@cloudflare/sandbox 0.9.0 → 0.9.2

package/dist/bridge/index.js

@@ -1,6 +1,6 @@
-import "../dist-Ilf8VjmX.js";
-import "../errors-Dk2rApYI.js";
-import { h as streamFile, n as getSandbox } from "../sandbox-Cf_Wjrzq.js";
+import "../dist-B_eXrP83.js";
+import "../errors-CBi-O-pF.js";
+import { h as streamFile, n as getSandbox } from "../sandbox-CReFGUtF.js";
 import { DurableObject, env } from "cloudflare:workers";
 import { Hono } from "hono";
 

package/dist/{contexts-D6kt6WyG.d.ts → contexts-D_shbnJs.d.ts}

@@ -75,6 +75,7 @@ declare const ErrorCode: {
   readonly INVALID_JSON_RESPONSE: "INVALID_JSON_RESPONSE";
   readonly UNKNOWN_ERROR: "UNKNOWN_ERROR";
   readonly INTERNAL_ERROR: "INTERNAL_ERROR";
+  readonly RPC_TRANSPORT_ERROR: "RPC_TRANSPORT_ERROR";
 };
 type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];
 //#endregion
@@ -213,6 +214,35 @@ interface OpencodeStartupContext {
   stderr?: string;
   command?: string;
 }
+/**
+ * RPC transport error contexts. Surfaced when the capnweb WebSocket session
+ * fails on the SDK side rather than the container reporting a structured
+ * error. Always retryable — the next call will open a fresh connection.
+ */
+type RPCTransportErrorKind = /** Server closed the WebSocket (container crash, DO eviction, network blip). */
+'peer_closed'
+/** Underlying socket fired the `error` event. */ | 'connection_failed'
+/** WebSocket upgrade failed before the session was established. */ | 'upgrade_failed'
+/** Peer sent a non-string frame; capnweb's wire format is JSON text only. */ | 'invalid_frame'
+/** Peer sent a frame the wire-format parser rejected (capnweb readLoop SyntaxError). */ | 'protocol_error'
+/** Session was disposed (locally or remotely) while a call was pending. */ | 'session_disposed'
+/** Anything else that bubbled up from the transport with no recognisable shape. */ | 'unknown';
+interface RPCTransportContext {
+  /** Categorical bucket so callers can branch on `peer_closed` vs `upgrade_failed` etc. */
+  kind: RPCTransportErrorKind;
+  /** Original error message, verbatim from capnweb / our DeferredTransport. */
+  originalMessage: string;
+  /**
+   * The underlying Error's `name` property. capnweb preserves this across
+   * the wire for the standard built-ins (TypeError, SyntaxError, etc.), so
+   * it's a more reliable hint than the message string for those cases.
+   */
+  errorName: string;
+  /** WebSocket close code, when available (kind === 'peer_closed'). */
+  closeCode?: number;
+  /** WebSocket close reason, when available (kind === 'peer_closed'). */
+  closeReason?: string;
+}
 /**
  * Desktop error contexts
  */
@@ -229,5 +259,5 @@ interface DesktopCoordinateErrorContext {
   displayHeight: number;
 }
 //#endregion
-export { DesktopCoordinateErrorContext as a, OpencodeStartupContext as c, SessionTerminatedContext as d, ErrorResponse as f, BackupRestoreContext as i, ProcessExitedBeforeReadyContext as l, ErrorCode as m, BackupExpiredContext as n, DesktopErrorContext as o, OperationType as p, BackupNotFoundContext as r, InvalidBackupConfigContext as s, BackupCreateContext as t, ProcessReadyTimeoutContext as u };
-//# sourceMappingURL=contexts-D6kt6WyG.d.ts.map
+export { DesktopCoordinateErrorContext as a, OpencodeStartupContext as c, RPCTransportContext as d, RPCTransportErrorKind as f, ErrorCode as g, OperationType as h, BackupRestoreContext as i, ProcessExitedBeforeReadyContext as l, ErrorResponse as m, BackupExpiredContext as n, DesktopErrorContext as o, SessionTerminatedContext as p, BackupNotFoundContext as r, InvalidBackupConfigContext as s, BackupCreateContext as t, ProcessReadyTimeoutContext as u };
+//# sourceMappingURL=contexts-D_shbnJs.d.ts.map

package/dist/contexts-D_shbnJs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contexts-D_shbnJs.d.ts","names":["ErrorCode","ErrorCode","Operation","OperationType","ErrorResponse","TContext","Record","ServiceError","ServiceResult","T","OperationType","FileNotFoundContext","FileExistsContext","FileTooLargeContext","FileSystemContext","CommandNotFoundContext","CommandErrorContext","ProcessNotFoundContext","ProcessErrorContext","SessionAlreadyExistsContext","SessionDestroyedContext","SessionTerminatedContext","ProcessReadyTimeoutContext","ProcessExitedBeforeReadyContext","PortAlreadyExposedContext","PortNotExposedContext","InvalidPortContext","PortErrorContext","GitRepositoryNotFoundContext","GitAuthFailedContext","GitBranchNotFoundContext","GitErrorContext","InterpreterNotReadyContext","ContextNotFoundContext","CodeExecutionContext","ValidationFailedContext","Array","BucketMountContext","MissingCredentialsContext","InvalidMountConfigContext","BackupCreateContext","BackupRestoreContext","BackupNotFoundContext","BackupExpiredContext","InvalidBackupConfigContext","OpencodeStartupContext","InternalErrorContext","RPCTransportErrorKind","RPCTransportContext","DesktopErrorContext","DesktopCoordinateErrorContext"],"sources":["../../shared/dist/errors/codes.d.ts","../../shared/dist/errors/types.d.ts","../../shared/dist/errors/contexts.d.ts"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport declare const ErrorCode: {\n    readonly FILE_NOT_FOUND: \"FILE_NOT_FOUND\";\n    readonly PERMISSION_DENIED: \"PERMISSION_DENIED\";\n    readonly FILE_EXISTS: \"FILE_EXISTS\";\n    readonly IS_DIRECTORY: \"IS_DIRECTORY\";\n    readonly NOT_DIRECTORY: \"NOT_DIRECTORY\";\n    readonly FILE_TOO_LARGE: \"FILE_TOO_LARGE\";\n    readonly NO_SPACE: \"NO_SPACE\";\n    readonly TOO_MANY_FILES: \"TOO_MANY_FILES\";\n    readonly RESOURCE_BUSY: \"RESOURCE_BUSY\";\n    readonly READ_ONLY: \"READ_ONLY\";\n    readonly NAME_TOO_LONG: \"NAME_TOO_LONG\";\n    readonly TOO_MANY_LINKS: \"TOO_MANY_LINKS\";\n    readonly FILESYSTEM_ERROR: \"FILESYSTEM_ERROR\";\n    readonly COMMAND_NOT_FOUND: \"COMMAND_NOT_FOUND\";\n    readonly COMMAND_PERMISSION_DENIED: \"COMMAND_PERMISSION_DENIED\";\n    readonly INVALID_COMMAND: \"INVALID_COMMAND\";\n    readonly COMMAND_EXECUTION_ERROR: \"COMMAND_EXECUTION_ERROR\";\n    readonly STREAM_START_ERROR: \"STREAM_START_ERROR\";\n    readonly PROCESS_NOT_FOUND: \"PROCESS_NOT_FOUND\";\n    readonly PROCESS_PERMISSION_DENIED: \"PROCESS_PERMISSION_DENIED\";\n    readonly PROCESS_ERROR: \"PROCESS_ERROR\";\n    readonly SESSION_ALREADY_EXISTS: \"SESSION_ALREADY_EXISTS\";\n    readonly SESSION_DESTROYED: \"SESSION_DESTROYED\";\n    readonly SESSION_TERMINATED: \"SESSION_TERMINATED\";\n    readonly PORT_ALREADY_EXPOSED: \"PORT_ALREADY_EXPOSED\";\n    readonly PORT_IN_USE: \"PORT_IN_USE\";\n    readonly PORT_NOT_EXPOSED: \"PORT_NOT_EXPOSED\";\n    readonly INVALID_PORT_NUMBER: \"INVALID_PORT_NUMBER\";\n    readonly INVALID_PORT: \"INVALID_PORT\";\n    readonly SERVICE_NOT_RESPONDING: \"SERVICE_NOT_RESPONDING\";\n    readonly PORT_OPERATION_ERROR: \"PORT_OPERATION_ERROR\";\n    readonly CUSTOM_DOMAIN_REQUIRED: \"CUSTOM_DOMAIN_REQUIRED\";\n    readonly GIT_REPOSITORY_NOT_FOUND: \"GIT_REPOSITORY_NOT_FOUND\";\n    readonly GIT_BRANCH_NOT_FOUND: \"GIT_BRANCH_NOT_FOUND\";\n    readonly GIT_AUTH_FAILED: \"GIT_AUTH_FAILED\";\n    readonly GIT_NETWORK_ERROR: \"GIT_NETWORK_ERROR\";\n    readonly INVALID_GIT_URL: \"INVALID_GIT_URL\";\n    readonly GIT_CLONE_FAILED: \"GIT_CLONE_FAILED\";\n    readonly GIT_CHECKOUT_FAILED: \"GIT_CHECKOUT_FAILED\";\n    readonly GIT_OPERATION_FAILED: \"GIT_OPERATION_FAILED\";\n    readonly BUCKET_MOUNT_ERROR: \"BUCKET_MOUNT_ERROR\";\n    readonly BUCKET_UNMOUNT_ERROR: \"BUCKET_UNMOUNT_ERROR\";\n    readonly S3FS_MOUNT_ERROR: \"S3FS_MOUNT_ERROR\";\n    readonly MISSING_CREDENTIALS: \"MISSING_CREDENTIALS\";\n    readonly INVALID_MOUNT_CONFIG: \"INVALID_MOUNT_CONFIG\";\n    readonly BACKUP_CREATE_FAILED: \"BACKUP_CREATE_FAILED\";\n    readonly BACKUP_RESTORE_FAILED: \"BACKUP_RESTORE_FAILED\";\n    readonly BACKUP_NOT_FOUND: \"BACKUP_NOT_FOUND\";\n    readonly BACKUP_EXPIRED: \"BACKUP_EXPIRED\";\n    readonly INVALID_BACKUP_CONFIG: \"INVALID_BACKUP_CONFIG\";\n    readonly INTERPRETER_NOT_READY: \"INTERPRETER_NOT_READY\";\n    readonly CONTEXT_NOT_FOUND: \"CONTEXT_NOT_FOUND\";\n    readonly CODE_EXECUTION_ERROR: \"CODE_EXECUTION_ERROR\";\n    readonly PYTHON_NOT_AVAILABLE: \"PYTHON_NOT_AVAILABLE\";\n    readonly JAVASCRIPT_NOT_AVAILABLE: \"JAVASCRIPT_NOT_AVAILABLE\";\n    readonly OPENCODE_STARTUP_FAILED: \"OPENCODE_STARTUP_FAILED\";\n    readonly PROCESS_READY_TIMEOUT: \"PROCESS_READY_TIMEOUT\";\n    readonly PROCESS_EXITED_BEFORE_READY: \"PROCESS_EXITED_BEFORE_READY\";\n    readonly DESKTOP_NOT_STARTED: \"DESKTOP_NOT_STARTED\";\n    readonly DESKTOP_START_FAILED: \"DESKTOP_START_FAILED\";\n    readonly DESKTOP_UNAVAILABLE: \"DESKTOP_UNAVAILABLE\";\n    readonly DESKTOP_PROCESS_CRASHED: \"DESKTOP_PROCESS_CRASHED\";\n    readonly DESKTOP_INVALID_OPTIONS: \"DESKTOP_INVALID_OPTIONS\";\n    readonly DESKTOP_INVALID_COORDINATES: \"DESKTOP_INVALID_COORDINATES\";\n    readonly WATCH_NOT_FOUND: \"WATCH_NOT_FOUND\";\n    readonly WATCH_START_ERROR: \"WATCH_START_ERROR\";\n    readonly WATCH_STOP_ERROR: \"WATCH_STOP_ERROR\";\n    readonly VALIDATION_FAILED: \"VALIDATION_FAILED\";\n    readonly INVALID_JSON_RESPONSE: \"INVALID_JSON_RESPONSE\";\n    readonly UNKNOWN_ERROR: \"UNKNOWN_ERROR\";\n    readonly INTERNAL_ERROR: \"INTERNAL_ERROR\";\n    readonly RPC_TRANSPORT_ERROR: \"RPC_TRANSPORT_ERROR\";\n};\nexport type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];\n//# sourceMappingURL=codes.d.ts.map","import type { ErrorCode } from './codes';\n/**\n * Standard operation types\n */\nexport declare const Operation: {\n    readonly FILE_READ: \"file.read\";\n    readonly FILE_WRITE: \"file.write\";\n    readonly FILE_DELETE: \"file.delete\";\n    readonly FILE_MOVE: \"file.move\";\n    readonly FILE_RENAME: \"file.rename\";\n    readonly FILE_STAT: \"file.stat\";\n    readonly DIRECTORY_CREATE: \"directory.create\";\n    readonly DIRECTORY_LIST: \"directory.list\";\n    readonly COMMAND_EXECUTE: \"command.execute\";\n    readonly COMMAND_STREAM: \"command.stream\";\n    readonly PROCESS_START: \"process.start\";\n    readonly PROCESS_KILL: \"process.kill\";\n    readonly PROCESS_LIST: \"process.list\";\n    readonly PROCESS_GET: \"process.get\";\n    readonly PROCESS_LOGS: \"process.logs\";\n    readonly PORT_EXPOSE: \"port.expose\";\n    readonly PORT_UNEXPOSE: \"port.unexpose\";\n    readonly PORT_LIST: \"port.list\";\n    readonly PORT_PROXY: \"port.proxy\";\n    readonly GIT_CLONE: \"git.clone\";\n    readonly GIT_CHECKOUT: \"git.checkout\";\n    readonly GIT_OPERATION: \"git.operation\";\n    readonly BACKUP_CREATE: \"backup.create\";\n    readonly BACKUP_RESTORE: \"backup.restore\";\n    readonly BACKUP_UNMOUNT: \"backup.unmount\";\n    readonly DESKTOP_START: \"desktop.start\";\n    readonly DESKTOP_STOP: \"desktop.stop\";\n    readonly DESKTOP_SCREENSHOT: \"desktop.screenshot\";\n    readonly DESKTOP_MOUSE: \"desktop.mouse\";\n    readonly DESKTOP_KEYBOARD: \"desktop.keyboard\";\n    readonly DESKTOP_STATUS: \"desktop.status\";\n    readonly CODE_EXECUTE: \"code.execute\";\n    readonly CODE_CONTEXT_CREATE: \"code.context.create\";\n    readonly CODE_CONTEXT_DELETE: \"code.context.delete\";\n};\nexport type OperationType = (typeof Operation)[keyof typeof Operation];\n/**\n * Standard error response format with generic context type\n * TContext allows type-safe access to error-specific context\n */\nexport interface ErrorResponse<TContext = Record<string, unknown>> {\n    /**\n     * Error type code (machine-readable)\n     */\n    code: ErrorCode;\n    /**\n     * Human-readable error message\n     */\n    message: string;\n    /**\n     * Operation that was attempted (useful for debugging and logging)\n     */\n    operation?: OperationType;\n    /**\n     * Structured error context with relevant details\n     * Type varies based on error code\n     */\n    context: TContext;\n    /**\n     * HTTP status code (for client SDK)\n     */\n    httpStatus: number;\n    /**\n     * Timestamp when error occurred\n     */\n    timestamp: string;\n    /**\n     * Actionable suggestion for fixing the error\n     */\n    suggestion?: string;\n    /**\n     * Link to documentation\n     */\n    documentation?: string;\n}\n/**\n * Container ServiceError (lightweight, enriched by handlers)\n */\nexport interface ServiceError {\n    message: string;\n    code: ErrorCode;\n    details?: Record<string, unknown>;\n}\n/**\n * ServiceResult type for container services\n */\nexport type ServiceResult<T> = {\n    success: true;\n    data: T;\n} | {\n    success: false;\n    error: ServiceError;\n};\n//# sourceMappingURL=types.d.ts.map","import type { OperationType } from './types';\n/**\n * File system error contexts\n */\nexport interface FileNotFoundContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileExistsContext {\n    path: string;\n    operation: OperationType;\n}\nexport interface FileTooLargeContext {\n    path: string;\n    operation: OperationType;\n    maxSize: number;\n    actualSize: number;\n}\nexport interface FileSystemContext {\n    path: string;\n    operation: OperationType;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Command error contexts\n */\nexport interface CommandNotFoundContext {\n    command: string;\n}\nexport interface CommandErrorContext {\n    command: string;\n    exitCode?: number;\n    stdout?: string;\n    stderr?: string;\n}\n/**\n * Process error contexts\n */\nexport interface ProcessNotFoundContext {\n    processId: string;\n}\nexport interface ProcessErrorContext {\n    processId: string;\n    pid?: number;\n    exitCode?: number;\n    stderr?: string;\n}\nexport interface SessionAlreadyExistsContext {\n    sessionId: string;\n    /**\n     * `CLOUDFLARE_PLACEMENT_ID` captured from the container at the moment the\n     * duplicate create was detected. Included so a restarted DO can learn the\n     * container's placement ID from an idempotent session-create. `null` when\n     * the env var is not set (for example, in local development).