@cloudflare/sandbox 0.6.4 → 0.6.6

package/Dockerfile

@@ -1,17 +1,15 @@
-# Sandbox container image with full development environment
+# Sandbox container images (default and python variants)
 # Multi-stage build optimized for Turborepo monorepo
 
 # ============================================================================
 # Stage 1: Prune monorepo to only include necessary packages
 # ============================================================================
-FROM node:20-alpine AS pruner
+FROM node:20-slim AS pruner
 
 WORKDIR /app
 
-# Install Turborepo globally
 RUN npm install -g turbo
 
-# Copy entire monorepo
 COPY . .
 
 # Prune to only @repo/sandbox-container and its dependencies (@repo/shared)
@@ -20,13 +18,15 @@ RUN turbo prune @repo/sandbox-container --docker
 
 # ============================================================================
 # Stage 2: Install dependencies and build packages
+# Using glibc-based images (not Alpine) so the standalone binary works on
+# standard Linux distributions (Debian, Ubuntu, RHEL, etc.)
 # ============================================================================
-FROM node:20-alpine AS builder
+FROM node:20-slim AS builder
 
 WORKDIR /app
 
-# Install Bun runtime (needed for sandbox-container build script)
-COPY --from=oven/bun:1-alpine /usr/local/bin/bun /usr/local/bin/bun
+# Install Bun runtime (glibc version for glibc-compatible standalone binary)
+COPY --from=oven/bun:1 /usr/local/bin/bun /usr/local/bin/bun
 
 # Copy pruned lockfile and package.json files (for Docker layer caching)
 COPY --from=pruner /app/out/json/ .
@@ -36,11 +36,10 @@ COPY --from=pruner /app/out/package-lock.json ./package-lock.json
 RUN --mount=type=cache,target=/root/.npm \
     CI=true npm ci
 
-# Copy pruned source code
 COPY --from=pruner /app/out/full/ .
 
 # Build all packages (Turborepo handles dependency order automatically)
-# This builds @repo/shared first, then @repo/sandbox-container
+# This builds @repo/shared first, then @repo/sandbox-container (including standalone binary)
 RUN npx turbo run build
 
 # ============================================================================
@@ -96,7 +95,6 @@ ARG SANDBOX_VERSION=unknown
 # Prevent interactive prompts during package installation
 ENV DEBIAN_FRONTEND=noninteractive
 
-# Set the sandbox version as an environment variable for version checking
 ENV SANDBOX_VERSION=${SANDBOX_VERSION}
 
 # Install runtime packages and S3FS-FUSE for bucket mounting
@@ -123,27 +121,24 @@ RUN ln -s /usr/local/lib/node_modules/npm/bin/npm-cli.js /usr/local/bin/npm && \
 # Install Bun runtime from official image
 COPY --from=oven/bun:1 /usr/local/bin/bun /usr/local/bin/bun
 
-# Set up runtime container server directory
-WORKDIR /container-server
+# Copy standalone binary
+COPY --from=builder /app/packages/sandbox-container/dist/sandbox /container-server/sandbox
 
-# Copy bundled container server (all dependencies inlined, no node_modules needed)
-COPY --from=builder /app/packages/sandbox-container/dist/index.js ./dist/
-COPY --from=builder /app/packages/sandbox-container/dist/index.js.map ./dist/
+# Set up container server directory for executors
+WORKDIR /container-server
 
-# Copy bundled JavaScript executor
+# Copy bundled JavaScript executor (runs on Node or Bun for code interpreter)
 COPY --from=builder /app/packages/sandbox-container/dist/runtime/executors/javascript/node_executor.js ./dist/runtime/executors/javascript/
-COPY --from=builder /app/packages/sandbox-container/dist/runtime/executors/javascript/node_executor.js.map ./dist/runtime/executors/javascript/
 
-# Create clean workspace directory for user code
+# Copy legacy JS bundle for backwards compatibility
+# Users with custom startup scripts that call `bun /container-server/dist/index.js` need this
+COPY --from=builder /app/packages/sandbox-container/dist/index.js ./dist/
+
 RUN mkdir -p /workspace
 
 # Expose the application port (3000 for control)
 EXPOSE 3000
 
-# Copy and make startup script executable
-COPY packages/sandbox/startup.sh ./
-RUN chmod +x startup.sh
-
 # ============================================================================
 # Stage 5a: Default image - lean, no Python
 # ============================================================================
@@ -154,7 +149,7 @@ ENV PYTHON_POOL_MIN_SIZE=0
 ENV JAVASCRIPT_POOL_MIN_SIZE=3
 ENV TYPESCRIPT_POOL_MIN_SIZE=3
 
-CMD ["/container-server/startup.sh"]
+ENTRYPOINT ["/container-server/sandbox"]
 
 # ============================================================================
 # Stage 5b: Python image - full, with Python + data science packages
@@ -186,7 +181,7 @@ ENV PYTHON_POOL_MIN_SIZE=3
 ENV JAVASCRIPT_POOL_MIN_SIZE=3
 ENV TYPESCRIPT_POOL_MIN_SIZE=3
 
-CMD ["/container-server/startup.sh"]
+ENTRYPOINT ["/container-server/sandbox"]
 
 # ============================================================================
 # Stage 5c: OpenCode image - with OpenCode CLI for AI coding agent
@@ -210,4 +205,4 @@ ENV TYPESCRIPT_POOL_MIN_SIZE=3
 # Expose OpenCode server port (in addition to 3000 from runtime-base)
 EXPOSE 4096
 
-CMD ["/container-server/startup.sh"]
+ENTRYPOINT ["/container-server/sandbox"]

package/README.md

@@ -150,8 +150,12 @@ npm run check
 
 See the [examples directory](./examples) for complete working examples:
 
-- [Minimal](./examples/minimal) - Basic sandbox setup
-- [Code Interpreter](./examples/code-interpreter) - Use sandbox as an interpreter tool with gpt-oss
+- [Minimal](./examples/minimal) - Start here: exec commands, read/write files
+- [Code Interpreter](./examples/code-interpreter) - Give [gpt-oss](https://developers.cloudflare.com/workers-ai/models/gpt-oss-120b/) on Workers AI a Python REPL
+- [Claude Code](./examples/claude-code) - Run [Claude Code](https://claude.ai/code) headless on any repo
+- [OpenAI Agents](./examples/openai-agents) - `Shell` and `Editor` tools for [OpenAI Agents SDK](https://openai.github.io/openai-agents-js/)
+- [OpenCode](./examples/opencode) - [OpenCode](https://github.com/sst/opencode) web UI or [SDK](https://opencode.ai/docs/sdk/) in a sandbox
+- [TypeScript Validator](./examples/typescript-validator) - Build with npm in sandbox, execute in [isolates](https://developers.cloudflare.com/workers/runtime-apis/bindings/worker-loader/)
 
