@cloudflare/sandbox 0.2.3 → 0.2.4

package/dist/chunk-CKIGERRS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox.ts","../src/request-handler.ts"],"sourcesContent":["import { Container, getContainer } from \"@cloudflare/containers\";\nimport { CodeInterpreter } from \"./interpreter\";\nimport type {\n  CodeContext,\n  CreateContextOptions,\n  ExecutionResult,\n  RunCodeOptions,\n} from \"./interpreter-types\";\nimport { JupyterClient } from \"./jupyter-client\";\nimport { isLocalhostPattern } from \"./request-handler\";\nimport {\n  logSecurityEvent,\n  SecurityError,\n  sanitizeSandboxId,\n  validatePort,\n} from \"./security\";\nimport { parseSSEStream } from \"./sse-parser\";\nimport type {\n  ExecEvent,\n  ExecOptions,\n  ExecResult,\n  ExecuteResponse,\n  ISandbox,\n  Process,\n  ProcessOptions,\n  ProcessStatus,\n  StreamOptions,\n} from \"./types\";\nimport { ProcessNotFoundError, SandboxError } from \"./types\";\n\nexport function getSandbox(ns: DurableObjectNamespace<Sandbox>, id: string) {\n  const stub = getContainer(ns, id);\n\n  // Store the name on first access\n  stub.setSandboxName?.(id);\n\n  return stub;\n}\n\nexport class Sandbox<Env = unknown> extends Container<Env> implements ISandbox {\n  defaultPort = 3000; // Default port for the container's Bun server\n  sleepAfter = \"20m\"; // Keep container warm for 20 minutes to avoid cold starts\n  client: JupyterClient;\n  private sandboxName: string | null = null;\n  private codeInterpreter: CodeInterpreter;\n\n  constructor(ctx: DurableObjectState, env: Env) {\n    super(ctx, env);\n    this.client = new JupyterClient({\n      onCommandComplete: (success, exitCode, _stdout, _stderr, command) => {\n        console.log(\n          `[Container] Command completed: ${command}, Success: ${success}, Exit code: ${exitCode}`\n        );\n      },\n      onCommandStart: (command) => {\n        console.log(`[Container] Command started: ${command}`);\n      },\n      onError: (error, _command) => {\n        console.error(`[Container] Command error: ${error}`);\n      },\n      onOutput: (stream, data, _command) => {\n        console.log(`[Container] [${stream}] ${data}`);\n      },\n      port: 3000, // Control plane port\n      stub: this,\n    });\n\n    // Initialize code interpreter\n    this.codeInterpreter = new CodeInterpreter(this);\n\n    // Load the sandbox name from storage on initialization\n    this.ctx.blockConcurrencyWhile(async () => {\n      this.sandboxName =\n        (await this.ctx.storage.get<string>(\"sandboxName\")) || null;\n    });\n  }\n\n  // RPC method to set the sandbox name\n  async setSandboxName(name: string): Promise<void> {\n    if (!this.sandboxName) {\n      this.sandboxName = name;\n      await this.ctx.storage.put(\"sandboxName\", name);\n      console.log(`[Sandbox] Stored sandbox name via RPC: ${name}`);\n    }\n  }\n\n  // RPC method to set environment variables\n  async setEnvVars(envVars: Record<string, string>): Promise<void> {\n    this.envVars = { ...this.envVars, ...envVars };\n    console.log(`[Sandbox] Updated environment variables`);\n  }\n\n  override onStart() {\n    console.log(\"Sandbox successfully started\");\n  }\n\n  override onStop() {\n    console.log(\"Sandbox successfully shut down\");\n    if (this.client) {\n      this.client.clearSession();\n    }\n  }\n\n  override onError(error: unknown) {\n    console.log(\"Sandbox error:\", error);\n  }\n\n  // Override fetch to route internal container requests to appropriate ports\n  override async fetch(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n\n    // Capture and store the sandbox name from the header if present\n    if (!this.sandboxName && request.headers.has(\"X-Sandbox-Name\")) {\n      const name = request.headers.get(\"X-Sandbox-Name\")!;\n      this.sandboxName = name;\n      await this.ctx.storage.put(\"sandboxName\", name);\n      console.log(`[Sandbox] Stored sandbox name: ${this.sandboxName}`);\n    }\n\n    // Determine which port to route to\n    const port = this.determinePort(url);\n\n    // Route to the appropriate port\n    return await this.containerFetch(request, port);\n  }\n\n  private determinePort(url: URL): number {\n    // Extract port from proxy requests (e.g., /proxy/8080/*)\n    const proxyMatch = url.pathname.match(/^\\/proxy\\/(\\d+)/);\n    if (proxyMatch) {\n      return parseInt(proxyMatch[1]);\n    }\n\n    // All other requests go to control plane on port 3000\n    // This includes /api/* endpoints and any other control requests\n    return 3000;\n  }\n\n  // Enhanced exec method - always returns ExecResult with optional streaming\n  // This replaces the old exec method to match ISandbox interface\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const startTime = Date.now();\n    const timestamp = new Date().toISOString();\n\n    // Handle timeout\n    let timeoutId: NodeJS.Timeout | undefined;\n\n    try {\n      // Handle cancellation\n      if (options?.signal?.aborted) {\n        throw new Error(\"Operation was aborted\");\n      }\n\n      let result: ExecResult;\n\n      if (options?.stream && options?.onOutput) {\n        // Streaming with callbacks - we need to collect the final result\n        result = await this.executeWithStreaming(\n          command,\n          options,\n          startTime,\n          timestamp\n        );\n      } else {\n        // Regular execution\n        const response = await this.client.execute(command, {\n          sessionId: options?.sessionId,\n          cwd: options?.cwd,\n          env: options?.env,\n        });\n\n        const duration = Date.now() - startTime;\n        result = this.mapExecuteResponseToExecResult(\n          response,\n          duration,\n          options?.sessionId\n        );\n      }\n\n      // Call completion callback if provided\n      if (options?.onComplete) {\n        options.onComplete(result);\n      }\n\n      return result;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n      throw error;\n    } finally {\n      if (timeoutId) {\n        clearTimeout(timeoutId);\n      }\n    }\n  }\n\n  private async executeWithStreaming(\n    command: string,\n    options: ExecOptions,\n    startTime: number,\n    timestamp: string\n  ): Promise<ExecResult> {\n    let stdout = \"\";\n    let stderr = \"\";\n\n    try {\n      const stream = await this.client.executeCommandStream(\n        command,\n        