@cloudflare/sandbox 0.13.0-next.769.1 → 1.0.0-rc.0

package/package.json

@@ -1,129 +1,28 @@
 {
   "name": "@cloudflare/sandbox",
-  "version": "0.13.0-next.769.1",
+  "version": "1.0.0-rc.0",
+  "description": "Structured workspace file operations for Cloudflare sandboxes",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "https://github.com/cloudflare/sandbox-sdk"
-  },
-  "description": "A sandboxed environment for running commands",
-  "type": "module",
-  "dependencies": {
-    "@cloudflare/containers": "^0.3.7",
-    "aws4fetch": "^1.0.20",
-    "capnweb": "^0.8.0",
-    "hono": "^4.12.26"
-  },
-  "devDependencies": {
-    "@openai/agents": "^0.3.3",
-    "@opencode-ai/sdk": "^1.1.40",
-    "@repo/shared": "^0.0.0",
-    "@types/acorn": "^4.0.6",
-    "@types/bun": "^1.3.14",
-    "@types/tar-stream": "^3.1.4",
-    "@xterm/xterm": "^6.0.0",
-    "acorn": "^8.14.0",
-    "async-mutex": "^0.5.0",
-    "tar-stream": "^3.2.0",
-    "wrangler": "^4.102.0"
-  },
-  "peerDependencies": {
-    "@openai/agents": "^0.3.3",
-    "@opencode-ai/sdk": "^1.1.40",
-    "@xterm/xterm": ">=5.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@openai/agents": {
-      "optional": true
-    },
-    "@opencode-ai/sdk": {
-      "optional": true
-    },
-    "@xterm/xterm": {
-      "optional": true
-    }
+    "url": "git+https://github.com/cloudflare/sandbox-sdk.git"
   },
-  "tags": [
-    "sandbox",
-    "codegen",
-    "containers",
-    "cloudflare",
-    "durable objects"
+  "files": [
+    "dist"
   ],
-  "scripts": {
-    "build": "rm -rf dist && npm run build:sidecar && tsdown --config tsdown.config.ts",
-    "build:sidecar": "bun run ../../extensions/interpreter/build.ts",
-    "check": "biome check && npm run typecheck",
-    "fix": "biome check --fix && npm run typecheck",
-    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.sidecar.json",
-    "docker:local": "scripts/docker-local.sh",
-    "test": "vitest run --config vitest.config.ts \"$@\"",
-    "test:harness": "vitest run --config vitest.harness.config.ts \"$@\"",
-    "test:sidecar": "bun test ../../extensions/interpreter/src/sidecar",
-    "test:e2e": "npm run test:e2e:vitest && npm run test:e2e:browser",
-    "test:e2e:vitest": "cd ../../tests/e2e/test-worker && ./generate-config.sh && cd ../../.. && vitest run --config vitest.e2e.config.ts \"$@\"",
-    "test:e2e:browser": "cd ../../tests/e2e/test-worker && ./generate-config.sh && cd ../../.. && npx playwright install chromium && playwright test --config tests/e2e/browser/playwright.config.ts",
-    "test:perf": "cd ../.. && vitest run --config vitest.perf.config.ts \"$@\""
-  },
+  "type": "module",
+  "sideEffects": false,
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.js"
-    },
-    "./extensions": {
-      "types": "./dist/extensions/index.d.ts",
-      "import": "./dist/extensions/index.js",
-      "require": "./dist/extensions/index.js"
-    },
-    "./errors": {
-      "types": "./dist/errors/index.d.ts",
-      "import": "./dist/errors/index.js",
-      "require": "./dist/errors/index.js"
-    },
-    "./sidecar": {
-      "types": "./dist/sidecar/index.d.ts",
-      "import": "./dist/sidecar/index.js",
-      "require": "./dist/sidecar/index.js"
-    },
-    "./interpreter": {
-      "types": "./dist/interpreter/index.d.ts",
-      "import": "./dist/interpreter/index.js",
-      "require": "./dist/interpreter/index.js"
-    },
-    "./git": {
-      "types": "./dist/git/index.d.ts",
-      "import": "./dist/git/index.js",
-      "require": "./dist/git/index.js"
-    },
-    "./openai": {
-      "types": "./dist/openai/index.d.ts",
-      "import": "./dist/openai/index.js",
-      "require": "./dist/openai/index.js"
-    },
-    "./opencode": {
-      "types": "./dist/opencode/index.d.ts",
-      "import": "./dist/opencode/index.js",
-      "require": "./dist/opencode/index.js"
-    },
-    "./xterm": {
-      "types": "./dist/xterm/index.d.ts",
-      "import": "./dist/xterm/index.js",
-      "require": "./dist/xterm/index.js"
-    },
-    "./bridge": {
-      "types": "./dist/bridge/index.d.ts",
-      "import": "./dist/bridge/index.js",
-      "require": "./dist/bridge/index.js"
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs"
     }
   },
-  "keywords": [],
-  "author": "",
-  "license": "Apache-2.0",
-  "files": [
-    "dist",
-    "Dockerfile",
-    "startup.sh",
-    "README.md",
-    "LICENSE"
-  ]
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "aws4fetch": "1.0.20",
+    "zod": "4.5.4"
+  }
 }

package/Dockerfile

@@ -1,327 +0,0 @@
-# Bun version — override via --build-arg BUN_VERSION=$(cat .bun-version)
-ARG BUN_VERSION=1.3.14
-# Node version — override via --build-arg NODE_VERSION=24
-ARG NODE_VERSION=24
-# cloudflared release — shared across glibc and musl image variants.
