@cloudflare/sandbox 0.12.8 → 0.12.10

package/Dockerfile

@@ -5,20 +5,20 @@ ARG NODE_VERSION=24
 # cloudflared release — shared across glibc and musl image variants.
 # Bump this together with the architecture-specific checksums below.
 ARG CLOUDFLARED_VERSION=2026.3.0
+# fuse-overlayfs release — backs the copy-on-write layer of restored backups.
+# Pinned upstream because Ubuntu 22.04 ships 1.7.1, which returns EEXIST when
+# a restored directory is deleted, recreated and listed before files are
+# created in it (fixed in 1.15). Switch back to the distro package once the
+# base image ships 1.15 or newer.
+# Bump this together with the architecture-specific checksums below.
+ARG FUSE_OVERLAYFS_VERSION=1.18
 FROM oven/bun:${BUN_VERSION} AS bun-binary
 FROM node:${NODE_VERSION}-slim AS node-runtime
 
 # ============================================================================
-# cloudflared (Cloudflare Tunnel daemon) — enables sandbox.tunnels.*
-# Version pin lives at the top of this Dockerfile as a global ARG, shared
-# by every image variant so they ship the same release.
+# Release downloader — shared base for fetching pinned upstream binaries
 # ============================================================================
-FROM alpine:3.21 AS cloudflared-binary
-
-ARG TARGETARCH
-ARG CLOUDFLARED_VERSION
-ARG CLOUDFLARED_SHA256_AMD64=4a9e50e6d6d798e90fcd01933151a90bf7edd99a0a55c28ad18f2e16263a5c30
-ARG CLOUDFLARED_SHA256_ARM64=0755ba4cbab59980e6148367fcf53a8f3ec85a97deefd63c2420cf7850769bee
+FROM alpine:3.21 AS release-downloader
 
 # Inject the host's extra CA bundle when downloading behind a TLS-intercepting
 # proxy (e.g. Cloudflare WARP / Zero Trust). No-op when the secret isn't passed.
@@ -33,6 +33,18 @@ RUN --mount=type=secret,id=wrangler_ca \
         update-ca-certificates; \
     fi
 
+# ============================================================================
+# cloudflared (Cloudflare Tunnel daemon) — enables sandbox.tunnels.*
+# Version pin lives at the top of this Dockerfile as a global ARG, shared
+# by every image variant so they ship the same release.
+# ============================================================================
+FROM release-downloader AS cloudflared-binary
+
+ARG TARGETARCH
+ARG CLOUDFLARED_VERSION
+ARG CLOUDFLARED_SHA256_AMD64=4a9e50e6d6d798e90fcd01933151a90bf7edd99a0a55c28ad18f2e16263a5c30
+ARG CLOUDFLARED_SHA256_ARM64=0755ba4cbab59980e6148367fcf53a8f3ec85a97deefd63c2420cf7850769bee
+
 RUN set -eux; \
     arch="${TARGETARCH:-}"; \
     if [ -z "$arch" ]; then \
@@ -49,6 +61,32 @@ RUN set -eux; \
     chmod +x /cloudflared; \
     /cloudflared --version
 
+# ============================================================================
+# fuse-overlayfs — statically linked upstream release for the glibc images
+# ============================================================================
+FROM release-downloader AS fuse-overlayfs-binary
+
+ARG TARGETARCH
+ARG FUSE_OVERLAYFS_VERSION
+ARG FUSE_OVERLAYFS_SHA256_AMD64=56b0ae0aeb8abb308b068af2f137ed8d1bd239f4f27e21672ff0def861eea1e8
+ARG FUSE_OVERLAYFS_SHA256_ARM64=82fed736197b2a881a822e5357b488796f654e8371ce8573a1592331510a0133
+
+RUN set -eux; \
+    arch="${TARGETARCH:-}"; \
+    if [ -z "$arch" ]; then \
+      arch="$(apk --print-arch)"; \
+    fi; \
+    case "$arch" in \
+      amd64|x86_64) suffix=x86_64; sha="${FUSE_OVERLAYFS_SHA256_AMD64}" ;; \
+      arm64|aarch64) suffix=aarch64; sha="${FUSE_OVERLAYFS_SHA256_ARM64}" ;; \
+      *) echo "Unsupported arch for fuse-overlayfs: $arch" >&2; exit 1 ;; \
+    esac; \
+    url="https://github.com/containers/fuse-overlayfs/releases/download/v${FUSE_OVERLAYFS_VERSION}/fuse-overlayfs-${suffix}"; \
+    curl -fsSL -o /fuse-overlayfs "$url"; \
+    echo "$sha  /fuse-overlayfs" | sha256sum -c -; \
+    chmod +x /fuse-overlayfs; \
+    /fuse-overlayfs --version
+
 # Sandbox container images (default and python variants)
 # Multi-stage build optimized for Turborepo monorepo
 
