@cloudflare/sandbox 0.2.0 → 0.2.2

package/dist/{chunk-ZJN2PQOS.js → chunk-ZMPO44U4.js}

@@ -1,16 +1,22 @@
-import {
-  HttpClient
-} from "./chunk-YVZ3K26G.js";
 import {
   SecurityError,
   logSecurityEvent,
   sanitizeSandboxId,
   validatePort
 } from "./chunk-6UAWTJ5S.js";
+import {
+  parseSSEStream
+} from "./chunk-NNGBXDMY.js";
 import {
   ProcessNotFoundError,
   SandboxError
-} from "./chunk-6THNBO4S.js";
+} from "./chunk-S5FFBU4Y.js";
+import {
+  CodeInterpreter
+} from "./chunk-FKBV7CZS.js";
+import {
+  JupyterClient
+} from "./chunk-VTKZL632.js";
 
 // src/sandbox.ts
 import { Container, getContainer } from "@cloudflare/containers";
@@ -127,18 +133,17 @@ var Sandbox = class extends Container {
   // Sleep the sandbox if no requests are made in this timeframe
   client;
   sandboxName = null;
+  codeInterpreter;
   constructor(ctx, env) {
     super(ctx, env);
-    this.client = new HttpClient({
+    this.client = new JupyterClient({
       onCommandComplete: (success, exitCode, _stdout, _stderr, command) => {
         console.log(
           `[Container] Command completed: ${command}, Success: ${success}, Exit code: ${exitCode}`
         );
       },
       onCommandStart: (command) => {
-        console.log(
-          `[Container] Command started: ${command}`
-        );
+        console.log(`[Container] Command started: ${command}`);
       },
       onError: (error, _command) => {
         console.error(`[Container] Command error: ${error}`);
@@ -150,6 +155,7 @@ var Sandbox = class extends Container {
       // Control plane port
       stub: this
     });
+    this.codeInterpreter = new CodeInterpreter(this);
     this.ctx.blockConcurrencyWhile(async () => {
       this.sandboxName = await this.ctx.storage.get("sandboxName") || null;
     });
@@ -210,18 +216,24 @@ var Sandbox = class extends Container {
       }
       let result;
       if (options?.stream && options?.onOutput) {
-        result = await this.executeWithStreaming(command, options, startTime, timestamp);
-      } else {
-        const response = await this.client.execute(
+        result = await this.executeWithStreaming(
           command,
-          {
-            sessionId: options?.sessionId,
-            cwd: options?.cwd,
-            env: options?.env
-          }
+          options,
+          startTime,
+          timestamp
         );
+      } else {
+        const response = await this.client.execute(command, {
+          sessionId: options?.sessionId,
+          cwd: options?.cwd,
+          env: options?.env
+        });
         const duration = Date.now() - startTime;
-        result = this.mapExecuteResponseToExecResult(response, duration, options?.sessionId);
+        result = this.mapExecuteResponseToExecResult(
+          response,
+          duration,
+          options?.sessionId
+        );
       }
       if (options?.onComplete) {
         options.onComplete(result);
@@ -242,9 +254,13 @@ var Sandbox = class extends Container {
     let stdout = "";
     let stderr = "";
     try {
-      const stream = await this.client.executeCommandStream(command, options.sessionId);
-      const { parseSSEStream } = await import("./sse-parser.js");
-      for await (const event of parseSSEStream(stream)) {
+      const stream = await this.client.executeCommandStream(
+        command,
+        options.sessionId
+      );
+      for await (const event of parseSSEStream(
+        stream
+      )) {
         if (options.signal?.aborted) {
           throw new Error("Operation was aborted");
         }
@@ -441,7 +457,10 @@ var Sandbox = class extends Container {
     if (options?.signal?.aborted) {
       throw new Error("Operation was aborted");
     }
-    const stream = await this.client.executeCommandStream(command, options?.sessionId);
+    const stream = await this.client.executeCommandStream(
+      command,
+      options?.sessionId
+    );
     return stream;
   }
   async streamProcessLogs(processId, options) {
@@ -475,9 +494,15 @@ var Sandbox = class extends Container {
   async exposePort(port, options) {
     await this.client.exposePort(port, options?.name);
     if (!this.sandboxName) {
-      throw new Error("Sandbox name not available. Ensure sandbox is accessed through getSandbox()");
+      throw new Error(
+        "Sandbox name not available. Ensure sandbox is accessed through getSandbox()"
+      );
     }
-    const url = this.constructPreviewUrl(port, this.sandboxName, options.hostname);
+    const url = this.constructPreviewUrl(
+      port,
+      this.sandboxName,
+      options.hostname
+    );
     return {
       url,
       port,
@@ -486,20 +511,32 @@ var Sandbox = class extends Container {
   }
   async unexposePort(port) {
     if (!validatePort(port)) {
-      logSecurityEvent("INVALID_PORT_UNEXPOSE", {
-        port
-      }, "high");
-      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);
+      logSecurityEvent(
+        "INVALID_PORT_UNEXPOSE",
+        {
+          port
+        },
+        "high"
+      );
+      throw new SecurityError(
+        `Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`
+      );
     }
     await this.client.unexposePort(port);
-    logSecurityEvent("PORT_UNEXPOSED", {
-      port
-    }, "low");
+    logSecurityEvent(
+      "PORT_UNEXPOSED",
+      {
+        port
+      },
+      "low"
+    );
   }
   async getExposedPorts(hostname) {
     const response = await this.client.getExposedPorts();
     if (!this.sandboxName) {