options.sessionId\n      );\n\n      for await (const event of parseSSEStream<ExecEvent>(stream)) {\n        // Check for cancellation\n        if (options.signal?.aborted) {\n          throw new Error(\"Operation was aborted\");\n        }\n\n        switch (event.type) {\n          case \"stdout\":\n          case \"stderr\":\n            if (event.data) {\n              // Update accumulated output\n              if (event.type === \"stdout\") stdout += event.data;\n              if (event.type === \"stderr\") stderr += event.data;\n\n              // Call user's callback\n              if (options.onOutput) {\n                options.onOutput(event.type, event.data);\n              }\n            }\n            break;\n\n          case \"complete\": {\n            // Use result from complete event if available\n            const duration = Date.now() - startTime;\n            return (\n              event.result || {\n                success: event.exitCode === 0,\n                exitCode: event.exitCode || 0,\n                stdout,\n                stderr,\n                command,\n                duration,\n                timestamp,\n                sessionId: options.sessionId,\n              }\n            );\n          }\n\n          case \"error\":\n            throw new Error(event.error || \"Command execution failed\");\n        }\n      }\n\n      // If we get here without a complete event, something went wrong\n      throw new Error(\"Stream ended without completion event\");\n    } catch (error) {\n      if (options.signal?.aborted) {\n        throw new Error(\"Operation was aborted\");\n      }\n      throw error;\n    }\n  }\n\n  private mapExecuteResponseToExecResult(\n    response: ExecuteResponse,\n    duration: number,\n    sessionId?: string\n  ): ExecResult {\n    return {\n      success: response.success,\n      exitCode: response.exitCode,\n      stdout: response.stdout,\n      stderr: response.stderr,\n      command: response.command,\n      duration,\n      timestamp: response.timestamp,\n      sessionId,\n    };\n  }\n\n  // Background process management\n  async startProcess(\n    command: string,\n    options?: ProcessOptions\n  ): Promise<Process> {\n    // Use the new HttpClient method to start the process\n    try {\n      const response = await this.client.startProcess(command, {\n        processId: options?.processId,\n        sessionId: options?.sessionId,\n        timeout: options?.timeout,\n        env: options?.env,\n        cwd: options?.cwd,\n        encoding: options?.encoding,\n        autoCleanup: options?.autoCleanup,\n      });\n\n      const process = response.process;\n      const processObj: Process = {\n        id: process.id,\n        pid: process.pid,\n        command: process.command,\n        status: process.status as ProcessStatus,\n        startTime: new Date(process.startTime),\n        endTime: undefined,\n        exitCode: undefined,\n        sessionId: process.sessionId,\n\n        async kill(): Promise<void> {\n          throw new Error(\"Method will be replaced\");\n        },\n        async getStatus(): Promise<ProcessStatus> {\n          throw new Error(\"Method will be replaced\");\n        },\n        async getLogs(): Promise<{ stdout: string; stderr: string }> {\n          throw new Error(\"Method will be replaced\");\n        },\n      };\n\n      // Bind context properly\n      processObj.kill = async (signal?: string) => {\n        await this.killProcess(process.id, signal);\n      };\n\n      processObj.getStatus = async () => {\n        const current = await this.getProcess(process.id);\n        return current?.status || \"error\";\n      };\n\n      processObj.getLogs = async () => {\n        const logs = await this.getProcessLogs(process.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      };\n\n      // Call onStart callback if provided\n      if (options?.onStart) {\n        options.onStart(processObj);\n      }\n\n      return processObj;\n    } catch (error) {\n      if (options?.onError && error instanceof Error) {\n        options.onError(error);\n      }\n\n      throw error;\n    }\n  }\n\n  async listProcesses(): Promise<Process[]> {\n    const response = await this.client.listProcesses();\n\n    return response.processes.map((processData) => ({\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || \"error\";\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      },\n    }));\n  }\n\n  async getProcess(id: string): Promise<Process | null> {\n    const response = await this.client.getProcess(id);\n    if (!response.process) {\n      return null;\n    }\n\n    const processData = response.process;\n    return {\n      id: processData.id,\n      pid: processData.pid,\n      command: processData.command,\n      status: processData.status,\n      startTime: new Date(processData.startTime),\n      endTime: processData.endTime ? new Date(processData.endTime) : undefined,\n      exitCode: processData.exitCode,\n      sessionId: processData.sessionId,\n\n      kill: async (signal?: string) => {\n        await this.killProcess(processData.id, signal);\n      },\n\n      getStatus: async () => {\n        const current = await this.getProcess(processData.id);\n        return current?.status || \"error\";\n      },\n\n      getLogs: async () => {\n        const logs = await this.getProcessLogs(processData.id);\n        return { stdout: logs.stdout, stderr: logs.stderr };\n      },\n    };\n  }\n\n  async killProcess(id: string, _signal?: string): Promise<void> {\n    try {\n      // Note: signal parameter is not currently supported by the HttpClient implementation\n      await this.client.killProcess(id);\n    } catch (error) {\n      if (\n        error instanceof Error &&\n        error.message.includes(\"Process not found\")\n      ) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw new SandboxError(\n        `Failed to kill process ${id}: ${\n          error instanceof Error ? error.message : \"Unknown error\"\n        }`,\n        \"KILL_PROCESS_FAILED\"\n      );\n    }\n  }\n\n  async killAllProcesses(): Promise<number> {\n    const response = await this.client.killAllProcesses();\n    return response.killedCount;\n  }\n\n  async cleanupCompletedProcesses(): Promise<number> {\n    // For now, this would need to be implemented as a container endpoint\n    // as we no longer maintain local process