@cloudflare/sandbox 0.13.0-next.802.1 → 0.13.0-next.816.1

package/dist/extensions/index.d.ts

@@ -1,4 +1,4 @@
 import "../process-types-GStiZ8f8.js";
-import "../filesystem-Y5aF3nmJ.js";
-import { a as ExtensionRuntimeControl, c as SandboxExtension, d as sandboxRuntimeCall, h as ExtensionPackage, i as ExtensionRuntimeCallbackResult, l as SandboxLike, m as ExtensionHealth, n as ExtensionRuntimeCall, o as HTTPAuthHostConfig, r as ExtensionRuntimeCallback, s as HTTPAuthInterceptorParams, t as ExtensionProcessSandbox, u as createExtensionProcessSandbox } from "../index-DfXx3uZL.js";
+import "../filesystem-Cd6xd_Pe.js";
+import { a as ExtensionRuntimeControl, c as SandboxExtension, d as sandboxRuntimeCall, h as ExtensionPackage, i as ExtensionRuntimeCallbackResult, l as SandboxLike, m as ExtensionHealth, n as ExtensionRuntimeCall, o as HTTPAuthHostConfig, r as ExtensionRuntimeCallback, s as HTTPAuthInterceptorParams, t as ExtensionProcessSandbox, u as createExtensionProcessSandbox } from "../index-Fbdwkfft.js";
 export { ExtensionHealth, ExtensionPackage, ExtensionProcessSandbox, ExtensionRuntimeCall, ExtensionRuntimeCallback, ExtensionRuntimeCallbackResult, ExtensionRuntimeControl, HTTPAuthHostConfig, HTTPAuthInterceptorParams, SandboxExtension, SandboxLike, createExtensionProcessSandbox, sandboxRuntimeCall };

package/dist/extensions/index.js

@@ -1,6 +1,6 @@
 import "../errors-Bb3s6nBS.js";
 import "../errors--yR3zLC_.js";
 import "../dist-n_eniPAR.js";
-import { n as createExtensionProcessSandbox, r as sandboxRuntimeCall, t as SandboxExtension } from "../extensions-BKL2zqL4.js";
+import { n as createExtensionProcessSandbox, r as sandboxRuntimeCall, t as SandboxExtension } from "../extensions-038QzSIg.js";
 
 export { SandboxExtension, createExtensionProcessSandbox, sandboxRuntimeCall };

package/dist/{extensions-BKL2zqL4.js → extensions-038QzSIg.js}

@@ -627,6 +627,10 @@ var SandboxProcessImpl = class {
 	kill(signal = 15) {
 		return this.capability.kill(signal);
 	}
+	/** Releases the RPC stub to the process. The process keeps running. */
+	[Symbol.dispose]() {
+		this.capability[Symbol.dispose]?.();
+	}
 	async consumeLogs(signal, consume) {
 		const stream = await openRemoteSubscription(this.capability.openLogs({
 			replay: true,
@@ -1020,4 +1024,4 @@ async function sha256Hex(bytes) {
 
 //#endregion
 export { PullSubscriptionTarget as a, createSandboxProcess as i, createExtensionProcessSandbox as n, openRemoteSubscription as o, sandboxRuntimeCall as r, translateRPCError as s, SandboxExtension as t };
-//# sourceMappingURL=extensions-BKL2zqL4.js.map
+//# sourceMappingURL=extensions-038QzSIg.js.map

