@cloudflare/sandbox 0.13.0-next.776.1 → 1.0.0-rc.0

package/package.json

@@ -1,129 +1,28 @@
 {
   "name": "@cloudflare/sandbox",
-  "version": "0.13.0-next.776.1",
+  "version": "1.0.0-rc.0",
+  "description": "Structured workspace file operations for Cloudflare sandboxes",
+  "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "https://github.com/cloudflare/sandbox-sdk"
-  },
-  "description": "A sandboxed environment for running commands",
-  "type": "module",
-  "dependencies": {
-    "@cloudflare/containers": "^0.3.7",
-    "aws4fetch": "^1.0.20",
-    "capnweb": "^0.8.0",
-    "hono": "^4.12.26"
-  },
-  "devDependencies": {
-    "@openai/agents": "^0.3.3",
-    "@opencode-ai/sdk": "^1.1.40",
-    "@repo/shared": "^0.0.0",
-    "@types/acorn": "^4.0.6",
-    "@types/bun": "^1.3.14",
-    "@types/tar-stream": "^3.1.4",
-    "@xterm/xterm": "^6.0.0",
-    "acorn": "^8.14.0",
-    "async-mutex": "^0.5.0",
-    "tar-stream": "^3.2.0",
-    "wrangler": "^4.102.0"
-  },
-  "peerDependencies": {
-    "@openai/agents": "^0.3.3",
-    "@opencode-ai/sdk": "^1.1.40",
-    "@xterm/xterm": ">=5.0.0"
-  },
-  "peerDependenciesMeta": {
-    "@openai/agents": {
-      "optional": true
-    },
-    "@opencode-ai/sdk": {
-      "optional": true
-    },
-    "@xterm/xterm": {
-      "optional": true
-    }
+    "url": "git+https://github.com/cloudflare/sandbox-sdk.git"
   },
-  "tags": [
-    "sandbox",
-    "codegen",
-    "containers",
-    "cloudflare",
-    "durable objects"
+  "files": [
+    "dist"
   ],
-  "scripts": {
-    "build": "rm -rf dist && npm run build:sidecar && tsdown --config tsdown.config.ts",
-    "build:sidecar": "bun run ../../extensions/interpreter/build.ts",
-    "check": "biome check && npm run typecheck",
-    "fix": "biome check --fix && npm run typecheck",
-    "typecheck": "tsc --noEmit && tsc --noEmit -p tsconfig.sidecar.json",
-    "docker:local": "scripts/docker-local.sh",
-    "test": "vitest run --config vitest.config.ts \"$@\"",
-    "test:harness": "vitest run --config vitest.harness.config.ts \"$@\"",
-    "test:sidecar": "bun test ../../extensions/interpreter/src/sidecar",
-    "test:e2e": "npm run test:e2e:vitest && npm run test:e2e:browser",
-    "test:e2e:vitest": "cd ../../tests/e2e/test-worker && ./generate-config.sh && cd ../../.. && vitest run --config vitest.e2e.config.ts \"$@\"",
-    "test:e2e:browser": "cd ../../tests/e2e/test-worker && ./generate-config.sh && cd ../../.. && npx playwright install chromium && playwright test --config tests/e2e/browser/playwright.config.ts",
-    "test:perf": "cd ../.. && vitest run --config vitest.perf.config.ts \"$@\""
-  },
+  "type": "module",
+  "sideEffects": false,
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.js"
-    },
-    "./extensions": {
-      "types": "./dist/extensions/index.d.ts",
-      "import": "./dist/extensions/index.js",
-      "require": "./dist/extensions/index.js"
-    },
-    "./errors": {
-      "types": "./dist/errors/index.d.ts",
-      "import": "./dist/errors/index.js",
-      "require": "./dist/errors/index.js"
-    },
-    "./sidecar": {
-      "types": "./dist/sidecar/index.d.ts",
-      "import": "./dist/sidecar/index.js",
-      "require": "./dist/sidecar/index.js"
-    },
-    "./interpreter": {
-      "types": "./dist/interpreter/index.d.ts",