-# Bump this together with the architecture-specific checksums below.
-ARG CLOUDFLARED_VERSION=2026.3.0
-FROM oven/bun:${BUN_VERSION} AS bun-binary
-FROM node:${NODE_VERSION}-slim AS node-runtime
-
-# ============================================================================
-# cloudflared (Cloudflare Tunnel daemon) — enables sandbox.tunnels.*
-# Version pin lives at the top of this Dockerfile as a global ARG, shared
-# by every image variant so they ship the same release.
-# ============================================================================
-FROM alpine:3.21 AS cloudflared-binary
-
-ARG TARGETARCH
-ARG CLOUDFLARED_VERSION
-ARG CLOUDFLARED_SHA256_AMD64=4a9e50e6d6d798e90fcd01933151a90bf7edd99a0a55c28ad18f2e16263a5c30
-ARG CLOUDFLARED_SHA256_ARM64=0755ba4cbab59980e6148367fcf53a8f3ec85a97deefd63c2420cf7850769bee
-
-# Inject the host's extra CA bundle when downloading behind a TLS-intercepting
-# proxy (e.g. Cloudflare WARP / Zero Trust). No-op when the secret isn't passed.
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cat /run/secrets/wrangler_ca >> /etc/ssl/certs/ca-certificates.crt; \
-        mkdir -p /usr/local/share/ca-certificates && \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt; \
-    fi && \
-    apk add --no-cache ca-certificates curl && \
-    if [ -f /usr/local/share/ca-certificates/wrangler-dev-ca.crt ]; then \
-        update-ca-certificates; \
-    fi
-
-RUN set -eux; \
-    arch="${TARGETARCH:-}"; \
-    if [ -z "$arch" ]; then \
-      arch="$(apk --print-arch)"; \
-    fi; \
-    case "$arch" in \
-      amd64|x86_64) suffix=amd64; sha="${CLOUDFLARED_SHA256_AMD64}" ;; \
-      arm64|aarch64) suffix=arm64; sha="${CLOUDFLARED_SHA256_ARM64}" ;; \
-      *) echo "Unsupported arch for cloudflared: $arch" >&2; exit 1 ;; \
-    esac; \
-    url="https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-${suffix}"; \
-    curl -fsSL -o /cloudflared "$url"; \
-    echo "$sha  /cloudflared" | sha256sum -c -; \
-    chmod +x /cloudflared; \
-    /cloudflared --version
-
-# Sandbox container images (default and python variants)
-# Multi-stage build optimized for Turborepo monorepo
-
-# ============================================================================
-# Stage 1: Prune monorepo to only include necessary packages
-# ============================================================================
-FROM node-runtime AS pruner
-
-WORKDIR /app
-
-RUN npm install -g turbo
-
-COPY . .
-
-# Prune to only @repo/sandbox-container and its dependencies (@repo/shared)
-# The --docker flag generates out/json and out/full directories
-RUN turbo prune @repo/sandbox-container --docker
-
-# ============================================================================
-# Stage 2: Install dependencies and build packages
-# Using glibc-based images (not Alpine) so the standalone binary works on
-# standard Linux distributions (Debian, Ubuntu, RHEL, etc.)