package/dist/extensions-038QzSIg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extensions-038QzSIg.js","names":["context","payload: RPCErrorPayload | undefined","kind: RPCTransportErrorKind","closeCode: number | undefined","closeReason: string | undefined","context: RPCTransportContext","interruptedContext: OperationInterruptedContext","#reader","#onRelease","#released","#release","subscription:\n    | ProcessSubscriptionRPC<T>\n    | ProcessPullSubscriptionRPC<T>\n    | undefined","onAbort: (() => void) | undefined","onAbort","read: () => Promise<ReadableStreamReadResult<T>>","cancelReader: () => void","source: ReadableStream<T>","reader: ReadableStreamDefaultReader<T>","controller: ReadableStreamDefaultController<T> | undefined","timer: ReturnType<typeof setTimeout> | undefined","abortListener: (() => void) | undefined","competitors: Promise<T>[]","stdout: Uint8Array[]","stderr: Uint8Array[]","match","id: string","pid: number","capability: ProcessRPCDescriptor['capability']","#exitCodePromise","logStream: ReadableStream<ProcessLogEvent> | undefined","portReader: ReadableStreamDefaultReader<PortWatchEvent> | undefined","logReader: ReadableStreamDefaultReader<ProcessLogEvent> | undefined","reader: ReadableStreamDefaultReader<ProcessLogEvent> | undefined","sandboxRuntimeCall: unique symbol","#sandbox","#pkg","#requirePackage","#hashOnce","#connect","#hashPromise","current: object | null"],"sources":["../src/container-control/rpc-error.ts","../src/processes/remote-subscription.ts","../src/processes/process-waits.ts","../src/processes/process-output.ts","../src/processes/process-readiness.ts","../src/processes/wait-for-log.ts","../src/processes/sandbox-process.ts","../src/extensions/index.ts"],"sourcesContent":["/** Error translation for container control RPC calls. */\n\nimport {\n  ErrorCode,\n  type ErrorResponse,\n  getHttpStatus,\n  getSuggestion,\n  type OperationInterruptedContext,\n  type RPCTransportContext,\n  type RPCTransportErrorKind\n} from '@repo/shared/errors';\nimport { createErrorFromResponse } from '../errors/adapter';\nimport { SandboxError } from '../errors/classes';\n\ninterface RPCErrorPayload {\n  code: string;\n  message: string;\n  context?: Record<string, unknown>;\n}\n\nfunction isLocalSandboxError(\n  error: Error\n): error is Error & { errorResponse: ErrorResponse } {\n  if (!('errorResponse' in error)) return false;\n  const response = error.errorResponse as Partial<ErrorResponse> | undefined;\n  return (\n    typeof response?.code === 'string' &&\n    Object.hasOwn(ErrorCode, response.code) &&\n    typeof response.message === 'string' &&\n    typeof response.httpStatus === 'number' &&\n    typeof response.timestamp === 'string' &&\n    typeof response.context === 'object' &&\n    response.context !== null\n  );\n}\n\nexport interface RPCTranslationContext {\n  operation?: string;\n  translateTransportErrorsAsInterruptions?: boolean;\n}\n\nexport function translateRPCError(\n  error: unknown,\n  context: RPCTranslationContext = {}\n): never {\n  if (error instanceof SandboxError) throw error;\n\n  if (error instanceof Error) {\n    if (isLocalSandboxError(error)) {\n      throw error;\n    }\n\n    const propagated = error as Error & {\n      code?: unknown;\n      details?: unknown;\n    };\n    if (\n      typeof propagated.code === 'string' &&\n      Object.hasOwn(ErrorCode, propagated.code)\n    ) {\n      const code = propagated.code as ErrorCode;\n      const context =\n        propagated.details && typeof propagated.details === 'object'\n          ? (propagated.details as Record<string, unknown>)\n          : {};\n      throw createErrorFromResponse({\n        code,\n        message: error.message,\n        context,\n        httpStatus: getHttpStatus(code),\n        timestamp: new Date().toISOString()\n      });\n    }\n\n    let payload: RPCErrorPayload | undefined;\n    try {\n      payload = JSON.parse(error.message) as RPCErrorPayload;\n    } catch {}\n    if (\n      payload &&\n      typeof payload.code === 'string' &&\n      typeof payload.message === 'string'\n    ) {\n      throw createErrorFromResponse({\n        code: payload.code as ErrorCode,\n        message: payload.message,\n        context: payload.context ?? {},\n        httpStatus: getHttpStatus(payload.code as ErrorCode),\n        timestamp: new Date().toISOString()\n      });\n    }\n\n    const transportResponse = buildTransportErrorResponse(error);\n    const interruptedResponse =\n      context.translateTransportErrorsAsInterruptions === false\n        ? null\n        : buildInterruptedOperationResponse(transportResponse, context);\n    throw createErrorFromResponse(\n      (interruptedResponse ?? transportResponse) as unknown as ErrorResponse,\n      { cause: error }\n    );\n  }\n\n  const wrapped = new Error(String(error));\n  throw createErrorFromResponse(\n    buildTransportErrorResponse(wrapped) as unknown as ErrorResponse,\n    { cause: error }\n  );\n}\n\nfunction buildTransportErrorResponse(\n  error: Error\n): ErrorResponse<RPCTransportContext> {\n  const message = error.message;\n  const errorName = error.name;\n  let kind: RPCTransportErrorKind = 'unknown';\n  let closeCode: number | undefined;\n  let closeReason: string | undefined;\n\n  if (errorName === 'TypeError') {\n    kind = 'invalid_frame';\n  } else if (errorName === 'SyntaxError') {\n    kind = 'protocol_error';\n  } else {\n    const peerCloseMatch = message.match(\n      /^Peer closed WebSocket: (\\d+) ?(.*)$/\n    );\n    if (peerCloseMatch) {\n      kind = 'peer_closed';\n      closeCode = Number(peerCloseMatch[1]);\n      closeReason = peerCloseMatch[2] || undefined;\n    } else if (message === 'WebSocket connection failed.') {\n      kind = 'connection_failed';\n    } else if (message.startsWith('WebSocket upgrade failed')) {\n      kind = 'upgrade_failed';\n    } else if (message === 'No WebSocket in upgrade response') {\n      kind = 'upgrade_failed';\n    } else if (\n      message === 'RPC session was shut down by disposing the main stub' ||\n      message === 'RPC was canceled because the RpcPromise was disposed.'\n    ) {\n      kind = 'session_disposed';\n    }\n  }\n\n  const context: RPCTransportContext = {\n    kind,\n    originalMessage: message,\n    errorName,\n    ...(closeCode !== undefined ? { closeCode } : {}),\n    ...(closeReason !== undefined ? { closeReason } : {})\n  };\n  return {\n    code: ErrorCode.RPC_TRANSPORT_ERROR,\n    message,\n    context,\n    httpStatus: getHttpStatus(ErrorCode.RPC_TRANSPORT_ERROR),\n    suggestion: getSuggestion(\n      ErrorCode.RPC_TRANSPORT_ERROR,\n      context as unknown as Record<string, unknown>\n    ),\n    timestamp: new Date().toISOString()\n  };\n}\n\nfunction buildInterruptedOperationResponse(\n  transportResponse: ErrorResponse<RPCTransportContext>,\n  context: RPCTranslationContext\n): ErrorResponse<OperationInterruptedContext> | null {\n  if (!context.operation) return null;\n  const { kind } = transportResponse.context;\n  if (\n    kind !== 'session_disposed' &&\n    kind !== 'peer_closed' &&\n    kind !== 'connection_failed'\n  ) {\n    return null;\n  }\n\n  const interruptedContext: OperationInterruptedContext = {\n    reason:\n      kind === 'session_disposed' ? 'transport_disposed' : 'runtime_replaced',\n    operation: context.operation,\n    admitted: 'unknown',\n    retryable: false\n  };\n  const action =\n    kind === 'session_disposed' ? 'was closing' : 'closed unexpectedly';\n\n  return {\n    code: ErrorCode.OPERATION_INTERRUPTED,\n    message: `Sandbox operation ${context.operation} was interrupted while the runtime connection ${action}`,\n    context: interruptedContext,\n    httpStatus: getHttpStatus(ErrorCode.OPERATION_INTERRUPTED),\n    suggestion: getSuggestion(\n      ErrorCode.OPERATION_INTERRUPTED,\n      interruptedContext as unknown as Record<string, unknown>\n    ),\n    timestamp: new Date().toISOString()\n  };\n}\n","import { RpcTarget } from 'cloudflare:workers';\nimport { translateRPCError } from '../container-control/rpc-error';\nimport type {\n  ProcessPullSubscriptionRPC,\n  ProcessSubscriptionRPC\n} from './rpc-types';\n\ninterface RemoteSubscriptionOptions {\n  protocol: 'stream' | 'pull';\n  signal?: AbortSignal;\n  operation?: string;\n  abortError?: () => Error;\n}\n\n/** Keeps a stream local to its Durable Object and exposes pull RPC methods. */\nexport class PullSubscriptionTarget<T>\n  extends RpcTarget\n  implements ProcessPullSubscriptionRPC<T>\n{\n  readonly #reader: ReadableStreamDefaultReader<T>;\n  readonly #onRelease: (() => void) | undefined;\n  #released = false;\n\n  constructor(stream: ReadableStream<T>, onRelease?: () => void) {\n    super();\n    this.#reader = stream.getReader();\n    this.#onRelease = onRelease;\n  }\n\n  async next(): Promise<ReadableStreamReadResult<T>> {\n    if (this.#released) return { done: true, value: undefined };\n    try {\n      const result = await this.#reader.read();\n      if (result.done) this.#release();\n      return result;\n    } catch (error) {\n      this.#release();\n      throw error;\n    }\n  }\n\n  async cancel(): Promise<void> {\n    if (this.#released) return;\n    try {\n      await this.#reader.cancel();\n    } finally {\n      this.#release();\n    }\n  }\n\n  [Symbol.dispose](): void {\n    if (this.#released) return;\n    void this.#reader.cancel().catch(() => undefined);\n    this.#release();\n  }\n\n  #release(): void {\n    if (this.#released) return;\n    this.#released = true;\n    this.#onRelease?.();\n  }\n}\n\n/** Exposes a remote Workers RPC subscription as a caller-owned local stream. */\nexport async function openRemoteSubscription<T>(\n  subscriptionPromise: Promise<\n    ProcessSubscriptionRPC<T> | ProcessPullSubscriptionRPC<T>\n  >,\n  options: RemoteSubscriptionOptions\n): Promise<ReadableStream<T>> {\n  let subscription:\n    | ProcessSubscriptionRPC<T>\n    | ProcessPullSubscriptionRPC<T>\n    | undefined;\n  let releaseRequested = false;\n  let cleanupStarted = false;\n  const release = (): void => {\n    releaseRequested = true;\n    if (cleanupStarted || subscription === undefined) return;\n    cleanupStarted = true;\n    try {\n      void subscription.cancel().catch(() => undefined);\n    } catch {\n      // Local disposal still runs after a synchronous RPC failure.\n    }\n    try {\n      subscription[Symbol.dispose]();\n    } catch {\n      // Cleanup must not replace the consumer's result.\n    }\n  };\n\n  const signal = options.signal;\n  const aborted = (): Error =>\n    options.abortError?.() ??\n    (signal?.reason instanceof Error\n      ? signal.reason\n      : new Error('Operation aborted'));\n  const raceSetup = async <U>(setup: Promise<U>): Promise<U> => {\n    if (signal === undefined) return setup;\n    if (signal.aborted) {\n      release();\n      throw aborted();\n    }\n    let onAbort: (() => void) | undefined;\n    const abort = new Promise<never>((_, reject) => {\n      onAbort = () => {\n        release();\n        reject(aborted());\n      };\n      signal.addEventListener('abort', onAbort, { once: true });\n    });\n    try {\n      return await Promise.race([setup, abort]);\n    } finally {\n      if (onAbort !== undefined) signal.removeEventListener('abort', onAbort);\n    }\n  };\n\n  try {\n    subscription = await raceSetup(\n      subscriptionPromise.then((value) => {\n        subscription = value;\n        if (releaseRequested) release();\n        return value;\n      })\n    );\n  } catch (error) {\n    if (signal?.aborted) throw error;\n    translateRPCError(error, {\n      operation: options.operation ?? 'open process subscription'\n    });\n  }\n\n  if (subscription === undefined)\n    throw new Error('Process subscription acquisition did not complete');\n\n  let read: () => Promise<ReadableStreamReadResult<T>>;\n  let cancelReader: () => void;\n  if (options.protocol === 'pull') {\n    const pullSubscription = subscription as ProcessPullSubscriptionRPC<T>;\n    read = () => pullSubscription.next();\n    cancelReader = () => undefined;\n  } else {\n    const streamSubscription = subscription as ProcessSubscriptionRPC<T>;\n    let source: ReadableStream<T>;\n    try {\n      source = await raceSetup(streamSubscription.stream());\n    } catch (error) {\n      release();\n      if (signal?.aborted) throw error;\n      translateRPCError(error, {\n        operation: options.operation ?? 'open process subscription'\n      });\n    }\n\n    let reader: ReadableStreamDefaultReader<T>;\n    try {\n      reader = source.getReader();\n    } catch (error) {\n      release();\n      translateRPCError(error, {\n        operation: options.operation ?? 'read process subscription'\n      });\n    }\n    read = () => reader.read();\n    cancelReader = () => {\n      try {\n        void reader.cancel().catch(() => undefined);\n      } catch {\n        // Remote subscription release below remains authoritative.\n      }\n    };\n  }\n\n  let stopped = false;\n  let controller: ReadableStreamDefaultController<T> | undefined;\n  const stop = (error?: Error): void => {\n    if (stopped) return;\n    stopped = true;\n    signal?.removeEventListener('abort', onAbort);\n    cancelReader();\n    release();\n    if (error !== undefined) controller?.error(error);\n  };\n  const onAbort = (): void => stop(aborted());\n\n  return new ReadableStream<T>({\n    start(localController) {\n      controller = localController;\n      if (signal?.aborted) onAbort();\n      else signal?.addEventListener('abort', onAbort, { once: true });\n    },\n    async pull(localController) {\n      if (stopped) return;\n      try {\n        const result = await read();\n        if (stopped) return;\n        if (result.done) {\n          stopped = true;\n          signal?.removeEventListener('abort', onAbort);\n          release();\n          localController.close();\n          return;\n        }\n        localController.enqueue(result.value);\n      } catch (error) {\n        stop();\n        translateRPCError(error, {\n          operation: options.operation ?? 'consume process subscription'\n        });\n      }\n    },\n    cancel() {\n      stop();\n    }\n  });\n}\n","import { ErrorCode } from '@repo/shared/errors';\nimport { translateRPCError } from '../container-control/rpc-error';\nimport {\n  ProcessAbortedError,\n  ProcessError,\n  ProcessReadyTimeoutError,\n  ProcessWaitTimeoutError\n} from '../errors';\n\nexport type WaitOperation = 'output' | 'waitForExit' | 'waitForLog';\n\nexport async function withLocalWait<T>(\n  work: (settlementSignal: AbortSignal) => Promise<T>,\n  options: {\n    processId: string;\n    operation: WaitOperation | 'waitForPort' | 'logs';\n    timeout?: number;\n    signal?: AbortSignal;\n    port?: number;\n  }\n): Promise<T> {\n  const { signal, timeout } = options;\n  const settlement = new AbortController();\n  let timer: ReturnType<typeof setTimeout> | undefined;\n  let abortListener: (() => void) | undefined;\n  const competitors: Promise<T>[] = [work(settlement.signal)];\n\n  if (timeout !== undefined) {\n    competitors.push(\n      new Promise<T>((_, reject) => {\n        timer = setTimeout(\n          () => reject(timeoutError(options, timeout)),\n          timeout\n        );\n      })\n    );\n  }\n  if (signal !== undefined) {\n    competitors.push(\n      new Promise<T>((_, reject) => {\n        const abort = () =>\n          reject(abortError(options.processId, options.operation, signal));\n        if (signal.aborted) abort();\n        else {\n          abortListener = abort;\n          signal.addEventListener('abort', abort, { once: true });\n        }\n      })\n    );\n  }\n\n  try {\n    return await Promise.race(competitors);\n  } finally {\n    settlement.abort();\n    if (timer !== undefined) clearTimeout(timer);\n    if (abortListener !== undefined)\n      signal?.removeEventListener('abort', abortListener);\n  }\n}\n\nexport function processFailure(\n  processId: string,\n  pid: number,\n  failure: { code: string; message: string }\n): ProcessError {\n  return new ProcessError({\n    code: ErrorCode.PROCESS_ERROR,\n    message: failure.message,\n    context: { processId, pid },\n    httpStatus: 500,\n    timestamp: new Date().toISOString()\n  });\n}\n\nexport function streamClosed(message: string): never {\n  translateRPCError(new Error(message), {\n    operation: 'consume process subscription',\n    translateTransportErrorsAsInterruptions: false\n  });\n}\n\nfunction timeoutError(\n  options: {\n    processId: string;\n    operation: WaitOperation | 'waitForPort' | 'logs';\n    port?: number;\n  },\n  timeout: number\n): ProcessWaitTimeoutError | ProcessReadyTimeoutError {\n  if (options.operation === 'waitForPort') {\n    const condition = `port ${options.port ?? 'unknown'}`;\n    return new ProcessReadyTimeoutError({\n      code: ErrorCode.PROCESS_READY_TIMEOUT,\n      message: `Process did not become ready within ${timeout}ms. Waiting for: ${condition}`,\n      context: {\n        processId: options.processId,\n        command: options.processId,\n        condition,\n        timeout\n      },\n      httpStatus: 408,\n      timestamp: new Date().toISOString()\n    });\n  }\n  const operation =\n    options.operation === 'logs' ? 'waitForLog' : options.operation;\n  return new ProcessWaitTimeoutError({\n    code: ErrorCode.PROCESS_WAIT_TIMEOUT,\n    message: `Process ${operation} did not complete within ${timeout}ms`,\n    context: { processId: options.processId, operation, timeout },\n    httpStatus: 408,\n    timestamp: new Date().toISOString()\n  });\n}\n\nexport function abortError(\n  processId: string,\n  operation: string,\n  signal: AbortSignal\n): Error {\n  if (signal.reason instanceof Error && signal.reason.name !== 'AbortError')\n    return signal.reason;\n  return new ProcessAbortedError({\n    code: ErrorCode.PROCESS_ABORTED,\n    message: `Process ${operation} was aborted`,\n    context: { processId, operation },\n    httpStatus: 499,\n    timestamp: new Date().toISOString()\n  });\n}\n","import type { ProcessLogEvent, ProcessOutput } from '@repo/shared';\nimport { processFailure, streamClosed } from './process-waits';\n\nexport async function readProcessOutput(\n  reader: ReadableStreamDefaultReader<ProcessLogEvent>,\n  options: { maxBytes?: number; processId: string; pid: number }\n): Promise<ProcessOutput<Uint8Array>> {\n  const maxBytes = validateMaxBytes(options.maxBytes);\n  const stdout: Uint8Array[] = [];\n  const stderr: Uint8Array[] = [];\n  let stdoutBytes = 0;\n  let stderrBytes = 0;\n  let retainedBytes = 0;\n  let truncated = false;\n\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) streamClosed('Process log stream ended before exit');\n\n    const event = result.value;\n    if ('type' in event && event.type === 'truncated') {\n      truncated = true;\n      continue;\n    }\n    if ('state' in event) {\n      if (event.state === 'error')\n        throw processFailure(options.processId, options.pid, event.error);\n      return {\n        stdout: concat(stdout, stdoutBytes),\n        stderr: concat(stderr, stderrBytes),\n        exitCode: event.exit.code,\n        signal: event.exit.signal,\n        timedOut: event.exit.timedOut,\n        truncated\n      };\n    }\n\n    const remaining =\n      maxBytes === undefined\n        ? event.data.byteLength\n        : Math.max(0, maxBytes - retainedBytes);\n    const retainedLength = Math.min(remaining, event.data.byteLength);\n    if (retainedLength < event.data.byteLength) truncated = true;\n    if (retainedLength === 0) continue;\n\n    const chunk =\n      retainedLength === event.data.byteLength\n        ? event.data\n        : event.data.slice(0, retainedLength);\n    if (event.type === 'stdout') {\n      stdout.push(chunk);\n      stdoutBytes += chunk.byteLength;\n    } else {\n      stderr.push(chunk);\n      stderrBytes += chunk.byteLength;\n    }\n    retainedBytes += chunk.byteLength;\n  }\n}\n\nexport function validateMaxBytes(\n  maxBytes: number | undefined\n): number | undefined {\n  if (maxBytes === undefined) return undefined;\n  if (!Number.isFinite(maxBytes) || maxBytes < 0)\n    throw new Error('maxBytes must be a non-negative finite number');\n  return maxBytes;\n}\n\nfunction concat(chunks: Uint8Array[], length: number): Uint8Array {\n  const out = new Uint8Array(length);\n  let offset = 0;\n  for (const chunk of chunks) {\n    out.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return out;\n}\n","import type { PortWatchEvent, ProcessLogEvent } from '@repo/shared';\nimport { ErrorCode } from '@repo/shared/errors';\nimport { ProcessExitedBeforeReadyError } from '../errors';\nimport { processFailure, streamClosed } from './process-waits';\n\nexport async function waitForReadiness(\n  portReader: ReadableStreamDefaultReader<PortWatchEvent>,\n  logReader: ReadableStreamDefaultReader<ProcessLogEvent>,\n  context: { processId: string; pid: number; port: number }\n): Promise<void> {\n  await Promise.race([\n    consumePort(portReader),\n    consumeTerminal(logReader, context)\n  ]);\n}\n\nasync function consumePort(\n  reader: ReadableStreamDefaultReader<PortWatchEvent>\n): Promise<void> {\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) streamClosed('Port watch stream ended unexpectedly');\n    if (result.value.type === 'ready') return;\n    if (result.value.type === 'error')\n      throw new Error(result.value.error || 'Port watch failed');\n  }\n}\n\nasync function consumeTerminal(\n  reader: ReadableStreamDefaultReader<ProcessLogEvent>,\n  context: { processId: string; pid: number; port: number }\n): Promise<never> {\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) streamClosed('Process log stream ended before exit');\n    const event = result.value;\n    if (!('state' in event)) continue;\n    if (event.state === 'error')\n      throw processFailure(context.processId, context.pid, event.error);\n    throw exitedBeforeReady(context.processId, context.port, event.exit.code);\n  }\n}\n\nfunction exitedBeforeReady(\n  processId: string,\n  port: number,\n  exitCode: number\n): ProcessExitedBeforeReadyError {\n  return new ProcessExitedBeforeReadyError({\n    code: ErrorCode.PROCESS_EXITED_BEFORE_READY,\n    message: `Process exited with code ${exitCode} before becoming ready. Waiting for: port ${port}`,\n    context: {\n      processId,\n      command: processId,\n      condition: `port ${port}`,\n      exitCode\n    },\n    httpStatus: 500,\n    timestamp: new Date().toISOString()\n  });\n}\n","import type { ProcessLogEvent, WaitForLogResult } from '@repo/shared';\nimport { ErrorCode } from '@repo/shared/errors';\nimport { ProcessExitedBeforeLogError } from '../errors';\nimport { processFailure, streamClosed } from './process-waits';\n\nconst MATCH_WINDOW = 64 * 1024;\n\ntype WantedStream = 'stdout' | 'stderr' | 'both';\ntype LogStream = 'stdout' | 'stderr';\n\nexport async function readUntilLogMatch(\n  reader: ReadableStreamDefaultReader<ProcessLogEvent>,\n  pattern: string | RegExp,\n  wanted: WantedStream,\n  processId: string,\n  pid: number\n): Promise<WaitForLogResult> {\n  const decoders = {\n    stdout: new TextDecoder(),\n    stderr: new TextDecoder()\n  };\n  const windows = { stdout: '', stderr: '' };\n  const cursors = { stdout: '', stderr: '' };\n\n  const append = (\n    stream: LogStream,\n    decoded: string,\n    cursor: string\n  ): WaitForLogResult | undefined => {\n    const text = bounded(windows[stream] + decoded);\n    windows[stream] = text;\n    cursors[stream] = cursor;\n    const match = findMatch(text, pattern);\n    return match === undefined ? undefined : { stream, text, match, cursor };\n  };\n  const flush = (cursor: string): WaitForLogResult | undefined => {\n    for (const stream of ['stdout', 'stderr'] as const) {\n      if (wanted !== 'both' && wanted !== stream) continue;\n      const result = append(\n        stream,\n        decoders[stream].decode(),\n        cursors[stream] || cursor\n      );\n      if (result !== undefined) return result;\n    }\n    return undefined;\n  };\n\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) {\n      const match = flush('');\n      if (match !