider, V as BaseExecOptions, W as CheckChangesOptions, X as ExecutionSession, Y as ExecResult, Z as FileChunk, _ as GitClient, _t as RestoreBackupResult, a as CommandsResponse, at as LogEvent, b as MkdirRequest, bt as SessionOptions, c as DeleteSessionRequest, ct as ProcessCleanupResult, d as UtilityClient, dt as ProcessListResult, et as FileWatchSSEEvent, f as ProcessClient, ft as ProcessLogsResult, g as GitCheckoutRequest, gt as RemoteMountBucketOptions, h as InterpreterClient, ht as ProcessStatus, i as SandboxClient, it as LocalMountBucketOptions, j as ResponseHandler, jt as Execution, k as HttpClientOptions, kt as CodeContext, l as DeleteSessionResponse, lt as ProcessInfoResult, m as ExecutionCallbacks, mt as ProcessStartResult, n as Sandbox, nt as ISandbox, o as CreateSessionRequest, ot as MountBucketOptions, p as PortClient, pt as ProcessOptions, q as ExecEvent, r as getSandbox, rt as ListFilesOptions, s as CreateSessionResponse, st as Process, t as ContainerProxy, tt as GitCheckoutResult, u as PingResponse, ut as ProcessKillResult, v as FileClient, vt as SandboxOptions, w as ExecuteResponse, wt as WatchOptions, x as ReadFileRequest, xt as StreamOptions, y as FileOperationRequest, yt as SandboxTransport, z as StartProcessRequest } from "./sandbox-BhIQBik-.js";
+import { _ as ErrorCode, a as ContainerUnavailableContext, c as OperationInterruptedContext, d as ProcessReadyTimeoutContext, f as RPCTransportContext, g as OperationType, h as ErrorResponse$1, i as BackupRestoreContext, l as OperationInterruptedReason, m as SessionTerminatedContext, n as BackupExpiredContext, o as InvalidBackupConfigContext, p as RPCTransportErrorKind, r as BackupNotFoundContext, t as BackupCreateContext, u as ProcessExitedBeforeReadyContext } from "./contexts-mjA8ZsDG.js";
 