\n     */\n    containerPlacementId?: string | null;\n}\nexport interface SessionDestroyedContext {\n    sessionId: string;\n}\nexport interface SessionTerminatedContext {\n    sessionId: string;\n    exitCode: number | null;\n}\n/**\n * Process readiness error contexts\n */\nexport interface ProcessReadyTimeoutContext {\n    processId: string;\n    command: string;\n    condition: string;\n    timeout: number;\n}\nexport interface ProcessExitedBeforeReadyContext {\n    processId: string;\n    command: string;\n    condition: string;\n    exitCode: number;\n}\n/**\n * Port error contexts\n */\nexport interface PortAlreadyExposedContext {\n    port: number;\n    portName?: string;\n}\nexport interface PortNotExposedContext {\n    port: number;\n}\nexport interface InvalidPortContext {\n    port: number;\n    reason: string;\n}\nexport interface PortErrorContext {\n    port: number;\n    portName?: string;\n    stderr?: string;\n}\n/**\n * Git error contexts\n */\nexport interface GitRepositoryNotFoundContext {\n    repository: string;\n}\nexport interface GitAuthFailedContext {\n    repository: string;\n}\nexport interface GitBranchNotFoundContext {\n    branch: string;\n    repository?: string;\n}\nexport interface GitErrorContext {\n    repository?: string;\n    branch?: string;\n    targetDir?: string;\n    stderr?: string;\n    exitCode?: number;\n}\n/**\n * Code interpreter error contexts\n */\nexport interface InterpreterNotReadyContext {\n    retryAfter?: number;\n    progress?: number;\n}\nexport interface ContextNotFoundContext {\n    contextId: string;\n}\nexport interface CodeExecutionContext {\n    contextId?: string;\n    ename?: string;\n    evalue?: string;\n    traceback?: string[];\n}\n/**\n * Validation error contexts\n */\nexport interface ValidationFailedContext {\n    validationErrors: Array<{\n        field: string;\n        message: string;\n        code?: string;\n    }>;\n}\n/**\n * Bucket mounting error contexts\n */\nexport interface BucketMountContext {\n    bucket: string;\n    mountPath: string;\n    endpoint: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface MissingCredentialsContext {\n    bucket: string;\n    endpoint: string;\n}\nexport interface InvalidMountConfigContext {\n    bucket?: string;\n    mountPath?: string;\n    endpoint?: string;\n    reason?: string;\n}\n/**\n * Backup error contexts\n */\nexport interface BackupCreateContext {\n    dir: string;\n    backupId?: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupRestoreContext {\n    dir: string;\n    backupId: string;\n    stderr?: string;\n    exitCode?: number;\n}\nexport interface BackupNotFoundContext {\n    backupId: string;\n}\nexport interface BackupExpiredContext {\n    backupId: string;\n    expiredAt?: string;\n}\nexport interface InvalidBackupConfigContext {\n    reason: string;\n}\n/**\n * OpenCode error contexts\n */\nexport interface OpencodeStartupContext {\n    port: number;\n    stderr?: string;\n    command?: string;\n}\n/**\n * Generic error contexts\n */\nexport interface InternalErrorContext {\n    originalError?: string;\n    stack?: string;\n    [key: string]: unknown;\n}\n/**\n * RPC transport error contexts. Surfaced when the capnweb WebSocket session\n * fails on the SDK side rather than the container reporting a structured\n * error. Always retryable — the next call will open a fresh connection.\n */\nexport type RPCTransportErrorKind = \n/** Server closed the WebSocket (container crash, DO eviction, network blip). */\n'peer_closed'\n/** Underlying socket fired the `error` event. */\n | 'connection_failed'\n/** WebSocket upgrade failed before the session was established. */\n | 'upgrade_failed'\n/** Peer sent a non-string frame; capnweb's wire format is JSON text only. */\n | 'invalid_frame'\n/** Peer sent a frame the wire-format parser rejected (capnweb readLoop SyntaxError). */\n | 'protocol_error'\n/** Session was disposed (locally or remotely) while a call was pending. */\n | 'session_disposed'\n/** Anything else that bubbled up from the transport with no recognisable shape. */\n | 'unknown';\nexport interface RPCTransportContext {\n    /** Categorical bucket so callers can branch on `peer_closed` vs `upgrade_failed` etc. */\n    kind: RPCTransportErrorKind;\n    /** Original error message, verbatim from capnweb / our DeferredTransport. */\n    originalMessage: string;\n    /**\n     * The underlying Error's `name` property. capnweb preserves this across\n     * the wire for the standard built-ins (TypeError, SyntaxError, etc.), so\n     * it's a more reliable hint than the message string for those cases.\n     */\n    errorName: string;\n    /** WebSocket close code, when available (kind === 'peer_closed'). */\n    closeCode?: number;\n    /** WebSocket close reason, when available (kind === 'peer_closed'). */\n    closeReason?: string;\n}\n/**\n * Desktop error contexts\n */\nexport interface DesktopErrorContext {\n    process?: string;\n    stderr?: string;\n    crashedProcess?: string;\n    reason?: string;\n}\nexport interface DesktopCoordinateErrorContext {\n    x: number;\n    y: number;\n    displayWidth: number;\n    displayHeight: number;\n}\n//# sourceMappingURL=contexts.d.ts.map"],"mappings":";;AAIA;AA0EA;;cA1EqBA;;ECAAE,SAAAA,iBAmCpB,EAAA,mBAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,YAAa,EAAAC,cAAA;EAAYC,SAAAA,aAAAA,EAAAA,eAAAA;EAIhCL,SAAAA,cAAAA,EAAAA,gBAAAA;EAQME,SAAAA,QAAAA,EAAAA,UAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,aAAA,EAAA,eAAA;;;;ECDJgB,SAAAA,gBAAAA,EAAwB,kBAAA;EAOxBC,SAAAA,iBAAAA,EAAAA,mBAA0B;EAM1BC,SAAAA,yBAA+B,EAAA,2BAAA;EA8F/BiB,SAAAA,eAAmB,EAAA,iBAAA;EAMnBC,SAAAA,uBAAoB,EAAA,yBAAA;EAMpBC,SAAAA,kBAAqB,EAAA,oBAAA;EAGrBC,SAAAA,iBAAoB,EAAA,mBAAA;EAIpBC,SAAAA,yBAA0B,EAAA,2BAAA;EAM1BC,SAAAA,aAAAA,EAAAA,eAAsB;EAkB3BE,SAAAA,sBAAqB,EAAA,wBAAA;EAehBC,SAAAA,iBAAmB,EAAA,mBAE1BD;EAiBOE,SAAAA,kBAAmB,EAAA,oBAAA;EAMnBC,SAAAA,oBAAAA,EAAAA,sBAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KF7KlClD,SAAAA,WAAoBA,wBAAwBA;;;AA1ExD;AA0EA;;cC1EqBE;;EAAAA,SAAAA,UAmCpB,EAAA,YAAA;EACWC,SAAAA,WAAa,EAAA,aAAWD;EAKnBE,SAAAA,SAAa,EAAA,WAAAC;EAAYC,SAAAA,WAAAA,EAAAA,aAAAA;EAIhCL,SAAAA,SAAAA,EAAAA,WAAAA;EAQME,SAAAA,gBAAAA,EAAAA,kBAAAA;EAKHE,SAAAA,cAAAA,EAAAA,gBAAAA;EAAQ,SAAA,eAAA,EAAA,iBAAA;;;;ECDJgB,SAAAA,YAAAA,EAAAA,cAAwB;EAOxBC,SAAAA,WAAAA,EAAAA,aAA0B;EAM1BC,SAAAA,YAAAA,EAAAA,cAA+B;EA8F/BiB,SAAAA,WAAAA,EAAmB,aAAA;EAMnBC,SAAAA,aAAAA,EAAoB,eAAA;EAMpBC,SAAAA,SAAAA,EAAAA,WAAqB;EAGrBC,SAAAA,UAAAA,EAAAA,YAAoB;EAIpBC,SAAAA,SAAAA,EAAAA,WAA0B;EAM1BC,SAAAA,YAAAA,EAAAA,cAAsB;EAkB3BE,SAAAA,aAAAA,EAAqB,eAAA;EAehBC,SAAAA,aAAmB,EAAA,eAE1BD;EAiBOE,SAAAA,cAAmB,EAAA,gBAAA;EAMnBC,SAAAA,cAAAA,EAAAA,gBAA6B;;;;;;;;;;;KDnNlC/C,aAAAA,WAAwBD,wBAAwBA;;;;;UAK3CE,yBAAyBE;;;;QAIhCL;;;;;;;;cAQME;;;;;WAKHE;;;;;;;;;;;;;;;;;;;;;UCDIgB,wBAAAA;;;;;;;UAOAC,0BAAAA;;;;;;UAMAC,+BAAAA;;;;;;;;;UA8FAiB,mBAAAA;;;;;;UAMAC,oBAAAA;;;;;;UAMAC,qBAAAA;;;UAGAC,oBAAAA;;;;UAIAC,0BAAAA;;;;;;UAMAC,sBAAAA;;;;;;;;;;KAkBLE,qBAAAA;;;;;;;;UAeKC,mBAAAA;;QAEPD;;;;;;;;;;;;;;;;;UAiBOE,mBAAAA;;;;;;UAMAC,6BAAAA"}

package/dist/{dist-Ilf8VjmX.js → dist-B_eXrP83.js}

@@ -292,56 +292,43 @@ var Execution = class {
 	}
 };
 var ResultImpl = class {
-	raw;
+	text;
+	html;
+	png;
+	jpeg;
+	svg;
+	latex;
+	markdown;
+	javascript;
+	json;
+	chart;
+	data;
 	constructor(raw) {
-		this.raw = raw;
-	}
-	get text() {
-		return this.raw.text || this.raw.data?.["text/plain"];
-	}
-	get html() {
-		return this.raw.html || this.raw.data?.["text/html"];
-	}
-	get png() {
-		return this.raw.png || this.raw.data?.["image/png"];
-	}
-	get jpeg() {
-		return this.raw.jpeg || this.raw.data?.["image/jpeg"];
-	}
-	get svg() {
-		return this.raw.svg || this.raw.data?.["image/svg+xml"];
-	}
-	get latex() {
-		return this.raw.latex || this.raw.data?.["text/latex"];
-	}
-	get markdown() {
-		return this.raw.markdown || this.raw.data?.["text/markdown"];
-	}
-	get javascript() {
-		return this.raw.javascript || this.raw.data?.["application/javascript"];
-	}
-	get json() {
-		return this.raw.json || this.raw.data?.["application/json"];
-	}
-	get chart() {
-		return this.raw.chart;
-	}
-	get data() {
-		return this.raw.data;
+		this.text = raw.text || raw.data?.["text/plain"];
+		this.html = raw.html || raw.data?.["text/html"];
+		this.png = raw.png || raw.data?.["image/png"];
+		this.jpeg = raw.jpeg || raw.data?.["image/jpeg"];
+		this.svg = raw.svg || raw.data?.["image/svg+xml"];
+		this.latex = raw.latex || raw.data?.["text/latex"];
+		this.markdown = raw.markdown || raw.data?.["text/markdown"];
+		this.javascript = raw.javascript || raw.data?.["application/javascript"];
+		this.json = raw.json || raw.data?.["application/json"];
+		this.chart = raw.chart;
+		this.data = raw.data;
 	}
 	formats() {
-		const formats = [];
-		if (this.text) formats.push("text");
-		if (this.html) formats.push("html");
-		if (this.png) formats.push("png");
-		if (this.jpeg) formats.push("jpeg");
-		if (this.svg) formats.push("svg");
-		if (this.latex) formats.push("latex");
-		if (this.markdown) formats.push("markdown");
-		if (this.javascript) formats.push("javascript");
-		if (this.json) formats.push("json");
-		if (this.chart) formats.push("chart");
-		return formats;
+		const fmts = [];
+		if (this.text) fmts.push("text");
+		if (this.html) fmts.push("html");
+		if (this.png) fmts.push("png");
+		if (this.jpeg) fmts.push("jpeg");
+		if (this.svg) fmts.push("svg");
+		if (this.latex) fmts.push("latex");
+		if (this.markdown) fmts.push("markdown");
+		if (this.javascript) fmts.push("javascript");
+		if (this.json) fmts.push("json");
+		if (this.chart) fmts.push("chart");
+		return fmts;
 	}
 };
 
@@ -974,4 +961,4 @@ function generateRequestId() {
 
 //#endregion
 export { GitLogger as _, isExecResult as a, getEnvString as b, parseSSEFrames as c, createNoOpLogger as d, TraceContext as f, DEFAULT_GIT_CLONE_TIMEOUT_MS as g, ResultImpl as h, isWSStreamChunk as i, shellEscape as l, Execution as m, isWSError as n, isProcess as o, logCanonicalEvent as p, isWSResponse as r, isProcessStatus as s, generateRequestId as t, createLogger as u, extractRepoName as v, partitionEnvVars as x, filterEnvVars as y };
-//# sourceMappingURL=dist-Ilf8VjmX.js.map
+//# sourceMappingURL=dist-B_eXrP83.js.map

package/dist/dist-B_eXrP83.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dist-B_eXrP83.js","names":["parts","LogLevelEnum","LogLevelEnum"],"sources":["../../shared/dist/env.js","../../shared/dist/logger/sanitize.js","../../shared/dist/git.js","../../shared/dist/interpreter-types.js","../../shared/dist/logger/canonical.js","../../shared/dist/logger/types.js","../../shared/dist/logger/logger.js","../../shared/dist/logger/trace-context.js","../../shared/dist/logger/index.js","../../shared/dist/shell-escape.js","../../shared/dist/sse.js","../../shared/dist/types.js","../../shared/dist/ws-types.js"],"sourcesContent":["/**\n * Safely extract a string value from an environment object\n *\n * @param env - Environment object with dynamic keys\n * @param key - The environment variable key to access\n * @returns The string value if present and is a string, undefined otherwise\n */\nexport function getEnvString(env, key) {\n    const value = env?.[key];\n    return typeof value === 'string' ? value : undefined;\n}\n/**\n * Filter environment variables object to only include string values.\n * Skips undefined, null, and non-string values.\n *\n * Use this when you only need the defined values (e.g., for per-command env\n * where undefined means \"don't override\").\n *\n * @param envVars - Object that may contain undefined values\n * @returns Clean object with only string values\n */\nexport function filterEnvVars(envVars) {\n    const filtered = {};\n    for (const [key, value] of Object.entries(envVars)) {\n        if (value != null && typeof value === 'string') {\n            filtered[key] = value;\n        }\n    }\n    return filtered;\n}\n/**\n * Partition environment variables into values to set and keys to unset.\n *\n * - String values → toSet (will be exported)\n * - undefined/null → toUnset (will be unset)\n *\n * This enables idiomatic JS patterns where undefined means \"remove\":\n * ```typescript\n * await sandbox.setEnvVars({\n *   API_KEY: 'new-key',        // will be set\n *   OLD_VAR: undefined,        // will be unset\n * });\n * ```\n */\nexport function partitionEnvVars(envVars) {\n    const toSet = {};\n    const toUnset = [];\n    for (const [key, value] of Object.entries(envVars)) {\n        if (value != null && typeof value === 'string') {\n            toSet[key] = value;\n        }\n        else {\n            toUnset.push(key);\n        }\n    }\n    return { toSet, toUnset };\n}\n","/**\n * Log-only sanitization helpers\n *\n * These functions redact sensitive values for logging output.