-      "import": "./dist/interpreter/index.js",
-      "require": "./dist/interpreter/index.js"
-    },
-    "./git": {
-      "types": "./dist/git/index.d.ts",
-      "import": "./dist/git/index.js",
-      "require": "./dist/git/index.js"
-    },
-    "./openai": {
-      "types": "./dist/openai/index.d.ts",
-      "import": "./dist/openai/index.js",
-      "require": "./dist/openai/index.js"
-    },
-    "./opencode": {
-      "types": "./dist/opencode/index.d.ts",
-      "import": "./dist/opencode/index.js",
-      "require": "./dist/opencode/index.js"
-    },
-    "./xterm": {
-      "types": "./dist/xterm/index.d.ts",
-      "import": "./dist/xterm/index.js",
-      "require": "./dist/xterm/index.js"
-    },
-    "./bridge": {
-      "types": "./dist/bridge/index.d.ts",
-      "import": "./dist/bridge/index.js",
-      "require": "./dist/bridge/index.js"
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs"
     }
   },
-  "keywords": [],
-  "author": "",
-  "license": "Apache-2.0",
-  "files": [
-    "dist",
-    "Dockerfile",
-    "startup.sh",
-    "README.md",
-    "LICENSE"
-  ]
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "aws4fetch": "1.0.20",
+    "zod": "4.5.4"
+  }
 }

package/Dockerfile

@@ -1,368 +0,0 @@
-# Bun version — override via --build-arg BUN_VERSION=$(cat .bun-version)
-ARG BUN_VERSION=1.3.14
-# Node version — override via --build-arg NODE_VERSION=24
-ARG NODE_VERSION=24
-# cloudflared release — shared across glibc and musl image variants.
-# Bump this together with the architecture-specific checksums below.
-ARG CLOUDFLARED_VERSION=2026.3.0
-# fuse-overlayfs release — backs the copy-on-write layer of restored backups.
-# Pinned upstream because Ubuntu 22.04 ships 1.7.1, which returns EEXIST when
-# a restored directory is deleted, recreated and listed before files are
-# created in it (fixed in 1.15). Switch back to the distro package once the
-# base image ships 1.15 or newer.
-# Bump this together with the architecture-specific checksums below.
-ARG FUSE_OVERLAYFS_VERSION=1.18
-FROM oven/bun:${BUN_VERSION} AS bun-binary
-FROM node:${NODE_VERSION}-slim AS node-runtime
-
-# ============================================================================
-# Release downloader — shared base for fetching pinned upstream binaries
-# ============================================================================
-FROM alpine:3.21 AS release-downloader
-
-# Inject the host's extra CA bundle when downloading behind a TLS-intercepting
-# proxy (e.g. Cloudflare WARP / Zero Trust). No-op when the secret isn't passed.
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cat /run/secrets/wrangler_ca >> /etc/ssl/certs/ca-certificates.crt; \
-        mkdir -p /usr/local/share/ca-certificates && \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt; \
-    fi && \
-    apk add --no-cache ca-certificates curl && \
-    if [ -f /usr/local/share/ca-certificates/wrangler-dev-ca.crt ]; then \
-        update-ca-certificates; \
-    fi
-
-# ============================================================================
-# cloudflared (Cloudflare Tunnel daemon) — enables sandbox.tunnels.*
-# Version pin lives at the top of this Dockerfile as a global ARG, shared
-# by every image variant so they ship the same release.