-//#region src/errors/classes.d.ts
+//#region src/platform-errors.d.ts
 
+/**
+ * Whether an error was raised because the current Durable Object isolate was
+ * superseded by a deploy/code update. In-process retries are futile for this
+ * class because the invocation keeps running on the old isolate; callers
+ * should return control to the platform or retry from a fresh request.
+ */
+declare function isDurableObjectCodeUpdateReset(error: unknown): boolean;
+/**
+ * Whether an error represents a transient platform lifecycle/storage failure,
+ * not an application-level sandbox failure.
+ */
+declare function isPlatformTransientError(error: unknown): boolean;
+//#endregion
+//#region src/errors/classes.d.ts
 /**
  * Base SDK error that wraps ErrorResponse
  * Preserves all error information from container
@@ -101,6 +115,19 @@ declare class BackupRestoreError extends SandboxError<BackupRestoreContext> {
   get dir(): string;
   get backupId(): string;
 }
+/**
+ * Raised when the sandbox container cannot accept an incoming RPC connection.
+ * The container may be starting up, temporarily unhealthy, or was replaced
+ * while the connection attempt was in progress.
+ *
+ * Always retryable: the operation that triggered the connection attempt can
+ * be retried once the container is ready.
+ */
+declare class ContainerUnavailableError extends SandboxError<ContainerUnavailableContext> {
+  constructor(errorResponse: ErrorResponse$1<ContainerUnavailableContext>);
+  get reason(): ContainerUnavailableContext['reason'];
+  get retryAfterMs(): number | undefined;
+}
 /**
  * Raised when the capnweb WebSocket session itself fails on the SDK side.
  * Unlike the rest of the SandboxError tree, the container never produces
@@ -120,6 +147,17 @@ declare class RPCTransportError extends SandboxError<RPCTransportContext> {
   get kind(): RPCTransportErrorKind;
   get originalMessage(): string;
 }
+/**
+ * Raised when a sandbox-owned operation was interrupted by a runtime
+ * replacement or sandbox lifetime change after the operation was admitted.
+ * The caller can retry the full operation when `context.retryable` is true.
+ */
+declare class OperationInterruptedError extends SandboxError<OperationInterruptedContext> {
+  constructor(errorResponse: ErrorResponse$1<OperationInterruptedContext>, options?: {
+    cause?: unknown;
+  });
+  get reason(): OperationInterruptedContext['reason'];
+}
 //#endregion
 //#region src/file-stream.d.ts
 /**
@@ -262,5 +300,5 @@ declare class InvalidMountConfigError extends BucketMountError {
   constructor(message: string);
 }
 //#endregion
-export { BackupClient, BackupCreateError, BackupExpiredError, BackupNotFoundError, type BackupOptions, BackupRestoreError, type BaseApiResponse, type BaseExecOptions, type BucketCredentials, BucketMountError, type BucketProvider, BucketUnmountError, type CheckChangesOptions, type CheckChangesResult, type CodeContext, CodeInterpreter, CommandClient, type ExecuteResponse as CommandExecuteResponse, type CommandsResponse, ContainerProxy, type ContainerStub, type CreateContextOptions, type CreateSessionRequest, type CreateSessionResponse, type DeleteSessionRequest, type DeleteSessionResponse, type DirectoryBackup, type ErrorResponse, type ExecEvent, type ExecOptions, type ExecResult, type ExecuteRequest, type ExecutionCallbacks, type ExecutionResult, type ExecutionSession, type FileChunk, FileClient, type FileMetadata, type FileOperationRequest, type FileStreamEvent, type FileWatchSSEEvent, type GitCheckoutRequest, type GitCheckoutResult, GitClient, type ISandbox, type InterpreterClient, InvalidBackupConfigError, InvalidMountConfigError, type ListFilesOptions, type LocalMountBucketOptions, type LogEvent, MissingCredentialsError, type