@cloudflare/sandbox 0.13.0-next.633.1 → 0.13.0-next.651.1

package/dist/bridge/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/bridge/types.ts","../../src/bridge/helpers.ts","../../src/bridge/warm-pool.ts","../../src/bridge/index.ts"],"sourcesContent":[],"mappings":";;;;;;;AA6DgB,UAvCC,YAAA,CAuCD;EAEP;;;AAaT;;;;ICJgB,OAAA,CAAA,EAAU,MAAA;IAyBV;;;;AC7EhB;AAOA;AAWC;AA6CD;EAA4C,cAAA,CAAA,EAAA,MAAA;EA2BH;;;;;EAiFf,WAAA,CAAA,EAAA,MAAA;;;;;;;;UFzIT,cAAA;EGgCD,KAAA,EAAA,OAAM,EH9BT,OG8BS,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EH5Bb,gBG4Ba,CAAA,EH3BjB,QG2BiB,GH3BN,OG2BM,CH3BE,QG2BF,CAAA;EACZ,SAAA,EAAA,UAAA,EH1BM,mBG0BN,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EHxBD,gBGwBC,CAAA,EAAA,IAAA,GHvBE,OGuBF,CAAA,IAAA,CAAA;EACC,CAAA,GAAA,EAAA,MAAA,CAAA,EAAA,OAAA;;;;;;UHZM,SAAA;;;;;;;;;;;AAAjB;;;;ACJA;AAyBgB,iBAzBA,UAAA,CAyBoB,GAAA,EAAA,MAAA,CAAA,EAAA,MAAA;;;;AC7EpC;AAOA;AAmDU,iBDmBM,oBAAA,CClBL,QAAsB,EAAA,MAAA,CAAA,EAAA,MAAA,GAAA,IAAA;;;AFHhB,UExDA,cAAA,CFwDS;;;;ECJV,eAAU,CAAA,EAAA,MAAA;AAyB1B;UCtEiB,SAAA;;;EAPA;EAOA,QAAA,EAAA,MAAS;EAmDhB;EAKG,KAAA,EAAA,MAAS;EAAsB;EA2BH,MAAA,EA3E/B,QA2E+B,CA3EtB,cA2EsB,CAAA;EA6CG;EAYE,YAAA,EAAA,MAAA,GAAA,IAAA;;;;;;;UAzFpC,WAAA,CAKoB;EAAa,OAAA,EAJhC,sBAIgC;;;cAA9B,QAAA,SAAiB,cAAc;ECG5B,QAAA,MAAM;EACZ;EACC,QAAA,cAAA;EACQ;EAAhB,QAAA,WAAA;EAAe;;;;;;;;;;;mCDqBuB;;;;;;sCA6CG;;;;wCAYE;;;;cAS1B,QAAQ;;;;;oBAeF,iBAAiB;;;;;uBAUd;WAyBZ;;;;;;;;;;;;;;;;;;;;;;;;AAvMjB;AAWC;AA6CD;;;;;;;;;;AA+IiB,iBC5ID,MAAA,CD4IC,MAAA,EC3IP,cD2IO,EAAA,MAAA,CAAA,EC1IN,YD0IM,CAAA,ECzId,eDyIc,CCzIE,SDyIF,CAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/bridge/types.ts","../../src/bridge/helpers.ts","../../src/bridge/warm-pool.ts","../../src/bridge/index.ts"],"sourcesContent":[],"mappings":";;;;;;;AA6DgB,UAvCC,YAAA,CAuCD;EAEP;;;AAaT;;;;ICJgB,OAAA,CAAA,EAAU,MAAA;IAyBV;;;;AC7EhB;AAOA;AAWC;AA6CD;EAA4C,cAAA,CAAA,EAAA,MAAA;EA2BH;;;;;EAiFf,WAAA,CAAA,EAAA,MAAA;;;;;;;;UFzIT,cAAA;EGgCD,KAAA,EAAA,OAAM,EH9BT,OG8BS,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EH5Bb,gBG4Ba,CAAA,EH3BjB,QG2BiB,GH3BN,OG2BM,CH3BE,QG2BF,CAAA;EACZ,SAAA,EAAA,UAAA,EH1BM,mBG0BN,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EHxBD,gBGwBC,CAAA,EAAA,IAAA,GHvBE,OGuBF,CAAA,IAAA,CAAA;EACC,CAAA,GAAA,EAAA,MAAA,CAAA,EAAA,OAAA;;;;;;UHZM,SAAA;;;;;;;;;;;AAAjB;;;;ACJA;AAyBgB,iBAzBA,UAAA,CAyBoB,GAAA,EAAA,MAAA,CAAA,EAAA,MAAA;;;;AC7EpC;AAOA;AAmDU,iBDmBM,oBAAA,CClBL,QAAA,EAAsB,MAAA,CAAA,EAAA,MAAA,GAAA,IAAA;;;AFHhB,UExDA,cAAA,CFwDS;;;;ECJV,eAAU,CAAA,EAAA,MAAA;AAyB1B;UCtEiB,SAAA;;;EAPA;EAOA,QAAA,EAAA,MAAS;EAmDhB;EAKG,KAAA,EAAA,MAAS;EAAsB;EA2BH,MAAA,EA3E/B,QA2E+B,CA3EtB,cA2EsB,CAAA;EA6CG;EAYE,YAAA,EAAA,MAAA,GAAA,IAAA;;;;;;;UAzFpC,WAAA,CAKoB;EAAa,OAAA,EAJhC,sBAIgC;;;cAA9B,QAAA,SAAiB,cAAc;ECG5B,QAAA,MAAM;EACZ;EACC,QAAA,cAAA;EACQ;EAAhB,QAAA,WAAA;EAAe;;;;;;;;;;;mCDqBuB;;;;;;sCA6CG;;;;wCAYE;;;;cAS1B,QAAQ;;;;;oBAeF,iBAAiB;;;;;uBAUd;WAyBZ;;;;;;;;;;;;;;;;;;;;;;;;AAvMjB;AAWC;AA6CD;;;;;;;;;;AA+IiB,iBC5ID,MAAA,CD4IC,MAAA,EC3IP,cD2IO,EAAA,MAAA,CAAA,EC1IN,YD0IM,CAAA,ECzId,eDyIc,CCzIE,SDyIF,CAAA"}

package/dist/bridge/index.js

@@ -1,6 +1,6 @@
-import "../dist-mAH_7Ui7.js";
-import "../errors-CpoDEfUZ.js";
-import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-C9CHzLDx.js";
+import "../dist-DF8sudAg.js";
+import "../errors-BG6NZiPD.js";
+import { S as validateTunnelName, r as getSandbox, w as streamFile, x as validatePort, y as SandboxSecurityError } from "../sandbox-BgwMBQ7S.js";
 import { DurableObject, env } from "cloudflare:workers";
 import { Hono } from "hono";
 

package/dist/{contexts-DPFhc2nR.d.ts → contexts-BS0Bs6IU.d.ts}

@@ -235,4 +235,4 @@ interface RPCTransportContext {
 }
 //#endregion
 export { ContainerUnavailableContext as a, ProcessExitedBeforeReadyContext as c, RPCTransportErrorKind as d, SessionTerminatedContext as f, ErrorCode as h, BackupRestoreContext as i, ProcessReadyTimeoutContext as l, OperationType as m, BackupExpiredContext as n, InvalidBackupConfigContext as o, ErrorResponse as p, BackupNotFoundContext as r, OpencodeStartupContext as s, BackupCreateContext as t, RPCTransportContext as u };
-//# sourceMappingURL=contexts-DPFhc2nR.d.ts.map
+//# sourceMappingURL=contexts-BS0Bs6IU.d.ts.map