-      throw new Error("Sandbox name not available. Ensure sandbox is accessed through getSandbox()");
+      throw new Error(
+        "Sandbox name not available. Ensure sandbox is accessed through getSandbox()"
+      );
     }
     return response.ports.map((port) => ({
       url: this.constructPreviewUrl(port.port, this.sandboxName, hostname),
@@ -510,23 +547,33 @@ var Sandbox = class extends Container {
   }
   constructPreviewUrl(port, sandboxId, hostname) {
     if (!validatePort(port)) {
-      logSecurityEvent("INVALID_PORT_REJECTED", {
-        port,
-        sandboxId,
-        hostname
-      }, "high");
-      throw new SecurityError(`Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`);
+      logSecurityEvent(
+        "INVALID_PORT_REJECTED",
+        {
+          port,
+          sandboxId,
+          hostname
+        },
+        "high"
+      );
+      throw new SecurityError(
+        `Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`
+      );
     }
     let sanitizedSandboxId;
     try {
       sanitizedSandboxId = sanitizeSandboxId(sandboxId);
     } catch (error) {
-      logSecurityEvent("INVALID_SANDBOX_ID_REJECTED", {
-        sandboxId,
-        port,
-        hostname,
-        error: error instanceof Error ? error.message : "Unknown error"
-      }, "high");
+      logSecurityEvent(
+        "INVALID_SANDBOX_ID_REJECTED",
+        {
+          sandboxId,
+          port,
+          hostname,
+          error: error instanceof Error ? error.message : "Unknown error"
+        },
+        "high"
+      );
       throw error;
     }
     const isLocalhost = isLocalhostPattern(hostname);
@@ -538,22 +585,32 @@ var Sandbox = class extends Container {
         const subdomainHost = `${port}-${sanitizedSandboxId}.${host}`;
         baseUrl.hostname = subdomainHost;
         const finalUrl = baseUrl.toString();
-        logSecurityEvent("PREVIEW_URL_CONSTRUCTED", {
-          port,
-          sandboxId: sanitizedSandboxId,
-          hostname,
-          resultUrl: finalUrl,
-          environment: "localhost"
-        }, "low");
+        logSecurityEvent(
+          "PREVIEW_URL_CONSTRUCTED",
+          {
+            port,
+            sandboxId: sanitizedSandboxId,
+            hostname,
+            resultUrl: finalUrl,
+            environment: "localhost"
+          },
+          "low"
+        );
         return finalUrl;
       } catch (error) {
-        logSecurityEvent("URL_CONSTRUCTION_FAILED", {
-          port,
-          sandboxId: sanitizedSandboxId,
-          hostname,
-          error: error instanceof Error ? error.message : "Unknown error"
-        }, "high");
-        throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : "Unknown error"}`);
+        logSecurityEvent(
+          "URL_CONSTRUCTION_FAILED",
+          {
+            port,
+            sandboxId: sanitizedSandboxId,
+            hostname,
+            error: error instanceof Error ? error.message : "Unknown error"
+          },
+          "high"
+        );
+        throw new SecurityError(
+          `Failed to construct preview URL: ${error instanceof Error ? error.message : "Unknown error"}`
+        );
       }
     }
     try {
@@ -562,24 +619,66 @@ var Sandbox = class extends Container {
       const subdomainHost = `${port}-${sanitizedSandboxId}.${hostname}`;
       baseUrl.hostname = subdomainHost;
       const finalUrl = baseUrl.toString();
-      logSecurityEvent("PREVIEW_URL_CONSTRUCTED", {
-        port,
-        sandboxId: sanitizedSandboxId,
-        hostname,
-        resultUrl: finalUrl,
-        environment: "production"
-      }, "low");
+      logSecurityEvent(
+        "PREVIEW_URL_CONSTRUCTED",
+        {
+          port,
+          sandboxId: sanitizedSandboxId,
+          hostname,
+          resultUrl: finalUrl,
+          environment: "production"
+        },
+        "low"
+      );
       return finalUrl;
     } catch (error) {
-      logSecurityEvent("URL_CONSTRUCTION_FAILED", {
-        port,
-        sandboxId: sanitizedSandboxId,
-        hostname,
-        error: error instanceof Error ? error.message : "Unknown error"
-      }, "high");
-      throw new SecurityError(`Failed to construct preview URL: ${error instanceof Error ? error.message : "Unknown error"}`);
+      logSecurityEvent(
+        "URL_CONSTRUCTION_FAILED",
+        {
+          port,
+          sandboxId: sanitizedSandboxId,
+          hostname,
+          error: error instanceof Error ? error.message : "Unknown error"
+        },
+        "high"
+      );
+      throw new SecurityError(
+        `Failed to construct preview URL: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
     }
   }
+  // Code Interpreter Methods
+  /**
+   * Create a new code execution context
+   */
+  async createCodeContext(options) {
+    return this.codeInterpreter.createCodeContext(options);
+  }
+  /**
+   * Run code with streaming callbacks
+   */
+  async runCode(code, options) {
+    const execution = await this.codeInterpreter.runCode(code, options);
+    return execution.toJSON();
+  }
+  /**
+   * Run code and return a streaming response
+   */
+  async runCodeStream(code, options) {
+    return this.codeInterpreter.runCodeStream(code, options);
+  }
+  /**
+   * List all code contexts
+   */
+  async listCodeContexts() {
+    return this.codeInterpreter.listCodeContexts();
+  }
+  /**
+   * Delete a code context
+   */
+  async deleteCodeContext(contextId) {
+    return this.codeInterpreter.deleteCodeContext(contextId);
+  }
 };
 