MkdirRequest, type MountBucketOptions, type NamedTunnelInfo, type PingResponse, PortClient, type Process, type ProcessCleanupResult, ProcessClient, ProcessExitedBeforeReadyError, type ProcessInfoResult, type ProcessKillResult, type ProcessListResult, type ProcessLogsResult, type ProcessOptions, ProcessReadyTimeoutError, type ProcessStartResult, type ProcessStatus, type PtyOptions, type QuickTunnelInfo, type RPCTransportContext, RPCTransportError, type RPCTransportErrorKind, type ReadFileRequest, type RemoteMountBucketOptions, type RequestConfig, type ResponseHandler, type RestoreBackupResult, type RunCodeOptions, S3FSMountError, Sandbox, SandboxClient, type HttpClientOptions as SandboxClientOptions, type SandboxEnv, type SandboxOptions, type SandboxTransport, type SessionOptions, type SessionRequest, SessionTerminatedError, type StartProcessRequest, type StreamOptions, type TunnelInfo, type TunnelOptions, UtilityClient, type WaitForLogResult, type WaitForPortOptions, type WatchOptions, type WriteFileRequest, asyncIterableToSSEStream, collectFile, getSandbox, isExecResult, isProcess, isProcessStatus, parseSSEStream, proxyTerminal, proxyToSandbox, responseToAsyncIterable, streamFile };
+export { BackupClient, BackupCreateError, BackupExpiredError, BackupNotFoundError, type BackupOptions, BackupRestoreError, type BaseApiResponse, type BaseExecOptions, type BucketCredentials, BucketMountError, type BucketProvider, BucketUnmountError, type CheckChangesOptions, type CheckChangesResult, type CodeContext, CodeInterpreter, CommandClient, type ExecuteResponse as CommandExecuteResponse, type CommandsResponse, ContainerProxy, type ContainerStub, type ContainerUnavailableContext, ContainerUnavailableError, type CreateContextOptions, type CreateSessionRequest, type CreateSessionResponse, type DeleteSessionRequest, type DeleteSessionResponse, type DirectoryBackup, type ErrorResponse, type ExecEvent, type ExecOptions, type ExecResult, type ExecuteRequest, type ExecutionCallbacks, type ExecutionResult, type ExecutionSession, type FileChunk, FileClient, type FileMetadata, type FileOperationRequest, type FileStreamEvent, type FileWatchSSEEvent, type GitCheckoutRequest, type GitCheckoutResult, GitClient, type ISandbox, type InterpreterClient, InvalidBackupConfigError, InvalidMountConfigError, type ListFilesOptions, type LocalMountBucketOptions, type LogEvent, MissingCredentialsError, type MkdirRequest, type MountBucketOptions, type NamedTunnelInfo, type OperationInterruptedContext, OperationInterruptedError, type OperationInterruptedReason, type PingResponse, PortClient, type Process, type ProcessCleanupResult, ProcessClient, ProcessExitedBeforeReadyError, type ProcessInfoResult, type ProcessKillResult, type ProcessListResult, type ProcessLogsResult, type ProcessOptions, ProcessReadyTimeoutError, type ProcessStartResult, type ProcessStatus, type PtyOptions, type QuickTunnelInfo, type RPCTransportContext, RPCTransportError, type RPCTransportErrorKind, type ReadFileRequest, type RemoteMountBucketOptions, type RequestConfig, type ResponseHandler, type RestoreBackupResult, type RunCodeOptions, S3FSMountError, Sandbox, SandboxClient, type HttpClientOptions as SandboxClientOptions, type SandboxEnv, type SandboxOptions, type SandboxTransport, type SessionOptions, type SessionRequest, SessionTerminatedError, type StartProcessRequest, type StreamOptions, type TunnelInfo, type TunnelOptions, UtilityClient, type WaitForLogResult, type WaitForPortOptions, type WatchOptions, type WriteFileRequest, asyncIterableToSSEStream, collectFile, getSandbox, isDurableObjectCodeUpdateReset, isExecResult, isPlatformTransientError, isProcess, isProcessStatus, parseSSEStream, proxyTerminal, proxyToSandbox, responseToAsyncIterable, streamFile };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/errors/classes.ts","../src/file-stream.ts","../src/interpreter.ts","../src/pty/proxy.ts","../src/request-handler.ts","../src/sse-parser.ts","../src/storage-mount/errors.