storage\n    // We'll return 0 as a placeholder until the container endpoint is added\n    return 0;\n  }\n\n  async getProcessLogs(\n    id: string\n  ): Promise<{ stdout: string; stderr: string }> {\n    try {\n      const response = await this.client.getProcessLogs(id);\n      return {\n        stdout: response.stdout,\n        stderr: response.stderr,\n      };\n    } catch (error) {\n      if (\n        error instanceof Error &&\n        error.message.includes(\"Process not found\")\n      ) {\n        throw new ProcessNotFoundError(id);\n      }\n      throw error;\n    }\n  }\n\n  // Streaming methods - return ReadableStream for RPC compatibility\n  async execStream(\n    command: string,\n    options?: StreamOptions\n  ): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error(\"Operation was aborted\");\n    }\n\n    // Get the stream from HttpClient (need to add this method)\n    const stream = await this.client.executeCommandStream(\n      command,\n      options?.sessionId\n    );\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async streamProcessLogs(\n    processId: string,\n    options?: { signal?: AbortSignal }\n  ): Promise<ReadableStream<Uint8Array>> {\n    // Check for cancellation\n    if (options?.signal?.aborted) {\n      throw new Error(\"Operation was aborted\");\n    }\n\n    // Get the stream from HttpClient\n    const stream = await this.client.streamProcessLogs(processId);\n\n    // Return the ReadableStream directly - can be converted to AsyncIterable by consumers\n    return stream;\n  }\n\n  async gitCheckout(\n    repoUrl: string,\n    options: { branch?: string; targetDir?: string }\n  ) {\n    return this.client.gitCheckout(repoUrl, options.branch, options.targetDir);\n  }\n\n  async mkdir(path: string, options: { recursive?: boolean } = {}) {\n    return this.client.mkdir(path, options.recursive);\n  }\n\n  async writeFile(\n    path: string,\n    content: string,\n    options: { encoding?: string } = {}\n  ) {\n    return this.client.writeFile(path, content, options.encoding);\n  }\n\n  async deleteFile(path: string) {\n    return this.client.deleteFile(path);\n  }\n\n  async renameFile(oldPath: string, newPath: string) {\n    return this.client.renameFile(oldPath, newPath);\n  }\n\n  async moveFile(sourcePath: string, destinationPath: string) {\n    return this.client.moveFile(sourcePath, destinationPath);\n  }\n\n  async readFile(path: string, options: { encoding?: string } = {}) {\n    return this.client.readFile(path, options.encoding);\n  }\n\n  async listFiles(\n    path: string,\n    options: {\n      recursive?: boolean;\n      includeHidden?: boolean;\n    } = {}\n  ) {\n    return this.client.listFiles(path, options);\n  }\n\n  async exposePort(port: number, options: { name?: string; hostname: string }) {\n    await this.client.exposePort(port, options?.name);\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error(\n        \"Sandbox name not available. Ensure sandbox is accessed through getSandbox()\"\n      );\n    }\n\n    const url = this.constructPreviewUrl(\n      port,\n      this.sandboxName,\n      options.hostname\n    );\n\n    return {\n      url,\n      port,\n      name: options?.name,\n    };\n  }\n\n  async unexposePort(port: number) {\n    if (!validatePort(port)) {\n      logSecurityEvent(\n        \"INVALID_PORT_UNEXPOSE\",\n        {\n          port,\n        },\n        \"high\"\n      );\n      throw new SecurityError(\n        `Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`\n      );\n    }\n\n    await this.client.unexposePort(port);\n\n    logSecurityEvent(\n      \"PORT_UNEXPOSED\",\n      {\n        port,\n      },\n      \"low\"\n    );\n  }\n\n  async getExposedPorts(hostname: string) {\n    const response = await this.client.getExposedPorts();\n\n    // We need the sandbox name to construct preview URLs\n    if (!this.sandboxName) {\n      throw new Error(\n        \"Sandbox name not available. Ensure sandbox is accessed through getSandbox()\"\n      );\n    }\n\n    return response.ports.map((port) => ({\n      url: this.constructPreviewUrl(port.port, this.sandboxName!, hostname),\n      port: port.port,\n      name: port.name,\n      exposedAt: port.exposedAt,\n    }));\n  }\n\n  private constructPreviewUrl(\n    port: number,\n    sandboxId: string,\n    hostname: string\n  ): string {\n    if (!validatePort(port)) {\n      logSecurityEvent(\n        \"INVALID_PORT_REJECTED\",\n        {\n          port,\n          sandboxId,\n          hostname,\n        },\n        \"high\"\n      );\n      throw new SecurityError(\n        `Invalid port number: ${port}. Must be between 1024-65535 and not reserved.`\n      );\n    }\n\n    let sanitizedSandboxId: string;\n    try {\n      sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n    } catch (error) {\n      logSecurityEvent(\n        \"INVALID_SANDBOX_ID_REJECTED\",\n        {\n          sandboxId,\n          port,\n          hostname,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        },\n        \"high\"\n      );\n      throw error;\n    }\n\n    const isLocalhost = isLocalhostPattern(hostname);\n\n    if (isLocalhost) {\n      // Unified subdomain approach for localhost (RFC 6761)\n      const [host, portStr] = hostname.split(\":\");\n      const mainPort = portStr || \"80\";\n\n      // Use URL constructor for safe URL building\n      try {\n        const baseUrl = new URL(`http://${host}:${mainPort}`);\n        // Construct subdomain safely\n        const subdomainHost = `${port}-${sanitizedSandboxId}.${host}`;\n        baseUrl.hostname = subdomainHost;\n\n        const finalUrl = baseUrl.toString();\n\n        logSecurityEvent(\n          \"PREVIEW_URL_CONSTRUCTED\",\n          {\n            port,\n            sandboxId: sanitizedSandboxId,\n            hostname,\n            resultUrl: finalUrl,\n            environment: \"localhost\",\n          },\n          \"low\"\n        );\n\n        return finalUrl;\n      } catch (error) {\n        logSecurityEvent(\n          \"URL_CONSTRUCTION_FAILED\",\n          {\n            port,\n            sandboxId: sanitizedSandboxId,\n            hostname,\n            error: error instanceof Error ? error.message : \"Unknown error\",\n          },\n          \"high\"\n        );\n        throw new SecurityError(\n          `Failed to construct preview URL: ${\n            error instanceof Error ? error.message : \"Unknown error\"\n          }`\n        );\n      }\n    }\n\n    // Production subdomain logic - enforce HTTPS\n    try {\n      // Always use HTTPS for production (non-localhost)\n      const protocol = \"https\";\n      const baseUrl = new URL(`${protocol}://${hostname}`);\n\n      // Construct subdomain safely\n      const subdomainHost = `${port}-${sanitizedSandboxId}.