 export {
@@ -588,4 +687,4 @@ export {
   proxyToSandbox,
   isLocalhostPattern
 };
-//# sourceMappingURL=chunk-ZJN2PQOS.js.map
+//# sourceMappingURL=chunk-ZMPO44U4.js.map

package/dist/chunk-ZMPO44U4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox.ts","../src/request-handler.ts"],"sourcesContent":["import { Container, getContainer } from \"@cloudflare/containers\";\nimport { CodeInterpreter } from \"./interpreter\";\nimport type {\n  CodeContext,\n  CreateContextOptions,\n  ExecutionResult,\n  RunCodeOptions,\n} from \"./interpreter-types\";\nimport { JupyterClient } from \"./jupyter-client\";\nimport { isLocalhostPattern } from \"./request-handler\";\nimport {\n  logSecurityEvent,\n  SecurityError,\n  sanitizeSandboxId,\n  validatePort,\n} from \"./security\";\nimport { parseSSEStream } from \"./sse-parser\";\nimport type {\n  ExecOptions,\n  ExecResult,\n  ISandbox,\n  Process,\n  ProcessOptions,\n  ProcessStatus,\n  StreamOptions,\n} from \"./types\";\nimport { ProcessNotFoundError, SandboxError } from \"./types\";\n\nexport function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {\n  const stub = getContainer(ns, id);\n\n  // Store the name on first access\n  stub.setSandboxName?.(id);\n\n  return stub;\n}\n\nexport class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {\n  defaultPort = 3000; // Default port for the container's Bun server\n  sleepAfter = \"3m\"; // Sleep the sandbox if no requests are made in this timeframe\n  client: JupyterClient;\n  private sandboxName: string | null = null;\n  private codeInterpreter: CodeInterpreter;\n\n  constructor(ctx: DurableObjectState, env: Env) {\n    super(ctx, env);\n    this.client = new JupyterClient({\n      onCommandComplete: (success, exitCode, _stdout, _stderr, command) => {\n        console.log(\n          `[Container] Command completed: ${command}, Success: ${success}, Exit code: ${exitCode}`\n        );\n      },\n      onCommandStart: (command) => {\n        console.log(`[Container] Command started: ${command}`);\n      },\n      onError: (error, _command) => {\n        console.error(`[Container] Command error: ${error}`);\n      },\n      onOutput: (stream, data, _command) => {\n        console.log(`[Container] [${stream}] ${data}`);\n      },\n      port: 3000, // Control plane port\n      stub: this,\n    });\n\n    // Initialize code interpreter\n    this.codeInterpreter = new CodeInterpreter(this);\n\n    // Load the sandbox name from storage on initialization\n    this.ctx.blockConcurrencyWhile(async () => {\n      this.sandboxName =\n        (await this.ctx.storage.get<string>(\"sandboxName\")) || null;\n    });\n  }\n\n  // RPC method to set the sandbox name\n  async setSandboxName(name: string): Promise<void> {\n    if (!this.sandboxName) {\n      this.sandboxName = name;\n      await this.ctx.storage.put(\"sandboxName\", name);\n      console.log(`[Sandbox] Stored sandbox name via RPC: ${name}`);\n    }\n  }\n\n  // RPC method to set environment variables\n  async setEnvVars(envVars: Record<string, string>): Promise<void> {\n    this.envVars = { ...this.envVars, ...envVars };\n    console.log(`[Sandbox] Updated environment variables`);\n  }\n\n  override onStart() {\n    console.log(\"Sandbox successfully started\");\n  }\n\n  override onStop() {\n    console.log(\"Sandbox successfully shut down\");\n    if (this.client) {\n      this.client.clearSession();\n    }\n  }\n\n  override onError(error: unknown) {\n    console.log(\"Sandbox error:\", error);\n  }\n\n  // Override fetch to route internal container requests to appropriate ports\n  override async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Capture and store the sandbox name from the header if present\n    if (!this.sandboxName && request.headers.has(\"X-Sandbox-Name\")) {\n      const name = request.headers.get(\"X-Sandbox-Name\")!;\n      this.sandboxName = name;\n      await this.ctx.storage.put(\"sandboxName\", name);\n      console.log(`[Sandbox] Stored sandbox name: ${this.sandboxName}`);\n    }\n\n    // Determine which port to route to\n    const port = this.determinePort(url);\n\n    // Route to the appropriate port\n    return await this.containerFetch(request, port);\n  }\n\n  private determinePort(url: URL): number {\n    // Extract port from proxy requests (e.g., /proxy/8080/*)\n    const proxyMatch = url.pathname.match(/^\\/proxy\\/(\\d+)/);\n    if (proxyMatch) {\n      return parseInt(proxyMatch[1]);\n    }\n\n    // All other requests go to control plane on port 3000\n    // This includes /api/* endpoints and any other control requests\n    return 3000;\n  }\n\n  // Enhanced exec method - always returns ExecResult with optional streaming\n  // This replaces the old exec method to match ISandbox interface\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const startTime = Date.now();\n    const timestamp = new Date().toISOString();\n\n    // Handle timeout\n    let timeoutId: NodeJS.Timeout | undefined;\n\n    try {\n      // Handle cancellation\n      if (options?.signal?.aborted) {\n        throw new Error(\"Operation was aborted\");\n      }\n\n      let result: ExecResult;\n\n      if (options?.stream && options?.onOutput) {\n        // Streaming with callbacks - we need to collect the final result\n        result = await this.executeWithStreaming(\n          command,\n          options,\n          startTime,\n          timestamp\n        );\n      } else {\n        // Regular execution\n        const response = await this.client.execute(command, {\n          sessionId: options?.sessionId,\n          cwd: options?.cwd,\n          env: options?.env,\n        });\n\n        const duration = Date.now() - startTime;\n        result = this.mapExecuteResponseToExecResult(\n          response,\n          duration,\n          options?.sessionId\n        );\n      }\n\n      // Call completion callback if provided\n      if (options?.onComplete) {\n        options.onComplete(result);\n      }\n\n      return result;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n      throw error;\n    } finally {\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n    }\n  }\n\n  private async executeWithStreaming(\n    command: string,\n    options: ExecOptions,\n    startTime: number,\n    timestamp: string\n  ): Promise<ExecResult> {\n    let stdout = \"\";\n    let stderr = \"\";\n\n    try {\n      const stream = await this.client.executeCommandStream(\n        command,\n        options.sessionId\n      );\n\n      for await (const event of parseSSEStream<import(\"./types\").ExecEvent>(\n        stream\n      )) {\n        // Check for cancellation\n        if (options.signal?.aborted) {\n          throw new Error(\"Operation was aborted\");\n        }\n\n        switch (event.type) {\n          case \"stdout\":\n          case \"stderr\":\n            if (event.data) {\n              // Update accumulated output\n              if (event.type === \"stdout\") stdout += event.data;\n              if (event.type === \"stderr\") stderr += event.data;\n\n              // Call user's callback\n              if (options.onOutput) {\n                options.onOutput(event.type, event.data);\n              }\n            }\n            break;\n\n          case \"complete\": {\n            // Use result from complete event if available\n            const duration = Date.now() - startTime;\n            return (\n              event.result || {\n                success: event.exitCode === 0,\n                exitCode: event.exitCode || 0,\n                stdout,\n                stderr,\n                command,\n                duration,\n                timestamp,\n                sessionId: options.sessionId,\n              }\n            );\n          }\n\n          case \"error\":\n            throw new Error(event.error || \"Command execution failed\");\n        }\n      }\n\n      // If we get here without a complete event, something went wrong\n      throw new Error(\"Stream ended without completion event\");\n    } catch (error) {\n      if (options.signal?.aborted) {\n        throw new Error(\"Operation was aborted\");\n      }\n      throw error;\n    }\n  }\n\n  private mapExecuteResponseToExecResult(\n    response: import(\"./client\").ExecuteResponse,\n    duration: number,\n    sessionId?: string\n  ): ExecResult {\n    return {\n      success: response.success,\n      exitCode: response.exitCode,\n      stdout: response.stdout,\n      stderr: response.stderr,\n      command: response.command,\n      duration,\n      timestamp: response.timestamp,\n      sessionId,\n    };\n  }\n\n  // Background process management\n  async startProcess(\n    command: string,\n    options?: ProcessOptions\n  ): Promise<Process> {\n    // Use the new HttpClient method to start the process\n    try {\n      const response = await this.client.startProcess(command, {\n        processId: options?.processId,\n        sessionId: options?.sessionId,\n        timeout: options?.timeout,\n        env: options?.env,\n        cwd: options?.cwd,\n        encoding: options?.encoding,\n        autoCleanup: options?.autoCleanup,\n      });\n\n      const process = response.process;\n      const processObj: Process = {\n        id: process.id,\n        pid: process.pid,\n        command: process.command,\n        status: process.status as ProcessStatus,\n        startTime: new Date(process.startTime),\n        endTime: undefined,\n        exitCode: undefined,\n        sessionId: process.sessionId,\n\n        async kill(): Promise<void> {\n          throw new Error(\"Method will be replaced\");\n        },\n        async getStatus(): Promise<ProcessStatus> {\n          throw new Error(\"Method will be replaced\");\n        },\n        async getLogs(): Promise<{ stdout: string; stderr: string }> {\n          throw new Error(\"Method will be replaced\");\n        },\n      };\n\n      // Bind context properly\n      processObj.kill = async (signal?: string) => {\n        await this.killProcess(process.id, signal);\n      };\n\n      processObj.getStatus = async () => {\n        const current = await this.getProcess(process.id);\n        return current?.status || \"error\";\n      };\n\n      processObj.getLogs = async () => {\n        const logs = await this.getProcessLogs(process.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      };\n\n      // Call onStart callback if provided\n      if (options?.onStart) {\n        options.onStart(processObj);\n      }\n\n      return processObj;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n\n      throw error;\n    }\n  }\n\n  async listProcesses(): Promise<Process[]> {\n    const response = await this.client.listProcesses();\n\n    return response.processes.map((processData) => ({\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || \"error\";\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      },\n    }));\n  }\n\n  async getProcess(id: string): Promise<Process | null> {\n    const response = await this.client.getProcess(id);\n    if (!response.process) {\n      return null;\n    }\n\n    const processData = response.process;\n    return {\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || \"error\";\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      },\n    };\n  }\n\n  async killProcess(id: string, _signal?: string): Promise<void> {\n    try {\n      // Note: signal parameter is not currently supported by the HttpClient implementation\n      await this.client.killProcess(id);\n    } catch (error) {\n      if (\n        error instanceof Error &&\n        error.message.includes(\"Process not found\")\n      ) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw new SandboxError(\n        `Failed to kill process ${id}: ${\n          error instanceof Error ? error.message : \"Unknown error\"\n        }`,\n        \"KILL_PROCESS_FAILED\"\n      );\n    }\n  }\n\n  async killAllProcesses(): Promise<number> {\n    const response = await this.client.killAllProcesses();\n    return response.killedCount;\n  }\n\n  async cleanupCompletedProcesses(): Promise<number> {\n    // For now, this would need to be implemented as a container endpoint\n    // as we no longer maintain local process storage\n    // We'll return 0 as a placeholder until the container endpoint is added\n    return 0;\n  }\n\n  async getProcessLogs(\n    id: string\n  ): Promise<{ stdout: string; stderr: string }> {\n    try {\n      const response = await this.client.getProcessLogs(id);\n      return {\n        stdout: response.stdout,\n        stderr: response.stderr,\n      };\n    } catch (error) {\n      if (\n        error instanceof Error &&\n        error.message.includes(\"Process not found\")\n      ) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw error;\n    }\n  }\n\n  // Streaming methods - return ReadableStream for RPC compatibility\n  async execStream(\n    command: string,\n    options?: StreamOptions\n  ): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error(\"Operation was aborted\");\n    }\n\n    // Get the stream from HttpClient (need to add this method)\n    const stream = await this.client.executeCommandStream(\n      command,\n      options?.sessionId\n    );\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async streamProcessLogs(\n    processId: string,\n    options?: { signal?: AbortSignal }\n  ): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error(\"Operation was aborted\");\n    }\n\n    // Get the stream from HttpClient\n    const stream = await this.client.streamProcessLogs(processId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async gitCheckout(\n    repoUrl: string,\n    options: { branch?: string; targetDir?: string }\n  ) {\n    return this.client.gitCheckout(repoUrl, options.branch, options.targetDir);\n  }\n\n  async mkdir(path: string, options: { recursive?: boolean } = {}) {\n    return this.client.mkdir(path, options.recursive);\n  }\n\n  async writeFile(\n    path: string,\n    content: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.writeFile(path, content, options.encoding);\n  }\n\n  async deleteFile(path: string) {\n    return this.client.deleteFile(path);\n  }\n\n  async renameFile(oldPath: string, newPath: string) {\n    return this.client.renameFile(oldPath, newPath);\n  }\n\n  async moveFile(sourcePath: string, destinationPath: string) {\n    return