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAmEa,cAnBA,YAmBA,CAAA,WAnBwB,MAmBxB,CAAA,MAAA,EAAA,OAAA,CAAA,CAAA,SAnByD,KAAA,CAmBzD;EAAA,SAAA,aAAA,EAjBsB,eAiBtB,CAjBoC,QAiBpC,CAAA;EAME,WAAA,CAAA,aAAA,EAvBoB,eAuBpB,CAvBkC,QAuBlC,CAAA,EAAA,QAAA,EAAA;;;EAzBuD,IAAA,IAAA,CAAA,CAAA,EAEtB,SAFsB;EAAK,IAAA,OAAA,CAAA,CAAA,EAmB9D,QAnB8D;EA6Q9D,IAAA,UAAA,CAAA,CAAA,EAAA,MAAA;EAA4C,IAAA,SAAA,CAAA,CAAA,EA1P5C,aAAA,GA0P4C,SAAA;EACd,IAAA,UAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAd,IAAA,SAAA,CAAA,CAAA,EAAA,MAAA;EADe,IAAA,aAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EAAY,MAAA,CAAA,CAAA,EAAA;IA6X3C,IAAA,EAAA,MAAA;IAA8C,OAAA,EAAA,MAAA;IAChB,IAAA,EAlnB5B,SAknB4B;IAAd,OAAA,UAAA;IADiB,UAAA,EAAA,MAAA;IAAY,SAAA,kBAAA,SAAA;IAwB7C,UAAA,EAAA,MAAA,GAAA,SAA8B;IAAqB,SAAA,EAAA,MAAA;IACrB,aAAA,EAAA,MAAA,GAAA,SAAA;IAAd,KAAA,EAAA,MAAA,GAAA,SAAA;EADsB,CAAA;;;;AIvsBnD;;;;AACW,cJiTE,sBAAA,SAA+B,YIjTjC,CJiT8C,wBIjT9C,CAAA,CAAA;EAAsB,WAAA,CAAA,aAAA,EJkTJ,eIlTI,CJkTU,wBIlTV,CAAA;EAmBX,IAAA,SAAA,CAAA,CAAA,EAAc,MAAA;EACxB,IAAA,QAAA,CAAA,CAAA,EAAA,MAAA,GAAA,IAAA;;;;;cJ0pBC,wBAAA,SAAiC,aAAa;6BAC9B,gBAAc;;;;;;;;;cAuB9B,6BAAA,SAAsC,aAAa;6BACnC,gBAAc;;;;;;;;;cA2B9B,mBAAA,SAA4B,aAAa;6BACzB,gBAAc;;;;;;cAa9B,kBAAA,SAA2B,aAAa;6BACxB,gBAAc;;;;;;;cAgB9B,wBAAA,SAAiC,aAAa;6BAC9B,gBAAc;;;;;;cAa9B,iBAAA,SAA0B,aAAa;6BACvB,gBAAc;;;;;;;cAgB9B,kBAAA,SAA2B,aAAa;6BACxB,gBAAc;;;;;;;;;;;;;;;;cA6B9B,iBAAA,SAA0B,aAAa;6BAEjC,gBAAc;;;cAOnB;;;;;;;;AAnyBd;;;;;;;;;;;;;;AA6QA;;;AAC6B,iBC3ON,UAAA,CD2OM,MAAA,EC1OnB,cD0OmB,CC1OJ,UD0OI,CAAA,CAAA,ECzO1B,cDyO0B,CCzOX,SDyOW,ECzOA,YDyOA,CAAA;;;AA4X7B;;;;;;AAwBA;;;;;;AA4Ba,iBC5lBS,WAAA,CD4lBW,MAAA,EC5lBS,cD4lBT,CC5lBwB,UD4lBxB,CAAA,CAAA,EC5lBsC,OD4lBtC,CAAA;EAAqB,OAAA,EAAA,MAAA,GC3lBlC,UD2lBkC;EACX,QAAA,EC3lB/B,YD2lB+B;CAAd,CAAA;;;cEluBhB,eAAA;;;EFmCA,WAAA,CAAA,iBAAY,EE9BF,qBF8BE,GAAA,CAAA,GAAA,GE9B6B,qBF8B7B,CAAA;EAAY;;;EAEY,iBAAA,CAAA,OAAA,CAAA,EEpBpC,oBFoBoC,CAAA,EEnB5C,OFmB4C,CEnBpC,WFmBoC,CAAA;EAAd;;;EAiBtB,OAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EErBA,cFqBA,CAAA,EEpBR,OFoBQ,CEpBA,SFoBA,CAAA;EAME;;;EAzBuD,aAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EE4CzD,cF5CyD,CAAA,EE6CjE,OF7CiE,CE6CzD,cF7CyD,CAAA;EAAK;AA6Q3E;;EAC2C,gBAAA,CAAA,CAAA,EE9Mf,OF8Me,CE9MP,WF8MO,EAAA,CAAA;EAAd;;;EA4XhB,iBAAA,CAAA,SAAyB,EAAA,MAAA,CAAA,EE5jBQ,OF4jBR,CAAA,IAAA,CAAA;EAAqB,QAAA,yBAAA;;;;iBGvrBrC,aAAA;mBACK,YAAY,QAAQ;+BAEpC,mBACC,aACT,QAAQ;;;UCGM,qBAAqB,eAAe;WAC1C,uBAAuB;;AJoCrB,iBIjBS,cJiBG,CAAA,UIhBb,OJgBa,CAAA,GAAA,CAAA,EAAA,UIfb,UJea,CIfF,CJeE,CAAA,CAAA,CAAA,OAAA,EIdd,OJcc,EAAA,GAAA,EIdA,CJcA,CAAA,EIdI,OJcJ,CIdY,QJcZ,GAAA,IAAA,CAAA;;;;;;;AAAzB;;;;;AAEmC,iBKtCZ,cLsCY,CAAA,CAAA,CAAA,CAAA,MAAA,EKrCzB,cLqCyB,CKrCV,ULqCU,CAAA,EAAA,MAAA,CAAA,EKpCxB,WLoCwB,CAAA,EKnChC,aLmCgC,CKnClB,CLmCkB,CAAA;;;;;;iBKqDZ,qCACX,mBACD,cACR,cAAc;;;ALmNjB;;;;AAA4C,iBK/L5B,wBL+L4B,CAAA,CAAA,CAAA,CAAA,MAAA,EK9LlC,aL8LkC,CK9LpB,CL8LoB,CAAA,EAAA,OA6Xe,CA7Xf,EAAA;EAAY,MAAA,CAAA,EK5L3C,WL4L2C;EA6X3C,SAAA,CAAA,EAAA,CAAA,KAAA,EKxjBW,CLwjBX,EAAA,GAAA,MAAyB;CAAqB,CAAA,EKtjBxD,cLsjBwD,CKtjBzC,ULsjByC,CAAA;;;;;;AAvnB9C,cMtDA,gBAAA,SAAyB,KAAA,CNsDzB;EAAA,SAAA,IAAA,EMrDW,SNqDX;EAME,WAAA,CAAA,OAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EMzDsB,SNyDtB;;;;;AAoPF,cMnSA,cAAA,SAAuB,gBAAA,CNmSA;EAAqB,WAAA,CAAA,OAAA,EAAA,MAAA;;;;;AA6X5C,cMtpBA,kBAAA,SAA2B,gBAAA,CNspBF;EAAqB,WAAA,CAAA,OAAA,EAAA,MAAA;;;;;AAwB9C,cMpqBA,uBAAA,SAAgC,gBAAA,CNoqBF;EAAqB,WAAA,CAAA,OAAA,EAAA,MAAA;;;;;AA4BnD,cMtrBA,uBAAA,SAAgC,gBAAA,CNsrBZ;EAAqB,WAAA,CAAA,OAAA,EAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/platform-errors.ts","../src/errors/classes.ts","../src/file-stream.ts","../src/interpreter.ts","../src/pty/proxy.ts","../src/request-handler.ts","../src/sse-parser.ts","../src/storage-mount/errors.