\n * They MUST NOT be used to mutate command strings before execution.\n */\n/**\n * Sensitive query parameter names to redact from URLs.\n * Anchored to query string context ([?&]) to avoid matching path segments.\n * Value matching stops at & and common URL/command delimiters.\n */\nconst SENSITIVE_PARAMS = /([?&])(X-Amz-Credential|X-Amz-Signature|X-Amz-Security-Token|token|secret|password)=[^&\\s\"'`<>]*/gi;\n/**\n * Redact credentials from URLs for secure logging\n *\n * Replaces any credentials (username:password, tokens, etc.) embedded\n * in URLs with ****** to prevent sensitive data exposure in logs.\n * Works with URLs embedded in text.\n *\n * @param text - String that may contain URLs with credentials\n * @returns String with credentials redacted from any URLs\n */\nexport function redactCredentials(text) {\n    // Scan for http(s):// URLs and redact any credentials found\n    let result = text;\n    let pos = 0;\n    while (pos < result.length) {\n        const httpPos = result.indexOf('http://', pos);\n        const httpsPos = result.indexOf('https://', pos);\n        let protocolPos = -1;\n        let protocolLen = 0;\n        if (httpPos === -1 && httpsPos === -1)\n            break;\n        if (httpPos !== -1 && (httpsPos === -1 || httpPos < httpsPos)) {\n            protocolPos = httpPos;\n            protocolLen = 7; // 'http://'.length\n        }\n        else {\n            protocolPos = httpsPos;\n            protocolLen = 8; // 'https://'.length\n        }\n        // Look for @ after the protocol\n        const searchStart = protocolPos + protocolLen;\n        const atPos = result.indexOf('@', searchStart);\n        // Find where the URL ends (whitespace, quotes, or structural delimiters)\n        let urlEnd = searchStart;\n        while (urlEnd < result.length) {\n            const char = result[urlEnd];\n            if (/[\\s\"'`<>,;{}[\\]]/.test(char))\n                break;\n            urlEnd++;\n        }\n        if (atPos !== -1 && atPos < urlEnd) {\n            result = `${result.substring(0, searchStart)}******${result.substring(atPos)}`;\n            pos = searchStart + 6; // Move past '******'\n        }\n        else {\n            pos = protocolPos + protocolLen;\n        }\n    }\n    return result;\n}\n/**\n * Redact sensitive query parameters from URLs\n *\n * Strips X-Amz-Credential, X-Amz-Signature, X-Amz-Security-Token,\n * token, secret, and password query params from URLs. Returns\n * non-URL strings unchanged.\n *\n * @param input - String that may contain URLs with sensitive params\n * @returns String with sensitive params replaced by REDACTED\n */\nexport function redactSensitiveParams(input) {\n    if (!input.includes('?') || !input.includes('='))\n        return input;\n    return input.replace(SENSITIVE_PARAMS, '$1$2=REDACTED');\n}\n/**\n * Redact sensitive data from a command string for logging\n *\n * Composes redactCredentials (URL credentials) and redactSensitiveParams\n * (presigned URL query params). For log values only — never mutate\n * command strings before execution.\n *\n * @param command - Command string to sanitize for logging\n * @returns Sanitized command string\n */\nexport function redactCommand(command) {\n    return redactSensitiveParams(redactCredentials(command));\n}\n/**\n * Truncate a string for log output with a truncation indicator\n *\n * @param value - String to potentially truncate\n * @param maxLen - Maximum length before truncation (default 120)\n * @returns Object with truncated value and boolean flag\n */\nexport function truncateForLog(value, maxLen = 120) {\n    if (value.length <= maxLen) {\n        return { value, truncated: false };\n    }\n    const cutoff = Math.max(0, maxLen - 3);\n    return { value: `${value.substring(0, cutoff)}...`, truncated: true };\n}\n","import { redactCommand } from './logger/sanitize.js';\n/**\n * Fallback repository name used when URL parsing fails\n */\nexport const FALLBACK_REPO_NAME = 'repository';\n/** Default wall-clock timeout in milliseconds for git clone operations. */\nexport const DEFAULT_GIT_CLONE_TIMEOUT_MS = 600_000;\n/**\n * Extract repository name from a Git URL\n *\n * Supports multiple URL formats:\n * - HTTPS: https://github.com/user/repo.git → repo\n * - HTTPS without .git: https://github.com/user/repo → repo\n * - SSH: git@github.com:user/repo.git → repo\n * - GitLab/others: https://gitlab.com/org/project.git → project\n *\n * @param repoUrl - Git repository URL (HTTPS or SSH format)\n * @returns Repository name extracted from URL, or 'repository' as fallback\n */\nexport function extractRepoName(repoUrl) {\n    // Try parsing as standard URL (https://, http://)\n    try {\n        const url = new URL(repoUrl);\n        const pathParts = url.pathname.split('/');\n        const lastPart = pathParts[pathParts.length - 1];\n        if (lastPart) {\n            return lastPart.replace(/\\.git$/, '');\n        }\n    }\n    catch {\n        // Not a standard URL, try SSH format\n    }\n    // For SSH URLs (git@github.com:user/repo.git), split by : and / to get last segment\n    // Only process if the URL contains path delimiters\n    if (repoUrl.includes(':') || repoUrl.includes('/')) {\n        const segments = repoUrl.split(/[:/]/).filter(Boolean);\n        const lastSegment = segments[segments.length - 1];\n        if (lastSegment) {\n            return lastSegment.replace(/\\.git$/, '');\n        }\n    }\n    return FALLBACK_REPO_NAME;\n}\n/**\n * Sanitize data by redacting credentials from any strings\n * Recursively processes objects and arrays to ensure credentials are never leaked\n */\nexport function sanitizeGitData(data) {\n    // Handle primitives\n    if (typeof data === 'string') {\n        return redactCommand(data);\n    }\n    if (data === null || data === undefined) {\n        return data;\n    }\n    // Handle arrays\n    if (Array.isArray(data)) {\n        return data.map((item) => sanitizeGitData(item));\n    }\n    // Handle objects - recursively sanitize all fields\n    if (typeof data === 'object') {\n        const result = {};\n        for (const [key, value] of Object.entries(data)) {\n            result[key] = sanitizeGitData(value);\n        }\n        return result;\n    }\n    return data;\n}\n/**\n * Logger wrapper that automatically sanitizes git credentials\n */\nexport class GitLogger {\n    baseLogger;\n    constructor(baseLogger) {\n        this.baseLogger = baseLogger;\n    }\n    sanitizeContext(context) {\n        return context\n            ? sanitizeGitData(context)\n            : context;\n    }\n    sanitizeError(error) {\n        if (!error)\n            return error;\n        // Create a new error with sanitized message and stack\n        const sanitized = new Error(redactCommand(error.message));\n        sanitized.name = error.name;\n        if (error.stack) {\n            sanitized.stack = redactCommand(error.stack);\n        }\n        // Preserve other enumerable properties\n        const sanitizedRecord = sanitized;\n        const errorRecord = error;\n        for (const key of Object.keys(error)) {\n            if (key !== 'message' && key !== 'stack' && key !== 'name') {\n                sanitizedRecord[key] = sanitizeGitData(errorRecord[key]);\n            }\n        }\n        return sanitized;\n    }\n    debug(message, context) {\n        this.baseLogger.debug(message, this.sanitizeContext(context));\n    }\n    info(message, context) {\n        this.baseLogger.info(message, this.sanitizeContext(context));\n    }\n    warn(message, context) {\n        this.baseLogger.warn(message, this.sanitizeContext(context));\n    }\n    error(message, error, context) {\n        this.baseLogger.error(message, this.sanitizeError(error), this.sanitizeContext(context));\n    }\n    child(context) {\n        const sanitized = sanitizeGitData(context);\n        const childLogger = this.baseLogger.child(sanitized);\n        return new GitLogger(childLogger);\n    }\n}\n","// Execution Result Container\nexport class Execution {\n    code;\n    context;\n    /**\n     * All results from the execution\n     */\n    results = [];\n    /**\n     * Accumulated stdout and stderr\n     */\n    logs = {\n        stdout: [],\n        stderr: []\n    };\n    /**\n     * Execution error if any\n     */\n    error;\n    /**\n     * Execution count (for interpreter)\n     */\n    executionCount;\n    constructor(code, context) {\n        this.code = code;\n        this.context = context;\n    }\n    /**\n     * Convert to a plain object for serialization\n     */\n    toJSON() {\n        return {\n            code: this.code,\n            logs: this.logs,\n            error: this.error,\n            executionCount: this.executionCount,\n            results: this.results.map((result) => ({\n                text: result.text,\n                html: result.html,\n                png: result.png,\n                jpeg: result.jpeg,\n                svg: result.svg,\n                latex: result.latex,\n                markdown: result.markdown,\n                javascript: result.javascript,\n                json: result.json,\n                chart: result.chart,\n                data: result.data\n            }))\n        };\n    }\n}\n// Implementation of Result\nexport class ResultImpl {\n    text;\n    html;\n    png;\n    jpeg;\n    svg;\n    latex;\n    markdown;\n    javascript;\n    json;\n    chart;\n    data;\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- raw SSE data has dynamic shape\n    constructor(raw) {\n        this.text = raw.text || raw.data?.['text/plain'];\n        this.html = raw.html || raw.data?.['text/html'];\n        this.png = raw.png || raw.data?.['image/png'];\n        this.jpeg = raw.jpeg || raw.data?.['image/jpeg'];\n        this.svg = raw.svg || raw.data?.['image/svg+xml'];\n        this.latex = raw.latex || raw.data?.['text/latex'];\n        this.markdown = raw.markdown || raw.data?.['text/markdown'];\n        this.javascript = raw.javascript || raw.data?.['application/javascript'];\n        this.json = raw.json || raw.data?.['application/json'];\n        this.chart = raw.chart;\n        this.data = raw.data;\n    }\n    formats() {\n        const fmts = [];\n        if (this.text)\n            fmts.push('text');\n        if (this.html)\n            fmts.push('html');\n        if (this.png)\n            fmts.push('png');\n        if (this.jpeg)\n            fmts.push('jpeg');\n        if (this.svg)\n            fmts.push('svg');\n        if (this.latex)\n            fmts.push('latex');\n        if (this.markdown)\n            fmts.push('markdown');\n        if (this.javascript)\n            fmts.push('javascript');\n        if (this.json)\n            fmts.push('json');\n        if (this.chart)\n            fmts.push('chart');\n        return fmts;\n    }\n}\n","import { redactCommand, truncateForLog } from './sanitize.js';\n/** Events that are low-value at info on success */\nconst DEBUG_ON_SUCCESS = new Set([\n    'session.create',\n    'session.destroy',\n    'file.read',\n    'file.write',\n    'file.delete',\n    'file.mkdir'\n]);\nexport function resolveLogLevel(payload, options) {\n    if (payload.outcome === 'error')\n        return 'error';\n    if (options?.successLevel)\n        return options.successLevel;\n    if (payload.origin === 'internal')\n        return 'debug';\n    if (DEBUG_ON_SUCCESS.has(payload.event))\n        return 'debug';\n    return 'info';\n}\n/**\n * Sanitize an Error object by redacting sensitive data from message and stack.\n * Produces a copy so the caller's original Error is not mutated.\n */\nfunction sanitizeError(error) {\n    if (!error)\n        return undefined;\n    const sanitized = new Error(redactCommand(error.message));\n    sanitized.name = error.name;\n    sanitized.stack = error.stack ? redactCommand(error.stack) : undefined;\n    return sanitized;\n}\n/**\n * Sanitize and prepare payload fields for both message building and context emission.\n * Called once by logCanonicalEvent to avoid double-redaction.\n */\nfunction sanitizePayload(payload) {\n    if (payload.command === undefined) {\n        return { commandTruncated: false };\n    }\n    const redacted = redactCommand(payload.command);\n    const { value, truncated } = truncateForLog(redacted);\n    return { sanitizedCommand: value, commandTruncated: truncated };\n}\n/**\n * Build a human-readable canonical event message for dashboards and log viewers.\n *\n * Format: `{event} {outcome} {key_context} [— {reason}] ({durationMs}ms[, {sizeBytes}B])`\n *\n * The if/else chain for key context has implicit priority: command > path >\n * sessionId > port > repoUrl > pid. If a payload has multiple, only the\n * highest-priority one appears in the message. All fields are still present\n * as discrete queryable keys in the structured log context.\n */\nexport function buildMessage(payload, sanitizedCommand) {\n    const { event } = payload;\n    // version.check has its own format: no outcome, no duration\n    if (event === 'version.check') {\n        const parts = ['version.check'];\n        if (payload.sdkVersion)\n            parts.push(`sdk=${payload.sdkVersion}`);\n        if (payload.containerVersion)\n            parts.push(`container=${payload.containerVersion}`);\n        if (payload.versionOutcome && payload.versionOutcome !