 ## Status
 

package/dist/{contexts-DeQQjsXq.d.ts → contexts-CdrlvHWK.d.ts}

@@ -49,6 +49,7 @@ declare const ErrorCode: {
   readonly CONTEXT_NOT_FOUND: "CONTEXT_NOT_FOUND";
   readonly CODE_EXECUTION_ERROR: "CODE_EXECUTION_ERROR";
   readonly PYTHON_NOT_AVAILABLE: "PYTHON_NOT_AVAILABLE";
+  readonly JAVASCRIPT_NOT_AVAILABLE: "JAVASCRIPT_NOT_AVAILABLE";
   readonly OPENCODE_STARTUP_FAILED: "OPENCODE_STARTUP_FAILED";
   readonly PROCESS_READY_TIMEOUT: "PROCESS_READY_TIMEOUT";
   readonly PROCESS_EXITED_BEFORE_READY: "PROCESS_EXITED_BEFORE_READY";
@@ -158,4 +159,4 @@ interface OpencodeStartupContext {
 }
 //#endregion
 export { OperationType as a, ErrorResponse as i, ProcessExitedBeforeReadyContext as n, ErrorCode as o, ProcessReadyTimeoutContext as r, OpencodeStartupContext as t };
-//# sourceMappingURL=contexts-DeQQjsXq.d.ts.map
+//# sourceMappingURL=contexts-CdrlvHWK.d.ts.map