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AA0CA;AAaA;iBAbgB,8BAAA;;;ACQhB;;AAEiD,iBDGjC,wBAAA,CCHiC,KAAA,EAAA,OAAA,CAAA,EAAA,OAAA;;;;;AAFjD;;AAEiD,cAFpC,YAEoC,CAAA,WAFZ,MAEY,CAAA,MAAA,EAAA,OAAA,CAAA,CAAA,SAFqB,KAAA,CAErB;EAAd,SAAA,aAAA,EAAA,eAAA,CAAc,QAAd,CAAA;EAAc,WAAA,CAAA,aAAA,EAAd,eAAc,CAAA,QAAA,CAAA,EAAA,OAAD,CAAC,EAAA;IAAd,KAAA,CAAA,EAAA,OAAA;EAAa,CAAA;EAiBnC,IAAA,IAAA,CAAA,CAAA,EAjBmC,SAiBnC;EAAA,IAAA,OAAA,CAAA,CAAA,EAAA,QAAA;EAME,IAAA,UAAA,CAAA,CAAA,EAAA,MAAA;mBANF,aAAA;;EAnByD,IAAA,SAAA,CAAA,CAAA,EAAA,MAAA;EAAK,IAAA,aAAA,CAAA,CAAA,EAAA,MAAA,GAAA,SAAA;EA6Q9D,MAAA,CAAA,CAAA,EAAA;IAA4C,IAAA,EAAA,MAAA;IACd,OAAA,EAAA,MAAA;IAAd,IAAA,EArPd,SAqPc;IADe,OAAA,UAAA;IAAY,UAAA,EAAA,MAAA;IA6X3C,SAAA,kBAAyB,SAAA;IAAqB,UAAA,EAAA,MAAA,GAAA,SAAA;IAChB,SAAA,EAAA,MAAA;IAAd,aAAA,EAAA,MAAA,GAAA,SAAA;IADiB,KAAA,EAAA,MAAA,GAAA,SAAA;EAAY,CAAA;AAwB1D;;;;;;;cArZa,sBAAA,SAA+B,aAAa;6BAC5B,gBAAc;;EG7TrB,IAAA,QAAA,CAAA,CAAA,EAAa,MAAA,GAAA,IAAA;;;;;cHyrBtB,wBAAA,SAAiC,aAAa;6BAC9B,gBAAc;;;;;;;;;cAuB9B,6BAAA,SAAsC,aAAa;6BACnC,gBAAc;;;;;;;;;cA2B9B,mBAAA,SAA4B,aAAa;6BACzB,gBAAc;;;;;;cAa9B,kBAAA,SAA2B,aAAa;6BACxB,gBAAc;;;;;;;cAgB9B,wBAAA,SAAiC,aAAa;6BAC9B,gBAAc;;;;;;cAa9B,iBAAA,SAA0B,aAAa;6BACvB,gBAAc;;;;;;;cAgB9B,kBAAA,SAA2B,aAAa;6BACxB,gBAAc;;;;;;;;;;;;cAyB9B,yBAAA,SAAkC,aAAa;6BAC/B,gBAAc;gBAK3B;;;;;;;;;;;;;;;cAyBH,iBAAA,SAA0B,aAAa;6BAEjC,gBAAc;;;cAOnB;;;;;;;;cAkBD,yBAAA,SAAkC,aAAa;6BAEzC,gBAAc;;;gBAOjB;;;;;;;ADj2BhB;AAaA;;;;ACLA;;;;;;;;;;;;AAAsE,iBCiC/C,UAAA,CDjC+C,MAAA,ECkC5D,cDlC4D,CCkC7C,UDlC6C,CAAA,CAAA,ECmCnE,cDnCmE,CCmCpD,SDnCoD,ECmCzC,YDnCyC,CAAA;;AA6QtE;;;;;;AA6XA;;;;;;AAwBA;AAAgE,iBClkB1C,WAAA,CDkkB0C,MAAA,EClkBtB,cDkkBsB,CClkBP,UDkkBO,CAAA,CAAA,EClkBO,ODkkBP,CAAA;EACrB,OAAA,EAAA,MAAA,GClkBvB,UDkkBuB;EAAd,QAAA,ECjkBjB,YDikBiB;CADsB,CAAA;;;cEvsBtC,eAAA;;;EH6BG,WAAA,CAAA,iBAAA,EGxBO,qBHwBuB,GAAA,CAAA,GAAA,GGxBQ,qBHwBR,CAAA;EAa9B;;;8BGzBH,uBACR,QAAQ;EFmBA;;;EAEsB,OAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EENtB,cFMsB,CAAA,EEL9B,OFK8B,CELtB,SFKsB,CAAA;EAAc;;;EAiBpC,aAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EEuBA,cFvBA,CAAA,EEwBR,OFxBQ,CEwBA,cFxBA,CAAA;EAAA;;;sBE2Ce,QAAQ;EF9DkC;;AA6QtE;EAAyD,iBAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EEjMX,OFiMW,CAAA,IAAA,CAAA;EACd,QAAA,yBAAA;;;;iBG7TrB,aAAA;mBACK,YAAY,QAAQ;+BAEpC,mBACC,aACT,QAAQ;;;UCGM,qBAAqB,eAAe;WAC1C,uBAAuB;;AL8BlB,iBKXM,cLWwB,CAAA,UKVlC,OLUkC,CAAA,GAAA,CAAA,EAAA,UKTlC,ULSkC,CKTvB,CLSuB,CAAA,CAAA,CAAA,OAAA,EKRnC,OLQmC,EAAA,GAAA,EKRrB,CLQqB,CAAA,EKRjB,OLQiB,CKRT,QLQS,GAAA,IAAA,CAAA;;;;;;;AAA9C;AAaA;;;;ACLa,iBKtCU,cLsCE,CAAA,CAAA,CAAA,CAAA,MAAA,EKrCf,cLqCe,CKrCA,ULqCA,CAAA,EAAA,MAAA,CAAA,EKpCd,WLoCc,CAAA,EKnCtB,aLmCsB,CKnCR,CLmCQ,CAAA;;;;;;AAEuB,iBKmDzB,uBLnDyB,CAAA,CAAA,CAAA,CAAA,QAAA,EKoDpC,QLpDoC,EAAA,MAAA,CAAA,EKqDrC,WLrDqC,CAAA,EKsD7C,aLtD6C,CKsD/B,CLtD+B,CAAA;;;;;;;AAF2B,iBK4E3D,wBL5E2D,CAAA,CAAA,CAAA,CAAA,MAAA,EK6EjE,aL7EiE,CK6EnD,CL7EmD,CAAA,EAAA,OA8QhC,CA9QgC,EAAA;EA6Q9D,MAAA,CAAA,EK9LA,WL8LA;EAA4C,SAAA,CAAA,EAAA,CAAA,KAAA,EK7LjC,CL6LiC,EAAA,GAAA,MAAA;CACd,CAAA,EK5LxC,cL4LwC,CK5LzB,UL4LyB,CAAA;;;;AA9Q3C;;AAEiD,cMvCpC,gBAAA,SAAyB,KAAA,CNuCW;EAAd,SAAA,IAAA,EMtCX,SNsCW;EAAc,WAAA,CAAA,OAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EMpCZ,SNoCY;;;;;AAuBlC,cMjDF,cAAA,SAAuB,gBAAA,CNiDrB;;;;;AAoPf;AAAyD,cM3R5C,kBAAA,SAA2B,gBAAA,CN2RiB;EACd,WAAA,CAAA,OAAA,EAAA,MAAA;;;;AA4X3C;AAA2D,cM9oB9C,uBAAA,SAAgC,gBAAA,CN8oBc;EAChB,WAAA,CAAA,OAAA,EAAA,MAAA;;;;AAuB3C;AAAgE,cM5pBnD,uBAAA,SAAgC,gBAAA,CN4pBmB;EACrB,WAAA,CAAA,OAAA,EAAA,MAAA"}