== undefined) return match;\n      streamClosed('Process log stream ended before a match was found');\n    }\n    const event = result.value;\n    if ('state' in event) {\n      const match = flush(event.cursor);\n      if (match !== undefined) return match;\n      if (event.state === 'error')\n        throw processFailure(processId, pid, event.error);\n      throw new ProcessExitedBeforeLogError({\n        code: ErrorCode.PROCESS_EXITED_BEFORE_LOG,\n        message: 'Process exited before a log match was found',\n        context: { processId, pid, exit: { ...event.exit } },\n        httpStatus: 409,\n        timestamp: new Date().toISOString()\n      });\n    }\n    if (event.type !== 'stdout' && event.type !== 'stderr') continue;\n    if (wanted !== 'both' && wanted !== event.type) continue;\n\n    const match = append(\n      event.type,\n      decoders[event.type].decode(event.data, { stream: true }),\n      event.cursor\n    );\n    if (match !== undefined) return match;\n  }\n}\n\nfunction bounded(text: string): string {\n  return text.length <= MATCH_WINDOW ? text : text.slice(-MATCH_WINDOW);\n}\n\nfunction findMatch(text: string, pattern: string | RegExp): string | undefined {\n  if (typeof pattern === 'string')\n    return text.includes(pattern) ? pattern : undefined;\n  pattern.lastIndex = 0;\n  const match = pattern.exec(text)?.[0];\n  pattern.lastIndex = 0;\n  return match;\n}\n","import type {\n  PortWatchEvent,\n  ProcessExit,\n  ProcessLogEvent,\n  ProcessLogsOptions,\n  ProcessOutput,\n  ProcessOutputOptions,\n  ProcessStatus,\n  ProcessTextOutputOptions,\n  SandboxProcess,\n  WaitForLogOptions,\n  WaitForLogResult,\n  WaitForPortOptions\n} from '@repo/shared';\nimport { readProcessOutput, validateMaxBytes } from './process-output';\nimport { waitForReadiness } from './process-readiness';\nimport {\n  abortError,\n  processFailure,\n  streamClosed,\n  withLocalWait\n} from './process-waits';\nimport { openRemoteSubscription } from './remote-subscription';\nimport type { ProcessRPCDescriptor } from './rpc-types';\nimport { readUntilLogMatch } from './wait-for-log';\n\nexport type { SandboxProcess };\n\nexport class SandboxProcessImpl implements SandboxProcess {\n  #exitCodePromise?: Promise<number>;\n\n  constructor(\n    readonly id: string,\n    readonly pid: number,\n    private readonly capability: ProcessRPCDescriptor['capability']\n  ) {}\n\n  get exitCode(): Promise<number> {\n    this.#exitCodePromise ??= this.waitForExit().then((exit) => exit.code);\n    return this.#exitCodePromise;\n  }\n\n  status(): Promise<ProcessStatus> {\n    return this.capability.status();\n  }\n\n  async logs(\n    options: ProcessLogsOptions = {}\n  ): Promise<ReadableStream<ProcessLogEvent>> {\n    const { signal, ...rpcOptions } = options;\n    return openRemoteSubscription(this.capability.openLogs(rpcOptions), {\n      protocol: 'pull',\n      signal,\n      operation: 'read process logs',\n      abortError:\n        signal === undefined\n          ? undefined\n          : () => abortError(this.id, 'logs', signal)\n    });\n  }\n\n  output(options: ProcessTextOutputOptions): Promise<ProcessOutput<string>>;\n  output(options?: ProcessOutputOptions): Promise<ProcessOutput<Uint8Array>>;\n  async output(\n    options: ProcessOutputOptions | ProcessTextOutputOptions = {}\n  ): Promise<ProcessOutput<Uint8Array> | ProcessOutput<string>> {\n    const maxBytes = validateMaxBytes(options.maxBytes);\n    const bytes = await withLocalWait(\n      (settlementSignal) =>\n        this.consumeLogs(settlementSignal, (reader) =>\n          readProcessOutput(reader, {\n            maxBytes,\n            processId: this.id,\n            pid: this.pid\n          })\n        ),\n      {\n        processId: this.id,\n        operation: 'output',\n        timeout: options.timeout,\n        signal: options.signal\n      }\n    );\n    if ('encoding' in options && options.encoding === 'utf8') {\n      return {\n        ...bytes,\n        stdout: new TextDecoder().decode(bytes.stdout),\n        stderr: new TextDecoder().decode(bytes.stderr)\n      };\n    }\n    return bytes;\n  }\n\n  async waitForExit(\n    options: { timeout?: number; signal?: AbortSignal } = {}\n  ): Promise<ProcessExit> {\n    return withLocalWait(\n      (settlementSignal) =>\n        this.consumeLogs(settlementSignal, (reader) =>\n          readTerminal(reader, this.id, this.pid)\n        ),\n      {\n        processId: this.id,\n        operation: 'waitForExit',\n        timeout: options.timeout,\n        signal: options.signal\n      }\n    );\n  }\n\n  async waitForLog(\n    pattern: string | RegExp,\n    options: WaitForLogOptions = {}\n  ): Promise<WaitForLogResult> {\n    return withLocalWait(\n      (settlementSignal) =>\n        this.consumeLogs(settlementSignal, (reader) =>\n          readUntilLogMatch(\n            reader,\n            pattern,\n            options.stream ?? 'both',\n            this.id,\n            this.pid\n          )\n        ),\n      {\n        processId: this.id,\n        operation: 'waitForLog',\n        timeout: options.timeout,\n        signal: options.signal\n      }\n    );\n  }\n\n  async waitForPort(\n    port: number,\n    options: WaitForPortOptions = {}\n  ): Promise<void> {\n    const { timeout, signal, ...rpcOptions } = options;\n    return withLocalWait(\n      (settlementSignal) =>\n        this.waitForPortSubscriptions(port, rpcOptions, settlementSignal),\n      {\n        processId: this.id,\n        operation: 'waitForPort',\n        timeout,\n        signal,\n        port\n      }\n    );\n  }\n\n  private async waitForPortSubscriptions(\n    port: number,\n    options: Omit<WaitForPortOptions, 'timeout' | 'signal'>,\n    settlementSignal: AbortSignal\n  ): Promise<void> {\n    const portStream = await openRemoteSubscription(\n      this.capability.openPortWatch(port, options),\n      {\n        operation: `watch port ${port}`,\n        protocol: 'pull',\n        signal: settlementSignal\n      }\n    );\n    let logStream: ReadableStream<ProcessLogEvent> | undefined;\n    let portReader: ReadableStreamDefaultReader<PortWatchEvent> | undefined;\n    let logReader: ReadableStreamDefaultReader<ProcessLogEvent> | undefined;\n    try {\n      portReader = portStream.getReader();\n      logStream = await openRemoteSubscription(\n        this.capability.openLogs({ replay: true, follow: true }),\n        {\n          operation: 'read process logs',\n          protocol: 'pull',\n          signal: settlementSignal\n        }\n      );\n      logReader = logStream.getReader();\n      await waitForReadiness(portReader, logReader, {\n        processId: this.id,\n        pid: this.pid,\n        port\n      });\n    } finally {\n      await cancelOwned(portReader, portStream);\n      if (logStream !== undefined) await cancelOwned(logReader, logStream);\n    }\n  }\n\n  kill(signal = 15): Promise<void> {\n    return this.capability.kill(signal);\n  }\n\n  /** Releases the RPC stub to the process. The process keeps running. */\n  [Symbol.dispose](): void {\n    // A Workers RPC stub is disposable; the in-object target is not.\n    (this.capability as Partial<Disposable>)[Symbol.dispose]?.();\n  }\n\n  private async consumeLogs<T>(\n    signal: AbortSignal,\n    consume: (\n      reader: ReadableStreamDefaultReader<ProcessLogEvent>\n    ) => Promise<T>\n  ): Promise<T> {\n    const stream = await openRemoteSubscription(\n      this.capability.openLogs({ replay: true, follow: true }),\n      { signal, operation: 'read process logs', protocol: 'pull' }\n    );\n    return this.consume(stream, consume);\n  }\n\n  private async consume<T>(\n    stream: ReadableStream<ProcessLogEvent>,\n    consume: (\n      reader: ReadableStreamDefaultReader<ProcessLogEvent>\n    ) => Promise<T>\n  ): Promise<T> {\n    let reader: ReadableStreamDefaultReader<ProcessLogEvent> | undefined;\n    try {\n      reader = stream.getReader();\n      return await consume(reader);\n    } finally {\n      await cancelOwned(reader, stream);\n    }\n  }\n}\n\nexport function createSandboxProcess(\n  descriptor: ProcessRPCDescriptor\n): SandboxProcess {\n  return new SandboxProcessImpl(\n    descriptor.id,\n    descriptor.pid,\n    descriptor.capability\n  );\n}\n\nasync function readTerminal(\n  reader: ReadableStreamDefaultReader<ProcessLogEvent>,\n  processId: string,\n  pid: number\n): Promise<ProcessExit> {\n  for (;;) {\n    const result = await reader.read();\n    if (result.done) streamClosed('Process log stream ended before exit');\n    if ('state' in result.value) {\n      if (result.value.state === 'exited') return result.value.exit;\n      throw processFailure(processId, pid, result.value.error);\n    }\n  }\n}\n\nasync function cancelOwned<T>(\n  reader: ReadableStreamDefaultReader<T> | undefined,\n  stream: ReadableStream<T>\n): Promise<void> {\n  try {\n    if (reader !== undefined) await reader.cancel();\n    else await stream.cancel();\n  } catch {\n    // The primary consumer result wins over cleanup failures.\n  }\n}\n","/**\n * Unified extension surface for the Cloudflare Sandbox SDK.\n *\n * Every extension \\u2014 whether it just drives existing control sub-APIs or\n * ships its own container sidecar \\u2014 shares one shape: a class extending\n * {@link SandboxExtension}, captured lazily via a `withX(this)` factory.\n *\n * - No sidecar? Extend {@link SandboxExtension} and use `this.exec()` or\n *   `this.withRuntime()` for scoped control APIs. Don't pass a package.\n * - Need a container sidecar? Pass an {@link ExtensionPackage} to `super()`.\n *   Then use {@link SandboxExtension.withSidecar} with the sidecar's typed\n *   capnweb remote main. Calls on that stub stream through capnweb \\u2014 callback\n *   parameters round-trip across both the DO\\u2192container and container\\u2192sidecar\n *   hops.\n *\n * `ExtensionPackage` carries tarball bytes produced by an extension build.\n * The SDK sends those bytes only when the container has not provisioned the\n * package hash yet.\n */\n\nimport { RpcTarget } from 'cloudflare:workers';\nimport type {\n  ExecOptions,\n  ExtensionHealth,\n  ExtensionPackage,\n  ProcessStatus,\n  SandboxBackupAPI,\n  SandboxCommand,\n  SandboxExtensionsAPI,\n  SandboxFilesAPI,\n  SandboxPortsAPI,\n  SandboxProcess,\n  SandboxTerminalsAPI,\n  SandboxTunnelsAPI,\n  SandboxUtilsAPI,\n  SandboxWatchAPI\n} from '@repo/shared';\nimport { EXTENSION_TARBALL_REQUIRED } from '@repo/shared';\nimport { createSandboxProcess } from '../processes';\nimport type { ProcessRPCDescriptor } from '../processes/rpc-types';\n\n// Re-export the wire types so consumers can author extensions from this\n// subpath without reaching into `@repo/shared` directly.\nexport type { ExtensionHealth, ExtensionPackage } from '@repo/shared';\n\nexport type ExtensionRuntimeControl = {\n  readonly files: SandboxFilesAPI;\n  readonly ports: SandboxPortsAPI;\n  readonly backup: SandboxBackupAPI;\n  readonly watch: SandboxWatchAPI;\n  readonly tunnels: SandboxTunnelsAPI;\n  readonly terminals: SandboxTerminalsAPI;\n  readonly extensions: SandboxExtensionsAPI;\n  readonly utils: SandboxUtilsAPI;\n};\n\ntype ExtensionRuntimeDomain =\n  ExtensionRuntimeControl[keyof ExtensionRuntimeControl];\n\nexport type ExtensionRuntimeCallback = (\n  control: ExtensionRuntimeControl\n) => Promise<unknown>;\n\ntype ExtensionRuntimeResult<T> = T extends\n  | ExtensionRuntimeControl\n  | ExtensionRuntimeDomain\n  ? never\n  : T;\n\nexport type ExtensionRuntimeCallbackResult<\n  Call extends ExtensionRuntimeCallback\n> = Awaited<ReturnType<Call>>;\n\ntype RejectEscapingRuntimeCallback<Call extends ExtensionRuntimeCallback> =\n  ExtensionRuntimeCallbackResult<Call> extends\n    | ExtensionRuntimeControl\n    | ExtensionRuntimeDomain\n    ? never\n    : unknown;\n\nexport type ExtensionRuntimeCall = <Call extends ExtensionRuntimeCallback>(\n  operation: string,\n  call: Call & RejectEscapingRuntimeCallback<Call>\n) => Promise<ExtensionRuntimeCallbackResult<Call>>;\n\nexport const sandboxRuntimeCall: unique symbol = Symbol('sandboxRuntimeCall');\n\nexport interface HTTPAuthHostConfig {\n  token: string;\n  username?: string;\n  type?: 'basic' | 'bearer';\n}\n\nexport interface HTTPAuthInterceptorParams {\n  hosts: Record<string, HTTPAuthHostConfig>;\n}\n\nexport type SandboxLike = {\n  readonly [sandboxRuntimeCall]: ExtensionRuntimeCall;\n  readonly exec?: (\n    command: SandboxCommand,\n    options?: ExecOptions\n  ) => Promise<SandboxProcess | ProcessRPCDescriptor>;\n  readonly getProcess?: (\n    processId: string\n  ) => Promise<SandboxProcess | ProcessRPCDescriptor | null>;\n  readonly listProcesses?: () => Promise<ProcessStatus[]>;\n  readonly envVars?: Record<string, string>;\n  registerGitAuthInterceptor?: (\n    params: HTTPAuthInterceptorParams\n  ) => Promise<void>;\n};\n\nexport interface ExtensionProcessSandbox {\n  exec(command: SandboxCommand, options?: ExecOptions): Promise<SandboxProcess>;\n  getProcess(processId: string): Promise<SandboxProcess | null>;\n  listProcesses(): Promise<ProcessStatus[]>;\n}\n\nfunction isProcessRPCDescriptor(\n  process: SandboxProcess | ProcessRPCDescriptor\n): process is ProcessRPCDescriptor {\n  return 'capability' in process;\n}\n\n/** Normalize local RPC descriptors and caller-side handles for extensions. */\nexport function createExtensionProcessSandbox(\n  sandbox: SandboxLike\n): ExtensionProcessSandbox {\n  return {\n    async exec(command, options) {\n      if (!sandbox.exec) {\n        throw new Error(\n          'Sandbox extension requires the exec surface from the owning Sandbox'\n        );\n      }\n      const process = await sandbox.exec.call(sandbox, command, options);\n      return isProcessRPCDescriptor(process)\n        ? createSandboxProcess(process)\n        : process;\n    },\n    async getProcess(processId) {\n      if (!sandbox.getProcess) {\n        throw new Error(\n          'Sandbox extension requires the getProcess surface from the owning Sandbox'\n        );\n      }\n      const process = await sandbox.getProcess.call(sandbox, processId);\n      if (!process) return null;\n      return isProcessRPCDescriptor(process)\n        ? createSandboxProcess(process)\n        : process;\n    },\n    listProcesses() {\n      if (!sandbox.listProcesses) {\n        throw new Error(\n          'Sandbox extension requires the listProcesses surface from the owning Sandbox'\n        );\n      }\n      return sandbox.listProcesses.call(sandbox);\n    }\n  };\n}\n\n/**\n * The one base class for *every* extension.\n *\n * - SDK-only: just drives existing sub-APIs.\n * - Sidecar: pass an {@link ExtensionPackage} to `super(sandbox, pkg)` and\n *   call `this.withSidecar<T>(operation, callback)` to use the typed capnweb stub inside one runtime callback.\n *\n * The sidecar helper throws a clear error if no package was supplied, so an\n * extension only \"becomes\" a sidecar extension when it opts in.\n *\n * ```ts\n * // SDK-only\n * class GitStatus extends SandboxExtension {\n *   constructor(s: SandboxLike) { super(s); }\n *   async status() {\n *     const process = await this.exec(['git', 'status']);\n *     return process.output({ encoding: 'utf8' });\n *   }\n * }\n *\n * // Sidecar\n * import sidecarTarballBytes from './sidecar-package.tgz';\n * import type { MyAPI } from './shared';\n *\n * class MyExt extends SandboxExtension {\n *   constructor(s: SandboxLike) { super(s, { tarball: new Uint8Array(sidecarTarballBytes) }); }\n *   async run(input: string): Promise<string> {\n *     return this.withSidecar<MyAPI, string>('my-ext.run', (api) =>\n *       api.run(input)\n *     );\n *   }\n * }\n * ```\n *\n * RPC-safety: the sandbox lives in `#sandbox` and runtime control is reached\n * only through a symbol-keyed capability, so it is not exposed as a named RPC\n * method. Only the public methods you add form the extension's RPC surface.\n */\nexport abstract class SandboxExtension extends RpcTarget {\n  readonly #sandbox: SandboxLike;\n  readonly #pkg: ExtensionPackage | undefined;\n  #hashPromise: Promise<string> | undefined;\n\n  protected constructor(sandbox: SandboxLike, pkg?: ExtensionPackage) {\n    super();\n    this.#sandbox = sandbox;\n    this.#pkg = pkg;\n  }\n\n  protected withRuntime<Call extends ExtensionRuntimeCallback>(\n    operation: string,\n    call: Call & RejectEscapingRuntimeCallback<Call>\n  ): Promise<ExtensionRuntimeResult<ExtensionRuntimeCallbackResult<Call>>> {\n    const guardedCall = async (runtimeControl: ExtensionRuntimeControl) => {\n      const { control, revoke } = scopedRuntimeControl(runtimeControl);\n      try {\n        const result = await call(control);\n        assertRuntimeControlDidNotEscape(result, control);\n        return result;\n      } finally {\n        revoke();\n      }\n    };\n    return this.#sandbox[sandboxRuntimeCall](\n      operation,\n      guardedCall as ExtensionRuntimeCallback\n    ) as Promise<ExtensionRuntimeResult<ExtensionRuntimeCallbackResult<Call>>>;\n  }\n\n  /** Launch an argv process through the owning Sandbox. */\n  protected exec(\n    command: SandboxCommand,\n    options?: ExecOptions\n  ): Promise<SandboxProcess> {\n    return createExtensionProcessSandbox(this.#sandbox).exec(command, options);\n  }\n\n  /** Sandbox-level environment applied to extension-launched processes. */\n  protected get envVars(): Record<string, string> {\n    return this.#sandbox.envVars ?? {};\n  }\n\n  protected get httpAuthInterceptor():\n    | ((params: HTTPAuthInterceptorParams) => Promise<void>)\n    | undefined {\n    const register = this.#sandbox.registerGitAuthInterceptor;\n    return register\n      ? (params) => register.call(this.#sandbox, params)\n      : undefined;\n  }\n\n  /**\n   * Provision/connect to the sidecar and use its typed capnweb remote inside\n   * one runtime callback. The remote is invalid after `call` resolves or\n   * rejects, so extension code cannot silently reconnect or keep using an old\n   * runtime's sidecar.\n   */\n  protected async withSidecar<T extends object, Result>(\n    operation: string,\n    call: (api: T) => Promise<Result>\n  ): Promise<Result> {\n    const pkg = this.#requirePackage();\n    const packageHash = await this.#hashOnce();\n    const scopedCall = async (control: ExtensionRuntimeControl) => {\n      const connected = await this.#connect<T>(\n        control.extensions,\n        pkg,\n        packageHash\n      );\n      const { proxy, revoke } = scopedSidecarRemote<T>(connected);\n      try {\n        const result = await call(proxy);\n        assertSidecarRemoteDidNotEscape(result);\n        return detachPlainData(result) as Result;\n      } finally {\n        revoke();\n      }\n    };\n    return (await this.withRuntime(\n      operation,\n      scopedCall as ExtensionRuntimeCallback\n    )) as Result;\n  }\n\n  /** Health snapshot for this extension's sidecar. */\n  protected async sidecarHealth(): Promise<ExtensionHealth> {\n    const hash = await this.#hashOnce();\n    return await this.withRuntime('extension.health', (control) =>\n      control.extensions.health(hash)\n    );\n  }\n\n  /**\n   * Stop this extension's sidecar. The next `withSidecar()` call will respawn\n   * it on demand.\n   */\n  protected async stopSidecar(): Promise<void> {\n    const hash = await this.#hashOnce();\n    await this.withRuntime('extension.stop', (control) =>\n      control.extensions.stop(hash)\n    );\n  }\n\n  // --- internals -----------------------------------------------------------\n\n  async #connect<T extends object>(\n    api: SandboxExtensionsAPI,\n    pkg: ExtensionPackage,\n    packageHash: string\n  ): Promise<T> {\n    try {\n      return (await api.connect({\n        packageHash,\n        bin: pkg.bin,\n        readinessTimeoutMs: pkg.readinessTimeoutMs,\n        allowInstallScripts: pkg.allowInstallScripts\n      })) as T;\n    } catch (error) {\n      if (!isTarballRequiredError(error)) throw error;\n      try {\n        return (await api.connect({\n          packageHash,\n          tarball: pkg.tarball,\n          bin: pkg.bin,\n          readinessTimeoutMs: pkg.readinessTimeoutMs,\n          allowInstallScripts: pkg.allowInstallScripts\n        })) as T;\n      } catch (retryError) {\n        throw createSidecarProvisioningError(packageHash, retryError);\n      }\n    }\n  }\n\n  #hashOnce(): Promise<string> {\n    const pkg = this.#requirePackage();\n    this.#hashPromise ??= sha256Hex(pkg.tarball);\n    return this.#hashPromise;\n  }\n\n  #requirePackage(): ExtensionPackage {\n    if (!this.#pkg) {\n      throw new Error(\n        'This extension has no sidecar package. Pass one to `super(sandbox, pkg)` to use sidecar/sidecarHealth/stopSidecar.'\n      );\n    }\n    return this.#pkg;\n  }\n}\n\n/**\n * Recognise the host's `ExtensionTarballRequired` error across the capnweb\n * boundary. There are two cases:\n *\n * 1. capnweb preserves `Error.name`, so the primary wire-safe contract is the\n *    string constant `EXTENSION_TARBALL_REQUIRED`.\n * 2. capnweb sometimes re-wraps the error as an `RPCTransportError`, discarding\n *    `name` but preserving the message text. We fall back to matching the\n *    message so the tarball retry still fires in that case.\n */\nfunction assertRuntimeControlDidNotEscape(\n  result: unknown,\n  control: ExtensionRuntimeControl\n): void {\n  const forbiddenHandles: unknown[] = [\n    control,\n    control.files,\n    control.ports,\n    control.backup,\n    control.watch,\n    control.tunnels,\n    control.terminals,\n    control.extensions,\n    control.utils\n  ].filter((handle) => handle !== undefined);\n\n  if (!forbiddenHandles.includes(result)) return;\n\n  throw new Error(\n    'Sandbox extension runtime callbacks must not return runtime control handles'\n  );\n}\n\nfunction scopedRuntimeControl(target: ExtensionRuntimeControl): {\n  control: ExtensionRuntimeControl;\n  revoke(): void;\n} {\n  let active = true;\n  const inactiveError = () =>\n    new Error(\n      'Sandbox extension runtime control is no longer valid outside its runtime callback'\n    );\n  const wrappedDomains = new WeakMap<object, object>();\n  const scopeDomain = <Domain extends object>(domain: Domain): Domain => {\n    const existing = wrappedDomains.get(domain);\n    if (existing) return existing as Domain;\n    const proxy = new Proxy(domain, {\n      get(domainTarget, property, receiver) {\n        if (!active) return () => Promise.reject(inactiveError());\n        const value = Reflect.get(domainTarget, property, receiver) as unknown;\n        if (typeof value === 'function') {\n          return (...args: unknown[]) => {\n            if (!active) return Promise.reject(inactiveError());\n            const result = Reflect.apply(value, domainTarget, args) as unknown;\n            return scopeRuntimeResult(result);\n          };\n        }\n        if (typeof value === 'object' && value !== null) {\n          if (objectHasCallableMember(value)) return scopeDomain(value);\n          return detachPlainData(value);\n        }\n        return value;\n      }\n    });\n    wrappedDomains.set(domain, proxy);\n    return proxy as Domain;\n  };\n  const scopeRuntimeResult = (result: unknown): unknown => {\n    if (result instanceof Promise) {\n      return result.then(scopeRuntimeResult);\n    }\n    if (typeof result === 'object' && result !