-# ============================================================================
-FROM node-runtime AS builder
-
-WORKDIR /app
-
-# Install Bun runtime (glibc version for glibc-compatible standalone binary)
-COPY --from=bun-binary /usr/local/bin/bun /usr/local/bin/bun
-
-# Copy pruned lockfile and package.json files (for Docker layer caching)
-COPY --from=pruner /app/out/json/ .
-COPY --from=pruner /app/out/package-lock.json ./package-lock.json
-
-# Install ALL dependencies with cache mount for npm packages
-RUN --mount=type=cache,target=/root/.npm \
-    CI=true npm ci
-
-COPY --from=pruner /app/out/full/ .
-
-# Build all packages (Turborepo handles dependency order automatically)
-# This builds @repo/shared first, then @repo/sandbox-container (including standalone binary)
-RUN npx turbo run build
-
-# ============================================================================
-# Stage 3: Download pre-built Python 3.11.14
-# ============================================================================
-FROM ubuntu:22.04 AS python-builder
-
-# Prevent interactive prompts during package installation
-ENV DEBIAN_FRONTEND=noninteractive
-
-# Accept architecture from Docker BuildKit (for multi-arch builds)
-ARG TARGETARCH
-
-# Install minimal dependencies for downloading
-RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
-    --mount=type=cache,target=/var/lib/apt,sharing=locked \
-    rm -f /etc/apt/apt.conf.d/docker-clean && \
-    echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' >/etc/apt/apt.conf.d/keep-cache && \
-    apt-get update && apt-get install -y --no-install-recommends \
-    wget ca-certificates
-
-# Download and extract pre-built Python 3.11.14 from python-build-standalone
-# Using PGO+LTO optimized builds for better performance
-# Supports multi-arch: amd64 (x86_64) and arm64 (aarch64)
-RUN --mount=type=cache,target=/tmp/python-cache \
-    # Map Docker TARGETARCH to python-build-standalone arch naming
-    if [ "$TARGETARCH" = "amd64" ]; then \
-        PYTHON_ARCH="x86_64-unknown-linux-gnu"; \
-        EXPECTED_SHA256="edd8d11aa538953d12822fab418359a692fd1ee4ca2675579fbf0fa31e3688f1"; \
-    elif [ "$TARGETARCH" = "arm64" ]; then \
-        PYTHON_ARCH="aarch64-unknown-linux-gnu"; \
-        EXPECTED_SHA256="08141d31f95d86a23f23e4c741b726de0055f12f83200d1d4867b4e8e6e967c5"; \
-    else \
-        echo "Unsupported architecture: $TARGETARCH" && exit 1; \
-    fi && \
-    cd /tmp/python-cache && \
-    wget -nc https://github.com/indygreg/python-build-standalone/releases/download/20251028/cpython-3.11.14+20251028-${PYTHON_ARCH}-install_only.tar.gz && \
-    # Verify SHA256 checksum for security
-    echo "${EXPECTED_SHA256}  cpython-3.11.14+20251028-${PYTHON_ARCH}-install_only.tar.gz" | sha256sum -c - && \
-    cd /tmp && \
-    tar -xzf /tmp/python-cache/cpython-3.11.14+20251028-${PYTHON_ARCH}-install_only.tar.gz && \
-    mv python /usr/local/ && \
-    rm -rf /tmp/cpython-*
-
-# ============================================================================
-# Stage 4: Runtime base - Ubuntu 22.04 with Node.js and Bun (no Python)
-# ============================================================================
-FROM ubuntu:22.04 AS runtime-base
-
-# Accept version as build argument (passed from npm_package_version)
-ARG SANDBOX_VERSION=unknown
-
-# Prevent interactive prompts during package installation
-ENV DEBIAN_FRONTEND=noninteractive
-
-ENV SANDBOX_VERSION=${SANDBOX_VERSION}
-
-# Install runtime packages, S3FS-FUSE for bucket mounting, and snapshot tools
-# - fuse3: FUSE filesystem support (replaces legacy fuse, needed by s3fs/squashfuse/fuse-overlayfs)
-# - squashfs-tools: create squashfs archives (mksquashfs)
-# - squashfuse: mount squashfs in userspace (FUSE)
-# - fuse-overlayfs: userspace overlayfs for copy-on-write snapshots
-# Cache-bust: 2 - Clear apt cache to force fresh package list
-RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