== 'compatible') {\n            parts.push(`(${payload.versionOutcome})`);\n        }\n        return parts.join(' ');\n    }\n    const parts = [event, payload.outcome];\n    // Key context — highest priority field shown in message\n    if (sanitizedCommand !== undefined) {\n        parts.push(sanitizedCommand);\n    }\n    else if (payload.command !== undefined) {\n        // Fallback for direct buildMessage calls without pre-sanitized command\n        const redacted = redactCommand(payload.command);\n        const { value } = truncateForLog(redacted);\n        parts.push(value);\n    }\n    else if (payload.path !== undefined) {\n        parts.push(payload.path);\n    }\n    else if (event.includes('session') && payload.sessionId !== undefined) {\n        parts.push(payload.sessionId);\n    }\n    else if (payload.port !== undefined) {\n        parts.push(String(payload.port));\n    }\n    else if (payload.repoUrl !== undefined) {\n        let gitContext = payload.repoUrl;\n        if (payload.branch !== undefined) {\n            gitContext += ` ${payload.branch}`;\n        }\n        parts.push(gitContext);\n    }\n    else if (payload.pid !== undefined) {\n        parts.push(String(payload.pid));\n    }\n    else if (payload.backupId !== undefined) {\n        parts.push(payload.backupId);\n    }\n    else if (payload.repoPath !== undefined) {\n        let gitContext = payload.repoPath;\n        if (payload.branch !== undefined) {\n            gitContext += ` branch=${payload.branch}`;\n        }\n        parts.push(gitContext);\n    }\n    else if (payload.mountsProcessed !== undefined) {\n        let destroyContext = `${payload.mountsProcessed} mounts`;\n        if (payload.mountFailures)\n            destroyContext += `, ${payload.mountFailures} failed`;\n        parts.push(destroyContext);\n    }\n    else if (payload.mountPath !== undefined) {\n        parts.push(payload.mountPath);\n    }\n    // Error reason after em-dash\n    if (payload.outcome === 'error') {\n        if (payload.errorMessage !== undefined) {\n            parts.push(`\\u2014 ${payload.errorMessage}`);\n        }\n        else if (payload.exitCode !== undefined) {\n            parts.push(`\\u2014 exitCode=${payload.exitCode}`);\n        }\n    }\n    // Duration suffix (and optional size)\n    const durationSuffix = payload.sizeBytes !== undefined\n        ? `(${payload.durationMs}ms, ${payload.sizeBytes}B)`\n        : `(${payload.durationMs}ms)`;\n    parts.push(durationSuffix);\n    return parts.join(' ');\n}\n/**\n * Log a canonical event — the single entry point for all structured operational events.\n *\n * Sanitizes command fields once, builds the message, selects log level from\n * outcome, and emits a structured log entry with the full payload as context.\n */\nexport function logCanonicalEvent(logger, payload, options) {\n    // Auto-derive errorMessage from error.message when not explicitly set,\n    // then sanitize to prevent credential leaks (e.g., presigned URLs in error strings)\n    const resolvedErrorMessage = payload.errorMessage ?? payload.error?.message;\n    const sanitizedErrorMessage = resolvedErrorMessage\n        ? redactCommand(resolvedErrorMessage)\n        : undefined;\n    const enrichedPayload = sanitizedErrorMessage !== undefined\n        ? { ...payload, errorMessage: sanitizedErrorMessage }\n        : payload;\n    // Sanitize once, use for both message and context\n    const { sanitizedCommand, commandTruncated } = sanitizePayload(enrichedPayload);\n    const message = buildMessage(enrichedPayload, sanitizedCommand);\n    // Build context from enriched payload, excluding the error object (passed separately)\n    const context = {};\n    for (const [key, value] of Object.entries(enrichedPayload)) {\n        if (key === 'error')\n            continue;\n        context[key] = value;\n    }\n    // Apply sanitized command to context\n    if (sanitizedCommand !== undefined) {\n        context.command = sanitizedCommand;\n        if (commandTruncated) {\n            context.commandTruncated = true;\n        }\n    }\n    const level = resolveLogLevel(enrichedPayload, options);\n    if (level === 'error') {\n        logger.error(message, sanitizeError(payload.error), context);\n    }\n    else if (level === 'warn') {\n        logger.warn(message, context);\n    }\n    else if (level === 'debug') {\n        logger.debug(message, context);\n    }\n    else {\n        logger.info(message, context);\n    }\n}\n","/**\n * Logger types for Cloudflare Sandbox SDK\n *\n * Provides structured, trace-aware logging across Worker, Durable Object, and Container.\n */\n/**\n * Log levels (from most to least verbose)\n */\nexport var LogLevel;\n(function (LogLevel) {\n    LogLevel[LogLevel[\"DEBUG\"] = 0] = \"DEBUG\";\n    LogLevel[LogLevel[\"INFO\"] = 1] = \"INFO\";\n    LogLevel[LogLevel[\"WARN\"] = 2] = \"WARN\";\n    LogLevel[LogLevel[\"ERROR\"] = 3] = \"ERROR\";\n})(LogLevel || (LogLevel = {}));\n","/**\n * Logger implementation\n */\nimport { LogLevel as LogLevelEnum } from './types.js';\n/**\n * ANSI color codes for terminal output\n */\nconst COLORS = {\n    reset: '\\x1b[0m',\n    debug: '\\x1b[36m', // Cyan\n    info: '\\x1b[32m', // Green\n    warn: '\\x1b[33m', // Yellow\n    error: '\\x1b[31m', // Red\n    dim: '\\x1b[2m' // Dim\n};\n/**\n * CloudflareLogger implements structured logging with support for\n * both JSON output (production) and pretty printing (development).\n */\nexport class CloudflareLogger {\n    baseContext;\n    minLevel;\n    outputMode;\n    /**\n     * Create a new CloudflareLogger\n     *\n     * @param baseContext Base context included in all log entries\n     * @param minLevel Minimum log level to output (default: INFO)\n     * @param outputMode How log entries are formatted and emitted (default: 'structured')\n     */\n    constructor(baseContext, minLevel = LogLevelEnum.INFO, outputMode = 'structured') {\n        this.baseContext = baseContext;\n        this.minLevel = minLevel;\n        this.outputMode = outputMode;\n    }\n    /**\n     * Log debug-level message\n     */\n    debug(message, context) {\n        if (this.shouldLog(LogLevelEnum.DEBUG)) {\n            const logData = this.buildLogData('debug', message, context);\n            this.output(console.log, logData);\n        }\n    }\n    /**\n     * Log info-level message\n     */\n    info(message, context) {\n        if (this.shouldLog(LogLevelEnum.INFO)) {\n            const logData = this.buildLogData('info', message, context);\n            this.output(console.log, logData);\n        }\n    }\n    /**\n     * Log warning-level message\n     */\n    warn(message, context) {\n        if (this.shouldLog(LogLevelEnum.WARN)) {\n            const logData = this.buildLogData('warn', message, context);\n            this.output(console.warn, logData);\n        }\n    }\n    /**\n     * Log error-level message\n     */\n    error(message, error, context) {\n        if (this.shouldLog(LogLevelEnum.ERROR)) {\n            const logData = this.buildLogData('error', message, context, error);\n            this.output(console.error, logData);\n        }\n    }\n    /**\n     * Create a child logger with additional context\n     */\n    child(context) {\n        return new CloudflareLogger({ ...this.baseContext, ...context }, this.minLevel, this.outputMode);\n    }\n    /**\n     * Check if a log level should be output\n     */\n    shouldLog(level) {\n        return level >= this.minLevel;\n    }\n    /**\n     * Build log data object\n     */\n    buildLogData(level, message, context, error) {\n        const logData = {\n            level,\n            message,\n            ...this.baseContext,\n            ...context,\n            timestamp: new Date().toISOString()\n        };\n        // Add error details if provided\n        if (error) {\n            logData.error = {\n                message: error.message,\n                stack: error.stack,\n                name: error.name\n            };\n        }\n        return logData;\n    }\n    /**\n     * Output log data using the configured output mode\n     */\n    output(consoleFn, data) {\n        switch (this.outputMode) {\n            case 'pretty':\n                this.outputPretty(consoleFn, data);\n                break;\n            case 'json-line':\n                this.outputJsonLine(consoleFn, data);\n                break;\n            case 'structured':\n                this.outputStructured(consoleFn, data);\n                break;\n        }\n    }\n    /**\n     * Output as JSON string (container stdout — parsed by Containers pipeline)\n     */\n    outputJsonLine(consoleFn, data) {\n        consoleFn(JSON.stringify(data));\n    }\n    /**\n     * Output as raw object (Workers/DOs — Workers Logs auto-indexes fields)\n     */\n    outputStructured(consoleFn, data) {\n        consoleFn(data);\n    }\n    /**\n     * Output as pretty-printed, colored text (development)\n     *\n     * Each log event is a single consoleFn() call so it appears as one entry\n     * in the Cloudflare dashboard. Context is rendered inline as compact key=value pairs.\n     *\n     * Format: LEVEL [component] message trace=tr_... key=value key=value\n     */\n    outputPretty(consoleFn, data) {\n        const { level, message: msg, timestamp, traceId, component, sandboxId, sessionId, processId, commandId, durationMs, serviceVersion, instanceId, error, ...rest } = data;\n        const levelStr = String(level || 'INFO').toUpperCase();\n        const levelColor = this.getLevelColor(levelStr);\n        const componentBadge = component ? `[${component}]` : '';\n        const timeStr = timestamp\n            ? `${COLORS.dim}${new Date(timestamp).toISOString().substring(11, 23)}${COLORS.reset} `\n            : '';\n        let logLine = `${timeStr}${levelColor}${levelStr.padEnd(5)}${COLORS.reset} ${componentBadge} ${msg}`;\n        // Append all context as compact key=value pairs on the same line\n        const pairs = [];\n        if (traceId)\n            pairs.push(`trace=${String(traceId).substring(0, 12)}`);\n        if (commandId)\n            pairs.push(`cmd=${String(commandId).substring(0, 12)}`);\n        if (sandboxId)\n            pairs.push(`sandbox=${sandboxId}`);\n        if (sessionId)\n            pairs.push(`session=${String(sessionId).substring(0, 12)}`);\n        if (processId)\n            pairs.push(`proc=${processId}`);\n        if (durationMs !== undefined)\n            pairs.push(`dur=${durationMs}ms`);\n        // Append remaining context fields inline\n        for (const [key, value] of Object.entries(rest)) {\n            if (value === undefined || value === null)\n                continue;\n            const v = typeof value === 'object'\n                ? JSON.stringify(value)\n                : this.sanitizePrettyValue(String(value));\n            pairs.push(`${key}=${v}`);\n        }\n        // Append error info inline\n        if (error && typeof error === 'object') {\n            const errorObj = error;\n            if (errorObj.name)\n                pairs.push(`err.name=${this.sanitizePrettyValue(errorObj.name)}`);\n            if (errorObj.message)\n                pairs.push(`err.msg=${this.sanitizePrettyValue(errorObj.message)}`);\n            if (errorObj.stack)\n                pairs.push(`err.stack=${this.sanitizePrettyValue(errorObj.stack)}`);\n        }\n        if (pairs.length > 0) {\n            logLine += ` ${COLORS.dim}${pairs.join(' ')}${COLORS.reset}`;\n        }\n        // Single consoleFn call = single log entry in the dashboard\n        consoleFn(logLine);\n    }\n    /**\n     * Collapse newlines so a single consoleFn() call stays on one line.\n     * Cloudflare's log pipeline splits on literal newlines, which fragments\n     * stack traces and multi-line error messages into separate entries.\n     */\n    sanitizePrettyValue(value) {\n        return value.replace(/\\r/g, '\\\\r').replace(/\\n/g, '\\\\n');\n    }\n    /**\n     * Get ANSI color code for log level\n     */\n    getLevelColor(level) {\n        const levelLower = level.toLowerCase();\n        switch (levelLower) {\n            case 'debug':\n                return COLORS.debug;\n            case 'info':\n                return COLORS.info;\n            case 'warn':\n                return COLORS.warn;\n            case 'error':\n                return COLORS.error;\n            default:\n                return COLORS.reset;\n        }\n    }\n}\n","/**\n * Trace context utilities for request correlation\n *\n * Trace IDs enable correlating logs across distributed components:\n * Worker → Durable Object → Container → back\n *\n * The trace ID is propagated via the X-Trace-Id HTTP header.