== null) {\n      if (objectHasCallableMember(result)) return scopeDomain(result);\n      return detachPlainData(result);\n    }\n    return result;\n  };\n\n  const control: ExtensionRuntimeControl = {\n    files: scopeDomain(target.files),\n    ports: scopeDomain(target.ports),\n    backup: scopeDomain(target.backup),\n    watch: scopeDomain(target.watch),\n    tunnels: scopeDomain(target.tunnels),\n    terminals: scopeDomain(target.terminals),\n    extensions: scopeDomain(target.extensions),\n    utils: scopeDomain(target.utils)\n  };\n  return {\n    control,\n    revoke: () => {\n      active = false;\n    }\n  };\n}\n\nconst sidecarRemoteProxies = new WeakSet<object>();\n\nfunction scopedSidecarRemote<T extends object>(\n  target: T\n): {\n  proxy: T;\n  revoke(): void;\n} {\n  let active = true;\n  const wrappedTargets = new WeakMap<object, object>();\n  const createProxy = <Value extends object>(currentTarget: Value): Value => {\n    const existing = wrappedTargets.get(currentTarget);\n    if (existing) return existing as Value;\n    const proxy = new Proxy(currentTarget, {\n      get(targetObject, property, receiver) {\n        if (!active) {\n          return () =>\n            Promise.reject(\n              new Error(\n                'Sandbox extension sidecar remote is no longer valid outside its runtime callback'\n              )\n            );\n        }\n        const value = Reflect.get(targetObject, property, receiver) as unknown;\n        if (typeof value === 'function') {\n          return (...args: unknown[]) => {\n            if (!active) {\n              return Promise.reject(\n                new Error(\n                  'Sandbox extension sidecar remote is no longer valid outside its runtime callback'\n                )\n              );\n            }\n            const result = Reflect.apply(value, targetObject, args) as unknown;\n            return wrapSidecarResult(result, createProxy);\n          };\n        }\n        if (typeof value === 'object' && value !== null) {\n          if (objectHasCallableMember(value)) return createProxy(value);\n          return detachPlainData(value);\n        }\n        return value;\n      }\n    });\n    wrappedTargets.set(currentTarget, proxy);\n    sidecarRemoteProxies.add(proxy);\n    return proxy as Value;\n  };\n\n  return {\n    proxy: createProxy(target),\n    revoke: () => {\n      active = false;\n    }\n  };\n}\n\nfunction wrapSidecarResult(\n  result: unknown,\n  wrapObject: <Value extends object>(value: Value) => Value\n): unknown {\n  if (result instanceof Promise) {\n    return result.then((value) => wrapSidecarResult(value, wrapObject));\n  }\n  if (typeof result === 'object' && result !== null) {\n    if (objectHasCallableMember(result)) return wrapObject(result);\n    return detachPlainData(result);\n  }\n  return result;\n}\n\nfunction objectHasCallableMember(value: object): boolean {\n  if (Array.isArray(value))\n    return value.some((entry) => typeof entry === 'function');\n  let current: object | null = value;\n  while (current && current !== Object.prototype) {\n    for (const property of Reflect.ownKeys(current)) {\n      if (property === 'constructor') continue;\n      const descriptor = Reflect.getOwnPropertyDescriptor(current, property);\n      if (!descriptor) continue;\n      if (typeof descriptor.value === 'function') return true;\n      if (typeof descriptor.get === 'function') return true;\n    }\n    current = Reflect.getPrototypeOf(current);\n  }\n  return false;\n}\n\nfunction assertSidecarRemoteDidNotEscape(result: unknown): void {\n  const seen = new WeakSet<object>();\n  const visit = (value: unknown): boolean => {\n    if (typeof value !== 'object' || value === null) return false;\n    if (seen.has(value)) return false;\n    seen.add(value);\n    if (sidecarRemoteProxies.has(value)) return true;\n    if (Array.isArray(value)) return value.some(visit);\n    return Object.values(value as Record<string, unknown>).some(visit);\n  };\n\n  if (!visit(result)) return;\n  throw new Error(\n    'Sandbox extension sidecar callbacks must not return sidecar remotes'\n  );\n}\n\nfunction detachPlainData<T>(value: T): T {\n  if (typeof value !== 'object' || value === null) return value;\n  return structuredClone(value) as T;\n}\n\nfunction isTarballRequiredError(error: unknown): boolean {\n  if (typeof error !== 'object' || error === null) return false;\n  const candidate = error as { name?: unknown; message?: unknown };\n  if (candidate.name === EXTENSION_TARBALL_REQUIRED) return true;\n  if (typeof candidate.message !== 'string') return false;\n  return (\n    candidate.message.includes(EXTENSION_TARBALL_REQUIRED) ||\n    /Extension package '[0-9a-f]{64}' is not provisioned/.test(\n      candidate.message\n    )\n  );\n}\n\nfunction createSidecarProvisioningError(\n  packageHash: string,\n  cause: unknown\n): Error {\n  const causeMessage =\n    cause instanceof Error\n      ? cause.message\n      : typeof cause === 'string'\n        ? cause\n        : String(cause);\n  return new Error(\n    `Failed to provision sandbox sidecar package '${packageHash}'. The sidecar tarball was sent to the container, but the container could not install or start it. Check that the extension build generated a valid npm-style .tgz, that the .tgz is included in the Worker bundle, and that the sidecar package declares a valid package.json bin/sandboxExtension entry. Cause: ${causeMessage}`,\n    { cause }\n  );\n}\n\n/**\n * Hex sha256 of a tarball via Web Crypto, which is available in workerd and\n * every modern runtime. Avoids a Node-only path so this module stays\n * Worker-bundle-safe.\n */\nasync function sha256Hex(bytes: Uint8Array): Promise<string> {\n  const digest = await crypto.subtle.digest('SHA-256', bytes as BufferSource);\n  const view = new Uint8Array(digest);\n  let hex = '';\n  for (const byte of view) {\n    hex += byte.toString(16).padStart(2, '0');\n  }\n  return hex;\n}\n"],"mappings":";;;;;;;AAoBA,SAAS,oBACP,OACmD;AACnD,KAAI,EAAE,mBAAmB,OAAQ,QAAO;CACxC,MAAM,WAAW,MAAM;AACvB,QACE,OAAO,UAAU,SAAS,YAC1B,OAAO,OAAO,WAAW,SAAS,KAAK,IACvC,OAAO,SAAS,YAAY,YAC5B,OAAO,SAAS,eAAe,YAC/B,OAAO,SAAS,cAAc,YAC9B,OAAO,SAAS,YAAY,YAC5B,SAAS,YAAY;;AASzB,SAAgB,kBACd,OACA,UAAiC,EAAE,EAC5B;AACP,KAAI,iBAAiB,aAAc,OAAM;AAEzC,KAAI,iBAAiB,OAAO;AAC1B,MAAI,oBAAoB,MAAM,CAC5B,OAAM;EAGR,MAAM,aAAa;AAInB,MACE,OAAO,WAAW,SAAS,YAC3B,OAAO,OAAO,WAAW,WAAW,KAAK,EACzC;GACA,MAAM,OAAO,WAAW;GACxB,MAAMA,YACJ,WAAW,WAAW,OAAO,WAAW,YAAY,WAC/C,WAAW,UACZ,EAAE;AACR,SAAM,wBAAwB;IAC5B;IACA,SAAS,MAAM;IACf;IACA,YAAY,cAAc,KAAK;IAC/B,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;;EAGJ,IAAIC;AACJ,MAAI;AACF,aAAU,KAAK,MAAM,MAAM,QAAQ;UAC7B;AACR,MACE,WACA,OAAO,QAAQ,SAAS,YACxB,OAAO,QAAQ,YAAY,SAE3B,OAAM,wBAAwB;GAC5B,MAAM,QAAQ;GACd,SAAS,QAAQ;GACjB,SAAS,QAAQ,WAAW,EAAE;GAC9B,YAAY,cAAc,QAAQ,KAAkB;GACpD,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,CAAC;EAGJ,MAAM,oBAAoB,4BAA4B,MAAM;AAK5D,QAAM,yBAHJ,QAAQ,4CAA4C,QAChD,OACA,kCAAkC,mBAAmB,QAAQ,KAEzC,mBACxB,EAAE,OAAO,OAAO,CACjB;;AAIH,OAAM,wBACJ,4BAFc,IAAI,MAAM,OAAO,MAAM,CAAC,CAEF,EACpC,EAAE,OAAO,OAAO,CACjB;;AAGH,SAAS,4BACP,OACoC;CACpC,MAAM,UAAU,MAAM;CACtB,MAAM,YAAY,MAAM;CACxB,IAAIC,OAA8B;CAClC,IAAIC;CACJ,IAAIC;AAEJ,KAAI,cAAc,YAChB,QAAO;UACE,cAAc,cACvB,QAAO;MACF;EACL,MAAM,iBAAiB,QAAQ,MAC7B,uCACD;AACD,MAAI,gBAAgB;AAClB,UAAO;AACP,eAAY,OAAO,eAAe,GAAG;AACrC,iBAAc,eAAe,MAAM;aAC1B,YAAY,+BACrB,QAAO;WACE,QAAQ,WAAW,2BAA2B,CACvD,QAAO;WACE,YAAY,mCACrB,QAAO;WAEP,YAAY,0DACZ,YAAY,wDAEZ,QAAO;;CAIX,MAAMC,UAA+B;EACnC;EACA,iBAAiB;EACjB;EACA,GAAI,cAAc,SAAY,EAAE,WAAW,GAAG,EAAE;EAChD,GAAI,gBAAgB,SAAY,EAAE,aAAa,GAAG,EAAE;EACrD;AACD,QAAO;EACL,MAAM,UAAU;EAChB;EACA;EACA,YAAY,cAAc,UAAU,oBAAoB;EACxD,YAAY,cACV,UAAU,qBACV,QACD;EACD,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC;;AAGH,SAAS,kCACP,mBACA,SACmD;AACnD,KAAI,CAAC,QAAQ,UAAW,QAAO;CAC/B,MAAM,EAAE,SAAS,kBAAkB;AACnC,KACE,SAAS,sBACT,SAAS,iBACT,SAAS,oBAET,QAAO;CAGT,MAAMC,qBAAkD;EACtD,QACE,SAAS,qBAAqB,uBAAuB;EACvD,WAAW,QAAQ;EACnB,UAAU;EACV,WAAW;EACZ;CACD,MAAM,SACJ,SAAS,qBAAqB,gBAAgB;AAEhD,QAAO;EACL,MAAM,UAAU;EAChB,SAAS,qBAAqB,QAAQ,UAAU,gDAAgD;EAChG,SAAS;EACT,YAAY,cAAc,UAAU,sBAAsB;EAC1D,YAAY,cACV,UAAU,uBACV,mBACD;EACD,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC;;;;;;ACxLH,IAAa,yBAAb,cACU,UAEV;CACE,CAASC;CACT,CAASC;CACT,YAAY;CAEZ,YAAY,QAA2B,WAAwB;AAC7D,SAAO;AACP,QAAKD,SAAU,OAAO,WAAW;AACjC,QAAKC,YAAa;;CAGpB,MAAM,OAA6C;AACjD,MAAI,MAAKC,SAAW,QAAO;GAAE,MAAM;GAAM,OAAO;GAAW;AAC3D,MAAI;GACF,MAAM,SAAS,MAAM,MAAKF,OAAQ,MAAM;AACxC,OAAI,OAAO,KAAM,OAAKG,SAAU;AAChC,UAAO;WACA,OAAO;AACd,SAAKA,SAAU;AACf,SAAM;;;CAIV,MAAM,SAAwB;AAC5B,MAAI,MAAKD,SAAW;AACpB,MAAI;AACF,SAAM,MAAKF,OAAQ,QAAQ;YACnB;AACR,SAAKG,SAAU;;;CAInB,CAAC,OAAO,WAAiB;AACvB,MAAI,MAAKD,SAAW;AACpB,EAAK,MAAKF,OAAQ,QAAQ,CAAC,YAAY,OAAU;AACjD,QAAKG,SAAU;;CAGjB,WAAiB;AACf,MAAI,MAAKD,SAAW;AACpB,QAAKA,WAAY;AACjB,QAAKD,aAAc;;;;AAKvB,eAAsB,uBACpB,qBAGA,SAC4B;CAC5B,IAAIG;CAIJ,IAAI,mBAAmB;CACvB,IAAI,iBAAiB;CACrB,MAAM,gBAAsB;AAC1B,qBAAmB;AACnB,MAAI,kBAAkB,iBAAiB,OAAW;AAClD,mBAAiB;AACjB,MAAI;AACF,GAAK,aAAa,QAAQ,CAAC,YAAY,OAAU;UAC3C;AAGR,MAAI;AACF,gBAAa,OAAO,UAAU;UACxB;;CAKV,MAAM,SAAS,QAAQ;CACvB,MAAM,gBACJ,QAAQ,cAAc,KACrB,QAAQ,kBAAkB,QACvB,OAAO,yBACP,IAAI,MAAM,oBAAoB;CACpC,MAAM,YAAY,OAAU,UAAkC;AAC5D,MAAI,WAAW,OAAW,QAAO;AACjC,MAAI,OAAO,SAAS;AAClB,YAAS;AACT,SAAM,SAAS;;EAEjB,IAAIC;EACJ,MAAM,QAAQ,IAAI,SAAgB,GAAG,WAAW;AAC9C,qBAAgB;AACd,aAAS;AACT,WAAO,SAAS,CAAC;;AAEnB,UAAO,iBAAiB,SAASC,WAAS,EAAE,MAAM,MAAM,CAAC;IACzD;AACF,MAAI;AACF,UAAO,MAAM,QAAQ,KAAK,CAAC,OAAO,MAAM,CAAC;YACjC;AACR,OAAIA,cAAY,OAAW,QAAO,oBAAoB,SAASA,UAAQ;;;AAI3E,KAAI;AACF,iBAAe,MAAM,UACnB,oBAAoB,MAAM,UAAU;AAClC,kBAAe;AACf,OAAI,iBAAkB,UAAS;AAC/B,UAAO;IACP,CACH;UACM,OAAO;AACd,MAAI,QAAQ,QAAS,OAAM;AAC3B,oBAAkB,OAAO,EACvB,WAAW,QAAQ,aAAa,6BACjC,CAAC;;AAGJ,KAAI,iBAAiB,OACnB,OAAM,IAAI,MAAM,oDAAoD;CAEtE,IAAIC;CACJ,IAAIC;AACJ,KAAI,QAAQ,aAAa,QAAQ;EAC/B,MAAM,mBAAmB;AACzB,eAAa,iBAAiB,MAAM;AACpC,uBAAqB;QAChB;EACL,MAAM,qBAAqB;EAC3B,IAAIC;AACJ,MAAI;AACF,YAAS,MAAM,UAAU,mBAAmB,QAAQ,CAAC;WAC9C,OAAO;AACd,YAAS;AACT,OAAI,QAAQ,QAAS,OAAM;AAC3B,qBAAkB,OAAO,EACvB,WAAW,QAAQ,aAAa,6BACjC,CAAC;;EAGJ,IAAIC;AACJ,MAAI;AACF,YAAS,OAAO,WAAW;WACpB,OAAO;AACd,YAAS;AACT,qBAAkB,OAAO,EACvB,WAAW,QAAQ,aAAa,6BACjC,CAAC;;AAEJ,eAAa,OAAO,MAAM;AAC1B,uBAAqB;AACnB,OAAI;AACF,IAAK,OAAO,QAAQ,CAAC,YAAY,OAAU;WACrC;;;CAMZ,IAAI,UAAU;CACd,IAAIC;CACJ,MAAM,QAAQ,UAAwB;AACpC,MAAI,QAAS;AACb,YAAU;AACV,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,gBAAc;AACd,WAAS;AACT,MAAI,UAAU,OAAW,aAAY,MAAM,MAAM;;CAEnD,MAAM,gBAAsB,KAAK,SAAS,CAAC;AAE3C,QAAO,IAAI,eAAkB;EAC3B,MAAM,iBAAiB;AACrB,gBAAa;AACb,OAAI,QAAQ,QAAS,UAAS;OACzB,SAAQ,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;;EAEjE,MAAM,KAAK,iBAAiB;AAC1B,OAAI,QAAS;AACb,OAAI;IACF,MAAM,SAAS,MAAM,MAAM;AAC3B,QAAI,QAAS;AACb,QAAI,OAAO,MAAM;AACf,eAAU;AACV,aAAQ,oBAAoB,SAAS,QAAQ;AAC7C,cAAS;AACT,qBAAgB,OAAO;AACvB;;AAEF,oBAAgB,QAAQ,OAAO,MAAM;YAC9B,OAAO;AACd,UAAM;AACN,sBAAkB,OAAO,EACvB,WAAW,QAAQ,aAAa,gCACjC,CAAC;;;EAGN,SAAS;AACP,SAAM;;EAET,CAAC;;;;;AC7MJ,eAAsB,cACpB,MACA,SAOY;CACZ,MAAM,EAAE,QAAQ,YAAY;CAC5B,MAAM,aAAa,IAAI,iBAAiB;CACxC,IAAIC;CACJ,IAAIC;CACJ,MAAMC,cAA4B,CAAC,KAAK,WAAW,OAAO,CAAC;AAE3D,KAAI,YAAY,OACd,aAAY,KACV,IAAI,SAAY,GAAG,WAAW;AAC5B,UAAQ,iBACA,OAAO,aAAa,SAAS,QAAQ,CAAC,EAC5C,QACD;GACD,CACH;AAEH,KAAI,WAAW,OACb,aAAY,KACV,IAAI,SAAY,GAAG,WAAW;EAC5B,MAAM,cACJ,OAAO,WAAW,QAAQ,WAAW,QAAQ,WAAW,OAAO,CAAC;AAClE,MAAI,OAAO,QAAS,QAAO;OACtB;AACH,mBAAgB;AAChB,UAAO,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;;GAEzD,CACH;AAGH,KAAI;AACF,SAAO,MAAM,QAAQ,KAAK,YAAY;WAC9B;AACR,aAAW,OAAO;AAClB,MAAI,UAAU,OAAW,cAAa,MAAM;AAC5C,MAAI,kBAAkB,OACpB,SAAQ,oBAAoB,SAAS,cAAc;;;AAIzD,SAAgB,eACd,WACA,KACA,SACc;AACd,QAAO,IAAI,aAAa;EACtB,MAAM,UAAU;EAChB,SAAS,QAAQ;EACjB,SAAS;GAAE;GAAW;GAAK;EAC3B,YAAY;EACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC,CAAC;;AAGJ,SAAgB,aAAa,SAAwB;AACnD,mBAAkB,IAAI,MAAM,QAAQ,EAAE;EACpC,WAAW;EACX,yCAAyC;EAC1C,CAAC;;AAGJ,SAAS,aACP,SAKA,SACoD;AACpD,KAAI,QAAQ,cAAc,eAAe;EACvC,MAAM,YAAY,QAAQ,QAAQ,QAAQ;AAC1C,SAAO,IAAI,yBAAyB;GAClC,MAAM,UAAU;GAChB,SAAS,uCAAuC,QAAQ,mBAAmB;GAC3E,SAAS;IACP,WAAW,QAAQ;IACnB,SAAS,QAAQ;IACjB;IACA;IACD;GACD,YAAY;GACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;GACpC,CAAC;;CAEJ,MAAM,YACJ,QAAQ,cAAc,SAAS,eAAe,QAAQ;AACxD,QAAO,IAAI,wBAAwB;EACjC,MAAM,UAAU;EAChB,SAAS,WAAW,UAAU,2BAA2B,QAAQ;EACjE,SAAS;GAAE,WAAW,QAAQ;GAAW;GAAW;GAAS;EAC7D,YAAY;EACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC,CAAC;;AAGJ,SAAgB,WACd,WACA,WACA,QACO;AACP,KAAI,OAAO,kBAAkB,SAAS,OAAO,OAAO,SAAS,aAC3D,QAAO,OAAO;AAChB,QAAO,IAAI,oBAAoB;EAC7B,MAAM,UAAU;EAChB,SAAS,WAAW,UAAU;EAC9B,SAAS;GAAE;GAAW;GAAW;EACjC,YAAY;EACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC,CAAC;;;;;AC9HJ,eAAsB,kBACpB,QACA,SACoC;CACpC,MAAM,WAAW,iBAAiB,QAAQ,SAAS;CACnD,MAAMC,SAAuB,EAAE;CAC/B,MAAMC,SAAuB,EAAE;CAC/B,IAAI,cAAc;CAClB,IAAI,cAAc;CAClB,IAAI,gBAAgB;CACpB,IAAI,YAAY;AAEhB,UAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;AAClC,MAAI,OAAO,KAAM,cAAa,uCAAuC;EAErE,MAAM,QAAQ,OAAO;AACrB,MAAI,UAAU,SAAS,MAAM,SAAS,aAAa;AACjD,eAAY;AACZ;;AAEF,MAAI,WAAW,OAAO;AACpB,OAAI,MAAM,UAAU,QAClB,OAAM,eAAe,QAAQ,WAAW,QAAQ,KAAK,MAAM,MAAM;AACnE,UAAO;IACL,QAAQ,OAAO,QAAQ,YAAY;IACnC,QAAQ,OAAO,QAAQ,YAAY;IACnC,UAAU,MAAM,KAAK;IACrB,QAAQ,MAAM,KAAK;IACnB,UAAU,MAAM,KAAK;IACrB;IACD;;EAGH,MAAM,YACJ,aAAa,SACT,MAAM,KAAK,aACX,KAAK,IAAI,GAAG,WAAW,cAAc;EAC3C,MAAM,iBAAiB,KAAK,IAAI,WAAW,MAAM,KAAK,WAAW;AACjE,MAAI,iBAAiB,MAAM,KAAK,WAAY,aAAY;AACxD,MAAI,mBAAmB,EAAG;EAE1B,MAAM,QACJ,mBAAmB,MAAM,KAAK,aAC1B,MAAM,OACN,MAAM,KAAK,MAAM,GAAG,eAAe;AACzC,MAAI,MAAM,SAAS,UAAU;AAC3B,UAAO,KAAK,MAAM;AAClB,kBAAe,MAAM;SAChB;AACL,UAAO,KAAK,MAAM;AAClB,kBAAe,MAAM;;AAEvB,mBAAiB,MAAM;;;AAI3B,SAAgB,iBACd,UACoB;AACpB,KAAI,aAAa,OAAW,QAAO;AACnC,KAAI,CAAC,OAAO,SAAS,SAAS,IAAI,WAAW,EAC3C,OAAM,IAAI,MAAM,gDAAgD;AAClE,QAAO;;AAGT,SAAS,OAAO,QAAsB,QAA4B;CAChE,MAAM,MAAM,IAAI,WAAW,OAAO;CAClC,IAAI,SAAS;AACb,MAAK,MAAM,SAAS,QAAQ;AAC1B,MAAI,IAAI,OAAO,OAAO;AACtB,YAAU,MAAM;;AAElB,QAAO;;;;;ACvET,eAAsB,iBACpB,YACA,WACA,SACe;AACf,OAAM,QAAQ,KAAK,CACjB,YAAY,WAAW,EACvB,gBAAgB,WAAW,QAAQ,CACpC,CAAC;;AAGJ,eAAe,YACb,QACe;AACf,UAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;AAClC,MAAI,OAAO,KAAM,cAAa,uCAAuC;AACrE,MAAI,OAAO,MAAM,SAAS,QAAS;AACnC,MAAI,OAAO,MAAM,SAAS,QACxB,OAAM,IAAI,MAAM,OAAO,MAAM,SAAS,oBAAoB;;;AAIhE,eAAe,gBACb,QACA,SACgB;AAChB,UAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;AAClC,MAAI,OAAO,KAAM,cAAa,uCAAuC;EACrE,MAAM,QAAQ,OAAO;AACrB,MAAI,EAAE,WAAW,OAAQ;AACzB,MAAI,MAAM,UAAU,QAClB,OAAM,eAAe,QAAQ,WAAW,QAAQ,KAAK,MAAM,MAAM;AACnE,QAAM,kBAAkB,QAAQ,WAAW,QAAQ,MAAM,MAAM,KAAK,KAAK;;;AAI7E,SAAS,kBACP,WACA,MACA,UAC+B;AAC/B,QAAO,IAAI,8BAA8B;EACvC,MAAM,UAAU;EAChB,SAAS,4BAA4B,SAAS,4CAA4C;EAC1F,SAAS;GACP;GACA,SAAS;GACT,WAAW,QAAQ;GACnB;GACD;EACD,YAAY;EACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC,CAAC;;;;;ACtDJ,MAAM,eAAe,KAAK;AAK1B,eAAsB,kBACpB,QACA,SACA,QACA,WACA,KAC2B;CAC3B,MAAM,WAAW;EACf,QAAQ,IAAI,aAAa;EACzB,QAAQ,IAAI,aAAa;EAC1B;CACD,MAAM,UAAU;EAAE,QAAQ;EAAI,QAAQ;EAAI;CAC1C,MAAM,UAAU;EAAE,QAAQ;EAAI,QAAQ;EAAI;CAE1C,MAAM,UACJ,QACA,SACA,WACiC;EACjC,MAAM,OAAO,QAAQ,QAAQ,UAAU,QAAQ;AAC/C,UAAQ,UAAU;AAClB,UAAQ,UAAU;EAClB,MAAM,QAAQ,UAAU,MAAM,QAAQ;AACtC,SAAO,UAAU,SAAY,SAAY;GAAE;GAAQ;GAAM;GAAO;GAAQ;;CAE1E,MAAM,SAAS,WAAiD;AAC9D,OAAK,MAAM,UAAU,CAAC,UAAU,SAAS,EAAW;AAClD,OAAI,WAAW,UAAU,WAAW,OAAQ;GAC5C,MAAM,SAAS,OACb,QACA,SAAS,QAAQ,QAAQ,EACzB,QAAQ,WAAW,OACpB;AACD,OAAI,WAAW,OAAW,QAAO;;;AAKrC,UAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;AAClC,MAAI,OAAO,MAAM;GACf,MAAMC,UAAQ,MAAM,GAAG;AACvB,OAAIA,YAAU,OAAW,QAAOA;AAChC,gBAAa,oDAAoD;;EAEnE,MAAM,QAAQ,OAAO;AACrB,MAAI,WAAW,OAAO;GACpB,MAAMA,UAAQ,MAAM,MAAM,OAAO;AACjC,OAAIA,YAAU,OAAW,QAAOA;AAChC,OAAI,MAAM,UAAU,QAClB,OAAM,eAAe,WAAW,KAAK,MAAM,MAAM;AACnD,SAAM,IAAI,4BAA4B;IACpC,MAAM,UAAU;IAChB,SAAS;IACT,SAAS;KAAE;KAAW;KAAK,MAAM,EAAE,GAAG,MAAM,MAAM;KAAE;IACpD,YAAY;IACZ,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;;AAEJ,MAAI,MAAM,SAAS,YAAY,MAAM,SAAS,SAAU;AACxD,MAAI,WAAW,UAAU,WAAW,MAAM,KAAM;EAEhD,MAAM,QAAQ,OACZ,MAAM,MACN,SAAS,MAAM,MAAM,OAAO,MAAM,MAAM,EAAE,QAAQ,MAAM,CAAC,EACzD,MAAM,OACP;AACD,MAAI,UAAU,OAAW,QAAO;;;AAIpC,SAAS,QAAQ,MAAsB;AACrC,QAAO,KAAK,UAAU,eAAe,OAAO,KAAK,MAAM,CAAC,aAAa;;AAGvE,SAAS,UAAU,MAAc,SAA8C;AAC7E,KAAI,OAAO,YAAY,SACrB,QAAO,KAAK,SAAS,QAAQ,GAAG,UAAU;AAC5C,SAAQ,YAAY;CACpB,MAAM,QAAQ,QAAQ,KAAK,KAAK,GAAG;AACnC,SAAQ,YAAY;AACpB,QAAO;;;;;AC/DT,IAAa,qBAAb,MAA0D;CACxD;CAEA,YACE,AAASC,IACT,AAASC,KACT,AAAiBC,YACjB;EAHS;EACA;EACQ;;CAGnB,IAAI,WAA4B;AAC9B,QAAKC,oBAAqB,KAAK,aAAa,CAAC,MAAM,SAAS,KAAK,KAAK;AACtE,SAAO,MAAKA;;CAGd,SAAiC;AAC/B,SAAO,KAAK,WAAW,QAAQ;;CAGjC,MAAM,KACJ,UAA8B,EAAE,EACU;EAC1C,MAAM,EAAE,QAAQ,GAAG,eAAe;AAClC,SAAO,uBAAuB,KAAK,WAAW,SAAS,WAAW,EAAE;GAClE,UAAU;GACV;GACA,WAAW;GACX,YACE,WAAW,SACP,eACM,WAAW,KAAK,IAAI,QAAQ,OAAO;GAChD,CAAC;;CAKJ,MAAM,OACJ,UAA2D,EAAE,EACD;EAC5D,MAAM,WAAW,iBAAiB,QAAQ,SAAS;EACnD,MAAM,QAAQ,MAAM,eACjB,qBACC,KAAK,YAAY,mBAAmB,WAClC,kBAAkB,QAAQ;GACxB;GACA,WAAW,KAAK;GAChB,KAAK,KAAK;GACX,CAAC,CACH,EACH;GACE,WAAW,KAAK;GAChB,WAAW;GACX,SAAS,QAAQ;GACjB,QAAQ,QAAQ;GACjB,CACF;AACD,MAAI,cAAc,WAAW,QAAQ,aAAa,OAChD,QAAO;GACL,GAAG;GACH,QAAQ,IAAI,aAAa,CAAC,OAAO,MAAM,OAAO;GAC9C,QAAQ,IAAI,aAAa,CAAC,OAAO,MAAM,OAAO;GAC/C;AAEH,SAAO;;CAGT,MAAM,YACJ,UAAsD,EAAE,EAClC;AACtB,SAAO,eACJ,qBACC,KAAK,YAAY,mBAAmB,WAClC,aAAa,QAAQ,KAAK,IAAI,KAAK,IAAI,CACxC,EACH;GACE,WAAW,KAAK;GAChB,WAAW;GACX,SAAS,QAAQ;GACjB,QAAQ,QAAQ;GACjB,CACF;;CAGH,MAAM,WACJ,SACA,UAA6B,EAAE,EACJ;AAC3B,SAAO,eACJ,qBACC,KAAK,YAAY,mBAAmB,WAClC,kBACE,QACA,SACA,QAAQ,UAAU,QAClB,KAAK,IACL,KAAK,IACN,CACF,EACH;GACE,WAAW,KAAK;GAChB,WAAW;GACX,SAAS,QAAQ;GACjB,QAAQ,QAAQ;GACjB,CACF;;CAGH,MAAM,YACJ,MACA,UAA8B,EAAE,EACjB;EACf,MAAM,EAAE,SAAS,QAAQ,GAAG,eAAe;AAC3C,SAAO,eACJ,qBACC,KAAK,yBAAyB,MAAM,YAAY,iBAAiB,EACnE;GACE,WAAW,KAAK;GAChB,WAAW;GACX;GACA;GACA;GACD,CACF;;CAGH,MAAc,yBACZ,MACA,SACA,kBACe;EACf,MAAM,aAAa,MAAM,uBACvB,KAAK,WAAW,cAAc,MAAM,QAAQ,EAC5C;GACE,WAAW,cAAc;GACzB,UAAU;GACV,QAAQ;GACT,CACF;EACD,IAAIC;EACJ,IAAIC;EACJ,IAAIC;AACJ,MAAI;AACF,gBAAa,WAAW,WAAW;AACnC,eAAY,MAAM,uBAChB,KAAK,WAAW,SAAS;IAAE,QAAQ;IAAM,QAAQ;IAAM,CAAC,EACxD;IACE,WAAW;IACX,UAAU;IACV,QAAQ;IACT,CACF;AACD,eAAY,UAAU,WAAW;AACjC,SAAM,iBAAiB,YAAY,WAAW;IAC5C,WAAW,KAAK;IAChB,KAAK,KAAK;IACV;IACD,CAAC;YACM;AACR,SAAM,YAAY,YAAY,WAAW;AACzC,OAAI,cAAc,OAAW,OAAM,YAAY,WAAW,UAAU;;;CAIxE,KAAK,SAAS,IAAmB;AAC/B,SAAO,KAAK,WAAW,KAAK,OAAO;;;CAIrC,CAAC,OAAO,WAAiB;AAEvB,EAAC,KAAK,WAAmC,OAAO,YAAY;;CAG9D,MAAc,YACZ,QACA,SAGY;EACZ,MAAM,SAAS,MAAM,uBACnB,KAAK,WAAW,SAAS;GAAE,QAAQ;GAAM,QAAQ;GAAM,CAAC,EACxD;GAAE;GAAQ,WAAW;GAAqB,UAAU;GAAQ,CAC7D;AACD,SAAO,KAAK,QAAQ,QAAQ,QAAQ;;CAGtC,MAAc,QACZ,QACA,SAGY;EACZ,IAAIC;AACJ,MAAI;AACF,YAAS,OAAO,WAAW;AAC3B,UAAO,MAAM,QAAQ,OAAO;YACpB;AACR,SAAM,YAAY,QAAQ,OAAO;;;;AAKvC,SAAgB,qBACd,YACgB;AAChB,QAAO,IAAI,mBACT,WAAW,IACX,WAAW,KACX,WAAW,WACZ;;AAGH,eAAe,aACb,QACA,WACA,KACsB;AACtB,UAAS;EACP,MAAM,SAAS,MAAM,OAAO,MAAM;AAClC,MAAI,OAAO,KAAM,cAAa,uCAAuC;AACrE,MAAI,WAAW,OAAO,OAAO;AAC3B,OAAI,OAAO,MAAM,UAAU,SAAU,QAAO,OAAO,MAAM;AACzD,SAAM,eAAe,WAAW,KAAK,OAAO,MAAM,MAAM;;;;AAK9D,eAAe,YACb,QACA,QACe;AACf,KAAI;AACF,MAAI,WAAW,OAAW,OAAM,OAAO,QAAQ;MAC1C,OAAM,OAAO,QAAQ;SACpB;;;;;;;;;;;;;;;;;;;;;;;;AChLV,MAAaC,qBAAoC,OAAO,qBAAqB;AAkC7E,SAAS,uBACP,SACiC;AACjC,QAAO,gBAAgB;;;AAIzB,SAAgB,8BACd,SACyB;AACzB,QAAO;EACL,MAAM,KAAK,SAAS,SAAS;AAC3B,OAAI,CAAC,QAAQ,KACX,OAAM,IAAI,MACR,sEACD;GAEH,MAAM,UAAU,MAAM,QAAQ,KAAK,KAAK,SAAS,SAAS,QAAQ;AAClE,UAAO,uBAAuB,QAAQ,GAClC,qBAAqB,QAAQ,GAC7B;;EAEN,MAAM,WAAW,WAAW;AAC1B,OAAI,CAAC,QAAQ,WACX,OAAM,IAAI,MACR,4EACD;GAEH,MAAM,UAAU,MAAM,QAAQ,WAAW,KAAK,SAAS,UAAU;AACjE,OAAI,CAAC,QAAS,QAAO;AACrB,UAAO,uBAAuB,QAAQ,GAClC,qBAAqB,QAAQ,GAC7B;;EAEN,gBAAgB;AACd,OAAI,CAAC,QAAQ,cACX,OAAM,IAAI,MACR,+EACD;AAEH,UAAO,QAAQ,cAAc,KAAK,QAAQ;;EAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCH,IAAsB,mBAAtB,cAA+C,UAAU;CACvD,CAASC;CACT,CAASC;CACT;CAEA,AAAU,YAAY,SAAsB,KAAwB;AAClE,SAAO;AACP,QAAKD,UAAW;AAChB,QAAKC,MAAO;;CAGd,AAAU,YACR,WACA,MACuE;EACvE,MAAM,cAAc,OAAO,mBAA4C;GACrE,MAAM,EAAE,SAAS,WAAW,qBAAqB,eAAe;AAChE,OAAI;IACF,MAAM,SAAS,MAAM,KAAK,QAAQ;AAClC,qCAAiC,QAAQ,QAAQ;AACjD,WAAO;aACC;AACR,YAAQ;;;AAGZ,SAAO,MAAKD,QAAS,oBACnB,WACA,YACD;;;CAIH,AAAU,KACR,SACA,SACyB;AACzB,SAAO,8BAA8B,MAAKA,QAAS,CAAC,KAAK,SAAS,QAAQ;;;CAI5E,IAAc,UAAkC;AAC9C,SAAO,MAAKA,QAAS,WAAW,EAAE;;CAGpC,IAAc,sBAEA;EACZ,MAAM,WAAW,MAAKA,QAAS;AAC/B,SAAO,YACF,WAAW,SAAS,KAAK,MAAKA,SAAU,OAAO,GAChD;;;;;;;;CASN,MAAgB,YACd,WACA,MACiB;EACjB,MAAM,MAAM,MAAKE,gBAAiB;EAClC,MAAM,cAAc,MAAM,MAAKC,UAAW;EAC1C,MAAM,aAAa,OAAO,YAAqC;GAM7D,MAAM,EAAE,OAAO,WAAW,oBALR,MAAM,MAAKC,QAC3B,QAAQ,YACR,KACA,YACD,CAC0D;AAC3D,OAAI;IACF,MAAM,SAAS,MAAM,KAAK,MAAM;AAChC,oCAAgC,OAAO;AACvC,WAAO,gBAAgB,OAAO;aACtB;AACR,YAAQ;;;AAGZ,SAAQ,MAAM,KAAK,YACjB,WACA,WACD;;;CAIH,MAAgB,gBAA0C;EACxD,MAAM,OAAO,MAAM,MAAKD,UAAW;AACnC,SAAO,MAAM,KAAK,YAAY,qBAAqB,YACjD,QAAQ,WAAW,OAAO,KAAK,CAChC;;;;;;CAOH,MAAgB,cAA6B;EAC3C,MAAM,OAAO,MAAM,MAAKA,UAAW;AACnC,QAAM,KAAK,YAAY,mBAAmB,YACxC,QAAQ,WAAW,KAAK,KAAK,CAC9B;;CAKH,OAAMC,QACJ,KACA,KACA,aACY;AACZ,MAAI;AACF,UAAQ,MAAM,IAAI,QAAQ;IACxB;IACA,KAAK,IAAI;IACT,oBAAoB,IAAI;IACxB,qBAAqB,IAAI;IAC1B,CAAC;WACK,OAAO;AACd,OAAI,CAAC,uBAAuB,MAAM,CAAE,OAAM;AAC1C,OAAI;AACF,WAAQ,MAAM,IAAI,QAAQ;KACxB;KACA,SAAS,IAAI;KACb,KAAK,IAAI;KACT,oBAAoB,IAAI;KACxB,qBAAqB,IAAI;KAC1B,CAAC;YACK,YAAY;AACnB,UAAM,+BAA+B,aAAa,WAAW;;;;CAKnE,YAA6B;EAC3B,MAAM,MAAM,MAAKF,gBAAiB;AAClC,QAAKG,gBAAiB,UAAU,IAAI,QAAQ;AAC5C,SAAO,MAAKA;;CAGd,kBAAoC;AAClC,MAAI,CAAC,MAAKJ,IACR,OAAM,IAAI,MACR,qHACD;AAEH,SAAO,MAAKA;;;;;;;;;;;;;AAchB,SAAS,iCACP,QACA,SACM;AAaN,KAAI,CAZgC;EAClC;EACA,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACR,QAAQ;EACT,CAAC,QAAQ,WAAW,WAAW,OAAU,CAEpB,SAAS,OAAO,CAAE;AAExC,OAAM,IAAI,MACR,8EACD;;AAGH,SAAS,qBAAqB,QAG5B;CACA,IAAI,SAAS;CACb,MAAM,sCACJ,IAAI,MACF,oFACD;CACH,MAAM,iCAAiB,IAAI,SAAyB;CACpD,MAAM,eAAsC,WAA2B;EACrE,MAAM,WAAW,eAAe,IAAI,OAAO;AAC3C,MAAI,SAAU,QAAO;EACrB,MAAM,QAAQ,IAAI,MAAM,QAAQ,EAC9B,IAAI,cAAc,UAAU,UAAU;AACpC,OAAI,CAAC,OAAQ,cAAa,QAAQ,OAAO,eAAe,CAAC;GACzD,MAAM,QAAQ,QAAQ,IAAI,cAAc,UAAU,SAAS;AAC3D,OAAI,OAAO,UAAU,WACnB,SAAQ,GAAG,SAAoB;AAC7B,QAAI,CAAC,OAAQ,QAAO,QAAQ,OAAO,eAAe,CAAC;AAEnD,WAAO,mBADQ,QAAQ,MAAM,OAAO,cAAc,KAAK,CACtB;;AAGrC,OAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,QAAI,wBAAwB,MAAM,CAAE,QAAO,YAAY,MAAM;AAC7D,WAAO,gBAAgB,MAAM;;AAE/B,UAAO;KAEV,CAAC;AACF,iBAAe,IAAI,QAAQ,MAAM;AACjC,SAAO;;CAET,MAAM,sBAAsB,WAA6B;AACvD,MAAI,kBAAkB,QACpB,QAAO,OAAO,KAAK,mBAAmB;AAExC,MAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,OAAI,wBAAwB,OAAO,CAAE,QAAO,YAAY,OAAO;AAC/D,UAAO,gBAAgB,OAAO;;AAEhC,SAAO;;AAaT,QAAO;EACL,SAXuC;GACvC,OAAO,YAAY,OAAO,MAAM;GAChC,OAAO,YAAY,OAAO,MAAM;GAChC,QAAQ,YAAY,OAAO,OAAO;GAClC,OAAO,YAAY,OAAO,MAAM;GAChC,SAAS,YAAY,OAAO,QAAQ;GACpC,WAAW,YAAY,OAAO,UAAU;GACxC,YAAY,YAAY,OAAO,WAAW;GAC1C,OAAO,YAAY,OAAO,MAAM;GACjC;EAGC,cAAc;AACZ,YAAS;;EAEZ;;AAGH,MAAM,uCAAuB,IAAI,SAAiB;AAElD,SAAS,oBACP,QAIA;CACA,IAAI,SAAS;CACb,MAAM,iCAAiB,IAAI,SAAyB;CACpD,MAAM,eAAqC,kBAAgC;EACzE,MAAM,WAAW,eAAe,IAAI,cAAc;AAClD,MAAI,SAAU,QAAO;EACrB,MAAM,QAAQ,IAAI,MAAM,eAAe,EACrC,IAAI,cAAc,UAAU,UAAU;AACpC,OAAI,CAAC,OACH,cACE,QAAQ,uBACN,IAAI,MACF,mFACD,CACF;GAEL,MAAM,QAAQ,QAAQ,IAAI,cAAc,UAAU,SAAS;AAC3D,OAAI,OAAO,UAAU,WACnB,SAAQ,GAAG,SAAoB;AAC7B,QAAI,CAAC,OACH,QAAO,QAAQ,uBACb,IAAI,MACF,mFACD,CACF;AAGH,WAAO,kBADQ,QAAQ,MAAM,OAAO,cAAc,KAAK,EACtB,YAAY;;AAGjD,OAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,QAAI,wBAAwB,MAAM,CAAE,QAAO,YAAY,MAAM;AAC7D,WAAO,gBAAgB,MAAM;;AAE/B,UAAO;KAEV,CAAC;AACF,iBAAe,IAAI,eAAe,MAAM;AACxC,uBAAqB,IAAI,MAAM;AAC/B,SAAO;;AAGT,QAAO;EACL,OAAO,YAAY,OAAO;EAC1B,cAAc;AACZ,YAAS;;EAEZ;;AAGH,SAAS,kBACP,QACA,YACS;AACT,KAAI,kBAAkB,QACpB,QAAO,OAAO,MAAM,UAAU,kBAAkB,OAAO,WAAW,CAAC;AAErE,KAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AACjD,MAAI,wBAAwB,OAAO,CAAE,QAAO,WAAW,OAAO;AAC9D,SAAO,gBAAgB,OAAO;;AAEhC,QAAO;;AAGT,SAAS,wBAAwB,OAAwB;AACvD,KAAI,MAAM,QAAQ,MAAM,CACtB,QAAO,MAAM,MAAM,UAAU,OAAO,UAAU,WAAW;CAC3D,IAAIK,UAAyB;AAC7B,QAAO,WAAW,YAAY,OAAO,WAAW;AAC9C,OAAK,MAAM,YAAY,QAAQ,QAAQ,QAAQ,EAAE;AAC/C,OAAI,aAAa,cAAe;GAChC,MAAM,aAAa,QAAQ,yBAAyB,SAAS,SAAS;AACtE,OAAI,CAAC,WAAY;AACjB,OAAI,OAAO,WAAW,UAAU,WAAY,QAAO;AACnD,OAAI,OAAO,WAAW,QAAQ,WAAY,QAAO;;AAEnD,YAAU,QAAQ,eAAe,QAAQ;;AAE3C,QAAO;;AAGT,SAAS,gCAAgC,QAAuB;CAC9D,MAAM,uBAAO,IAAI,SAAiB;CAClC,MAAM,SAAS,UAA4B;AACzC,MAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,MAAI,KAAK,IAAI,MAAM,CAAE,QAAO;AAC5B,OAAK,IAAI,MAAM;AACf,MAAI,qBAAqB,IAAI,MAAM,CAAE,QAAO;AAC5C,MAAI,MAAM,QAAQ,MAAM,CAAE,QAAO,MAAM,KAAK,MAAM;AAClD,SAAO,OAAO,OAAO,MAAiC,CAAC,KAAK,MAAM;;AAGpE,KAAI,CAAC,MAAM,OAAO,CAAE;AACpB,OAAM,IAAI,MACR,sEACD;;AAGH,SAAS,gBAAmB,OAAa;AACvC,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;AACxD,QAAO,gBAAgB,MAAM;;AAG/B,SAAS,uBAAuB,OAAyB;AACvD,KAAI,OAAO,UAAU,YAAY,UAAU,KAAM,QAAO;CACxD,MAAM,YAAY;AAClB,KAAI,UAAU,SAAS,2BAA4B,QAAO;AAC1D,KAAI,OAAO,UAAU,YAAY,SAAU,QAAO;AAClD,QACE,UAAU,QAAQ,SAAS,2BAA2B,IACtD,sDAAsD,KACpD,UAAU,QACX;;AAIL,SAAS,+BACP,aACA,OACO;CACP,MAAM,eACJ,iBAAiB,QACb,MAAM,UACN,OAAO,UAAU,WACf,QACA,OAAO,MAAM;AACrB,QAAO,IAAI,MACT,gDAAgD,YAAY,oTAAoT,gBAChX,EAAE,OAAO,CACV;;;;;;;AAQH,eAAe,UAAU,OAAoC;CAC3D,MAAM,SAAS,MAAM,OAAO,OAAO,OAAO,WAAW,MAAsB;CAC3E,MAAM,OAAO,IAAI,WAAW,OAAO;CACnC,IAAI,MAAM;AACV,MAAK,MAAM,QAAQ,KACjB,QAAO,KAAK,SAAS,GAAG,CAAC,SAAS,GAAG,IAAI;AAE3C,QAAO"}