this.client.moveFile(sourcePath, destinationPath);\n  }\n\n  async readFile(path: string, options: { encoding?: string } = {}) {\n    return this.client.readFile(path, options.encoding);\n  }\n\n  async exposePort(port: number, options: { name?: string; hostname: string }) {\n    await this.client.exposePort(port, options?.name);\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error(\n        \"Sandbox name not available. Ensure sandbox is accessed through getSandbox()\"\n      );\n    }\n\n    const url = this.constructPreviewUrl(\n      port,\n      this.sandboxName,\n      options.hostname\n    );\n\n    return {\n      url,\n      port,\n      name: options?.name,\n    };\n  }\n\n  async unexposePort(port: number) {\n    if (!validatePort(port)) {\n      logSecurityEvent(\n        \"INVALID_PORT_UNEXPOSE\",\n        {\n          port,\n        },\n        \"high\"\n      );\n      throw new SecurityError(\n        `Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`\n      );\n    }\n\n    await this.client.unexposePort(port);\n\n    logSecurityEvent(\n      \"PORT_UNEXPOSED\",\n      {\n        port,\n      },\n      \"low\"\n    );\n  }\n\n  async getExposedPorts(hostname: string) {\n    const response = await this.client.getExposedPorts();\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error(\n        \"Sandbox name not available. Ensure sandbox is accessed through getSandbox()\"\n      );\n    }\n\n    return response.ports.map((port) => ({\n      url: this.constructPreviewUrl(port.port, this.sandboxName!, hostname),\n      port: port.port,\n      name: port.name,\n      exposedAt: port.exposedAt,\n    }));\n  }\n\n  private constructPreviewUrl(\n    port: number,\n    sandboxId: string,\n    hostname: string\n  ): string {\n    if (!validatePort(port)) {\n      logSecurityEvent(\n        \"INVALID_PORT_REJECTED\",\n        {\n          port,\n          sandboxId,\n          hostname,\n        },\n        \"high\"\n      );\n      throw new SecurityError(\n        `Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`\n      );\n    }\n\n    let sanitizedSandboxId: string;\n    try {\n      sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n    } catch (error) {\n      logSecurityEvent(\n        \"INVALID_SANDBOX_ID_REJECTED\",\n        {\n          sandboxId,\n          port,\n          hostname,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        },\n        \"high\"\n      );\n      throw error;\n    }\n\n    const isLocalhost = isLocalhostPattern(hostname);\n\n    if (isLocalhost) {\n      // Unified subdomain approach for localhost (RFC 6761)\n      const [host, portStr] = hostname.split(\":\");\n      const mainPort = portStr || \"80\";\n\n      // Use URL constructor for safe URL building\n      try {\n        const baseUrl = new URL(`http://${host}:${mainPort}`);\n        // Construct subdomain safely\n        const subdomainHost = `${port}-${sanitizedSandboxId}.${host}`;\n        baseUrl.hostname = subdomainHost;\n\n        const finalUrl = baseUrl.toString();\n\n        logSecurityEvent(\n          \"PREVIEW_URL_CONSTRUCTED\",\n          {\n            port,\n            sandboxId: sanitizedSandboxId,\n            hostname,\n            resultUrl: finalUrl,\n            environment: \"localhost\",\n          },\n          \"low\"\n        );\n\n        return finalUrl;\n      } catch (error) {\n        logSecurityEvent(\n          \"URL_CONSTRUCTION_FAILED\",\n          {\n            port,\n            sandboxId: sanitizedSandboxId,\n            hostname,\n            error: error instanceof Error ? error.message : \"Unknown error\",\n          },\n          \"high\"\n        );\n        throw new SecurityError(\n          `Failed to construct preview URL: ${\n            error instanceof Error ? error.message : \"Unknown error\"\n          }`\n        );\n      }\n    }\n\n    // Production subdomain logic - enforce HTTPS\n    try {\n      // Always use HTTPS for production (non-localhost)\n      const protocol = \"https\";\n      const baseUrl = new URL(`${protocol}://${hostname}`);\n\n      // Construct subdomain safely\n      const subdomainHost = `${port}-${sanitizedSandboxId}.${hostname}`;\n      baseUrl.hostname = subdomainHost;\n\n      const finalUrl = baseUrl.toString();\n\n      logSecurityEvent(\n        \"PREVIEW_URL_CONSTRUCTED\",\n        {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          resultUrl: finalUrl,\n          environment: \"production\",\n        },\n        \"low\"\n      );\n\n      return finalUrl;\n    } catch (error) {\n      logSecurityEvent(\n        \"URL_CONSTRUCTION_FAILED\",\n        {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        },\n        \"high\"\n      );\n      throw new SecurityError(\n        `Failed to construct preview URL: ${\n          error instanceof Error ? error.message : \"Unknown error\"\n        }`\n      );\n    }\n  }\n\n  // Code Interpreter Methods\n\n  /**\n   * Create a new code execution context\n   */\n  async createCodeContext(\n    options?: CreateContextOptions\n  ): Promise<CodeContext> {\n    return this.codeInterpreter.createCodeContext(options);\n  }\n\n  /**\n   * Run code with streaming callbacks\n   */\n  async runCode(\n    code: string,\n    options?: RunCodeOptions\n  ): Promise<ExecutionResult> {\n    const execution = await this.codeInterpreter.runCode(code, options);\n    // Convert to plain object for RPC serialization\n    return execution.toJSON();\n  }\n\n  /**\n   * Run code and return a streaming response\n   */\n  async runCodeStream(\n    code: string,\n    options?: RunCodeOptions\n  ): Promise<ReadableStream> {\n    return this.codeInterpreter.runCodeStream(code, options);\n  }\n\n  /**\n   * List all code contexts\n   */\n  async listCodeContexts(): Promise<CodeContext[]> {\n    return this.codeInterpreter.listCodeContexts();\n  }\n\n  /**\n   * Delete a code context\n   */\n  async deleteCodeContext(contextId: string): Promise<void> {\n    return this.codeInterpreter.deleteCodeContext(contextId);\n  }\n}\n","import { getSandbox, type Sandbox } from \"./sandbox\";\nimport {\n  logSecurityEvent,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\n\nexport interface SandboxEnv {\n  Sandbox: DurableObjectNamespace<Sandbox>;\n}\n\nexport interface RouteInfo {\n  port: number;\n  sandboxId: string;\n  path: string;\n}\n\nexport async function proxyToSandbox<E extends SandboxEnv>(\n  request: Request,\n  env: E\n): Promise<Response | null> {\n  try {\n    const url = new URL(request.url);\n    const routeInfo = extractSandboxRoute(url);\n\n    if (!routeInfo) {\n      return null; // Not a request to an exposed container port\n    }\n\n    const { sandboxId, port, path } = routeInfo;\n    const sandbox = getSandbox(env.Sandbox, sandboxId);\n\n    // Build proxy request with proper headers\n    let proxyUrl: string;\n\n    // Route based on the target port\n    if (port !