package/dist/{contexts-DPFhc2nR.d.ts.map → contexts-BS0Bs6IU.d.ts.map}

@@ -1 +1 @@
-{"version":3,"file":"contexts-DPFhc2nR.d.ts","names":["ErrorCode","ErrorCode","Operation","OperationType","ErrorResponse","TContext","Record","ServiceError","ServiceResult","T","OperationType","FileNotFoundContext","FileExistsContext","FileTooLargeContext","FileSystemContext","CommandNotFoundContext","CommandErrorContext","ProcessNotFoundContext","ProcessErrorContext","SessionAlreadyExistsContext","SessionDestroyedContext","SessionTerminatedContext","ProcessReadyTimeoutContext","ProcessExitedBeforeReadyContext","PortAlreadyExposedContext","PortNotExposedContext","InvalidPortContext","PortErrorContext","GitRepositoryNotFoundContext","GitAuthFailedContext","GitBranchNotFoundContext","GitErrorContext","InterpreterNotReadyContext","ContextNotFoundContext","CodeExecutionContext","ValidationFailedContext","Array","BucketMountContext","MissingCredentialsContext","InvalidMountConfigContext","BackupCreateContext","BackupRestoreContext","BackupNotFoundContext","BackupExpiredContext","InvalidBackupConfigContext","OpencodeStartupContext","InternalErrorContext","ContainerUnavailableReason","ContainerUnavailableContext","RPCTransportErrorKind","RPCTransportContext"],"sources":["../../shared/dist/errors/codes.d.ts","../../shared/dist/errors/types.d.ts","../../shared/dist/errors/contexts.d.ts"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport declare const ErrorCode: {\n    readonly FILE_NOT_FOUND: \"FILE_NOT_FOUND\";\n    readonly PERMISSION_DENIED: \"PERMISSION_DENIED\";\n    readonly FILE_EXISTS: \"FILE_EXISTS\";\n    readonly IS_DIRECTORY: \"IS_DIRECTORY\";\n    readonly NOT_DIRECTORY: \"NOT_DIRECTORY\";\n    readonly FILE_TOO_LARGE: \"FILE_TOO_LARGE\";\n    readonly NO_SPACE: \"NO_SPACE\";\n    readonly TOO_MANY_FILES: \"TOO_MANY_FILES\";\n    readonly RESOURCE_BUSY: \"RESOURCE_BUSY\";\n    readonly READ_ONLY: \"READ_ONLY\";\n    readonly NAME_TOO_LONG: \"NAME_TOO_LONG\";\n    readonly TOO_MANY_LINKS: \"TOO_MANY_LINKS\";\n    readonly FILESYSTEM_ERROR: \"FILESYSTEM_ERROR\";\n    readonly COMMAND_NOT_FOUND: \"COMMAND_NOT_FOUND\";\n    readonly COMMAND_PERMISSION_DENIED: \"COMMAND_PERMISSION_DENIED\";\n    readonly INVALID_COMMAND: \"INVALID_COMMAND\";\n    readonly COMMAND_EXECUTION_ERROR: \"COMMAND_EXECUTION_ERROR\";\n    readonly STREAM_START_ERROR: \"STREAM_START_ERROR\";\n    readonly PROCESS_NOT_FOUND: \"PROCESS_NOT_FOUND\";\n    readonly PROCESS_PERMISSION_DENIED: \"PROCESS_PERMISSION_DENIED\";\n    readonly PROCESS_ERROR: \"PROCESS_ERROR\";\n    readonly SESSION_ALREADY_EXISTS: \"SESSION_ALREADY_EXISTS\";\n    readonly SESSION_DESTROYED: \"SESSION_DESTROYED\";\n    readonly SESSION_TERMINATED: \"SESSION_TERMINATED\";\n    readonly PORT_ALREADY_EXPOSED: \"PORT_ALREADY_EXPOSED\";\n    readonly PORT_IN_USE: \"PORT_IN_USE\";\n    readonly PORT_NOT_EXPOSED: \"PORT_NOT_EXPOSED\";\n    readonly INVALID_PORT_NUMBER: \"INVALID_PORT_NUMBER\";\n    readonly INVALID_PORT: \"INVALID_PORT\";\n    readonly SERVICE_NOT_RESPONDING: \"SERVICE_NOT_RESPONDING\";\n    readonly PORT_OPERATION_ERROR: \"PORT_OPERATION_ERROR\";\n    readonly CUSTOM_DOMAIN_REQUIRED: \"CUSTOM_DOMAIN_REQUIRED\";\n    readonly GIT_REPOSITORY_NOT_FOUND: \"GIT_REPOSITORY_NOT_FOUND\";\n    readonly GIT_BRANCH_NOT_FOUND: \"GIT_BRANCH_NOT_FOUND\";\n    readonly GIT_AUTH_FAILED: \"GIT_AUTH_FAILED\";\n    readonly GIT_NETWORK_ERROR: \"GIT_NETWORK_ERROR\";\n    readonly INVALID_GIT_URL: \"INVALID_GIT_URL\";\n    readonly GIT_CLONE_FAILED: \"GIT_CLONE_FAILED\";\n    readonly GIT_CHECKOUT_FAILED: \"GIT_CHECKOUT_FAILED\";\n    readonly GIT_OPERATION_FAILED: \"GIT_OPERATION_FAILED\";\n    readonly BUCKET_MOUNT_ERROR: \"BUCKET_MOUNT_ERROR\";\n    readonly BUCKET_UNMOUNT_ERROR: \"BUCKET_UNMOUNT_ERROR\";\n    readonly S3FS_MOUNT_ERROR: \"S3FS_MOUNT_ERROR\";\n    readonly MISSING_CREDENTIALS: \"MISSING_CREDENTIALS\";\n    readonly INVALID_MOUNT_CONFIG: \"INVALID_MOUNT_CONFIG\";\n    readonly BACKUP_CREATE_FAILED: \"BACKUP_CREATE_FAILED\";\n    readonly BACKUP_RESTORE_FAILED: \"BACKUP_RESTORE_FAILED\";\n    readonly BACKUP_NOT_FOUND: \"BACKUP_NOT_FOUND\";\n    readonly BACKUP_EXPIRED: \"BACKUP_EXPIRED\";\n    readonly INVALID_BACKUP_CONFIG: \"INVALID_BACKUP_CONFIG\";\n    readonly INTERPRETER_NOT_READY: \"INTERPRETER_NOT_READY\";\n    readonly CONTEXT_NOT_FOUND: \"CONTEXT_NOT_FOUND\";\n    readonly CODE_EXECUTION_ERROR: \"CODE_EXECUTION_ERROR\";\n    readonly PYTHON_NOT_AVAILABLE: \"PYTHON_NOT_AVAILABLE\";\n    readonly JAVASCRIPT_NOT_AVAILABLE: \"JAVASCRIPT_NOT_AVAILABLE\";\n    readonly OPENCODE_STARTUP_FAILED: \"OPENCODE_STARTUP_FAILED\";\n    readonly PROCESS_READY_TIMEOUT: \"PROCESS_READY_TIMEOUT\";\n    readonly PROCESS_EXITED_BEFORE_READY: \"PROCESS_EXITED_BEFORE_READY\";\n    readonly WATCH_NOT_FOUND: \"WATCH_NOT_FOUND\";\n    readonly WATCH_START_ERROR: \"WATCH_START_ERROR\";\n    readonly WATCH_STOP_ERROR: \"WATCH_STOP_ERROR\";\n    readonly VALIDATION_FAILED: \"VALIDATION_FAILED\";\n    readonly INVALID_JSON_RESPONSE: \"INVALID_JSON_RESPONSE\";\n    readonly UNKNOWN_ERROR: \"UNKNOWN_ERROR\";\n    readonly INTERNAL_ERROR: \"INTERNAL_ERROR\";\n    readonly CONTAINER_UNAVAILABLE: \"CONTAINER_UNAVAILABLE\";\n    readonly RPC_TRANSPORT_ERROR: \"RPC_TRANSPORT_ERROR\";\n};\nexport type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];\n//# sourceMappingURL=codes.d.ts.map","import type { ErrorCode } from './codes';\n/**\n * Standard operation types\n */\nexport declare const Operation: {\n    readonly FILE_READ: \"file.read\";\n    readonly FILE_WRITE: \"file.write\";\n    readonly FILE_DELETE: \"file.delete\";\n    readonly FILE_MOVE: \"file.move\";\n    readonly FILE_RENAME: \"file.rename\";\n    readonly FILE_STAT: \"file.stat\";\n    readonly DIRECTORY_CREATE: \"directory.create\";\n    readonly DIRECTORY_LIST: \"directory.list\";\n    readonly COMMAND_EXECUTE: \"command.execute\";\n    readonly COMMAND_STREAM: \"command.stream\";\n    readonly PROCESS_START: \"process.start\";\n    readonly PROCESS_KILL: \"process.kill\";\n    readonly PROCESS_LIST: \"process.list\";\n    readonly PROCESS_GET: \"process.get\";\n    readonly PROCESS_LOGS: \"process.logs\";\n    readonly GIT_CLONE: \"git.clone\";\n    readonly GIT_CHECKOUT: \"git.checkout\";\n    readonly GIT_OPERATION: \"git.operation\";\n    readonly BACKUP_CREATE: \"backup.create\";\n    readonly BACKUP_RESTORE: \"backup.restore\";\n    readonly BACKUP_UNMOUNT: \"backup.unmount\";\n    readonly CODE_EXECUTE: \"code.execute\";\n    readonly CODE_CONTEXT_CREATE: \"code.context.create\";\n    readonly CODE_CONTEXT_DELETE: \"code.context.delete\";\n};\nexport type OperationType = (typeof Operation)[keyof typeof Operation];\n/**\n * Standard error response format with generic context type\n * TContext allows type-safe access to error-specific context\n */\nexport interface ErrorResponse<TContext = Record<string, unknown>> {\n    /**\n     * Error type code (machine-readable)\n     */\n    code: ErrorCode;\n    /**\n     * Human-readable error message\n     */\n    message: string;\n    /**\n     * Operation that was attempted (useful for debugging and logging)\n     */\n    operation?: OperationType;\n    /**\n     * Structured error context with relevant details\n     * Type varies based on error code\n     */\n    context: TContext;\n    /**\n     * HTTP status code (for client SDK)\n     */\n    httpStatus: number;\n    /**\n     * Timestamp when error occurred\n     */\n    timestamp: string;\n    /**\n     * Actionable suggestion for fixing the error\n     */\n    suggestion?: string;\n    /**\n     * Link to documentation\n     */\n    documentation?: string;\n}\n/**\n * Container ServiceError (lightweight, enriched by handlers)\n */\nexport interface ServiceError {\n    message: string;\n    code: ErrorCode;\n    details?: Record<string, unknown>;\n}\n/**\n * ServiceResult type for container services\n */\nexport type ServiceResult<T> = {\n    success: true;\n    data: T;\n} | {\n    success: false;\n    error: ServiceError;\n};\n//# sourceMappingURL=types.d.ts.map","import type { OperationType } from './types';\n/**\n * File system error contexts\n */\nexport interface FileNotFoundContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileExistsContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileTooLargeContext {\n    path: string;\n    operation: OperationType;\n    maxSize: number;\n    actualSize: number;\n}\nexport interface FileSystemContext {\n    path: string;\n    operation: OperationType;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Command error contexts\n */\nexport interface CommandNotFoundContext {\n    command: string;\n}\nexport interface CommandErrorContext {\n    command: string;\n    exitCode?: number;\n    stdout?: string;\n    stderr?: string;\n}\n/**\n * Process error contexts\n */\nexport interface ProcessNotFoundContext {\n    processId: string;\n}\nexport interface ProcessErrorContext {\n    processId: string;\n    pid?: number;\n    exitCode?: number;\n    stderr?: string;\n}\nexport interface SessionAlreadyExistsContext {\n    sessionId: string;\n    /**\n     * `CLOUDFLARE_PLACEMENT_ID` captured from the container at the moment the\n     * duplicate create was detected. Included so a restarted DO can learn the\n     * container's placement ID from an idempotent session-create. `null` when\n     * the env var is not set (for example, in local development).\n     */\n    containerPlacementId?: string | null;\n}\nexport interface SessionDestroyedContext {\n    sessionId: string;\n}\nexport interface SessionTerminatedContext {\n    sessionId: string;\n    exitCode: number | null;\n}\n/**\n * Process readiness error contexts\n */\nexport interface ProcessReadyTimeoutContext {\n    processId: string;\n    command: string;\n    condition: string;\n    timeout: number;\n}\nexport interface ProcessExitedBeforeReadyContext {\n    processId: string;\n    command: string;\n    condition: string;\n    exitCode: number;\n}\n/**\n * Port error contexts\n */\nexport interface PortAlreadyExposedContext {\n    port: number;\n    portName?: string;\n}\nexport interface PortNotExposedContext {\n    port: number;\n}\nexport interface InvalidPortContext {\n    port: number;\n    reason: string;\n}\nexport interface PortErrorContext {\n    port: number;\n    portName?: string;\n    stderr?: string;\n}\n/**\n * Git error contexts\n */\nexport interface GitRepositoryNotFoundContext {\n    repository: string;\n}\nexport interface GitAuthFailedContext {\n    repository: string;\n}\nexport interface GitBranchNotFoundContext {\n    branch: string;\n    repository?: string;\n}\nexport interface GitErrorContext {\n    repository?: string;\n    branch?: string;\n    targetDir?: string;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Code interpreter error contexts\n */\nexport interface InterpreterNotReadyContext {\n    retryAfter?: number;\n    progress?: number;\n}\nexport interface ContextNotFoundContext {\n    contextId: string;\n}\nexport interface CodeExecutionContext {\n    contextId?: string;\n    ename?: string;\n    evalue?: string;\n    traceback?: string[];\n}\n/**\n * Validation error contexts\n */\nexport interface ValidationFailedContext {\n    validationErrors: Array<{\n        field: string;\n        message: string;\n        code?: string;\n    }>;\n}\n/**\n * Bucket mounting error contexts\n */\nexport interface BucketMountContext {\n    bucket: string;\n    mountPath: string;\n    endpoint: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface MissingCredentialsContext {\n    bucket: string;\n    endpoint: string;\n}\nexport interface InvalidMountConfigContext {\n    bucket?: string;\n    mountPath?: string;\n    endpoint?: string;\n    reason?: string;\n}\n/**\n * Backup error contexts\n */\nexport interface BackupCreateContext {\n    dir: string;\n    backupId?: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupRestoreContext {\n    dir: string;\n    backupId: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupNotFoundContext {\n    backupId: string;\n}\nexport interface BackupExpiredContext {\n    backupId: string;\n    expiredAt?: string;\n}\nexport interface InvalidBackupConfigContext {\n    reason: string;\n}\n/**\n * OpenCode error contexts\n */\nexport interface OpencodeStartupContext {\n    port: number;\n    stderr?: string;\n    command?: string;\n}\n/**\n * Generic error contexts\n */\nexport interface InternalErrorContext {\n    originalError?: string;\n    stack?: string;\n    [key: string]: unknown;\n}\nexport type ContainerUnavailableReason = 'provisioning' | 'startup' | 'container_restarted';\nexport interface ContainerUnavailableContext {\n    reason?: ContainerUnavailableReason;\n    sessionId?: string;\n}\n/**\n * RPC transport error contexts. Surfaced when the capnweb WebSocket session\n * fails on the SDK side rather than the container reporting a structured\n * error. Always retryable — the next call will open a fresh connection.\n */\nexport type RPCTransportErrorKind = \n/** Server closed the WebSocket (container crash, DO eviction, network blip). */\n'peer_closed'\n/** Underlying socket fired the `error` event. */\n | 'connection_failed'\n/** WebSocket upgrade failed before the session was established. */\n | 'upgrade_failed'\n/** Peer sent a non-string frame; capnweb's wire format is JSON text only. */\n | 'invalid_frame'\n/** Peer sent a frame the wire-format parser rejected (capnweb readLoop SyntaxError). */\n | 'protocol_error'\n/** Session was disposed (locally or remotely) while a call was pending. */\n | 'session_disposed'\n/** Anything else that bubbled up from the transport with no recognisable shape. */\n | 'unknown';\nexport interface RPCTransportContext {\n    /** Categorical bucket so callers can branch on `peer_closed` vs `upgrade_failed` etc. */\n    kind: RPCTransportErrorKind;\n    /** Original error message, verbatim from capnweb / our DeferredTransport. */\n    originalMessage: string;\n    /**\n     * The underlying Error's `name` property. capnweb preserves this across\n     * the wire for the standard built-ins (TypeError, SyntaxError, etc.), so\n     * it's a more reliable hint than the message string for those cases.\n     */\n    errorName: string;\n    /** WebSocket close code, when available (kind === 'peer_closed'). */\n    closeCode?: number;\n    /** WebSocket close reason, when available (kind === 'peer_closed'). */\n    closeReason?: string;\n}\n//# sourceMappingURL=contexts.d.ts.map"],"mappings":";;AAIA;AAqEA;;cArEqBA;;ECAAE,SAAAA,iBAyBpB,EAAA,mBAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,YAAa,EAAAC,cAAA;EAAYC,SAAAA,aAAAA,EAAAA,eAAAA;EAIhCL,SAAAA,cAAAA,EAAAA,gBAAAA;EAQME,SAAAA,QAAAA,EAAAA,UAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,aAAA,EAAA,eAAA;;;;ECSJgB,SAAAA,gBAAAA,EAAwB,kBAAA;EAOxBC,SAAAA,iBAAAA,EAAAA,mBAA0B;EAM1BC,SAAAA,yBAA+B,EAAA,2BAAA;EA8F/BiB,SAAAA,eAAmB,EAAA,iBAAA;EAMnBC,SAAAA,uBAAoB,EAAA,yBAAA;EAMpBC,SAAAA,kBAAqB,EAAA,oBAAA;EAGrBC,SAAAA,iBAAoB,EAAA,mBAAA;EAIpBC,SAAAA,yBAA0B,EAAA,2BAAA;EAM1BC,SAAAA,aAAAA,EAAAA,eAAsB;EAa3BE,SAAAA,sBAA0B,EAAA,wBAAA;EACrBC,SAAAA,iBAAAA,EAAAA,mBACJD;EAQDE,SAAAA,kBAAqB,EAAA,oBAAA;EAehBC,SAAAA,oBAAmB,EAAA,sBAE1BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KFhKEjD,SAAAA,WAAoBA,wBAAwBA;;;AArExD;AAqEA;;cCrEqBE;;EAAAA,SAAAA,UAyBpB,EAAA,YAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,SAAa,EAAA,WAAAC;EAAYC,SAAAA,WAAAA,EAAAA,aAAAA;EAIhCL,SAAAA,SAAAA,EAAAA,WAAAA;EAQME,SAAAA,gBAAAA,EAAAA,kBAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,eAAA,EAAA,iBAAA;;;;ECSJgB,SAAAA,YAAAA,EAAAA,cAAwB;EAOxBC,SAAAA,WAAAA,EAAAA,aAA0B;EAM1BC,SAAAA,YAAAA,EAAAA,cAA+B;EA8F/BiB,SAAAA,SAAAA,EAAAA,WAAmB;EAMnBC,SAAAA,YAAAA,EAAoB,cAAA;EAMpBC,SAAAA,aAAAA,EAAqB,eAAA;EAGrBC,SAAAA,aAAAA,EAAoB,eAAA;EAIpBC,SAAAA,cAAAA,EAAAA,gBAA0B;EAM1BC,SAAAA,cAAAA,EAAsB,gBAAA;EAa3BE,SAAAA,YAAAA,EAAAA,cAA0B;EACrBC,SAAAA,mBAAAA,EAA2B,qBAC/BD;EAQDE,SAAAA,mBAAqB,EAAA,qBAAA;AAejC,CAAA;KDzMY9C,aAAAA,WAAwBD,wBAAwBA;;;;;UAK3CE,yBAAyBE;;;;QAIhCL;;;;;;;;cAQME;;;;;WAKHE;;;;;;;;;;;;;;;;;;;;;UCSIgB,wBAAAA;;;;;;;UAOAC,0BAAAA;;;;;;UAMAC,+BAAAA;;;;;;;;;UA8FAiB,mBAAAA;;;;;;UAMAC,oBAAAA;;;;;;UAMAC,qBAAAA;;;UAGAC,oBAAAA;;;;UAIAC,0BAAAA;;;;;;UAMAC,sBAAAA;;;;;KAaLE,0BAAAA;UACKC,2BAAAA;WACJD;;;;;;;;KAQDE,qBAAAA;;;;;;;;UAeKC,mBAAAA;;QAEPD"}
+{"version":3,"file":"contexts-BS0Bs6IU.d.ts","names":["ErrorCode","ErrorCode","Operation","OperationType","ErrorResponse","TContext","Record","ServiceError","ServiceResult","T","OperationType","FileNotFoundContext","FileExistsContext","FileTooLargeContext","FileSystemContext","CommandNotFoundContext","CommandErrorContext","ProcessNotFoundContext","ProcessErrorContext","SessionAlreadyExistsContext","SessionDestroyedContext","SessionTerminatedContext","ProcessReadyTimeoutContext","ProcessExitedBeforeReadyContext","PortAlreadyExposedContext","PortNotExposedContext","InvalidPortContext","PortErrorContext","GitRepositoryNotFoundContext","GitAuthFailedContext","GitBranchNotFoundContext","GitErrorContext","InterpreterNotReadyContext","ContextNotFoundContext","CodeExecutionContext","ValidationFailedContext","Array","BucketMountContext","MissingCredentialsContext","InvalidMountConfigContext","BackupCreateContext","BackupRestoreContext","BackupNotFoundContext","BackupExpiredContext","InvalidBackupConfigContext","OpencodeStartupContext","InternalErrorContext","ContainerUnavailableReason","ContainerUnavailableContext","RPCTransportErrorKind","RPCTransportContext"],"sources":["../../shared/dist/errors/codes.d.ts","../../shared/dist/errors/types.d.ts","../../shared/dist/errors/contexts.d.ts"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport declare const ErrorCode: {\n    readonly FILE_NOT_FOUND: \"FILE_NOT_FOUND\";\n    readonly PERMISSION_DENIED: \"PERMISSION_DENIED\";\n    readonly FILE_EXISTS: \"FILE_EXISTS\";\n    readonly IS_DIRECTORY: \"IS_DIRECTORY\";\n    readonly NOT_DIRECTORY: \"NOT_DIRECTORY\";\n    readonly FILE_TOO_LARGE: \"FILE_TOO_LARGE\";\n    readonly NO_SPACE: \"NO_SPACE\";\n    readonly TOO_MANY_FILES: \"TOO_MANY_FILES\";\n    readonly RESOURCE_BUSY: \"RESOURCE_BUSY\";\n    readonly READ_ONLY: \"READ_ONLY\";\n    readonly NAME_TOO_LONG: \"NAME_TOO_LONG\";\n    readonly TOO_MANY_LINKS: \"TOO_MANY_LINKS\";\n    readonly FILESYSTEM_ERROR: \"FILESYSTEM_ERROR\";\n    readonly COMMAND_NOT_FOUND: \"COMMAND_NOT_FOUND\";\n    readonly COMMAND_PERMISSION_DENIED: \"COMMAND_PERMISSION_DENIED\";\n    readonly INVALID_COMMAND: \"INVALID_COMMAND\";\n    readonly COMMAND_EXECUTION_ERROR: \"COMMAND_EXECUTION_ERROR\";\n    readonly STREAM_START_ERROR: \"STREAM_START_ERROR\";\n    readonly PROCESS_NOT_FOUND: \"PROCESS_NOT_FOUND\";\n    readonly PROCESS_PERMISSION_DENIED: \"PROCESS_PERMISSION_DENIED\";\n    readonly PROCESS_ERROR: \"PROCESS_ERROR\";\n    readonly SESSION_ALREADY_EXISTS: \"SESSION_ALREADY_EXISTS\";\n    readonly SESSION_DESTROYED: \"SESSION_DESTROYED\";\n    readonly SESSION_TERMINATED: \"SESSION_TERMINATED\";\n    readonly PORT_ALREADY_EXPOSED: \"PORT_ALREADY_EXPOSED\";\n    readonly PORT_IN_USE: \"PORT_IN_USE\";\n    readonly PORT_NOT_EXPOSED: \"PORT_NOT_EXPOSED\";\n    readonly INVALID_PORT_NUMBER: \"INVALID_PORT_NUMBER\";\n    readonly INVALID_PORT: \"INVALID_PORT\";\n    readonly SERVICE_NOT_RESPONDING: \"SERVICE_NOT_RESPONDING\";\n    readonly PORT_OPERATION_ERROR: \"PORT_OPERATION_ERROR\";\n    readonly CUSTOM_DOMAIN_REQUIRED: \"CUSTOM_DOMAIN_REQUIRED\";\n    readonly GIT_REPOSITORY_NOT_FOUND: \"GIT_REPOSITORY_NOT_FOUND\";\n    readonly GIT_BRANCH_NOT_FOUND: \"GIT_BRANCH_NOT_FOUND\";\n    readonly GIT_AUTH_FAILED: \"GIT_AUTH_FAILED\";\n    readonly GIT_NETWORK_ERROR: \"GIT_NETWORK_ERROR\";\n    readonly INVALID_GIT_URL: \"INVALID_GIT_URL\";\n    readonly GIT_CLONE_FAILED: \"GIT_CLONE_FAILED\";\n    readonly GIT_CHECKOUT_FAILED: \"GIT_CHECKOUT_FAILED\";\n    readonly GIT_OPERATION_FAILED: \"GIT_OPERATION_FAILED\";\n    readonly BUCKET_MOUNT_ERROR: \"BUCKET_MOUNT_ERROR\";\n    readonly BUCKET_UNMOUNT_ERROR: \"BUCKET_UNMOUNT_ERROR\";\n    readonly S3FS_MOUNT_ERROR: \"S3FS_MOUNT_ERROR\";\n    readonly MISSING_CREDENTIALS: \"MISSING_CREDENTIALS\";\n    readonly INVALID_MOUNT_CONFIG: \"INVALID_MOUNT_CONFIG\";\n    readonly BACKUP_CREATE_FAILED: \"BACKUP_CREATE_FAILED\";\n    readonly BACKUP_RESTORE_FAILED: \"BACKUP_RESTORE_FAILED\";\n    readonly BACKUP_NOT_FOUND: \"BACKUP_NOT_FOUND\";\n    readonly BACKUP_EXPIRED: \"BACKUP_EXPIRED\";\n    readonly INVALID_BACKUP_CONFIG: \"INVALID_BACKUP_CONFIG\";\n    readonly INTERPRETER_NOT_READY: \"INTERPRETER_NOT_READY\";\n    readonly CONTEXT_NOT_FOUND: \"CONTEXT_NOT_FOUND\";\n    readonly CODE_EXECUTION_ERROR: \"CODE_EXECUTION_ERROR\";\n    readonly PYTHON_NOT_AVAILABLE: \"PYTHON_NOT_AVAILABLE\";\n    readonly JAVASCRIPT_NOT_AVAILABLE: \"JAVASCRIPT_NOT_AVAILABLE\";\n    readonly OPENCODE_STARTUP_FAILED: \"OPENCODE_STARTUP_FAILED\";\n    readonly PROCESS_READY_TIMEOUT: \"PROCESS_READY_TIMEOUT\";\n    readonly PROCESS_EXITED_BEFORE_READY: \"PROCESS_EXITED_BEFORE_READY\";\n    readonly WATCH_NOT_FOUND: \"WATCH_NOT_FOUND\";\n    readonly WATCH_START_ERROR: \"WATCH_START_ERROR\";\n    readonly WATCH_STOP_ERROR: \"WATCH_STOP_ERROR\";\n    readonly VALIDATION_FAILED: \"VALIDATION_FAILED\";\n    readonly INVALID_JSON_RESPONSE: \"INVALID_JSON_RESPONSE\";\n    readonly UNKNOWN_ERROR: \"UNKNOWN_ERROR\";\n    readonly INTERNAL_ERROR: \"INTERNAL_ERROR\";\n    readonly CONTAINER_UNAVAILABLE: \"CONTAINER_UNAVAILABLE\";\n    readonly RPC_TRANSPORT_ERROR: \"RPC_TRANSPORT_ERROR\";\n};\nexport type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];\n//# sourceMappingURL=codes.d.ts.map","import type { ErrorCode } from './codes';\n/**\n * Standard operation types\n */\nexport declare const Operation: {\n    readonly FILE_READ: \"file.read\";\n    readonly FILE_WRITE: \"file.write\";\n    readonly FILE_DELETE: \"file.delete\";\n    readonly FILE_MOVE: \"file.move\";\n    readonly FILE_RENAME: \"file.rename\";\n    readonly FILE_STAT: \"file.stat\";\n    readonly DIRECTORY_CREATE: \"directory.create\";\n    readonly DIRECTORY_LIST: \"directory.list\";\n    readonly COMMAND_EXECUTE: \"command.execute\";\n    readonly COMMAND_STREAM: \"command.stream\";\n    readonly PROCESS_START: \"process.start\";\n    readonly PROCESS_KILL: \"process.kill\";\n    readonly PROCESS_LIST: \"process.list\";\n    readonly PROCESS_GET: \"process.get\";\n    readonly PROCESS_LOGS: \"process.logs\";\n    readonly GIT_CLONE: \"git.clone\";\n    readonly GIT_CHECKOUT: \"git.checkout\";\n    readonly GIT_OPERATION: \"git.operation\";\n    readonly BACKUP_CREATE: \"backup.create\";\n    readonly BACKUP_RESTORE: \"backup.restore\";\n    readonly BACKUP_UNMOUNT: \"backup.unmount\";\n    readonly CODE_EXECUTE: \"code.execute\";\n    readonly CODE_CONTEXT_CREATE: \"code.context.create\";\n    readonly CODE_CONTEXT_DELETE: \"code.context.delete\";\n};\nexport type OperationType = (typeof Operation)[keyof typeof Operation];\n/**\n * Standard error response format with generic context type\n * TContext allows type-safe access to error-specific context\n */\nexport interface ErrorResponse<TContext = Record<string, unknown>> {\n    /**\n     * Error type code (machine-readable)\n     */\n    code: ErrorCode;\n    /**\n     * Human-readable error message\n     */\n    message: string;\n    /**\n     * Operation that was attempted (useful for debugging and logging)\n     */\n    operation?: OperationType;\n    /**\n     * Structured error context with relevant details\n     * Type varies based on error code\n     */\n    context: TContext;\n    /**\n     * HTTP status code (for client SDK)\n     */\n    httpStatus: number;\n    /**\n     * Timestamp when error occurred\n     */\n    timestamp: string;\n    /**\n     * Actionable suggestion for fixing the error\n     */\n    suggestion?: string;\n    /**\n     * Link to documentation\n     */\n    documentation?: string;\n}\n/**\n * Container ServiceError (lightweight, enriched by handlers)\n */\nexport interface ServiceError {\n    message: string;\n    code: ErrorCode;\n    details?: Record<string, unknown>;\n}\n/**\n * ServiceResult type for container services\n */\nexport type ServiceResult<T> = {\n    success: true;\n    data: T;\n} | {\n    success: false;\n    error: ServiceError;\n};\n//# sourceMappingURL=types.d.ts.map","import type { OperationType } from './types';\n/**\n * File system error contexts\n */\nexport interface FileNotFoundContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileExistsContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileTooLargeContext {\n    path: string;\n    operation: OperationType;\n    maxSize: number;\n    actualSize: number;\n}\nexport interface FileSystemContext {\n    path: string;\n    operation: OperationType;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Command error contexts\n */\nexport interface CommandNotFoundContext {\n    command: string;\n}\nexport interface CommandErrorContext {\n    command: string;\n    exitCode?: number;\n    stdout?: string;\n    stderr?: string;\n}\n/**\n * Process error contexts\n */\nexport interface ProcessNotFoundContext {\n    processId: string;\n}\nexport interface ProcessErrorContext {\n    processId: string;\n    pid?: number;\n    exitCode?: number;\n    stderr?: string;\n}\nexport interface SessionAlreadyExistsContext {\n    sessionId: string;\n    /**\n     * `CLOUDFLARE_PLACEMENT_ID` captured from the container at the moment the\n     * duplicate create was detected. Included so a restarted DO can learn the\n     * container's placement ID from an idempotent session-create. `null` when\n     * the env var is not set (for example, in local development).\n     */\n    containerPlacementId?: string | null;\n}\nexport interface SessionDestroyedContext {\n    sessionId: string;\n}\nexport interface SessionTerminatedContext {\n    sessionId: string;\n    exitCode: number | null;\n}\n/**\n * Process readiness error contexts\n */\nexport interface ProcessReadyTimeoutContext {\n    processId: string;\n    command: string;\n    condition: string;\n    timeout: number;\n}\nexport interface ProcessExitedBeforeReadyContext {\n    processId: string;\n    command: string;\n    condition: string;\n    exitCode: number;\n}\n/**\n * Port error contexts\n */\nexport interface PortAlreadyExposedContext {\n    port: number;\n    portName?: string;\n}\nexport interface PortNotExposedContext {\n    port: number;\n}\nexport interface InvalidPortContext {\n    port: number;\n    reason: string;\n}\nexport interface PortErrorContext {\n    port: number;\n    portName?: string;\n    stderr?: string;\n}\n/**\n * Git error contexts\n */\nexport interface GitRepositoryNotFoundContext {\n    repository: string;\n}\nexport interface GitAuthFailedContext {\n    repository: string;\n}\nexport interface GitBranchNotFoundContext {\n    branch: string;\n    repository?: string;\n}\nexport interface GitErrorContext {\n    repository?: string;\n    branch?: string;\n    targetDir?: string;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Code interpreter error contexts\n */\nexport interface InterpreterNotReadyContext {\n    retryAfter?: number;\n    progress?: number;\n}\nexport interface ContextNotFoundContext {\n    contextId: string;\n}\nexport interface CodeExecutionContext {\n    contextId?: string;\n    ename?: string;\n    evalue?: string;\n    traceback?: string[];\n}\n/**\n * Validation error contexts\n */\nexport interface ValidationFailedContext {\n    validationErrors: Array<{\n        field: string;\n        message: string;\n        code?: string;\n    }>;\n}\n/**\n * Bucket mounting error contexts\n */\nexport interface BucketMountContext {\n    bucket: string;\n    mountPath: string;\n    endpoint: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface MissingCredentialsContext {\n    bucket: string;\n    endpoint: string;\n}\nexport interface InvalidMountConfigContext {\n    bucket?: string;\n    mountPath?: string;\n    endpoint?: string;\n    reason?: string;\n}\n/**\n * Backup error contexts\n */\nexport interface BackupCreateContext {\n    dir: string;\n    backupId?: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupRestoreContext {\n    dir: string;\n    backupId: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupNotFoundContext {\n    backupId: string;\n}\nexport interface BackupExpiredContext {\n    backupId: string;\n    expiredAt?: string;\n}\nexport interface InvalidBackupConfigContext {\n    reason: string;\n}\n/**\n * OpenCode error contexts\n */\nexport interface OpencodeStartupContext {\n    port: number;\n    stderr?: string;\n    command?: string;\n}\n/**\n * Generic error contexts\n */\nexport interface InternalErrorContext {\n    originalError?: string;\n    stack?: string;\n    [key: string]: unknown;\n}\nexport type ContainerUnavailableReason = 'provisioning' | 'startup' | 'container_restarted';\nexport interface ContainerUnavailableContext {\n    reason?: ContainerUnavailableReason;\n    sessionId?: string;\n}\n/**\n * RPC transport error contexts. Surfaced when the capnweb WebSocket session\n * fails on the SDK side rather than the container reporting a structured\n * error. Always retryable — the next call will open a fresh connection.\n */\nexport type RPCTransportErrorKind = \n/** Server closed the WebSocket (container crash, DO eviction, network blip). */\n'peer_closed'\n/** Underlying socket fired the `error` event. */\n | 'connection_failed'\n/** WebSocket upgrade failed before the session was established. */\n | 'upgrade_failed'\n/** Peer sent a non-string frame; capnweb's wire format is JSON text only. */\n | 'invalid_frame'\n/** Peer sent a frame the wire-format parser rejected (capnweb readLoop SyntaxError). */\n | 'protocol_error'\n/** Session was disposed (locally or remotely) while a call was pending. */\n | 'session_disposed'\n/** Anything else that bubbled up from the transport with no recognisable shape. */\n | 'unknown';\nexport interface RPCTransportContext {\n    /** Categorical bucket so callers can branch on `peer_closed` vs `upgrade_failed` etc. */\n    kind: RPCTransportErrorKind;\n    /** Original error message, verbatim from capnweb / our DeferredTransport. */\n    originalMessage: string;\n    /**\n     * The underlying Error's `name` property. capnweb preserves this across\n     * the wire for the standard built-ins (TypeError, SyntaxError, etc.), so\n     * it's a more reliable hint than the message string for those cases.\n     */\n    errorName: string;\n    /** WebSocket close code, when available (kind === 'peer_closed'). */\n    closeCode?: number;\n    /** WebSocket close reason, when available (kind === 'peer_closed'). */\n    closeReason?: string;\n}\n//# sourceMappingURL=contexts.d.ts.map"],"mappings":";;AAIA;AAqEA;;cArEqBA;;ECAAE,SAAAA,iBAyBpB,EAAA,mBAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,YAAa,EAAAC,cAAA;EAAYC,SAAAA,aAAAA,EAAAA,eAAAA;EAIhCL,SAAAA,cAAAA,EAAAA,gBAAAA;EAQME,SAAAA,QAAAA,EAAAA,UAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,aAAA,EAAA,eAAA;;;;ECSJgB,SAAAA,gBAAAA,EAAwB,kBAAA;EAOxBC,SAAAA,iBAAAA,EAAAA,mBAA0B;EAM1BC,SAAAA,yBAA+B,EAAA,2BAAA;EA8F/BiB,SAAAA,eAAmB,EAAA,iBAAA;EAMnBC,SAAAA,uBAAoB,EAAA,yBAAA;EAMpBC,SAAAA,kBAAqB,EAAA,oBAAA;EAGrBC,SAAAA,iBAAoB,EAAA,mBAAA;EAIpBC,SAAAA,yBAA0B,EAAA,2BAAA;EAM1BC,SAAAA,aAAAA,EAAAA,eAAsB;EAa3BE,SAAAA,sBAA0B,EAAA,wBAAA;EACrBC,SAAAA,iBAAAA,EAAAA,mBACJD;EAQDE,SAAAA,kBAAqB,EAAA,oBAAA;EAehBC,SAAAA,oBAAmB,EAAA,sBAE1BD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KFhKEjD,SAAAA,WAAoBA,wBAAwBA;;;AArExD;AAqEA;;cCrEqBE;;EAAAA,SAAAA,UAyBpB,EAAA,YAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,SAAa,EAAA,WAAAC;EAAYC,SAAAA,WAAAA,EAAAA,aAAAA;EAIhCL,SAAAA,SAAAA,EAAAA,WAAAA;EAQME,SAAAA,gBAAAA,EAAAA,kBAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,eAAA,EAAA,iBAAA;;;;ECSJgB,SAAAA,YAAAA,EAAAA,cAAwB;EAOxBC,SAAAA,WAAAA,EAAAA,aAA0B;EAM1BC,SAAAA,YAAAA,EAAAA,cAA+B;EA8F/BiB,SAAAA,SAAAA,EAAAA,WAAmB;EAMnBC,SAAAA,YAAAA,EAAoB,cAAA;EAMpBC,SAAAA,aAAAA,EAAqB,eAAA;EAGrBC,SAAAA,aAAAA,EAAoB,eAAA;EAIpBC,SAAAA,cAAAA,EAAAA,gBAA0B;EAM1BC,SAAAA,cAAAA,EAAsB,gBAAA;EAa3BE,SAAAA,YAAAA,EAAAA,cAA0B;EACrBC,SAAAA,mBAAAA,EAA2B,qBAC/BD;EAQDE,SAAAA,mBAAqB,EAAA,qBAAA;AAejC,CAAA;KDzMY9C,aAAAA,WAAwBD,wBAAwBA;;;;;UAK3CE,yBAAyBE;;;;QAIhCL;;;;;;;;cAQME;;;;;WAKHE;;;;;;;;;;;;;;;;;;;;;UCSIgB,wBAAAA;;;;;;;UAOAC,0BAAAA;;;;;;UAMAC,+BAAAA;;;;;;;;;UA8FAiB,mBAAAA;;;;;;UAMAC,oBAAAA;;;;;;UAMAC,qBAAAA;;;UAGAC,oBAAAA;;;;UAIAC,0BAAAA;;;;;;UAMAC,sBAAAA;;;;;KAaLE,0BAAAA;UACKC,2BAAAA;WACJD;;;;;;;;KAQDE,qBAAAA;;;;;;;;UAeKC,mBAAAA;;QAEPD"}