-    --mount=type=cache,target=/var/lib/apt,sharing=locked \
-    rm -f /etc/apt/apt.conf.d/docker-clean && \
-    echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' >/etc/apt/apt.conf.d/keep-cache && \
-    rm -rf /var/cache/apt/* /var/lib/apt/lists/* && \
-    apt-get update && apt-get install -y --no-install-recommends \
-    s3fs fuse3 squashfs-tools squashfuse fuse-overlayfs \
-    ca-certificates curl wget procps git unzip zip jq file tini \
-    inotify-tools \
-    libssl3 zlib1g libbz2-1.0 libreadline8 libsqlite3-0 \
-    libncursesw6 libtinfo6 libxml2 libxmlsec1 libffi8 liblzma5 libtk8.6 && \
-    update-ca-certificates
-
-# Enable FUSE in container - allow non-root users to use FUSE
-RUN sed -i 's/#user_allow_other/user_allow_other/' /etc/fuse.conf
-
-# fusermount requires /etc/mtab to locate active mounts
-RUN ln -sf /proc/mounts /etc/mtab
-
-# Install Node.js from official Node image (defaults to 24 LTS,
-# override via --build-arg NODE_VERSION=<version>)
-COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node
-COPY --from=node-runtime /usr/local/lib/node_modules /usr/local/lib/node_modules
-RUN ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
-    ln -s /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
-
-# Install Bun runtime from official image
-COPY --from=bun-binary /usr/local/bin/bun /usr/local/bin/bun
-
-# Copy standalone binary
-COPY --from=builder /app/packages/sandbox-container/dist/sandbox /container-server/sandbox
-
-# Set up container server directory
-WORKDIR /container-server
-
-# Copy legacy JS bundle for backwards compatibility
-# Users with custom startup scripts that call `bun /container-server/dist/index.js` need this
-COPY --from=builder /app/packages/sandbox-container/dist/index.js ./dist/
-
-COPY --from=cloudflared-binary /cloudflared /usr/local/bin/cloudflared
-RUN cloudflared --version
-
-# Inject the host's extra CA bundle when running locally behind a TLS-
-# intercepting proxy (e.g. Cloudflare WARP / Zero Trust). See
-# DOCKER_README.md for the local-dev setup. No-op when the secret
-# isn't passed.
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt && \
-        cat /run/secrets/wrangler_ca >> /etc/ssl/certs/ca-certificates.crt && \
-        update-ca-certificates; \
-    fi
-
-RUN mkdir -p /workspace
-
-# Expose the application port (3000 for control)
-EXPOSE 3000
-
-# ============================================================================
-# Stage 5a: Default image - lean, no Python
-# ============================================================================
-FROM runtime-base AS default
-
-# Disable Python pool (Python not available in this image)
-ENV PYTHON_POOL_MIN_SIZE=0
-ENV JAVASCRIPT_POOL_MIN_SIZE=3
-ENV TYPESCRIPT_POOL_MIN_SIZE=3
-
-ENTRYPOINT ["/usr/bin/tini", "--", "/container-server/sandbox"]
-
-# ============================================================================
-# Stage 5b: Python image - full, with Python + data science packages
-# ============================================================================
-FROM runtime-base AS python
-
-# Copy pre-built Python from python-builder stage
-COPY --from=python-builder /usr/local/python /usr/local/python
-
-# Create symlinks and update shared library cache
-RUN ln -s /usr/local/python/bin/python3.11 /usr/local/bin/python3.11 && \
-    ln -s /usr/local/python/bin/python3 /usr/local/bin/python3 && \
-    ln -s /usr/local/python/bin/pip3 /usr/local/bin/pip3 && \
-    echo "/usr/local/python/lib" > /etc/ld.so.conf.d/python.conf && \
-    ldconfig
-
-# Set Python 3.11 as default python3
-RUN update-alternatives --install /usr/bin/python3 python3 /usr/local/bin/python3.11 1
-
-# Install Python packages for data science and the code interpreter extension.
-# The interpreter runtime itself is provisioned by the @cloudflare/sandbox/interpreter
-# extension; this image only provides the Python toolchain it relies on.