package/dist/{filesystem-Y5aF3nmJ.d.ts → filesystem-Cd6xd_Pe.d.ts}

@@ -46,6 +46,8 @@ interface SandboxProcess {
   output(options?: ProcessOutputOptions): Promise<ProcessOutput<Uint8Array>>;
   waitForPort(port: number, options?: WaitForPortOptions): Promise<void>;
   kill(signal?: number): Promise<void>;
+  /** Releases this handle's RPC reference. The process keeps running. */
+  [Symbol.dispose](): void;
 }
 /**
  * Options for waiting for a port to become ready
@@ -276,6 +278,8 @@ interface Terminal {
     cols?: number;
     rows?: number;
   }): Promise<Response>;
+  /** Releases this handle's RPC reference. The terminal keeps running. */
+  [Symbol.dispose](): void;
 }
 interface SandboxTerminalsAPI {
   create(options: CreateTerminalOptions): Promise<TerminalSnapshot>;
@@ -733,4 +737,4 @@ type CheckChangesResult = {
 };
 //#endregion
 export { CreateTerminalOptions as A, PortWatchRPCOptions as B, BucketCredentials as C, MountBucketOptions as D, LocalMountBucketOptions as E, TerminalOutputOptions as F, ProcessTextOutputOptions as G, ProcessLogsOptions as H, TerminalOutputSubscriptionAPI as I, WaitForExitOptions as J, SandboxOptions as K, TerminalSnapshot as L, Terminal as M, TerminalOutputCursor as N, RemoteMountBucketOptions as O, TerminalOutputEvent as P, ExecOptions as R, BackupOptions as S, DirectoryBackup as T, ProcessOutput as U, PortWatchSubscriptionAPI as V, ProcessOutputOptions as W, WaitForPortOptions as X, WaitForLogOptions as Y, RenameFileResult as _, FileChunk as a, WriteFileResult as b, FileMetadata as c, ListFilesOptions as d, ListFilesResult as f, ReadFileStreamResult as g, ReadFileResult as h, DeleteFileResult as i, SandboxTerminalsAPI as j, RestoreBackupResult as k, FileStreamEvent as l, MoveFileResult as m, CheckChangesRequest as n, FileEncoding as o, MkdirResult as p, SandboxProcess as q, CheckChangesResult as r, FileExistsResult as s, CheckChangesOptions as t, FileWatchSSEEvent as u, WatchOptions as v, BucketProvider as w, BackupCompressionOptions as x, WatchRequest as y, PortWatchEvent as z };
-//# sourceMappingURL=filesystem-Y5aF3nmJ.d.ts.map
+//# sourceMappingURL=filesystem-Cd6xd_Pe.d.ts.map