== 3000) {\n      // Route directly to user's service on the specified port\n      proxyUrl = `http://localhost:${port}${path}${url.search}`;\n    } else {\n      // Port 3000 is our control plane - route normally\n      proxyUrl = `http://localhost:3000${path}${url.search}`;\n    }\n\n    const proxyRequest = new Request(proxyUrl, {\n      method: request.method,\n      headers: {\n        ...Object.fromEntries(request.headers),\n        'X-Original-URL': request.url,\n        'X-Forwarded-Host': url.hostname,\n        'X-Forwarded-Proto': url.protocol.replace(':', ''),\n        'X-Sandbox-Name': sandboxId, // Pass the friendly name\n      },\n      body: request.body,\n    });\n\n    return sandbox.containerFetch(proxyRequest, port);\n  } catch (error) {\n    console.error('[Sandbox] Proxy routing error:', error);\n    return new Response('Proxy routing error', { status: 500 });\n  }\n}\n\nfunction extractSandboxRoute(url: URL): RouteInfo | null {\n  // Parse subdomain pattern: port-sandboxId.domain\n  const subdomainMatch = url.hostname.match(/^(\\d{4,5})-([^.-][^.]*[^.-]|[^.-])\\.(.+)$/);\n\n  if (!subdomainMatch) {\n    // Log malformed subdomain attempts\n    if (url.hostname.includes('-') && url.hostname.includes('.')) {\n      logSecurityEvent('MALFORMED_SUBDOMAIN_ATTEMPT', {\n        hostname: url.hostname,\n        url: url.toString()\n      }, 'medium');\n    }\n    return null;\n  }\n\n  const portStr = subdomainMatch[1];\n  const sandboxId = subdomainMatch[2];\n  const domain = subdomainMatch[3];\n\n  const port = parseInt(portStr, 10);\n  if (!validatePort(port)) {\n    logSecurityEvent('INVALID_PORT_IN_SUBDOMAIN', {\n      port,\n      portStr,\n      sandboxId,\n      hostname: url.hostname,\n      url: url.toString()\n    }, 'high');\n    return null;\n  }\n\n  let sanitizedSandboxId: string;\n  try {\n    sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n  } catch (error) {\n    logSecurityEvent('INVALID_SANDBOX_ID_IN_SUBDOMAIN', {\n      sandboxId,\n      port,\n      hostname: url.hostname,\n      url: url.toString(),\n      error: error instanceof Error ? error.message : 'Unknown error'\n    }, 'high');\n    return null;\n  }\n\n  // DNS subdomain length limit is 63 characters\n  if (sandboxId.length > 63) {\n    logSecurityEvent('SANDBOX_ID_LENGTH_VIOLATION', {\n      sandboxId,\n      length: sandboxId.length,\n      port,\n      hostname: url.hostname\n    }, 'medium');\n    return null;\n  }\n\n  logSecurityEvent('SANDBOX_ROUTE_EXTRACTED', {\n    port,\n    sandboxId: sanitizedSandboxId,\n    domain,\n    path: url.pathname || \"/\",\n    hostname: url.hostname\n  }, 'low');\n\n  return {\n    port,\n    sandboxId: sanitizedSandboxId,\n    path: url.pathname || \"/\",\n  };\n}\n\nexport function isLocalhostPattern(hostname: string): boolean {\n  const hostPart = hostname.split(\":\")[0];\n  return (\n    hostPart === \"localhost\" ||\n    hostPart === \"127.0.0.1\" ||\n    hostPart === \"::1\" ||\n    hostPart === \"[::1]\" ||\n    hostPart === \"0.0.0.0\"\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,WAAW,oBAAoB;;;ACiBxC,eAAsB,eACpB,SACA,KAC0B;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,YAAY,oBAAoB,GAAG;AAEzC,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,WAAW,MAAM,KAAK,IAAI;AAClC,UAAM,UAAU,WAAW,IAAI,SAAS,SAAS;AAGjD,QAAI;AAGJ,QAAI,SAAS,KAAM;AAEjB,iBAAW,oBAAoB,IAAI,GAAG,IAAI,GAAG,IAAI,MAAM;AAAA,IACzD,OAAO;AAEL,iBAAW,wBAAwB,IAAI,GAAG,IAAI,MAAM;AAAA,IACtD;AAEA,UAAM,eAAe,IAAI,QAAQ,UAAU;AAAA,MACzC,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,YAAY,QAAQ,OAAO;AAAA,QACrC,kBAAkB,QAAQ;AAAA,QAC1B,oBAAoB,IAAI;AAAA,QACxB,qBAAqB,IAAI,SAAS,QAAQ,KAAK,EAAE;AAAA,QACjD,kBAAkB;AAAA;AAAA,MACpB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AAED,WAAO,QAAQ,eAAe,cAAc,IAAI;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,WAAO,IAAI,SAAS,uBAAuB,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5D;AACF;AAEA,SAAS,oBAAoB,KAA4B;AAEvD,QAAM,iBAAiB,IAAI,SAAS,MAAM,2CAA2C;AAErF,MAAI,CAAC,gBAAgB;AAEnB,QAAI,IAAI,SAAS,SAAS,GAAG,KAAK,IAAI,SAAS,SAAS,GAAG,GAAG;AAC5D,uBAAiB,+BAA+B;AAAA,QAC9C,UAAU,IAAI;AAAA,QACd,KAAK,IAAI,SAAS;AAAA,MACpB,GAAG,QAAQ;AAAA,IACb;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,eAAe,CAAC;AAChC,QAAM,YAAY,eAAe,CAAC;AAClC,QAAM,SAAS,eAAe,CAAC;AAE/B,QAAM,OAAO,SAAS,SAAS,EAAE;AACjC,MAAI,CAAC,aAAa,IAAI,GAAG;AACvB,qBAAiB,6BAA6B;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,IACpB,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,yBAAqB,kBAAkB,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,qBAAiB,mCAAmC;AAAA,MAClD;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,MAClB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,SAAS,IAAI;AACzB,qBAAiB,+BAA+B;AAAA,MAC9C;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB;AAAA,MACA,UAAU,IAAI;AAAA,IAChB,GAAG,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,mBAAiB,2BAA2B;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,MAAM,IAAI,YAAY;AAAA,IACtB,UAAU,IAAI;AAAA,EAChB,GAAG,KAAK;AAER,SAAO;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX,MAAM,IAAI,YAAY;AAAA,EACxB;AACF;AAEO,SAAS,mBAAmB,UAA2B;AAC5D,QAAM,WAAW,SAAS,MAAM,GAAG,EAAE,CAAC;AACtC,SACE,aAAa,eACb,aAAa,eACb,aAAa,SACb,aAAa,WACb,aAAa;AAEjB;;;ADnHO,SAAS,WAAW,IAAqC,IAAY;AAC1E,QAAM,OAAO,aAAa,IAAI,EAAE;AAGhC,OAAK,iBAAiB,EAAE;AAExB,SAAO;AACT;AAEO,IAAM,UAAN,cAAqC,UAAmC;AAAA,EAC7E,cAAc;AAAA;AAAA,EACd,aAAa;AAAA;AAAA,EACb;AAAA,EACQ,cAA6B;AAAA,EAC7B;AAAA,EAER,YAAY,KAAyB,KAAU;AAC7C,UAAM,KAAK,GAAG;AACd,SAAK,SAAS,IAAI,cAAc;AAAA,MAC9B,mBAAmB,CAAC,SAAS,UAAU,SAAS,SAAS,YAAY;AACnE,gBAAQ;AAAA,UACN,kCAAkC,OAAO,cAAc,OAAO,gBAAgB,QAAQ;AAAA,QACxF;AAAA,MACF;AAAA,MACA,gBAAgB,CAAC,YAAY;AAC3B,gBAAQ,IAAI,gCAAgC,OAAO,EAAE;AAAA,MACvD;AAAA,MACA,SAAS,CAAC,OAAO,aAAa;AAC5B,gBAAQ,MAAM,8BAA8B,KAAK,EAAE;AAAA,MACrD;AAAA,MACA,UAAU,CAAC,QAAQ,MAAM,aAAa;AACpC,gBAAQ,IAAI,gBAAgB,MAAM,KAAK,IAAI,EAAE;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAGD,SAAK,kBAAkB,IAAI,gBAAgB,IAAI;AAG/C,SAAK,IAAI,sBAAsB,YAAY;AACzC,WAAK,cACF,MAAM,KAAK,IAAI,QAAQ,IAAY,aAAa,KAAM;AAAA,IAC3D,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,eAAe,MAA6B;AAChD,QAAI,CAAC,KAAK,aAAa;AACrB,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,0CAA0C,IAAI,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAW,SAAgD;AAC/D,SAAK,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,QAAQ;AAC7C,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAAA,EAES,UAAU;AACjB,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AAAA,EAES,SAAS;AAChB,YAAQ,IAAI,gCAAgC;AAC5C,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,aAAa;AAAA,IAC3B;AAAA,EACF;AAAA,EAES,QAAQ,OAAgB;AAC/B,YAAQ,IAAI,kBAAkB,KAAK;AAAA,EACrC;AAAA;AAAA,EAGA,MAAe,MAAM,SAAqC;AACxD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAG/B,QAAI,CAAC,KAAK,eAAe,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAC9D,YAAM,OAAO,QAAQ,QAAQ,IAAI,gBAAgB;AACjD,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,kCAAkC,KAAK,WAAW,EAAE;AAAA,IAClE;AAGA,UAAM,OAAO,KAAK,cAAc,GAAG;AAGnC,WAAO,MAAM,KAAK,eAAe,SAAS,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAc,KAAkB;AAEtC,UAAM,aAAa,IAAI,SAAS,MAAM,iBAAiB;AACvD,QAAI,YAAY;AACd,aAAO,SAAS,WAAW,CAAC,CAAC;AAAA,IAC/B;AAIA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,SAAiB,SAA4C;AACtE,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAGzC,QAAI;AAEJ,QAAI;AAEF,UAAI,SAAS,QAAQ,SAAS;AAC5B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,UAAI;AAEJ,UAAI,SAAS,UAAU,SAAS,UAAU;AAExC,iBAAS,MAAM,KAAK;