${hostname}`;\n      baseUrl.hostname = subdomainHost;\n\n      const finalUrl = baseUrl.toString();\n\n      logSecurityEvent(\n        \"PREVIEW_URL_CONSTRUCTED\",\n        {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          resultUrl: finalUrl,\n          environment: \"production\",\n        },\n        \"low\"\n      );\n\n      return finalUrl;\n    } catch (error) {\n      logSecurityEvent(\n        \"URL_CONSTRUCTION_FAILED\",\n        {\n          port,\n          sandboxId: sanitizedSandboxId,\n          hostname,\n          error: error instanceof Error ? error.message : \"Unknown error\",\n        },\n        \"high\"\n      );\n      throw new SecurityError(\n        `Failed to construct preview URL: ${\n          error instanceof Error ? error.message : \"Unknown error\"\n        }`\n      );\n    }\n  }\n\n  // Code Interpreter Methods\n\n  /**\n   * Create a new code execution context\n   */\n  async createCodeContext(\n    options?: CreateContextOptions\n  ): Promise<CodeContext> {\n    return this.codeInterpreter.createCodeContext(options);\n  }\n\n  /**\n   * Run code with streaming callbacks\n   */\n  async runCode(\n    code: string,\n    options?: RunCodeOptions\n  ): Promise<ExecutionResult> {\n    const execution = await this.codeInterpreter.runCode(code, options);\n    // Convert to plain object for RPC serialization\n    return execution.toJSON();\n  }\n\n  /**\n   * Run code and return a streaming response\n   */\n  async runCodeStream(\n    code: string,\n    options?: RunCodeOptions\n  ): Promise<ReadableStream> {\n    return this.codeInterpreter.runCodeStream(code, options);\n  }\n\n  /**\n   * List all code contexts\n   */\n  async listCodeContexts(): Promise<CodeContext[]> {\n    return this.codeInterpreter.listCodeContexts();\n  }\n\n  /**\n   * Delete a code context\n   */\n  async deleteCodeContext(contextId: string): Promise<void> {\n    return this.codeInterpreter.deleteCodeContext(contextId);\n  }\n}\n","import { getSandbox, type Sandbox } from \"./sandbox\";\nimport {\n  logSecurityEvent,\n  sanitizeSandboxId,\n  validatePort\n} from \"./security\";\n\nexport interface SandboxEnv {\n  Sandbox: DurableObjectNamespace<Sandbox>;\n}\n\nexport interface RouteInfo {\n  port: number;\n  sandboxId: string;\n  path: string;\n}\n\nexport async function proxyToSandbox<E extends SandboxEnv>(\n  request: Request,\n  env: E\n): Promise<Response | null> {\n  try {\n    const url = new URL(request.url);\n    const routeInfo = extractSandboxRoute(url);\n\n    if (!routeInfo) {\n      return null; // Not a request to an exposed container port\n    }\n\n    const { sandboxId, port, path } = routeInfo;\n    const sandbox = getSandbox(env.Sandbox, sandboxId);\n\n    // Build proxy request with proper headers\n    let proxyUrl: string;\n\n    // Route based on the target port\n    if (port !== 3000) {\n      // Route directly to user's service on the specified port\n      proxyUrl = `http://localhost:${port}${path}${url.search}`;\n    } else {\n      // Port 3000 is our control plane - route normally\n      proxyUrl = `http://localhost:3000${path}${url.search}`;\n    }\n\n    const proxyRequest = new Request(proxyUrl, {\n      method: request.method,\n      headers: {\n        ...Object.fromEntries(request.headers),\n        'X-Original-URL': request.url,\n        'X-Forwarded-Host': url.hostname,\n        'X-Forwarded-Proto': url.protocol.replace(':', ''),\n        'X-Sandbox-Name': sandboxId, // Pass the friendly name\n      },\n      body: request.body,\n    });\n\n    return sandbox.containerFetch(proxyRequest, port);\n  } catch (error) {\n    console.error('[Sandbox] Proxy routing error:', error);\n    return new Response('Proxy routing error', { status: 500 });\n  }\n}\n\nfunction extractSandboxRoute(url: URL): RouteInfo | null {\n  // Parse subdomain pattern: port-sandboxId.domain\n  const subdomainMatch = url.hostname.match(/^(\\d{4,5})-([^.-][^.]*[^.-]|[^.-])\\.(.+)$/);\n\n  if (!subdomainMatch) {\n    // Log malformed subdomain attempts\n    if (url.hostname.includes('-') && url.hostname.includes('.')) {\n      logSecurityEvent('MALFORMED_SUBDOMAIN_ATTEMPT', {\n        hostname: url.hostname,\n        url: url.toString()\n      }, 'medium');\n    }\n    return null;\n  }\n\n  const portStr = subdomainMatch[1];\n  const sandboxId = subdomainMatch[2];\n  const domain = subdomainMatch[3];\n\n  const port = parseInt(portStr, 10);\n  if (!validatePort(port)) {\n    logSecurityEvent('INVALID_PORT_IN_SUBDOMAIN', {\n      port,\n      portStr,\n      sandboxId,\n      hostname: url.hostname,\n      url: url.toString()\n    }, 'high');\n    return null;\n  }\n\n  let sanitizedSandboxId: string;\n  try {\n    sanitizedSandboxId = sanitizeSandboxId(sandboxId);\n  } catch (error) {\n    logSecurityEvent('INVALID_SANDBOX_ID_IN_SUBDOMAIN', {\n      sandboxId,\n      port,\n      hostname: url.hostname,\n      url: url.toString(),\n      error: error instanceof Error ? error.message : 'Unknown error'\n    }, 'high');\n    return null;\n  }\n\n  // DNS subdomain length limit is 63 characters\n  if (sandboxId.length > 63) {\n    logSecurityEvent('SANDBOX_ID_LENGTH_VIOLATION', {\n      sandboxId,\n      length: sandboxId.length,\n      port,\n      hostname: url.hostname\n    }, 'medium');\n    return null;\n  }\n\n  logSecurityEvent('SANDBOX_ROUTE_EXTRACTED', {\n    port,\n    sandboxId: sanitizedSandboxId,\n    domain,\n    path: url.pathname || \"/\",\n    hostname: url.hostname\n  }, 'low');\n\n  return {\n    port,\n    sandboxId: sanitizedSandboxId,\n    path: url.pathname || \"/\",\n  };\n}\n\nexport function isLocalhostPattern(hostname: string): boolean {\n  const hostPart = hostname.split(\":\")[0];\n  return (\n    hostPart === \"localhost\" ||\n    hostPart === \"127.0.0.1\" ||\n    hostPart === \"::1\" ||\n    hostPart === \"[::1]\" ||\n    hostPart === \"0.0.0.0\"\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,WAAW,oBAAoB;;;ACiBxC,eAAsB,eACpB,SACA,KAC0B;AAC1B,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAC/B,UAAM,YAAY,oBAAoB,GAAG;AAEzC,QAAI,CAAC,WAAW;AACd,aAAO;AAAA,IACT;AAEA,UAAM,EAAE,WAAW,MAAM,KAAK,IAAI;AAClC,UAAM,UAAU,WAAW,IAAI,SAAS,SAAS;AAGjD,QAAI;AAGJ,QAAI,SAAS,KAAM;AAEjB,iBAAW,oBAAoB,IAAI,GAAG,IAAI,GAAG,IAAI,MAAM;AAAA,IACzD,OAAO;AAEL,iBAAW,wBAAwB,IAAI,GAAG,IAAI,MAAM;AAAA,IACtD;AAEA,UAAM,eAAe,IAAI,QAAQ,UAAU;AAAA,MACzC,QAAQ,QAAQ;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,YAAY,QAAQ,OAAO;AAAA,QACrC,kBAAkB,QAAQ;AAAA,QAC1B,oBAAoB,IAAI;AAAA,QACxB,qBAAqB,IAAI,SAAS,QAAQ,KAAK,EAAE;AAAA,QACjD,kBAAkB;AAAA;AAAA,MACpB;AAAA,MACA,MAAM,QAAQ;AAAA,IAChB,CAAC;AAED,WAAO,QAAQ,eAAe,cAAc,IAAI;AAAA,EAClD,SAAS,OAAO;AACd,YAAQ,MAAM,kCAAkC,KAAK;AACrD,WAAO,IAAI,SAAS,uBAAuB,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC5D;AACF;AAEA,SAAS,oBAAoB,KAA4B;AAEvD,QAAM,iBAAiB,IAAI,SAAS,MAAM,2CAA2C;AAErF,MAAI,CAAC,gBAAgB;AAEnB,QAAI,IAAI,SAAS,SAAS,GAAG,KAAK,IAAI,SAAS,SAAS,GAAG,GAAG;AAC5D,uBAAiB,+BAA+B;AAAA,QAC9C,UAAU,IAAI;AAAA,QACd,KAAK,IAAI,SAAS;AAAA,MACpB,GAAG,QAAQ;AAAA,IACb;AACA,WAAO;AAAA,EACT;AAEA,QAAM,UAAU,eAAe,CAAC;AAChC,QAAM,YAAY,eAAe,CAAC;AAClC,QAAM,SAAS,eAAe,CAAC;AAE/B,QAAM,OAAO,SAAS,SAAS,EAAE;AACjC,MAAI,CAAC,aAAa,IAAI,GAAG;AACvB,qBAAiB,6BAA6B;AAAA,MAC5C;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,IACpB,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAEA,MAAI;AACJ,MAAI;AACF,yBAAqB,kBAAkB,SAAS;AAAA,EAClD,SAAS,OAAO;AACd,qBAAiB,mCAAmC;AAAA,MAClD;AAAA,MACA;AAAA,MACA,UAAU,IAAI;AAAA,MACd,KAAK,IAAI,SAAS;AAAA,MAClB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,IAClD,GAAG,MAAM;AACT,WAAO;AAAA,EACT;AAGA,MAAI,UAAU,SAAS,IAAI;AACzB,qBAAiB,+BAA+B;AAAA,MAC9C;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB;AAAA,MACA,UAAU,IAAI;AAAA,IAChB,GAAG,QAAQ;AACX,WAAO;AAAA,EACT;AAEA,mBAAiB,2BAA2B;AAAA,IAC1C;AAAA,IACA,WAAW;AAAA,IACX;AAAA,IACA,MAAM,IAAI,YAAY;AAAA,IACtB,UAAU,IAAI;AAAA,EAChB,GAAG,KAAK;AAER,SAAO;AAAA,IACL;AAAA,IACA,WAAW;AAAA,IACX,MAAM,IAAI,YAAY;AAAA,EACxB;AACF;AAEO,SAAS,mBAAmB,UAA2B;AAC5D,QAAM,WAAW,SAAS,MAAM,GAAG,EAAE,CAAC;AACtC,SACE,aAAa,eACb,aAAa,eACb,aAAa,SACb,aAAa,WACb,aAAa;AAEjB;;;ADjHO,SAAS,WAAW,IAAqC,IAAY;AAC1E,QAAM,OAAO,aAAa,IAAI,EAAE;AAGhC,OAAK,iBAAiB,EAAE;AAExB,SAAO;AACT;AAEO,IAAM,UAAN,cAAqC,UAAmC;AAAA,EAC7E,cAAc;AAAA;AAAA,EACd,aAAa;AAAA;AAAA,EACb;AAAA,EACQ,cAA6B;AAAA,EAC7B;AAAA,EAER,YAAY,KAAyB,KAAU;AAC7C,UAAM,KAAK,GAAG;AACd,SAAK,SAAS,IAAI,cAAc;AAAA,MAC9B,mBAAmB,CAAC,SAAS,UAAU,SAAS,SAAS,YAAY;AACnE,gBAAQ;AAAA,UACN,kCAAkC,OAAO,cAAc,OAAO,gBAAgB,QAAQ;AAAA,QACxF;AAAA,MACF;AAAA,MACA,gBAAgB,CAAC,YAAY;AAC3B,gBAAQ,IAAI,gCAAgC,OAAO,EAAE;AAAA,MACvD;AAAA,MACA,SAAS,CAAC,OAAO,aAAa;AAC5B,gBAAQ,MAAM,8BAA8B,KAAK,EAAE;AAAA,MACrD;AAAA,MACA,UAAU,CAAC,QAAQ,MAAM,aAAa;AACpC,gBAAQ,IAAI,gBAAgB,MAAM,KAAK,IAAI,EAAE;AAAA,MAC/C;AAAA,MACA,MAAM;AAAA;AAAA,MACN,MAAM;AAAA,IACR,CAAC;AAGD,SAAK,kBAAkB,IAAI,gBAAgB,IAAI;AAG/C,SAAK,IAAI,sBAAsB,YAAY;AACzC,WAAK,cACF,MAAM,KAAK,IAAI,QAAQ,IAAY,aAAa,KAAM;AAAA,IAC3D,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,MAAM,eAAe,MAA6B;AAChD,QAAI,CAAC,KAAK,aAAa;AACrB,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,0CAA0C,IAAI,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WAAW,SAAgD;AAC/D,SAAK,UAAU,EAAE,GAAG,KAAK,SAAS,GAAG,QAAQ;AAC7C,YAAQ,IAAI,yCAAyC;AAAA,EACvD;AAAA,EAES,UAAU;AACjB,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AAAA,EAES,SAAS;AAChB,YAAQ,IAAI,gCAAgC;AAC5C,QAAI,KAAK,QAAQ;AACf,WAAK,OAAO,aAAa;AAAA,IAC3B;AAAA,EACF;AAAA,EAES,QAAQ,OAAgB;AAC/B,YAAQ,IAAI,kBAAkB,KAAK;AAAA,EACrC;AAAA;AAAA,EAGA,MAAe,MAAM,SAAqC;AACxD,UAAM,MAAM,IAAI,IAAI,QAAQ,GAAG;AAG/B,QAAI,CAAC,KAAK,eAAe,QAAQ,QAAQ,IAAI,gBAAgB,GAAG;AAC9D,YAAM,OAAO,QAAQ,QAAQ,IAAI,gBAAgB;AACjD,WAAK,cAAc;AACnB,YAAM,KAAK,IAAI,QAAQ,IAAI,eAAe,IAAI;AAC9C,cAAQ,IAAI,kCAAkC,KAAK,WAAW,EAAE;AAAA,IAClE;AAGA,UAAM,OAAO,KAAK,cAAc,GAAG;AAGnC,WAAO,MAAM,KAAK,eAAe,SAAS,IAAI;AAAA,EAChD;AAAA,EAEQ,cAAc,KAAkB;AAEtC,UAAM,aAAa,IAAI,SAAS,MAAM,iBAAiB;AACvD,QAAI,YAAY;AACd,aAAO,SAAS,WAAW,CAAC,CAAC;AAAA,IAC/B;AAIA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA,EAIA,MAAM,KAAK,SAAiB,SAA4C;AACtE,UAAM,YAAY,KAAK,IAAI;AAC3B,UAAM,aAAY,oBAAI,KAAK,GAAE,YAAY;AAGzC,QAAI;AAEJ,QAAI;AAEF,UAAI,SAAS,QAAQ,SAAS;AAC5B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AAEA,UAAI;AAEJ,UAAI,SAAS,UAAU,SAAS,UAAU;AAExC,iBAAS,MAAM,KAAK;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF,OAAO;AAEL,cAAM,WAAW,MAAM,KAAK,OAAO,QAAQ,SAAS;AAAA,UAClD,WAAW,SAAS;AAAA,UACpB,KAAK,SAAS;AAAA,UACd,KAAK,SAAS;AAAA,QAChB,CAAC;AAED,cAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,iBAAS,KAAK;AAAA,UACZ;AAAA,UACA;AAAA,UACA,SAAS;AAAA,QACX;AAAA,MACF;AAGA,UAAI,SAAS,YAAY;AACvB,gBAAQ,WAAW,MAAM;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AACA,YAAM;AAAA,IACR,UAAE;AACA,UAAI,WAAW;AACb,qBAAa,SAAS;AAAA,MACxB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAc,qBACZ,SACA,SACA,WACA,WACqB;AACrB,QAAI,SAAS;AACb,QAAI,SAAS;AAEb,QAAI;AACF,YAAM,SAAS,MAAM,KAAK,OAAO;AAAA,QAC/B;AAAA,QACA,QAAQ;AAAA,MACV;AAEA,uBAAiB,SAAS,eAA0B,MAAM,GAAG;AAE3D,YAAI,QAAQ,QAAQ,SAAS;AAC3B,gBAAM,IAAI,MAAM,uBAAuB;AAAA,QACzC;AAEA,gBAAQ,MAAM,MAAM;AAAA,UAClB,KAAK;AAAA,UACL,KAAK;AACH,gBAAI,MAAM,MAAM;AAEd,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAC7C,kBAAI,MAAM,SAAS,SAAU,WAAU,MAAM;AAG7C,kBAAI,QAAQ,UAAU;AACpB,wBAAQ,SAAS,MAAM,MAAM,MAAM,IAAI;AAAA,cACzC;AAAA,YACF;AACA;AAAA,UAEF,KAAK,YAAY;AAEf,kBAAM,WAAW,KAAK,IAAI,IAAI;AAC9B,mBACE,MAAM,UAAU;AAAA,cACd,SAAS,MAAM,aAAa;AAAA,cAC5B,UAAU,MAAM,YAAY;AAAA,cAC5B;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA;AAAA,cACA,WAAW,QAAQ;AAAA,YACrB;AAAA,UAEJ;AAAA,UAEA,KAAK;AACH,kBAAM,IAAI,MAAM,MAAM,SAAS,0BAA0B;AAAA,QAC7D;AAAA,MACF;AAGA,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD,SAAS,OAAO;AACd,UAAI,QAAQ,QAAQ,SAAS;AAC3B,cAAM,IAAI,MAAM,uBAAuB;AAAA,MACzC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEQ,+BACN,UACA,UACA,WACY;AACZ,WAAO;AAAA,MACL,SAAS,SAAS;AAAA,MAClB,UAAU,SAAS;AAAA,MACnB,QAAQ,SAAS;AAAA,MACjB,QAAQ,SAAS;AAAA,MACjB,SAAS,SAAS;AAAA,MAClB;AAAA,MACA,WAAW,SAAS;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,aACJ,SACA,SACkB;AAElB,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,aAAa,SAAS;AAAA,QACvD,WAAW,SAAS;AAAA,QACpB,WAAW,SAAS;AAAA,QACpB,SAAS,SAAS;AAAA,QAClB,KAAK,SAAS;AAAA,QACd,KAAK,SAAS;AAAA,QACd,UAAU,SAAS;AAAA,QACnB,aAAa,SAAS;AAAA,MACxB,CAAC;AAED,YAAM,UAAU,SAAS;AACzB,YAAM,aAAsB;AAAA,QAC1B,IAAI,QAAQ;AAAA,QACZ,KAAK,QAAQ;AAAA,QACb,SAAS,QAAQ;AAAA,QACjB,QAAQ,QAAQ;AAAA,QAChB,WAAW,IAAI,KAAK,QAAQ,SAAS;AAAA,QACrC,SAAS;AAAA,QACT,UAAU;AAAA,QACV,WAAW,QAAQ;AAAA,QAEnB,MAAM,OAAsB;