package/dist/contexts-CdrlvHWK.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contexts-CdrlvHWK.d.ts","names":["ErrorCode","ErrorCode","Operation","OperationType","ErrorResponse","TContext","Record","ServiceError","ServiceResult","T","OperationType","FileNotFoundContext","FileExistsContext","FileSystemContext","CommandNotFoundContext","CommandErrorContext","ProcessNotFoundContext","ProcessErrorContext","SessionAlreadyExistsContext","ProcessReadyTimeoutContext","ProcessExitedBeforeReadyContext","PortAlreadyExposedContext","PortNotExposedContext","InvalidPortContext","PortErrorContext","GitRepositoryNotFoundContext","GitAuthFailedContext","GitBranchNotFoundContext","GitErrorContext","InterpreterNotReadyContext","ContextNotFoundContext","CodeExecutionContext","ValidationFailedContext","Array","BucketMountContext","MissingCredentialsContext","InvalidMountConfigContext","OpencodeStartupContext","InternalErrorContext"],"sources":["../../shared/dist/errors/codes.d.ts","../../shared/dist/errors/types.d.ts","../../shared/dist/errors/contexts.d.ts"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport declare const ErrorCode: {\n    readonly FILE_NOT_FOUND: \"FILE_NOT_FOUND\";\n    readonly PERMISSION_DENIED: \"PERMISSION_DENIED\";\n    readonly FILE_EXISTS: \"FILE_EXISTS\";\n    readonly IS_DIRECTORY: \"IS_DIRECTORY\";\n    readonly NOT_DIRECTORY: \"NOT_DIRECTORY\";\n    readonly NO_SPACE: \"NO_SPACE\";\n    readonly TOO_MANY_FILES: \"TOO_MANY_FILES\";\n    readonly RESOURCE_BUSY: \"RESOURCE_BUSY\";\n    readonly READ_ONLY: \"READ_ONLY\";\n    readonly NAME_TOO_LONG: \"NAME_TOO_LONG\";\n    readonly TOO_MANY_LINKS: \"TOO_MANY_LINKS\";\n    readonly FILESYSTEM_ERROR: \"FILESYSTEM_ERROR\";\n    readonly COMMAND_NOT_FOUND: \"COMMAND_NOT_FOUND\";\n    readonly COMMAND_PERMISSION_DENIED: \"COMMAND_PERMISSION_DENIED\";\n    readonly INVALID_COMMAND: \"INVALID_COMMAND\";\n    readonly COMMAND_EXECUTION_ERROR: \"COMMAND_EXECUTION_ERROR\";\n    readonly STREAM_START_ERROR: \"STREAM_START_ERROR\";\n    readonly PROCESS_NOT_FOUND: \"PROCESS_NOT_FOUND\";\n    readonly PROCESS_PERMISSION_DENIED: \"PROCESS_PERMISSION_DENIED\";\n    readonly PROCESS_ERROR: \"PROCESS_ERROR\";\n    readonly SESSION_ALREADY_EXISTS: \"SESSION_ALREADY_EXISTS\";\n    readonly PORT_ALREADY_EXPOSED: \"PORT_ALREADY_EXPOSED\";\n    readonly PORT_IN_USE: \"PORT_IN_USE\";\n    readonly PORT_NOT_EXPOSED: \"PORT_NOT_EXPOSED\";\n    readonly INVALID_PORT_NUMBER: \"INVALID_PORT_NUMBER\";\n    readonly INVALID_PORT: \"INVALID_PORT\";\n    readonly SERVICE_NOT_RESPONDING: \"SERVICE_NOT_RESPONDING\";\n    readonly PORT_OPERATION_ERROR: \"PORT_OPERATION_ERROR\";\n    readonly CUSTOM_DOMAIN_REQUIRED: \"CUSTOM_DOMAIN_REQUIRED\";\n    readonly GIT_REPOSITORY_NOT_FOUND: \"GIT_REPOSITORY_NOT_FOUND\";\n    readonly GIT_BRANCH_NOT_FOUND: \"GIT_BRANCH_NOT_FOUND\";\n    readonly GIT_AUTH_FAILED: \"GIT_AUTH_FAILED\";\n    readonly GIT_NETWORK_ERROR: \"GIT_NETWORK_ERROR\";\n    readonly INVALID_GIT_URL: \"INVALID_GIT_URL\";\n    readonly GIT_CLONE_FAILED: \"GIT_CLONE_FAILED\";\n    readonly GIT_CHECKOUT_FAILED: \"GIT_CHECKOUT_FAILED\";\n    readonly GIT_OPERATION_FAILED: \"GIT_OPERATION_FAILED\";\n    readonly BUCKET_MOUNT_ERROR: \"BUCKET_MOUNT_ERROR\";\n    readonly S3FS_MOUNT_ERROR: \"S3FS_MOUNT_ERROR\";\n    readonly MISSING_CREDENTIALS: \"MISSING_CREDENTIALS\";\n    readonly INVALID_MOUNT_CONFIG: \"INVALID_MOUNT_CONFIG\";\n    readonly INTERPRETER_NOT_READY: \"INTERPRETER_NOT_READY\";\n    readonly CONTEXT_NOT_FOUND: \"CONTEXT_NOT_FOUND\";\n    readonly CODE_EXECUTION_ERROR: \"CODE_EXECUTION_ERROR\";\n    readonly PYTHON_NOT_AVAILABLE: \"PYTHON_NOT_AVAILABLE\";\n    readonly JAVASCRIPT_NOT_AVAILABLE: \"JAVASCRIPT_NOT_AVAILABLE\";\n    readonly OPENCODE_STARTUP_FAILED: \"OPENCODE_STARTUP_FAILED\";\n    readonly PROCESS_READY_TIMEOUT: \"PROCESS_READY_TIMEOUT\";\n    readonly PROCESS_EXITED_BEFORE_READY: \"PROCESS_EXITED_BEFORE_READY\";\n    readonly VALIDATION_FAILED: \"VALIDATION_FAILED\";\n    readonly INVALID_JSON_RESPONSE: \"INVALID_JSON_RESPONSE\";\n    readonly UNKNOWN_ERROR: \"UNKNOWN_ERROR\";\n    readonly INTERNAL_ERROR: \"INTERNAL_ERROR\";\n};\nexport type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];\n//# sourceMappingURL=codes.d.ts.map","import type { ErrorCode } from './codes';\n/**\n * Standard operation types\n */\nexport declare const Operation: {\n    readonly FILE_READ: \"file.read\";\n    readonly FILE_WRITE: \"file.write\";\n    readonly FILE_DELETE: \"file.delete\";\n    readonly FILE_MOVE: \"file.move\";\n    readonly FILE_RENAME: \"file.rename\";\n    readonly FILE_STAT: \"file.stat\";\n    readonly DIRECTORY_CREATE: \"directory.create\";\n    readonly DIRECTORY_LIST: \"directory.list\";\n    readonly COMMAND_EXECUTE: \"command.execute\";\n    readonly COMMAND_STREAM: \"command.stream\";\n    readonly PROCESS_START: \"process.start\";\n    readonly PROCESS_KILL: \"process.kill\";\n    readonly PROCESS_LIST: \"process.list\";\n    readonly PROCESS_GET: \"process.get\";\n    readonly PROCESS_LOGS: \"process.logs\";\n    readonly PORT_EXPOSE: \"port.expose\";\n    readonly PORT_UNEXPOSE: \"port.unexpose\";\n    readonly PORT_LIST: \"port.list\";\n    readonly PORT_PROXY: \"port.proxy\";\n    readonly GIT_CLONE: \"git.clone\";\n    readonly GIT_CHECKOUT: \"git.checkout\";\n    readonly GIT_OPERATION: \"git.operation\";\n    readonly CODE_EXECUTE: \"code.execute\";\n    readonly CODE_CONTEXT_CREATE: \"code.context.create\";\n    readonly CODE_CONTEXT_DELETE: \"code.context.delete\";\n};\nexport type OperationType = (typeof Operation)[keyof typeof Operation];\n/**\n * Standard error response format with generic context