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF,OAAO;AAEL,cAAM,WAAW,MAAM,KAAK,OAAO,QAAQ,SAAS;AAAA,UAClD,WAAW,SAAS;AAAA,UACpB,KAAK,SAAS;AAAA,UACd,KAAK,SAAS;AAAA,QAChB,CAAC;AAED,cAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,iBAAS,KAAK;AAAA,UACZ;AAAA,UACA;AAAA,UACA,SAAS;AAAA,QACX;AAAA,MACF;AAGA,UAAI,SAAS,YAAY;AACvB,gBAAQ,WAAW,MAAM;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AACA,YAAM;AAAA,IACR,UAAE;AACA,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBACZ,SACA,SACA,WACA,WACqB;AACrB,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO;AAAA,QAC/B;AAAA,QACA,QAAQ;AAAA,MACV;AAEA,uBAAiB,SAAS;AAAA,QACxB;AAAA,MACF,GAAG;AAED,YAAI,QAAQ,QAAQ,SAAS;AAC3B,gBAAM,IAAI,MAAM,uBAAuB;AAAA,QACzC;AAEA,gBAAQ,MAAM,MAAM;AAAA,UAClB,KAAK;AAAA,UACL,KAAK;AACH,gBAAI,MAAM,MAAM;AAEd,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAC7C,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAG7C,kBAAI,QAAQ,UAAU;AACpB,wBAAQ,SAAS,MAAM,MAAM,MAAM,IAAI;AAAA,cACzC;AAAA,YACF;AACA;AAAA,UAEF,KAAK,YAAY;AAEf,kBAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,mBACE,MAAM,UAAU;AAAA,cACd,SAAS,MAAM,aAAa;AAAA,cAC5B,UAAU,MAAM,YAAY;AAAA,cAC5B;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW,QAAQ;AAAA,YACrB;AAAA,UAEJ;AAAA,UAEA,KAAK;AACH,kBAAM,IAAI,MAAM,MAAM,SAAS,0BAA0B;AAAA,QAC7D;AAAA,MACF;AAGA,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD,SAAS,OAAO;AACd,UAAI,QAAQ,QAAQ,SAAS;AAC3B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,+BACN,UACA,UACA,WACY;AACZ,WAAO;AAAA,MACL,SAAS,SAAS;AAAA,MAClB,UAAU,SAAS;AAAA,MACnB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,MACjB,SAAS,SAAS;AAAA,MAClB;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,aACJ,SACA,SACkB;AAElB,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,aAAa,SAAS;AAAA,QACvD,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS;AAAA,QACpB,SAAS,SAAS;AAAA,QAClB,KAAK,SAAS;AAAA,QACd,KAAK,SAAS;AAAA,QACd,UAAU,SAAS;AAAA,QACnB,aAAa,SAAS;AAAA,MACxB,CAAC;AAED,YAAM,UAAU,SAAS;AACzB,YAAM,aAAsB;AAAA,QAC1B,IAAI,QAAQ;AAAA,QACZ,KAAK,QAAQ;AAAA,QACb,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACrC,SAAS;AAAA,QACT,UAAU;AAAA,QACV,WAAW,QAAQ;AAAA,QAEnB,MAAM,OAAsB;AAC1B,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,YAAoC;AACxC,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,UAAuD;AAC3D,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,MACF;AAGA,iBAAW,OAAO,OAAO,WAAoB;AAC3C,cAAM,KAAK,YAAY,QAAQ,IAAI,MAAM;AAAA,MAC3C;AAEA,iBAAW,YAAY,YAAY;AACjC,cAAM,UAAU,MAAM,KAAK,WAAW,QAAQ,EAAE;AAChD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAEA,iBAAW,UAAU,YAAY;AAC/B,cAAM,OAAO,MAAM,KAAK,eAAe,QAAQ,EAAE;AACjD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAGA,UAAI,SAAS,SAAS;AACpB,gBAAQ,QAAQ,UAAU;AAAA,MAC5B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,gBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,cAAc;AAEjD,WAAO,SAAS,UAAU,IAAI,CAAC,iBAAiB;AAAA,MAC9C,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAAqC;AACpD,UAAM,WAAW,MAAM,KAAK,OAAO,WAAW,EAAE;AAChD,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,SAAS;AAC7B,WAAO;AAAA,MACL,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,IAAY,SAAiC;AAC7D,QAAI;AAEF,YAAM,KAAK,OAAO,YAAY,EAAE;AAAA,IAClC,SAAS,OAAO;AACd,UACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,mBAAmB,GAC1C;AACA,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,EAAE,KAC1B,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,iBAAiB;AACpD,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAM,4BAA6C;AAIjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eACJ,IAC6C;AAC7C,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,eAAe,EAAE;AACpD,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF,SAAS,OAAO;AACd,UACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,mBAAmB,GAC1C;AACA,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WACJ,SACA,SACqC;AAErC,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,SAAS;AAAA,IACX;AAGA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBACJ,WACA,SACqC;AAErC,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,kBAAkB,SAAS;AAG5D,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,YAAY,SAAS,QAAQ,QAAQ,QAAQ,SAAS;AAAA,EAC3E;AAAA,EAEA,MAAM,MAAM,MAAc,UAAmC,CAAC,GAAG;AAC/D,WAAO,KAAK,OAAO,MAAM,MAAM,QAAQ,SAAS;AAAA,EAClD;AAAA,EAEA,MAAM,UACJ,MACA,SACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,UAAU,MAAM,SAAS,QAAQ,QAAQ;AAAA,EAC9D;AAAA,EAEA,MAAM,WAAW,MAAc;AAC7B,WAAO,KAAK,OAAO,WAAW,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,WAAW,SAAiB,SAAiB;AACjD,WAAO,KAAK,OAAO,WAAW,SAAS,OAAO;AAAA,EAChD;AAAA,EAEA,MAAM,SAAS,YAAoB,iBAAyB;AAC1D,WAAO,KAAK,OAAO,SAAS,YAAY,eAAe;AAAA,EACzD;AAAA,EAEA,MAAM,SAAS,MAAc,UAAiC,CAAC,GAAG;AAChE,WAAO,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ;AAAA,EACpD;AAAA,EAEA,MAAM,WAAW,MAAc,SAA8C;AAC3E,UAAM,KAAK,OAAO,WAAW,MAAM,SAAS,IAAI;AAGhD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,KAAK;AAAA,MACf;AAAA,MACA,KAAK;AAAA,MACL,QAAQ;AAAA,IACV;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAc;AAC/B,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wBAAwB,IAAI;AAAA,MAC9B;AAAA,IACF;AAEA,UAAM,KAAK,OAAO,aAAa,IAAI;AAEnC;AAAA,MACE;AAAA,MACA;AAAA,QACE;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,UAAkB;AACtC,UAAM,WAAW,MAAM,KAAK,OAAO,gBAAgB;AAGnD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO,SAAS,MAAM,IAAI,CAAC,UAAU;AAAA,MACnC,KAAK,KAAK,oBAAoB,KAAK,MAAM,KAAK,aAAc,QAAQ;AAAA,MACpE,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAAA,EAEQ,oBACN,MACA,WACA,UACQ;AACR,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wBAAwB,IAAI;AAAA,MAC9B;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,2BAAqB,kBAAkB,SAAS;AAAA,IAClD,SAAS,OAAO;AACd;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD;AAAA,QACA;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAEA,UAAM,cAAc,mBAAmB,QAAQ;AAE/C,QAAI,aAAa;AAEf,YAAM,CAAC,MAAM,OAAO,IAAI,SAAS,MAAM,GAAG;AAC1C,YAAM,WAAW,WAAW;AAG5B,UAAI;AACF,cAAM,UAAU,IAAI,IAAI,UAAU,IAAI,IAAI,QAAQ,EAAE;AAEpD,cAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,IAAI;AAC3D,gBAAQ,WAAW;AAEnB,cAAM,WAAW,QAAQ,SAAS;AAElC;AAAA,UACE;AAAA,UACA;AAAA,YACE;AAAA,YACA,WAAW;AAAA,YACX;AAAA,YACA,WAAW;AAAA,YACX,aAAa;AAAA,UACf;AAAA,UACA;AAAA,QACF;AAEA,eAAO;AAAA,MACT,SAAS,OAAO;AACd;AAAA,UACE;AAAA,UACA;AAAA,YACE;AAAA,YACA,WAAW;AAAA,YACX;AAAA,YACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,UAClD;AAAA,UACA;AAAA,QACF;AACA,cAAM,IAAI;AAAA,UACR,oCACE,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AAEF,YAAM,WAAW;AACjB,YAAM,UAAU,IAAI,IAAI,GAAG,QAAQ,MAAM,QAAQ,EAAE;AAGnD,YAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,QAAQ;AAC/D,cAAQ,WAAW;AAEnB,YAAM,WAAW,QAAQ,SAAS;AAElC;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,oCACE,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,kBACJ,SACsB;AACtB,WAAO,KAAK,gBAAgB,kBAAkB,OAAO;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QACJ,MACA,SAC0B;AAC1B,UAAM,YAAY,MAAM,KAAK,gBAAgB,QAAQ,MAAM,OAAO;AAElE,WAAO,UAAU,OAAO;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cACJ,MACA,SACyB;AACzB,WAAO,KAAK,gBAAgB,cAAc,MAAM,OAAO;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,mBAA2C;AAC/C,WAAO,KAAK,gBAAgB,iBAAiB;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAkB,WAAkC;AACxD,WAAO,KAAK,gBAAgB,kBAAkB,SAAS;AAAA,EACzD;AACF;","names":[]}