@@ -152,7 +190,6 @@ ENV SANDBOX_VERSION=${SANDBOX_VERSION}
 # - fuse3: FUSE filesystem support (replaces legacy fuse, needed by s3fs/squashfuse/fuse-overlayfs)
 # - squashfs-tools: create squashfs archives (mksquashfs)
 # - squashfuse: mount squashfs in userspace (FUSE)
-# - fuse-overlayfs: userspace overlayfs for copy-on-write snapshots
 # Cache-bust: 2 - Clear apt cache to force fresh package list
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/var/lib/apt,sharing=locked \
@@ -160,7 +197,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' >/etc/apt/apt.conf.d/keep-cache && \
     rm -rf /var/cache/apt/* /var/lib/apt/lists/* && \
     apt-get update && apt-get install -y --no-install-recommends \
-    s3fs fuse3 squashfs-tools squashfuse fuse-overlayfs \
+    s3fs fuse3 squashfs-tools squashfuse \
     ca-certificates curl wget procps git unzip zip jq file \
     inotify-tools \
     libssl3 zlib1g libbz2-1.0 libreadline8 libsqlite3-0 \
@@ -173,6 +210,10 @@ RUN sed -i 's/#user_allow_other/user_allow_other/' /etc/fuse.conf
 # fusermount requires /etc/mtab to locate active mounts
 RUN ln -sf /proc/mounts /etc/mtab
 
+# Userspace overlayfs for copy-on-write backup restores
+COPY --from=fuse-overlayfs-binary /fuse-overlayfs /usr/bin/fuse-overlayfs
+RUN fuse-overlayfs --version
+
 # Install Node.js from official Node image (defaults to 24 LTS,
 # override via --build-arg NODE_VERSION=<version>)
 COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node

package/dist/bridge/index.js

@@ -1,6 +1,6 @@
 import "../dist-B_eXrP83.js";
 import "../errors-CpkKPbWC.js";
-import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-CPj2jsbz.js";
+import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-Co2NYKhX.js";
 import { DurableObject, env, tracing } from "cloudflare:workers";
 import { Hono } from "hono";
 

package/dist/index.js

@@ -1,6 +1,6 @@
 import { a as isExecResult, f as TraceContext, o as isProcess, s as isProcessStatus, u as createLogger } from "./dist-B_eXrP83.js";
 import "./errors-CpkKPbWC.js";
-import { A as PortClient, B as InvalidBackupConfigError, C as collectFile, D as SandboxClient, E as isPlatformTransientError, F as BackupCreateError, G as SessionTerminatedError, H as ProcessExitedBeforeReadyError, I as BackupExpiredError, L as BackupNotFoundError, M as FileClient, N as CommandClient, O as UtilityClient, P as BackupClient, R as BackupRestoreError, T as isDurableObjectCodeUpdateReset, U as ProcessReadyTimeoutError, V as OperationInterruptedError, W as RPCTransportError, _ as responseToAsyncIterable, a as PREVIEW_PROXY_HEADER, b as sanitizeSandboxId, c as PREVIEW_PROXY_SANDBOX_ID_HEADER, d as BucketUnmountError, f as InvalidMountConfigError, g as parseSSEStream, h as asyncIterableToSSEStream, i as proxyTerminal, j as GitClient, k as ProcessClient, l as PREVIEW_PROXY_TOKEN_HEADER, m as S3FSMountError, n as Sandbox, o as PREVIEW_PROXY_HEADERS, p as MissingCredentialsError, r as getSandbox, s as PREVIEW_PROXY_PORT_HEADER, t as ContainerProxy, u as BucketMountError, v as CodeInterpreter, w as streamFile, x as validatePort, z as ContainerUnavailableError } from "./sandbox-CPj2jsbz.js";
+import { A as PortClient, B as InvalidBackupConfigError, C as collectFile, D as SandboxClient, E as isPlatformTransientError, F as BackupCreateError, G as SessionTerminatedError, H as ProcessExitedBeforeReadyError, I as BackupExpiredError, L as BackupNotFoundError, M as FileClient, N as CommandClient, O as UtilityClient, P as BackupClient, R as BackupRestoreError, T as isDurableObjectCodeUpdateReset, U as ProcessReadyTimeoutError, V as OperationInterruptedError, W as RPCTransportError, _ as responseToAsyncIterable, a as PREVIEW_PROXY_HEADER, b as sanitizeSandboxId, c as PREVIEW_PROXY_SANDBOX_ID_HEADER, d as BucketUnmountError, f as InvalidMountConfigError, g as parseSSEStream, h as asyncIterableToSSEStream, i as proxyTerminal, j as GitClient, k as ProcessClient, l as PREVIEW_PROXY_TOKEN_HEADER, m as S3FSMountError, n as Sandbox, o as PREVIEW_PROXY_HEADERS, p as MissingCredentialsError, r as getSandbox, s as PREVIEW_PROXY_PORT_HEADER, t as ContainerProxy, u as BucketMountError, v as CodeInterpreter, w as streamFile, x as validatePort, z as ContainerUnavailableError } from "./sandbox-Co2NYKhX.js";
 