package/dist/index.js

@@ -1,6 +1,6 @@
 import { a as isExecResult, f as TraceContext, o as isProcess, s as isProcessStatus, u as createLogger } from "./dist-B_eXrP83.js";
-import "./errors-aRUdk9K8.js";
-import { A as FileClient, B as RPCTransportError, C as collectFile, D as ProcessClient, E as UtilityClient, F as BackupNotFoundError, I as BackupRestoreError, L as InvalidBackupConfigError, M as BackupClient, N as BackupCreateError, O as PortClient, P as BackupExpiredError, R as ProcessExitedBeforeReadyError, T as SandboxClient, V as SessionTerminatedError, _ as responseToAsyncIterable, a as PREVIEW_PROXY_HEADER, b as sanitizeSandboxId, c as PREVIEW_PROXY_SANDBOX_ID_HEADER, d as BucketUnmountError, f as InvalidMountConfigError, g as parseSSEStream, h as asyncIterableToSSEStream, i as proxyTerminal, j as CommandClient, k as GitClient, l as PREVIEW_PROXY_TOKEN_HEADER, m as S3FSMountError, n as Sandbox, o as PREVIEW_PROXY_HEADERS, p as MissingCredentialsError, r as getSandbox, s as PREVIEW_PROXY_PORT_HEADER, t as ContainerProxy, u as BucketMountError, v as CodeInterpreter, w as streamFile, x as validatePort, z as ProcessReadyTimeoutError } from "./sandbox-BXMrasVs.js";
+import "./errors-CpkKPbWC.js";
+import { A as PortClient, B as InvalidBackupConfigError, C as collectFile, D as SandboxClient, E as isPlatformTransientError, F as BackupCreateError, G as SessionTerminatedError, H as ProcessExitedBeforeReadyError, I as BackupExpiredError, L as BackupNotFoundError, M as FileClient, N as CommandClient, O as UtilityClient, P as BackupClient, R as BackupRestoreError, T as isDurableObjectCodeUpdateReset, U as ProcessReadyTimeoutError, V as OperationInterruptedError, W as RPCTransportError, _ as responseToAsyncIterable, a as PREVIEW_PROXY_HEADER, b as sanitizeSandboxId, c as PREVIEW_PROXY_SANDBOX_ID_HEADER, d as BucketUnmountError, f as InvalidMountConfigError, g as parseSSEStream, h as asyncIterableToSSEStream, i as proxyTerminal, j as GitClient, k as ProcessClient, l as PREVIEW_PROXY_TOKEN_HEADER, m as S3FSMountError, n as Sandbox, o as PREVIEW_PROXY_HEADERS, p as MissingCredentialsError, r as getSandbox, s as PREVIEW_PROXY_PORT_HEADER, t as ContainerProxy, u as BucketMountError, v as CodeInterpreter, w as streamFile, x as validatePort, z as ContainerUnavailableError } from "./sandbox-DI6suZAc.js";
 
 //#region src/request-handler.ts
 function createProxyLogger(request) {
@@ -60,5 +60,5 @@ function extractSandboxRoute(url) {
 }
 