package/dist/{client-BXYlxy-j.d.ts → client-bzEV222a.d.ts}

@@ -1,12 +1,40 @@
 import { Container } from '@cloudflare/containers';
+import { CreateContextOptions, CodeContext, OutputMessage, Result, ExecutionError, RunCodeOptions, ExecutionResult } from './interpreter-types.js';
 import { ISandbox, ExecOptions, ExecResult, ProcessOptions, Process, StreamOptions, BaseExecOptions, StartProcessResponse, ListProcessesResponse, GetProcessResponse, GetProcessLogsResponse } from './types.js';
 
+interface ExecutionCallbacks {
+    onStdout?: (output: OutputMessage) => void | Promise<void>;
+    onStderr?: (output: OutputMessage) => void | Promise<void>;
+    onResult?: (result: Result) => void | Promise<void>;
+    onError?: (error: ExecutionError) => void | Promise<void>;
+}
+declare class JupyterClient extends HttpClient {
+    private readonly maxRetries;
+    private readonly retryDelayMs;
+    createCodeContext(options?: CreateContextOptions): Promise<CodeContext>;
+    runCodeStream(contextId: string | undefined, code: string, language: string | undefined, callbacks: ExecutionCallbacks): Promise<void>;
+    private readLines;
+    private parseExecutionResult;
+    listCodeContexts(): Promise<CodeContext[]>;
+    deleteCodeContext(contextId: string): Promise<void>;
+    doFetch(path: string, options?: RequestInit): Promise<Response>;
+    /**
+     * Execute an operation with automatic retry for transient errors
+     */
+    private executeWithRetry;
+    /**
+     * Check if an error is retryable
+     */
+    private isRetryableError;
+}
+
 declare function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string): DurableObjectStub<Sandbox<unknown>>;
 declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {
     defaultPort: number;
     sleepAfter: string;
-    client: HttpClient;
+    client: JupyterClient;
     private sandboxName;
+    private codeInterpreter;
     constructor(ctx: DurableObjectState, env: Env);
     setSandboxName(name: string): Promise<void>;
     setEnvVars(envVars: Record<string, string>): Promise<void>;
@@ -64,6 +92,26 @@ declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox
         exposedAt: string;
     }[]>;
     private constructPreviewUrl;
+    /**
+     * Create a new code execution context
+     */
+    createCodeContext(options?: CreateContextOptions): Promise<CodeContext>;
+    /**
+     * Run code with streaming callbacks
+     */
+    runCode(code: string, options?: RunCodeOptions): Promise<ExecutionResult>;
+    /**
+     * Run code and return a streaming response
+     */
+    runCodeStream(code: string, options?: RunCodeOptions): Promise<ReadableStream>;
+    /**
+     * List all code contexts
+     */
+    listCodeContexts(): Promise<CodeContext[]>;
+    /**
+     * Delete a code context
+     */
+    deleteCodeContext(contextId: string): Promise<void>;
 }
 
 interface ExecuteResponse {
@@ -166,8 +214,8 @@ declare class HttpClient {
     private options;
     private sessionId;
     constructor(options?: HttpClientOptions);
-    private doFetch;
-    execute(command: string, options: Pick<BaseExecOptions, 'sessionId' | 'cwd' | 'env'>): Promise<ExecuteResponse>;
+    protected doFetch(path: string, options?: RequestInit): Promise<Response>;
+    execute(command: string, options: Pick<BaseExecOptions, "sessionId" | "cwd" | "env">): Promise<ExecuteResponse>;
     executeCommandStream(command: string, sessionId?: string): Promise<ReadableStream<Uint8Array>>;
     gitCheckout(repoUrl: string, branch?: string, targetDir?: string, sessionId?: string): Promise<GitCheckoutResponse>;
     mkdir(path: string, recursive?: boolean, sessionId?: string): Promise<MkdirResponse>;
@@ -208,4 +256,4 @@ declare class HttpClient {
     streamProcessLogs(processId: string): Promise<ReadableStream<Uint8Array>>;
 }
 
-export { type DeleteFileResponse as D, type ExecuteResponse as E, type GitCheckoutResponse as G, HttpClient as H, type MkdirResponse as M, type ReadFileResponse as R, Sandbox as S, type WriteFileResponse as W, type MoveFileResponse as a, type RenameFileResponse as b, getSandbox as g };
+export { type DeleteFileResponse as D, type ExecuteResponse as E, type GitCheckoutResponse as G, HttpClient as H, JupyterClient as J, type MkdirResponse as M, type ReadFileResponse as R, Sandbox as S, type WriteFileResponse as W, type MoveFileResponse as a, type RenameFileResponse as b, type ExecutionCallbacks as c, getSandbox as g };

package/dist/client.d.ts

@@ -1,3 +1,4 @@
-export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, H as HttpClient, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, W as WriteFileResponse } from './client-BXYlxy-j.js';
+export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, H as HttpClient, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, W as WriteFileResponse } from './client-bzEV222a.js';
 import './types.js';
 import '@cloudflare/containers';
+import './interpreter-types.js';

package/dist/client.js

@@ -1,6 +1,6 @@
 import {
   HttpClient
-} from "./chunk-YVZ3K26G.js";
+} from "./chunk-CUHYLCMT.js";
 export {
   HttpClient
 };

package/dist/errors.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Standard error response from the sandbox API
+ */
+interface SandboxErrorResponse {
+    error?: string;
+    status?: string;
+    progress?: number;
+}
+/**
+ * Base error class for all Sandbox-related errors
+ */
+declare class SandboxError extends Error {
+    constructor(message: string);
+}
+/**
+ * Error thrown when Jupyter functionality is requested but the service is still initializing.
+ *
+ * Note: With the current implementation, requests wait for Jupyter to be ready.
+ * This error is only thrown when:
+ * 1. The request times out waiting for Jupyter (default: 30 seconds)
+ * 2. Jupyter initialization actually fails
+ *
+ * Most requests will succeed after a delay, not throw this error.
+ */
+declare class JupyterNotReadyError extends SandboxError {
+    readonly code = "JUPYTER_NOT_READY";
+    readonly retryAfter: number;
+    readonly progress?: number;
+    constructor(message?: string, options?: {
+        retryAfter?: number;
+        progress?: number;
+    });
+}
+/**
+ * Error thrown when a context is not found
+ */
+declare class ContextNotFoundError extends SandboxError {
+    readonly code = "CONTEXT_NOT_FOUND";
+    readonly contextId: string;
+    constructor(contextId: string);
+}
+/**
+ * Error thrown when code execution fails
+ */
+declare class CodeExecutionError extends SandboxError {
+    readonly code = "CODE_EXECUTION_ERROR";
+    readonly executionError?: {
+        ename?: string;
+        evalue?: string;
+        traceback?: string[];
+    };
+    constructor(message: string, executionError?: any);
+}
+/**
+ * Error thrown when the sandbox container is not ready
+ */
+declare class ContainerNotReadyError extends SandboxError {
+    readonly code = "CONTAINER_NOT_READY";
+    constructor(message?: string);
+}
+/**
+ * Error thrown when a network request to the sandbox fails
+ */
+declare class SandboxNetworkError extends SandboxError {
+    readonly code = "NETWORK_ERROR";
+    readonly statusCode?: number;
+    readonly statusText?: string;
+    constructor(message: string, statusCode?: number, statusText?: string);
+}
+/**
+ * Error thrown when service is temporarily unavailable (e.g., circuit breaker open)
+ */
+declare class ServiceUnavailableError extends SandboxError {
+    readonly code = "SERVICE_UNAVAILABLE";
+    readonly retryAfter?: number;
+    constructor(message?: string, retryAfter?: number);
+}
+/**
+ * Type guard to check if an error is a JupyterNotReadyError
+ */
+declare function isJupyterNotReadyError(error: unknown): error is JupyterNotReadyError;
+/**
+ * Type guard to check if an error is any SandboxError
+ */
+declare function isSandboxError(error: unknown): error is SandboxError;
+/**
+ * Helper to determine if an error is retryable
+ */
+declare function isRetryableError(error: unknown): boolean;
+/**
+ * Parse error response from the sandbox API and return appropriate error instance
+ */
+declare function parseErrorResponse(response: Response): Promise<SandboxError>;
+
+export { CodeExecutionError, ContainerNotReadyError, ContextNotFoundError, JupyterNotReadyError, SandboxError, type SandboxErrorResponse, SandboxNetworkError, ServiceUnavailableError, isJupyterNotReadyError, isRetryableError, isSandboxError, parseErrorResponse };