-RUN --mount=type=cache,target=/root/.cache/pip \
-    pip3 install --no-cache-dir matplotlib numpy pandas ipython
-
-# Pre-warm pool sizes consumed by the interpreter extension sidecar
-ENV PYTHON_POOL_MIN_SIZE=3
-ENV JAVASCRIPT_POOL_MIN_SIZE=3
-ENV TYPESCRIPT_POOL_MIN_SIZE=3
-
-ENTRYPOINT ["/usr/bin/tini", "--", "/container-server/sandbox"]
-
-# ============================================================================
-# Stage 5c: OpenCode image - with OpenCode CLI for AI coding agent
-# ============================================================================
-FROM runtime-base AS opencode
-
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt && \
-        update-ca-certificates; \
-    fi
-
-# Install OpenCode CLI via npm (avoids GitHub API rate limits)
-RUN npm i -g opencode-ai \
-    && opencode --version
-
-# Disable Python pool (Python not available in this image)
-ENV PYTHON_POOL_MIN_SIZE=0
-ENV JAVASCRIPT_POOL_MIN_SIZE=3
-ENV TYPESCRIPT_POOL_MIN_SIZE=3
-
-# Expose OpenCode server port (in addition to 3000 from runtime-base)
-EXPOSE 4096
-
-ENTRYPOINT ["/usr/bin/tini", "--", "/container-server/sandbox"]
-
-# ============================================================================
-# Stage 5d: Musl image - Alpine-based with musl-linked binary
-# ============================================================================
-FROM alpine:3.21 AS musl
-
-ARG SANDBOX_VERSION=unknown
-
-ENV SANDBOX_VERSION=${SANDBOX_VERSION}
-
-# CA certificate installation
-RUN mkdir -p /usr/local/share/ca-certificates
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt && \
-        cat /run/secrets/wrangler_ca >> /etc/ssl/certs/ca-certificates.crt && \
-        apk add --no-cache ca-certificates && \
-        update-ca-certificates; \
-    else \
-        apk add --no-cache ca-certificates; \
-    fi
-
-RUN apk add --no-cache bash file git curl libstdc++ libgcc s3fs-fuse fuse tini
-
-RUN sed -i 's/#user_allow_other/user_allow_other/' /etc/fuse.conf
-
-# The Alpine variant uses the same cloudflared release asset as the glibc
-# variants. It is a static binary that runs on musl without gcompat.
-COPY --from=cloudflared-binary /cloudflared /usr/local/bin/cloudflared
-RUN cloudflared --version
-
-COPY --from=builder /app/packages/sandbox-container/dist/sandbox-musl /container-server/sandbox
-
-WORKDIR /container-server
-
-COPY --from=builder /app/packages/sandbox-container/dist/index.js ./dist/
-
-RUN mkdir -p /workspace
-
-EXPOSE 3000
-
-ENV PYTHON_POOL_MIN_SIZE=0
-ENV JAVASCRIPT_POOL_MIN_SIZE=0
-ENV TYPESCRIPT_POOL_MIN_SIZE=0
-
-ENTRYPOINT ["/sbin/tini", "--", "/container-server/sandbox"]

package/dist/bridge/index.d.ts

@@ -1,181 +0,0 @@
-import { DurableObject } from "cloudflare:workers";
-
-//#region src/bridge/types.d.ts
-
-/**
- * Configuration options for the bridge() factory.
- */
-interface BridgeConfig {
-  /**
-   * Override the default binding names used to look up Durable Objects.
-   *
-   * @default { sandbox: "Sandbox", warmPool: "WarmPool" }
-   */
-  bindings?: {
-    /** Name of the Sandbox Durable Object binding. @default "Sandbox" */
-    sandbox?: string;
-    /** Name of the WarmPool Durable Object binding. @default "WarmPool" */
-    warmPool?: string;
-  };
-  /**
-   * URL prefix for all bridge API routes.
-   *
-   * @default "/v1"
-   */
-  apiRoutePrefix?: string;
-  /**
-   * Path for the health-check endpoint.
-   *
-   * @default "/health"
-   */
-  healthRoute?: string;
-}
-/**
- * The user-provided worker handlers that bridge() wraps.
- *
- * The bridge wraps `fetch` and `scheduled` with its own logic;
- * all other properties are passed through unchanged.
- */
-interface WorkerHandlers {
-  fetch?(request: Request, env: any, ctx: ExecutionContext): Response | Promise<Response>;
-  scheduled?(controller: ScheduledController, env: any, ctx: ExecutionContext): void | Promise<void>;
-  [key: string]: unknown;
-}
-/**
- * Minimum environment shape required by the bridge.
- * The actual bindings are looked up dynamically by name.