package/dist/filesystem-Cd6xd_Pe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filesystem-Cd6xd_Pe.d.ts","names":["ProcessExit","ProcessLogCursor","ProcessLogEvent","ProcessStatus","WaitForLogResult","Disposable","ExecOptions","Record","ProcessLogsOptions","AbortSignal","WaitForExitOptions","WaitForLogOptions","ProcessOutput","T","ProcessOutputOptions","ProcessTextOutputOptions","SandboxProcess","Promise","ReadableStream","RegExp","Uint8Array","WaitForPortOptions","PortCheckRequest","PortCheckResponse","PortWatchRequest","PortWatchEvent","PortWatchRPCOptions","PortWatchSubscriptionAPI","SandboxOptions","ProcessExit","ProcessFailure","SandboxCommand","WaitForExitOptions","CreateTerminalOptions","Record","TerminalSnapshot","TerminalOutputCursor","TerminalOutputOptions","AbortSignal","TerminalOutputEvent","Uint8Array","TerminalOutputSubscriptionAPI","ReadableStream","Promise","Terminal","Request","Response","SandboxTerminalsAPI","Omit","PtyClientControlMessage","PtyServerControlMessage","BackupCompressionOptions","BackupOptions","DirectoryBackup","RestoreBackupResult","BucketProvider","BucketCredentials","RemoteMountBucketOptions","LocalMountBucketOptions","R2BindingMountBucketOptions","MountBucketOptions","MkdirResult","WriteFileResult","FileEncoding","ReadFileResult","ReadFileStreamResult","Uint8Array","ReadableStream","DeleteFileResult","RenameFileResult","MoveFileResult","FileExistsResult","FileInfo","ListFilesOptions","ListFilesResult","FileStreamEvent","FileMetadata","FileChunk","WatchOptions","CheckChangesOptions","FileWatchEventType","WatchRequest","CheckChangesRequest","FileWatchSSEEvent","CheckChangesResult","EnvSetResult","PortExposeResult","HealthCheckResult","ShutdownResult"],"sources":["../../shared/dist/types/core.d.ts","../../shared/dist/pty-types.d.ts","../../shared/dist/types/backup-mounts.d.ts","../../shared/dist/types/filesystem.d.ts"],"sourcesContent":["import type { ProcessExit, ProcessLogCursor, ProcessLogEvent, ProcessStatus, WaitForLogResult } from '../process-types.js';\n/**\n * Represents a disposable resource with a cleanup function.\n * Common pattern used by VS Code, xterm.js, RxJS, and others.\n */\nexport interface Disposable {\n    dispose(): void;\n}\nexport interface ExecOptions {\n    cwd?: string;\n    env?: Record<string, string>;\n    timeout?: number;\n}\nexport interface ProcessLogsOptions {\n    since?: ProcessLogCursor;\n    replay?: boolean;\n    follow?: boolean;\n    signal?: AbortSignal;\n}\nexport interface WaitForExitOptions {\n    timeout?: number;\n    signal?: AbortSignal;\n}\nexport interface WaitForLogOptions extends WaitForExitOptions {\n    stream?: 'stdout' | 'stderr' | 'both';\n}\nexport interface ProcessOutput<T> {\n    stdout: T;\n    stderr: T;\n    exitCode: number;\n    signal?: number;\n    timedOut: boolean;\n    truncated: boolean;\n}\nexport interface ProcessOutputOptions extends WaitForExitOptions {\n    maxBytes?: number;\n}\nexport interface ProcessTextOutputOptions extends ProcessOutputOptions {\n    encoding: 'utf8';\n}\nexport interface SandboxProcess {\n    readonly id: string;\n    readonly pid: number;\n    readonly exitCode: Promise<number>;\n    status(): Promise<ProcessStatus>;\n    logs(options?: ProcessLogsOptions): Promise<ReadableStream<ProcessLogEvent>>;\n    waitForLog(pattern: string | RegExp, options?: WaitForLogOptions): Promise<WaitForLogResult>;\n    waitForExit(options?: WaitForExitOptions): Promise<ProcessExit>;\n    output(options: ProcessTextOutputOptions): Promise<ProcessOutput<string>>;\n    output(options?: ProcessOutputOptions): Promise<ProcessOutput<Uint8Array>>;\n    waitForPort(port: number, options?: WaitForPortOptions): Promise<void>;\n    kill(signal?: number): Promise<void>;\n    /** Releases this handle's RPC reference. The process keeps running. */\n    [Symbol.dispose](): void;\n}\n/**\n * Options for waiting for a port to become ready\n */\nexport interface WaitForPortOptions {\n    /**\n     * Check mode\n     * - 'http': Make an HTTP request and check for success status\n     * - 'tcp': Just check if TCP connection succeeds (default)\n     * @default 'tcp'\n     */\n    mode?: 'http' | 'tcp';\n    /**\n     * HTTP path to check (only used when mode is 'http')\n     * @default '/'\n     */\n    path?: string;\n    /**\n     * Expected HTTP status code or range (only used when mode is 'http')\n     * - Single number: exact match (e.g., 200)\n     * - Object with min/max: range match (e.g., { min: 200, max: 399 })\n     * @default { min: 200, max: 399 }\n     */\n    status?: number | {\n        min: number;\n        max: number;\n    };\n    /**\n     * Maximum time to wait in milliseconds\n     * @default no timeout\n     */\n    timeout?: number;\n    /**\n     * Signal used to cancel waiting locally.\n     */\n    signal?: AbortSignal;\n    /**\n     * Interval between checks in milliseconds\n     * @default 500\n     */\n    interval?: number;\n}\n/**\n * Request body for port readiness check endpoint\n */\nexport interface PortCheckRequest {\n    port: number;\n    mode: 'http' | 'tcp';\n    path?: string;\n    statusMin?: number;\n    statusMax?: number;\n}\n/**\n * Response from port readiness check endpoint\n */\nexport interface PortCheckResponse {\n    ready: boolean;\n    /** HTTP status code received (only for http mode) */\n    statusCode?: number;\n    /** Error message if check failed */\n    error?: string;\n}\n/**\n * Request body for streaming port watch endpoint\n */\nexport interface PortWatchRequest extends PortCheckRequest {\n    /** Process ID to monitor - stream closes if process exits */\n    processId?: string;\n    /** Internal polling interval in ms (default: 500) */\n    interval?: number;\n}\n/**\n * SSE event emitted by port watch stream\n */\nexport type PortWatchEvent = {\n    type: 'watching';\n    port: number;\n} | {\n    type: 'ready';\n    port: number;\n    statusCode?: number;\n} | {\n    type: 'error';\n    port: number;\n    error: string;\n};\nexport interface PortWatchRPCOptions {\n    mode?: 'http' | 'tcp';\n    path?: string;\n    status?: number | {\n        min: number;\n        max: number;\n    };\n    interval?: number;\n}\nexport interface PortWatchSubscriptionAPI {\n    stream(): Promise<ReadableStream<PortWatchEvent>>;\n    cancel(): Promise<void>;\n    [Symbol.dispose](): void;\n}\nexport interface SandboxOptions {\n    /**\n     * Duration after which the sandbox instance will sleep if no requests are received\n     * Can be:\n     * - A string like \"30s\", \"3m\", \"5m\", \"1h\" (seconds, minutes, or hours)\n     * - A number representing seconds (e.g., 180 for 3 minutes)\n     * Default: \"10m\" (10 minutes)\n     *\n     * Note: Ignored when keepAlive is true\n     */\n    sleepAfter?: string | number;\n    /**\n     * Keep the container alive indefinitely by preventing automatic shutdown\n     * When true, the container will never auto-timeout and must be explicitly destroyed\n     * - Any scenario where activity can't be automatically detected\n     *\n     * Important: You MUST call sandbox.destroy() when done to avoid resource leaks\n     *\n     * Default: false\n     */\n    keepAlive?: boolean;\n    /**\n     * Normalize sandbox ID to lowercase for preview URL compatibility\n     *\n     * Required for preview URLs because hostnames are case-insensitive (RFC 3986), which\n     * would route requests to a different Durable Object instance with IDs containing uppercase letters.\n     *\n     * **Important:** Different normalizeId values create different Durable Object instances:\n     * - `getSandbox(ns, \"MyProject\")` → DO key: \"MyProject\"\n     * - `getSandbox(ns, \"MyProject\", {normalizeId: true})` → DO key: \"myproject\"\n     *\n     * **Future change:** In a future version, this will default to `true` (automatically lowercase all IDs).\n     * IDs with uppercase letters will trigger a warning. To prepare, use lowercase IDs or explicitly\n     * pass `normalizeId: true`.\n     *\n     * @example\n     * getSandbox(ns, \"my-project\")  // Works with preview URLs (lowercase)\n     * getSandbox(ns, \"MyProject\", {normalizeId: true})  // Normalized to \"myproject\"\n     *\n     * @default false\n     */\n    normalizeId?: boolean;\n    /**\n     * Container startup timeout configuration\n     *\n     * Tune timeouts based on your container's characteristics. SDK defaults (30s instance, 90s ports)\n     * work for most use cases. Adjust for heavy containers or fail-fast applications.\n     *\n     * Can also be configured via environment variables:\n     * - SANDBOX_INSTANCE_TIMEOUT_MS\n     * - SANDBOX_PORT_TIMEOUT_MS\n     * - SANDBOX_POLL_INTERVAL_MS\n     *\n     * Precedence: options > env vars > SDK defaults\n     *\n     * @example\n     * // Heavy containers (ML models, large apps)\n     * getSandbox(ns, id, {\n     *   containerTimeouts: { portReadyTimeoutMS: 180_000 }\n     * })\n     *\n     * @example\n     * // Fail-fast for latency-sensitive apps\n     * getSandbox(ns, id, {\n     *   containerTimeouts: {\n     *     instanceGetTimeoutMS: 15_000,\n     *     portReadyTimeoutMS: 30_000\n     *   }\n     * })\n     */\n    containerTimeouts?: {\n        /**\n         * Time to wait for container instance provisioning\n         * @default 30000 (30s) - or SANDBOX_INSTANCE_TIMEOUT_MS env var\n         */\n        instanceGetTimeoutMS?: number;\n        /**\n         * Time to wait for application startup and ports to be ready\n         * @default 90000 (90s) - or SANDBOX_PORT_TIMEOUT_MS env var\n         */\n        portReadyTimeoutMS?: number;\n        /**\n         * How often to poll for container readiness\n         * @default 300 (300ms) - or SANDBOX_POLL_INTERVAL_MS env var\n         */\n        waitIntervalMS?: number;\n    };\n}\n//# sourceMappingURL=core.d.ts.map","import type { ProcessExit, ProcessFailure, SandboxCommand } from './process-types.js';\nimport type { WaitForExitOptions } from './types/core.js';\nexport interface CreateTerminalOptions {\n    command: SandboxCommand;\n    cwd?: string;\n    env?: Record<string, string>;\n    cols?: number;\n    rows?: number;\n    bufferSize?: number;\n}\nexport interface TerminalSnapshot {\n    id: string;\n    pid?: number;\n    command: SandboxCommand;\n    cwd?: string;\n    status: 'running' | 'exited' | 'error';\n    exit?: ProcessExit;\n    error?: ProcessFailure;\n}\nexport type TerminalOutputCursor = string;\nexport interface TerminalOutputOptions {\n    since?: TerminalOutputCursor;\n    replay?: boolean;\n    follow?: boolean;\n    signal?: AbortSignal;\n}\nexport type TerminalOutputEvent = {\n    type: 'data';\n    terminalId: string;\n    cursor: TerminalOutputCursor;\n    timestamp: string;\n    data: Uint8Array;\n} | {\n    type: 'terminal';\n    terminalId: string;\n    cursor: TerminalOutputCursor;\n    timestamp: string;\n    state: 'exited';\n    exit: ProcessExit;\n} | {\n    type: 'terminal';\n    terminalId: string;\n    cursor: TerminalOutputCursor;\n    timestamp: string;\n    state: 'error';\n    error: ProcessFailure;\n} | {\n    type: 'truncated';\n    terminalId: string;\n    cursor?: TerminalOutputCursor;\n    timestamp: string;\n};\nexport interface TerminalOutputSubscriptionAPI {\n    stream(): Promise<ReadableStream<TerminalOutputEvent>>;\n    cancel(): Promise<void>;\n    [Symbol.dispose](): void;\n}\nexport interface Terminal {\n    readonly id: string;\n    getSnapshot(): Promise<TerminalSnapshot>;\n    write(data: Uint8Array): Promise<void>;\n    resize(cols: number, rows: number): Promise<void>;\n    output(options?: TerminalOutputOptions): Promise<ReadableStream<TerminalOutputEvent>>;\n    waitForExit(options?: WaitForExitOptions): Promise<ProcessExit>;\n    interrupt(): Promise<void>;\n    terminate(): Promise<void>;\n    connect(request: Request, options?: {\n        cursor?: TerminalOutputCursor;\n        cols?: number;\n        rows?: number;\n    }): Promise<Response>;\n    /** Releases this handle's RPC reference. The terminal keeps running. */\n    [Symbol.dispose](): void;\n}\nexport interface SandboxTerminalsAPI {\n    create(options: CreateTerminalOptions): Promise<TerminalSnapshot>;\n    get(id: string): Promise<TerminalSnapshot | null>;\n    list(): Promise<TerminalSnapshot[]>;\n    output(id: string, options?: Omit<TerminalOutputOptions, 'signal'>): Promise<TerminalOutputSubscriptionAPI>;\n    write(id: string, data: Uint8Array): Promise<void>;\n    resize(id: string, cols: number, rows: number): Promise<void>;\n    interrupt(id: string): Promise<void>;\n    terminate(id: string): Promise<void>;\n    hasActive(): Promise<boolean>;\n}\nexport type PtyClientControlMessage = {\n    type: 'resize';\n    cols: number;\n    rows: number;\n} | {\n    type: 'interrupt';\n} | {\n    type: 'terminate';\n};\nexport type PtyServerControlMessage = {\n    type: 'ready';\n    cursor?: TerminalOutputCursor;\n} | {\n    type: 'chunk';\n    cursor: TerminalOutputCursor;\n    byteLength: number;\n} | {\n    type: 'truncated';\n    cursor?: TerminalOutputCursor;\n} | {\n    type: 'exit';\n    cursor: TerminalOutputCursor;\n    exit: ProcessExit;\n} | {\n    type: 'error';\n    cursor?: TerminalOutputCursor;\n    code?: string;\n    message: string;\n};\n//# sourceMappingURL=pty-types.d.ts.map","/**\n * Options for creating a directory backup\n */\nexport interface BackupCompressionOptions {\n    format?: 'gzip' | 'lz4' | 'zstd';\n    threads?: number;\n}\nexport interface BackupOptions {\n    /** Directory to back up. Must be absolute and under `/workspace`, `/home`, `/tmp`, `/var/tmp`, or `/app`. */\n    dir: string;\n    /** Human-readable name for this backup. Optional. */\n    name?: string;\n    /** Seconds until automatic garbage collection. Default: 259200 (3 days). No upper limit. */\n    ttl?: number;\n    /**\n     * Respect git ignore rules for the backup directory when it is inside a git repository.\n     *\n     * Default: false.\n     * If the directory is not inside a git repository, no git-based exclusions are applied.\n     * If git is not installed in the container, a warning is logged and gitignore rules are skipped.\n     */\n    gitignore?: boolean;\n    /**\n     * Glob patterns to exclude from the backup.\n     * A single-component pattern, such as `node_modules`, `dist/`, or `*.log`,\n     * matches at any depth. A multi-component pattern, such as `build/output`,\n     * matches only relative to `dir`. mksquashfs does not support `**`, so `**`\n     * components are removed and do not make a multi-component pattern match at\n     * any depth.\n     *\n     * @example ['node_modules', '*.log', '.cache', 'build/output']\n     */\n    excludes?: string[];\n    /**\n     * Use local R2 binding for backup storage instead of presigned URLs.\n     * Required for local development where presigned URLs and FUSE are unavailable.\n     * When true, the DO resolves BACKUP_BUCKET from its own env as an R2 binding.\n     */\n    localBucket?: boolean;\n    compression?: BackupCompressionOptions;\n    /**\n     * Use parallel multipart upload to R2 for large archives.\n     * Significantly speeds up uploads for archives over 10 MiB.\n     * Default: true.\n     */\n    multipart?: boolean;\n}\n/**\n * Handle representing a stored directory backup.\n * Serializable metadata returned by createBackup().\n * Store it anywhere and later pass it to restoreBackup().\n */\nexport interface DirectoryBackup {\n    /** Unique backup identifier */\n    readonly id: string;\n    /** Directory to restore into. Must be under `/workspace`, `/home`, `/tmp`, `/var/tmp`, or `/app`. */\n    readonly dir: string;\n    /** Whether this backup was created with local R2 binding mode. */\n    readonly localBucket?: boolean;\n}\n/**\n * Result returned from a successful restoreBackup() call\n */\nexport interface RestoreBackupResult {\n    success: boolean;\n    /** The directory that was restored */\n    dir: string;\n    /** Backup ID that was restored */\n    id: string;\n}\n/**\n * Supported S3-compatible storage providers\n */\nexport type BucketProvider = 'r2' | 's3' | 'gcs';\n/**\n * Credentials for S3-compatible storage\n */\nexport interface BucketCredentials {\n    accessKeyId: string;\n    secretAccessKey: string;\n}\n/**\n * Options for mounting an S3-compatible bucket via s3fs-FUSE (production)\n */\nexport interface RemoteMountBucketOptions {\n    /**\n     * S3-compatible endpoint URL\n     *\n     * Examples:\n     * - R2: 'https://abc123.r2.cloudflarestorage.com'\n     * - AWS S3: 'https://s3.us-west-2.amazonaws.com'\n     * - GCS: 'https://storage.googleapis.com'\n     */\n    endpoint: string;\n    /**\n     * Optional provider hint for automatic s3fs flag configuration\n     * If not specified, will attempt to detect from endpoint URL.\n     *\n     * Examples:\n     * - 'r2' - Cloudflare R2 (adds nomixupload)\n     * - 's3' - Amazon S3 (standard configuration)\n     * - 'gcs' - Google Cloud Storage (no special flags needed)\n     */\n    provider?: BucketProvider;\n    /**\n     * Explicit credentials (overrides env var auto-detection)\n     */\n    credentials?: BucketCredentials;\n    /**\n     * Mount filesystem as read-only\n     * Default: false\n     */\n    readOnly?: boolean;\n    /**\n     * Advanced: Override or extend s3fs options\n     *\n     * These will be merged with provider-specific defaults.\n     * To override defaults completely, specify all options here.\n     *\n     * Common options:\n     * - 'use_path_request_style' - Use path-style URLs (bucket/path vs bucket.host/path)\n     * - 'nomixupload' - Disable mixed multipart uploads (needed for some providers)\n     * - 'nomultipart' - Disable all multipart operations\n     * - 'sigv2' - Use signature version 2 instead of v4\n     * - 'no_check_certificate' - Skip SSL certificate validation (dev/testing only)\n     */\n    s3fsOptions?: string[];\n    /**\n     * Optional prefix/subdirectory within the bucket to mount.\n     *\n     * When specified, only the contents under this prefix are visible at the\n     * mount point, scoping the mount to a subdirectory of the bucket.\n     *\n     * Must start with '/' (e.g., '/workspaces/project123' or '/data/uploads/')\n     */\n    prefix?: string;\n    /**\n     * Keep real credentials in the Durable Object; write dummy credentials into\n     * the container-side s3fs password file. Outbound s3fs requests are\n     * intercepted by the DO, signed with real credentials, and forwarded to the\n     * configured endpoint.\n     *\n     * Default: false (real credentials are written into the container)\n     */\n    credentialProxy?: boolean;\n}\n/**\n * Options for mounting a local R2 binding via bidirectional sync (local dev)\n *\n * Used during local development with `wrangler dev`. The Durable Object\n * resolves the R2 binding from its own env using the `bucket` parameter\n * and syncs files via polling instead of s3fs-FUSE.\n */\nexport interface LocalMountBucketOptions {\n    /**\n     * Must be true to indicate local R2 binding mode.\n     */\n    localBucket: true;\n    /**\n     * Optional prefix/subdirectory within the bucket to sync.\n     *\n     * When specified, only the contents under this prefix will be visible\n     * at the mount point.\n     */\n    prefix?: string;\n    /**\n     * Mount filesystem as read-only\n     * Default: false\n     */\n    readOnly?: boolean;\n}\n/**\n * Options for mounting an R2 binding via credential-less egress interception.\n */\nexport interface R2BindingMountBucketOptions {\n    /**\n     * Must not be set — distinguishes this variant from RemoteMountBucketOptions.\n     */\n    endpoint?: never;\n    /**\n     * Optional prefix/subdirectory within the bucket to mount.\n     *\n     * When specified, only the contents under this prefix will be visible\n     * at the mount point.\n     */\n    prefix?: string;\n    /**\n     * Mount filesystem as read-only\n     * Default: false\n     */\n    readOnly?: boolean;\n    /**\n     * Advanced: Override or extend s3fs options.\n     * Provider defaults for R2 are still applied automatically.\n     */\n    s3fsOptions?: string[];\n}\n/**\n * Options for mounting a bucket — remote (s3fs-FUSE), local (R2 binding sync),\n * or R2 egress (credential-less s3fs via egress interception).\n */\nexport type MountBucketOptions = RemoteMountBucketOptions | LocalMountBucketOptions | R2BindingMountBucketOptions;\n//# sourceMappingURL=backup-mounts.d.ts.map","export interface MkdirResult {\n    success: boolean;\n    path: string;\n    recursive: boolean;\n    timestamp: string;\n    exitCode?: number;\n}\nexport interface WriteFileResult {\n    success: boolean;\n    path: string;\n    timestamp: string;\n    exitCode?: number;\n}\n/**\n * Valid `encoding` values accepted by `readFile` / `writeFile` options.\n *\n * - `'utf-8'` / `'utf8'` — treat content as text.\n * - `'base64'` — treat content as base64-encoded binary.\n * - `'none'` — streaming variant of `readFile`, returns a\n *   `ReadableStream<Uint8Array>` of raw bytes (see `ReadFileStreamResult`).\n */\nexport type FileEncoding = 'utf-8' | 'utf8' | 'base64' | 'none';\nexport interface ReadFileResult {\n    success: boolean;\n    path: string;\n    content: string;\n    timestamp: string;\n    exitCode?: number;\n    /**\n     * Encoding used for content (utf-8 for text, base64 for binary)\n     */\n    encoding?: 'utf-8' | 'base64';\n    /**\n     * Whether the file is detected as binary\n     */\n    isBinary?: boolean;\n    /**\n     * MIME type of the file (e.g., 'image/png', 'text/plain')\n     */\n    mimeType?: string;\n    /**\n     * File size in bytes\n     */\n    size?: number;\n}\n/**\n * Result of `readFile()` with `encoding: 'none'`.\n *\n * `content` is a raw binary `ReadableStream<Uint8Array>` delivered directly\n * over the capnp channel — no base64 encoding, no SSE framing, no buffering.\n */\nexport interface ReadFileStreamResult {\n    success: true;\n    path: string;\n    content: ReadableStream<Uint8Array>;\n    size: number;\n    mimeType: string;\n    timestamp: string;\n}\nexport interface DeleteFileResult {\n    success: boolean;\n    path: string;\n    timestamp: string;\n    exitCode?: number;\n}\nexport interface RenameFileResult {\n    success: boolean;\n    path: string;\n    newPath: string;\n    timestamp: string;\n    exitCode?: number;\n}\nexport interface MoveFileResult {\n    success: boolean;\n    path: string;\n    newPath: string;\n    timestamp: string;\n    exitCode?: number;\n}\nexport interface FileExistsResult {\n    success: boolean;\n    path: string;\n    exists: boolean;\n    timestamp: string;\n}\nexport interface FileInfo {\n    name: string;\n    absolutePath: string;\n    relativePath: string;\n    type: 'file' | 'directory' | 'symlink' | 'other';\n    size: number;\n    modifiedAt: string;\n    mode: string;\n    permissions: {\n        readable: boolean;\n        writable: boolean;\n        executable: boolean;\n    };\n}\nexport interface ListFilesOptions {\n    recursive?: boolean;\n    includeHidden?: boolean;\n}\nexport interface ListFilesResult {\n    success: boolean;\n    path: string;\n    files: FileInfo[];\n    count: number;\n    timestamp: string;\n    exitCode?: number;\n}\n/**\n * SSE events for file streaming\n */\nexport type FileStreamEvent = {\n    type: 'metadata';\n    mimeType: string;\n    size: number;\n    isBinary: boolean;\n    encoding: 'utf-8' | 'base64';\n} | {\n    type: 'chunk';\n    data: string;\n} | {\n    type: 'complete';\n    bytesRead: number;\n} | {\n    type: 'error';\n    error: string;\n};\n/**\n * File metadata from streaming\n */\nexport interface FileMetadata {\n    mimeType: string;\n    size: number;\n    isBinary: boolean;\n    encoding: 'utf-8' | 'base64';\n}\n/**\n * File stream chunk - either string (text) or Uint8Array (binary, auto-decoded)\n */\nexport type FileChunk = string | Uint8Array;\n/**\n * Options for watching a directory.\n *\n * `watch()` resolves only after the watcher is established on the filesystem.\n * The returned SSE stream can be consumed with `parseSSEStream()`.\n */\nexport interface WatchOptions {\n    /**\n     * Watch subdirectories recursively\n     * @default true\n     */\n    recursive?: boolean;\n    /**\n     * Glob patterns to include (e.g., '*.ts', '*.js').\n     * If not specified, all files are included.\n     * Cannot be used together with `exclude`.\n     */\n    include?: string[];\n    /**\n     * Glob patterns to exclude (e.g., 'node_modules', '.git').\n     * Cannot be used together with `include`.\n     * @default ['.git', 'node_modules', '.DS_Store']\n     */\n    exclude?: string[];\n}\n/**\n * Options for checking whether a path changed while disconnected.\n *\n * Pass the `version` returned from a previous `checkChanges()` call to learn\n * whether the path is unchanged, changed, or needs a full resync because the\n * retained change state was reset. Change state lives only for the current\n * container lifetime and may expire while idle.\n */\nexport interface CheckChangesOptions extends WatchOptions {\n    /**\n     * Version returned by a previous `checkChanges()` call.\n     */\n    since?: string;\n}\n/**\n * @internal SSE event types for container communication\n */\nexport type FileWatchEventType = 'create' | 'modify' | 'delete' | 'move_from' | 'move_to' | 'attrib';\n/**\n * @internal Request body for starting a file watch\n */\nexport interface WatchRequest {\n    path: string;\n    recursive?: boolean;\n    events?: FileWatchEventType[];\n    include?: string[];\n    exclude?: string[];\n}\n/**\n * @internal Request body for checking retained change state.\n */\nexport interface CheckChangesRequest extends WatchRequest {\n    since?: string;\n}\n/**\n * SSE events emitted by `sandbox.watch()`.\n */\nexport type FileWatchSSEEvent = {\n    type: 'watching';\n    path: string;\n    watchId: string;\n} | {\n    type: 'event';\n    eventType: FileWatchEventType;\n    path: string;\n    isDirectory: boolean;\n    timestamp: string;\n} | {\n    type: 'error';\n    error: string;\n} | {\n    type: 'stopped';\n    reason: string;\n};\n/**\n * Result returned by `checkChanges()`.\n */\nexport type CheckChangesResult = {\n    success: true;\n    status: 'unchanged' | 'changed';\n    version: string;\n    timestamp: string;\n} | {\n    success: true;\n    status: 'resync';\n    reason: 'expired' | 'restarted';\n    version: string;\n    timestamp: string;\n};\nexport interface EnvSetResult {\n    success: boolean;\n    timestamp: string;\n}\nexport interface PortExposeResult {\n    url: string;\n    port: number;\n    name?: string;\n}\nexport interface HealthCheckResult {\n    success: boolean;\n    status: 'healthy' | 'unhealthy';\n    timestamp: string;\n}\nexport interface ShutdownResult {\n    success: boolean;\n    message: string;\n    timestamp: string;\n}\n//# sourceMappingURL=filesystem.d.ts.map"],"mappings":";;;;AAkCiBc,UA1BAR,WAAAA,CA0BoB;EAGpBS,GAAAA,CAAAA,EAAAA,MAAAA;EAGAC,GAAAA,CAAAA,EA9BPT,MA8BOS,CAAAA,MAAc,EAAA,MAAA,CAAA;EAGRC,OAAAA,CAAAA,EAAAA,MAAAA;;AACTA,UA/BGT,kBAAAA,CA+BHS;EACKT,KAAAA,CAAAA,EA/BPP,gBA+BOO;EAA4CN,MAAAA,CAAAA,EAAAA,OAAAA;EAAfgB,MAAAA,CAAAA,EAAAA,OAAAA;EAARD,MAAAA,CAAAA,EA5B3BR,WA4B2BQ;;AACWN,UA3BlCD,kBAAAA,CA2BkCC;EAA4BP,OAAAA,CAAAA,EAAAA,MAAAA;EAARa,MAAAA,CAAAA,EAzB1DR,WAyB0DQ;;AAChBjB,UAxBtCW,iBAAAA,SAA0BD,kBAwBYV,CAAAA;EAARiB,MAAAA,CAAAA,EAAAA,QAAAA,GAAAA,QAAAA,GAAAA,MAAAA;;AACQL,UAtBtCA,aAsBsCA,CAAAA,CAAAA,CAAAA,CAAAA;EAARK,MAAAA,EArBnCJ,CAqBmCI;EAC1BH,MAAAA,EArBTD,CAqBSC;EAA6CM,QAAAA,EAAAA,MAAAA;EAAdR,MAAAA,CAAAA,EAAAA,MAAAA;EAARK,QAAAA,EAAAA,OAAAA;EACJI,SAAAA,EAAAA,OAAAA;;AACbJ,UAjBVH,oBAAAA,SAA6BJ,kBAiBnBO,CAAAA;EAAO,QAAA,CAAA,EAAA,MAAA;AAOlC;AAsEYQ,UA3FKV,wBAAAA,SAAiCD,oBA2FxB,CAAA;EAYTY,QAAAA,EAAAA,MAAAA;AASjB;AACqCD,UA9GpBT,cAAAA,CA8GoBS;EAAfP,SAAAA,EAAAA,EAAAA,MAAAA;EAARD,SAAAA,GAAAA,EAAAA,MAAAA;EACAA,SAAAA,QAAAA,EA5GSA,OA4GTA,CAAAA,MAAAA,CAAAA;EAAO,MAAA,EAAA,EA3GPA,OA2GO,CA3GCd,aA2GD,CAAA;EAGJyB,IAAAA,CAAAA,OAAc,CAAdA,EA7GEpB,kBA6GY,CAAA,EA7GSS,OA6GT,CA7GiBC,cA6GjB,CA7GgChB,eA6GhC,CAAA,CAAA;+BA5GEiB,kBAAkBR,oBAAoBM,QAAQb;wBACrDM,qBAAqBO,QAAQjB;kBACnCe,2BAA2BE,QAAQL;EC9CtCqB,MAAAA,CAAAA,OACJF,CADIE,ED+CInB,oBC9CRiB,CAAAA,ED8C+Bd,OC9C/Bc,CD8CuCnB,aC5CpC,CD4CkDQ,UC5ClD,CAAA,CAAA;EAKCe,WAAAA,CAAAA,IAAAA,EAAAA,MAAgB,EAAA,OAAA,CAAA,EDwCOd,kBCxCP,CAAA,EDwC4BJ,OCxC5B,CAAA,IAAA,CAAA;EAGpBc,IAAAA,CAAAA,MAAAA,CAAAA,EAAAA,MAAAA,CAAAA,EDsCcd,OCtCdc,CAAAA,IAAAA,CAAAA;EAGFF;EACCC,CAAAA,MAAAA,CAAAA,OAAAA,GAAAA,EAAAA,IAAAA;;AAEZ;AACA;AAMA;AAGYM,UD6BKf,kBAAAA,CC7BLe;EAEFI;;;;;;EAkBuB,IAAA,CAAA,EAAA,MAAA,GAAA,KAAA;EAGhBC;;;;EAEHE,IAAAA,CAAAA,EAAAA,MAAAA;EAAO;AAGrB;;;;;EAIwCA,MAAAA,CAAAA,EAAAA,MAAAA,GAAAA;IACnBN,GAAAA,EAAAA,MAAAA;IAA+CE,GAAAA,EAAAA,MAAAA;EAAfG,CAAAA;EAARC;;;;EAE5BA,OAAAA,CAAAA,EAAAA,MAAAA;EACAA;;;EAKDG,MAAAA,CAAAA,EDmBHrC,WCnBGqC;EAARH;;AAIR;;EACoDR,QAAAA,CAAAA,EAAAA,MAAAA;;;;;KDqDxCV,cAAAA;;;AGhIZ,CAAA,GAAiBoC;EAOAC,IAAAA,EAAAA,OAAAA;EAcLC,IAAAA,EAAAA,MAAAA;EACKC,UAAAA,CAAAA,EAAAA,MAAc;AA6B/B,CAAA,GAAiBC;EAQAG,IAAAA,EAAAA,OAAAA;EAMAC,IAAAA,EAAAA,MAAAA;EAOAC,KAAAA,EAAAA,MAAAA;AAOjB,CAAA;AAMiBE,UHuDA9C,mBAAAA,CGvDQ;EAcR+C,IAAAA,CAAAA,EAAAA,MAAAA,GAAAA,KAAgB;EAIhBC,IAAAA,CAAAA,EAAAA,MAAAA;EAWLC,MAAAA,CAAAA,EAAAA,MAAAA,GAAe;IAmBVC,GAAAA,EAAAA,MAAY;IASjBC,GAAAA,EAAAA,MAAS;EAOJC,CAAAA;EA2BAC,QAAAA,CAAAA,EAAAA,MAAAA;AASjB;AAIiBE,UHxCAtD,wBAAAA,CG2CJqD;EAOIE,MAAAA,EAAAA,EHjDHjE,OGiDGiE,CHjDKhE,cGiDc,CHjDCO,cGiDQwD,CAAY,CAAA;EAM7CE,MAAAA,EAAAA,EHtDElE,OGsDFkE,CAAAA,IAAiB,CAAA;EAoBjBC,CAAAA,MAAAA,CAAAA,OAAAA,GAAAA,EAAAA,IAAkB;;UHvEbxD,cAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UCxJAK,qBAAAA;EDMA3B,OAAAA,ECLJyB,cDKe;EAKXvB,GAAAA,CAAAA,EAAAA,MAAAA;EAMAE,GAAAA,CAAAA,ECdPwB,MDcOxB,CAAAA,MAAAA,EAAkB,MAAA,CAAA;EAIlBC,IAAAA,CAAAA,EAAAA,MAAAA;EAGAC,IAAAA,CAAAA,EAAAA,MAAAA;EAQAE,UAAAA,CAAAA,EAAAA,MAAAA;AAGjB;AAGiBE,UC9BAmB,gBAAAA,CD8Bc;EAGRlB,EAAAA,EAAAA,MAAAA;EACDd,GAAAA,CAAAA,EAAAA,MAAAA;EAARc,OAAAA,EC/BDc,cD+BCd;EACKT,GAAAA,CAAAA,EAAAA,MAAAA;EAA4CN,MAAAA,EAAAA,SAAAA,GAAAA,QAAAA,GAAAA,OAAAA;EAAfgB,IAAAA,CAAAA,EC7BrCW,WD6BqCX;EAARD,KAAAA,CAAAA,EC5B5Ba,cD4B4Bb;;AACWN,KC3BvCyB,oBAAAA,GD2BuCzB,MAAAA;AAA4BP,UC1B9DiC,qBAAAA,CD0B8DjC;EAARa,KAAAA,CAAAA,ECzB3DmB,oBDyB2DnB;EAC7CP,MAAAA,CAAAA,EAAAA,OAAAA;EAA6BV,MAAAA,CAAAA,EAAAA,OAAAA;EAARiB,MAAAA,CAAAA,ECvBlCqB,WDuBkCrB;;AACQL,KCtB3C2B,mBAAAA,GDsB2C3B;EAARK,IAAAA,EAAAA,MAAAA;EAC1BH,UAAAA,EAAAA,MAAAA;EAA6CM,MAAAA,ECpBtDgB,oBDoBsDhB;EAAdR,SAAAA,EAAAA,MAAAA;EAARK,IAAAA,EClBlCuB,UDkBkCvB;CACJI,GAAAA;EAAqBJ,IAAAA,EAAAA,UAAAA;EAClCA,UAAAA,EAAAA,MAAAA;EAAO,MAAA,EChBtBmB,oBDgBsB;EAOjBf,SAAAA,EAAAA,MAAAA;EAsELI,KAAAA,EAAAA,QAAAA;EAYKC,IAAAA,ECtGPG,WDsGOH;AASjB,CAAA,GAAiBC;EACoBF,IAAAA,EAAAA,UAAAA;EAAfP,UAAAA,EAAAA,MAAAA;EAARD,MAAAA,EC5GFmB,oBD4GEnB;EACAA,SAAAA,EAAAA,MAAAA;EAAO,KAAA,EAAA,OAAA;EAGJW,KAAAA,EC7GNE,cD6GoB;;;;ECxJdG,MAAAA,CAAAA,EA+CJG,oBA/CyB;EAQrBD,SAAAA,EAAAA,MAAAA;CAGJJ;AAGFF,UAoCMY,6BAAAA,CApCNZ;EACCC,MAAAA,EAAAA,EAoCEa,OApCFb,CAoCUY,cApCVZ,CAoCyBS,mBApCzBT,CAAAA,CAAAA;EAAc,MAAA,EAAA,EAqCZa,OArCY,CAAA,IAAA,CAAA;EAEdP,CAAAA,MAAAA,CAAAA,OAAAA,GAAAA,EAAAA,IAAoB;AAChC;AAMYG,UA+BKK,QAAAA,CA/Bc;EAGnBR,SAAAA,EAAAA,EAAAA,MAAAA;EAEFI,WAAAA,EAAAA,EA4BSG,OA5BTH,CA4BiBL,gBA5BjBK,CAAAA;EAIEJ,KAAAA,CAAAA,IAAAA,EAyBII,UAzBJJ,CAAAA,EAyBiBO,OAzBjBP,CAAAA,IAAAA,CAAAA;EAGFP,MAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,IAAAA,EAAAA,MAAAA,CAAAA,EAuB8Bc,OAvB9Bd,CAAAA,IAAAA,CAAAA;EAIEO,MAAAA,CAAAA,OAAAA,CAAAA,EAoBSC,qBApBTD,CAAAA,EAoBiCO,OApBjCP,CAoByCM,cApBzCN,CAoBwDG,mBApBxDH,CAAAA,CAAAA;EAGDN,WAAAA,CAAAA,OAAAA,CAAAA,EAkBeE,kBAlBfF,CAAAA,EAkBoCa,OAlBpCb,CAkB4CD,WAlB5CC,CAAAA;EAIEM,SAAAA,EAAAA,EAeIO,OAfJP,CAAAA,IAAAA,CAAAA;EAAoB,SAAA,EAAA,EAgBhBO,OAhBgB,CAAA,IAAA,CAAA;EAGhBF,OAAAA,CAAAA,OAAAA,EAcII,OAdJJ,EAAAA,OAEHE,CAFgC,EAAA;IACTJ,MAAAA,CAAAA,EAcpBH,oBAdoBG;IAAfG,IAAAA,CAAAA,EAAAA,MAAAA;IAARC,IAAAA,CAAAA,EAAAA,MAAAA;EACAA,CAAAA,CAAAA,EAgBNA,OAhBMA,CAgBEG,QAhBFH,CAAAA;EAAO;EAGJC,CAAAA,MAAAA,CAAAA,OAAQ,GAAA,EAAA,IAAA;;AAEND,UAeFI,mBAAAA,CAfEJ;EACHH,MAAAA,CAAAA,OAAAA,EAeIP,qBAfJO,CAAAA,EAe4BG,OAf5BH,CAeoCL,gBAfpCK,CAAAA;EAAaG,GAAAA,CAAAA,EAAAA,EAAAA,MAAAA,CAAAA,EAgBRA,OAhBQA,CAgBAR,gBAhBAQ,GAAAA,IAAAA,CAAAA;EACWA,IAAAA,EAAAA,EAgB5BA,OAhB4BA,CAgBpBR,gBAhBoBQ,EAAAA,CAAAA;EACnBN,MAAAA,CAAAA,EAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAgBYW,IAhBZX,CAgBiBA,qBAhBjBA,EAAAA,QAAAA,CAAAA,CAAAA,EAgBoDM,OAhBpDN,CAgB4DI,6BAhB5DJ,CAAAA;EAA+CE,KAAAA,CAAAA,EAAAA,EAAAA,MAAAA,EAAAA,IAAAA,EAiBxCC,UAjBwCD,CAAAA,EAiB3BI,OAjB2BJ,CAAAA,IAAAA,CAAAA;EAAfG,MAAAA,CAAAA,EAAAA,EAAAA,MAAAA,EAAAA,IAAAA,EAAAA,MAAAA,EAAAA,IAAAA,EAAAA,MAAAA,CAAAA,EAkBDC,OAlBCD,CAAAA,IAAAA,CAAAA;EAARC,SAAAA,CAAAA,EAAAA,EAAAA,MAAAA,CAAAA,EAmBlBA,OAnBkBA,CAAAA,IAAAA,CAAAA;EACnBX,SAAAA,CAAAA,EAAAA,EAAAA,MAAAA,CAAAA,EAmBCW,OAnBDX,CAAAA,IAAAA,CAAAA;EAA6BH,SAAAA,EAAAA,EAoBtCc,OApBsCd,CAAAA,OAAAA,CAAAA;;;;;;;ADvDtCvB,UELA6C,wBAAAA,CFOD;EAGC3C,MAAAA,CAAAA,EAAAA,MAAAA,GAAAA,KAAkB,GAAA,MAAA;EAMlBE,OAAAA,CAAAA,EAAAA,MAAAA;AAIjB;AAGiBE,UEnBAwC,aAAAA,CFmBavC;EAQbC;EAGAC,GAAAA,EAAAA,MAAAA;EAGAC;EAGMC,IAAAA,CAAAA,EAAAA,MAAAA;EACDd;EAARc,GAAAA,CAAAA,EAAAA,MAAAA;EACKT;;;;;;;EACoDS,SAAAA,CAAAA,EAAAA,OAAAA;EAC7CP;;;;;;;;;;EAGcW,QAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAAqBJ;;;AAQ7D;AAsEA;EAYiBS,WAAAA,CAAAA,EAAAA,OAAAA;EASAC,WAAAA,CAAAA,EE9GCwB,wBF8GuB;EACJ1B;;;;;EAIpBG,SAAAA,CAAAA,EAAAA,OAAc;;;;ACxJ/B;AAQA;;AAMWC,UCoCMwB,eAAAA,CDpCNxB;EACCC;EAAc,SAAA,EAAA,EAAA,MAAA;EAEdM;EACKC,SAAAA,GAAAA,EAAAA,MAAAA;EAMLE;EAGAH,SAAAA,WAAAA,CAAAA,EAAAA,OAAAA;;;;;AAgBDN,UCkBMwB,mBAAAA,CDlBNxB;EAIEM,OAAAA,EAAAA,OAAAA;EAAoB;EAGhBK,GAAAA,EAAAA,MAAAA;EACoBF;EAAfG,EAAAA,EAAAA,MAAAA;;;;AAItB;AAE2BP,KCcfoB,cAAAA,GDdepB,IAAAA,GAAAA,IAAAA,GAAAA,KAAAA;;;;AAEaQ,UCgBvBa,iBAAAA,CDhBuBb;EACnBN,WAAAA,EAAAA,MAAAA;EAA+CE,eAAAA,EAAAA,MAAAA;;;;;AACrBI,UCqB9Bc,wBAAAA,CDrB8Bd;EAC9BA;;;;;;;AAUjB;EACoBV,QAAAA,EAAAA,MAAAA;EAAgCE;;;;;;;;;EAGqBQ,QAAAA,CAAAA,ECyB1DY,cDzB0DZ;EAC7CH;;;EAEDG,WAAAA,CAAAA,EC0BTa,iBD1BSb;EACAA;;;;;;AC/E3B;AAIA;AA6CA;AAWA;AAUA;AAIA;AAOA;AAqEA;AAqBA;AA2BA;;;EAAsFgB,WAAAA,CAAAA,EAAAA,MAAAA,EAAAA;EAA2B;;;;ACzMjH;AAOA;AAcA;AACA;EA6BiBM,MAAAA,CAAAA,EAAAA,MAAAA;EAQAG;AAMjB;AAOA;AAOA;AAMA;AAcA;AAIA;AAWA;EAmBiBQ,eAAY,CAAA,EAAA,OAAA;AAS7B;AAOA;AA2BA;AASA;AAIA;AAUA;AAMA;AAoBA;UDxEiBlB,uBAAAA;;;;;;;;;;;;;;;;;;;;;UAqBAC,2BAAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KA2BLC,kBAAAA,GAAqBH,2BAA2BC,0BAA0BC;;;UCzMrEE,WAAAA;;;EHQAvD,SAAAA,EAAAA,OAAW;EAKXE,SAAAA,EAAAA,MAAAA;EAMAE,QAAAA,CAAAA,EAAAA,MAAAA;AAIjB;AAGiBE,UGnBAkD,eAAAA,CHmBa;EAQbhD,OAAAA,EAAAA,OAAAA;EAGAC,IAAAA,EAAAA,MAAAA;EAGAC,SAAAA,EAAAA,MAAc;EAGRC,QAAAA,CAAAA,EAAAA,MAAAA;;;;;;;;;;AAGgDA,KGzB3D8C,YAAAA,GHyB2D9C,OAAAA,GAAAA,MAAAA,GAAAA,QAAAA,GAAAA,MAAAA;AAC7CP,UGzBTsD,cAAAA,CHyBStD;EAA6BV,OAAAA,EAAAA,OAAAA;EAARiB,IAAAA,EAAAA,MAAAA;EAC3BF,OAAAA,EAAAA,MAAAA;EAAmCH,SAAAA,EAAAA,MAAAA;EAARK,QAAAA,CAAAA,EAAAA,MAAAA;EAC1BH;;;EAAuBG,QAAAA,CAAAA,EAAAA,OAAAA,GAAAA,QAAAA;EACJI;;;EACN,QAAA,CAAA,EAAA,OAAA;EAOjBA;AAsEjB;AAYA;EASiBM,QAAAA,CAAAA,EAAAA,MAAAA;EACoBF;;;EACvBR,IAAAA,CAAAA,EAAAA,MAAAA;;AAGd;;;;ACxJA;AAQA;AAGac,UEsCIkC,oBAAAA,CFtCJlC;EAGFF,OAAAA,EAAAA,IAAAA;EACCC,IAAAA,EAAAA,MAAAA;EAAc,OAAA,EEqCbqC,cFrCa,CEqCED,UFrCF,CAAA;EAEd9B,IAAAA,EAAAA,MAAAA;EACKC,QAAAA,EAAAA,MAAAA;EAMLE,SAAAA,EAAAA,MAAAA;;AAKFC,UE4BO4B,gBAAAA,CF5BP5B;EAIEJ,OAAAA,EAAAA,OAAAA;EAGFP,IAAAA,EAAAA,MAAAA;EAIEO,SAAAA,EAAAA,MAAAA;EAGDN,QAAAA,CAAAA,EAAAA,MAAAA;;AAIsB,UEgBhBuC,gBAAAA,CFhBgB;EAGhB5B,OAAAA,EAAAA,OAAAA;EACoBF,IAAAA,EAAAA,MAAAA;EAAfG,OAAAA,EAAAA,MAAAA;EAARC,SAAAA,EAAAA,MAAAA;EACAA,QAAAA,CAAAA,EAAAA,MAAAA;;AAGGC,UEeA0B,cAAAA,CFfQ;EAEEnC,OAAAA,EAAAA,OAAAA;EAARQ,IAAAA,EAAAA,MAAAA;EACHH,OAAAA,EAAAA,MAAAA;EAAaG,SAAAA,EAAAA,MAAAA;EACWA,QAAAA,CAAAA,EAAAA,MAAAA;;AAC4BJ,UEiBnDgC,gBAAAA,CFjBmDhC;EAAfG,OAAAA,EAAAA,OAAAA;EAARC,IAAAA,EAAAA,MAAAA;EACnBX,MAAAA,EAAAA,OAAAA;EAA6BH,SAAAA,EAAAA,MAAAA;;AACtCc,UEqBA6B,QAAAA,CFrBA7B;EACAA,IAAAA,EAAAA,MAAAA;EACIE,YAAAA,EAAAA,MAAAA;EACJT,YAAAA,EAAAA,MAAAA;EAGDU,IAAAA,EAAAA,MAAAA,GAAAA,WAAAA,GAAAA,SAAAA,GAAAA,OAAAA;EAARH,IAAAA,EAAAA,MAAAA;EAAO,UAAA,EAAA,MAAA;EAIEI,IAAAA,EAAAA,MAAAA;EACGd,WAAAA,EAAAA;IAAgCE,QAAAA,EAAAA,OAAAA;IAARQ,QAAAA,EAAAA,OAAAA;IACfR,UAAAA,EAAAA,OAAAA;EAARQ,CAAAA;;AACTA,UEsBK8B,gBAAAA,CFtBL9B;EAC0BN,SAAAA,CAAAA,EAAAA,OAAAA;EAALW,aAAAA,CAAAA,EAAAA,OAAAA;;AAAwCL,UEyBxD+B,eAAAA,CFzBwD/B;EAC7CH,OAAAA,EAAAA,OAAAA;EAAaG,IAAAA,EAAAA,MAAAA;EACWA,KAAAA,EE0BzC6B,QF1ByC7B,EAAAA;EACzBA,KAAAA,EAAAA,MAAAA;EACAA,SAAAA,EAAAA,MAAAA;EACVA,QAAAA,CAAAA,EAAAA,MAAAA;;;;;AChFAQ,KC+GLwB,eAAAA,GD/GKxB;EAIAC,IAAAA,EAAAA,UAAa;EA6CbC,QAAAA,EAAAA,MAAAA;EAWAC,IAAAA,EAAAA,MAAAA;EAULC,QAAAA,EAAAA,OAAc;EAITC,QAAAA,EAAAA,OAAAA,GAAiB,QAAA;AAOlC,CAAA,GAAiBC;EAqEAC,IAAAA,EAAAA,OAAAA;EAqBAC,IAAAA,EAAAA,MAAAA;AA2BjB,CAAA,GAAYC;EAAqBH,IAAAA,EAAAA,UAAAA;EAA2BC,SAAAA,EAAAA,MAAAA;CAA0BC,GAAAA;EAA2B,IAAA,EAAA,OAAA;;;;ACzMjH;AAOA;AAcYI,UAgHKa,YAAAA,CAhHO;EACPZ,QAAAA,EAAAA,MAAAA;EA6BAC,IAAAA,EAAAA,MAAAA;EAQAG,QAAAA,EAAAA,OAAAA;EAMAC,QAAAA,EAAAA,OAAAA,GAAgB,QAAA;AAOjC;AAOA;AAMA;AAcA;AAIiBK,KAuCLG,SAAAA,GAvCoB,MAAA,GAuCCX,UApCtBM;AAQX;AAmBA;AASA;AAOA;AA2BA;AASA;AAIiBS,UAxCAH,YAAAA,CAwCY;EAUZI;AAMjB;AAoBA;;;;;;;;;;;;;;;;;;;;;;;;UAjDiBH,mBAAAA,SAA4BD;;;;;;;;;KASjCE,kBAAAA;;;;UAIKC,YAAAA;;;WAGJD;;;;;;;UAOIE,mBAAAA,SAA4BD;;;;;;KAMjCE,iBAAAA;;;;;;aAMGH;;;;;;;;;;;;;;KAcHI,kBAAAA"}

package/dist/git/index.d.ts

@@ -1,6 +1,6 @@
 import "../process-types-GStiZ8f8.js";
-import "../filesystem-Y5aF3nmJ.js";
-import { c as SandboxExtension, l as SandboxLike, o as HTTPAuthHostConfig } from "../index-DfXx3uZL.js";
+import "../filesystem-Cd6xd_Pe.js";
+import { c as SandboxExtension, l as SandboxLike, o as HTTPAuthHostConfig } from "../index-Fbdwkfft.js";
 
 //#region ../../extensions/git/src/types.d.ts
 /** Result of a git clone (`checkout`) operation. */

package/dist/git/index.js

@@ -1,7 +1,7 @@
 import { i as ErrorCode, r as getHttpStatus } from "../errors-Bb3s6nBS.js";
 import { t as createErrorFromResponse } from "../errors--yR3zLC_.js";
 import { c as extractRepoName, l as redactCommand, s as DEFAULT_GIT_CLONE_TIMEOUT_MS } from "../dist-n_eniPAR.js";
-import { t as SandboxExtension } from "../extensions-BKL2zqL4.js";
+import { t as SandboxExtension } from "../extensions-038QzSIg.js";
 
 //#region ../../extensions/git/src/manager.ts
 /**

package/dist/{index-DfXx3uZL.d.ts → index-Fbdwkfft.d.ts}

@@ -1,5 +1,5 @@
 import { a as ProcessLogsRPCOptions, i as ProcessLogEvent, o as ProcessStatus, s as SandboxCommand } from "./process-types-GStiZ8f8.js";
-import { B as PortWatchRPCOptions, R as ExecOptions, V as PortWatchSubscriptionAPI, _ as RenameFileResult, b as WriteFileResult, d as ListFilesOptions, f as ListFilesResult, g as ReadFileStreamResult, h as ReadFileResult, i as DeleteFileResult, j as SandboxTerminalsAPI, m as MoveFileResult, n as CheckChangesRequest, o as FileEncoding, p as MkdirResult, q as SandboxProcess, r as CheckChangesResult, s as FileExistsResult, x as BackupCompressionOptions, y as WatchRequest, z as PortWatchEvent } from "./filesystem-Y5aF3nmJ.js";
+import { B as PortWatchRPCOptions, R as ExecOptions, V as PortWatchSubscriptionAPI, _ as RenameFileResult, b as WriteFileResult, d as ListFilesOptions, f as ListFilesResult, g as ReadFileStreamResult, h as ReadFileResult, i as DeleteFileResult, j as SandboxTerminalsAPI, m as MoveFileResult, n as CheckChangesRequest, o as FileEncoding, p as MkdirResult, q as SandboxProcess, r as CheckChangesResult, s as FileExistsResult, x as BackupCompressionOptions, y as WatchRequest, z as PortWatchEvent } from "./filesystem-Cd6xd_Pe.js";
 import { RpcTarget } from "cloudflare:workers";
 