package/dist/{dist-mAH_7Ui7.js → dist-DF8sudAg.js}

@@ -762,6 +762,23 @@ function getEnvVar(name) {
 	}
 }
 
+//#endregion
+//#region ../shared/dist/rpc-types.js
+/**
+* Shared interface types for the container-control path.
+*
+* Defines the contract between the SDK control client and the container
+* control-plane API. The current wire implementation uses capnweb RPC.
+*/
+/**
+* Error name thrown by the host's `connect` when it has not yet provisioned
+* the requested hash and the request did not carry tarball bytes. The SDK
+* recognises this name via `Error.name` and retries the connect with the
+* bytes attached. Kept as a string constant so it survives capnweb
+* cross-realm error reconstruction.
+*/
+const EXTENSION_TARBALL_REQUIRED = "ExtensionTarballRequired";
+
 //#endregion
 //#region ../shared/dist/shell-escape.js
 /**
@@ -840,5 +857,5 @@ function isProcessStatus(value) {
 }
 
 //#endregion
-export { shellEscape as a, TraceContext as c, ResultImpl as d, filterEnvVars as f, parseSSEFrames as i, logCanonicalEvent as l, partitionEnvVars as m, isProcess as n, createLogger as o, getEnvString as p, isProcessStatus as r, createNoOpLogger as s, isExecResult as t, Execution as u };
-//# sourceMappingURL=dist-mAH_7Ui7.js.map
+export { shellEscape as a, createNoOpLogger as c, Execution as d, ResultImpl as f, partitionEnvVars as h, parseSSEFrames as i, TraceContext as l, getEnvString as m, isProcess as n, EXTENSION_TARBALL_REQUIRED as o, filterEnvVars as p, isProcessStatus as r, createLogger as s, isExecResult as t, logCanonicalEvent as u };
+//# sourceMappingURL=dist-DF8sudAg.js.map