- */
-interface BridgeEnv {
-  SANDBOX_API_KEY?: string;
-  WARM_POOL_TARGET?: string;
-  WARM_POOL_REFRESH_INTERVAL?: string;
-  [key: string]: unknown;
-}
-//#endregion
-//#region src/bridge/helpers.d.ts
-/**
- * Shell-quote a single argv token so it is safe to embed in a sh command
- * string.  Tokens that contain only safe characters are returned unchanged
- * for readability.  All others are wrapped in ANSI-C $'...' quoting which
- * can represent newlines, tabs, and other control characters as escape
- * sequences — unlike plain single quotes which pass content literally and
- * break when the value contains a real newline.
- */
-declare function shellQuote(arg: string): string;
-/**
- * POSIX-normalise a path (resolve `.` / `..` segments) and verify it lives
- * under /workspace.  Returns the resolved absolute path on success, or null
- * if the path escapes the workspace.
- */
-declare function resolveWorkspacePath(userPath: string): string | null;
-//#endregion
-//#region src/bridge/warm-pool.d.ts
-interface WarmPoolConfig {
-  /** Target number of warm (unassigned) containers to maintain. @default 0 */
-  warmTarget?: number;
-  /** How often to check and replenish warm containers (ms). @default 10000 */
-  refreshInterval?: number;
-}
-interface PoolStats {
-  /** Number of warm (unassigned) containers ready for use */
-  warm: number;
-  /** Number of containers assigned to sandbox IDs */
-  assigned: number;
-  /** Total containers tracked by the pool */
-  total: number;
-  /** Current pool configuration */
-  config: Required<WarmPoolConfig>;
-  /** Inferred max_instances limit, or null if not yet known */
-  maxInstances: number | null;
-}
-/**
- * The WarmPool expects an environment with a `Sandbox` Durable Object binding.
- * This interface describes the minimum shape; the actual binding name is
- * configurable via the bridge, but defaults to "Sandbox".
- */
-interface WarmPoolEnv {
-  Sandbox: DurableObjectNamespace;
-  [key: string]: unknown;
-}
-declare class WarmPool extends DurableObject<WarmPoolEnv> {
-  private config;
-  /** Container UUIDs that are warm and available for assignment */
-  private warmContainers;
-  /** Maps caller-provided sandbox IDs to container UUIDs (1:1, no sharing) */
-  private assignments;
-  /** Containers currently starting — excluded from health checks */
-  private startingContainers;
-  /** Inferred max_instances limit learned from Cloudflare errors, or null */
-  private knownMaxInstances;
-  private capacityExhausted;
-  private initialized;
-  /**
-   * Get a container UUID for the given sandbox ID.
-   * - If this ID already has an assigned container that's still running, return it.
-   * - Otherwise assign a warm container (or start a new one).
-   */
-  getContainer(sandboxId: string): Promise<string>;
-  /**
-   * Look up an existing container assignment without allocating.
-   * Returns the container UUID if the sandbox ID has an active assignment, null otherwise.
-   * Used by DELETE to avoid starting a container just to destroy it.
-   */
-  lookupContainer(sandboxId: string): Promise<string | null>;
-  /**
-   * Report that a container has stopped — removes it from tracking.
-   */
-  reportStopped(containerUUID: string): Promise<void>;
-  /**
-   * Get current pool statistics.
-   */
-  getStats(): Promise<PoolStats>;
-  /**
-   * Update pool configuration. Idempotent — called on every request to keep
-   * config in sync with wrangler vars across deploys.
-   */
-  configure(config: WarmPoolConfig): Promise<void>;
-  /**
-   * Shutdown all pre-warmed (unassigned) containers.
-   * Does not affect containers that are assigned to sandbox IDs.
-   */
-  shutdownPrewarmed(): Promise<void>;
-  alarm(): Promise<void>;
-  private init;
-  private persist;
-  private scheduleRefresh;
-  private startContainer;
-  private isContainerRunning;
-  private checkContainerHealth;
-  /**
-   * Renew activity timeout on all warm containers to prevent them from sleeping.
-   */
-  private keepWarmContainersAlive;
-  /**
-   * Scale the warm pool towards warmTarget, respecting inferred max_instances.
-   */
-  private adjustPool;
-  private removeContainer;
-  private remainingCapacity;
-  private isMaxInstancesError;
-  private recordCapacityLimit;
-  private throwCapacityError;
-  private getSandboxStub;
-}
-//#endregion
-//#region src/bridge/index.d.ts
-/**
- * Create a Worker export that wraps user handlers with bridge functionality.