AAC1B,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,YAAoC;AACxC,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,QACA,MAAM,UAAuD;AAC3D,gBAAM,IAAI,MAAM,yBAAyB;AAAA,QAC3C;AAAA,MACF;AAGA,iBAAW,OAAO,OAAO,WAAoB;AAC3C,cAAM,KAAK,YAAY,QAAQ,IAAI,MAAM;AAAA,MAC3C;AAEA,iBAAW,YAAY,YAAY;AACjC,cAAM,UAAU,MAAM,KAAK,WAAW,QAAQ,EAAE;AAChD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAEA,iBAAW,UAAU,YAAY;AAC/B,cAAM,OAAO,MAAM,KAAK,eAAe,QAAQ,EAAE;AACjD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAGA,UAAI,SAAS,SAAS;AACpB,gBAAQ,QAAQ,UAAU;AAAA,MAC5B;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd,UAAI,SAAS,WAAW,iBAAiB,OAAO;AAC9C,gBAAQ,QAAQ,KAAK;AAAA,MACvB;AAEA,YAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAM,gBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,cAAc;AAEjD,WAAO,SAAS,UAAU,IAAI,CAAC,iBAAiB;AAAA,MAC9C,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF,EAAE;AAAA,EACJ;AAAA,EAEA,MAAM,WAAW,IAAqC;AACpD,UAAM,WAAW,MAAM,KAAK,OAAO,WAAW,EAAE;AAChD,QAAI,CAAC,SAAS,SAAS;AACrB,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,SAAS;AAC7B,WAAO;AAAA,MACL,IAAI,YAAY;AAAA,MAChB,KAAK,YAAY;AAAA,MACjB,SAAS,YAAY;AAAA,MACrB,QAAQ,YAAY;AAAA,MACpB,WAAW,IAAI,KAAK,YAAY,SAAS;AAAA,MACzC,SAAS,YAAY,UAAU,IAAI,KAAK,YAAY,OAAO,IAAI;AAAA,MAC/D,UAAU,YAAY;AAAA,MACtB,WAAW,YAAY;AAAA,MAEvB,MAAM,OAAO,WAAoB;AAC/B,cAAM,KAAK,YAAY,YAAY,IAAI,MAAM;AAAA,MAC/C;AAAA,MAEA,WAAW,YAAY;AACrB,cAAM,UAAU,MAAM,KAAK,WAAW,YAAY,EAAE;AACpD,eAAO,SAAS,UAAU;AAAA,MAC5B;AAAA,MAEA,SAAS,YAAY;AACnB,cAAM,OAAO,MAAM,KAAK,eAAe,YAAY,EAAE;AACrD,eAAO,EAAE,QAAQ,KAAK,QAAQ,QAAQ,KAAK,OAAO;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,IAAY,SAAiC;AAC7D,QAAI;AAEF,YAAM,KAAK,OAAO,YAAY,EAAE;AAAA,IAClC,SAAS,OAAO;AACd,UACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,mBAAmB,GAC1C;AACA,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM,IAAI;AAAA,QACR,0BAA0B,EAAE,KAC1B,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAoC;AACxC,UAAM,WAAW,MAAM,KAAK,OAAO,iBAAiB;AACpD,WAAO,SAAS;AAAA,EAClB;AAAA,EAEA,MAAM,4BAA6C;AAIjD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,eACJ,IAC6C;AAC7C,QAAI;AACF,YAAM,WAAW,MAAM,KAAK,OAAO,eAAe,EAAE;AACpD,aAAO;AAAA,QACL,QAAQ,SAAS;AAAA,QACjB,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF,SAAS,OAAO;AACd,UACE,iBAAiB,SACjB,MAAM,QAAQ,SAAS,mBAAmB,GAC1C;AACA,cAAM,IAAI,qBAAqB,EAAE;AAAA,MACnC;AACA,YAAM;AAAA,IACR;AAAA,EACF;AAAA;AAAA,EAGA,MAAM,WACJ,SACA,SACqC;AAErC,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO;AAAA,MAC/B;AAAA,MACA,SAAS;AAAA,IACX;AAGA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,kBACJ,WACA,SACqC;AAErC,QAAI,SAAS,QAAQ,SAAS;AAC5B,YAAM,IAAI,MAAM,uBAAuB;AAAA,IACzC;AAGA,UAAM,SAAS,MAAM,KAAK,OAAO,kBAAkB,SAAS;AAG5D,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YACJ,SACA,SACA;AACA,WAAO,KAAK,OAAO,YAAY,SAAS,QAAQ,QAAQ,QAAQ,SAAS;AAAA,EAC3E;AAAA,EAEA,MAAM,MAAM,MAAc,UAAmC,CAAC,GAAG;AAC/D,WAAO,KAAK,OAAO,MAAM,MAAM,QAAQ,SAAS;AAAA,EAClD;AAAA,EAEA,MAAM,UACJ,MACA,SACA,UAAiC,CAAC,GAClC;AACA,WAAO,KAAK,OAAO,UAAU,MAAM,SAAS,QAAQ,QAAQ;AAAA,EAC9D;AAAA,EAEA,MAAM,WAAW,MAAc;AAC7B,WAAO,KAAK,OAAO,WAAW,IAAI;AAAA,EACpC;AAAA,EAEA,MAAM,WAAW,SAAiB,SAAiB;AACjD,WAAO,KAAK,OAAO,WAAW,SAAS,OAAO;AAAA,EAChD;AAAA,EAEA,MAAM,SAAS,YAAoB,iBAAyB;AAC1D,WAAO,KAAK,OAAO,SAAS,YAAY,eAAe;AAAA,EACzD;AAAA,EAEA,MAAM,SAAS,MAAc,UAAiC,CAAC,GAAG;AAChE,WAAO,KAAK,OAAO,SAAS,MAAM,QAAQ,QAAQ;AAAA,EACpD;AAAA,EAEA,MAAM,UACJ,MACA,UAGI,CAAC,GACL;AACA,WAAO,KAAK,OAAO,UAAU,MAAM,OAAO;AAAA,EAC5C;AAAA,EAEA,MAAM,WAAW,MAAc,SAA8C;AAC3E,UAAM,KAAK,OAAO,WAAW,MAAM,SAAS,IAAI;AAGhD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,MAAM,KAAK;AAAA,MACf;AAAA,MACA,KAAK;AAAA,MACL,QAAQ;AAAA,IACV;AAEA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA,MAAM,SAAS;AAAA,IACjB;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,MAAc;AAC/B,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wBAAwB,IAAI;AAAA,MAC9B;AAAA,IACF;AAEA,UAAM,KAAK,OAAO,aAAa,IAAI;AAEnC;AAAA,MACE;AAAA,MACA;AAAA,QACE;AAAA,MACF;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,gBAAgB,UAAkB;AACtC,UAAM,WAAW,MAAM,KAAK,OAAO,gBAAgB;AAGnD,QAAI,CAAC,KAAK,aAAa;AACrB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,WAAO,SAAS,MAAM,IAAI,CAAC,UAAU;AAAA,MACnC,KAAK,KAAK,oBAAoB,KAAK,MAAM,KAAK,aAAc,QAAQ;AAAA,MACpE,MAAM,KAAK;AAAA,MACX,MAAM,KAAK;AAAA,MACX,WAAW,KAAK;AAAA,IAClB,EAAE;AAAA,EACJ;AAAA,EAEQ,oBACN,MACA,WACA,UACQ;AACR,QAAI,CAAC,aAAa,IAAI,GAAG;AACvB;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wBAAwB,IAAI;AAAA,MAC9B;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,2BAAqB,kBAAkB,SAAS;AAAA,IAClD,SAAS,OAAO;AACd;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA;AAAA,UACA;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD;AAAA,QACA;AAAA,MACF;AACA,YAAM;AAAA,IACR;AAEA,UAAM,cAAc,mBAAmB,QAAQ;AAE/C,QAAI,aAAa;AAEf,YAAM,CAAC,MAAM,OAAO,IAAI,SAAS,MAAM,GAAG;AAC1C,YAAM,WAAW,WAAW;AAG5B,UAAI;AACF,cAAM,UAAU,IAAI,IAAI,UAAU,IAAI,IAAI,QAAQ,EAAE;AAEpD,cAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,IAAI;AAC3D,gBAAQ,WAAW;AAEnB,cAAM,WAAW,QAAQ,SAAS;AAElC;AAAA,UACE;AAAA,UACA;AAAA,YACE;AAAA,YACA,WAAW;AAAA,YACX;AAAA,YACA,WAAW;AAAA,YACX,aAAa;AAAA,UACf;AAAA,UACA;AAAA,QACF;AAEA,eAAO;AAAA,MACT,SAAS,OAAO;AACd;AAAA,UACE;AAAA,UACA;AAAA,YACE;AAAA,YACA,WAAW;AAAA,YACX;AAAA,YACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,UAClD;AAAA,UACA;AAAA,QACF;AACA,cAAM,IAAI;AAAA,UACR,oCACE,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAGA,QAAI;AAEF,YAAM,WAAW;AACjB,YAAM,UAAU,IAAI,IAAI,GAAG,QAAQ,MAAM,QAAQ,EAAE;AAGnD,YAAM,gBAAgB,GAAG,IAAI,IAAI,kBAAkB,IAAI,QAAQ;AAC/D,cAAQ,WAAW;AAEnB,YAAM,WAAW,QAAQ,SAAS;AAElC;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,WAAW;AAAA,UACX,aAAa;AAAA,QACf;AAAA,QACA;AAAA,MACF;AAEA,aAAO;AAAA,IACT,SAAS,OAAO;AACd;AAAA,QACE;AAAA,QACA;AAAA,UACE;AAAA,UACA,WAAW;AAAA,UACX;AAAA,UACA,OAAO,iBAAiB,QAAQ,MAAM,UAAU;AAAA,QAClD;AAAA,QACA;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,oCACE,iBAAiB,QAAQ,MAAM,UAAU,eAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,kBACJ,SACsB;AACtB,WAAO,KAAK,gBAAgB,kBAAkB,OAAO;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QACJ,MACA,SAC0B;AAC1B,UAAM,YAAY,MAAM,KAAK,gBAAgB,QAAQ,MAAM,OAAO;AAElE,WAAO,UAAU,OAAO;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,cACJ,MACA,SACyB;AACzB,WAAO,KAAK,gBAAgB,cAAc,MAAM,OAAO;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,mBAA2C;AAC/C,WAAO,KAAK,gBAAgB,iBAAiB;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,kBAAkB,WAAkC;AACxD,WAAO,KAAK,gBAAgB,kBAAkB,SAAS;AAAA,EACzD;AACF;","names":[]}