\n */\n/**\n * Utility for managing trace context across distributed components\n */\n// biome-ignore lint/complexity/noStaticOnlyClass: Keep as class for namespace grouping and discoverability\nexport class TraceContext {\n    /**\n     * HTTP header name for trace ID propagation\n     */\n    static TRACE_HEADER = 'X-Trace-Id';\n    /**\n     * Generate a new trace ID\n     *\n     * Format: \"tr_\" + 16 random hex characters\n     * Example: \"tr_7f3a9b2c4e5d6f1a\"\n     *\n     * @returns Newly generated trace ID\n     */\n    static generate() {\n        // Use crypto.randomUUID() for randomness, extract 16 hex chars\n        const randomHex = crypto.randomUUID().replace(/-/g, '').substring(0, 16);\n        return `tr_${randomHex}`;\n    }\n    /**\n     * Extract trace ID from HTTP request headers\n     *\n     * @param headers Request headers\n     * @returns Trace ID if present, null otherwise\n     */\n    static fromHeaders(headers) {\n        return headers.get(TraceContext.TRACE_HEADER);\n    }\n    /**\n     * Create headers object with trace ID for outgoing requests\n     *\n     * @param traceId Trace ID to include\n     * @returns Headers object with X-Trace-Id set\n     */\n    static toHeaders(traceId) {\n        return { [TraceContext.TRACE_HEADER]: traceId };\n    }\n    /**\n     * Get the header name used for trace ID propagation\n     *\n     * @returns Header name (\"X-Trace-Id\")\n     */\n    static getHeaderName() {\n        return TraceContext.TRACE_HEADER;\n    }\n}\n","/**\n * Logger module\n *\n * Provides structured, trace-aware logging with:\n * - Explicit logger passing via constructor injection\n * - Three output modes: structured (Workers/DOs), json-line (container), pretty (local dev)\n * - Environment auto-detection\n * - Log level configuration\n *\n * Usage:\n *\n * ```typescript\n * // Create a logger at entry point\n * const logger = createLogger({ component: 'sandbox-do', traceId: 'tr_abc123' });\n *\n * // Pass to classes via constructor\n * const service = new MyService(logger);\n *\n * // Create child loggers for additional context\n * const execLogger = logger.child({ commandId: 'cmd-456' });\n * execLogger.info('Operation started');\n * ```\n */\nimport { CloudflareLogger } from './logger.js';\nimport { TraceContext } from './trace-context.js';\nimport { LogLevel as LogLevelEnum } from './types.js';\nexport { buildMessage, logCanonicalEvent, resolveLogLevel } from './canonical.js';\nexport { CloudflareLogger } from './logger.js';\nexport { TraceContext } from './trace-context.js';\nexport { LogLevel as LogLevelEnum } from './types.js';\n/**\n * Create a no-op logger for testing\n *\n * Returns a logger that implements the Logger interface but does nothing.\n * Useful for tests that don't need actual logging output.\n *\n * @returns No-op logger instance\n *\n * @example\n * ```typescript\n * // In tests\n * const client = new HttpClient({\n *   baseUrl: 'http://test.com',\n *   logger: createNoOpLogger() // Optional - tests can enable real logging if needed\n * });\n * ```\n */\nexport function createNoOpLogger() {\n    return {\n        debug: () => { },\n        info: () => { },\n        warn: () => { },\n        error: () => { },\n        child: () => createNoOpLogger()\n    };\n}\n/**\n * Create a new logger instance\n *\n * @param context Base context for the logger. Must include 'component'.\n *                TraceId will be auto-generated if not provided.\n * @returns New logger instance\n *\n * @example\n * ```typescript\n * // In Durable Object\n * const logger = createLogger({\n *   component: 'sandbox-do',\n *   traceId: TraceContext.fromHeaders(request.headers) || TraceContext.generate(),\n *   sandboxId: this.id\n * });\n *\n * // In Container\n * const logger = createLogger({\n *   component: 'container',\n *   traceId: TraceContext.fromHeaders(request.headers)!,\n *   sessionId: this.id\n * });\n * ```\n */\nexport function createLogger(context) {\n    const minLevel = getLogLevelFromEnv();\n    const outputMode = getOutputMode(context.component);\n    const baseContext = {\n        ...context,\n        traceId: context.traceId || TraceContext.generate(),\n        component: context.component,\n        serviceVersion: context.serviceVersion || getEnvVar('SANDBOX_VERSION') || undefined,\n        instanceId: context.instanceId ||\n            getEnvVar('HOSTNAME') ||\n            getEnvVar('SANDBOX_INSTANCE_ID') ||\n            undefined\n    };\n    return new CloudflareLogger(baseContext, minLevel, outputMode);\n}\n/**\n * Get log level from environment variable\n *\n * Checks SANDBOX_LOG_LEVEL env var, falls back to default based on environment.\n * Default: 'debug' for development, 'info' for production\n */\nfunction getLogLevelFromEnv() {\n    const envLevel = getEnvVar('SANDBOX_LOG_LEVEL') || 'info';\n    switch (envLevel.toLowerCase()) {\n        case 'debug':\n            return LogLevelEnum.DEBUG;\n        case 'info':\n            return LogLevelEnum.INFO;\n        case 'warn':\n            return LogLevelEnum.WARN;\n        case 'error':\n            return LogLevelEnum.ERROR;\n        default:\n            // Invalid level, fall back to info\n            return LogLevelEnum.INFO;\n    }\n}\n/**\n * Determine output mode based on component and environment:\n * - SANDBOX_LOG_FORMAT=pretty → 'pretty' for all components (local wrangler dev)\n * - Container/Executor without pretty → 'json-line' (Bun stdout → Containers pipeline)\n * - Everything else without pretty → 'structured' (Workers/DOs → Workers Logs)\n *\n * In local dev, setting SANDBOX_LOG_FORMAT=pretty gives readable terminal\n * output on both the DO side and container side. In production (where the\n * var isn't set), DOs emit structured objects and containers emit single-line\n * JSON — both queryable by their respective observability pipelines.\n */\nfunction getOutputMode(component) {\n    const format = getEnvVar('SANDBOX_LOG_FORMAT');\n    if (format?.toLowerCase() === 'pretty') {\n        return 'pretty';\n    }\n    if (component === 'container' || component === 'executor') {\n        return 'json-line';\n    }\n    return 'structured';\n}\n/**\n * Get environment variable value\n *\n * Supports both Node.js (process.env) and Bun (Bun.env)\n */\nfunction getEnvVar(name) {\n    // Try process.env first (Node.js / Bun)\n    if (typeof process !== 'undefined' && process.env) {\n        return process.env[name];\n    }\n    // Try Bun.env (Bun runtime)\n    if (typeof Bun !== 'undefined') {\n        const bunEnv = Bun.env;\n        if (bunEnv) {\n            return bunEnv[name];\n        }\n    }\n    return undefined;\n}\n","/**\n * Escapes a string for safe use in shell commands using POSIX single-quote escaping.\n * Prevents command injection by wrapping the string in single quotes and escaping\n * any single quotes within the string.\n */\nexport function shellEscape(str) {\n    return `'${str.replace(/'/g, \"'\\\\''\")}'`;\n}\n","/**\n * Shared SSE parsing utilities.\n *\n * Parses SSE frames from arbitrary text chunks while preserving partial state\n * across chunk boundaries.\n */\n/**\n * Parse SSE frames from a buffer.\n *\n * Returns parsed events, remaining unparsed text, and the current partial event\n * so callers can continue parsing on the next chunk.\n */\nexport function parseSSEFrames(buffer, currentEvent = { data: [] }) {\n    const events = [];\n    let i = 0;\n    while (i < buffer.length) {\n        const newlineIndex = buffer.indexOf('\\n', i);\n        if (newlineIndex === -1)\n            break;\n        const rawLine = buffer.substring(i, newlineIndex);\n        const line = rawLine.endsWith('\\r') ? rawLine.slice(0, -1) : rawLine;\n        i = newlineIndex + 1;\n        if (line === '' && currentEvent.data.length > 0) {\n            events.push({\n                event: currentEvent.event,\n                data: currentEvent.data.join('\\n')\n            });\n            currentEvent = { data: [] };\n            continue;\n        }\n        if (line.startsWith('event:')) {\n            const value = line.startsWith('event: ')\n                ? line.substring(7)\n                : line.substring(6);\n            currentEvent.event = value;\n            continue;\n        }\n        if (line.startsWith('data:')) {\n            const value = line.startsWith('data: ')\n                ? line.substring(6)\n                : line.substring(5);\n            currentEvent.data.push(value);\n        }\n    }\n    return {\n        events,\n        remaining: buffer.substring(i),\n        currentEvent\n    };\n}\n","/**\n * Check if a process status indicates the process has terminated\n */\nexport function isTerminalStatus(status) {\n    return (status === 'completed' ||\n        status === 'failed' ||\n        status === 'killed' ||\n        status === 'error');\n}\n// Type guards for runtime validation\nexport function isExecResult(value) {\n    return (value &&\n        typeof value.success === 'boolean' &&\n        typeof value.exitCode === 'number' &&\n        typeof value.stdout === 'string' &&\n        typeof value.stderr === 'string');\n}\nexport function isProcess(value) {\n    return (value &&\n        typeof value.id === 'string' &&\n        typeof value.command === 'string' &&\n        typeof value.status === 'string');\n}\nexport function isProcessStatus(value) {\n    return [\n        'starting',\n        'running',\n        'completed',\n        'failed',\n        'killed',\n        'error'\n    ].includes(value);\n}\n// Re-export interpreter types for convenience\nexport { Execution, ResultImpl } from './interpreter-types';\n","/**\n * WebSocket transport protocol types\n *\n * Enables multiplexing HTTP-like requests over a single WebSocket connection.\n * This reduces sub-request count when running inside Workers/Durable Objects.\n *\n * Protocol:\n * - Client sends WSRequest messages\n * - Server responds with WSResponse messages (matched by id)\n * - For streaming endpoints, server sends multiple WSStreamChunk messages\n *   followed by a final WSResponse\n */\n/**\n * Type guard for WSRequest\n *\n * Note: Only validates the discriminator field (type === 'request').\n * Does not validate other required fields (id, method, path).\n * Use for routing messages; trust TypeScript for field validation.\n */\nexport function isWSRequest(msg) {\n    return (typeof msg === 'object' &&\n        msg !== null &&\n        'type' in msg &&\n        msg.type === 'request');\n}\n/**\n * Type guard for WSResponse\n *\n * Note: Only validates the discriminator field (type === 'response').\n */\nexport function isWSResponse(msg) {\n    return (typeof msg === 'object' &&\n        msg !== null &&\n        'type' in msg &&\n        msg.type === 'response');\n}\n/**\n * Type guard for WSStreamChunk\n *\n * Note: Only validates the discriminator field (type === 'stream').\n */\nexport function isWSStreamChunk(msg) {\n    return (typeof msg === 'object' &&\n        msg !== null &&\n        'type' in msg &&\n        msg.type === 'stream');\n}\n/**\n * Type guard for WSError\n *\n * Note: Only validates the discriminator field (type === 'error').\n */\nexport function isWSError(msg) {\n    return (typeof msg === 'object' &&\n        msg !== null &&\n        'type' in msg &&\n        msg.type === 'error');\n}\n/**\n * Generate a unique request ID\n */\nexport function generateRequestId() {\n    return `ws_${Date.now()}_${Math.random().toString(36).substring(2, 10)}`;\n}\n"],"mappings":";;;;;;;;AAOA,SAAgB,aAAa,KAAK,KAAK;CACnC,MAAM,QAAQ,MAAM;AACpB,QAAO,OAAO,UAAU,WAAW,QAAQ;;;;;;;;;;;;AAY/C,SAAgB,cAAc,SAAS;CACnC,MAAM,WAAW,EAAE;AACnB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAC9C,KAAI,SAAS,QAAQ,OAAO,UAAU,SAClC,UAAS,OAAO;AAGxB,QAAO;;;;;;;;;;;;;;;;AAgBX,SAAgB,iBAAiB,SAAS;CACtC,MAAM,QAAQ,EAAE;CAChB,MAAM,UAAU,EAAE;AAClB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,CAC9C,KAAI,SAAS,QAAQ,OAAO,UAAU,SAClC,OAAM,OAAO;KAGb,SAAQ,KAAK,IAAI;AAGzB,QAAO;EAAE;EAAO;EAAS;;;;;;;;;;;;;;;;AC5C7B,MAAM,mBAAmB;;;;;;;;;;;AAWzB,SAAgB,kBAAkB,MAAM;CAEpC,IAAI,SAAS;CACb,IAAI,MAAM;AACV,QAAO,MAAM,OAAO,QAAQ;EACxB,MAAM,UAAU,OAAO,QAAQ,WAAW,IAAI;EAC9C,MAAM,WAAW,OAAO,QAAQ,YAAY,IAAI;EAChD,IAAI,cAAc;EAClB,IAAI,cAAc;AAClB,MAAI,YAAY,MAAM,aAAa,GAC/B;AACJ,MAAI,YAAY,OAAO,aAAa,MAAM,UAAU,WAAW;AAC3D,iBAAc;AACd,iBAAc;SAEb;AACD,iBAAc;AACd,iBAAc;;EAGlB,MAAM,cAAc,cAAc;EAClC,MAAM,QAAQ,OAAO,QAAQ,KAAK,YAAY;EAE9C,IAAI,SAAS;AACb,SAAO,SAAS,OAAO,QAAQ;GAC3B,MAAM,OAAO,OAAO;AACpB,OAAI,mBAAmB,KAAK,KAAK,CAC7B;AACJ;;AAEJ,MAAI,UAAU,MAAM,QAAQ,QAAQ;AAChC,YAAS,GAAG,OAAO,UAAU,GAAG,YAAY,CAAC,QAAQ,OAAO,UAAU,MAAM;AAC5E,SAAM,cAAc;QAGpB,OAAM,cAAc;;AAG5B,QAAO;;;;;;;;;;;;AAYX,SAAgB,sBAAsB,OAAO;AACzC,KAAI,CAAC,MAAM,SAAS,IAAI,IAAI,CAAC,MAAM,SAAS,IAAI,CAC5C,QAAO;AACX,QAAO,MAAM,QAAQ,kBAAkB,gBAAgB;;;;;;;;;;;;AAY3D,SAAgB,cAAc,SAAS;AACnC,QAAO,sBAAsB,kBAAkB,QAAQ,CAAC;;;;;;;;;AAS5D,SAAgB,eAAe,OAAO,SAAS,KAAK;AAChD,KAAI,MAAM,UAAU,OAChB,QAAO;EAAE;EAAO,WAAW;EAAO;CAEtC,MAAM,SAAS,KAAK,IAAI,GAAG,SAAS,EAAE;AACtC,QAAO;EAAE,OAAO,GAAG,MAAM,UAAU,GAAG,OAAO,CAAC;EAAM,WAAW;EAAM;;;;;;;;AClGzE,MAAa,qBAAqB;;AAElC,MAAa,+BAA+B;;;;;;;;;;;;;AAa5C,SAAgB,gBAAgB,SAAS;AAErC,KAAI;EAEA,MAAM,YADM,IAAI,IAAI,QAAQ,CACN,SAAS,MAAM,IAAI;EACzC,MAAM,WAAW,UAAU,UAAU,SAAS;AAC9C,MAAI,SACA,QAAO,SAAS,QAAQ,UAAU,GAAG;SAGvC;AAKN,KAAI,QAAQ,SAAS,IAAI,IAAI,QAAQ,SAAS,IAAI,EAAE;EAChD,MAAM,WAAW,QAAQ,MAAM,OAAO,CAAC,OAAO,QAAQ;EACtD,MAAM,cAAc,SAAS,SAAS,SAAS;AAC/C,MAAI,YACA,QAAO,YAAY,QAAQ,UAAU,GAAG;;AAGhD,QAAO;;;;;;AAMX,SAAgB,gBAAgB,MAAM;AAElC,KAAI,OAAO,SAAS,SAChB,QAAO,cAAc,KAAK;AAE9B,KAAI,SAAS,QAAQ,SAAS,OAC1B,QAAO;AAGX,KAAI,MAAM,QAAQ,KAAK,CACnB,QAAO,KAAK,KAAK,SAAS,gBAAgB,KAAK,CAAC;AAGpD,KAAI,OAAO,SAAS,UAAU;EAC1B,MAAM,SAAS,EAAE;AACjB,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,CAC3C,QAAO,OAAO,gBAAgB,MAAM;AAExC,SAAO;;AAEX,QAAO;;;;;AAKX,IAAa,YAAb,MAAa,UAAU;CACnB;CACA,YAAY,YAAY;AACpB,OAAK,aAAa;;CAEtB,gBAAgB,SAAS;AACrB,SAAO,UACD,gBAAgB,QAAQ,GACxB;;CAEV,cAAc,OAAO;AACjB,MAAI,CAAC,MACD,QAAO;EAEX,MAAM,YAAY,IAAI,MAAM,cAAc,MAAM,QAAQ,CAAC;AACzD,YAAU,OAAO,MAAM;AACvB,MAAI,MAAM,MACN,WAAU,QAAQ,cAAc,MAAM,MAAM;EAGhD,MAAM,kBAAkB;EACxB,MAAM,cAAc;AACpB,OAAK,MAAM,OAAO,OAAO,KAAK,MAAM,CAChC,KAAI,QAAQ,aAAa,QAAQ,WAAW,QAAQ,OAChD,iBAAgB,OAAO,gBAAgB,YAAY,KAAK;AAGhE,SAAO;;CAEX,MAAM,SAAS,SAAS;AACpB,OAAK,WAAW,MAAM,SAAS,KAAK,gBAAgB,QAAQ,CAAC;;CAEjE,KAAK,SAAS,SAAS;AACnB,OAAK,WAAW,KAAK,SAAS,KAAK,gBAAgB,QAAQ,CAAC;;CAEhE,KAAK,SAAS,SAAS;AACnB,OAAK,WAAW,KAAK,SAAS,KAAK,gBAAgB,QAAQ,CAAC;;CAEhE,MAAM,SAAS,OAAO,SAAS;AAC3B,OAAK,WAAW,MAAM,SAAS,KAAK,cAAc,MAAM,EAAE,KAAK,gBAAgB,QAAQ,CAAC;;CAE5F,MAAM,SAAS;EACX,MAAM,YAAY,gBAAgB,QAAQ;AAE1C,SAAO,IAAI,UADS,KAAK,WAAW,MAAM,UAAU,CACnB;;;;;;ACnHzC,IAAa,YAAb,MAAuB;CACnB;CACA;;;;CAIA,UAAU,EAAE;;;;CAIZ,OAAO;EACH,QAAQ,EAAE;EACV,QAAQ,EAAE;EACb;;;;CAID;;;;CAIA;CACA,YAAY,MAAM,SAAS;AACvB,OAAK,OAAO;AACZ,OAAK,UAAU;;;;;CAKnB,SAAS;AACL,SAAO;GACH,MAAM,KAAK;GACX,MAAM,KAAK;GACX,OAAO,KAAK;GACZ,gBAAgB,KAAK;GACrB,SAAS,KAAK,QAAQ,KAAK,YAAY;IACnC,MAAM,OAAO;IACb,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,OAAO,OAAO;IACd,UAAU,OAAO;IACjB,YAAY,OAAO;IACnB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,MAAM,OAAO;IAChB,EAAE;GACN;;;AAIT,IAAa,aAAb,MAAwB;CACpB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,KAAK;AACb,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,MAAM,IAAI,OAAO,IAAI,OAAO;AACjC,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,MAAM,IAAI,OAAO,IAAI,OAAO;AACjC,OAAK,QAAQ,IAAI,SAAS,IAAI,OAAO;AACrC,OAAK,WAAW,IAAI,YAAY,IAAI,OAAO;AAC3C,OAAK,aAAa,IAAI,cAAc,IAAI,OAAO;AAC/C,OAAK,OAAO,IAAI,QAAQ,IAAI,OAAO;AACnC,OAAK,QAAQ,IAAI;AACjB,OAAK,OAAO,IAAI;;CAEpB,UAAU;EACN,MAAM,OAAO,EAAE;AACf,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,IACL,MAAK,KAAK,MAAM;AACpB,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,IACL,MAAK,KAAK,MAAM;AACpB,MAAI,KAAK,MACL,MAAK,KAAK,QAAQ;AACtB,MAAI,KAAK,SACL,MAAK,KAAK,WAAW;AACzB,MAAI,KAAK,WACL,MAAK,KAAK,aAAa;AAC3B,MAAI,KAAK,KACL,MAAK,KAAK,OAAO;AACrB,MAAI,KAAK,MACL,MAAK,KAAK,QAAQ;AACtB,SAAO;;;;;;;ACnGf,MAAM,mBAAmB,IAAI,IAAI;CAC7B;CACA;CACA;CACA;CACA;CACA;CACH,CAAC;AACF,SAAgB,gBAAgB,SAAS,SAAS;AAC9C,KAAI,QAAQ,YAAY,QACpB,QAAO;AACX,KAAI,SAAS,aACT,QAAO,QAAQ;AACnB,KAAI,QAAQ,WAAW,WACnB,QAAO;AACX,KAAI,iBAAiB,IAAI,QAAQ,MAAM,CACnC,QAAO;AACX,QAAO;;;;;;AAMX,SAAS,cAAc,OAAO;AAC1B,KAAI,CAAC,MACD,QAAO;CACX,MAAM,YAAY,IAAI,MAAM,cAAc,MAAM,QAAQ,CAAC;AACzD,WAAU,OAAO,MAAM;AACvB,WAAU,QAAQ,MAAM,QAAQ,cAAc,MAAM,MAAM,GAAG;AAC7D,QAAO;;;;;;AAMX,SAAS,gBAAgB,SAAS;AAC9B,KAAI,QAAQ,YAAY,OACpB,QAAO,EAAE,kBAAkB,OAAO;CAGtC,MAAM,EAAE,OAAO,cAAc,eADZ,cAAc,QAAQ,QAAQ,CACM;AACrD,QAAO;EAAE,kBAAkB;EAAO,kBAAkB;EAAW;;;;;;;;;;;;AAYnE,SAAgB,aAAa,SAAS,kBAAkB;CACpD,MAAM,EAAE,UAAU;AAElB,KAAI,UAAU,iBAAiB;EAC3B,MAAMA,UAAQ,CAAC,gBAAgB;AAC/B,MAAI,QAAQ,WACR,SAAM,KAAK,OAAO,QAAQ,aAAa;AAC3C,MAAI,QAAQ,iBACR,SAAM,KAAK,aAAa,QAAQ,mBAAmB;AACvD,MAAI,QAAQ,kBAAkB,QAAQ,mBAAmB,aACrD,SAAM,KAAK,IAAI,QAAQ,eAAe,GAAG;AAE7C,SAAOA,QAAM,KAAK,IAAI;;CAE1B,MAAM,QAAQ,CAAC,OAAO,QAAQ,QAAQ;AAEtC,KAAI,qBAAqB,OACrB,OAAM,KAAK,iBAAiB;UAEvB,QAAQ,YAAY,QAAW;EAGpC,MAAM,EAAE,UAAU,eADD,cAAc,QAAQ,QAAQ,CACL;AAC1C,QAAM,KAAK,MAAM;YAEZ,QAAQ,SAAS,OACtB,OAAM,KAAK,QAAQ,KAAK;UAEnB,MAAM,SAAS,UAAU,IAAI,QAAQ,cAAc,OACxD,OAAM,KAAK,QAAQ,UAAU;UAExB,QAAQ,SAAS,OACtB,OAAM,KAAK,OAAO,QAAQ,KAAK,CAAC;UAE3B,QAAQ,YAAY,QAAW;EACpC,IAAI,aAAa,QAAQ;AACzB,MAAI,QAAQ,WAAW,OACnB,eAAc,IAAI,QAAQ;AAE9B,QAAM,KAAK,WAAW;YAEjB,QAAQ,QAAQ,OACrB,OAAM,KAAK,OAAO,QAAQ,IAAI,CAAC;UAE1B,QAAQ,aAAa,OAC1B,OAAM,KAAK,QAAQ,SAAS;UAEvB,QAAQ,aAAa,QAAW;EACrC,IAAI,aAAa,QAAQ;AACzB,MAAI,QAAQ,WAAW,OACnB,eAAc,WAAW,QAAQ;AAErC,QAAM,KAAK,WAAW;YAEjB,QAAQ,oBAAoB,QAAW;EAC5C,IAAI,iBAAiB,GAAG,QAAQ,gBAAgB;AAChD,MAAI,QAAQ,cACR,mBAAkB,KAAK,QAAQ,cAAc;AACjD,QAAM,KAAK,eAAe;YAErB,QAAQ,cAAc,OAC3B,OAAM,KAAK,QAAQ,UAAU;AAGjC,KAAI,QAAQ,YAAY,SACpB;MAAI,QAAQ,iBAAiB,OACzB,OAAM,KAAK,UAAU,QAAQ,eAAe;WAEvC,QAAQ,aAAa,OAC1B,OAAM,KAAK,mBAAmB,QAAQ,WAAW;;CAIzD,MAAM,iBAAiB,QAAQ,cAAc,SACvC,IAAI,QAAQ,WAAW,MAAM,QAAQ,UAAU,MAC/C,IAAI,QAAQ,WAAW;AAC7B,OAAM,KAAK,eAAe;AAC1B,QAAO,MAAM,KAAK,IAAI;;;;;;;;AAQ1B,SAAgB,kBAAkB,QAAQ,SAAS,SAAS;CAGxD,MAAM,uBAAuB,QAAQ,gBAAgB,QAAQ,OAAO;CACpE,MAAM,wBAAwB,uBACxB,cAAc,qBAAqB,GACnC;CACN,MAAM,kBAAkB,0BAA0B,SAC5C;EAAE,GAAG;EAAS,cAAc;EAAuB,GACnD;CAEN,MAAM,EAAE,kBAAkB,qBAAqB,gBAAgB,gBAAgB;CAC/E,MAAM,UAAU,aAAa,iBAAiB,iBAAiB;CAE/D,MAAM,UAAU,EAAE;AAClB,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,gBAAgB,EAAE;AACxD,MAAI,QAAQ,QACR;AACJ,UAAQ,OAAO;;AAGnB,KAAI,qBAAqB,QAAW;AAChC,UAAQ,UAAU;AAClB,MAAI,iBACA,SAAQ,mBAAmB;;CAGnC,MAAM,QAAQ,gBAAgB,iBAAiB,QAAQ;AACvD,KAAI,UAAU,QACV,QAAO,MAAM,SAAS,cAAc,QAAQ,MAAM,EAAE,QAAQ;UAEvD,UAAU,OACf,QAAO,KAAK,SAAS,QAAQ;UAExB,UAAU,QACf,QAAO,MAAM,SAAS,QAAQ;KAG9B,QAAO,KAAK,SAAS,QAAQ;;;;;;;;;;;;;AC1KrC,IAAW;CACV,SAAU,YAAU;AACjB,YAAS,WAAS,WAAW,KAAK;AAClC,YAAS,WAAS,UAAU,KAAK;AACjC,YAAS,WAAS,UAAU,KAAK;AACjC,YAAS,WAAS,WAAW,KAAK;GACnC,aAAa,WAAW,EAAE,EAAE;;;;;;;;;;ACP/B,MAAM,SAAS;CACX,OAAO;CACP,OAAO;CACP,MAAM;CACN,MAAM;CACN,OAAO;CACP,KAAK;CACR;;;;;AAKD,IAAa,mBAAb,MAAa,iBAAiB;CAC1B;CACA;CACA;;;;;;;;CAQA,YAAY,aAAa,WAAWC,SAAa,MAAM,aAAa,cAAc;AAC9E,OAAK,cAAc;AACnB,OAAK,WAAW;AAChB,OAAK,aAAa;;;;;CAKtB,MAAM,SAAS,SAAS;AACpB,MAAI,KAAK,UAAUA,SAAa,MAAM,EAAE;GACpC,MAAM,UAAU,KAAK,aAAa,SAAS,SAAS,QAAQ;AAC5D,QAAK,OAAO,QAAQ,KAAK,QAAQ;;;;;;CAMzC,KAAK,SAAS,SAAS;AACnB,MAAI,KAAK,UAAUA,SAAa,KAAK,EAAE;GACnC,MAAM,UAAU,KAAK,aAAa,QAAQ,SAAS,QAAQ;AAC3D,QAAK,OAAO,QAAQ,KAAK,QAAQ;;;;;;CAMzC,KAAK,SAAS,SAAS;AACnB,MAAI,KAAK,UAAUA,SAAa,KAAK,EAAE;GACnC,MAAM,UAAU,KAAK,aAAa,QAAQ,SAAS,QAAQ;AAC3D,QAAK,OAAO,QAAQ,MAAM,QAAQ;;;;;;CAM1C,MAAM,SAAS,OAAO,SAAS;AAC3B,MAAI,KAAK,UAAUA,SAAa,MAAM,EAAE;GACpC,MAAM,UAAU,KAAK,aAAa,SAAS,SAAS,SAAS,MAAM;AACnE,QAAK,OAAO,QAAQ,OAAO,QAAQ;;;;;;CAM3C,MAAM,SAAS;AACX,SAAO,IAAI,iBAAiB;GAAE,GAAG,KAAK;GAAa,GAAG;GAAS,EAAE,KAAK,UAAU,KAAK,WAAW;;;;;CAKpG,UAAU,OAAO;AACb,SAAO,SAAS,KAAK;;;;;CAKzB,aAAa,OAAO,SAAS,SAAS,OAAO;EACzC,MAAM,UAAU;GACZ;GACA;GACA,GAAG,KAAK;GACR,GAAG;GACH,4BAAW,IAAI,MAAM,EAAC,aAAa;GACtC;AAED,MAAI,MACA,SAAQ,QAAQ;GACZ,SAAS,MAAM;GACf,OAAO,MAAM;GACb,MAAM,MAAM;GACf;AAEL,SAAO;;;;;CAKX,OAAO,WAAW,MAAM;AACpB,UAAQ,KAAK,YAAb;GACI,KAAK;AACD,SAAK,aAAa,WAAW,KAAK;AAClC;GACJ,KAAK;AACD,SAAK,eAAe,WAAW,KAAK;AACpC;GACJ,KAAK;AACD,SAAK,iBAAiB,WAAW,KAAK;AACtC;;;;;;CAMZ,eAAe,WAAW,MAAM;AAC5B,YAAU,KAAK,UAAU,KAAK,CAAC;;;;;CAKnC,iBAAiB,WAAW,MAAM;AAC9B,YAAU,KAAK;;;;;;;;;;CAUnB,aAAa,WAAW,MAAM;EAC1B,MAAM,EAAE,OAAO,SAAS,KAAK,WAAW,SAAS,WAAW,WAAW,WAAW,WAAW,WAAW,YAAY,gBAAgB,YAAY,OAAO,GAAG,SAAS;EACnK,MAAM,WAAW,OAAO,SAAS,OAAO,CAAC,aAAa;EACtD,MAAM,aAAa,KAAK,cAAc,SAAS;EAC/C,MAAM,iBAAiB,YAAY,IAAI,UAAU,KAAK;EAItD,IAAI,UAAU,GAHE,YACV,GAAG,OAAO,MAAM,IAAI,KAAK,UAAU,CAAC,aAAa,CAAC,UAAU,IAAI,GAAG,GAAG,OAAO,MAAM,KACnF,KACqB,aAAa,SAAS,OAAO,EAAE,GAAG,OAAO,MAAM,GAAG,eAAe,GAAG;EAE/F,MAAM,QAAQ,EAAE;AAChB,MAAI,QACA,OAAM,KAAK,SAAS,OAAO,QAAQ,CAAC,UAAU,GAAG,GAAG,GAAG;AAC3D,MAAI,UACA,OAAM,KAAK,OAAO,OAAO,UAAU,CAAC,UAAU,GAAG,GAAG,GAAG;AAC3D,MAAI,UACA,OAAM,KAAK,WAAW,YAAY;AACtC,MAAI,UACA,OAAM,KAAK,WAAW,OAAO,UAAU,CAAC,UAAU,GAAG,GAAG,GAAG;AAC/D,MAAI,UACA,OAAM,KAAK,QAAQ,YAAY;AACnC,MAAI,eAAe,OACf,OAAM,KAAK,OAAO,WAAW,IAAI;AAErC,OAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,KAAK,EAAE;AAC7C,OAAI,UAAU,UAAa,UAAU,KACjC;GACJ,MAAM,IAAI,OAAO,UAAU,WACrB,KAAK,UAAU,MAAM,GACrB,KAAK,oBAAoB,OAAO,MAAM,CAAC;AAC7C,SAAM,KAAK,GAAG,IAAI,GAAG,IAAI;;AAG7B,MAAI,SAAS,OAAO,UAAU,UAAU;GACpC,MAAM,WAAW;AACjB,OAAI,SAAS,KACT,OAAM,KAAK,YAAY,KAAK,oBAAoB,SAAS,KAAK,GAAG;AACrE,OAAI,SAAS,QACT,OAAM,KAAK,WAAW,KAAK,oBAAoB,SAAS,QAAQ,GAAG;AACvE,OAAI,SAAS,MACT,OAAM,KAAK,aAAa,KAAK,oBAAoB,SAAS,MAAM,GAAG;;AAE3E,MAAI,MAAM,SAAS,EACf,YAAW,IAAI,OAAO,MAAM,MAAM,KAAK,IAAI,GAAG,OAAO;AAGzD,YAAU,QAAQ;;;;;;;CAOtB,oBAAoB,OAAO;AACvB,SAAO,MAAM,QAAQ,OAAO,MAAM,CAAC,QAAQ,OAAO,MAAM;;;;;CAK5D,cAAc,OAAO;AAEjB,UADmB,MAAM,aAAa,EACtC;GACI,KAAK,QACD,QAAO,OAAO;GAClB,KAAK,OACD,QAAO,OAAO;GAClB,KAAK,OACD,QAAO,OAAO;GAClB,KAAK,QACD,QAAO,OAAO;GAClB,QACI,QAAO,OAAO;;;;;;;;;;;;;;;;;;ACvM9B,IAAa,eAAb,MAAa,aAAa;;;;CAItB,OAAO,eAAe;;;;;;;;;CAStB,OAAO,WAAW;AAGd,SAAO,MADW,OAAO,YAAY,CAAC,QAAQ,MAAM,GAAG,CAAC,UAAU,GAAG,GAAG;;;;;;;;CAS5E,OAAO,YAAY,SAAS;AACxB,SAAO,QAAQ,IAAI,aAAa,aAAa;;;;;;;;CAQjD,OAAO,UAAU,SAAS;AACtB,SAAO,GAAG,aAAa,eAAe,SAAS;;;;;;;CAOnD,OAAO,gBAAgB;AACnB,SAAO,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACP5B,SAAgB,mBAAmB;AAC/B,QAAO;EACH,aAAa;EACb,YAAY;EACZ,YAAY;EACZ,aAAa;EACb,aAAa,kBAAkB;EAClC;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BL,SAAgB,aAAa,SAAS;CAClC,MAAM,WAAW,oBAAoB;CACrC,MAAM,aAAa,cAAc,QAAQ,UAAU;AAWnD,QAAO,IAAI,iBAVS;EAChB,GAAG;EACH,SAAS,QAAQ,WAAW,aAAa,UAAU;EACnD,WAAW,QAAQ;EACnB,gBAAgB,QAAQ,kBAAkB,UAAU,kBAAkB,IAAI;EAC1E,YAAY,QAAQ,cAChB,UAAU,WAAW,IACrB,UAAU,sBAAsB,IAChC;EACP,EACwC,UAAU,WAAW;;;;;;;;AAQlE,SAAS,qBAAqB;AAE1B,UADiB,UAAU,oBAAoB,IAAI,QAClC,aAAa,EAA9B;EACI,KAAK,QACD,QAAOC,SAAa;EACxB,KAAK,OACD,QAAOA,SAAa;EACxB,KAAK,OACD,QAAOA,SAAa;EACxB,KAAK,QACD,QAAOA,SAAa;EACxB,QAEI,QAAOA,SAAa;;;;;;;;;;;;;;AAchC,SAAS,cAAc,WAAW;AAE9B,KADe,UAAU,qBAAqB,EAClC,aAAa,KAAK,SAC1B,QAAO;AAEX,KAAI,cAAc,eAAe,cAAc,WAC3C,QAAO;AAEX,QAAO;;;;;;;AAOX,SAAS,UAAU,MAAM;AAErB,KAAI,OAAO,YAAY,eAAe,QAAQ,IAC1C,QAAO,QAAQ,IAAI;AAGvB,KAAI,OAAO,QAAQ,aAAa;EAC5B,MAAM,SAAS,IAAI;AACnB,MAAI,OACA,QAAO,OAAO;;;;;;;;;;;ACnJ1B,SAAgB,YAAY,KAAK;AAC7B,QAAO,IAAI,IAAI,QAAQ,MAAM,QAAQ,CAAC;;;;;;;;;;;;;;;;;ACM1C,SAAgB,eAAe,QAAQ,eAAe,EAAE,MAAM,EAAE,EAAE,EAAE;CAChE,MAAM,SAAS,EAAE;CACjB,IAAI,IAAI;AACR,QAAO,IAAI,OAAO,QAAQ;EACtB,MAAM,eAAe,OAAO,QAAQ,MAAM,EAAE;AAC5C,MAAI,iBAAiB,GACjB;EACJ,MAAM,UAAU,OAAO,UAAU,GAAG,aAAa;EACjD,MAAM,OAAO,QAAQ,SAAS,KAAK,GAAG,QAAQ,MAAM,GAAG,GAAG,GAAG;AAC7D,MAAI,eAAe;AACnB,MAAI,SAAS,MAAM,aAAa,KAAK,SAAS,GAAG;AAC7C,UAAO,KAAK;IACR,OAAO,aAAa;IACpB,MAAM,aAAa,KAAK,KAAK,KAAK;IACrC,CAAC;AACF,kBAAe,EAAE,MAAM,EAAE,EAAE;AAC3B;;AAEJ,MAAI,KAAK,WAAW,SAAS,EAAE;AAI3B,gBAAa,QAHC,KAAK,WAAW,UAAU,GAClC,KAAK,UAAU,EAAE,GACjB,KAAK,UAAU,EAAE;AAEvB;;AAEJ,MAAI,KAAK,WAAW,QAAQ,EAAE;GAC1B,MAAM,QAAQ,KAAK,WAAW,SAAS,GACjC,KAAK,UAAU,EAAE,GACjB,KAAK,UAAU,EAAE;AACvB,gBAAa,KAAK,KAAK,MAAM;;;AAGrC,QAAO;EACH;EACA,WAAW,OAAO,UAAU,EAAE;EAC9B;EACH;;;;;ACtCL,SAAgB,aAAa,OAAO;AAChC,QAAQ,SACJ,OAAO,MAAM,YAAY,aACzB,OAAO,MAAM,aAAa,YAC1B,OAAO,MAAM,WAAW,YACxB,OAAO,MAAM,WAAW;;AAEhC,SAAgB,UAAU,OAAO;AAC7B,QAAQ,SACJ,OAAO,MAAM,OAAO,YACpB,OAAO,MAAM,YAAY,YACzB,OAAO,MAAM,WAAW;;AAEhC,SAAgB,gBAAgB,OAAO;AACnC,QAAO;EACH;EACA;EACA;EACA;EACA;EACA;EACH,CAAC,SAAS,MAAM;;;;;;;;;;ACDrB,SAAgB,aAAa,KAAK;AAC9B,QAAQ,OAAO,QAAQ,YACnB,QAAQ,QACR,UAAU,OACV,IAAI,SAAS;;;;;;;AAOrB,SAAgB,gBAAgB,KAAK;AACjC,QAAQ,OAAO,QAAQ,YACnB,QAAQ,QACR,UAAU,OACV,IAAI,SAAS;;;;;;;AAOrB,SAAgB,UAAU,KAAK;AAC3B,QAAQ,OAAO,QAAQ,YACnB,QAAQ,QACR,UAAU,OACV,IAAI,SAAS;;;;;AAKrB,SAAgB,oBAAoB;AAChC,QAAO,MAAM,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,UAAU,GAAG,GAAG"}

package/dist/errors-CBi-O-pF.js

@@ -0,0 +1,227 @@
+//#region ../shared/dist/errors/codes.js
+/**
+* Centralized error code registry
+* Each code maps to a specific error type with consistent semantics
+*/
+const ErrorCode = {
+	FILE_NOT_FOUND: "FILE_NOT_FOUND",
+	PERMISSION_DENIED: "PERMISSION_DENIED",
+	FILE_EXISTS: "FILE_EXISTS",
+	IS_DIRECTORY: "IS_DIRECTORY",
+	NOT_DIRECTORY: "NOT_DIRECTORY",
+	FILE_TOO_LARGE: "FILE_TOO_LARGE",
+	NO_SPACE: "NO_SPACE",
+	TOO_MANY_FILES: "TOO_MANY_FILES",
+	RESOURCE_BUSY: "RESOURCE_BUSY",
+	READ_ONLY: "READ_ONLY",
+	NAME_TOO_LONG: "NAME_TOO_LONG",
+	TOO_MANY_LINKS: "TOO_MANY_LINKS",
+	FILESYSTEM_ERROR: "FILESYSTEM_ERROR",
+	COMMAND_NOT_FOUND: "COMMAND_NOT_FOUND",
+	COMMAND_PERMISSION_DENIED: "COMMAND_PERMISSION_DENIED",
+	INVALID_COMMAND: "INVALID_COMMAND",
+	COMMAND_EXECUTION_ERROR: "COMMAND_EXECUTION_ERROR",
+	STREAM_START_ERROR: "STREAM_START_ERROR",
+	PROCESS_NOT_FOUND: "PROCESS_NOT_FOUND",
+	PROCESS_PERMISSION_DENIED: "PROCESS_PERMISSION_DENIED",
+	PROCESS_ERROR: "PROCESS_ERROR",
+	SESSION_ALREADY_EXISTS: "SESSION_ALREADY_EXISTS",
+	SESSION_DESTROYED: "SESSION_DESTROYED",
+	SESSION_TERMINATED: "SESSION_TERMINATED",
+	PORT_ALREADY_EXPOSED: "PORT_ALREADY_EXPOSED",
+	PORT_IN_USE: "PORT_IN_USE",
+	PORT_NOT_EXPOSED: "PORT_NOT_EXPOSED",
+	INVALID_PORT_NUMBER: "INVALID_PORT_NUMBER",
+	INVALID_PORT: "INVALID_PORT",
+	SERVICE_NOT_RESPONDING: "SERVICE_NOT_RESPONDING",
+	PORT_OPERATION_ERROR: "PORT_OPERATION_ERROR",
+	CUSTOM_DOMAIN_REQUIRED: "CUSTOM_DOMAIN_REQUIRED",
+	GIT_REPOSITORY_NOT_FOUND: "GIT_REPOSITORY_NOT_FOUND",
+	GIT_BRANCH_NOT_FOUND: "GIT_BRANCH_NOT_FOUND",
+	GIT_AUTH_FAILED: "GIT_AUTH_FAILED",
+	GIT_NETWORK_ERROR: "GIT_NETWORK_ERROR",
+	INVALID_GIT_URL: "INVALID_GIT_URL",
+	GIT_CLONE_FAILED: "GIT_CLONE_FAILED",
+	GIT_CHECKOUT_FAILED: "GIT_CHECKOUT_FAILED",
+	GIT_OPERATION_FAILED: "GIT_OPERATION_FAILED",
+	BUCKET_MOUNT_ERROR: "BUCKET_MOUNT_ERROR",
+	BUCKET_UNMOUNT_ERROR: "BUCKET_UNMOUNT_ERROR",
+	S3FS_MOUNT_ERROR: "S3FS_MOUNT_ERROR",
+	MISSING_CREDENTIALS: "MISSING_CREDENTIALS",
+	INVALID_MOUNT_CONFIG: "INVALID_MOUNT_CONFIG",
+	BACKUP_CREATE_FAILED: "BACKUP_CREATE_FAILED",
+	BACKUP_RESTORE_FAILED: "BACKUP_RESTORE_FAILED",
+	BACKUP_NOT_FOUND: "BACKUP_NOT_FOUND",
+	BACKUP_EXPIRED: "BACKUP_EXPIRED",
+	INVALID_BACKUP_CONFIG: "INVALID_BACKUP_CONFIG",
+	INTERPRETER_NOT_READY: "INTERPRETER_NOT_READY",
+	CONTEXT_NOT_FOUND: "CONTEXT_NOT_FOUND",
+	CODE_EXECUTION_ERROR: "CODE_EXECUTION_ERROR",
+	PYTHON_NOT_AVAILABLE: "PYTHON_NOT_AVAILABLE",
+	JAVASCRIPT_NOT_AVAILABLE: "JAVASCRIPT_NOT_AVAILABLE",
+	OPENCODE_STARTUP_FAILED: "OPENCODE_STARTUP_FAILED",
+	PROCESS_READY_TIMEOUT: "PROCESS_READY_TIMEOUT",
+	PROCESS_EXITED_BEFORE_READY: "PROCESS_EXITED_BEFORE_READY",
+	DESKTOP_NOT_STARTED: "DESKTOP_NOT_STARTED",