type\n * TContext allows type-safe access to error-specific context\n */\nexport interface ErrorResponse<TContext = Record<string, unknown>> {\n    /**\n     * Error type code (machine-readable)\n     */\n    code: ErrorCode;\n    /**\n     * Human-readable error message\n     */\n    message: string;\n    /**\n     * Operation that was attempted (useful for debugging and logging)\n     */\n    operation?: OperationType;\n    /**\n     * Structured error context with relevant details\n     * Type varies based on error code\n     */\n    context: TContext;\n    /**\n     * HTTP status code (for client SDK)\n     */\n    httpStatus: number;\n    /**\n     * Timestamp when error occurred\n     */\n    timestamp: string;\n    /**\n     * Actionable suggestion for fixing the error\n     */\n    suggestion?: string;\n    /**\n     * Link to documentation\n     */\n    documentation?: string;\n}\n/**\n * Container ServiceError (lightweight, enriched by handlers)\n */\nexport interface ServiceError {\n    message: string;\n    code: ErrorCode;\n    details?: Record<string, unknown>;\n}\n/**\n * ServiceResult type for container services\n */\nexport type ServiceResult<T> = {\n    success: true;\n    data: T;\n} | {\n    success: false;\n    error: ServiceError;\n};\n//# sourceMappingURL=types.d.ts.map","import type { OperationType } from './types';\n/**\n * File system error contexts\n */\nexport interface FileNotFoundContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileExistsContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileSystemContext {\n    path: string;\n    operation: OperationType;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Command error contexts\n */\nexport interface CommandNotFoundContext {\n    command: string;\n}\nexport interface CommandErrorContext {\n    command: string;\n    exitCode?: number;\n    stdout?: string;\n    stderr?: string;\n}\n/**\n * Process error contexts\n */\nexport interface ProcessNotFoundContext {\n    processId: string;\n}\nexport interface ProcessErrorContext {\n    processId: string;\n    pid?: number;\n    exitCode?: number;\n    stderr?: string;\n}\nexport interface SessionAlreadyExistsContext {\n    sessionId: string;\n}\n/**\n * Process readiness error contexts\n */\nexport interface ProcessReadyTimeoutContext {\n    processId: string;\n    command: string;\n    condition: string;\n    timeout: number;\n}\nexport interface ProcessExitedBeforeReadyContext {\n    processId: string;\n    command: string;\n    condition: string;\n    exitCode: number;\n}\n/**\n * Port error contexts\n */\nexport interface PortAlreadyExposedContext {\n    port: number;\n    portName?: string;\n}\nexport interface PortNotExposedContext {\n    port: number;\n}\nexport interface InvalidPortContext {\n    port: number;\n    reason: string;\n}\nexport interface PortErrorContext {\n    port: number;\n    portName?: string;\n    stderr?: string;\n}\n/**\n * Git error contexts\n */\nexport interface GitRepositoryNotFoundContext {\n    repository: string;\n}\nexport interface GitAuthFailedContext {\n    repository: string;\n}\nexport interface GitBranchNotFoundContext {\n    branch: string;\n    repository?: string;\n}\nexport interface GitErrorContext {\n    repository?: string;\n    branch?: string;\n    targetDir?: string;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Code interpreter error contexts\n */\nexport interface InterpreterNotReadyContext {\n    retryAfter?: number;\n    progress?: number;\n}\nexport interface ContextNotFoundContext {\n    contextId: string;\n}\nexport interface CodeExecutionContext {\n    contextId?: string;\n    ename?: string;\n    evalue?: string;\n    traceback?: string[];\n}\n/**\n * Validation error contexts\n */\nexport interface ValidationFailedContext {\n    validationErrors: Array<{\n        field: string;\n        message: string;\n        code?: string;\n    }>;\n}\n/**\n * Bucket mounting error contexts\n */\nexport interface BucketMountContext {\n    bucket: string;\n    mountPath: string;\n    endpoint: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface MissingCredentialsContext {\n    bucket: string;\n    endpoint: string;\n}\nexport interface InvalidMountConfigContext {\n    bucket?: string;\n    mountPath?: string;\n    endpoint?: string;\n    reason?: string;\n}\n/**\n * OpenCode error contexts\n */\nexport interface OpencodeStartupContext {\n    port: number;\n    stderr?: string;\n    command?: string;\n}\n/**\n * Generic error contexts\n */\nexport interface InternalErrorContext {\n    originalError?: string;\n    stack?: string;\n    [key: string]: unknown;\n}\n//# sourceMappingURL=contexts.d.ts.map"],"mappings":";;AAIA;AAuDA;;cAvDqBA;;ECAAE,SAAAA,iBA0BpB,EAAA,mBAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,YAAa,EAAAC,cAAA;EAAYC,SAAAA,aAAAA,EAAAA,eAAAA;EAIhCL,SAAAA,QAAAA,EAAAA,UAAAA;EAQME,SAAAA,cAAAA,EAAAA,gBAAAA;EAKHE,SAAAA,aAAAA,EAAAA,eAAAA;EAAQ,SAAA,SAAA,EAAA,WAAA;;;;ECLJc,SAAAA,iBAAAA,EAAAA,mBAA0B;EAM1BC,SAAAA,yBAA+B,EAAA,2BAAA;EA8F/BiB,SAAAA,eAAAA,EAAsB,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KFzF3BrC,SAAAA,WAAoBA,wBAAwBA;;;AAvDxD;AAuDA;;cCvDqBE;;EAAAA,SAAAA,UA0BpB,EAAA,YAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,SAAa,EAAA,WAAAC;EAAYC,SAAAA,WAAAA,EAAAA,aAAAA;EAIhCL,SAAAA,SAAAA,EAAAA,WAAAA;EAQME,SAAAA,gBAAAA,EAAAA,kBAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,eAAA,EAAA,iBAAA;;;;ECLJc,SAAAA,YAAAA,EAAAA,cAA0B;EAM1BC,SAAAA,WAAAA,EAAAA,aAA+B;EA8F/BiB,SAAAA,YAAAA,EAAAA,cAAsB;;;;;;;;;;;;KDrH3BlC,aAAAA,WAAwBD,wBAAwBA;;;;;UAK3CE,yBAAyBE;;;;QAIhCL;;;;;;;;cAQME;;;;;WAKHE;;;;;;;;;;;;;;;;;;;;;;;;UCLIc,0BAAAA;;;;;;UAMAC,+BAAAA;;;;;;;;;UA8FAiB,sBAAAA"}