 //#endregion
-export { BackupClient, BackupCreateError, BackupExpiredError, BackupNotFoundError, BackupRestoreError, BucketMountError, BucketUnmountError, CodeInterpreter, CommandClient, ContainerProxy, FileClient, GitClient, InvalidBackupConfigError, InvalidMountConfigError, MissingCredentialsError, PortClient, ProcessClient, ProcessExitedBeforeReadyError, ProcessReadyTimeoutError, RPCTransportError, S3FSMountError, Sandbox, SandboxClient, SessionTerminatedError, UtilityClient, asyncIterableToSSEStream, collectFile, getSandbox, isExecResult, isProcess, isProcessStatus, parseSSEStream, proxyTerminal, proxyToSandbox, responseToAsyncIterable, streamFile };
+export { BackupClient, BackupCreateError, BackupExpiredError, BackupNotFoundError, BackupRestoreError, BucketMountError, BucketUnmountError, CodeInterpreter, CommandClient, ContainerProxy, ContainerUnavailableError, FileClient, GitClient, InvalidBackupConfigError, InvalidMountConfigError, MissingCredentialsError, OperationInterruptedError, PortClient, ProcessClient, ProcessExitedBeforeReadyError, ProcessReadyTimeoutError, RPCTransportError, S3FSMountError, Sandbox, SandboxClient, SessionTerminatedError, UtilityClient, asyncIterableToSSEStream, collectFile, getSandbox, isDurableObjectCodeUpdateReset, isExecResult, isPlatformTransientError, isProcess, isProcessStatus, parseSSEStream, proxyTerminal, proxyToSandbox, responseToAsyncIterable, streamFile };
 //# sourceMappingURL=index.js.map

package/dist/openai/index.d.ts

@@ -1,4 +1,4 @@
-import { n as Sandbox } from "../sandbox-C8l-pMlL.js";
+import { n as Sandbox } from "../sandbox-BhIQBik-.js";
 import { ApplyPatchOperation, ApplyPatchResult, Editor as Editor$1, Shell as Shell$1, ShellAction, ShellResult } from "@openai/agents";
 
 //#region src/openai/index.d.ts

package/dist/opencode/index.d.ts

@@ -1,5 +1,5 @@
-import { n as Sandbox } from "../sandbox-C8l-pMlL.js";
-import { o as OpencodeStartupContext } from "../contexts-B0_bcx9f.js";
+import { n as Sandbox } from "../sandbox-BhIQBik-.js";
+import { s as OpencodeStartupContext } from "../contexts-mjA8ZsDG.js";
 import { OpencodeClient } from "@opencode-ai/sdk/v2/client";
 import { Config } from "@opencode-ai/sdk/v2";
 

package/dist/opencode/index.js

@@ -1,5 +1,5 @@
 import { u as createLogger } from "../dist-B_eXrP83.js";
-import { r as ErrorCode } from "../errors-aRUdk9K8.js";
+import { r as ErrorCode } from "../errors-CpkKPbWC.js";
 