-# ============================================================================
-FROM release-downloader AS cloudflared-binary
-
-ARG TARGETARCH
-ARG CLOUDFLARED_VERSION
-ARG CLOUDFLARED_SHA256_AMD64=4a9e50e6d6d798e90fcd01933151a90bf7edd99a0a55c28ad18f2e16263a5c30
-ARG CLOUDFLARED_SHA256_ARM64=0755ba4cbab59980e6148367fcf53a8f3ec85a97deefd63c2420cf7850769bee
-
-RUN set -eux; \
-    arch="${TARGETARCH:-}"; \
-    if [ -z "$arch" ]; then \
-      arch="$(apk --print-arch)"; \
-    fi; \
-    case "$arch" in \
-      amd64|x86_64) suffix=amd64; sha="${CLOUDFLARED_SHA256_AMD64}" ;; \
-      arm64|aarch64) suffix=arm64; sha="${CLOUDFLARED_SHA256_ARM64}" ;; \
-      *) echo "Unsupported arch for cloudflared: $arch" >&2; exit 1 ;; \
-    esac; \
-    url="https://github.com/cloudflare/cloudflared/releases/download/${CLOUDFLARED_VERSION}/cloudflared-linux-${suffix}"; \
-    curl -fsSL -o /cloudflared "$url"; \
-    echo "$sha  /cloudflared" | sha256sum -c -; \
-    chmod +x /cloudflared; \
-    /cloudflared --version
-
-# ============================================================================
-# fuse-overlayfs — statically linked upstream release for the glibc images
-# ============================================================================
-FROM release-downloader AS fuse-overlayfs-binary
-
-ARG TARGETARCH
-ARG FUSE_OVERLAYFS_VERSION
-ARG FUSE_OVERLAYFS_SHA256_AMD64=56b0ae0aeb8abb308b068af2f137ed8d1bd239f4f27e21672ff0def861eea1e8
-ARG FUSE_OVERLAYFS_SHA256_ARM64=82fed736197b2a881a822e5357b488796f654e8371ce8573a1592331510a0133
-
-RUN set -eux; \
-    arch="${TARGETARCH:-}"; \
-    if [ -z "$arch" ]; then \
-      arch="$(apk --print-arch)"; \
-    fi; \
-    case "$arch" in \
-      amd64|x86_64) suffix=x86_64; sha="${FUSE_OVERLAYFS_SHA256_AMD64}" ;; \
-      arm64|aarch64) suffix=aarch64; sha="${FUSE_OVERLAYFS_SHA256_ARM64}" ;; \
-      *) echo "Unsupported arch for fuse-overlayfs: $arch" >&2; exit 1 ;; \
-    esac; \
-    url="https://github.com/containers/fuse-overlayfs/releases/download/v${FUSE_OVERLAYFS_VERSION}/fuse-overlayfs-${suffix}"; \
-    curl -fsSL -o /fuse-overlayfs "$url"; \
-    echo "$sha  /fuse-overlayfs" | sha256sum -c -; \
-    chmod +x /fuse-overlayfs; \
-    /fuse-overlayfs --version
-
-# Sandbox container images (default and python variants)
-# Multi-stage build optimized for Turborepo monorepo
-
-# ============================================================================
-# Stage 1: Prune monorepo to only include necessary packages
-# ============================================================================
-FROM node-runtime AS pruner
-
-WORKDIR /app
-
-RUN npm install -g turbo
-
-COPY . .
-
-# Prune to only @repo/sandbox-container and its dependencies (@repo/shared)
-# The --docker flag generates out/json and out/full directories
-RUN turbo prune @repo/sandbox-container --docker
-
-# ============================================================================
-# Stage 2: Install dependencies and build packages
-# Using glibc-based images (not Alpine) so the standalone binary works on
-# standard Linux distributions (Debian, Ubuntu, RHEL, etc.)
-# ============================================================================
-FROM node-runtime AS builder
-
-WORKDIR /app
-
-# Install Bun runtime (glibc version for glibc-compatible standalone binary)
-COPY --from=bun-binary /usr/local/bin/bun /usr/local/bin/bun
-
-# Copy pruned lockfile and package.json files (for Docker layer caching)
-COPY --from=pruner /app/out/json/ .