package/dist/dist-DF8sudAg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist-DF8sudAg.js","names":["parts","LogLevelEnum","LogLevelEnum"],"sources":["../../shared/dist/env.js","../../shared/dist/logger/sanitize.js","../../shared/dist/interpreter-types.js","../../shared/dist/logger/canonical.js","../../shared/dist/logger/types.js","../../shared/dist/logger/logger.js","../../shared/dist/logger/trace-context.js","../../shared/dist/logger/index.js","../../shared/dist/rpc-types.js","../../shared/dist/shell-escape.js","../../shared/dist/sse.js","../../shared/dist/types.js"],"sourcesContent":["/**\n * Safely extract a string value from an environment object\n *\n * @param env - Environment object with dynamic keys\n * @param key - The environment variable key to access\n * @returns The string value if present and is a string, undefined otherwise\n */\nexport function getEnvString(env, key) {\n    const value = env?.[key];\n    return typeof value === 'string' ? value : undefined;\n}\n/**\n * Filter environment variables object to only include string values.\n * Skips undefined, null, and non-string values.\n *\n * Use this when you only need the defined values (e.g., for per-command env\n * where undefined means \"don't override\").\n *\n * @param envVars - Object that may contain undefined values\n * @returns Clean object with only string values\n */\nexport function filterEnvVars(envVars) {\n    const filtered = {};\n    for (const [key, value] of Object.entries(envVars)) {\n        if (value != null && typeof value === 'string') {\n            filtered[key] = value;\n        }\n    }\n    return filtered;\n}\n/**\n * Partition environment variables into values to set and keys to unset.\n *\n * - String values → toSet (will be exported)\n * - undefined/null → toUnset (will be unset)\n *\n * This enables idiomatic JS patterns where undefined means \"remove\":\n * ```typescript\n * await sandbox.setEnvVars({\n *   API_KEY: 'new-key',        // will be set\n *   OLD_VAR: undefined,        // will be unset\n * });\n * ```\n */\nexport function partitionEnvVars(envVars) {\n    const toSet = {};\n    const toUnset = [];\n    for (const [key, value] of Object.entries(envVars)) {\n        if (value != null && typeof value === 'string') {\n            toSet[key] = value;\n        }\n        else {\n            toUnset.push(key);\n        }\n    }\n    return { toSet, toUnset };\n}\n","/**\n * Log-only sanitization helpers\n *\n * These functions redact sensitive values for logging output.\n * They MUST NOT be used to mutate command strings before execution.\n */\n/**\n * Sensitive query parameter names to redact from URLs.\n * Anchored to query string context ([?&]) to avoid matching path segments.\n * Value matching stops at & and common URL/command delimiters.\n */\nconst SENSITIVE_PARAMS = /([?&])(X-Amz-Credential|X-Amz-Signature|X-Amz-Security-Token|token|secret|password)=[^&\\s\"'`<>]*/gi;\n/**\n * Redact credentials from URLs for secure logging\n *\n * Replaces any credentials (username:password, tokens, etc.) embedded\n * in URLs with ****** to prevent sensitive data exposure in logs.\n * Works with URLs embedded in text.\n *\n * @param text - String that may contain URLs with credentials\n * @returns String with credentials redacted from any URLs\n */\nexport function redactCredentials(text) {\n    // Scan for http(s):// URLs and redact any credentials found\n    let result = text;\n    let pos = 0;\n    while (pos < result.length) {\n        const httpPos = result.indexOf('http://', pos);\n        const httpsPos = result.indexOf('https://', pos);\n        let protocolPos = -1;\n        let protocolLen = 0;\n        if (httpPos === -1 && httpsPos === -1)\n            break;\n        if (httpPos !== -1 && (httpsPos === -1 || httpPos < httpsPos)) {\n            protocolPos = httpPos;\n            protocolLen = 7; // 'http://'.length\n        }\n        else {\n            protocolPos = httpsPos;\n            protocolLen = 8; // 'https://'.length\n        }\n        // Look for @ after the protocol\n        const searchStart = protocolPos + protocolLen;\n        const atPos = result.indexOf('@', searchStart);\n        // Find where the URL ends (whitespace, quotes, or structural delimiters)\n        let urlEnd = searchStart;\n        while (urlEnd < result.length) {\n            const char = result[urlEnd];\n            if (/[\\s\"'`<>,;{}[\\]]/.test(char))\n                break;\n            urlEnd++;\n        }\n        if (atPos !== -1 && atPos < urlEnd) {\n            result = `${result.substring(0, searchStart)}******${result.substring(atPos)}`;\n            pos = searchStart + 6; // Move past '******'\n        }\n        else {\n            pos = protocolPos + protocolLen;\n        }\n    }\n    return result;\n}\n/**\n * Redact sensitive query parameters from URLs\n *\n * Strips X-Amz-Credential, X-Amz-Signature, X-Amz-Security-Token,\n * token, secret, and password query params from URLs. Returns\n * non-URL strings unchanged.\n *\n * @param input - String that may contain URLs with sensitive params\n * @returns String with sensitive params replaced by REDACTED\n */\nexport function redactSensitiveParams(input) {\n    if (!input.includes('?') || !input.includes('='))\n        return input;\n    return input.replace(SENSITIVE_PARAMS, '$1$2=REDACTED');\n}\n/**\n * Redact sensitive data from a command string for logging\n *\n * Composes redactCredentials (URL credentials) and redactSensitiveParams\n * (presigned URL query params). For log values only — never mutate\n * command strings before execution.\n *\n * @param command - Command string to sanitize for logging\n * @returns Sanitized command string\n */\nexport function redactCommand(command) {\n    return redactSensitiveParams(redactCredentials(command));\n}\n/**\n * Truncate a string for log output with a truncation indicator\n *\n * @param value - String to potentially truncate\n * @param maxLen - Maximum length before truncation (default 120)\n * @returns Object with truncated value and boolean flag\n */\nexport function truncateForLog(value, maxLen = 120) {\n    if (value.length <= maxLen) {\n        return { value, truncated: false };\n    }\n    const cutoff = Math.max(0, maxLen - 3);\n    return { value: `${value.substring(0, cutoff)}...`, truncated: true };\n}\n","// Execution Result Container\nexport class Execution {\n    code;\n    context;\n    /**\n     * All results from the execution\n     */\n    results = [];\n    /**\n     * Accumulated stdout and stderr\n     */\n    logs = {\n        stdout: [],\n        stderr: []\n    };\n    /**\n     * Execution error if any\n     */\n    error;\n    /**\n     * Execution count (for interpreter)\n     */\n    executionCount;\n    constructor(code, context) {\n        this.code = code;\n        this.context = context;\n    }\n    /**\n     * Convert to a plain object for serialization\n     */\n    toJSON() {\n        return {\n            code: this.code,\n            logs: this.logs,\n            error: this.error,\n            executionCount: this.executionCount,\n            results: this.results.map((result) => ({\n                text: result.text,\n                html: result.html,\n                png: result.png,\n                jpeg: result.jpeg,\n                svg: result.svg,\n                latex: result.latex,\n                markdown: result.markdown,\n                javascript: result.javascript,\n                json: result.json,\n                chart: result.chart,\n                data: result.data\n            }))\n        };\n    }\n}\n// Implementation of Result\nexport class ResultImpl {\n    text;\n    html;\n    png;\n    jpeg;\n    svg;\n    latex;\n    markdown;\n    javascript;\n    json;\n    chart;\n    data;\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- raw SSE data has dynamic shape\n    constructor(raw) {\n        this.text = raw.text || raw.data?.['text/plain'];\n        this.html = raw.html || raw.data?.['text/html'];\n        this.png = raw.png || raw.data?.['image/png'];\n        this.jpeg = raw.jpeg || raw.data?.['image/jpeg'];\n        this.svg = raw.svg || raw.data?.['image/svg+xml'];\n        this.latex = raw.latex || raw.data?.['text/latex'];\n        this.markdown = raw.markdown || raw.data?.['text/markdown'];\n        this.javascript = raw.javascript || raw.data?.['application/javascript'];\n        this.json = raw.json || raw.data?.['application/json'];\n        this.chart = raw.chart;\n        this.data = raw.data;\n    }\n    formats() {\n        const fmts = [];\n        if (this.text)\n            fmts.push('text');\n        if (this.html)\n            fmts.push('html');\n        if (this.png)\n            fmts.push('png');\n        if (this.jpeg)\n            fmts.push('jpeg');\n        if (this.svg)\n            fmts.push('svg');\n        if (this.latex)\n            fmts.push('latex');\n        if (this.markdown)\n            fmts.push('markdown');\n        if (this.javascript)\n            fmts.push('javascript');\n        if (this.json)\n            fmts.push('json');\n        if (this.chart)\n            fmts.push('chart');\n        return fmts;\n    }\n}\n","import { redactCommand, truncateForLog } from './sanitize.js';\n/** Events that are low-value at info on success */\nconst DEBUG_ON_SUCCESS = new Set([\n    'session.create',\n    'session.destroy',\n    'file.read',\n    'file.write',\n    'file.delete',\n    'file.mkdir'\n]);\nexport function resolveLogLevel(payload, options) {\n    if (payload.outcome === 'error')\n        return 'error';\n    if (options?.successLevel)\n        return options.successLevel;\n    if (payload.origin === 'internal')\n        return 'debug';\n    if (DEBUG_ON_SUCCESS.has(payload.event))\n        return 'debug';\n    return 'info';\n}\n/**\n * Sanitize an Error object by redacting sensitive data from message and stack.\n * Produces a copy so the caller's original Error is not mutated.\n */\nfunction sanitizeError(error) {\n    if (!error)\n        return undefined;\n    const sanitized = new Error(redactCommand(error.message));\n    sanitized.name = error.name;\n    sanitized.stack = error.stack ? redactCommand(error.stack) : undefined;\n    return sanitized;\n}\n/**\n * Sanitize and prepare payload fields for both message building and context emission.\n * Called once by logCanonicalEvent to avoid double-redaction.\n */\nfunction sanitizePayload(payload) {\n    if (payload.command === undefined) {\n        return { commandTruncated: false };\n    }\n    const redacted = redactCommand(payload.command);\n    const { value, truncated } = truncateForLog(redacted);\n    return { sanitizedCommand: value, commandTruncated: truncated };\n}\n/**\n * Build a human-readable canonical event message for dashboards and log viewers.\n *\n * Format: `{event} {outcome} {key_context} [— {reason}] ({durationMs}ms[, {sizeBytes}B])`\n *\n * The if/else chain for key context has implicit priority: command > path >\n * sessionId > port > repoUrl > pid. If a payload has multiple, only the\n * highest-priority one appears in the message. All fields are still present\n * as discrete queryable keys in the structured log context.\n */\nexport function buildMessage(payload, sanitizedCommand) {\n    const { event } = payload;\n    // version.check has its own format: no outcome, no duration\n    if (event === 'version.check') {\n        const parts = ['version.check'];\n        if (payload.sdkVersion)\n            parts.push(`sdk=${payload.sdkVersion}`);\n        if (payload.containerVersion)\n            parts.push(`container=${payload.containerVersion}`);\n        if (payload.versionOutcome && payload.versionOutcome !== 'compatible') {\n            parts.push(`(${payload.versionOutcome})`);\n        }\n        return parts.join(' ');\n    }\n    const parts = [event, payload.outcome];\n    // Key context — highest priority field shown in message\n    if (sanitizedCommand !== undefined) {\n        parts.push(sanitizedCommand);\n    }\n    else if (payload.command !== undefined) {\n        // Fallback for direct buildMessage calls without pre-sanitized command\n        const redacted = redactCommand(payload.command);\n        const { value } = truncateForLog(redacted);\n        parts.push(value);\n    }\n    else if (payload.path !== undefined) {\n        parts.push(payload.path);\n    }\n    else if (event.includes('session') && payload.sessionId !== undefined) {\n        parts.push(payload.sessionId);\n    }\n    else if (payload.port !== undefined) {\n        parts.push(String(payload.port));\n    }\n    else if (payload.repoUrl !== undefined) {\n        let gitContext = payload.repoUrl;\n        if (payload.branch !== undefined) {\n            gitContext += ` ${payload.branch}`;\n        }\n        parts.push(gitContext);\n    }\n    else if (payload.pid !== undefined) {\n        parts.push(String(payload.pid));\n    }\n    else if (payload.backupId !== undefined) {\n        parts.push(payload.backupId);\n    }\n    else if (payload.repoPath !== undefined) {\n        let gitContext = payload.repoPath;\n        if (payload.branch !== undefined) {\n            gitContext += ` branch=${payload.branch}`;\n        }\n        parts.push(gitContext);\n    }\n    else if (payload.mountsProcessed !== undefined) {\n        let destroyContext = `${payload.mountsProcessed} mounts`;\n        if (payload.mountFailures)\n            destroyContext += `, ${payload.mountFailures} failed`;\n        parts.push(destroyContext);\n    }\n    else if (payload.mountPath !== undefined) {\n        parts.push(payload.mountPath);\n    }\n    // Error reason after em-dash\n    if (payload.outcome === 'error') {\n        if (payload.errorMessage !== undefined) {\n            parts.push(`\\u2014 ${payload.errorMessage}`);\n        }\n        else if (payload.exitCode !== undefined) {\n            parts.push(`\\u2014 exitCode=${payload.exitCode}`);\n        }\n    }\n    // Duration suffix (and optional size)\n    const durationSuffix = payload.sizeBytes !== undefined\n        ? `(${payload.durationMs}ms, ${payload.sizeBytes}B)`\n        : `(${payload.durationMs}ms)`;\n    parts.push(durationSuffix);\n    return parts.join(' ');\n}\n/**\n * Log a canonical event — the single entry point for all structured operational events.\n *\n * Sanitizes command fields once, builds the message, selects log level from\n * outcome, and emits a structured log entry with the full payload as context.\n */\nexport function logCanonicalEvent(logger, payload, options) {\n    // Auto-derive errorMessage from error.message when not explicitly set,\n    // then sanitize to prevent credential leaks (e.g., presigned URLs in error strings)\n    const resolvedErrorMessage = payload.errorMessage ?? payload.error?.message;\n    const sanitizedErrorMessage = resolvedErrorMessage\n        ? redactCommand(resolvedErrorMessage)\n        : undefined;\n    const enrichedPayload = sanitizedErrorMessage !== undefined\n        ? { ...payload, errorMessage: sanitizedErrorMessage }\n        : payload;\n    // Sanitize once, use for both message and context\n    const { sanitizedCommand, commandTruncated } = sanitizePayload(enrichedPayload);\n    const message = buildMessage(enrichedPayload, sanitizedCommand);\n    // Build context from enriched payload, excluding the error object (passed separately)\n    const context = {};\n    for (const [key, value] of Object.entries(enrichedPayload)) {\n        if (key === 'error')\n            continue;\n        context[key] = value;\n    }\n    // Apply sanitized command to context\n    if (sanitizedCommand !== undefined) {\n        context.command = sanitizedCommand;\n        if (commandTruncated) {\n            context.commandTruncated = true;\n        }\n    }\n    const level = resolveLogLevel(enrichedPayload, options);\n    if (level === 'error') {\n        logger.error(message, sanitizeError(payload.error), context);\n    }\n    else if (level === 'warn') {\n        logger.warn(message, context);\n    }\n    else if (level === 'debug') {\n        logger.debug(message, context);\n    }\n    else {\n        logger.info(message, context);\n    }\n}\n","/**\n * Logger types for Cloudflare Sandbox SDK\n *\n * Provides structured, trace-aware logging across Worker, Durable Object, and Container.\n */\n/**\n * Log levels (from most to least verbose)\n */\nexport var LogLevel;\n(function (LogLevel) {\n    LogLevel[LogLevel[\"DEBUG\"] = 0] = \"DEBUG\";\n    LogLevel[LogLevel[\"INFO\"] = 1] = \"INFO\";\n    LogLevel[LogLevel[\"WARN\"] = 2] = \"WARN\";\n    LogLevel[LogLevel[\"ERROR\"] = 3] = \"ERROR\";\n})(LogLevel || (LogLevel = {}));\n","/**\n * Logger implementation\n */\nimport { LogLevel as LogLevelEnum } from './types.js';\n/**\n * ANSI color codes for terminal output\n */\nconst COLORS = {\n    reset: '\\x1b[0m',\n    debug: '\\x1b[36m', // Cyan\n    info: '\\x1b[32m', // Green\n    warn: '\\x1b[33m', // Yellow\n    error: '\\x1b[31m', // Red\n    dim: '\\x1b[2m' // Dim\n};\n/**\n * CloudflareLogger implements structured logging with support for\n * both JSON output (production) and pretty printing (development).\n */\nexport class CloudflareLogger {\n    baseContext;\n    minLevel;\n    outputMode;\n    /**\n     * Create a new CloudflareLogger\n     *\n     * @param baseContext Base context included in all log entries\n     * @param minLevel Minimum log level to output (default: INFO)\n     * @param outputMode How log entries are formatted and emitted (default: 'structured')\n     */\n    constructor(baseContext, minLevel = LogLevelEnum.INFO, outputMode = 'structured') {\n        this.baseContext = baseContext;\n        this.minLevel = minLevel;\n        this.outputMode = outputMode;\n    }\n    /**\n     * Log debug-level message\n     */\n    debug(message, context) {\n        if (this.shouldLog(LogLevelEnum.DEBUG)) {\n            const logData = this.buildLogData('debug', message, context);\n            this.output(console.log, logData);\n        }\n    }\n    /**\n     * Log info-level message\n     */\n    info(message, context) {\n        if (this.shouldLog(LogLevelEnum.INFO)) {\n            const logData = this.buildLogData('info', message, context);\n            this.output(console.log, logData);\n        }\n    }\n    /**\n     * Log warning-level message\n     */\n    warn(message, context) {\n        if (this.shouldLog(LogLevelEnum.WARN)) {\n            const logData = this.buildLogData('warn', message, context);\n            this.output(console.warn, logData);\n        }\n    }\n    /**\n     * Log error-level message\n     */\n    error(message, error, context) {\n        if (this.shouldLog(LogLevelEnum.ERROR)) {\n            const logData = this.buildLogData('error', message, context, error);\n            this.output(console.error, logData);\n        }\n    }\n    /**\n     * Create a child logger with additional context\n     */\n    child(context) {\n        return new CloudflareLogger({ ...this.baseContext, ...context }, this.minLevel, this.outputMode);\n    }\n    /**\n     * Check if a log level should be output\n     */\n    shouldLog(level) {\n        return level >= this.minLevel;\n    }\n    /**\n     * Build log data object\n     */\n    buildLogData(level, message, context, error) {\n        const logData = {\n            level,\n            message,\n            ...this.baseContext,\n            ...context,\n            timestamp: new Date().toISOString()\n        };\n        // Add error details if provided\n        if (error) {\n            logData.error = {\n                message: error.message,\n                stack: error.stack,\n                name: error.name\n            };\n        }\n        return logData;\n    }\n    /**\n     * Output log data using the configured output mode\n     */\n    output(consoleFn, data) {\n        switch (this.outputMode) {\n            case 'pretty':\n                this.outputPretty(consoleFn, data);\n                break;\n            case 'json-line':\n                this.outputJsonLine(consoleFn, data);\n                break;\n            case 'structured':\n                this.outputStructured(consoleFn, data);\n                break;\n        }\n    }\n    /**\n     * Output as JSON string (container stdout — parsed by Containers pipeline)\n     */\n    outputJsonLine(consoleFn, data) {\n        consoleFn(JSON.stringify(data));\n    }\n    /**\n     * Output as raw object (Workers/DOs — Workers Logs auto-indexes fields)\n     */\n    outputStructured(consoleFn, data) {\n        consoleFn(data);\n    }\n    /**\n     * Output as pretty-printed, colored text (development)\n     *\n     * Each log event is a single consoleFn() call so it appears as one entry\n     * in the Cloudflare dashboard. Context is rendered inline as compact key=value pairs.\n     *\n     * Format: LEVEL [component] message trace=tr_... key=value key=value\n     */\n    outputPretty(consoleFn, data) {\n        const { level, message: msg, timestamp, traceId, component, sandboxId, sessionId, processId, commandId, durationMs, serviceVersion, instanceId, error, ...rest } = data;\n        const levelStr = String(level || 'INFO').toUpperCase();\n        const levelColor = this.getLevelColor(levelStr);\n        const componentBadge = component ? `[${component}]` : '';\n        const timeStr = timestamp\n            ? `${COLORS.dim}${new Date(timestamp).toISOString().substring(11, 23)}${COLORS.reset} `\n            : '';\n        let logLine = `${timeStr}${levelColor}${levelStr.padEnd(5)}${COLORS.reset} ${componentBadge} ${msg}`;\n        // Append all context as compact key=value pairs on the same line\n        const pairs = [];\n        if (traceId)\n            pairs.push(`trace=${String(traceId).substring(0, 12)}`);\n        if (commandId)\n            pairs.push(`cmd=${String(commandId).substring(0, 12)}`);\n        if (sandboxId)\n            pairs.push(`sandbox=${sandboxId}`);\n        if (sessionId)\n            pairs.push(`session=${String(sessionId).substring(0, 12)}`);\n        if (processId)\n            pairs.push(`proc=${processId}`);\n        if (durationMs !== undefined)\n            pairs.push(`dur=${durationMs}ms`);\n        // Append remaining context fields inline\n        for (const [key, value] of Object.entries(rest)) {\n            if (value === undefined || value === null)\n                continue;\n            const v = typeof value === 'object'\n                ? JSON.stringify(value)\n                : this.sanitizePrettyValue(String(value));\n            pairs.push(`${key}=${v}`);\n        }\n        // Append error info inline\n        if (error && typeof error === 'object') {\n            const errorObj = error;\n            if (errorObj.name)\n                pairs.push(`err.name=${this.sanitizePrettyValue(errorObj.name)}`);\n            if (errorObj.message)\n                pairs.push(`err.msg=${this.sanitizePrettyValue(errorObj.message)}`);\n            if (errorObj.stack)\n                pairs.push(`err.stack=${this.sanitizePrettyValue(errorObj.stack)}`);\n        }\n        if (pairs.length > 0) {\n            logLine += ` ${COLORS.dim}${pairs.join(' ')}${COLORS.reset}`;\n        }\n        // Single consoleFn call = single log entry in the dashboard\n        consoleFn(logLine);\n    }\n    /**\n     * Collapse newlines so a single consoleFn() call stays on one line.