 //#region src/opencode/types.ts
 /**

package/dist/{sandbox-C8l-pMlL.d.ts → sandbox-BhIQBik-.d.ts}

@@ -1733,6 +1733,63 @@ interface TunnelOptions {
    */
   name?: string;
 }
+/**
+ * Stable logical identity for a single cloudflared process run.
+ * `tunnelId` is SDK-issued; `runId` is a per-run nonce minted by the SDK
+ * to support idempotent admission and stale-callback fencing.
+ */
+interface TunnelRunIdentity {
+  tunnelId: string;
+  runId: string;
+}
+/** Discriminator for quick vs. named cloudflared modes. */
+type TunnelRunMode = 'quick' | 'named';
+/** Request to start or replay a quick tunnel run. */
+interface EnsureQuickTunnelRunRequest {
+  tunnelId: string;
+  runId: string;
+  mode: 'quick';
+  port: number;
+}
+/**
+ * Request to start or replay a named tunnel run.
+ * `token` is named-mode only and must never be persisted or logged.
+ */
+interface EnsureNamedTunnelRunRequest {
+  tunnelId: string;
+  runId: string;
+  mode: 'named';
+  port: number;
+  /** Opaque Cloudflare tunnel token. Never logged or stored. */
+  token: string;
+}
+type EnsureTunnelRunRequest = EnsureQuickTunnelRunRequest | EnsureNamedTunnelRunRequest;
+/**
+ * Runtime-local snapshot of a running cloudflared process.
+ * Quick tunnels carry `url` and `hostname`; named tunnels leave them absent
+ * because the SDK owns the hostname via the Cloudflare API.
+ */
+interface TunnelRunSnapshot {
+  tunnelId: string;
+  runId: string;
+  mode: TunnelRunMode;
+  port: number;
+  /** Public URL for quick tunnels (absent on named). */
+  url?: string;
+  /** Hostname portion of `url` for quick tunnels (absent on named). */
+  hostname?: string;
+  startedAt: string;
+}
+interface EnsureTunnelRunResult {
+  run: TunnelRunSnapshot;
+  /** `true` when this call spawned the process; `false` on idempotent replay. */
+  started: boolean;
+}
+type StopTunnelRunRequest = TunnelRunIdentity;
+interface StopTunnelRunResult {
+  /** `true` when the exact run was found and stopped; `false` otherwise. */
+  stopped: boolean;
+}
 interface SandboxTunnelsAPI {
   /** Spawn `cloudflared tunnel --url`. No credentials required. */
   runQuickTunnel(id: string, port: number): Promise<TunnelInfo>;
@@ -1755,6 +1812,19 @@ interface SandboxTunnelsAPI {
   }>;
   /** List tunnels currently running inside the container. */
   listTunnels(): Promise<TunnelInfo[]>;
+  /**
+   * Start or replay a cloudflared process run identified by `(tunnelId, runId)`.
+   * Same `runId` with same params is idempotent (`started: false`).
+   * Same `runId` with different params, or a different active run on the
+   * same port or tunnelId, returns a `TUNNEL_RUN_CONFLICT` error.
+   */
+  ensureTunnelRun(request: EnsureTunnelRunRequest): Promise<EnsureTunnelRunResult>;
+  /**
+   * Stop the cloudflared process identified by the exact `(tunnelId, runId)` pair.
+   * Returns `{ stopped: true }` when the run was found and stopped;
+   * `{ stopped: false }` when no matching run is active (service success).
+   */
+  stopTunnelRun(request: StopTunnelRunRequest): Promise<StopTunnelRunResult>;
 }
 //#endregion
 //#region src/clients/types.d.ts
@@ -2469,14 +2539,12 @@ interface ContainerControlConnectionOptions {
    */
   localMain?: any;
   /**
-   * Invoked when an active WebSocket transitions to closed/errored.
-   * Fired at most once per successful connection from the WS event
-   * handlers in `doConnect`. Gives owners a synchronous teardown
-   * signal so recovery doesn't depend on a periodic poller running
-   * inside what may be an idle isolate.
+   * Invoked when connection setup fails or an active WebSocket transitions
+   * to closed/errored. Fired at most once per connection attempt. Gives
+   * owners a synchronous teardown signal so recovery doesn't depend on a
+   * periodic poller running inside what may be an idle isolate.
    *
-   * Not fired for `doConnect` failures (the rejected `connect()`
-   * promise is the signal in that case) nor for `disconnect()`.
+   * Not fired for `disconnect()`.
    */
   onClose?: () => void;
 }
@@ -2637,6 +2705,7 @@ declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox
   private activeMounts;
   private mountOperationQueue;
   private currentRuntime;
+  private currentLifetime;
   private transport;
   /**
    * True once transport has been written to storage at least once (either
@@ -3416,6 +3485,7 @@ declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox
    * Concurrent backup/restore calls on the same sandbox are serialized.
    */
   restoreBackup(backup: DirectoryBackup): Promise<RestoreBackupResult>;
+  private doRestoreBackupWithRecovery;
   private doRestoreBackup;
   /**
    * Local-dev implementation of restoreBackup.
@@ -3428,4 +3498,4 @@ declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox
 }
 //#endregion
 export { FileStreamEvent as $, RequestConfig as A, CreateContextOptions as At, BackupOptions as B, CommandClient as C, WaitForPortOptions as Ct, ContainerStub as D, isProcessStatus as Dt, BaseApiResponse as E, isProcess as Et, SandboxInterpreterAPI as F, CheckChangesResult as G, BucketCredentials as H, TunnelInfo as I, ExecOptions as J, DirectoryBackup as K, TunnelOptions as L, SessionRequest as M, ExecutionResult as Mt, NamedTunnelInfo as N, RunCodeOptions as Nt, ErrorResponse as O, PtyOptions as Ot, QuickTunnelInfo as P, FileMetadata as Q, ExecuteRequest as R, WriteFileRequest as S, WaitForLogResult as St, BackupClient as T, isExecResult as Tt, BucketProvider as U, BaseExecOptions as V, CheckChangesOptions as W, ExecutionSession as X, ExecResult as Y, FileChunk as Z, GitClient as _, RestoreBackupResult as _t, CommandsResponse as a, LogEvent as at, MkdirRequest as b, SessionOptions as bt, DeleteSessionRequest as c, ProcessCleanupResult as ct, UtilityClient as d, ProcessListResult as dt, FileWatchSSEEvent as et, ProcessClient as f, ProcessLogsResult as ft, GitCheckoutRequest as g, RemoteMountBucketOptions as gt, InterpreterClient as h, ProcessStatus as ht, SandboxClient as i, LocalMountBucketOptions as it, ResponseHandler as j, Execution as jt, HttpClientOptions as k, CodeContext as kt, DeleteSessionResponse as l, ProcessInfoResult as lt, ExecutionCallbacks as m, ProcessStartResult as mt, Sandbox as n, ISandbox as nt, CreateSessionRequest as o, MountBucketOptions as ot, PortClient as p, ProcessOptions as pt, ExecEvent as q, getSandbox as r, ListFilesOptions as rt, CreateSessionResponse as s, Process as st, ContainerProxy$1 as t, GitCheckoutResult as tt, PingResponse as u, ProcessKillResult as ut, FileClient as v, SandboxOptions as vt, ExecuteResponse as w, WatchOptions as wt, ReadFileRequest as x, StreamOptions as xt, FileOperationRequest as y, SandboxTransport as yt, StartProcessRequest as z };
-//# sourceMappingURL=sandbox-C8l-pMlL.d.ts.map
+//# sourceMappingURL=sandbox-BhIQBik-.d.ts.map