package/dist/{errors-BHN41iBd.js → errors-BCXUmJUn.js}

@@ -49,6 +49,7 @@ const ErrorCode = {
 	CONTEXT_NOT_FOUND: "CONTEXT_NOT_FOUND",
 	CODE_EXECUTION_ERROR: "CODE_EXECUTION_ERROR",
 	PYTHON_NOT_AVAILABLE: "PYTHON_NOT_AVAILABLE",
+	JAVASCRIPT_NOT_AVAILABLE: "JAVASCRIPT_NOT_AVAILABLE",
 	OPENCODE_STARTUP_FAILED: "OPENCODE_STARTUP_FAILED",
 	PROCESS_READY_TIMEOUT: "PROCESS_READY_TIMEOUT",
 	PROCESS_EXITED_BEFORE_READY: "PROCESS_EXITED_BEFORE_READY",
@@ -97,6 +98,7 @@ const ERROR_STATUS_MAP = {
 	[ErrorCode.SERVICE_NOT_RESPONDING]: 502,
 	[ErrorCode.GIT_NETWORK_ERROR]: 502,
 	[ErrorCode.PYTHON_NOT_AVAILABLE]: 501,
+	[ErrorCode.JAVASCRIPT_NOT_AVAILABLE]: 501,
 	[ErrorCode.INTERPRETER_NOT_READY]: 503,
 	[ErrorCode.OPENCODE_STARTUP_FAILED]: 503,
 	[ErrorCode.PROCESS_READY_TIMEOUT]: 408,
@@ -121,4 +123,4 @@ const ERROR_STATUS_MAP = {
 