\n     * Cloudflare's log pipeline splits on literal newlines, which fragments\n     * stack traces and multi-line error messages into separate entries.\n     */\n    sanitizePrettyValue(value) {\n        return value.replace(/\\r/g, '\\\\r').replace(/\\n/g, '\\\\n');\n    }\n    /**\n     * Get ANSI color code for log level\n     */\n    getLevelColor(level) {\n        const levelLower = level.toLowerCase();\n        switch (levelLower) {\n            case 'debug':\n                return COLORS.debug;\n            case 'info':\n                return COLORS.info;\n            case 'warn':\n                return COLORS.warn;\n            case 'error':\n                return COLORS.error;\n            default:\n                return COLORS.reset;\n        }\n    }\n}\n","/**\n * Trace context utilities for request correlation\n *\n * Trace IDs enable correlating logs across distributed components:\n * Worker → Durable Object → Container → back\n *\n * The trace ID is propagated via the X-Trace-Id HTTP header.\n */\n/**\n * Utility for managing trace context across distributed components\n */\n// biome-ignore lint/complexity/noStaticOnlyClass: Keep as class for namespace grouping and discoverability\nexport class TraceContext {\n    /**\n     * HTTP header name for trace ID propagation\n     */\n    static TRACE_HEADER = 'X-Trace-Id';\n    /**\n     * Generate a new trace ID\n     *\n     * Format: \"tr_\" + 16 random hex characters\n     * Example: \"tr_7f3a9b2c4e5d6f1a\"\n     *\n     * @returns Newly generated trace ID\n     */\n    static generate() {\n        // Use crypto.randomUUID() for randomness, extract 16 hex chars\n        const randomHex = crypto.randomUUID().replace(/-/g, '').substring(0, 16);\n        return `tr_${randomHex}`;\n    }\n    /**\n     * Extract trace ID from HTTP request headers\n     *\n     * @param headers Request headers\n     * @returns Trace ID if present, null otherwise\n     */\n    static fromHeaders(headers) {\n        return headers.get(TraceContext.TRACE_HEADER);\n    }\n    /**\n     * Create headers object with trace ID for outgoing requests\n     *\n     * @param traceId Trace ID to include\n     * @returns Headers object with X-Trace-Id set\n     */\n    static toHeaders(traceId) {\n        return { [TraceContext.TRACE_HEADER]: traceId };\n    }\n    /**\n     * Get the header name used for trace ID propagation\n     *\n     * @returns Header name (\"X-Trace-Id\")\n     */\n    static getHeaderName() {\n        return TraceContext.TRACE_HEADER;\n    }\n}\n","/**\n * Logger module\n *\n * Provides structured, trace-aware logging with:\n * - Explicit logger passing via constructor injection\n * - Three output modes: structured (Workers/DOs), json-line (container), pretty (local dev)\n * - Environment auto-detection\n * - Log level configuration\n *\n * Usage:\n *\n * ```typescript\n * // Create a logger at entry point\n * const logger = createLogger({ component: 'sandbox-do', traceId: 'tr_abc123' });\n *\n * // Pass to classes via constructor\n * const service = new MyService(logger);\n *\n * // Create child loggers for additional context\n * const execLogger = logger.child({ commandId: 'cmd-456' });\n * execLogger.info('Operation started');\n * ```\n */\nimport { CloudflareLogger } from './logger.js';\nimport { TraceContext } from './trace-context.js';\nimport { LogLevel as LogLevelEnum } from './types.js';\nexport { buildMessage, logCanonicalEvent, resolveLogLevel } from './canonical.js';\nexport { CloudflareLogger } from './logger.js';\nexport { TraceContext } from './trace-context.js';\nexport { LogLevel as LogLevelEnum } from './types.js';\n/**\n * Create a no-op logger for testing\n *\n * Returns a logger that implements the Logger interface but does nothing.\n * Useful for tests that don't need actual logging output.\n *\n * @returns No-op logger instance\n *\n * @example\n * ```typescript\n * // In tests\n * const client = new HttpClient({\n *   baseUrl: 'http://test.com',\n *   logger: createNoOpLogger() // Optional - tests can enable real logging if needed\n * });\n * ```\n */\nexport function createNoOpLogger() {\n    return {\n        debug: () => { },\n        info: () => { },\n        warn: () => { },\n        error: () => { },\n        child: () => createNoOpLogger()\n    };\n}\n/**\n * Create a new logger instance\n *\n * @param context Base context for the logger. Must include 'component'.\n *                TraceId will be auto-generated if not provided.\n * @returns New logger instance\n *\n * @example\n * ```typescript\n * // In Durable Object\n * const logger = createLogger({\n *   component: 'sandbox-do',\n *   traceId: TraceContext.fromHeaders(request.headers) || TraceContext.generate(),\n *   sandboxId: this.id\n * });\n *\n * // In Container\n * const logger = createLogger({\n *   component: 'container',\n *   traceId: TraceContext.fromHeaders(request.headers)!,\n *   sessionId: this.id\n * });\n * ```\n */\nexport function createLogger(context) {\n    const minLevel = getLogLevelFromEnv();\n    const outputMode = getOutputMode(context.component);\n    const baseContext = {\n        ...context,\n        traceId: context.traceId || TraceContext.generate(),\n        component: context.component,\n        serviceVersion: context.serviceVersion || getEnvVar('SANDBOX_VERSION') || undefined,\n        instanceId: context.instanceId ||\n            getEnvVar('HOSTNAME') ||\n            getEnvVar('SANDBOX_INSTANCE_ID') ||\n            undefined\n    };\n    return new CloudflareLogger(baseContext, minLevel, outputMode);\n}\n/**\n * Get log level from environment variable\n *\n * Checks SANDBOX_LOG_LEVEL env var, falls back to default based on environment.\n * Default: 'debug' for development, 'info' for production\n */\nfunction getLogLevelFromEnv() {\n    const envLevel = getEnvVar('SANDBOX_LOG_LEVEL') || 'info';\n    switch (envLevel.toLowerCase()) {\n        case 'debug':\n            return LogLevelEnum.DEBUG;\n        case 'info':\n            return LogLevelEnum.INFO;\n        case 'warn':\n            return LogLevelEnum.WARN;\n        case 'error':\n            return LogLevelEnum.ERROR;\n        default:\n            // Invalid level, fall back to info\n            return LogLevelEnum.INFO;\n    }\n}\n/**\n * Determine output mode based on component and environment:\n * - SANDBOX_LOG_FORMAT=pretty → 'pretty' for all components (local wrangler dev)\n * - Container/Executor without pretty → 'json-line' (Bun stdout → Containers pipeline)\n * - Everything else without pretty → 'structured' (Workers/DOs → Workers Logs)\n *\n * In local dev, setting SANDBOX_LOG_FORMAT=pretty gives readable terminal\n * output on both the DO side and container side. In production (where the\n * var isn't set), DOs emit structured objects and containers emit single-line\n * JSON — both queryable by their respective observability pipelines.\n */\nfunction getOutputMode(component) {\n    const format = getEnvVar('SANDBOX_LOG_FORMAT');\n    if (format?.toLowerCase() === 'pretty') {\n        return 'pretty';\n    }\n    if (component === 'container' || component === 'executor') {\n        return 'json-line';\n    }\n    return 'structured';\n}\n/**\n * Get environment variable value\n *\n * Supports both Node.js (process.env) and Bun (Bun.env)\n */\nfunction getEnvVar(name) {\n    // Try process.env first (Node.js / Bun)\n    if (typeof process !== 'undefined' && process.env) {\n        return process.env[name];\n    }\n    // Try Bun.env (Bun runtime)\n    if (typeof Bun !== 'undefined') {\n        const bunEnv = Bun.env;\n        if (bunEnv) {\n            return bunEnv[name];\n        }\n    }\n    return undefined;\n}\n","/**\n * Shared interface types for the container-control path.\n *\n * Defines the contract between the SDK control client and the container\n * control-plane API. The current wire implementation uses capnweb RPC.\n */\n/**\n * Error name thrown by the host's `connect` when it has not yet provisioned\n * the requested hash and the request did not carry tarball bytes. The SDK\n * recognises this name via `Error.name` and retries the connect with the\n * bytes attached. Kept as a string constant so it survives capnweb\n * cross-realm error reconstruction.\n */\nexport const EXTENSION_TARBALL_REQUIRED = 'ExtensionTarballRequired';\n","/**\n * Escapes a string for safe use in shell commands using POSIX single-quote escaping.\n * Prevents command injection by wrapping the string in single quotes and escaping\n * any single quotes within the string.\n */\nexport function shellEscape(str) {\n    return `'${str.replace(/'/g, \"'\\\\''\")}'`;\n}\n","/**\n * Shared SSE parsing utilities.\n *\n * Parses SSE frames from arbitrary text chunks while preserving partial state\n * across chunk boundaries.\n */\n/**\n * Parse SSE frames from a buffer.\n *\n * Returns parsed events, remaining unparsed text, and the current partial event\n * so callers can continue parsing on the next chunk.\n */\nexport function parseSSEFrames(buffer, currentEvent = { data: [] }) {\n    const events = [];\n    let i = 0;\n    while (i < buffer.length) {\n        const newlineIndex = buffer.indexOf('\\n', i);\n        if (newlineIndex === -1)\n            break;\n        const rawLine = buffer.substring(i, newlineIndex);\n        const line = rawLine.endsWith('\\r') ? rawLine.slice(0, -1) : rawLine;\n        i = newlineIndex + 1;\n        if (line === '' && currentEvent.data.length > 0) {\n            events.push({\n                event: currentEvent.event,\n                data: currentEvent.data.join('\\n')\n            });\n            currentEvent = { data: [] };\n            continue;\n        }\n        if (line.startsWith('event:')) {\n            const value = line.startsWith('event: ')\n                ? line.substring(7)\n                : line.substring(6);\n            currentEvent.event = value;\n            continue;\n        }\n        if (line.startsWith('data:')) {\n            const value = line.startsWith('data: ')\n                ? line.substring(6)\n                : line.substring(5);\n            currentEvent.data.push(value);\n        }\n    }\n    return {\n        events,\n        remaining: buffer.substring(i),\n        currentEvent\n    };\n}\n","/**\n * Check if a process status indicates the process has terminated\n */\nexport function isTerminalStatus(status) {\n    return (status === 'completed' ||\n        status === 'failed' ||\n        status === 'killed' ||\n        status === 'error');\n}\n// Type guards for runtime validation\nexport function isExecResult(value) {\n    return (value &&\n        typeof value.success === 'boolean' &&\n        typeof value.exitCode === 'number' &&\n        typeof value.stdout === 'string' &&\n        typeof value.stderr === 'string');\n}\nexport function isProcess(value) {\n    return (value &&\n        typeof value.id === 'string' &&\n        typeof value.command === 'string' &&\n        typeof value.status === 'string');\n}\nexport function isProcessStatus(value) {\n    return [\n        'starting',\n        'running',\n        'completed',\n        'failed',\n        'killed',\n        'error'\n    ].includes(value);\n}\n// Re-export interpreter types for convenience\nexport { Execution, ResultImpl } from './interpreter-types';\n"],"mappings":";;;;;;;;AAOA,SAAgB,aAAa,KAAK,KAAK;CACnC,MAAM,QAAQ,MAAM;AACpB,QAAO,OAAO,UAAU,WAAW,QAAQ;;;;;;;;;;;;AAY/C,SAAgB,cAAc,SAAS;CACnC,MAAM,WAAW,EAAE;AACnB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAC9C,KAAI,SAAS,QAAQ,OAAO,UAAU,SAClC,UAAS,OAAO;AAGxB,QAAO;;;;;;;;;;;;;;;;AAgBX,SAAgB,iBAAiB,SAAS;CACtC,MAAM,QAAQ,EAAE;CAChB,MAAM,UAAU,EAAE;AAClB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAC9C,KAAI,SAAS,QAAQ,OAAO,UAAU,SAClC,OAAM,OAAO;KAGb,SAAQ,KAAK,IAAI;AAGzB,QAAO;EAAE;EAAO;EAAS;;;;;;;;;;;;;;;;AC5C7B,MAAM,mBAAmB;;;;;;;;;;;AAWzB,SAAgB,kBAAkB,MAAM;CAEpC,IAAI,SAAS;CACb,IAAI,MAAM;AACV,QAAO,MAAM,OAAO,QAAQ;EACxB,MAAM,UAAU,OAAO,QAAQ,WAAW,IAAI;EAC9C,MAAM,WAAW,OAAO,QAAQ,YAAY,IAAI;EAChD,IAAI,cAAc;EAClB,IAAI,cAAc;AAClB,MAAI,YAAY,MAAM,aAAa,GAC/B;AACJ,MAAI,YAAY,OAAO,aAAa,MAAM,UAAU,WAAW;AAC3D,iBAAc;AACd,iBAAc;SAEb;AACD,iBAAc;AACd,iBAAc;;EAGlB,MAAM,cAAc,cAAc;EAClC,MAAM,QAAQ,OAAO,QAAQ,KAAK,YAAY;EAE9C,IAAI,SAAS;AACb,SAAO,SAAS,OAAO,QAAQ;GAC3B,MAAM,OAAO,OAAO;AACpB,OAAI,mBAAmB,KAAK,KAAK,CAC7B;AACJ;;AAEJ,MAAI,UAAU,MAAM,QAAQ,QAAQ;AAChC,YAAS,GAAG,OAAO,UAAU,GAAG,YAAY,CAAC,QAAQ,OAAO,UAAU,MAAM;AAC5E,SAAM,cAAc;QAGpB,OAAM,cAAc;;AAG5B,QAAO;;;;;;;;;;;;AAYX,SAAgB,sBAAsB,OAAO;AACzC,KAAI,CAAC,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,SAAS,IAAI,CAC5C,QAAO;AACX,QAAO,MAAM,QAAQ,kBAAkB,gBAAgB;;;;;;;;;;;;AAY3D,SAAgB,cAAc,SAAS;AACnC,QAAO,sBAAsB,kBAAkB,QAAQ,CAAC;;;;;;;;;AAS5D,SAAgB,eAAe,OAAO,SAAS,KAAK;AAChD,KAAI,MAAM,UAAU,OAChB,QAAO;EAAE;EAAO,WAAW;EAAO;CAEtC,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE;AACtC,QAAO;EAAE,OAAO,GAAG,MAAM,UAAU,GAAG,OAAO,CAAC;EAAM,WAAW;EAAM;;;;;ACrGzE,IAAa,YAAb,MAAuB;CACnB;CACA;;;;CAIA,UAAU,EAAE;;;;CAIZ,OAAO;EACH,QAAQ,EAAE;EACV,QAAQ,EAAE;EACb;;;;CAID;;;;CAIA;CACA,YAAY,MAAM,SAAS;AACvB,OAAK,OAAO;AACZ,OAAK,UAAU;;;;;CAKnB,SAAS;AACL,SAAO;GACH,MAAM,KAAK;GACX,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,gBAAgB,KAAK;GACrB,SAAS,KAAK,QAAQ,KAAK,YAAY;IACnC,MAAM,OAAO;IACb,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,OAAO,OAAO;IACd,UAAU,OAAO;IACjB,YAAY,OAAO;IACnB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,MAAM,OAAO;IAChB,EAAE;GACN;;;AAIT,IAAa,aAAb,MAAwB;CACpB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,KAAK;AACb,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,MAAM,IAAI,OAAO,IAAI,OAAO;AACjC,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,MAAM,IAAI,OAAO,IAAI,OAAO;AACjC,OAAK,QAAQ,IAAI,SAAS,IAAI,OAAO;AACrC,OAAK,WAAW,IAAI,YAAY,IAAI,OAAO;AAC3C,OAAK,aAAa,IAAI,cAAc,IAAI,OAAO;AAC/C,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,QAAQ,IAAI;AACjB,OAAK,OAAO,IAAI;;CAEpB,UAAU;EACN,MAAM,OAAO,EAAE;AACf,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,IACL,MAAK,KAAK,MAAM;AACpB,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,IACL,MAAK,KAAK,MAAM;AACpB,MAAI,KAAK,MACL,MAAK,KAAK,QAAQ;AACtB,MAAI,KAAK,SACL,MAAK,KAAK,WAAW;AACzB,MAAI,KAAK,WACL,MAAK,KAAK,aAAa;AAC3B,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,MACL,MAAK,KAAK,QAAQ;AACtB,SAAO;;;;;;;ACnGf,MAAM,mBAAmB,IAAI,IAAI;CAC7B;CACA;CACA;CACA;CACA;CACA;CACH,CAAC;AACF,SAAgB,gBAAgB,SAAS,SAAS;AAC9C,KAAI,QAAQ,YAAY,QACpB,QAAO;AACX,KAAI,SAAS,aACT,QAAO,QAAQ;AACnB,KAAI,QAAQ,WAAW,WACnB,QAAO;AACX,KAAI,iBAAiB,IAAI,QAAQ,MAAM,CACnC,QAAO;AACX,QAAO;;;;;;AAMX,SAAS,cAAc,OAAO;AAC1B,KAAI,CAAC,MACD,QAAO;CACX,MAAM,YAAY,IAAI,MAAM,cAAc,MAAM,QAAQ,CAAC;AACzD,WAAU,OAAO,MAAM;AACvB,WAAU,QAAQ,MAAM,QAAQ,cAAc,MAAM,MAAM,GAAG;AAC7D,QAAO;;;;;;AAMX,SAAS,gBAAgB,SAAS;AAC9B,KAAI,QAAQ,YAAY,OACpB,QAAO,EAAE,kBAAkB,OAAO;CAGtC,MAAM,EAAE,OAAO,cAAc,eADZ,cAAc,QAAQ,QAAQ,CACM;AACrD,QAAO;EAAE,kBAAkB;EAAO,kBAAkB;EAAW;;;;;;;;;;;;AAYnE,SAAgB,aAAa,SAAS,kBAAkB;CACpD,MAAM,EAAE,UAAU;AAElB,KAAI,UAAU,iBAAiB;EAC3B,MAAMA,UAAQ,CAAC,gBAAgB;AAC/B,MAAI,QAAQ,WACR,SAAM,KAAK,OAAO,QAAQ,aAAa;AAC3C,MAAI,QAAQ,iBACR,SAAM,KAAK,aAAa,QAAQ,mBAAmB;AACvD,MAAI,QAAQ,kBAAkB,QAAQ,mBAAmB,aACrD,SAAM,KAAK,IAAI,QAAQ,eAAe,GAAG;AAE7C,SAAOA,QAAM,KAAK,IAAI;;CAE1B,MAAM,QAAQ,CAAC,OAAO,QAAQ,QAAQ;AAEtC,KAAI,qBAAqB,OACrB,OAAM,KAAK,iBAAiB;UAEvB,QAAQ,YAAY,QAAW;EAGpC,MAAM,EAAE,UAAU,eADD,cAAc,QAAQ,QAAQ,CACL;AAC1C,QAAM,KAAK,MAAM;YAEZ,QAAQ,SAAS,OACtB,OAAM,KAAK,QAAQ,KAAK;UAEnB,MAAM,SAAS,UAAU,IAAI,QAAQ,cAAc,OACxD,OAAM,KAAK,QAAQ,UAAU;UAExB,QAAQ,SAAS,OACtB,OAAM,KAAK,OAAO,QAAQ,KAAK,CAAC;UAE3B,QAAQ,YAAY,QAAW;EACpC,IAAI,aAAa,QAAQ;AACzB,MAAI,QAAQ,WAAW,OACnB,eAAc,IAAI,QAAQ;AAE9B,QAAM,KAAK,WAAW;YAEjB,QAAQ,QAAQ,OACrB,OAAM,KAAK,OAAO,QAAQ,IAAI,CAAC;UAE1B,QAAQ,aAAa,OAC1B,OAAM,KAAK,QAAQ,SAAS;UAEvB,QAAQ,aAAa,QAAW;EACrC,IAAI,aAAa,QAAQ;AACzB,MAAI,QAAQ,WAAW,OACnB,eAAc,WAAW,QAAQ;AAErC,QAAM,KAAK,WAAW;YAEjB,QAAQ,oBAAoB,QAAW;EAC5C,IAAI,iBAAiB,GAAG,QAAQ,gBAAgB;AAChD,MAAI,QAAQ,cACR,mBAAkB,KAAK,QAAQ,cAAc;AACjD,QAAM,KAAK,eAAe;YAErB,QAAQ,cAAc,OAC3B,OAAM,KAAK,QAAQ,UAAU;AAGjC,KAAI,QAAQ,YAAY,SACpB;MAAI,QAAQ,iBAAiB,OACzB,OAAM,KAAK,UAAU,QAAQ,eAAe;WAEvC,QAAQ,aAAa,OAC1B,OAAM,KAAK,mBAAmB,QAAQ,WAAW;;CAIzD,MAAM,iBAAiB,QAAQ,cAAc,SACvC,IAAI,QAAQ,WAAW,MAAM,QAAQ,UAAU,MAC/C,IAAI,QAAQ,WAAW;AAC7B,OAAM,KAAK,eAAe;AAC1B,QAAO,MAAM,KAAK,IAAI;;;;;;;;AAQ1B,SAAgB,kBAAkB,QAAQ,SAAS,SAAS;CAGxD,MAAM,uBAAuB,QAAQ,gBAAgB,QAAQ,OAAO;CACpE,MAAM,wBAAwB,uBACxB,cAAc,qBAAqB,GACnC;CACN,MAAM,kBAAkB,0BAA0B,SAC5C;EAAE,GAAG;EAAS,cAAc;EAAuB,GACnD;CAEN,MAAM,EAAE,kBAAkB,qBAAqB,gBAAgB,gBAAgB;CAC/E,MAAM,UAAU,aAAa,iBAAiB,iBAAiB;CAE/D,MAAM,UAAU,EAAE;AAClB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,gBAAgB,EAAE;AACxD,MAAI,QAAQ,QACR;AACJ,UAAQ,OAAO;;AAGnB,KAAI,qBAAqB,QAAW;AAChC,UAAQ,UAAU;AAClB,MAAI,iBACA,SAAQ,mBAAmB;;CAGnC,MAAM,QAAQ,gBAAgB,iBAAiB,QAAQ;AACvD,KAAI,UAAU,QACV,QAAO,MAAM,SAAS,cAAc,QAAQ,MAAM,EAAE,QAAQ;UAEvD,UAAU,OACf,QAAO,KAAK,SAAS,QAAQ;UAExB,UAAU,QACf,QAAO,MAAM,SAAS,QAAQ;KAG9B,QAAO,KAAK,SAAS,QAAQ;;;;;;;;;;;;;AC1KrC,IAAW;CACV,SAAU,YAAU;AACjB,YAAS,WAAS,WAAW,KAAK;AAClC,YAAS,WAAS,UAAU,KAAK;AACjC,YAAS,WAAS,UAAU,KAAK;AACjC,YAAS,WAAS,WAAW,KAAK;GACnC,aAAa,WAAW,EAAE,EAAE;;;;;;;;;;ACP/B,MAAM,SAAS;CACX,OAAO;CACP,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;CACP,KAAK;CACR;;;;;AAKD,IAAa,mBAAb,MAAa,iBAAiB;CAC1B;CACA;CACA;;;;;;;;CAQA,YAAY,aAAa,WAAWC,SAAa,MAAM,aAAa,cAAc;AAC9E,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,aAAa;;;;;CAKtB,MAAM,SAAS,SAAS;AACpB,MAAI,KAAK,UAAUA,SAAa,MAAM,EAAE;GACpC,MAAM,UAAU,KAAK,aAAa,SAAS,SAAS,QAAQ;AAC5D,QAAK,OAAO,QAAQ,KAAK,QAAQ;;;;;;CAMzC,KAAK,SAAS,SAAS;AACnB,MAAI,KAAK,UAAUA,SAAa,KAAK,EAAE;GACnC,MAAM,UAAU,KAAK,aAAa,QAAQ,SAAS,QAAQ;AAC3D,QAAK,OAAO,QAAQ,KAAK,QAAQ;;;;;;CAMzC,KAAK,SAAS,SAAS;AACnB,MAAI,KAAK,UAAUA,SAAa,KAAK,EAAE;GACnC,MAAM,UAAU,KAAK,aAAa,QAAQ,SAAS,QAAQ;AAC3D,QAAK,OAAO,QAAQ,MAAM,QAAQ;;;;;;CAM1C,MAAM,SAAS,OAAO,SAAS;AAC3B,MAAI,KAAK,UAAUA,SAAa,MAAM,EAAE;GACpC,MAAM,UAAU,KAAK,aAAa,SAAS,SAAS,SAAS,MAAM;AACnE,QAAK,OAAO,QAAQ,OAAO,QAAQ;;;;;;CAM3C,MAAM,SAAS;AACX,SAAO,IAAI,iBAAiB;GAAE,GAAG,KAAK;GAAa,GAAG;GAAS,EAAE,KAAK,UAAU,KAAK,WAAW;;;;;CAKpG,UAAU,OAAO;AACb,SAAO,SAAS,KAAK;;;;;CAKzB,aAAa,OAAO,SAAS,SAAS,OAAO;EACzC,MAAM,UAAU;GACZ;GACA;GACA,GAAG,KAAK;GACR,GAAG;GACH,4BAAW,IAAI,MAAM,EAAC,aAAa;GACtC;AAED,MAAI,MACA,SAAQ,QAAQ;GACZ,SAAS,MAAM;GACf,OAAO,MAAM;GACb,MAAM,MAAM;GACf;AAEL,SAAO;;;;;CAKX,OAAO,WAAW,MAAM;AACpB,UAAQ,KAAK,YAAb;GACI,KAAK;AACD,SAAK,aAAa,WAAW,KAAK;AAClC;GACJ,KAAK;AACD,SAAK,eAAe,WAAW,KAAK;AACpC;GACJ,KAAK;AACD,SAAK,iBAAiB,WAAW,KAAK;AACtC;;;;;;CAMZ,eAAe,WAAW,MAAM;AAC5B,YAAU,KAAK,UAAU,KAAK,CAAC;;;;;CAKnC,iBAAiB,WAAW,MAAM;AAC9B,YAAU,KAAK;;;;;;;;;;CAUnB,aAAa,WAAW,MAAM;EAC1B,MAAM,EAAE,OAAO,SAAS,KAAK,WAAW,SAAS,WAAW,WAAW,WAAW,WAAW,WAAW,YAAY,gBAAgB,YAAY,OAAO,GAAG,SAAS;EACnK,MAAM,WAAW,OAAO,SAAS,OAAO,CAAC,aAAa;EACtD,MAAM,aAAa,KAAK,cAAc,SAAS;EAC/C,MAAM,iBAAiB,YAAY,IAAI,UAAU,KAAK;EAItD,IAAI,UAAU,GAHE,YACV,GAAG,OAAO,MAAM,IAAI,KAAK,UAAU,CAAC,aAAa,CAAC,UAAU,IAAI,GAAG,GAAG,OAAO,MAAM,KACnF,KACqB,aAAa,SAAS,OAAO,EAAE,GAAG,OAAO,MAAM,GAAG,eAAe,GAAG;EAE/F,MAAM,QAAQ,EAAE;AAChB,MAAI,QACA,OAAM,KAAK,SAAS,OAAO,QAAQ,CAAC,UAAU,GAAG,GAAG,GAAG;AAC3D,MAAI,UACA,OAAM,KAAK,OAAO,OAAO,UAAU,CAAC,UAAU,GAAG,GAAG,GAAG;AAC3D,MAAI,UACA,OAAM,KAAK,WAAW,YAAY;AACtC,MAAI,UACA,OAAM,KAAK,WAAW,OAAO,UAAU,CAAC,UAAU,GAAG,GAAG,GAAG;AAC/D,MAAI,UACA,OAAM,KAAK,QAAQ,YAAY;AACnC,MAAI,eAAe,OACf,OAAM,KAAK,OAAO,WAAW,IAAI;AAErC,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,EAAE;AAC7C,OAAI,UAAU,UAAa,UAAU,KACjC;GACJ,MAAM,IAAI,OAAO,UAAU,WACrB,KAAK,UAAU,MAAM,GACrB,KAAK,oBAAoB,OAAO,MAAM,CAAC;AAC7C,SAAM,KAAK,GAAG,IAAI,GAAG,IAAI;;AAG7B,MAAI,SAAS,OAAO,UAAU,UAAU;GACpC,MAAM,WAAW;AACjB,OAAI,SAAS,KACT,OAAM,KAAK,YAAY,KAAK,oBAAoB,SAAS,KAAK,GAAG;AACrE,OAAI,SAAS,QACT,OAAM,KAAK,WAAW,KAAK,oBAAoB,SAAS,QAAQ,GAAG;AACvE,OAAI,SAAS,MACT,OAAM,KAAK,aAAa,KAAK,oBAAoB,SAAS,MAAM,GAAG;;AAE3E,MAAI,MAAM,SAAS,EACf,YAAW,IAAI,OAAO,MAAM,MAAM,KAAK,IAAI,GAAG,OAAO;AAGzD,YAAU,QAAQ;;;;;;;CAOtB,oBAAoB,OAAO;AACvB,SAAO,MAAM,QAAQ,OAAO,MAAM,CAAC,QAAQ,OAAO,MAAM;;;;;CAK5D,cAAc,OAAO;AAEjB,UADmB,MAAM,aAAa,EACtC;GACI,KAAK,QACD,QAAO,OAAO;GAClB,KAAK,OACD,QAAO,OAAO;GAClB,KAAK,OACD,QAAO,OAAO;GAClB,KAAK,QACD,QAAO,OAAO;GAClB,QACI,QAAO,OAAO;;;;;;;;;;;;;;;;;;ACvM9B,IAAa,eAAb,MAAa,aAAa;;;;CAItB,OAAO,eAAe;;;;;;;;;CAStB,OAAO,WAAW;AAGd,SAAO,MADW,OAAO,YAAY,CAAC,QAAQ,MAAM,GAAG,CAAC,UAAU,GAAG,GAAG;;;;;;;;CAS5E,OAAO,YAAY,SAAS;AACxB,SAAO,QAAQ,IAAI,aAAa,aAAa;;;;;;;;CAQjD,OAAO,UAAU,SAAS;AACtB,SAAO,GAAG,aAAa,eAAe,SAAS;;;;;;;CAOnD,OAAO,gBAAgB;AACnB,SAAO,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACP5B,SAAgB,mBAAmB;AAC/B,QAAO;EACH,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,aAAa;EACb,aAAa,kBAAkB;EAClC;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BL,SAAgB,aAAa,SAAS;CAClC,MAAM,WAAW,oBAAoB;CACrC,MAAM,aAAa,cAAc,QAAQ,UAAU;AAWnD,QAAO,IAAI,iBAVS;EAChB,GAAG;EACH,SAAS,QAAQ,WAAW,aAAa,UAAU;EACnD,WAAW,QAAQ;EACnB,gBAAgB,QAAQ,kBAAkB,UAAU,kBAAkB,IAAI;EAC1E,YAAY,QAAQ,cAChB,UAAU,WAAW,IACrB,UAAU,sBAAsB,IAChC;EACP,EACwC,UAAU,WAAW;;;;;;;;AAQlE,SAAS,qBAAqB;AAE1B,UADiB,UAAU,oBAAoB,IAAI,QAClC,aAAa,EAA9B;EACI,KAAK,QACD,QAAOC,SAAa;EACxB,KAAK,OACD,QAAOA,SAAa;EACxB,KAAK,OACD,QAAOA,SAAa;EACxB,KAAK,QACD,QAAOA,SAAa;EACxB,QAEI,QAAOA,SAAa;;;;;;;;;;;;;;AAchC,SAAS,cAAc,WAAW;AAE9B,KADe,UAAU,qBAAqB,EAClC,aAAa,KAAK,SAC1B,QAAO;AAEX,KAAI,cAAc,eAAe,cAAc,WAC3C,QAAO;AAEX,QAAO;;;;;;;AAOX,SAAS,UAAU,MAAM;AAErB,KAAI,OAAO,YAAY,eAAe,QAAQ,IAC1C,QAAO,QAAQ,IAAI;AAGvB,KAAI,OAAO,QAAQ,aAAa;EAC5B,MAAM,SAAS,IAAI;AACnB,MAAI,OACA,QAAO,OAAO;;;;;;;;;;;;;;;;;;;AC3I1B,MAAa,6BAA6B;;;;;;;;;ACR1C,SAAgB,YAAY,KAAK;AAC7B,QAAO,IAAI,IAAI,QAAQ,MAAM,QAAQ,CAAC;;;;;;;;;;;;;;;;;ACM1C,SAAgB,eAAe,QAAQ,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE;CAChE,MAAM,SAAS,EAAE;CACjB,IAAI,IAAI;AACR,QAAO,IAAI,OAAO,QAAQ;EACtB,MAAM,eAAe,OAAO,QAAQ,MAAM,EAAE;AAC5C,MAAI,iBAAiB,GACjB;EACJ,MAAM,UAAU,OAAO,UAAU,GAAG,aAAa;EACjD,MAAM,OAAO,QAAQ,SAAS,KAAK,GAAG,QAAQ,MAAM,GAAG,GAAG,GAAG;AAC7D,MAAI,eAAe;AACnB,MAAI,SAAS,MAAM,aAAa,KAAK,SAAS,GAAG;AAC7C,UAAO,KAAK;IACR,OAAO,aAAa;IACpB,MAAM,aAAa,KAAK,KAAK,KAAK;IACrC,CAAC;AACF,kBAAe,EAAE,MAAM,EAAE,EAAE;AAC3B;;AAEJ,MAAI,KAAK,WAAW,SAAS,EAAE;AAI3B,gBAAa,QAHC,KAAK,WAAW,UAAU,GAClC,KAAK,UAAU,EAAE,GACjB,KAAK,UAAU,EAAE;AAEvB;;AAEJ,MAAI,KAAK,WAAW,QAAQ,EAAE;GAC1B,MAAM,QAAQ,KAAK,WAAW,SAAS,GACjC,KAAK,UAAU,EAAE,GACjB,KAAK,UAAU,EAAE;AACvB,gBAAa,KAAK,KAAK,MAAM;;;AAGrC,QAAO;EACH;EACA,WAAW,OAAO,UAAU,EAAE;EAC9B;EACH;;;;;ACtCL,SAAgB,aAAa,OAAO;AAChC,QAAQ,SACJ,OAAO,MAAM,YAAY,aACzB,OAAO,MAAM,aAAa,YAC1B,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,WAAW;;AAEhC,SAAgB,UAAU,OAAO;AAC7B,QAAQ,SACJ,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,YAAY,YACzB,OAAO,MAAM,WAAW;;AAEhC,SAAgB,gBAAgB,OAAO;AACnC,QAAO;EACH;EACA;EACA;EACA;EACA;EACA;EACH,CAAC,SAAS,MAAM"}