package/dist/{chunk-VTKZL632.js → chunk-HHUDRGPY.js}

@@ -1,6 +1,6 @@
 import {
   HttpClient
-} from "./chunk-CUHYLCMT.js";
+} from "./chunk-3CQ6THKA.js";
 import {
   isRetryableError,
   parseErrorResponse
@@ -234,4 +234,4 @@ var JupyterClient = class extends HttpClient {
 export {
   JupyterClient
 };
-//# sourceMappingURL=chunk-VTKZL632.js.map
+//# sourceMappingURL=chunk-HHUDRGPY.js.map

package/dist/{client-bzEV222a.d.ts → client-Ce40ujDF.d.ts}

@@ -1,6 +1,6 @@
+import { ISandbox, ExecOptions, ExecResult, ProcessOptions, Process, StreamOptions, GitCheckoutResponse, MkdirResponse, WriteFileResponse, DeleteFileResponse, RenameFileResponse, MoveFileResponse, ReadFileResponse, ListFilesResponse, BaseExecOptions, ExecuteResponse, StartProcessResponse, ListProcessesResponse, GetProcessResponse, GetProcessLogsResponse } from './types.js';
 import { Container } from '@cloudflare/containers';
 import { CreateContextOptions, CodeContext, OutputMessage, Result, ExecutionError, RunCodeOptions, ExecutionResult } from './interpreter-types.js';
-import { ISandbox, ExecOptions, ExecResult, ProcessOptions, Process, StreamOptions, BaseExecOptions, StartProcessResponse, ListProcessesResponse, GetProcessResponse, GetProcessLogsResponse } from './types.js';
 
 interface ExecutionCallbacks {
     onStdout?: (output: OutputMessage) => void | Promise<void>;
@@ -76,6 +76,10 @@ declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox
     readFile(path: string, options?: {
         encoding?: string;
     }): Promise<ReadFileResponse>;
+    listFiles(path: string, options?: {
+        recursive?: boolean;
+        includeHidden?: boolean;
+    }): Promise<ListFilesResponse>;
     exposePort(port: number, options: {
         name?: string;
         hostname: string;
@@ -114,66 +118,6 @@ declare class Sandbox<Env = unknown> extends Container<Env> implements ISandbox
     deleteCodeContext(contextId: string): Promise<void>;
 }
 
-interface ExecuteResponse {
-    success: boolean;
-    stdout: string;
-    stderr: string;
-    exitCode: number;
-    command: string;
-    timestamp: string;
-}
-interface GitCheckoutResponse {
-    success: boolean;
-    stdout: string;
-    stderr: string;
-    exitCode: number;
-    repoUrl: string;
-    branch: string;
-    targetDir: string;
-    timestamp: string;
-}
-interface MkdirResponse {
-    success: boolean;
-    stdout: string;
-    stderr: string;
-    exitCode: number;
-    path: string;
-    recursive: boolean;
-    timestamp: string;
-}
-interface WriteFileResponse {
-    success: boolean;
-    exitCode: number;
-    path: string;
-    timestamp: string;
-}
-interface ReadFileResponse {
-    success: boolean;
-    exitCode: number;
-    path: string;
-    content: string;
-    timestamp: string;
-}
-interface DeleteFileResponse {
-    success: boolean;
-    exitCode: number;
-    path: string;
-    timestamp: string;
-}
-interface RenameFileResponse {
-    success: boolean;
-    exitCode: number;
-    oldPath: string;
-    newPath: string;
-    timestamp: string;
-}
-interface MoveFileResponse {
-    success: boolean;
-    exitCode: number;
-    sourcePath: string;
-    destinationPath: string;
-    timestamp: string;
-}
 interface PreviewInfo {
     url: string;
     port: number;
@@ -224,6 +168,10 @@ declare class HttpClient {
     deleteFile(path: string, sessionId?: string): Promise<DeleteFileResponse>;
     renameFile(oldPath: string, newPath: string, sessionId?: string): Promise<RenameFileResponse>;
     moveFile(sourcePath: string, destinationPath: string, sessionId?: string): Promise<MoveFileResponse>;
+    listFiles(path: string, options?: {
+        recursive?: boolean;
+        includeHidden?: boolean;
+    }, sessionId?: string): Promise<ListFilesResponse>;
     exposePort(port: number, name?: string): Promise<ExposePortResponse>;
     unexposePort(port: number): Promise<UnexposePortResponse>;
     getExposedPorts(): Promise<GetExposedPortsResponse>;
@@ -256,4 +204,4 @@ declare class HttpClient {
     streamProcessLogs(processId: string): Promise<ReadableStream<Uint8Array>>;
 }
 
-export { type DeleteFileResponse as D, type ExecuteResponse as E, type GitCheckoutResponse as G, HttpClient as H, JupyterClient as J, type MkdirResponse as M, type ReadFileResponse as R, Sandbox as S, type WriteFileResponse as W, type MoveFileResponse as a, type RenameFileResponse as b, type ExecutionCallbacks as c, getSandbox as g };
+export { type ExecutionCallbacks as E, HttpClient as H, JupyterClient as J, Sandbox as S, getSandbox as g };

package/dist/client.d.ts

@@ -1,4 +1,4 @@
-export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, H as HttpClient, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, W as WriteFileResponse } from './client-bzEV222a.js';
+export { H as HttpClient } from './client-Ce40ujDF.js';
 import './types.js';
 import '@cloudflare/containers';
 import './interpreter-types.js';

package/dist/client.js

@@ -1,6 +1,6 @@
 import {
   HttpClient
-} from "./chunk-CUHYLCMT.js";
+} from "./chunk-3CQ6THKA.js";
 export {
   HttpClient
 };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-export { D as DeleteFileResponse, E as ExecuteResponse, G as GitCheckoutResponse, M as MkdirResponse, a as MoveFileResponse, R as ReadFileResponse, b as RenameFileResponse, S as Sandbox, W as WriteFileResponse, g as getSandbox } from './client-bzEV222a.js';
 export { CodeExecutionError, ContainerNotReadyError, ContextNotFoundError, JupyterNotReadyError, SandboxError, SandboxErrorResponse, SandboxNetworkError, ServiceUnavailableError, isJupyterNotReadyError, isRetryableError, isSandboxError, parseErrorResponse } from './errors.js';
 export { ChartData, CodeContext, CreateContextOptions, Execution, ExecutionError, OutputMessage, Result, ResultImpl, RunCodeOptions } from './interpreter-types.js';
 export { RouteInfo, SandboxEnv, proxyToSandbox } from './request-handler.js';
+export { S as Sandbox, g as getSandbox } from './client-Ce40ujDF.js';
 export { asyncIterableToSSEStream, parseSSEStream, responseToAsyncIterable } from './sse-parser.js';
-export { ExecEvent, LogEvent } from './types.js';
+export { DeleteFileResponse, ExecEvent, ExecuteResponse, GitCheckoutResponse, ListFilesResponse, LogEvent, MkdirResponse, MoveFileResponse, ReadFileResponse, RenameFileResponse, WriteFileResponse } from './types.js';
 import '@cloudflare/containers';

package/dist/index.js

@@ -2,20 +2,20 @@ import {
   Sandbox,
   getSandbox,
   proxyToSandbox
-} from "./chunk-4KELYYKS.js";
+} from "./chunk-CKIGERRS.js";
 import "./chunk-6UAWTJ5S.js";
 import {
   asyncIterableToSSEStream,
   parseSSEStream,
   responseToAsyncIterable
 } from "./chunk-NNGBXDMY.js";
-import "./chunk-S5FFBU4Y.js";
+import "./chunk-6EWSYSO7.js";
 import "./chunk-FKBV7CZS.js";
 import {
   ResultImpl
 } from "./chunk-EGC5IYXA.js";
-import "./chunk-VTKZL632.js";
-import "./chunk-CUHYLCMT.js";
+import "./chunk-HHUDRGPY.js";
+import "./chunk-3CQ6THKA.js";
 import {
   CodeExecutionError,
   ContainerNotReadyError,

package/dist/interpreter.d.ts

@@ -1,7 +1,7 @@
 import { CreateContextOptions, CodeContext, RunCodeOptions, Execution } from './interpreter-types.js';
-import { S as Sandbox } from './client-bzEV222a.js';
-import '@cloudflare/containers';
+import { S as Sandbox } from './client-Ce40ujDF.js';
 import './types.js';
+import '@cloudflare/containers';
 
 declare class CodeInterpreter {
     private jupyterClient;

package/dist/jupyter-client.d.ts

@@ -1,4 +1,4 @@
-export { c as ExecutionCallbacks, J as JupyterClient } from './client-bzEV222a.js';
+export { E as ExecutionCallbacks, J as JupyterClient } from './client-Ce40ujDF.js';
 import './interpreter-types.js';
-import '@cloudflare/containers';
 import './types.js';
+import '@cloudflare/containers';