-COPY --from=pruner /app/out/package-lock.json ./package-lock.json
-
-# Install ALL dependencies with cache mount for npm packages
-RUN --mount=type=cache,target=/root/.npm \
-    CI=true npm ci
-
-COPY --from=pruner /app/out/full/ .
-
-# Build all packages (Turborepo handles dependency order automatically)
-# This builds @repo/shared first, then @repo/sandbox-container (including standalone binary)
-RUN npx turbo run build
-
-# ============================================================================
-# Stage 3: Download pre-built Python 3.11.14
-# ============================================================================
-FROM ubuntu:22.04 AS python-builder
-
-# Prevent interactive prompts during package installation
-ENV DEBIAN_FRONTEND=noninteractive
-
-# Accept architecture from Docker BuildKit (for multi-arch builds)
-ARG TARGETARCH
-
-# Install minimal dependencies for downloading
-RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
-    --mount=type=cache,target=/var/lib/apt,sharing=locked \
-    rm -f /etc/apt/apt.conf.d/docker-clean && \
-    echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' >/etc/apt/apt.conf.d/keep-cache && \
-    apt-get update && apt-get install -y --no-install-recommends \
-    wget ca-certificates
-
-# Download and extract pre-built Python 3.11.14 from python-build-standalone
-# Using PGO+LTO optimized builds for better performance
-# Supports multi-arch: amd64 (x86_64) and arm64 (aarch64)
-RUN --mount=type=cache,target=/tmp/python-cache \
-    # Map Docker TARGETARCH to python-build-standalone arch naming
-    if [ "$TARGETARCH" = "amd64" ]; then \
-        PYTHON_ARCH="x86_64-unknown-linux-gnu"; \
-        EXPECTED_SHA256="edd8d11aa538953d12822fab418359a692fd1ee4ca2675579fbf0fa31e3688f1"; \
-    elif [ "$TARGETARCH" = "arm64" ]; then \
-        PYTHON_ARCH="aarch64-unknown-linux-gnu"; \
-        EXPECTED_SHA256="08141d31f95d86a23f23e4c741b726de0055f12f83200d1d4867b4e8e6e967c5"; \
-    else \
-        echo "Unsupported architecture: $TARGETARCH" && exit 1; \
-    fi && \
-    cd /tmp/python-cache && \
-    wget -nc https://github.com/indygreg/python-build-standalone/releases/download/20251028/cpython-3.11.14+20251028-${PYTHON_ARCH}-install_only.tar.gz && \
-    # Verify SHA256 checksum for security
-    echo "${EXPECTED_SHA256}  cpython-3.11.14+20251028-${PYTHON_ARCH}-install_only.tar.gz" | sha256sum -c - && \
-    cd /tmp && \
-    tar -xzf /tmp/python-cache/cpython-3.11.14+20251028-${PYTHON_ARCH}-install_only.tar.gz && \
-    mv python /usr/local/ && \
-    rm -rf /tmp/cpython-*
-
-# ============================================================================
-# Stage 4: Runtime base - Ubuntu 22.04 with Node.js and Bun (no Python)
-# ============================================================================
-FROM ubuntu:22.04 AS runtime-base
-
-# Accept version as build argument (passed from npm_package_version)
-ARG SANDBOX_VERSION=unknown
-
-# Prevent interactive prompts during package installation
-ENV DEBIAN_FRONTEND=noninteractive
-
-ENV SANDBOX_VERSION=${SANDBOX_VERSION}
-
-# Install runtime packages, S3FS-FUSE for bucket mounting, and snapshot tools
-# - fuse3: FUSE filesystem support (replaces legacy fuse, needed by s3fs/squashfuse/fuse-overlayfs)
-# - squashfs-tools: create squashfs archives (mksquashfs)
-# - squashfuse: mount squashfs in userspace (FUSE)
-# Cache-bust: 2 - Clear apt cache to force fresh package list
-RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
-    --mount=type=cache,target=/var/lib/apt,sharing=locked \
-    rm -f /etc/apt/apt.conf.d/docker-clean && \
-    echo 'Binary::apt::APT::Keep-Downloaded-Packages "true";' >/etc/apt/apt.conf.d/keep-cache && \