package/dist/{errors-CpoDEfUZ.js → errors-BG6NZiPD.js}

@@ -213,4 +213,4 @@ function getSuggestion(code, context) {
 
 //#endregion
 export { getHttpStatus as n, ErrorCode as r, getSuggestion as t };
-//# sourceMappingURL=errors-CpoDEfUZ.js.map
+//# sourceMappingURL=errors-BG6NZiPD.js.map

package/dist/{errors-CpoDEfUZ.js.map → errors-BG6NZiPD.js.map}

@@ -1 +1 @@
-{"version":3,"file":"errors-CpoDEfUZ.js","names":[],"sources":["../../shared/dist/errors/codes.js","../../shared/dist/errors/status-map.js","../../shared/dist/errors/suggestions.js"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport const ErrorCode = {\n    // File System Errors (404)\n    FILE_NOT_FOUND: 'FILE_NOT_FOUND',\n    // Permission Errors (403)\n    PERMISSION_DENIED: 'PERMISSION_DENIED',\n    // File System Errors (409)\n    FILE_EXISTS: 'FILE_EXISTS',\n    // File System Errors (400)\n    IS_DIRECTORY: 'IS_DIRECTORY',\n    NOT_DIRECTORY: 'NOT_DIRECTORY',\n    // File Too Large Errors (413)\n    FILE_TOO_LARGE: 'FILE_TOO_LARGE',\n    // File System Errors (500)\n    NO_SPACE: 'NO_SPACE',\n    TOO_MANY_FILES: 'TOO_MANY_FILES',\n    RESOURCE_BUSY: 'RESOURCE_BUSY',\n    READ_ONLY: 'READ_ONLY',\n    NAME_TOO_LONG: 'NAME_TOO_LONG',\n    TOO_MANY_LINKS: 'TOO_MANY_LINKS',\n    FILESYSTEM_ERROR: 'FILESYSTEM_ERROR',\n    // Command Errors (404)\n    COMMAND_NOT_FOUND: 'COMMAND_NOT_FOUND',\n    // Command Errors (403/400)\n    COMMAND_PERMISSION_DENIED: 'COMMAND_PERMISSION_DENIED',\n    INVALID_COMMAND: 'INVALID_COMMAND',\n    // Command Errors (500)\n    COMMAND_EXECUTION_ERROR: 'COMMAND_EXECUTION_ERROR',\n    STREAM_START_ERROR: 'STREAM_START_ERROR',\n    // Process Errors (404)\n    PROCESS_NOT_FOUND: 'PROCESS_NOT_FOUND',\n    // Process Errors (403/500)\n    PROCESS_PERMISSION_DENIED: 'PROCESS_PERMISSION_DENIED',\n    PROCESS_ERROR: 'PROCESS_ERROR',\n    // Session Errors (409)\n    SESSION_ALREADY_EXISTS: 'SESSION_ALREADY_EXISTS',\n    // Session Errors (410)\n    SESSION_DESTROYED: 'SESSION_DESTROYED',\n    SESSION_TERMINATED: 'SESSION_TERMINATED',\n    // Port Errors (409)\n    PORT_ALREADY_EXPOSED: 'PORT_ALREADY_EXPOSED',\n    PORT_IN_USE: 'PORT_IN_USE',\n    // Port Errors (404)\n    PORT_NOT_EXPOSED: 'PORT_NOT_EXPOSED',\n    // Port Errors (400)\n    INVALID_PORT_NUMBER: 'INVALID_PORT_NUMBER',\n    INVALID_PORT: 'INVALID_PORT',\n    // Port Errors (502/500)\n    SERVICE_NOT_RESPONDING: 'SERVICE_NOT_RESPONDING',\n    PORT_OPERATION_ERROR: 'PORT_OPERATION_ERROR',\n    // Port Errors (400)\n    CUSTOM_DOMAIN_REQUIRED: 'CUSTOM_DOMAIN_REQUIRED',\n    // Git Errors (404)\n    GIT_REPOSITORY_NOT_FOUND: 'GIT_REPOSITORY_NOT_FOUND',\n    GIT_BRANCH_NOT_FOUND: 'GIT_BRANCH_NOT_FOUND',\n    // Git Errors (401)\n    GIT_AUTH_FAILED: 'GIT_AUTH_FAILED',\n    // Git Errors (502)\n    GIT_NETWORK_ERROR: 'GIT_NETWORK_ERROR',\n    // Git Errors (400)\n    INVALID_GIT_URL: 'INVALID_GIT_URL',\n    // Git Errors (500)\n    GIT_CLONE_FAILED: 'GIT_CLONE_FAILED',\n    GIT_CHECKOUT_FAILED: 'GIT_CHECKOUT_FAILED',\n    GIT_OPERATION_FAILED: 'GIT_OPERATION_FAILED',\n    // Bucket mounting errors\n    BUCKET_MOUNT_ERROR: 'BUCKET_MOUNT_ERROR',\n    BUCKET_UNMOUNT_ERROR: 'BUCKET_UNMOUNT_ERROR',\n    S3FS_MOUNT_ERROR: 'S3FS_MOUNT_ERROR',\n    MISSING_CREDENTIALS: 'MISSING_CREDENTIALS',\n    INVALID_MOUNT_CONFIG: 'INVALID_MOUNT_CONFIG',\n    // Backup Errors (500)\n    BACKUP_CREATE_FAILED: 'BACKUP_CREATE_FAILED',\n    BACKUP_RESTORE_FAILED: 'BACKUP_RESTORE_FAILED',\n    // Backup Errors (404)\n    BACKUP_NOT_FOUND: 'BACKUP_NOT_FOUND',\n    // Backup Errors (400)\n    BACKUP_EXPIRED: 'BACKUP_EXPIRED',\n    INVALID_BACKUP_CONFIG: 'INVALID_BACKUP_CONFIG',\n    // Code Interpreter Errors (503)\n    INTERPRETER_NOT_READY: 'INTERPRETER_NOT_READY',\n    // Code Interpreter Errors (404)\n    CONTEXT_NOT_FOUND: 'CONTEXT_NOT_FOUND',\n    // Code Interpreter Errors (500)\n    CODE_EXECUTION_ERROR: 'CODE_EXECUTION_ERROR',\n    // Code Interpreter Errors (501) - Feature not available in image variant\n    PYTHON_NOT_AVAILABLE: 'PYTHON_NOT_AVAILABLE',\n    JAVASCRIPT_NOT_AVAILABLE: 'JAVASCRIPT_NOT_AVAILABLE',\n    // OpenCode Errors (503)\n    OPENCODE_STARTUP_FAILED: 'OPENCODE_STARTUP_FAILED',\n    // Process Readiness Errors (408/500)\n    PROCESS_READY_TIMEOUT: 'PROCESS_READY_TIMEOUT',\n    PROCESS_EXITED_BEFORE_READY: 'PROCESS_EXITED_BEFORE_READY',\n    // File Watch Errors (404)\n    WATCH_NOT_FOUND: 'WATCH_NOT_FOUND',\n    // File Watch Errors (500)\n    WATCH_START_ERROR: 'WATCH_START_ERROR',\n    WATCH_STOP_ERROR: 'WATCH_STOP_ERROR',\n    // Validation Errors (400)\n    VALIDATION_FAILED: 'VALIDATION_FAILED',\n    // Generic Errors (400/500)\n    INVALID_JSON_RESPONSE: 'INVALID_JSON_RESPONSE',\n    UNKNOWN_ERROR: 'UNKNOWN_ERROR',\n    INTERNAL_ERROR: 'INTERNAL_ERROR',\n    // Container Availability Errors (503)\n    CONTAINER_UNAVAILABLE: 'CONTAINER_UNAVAILABLE',\n    // RPC Transport Errors (503) — capnweb WebSocket session-level failures\n    // raised on the SDK side, not by the container. The container went away\n    // mid-call (peer close), the WebSocket failed before/after upgrade, the\n    // peer sent a frame the transport cannot handle, or the session was\n    // disposed while a call was in flight.\n    RPC_TRANSPORT_ERROR: 'RPC_TRANSPORT_ERROR'\n};\n","import { ErrorCode } from './codes';\n/**\n * Maps error codes to HTTP status codes\n * Centralized mapping ensures consistency across SDK\n */\nexport const ERROR_STATUS_MAP = {\n    // 404 Not Found\n    [ErrorCode.FILE_NOT_FOUND]: 404,\n    [ErrorCode.COMMAND_NOT_FOUND]: 404,\n    [ErrorCode.PROCESS_NOT_FOUND]: 404,\n    [ErrorCode.PORT_NOT_EXPOSED]: 404,\n    [ErrorCode.GIT_REPOSITORY_NOT_FOUND]: 404,\n    [ErrorCode.GIT_BRANCH_NOT_FOUND]: 404,\n    [ErrorCode.CONTEXT_NOT_FOUND]: 404,\n    [ErrorCode.WATCH_NOT_FOUND]: 404,\n    // 400 Bad Request\n    [ErrorCode.IS_DIRECTORY]: 400,\n    [ErrorCode.NOT_DIRECTORY]: 400,\n    [ErrorCode.INVALID_COMMAND]: 400,\n    [ErrorCode.INVALID_PORT_NUMBER]: 400,\n    [ErrorCode.INVALID_PORT]: 400,\n    [ErrorCode.INVALID_GIT_URL]: 400,\n    [ErrorCode.CUSTOM_DOMAIN_REQUIRED]: 400,\n    [ErrorCode.INVALID_JSON_RESPONSE]: 400,\n    [ErrorCode.NAME_TOO_LONG]: 400,\n    [ErrorCode.VALIDATION_FAILED]: 400,\n    [ErrorCode.MISSING_CREDENTIALS]: 400,\n    [ErrorCode.INVALID_MOUNT_CONFIG]: 400,\n    // 401 Unauthorized\n    [ErrorCode.GIT_AUTH_FAILED]: 401,\n    // 403 Forbidden\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.COMMAND_PERMISSION_DENIED]: 403,\n    [ErrorCode.PROCESS_PERMISSION_DENIED]: 403,\n    [ErrorCode.READ_ONLY]: 403,\n    // 409 Conflict\n    [ErrorCode.FILE_EXISTS]: 409,\n    [ErrorCode.PORT_ALREADY_EXPOSED]: 409,\n    [ErrorCode.PORT_IN_USE]: 409,\n    [ErrorCode.RESOURCE_BUSY]: 409,\n    [ErrorCode.SESSION_ALREADY_EXISTS]: 409,\n    // 410 Gone\n    [ErrorCode.SESSION_DESTROYED]: 410,\n    [ErrorCode.SESSION_TERMINATED]: 410,\n    // 413 Content Too Large\n    [ErrorCode.FILE_TOO_LARGE]: 413,\n    // 502 Bad Gateway\n    [ErrorCode.SERVICE_NOT_RESPONDING]: 502,\n    [ErrorCode.GIT_NETWORK_ERROR]: 502,\n    // Backup errors\n    [ErrorCode.BACKUP_NOT_FOUND]: 404,\n    [ErrorCode.BACKUP_EXPIRED]: 400,\n    [ErrorCode.INVALID_BACKUP_CONFIG]: 400,\n    [ErrorCode.BACKUP_CREATE_FAILED]: 500,\n    [ErrorCode.BACKUP_RESTORE_FAILED]: 500,\n    // 501 Not Implemented (feature not available in image variant)\n    [ErrorCode.PYTHON_NOT_AVAILABLE]: 501,\n    [ErrorCode.JAVASCRIPT_NOT_AVAILABLE]: 501,\n    // 503 Service Unavailable\n    [ErrorCode.INTERPRETER_NOT_READY]: 503,\n    [ErrorCode.OPENCODE_STARTUP_FAILED]: 503,\n    [ErrorCode.CONTAINER_UNAVAILABLE]: 503,\n    [ErrorCode.RPC_TRANSPORT_ERROR]: 503,\n    // 408 Request Timeout\n    [ErrorCode.PROCESS_READY_TIMEOUT]: 408,\n    // 500 Internal Server Error\n    [ErrorCode.PROCESS_EXITED_BEFORE_READY]: 500,\n    [ErrorCode.NO_SPACE]: 500,\n    [ErrorCode.TOO_MANY_FILES]: 500,\n    [ErrorCode.TOO_MANY_LINKS]: 500,\n    [ErrorCode.FILESYSTEM_ERROR]: 500,\n    [ErrorCode.COMMAND_EXECUTION_ERROR]: 500,\n    [ErrorCode.STREAM_START_ERROR]: 500,\n    [ErrorCode.PROCESS_ERROR]: 500,\n    [ErrorCode.PORT_OPERATION_ERROR]: 500,\n    [ErrorCode.GIT_CLONE_FAILED]: 500,\n    [ErrorCode.GIT_CHECKOUT_FAILED]: 500,\n    [ErrorCode.GIT_OPERATION_FAILED]: 500,\n    [ErrorCode.CODE_EXECUTION_ERROR]: 500,\n    [ErrorCode.BUCKET_MOUNT_ERROR]: 500,\n    [ErrorCode.BUCKET_UNMOUNT_ERROR]: 500,\n    [ErrorCode.S3FS_MOUNT_ERROR]: 500,\n    [ErrorCode.WATCH_START_ERROR]: 500,\n    [ErrorCode.WATCH_STOP_ERROR]: 500,\n    [ErrorCode.UNKNOWN_ERROR]: 500,\n    [ErrorCode.INTERNAL_ERROR]: 500\n};\n/**\n * Get HTTP status code for an error code\n * Falls back to 500 for unknown errors\n */\nexport function getHttpStatus(code) {\n    return ERROR_STATUS_MAP[code] || 500;\n}\n","import { ErrorCode } from './codes';\n/**\n * Get actionable suggestion for an error code\n * Used by handlers when enriching ServiceError → ErrorResponse\n */\nexport function getSuggestion(code, context) {\n    switch (code) {\n        case ErrorCode.FILE_NOT_FOUND:\n            return `Ensure the file exists at ${context.path} before attempting to access it`;\n        case ErrorCode.FILE_EXISTS:\n            return `File already exists at ${context.path}. Use a different path or delete the existing file first`;\n        case ErrorCode.COMMAND_NOT_FOUND:\n            return `Check that \"${context.command}\" is installed and available in the system PATH`;\n        case ErrorCode.PROCESS_NOT_FOUND:\n            return 'Verify the process ID is correct and the process has not already exited';\n        case ErrorCode.PORT_NOT_EXPOSED:\n            return `Port ${context.port} is not currently available for this operation`;\n        case ErrorCode.PORT_ALREADY_EXPOSED:\n            return `Port ${context.port} already has preview URL authorization or activation state`;\n        case ErrorCode.PORT_IN_USE:\n            return `Port ${context.port} is already in use by another service. Choose a different port`;\n        case ErrorCode.SESSION_ALREADY_EXISTS:\n            return `Session \"${context.sessionId}\" already exists. Use a different session ID or reuse the existing session`;\n        case ErrorCode.SESSION_DESTROYED:\n            return `Session \"${context.sessionId}\" was destroyed. Create a new session to continue executing commands`;\n        case ErrorCode.SESSION_TERMINATED:\n            return `Session \"${context.sessionId}\" ended because its shell exited (exit code: ${context.exitCode ?? 'unknown'}). Session-local state (env vars, cwd, shell functions) has been lost. Retry the call to start a fresh session, or call createSession() with the same id to recreate it explicitly`;\n        case ErrorCode.INVALID_PORT:\n            return `Port must be between 1 and 65535. Port ${context.port} is ${context.reason}`;\n        case ErrorCode.GIT_REPOSITORY_NOT_FOUND:\n            return 'Verify the repository URL is correct and accessible';\n        case ErrorCode.GIT_AUTH_FAILED:\n            return 'Check authentication credentials or use a public repository';\n        case ErrorCode.GIT_BRANCH_NOT_FOUND:\n            return `Branch \"${context.branch}\" does not exist in the repository. Check the branch name or use the default branch`;\n        case ErrorCode.INTERPRETER_NOT_READY:\n            return context.retryAfter\n                ? `Code interpreter is starting up. Retry after ${context.retryAfter} seconds`\n                : 'Code interpreter is not ready. Please wait a moment and try again';\n        case ErrorCode.CONTEXT_NOT_FOUND:\n            return `Context \"${context.contextId}\" does not exist. Create a context first using createContext()`;\n        case ErrorCode.VALIDATION_FAILED:\n            return 'Check the request parameters and ensure they match the required format';\n        case ErrorCode.NO_SPACE:\n            return 'Not enough disk space available. Consider cleaning up temporary files or increasing storage';\n        case ErrorCode.PERMISSION_DENIED:\n            return 'Operation not permitted. Check file/directory permissions';\n        case ErrorCode.IS_DIRECTORY:\n            return `Cannot perform this operation on a directory. Path ${context.path} is a directory`;\n        case ErrorCode.NOT_DIRECTORY:\n            return `Expected a directory but found a file at ${context.path}`;\n        case ErrorCode.RESOURCE_BUSY:\n            return 'Resource is currently in use. Wait for the current operation to complete';\n        case ErrorCode.READ_ONLY:\n            return 'Cannot modify a read-only resource';\n        case ErrorCode.SERVICE_NOT_RESPONDING:\n            return 'Service is not responding. Check if the service is running and accessible';\n        case ErrorCode.BACKUP_NOT_FOUND:\n            return `Backup \"${context.backupId}\" does not exist. Verify the backup ID is correct`;\n        case ErrorCode.BACKUP_EXPIRED:\n            return `Backup \"${context.backupId}\" has expired. Create a new backup`;\n        case ErrorCode.INVALID_BACKUP_CONFIG:\n            return `Invalid backup configuration: ${context.reason}`;\n        case ErrorCode.BACKUP_CREATE_FAILED:\n            return 'Backup creation failed. Check that the directory exists and you have sufficient disk space';\n        case ErrorCode.BACKUP_RESTORE_FAILED:\n            return 'Backup restoration failed. The archive may be corrupted or the target directory may be in use';\n        case ErrorCode.CONTAINER_UNAVAILABLE: {\n            const reason = context.reason;\n            switch (reason) {\n                case 'provisioning':\n                    return 'The container is still being provisioned. Retry the operation in a moment.';\n                case 'container_restarted':\n                    return 'The container restarted while the SDK was preparing the default session. Retry the operation to use the new container.';\n                default:\n                    return 'The container is not ready yet. Retry the operation in a moment.';\n            }\n        }\n        case ErrorCode.RPC_TRANSPORT_ERROR: {\n            const kind = context.kind;\n            switch (kind) {\n                case 'peer_closed':\n                    return 'The container closed the WebSocket mid-call (likely a container restart, eviction, or crash). Retry the call — the SDK will open a fresh connection.';\n                case 'connection_failed':\n                    return 'The WebSocket connection failed. Retry the call; if the failure persists, check container health and network connectivity.';\n                case 'upgrade_failed':\n                    return 'The WebSocket upgrade was rejected by the container. Verify the container is running and reachable on the configured port.';\n                case 'invalid_frame':\n                    return 'The container sent a frame the RPC transport cannot handle. This usually indicates a version mismatch between the SDK and the container image.';\n                case 'protocol_error':\n                    return 'The peer sent a malformed RPC message (could not parse the wire format). This usually indicates a version mismatch between the SDK and the container image.';\n                case 'session_disposed':\n                    return 'The RPC session was disposed while a call was in flight. Avoid reusing stubs after disconnect(); the next method call will reconnect automatically.';\n                default:\n                    return 'The RPC transport raised an error. Retry the call — the SDK will open a fresh connection.';\n            }\n        }\n        // Generic fallback for other errors\n        default:\n            return undefined;\n    }\n}\n"],"mappings":";;;;;AAIA,MAAa,YAAY;CAErB,gBAAgB;CAEhB,mBAAmB;CAEnB,aAAa;CAEb,cAAc;CACd,eAAe;CAEf,gBAAgB;CAEhB,UAAU;CACV,gBAAgB;CAChB,eAAe;CACf,WAAW;CACX,eAAe;CACf,gBAAgB;CAChB,kBAAkB;CAElB,mBAAmB;CAEnB,2BAA2B;CAC3B,iBAAiB;CAEjB,yBAAyB;CACzB,oBAAoB;CAEpB,mBAAmB;CAEnB,2BAA2B;CAC3B,eAAe;CAEf,wBAAwB;CAExB,mBAAmB;CACnB,oBAAoB;CAEpB,sBAAsB;CACtB,aAAa;CAEb,kBAAkB;CAElB,qBAAqB;CACrB,cAAc;CAEd,wBAAwB;CACxB,sBAAsB;CAEtB,wBAAwB;CAExB,0BAA0B;CAC1B,sBAAsB;CAEtB,iBAAiB;CAEjB,mBAAmB;CAEnB,iBAAiB;CAEjB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,oBAAoB;CACpB,sBAAsB;CACtB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,sBAAsB;CACtB,uBAAuB;CAEvB,kBAAkB;CAElB,gBAAgB;CAChB,uBAAuB;CAEvB,uBAAuB;CAEvB,mBAAmB;CAEnB,sBAAsB;CAEtB,sBAAsB;CACtB,0BAA0B;CAE1B,yBAAyB;CAEzB,uBAAuB;CACvB,6BAA6B;CAE7B,iBAAiB;CAEjB,mBAAmB;CACnB,kBAAkB;CAElB,mBAAmB;CAEnB,uBAAuB;CACvB,eAAe;CACf,gBAAgB;CAEhB,uBAAuB;CAMvB,qBAAqB;CACxB;;;;;;;;AC9GD,MAAa,mBAAmB;EAE3B,UAAU,iBAAiB;EAC3B,UAAU,oBAAoB;EAC9B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,2BAA2B;EACrC,UAAU,uBAAuB;EACjC,UAAU,oBAAoB;EAC9B,UAAU,kBAAkB;EAE5B,UAAU,eAAe;EACzB,UAAU,gBAAgB;EAC1B,UAAU,kBAAkB;EAC5B,UAAU,sBAAsB;EAChC,UAAU,eAAe;EACzB,UAAU,kBAAkB;EAC5B,UAAU,yBAAyB;EACnC,UAAU,wBAAwB;EAClC,UAAU,gBAAgB;EAC1B,UAAU,oBAAoB;EAC9B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EAEjC,UAAU,kBAAkB;EAE5B,UAAU,oBAAoB;EAC9B,UAAU,4BAA4B;EACtC,UAAU,4BAA4B;EACtC,UAAU,YAAY;EAEtB,UAAU,cAAc;EACxB,UAAU,uBAAuB;EACjC,UAAU,cAAc;EACxB,UAAU,gBAAgB;EAC1B,UAAU,yBAAyB;EAEnC,UAAU,oBAAoB;EAC9B,UAAU,qBAAqB;EAE/B,UAAU,iBAAiB;EAE3B,UAAU,yBAAyB;EACnC,UAAU,oBAAoB;EAE9B,UAAU,mBAAmB;EAC7B,UAAU,iBAAiB;EAC3B,UAAU,wBAAwB;EAClC,UAAU,uBAAuB;EACjC,UAAU,wBAAwB;EAElC,UAAU,uBAAuB;EACjC,UAAU,2BAA2B;EAErC,UAAU,wBAAwB;EAClC,UAAU,0BAA0B;EACpC,UAAU,wBAAwB;EAClC,UAAU,sBAAsB;EAEhC,UAAU,wBAAwB;EAElC,UAAU,8BAA8B;EACxC,UAAU,WAAW;EACrB,UAAU,iBAAiB;EAC3B,UAAU,iBAAiB;EAC3B,UAAU,mBAAmB;EAC7B,UAAU,0BAA0B;EACpC,UAAU,qBAAqB;EAC/B,UAAU,gBAAgB;EAC1B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EACjC,UAAU,uBAAuB;EACjC,UAAU,qBAAqB;EAC/B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,gBAAgB;EAC1B,UAAU,iBAAiB;CAC/B;;;;;AAKD,SAAgB,cAAc,MAAM;AAChC,QAAO,iBAAiB,SAAS;;;;;;;;;ACvFrC,SAAgB,cAAc,MAAM,SAAS;AACzC,SAAQ,MAAR;EACI,KAAK,UAAU,eACX,QAAO,6BAA6B,QAAQ,KAAK;EACrD,KAAK,UAAU,YACX,QAAO,0BAA0B,QAAQ,KAAK;EAClD,KAAK,UAAU,kBACX,QAAO,eAAe,QAAQ,QAAQ;EAC1C,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,qBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,YACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,uBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,mBACX,QAAO,YAAY,QAAQ,UAAU,+CAA+C,QAAQ,YAAY,UAAU;EACtH,KAAK,UAAU,aACX,QAAO,0CAA0C,QAAQ,KAAK,MAAM,QAAQ;EAChF,KAAK,UAAU,yBACX,QAAO;EACX,KAAK,UAAU,gBACX,QAAO;EACX,KAAK,UAAU,qBACX,QAAO,WAAW,QAAQ,OAAO;EACrC,KAAK,UAAU,sBACX,QAAO,QAAQ,aACT,gDAAgD,QAAQ,WAAW,YACnE;EACV,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,SACX,QAAO;EACX,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,aACX,QAAO,sDAAsD,QAAQ,KAAK;EAC9E,KAAK,UAAU,cACX,QAAO,4CAA4C,QAAQ;EAC/D,KAAK,UAAU,cACX,QAAO;EACX,KAAK,UAAU,UACX,QAAO;EACX,KAAK,UAAU,uBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,eACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,sBACX,QAAO,iCAAiC,QAAQ;EACpD,KAAK,UAAU,qBACX,QAAO;EACX,KAAK,UAAU,sBACX,QAAO;EACX,KAAK,UAAU,sBAEX,SADe,QAAQ,QACvB;GACI,KAAK,eACD,QAAO;GACX,KAAK,sBACD,QAAO;GACX,QACI,QAAO;;EAGnB,KAAK,UAAU,oBAEX,SADa,QAAQ,MACrB;GACI,KAAK,cACD,QAAO;GACX,KAAK,oBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,gBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,mBACD,QAAO;GACX,QACI,QAAO;;EAInB,QACI"}