 //#region src/request-handler.ts
 function createProxyLogger(request) {

package/dist/{sandbox-CPj2jsbz.js → sandbox-Co2NYKhX.js}

@@ -5322,6 +5322,13 @@ function xmlResponse(body, status = 200) {
 function normalizeObjectKey(value) {
 	return value.replace(/^\/+/, "");
 }
+function decodeObjectKey(value) {
+	try {
+		return decodeURIComponent(value);
+	} catch {
+		return value;
+	}
+}
 function trimTrailingSlashes(s) {
 	let end = s.length;
 	while (end > 0 && s[end - 1] === "/") end--;
@@ -5609,7 +5616,8 @@ const r2EgressHandler = async (request, env$1, ctx) => {
 	const url = new URL(request.url);
 	const parsed = parsePath(url.pathname);
 	if (!parsed) return new Response("Bad Request: empty path", { status: 400 });
-	const { bucket: bucketName, key } = parsed;
+	const { bucket: bucketName, key: encodedKey } = parsed;
+	const key = decodeObjectKey(encodedKey);
 	if (!ctx.params?.buckets || !(bucketName in ctx.params.buckets)) return new Response(`Access to R2 bucket "${bucketName}" is not permitted. Call mountBucket() with this bucket before accessing it.`, { status: 403 });
 	const bucketParams = ctx.params.buckets[bucketName];
 	const mountPrefix = normalizeMountPrefix(bucketParams.prefix);
@@ -5908,6 +5916,10 @@ function isBucketRootProbe(request, realPath, url, bucket) {
 	const method = request.method.toUpperCase();
 	return (method === "GET" || method === "HEAD") && url.search === "" && getObjectKeyForPath(realPath, bucket) === "";
 }
+function isBucketRootMutation(request, realPath, bucket) {
+	const method = request.method.toUpperCase();
+	return method !== "GET" && method !== "HEAD" && method !== "OPTIONS" && getObjectKeyForPath(realPath, bucket) === "";
+}
 function deleteDirectoryMarkerCacheEntry(mountId, realPath) {
 	directoryMarkerCache.delete(getDirectoryMarkerCacheKey(mountId, realPath));
 }
@@ -6031,6 +6043,7 @@ const s3CredentialProxyHandler = async (request, env$1, ctx) => {
 	}
 	const realUrl = new URL(realPath + (url.search || ""), mount.endpoint);
 	if (isBucketRootProbe(request, realPath, url, mount.bucket)) return new Response(null, { status: 200 });
+	if (isBucketRootMutation(request, realPath, mount.bucket)) return new Response("Method Not Allowed", { status: 405 });
 	if (!isRequestWithinMountScope(realPath, url, mount.bucket, mount.prefix)) return new Response("Forbidden: request is outside mounted bucket scope", { status: 403 });
 	const copySourceError = validateCopySourceWithinMountScope(request.headers, mount.bucket, mount.prefix);
 	if (copySourceError) return copySourceError;
@@ -7172,7 +7185,7 @@ function createTunnelsHandler(host) {
 * This file is auto-updated by .github/changeset-version.ts during releases
 * DO NOT EDIT MANUALLY - Changes will be overwritten on the next version bump
 */
-const SDK_VERSION = "0.12.8";
+const SDK_VERSION = "0.12.10";
 
 //#endregion
 //#region src/sandbox.ts
@@ -11553,4 +11566,4 @@ var Sandbox = class Sandbox extends Container {
 
 //#endregion
 export { PortClient as A, InvalidBackupConfigError as B, collectFile as C, SandboxClient as D, isPlatformTransientError as E, BackupCreateError as F, SessionTerminatedError as G, ProcessExitedBeforeReadyError as H, BackupExpiredError as I, BackupNotFoundError as L, FileClient as M, CommandClient as N, UtilityClient as O, BackupClient as P, BackupRestoreError as R, validateTunnelName as S, isDurableObjectCodeUpdateReset as T, ProcessReadyTimeoutError as U, OperationInterruptedError as V, RPCTransportError as W, responseToAsyncIterable as _, PREVIEW_PROXY_HEADER as a, sanitizeSandboxId as b, PREVIEW_PROXY_SANDBOX_ID_HEADER as c, BucketUnmountError as d, InvalidMountConfigError as f, parseSSEStream as g, asyncIterableToSSEStream as h, proxyTerminal as i, GitClient as j, ProcessClient as k, PREVIEW_PROXY_TOKEN_HEADER as l, S3FSMountError as m, Sandbox as n, PREVIEW_PROXY_HEADERS as o, MissingCredentialsError as p, getSandbox as r, PREVIEW_PROXY_PORT_HEADER as s, ContainerProxy$1 as t, BucketMountError as u, CodeInterpreter as v, streamFile as w, validatePort as x, SandboxSecurityError as y, ContainerUnavailableError as z };
-//# sourceMappingURL=sandbox-CPj2jsbz.js.map
+//# sourceMappingURL=sandbox-Co2NYKhX.js.map