-    rm -rf /var/cache/apt/* /var/lib/apt/lists/* && \
-    apt-get update && apt-get install -y --no-install-recommends \
-    s3fs fuse3 squashfs-tools squashfuse \
-    ca-certificates curl wget procps git unzip zip jq file tini \
-    inotify-tools \
-    libssl3 zlib1g libbz2-1.0 libreadline8 libsqlite3-0 \
-    libncursesw6 libtinfo6 libxml2 libxmlsec1 libffi8 liblzma5 libtk8.6 && \
-    update-ca-certificates
-
-# Enable FUSE in container - allow non-root users to use FUSE
-RUN sed -i 's/#user_allow_other/user_allow_other/' /etc/fuse.conf
-
-# fusermount requires /etc/mtab to locate active mounts
-RUN ln -sf /proc/mounts /etc/mtab
-
-# Userspace overlayfs for copy-on-write backup restores
-COPY --from=fuse-overlayfs-binary /fuse-overlayfs /usr/bin/fuse-overlayfs
-RUN fuse-overlayfs --version
-
-# Install Node.js from official Node image (defaults to 24 LTS,
-# override via --build-arg NODE_VERSION=<version>)
-COPY --from=node-runtime /usr/local/bin/node /usr/local/bin/node
-COPY --from=node-runtime /usr/local/lib/node_modules /usr/local/lib/node_modules
-RUN ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
-    ln -s /usr/local/lib/node_modules/npm/bin/npx-cli.js /usr/local/bin/npx
-
-# Install Bun runtime from official image
-COPY --from=bun-binary /usr/local/bin/bun /usr/local/bin/bun
-
-# Copy standalone binary
-COPY --from=builder /app/packages/sandbox-container/dist/sandbox /container-server/sandbox
-
-# Set up container server directory
-WORKDIR /container-server
-
-# Copy legacy JS bundle for backwards compatibility
-# Users with custom startup scripts that call `bun /container-server/dist/index.js` need this
-COPY --from=builder /app/packages/sandbox-container/dist/index.js ./dist/
-
-COPY --from=cloudflared-binary /cloudflared /usr/local/bin/cloudflared
-RUN cloudflared --version
-
-# Inject the host's extra CA bundle when running locally behind a TLS-
-# intercepting proxy (e.g. Cloudflare WARP / Zero Trust). See
-# DOCKER_README.md for the local-dev setup. No-op when the secret
-# isn't passed.
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt && \
-        cat /run/secrets/wrangler_ca >> /etc/ssl/certs/ca-certificates.crt && \
-        update-ca-certificates; \
-    fi
-
-RUN mkdir -p /workspace
-
-# Expose the application port (3000 for control)
-EXPOSE 3000
-
-# ============================================================================
-# Stage 5a: Default image - lean, no Python
-# ============================================================================
-FROM runtime-base AS default
-
-# Disable Python pool (Python not available in this image)
-ENV PYTHON_POOL_MIN_SIZE=0
-ENV JAVASCRIPT_POOL_MIN_SIZE=3
-ENV TYPESCRIPT_POOL_MIN_SIZE=3
-
-ENTRYPOINT ["/usr/bin/tini", "--", "/container-server/sandbox"]
-
-# ============================================================================
-# Stage 5b: Python image - full, with Python + data science packages
-# ============================================================================
-FROM runtime-base AS python
-
-# Copy pre-built Python from python-builder stage
-COPY --from=python-builder /usr/local/python /usr/local/python
-
-# Create symlinks and update shared library cache
-RUN ln -s /usr/local/python/bin/python3.11 /usr/local/bin/python3.11 && \
-    ln -s /usr/local/python/bin/python3 /usr/local/bin/python3 && \
-    ln -s /usr/local/python/bin/pip3 /usr/local/bin/pip3 && \
-    echo "/usr/local/python/lib" > /etc/ld.so.conf.d/python.conf && \
-    ldconfig
-
-# Set Python 3.11 as default python3
-RUN update-alternatives --install /usr/bin/python3 python3 /usr/local/bin/python3.11 1
-
-# Install Python packages for data science and the code interpreter extension.