+{"version":3,"file":"errors-BG6NZiPD.js","names":[],"sources":["../../shared/dist/errors/codes.js","../../shared/dist/errors/status-map.js","../../shared/dist/errors/suggestions.js"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport const ErrorCode = {\n    // File System Errors (404)\n    FILE_NOT_FOUND: 'FILE_NOT_FOUND',\n    // Permission Errors (403)\n    PERMISSION_DENIED: 'PERMISSION_DENIED',\n    // File System Errors (409)\n    FILE_EXISTS: 'FILE_EXISTS',\n    // File System Errors (400)\n    IS_DIRECTORY: 'IS_DIRECTORY',\n    NOT_DIRECTORY: 'NOT_DIRECTORY',\n    // File Too Large Errors (413)\n    FILE_TOO_LARGE: 'FILE_TOO_LARGE',\n    // File System Errors (500)\n    NO_SPACE: 'NO_SPACE',\n    TOO_MANY_FILES: 'TOO_MANY_FILES',\n    RESOURCE_BUSY: 'RESOURCE_BUSY',\n    READ_ONLY: 'READ_ONLY',\n    NAME_TOO_LONG: 'NAME_TOO_LONG',\n    TOO_MANY_LINKS: 'TOO_MANY_LINKS',\n    FILESYSTEM_ERROR: 'FILESYSTEM_ERROR',\n    // Command Errors (404)\n    COMMAND_NOT_FOUND: 'COMMAND_NOT_FOUND',\n    // Command Errors (403/400)\n    COMMAND_PERMISSION_DENIED: 'COMMAND_PERMISSION_DENIED',\n    INVALID_COMMAND: 'INVALID_COMMAND',\n    // Command Errors (500)\n    COMMAND_EXECUTION_ERROR: 'COMMAND_EXECUTION_ERROR',\n    STREAM_START_ERROR: 'STREAM_START_ERROR',\n    // Process Errors (404)\n    PROCESS_NOT_FOUND: 'PROCESS_NOT_FOUND',\n    // Process Errors (403/500)\n    PROCESS_PERMISSION_DENIED: 'PROCESS_PERMISSION_DENIED',\n    PROCESS_ERROR: 'PROCESS_ERROR',\n    // Session Errors (409)\n    SESSION_ALREADY_EXISTS: 'SESSION_ALREADY_EXISTS',\n    // Session Errors (410)\n    SESSION_DESTROYED: 'SESSION_DESTROYED',\n    SESSION_TERMINATED: 'SESSION_TERMINATED',\n    // Port Errors (409)\n    PORT_ALREADY_EXPOSED: 'PORT_ALREADY_EXPOSED',\n    PORT_IN_USE: 'PORT_IN_USE',\n    // Port Errors (404)\n    PORT_NOT_EXPOSED: 'PORT_NOT_EXPOSED',\n    // Port Errors (400)\n    INVALID_PORT_NUMBER: 'INVALID_PORT_NUMBER',\n    INVALID_PORT: 'INVALID_PORT',\n    // Port Errors (502/500)\n    SERVICE_NOT_RESPONDING: 'SERVICE_NOT_RESPONDING',\n    PORT_OPERATION_ERROR: 'PORT_OPERATION_ERROR',\n    // Port Errors (400)\n    CUSTOM_DOMAIN_REQUIRED: 'CUSTOM_DOMAIN_REQUIRED',\n    // Git Errors (404)\n    GIT_REPOSITORY_NOT_FOUND: 'GIT_REPOSITORY_NOT_FOUND',\n    GIT_BRANCH_NOT_FOUND: 'GIT_BRANCH_NOT_FOUND',\n    // Git Errors (401)\n    GIT_AUTH_FAILED: 'GIT_AUTH_FAILED',\n    // Git Errors (502)\n    GIT_NETWORK_ERROR: 'GIT_NETWORK_ERROR',\n    // Git Errors (400)\n    INVALID_GIT_URL: 'INVALID_GIT_URL',\n    // Git Errors (500)\n    GIT_CLONE_FAILED: 'GIT_CLONE_FAILED',\n    GIT_CHECKOUT_FAILED: 'GIT_CHECKOUT_FAILED',\n    GIT_OPERATION_FAILED: 'GIT_OPERATION_FAILED',\n    // Bucket mounting errors\n    BUCKET_MOUNT_ERROR: 'BUCKET_MOUNT_ERROR',\n    BUCKET_UNMOUNT_ERROR: 'BUCKET_UNMOUNT_ERROR',\n    S3FS_MOUNT_ERROR: 'S3FS_MOUNT_ERROR',\n    MISSING_CREDENTIALS: 'MISSING_CREDENTIALS',\n    INVALID_MOUNT_CONFIG: 'INVALID_MOUNT_CONFIG',\n    // Backup Errors (500)\n    BACKUP_CREATE_FAILED: 'BACKUP_CREATE_FAILED',\n    BACKUP_RESTORE_FAILED: 'BACKUP_RESTORE_FAILED',\n    // Backup Errors (404)\n    BACKUP_NOT_FOUND: 'BACKUP_NOT_FOUND',\n    // Backup Errors (400)\n    BACKUP_EXPIRED: 'BACKUP_EXPIRED',\n    INVALID_BACKUP_CONFIG: 'INVALID_BACKUP_CONFIG',\n    // Code Interpreter Errors (503)\n    INTERPRETER_NOT_READY: 'INTERPRETER_NOT_READY',\n    // Code Interpreter Errors (404)\n    CONTEXT_NOT_FOUND: 'CONTEXT_NOT_FOUND',\n    // Code Interpreter Errors (500)\n    CODE_EXECUTION_ERROR: 'CODE_EXECUTION_ERROR',\n    // Code Interpreter Errors (501) - Feature not available in image variant\n    PYTHON_NOT_AVAILABLE: 'PYTHON_NOT_AVAILABLE',\n    JAVASCRIPT_NOT_AVAILABLE: 'JAVASCRIPT_NOT_AVAILABLE',\n    // OpenCode Errors (503)\n    OPENCODE_STARTUP_FAILED: 'OPENCODE_STARTUP_FAILED',\n    // Process Readiness Errors (408/500)\n    PROCESS_READY_TIMEOUT: 'PROCESS_READY_TIMEOUT',\n    PROCESS_EXITED_BEFORE_READY: 'PROCESS_EXITED_BEFORE_READY',\n    // File Watch Errors (404)\n    WATCH_NOT_FOUND: 'WATCH_NOT_FOUND',\n    // File Watch Errors (500)\n    WATCH_START_ERROR: 'WATCH_START_ERROR',\n    WATCH_STOP_ERROR: 'WATCH_STOP_ERROR',\n    // Validation Errors (400)\n    VALIDATION_FAILED: 'VALIDATION_FAILED',\n    // Generic Errors (400/500)\n    INVALID_JSON_RESPONSE: 'INVALID_JSON_RESPONSE',\n    UNKNOWN_ERROR: 'UNKNOWN_ERROR',\n    INTERNAL_ERROR: 'INTERNAL_ERROR',\n    // Container Availability Errors (503)\n    CONTAINER_UNAVAILABLE: 'CONTAINER_UNAVAILABLE',\n    // RPC Transport Errors (503) — capnweb WebSocket session-level failures\n    // raised on the SDK side, not by the container. The container went away\n    // mid-call (peer close), the WebSocket failed before/after upgrade, the\n    // peer sent a frame the transport cannot handle, or the session was\n    // disposed while a call was in flight.\n    RPC_TRANSPORT_ERROR: 'RPC_TRANSPORT_ERROR'\n};\n","import { ErrorCode } from './codes';\n/**\n * Maps error codes to HTTP status codes\n * Centralized mapping ensures consistency across SDK\n */\nexport const ERROR_STATUS_MAP = {\n    // 404 Not Found\n    [ErrorCode.FILE_NOT_FOUND]: 404,\n    [ErrorCode.COMMAND_NOT_FOUND]: 404,\n    [ErrorCode.PROCESS_NOT_FOUND]: 404,\n    [ErrorCode.PORT_NOT_EXPOSED]: 404,\n    [ErrorCode.GIT_REPOSITORY_NOT_FOUND]: 404,\n    [ErrorCode.GIT_BRANCH_NOT_FOUND]: 404,\n    [ErrorCode.CONTEXT_NOT_FOUND]: 404,\n    [ErrorCode.WATCH_NOT_FOUND]: 404,\n    // 400 Bad Request\n    [ErrorCode.IS_DIRECTORY]: 400,\n    [ErrorCode.NOT_DIRECTORY]: 400,\n    [ErrorCode.INVALID_COMMAND]: 400,\n    [ErrorCode.INVALID_PORT_NUMBER]: 400,\n    [ErrorCode.INVALID_PORT]: 400,\n    [ErrorCode.INVALID_GIT_URL]: 400,\n    [ErrorCode.CUSTOM_DOMAIN_REQUIRED]: 400,\n    [ErrorCode.INVALID_JSON_RESPONSE]: 400,\n    [ErrorCode.NAME_TOO_LONG]: 400,\n    [ErrorCode.VALIDATION_FAILED]: 400,\n    [ErrorCode.MISSING_CREDENTIALS]: 400,\n    [ErrorCode.INVALID_MOUNT_CONFIG]: 400,\n    // 401 Unauthorized\n    [ErrorCode.GIT_AUTH_FAILED]: 401,\n    // 403 Forbidden\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.COMMAND_PERMISSION_DENIED]: 403,\n    [ErrorCode.PROCESS_PERMISSION_DENIED]: 403,\n    [ErrorCode.READ_ONLY]: 403,\n    // 409 Conflict\n    [ErrorCode.FILE_EXISTS]: 409,\n    [ErrorCode.PORT_ALREADY_EXPOSED]: 409,\n    [ErrorCode.PORT_IN_USE]: 409,\n    [ErrorCode.RESOURCE_BUSY]: 409,\n    [ErrorCode.SESSION_ALREADY_EXISTS]: 409,\n    // 410 Gone\n    [ErrorCode.SESSION_DESTROYED]: 410,\n    [ErrorCode.SESSION_TERMINATED]: 410,\n    // 413 Content Too Large\n    [ErrorCode.FILE_TOO_LARGE]: 413,\n    // 502 Bad Gateway\n    [ErrorCode.SERVICE_NOT_RESPONDING]: 502,\n    [ErrorCode.GIT_NETWORK_ERROR]: 502,\n    // Backup errors\n    [ErrorCode.BACKUP_NOT_FOUND]: 404,\n    [ErrorCode.BACKUP_EXPIRED]: 400,\n    [ErrorCode.INVALID_BACKUP_CONFIG]: 400,\n    [ErrorCode.BACKUP_CREATE_FAILED]: 500,\n    [ErrorCode.BACKUP_RESTORE_FAILED]: 500,\n    // 501 Not Implemented (feature not available in image variant)\n    [ErrorCode.PYTHON_NOT_AVAILABLE]: 501,\n    [ErrorCode.JAVASCRIPT_NOT_AVAILABLE]: 501,\n    // 503 Service Unavailable\n    [ErrorCode.INTERPRETER_NOT_READY]: 503,\n    [ErrorCode.OPENCODE_STARTUP_FAILED]: 503,\n    [ErrorCode.CONTAINER_UNAVAILABLE]: 503,\n    [ErrorCode.RPC_TRANSPORT_ERROR]: 503,\n    // 408 Request Timeout\n    [ErrorCode.PROCESS_READY_TIMEOUT]: 408,\n    // 500 Internal Server Error\n    [ErrorCode.PROCESS_EXITED_BEFORE_READY]: 500,\n    [ErrorCode.NO_SPACE]: 500,\n    [ErrorCode.TOO_MANY_FILES]: 500,\n    [ErrorCode.TOO_MANY_LINKS]: 500,\n    [ErrorCode.FILESYSTEM_ERROR]: 500,\n    [ErrorCode.COMMAND_EXECUTION_ERROR]: 500,\n    [ErrorCode.STREAM_START_ERROR]: 500,\n    [ErrorCode.PROCESS_ERROR]: 500,\n    [ErrorCode.PORT_OPERATION_ERROR]: 500,\n    [ErrorCode.GIT_CLONE_FAILED]: 500,\n    [ErrorCode.GIT_CHECKOUT_FAILED]: 500,\n    [ErrorCode.GIT_OPERATION_FAILED]: 500,\n    [ErrorCode.CODE_EXECUTION_ERROR]: 500,\n    [ErrorCode.BUCKET_MOUNT_ERROR]: 500,\n    [ErrorCode.BUCKET_UNMOUNT_ERROR]: 500,\n    [ErrorCode.S3FS_MOUNT_ERROR]: 500,\n    [ErrorCode.WATCH_START_ERROR]: 500,\n    [ErrorCode.WATCH_STOP_ERROR]: 500,\n    [ErrorCode.UNKNOWN_ERROR]: 500,\n    [ErrorCode.INTERNAL_ERROR]: 500\n};\n/**\n * Get HTTP status code for an error code\n * Falls back to 500 for unknown errors\n */\nexport function getHttpStatus(code) {\n    return ERROR_STATUS_MAP[code] || 500;\n}\n","import { ErrorCode } from './codes';\n/**\n * Get actionable suggestion for an error code\n * Used by handlers when enriching ServiceError → ErrorResponse\n */\nexport function getSuggestion(code, context) {\n    switch (code) {\n        case ErrorCode.FILE_NOT_FOUND:\n            return `Ensure the file exists at ${context.path} before attempting to access it`;\n        case ErrorCode.FILE_EXISTS:\n            return `File already exists at ${context.path}. Use a different path or delete the existing file first`;\n        case ErrorCode.COMMAND_NOT_FOUND:\n            return `Check that \"${context.command}\" is installed and available in the system PATH`;\n        case ErrorCode.PROCESS_NOT_FOUND:\n            return 'Verify the process ID is correct and the process has not already exited';\n        case ErrorCode.PORT_NOT_EXPOSED:\n            return `Port ${context.port} is not currently available for this operation`;\n        case ErrorCode.PORT_ALREADY_EXPOSED:\n            return `Port ${context.port} already has preview URL authorization or activation state`;\n        case ErrorCode.PORT_IN_USE:\n            return `Port ${context.port} is already in use by another service. Choose a different port`;\n        case ErrorCode.SESSION_ALREADY_EXISTS:\n            return `Session \"${context.sessionId}\" already exists. Use a different session ID or reuse the existing session`;\n        case ErrorCode.SESSION_DESTROYED:\n            return `Session \"${context.sessionId}\" was destroyed. Create a new session to continue executing commands`;\n        case ErrorCode.SESSION_TERMINATED:\n            return `Session \"${context.sessionId}\" ended because its shell exited (exit code: ${context.exitCode ?? 'unknown'}). Session-local state (env vars, cwd, shell functions) has been lost. Retry the call to start a fresh session, or call createSession() with the same id to recreate it explicitly`;\n        case ErrorCode.INVALID_PORT:\n            return `Port must be between 1 and 65535. Port ${context.port} is ${context.reason}`;\n        case ErrorCode.GIT_REPOSITORY_NOT_FOUND:\n            return 'Verify the repository URL is correct and accessible';\n        case ErrorCode.GIT_AUTH_FAILED:\n            return 'Check authentication credentials or use a public repository';\n        case ErrorCode.GIT_BRANCH_NOT_FOUND:\n            return `Branch \"${context.branch}\" does not exist in the repository. Check the branch name or use the default branch`;\n        case ErrorCode.INTERPRETER_NOT_READY:\n            return context.retryAfter\n                ? `Code interpreter is starting up. Retry after ${context.retryAfter} seconds`\n                : 'Code interpreter is not ready. Please wait a moment and try again';\n        case ErrorCode.CONTEXT_NOT_FOUND:\n            return `Context \"${context.contextId}\" does not exist. Create a context first using createContext()`;\n        case ErrorCode.VALIDATION_FAILED:\n            return 'Check the request parameters and ensure they match the required format';\n        case ErrorCode.NO_SPACE:\n            return 'Not enough disk space available. Consider cleaning up temporary files or increasing storage';\n        case ErrorCode.PERMISSION_DENIED:\n            return 'Operation not permitted. Check file/directory permissions';\n        case ErrorCode.IS_DIRECTORY:\n            return `Cannot perform this operation on a directory. Path ${context.path} is a directory`;\n        case ErrorCode.NOT_DIRECTORY:\n            return `Expected a directory but found a file at ${context.path}`;\n        case ErrorCode.RESOURCE_BUSY:\n            return 'Resource is currently in use. Wait for the current operation to complete';\n        case ErrorCode.READ_ONLY:\n            return 'Cannot modify a read-only resource';\n        case ErrorCode.SERVICE_NOT_RESPONDING:\n            return 'Service is not responding. Check if the service is running and accessible';\n        case ErrorCode.BACKUP_NOT_FOUND:\n            return `Backup \"${context.backupId}\" does not exist. Verify the backup ID is correct`;\n        case ErrorCode.BACKUP_EXPIRED:\n            return `Backup \"${context.backupId}\" has expired. Create a new backup`;\n        case ErrorCode.INVALID_BACKUP_CONFIG:\n            return `Invalid backup configuration: ${context.reason}`;\n        case ErrorCode.BACKUP_CREATE_FAILED:\n            return 'Backup creation failed. Check that the directory exists and you have sufficient disk space';\n        case ErrorCode.BACKUP_RESTORE_FAILED:\n            return 'Backup restoration failed. The archive may be corrupted or the target directory may be in use';\n        case ErrorCode.CONTAINER_UNAVAILABLE: {\n            const reason = context.reason;\n            switch (reason) {\n                case 'provisioning':\n                    return 'The container is still being provisioned. Retry the operation in a moment.';\n                case 'container_restarted':\n                    return 'The container restarted while the SDK was preparing the default session. Retry the operation to use the new container.';\n                default:\n                    return 'The container is not ready yet. Retry the operation in a moment.';\n            }\n        }\n        case ErrorCode.RPC_TRANSPORT_ERROR: {\n            const kind = context.kind;\n            switch (kind) {\n                case 'peer_closed':\n                    return 'The container closed the WebSocket mid-call (likely a container restart, eviction, or crash). Retry the call — the SDK will open a fresh connection.';\n                case 'connection_failed':\n                    return 'The WebSocket connection failed. Retry the call; if the failure persists, check container health and network connectivity.';\n                case 'upgrade_failed':\n                    return 'The WebSocket upgrade was rejected by the container. Verify the container is running and reachable on the configured port.';\n                case 'invalid_frame':\n                    return 'The container sent a frame the RPC transport cannot handle. This usually indicates a version mismatch between the SDK and the container image.';\n                case 'protocol_error':\n                    return 'The peer sent a malformed RPC message (could not parse the wire format). This usually indicates a version mismatch between the SDK and the container image.';\n                case 'session_disposed':\n                    return 'The RPC session was disposed while a call was in flight. Avoid reusing stubs after disconnect(); the next method call will reconnect automatically.';\n                default:\n                    return 'The RPC transport raised an error. Retry the call — the SDK will open a fresh connection.';\n            }\n        }\n        // Generic fallback for other errors\n        default:\n            return undefined;\n    }\n}\n"],"mappings":";;;;;AAIA,MAAa,YAAY;CAErB,gBAAgB;CAEhB,mBAAmB;CAEnB,aAAa;CAEb,cAAc;CACd,eAAe;CAEf,gBAAgB;CAEhB,UAAU;CACV,gBAAgB;CAChB,eAAe;CACf,WAAW;CACX,eAAe;CACf,gBAAgB;CAChB,kBAAkB;CAElB,mBAAmB;CAEnB,2BAA2B;CAC3B,iBAAiB;CAEjB,yBAAyB;CACzB,oBAAoB;CAEpB,mBAAmB;CAEnB,2BAA2B;CAC3B,eAAe;CAEf,wBAAwB;CAExB,mBAAmB;CACnB,oBAAoB;CAEpB,sBAAsB;CACtB,aAAa;CAEb,kBAAkB;CAElB,qBAAqB;CACrB,cAAc;CAEd,wBAAwB;CACxB,sBAAsB;CAEtB,wBAAwB;CAExB,0BAA0B;CAC1B,sBAAsB;CAEtB,iBAAiB;CAEjB,mBAAmB;CAEnB,iBAAiB;CAEjB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,oBAAoB;CACpB,sBAAsB;CACtB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,sBAAsB;CACtB,uBAAuB;CAEvB,kBAAkB;CAElB,gBAAgB;CAChB,uBAAuB;CAEvB,uBAAuB;CAEvB,mBAAmB;CAEnB,sBAAsB;CAEtB,sBAAsB;CACtB,0BAA0B;CAE1B,yBAAyB;CAEzB,uBAAuB;CACvB,6BAA6B;CAE7B,iBAAiB;CAEjB,mBAAmB;CACnB,kBAAkB;CAElB,mBAAmB;CAEnB,uBAAuB;CACvB,eAAe;CACf,gBAAgB;CAEhB,uBAAuB;CAMvB,qBAAqB;CACxB;;;;;;;;AC9GD,MAAa,mBAAmB;EAE3B,UAAU,iBAAiB;EAC3B,UAAU,oBAAoB;EAC9B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,2BAA2B;EACrC,UAAU,uBAAuB;EACjC,UAAU,oBAAoB;EAC9B,UAAU,kBAAkB;EAE5B,UAAU,eAAe;EACzB,UAAU,gBAAgB;EAC1B,UAAU,kBAAkB;EAC5B,UAAU,sBAAsB;EAChC,UAAU,eAAe;EACzB,UAAU,kBAAkB;EAC5B,UAAU,yBAAyB;EACnC,UAAU,wBAAwB;EAClC,UAAU,gBAAgB;EAC1B,UAAU,oBAAoB;EAC9B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EAEjC,UAAU,kBAAkB;EAE5B,UAAU,oBAAoB;EAC9B,UAAU,4BAA4B;EACtC,UAAU,4BAA4B;EACtC,UAAU,YAAY;EAEtB,UAAU,cAAc;EACxB,UAAU,uBAAuB;EACjC,UAAU,cAAc;EACxB,UAAU,gBAAgB;EAC1B,UAAU,yBAAyB;EAEnC,UAAU,oBAAoB;EAC9B,UAAU,qBAAqB;EAE/B,UAAU,iBAAiB;EAE3B,UAAU,yBAAyB;EACnC,UAAU,oBAAoB;EAE9B,UAAU,mBAAmB;EAC7B,UAAU,iBAAiB;EAC3B,UAAU,wBAAwB;EAClC,UAAU,uBAAuB;EACjC,UAAU,wBAAwB;EAElC,UAAU,uBAAuB;EACjC,UAAU,2BAA2B;EAErC,UAAU,wBAAwB;EAClC,UAAU,0BAA0B;EACpC,UAAU,wBAAwB;EAClC,UAAU,sBAAsB;EAEhC,UAAU,wBAAwB;EAElC,UAAU,8BAA8B;EACxC,UAAU,WAAW;EACrB,UAAU,iBAAiB;EAC3B,UAAU,iBAAiB;EAC3B,UAAU,mBAAmB;EAC7B,UAAU,0BAA0B;EACpC,UAAU,qBAAqB;EAC/B,UAAU,gBAAgB;EAC1B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EACjC,UAAU,uBAAuB;EACjC,UAAU,qBAAqB;EAC/B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,gBAAgB;EAC1B,UAAU,iBAAiB;CAC/B;;;;;AAKD,SAAgB,cAAc,MAAM;AAChC,QAAO,iBAAiB,SAAS;;;;;;;;;ACvFrC,SAAgB,cAAc,MAAM,SAAS;AACzC,SAAQ,MAAR;EACI,KAAK,UAAU,eACX,QAAO,6BAA6B,QAAQ,KAAK;EACrD,KAAK,UAAU,YACX,QAAO,0BAA0B,QAAQ,KAAK;EAClD,KAAK,UAAU,kBACX,QAAO,eAAe,QAAQ,QAAQ;EAC1C,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,qBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,YACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,uBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,mBACX,QAAO,YAAY,QAAQ,UAAU,+CAA+C,QAAQ,YAAY,UAAU;EACtH,KAAK,UAAU,aACX,QAAO,0CAA0C,QAAQ,KAAK,MAAM,QAAQ;EAChF,KAAK,UAAU,yBACX,QAAO;EACX,KAAK,UAAU,gBACX,QAAO;EACX,KAAK,UAAU,qBACX,QAAO,WAAW,QAAQ,OAAO;EACrC,KAAK,UAAU,sBACX,QAAO,QAAQ,aACT,gDAAgD,QAAQ,WAAW,YACnE;EACV,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,SACX,QAAO;EACX,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,aACX,QAAO,sDAAsD,QAAQ,KAAK;EAC9E,KAAK,UAAU,cACX,QAAO,4CAA4C,QAAQ;EAC/D,KAAK,UAAU,cACX,QAAO;EACX,KAAK,UAAU,UACX,QAAO;EACX,KAAK,UAAU,uBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,eACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,sBACX,QAAO,iCAAiC,QAAQ;EACpD,KAAK,UAAU,qBACX,QAAO;EACX,KAAK,UAAU,sBACX,QAAO;EACX,KAAK,UAAU,sBAEX,SADe,QAAQ,QACvB;GACI,KAAK,eACD,QAAO;GACX,KAAK,sBACD,QAAO;GACX,QACI,QAAO;;EAGnB,KAAK,UAAU,oBAEX,SADa,QAAQ,MACrB;GACI,KAAK,cACD,QAAO;GACX,KAAK,oBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,gBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,mBACD,QAAO;GACX,QACI,QAAO;;EAInB,QACI"}