+	DESKTOP_START_FAILED: "DESKTOP_START_FAILED",
+	DESKTOP_UNAVAILABLE: "DESKTOP_UNAVAILABLE",
+	DESKTOP_PROCESS_CRASHED: "DESKTOP_PROCESS_CRASHED",
+	DESKTOP_INVALID_OPTIONS: "DESKTOP_INVALID_OPTIONS",
+	DESKTOP_INVALID_COORDINATES: "DESKTOP_INVALID_COORDINATES",
+	WATCH_NOT_FOUND: "WATCH_NOT_FOUND",
+	WATCH_START_ERROR: "WATCH_START_ERROR",
+	WATCH_STOP_ERROR: "WATCH_STOP_ERROR",
+	VALIDATION_FAILED: "VALIDATION_FAILED",
+	INVALID_JSON_RESPONSE: "INVALID_JSON_RESPONSE",
+	UNKNOWN_ERROR: "UNKNOWN_ERROR",
+	INTERNAL_ERROR: "INTERNAL_ERROR",
+	RPC_TRANSPORT_ERROR: "RPC_TRANSPORT_ERROR"
+};
+
+//#endregion
+//#region ../shared/dist/errors/status-map.js
+/**
+* Maps error codes to HTTP status codes
+* Centralized mapping ensures consistency across SDK
+*/
+const ERROR_STATUS_MAP = {
+	[ErrorCode.FILE_NOT_FOUND]: 404,
+	[ErrorCode.COMMAND_NOT_FOUND]: 404,
+	[ErrorCode.PROCESS_NOT_FOUND]: 404,
+	[ErrorCode.PORT_NOT_EXPOSED]: 404,
+	[ErrorCode.GIT_REPOSITORY_NOT_FOUND]: 404,
+	[ErrorCode.GIT_BRANCH_NOT_FOUND]: 404,
+	[ErrorCode.CONTEXT_NOT_FOUND]: 404,
+	[ErrorCode.WATCH_NOT_FOUND]: 404,
+	[ErrorCode.IS_DIRECTORY]: 400,
+	[ErrorCode.NOT_DIRECTORY]: 400,
+	[ErrorCode.INVALID_COMMAND]: 400,
+	[ErrorCode.INVALID_PORT_NUMBER]: 400,
+	[ErrorCode.INVALID_PORT]: 400,
+	[ErrorCode.INVALID_GIT_URL]: 400,
+	[ErrorCode.CUSTOM_DOMAIN_REQUIRED]: 400,
+	[ErrorCode.INVALID_JSON_RESPONSE]: 400,
+	[ErrorCode.NAME_TOO_LONG]: 400,
+	[ErrorCode.VALIDATION_FAILED]: 400,
+	[ErrorCode.MISSING_CREDENTIALS]: 400,
+	[ErrorCode.INVALID_MOUNT_CONFIG]: 400,
+	[ErrorCode.GIT_AUTH_FAILED]: 401,
+	[ErrorCode.PERMISSION_DENIED]: 403,
+	[ErrorCode.COMMAND_PERMISSION_DENIED]: 403,
+	[ErrorCode.PROCESS_PERMISSION_DENIED]: 403,
+	[ErrorCode.READ_ONLY]: 403,
+	[ErrorCode.FILE_EXISTS]: 409,
+	[ErrorCode.PORT_ALREADY_EXPOSED]: 409,
+	[ErrorCode.PORT_IN_USE]: 409,
+	[ErrorCode.RESOURCE_BUSY]: 409,
+	[ErrorCode.SESSION_ALREADY_EXISTS]: 409,
+	[ErrorCode.SESSION_DESTROYED]: 410,
+	[ErrorCode.SESSION_TERMINATED]: 410,
+	[ErrorCode.FILE_TOO_LARGE]: 413,
+	[ErrorCode.SERVICE_NOT_RESPONDING]: 502,
+	[ErrorCode.GIT_NETWORK_ERROR]: 502,
+	[ErrorCode.BACKUP_NOT_FOUND]: 404,
+	[ErrorCode.BACKUP_EXPIRED]: 400,
+	[ErrorCode.INVALID_BACKUP_CONFIG]: 400,
+	[ErrorCode.BACKUP_CREATE_FAILED]: 500,
+	[ErrorCode.BACKUP_RESTORE_FAILED]: 500,
+	[ErrorCode.PYTHON_NOT_AVAILABLE]: 501,
+	[ErrorCode.JAVASCRIPT_NOT_AVAILABLE]: 501,
+	[ErrorCode.DESKTOP_NOT_STARTED]: 409,
+	[ErrorCode.DESKTOP_START_FAILED]: 500,
+	[ErrorCode.DESKTOP_UNAVAILABLE]: 503,
+	[ErrorCode.DESKTOP_PROCESS_CRASHED]: 500,
+	[ErrorCode.DESKTOP_INVALID_OPTIONS]: 400,
+	[ErrorCode.DESKTOP_INVALID_COORDINATES]: 400,
+	[ErrorCode.INTERPRETER_NOT_READY]: 503,
+	[ErrorCode.OPENCODE_STARTUP_FAILED]: 503,
+	[ErrorCode.RPC_TRANSPORT_ERROR]: 503,
+	[ErrorCode.PROCESS_READY_TIMEOUT]: 408,
+	[ErrorCode.PROCESS_EXITED_BEFORE_READY]: 500,
+	[ErrorCode.NO_SPACE]: 500,
+	[ErrorCode.TOO_MANY_FILES]: 500,
+	[ErrorCode.TOO_MANY_LINKS]: 500,
+	[ErrorCode.FILESYSTEM_ERROR]: 500,
+	[ErrorCode.COMMAND_EXECUTION_ERROR]: 500,
+	[ErrorCode.STREAM_START_ERROR]: 500,
+	[ErrorCode.PROCESS_ERROR]: 500,
+	[ErrorCode.PORT_OPERATION_ERROR]: 500,
+	[ErrorCode.GIT_CLONE_FAILED]: 500,
+	[ErrorCode.GIT_CHECKOUT_FAILED]: 500,
+	[ErrorCode.GIT_OPERATION_FAILED]: 500,
+	[ErrorCode.CODE_EXECUTION_ERROR]: 500,
+	[ErrorCode.BUCKET_MOUNT_ERROR]: 500,
+	[ErrorCode.BUCKET_UNMOUNT_ERROR]: 500,
+	[ErrorCode.S3FS_MOUNT_ERROR]: 500,
+	[ErrorCode.WATCH_START_ERROR]: 500,
+	[ErrorCode.WATCH_STOP_ERROR]: 500,
+	[ErrorCode.UNKNOWN_ERROR]: 500,
+	[ErrorCode.INTERNAL_ERROR]: 500
+};
+/**
+* Get HTTP status code for an error code
+* Falls back to 500 for unknown errors
+*/
+function getHttpStatus(code) {
+	return ERROR_STATUS_MAP[code] || 500;
+}
+
+//#endregion
+//#region ../shared/dist/errors/suggestions.js
+/**
+* Get actionable suggestion for an error code
+* Used by handlers when enriching ServiceError → ErrorResponse
+*/
+function getSuggestion(code, context) {
+	switch (code) {
+		case ErrorCode.FILE_NOT_FOUND: return `Ensure the file exists at ${context.path} before attempting to access it`;
+		case ErrorCode.FILE_EXISTS: return `File already exists at ${context.path}. Use a different path or delete the existing file first`;
+		case ErrorCode.COMMAND_NOT_FOUND: return `Check that "${context.command}" is installed and available in the system PATH`;
+		case ErrorCode.PROCESS_NOT_FOUND: return "Verify the process ID is correct and the process has not already exited";
+		case ErrorCode.PORT_NOT_EXPOSED: return `Port ${context.port} is not currently exposed. Use listExposedPorts() to see active ports`;
+		case ErrorCode.PORT_ALREADY_EXPOSED: return `Port ${context.port} is already exposed. Unexpose it first or use a different port`;
+		case ErrorCode.PORT_IN_USE: return `Port ${context.port} is already in use by another service. Choose a different port`;
+		case ErrorCode.SESSION_ALREADY_EXISTS: return `Session "${context.sessionId}" already exists. Use a different session ID or reuse the existing session`;
+		case ErrorCode.SESSION_DESTROYED: return `Session "${context.sessionId}" was destroyed. Create a new session to continue executing commands`;
+		case ErrorCode.SESSION_TERMINATED: return `Session "${context.sessionId}" ended because its shell exited (exit code: ${context.exitCode ?? "unknown"}). Session-local state (env vars, cwd, shell functions) has been lost. Retry the call to start a fresh session, or call createSession() with the same id to recreate it explicitly`;
+		case ErrorCode.INVALID_PORT: return `Port must be between 1 and 65535. Port ${context.port} is ${context.reason}`;
+		case ErrorCode.GIT_REPOSITORY_NOT_FOUND: return "Verify the repository URL is correct and accessible";
+		case ErrorCode.GIT_AUTH_FAILED: return "Check authentication credentials or use a public repository";
+		case ErrorCode.GIT_BRANCH_NOT_FOUND: return `Branch "${context.branch}" does not exist in the repository. Check the branch name or use the default branch`;
+		case ErrorCode.INTERPRETER_NOT_READY: return context.retryAfter ? `Code interpreter is starting up. Retry after ${context.retryAfter} seconds` : "Code interpreter is not ready. Please wait a moment and try again";
+		case ErrorCode.CONTEXT_NOT_FOUND: return `Context "${context.contextId}" does not exist. Create a context first using createContext()`;
+		case ErrorCode.VALIDATION_FAILED: return "Check the request parameters and ensure they match the required format";
+		case ErrorCode.NO_SPACE: return "Not enough disk space available. Consider cleaning up temporary files or increasing storage";
+		case ErrorCode.PERMISSION_DENIED: return "Operation not permitted. Check file/directory permissions";
+		case ErrorCode.IS_DIRECTORY: return `Cannot perform this operation on a directory. Path ${context.path} is a directory`;
+		case ErrorCode.NOT_DIRECTORY: return `Expected a directory but found a file at ${context.path}`;
+		case ErrorCode.RESOURCE_BUSY: return "Resource is currently in use. Wait for the current operation to complete";
+		case ErrorCode.READ_ONLY: return "Cannot modify a read-only resource";
+		case ErrorCode.SERVICE_NOT_RESPONDING: return "Service is not responding. Check if the service is running and accessible";
+		case ErrorCode.BACKUP_NOT_FOUND: return `Backup "${context.backupId}" does not exist. Verify the backup ID is correct`;
+		case ErrorCode.BACKUP_EXPIRED: return `Backup "${context.backupId}" has expired. Create a new backup`;
+		case ErrorCode.INVALID_BACKUP_CONFIG: return `Invalid backup configuration: ${context.reason}`;
+		case ErrorCode.BACKUP_CREATE_FAILED: return "Backup creation failed. Check that the directory exists and you have sufficient disk space";
+		case ErrorCode.BACKUP_RESTORE_FAILED: return "Backup restoration failed. The archive may be corrupted or the target directory may be in use";
+		case ErrorCode.DESKTOP_NOT_STARTED: return "Desktop environment is not running. Call sandbox.desktop.start() first";
+		case ErrorCode.DESKTOP_START_FAILED: return `Desktop failed to start: ${context.reason || "unknown error"}. Check container logs`;
+		case ErrorCode.DESKTOP_UNAVAILABLE: return "Desktop processes are not healthy. Try sandbox.desktop.stop() then sandbox.desktop.start()";
+		case ErrorCode.DESKTOP_PROCESS_CRASHED: return `Desktop process "${context.crashedProcess}" crashed. Restart with sandbox.desktop.start()`;
+		case ErrorCode.DESKTOP_INVALID_OPTIONS: return `Invalid desktop options: ${context.reason}. Check resolution and DPI values`;
+		case ErrorCode.DESKTOP_INVALID_COORDINATES: return `Coordinates (${context.x}, ${context.y}) are outside the display area (${context.displayWidth}x${context.displayHeight})`;
+		case ErrorCode.RPC_TRANSPORT_ERROR: switch (context.kind) {
+			case "peer_closed": return "The container closed the WebSocket mid-call (likely a container restart, eviction, or crash). Retry the call — the SDK will open a fresh connection.";
+			case "connection_failed": return "The WebSocket connection failed. Retry the call; if the failure persists, check container health and network connectivity.";
+			case "upgrade_failed": return "The WebSocket upgrade was rejected by the container. Verify the container is running and reachable on the configured port.";
+			case "invalid_frame": return "The container sent a frame the RPC transport cannot handle. This usually indicates a version mismatch between the SDK and the container image.";
+			case "protocol_error": return "The peer sent a malformed RPC message (capnweb could not parse the wire format). This usually indicates a version mismatch between the SDK and the container image.";
+			case "session_disposed": return "The RPC session was disposed while a call was in flight. Avoid reusing stubs after disconnect(); the next method call will reconnect automatically.";
+			default: return "The RPC transport raised an error. Retry the call — the SDK will open a fresh connection.";
+		}
+		default: return;
+	}
+}
+
+//#endregion
+export { getHttpStatus as n, ErrorCode as r, getSuggestion as t };
+//# sourceMappingURL=errors-CBi-O-pF.js.map

package/dist/errors-CBi-O-pF.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors-CBi-O-pF.js","names":[],"sources":["../../shared/dist/errors/codes.js","../../shared/dist/errors/status-map.js","../../shared/dist/errors/suggestions.js"],"sourcesContent":["/**\n * Centralized error code registry\n * Each code maps to a specific error type with consistent semantics\n */\nexport const ErrorCode = {\n    // File System Errors (404)\n    FILE_NOT_FOUND: 'FILE_NOT_FOUND',\n    // Permission Errors (403)\n    PERMISSION_DENIED: 'PERMISSION_DENIED',\n    // File System Errors (409)\n    FILE_EXISTS: 'FILE_EXISTS',\n    // File System Errors (400)\n    IS_DIRECTORY: 'IS_DIRECTORY',\n    NOT_DIRECTORY: 'NOT_DIRECTORY',\n    // File Too Large Errors (413)\n    FILE_TOO_LARGE: 'FILE_TOO_LARGE',\n    // File System Errors (500)\n    NO_SPACE: 'NO_SPACE',\n    TOO_MANY_FILES: 'TOO_MANY_FILES',\n    RESOURCE_BUSY: 'RESOURCE_BUSY',\n    READ_ONLY: 'READ_ONLY',\n    NAME_TOO_LONG: 'NAME_TOO_LONG',\n    TOO_MANY_LINKS: 'TOO_MANY_LINKS',\n    FILESYSTEM_ERROR: 'FILESYSTEM_ERROR',\n    // Command Errors (404)\n    COMMAND_NOT_FOUND: 'COMMAND_NOT_FOUND',\n    // Command Errors (403/400)\n    COMMAND_PERMISSION_DENIED: 'COMMAND_PERMISSION_DENIED',\n    INVALID_COMMAND: 'INVALID_COMMAND',\n    // Command Errors (500)\n    COMMAND_EXECUTION_ERROR: 'COMMAND_EXECUTION_ERROR',\n    STREAM_START_ERROR: 'STREAM_START_ERROR',\n    // Process Errors (404)\n    PROCESS_NOT_FOUND: 'PROCESS_NOT_FOUND',\n    // Process Errors (403/500)\n    PROCESS_PERMISSION_DENIED: 'PROCESS_PERMISSION_DENIED',\n    PROCESS_ERROR: 'PROCESS_ERROR',\n    // Session Errors (409)\n    SESSION_ALREADY_EXISTS: 'SESSION_ALREADY_EXISTS',\n    // Session Errors (410)\n    SESSION_DESTROYED: 'SESSION_DESTROYED',\n    SESSION_TERMINATED: 'SESSION_TERMINATED',\n    // Port Errors (409)\n    PORT_ALREADY_EXPOSED: 'PORT_ALREADY_EXPOSED',\n    PORT_IN_USE: 'PORT_IN_USE',\n    // Port Errors (404)\n    PORT_NOT_EXPOSED: 'PORT_NOT_EXPOSED',\n    // Port Errors (400)\n    INVALID_PORT_NUMBER: 'INVALID_PORT_NUMBER',\n    INVALID_PORT: 'INVALID_PORT',\n    // Port Errors (502/500)\n    SERVICE_NOT_RESPONDING: 'SERVICE_NOT_RESPONDING',\n    PORT_OPERATION_ERROR: 'PORT_OPERATION_ERROR',\n    // Port Errors (400)\n    CUSTOM_DOMAIN_REQUIRED: 'CUSTOM_DOMAIN_REQUIRED',\n    // Git Errors (404)\n    GIT_REPOSITORY_NOT_FOUND: 'GIT_REPOSITORY_NOT_FOUND',\n    GIT_BRANCH_NOT_FOUND: 'GIT_BRANCH_NOT_FOUND',\n    // Git Errors (401)\n    GIT_AUTH_FAILED: 'GIT_AUTH_FAILED',\n    // Git Errors (502)\n    GIT_NETWORK_ERROR: 'GIT_NETWORK_ERROR',\n    // Git Errors (400)\n    INVALID_GIT_URL: 'INVALID_GIT_URL',\n    // Git Errors (500)\n    GIT_CLONE_FAILED: 'GIT_CLONE_FAILED',\n    GIT_CHECKOUT_FAILED: 'GIT_CHECKOUT_FAILED',\n    GIT_OPERATION_FAILED: 'GIT_OPERATION_FAILED',\n    // Bucket mounting errors\n    BUCKET_MOUNT_ERROR: 'BUCKET_MOUNT_ERROR',\n    BUCKET_UNMOUNT_ERROR: 'BUCKET_UNMOUNT_ERROR',\n    S3FS_MOUNT_ERROR: 'S3FS_MOUNT_ERROR',\n    MISSING_CREDENTIALS: 'MISSING_CREDENTIALS',\n    INVALID_MOUNT_CONFIG: 'INVALID_MOUNT_CONFIG',\n    // Backup Errors (500)\n    BACKUP_CREATE_FAILED: 'BACKUP_CREATE_FAILED',\n    BACKUP_RESTORE_FAILED: 