 //#endregion
 export { ErrorCode as t };
-//# sourceMappingURL=errors-BHN41iBd.js.map
+//# sourceMappingURL=errors-BCXUmJUn.js.map

package/dist/errors-BCXUmJUn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-BCXUmJUn.js","names":[],"sources":["../../shared/dist/errors/codes.js","../../shared/dist/errors/status-map.js"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport const ErrorCode = {\n    // File System Errors (404)\n    FILE_NOT_FOUND: 'FILE_NOT_FOUND',\n    // Permission Errors (403)\n    PERMISSION_DENIED: 'PERMISSION_DENIED',\n    // File System Errors (409)\n    FILE_EXISTS: 'FILE_EXISTS',\n    // File System Errors (400)\n    IS_DIRECTORY: 'IS_DIRECTORY',\n    NOT_DIRECTORY: 'NOT_DIRECTORY',\n    // File System Errors (500)\n    NO_SPACE: 'NO_SPACE',\n    TOO_MANY_FILES: 'TOO_MANY_FILES',\n    RESOURCE_BUSY: 'RESOURCE_BUSY',\n    READ_ONLY: 'READ_ONLY',\n    NAME_TOO_LONG: 'NAME_TOO_LONG',\n    TOO_MANY_LINKS: 'TOO_MANY_LINKS',\n    FILESYSTEM_ERROR: 'FILESYSTEM_ERROR',\n    // Command Errors (404)\n    COMMAND_NOT_FOUND: 'COMMAND_NOT_FOUND',\n    // Command Errors (403/400)\n    COMMAND_PERMISSION_DENIED: 'COMMAND_PERMISSION_DENIED',\n    INVALID_COMMAND: 'INVALID_COMMAND',\n    // Command Errors (500)\n    COMMAND_EXECUTION_ERROR: 'COMMAND_EXECUTION_ERROR',\n    STREAM_START_ERROR: 'STREAM_START_ERROR',\n    // Process Errors (404)\n    PROCESS_NOT_FOUND: 'PROCESS_NOT_FOUND',\n    // Process Errors (403/500)\n    PROCESS_PERMISSION_DENIED: 'PROCESS_PERMISSION_DENIED',\n    PROCESS_ERROR: 'PROCESS_ERROR',\n    // Session Errors (409)\n    SESSION_ALREADY_EXISTS: 'SESSION_ALREADY_EXISTS',\n    // Port Errors (409)\n    PORT_ALREADY_EXPOSED: 'PORT_ALREADY_EXPOSED',\n    PORT_IN_USE: 'PORT_IN_USE',\n    // Port Errors (404)\n    PORT_NOT_EXPOSED: 'PORT_NOT_EXPOSED',\n    // Port Errors (400)\n    INVALID_PORT_NUMBER: 'INVALID_PORT_NUMBER',\n    INVALID_PORT: 'INVALID_PORT',\n    // Port Errors (502/500)\n    SERVICE_NOT_RESPONDING: 'SERVICE_NOT_RESPONDING',\n    PORT_OPERATION_ERROR: 'PORT_OPERATION_ERROR',\n    // Port Errors (400)\n    CUSTOM_DOMAIN_REQUIRED: 'CUSTOM_DOMAIN_REQUIRED',\n    // Git Errors (404)\n    GIT_REPOSITORY_NOT_FOUND: 'GIT_REPOSITORY_NOT_FOUND',\n    GIT_BRANCH_NOT_FOUND: 'GIT_BRANCH_NOT_FOUND',\n    // Git Errors (401)\n    GIT_AUTH_FAILED: 'GIT_AUTH_FAILED',\n    // Git Errors (502)\n    GIT_NETWORK_ERROR: 'GIT_NETWORK_ERROR',\n    // Git Errors (400)\n    INVALID_GIT_URL: 'INVALID_GIT_URL',\n    // Git Errors (500)\n    GIT_CLONE_FAILED: 'GIT_CLONE_FAILED',\n    GIT_CHECKOUT_FAILED: 'GIT_CHECKOUT_FAILED',\n    GIT_OPERATION_FAILED: 'GIT_OPERATION_FAILED',\n    // Bucket mounting errors\n    BUCKET_MOUNT_ERROR: 'BUCKET_MOUNT_ERROR',\n    S3FS_MOUNT_ERROR: 'S3FS_MOUNT_ERROR',\n    MISSING_CREDENTIALS: 'MISSING_CREDENTIALS',\n    INVALID_MOUNT_CONFIG: 'INVALID_MOUNT_CONFIG',\n    // Code Interpreter Errors (503)\n    INTERPRETER_NOT_READY: 'INTERPRETER_NOT_READY',\n    // Code Interpreter Errors (404)\n    CONTEXT_NOT_FOUND: 'CONTEXT_NOT_FOUND',\n    // Code Interpreter Errors (500)\n    CODE_EXECUTION_ERROR: 'CODE_EXECUTION_ERROR',\n    // Code Interpreter Errors (501) - Feature not available in image variant\n    PYTHON_NOT_AVAILABLE: 'PYTHON_NOT_AVAILABLE',\n    JAVASCRIPT_NOT_AVAILABLE: 'JAVASCRIPT_NOT_AVAILABLE',\n    // OpenCode Errors (503)\n    OPENCODE_STARTUP_FAILED: 'OPENCODE_STARTUP_FAILED',\n    // Process Readiness Errors (408/500)\n    PROCESS_READY_TIMEOUT: 'PROCESS_READY_TIMEOUT',\n    PROCESS_EXITED_BEFORE_READY: 'PROCESS_EXITED_BEFORE_READY',\n    // Validation Errors (400)\n    VALIDATION_FAILED: 'VALIDATION_FAILED',\n    // Generic Errors (400/500)\n    INVALID_JSON_RESPONSE: 'INVALID_JSON_RESPONSE',\n    UNKNOWN_ERROR: 'UNKNOWN_ERROR',\n    INTERNAL_ERROR: 'INTERNAL_ERROR'\n};\n","import { ErrorCode } from './codes';\n/**\n * Maps error codes to HTTP status codes\n * Centralized mapping ensures consistency across SDK\n */\nexport const ERROR_STATUS_MAP = {\n    // 404 Not Found\n    [ErrorCode.FILE_NOT_FOUND]: 404,\n    [ErrorCode.COMMAND_NOT_FOUND]: 404,\n    [ErrorCode.PROCESS_NOT_FOUND]: 404,\n    [ErrorCode.PORT_NOT_EXPOSED]: 404,\n    [ErrorCode.GIT_REPOSITORY_NOT_FOUND]: 404,\n    [ErrorCode.GIT_BRANCH_NOT_FOUND]: 404,\n    [ErrorCode.CONTEXT_NOT_FOUND]: 404,\n    // 400 Bad Request\n    [ErrorCode.IS_DIRECTORY]: 400,\n    [ErrorCode.NOT_DIRECTORY]: 400,\n    [ErrorCode.INVALID_COMMAND]: 400,\n    [ErrorCode.INVALID_PORT_NUMBER]: 400,\n    [ErrorCode.INVALID_PORT]: 400,\n    [ErrorCode.INVALID_GIT_URL]: 400,\n    [ErrorCode.CUSTOM_DOMAIN_REQUIRED]: 400,\n    [ErrorCode.INVALID_JSON_RESPONSE]: 400,\n    [ErrorCode.NAME_TOO_LONG]: 400,\n    [ErrorCode.VALIDATION_FAILED]: 400,\n    [ErrorCode.MISSING_CREDENTIALS]: 400,\n    [ErrorCode.INVALID_MOUNT_CONFIG]: 400,\n    // 401 Unauthorized\n    [ErrorCode.GIT_AUTH_FAILED]: 401,\n    // 403 Forbidden\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.COMMAND_PERMISSION_DENIED]: 403,\n    [ErrorCode.PROCESS_PERMISSION_DENIED]: 403,\n    [ErrorCode.READ_ONLY]: 403,\n    // 409 Conflict\n    [ErrorCode.FILE_EXISTS]: 409,\n    [ErrorCode.PORT_ALREADY_EXPOSED]: 409,\n    [ErrorCode.PORT_IN_USE]: 409,\n    [ErrorCode.RESOURCE_BUSY]: 409,\n    [ErrorCode.SESSION_ALREADY_EXISTS]: 409,\n    // 502 Bad Gateway\n    [ErrorCode.SERVICE_NOT_RESPONDING]: 502,\n    [ErrorCode.GIT_NETWORK_ERROR]: 502,\n    // 501 Not Implemented (feature not available in image variant)\n    [ErrorCode.PYTHON_NOT_AVAILABLE]: 501,\n    [ErrorCode.JAVASCRIPT_NOT_AVAILABLE]: 501,\n    // 503 Service Unavailable\n    [ErrorCode.INTERPRETER_NOT_READY]: 503,\n    [ErrorCode.OPENCODE_STARTUP_FAILED]: 503,\n    // 408 Request Timeout\n    [ErrorCode.PROCESS_READY_TIMEOUT]: 408,\n    // 500 Internal Server Error\n    [ErrorCode.PROCESS_EXITED_BEFORE_READY]: 500,\n    [ErrorCode.NO_SPACE]: 500,\n    [ErrorCode.TOO_MANY_FILES]: 500,\n    [ErrorCode.TOO_MANY_LINKS]: 500,\n    [ErrorCode.FILESYSTEM_ERROR]: 