-# The interpreter runtime itself is provisioned by the @cloudflare/sandbox/interpreter
-# extension; this image only provides the Python toolchain it relies on.
-RUN --mount=type=cache,target=/root/.cache/pip \
-    pip3 install --no-cache-dir matplotlib numpy pandas ipython
-
-# Pre-warm pool sizes consumed by the interpreter extension sidecar
-ENV PYTHON_POOL_MIN_SIZE=3
-ENV JAVASCRIPT_POOL_MIN_SIZE=3
-ENV TYPESCRIPT_POOL_MIN_SIZE=3
-
-ENTRYPOINT ["/usr/bin/tini", "--", "/container-server/sandbox"]
-
-# ============================================================================
-# Stage 5c: OpenCode image - with OpenCode CLI for AI coding agent
-# ============================================================================
-FROM runtime-base AS opencode
-
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt && \
-        update-ca-certificates; \
-    fi
-
-# Install OpenCode CLI via npm (avoids GitHub API rate limits)
-RUN npm i -g opencode-ai \
-    && opencode --version
-
-# Disable Python pool (Python not available in this image)
-ENV PYTHON_POOL_MIN_SIZE=0
-ENV JAVASCRIPT_POOL_MIN_SIZE=3
-ENV TYPESCRIPT_POOL_MIN_SIZE=3
-
-# Expose OpenCode server port (in addition to 3000 from runtime-base)
-EXPOSE 4096
-
-ENTRYPOINT ["/usr/bin/tini", "--", "/container-server/sandbox"]
-
-# ============================================================================
-# Stage 5d: Musl image - Alpine-based with musl-linked binary
-# ============================================================================
-FROM alpine:3.21 AS musl
-
-ARG SANDBOX_VERSION=unknown
-
-ENV SANDBOX_VERSION=${SANDBOX_VERSION}
-
-# CA certificate installation
-RUN mkdir -p /usr/local/share/ca-certificates
-RUN --mount=type=secret,id=wrangler_ca \
-    if [ -f /run/secrets/wrangler_ca ] && [ -s /run/secrets/wrangler_ca ]; then \
-        cp /run/secrets/wrangler_ca /usr/local/share/ca-certificates/wrangler-dev-ca.crt && \
-        cat /run/secrets/wrangler_ca >> /etc/ssl/certs/ca-certificates.crt && \
-        apk add --no-cache ca-certificates && \
-        update-ca-certificates; \
-    else \
-        apk add --no-cache ca-certificates; \
-    fi
-
-RUN apk add --no-cache bash file git curl libstdc++ libgcc s3fs-fuse fuse tini
-
-RUN sed -i 's/#user_allow_other/user_allow_other/' /etc/fuse.conf
-
-# The Alpine variant uses the same cloudflared release asset as the glibc
-# variants. It is a static binary that runs on musl without gcompat.
-COPY --from=cloudflared-binary /cloudflared /usr/local/bin/cloudflared
-RUN cloudflared --version
-
-COPY --from=builder /app/packages/sandbox-container/dist/sandbox-musl /container-server/sandbox
-
-WORKDIR /container-server
-
-COPY --from=builder /app/packages/sandbox-container/dist/index.js ./dist/
-
-RUN mkdir -p /workspace
-
-EXPOSE 3000
-
-ENV PYTHON_POOL_MIN_SIZE=0
-ENV JAVASCRIPT_POOL_MIN_SIZE=0
-ENV TYPESCRIPT_POOL_MIN_SIZE=0
-
-ENTRYPOINT ["/sbin/tini", "--", "/container-server/sandbox"]