- *
- * The bridge:
- * 1. Checks that required Durable Object bindings exist (logs errors if missing).
- * 2. Wraps `fetch()` to serve bridge API routes first, then falls through to the user handler.
- * 3. Wraps `scheduled()` to prime the warm pool, then calls the user handler.
- * 4. Passes through all other properties unchanged.
- *
- * @param worker - The user's worker handlers (fetch, scheduled, and any others).
- * @param config - Optional configuration for binding names and route paths.
- */
-declare function bridge(worker: WorkerHandlers, config?: BridgeConfig): ExportedHandler<BridgeEnv>;
-//#endregion
-export { type BridgeConfig, type BridgeEnv, type PoolStats, WarmPool, type WarmPoolConfig, type WorkerHandlers, bridge, resolveWorkspacePath, shellQuote };
-//# sourceMappingURL=index.d.ts.map

package/dist/bridge/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/bridge/types.ts","../../src/bridge/helpers.ts","../../src/bridge/warm-pool.ts","../../src/bridge/index.ts"],"sourcesContent":[],"mappings":";;;;;;;AA6DgB,UAvCC,YAAA,CAuCD;EAEP;;;AAaT;;;;ICJgB,OAAA,CAAA,EAAU,MAAA;IAyBV;;;;AChFhB;AAOA;AAWC;AA6CD;EAA4C,cAAA,CAAA,EAAA,MAAA;EA2BH;;;;;EAiFf,WAAA,CAAA,EAAA,MAAA;;;;;;;;UFtIT,cAAA;EGgCD,KAAA,EAAA,OAAM,EH9BT,OG8BS,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EH5Bb,gBG4Ba,CAAA,EH3BjB,QG2BiB,GH3BN,OG2BM,CH3BE,QG2BF,CAAA;EACZ,SAAA,EAAA,UAAA,EH1BM,mBG0BN,EAAA,GAAA,EAAA,GAAA,EAAA,GAAA,EHxBD,gBGwBC,CAAA,EAAA,IAAA,GHvBE,OGuBF,CAAA,IAAA,CAAA;EACC,CAAA,GAAA,EAAA,MAAA,CAAA,EAAA,OAAA;;;;;;UHZM,SAAA;;;;;;;;;;;AAAjB;;;;ACJA;AAyBgB,iBAzBA,UAAA,CAyBoB,GAAA,EAAA,MAAA,CAAA,EAAA,MAAA;;;;AChFpC;AAOA;AAmDU,iBDsBM,oBAAA,CCrBL,QAAsB,EAAA,MAAA,CAAA,EAAA,MAAA,GAAA,IAAA;;;AFbxB,UE9CQ,cAAA,CF8CR;EACG;EAAO,UAAA,CAAA,EAAA,MAAA;EAYF;;;UEpDA,SAAA;EDgDD;EAyBA,IAAA,EAAA,MAAA;;;;EChFC,KAAA,EAAA,MAAA;EAOA;EAmDP,MAAA,EA3CA,QA2CW,CA3CF,cA4CR,CAAA;EAIE;EAA+B,YAAA,EAAA,MAAA,GAAA,IAAA;;;;;;;UALlC,WAAA,CAiHiC;EAUd,OAAA,EA1HlB,sBA0HkB;EAyBZ,CAAA,GAAA,EAAA,MAAA,CAAA,EAAA,OAAA;;AA/I0B,cAA9B,QAAA,SAAiB,aAAa,CAAC,WAAD,CAAA,CAAA;;;;ECM3B;EACN,QAAA,WAAA;EACC;EACQ,QAAA,kBAAA;EAAhB;EAAe,QAAA,iBAAA;;;;;;;;mCDkBuB;;;;;;sCA6CG;;;;wCAYE;;;;cAS1B,QAAQ;;;;;oBAeF,iBAAiB;;;;;uBAUd;WAyBZ;;;;;;;;;;;;;;;;;;;;;;;;AAvMjB;AAWC;AA6CD;;;;;;;;;;AA+IiB,iBCzID,MAAA,CDyIC,MAAA,ECxIP,cDwIO,EAAA,MAAA,CAAA,ECvIN,YDuIM,CAAA,ECtId,eDsIc,CCtIE,SDsIF,CAAA"}