 //#region ../shared/dist/request-types.d.ts
@@ -48,7 +48,13 @@ interface ReadFileOptions {
 }
 interface WriteFileOptions {
   encoding?: string;
-  permissions?: string;
+  /**
+   * Create a new file readable only by its owner (mode 0600), and fail if the
+   * path already exists. A container image without this option ignores it
+   * and creates the file with the default mode, so a caller that needs mode
+   * 0600 still chmods after writing.
+   */
+  ownerOnly?: boolean;
 }
 interface MkdirOptions {
   recursive?: boolean;
@@ -435,4 +441,4 @@ declare abstract class SandboxExtension extends RpcTarget {
 }
 //#endregion
 export { QuickTunnelInfo as _, ExtensionRuntimeControl as a, SandboxExtension as c, sandboxRuntimeCall as d, ProcessPullSubscriptionRPC as f, NamedTunnelInfo as g, ExtensionPackage as h, ExtensionRuntimeCallbackResult as i, SandboxLike as l, ExtensionHealth as m, ExtensionRuntimeCall as n, HTTPAuthHostConfig as o, ProcessRPCDescriptor as p, ExtensionRuntimeCallback as r, HTTPAuthInterceptorParams as s, ExtensionProcessSandbox as t, createExtensionProcessSandbox as u, TunnelInfo as v, TunnelOptions as y };
-//# sourceMappingURL=index-DfXx3uZL.d.ts.map
+//# sourceMappingURL=index-Fbdwkfft.d.ts.map

package/dist/index-Fbdwkfft.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-Fbdwkfft.d.ts","names":["BackupCompressionOptions","ReadFileRequest","WriteFileRequest","DeleteFileRequest","RenameFileRequest","MoveFileRequest","MkdirRequest","FileExistsRequest","ListFilesRequest","CreateBackupRequest","UploadPart","UploadPartsRequest","UploadedPart","UploadPartsResponse","CreateBackupResponse","RestoreBackupRequest","RestoreBackupResponse","SandboxProcessesAPI","SandboxTerminalsAPI","CreateBackupResponse","RestoreBackupResponse","UploadedPart","UploadPartsResponse","BackupCompressionOptions","CheckChangesRequest","CheckChangesResult","DeleteFileResult","FileEncoding","FileExistsResult","ListFilesOptions","ListFilesResult","MkdirResult","MoveFileResult","PortWatchRPCOptions","PortWatchSubscriptionAPI","ReadFileResult","ReadFileStreamResult","RenameFileResult","WatchRequest","WriteFileResult","S3FSOptionValue","MountCommandResult","MountS3FSRequest","Record","RemoveMountDirectoryRequest","SandboxAPI","SandboxFilesAPI","SandboxPortsAPI","SandboxUtilsAPI","SandboxBackupAPI","SandboxWatchAPI","SandboxTunnelsAPI","SandboxMountsAPI","SandboxWorkspaceAPI","SandboxExtensionsAPI","ReadFileStreamOptions","ReadFileBinaryOptions","ReadFileOptions","Exclude","WriteFileOptions","MkdirOptions","Promise","Uint8Array","ReadableStream","RuntimeMetadata","CreateWorkspaceArchiveRequest","CreateWorkspaceArchiveResult","ExtractWorkspaceArchiveRequest","BackupUploadArchiveRequest","BackupDownloadArchiveRequest","Array","BackupPrepareRestoreRequest","BackupUploadPartsRequest","BackupCreateArchiveOptions","WatchSubscriptionAPI","TunnelInfo","QuickTunnelInfo","NamedTunnelInfo","TunnelOptions","TunnelRunMode","TunnelRunIdentity","TunnelRunRef","EnsureQuickTunnelRunRequest","EnsureNamedTunnelRunRequest","EnsureTunnelRunRequest","QuickTunnelRunSnapshot","NamedTunnelRunSnapshot","TunnelRunSnapshot","EnsureTunnelRunResult","StopTunnelRunRequest","StopTunnelRunResult","TunnelRunExitEvent","ExtensionPackage","ExtensionRegistration","ExtensionHealth","ExtensionConnectRequest","EXTENSION_TARBALL_REQUIRED","SandboxControlCallback"],"sources":["../../shared/dist/request-types.d.ts","../../shared/dist/rpc-types.d.ts","../src/processes/rpc-types.ts","../src/extensions/index.ts"],"sourcesContent":["import type { BackupCompressionOptions } from './types.js';\n/**\n * Request types for API calls to the container\n * Single source of truth for the contract between SDK clients and container handlers\n */\n/**\n * Request to read a file\n */\nexport interface ReadFileRequest {\n    path: string;\n    encoding?: string;\n}\n/**\n * Request to write a file\n */\nexport interface WriteFileRequest {\n    path: string;\n    content: string;\n    encoding?: string;\n}\n/**\n * Request to delete a file\n */\nexport interface DeleteFileRequest {\n    path: string;\n}\n/**\n * Request to rename a file\n */\nexport interface RenameFileRequest {\n    oldPath: string;\n    newPath: string;\n}\n/**\n * Request to move a file\n */\nexport interface MoveFileRequest {\n    sourcePath: string;\n    destinationPath: string;\n}\n/**\n * Request to create a directory\n */\nexport interface MkdirRequest {\n    path: string;\n    recursive?: boolean;\n}\n/**\n * Request to check if a file or directory exists\n */\nexport interface FileExistsRequest {\n    path: string;\n}\n/**\n * Request to list files in a directory\n */\nexport interface ListFilesRequest {\n    path: string;\n    options?: {\n        recursive?: boolean;\n        includeHidden?: boolean;\n    };\n}\n/**\n * Request to create a backup archive from a directory.\n * The container creates a squashfs archive at archivePath.\n * The DO then reads it and uploads to R2.\n */\nexport interface CreateBackupRequest {\n    /** Directory to back up */\n    dir: string;\n    /** Path where the container should write the archive */\n    archivePath: string;\n    /** Respect git ignore rules when the directory is inside a git repository */\n    gitignore?: boolean;\n    /** Glob patterns to exclude from the backup */\n    excludes?: string[];\n    compression?: BackupCompressionOptions;\n}\n/**\n * A single part to upload in a multipart upload.\n * The container reads the byte range from the local archive and PUTs it\n * to the presigned URL.\n */\nexport interface UploadPart {\n    partNumber: number;\n    /** Presigned PUT URL for this part */\n    url: string;\n    /** Byte offset within the archive file */\n    offset: number;\n    /** Number of bytes in this part */\n    size: number;\n}\n/**\n * Request to upload parts of a backup archive directly from the container to R2.\n * Used for parallel multipart upload of large archives.\n */\nexport interface UploadPartsRequest {\n    /** Path to the archive file in the container */\n    archivePath: string;\n    /** Parts to upload in parallel */\n    parts: UploadPart[];\n}\n/**\n * Result for a single uploaded part (ETag returned by R2).\n */\nexport interface UploadedPart {\n    partNumber: number;\n    etag: string;\n}\n/**\n * Response after the container has uploaded all parts.\n */\nexport interface UploadPartsResponse {\n    success: boolean;\n    parts: UploadedPart[];\n}\n/**\n * Response from the container after creating a backup archive\n */\nexport interface CreateBackupResponse {\n    success: boolean;\n    /** Size of the archive in bytes */\n    sizeBytes: number;\n    /** Path to the archive file in the container */\n    archivePath: string;\n}\n/**\n * Request to restore a backup from an archive file.\n * The DO writes the archive to archivePath first, then tells the container to extract it.\n */\nexport interface RestoreBackupRequest {\n    /** Directory to restore into */\n    dir: string;\n    /** Path to the archive file in the container */\n    archivePath: string;\n}\n/**\n * Response from the container after restoring a backup\n */\nexport interface RestoreBackupResponse {\n    success: boolean;\n    /** Directory that was restored */\n    dir: string;\n}\n//# sourceMappingURL=request-types.d.ts.map","/**\n * Shared interface types for the container-control path.\n *\n * Defines the contract between the SDK control client and the container\n * control-plane API. The current wire implementation uses capnweb RPC.\n */\nimport type { SandboxProcessesAPI } from './process-types.js';\nimport type { SandboxTerminalsAPI } from './pty-types.js';\nimport type { CreateBackupResponse, RestoreBackupResponse, UploadedPart, UploadPartsResponse } from './request-types.js';\nimport type { BackupCompressionOptions, CheckChangesRequest, CheckChangesResult, DeleteFileResult, FileEncoding, FileExistsResult, ListFilesOptions, ListFilesResult, MkdirResult, MoveFileResult, PortWatchRPCOptions, PortWatchSubscriptionAPI, ReadFileResult, ReadFileStreamResult, RenameFileResult, WatchRequest, WriteFileResult } from './types.js';\nexport type S3FSOptionValue = string | boolean;\nexport interface MountCommandResult {\n    success: boolean;\n    exitCode: number;\n    stdout: string;\n    stderr: string;\n}\nexport interface MountS3FSRequest {\n    source: string;\n    mountPath: string;\n    options: Record<string, S3FSOptionValue>;\n}\nexport interface RemoveMountDirectoryRequest {\n    path: string;\n    onlyIfNotMountpoint: boolean;\n}\nexport interface SandboxAPI {\n    files: SandboxFilesAPI;\n    ports: SandboxPortsAPI;\n    utils: SandboxUtilsAPI;\n    backup: SandboxBackupAPI;\n    watch: SandboxWatchAPI;\n    tunnels: SandboxTunnelsAPI;\n    terminals: SandboxTerminalsAPI;\n    processes: SandboxProcessesAPI;\n    mounts: SandboxMountsAPI;\n    workspace: SandboxWorkspaceAPI;\n    extensions: SandboxExtensionsAPI;\n}\nexport type ReadFileStreamOptions = object;\nexport interface ReadFileBinaryOptions {\n    encoding: 'none';\n}\nexport interface ReadFileOptions {\n    encoding?: Exclude<FileEncoding, 'none'>;\n}\nexport interface WriteFileOptions {\n    encoding?: string;\n    /**\n     * Create a new file readable only by its owner (mode 0600), and fail if the\n     * path already exists. A container image without this option ignores it\n     * and creates the file with the default mode, so a caller that needs mode\n     * 0600 still chmods after writing.\n     */\n    ownerOnly?: boolean;\n}\nexport interface MkdirOptions {\n    recursive?: boolean;\n}\nexport interface SandboxFilesAPI {\n    readFile(path: string, options: ReadFileBinaryOptions): Promise<ReadFileStreamResult>;\n    readFile(path: string, options?: ReadFileOptions): Promise<ReadFileResult>;\n    readFileStream(path: string, options?: ReadFileStreamOptions): Promise<ReadableStream<Uint8Array>>;\n    writeFile(path: string, content: string, options?: WriteFileOptions): Promise<WriteFileResult>;\n    writeFileStream(path: string, stream: ReadableStream<Uint8Array>, options?: Record<string, never>): Promise<{\n        success: boolean;\n        path: string;\n        bytesWritten: number;\n        timestamp: string;\n    }>;\n    deleteFile(path: string, options?: Record<string, never>): Promise<DeleteFileResult>;\n    renameFile(oldPath: string, newPath: string, options?: Record<string, never>): Promise<RenameFileResult>;\n    moveFile(sourcePath: string, destinationPath: string, options?: Record<string, never>): Promise<MoveFileResult>;\n    mkdir(path: string, options?: MkdirOptions): Promise<MkdirResult>;\n    listFiles(path: string, options?: ListFilesOptions): Promise<ListFilesResult>;\n    exists(path: string, options?: Record<string, never>): Promise<FileExistsResult>;\n}\nexport interface SandboxPortsAPI {\n    openWatch(port: number, options?: PortWatchRPCOptions): Promise<PortWatchSubscriptionAPI>;\n}\nexport interface RuntimeMetadata {\n    runtimeIncarnationID: string;\n    sandboxVersion: string;\n    controlProtocolVersion: 1;\n}\nexport interface SandboxUtilsAPI {\n    ping(): Promise<string>;\n    getRuntimeMetadata(): Promise<RuntimeMetadata>;\n    activateControlSession(expectedRuntimeIncarnationID: string): Promise<RuntimeMetadata>;\n}\nexport interface CreateWorkspaceArchiveRequest {\n    root: string;\n    excludes: readonly string[];\n}\nexport interface CreateWorkspaceArchiveResult {\n    archivePath: string;\n}\nexport interface ExtractWorkspaceArchiveRequest {\n    root: string;\n    archivePath: string;\n}\nexport interface SandboxWorkspaceAPI {\n    createArchive(request: CreateWorkspaceArchiveRequest): Promise<CreateWorkspaceArchiveResult>;\n    extractArchive(request: ExtractWorkspaceArchiveRequest): Promise<void>;\n    cleanupArchive(archivePath: string): Promise<void>;\n}\nexport interface SandboxMountsAPI {\n    pathExists(path: string): Promise<boolean>;\n    ensureDirectory(path: string): Promise<void>;\n    chmodOwnerOnly(path: string): Promise<void>;\n    deleteFile(path: string): Promise<void>;\n    mountS3FS(request: MountS3FSRequest): Promise<MountCommandResult>;\n    mountS3FSAndVerify(request: MountS3FSRequest): Promise<MountCommandResult>;\n    isMountpoint(path: string): Promise<boolean>;\n    unmountFuse(path: string): Promise<MountCommandResult>;\n    unmountFuseIfMounted(path: string): Promise<void>;\n    removeMountDirectory(request: RemoveMountDirectoryRequest): Promise<MountCommandResult>;\n}\nexport interface BackupUploadArchiveRequest {\n    archivePath: string;\n    url: string;\n    timeoutMs: number;\n}\nexport interface BackupDownloadArchiveRequest {\n    archivePath: string;\n    expectedSize: number;\n    parts: Array<{\n        url: string;\n        offset: number;\n        range?: string;\n    }>;\n    timeoutMs: number;\n}\nexport interface BackupPrepareRestoreRequest {\n    dir: string;\n    backupId: string;\n    archivePath: string;\n}\nexport interface BackupUploadPartsRequest {\n    archivePath: string;\n    parts: Array<{\n        partNumber: number;\n        url: string;\n        offset: number;\n        size: number;\n    }>;\n}\nexport interface BackupCreateArchiveOptions {\n    excludes?: string[];\n    gitignore?: boolean;\n    compression?: BackupCompressionOptions;\n}\nexport interface SandboxBackupAPI {\n    createArchive(dir: string, archivePath: string, options?: BackupCreateArchiveOptions): Promise<CreateBackupResponse>;\n    restoreArchive(dir: string, archivePath: string): Promise<RestoreBackupResponse>;\n    uploadArchive(request: BackupUploadArchiveRequest): Promise<void>;\n    uploadParts(request: BackupUploadPartsRequest): Promise<UploadPartsResponse>;\n    prepareRestore(request: BackupPrepareRestoreRequest): Promise<{\n        existingSize: number;\n    }>;\n    downloadArchive(request: BackupDownloadArchiveRequest): Promise<void>;\n    extractArchive(dir: string, archivePath: string): Promise<void>;\n    cleanupArchive(archivePath: string): Promise<void>;\n}\nexport type { UploadedPart, UploadPartsResponse };\nexport interface WatchSubscriptionAPI {\n    stream(): Promise<ReadableStream<Uint8Array>>;\n    cancel(): Promise<void>;\n    [Symbol.dispose](): void;\n}\nexport interface SandboxWatchAPI {\n    watch(request: WatchRequest): Promise<WatchSubscriptionAPI>;\n    checkChanges(request: CheckChangesRequest): Promise<CheckChangesResult>;\n}\n/**\n * Public-facing tunnel record. Discriminated on the presence of `name`:\n * quick tunnels (`*.trycloudflare.com`) omit it, named tunnels carry the\n * label that was passed to `get(port, { name })`.\n */\nexport type TunnelInfo = QuickTunnelInfo | NamedTunnelInfo;\nexport interface QuickTunnelInfo {\n    id: string;\n    port: number;\n    /** `https://<random>.trycloudflare.com`. */\n    url: string;\n    /** Hostname portion of `url`. */\n    hostname: string;\n    createdAt: string;\n    /** Absent on quick tunnels; narrows the union. */\n    name?: never;\n}\nexport interface NamedTunnelInfo {\n    /** Cloudflare tunnel UUID (8-4-4-4-12). */\n    id: string;\n    port: number;\n    /** `https://<hostname>`. */\n    url: string;\n    /** Full hostname bound to the tunnel (without scheme). */\n    hostname: string;\n    createdAt: string;\n    /** Label originally passed via `TunnelOptions.name`. */\n    name: string;\n}\n/**\n * Options accepted by `sandbox.tunnels.get(port, options)`. Omitting\n * `name` (or omitting the options object) selects the zero-config quick\n * tunnel; setting `name` selects the named-tunnel flow.\n */\nexport interface TunnelOptions {\n    /**\n     * Single DNS label under the configured zone. The full hostname is\n     * `<name>.<zone-name>`. See `validateTunnelName` for the format rules.\n     */\n    name?: string;\n}\nexport type TunnelRunMode = 'quick' | 'named';\nexport interface TunnelRunIdentity {\n    tunnelId: string;\n    runId: string;\n}\nexport type TunnelRunRef = TunnelRunIdentity;\nexport interface EnsureQuickTunnelRunRequest extends TunnelRunIdentity {\n    mode: 'quick';\n    port: number;\n    readyTimeoutMs?: number;\n    stopGraceMs?: number;\n}\nexport interface EnsureNamedTunnelRunRequest extends TunnelRunIdentity {\n    mode: 'named';\n    port: number;\n    cloudflaredToken: string;\n    readyTimeoutMs?: number;\n    stopGraceMs?: number;\n}\nexport type EnsureTunnelRunRequest = EnsureQuickTunnelRunRequest | EnsureNamedTunnelRunRequest;\nexport interface QuickTunnelRunSnapshot extends TunnelRunIdentity {\n    mode: 'quick';\n    port: number;\n    url: string;\n    hostname: string;\n    startedAt: string;\n}\nexport interface NamedTunnelRunSnapshot extends TunnelRunIdentity {\n    mode: 'named';\n    port: number;\n    startedAt: string;\n}\nexport type TunnelRunSnapshot = QuickTunnelRunSnapshot | NamedTunnelRunSnapshot;\nexport interface EnsureTunnelRunResult {\n    run: TunnelRunSnapshot;\n    started: boolean;\n}\nexport type StopTunnelRunRequest = TunnelRunRef;\nexport interface StopTunnelRunResult {\n    stopped: boolean;\n}\nexport interface TunnelRunExitEvent extends TunnelRunIdentity {\n    mode: TunnelRunMode;\n    port: number;\n    exitCode: number | null;\n}\nexport interface SandboxTunnelsAPI {\n    /** Ensure a runtime-local cloudflared process for a DO-issued run id. */\n    ensureTunnelRun(request: EnsureTunnelRunRequest): Promise<EnsureTunnelRunResult>;\n    /** Stop the matching runtime-local cloudflared process. */\n    stopTunnelRun(request: StopTunnelRunRequest): Promise<StopTunnelRunResult>;\n}\n/**\n * Author-facing description of a sidecar extension. An extension is an\n * npm-style package: an `.tgz` whose embedded `package.json` declares the\n * sidecar entrypoint (via `bin`) and any extension metadata (under the\n * `sandboxExtension` key).\n *\n * The SDK ships the tarball bytes; the container hashes them, provisions a\n * dedicated directory keyed by content hash, derives identity from the\n * embedded `package.json`, installs the package with `bun add`, and spawns\n * the declared bin under Bun.\n *\n * `ExtensionPackage` carries tarball bytes produced by an extension build.\n * The SDK sends those bytes only when the container has not provisioned the\n * package hash yet.\n */\nexport interface ExtensionPackage {\n    /** Raw `.tgz` bytes. */\n    tarball: Uint8Array;\n    /**\n     * Bin entry to run when the embedded `package.json` declares more than one.\n     * Defaults to the value of `sandboxExtension.bin` in `package.json`, then\n     * to the single bin entry if there is exactly one.\n     */\n    bin?: string;\n    /**\n     * Max time to wait for the sidecar to accept a capnweb connection on its\n     * unix socket. Falls back to `sandboxExtension.readinessTimeoutMs` in\n     * `package.json`, then to a host default.\n     */\n    readinessTimeoutMs?: number;\n    /**\n     * Run lifecycle scripts during `bun add`. Defaults to false — provisioning\n     * happens before the sidecar is supervised, so install-time side effects\n     * are deliberately opt-in.\n     */\n    allowInstallScripts?: boolean;\n}\n/**\n * Container-derived identity for a provisioned extension package. Not\n * authored — produced by the host after extracting the embedded\n * `package.json` from a tarball.\n */\nexport interface ExtensionRegistration {\n    /** Slugified package name (e.g. `@acme/foo` → `acme-foo`). */\n    id: string;\n    packageName: string;\n    version: string;\n    /** Hex sha256 of the tarball bytes. */\n    packageHash: string;\n    /** Resolved bin entry the host spawns. */\n    bin: string;\n    readinessTimeoutMs: number;\n}\n/** Health snapshot for a provisioned extension. */\nexport interface ExtensionHealth {\n    packageHash: string;\n    id: string;\n    version: string;\n    /** Tarball is on disk and the package.json has been read. */\n    provisioned: boolean;\n    /** Sidecar process is currently running. */\n    running: boolean;\n    pid: number | null;\n    /** Whether a `__ping__` round-tripped over capnweb. */\n    responsive: boolean;\n}\n/**\n * Connect request payload. The SDK hashes the tarball locally and first sends\n * only the hash. If the current host process has not provisioned that hash,\n * it responds with an `ExtensionTarballRequired` error and the SDK retries\n * with `tarball` populated.\n */\nexport interface ExtensionConnectRequest {\n    packageHash: string;\n    /** Only sent when the host has not seen this hash yet. */\n    tarball?: Uint8Array;\n    bin?: string;\n    readinessTimeoutMs?: number;\n    allowInstallScripts?: boolean;\n}\n/**\n * Error name thrown by the host's `connect` when it has not yet provisioned\n * the requested hash and the request did not carry tarball bytes. The SDK\n * recognises this name via `Error.name` and retries the connect with the\n * bytes attached. Kept as a string constant so it survives capnweb\n * cross-realm error reconstruction.\n */\nexport declare const EXTENSION_TARBALL_REQUIRED = \"ExtensionTarballRequired\";\n/**\n * Control surface for container sidecar extensions.\n *\n * `connect` is the only entry point: it provisions on first use, supervises\n * lazily, and returns the sidecar's capnweb remote main as a stub. Calls on\n * the stub are proxied through the container's capnweb session to the\n * sidecar's capnweb session — callback parameters (including streaming\n * handlers) round-trip across both hops.\n */\nexport interface SandboxExtensionsAPI {\n    /**\n     * Provision the package (if new) and return the sidecar's typed remote\n     * main. The result is a capnweb stub whose methods correspond to the\n     * sidecar's `RpcTarget` surface.\n     */\n    connect(req: ExtensionConnectRequest): Promise<unknown>;\n    /** Health snapshot, probing the sidecar with a `__ping__` when running. */\n    health(packageHash: string): Promise<ExtensionHealth>;\n    /** Stop a sidecar and release its capnweb session. */\n    stop(packageHash: string): Promise<void>;\n}\n/**\n * RPC surface the Sandbox DO exposes to the container over the existing\n * capnweb session. The container reaches it via\n * `session.getRemoteMain<SandboxControlCallback>()` and invokes methods\n * to push control-plane events (today: tunnel exits) back to the DO.\n *\n * One stable target per sandbox; not per-tunnel. Reusable seam for\n * future container→DO events.\n */\nexport interface SandboxControlCallback {\n    /** Called by the container when a runtime-local tunnel run exits. */\n    onTunnelRunExit(event: TunnelRunExitEvent): Promise<void>;\n}\n//# sourceMappingURL=rpc-types.d.ts.map"],"mappings":";;;;;;;ACmLA;AACA;AAWiB6E,UDrFAjE,YAAAA,CCqFe;EAiBfkE,UAAAA,EAAAA,MAAa;EAQbE,IAAAA,EAAAA,MAAAA;AAIjB;AACA;AAMA;AAOA;AACiBK,UD1HAxE,mBAAAA,CC0HsB;EAOtByE,OAAAA,EAAAA,OAAAA;EAKLC,KAAAA,EDpID3E,YCoIC2E,EAAiB;AAC7B;AAIA;AACA;AAQA;AAE6BH,UD/IZtE,oBAAAA,CC+IYsE;EAAiCI,OAAAA,EAAAA,OAAAA;EAAR3B;EAE3B4B,SAAAA,EAAAA,MAAAA;EAA+BC;EAAR7B,WAAAA,EAAAA,MAAAA;;;;;ACvPjC,UF0HA7C,qBAAAA,CE1H0B;EACA,OAAA,EAAA,OAAA;EAAzB;EAAR,GAAA,EAAA,MAAA;;;;;ADoDiFqB,KAhC/EkB,qBAAAA,GAgC+ElB,MAAAA;AAARwB,UA/BlEL,qBAAAA,CA+BkEK;EACflB,QAAAA,EAAAA,MAAAA;;AAAwBkB,UA7B3EJ,eAAAA,CA6B2EI;EAC1DD,QAAAA,CAAAA,EA7BnBF,OA6BmBE,CA7BXjC,YA6BWiC,EAAAA,MAAAA,CAAAA;;AAAeC,UA3BhCF,gBAAAA,CA2BgCE;EACXhC,QAAAA,CAAAA,EAAAA,MAAAA;EAA2BC;;;;;;EAGhDiB,SAAAA,CAAAA,EAAAA,OAAe;;AACoCb,UAtBnD0B,YAAAA,CAsBmD1B;EAAR2B,SAAAA,CAAAA,EAAAA,OAAAA;;AAE3CG,UArBAlB,eAAAA,CAqBe;EAKfE,QAAAA,CAAAA,IAAAA,EAAAA,MAAe,EAAA,OAAA,EAzBIQ,qBAyBJ,CAAA,EAzB4BK,OAyB5B,CAzBoCzB,oBAyBpC,CAAA;EACpByB,QAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAzByBJ,eAyBzBI,CAAAA,EAzB2CA,OAyB3CA,CAzBmD1B,cAyBnD0B,CAAAA;EACsBG,cAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAzBST,qBAyBTS,CAAAA,EAzBiCH,OAyBjCG,CAzByCD,cAyBzCC,CAzBwDF,UAyBxDE,CAAAA,CAAAA;EAARH,SAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAxB6BF,gBAwB7BE,CAAAA,EAxBgDA,OAwBhDA,CAxBwDtB,eAwBxDsB,CAAAA;EACgDG,eAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,MAAAA,EAxBhCD,cAwBgCC,CAxBjBF,UAwBiBE,CAAAA,EAAAA,OAAAA,CAAAA,EAxBMrB,MAwBNqB,CAAAA,MAAAA,EAAAA,KAAAA,CAAAA,CAAAA,EAxB8BH,OAwB9BG,CAAAA;IAARH,OAAAA,EAAAA,OAAAA;IAAO,IAAA,EAAA,MAAA;IA8BxDO,YAAAA,EAAAA,MAAAA;IAKAC,SAAAA,EAAAA,MAAAA;EAUAE,CAAAA,CAAAA;EAKAC,UAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAED,CAFyB,EApEF7B,MAsE5B2B,CAAAA,MAAK,EAAA,KAAA,CAAA,CAAA,EAtE+CT,OAsE/C,CAtEuDnC,gBAsEvD,CAAA;EAOC+C,UAAAA,CAAAA,OAAAA,EAAAA,MAAAA,EAAAA,OAA0B,EAAA,MAGzBlD,EAAAA,OAAwB,CAAxBA,EA/EyCoB,MA+EzCpB,CAAAA,MAAwB,EAAA,KAAA,CAAA,CAAA,EA/EyCsC,OA+EzC,CA/EiDxB,gBA+EjD,CAAA;EAEzBY,QAAAA,CAAAA,UAAgB,EAAA,MAAA,EAAA,eAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EAhFmCN,MAgFnC,CAAA,MAAA,EAAA,KAAA,CAAA,CAAA,EAhF2DkB,OAgF3D,CAhFmE7B,cAgFnE,CAAA;EAC6ByC,KAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EAhF5Bb,YAgF4Ba,CAAAA,EAhFbZ,OAgFaY,CAhFL1C,WAgFK0C,CAAAA;EAAqCtD,SAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EA/E7DU,gBA+E6DV,CAAAA,EA/E1C0C,OA+E0C1C,CA/ElCW,eA+EkCX,CAAAA;EAAR0C,MAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EA9ExDlB,MA8EwDkB,CAAAA,MAAAA,EAAAA,KAAAA,CAAAA,CAAAA,EA9EhCA,OA8EgCA,CA9ExBjC,gBA8EwBiC,CAAAA;;AACrCA,UA7ErCd,eAAAA,CA6EqCc;EAC3BO,SAAAA,CAAAA,IAAAA,EAAAA,MAAAA,EAAAA,OAAAA,CAAAA,EA7EWnC,mBA6EXmC,CAAAA,EA7EiCP,OA6EjCO,CA7EyClC,wBA6EzCkC,CAAAA;;AACFI,UA5ERR,eAAAA,CA4EQQ;EAAmClD,oBAAAA,EAAAA,MAAAA;EAARuC,cAAAA,EAAAA,MAAAA;EACxBU,sBAAAA,EAAAA,CAAAA;;AAGCF,UA3EZrB,eAAAA,CA2EYqB;EAA+BR,IAAAA,EAAAA,EA1EhDA,OA0EgDA,CAAAA,MAAAA,CAAAA;EACNA,kBAAAA,EAAAA,EA1E5BA,OA0E4BA,CA1EpBG,eA0EoBH,CAAAA;EACbA,sBAAAA,CAAAA,4BAAAA,EAAAA,MAAAA,CAAAA,EA1EyBA,OA0EzBA,CA1EiCG,eA0EjCH,CAAAA;;AA2FxB6B,UAvIAtB,0BAAAA,CAuImB;EAQnBjB,WAAAA,EAAAA,MAAAA;EAEYiC,GAAAA,EAAAA,MAAAA;EAAiCI,SAAAA,EAAAA,MAAAA;;AAEnCC,UA9IVpB,4BAAAA,CA8IUoB;EAA+BC,WAAAA,EAAAA,MAAAA;EAAR7B,YAAAA,EAAAA,MAAAA;EAAO,KAAA,EA3I9CS,KA2I8C,CAAA;IAiBxCsB,GAAAA,EAAAA,MAAAA;IAuCAE,MAAAA,EAAAA,MAAe;IAkBfC,KAAAA,CAAAA,EAAAA,MAAAA;EAyBAzC,CAAAA,CAAAA;EAMAyC,SAAAA,EAAAA,MAAAA;;AAEwBD,UA/OxBvB,2BAAAA,CA+OwBuB;EAARjC,GAAAA,EAAAA,MAAAA;EAEFA,QAAAA,EAAAA,MAAAA;EAAO,WAAA,EAAA,MAAA;;UA5OrBW,wBAAAA;;ECxHA,KAAA,ED0HNF,KC1HM,CAAA;IAC0B,UAAA,EAAA,MAAA;IAAzB,GAAA,EAAA,MAAA;IAAR,MAAA,EAAA,MAAA;IACE,IAAA,EAAA,MAAA;EAAO,CAAA,CAAA;AAInB;AACoB,UD0HHG,0BAAAA,CC1HG;EAAR,QAAA,CAAA,EAAA,MAAA,EAAA;EAEE,SAAA,CAAA,EAAA,OAAA;EAC0B,WAAA,CAAA,ED0HtBlD,wBC1HsB;;AAAnC,UD4HY0B,gBAAAA,CC5HZ;EAGS,aAAA,CAAA,GAAA,EAAA,MAAA,EAAA,WAAA,EAAA,MAAA,EAAA,OAAA,CAAA,ED0HgDwB,0BC1HhD,CAAA,ED0H6EZ,OC1H7E,CD0HqF1C,oBC1HrF,CAAA;EAC0B,cAAA,CAAA,GAAA,EAAA,MAAA,EAAA,WAAA,EAAA,MAAA,CAAA,ED0Hc0C,OC1Hd,CD0HsBzC,qBC1HtB,CAAA;EAA3B,aAAA,CAAA,OAAA,ED2HcgD,0BC3Hd,CAAA,ED2H2CP,OC3H3C,CAAA,IAAA,CAAA;EAAR,WAAA,CAAA,OAAA,ED4HoBW,wBC5HpB,CAAA,ED4H+CX,OC5H/C,CD4HuDvC,mBC5HvD,CAAA;EACmB,cAAA,CAAA,OAAA,ED4HIiD,2BC5HJ,CAAA,ED4HkCV,OC5HlC,CAAA;IAAO,YAAA,EAAA,MAAA;EAGd,CAAA,CAAA;2BD4HYQ,+BAA+BR;oDACNA;uCACbA;AErHzC;AAEkB,UFsHDa,oBAAAA,CEtHC;EACC,MAAA,EAAA,EFsHLb,OEtHK,CFsHGE,cEtHH,CFsHkBD,UEtHlB,CAAA,CAAA;EACD,MAAA,EAAA,EFsHJD,OEtHI,CAAA,IAAA,CAAA;EACE,CAAA,MAAA,CAAA,OAAA,GAAA,EAAA,IAAA;;AAEG,UFsHNX,eAAAA,CEtHM;EACL,KAAA,CAAA,OAAA,EFsHCZ,YEtHD,CAAA,EFsHgBuB,OEtHhB,CFsHwBa,oBEtHxB,CAAA;EAAe,YAAA,CAAA,OAAA,EFuHPlD,mBEvHO,CAAA,EFuHeqC,OEvHf,CFuHuBpC,kBEvHvB,CAAA;AAC/B;AAKF;AAEsB;;;;AAMlB,KFgHQkD,UAAAA,GAAaC,eEhHrB,GFgHuCC,eEhHvC;AAAC,UFiHYD,eAAAA,CEjHZ;EAEO,EAAA,EAAA,MAAA;EACG,IAAA,EAAA,MAAA;EACQ;EAAX,GAAA,EAAA,MAAA;EAAR;EAAO,QAAA,EAAA,MAAA;EAEN,SAAA,EAAA,MAAA;EAA2C;EACf,IAAA,CAAA,EAAA,KAAA;;AAC3B,UFoHWC,eAAAA,CEpHX;EACA;EAAsB,EAAA,EAAA,MAAA;EAIhB,IAAA,EAAA,MAAA;EAAqC;EAEzC,GAAA,EAAA,MAAA;EAAqC;EAA9B,QAAA,EAAA,MAAA;EAC6B,SAAA,EAAA,MAAA;EAA/B;EAAR,IAAA,EAAA,MAAA;;AAEL;AAEA;AAMA;AAIA;;AACY,UF8GKC,aAAAA,CE9GL;EAEC;;;;EAEN,IAAA,CAAA,EAAA,MAAA;;AAGA,UF+GUE,iBAAAA,CE/GV;EACkC,QAAA,EAAA,MAAA;EAAR,KAAA,EAAA,MAAA;;AAGrB,KF+GAC,YAAAA,GAAeD,iBE/Gf;AACL,UF+GUE,2BAAAA,SAAoCF,iBE/G9C,CAAA;EAAO,IAAA,EAAA,OAAA;EAGG,IAAA,EAAA,MAAA;EACD,cAAA,CAAA,EAAA,MAAA;EAA0B,WAAA,CAAA,EAAA,MAAA;;AAAc,UFiHvCG,2BAAAA,SAAoCH,iBEjHG,CAAA;EACf,IAAA,EAAA,OAAA;EAAR,IAAA,EAAA,MAAA;EACN,gBAAA,EAAA,MAAA;EAAR,cAAA,CAAA,EAAA,MAAA;EAAO,WAAA,CAAA,EAAA,MAAA;AAU1B;AA4EsB,KFgCVI,sBAAAA,GAAyBF,2BEhCE,GFgC4BC,2BEhC5B;AAKN,UF4BhBE,sBAAAA,SAA+BL,iBE5Bf,CAAA;EAAmB,IAAA,EAAA,OAAA;EAMf,IAAA,EAAA,MAAA;EAE3B,GAAA,EAAA,MAAA;EAAqC,QAAA,EAAA,MAAA;EAA9B,SAAA,EAAA,MAAA;;AACmB,UF0BnBM,sBAAAA,SAA+BN,iBE1BZ,CAAA;EAAvB,IAAA,EAAA,OAAA;EAAR,IAAA,EAAA,MAAA;EAmBQ,SAAA,EAAA,MAAA;;AAEA,KFUDO,iBAAAA,GAAoBF,sBEVnB,GFU4CC,sBEV5C;AAAR,UFWYE,qBAAAA,CEXZ;EAKsB,GAAA,EFOlBD,iBEPkB;EAKX,OAAA,EAAA,OAAA;;AAgBA,KFXJE,oBAAAA,GAAuBR,YEWnB;AAAc,UFVbS,mBAAAA,CEUa;EAAR,OAAA,EAAA,OAAA;;AA7DkC,UF2DvCvC,iBAAAA,CE3DuC;;2BF6D3BiC,yBAAyBvB,QAAQ2B;;yBAEnCC,uBAAuB5B,QAAQ6B;;;;;;;;;;;;;;;;;UAiBzCE,gBAAAA;;WAEJ9B;;;;;;;;;;;;;;;;;;;;;UAqCIgC,eAAAA;;;;;;;;;;;;;;;;;;UAkBAC,uBAAAA;;;YAGHjC;;;;;;;;;;;;;;UAsBGR,oBAAAA;;;;;;eAMAyC,0BAA0BlC;;+BAEVA,QAAQiC;;6BAEVjC;;;;AD1Od7C,UE1HA,0BF0HqB,CAAA,CAAA,CAAA,CAAA;UEzH5B,QAAQ,yBAAyB;YAC/B;;ADmBZ;AACiBwC,UChBA,oBAAA,CDgBqB;EAGrBC,MAAAA,EAAAA,EClBL,ODkBKA,CClBG,aDmBG9B,CAAAA;EAENgC,QAAAA,CAAAA,OAAgB,CAAhBA,ECnBH,qBDmBmB,CAAA,EClB5B,ODkB4B,CClBpB,0BDkBoB,CClBO,eDkBP,CAAA,CAAA;EAUhBC,aAAAA,CAAAA,IAAY,EAAA,MAAA,EAAA,OAAA,CAAA,ECzBf,mBDyBe,CAAA,ECxBxB,ODwBwB,CCxBhB,0BDwBgB,CCxBW,cDwBX,CAAA,CAAA;EAGZd,IAAAA,CAAAA,MAAAA,EAAAA,MAAe,CAAA,EC1BR,OD0BQ,CAAA,IAAA,CAAA;;AACoCV,UCxBnD,oBAAA,CDwBmDA;EAARyB,EAAAA,EAAAA,MAAAA;EACvBJ,GAAAA,EAAAA,MAAAA;EAA0BtB,UAAAA,ECtBjD,oBDsBiDA;;;;AAAR0B,KEhB3C,uBAAA,GFgB2CA;EACZN,SAAAA,KAAAA,EEhBzB,eFgByBA;EAA+CO,SAAAA,KAAAA,EEfxE,eFewEA;EAAfC,SAAAA,MAAAA,EEdxD,gBFcwDA;EAARF,SAAAA,KAAAA,EEbjD,eFaiDA;EACZF,SAAAA,OAAAA,EEbnC,iBFamCA;EAA2BpB,SAAAA,SAAAA,EEZ5D,mBFY4DA;EAARsB,SAAAA,UAAAA,EEXnD,oBFWmDA;EACjBC,SAAAA,KAAAA,EEXvC,eFWuCA;CAAfC;KERrC,sBAAA,GACH,uBFO8EpB,CAAAA,MEPhD,uBFOgDA,CAAAA;AAAwBkB,KEL5F,wBAAA,GFK4FA,CAAAA,OAAAA,EEJ7F,uBFI6FA,EAAAA,GEHnG,OFGmGA,CAAAA,OAAAA,CAAAA;KEDnG,sBFOkClB,CAAAA,CAAAA,CAAAA,GEPN,CFOMA,SENnC,uBFMmCA,GELnC,sBFKmCA,GAAAA,KAAAA,GEHnC,CFGmCA;AAAgCjB,KED3D,8BFC2DA,CAAAA,aEAxD,wBFAwDA,CAAAA,GECnE,OFDmEA,CEC3D,UFD2DA,CEChD,IFDgDA,CAAAA,CAAAA;KEGlE,6BFH0DmC,CAAAA,aEGf,wBFHeA,CAAAA,GEI7D,8BFJ6DA,CEI9B,IFJ8BA,CAAAA,SEKzD,uBFLyDA,GEMzD,sBFNyDA,GAAAA,KAAAA,GAAAA,OAAAA;AACJlB,KES/C,oBAAA,GFT+CA,CAAAA,aESV,wBFTUA,CAAAA,CAAAA,SAAAA,EAAAA,MAAAA,EAAAA,IAAAA,EEWnD,IFXmDA,GEW5C,6BFX4CA,CEWd,IFXcA,CAAAA,EAAAA,GEYtD,OFZsDA,CEY9C,8BFZ8CA,CEYf,IFZeA,CAAAA,CAAAA;AAAgCN,cEc9E,kBFd8EA,EAAAA,OAAAA,MAAAA;AAARwB,UEgBlE,kBAAA,CFhBkEA;EACflB,KAAAA,EAAAA,MAAAA;EAAgCX,QAAAA,CAAAA,EAAAA,MAAAA;EAAR6B,IAAAA,CAAAA,EAAAA,OAAAA,GAAAA,QAAAA;;AACnC9B,UEoBxC,yBAAA,CFpBwCA;EAAR8B,KAAAA,EEqBxC,MFrBwCA,CAAAA,MAAAA,EEqBzB,kBFrByBA,CAAAA;;AACgB/B,KEuBrD,WAAA,GFvBqDA;EAAR+B,UEwB7C,kBAAA,CFxB6CA,EEwBxB,oBFxBwBA;EACtBlB,SAAAA,IAAAA,CAAAA,EAAAA,CAAAA,OAAAA,EEyBtB,cFzBsBA,EAAAA,OAAAA,CAAAA,EE0BrB,WF1BqBA,EAAAA,GE2B5B,OF3B4BA,CE2BpB,cF3BoBA,GE2BH,oBF3BGA,CAAAA;EAAgCf,SAAAA,UAAAA,CAAAA,EAAAA,CAAAA,SAAAA,EAAAA,MAAAA,EAAAA,GE8B5D,OF9B4DA,CE8BpD,cF9BoDA,GE8BnC,oBF9BmCA,GAAAA,IAAAA,CAAAA;EAARiC,SAAAA,aAAAA,CAAAA,EAAAA,GAAAA,GE+B1B,OF/B0BA,CE+BlB,aF/BkBA,EAAAA,CAAAA;EAAO,SAAA,OAAA,CAAA,EEgC7C,MFhC6C,CAAA,MAAA,EAAA,MAAA,CAAA;EAEjDd,0BAAe,CAAA,EAAA,CAAA,MAAA,EEgCpB,yBFhCoB,EAAA,GEiCzB,OFjCyB,CAAA,IAAA,CAAA;CACMd;AAA8BC,UEmCnD,uBAAA,CFnCmDA;EAAR2B,IAAAA,CAAAA,OAAAA,EEoC5C,cFpC4CA,EAAAA,OAAAA,CAAAA,EEoClB,WFpCkBA,CAAAA,EEoCJ,OFpCIA,CEoCI,cFpCJA,CAAAA;EAAO,UAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EEqClC,OFrCkC,CEqC1B,cFrC0B,GAAA,IAAA,CAAA;EAElDG,aAAAA,EAAAA,EEoCE,OFpCa,CEoCL,aFpCK,EAAA,CAAA;AAKhC;;AAEkCA,iBEuClB,6BAAA,CFvCkBA,OAAAA,EEwCvB,WFxCuBA,CAAAA,EEyC/B,uBFzC+BA;;;;;AA+BlC;AAKA;AAUA;AAKA;AASA;AAKA;;;;;;;;;;;;;;;;;;AAaA;;;;;;AAKA;;;;;AAEwDvC,uBE8BlC,gBAAA,SAAyB,SAAA,CF9BSA;EAARoC,CAAAA,OAAAA;EAAO,UAAA,WAAA,CAAA,OAAA,EEmCtB,WFnCsB,EAAA,GAAA,CAAA,EEmCH,gBFnCG;EAO3Cc,UAAAA,WAAU,CAAA,aEkCe,wBFlCqB,CAAA,CAAA,SAAA,EAAA,MAAA,EAAA,IAAA,EEoChD,IFpCgD,GEoCzC,6BFpCyC,CEoCX,IFpCW,CAAA,CAAA,EEqCrD,OFrCqD,CEqC7C,sBFrC6C,CEqCtB,8BFrCsB,CEqCS,IFrCT,CAAA,CAAA,CAAA;EACzCC;EAWAC,UAAAA,IAAAA,CAAAA,OAAe,EE4CnB,cF5CmB,EAAA,OAAA,CAAA,EE6ClB,WF7CkB,CAAA,EE8C3B,OF9C2B,CE8CnB,cF9CmB,CAAA;EAiBfC;EAQAE,cAAAA,OAAiB,CAAA,CAAA,EE0BP,MF1BO,CAAA,MAAA,EAAA,MAAA,CAAA;EAItBC,cAAAA,mBAAeD,CAAAA,CAAAA,EAAAA,CAAAA,CAAAA,MAAAA,EE2BX,yBF3B4B,EAAA,GE2BE,OF3BF,CAAA,IAAA,CAAA,CAAA,GAAA,SAAA;EAC3BE;AAMjB;AAOA;AACA;AAOA;AAKA;EACiBM,UAAAA,WAAAA,CAAAA,UAAqB,MAC7BD,EAAAA,MAAAA,CAAAA,CAAAA,SAAiB,EAAA,MAAA,EAAA,IAAA,EAAA,CAAA,GAAA,EEcV,CFdU,EAAA,GEcJ,OFdI,CEcI,MFdJ,CAAA,CAAA,EEerB,OFfqB,CEeb,MFfa,CAAA;EAGdE;EACKC,UAAAA,aAAmB,CAAA,CAAA,EEoCD,OFpCC,CEoCO,eFpCP,CAAA;EAQnBvC;;;;EAIUsC,UAAAA,WAAAA,CAAAA,CAAAA,EEmCM,OFnCNA,CAAAA,IAAAA,CAAAA"}