package/dist/extensions/index.d.ts

@@ -0,0 +1,74 @@
+import { a as SandboxAPI, n as ExtensionPackage, t as ExtensionHealth } from "../rpc-types-PBUY-xXM.js";
+import { RpcTarget } from "cloudflare:workers";
+
+//#region src/extensions/index.d.ts
+
+/**
+ * The slice of the Sandbox an extension captures: just its control `client`.
+ * Narrow on purpose \u2014 an extension never holds the whole instance.
+ */
+type SandboxLike = {
+  readonly client: SandboxAPI;
+};
+/**
+ * The one base class for *every* extension.
+ *
+ * - SDK-only: just drives existing sub-APIs.
+ * - Sidecar: pass an {@link ExtensionPackage} to `super(sandbox, pkg)` and
+ *   call `this.sidecar<T>()` to get a typed capnweb stub of the sidecar.
+ *
+ * The sidecar accessor throws a clear error if no package was supplied, so an
+ * extension only "becomes" a sidecar extension when it opts in.
+ *
+ * ```ts
+ * // SDK-only
+ * class Git extends SandboxExtension {
+ *   constructor(s: SandboxLike) { super(s); }
+ *   status(sid: string) { return this.client.commands.execute('git status', sid); }
+ * }
+ *
+ * // Sidecar
+ * import sidecarTarballBytes from './sidecar-package.tgz';
+ * import type { MyAPI } from './shared';
+ *
+ * class MyExt extends SandboxExtension {
+ *   constructor(s: SandboxLike) { super(s, { tarball: new Uint8Array(sidecarTarballBytes) }); }
+ *   async run(input: string): Promise<string> {
+ *     const api = await this.sidecar<MyAPI>();
+ *     return api.run(input);
+ *   }
+ * }
+ * ```
+ *
+ * RPC-safety: the sandbox lives in `#sandbox` and is reached only through the
+ * `protected` `client` getter (a prototype accessor, not an own property),
+ * so it is never serialised across RPC. Only the public methods you add form
+ * the extension's RPC surface.
+ */
+declare abstract class SandboxExtension extends RpcTarget {
+  #private;
+  protected constructor(sandbox: SandboxLike, pkg?: ExtensionPackage);
+  /** The container control client. Use inside your own methods, lazily. */
+  protected get client(): SandboxAPI;
+  /**
+   * Return the sidecar's capnweb remote main, provisioning + spawning on
+   * demand. `T` is the typed interface the sidecar exposes (its
+   * `SandboxSidecar` subclass shape). Each call reconnects through the host
+   * so a crashed sidecar can be restarted transparently on the next use.
+   *
+   * Streaming is just a method that takes a callback parameter: capnweb
+   * stubs the callback and routes invocations back through the SDK\u2192container
+   * \u2192sidecar hops.
+   */
+  protected sidecar<T extends object>(): Promise<T>;
+  /** Health snapshot for this extension's sidecar. */
+  protected sidecarHealth(): Promise<ExtensionHealth>;
+  /**
+   * Stop this extension's sidecar. The next `sidecar()` call will respawn on
+   * demand.
+   */
+  protected stopSidecar(): Promise<void>;
+}
+//#endregion
+export { type ExtensionHealth, type ExtensionPackage, SandboxExtension, SandboxLike };
+//# sourceMappingURL=index.d.ts.map

package/dist/extensions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/extensions/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;KAoCY,WAAA;mBACO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uBAsCG,gBAAA,SAAyB,SAAA;;iCAKd,mBAAmB;;0BAO1B;;;;;;;;;;;yCAce,QAAQ;;6BAQd,QAAQ;;;;;2BASV"}

package/dist/extensions/index.js

@@ -0,0 +1,153 @@
+import { o as EXTENSION_TARBALL_REQUIRED } from "../dist-DF8sudAg.js";
+import { RpcTarget } from "cloudflare:workers";
+
+//#region src/extensions/index.ts
+/**
+* Unified extension surface for the Cloudflare Sandbox SDK.
+*
+* Every extension \u2014 whether it just drives existing control sub-APIs or
+* ships its own container sidecar \u2014 shares one shape: a class extending
+* {@link SandboxExtension}, captured lazily via a `withX(this)` factory.
+*
+* - No sidecar? Extend {@link SandboxExtension} and use `this.client.<subApi>`
+*   (`commands`, `files`, `git`, `interpreter`, \u2026). Don't pass a package.
+* - Need a container sidecar? Pass an {@link ExtensionPackage} to `super()`.
+*   Then call {@link SandboxExtension.sidecar} to obtain the sidecar's typed
+*   capnweb remote main. Calls on that stub stream through capnweb \u2014 callback
+*   parameters round-trip across both the DO\u2192container and container\u2192sidecar
+*   hops.
+*
+* `ExtensionPackage` carries tarball bytes produced by an extension build.
+* The SDK sends those bytes only when the container has not provisioned the
+* package hash yet.
+*/
+/**
+* The one base class for *every* extension.
+*
+* - SDK-only: just drives existing sub-APIs.
+* - Sidecar: pass an {@link ExtensionPackage} to `super(sandbox, pkg)` and
+*   call `this.sidecar<T>()` to get a typed capnweb stub of the sidecar.
+*
+* The sidecar accessor throws a clear error if no package was supplied, so an
+* extension only "becomes" a sidecar extension when it opts in.
+*
+* ```ts
+* // SDK-only
+* class Git extends SandboxExtension {
+*   constructor(s: SandboxLike) { super(s); }
+*   status(sid: string) { return this.client.commands.execute('git status', sid); }
+* }
+*
+* // Sidecar
+* import sidecarTarballBytes from './sidecar-package.tgz';
+* import type { MyAPI } from './shared';
+*
+* class MyExt extends SandboxExtension {
+*   constructor(s: SandboxLike) { super(s, { tarball: new Uint8Array(sidecarTarballBytes) }); }
+*   async run(input: string): Promise<string> {
+*     const api = await this.sidecar<MyAPI>();
+*     return api.run(input);
+*   }
+* }
+* ```
+*
+* RPC-safety: the sandbox lives in `#sandbox` and is reached only through the
+* `protected` `client` getter (a prototype accessor, not an own property),
+* so it is never serialised across RPC. Only the public methods you add form
+* the extension's RPC surface.
+*/
+var SandboxExtension = class extends RpcTarget {
+	#sandbox;
+	#pkg;
+	#hashPromise;
+	constructor(sandbox, pkg) {
+		super();
+		this.#sandbox = sandbox;
+		this.#pkg = pkg;
+	}
+	/** The container control client. Use inside your own methods, lazily. */
+	get client() {
+		return this.#sandbox.client;
+	}
+	/**
+	* Return the sidecar's capnweb remote main, provisioning + spawning on
+	* demand. `T` is the typed interface the sidecar exposes (its
+	* `SandboxSidecar` subclass shape). Each call reconnects through the host
+	* so a crashed sidecar can be restarted transparently on the next use.
+	*
+	* Streaming is just a method that takes a callback parameter: capnweb
+	* stubs the callback and routes invocations back through the SDK\u2192container
+	* \u2192sidecar hops.
+	*/
+	sidecar() {
+		return (async () => this.#connect(this.#requirePackage()))();
+	}
+	/** Health snapshot for this extension's sidecar. */
+	async sidecarHealth() {
+		const hash = await this.#hashOnce();
+		return this.#sandbox.client.extensions.health(hash);
+	}
+	/**
+	* Stop this extension's sidecar. The next `sidecar()` call will respawn on
+	* demand.
+	*/
+	async stopSidecar() {
+		const hash = await this.#hashOnce();
+		await this.#sandbox.client.extensions.stop(hash);
+	}
+	async #connect(pkg) {
+		const packageHash = await this.#hashOnce();
+		const api = this.#sandbox.client.extensions;
+		try {
+			return await api.connect({
+				packageHash,
+				bin: pkg.bin,
+				readinessTimeoutMs: pkg.readinessTimeoutMs,
+				allowInstallScripts: pkg.allowInstallScripts
+			});
+		} catch (error) {
+			if (!isTarballRequiredError(error)) throw error;
+			return await api.connect({
+				packageHash,
+				tarball: pkg.tarball,
+				bin: pkg.bin,
+				readinessTimeoutMs: pkg.readinessTimeoutMs,
+				allowInstallScripts: pkg.allowInstallScripts
+			});
+		}
+	}
+	#hashOnce() {
+		const pkg = this.#requirePackage();
+		this.#hashPromise ??= sha256Hex(pkg.tarball);
+		return this.#hashPromise;
+	}
+	#requirePackage() {
+		if (!this.#pkg) throw new Error("This extension has no sidecar package. Pass one to `super(sandbox, pkg)` to use sidecar/sidecarHealth/stopSidecar.");
+		return this.#pkg;
+	}
+};
+/**
+* Recognise the host's `ExtensionTarballRequired` error across the capnweb
+* boundary. capnweb preserves `Error.name`, so the wire-safe contract is the
+* string constant `EXTENSION_TARBALL_REQUIRED`.
+*/
+function isTarballRequiredError(error) {
+	if (typeof error !== "object" || error === null) return false;
+	return error.name === EXTENSION_TARBALL_REQUIRED;
+}
+/**
+* Hex sha256 of a tarball via Web Crypto, which is available in workerd and
+* every modern runtime. Avoids a Node-only path so this module stays
+* Worker-bundle-safe.
+*/
+async function sha256Hex(bytes) {
+	const digest = await crypto.subtle.digest("SHA-256", bytes);
+	const view = new Uint8Array(digest);
+	let hex = "";
+	for (const byte of view) hex += byte.toString(16).padStart(2, "0");
+	return hex;
+}
+
+//#endregion
+export { SandboxExtension };
+//# sourceMappingURL=index.js.map