500,\n    [ErrorCode.COMMAND_EXECUTION_ERROR]: 500,\n    [ErrorCode.STREAM_START_ERROR]: 500,\n    [ErrorCode.PROCESS_ERROR]: 500,\n    [ErrorCode.PORT_OPERATION_ERROR]: 500,\n    [ErrorCode.GIT_CLONE_FAILED]: 500,\n    [ErrorCode.GIT_CHECKOUT_FAILED]: 500,\n    [ErrorCode.GIT_OPERATION_FAILED]: 500,\n    [ErrorCode.CODE_EXECUTION_ERROR]: 500,\n    [ErrorCode.BUCKET_MOUNT_ERROR]: 500,\n    [ErrorCode.S3FS_MOUNT_ERROR]: 500,\n    [ErrorCode.UNKNOWN_ERROR]: 500,\n    [ErrorCode.INTERNAL_ERROR]: 500\n};\n/**\n * Get HTTP status code for an error code\n * Falls back to 500 for unknown errors\n */\nexport function getHttpStatus(code) {\n    return ERROR_STATUS_MAP[code] || 500;\n}\n"],"mappings":";;;;;AAIA,MAAa,YAAY;CAErB,gBAAgB;CAEhB,mBAAmB;CAEnB,aAAa;CAEb,cAAc;CACd,eAAe;CAEf,UAAU;CACV,gBAAgB;CAChB,eAAe;CACf,WAAW;CACX,eAAe;CACf,gBAAgB;CAChB,kBAAkB;CAElB,mBAAmB;CAEnB,2BAA2B;CAC3B,iBAAiB;CAEjB,yBAAyB;CACzB,oBAAoB;CAEpB,mBAAmB;CAEnB,2BAA2B;CAC3B,eAAe;CAEf,wBAAwB;CAExB,sBAAsB;CACtB,aAAa;CAEb,kBAAkB;CAElB,qBAAqB;CACrB,cAAc;CAEd,wBAAwB;CACxB,sBAAsB;CAEtB,wBAAwB;CAExB,0BAA0B;CAC1B,sBAAsB;CAEtB,iBAAiB;CAEjB,mBAAmB;CAEnB,iBAAiB;CAEjB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,oBAAoB;CACpB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,uBAAuB;CAEvB,mBAAmB;CAEnB,sBAAsB;CAEtB,sBAAsB;CACtB,0BAA0B;CAE1B,yBAAyB;CAEzB,uBAAuB;CACvB,6BAA6B;CAE7B,mBAAmB;CAEnB,uBAAuB;CACvB,eAAe;CACf,gBAAgB;CACnB;;;;;;;;ACnFD,MAAa,mBAAmB;EAE3B,UAAU,iBAAiB;EAC3B,UAAU,oBAAoB;EAC9B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,2BAA2B;EACrC,UAAU,uBAAuB;EACjC,UAAU,oBAAoB;EAE9B,UAAU,eAAe;EACzB,UAAU,gBAAgB;EAC1B,UAAU,kBAAkB;EAC5B,UAAU,sBAAsB;EAChC,UAAU,eAAe;EACzB,UAAU,kBAAkB;EAC5B,UAAU,yBAAyB;EACnC,UAAU,wBAAwB;EAClC,UAAU,gBAAgB;EAC1B,UAAU,oBAAoB;EAC9B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EAEjC,UAAU,kBAAkB;EAE5B,UAAU,oBAAoB;EAC9B,UAAU,4BAA4B;EACtC,UAAU,4BAA4B;EACtC,UAAU,YAAY;EAEtB,UAAU,cAAc;EACxB,UAAU,uBAAuB;EACjC,UAAU,cAAc;EACxB,UAAU,gBAAgB;EAC1B,UAAU,yBAAyB;EAEnC,UAAU,yBAAyB;EACnC,UAAU,oBAAoB;EAE9B,UAAU,uBAAuB;EACjC,UAAU,2BAA2B;EAErC,UAAU,wBAAwB;EAClC,UAAU,0BAA0B;EAEpC,UAAU,wBAAwB;EAElC,UAAU,8BAA8B;EACxC,UAAU,WAAW;EACrB,UAAU,iBAAiB;EAC3B,UAAU,iBAAiB;EAC3B,UAAU,mBAAmB;EAC7B,UAAU,0BAA0B;EACpC,UAAU,qBAAqB;EAC/B,UAAU,gBAAgB;EAC1B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EACjC,UAAU,uBAAuB;EACjC,UAAU,qBAAqB;EAC/B,UAAU,mBAAmB;EAC7B,UAAU,gBAAgB;EAC1B,UAAU,iBAAiB;CAC/B"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { $ as ProcessInfoResult, A as RequestConfig, B as FileChunk, C as WriteFileRequest, D as ContainerStub, E as BaseApiResponse, F as BucketProvider, G as ListFilesOptions, H as FileStreamEvent, I as ExecEvent, J as PortCloseResult, K as LogEvent, L as ExecOptions, M as SessionRequest, N as BaseExecOptions, O as ErrorResponse, P as BucketCredentials, Q as ProcessCleanupResult, R as ExecResult, S as ReadFileRequest, T as ExecuteResponse, U as GitCheckoutResult, V as FileMetadata, W as ISandbox, X as PortListResult, Y as PortExposeResult, Z as Process, _ as GitCheckoutRequest, _t as ExecutionResult, a as CreateSessionRequest, at as ProcessStatus, b as FileOperationRequest, c as DeleteSessionResponse, ct as StreamOptions, d as ProcessClient, dt as isExecResult, et as ProcessKillResult, f as ExposePortRequest, ft as isProcess, g as InterpreterClient, gt as Execution, h as ExecutionCallbacks, ht as CreateContextOptions, i as CommandsResponse, it as ProcessStartResult, j as ResponseHandler, k as HttpClientOptions, l as PingResponse, lt as WaitForLogResult, m as UnexposePortRequest, mt as CodeContext, n as getSandbox, nt as ProcessLogsResult, o as CreateSessionResponse, ot as SandboxOptions, p as PortClient, pt as isProcessStatus, q as MountBucketOptions, r as SandboxClient, rt as ProcessOptions, s as DeleteSessionRequest, st as SessionOptions, t as Sandbox, tt as ProcessListResult, u as UtilityClient, ut as WaitForPortOptions, v as GitClient, vt as RunCodeOptions, w as CommandClient, x as MkdirRequest, y as FileClient, z as ExecutionSession } from "./sandbox-C9WRqWBO.js";
-import { a as OperationType, i as ErrorResponse$1, n as ProcessExitedBeforeReadyContext, o as ErrorCode, r as ProcessReadyTimeoutContext } from "./contexts-DeQQjsXq.js";
+import { $ as ProcessInfoResult, A as RequestConfig, B as FileChunk, C as WriteFileRequest, D as ContainerStub, E as BaseApiResponse, F as BucketProvider, G as ListFilesOptions, H as FileStreamEvent, I as ExecEvent, J as PortCloseResult, K as LogEvent, L as ExecOptions, M as SessionRequest, N as BaseExecOptions, O as ErrorResponse, P as BucketCredentials, Q as ProcessCleanupResult, R as ExecResult, S as ReadFileRequest, T as ExecuteResponse, U as GitCheckoutResult, V as FileMetadata, W as ISandbox, X as PortListResult, Y as PortExposeResult, Z as Process, _ as GitCheckoutRequest, _t as ExecutionResult, a as CreateSessionRequest, at as ProcessStatus, b as FileOperationRequest, c as DeleteSessionResponse, ct as StreamOptions, d as ProcessClient, dt as isExecResult, et as ProcessKillResult, f as ExposePortRequest, ft as isProcess, g as InterpreterClient, gt as Execution, h as ExecutionCallbacks, ht as CreateContextOptions, i as CommandsResponse, it as ProcessStartResult, j as ResponseHandler, k as HttpClientOptions, l as PingResponse, lt as WaitForLogResult, m as UnexposePortRequest, mt as CodeContext, n as getSandbox, nt as ProcessLogsResult, o as CreateSessionResponse, ot as SandboxOptions, p as PortClient, pt as isProcessStatus, q as MountBucketOptions, r as SandboxClient, rt as ProcessOptions, s as DeleteSessionRequest, st as SessionOptions, t as Sandbox, tt as ProcessListResult, u as UtilityClient, ut as WaitForPortOptions, v as GitClient, vt as RunCodeOptions, w as CommandClient, x as MkdirRequest, y as FileClient, z as ExecutionSession } from "./sandbox-09Ce7yli.js";
+import { a as OperationType, i as ErrorResponse$1, n as ProcessExitedBeforeReadyContext, o as ErrorCode, r as ProcessReadyTimeoutContext } from "./contexts-CdrlvHWK.js";
 