package/dist/index.d.ts

@@ -1,8 +1,8 @@
 import { H as RPCTransportErrorKind, V as RPCTransportContext, Z as ErrorCode } from "./contexts-DNFVmC9N.js";
 import { c as WaitForLogResult, i as ProcessLogEvent, n as ProcessFailure, o as ProcessStatus, r as ProcessLogCursor, s as SandboxCommand, t as ProcessExit } from "./process-types-GStiZ8f8.js";
-import { A as CreateTerminalOptions, C as BucketCredentials, D as MountBucketOptions, E as LocalMountBucketOptions, F as TerminalOutputOptions, G as ProcessTextOutputOptions, H as ProcessLogsOptions, I as TerminalOutputSubscriptionAPI, J as WaitForExitOptions, K as SandboxOptions, L as TerminalSnapshot, M as Terminal, N as TerminalOutputCursor, O as RemoteMountBucketOptions, P as TerminalOutputEvent, R as ExecOptions, S as BackupOptions, T as DirectoryBackup, U as ProcessOutput, W as ProcessOutputOptions, X as WaitForPortOptions, Y as WaitForLogOptions, _ as RenameFileResult, a as FileChunk, b as WriteFileResult, c as FileMetadata, d as ListFilesOptions, f as ListFilesResult, g as ReadFileStreamResult, h as ReadFileResult, i as DeleteFileResult, k as RestoreBackupResult, l as FileStreamEvent, m as MoveFileResult, o as FileEncoding, p as MkdirResult, q as SandboxProcess, r as CheckChangesResult, s as FileExistsResult, t as CheckChangesOptions, u as FileWatchSSEEvent, v as WatchOptions, w as BucketProvider } from "./filesystem-Y5aF3nmJ.js";
-import { t as ISandbox } from "./sandbox-CBkS3tGv.js";
-import { _ as QuickTunnelInfo, d as sandboxRuntimeCall, f as ProcessPullSubscriptionRPC, g as NamedTunnelInfo, n as ExtensionRuntimeCall, p as ProcessRPCDescriptor, s as HTTPAuthInterceptorParams, v as TunnelInfo, y as TunnelOptions } from "./index-DfXx3uZL.js";
+import { A as CreateTerminalOptions, C as BucketCredentials, D as MountBucketOptions, E as LocalMountBucketOptions, F as TerminalOutputOptions, G as ProcessTextOutputOptions, H as ProcessLogsOptions, I as TerminalOutputSubscriptionAPI, J as WaitForExitOptions, K as SandboxOptions, L as TerminalSnapshot, M as Terminal, N as TerminalOutputCursor, O as RemoteMountBucketOptions, P as TerminalOutputEvent, R as ExecOptions, S as BackupOptions, T as DirectoryBackup, U as ProcessOutput, W as ProcessOutputOptions, X as WaitForPortOptions, Y as WaitForLogOptions, _ as RenameFileResult, a as FileChunk, b as WriteFileResult, c as FileMetadata, d as ListFilesOptions, f as ListFilesResult, g as ReadFileStreamResult, h as ReadFileResult, i as DeleteFileResult, k as RestoreBackupResult, l as FileStreamEvent, m as MoveFileResult, o as FileEncoding, p as MkdirResult, q as SandboxProcess, r as CheckChangesResult, s as FileExistsResult, t as CheckChangesOptions, u as FileWatchSSEEvent, v as WatchOptions, w as BucketProvider } from "./filesystem-Cd6xd_Pe.js";
+import { t as ISandbox } from "./sandbox-D1BoB5f7.js";
+import { _ as QuickTunnelInfo, d as sandboxRuntimeCall, f as ProcessPullSubscriptionRPC, g as NamedTunnelInfo, n as ExtensionRuntimeCall, p as ProcessRPCDescriptor, s as HTTPAuthInterceptorParams, v as TunnelInfo, y as TunnelOptions } from "./index-Fbdwkfft.js";
 import { $ as TerminalNotFoundError, G as ContainerUnavailableError, H as BackupExpiredError, J as InvalidTerminalCwdError, K as InvalidBackupConfigError, Q as TerminalControlError, U as BackupNotFoundError, V as BackupCreateError, W as BackupRestoreError, X as RPCTransportError, Y as OperationInterruptedError, Z as StaleTerminalHandleError, a as InvalidProcessCursorError, c as ProcessAbortedError, d as ProcessExitedBeforeReadyError, f as ProcessNotFoundError, g as StaleProcessHandleError, h as ProcessWaitTimeoutError, l as ProcessError, m as ProcessSpawnFailedError, n as RuntimeControlProtocolError, o as InvalidProcessCwdError, p as ProcessReadyTimeoutError, q as InvalidTerminalCursorError, s as InvalidProcessEnvironmentError, t as RuntimeIdentityInactiveError, u as ProcessExitedBeforeLogError } from "./index-CfpTXmNv.js";
 import { Container, ContainerProxy as ContainerProxy$1, ContainerStartConfigOptions } from "@cloudflare/containers";
 import { RpcTarget, RpcTransport } from "capnweb";
@@ -191,6 +191,7 @@ declare class Sandbox<Env = unknown> extends Container<Env> {
   private logger;
   private keepAliveEnabled;
   private bucketMounts;
+  private restoredMountRoutes;
   private currentLifetime;
   private backupService;
   private previewService;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/file-stream.ts","../src/platform-errors.ts","../src/pty/rpc-types.ts","../src/pty/proxy.ts","../src/backup/restore-fault-injection.ts","../src/storage-mount/errors.ts","../src/storage-mount/outbound/container-proxy.ts","../src/tunnels/tunnel-service.ts","../src/sandbox.ts","../src/request-handler.ts","../src/sse-parser.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAmFA;;;;;;;AA+DA;;;;AAEY,iBAjEW,UAAA,CAiEX,MAAA,EAhEF,cAgEE,CAhEa,UAgEb,CAAA,CAAA,EA/DT,cA+DS,CA/DM,SA+DN,EA/DiB,YA+DjB,CAAA;;;;;;AC1GZ;AA2BA;;;;AC9DA;;;;AAGc,iBFwIQ,WAAA,CExIR,MAAA,EFwI4B,cExI5B,CFwI2C,UExI3C,CAAA,CAAA,EFwIyD,OExIzD,CAAA;EAC0B,OAAA,EAAA,MAAA,GFwIpB,UExIoB;EAA3B,QAAA,EFyID,YEzIC;CAAR,CAAA;;;;;;;;;iBD+BW,8BAAA;;;;;ADwGM,iBC7EN,wBAAA,CD6EiB,KAAA,EAAA,OAAA,CAAA,EAAA,OAAA;;;UE3IhB,qBAAA;iBACA,QAAQ;uBAEX,KAAK,mCACd,QAAQ,2BAA2B;cAC1B,aAAa;sCACW;eACvB;eACA;yBACU;AFmEzB;AACyB,UEjER,qBAAA,CFiEQ;EAAf,QAAA,EEhEE,gBFgEF;EACQ,oBAAA,EAAA,MAAA;EAAW,UAAA,EE/Df,qBF+De;;;;UG/DnB,kBAAA;mBACS,QAAQ;+BAGb,KAAK,mCACd,QACC,gCACA,2BAA2B;0BAEP,aAAa;kDACW;yBACzB;yBACA;EHiDF,KAAA,CAAA,OAAU,EGhDhB,OHgDgB,CAAA,EGhDN,OHgDM,CGhDE,QHgDF,CAAA;;AAiErB,iBGwHU,aAAA,CHxHV,IAAA,EGyHJ,IHzHI,CGyHC,kBHzHD,EAAA,OAAA,CAAA,EAAA,UAAA,EAAA,MAAA,EAAA,OAAA,EG2HD,OH3HC,EAAA,OAAA,EAAA;EAF2D,MAAA,CAAA,EG+H1D,oBH/H0D;EAAO,IAAA,CAAA,EAAA,MAAA;;;IGoI3E,QAAQ;;;KCpRC,uBAAA;KAEA,sBAAA;SACH;;;;;;;;AJ8ET;AACyB,cKvEZ,gBAAA,SAAyB,KAAA,CLuEb;EAAf,SAAA,IAAA,EKtEc,SLsEd;EACQ,WAAA,CAAA,OAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EKrEmB,SLqEnB;;;;AA6DlB;AAAyD,cKxH5C,cAAA,SAAuB,gBAAA,CLwHqB;EAAf,WAAA,CAAA,OAAA,EAAA,MAAA;;;;;cK9G7B,kBAAA,SAA2B,gBAAA;;;AJMxC;AA2BA;;cIvBa,uBAAA,SAAgC,gBAAA;;AHvC7C;;;;AAGc,cG8CD,uBAAA,SAAgC,gBAAA,CH9C/B;EAC0B,WAAA,CAAA,OAAA,EAAA,MAAA;;;;AFuIlB,cMnGT,cAAA,SAAuB,gBAAA,CNmGH;EAAwB,KAAA,CAAA,OAAA,EMlGlC,ONkGkC,CAAA,EMlGxB,ONkGwB,CMlGhB,QNkGgB,CAAA;;;;UOxBxC,cAAA;8BACa,gBAAgB,QAAQ;UAC5C,QAAQ;EJtGR,OAAA,CAAA,UAAA,EAAA,MAAkB,GIuGG,UJvGH,CAAA,EIuGgB,OJvGhB,CAAA,IAAA,CAAA;;;;KK0bvB,oBAAA,GR5XoB;EAAf,WAAA,CAAA,EAAA;IACQ,IAAA,EAAA,MAAA;IAAW,WAAA,CAAA,EAAA,OAAA;EAA1B,CAAA;EAAc,UAAA,CAAA,EAAA,MAAA,GAAA,MAAA;EA6DK,SAAA,CAAA,EAAA,OAAW;EAAwB,iBAAA,CAAA,EQqUnC,WRrUmC,CQqUvB,cRrUuB,CAAA,mBAAA,CAAA,CAAA;CAAf;KQyXrC,wBAAA,GRxXe,sBAAA;AACR,KQyXA,aRzXA,CAAA,CAAA,CAAA,GQyXmB,IRzXnB,CQ0XV,CR1XU,EAAA,MQ2XJ,QR3XI,GQ2XO,wBR3XP,CAAA,GQ6XV,QR7XU;KQwZP,mBAAA,GR1ZkE;EAAO,KAAA,CAAA,EQ2ZpE,WR3ZoE;;;;ACxG9E,CAAA;AA2BA,KO8eK,2BAAA,GP9emC;iBO+evB;;wBAEO;AN/iBxB,CAAA;AACyB,iBMmxBT,UNnxBS,CAAA,UMmxBY,ONnxBZ,CAAA,GAAA,CAAA,CAAA,CAAA,EAAA,EMoxBnB,sBNpxBmB,CMoxBI,CNpxBJ,CAAA,EAAA,EAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EMsxBb,cNtxBa,CAAA,EMuxBtB,aNvxBsB,CMuxBR,CNvxBQ,CAAA;AAGZ,cMgiCA,ONhiCA,CAAA,MAAA,OAAA,CAAA,SMgiC+B,SNhiC/B,CMgiCyC,GNhiCzC,CAAA,CAAA;EAAR,CAAA,OAAA;EACS,WAAA,EAAA,MAAA;EAAa,UAAA,EAAA,MAAA,GAAA,MAAA;EACW,QAAA,eAAA;EACvB,QAAA,gBAAA;EACA,QAAA,aAAA;EACU,QAAA,WAAA;EAAO,QAAA,mBAAA;EAGf,QAAA,cAAA;;;;ECGP,OAAA,EK2iCC,ML3iCD,CAAA,MAAkB,EAAA,MAAA,CAAA;EACD,iBAAA,iBAAA;EAAR,QAAA,MAAA;EAGA,QAAA,gBAAA;EAAL,QAAA,YAAA;EAER,QAAA,eAAA;EAC2B,QAAA,aAAA;EAA3B,QAAA,cAAA;EAFD,QAAA,oBAAA;EAIqB,QAAA,aAAA;EAAa,QAAA,iBAAA;EACW,QAAA,yBAAA;EACzB;;;;EAEE,iBAAA,0BAAA;EAAO;AAyOlC;;;EAGW,QAAA,iBAAA;EAEE;;;;;;;AC/Qb;EAEY,QAAA,0BAAsB;;;;ACSlC;;;;;AAaA;EAUa,WAAA,CAAA,MAAA,EAAA,MAAmB,EAAA,IAAA,EAAQ,OAAA,EAAA,CAAA,EG6lCc,OH7lCE,CAAA,OAAA,CAAA;EAU3C,aAAA,CAAA,aAAwB,EAAA,MAAA,EAAA,MAAQ,EAAA,MAAA,EAAA,IAAgB,EAAA,OAAA,EAAA,CAAA,EGmmCxD,OHnmCwD,CAAA,OAAA,CAAA;EAUhD,QAAA,+BAAgC;;mBGunC1B,6BAA6B;uDAyMa;EFz0ChD,SAAA,CAAA,aAAe,EEs1CK,oBFt1CL,CAAA,EEs1C4B,OFt1C5B,CAAA,IAAA,CAAA;EACL,aAAA,CAAA,UAAA,EAAA,MAAA,GAAA,MAAA,CAAA,EE82C6B,OF92C7B,CAAA,IAAA,CAAA;EAAkB,YAAA,CAAA,SAAA,EAAA,OAAA,CAAA,EEw3CC,OFx3CD,CAAA,IAAA,CAAA;EAAR,UAAA,CAAA,OAAA,EEk4CL,MFl4CK,CAAA,MAAA,EAAA,MAAA,GAAA,SAAA,CAAA,CAAA,EEk4CgC,OFl4ChC,CAAA,IAAA,CAAA;EADG,oBAAA,CAAA,QAAA,EE64CtB,WF74CsB,CE64CV,cF74CU,CAAA,mBAAA,CAAA,CAAA,CAAA,EE84C/B,OF94C+B,CAAA,IAAA,CAAA;EAAkB,QAAA,eAAA;;;;AC2EtD;EAC8B,WAAA,CAAA,MAAA,EAAA,MAAA,EAAA,SAAA,EAAA,MAAA,EAAA,OAAA,ECs8CjB,kBDt8CiB,CAAA,ECu8CzB,ODv8CyB,CAAA,IAAA,CAAA;EAAwB;;;EAC5C,aAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EC68CgC,OD78ChC,CAAA,IAAA,CAAA;EACqB;;;;;;ACDL;AA2VO;AAsDjC;;;;;;EAIU,QAAA,eAAA;EA2BL;AACgB;AA8OrB;;;;;;EAIG,OAAA,CAAA,CAAA,EAs0ByB,OAt0BzB,CAAA,IAAA,CAAA;EAAa,QAAA,SAAA;EA4QH,QAAA,kBAAO;EAAkC,QAAA,+BAAA;EAsB3C,QAAA,2BAAA;EAgE2C,QAAA,2BAAA;EAgBjD,QAAA,iCAAA;EA8Bc,QAAA,0BAAA;EAA6B,OAAA,CAAA,CAAA,EAsoBxB,OAtoBwB,CAAA,IAAA,CAAA;EAyMa,KAAA,CAAA,OAAA,CAAA,EAsc/C,UAtc+C,CAscpC,SAtcoC,CAsc1B,GAtc0B,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,EAucxD,OAvcwD,CAAA,IAAA,CAAA;EAa5B,oBAAA,CAAA,IAAA,EAicvB,2BAjcuB,CAAA,EAkc5B,OAlc4B,CAAA,IAAA,CAAA;EAAuB,oBAAA,CAAA,WAAA,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA,GAoclB,2BApckB,EAAA,mBAAA,CAAA,EAqc9B,mBArc8B,EAAA,YAAA,CAAA,EAscrC,2BAtcqC,CAAA,EAucnD,OAvcmD,CAAA,IAAA,CAAA;EAyBJ,IAAA,CAAA,MAAA,CAAA,EAkdvC,UAlduC,CAkd5B,SAld4B,CAkdlB,GAldkB,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,EAmd/C,OAnd+C,CAAA,IAAA,CAAA;EAUV,MAAA,CAAA,CAAA,EA+cnB,OA/cmB,CAAA,IAAA,CAAA;EAUd,OAAA,CAAA,KAAA,EAAA,OAAA,CAAA,EAAA,IAAA;EAAqC;;;EAW5D,cAAA,CAAA,YAAA,EA+da,OA/db,GAAA,MAAA,GA+dgC,GA/dhC,EAAA,UAAA,CAAA,EAAA,MAAA,GAgeqB,WAherB,EAAA,SAAA,CAAA,EAAA,MAAA,CAAA,EAkeA,OAleA,CAkeQ,QAleR,CAAA;EAoIQ,QAAA,6BAAA;EACR;;;;EA4P8B,QAAA,iBAAA;EAAV;;;;;;;;;;;;;;EA8FP,QAAA,uBAAA;EAAmB;;;;;;;;;;;;EAqdxB,QAAA,uBAAA;EACA;;;EASoB,QAAA,uBAAA;EAeA,iBAAA,CAAA,CAAA,EAjMK,OAiML,CAAA,IAAA,CAAA;EAAR,QAAA,6BAAA;EA6NZ,KAAA,CAAA,OAAA,EA1XmB,OA0XnB,CAAA,EA1X6B,OA0X7B,CA1XqC,QA0XrC,CAAA;EACA,SAAA,CAAA,OAAA,EAtUc,OAsUd,EAAA,IAAA,EAAA,MAAA,CAAA,EAtUsC,OAsUtC,CAtU8C,QAsU9C,CAAA;EACA,oBAAA,CAAA,IAAA,EAAA,MAAA,EAAA,IAAA,EAAA,MAAA,CAAA,EAnU6C,OAmU7C,CAAA,MAAA,CAAA;EAAR,QAAA,gBAAA;EA4HsB,cAAA,CAAA,OAAA,EApXd,qBAoXc,CAAA,EAnXtB,OAmXsB,CAnXd,qBAmXc,CAAA;EAIa,WAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EA9WP,OA8WO,CA9WC,qBA8WD,GAAA,IAAA,CAAA;EAAR,aAAA,CAAA,CAAA,EA/VP,OA+VO,CA/VC,qBA+VD,EAAA,CAAA;EAcC,QAAA,kBAAA;EAAR,QAAA,YAAA;EAAO,QAAA,aAAA;EASiC,IAAA,CAAA,OAAA,EAzJpD,cAyJoD,EAAA,OAAA,CAAA,EAxJpD,WAwJoD,CAAA,EAvJ5D,OAuJ4D,CAvJpD,oBAuJoD,CAAA;EAQ5B,QAAA,iBAAA;EAAf,QAAA,0BAAA;EAAc;EACG,eAAA,CAAA,CAAA,EApCZ,OAoCY,CAAA,OAAA,CAAA;EAAA,UAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EAhCP,OAgCO,CAhCC,oBAgCD,GAAA,IAAA,CAAA;EAoBR,aAAA,CAAA,CAAA,EAtCN,OAsCM,CAtCE,aAsCF,EAAA,CAAA;EAAA,KAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAMoB,CANpB,EAAA;IAMoB,SAAA,CAAA,EAAA,OAAA;EAAA,CAAA,CAAA,EAnCc,OAmCd,CA5CnB,WAAA,CA4CmB;EAMS,SAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,GAjCtC,cAiCsC,CAjCvB,UAiCuB,CAAA,EAAA,OAmBvD,CAnBuD,EAAA;IAmB/C,QAAA,CAAA,EAAA,MAAA;EAAR,CAAA,CAAA,EAnDkC,OAmDlC,CAAA;IAG8B,OAAA,EAAA,OAAA;IAAR,IAAA,EAAA,MAAA;IACd,YAAA,EAAA,MAAA;IAAR,SAAA,EAAA,MAAA;EA4BA,CAAA,GApF+B,eAoF/B,CAAA;EAeC,UAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EA9EyB,OA8EzB,CAlGiC,gBAAA,CAkGjC;EAMgD,UAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,CAAA,EA9EH,OA8EG,CApFvB,gBAAA,CAoFuB;EAMJ,QAAA,CAAA,UAAA,EAAA,MAAA,EAAA,eAAA,EAAA,MAAA,CAAA,EA9EU,OA8EV,CApFC,cAAA,CAoFD;EASW;;;;;;;;;;EAkChD,QAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,EAAA;IAAR,QAAA,EAAA,MAAA;EA6BQ,CAAA,CAAA,EAnIR,OAmIQ,CAnIA,oBAmIA,CAAA;EACA,QAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OA4DH,CA5DG,EAAA;IAAR,QAAA,CAAA,EAjIsB,OAiItB,CAjI8B,YAiI9B,EAAA,MAAA,CAAA;EA4DK,CAAA,CAAA,EA5LL,OA4LK,CA5LG,cA4LH,CAAA;EAHP;;;;;EA8CqD,sBAAA,CAAA,OA6EF,CA7EE,EAAA;IAuBvC,IAAA,EAAA,MAAA;IAsDa,QAAA,CAAA,EAAA,SAAA,MAAA,EAAA;EAAwB,CAAA,CAAA,EAxRjD,OAwRiD,CAAA,MAAA,CAAA;EAAR,uBAAA,CAAA,OAAA,EAAA;IAYhB,IAAA,EAAA,MAAA;IAA0B,WAAA,EAAA,MAAA;EAAR,CAAA,CAAA,EArR1C,OAqR0C,CAAA,IAAA,CAAA;EAKrC,uBAAA,CAAA,WAAA,EAAA,MAAA,CAAA,EApR2C,OAoR3C,CAAA,IAAA,CAAA;EACN,qBAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EA/Q6C,OA+Q7C,CAAA,IAAA,CAAA;EAKO,cAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EA3Q0B,OA2Q1B,CA3QkC,cA2QlC,CA3QiD,UA2QjD,CAAA,CAAA;EACP,SAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EAtQqC,gBAsQrC,CAAA,EAtQqD,OAsQrD,CAtQqD,eAAA,CAsQrD;EAjmEuC,MAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EAi2DjB,OAj2DiB,CA21Dc,gBAAA,CA31Dd;EAAS;;;;ACtiCrD;;;;;;AAcA;;;EAEY,KAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,ED44FC,YC54FD,CAAA,ED64FP,OC74FO,CD64FC,cC74FD,CD64FgB,UC74FhB,CAAA,CAAA;EACD;;;;;;;;ACVX;;EACU,YAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EFk7FG,mBEl7FH,CAAA,EFm7FL,OEn7FK,CFm7FG,kBEn7FH,CAAA;EACC;;;;AAyFX;;;;;;AAuBA;;;;;;;;;;;;;;;;;;;;GF23FG,kBAAA,GAGO;;;;;MAIsD;;;;;;;;;;;;8BAY5B;;;;;qCAQI;;;;;;;;;;+BASH;;;;;;;kDAUmB;;;;;;;;;;;;;;;;;;;;iBAuBvC;;;;;;;;;;;;;;;wBAsDa,gBAAgB,QAAQ;;;;;;;;;wBAYxB,kBAAkB,QAAQ;2CAK7C,gCACN;qCAKO,4BACP;;;;;UCvoGY,qBAAqB,eAAe;WAC1C,uBAAuB;;iBAaZ,yBACV,wBACA,WAAW,aACZ,cAAc,IAAI,QAAQ;;;;;;;;;;;;iBCVd,0BACb,eAAe,sBACd,cACR,cAAc;AVoEjB;;;;;AAEG,iBUkBoB,uBVlBpB,CAAA,CAAA,CAAA,CAAA,QAAA,EUmBS,QVnBT,EAAA,MAAA,CAAA,EUoBQ,WVpBR,CAAA,EUqBA,aVrBA,CUqBc,CVrBd,CAAA;;AA6DH;;;;;AAAuE,iBUpBvD,wBVoBuD,CAAA,CAAA,CAAA,CAAA,MAAA,EUnB7D,aVmB6D,CUnB/C,CVmB+C,CAAA,EAAA,QAAA,EAAA;EAAO,MAAA,CAAA,EUjBjE,WViBiE;sBUhBtD;IAErB,eAAe"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/file-stream.ts","../src/platform-errors.ts","../src/pty/rpc-types.ts","../src/pty/proxy.ts","../src/backup/restore-fault-injection.ts","../src/storage-mount/errors.ts","../src/storage-mount/outbound/container-proxy.ts","../src/tunnels/tunnel-service.ts","../src/sandbox.ts","../src/request-handler.ts","../src/sse-parser.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;AAmFA;;;;;;;AA+DA;;;;AAEY,iBAjEW,UAAA,CAiEX,MAAA,EAhEF,cAgEE,CAhEa,UAgEb,CAAA,CAAA,EA/DT,cA+DS,CA/DM,SA+DN,EA/DiB,YA+DjB,CAAA;;;;;;AC1GZ;AA2BA;;;;AC9DA;;;;AAGc,iBFwIQ,WAAA,CExIR,MAAA,EFwI4B,cExI5B,CFwI2C,UExI3C,CAAA,CAAA,EFwIyD,OExIzD,CAAA;EAC0B,OAAA,EAAA,MAAA,GFwIpB,UExIoB;EAA3B,QAAA,EFyID,YEzIC;CAAR,CAAA;;;;;;;;;iBD+BW,8BAAA;;;;;ADwGM,iBC7EN,wBAAA,CD6EiB,KAAA,EAAA,OAAA,CAAA,EAAA,OAAA;;;UE3IhB,qBAAA;iBACA,QAAQ;uBAEX,KAAK,mCACd,QAAQ,2BAA2B;cAC1B,aAAa;sCACW;eACvB;eACA;yBACU;AFmEzB;AACyB,UEjER,qBAAA,CFiEQ;EAAf,QAAA,EEhEE,gBFgEF;EACQ,oBAAA,EAAA,MAAA;EAAW,UAAA,EE/Df,qBF+De;;;;UG/DnB,kBAAA;mBACS,QAAQ;+BAGb,KAAK,mCACd,QACC,gCACA,2BAA2B;0BAEP,aAAa;kDACW;yBACzB;yBACA;EHiDF,KAAA,CAAA,OAAU,EGhDhB,OHgDgB,CAAA,EGhDN,OHgDM,CGhDE,QHgDF,CAAA;;AAiErB,iBG4HU,aAAA,CH5HV,IAAA,EG6HJ,IH7HI,CG6HC,kBH7HD,EAAA,OAAA,CAAA,EAAA,UAAA,EAAA,MAAA,EAAA,OAAA,EG+HD,OH/HC,EAAA,OAAA,EAAA;EAF2D,MAAA,CAAA,EGmI1D,oBHnI0D;EAAO,IAAA,CAAA,EAAA,MAAA;;;IGwI3E,QAAQ;;;KCxRC,uBAAA;KAEA,sBAAA;SACH;;;;;;;;AJ8ET;AACyB,cKvEZ,gBAAA,SAAyB,KAAA,CLuEb;EAAf,SAAA,IAAA,EKtEc,SLsEd;EACQ,WAAA,CAAA,OAAA,EAAA,MAAA,EAAA,IAAA,CAAA,EKrEmB,SLqEnB;;;;AA6DlB;AAAyD,cKxH5C,cAAA,SAAuB,gBAAA,CLwHqB;EAAf,WAAA,CAAA,OAAA,EAAA,MAAA;;;;;cK9G7B,kBAAA,SAA2B,gBAAA;;;AJMxC;AA2BA;;cIvBa,uBAAA,SAAgC,gBAAA;;AHvC7C;;;;AAGc,cG8CD,uBAAA,SAAgC,gBAAA,CH9C/B;EAC0B,WAAA,CAAA,OAAA,EAAA,MAAA;;;;AFuIlB,cMnGT,cAAA,SAAuB,gBAAA,CNmGH;EAAwB,KAAA,CAAA,OAAA,EMlGlC,ONkGkC,CAAA,EMlGxB,ONkGwB,CMlGhB,QNkGgB,CAAA;;;;UOxBxC,cAAA;8BACa,gBAAgB,QAAQ;UAC5C,QAAQ;EJtGR,OAAA,CAAA,UAAA,EAAA,MAAkB,GIuGG,UJvGH,CAAA,EIuGgB,OJvGhB,CAAA,IAAA,CAAA;;;;KK4bvB,oBAAA,GR9XoB;EAAf,WAAA,CAAA,EAAA;IACQ,IAAA,EAAA,MAAA;IAAW,WAAA,CAAA,EAAA,OAAA;EAA1B,CAAA;EAAc,UAAA,CAAA,EAAA,MAAA,GAAA,MAAA;EA6DK,SAAA,CAAA,EAAA,OAAW;EAAwB,iBAAA,CAAA,EQuUnC,WRvUmC,CQuUvB,cRvUuB,CAAA,mBAAA,CAAA,CAAA;CAAf;KQ2XrC,wBAAA,GR1Xe,sBAAA;AACR,KQ2XA,aR3XA,CAAA,CAAA,CAAA,GQ2XmB,IR3XnB,CQ4XV,CR5XU,EAAA,MQ6XJ,QR7XI,GQ6XO,wBR7XP,CAAA,GQ+XV,QR/XU;KQ0ZP,mBAAA,GR5ZkE;EAAO,KAAA,CAAA,EQ6ZpE,WR7ZoE;;;;ACxG9E,CAAA;AA2BA,KOgfK,2BAAA,GPhfmC;iBOifvB;;wBAEO;ANjjBxB,CAAA;AACyB,iBMqxBT,UNrxBS,CAAA,UMqxBY,ONrxBZ,CAAA,GAAA,CAAA,CAAA,CAAA,EAAA,EMsxBnB,sBNtxBmB,CMsxBI,CNtxBJ,CAAA,EAAA,EAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EMwxBb,cNxxBa,CAAA,EMyxBtB,aNzxBsB,CMyxBR,CNzxBQ,CAAA;AAGZ,cMkiCA,ONliCA,CAAA,MAAA,OAAA,CAAA,SMkiC+B,SNliC/B,CMkiCyC,GNliCzC,CAAA,CAAA;EAAR,CAAA,OAAA;EACS,WAAA,EAAA,MAAA;EAAa,UAAA,EAAA,MAAA,GAAA,MAAA;EACW,QAAA,eAAA;EACvB,QAAA,gBAAA;EACA,QAAA,aAAA;EACU,QAAA,WAAA;EAAO,QAAA,mBAAA;EAGf,QAAA,cAAA;;;;ECGP,OAAA,EK6iCC,ML7iCD,CAAA,MAAkB,EAAA,MAAA,CAAA;EACD,iBAAA,iBAAA;EAAR,QAAA,MAAA;EAGA,QAAA,gBAAA;EAAL,QAAA,YAAA;EAER,QAAA,mBAAA;EAC2B,QAAA,eAAA;EAA3B,QAAA,aAAA;EAFD,QAAA,cAAA;EAIqB,QAAA,oBAAA;EAAa,QAAA,aAAA;EACW,QAAA,iBAAA;EACzB,QAAA,yBAAA;EACA;;;;EACS,iBAAA,0BAAA;EA6OZ;;;;EAKT,QAAA,iBAAA;EAKF;;;;;;ACxRX;AAEA;;;;ACSA;;;;;AAaA;AAUA;EAUa,WAAA,CAAA,MAAA,EAAA,MAAwB,EAAA,IAAA,EAAA,OAAQ,EAAA,CAAA,EGslCS,OHtlCT,CAAA,OAAgB,CAAA;EAUhD,aAAA,CAAA,aAAwB,EAAA,MAAA,EAAA,MAAQ,EAAA,MAAA,EAAA,IAAgB,EAAA,OAAA,EAAA,CAAA,EG4lCxD,OH5lCwD,CAAA,OAAA,CAAA;;;mBG0nC1C,6BAA6B;EFnoCnC,cAAA,CAAA,IAAe,EAAA,MAAA,EAAA,WAAA,CAAA,EAAA,OAAA,CAAA,EEu1CiC,OFv1CjC,CAAA,IAAA,CAAA;EACL,SAAA,CAAA,aAAA,EEm2CU,oBFn2CV,CAAA,EEm2CiC,OFn2CjC,CAAA,IAAA,CAAA;EAAkB,aAAA,CAAA,UAAA,EAAA,MAAA,GAAA,MAAA,CAAA,EE43CW,OF53CX,CAAA,IAAA,CAAA;EAAR,YAAA,CAAA,SAAA,EAAA,OAAA,CAAA,EEs4CS,OFt4CT,CAAA,IAAA,CAAA;EADG,UAAA,CAAA,OAAA,EEi5CR,MFj5CQ,CAAA,MAAA,EAAA,MAAA,GAAA,SAAA,CAAA,CAAA,EEi5C6B,OFj5C7B,CAAA,IAAA,CAAA;EAAkB,oBAAA,CAAA,QAAA,EE25CxC,WF35CwC,CE25C5B,cF35C4B,CAAA,mBAAA,CAAA,CAAA,CAAA,EE45CjD,OF55CiD,CAAA,IAAA,CAAA;;;;AC2EtD;;EACsD,WAAA,CAAA,MAAA,EAAA,MAAA,EAAA,SAAA,EAAA,MAAA,EAAA,OAAA,ECo9CzC,kBDp9CyC,CAAA,ECq9CjD,ODr9CiD,CAAA,IAAA,CAAA;EAAR;;;EAEf,aAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EC09CW,OD19CX,CAAA,IAAA,CAAA;EAAa;;;;;ACClB;AA2VO;AAsDjC;;;;;;;EA+BK,QAAA,eAAmB;EAOnB;AAwOL;;;;;;;EAIgB,OAAA,CAAA,CAAA,EAk1BY,OAl1BZ,CAAA,IAAA,CAAA;EA4QH,QAAA,SAAO;EAAkC,QAAA,kBAAA;EAsB3C,QAAA,+BAAA;EAiE2C,QAAA,2BAAA;EAgBjD,QAAA,2BAAA;EA8Bc,QAAA,iCAAA;EAA6B,QAAA,0BAAA;EAoNa,OAAA,CAAA,CAAA,EA6brC,OA7bqC,CAAA,IAAA,CAAA;EAa5B,KAAA,CAAA,OAAA,CAAA,EA0bnB,UA1bmB,CA0bR,SA1bQ,CA0bE,GA1bF,CAAA,CAAA,OAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,EA2b5B,OA3b4B,CAAA,IAAA,CAAA;EAAuB,oBAAA,CAAA,IAAA,EAkc9C,2BAlc8C,CAAA,EAmcnD,OAncmD,CAAA,IAAA,CAAA;EAyBJ,oBAAA,CAAA,WAAA,CAAA,EAAA,MAAA,GAAA,MAAA,EAAA,GA4ad,2BA5ac,EAAA,mBAAA,CAAA,EA6a1B,mBA7a0B,EAAA,YAAA,CAAA,EA8ajC,2BA9aiC,CAAA,EA+a/C,OA/a+C,CAAA,IAAA,CAAA;EAUV,IAAA,CAAA,MAAA,CAAA,EAyc7B,UAzc6B,CAyclB,SAzckB,CAycR,GAzcQ,CAAA,CAAA,MAAA,CAAA,CAAA,CAAA,CAAA,CAAA,CAAA,EA0crC,OA1cqC,CAAA,IAAA,CAAA;EAUd,MAAA,CAAA,CAAA,EAscL,OAtcK,CAAA,IAAA,CAAA;EAAqC,OAAA,CAAA,KAAA,EAAA,OAAA,CAAA,EAAA,IAAA;EAUvC;;;EAqIb,cAAA,CAAA,YAAA,EA4VK,OA5VL,GAAA,MAAA,GA4VwB,GA5VxB,EAAA,UAAA,CAAA,EAAA,MAAA,GA6Va,WA7Vb,EAAA,SAAA,CAAA,EAAA,MAAA,CAAA,EA+VR,OA/VQ,CA+VA,QA/VA,CAAA;EACR,QAAA,6BAAA;EAOqC;;;;EAsPjB,QAAA,iBAAA;EAAX;;;;;;;;;;;;;;EA8FuB,QAAA,uBAAA;EACX;;;;;;;;;;;;EAqdb,QAAA,uBAAA;EAAR;;;EAwB4B,QAAA,uBAAA;EAAR,iBAAA,CAAA,CAAA,EAjMa,OAiMb,CAAA,IAAA,CAAA;EA6NZ,QAAA,6BAAA;EACA,KAAA,CAAA,OAAA,EA3XmB,OA2XnB,CAAA,EA3X6B,OA2X7B,CA3XqC,QA2XrC,CAAA;EACA,SAAA,CAAA,OAAA,EAvUc,OAuUd,EAAA,IAAA,EAAA,MAAA,CAAA,EAvUsC,OAuUtC,CAvU8C,QAuU9C,CAAA;EAAR,oBAAA,CAAA,IAAA,EAAA,MAAA,EAAA,IAAA,EAAA,MAAA,CAAA,EAnUqD,OAmUrD,CAAA,MAAA,CAAA;EA4HsB,QAAA,gBAAA;EAIa,cAAA,CAAA,OAAA,EAxX3B,qBAwX2B,CAAA,EAvXnC,OAuXmC,CAvX3B,qBAuX2B,CAAA;EAAR,WAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EA9WC,OA8WD,CA9WS,qBA8WT,GAAA,IAAA,CAAA;EAcC,aAAA,CAAA,CAAA,EA7WR,OA6WQ,CA7WA,qBA6WA,EAAA,CAAA;EAAR,QAAA,kBAAA;EAAO,QAAA,YAAA;EASiC,QAAA,aAAA;EAQ5B,IAAA,CAAA,OAAA,EAjKxB,cAiKwB,EAAA,OAAA,CAAA,EAhKxB,WAgKwB,CAAA,EA/JhC,OA+JgC,CA/JxB,oBA+JwB,CAAA;EAAf,QAAA,iBAAA;EAAc,QAAA,0BAAA;EACG;EAAA,eAAA,CAAA,CAAA,EApCZ,OAoCY,CAAA,OAAA,CAAA;EAoBR,UAAA,CAAA,EAAA,EAAA,MAAA,CAAA,EApDC,OAoDD,CApDS,oBAoDT,GAAA,IAAA,CAAA;EAAA,aAAA,CAAA,CAAA,EAtCN,OAsCM,CAtCE,aAsCF,EAAA,CAAA;EAMoB,KAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAMS,CANT,EAAA;IAAA,SAAA,CAAA,EAAA,OAAA;EAMS,CAAA,CAAA,EAzCK,OAyCL,CAlD5B,WAAA,CAkD4B;EAmB/C,SAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,GApDS,cAoDT,CApDwB,UAoDxB,CAAA,EAAA,OAGsB,CAHtB,EAAA;IAAR,QAAA,CAAA,EAAA,MAAA;EAG8B,CAAA,CAAA,EAtDI,OAsDJ,CAAA;IAAR,OAAA,EAAA,OAAA;IACd,IAAA,EAAA,MAAA;IAAR,YAAA,EAAA,MAAA;IA4BA,SAAA,EAAA,MAAA;EAeC,CAAA,GAnG8B,eAmG9B,CAAA;EAMgD,UAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EApFvB,OAoFuB,CAxGf,gBAAA,CAwGe;EAMJ,UAAA,CAAA,OAAA,EAAA,MAAA,EAAA,OAAA,EAAA,MAAA,CAAA,EApFC,OAoFD,CA1FnB,gBAAA,CA0FmB;EASW,QAAA,CAAA,UAAA,EAAA,MAAA,EAAA,eAAA,EAAA,MAAA,CAAA,EAvFD,OAuFC,CA7FV,cAAA,CA6FU;EAAf;;;;;;;;;;EAkCzC,QAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,EAAA;IA6BQ,QAAA,EAAA,MAAA;EACA,CAAA,CAAA,EApIR,OAoIQ,CApIA,oBAoIA,CAAA;EAAR,QAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAyDF,CAzDE,EAAA;IA4DK,QAAA,CAAA,EA7LiB,OA6LjB,CA7LyB,YA6LzB,EAAA,MAAA,CAAA;EAHP,CAAA,CAAA,EAzLE,OAyLF,CAzLU,cAyLV,CAAA;EAO6D;;;;;EA8D/C,sBAAA,CAAA,OAsD6B,CAtD7B,EAAA;IAsDa,IAAA,EAAA,MAAA;IAAwB,QAAA,CAAA,EAAA,SAAA,MAAA,EAAA;EAAR,CAAA,CAAA,EAxRzC,OAwRyC,CAAA,MAAA,CAAA;EAYhB,uBAAA,CAAA,OAAA,EAAA;IAA0B,IAAA,EAAA,MAAA;IAAR,WAAA,EAAA,MAAA;EAKrC,CAAA,CAAA,EA1RL,OA0RK,CAAA,IAAA,CAAA;EACN,uBAAA,CAAA,WAAA,EAAA,MAAA,CAAA,EArRiD,OAqRjD,CAAA,IAAA,CAAA;EAKO,qBAAA,CAAA,SAAA,EAAA,MAAA,CAAA,EApRsC,OAoRtC,CAAA,IAAA,CAAA;EACP,cAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EA5QiC,OA4QjC,CA5QyC,cA4QzC,CA5QwD,UA4QxD,CAAA,CAAA;EA9mEuC,SAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EAw2DF,gBAx2DE,CAAA,EAw2Dc,OAx2Dd,CAw2Dc,eAAA,CAx2Dd;EAAS,MAAA,CAAA,IAAA,EAAA,MAAA,CAAA,EA82D1B,OA92D0B,CAw2DK,gBAAA,CAx2DL;;;;ACxiCrD;;;;;;AAcA;;;;EAGW,KAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,ED05FE,YC15FF,CAAA,ED25FN,OC35FM,CD25FE,cC35FF,CD25FiB,UC35FjB,CAAA,CAAA;EAAc;;;;;;;ACVzB;;;EAEW,YAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,CAAA,EFg8FE,mBEh8FF,CAAA,EFi8FN,OEj8FM,CFi8FE,kBEj8FF,CAAA;EACM;;;AAwFjB;;;;;;AAuBA;;;;;;;;;;;;;;;;;;;;;GF04FG,kBAAA,GAGO;;;;;MAIsD;;;;;;;;;;;;8BAY5B;;;;;qCAQI;;;;;;;;;;+BASH;;;;;;;kDAUmB;;;;;;;;;;;;;;;;;;;;iBAuBvC;;;;;;;;;;;;;;;wBAsDa,gBAAgB,QAAQ;;;;;;;;;wBAYxB,kBAAkB,QAAQ;2CAK7C,gCACN;qCAKO,4BACP;;;;;UCtpGY,qBAAqB,eAAe;WAC1C,uBAAuB;;iBAaZ,yBACV,wBACA,WAAW,aACZ,cAAc,IAAI,QAAQ;;;;;;;;;;;;iBCVd,0BACb,eAAe,sBACd,cACR,cAAc;AVoEjB;;;;;AAEG,iBUkBoB,uBVlBpB,CAAA,CAAA,CAAA,CAAA,QAAA,EUmBS,QVnBT,EAAA,MAAA,CAAA,EUoBQ,WVpBR,CAAA,EUqBA,aVrBA,CUqBc,CVrBd,CAAA;;AA6DH;;;;;AAAuE,iBUpBvD,wBVoBuD,CAAA,CAAA,CAAA,CAAA,MAAA,EUnB7D,aVmB6D,CUnB/C,CVmB+C,CAAA,EAAA,QAAA,EAAA;EAAO,MAAA,CAAA,EUjBjE,WViBiE;sBUhBtD;IAErB,eAAe"}

package/dist/index.js

@@ -1,8 +1,8 @@
 import "./errors-Bb3s6nBS.js";
 import { $ as TerminalControlError, G as BackupRestoreError, H as BackupCreateError, J as InvalidTerminalCursorError, K as ContainerUnavailableError, Q as StaleTerminalHandleError, U as BackupExpiredError, W as BackupNotFoundError, X as OperationInterruptedError, Y as InvalidTerminalCwdError, Z as RPCTransportError, _ as StaleProcessHandleError, c as InvalidProcessEnvironmentError, d as ProcessExitedBeforeLogError, et as TerminalNotFoundError, f as ProcessExitedBeforeReadyError, g as ProcessWaitTimeoutError, h as ProcessSpawnFailedError, l as ProcessAbortedError, m as ProcessReadyTimeoutError, n as RuntimeIdentityInactiveError, o as InvalidProcessCursorError, p as ProcessNotFoundError, q as InvalidBackupConfigError, r as RuntimeControlProtocolError, s as InvalidProcessCwdError, u as ProcessError } from "./errors--yR3zLC_.js";
 import { a as TraceContext, r as createLogger } from "./dist-n_eniPAR.js";
-import { _ as proxyTerminal, a as responseToAsyncIterable, b as collectFile, c as BucketUnmountError, d as S3FSMountError, f as parsePreviewRoute, i as parseSSEStream, l as InvalidMountConfigError, n as getSandbox, o as ContainerProxy, p as withPreviewProxyMetadata, r as asyncIterableToSSEStream, s as BucketMountError, t as Sandbox, u as MissingCredentialsError, v as isDurableObjectCodeUpdateReset, x as streamFile, y as isPlatformTransientError } from "./sandbox-CaesWCLh.js";
-import "./extensions-BKL2zqL4.js";
+import { _ as proxyTerminal, a as responseToAsyncIterable, b as collectFile, c as BucketUnmountError, d as S3FSMountError, f as parsePreviewRoute, i as parseSSEStream, l as InvalidMountConfigError, n as getSandbox, o as ContainerProxy, p as withPreviewProxyMetadata, r as asyncIterableToSSEStream, s as BucketMountError, t as Sandbox, u as MissingCredentialsError, v as isDurableObjectCodeUpdateReset, x as streamFile, y as isPlatformTransientError } from "./sandbox-CpelK4pU.js";
+import "./extensions-038QzSIg.js";
 
 //#region src/request-handler.ts
 function createProxyLogger(request) {

package/dist/interpreter/index.d.ts

@@ -1,6 +1,6 @@
 import "../process-types-GStiZ8f8.js";
-import "../filesystem-Y5aF3nmJ.js";
-import { c as SandboxExtension, l as SandboxLike } from "../index-DfXx3uZL.js";
+import "../filesystem-Cd6xd_Pe.js";
+import { c as SandboxExtension, l as SandboxLike } from "../index-Fbdwkfft.js";
 
 //#region ../../extensions/interpreter/src/types.d.ts
 

package/dist/interpreter/index.js

@@ -1,7 +1,7 @@
 import "../errors-Bb3s6nBS.js";
 import "../errors--yR3zLC_.js";
 import "../dist-n_eniPAR.js";
-import { t as SandboxExtension } from "../extensions-BKL2zqL4.js";
+import { t as SandboxExtension } from "../extensions-038QzSIg.js";
 
 //#region rolldown:runtime
 var __toBinaryNode = (base64) => new Uint8Array(Buffer.from(base64, "base64"));