package/dist/jupyter-client.js

@@ -1,7 +1,7 @@
 import {
   JupyterClient
-} from "./chunk-VTKZL632.js";
-import "./chunk-CUHYLCMT.js";
+} from "./chunk-HHUDRGPY.js";
+import "./chunk-3CQ6THKA.js";
 import "./chunk-LALY4SFU.js";
 export {
   JupyterClient

package/dist/request-handler.d.ts

@@ -1,7 +1,7 @@
-import { S as Sandbox } from './client-bzEV222a.js';
-import '@cloudflare/containers';
-import './interpreter-types.js';
+import { S as Sandbox } from './client-Ce40ujDF.js';
 import './types.js';
+import './interpreter-types.js';
+import '@cloudflare/containers';
 
 interface SandboxEnv {
     Sandbox: DurableObjectNamespace<Sandbox>;

package/dist/request-handler.js

@@ -1,14 +1,14 @@
 import {
   isLocalhostPattern,
   proxyToSandbox
-} from "./chunk-4KELYYKS.js";
+} from "./chunk-CKIGERRS.js";
 import "./chunk-6UAWTJ5S.js";
 import "./chunk-NNGBXDMY.js";
-import "./chunk-S5FFBU4Y.js";
+import "./chunk-6EWSYSO7.js";
 import "./chunk-FKBV7CZS.js";
 import "./chunk-EGC5IYXA.js";
-import "./chunk-VTKZL632.js";
-import "./chunk-CUHYLCMT.js";
+import "./chunk-HHUDRGPY.js";
+import "./chunk-3CQ6THKA.js";
 import "./chunk-LALY4SFU.js";
 export {
   isLocalhostPattern,

package/dist/sandbox.d.ts

@@ -1,4 +1,4 @@
-export { S as Sandbox, g as getSandbox } from './client-bzEV222a.js';
+import './types.js';
 import '@cloudflare/containers';
 import './interpreter-types.js';
-import './types.js';
+export { S as Sandbox, g as getSandbox } from './client-Ce40ujDF.js';

package/dist/sandbox.js

@@ -1,14 +1,14 @@
 import {
   Sandbox,
   getSandbox
-} from "./chunk-4KELYYKS.js";
+} from "./chunk-CKIGERRS.js";
 import "./chunk-6UAWTJ5S.js";
 import "./chunk-NNGBXDMY.js";
-import "./chunk-S5FFBU4Y.js";
+import "./chunk-6EWSYSO7.js";
 import "./chunk-FKBV7CZS.js";
 import "./chunk-EGC5IYXA.js";
-import "./chunk-VTKZL632.js";
-import "./chunk-CUHYLCMT.js";
+import "./chunk-HHUDRGPY.js";
+import "./chunk-3CQ6THKA.js";
 import "./chunk-LALY4SFU.js";
 export {
   Sandbox,

package/dist/types.d.ts

@@ -279,14 +279,131 @@ interface ISandbox {
         stdout: string;
         stderr: string;
     }>;
+    gitCheckout(repoUrl: string, options: {
+        branch?: string;
+        targetDir?: string;
+    }): Promise<GitCheckoutResponse>;
+    mkdir(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<MkdirResponse>;
+    writeFile(path: string, content: string, options?: {
+        encoding?: string;
+    }): Promise<WriteFileResponse>;
+    deleteFile(path: string): Promise<DeleteFileResponse>;
+    renameFile(oldPath: string, newPath: string): Promise<RenameFileResponse>;
+    moveFile(sourcePath: string, destinationPath: string): Promise<MoveFileResponse>;
+    readFile(path: string, options?: {
+        encoding?: string;
+    }): Promise<ReadFileResponse>;
+    listFiles(path: string, options?: {
+        recursive?: boolean;
+        includeHidden?: boolean;
+    }): Promise<ListFilesResponse>;
+    exposePort(port: number, options: {
+        name?: string;
+        hostname: string;
+    }): Promise<{
+        url: string;
+        port: number;
+        name?: string;
+    }>;
+    unexposePort(port: number): Promise<void>;
+    getExposedPorts(hostname: string): Promise<Array<{
+        url: string;
+        port: number;
+        name?: string;
+        exposedAt: string;
+    }>>;
+    setEnvVars(envVars: Record<string, string>): Promise<void>;
+    setSandboxName(name: string): Promise<void>;
     createCodeContext(options?: CreateContextOptions): Promise<CodeContext>;
     runCode(code: string, options?: RunCodeOptions): Promise<ExecutionResult>;
     runCodeStream(code: string, options?: RunCodeOptions): Promise<ReadableStream>;
     listCodeContexts(): Promise<CodeContext[]>;
     deleteCodeContext(contextId: string): Promise<void>;
 }
+interface ExecuteResponse {
+    success: boolean;
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    command: string;
+    timestamp: string;
+}
+interface GitCheckoutResponse {
+    success: boolean;
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    repoUrl: string;
+    branch: string;
+    targetDir: string;
+    timestamp: string;
+}
+interface MkdirResponse {
+    success: boolean;
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    path: string;
+    recursive: boolean;
+    timestamp: string;
+}
+interface WriteFileResponse {
+    success: boolean;
+    exitCode: number;
+    path: string;
+    timestamp: string;
+}
+interface ReadFileResponse {
+    success: boolean;
+    exitCode: number;
+    path: string;
+    content: string;
+    timestamp: string;
+}
+interface DeleteFileResponse {
+    success: boolean;
+    exitCode: number;
+    path: string;
+    timestamp: string;
+}
+interface RenameFileResponse {
+    success: boolean;
+    exitCode: number;
+    oldPath: string;
+    newPath: string;
+    timestamp: string;
+}
+interface MoveFileResponse {
+    success: boolean;
+    exitCode: number;
+    sourcePath: string;
+    destinationPath: string;
+    timestamp: string;
+}
+interface ListFilesResponse {
+    success: boolean;
+    exitCode: number;
+    path: string;
+    files: Array<{
+        name: string;
+        absolutePath: string;
+        relativePath: string;
+        type: 'file' | 'directory' | 'symlink' | 'other';
+        size: number;
+        modifiedAt: string;
+        mode: string;
+        permissions: {
+            readable: boolean;
+            writable: boolean;
+            executable: boolean;
+        };
+    }>;
+    timestamp: string;
+}
 declare function isExecResult(value: any): value is ExecResult;
 declare function isProcess(value: any): value is Process;
 declare function isProcessStatus(value: string): value is ProcessStatus;
 
-export { type BaseExecOptions, type ExecEvent, type ExecOptions, type ExecResult, ExecutionTimeoutError, type GetProcessLogsResponse, type GetProcessResponse, type ISandbox, type ListProcessesResponse, type LogEvent, type Process, ProcessAlreadyExistsError, ProcessNotFoundError, type ProcessOptions, type ProcessRecord, type ProcessStatus, SandboxError, type StartProcessRequest, type StartProcessResponse, type StreamOptions, isExecResult, isProcess, isProcessStatus };
+export { type BaseExecOptions, type DeleteFileResponse, type ExecEvent, type ExecOptions, type ExecResult, type ExecuteResponse, ExecutionTimeoutError, type GetProcessLogsResponse, type GetProcessResponse, type GitCheckoutResponse, type ISandbox, type ListFilesResponse, type ListProcessesResponse, type LogEvent, type MkdirResponse, type MoveFileResponse, type Process, ProcessAlreadyExistsError, ProcessNotFoundError, type ProcessOptions, type ProcessRecord, type ProcessStatus, type ReadFileResponse, type RenameFileResponse, SandboxError, type StartProcessRequest, type StartProcessResponse, type StreamOptions, type WriteFileResponse, isExecResult, isProcess, isProcessStatus };

package/dist/types.js

@@ -6,7 +6,7 @@ import {
   isExecResult,
   isProcess,
   isProcessStatus
-} from "./chunk-S5FFBU4Y.js";
+} from "./chunk-6EWSYSO7.js";
 export {
   ExecutionTimeoutError,
   ProcessAlreadyExistsError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cloudflare/sandbox",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "repository": {
     "type": "git",
     "url": "https://github.com/cloudflare/sandbox-sdk"