 //#region ../shared/dist/request-types.d.ts
 

package/dist/index.js

@@ -1,5 +1,5 @@
 import { a as shellEscape, c as TraceContext, d as GitLogger, f as getEnvString, i as isTerminalStatus, l as Execution, n as isProcess, o as createLogger, r as isProcessStatus, s as createNoOpLogger, t as isExecResult, u as ResultImpl } from "./dist-2SF6oOaz.js";
-import { t as ErrorCode } from "./errors-BHN41iBd.js";
+import { t as ErrorCode } from "./errors-BCXUmJUn.js";
 import { Container, getContainer, switchPort } from "@cloudflare/containers";
 
 //#region src/errors/classes.ts
@@ -586,14 +586,14 @@ var BaseHttpClient = class {
 	}
 	/**
 	* Core HTTP request method with automatic retry for container startup delays
-	* Retries both 503 (provisioning) and 500 (startup failure) errors when they're container-related
+	* Retries on 503 (Service Unavailable) which indicates container is starting
 	*/
 	async doFetch(path, options) {
 		const startTime = Date.now();
 		let attempt = 0;
 		while (true) {
 			const response = await this.executeFetch(path, options);
-			if (await this.isRetryableContainerError(response)) {
+			if (this.isRetryableContainerError(response)) {
 				const elapsed = Date.now() - startTime;
 				const remaining = TIMEOUT_MS - elapsed;
 				if (remaining > MIN_TIME_FOR_RETRY_MS) {
@@ -706,51 +706,19 @@ var BaseHttpClient = class {
 	}
 	/**
 	* Check if response indicates a retryable container error
-	* Uses fail-safe strategy: only retry known transient errors
 	*
-	* TODO: This relies on string matching error messages, which is brittle.
-	* Ideally, the container API should return structured errors with a
-	* `retryable: boolean` field to avoid coupling to error message format.
+	* The Sandbox DO returns proper HTTP status codes:
+	* - 503 Service Unavailable: Transient errors (container starting, port not ready)
+	* - 500 Internal Server Error: Permanent errors (bad config, missing image)
+	*
+	* We only retry on 503, which indicates the container is starting up.
+	* The Retry-After header suggests how long to wait.
 	*
 	* @param response - HTTP response to check
-	* @returns true if error is retryable container error, false otherwise
+	* @returns true if error is retryable (503), false otherwise
 	*/
-	async isRetryableContainerError(response) {
-		if (response.status !== 500 && response.status !== 503) return false;
-		try {
-			const text = await response.clone().text();
-			const textLower = text.toLowerCase();
-			if ([
-				"no such image",
-				"container already exists",
-				"malformed containerinspect"
-			].some((err) => textLower.includes(err))) {
-				this.logger.debug("Detected permanent error, not retrying", { text });
-				return false;
-			}
-			const shouldRetry = [
-				"no container instance available",
-				"currently provisioning",
-				"container port not found",
-				"connection refused: container port",
-				"the container is not listening",
-				"failed to verify port",
-				"container did not start",
-				"network connection lost",
-				"container suddenly disconnected",
-				"monitor failed to find container",
-				"timed out",
-				"timeout"
-			].some((err) => textLower.includes(err));
-			if (!shouldRetry) this.logger.debug("Unknown error pattern, not retrying", {
-				status: response.status,
-				text: text.substring(0, 200)
-			});
-			return shouldRetry;
-		} catch (error) {
-			this.logger.error("Error checking if response is retryable", error instanceof Error ? error : new Error(String(error)));
-			return false;
-		}
+	isRetryableContainerError(response) {
+		return response.status === 503;
 	}
 	async executeFetch(path, options) {
 		const url = this.options.stub ? `http://localhost:${this.options.port}${path}` : `${this.baseUrl}${path}`;
@@ -2019,7 +1987,7 @@ function resolveS3fsOptions(provider, userOptions) {
 * This file is auto-updated by .github/changeset-version.ts during releases
 * DO NOT EDIT MANUALLY - Changes will be overwritten on the next version bump
 */
-const SDK_VERSION = "0.6.4";
+const SDK_VERSION = "0.6.6";
 
 //#endregion
 //#region src/sandbox.ts
@@ -2379,18 +2347,57 @@ var Sandbox = class extends Container {
 				status: 503,
 				headers: { "Retry-After": "10" }
 			});
-			this.logger.error("Container startup failed", e instanceof Error ? e : new Error(String(e)));
+			if (this.isTransientStartupError(e)) {
+				this.logger.debug("Transient container startup error, returning 503", { error: e instanceof Error ? e.message : String(e) });
+				return new Response("Container is starting. Please retry in a moment.", {
+					status: 503,
+					headers: { "Retry-After": "3" }
+				});
+			}
+			this.logger.error("Container startup failed with permanent error", e instanceof Error ? e : new Error(String(e)));
 			return new Response(`Failed to start container: ${e instanceof Error ? e.message : String(e)}`, { status: 500 });
 		}
 		return await super.containerFetch(requestOrUrl, portOrInit, portParam);
 	}
 	/**
 	* Helper: Check if error is "no container instance available"
+	* This indicates the container VM is still being provisioned.
 	*/
 	isNoInstanceError(error) {
 		return error instanceof Error && error.message.toLowerCase().includes("no container instance");
 	}
 	/**
+	* Helper: Check if error is a transient startup error that should trigger retry
+	*
+	* These errors occur during normal container startup and are recoverable:
+	* - Port not yet mapped (container starting, app not listening yet)
+	* - Connection refused (port mapped but app not ready)
+	* - Timeouts during startup (recoverable with retry)
+	* - Network transients (temporary connectivity issues)
+	*
+	* Errors NOT included (permanent failures):
+	* - "no such image" - missing Docker image
+	* - "container already exists" - name collision
+	* - Configuration errors
+	*/
+	isTransientStartupError(error) {
+		if (!(error instanceof Error)) return false;
+		const msg = error.message.toLowerCase();
+		return [
+			"container port not found",
+			"connection refused: container port",
+			"the container is not listening",
+			"failed to verify port",
+			"container did not start",
+			"network connection lost",
+			"container suddenly disconnected",
+			"monitor failed to find container",
+			"timed out",
+			"timeout",
+			"the operation was aborted"
+		].some((pattern) => msg.includes(pattern));
+	}
+	/**
 	* Helper: Parse containerFetch arguments (supports multiple signatures)
 	*/
 	parseContainerFetchArgs(requestOrUrl, portOrInit, portParam) {
@@ -2606,6 +2613,9 @@ var Sandbox = class extends Container {
 			},
 			waitForPort: async (port, options) => {
 				await this.waitForPortReady(data.id, data.command, port, options);
+			},
+			waitForExit: async (timeout) => {
+				return this.waitForProcessExit(data.id, data.command, timeout);
 			}
 		};
 	}
@@ -2731,6 +2741,30 @@ var Sandbox = class extends Container {
 		}
 	}
 	/**
+	* Wait for a process to exit
+	* Returns the exit code
+	*/
+	async waitForProcessExit(processId, command, timeout) {
+		const stream = await this.streamProcessLogs(processId);
+		let timeoutId;
+		let timeoutPromise;
+		if (timeout !== void 0) timeoutPromise = new Promise((_, reject) => {
+			timeoutId = setTimeout(() => {
+				reject(this.createReadyTimeoutError(processId, command, "process exit", timeout));
+			}, timeout);
+		});
+		try {
+			const streamProcessor = async () => {
+				for await (const event of parseSSEStream(stream)) if (event.type === "exit") return { exitCode: event.exitCode ?? 1 };
+				throw new Error(`Process ${processId} stream ended unexpectedly without exit event`);
+			};
+			if (timeoutPromise) return await Promise.race([streamProcessor(), timeoutPromise]);
+			return await streamProcessor();
+		} finally {
+			if (timeoutId) clearTimeout(timeoutId);
+		}
+	}
+	/**
 	* Match a pattern against text
 	*/
 	matchPattern(text, pattern) {