'BACKUP_RESTORE_FAILED',\n    // Backup Errors (404)\n    BACKUP_NOT_FOUND: 'BACKUP_NOT_FOUND',\n    // Backup Errors (400)\n    BACKUP_EXPIRED: 'BACKUP_EXPIRED',\n    INVALID_BACKUP_CONFIG: 'INVALID_BACKUP_CONFIG',\n    // Code Interpreter Errors (503)\n    INTERPRETER_NOT_READY: 'INTERPRETER_NOT_READY',\n    // Code Interpreter Errors (404)\n    CONTEXT_NOT_FOUND: 'CONTEXT_NOT_FOUND',\n    // Code Interpreter Errors (500)\n    CODE_EXECUTION_ERROR: 'CODE_EXECUTION_ERROR',\n    // Code Interpreter Errors (501) - Feature not available in image variant\n    PYTHON_NOT_AVAILABLE: 'PYTHON_NOT_AVAILABLE',\n    JAVASCRIPT_NOT_AVAILABLE: 'JAVASCRIPT_NOT_AVAILABLE',\n    // OpenCode Errors (503)\n    OPENCODE_STARTUP_FAILED: 'OPENCODE_STARTUP_FAILED',\n    // Process Readiness Errors (408/500)\n    PROCESS_READY_TIMEOUT: 'PROCESS_READY_TIMEOUT',\n    PROCESS_EXITED_BEFORE_READY: 'PROCESS_EXITED_BEFORE_READY',\n    // Desktop Errors (409)\n    DESKTOP_NOT_STARTED: 'DESKTOP_NOT_STARTED',\n    // Desktop Errors (500)\n    DESKTOP_START_FAILED: 'DESKTOP_START_FAILED',\n    // Desktop Errors (503)\n    DESKTOP_UNAVAILABLE: 'DESKTOP_UNAVAILABLE',\n    // Desktop Errors (500)\n    DESKTOP_PROCESS_CRASHED: 'DESKTOP_PROCESS_CRASHED',\n    // Desktop Errors (400)\n    DESKTOP_INVALID_OPTIONS: 'DESKTOP_INVALID_OPTIONS',\n    DESKTOP_INVALID_COORDINATES: 'DESKTOP_INVALID_COORDINATES',\n    // File Watch Errors (404)\n    WATCH_NOT_FOUND: 'WATCH_NOT_FOUND',\n    // File Watch Errors (500)\n    WATCH_START_ERROR: 'WATCH_START_ERROR',\n    WATCH_STOP_ERROR: 'WATCH_STOP_ERROR',\n    // Validation Errors (400)\n    VALIDATION_FAILED: 'VALIDATION_FAILED',\n    // Generic Errors (400/500)\n    INVALID_JSON_RESPONSE: 'INVALID_JSON_RESPONSE',\n    UNKNOWN_ERROR: 'UNKNOWN_ERROR',\n    INTERNAL_ERROR: 'INTERNAL_ERROR',\n    // RPC Transport Errors (503) — capnweb WebSocket session-level failures\n    // raised on the SDK side, not by the container. The container went away\n    // mid-call (peer close), the WebSocket failed before/after upgrade, the\n    // peer sent a frame the transport cannot handle, or the session was\n    // disposed while a call was in flight.\n    RPC_TRANSPORT_ERROR: 'RPC_TRANSPORT_ERROR'\n};\n","import { ErrorCode } from './codes';\n/**\n * Maps error codes to HTTP status codes\n * Centralized mapping ensures consistency across SDK\n */\nexport const ERROR_STATUS_MAP = {\n    // 404 Not Found\n    [ErrorCode.FILE_NOT_FOUND]: 404,\n    [ErrorCode.COMMAND_NOT_FOUND]: 404,\n    [ErrorCode.PROCESS_NOT_FOUND]: 404,\n    [ErrorCode.PORT_NOT_EXPOSED]: 404,\n    [ErrorCode.GIT_REPOSITORY_NOT_FOUND]: 404,\n    [ErrorCode.GIT_BRANCH_NOT_FOUND]: 404,\n    [ErrorCode.CONTEXT_NOT_FOUND]: 404,\n    [ErrorCode.WATCH_NOT_FOUND]: 404,\n    // 400 Bad Request\n    [ErrorCode.IS_DIRECTORY]: 400,\n    [ErrorCode.NOT_DIRECTORY]: 400,\n    [ErrorCode.INVALID_COMMAND]: 400,\n    [ErrorCode.INVALID_PORT_NUMBER]: 400,\n    [ErrorCode.INVALID_PORT]: 400,\n    [ErrorCode.INVALID_GIT_URL]: 400,\n    [ErrorCode.CUSTOM_DOMAIN_REQUIRED]: 400,\n    [ErrorCode.INVALID_JSON_RESPONSE]: 400,\n    [ErrorCode.NAME_TOO_LONG]: 400,\n    [ErrorCode.VALIDATION_FAILED]: 400,\n    [ErrorCode.MISSING_CREDENTIALS]: 400,\n    [ErrorCode.INVALID_MOUNT_CONFIG]: 400,\n    // 401 Unauthorized\n    [ErrorCode.GIT_AUTH_FAILED]: 401,\n    // 403 Forbidden\n    [ErrorCode.PERMISSION_DENIED]: 403,\n    [ErrorCode.COMMAND_PERMISSION_DENIED]: 403,\n    [ErrorCode.PROCESS_PERMISSION_DENIED]: 403,\n    [ErrorCode.READ_ONLY]: 403,\n    // 409 Conflict\n    [ErrorCode.FILE_EXISTS]: 409,\n    [ErrorCode.PORT_ALREADY_EXPOSED]: 409,\n    [ErrorCode.PORT_IN_USE]: 409,\n    [ErrorCode.RESOURCE_BUSY]: 409,\n    [ErrorCode.SESSION_ALREADY_EXISTS]: 409,\n    // 410 Gone\n    [ErrorCode.SESSION_DESTROYED]: 410,\n    [ErrorCode.SESSION_TERMINATED]: 410,\n    // 413 Content Too Large\n    [ErrorCode.FILE_TOO_LARGE]: 413,\n    // 502 Bad Gateway\n    [ErrorCode.SERVICE_NOT_RESPONDING]: 502,\n    [ErrorCode.GIT_NETWORK_ERROR]: 502,\n    // Backup errors\n    [ErrorCode.BACKUP_NOT_FOUND]: 404,\n    [ErrorCode.BACKUP_EXPIRED]: 400,\n    [ErrorCode.INVALID_BACKUP_CONFIG]: 400,\n    [ErrorCode.BACKUP_CREATE_FAILED]: 500,\n    [ErrorCode.BACKUP_RESTORE_FAILED]: 500,\n    // 501 Not Implemented (feature not available in image variant)\n    [ErrorCode.PYTHON_NOT_AVAILABLE]: 501,\n    [ErrorCode.JAVASCRIPT_NOT_AVAILABLE]: 501,\n    // Desktop errors\n    [ErrorCode.DESKTOP_NOT_STARTED]: 409,\n    [ErrorCode.DESKTOP_START_FAILED]: 500,\n    [ErrorCode.DESKTOP_UNAVAILABLE]: 503,\n    [ErrorCode.DESKTOP_PROCESS_CRASHED]: 500,\n    [ErrorCode.DESKTOP_INVALID_OPTIONS]: 400,\n    [ErrorCode.DESKTOP_INVALID_COORDINATES]: 400,\n    // 503 Service Unavailable\n    [ErrorCode.INTERPRETER_NOT_READY]: 503,\n    [ErrorCode.OPENCODE_STARTUP_FAILED]: 503,\n    [ErrorCode.RPC_TRANSPORT_ERROR]: 503,\n    // 408 Request Timeout\n    [ErrorCode.PROCESS_READY_TIMEOUT]: 408,\n    // 500 Internal Server Error\n    [ErrorCode.PROCESS_EXITED_BEFORE_READY]: 500,\n    [ErrorCode.NO_SPACE]: 500,\n    [ErrorCode.TOO_MANY_FILES]: 500,\n    [ErrorCode.TOO_MANY_LINKS]: 500,\n    [ErrorCode.FILESYSTEM_ERROR]: 500,\n    [ErrorCode.COMMAND_EXECUTION_ERROR]: 500,\n    [ErrorCode.STREAM_START_ERROR]: 500,\n    [ErrorCode.PROCESS_ERROR]: 500,\n    [ErrorCode.PORT_OPERATION_ERROR]: 500,\n    [ErrorCode.GIT_CLONE_FAILED]: 500,\n    [ErrorCode.GIT_CHECKOUT_FAILED]: 500,\n    [ErrorCode.GIT_OPERATION_FAILED]: 500,\n    [ErrorCode.CODE_EXECUTION_ERROR]: 500,\n    [ErrorCode.BUCKET_MOUNT_ERROR]: 500,\n    [ErrorCode.BUCKET_UNMOUNT_ERROR]: 500,\n    [ErrorCode.S3FS_MOUNT_ERROR]: 500,\n    [ErrorCode.WATCH_START_ERROR]: 500,\n    [ErrorCode.WATCH_STOP_ERROR]: 500,\n    [ErrorCode.UNKNOWN_ERROR]: 500,\n    [ErrorCode.INTERNAL_ERROR]: 500\n};\n/**\n * Get HTTP status code for an error code\n * Falls back to 500 for unknown errors\n */\nexport function getHttpStatus(code) {\n    return ERROR_STATUS_MAP[code] || 500;\n}\n","import { ErrorCode } from './codes';\n/**\n * Get actionable suggestion for an error code\n * Used by handlers when enriching ServiceError → ErrorResponse\n */\nexport function getSuggestion(code, context) {\n    switch (code) {\n        case ErrorCode.FILE_NOT_FOUND:\n            return `Ensure the file exists at ${context.path} before attempting to access it`;\n        case ErrorCode.FILE_EXISTS:\n            return `File already exists at ${context.path}. Use a different path or delete the existing file first`;\n        case ErrorCode.COMMAND_NOT_FOUND:\n            return `Check that \"${context.command}\" is installed and available in the system PATH`;\n        case ErrorCode.PROCESS_NOT_FOUND:\n            return 'Verify the process ID is correct and the process has not already exited';\n        case ErrorCode.PORT_NOT_EXPOSED:\n            return `Port ${context.port} is not currently exposed. Use listExposedPorts() to see active ports`;\n        case ErrorCode.PORT_ALREADY_EXPOSED:\n            return `Port ${context.port} is already exposed. Unexpose it first or use a different port`;\n        case ErrorCode.PORT_IN_USE:\n            return `Port ${context.port} is already in use by another service. Choose a different port`;\n        case ErrorCode.SESSION_ALREADY_EXISTS:\n            return `Session \"${context.sessionId}\" already exists. Use a different session ID or reuse the existing session`;\n        case ErrorCode.SESSION_DESTROYED:\n            return `Session \"${context.sessionId}\" was destroyed. Create a new session to continue executing commands`;\n        case ErrorCode.SESSION_TERMINATED:\n            return `Session \"${context.sessionId}\" ended because its shell exited (exit code: ${context.exitCode ?? 'unknown'}). Session-local state (env vars, cwd, shell functions) has been lost. Retry the call to start a fresh session, or call createSession() with the same id to recreate it explicitly`;\n        case ErrorCode.INVALID_PORT:\n            return `Port must be between 1 and 65535. Port ${context.port} is ${context.reason}`;\n        case ErrorCode.GIT_REPOSITORY_NOT_FOUND:\n            return 'Verify the repository URL is correct and accessible';\n        case ErrorCode.GIT_AUTH_FAILED:\n            return 'Check authentication credentials or use a public repository';\n        case ErrorCode.GIT_BRANCH_NOT_FOUND:\n            return `Branch \"${context.branch}\" does not exist in the repository. Check the branch name or use the default branch`;\n        case ErrorCode.INTERPRETER_NOT_READY:\n            return context.retryAfter\n                ? `Code interpreter is starting up. Retry after ${context.retryAfter} seconds`\n                : 'Code interpreter is not ready. Please wait a moment and try again';\n        case ErrorCode.CONTEXT_NOT_FOUND:\n            return `Context \"${context.contextId}\" does not exist. Create a context first using createContext()`;\n        case ErrorCode.VALIDATION_FAILED:\n            return 'Check the request parameters and ensure they match the required format';\n        case ErrorCode.NO_SPACE:\n            return 'Not enough disk space available. Consider cleaning up temporary files or increasing storage';\n        case ErrorCode.PERMISSION_DENIED:\n            return 'Operation not permitted. Check file/directory permissions';\n        case ErrorCode.IS_DIRECTORY:\n            return `Cannot perform this operation on a directory. Path ${context.path} is a directory`;\n        case ErrorCode.NOT_DIRECTORY:\n            return `Expected a directory but found a file at ${context.path}`;\n        case ErrorCode.RESOURCE_BUSY:\n            return 'Resource is currently in use. Wait for the current operation to complete';\n        case ErrorCode.READ_ONLY:\n            return 'Cannot modify a read-only resource';\n        case ErrorCode.SERVICE_NOT_RESPONDING:\n            return 'Service is not responding. Check if the service is running and accessible';\n        case ErrorCode.BACKUP_NOT_FOUND:\n            return `Backup \"${context.backupId}\" does not exist. Verify the backup ID is correct`;\n        case ErrorCode.BACKUP_EXPIRED:\n            return `Backup \"${context.backupId}\" has expired. Create a new backup`;\n        case ErrorCode.INVALID_BACKUP_CONFIG:\n            return `Invalid backup configuration: ${context.reason}`;\n        case ErrorCode.BACKUP_CREATE_FAILED:\n            return 'Backup creation failed. Check that the directory exists and you have sufficient disk space';\n        case ErrorCode.BACKUP_RESTORE_FAILED:\n            return 'Backup restoration failed. The archive may be corrupted or the target directory may be in use';\n        case ErrorCode.DESKTOP_NOT_STARTED:\n            return 'Desktop environment is not running. Call sandbox.desktop.start() first';\n        case ErrorCode.DESKTOP_START_FAILED:\n            return `Desktop failed to start: ${context.reason || 'unknown error'}. Check container logs`;\n        case ErrorCode.DESKTOP_UNAVAILABLE:\n            return 'Desktop processes are not healthy. Try sandbox.desktop.stop() then sandbox.desktop.start()';\n        case ErrorCode.DESKTOP_PROCESS_CRASHED:\n            return `Desktop process \"${context.crashedProcess}\" crashed. Restart with sandbox.desktop.start()`;\n        case ErrorCode.DESKTOP_INVALID_OPTIONS:\n            return `Invalid desktop options: ${context.reason}. Check resolution and DPI values`;\n        case ErrorCode.DESKTOP_INVALID_COORDINATES:\n            return `Coordinates (${context.x}, ${context.y}) are outside the display area (${context.displayWidth}x${context.displayHeight})`;\n        case ErrorCode.RPC_TRANSPORT_ERROR: {\n            const kind = context.kind;\n            switch (kind) {\n                case 'peer_closed':\n                    return 'The container closed the WebSocket mid-call (likely a container restart, eviction, or crash). Retry the call — the SDK will open a fresh connection.';\n                case 'connection_failed':\n                    return 'The WebSocket connection failed. Retry the call; if the failure persists, check container health and network connectivity.';\n                case 'upgrade_failed':\n                    return 'The WebSocket upgrade was rejected by the container. Verify the container is running and reachable on the configured port.';\n                case 'invalid_frame':\n                    return 'The container sent a frame the RPC transport cannot handle. This usually indicates a version mismatch between the SDK and the container image.';\n                case 'protocol_error':\n                    return 'The peer sent a malformed RPC message (capnweb could not parse the wire format). This usually indicates a version mismatch between the SDK and the container image.';\n                case 'session_disposed':\n                    return 'The RPC session was disposed while a call was in flight. Avoid reusing stubs after disconnect(); the next method call will reconnect automatically.';\n                default:\n                    return 'The RPC transport raised an error. Retry the call — the SDK will open a fresh connection.';\n            }\n        }\n        // Generic fallback for other errors\n        default:\n            return undefined;\n    }\n}\n"],"mappings":";;;;;AAIA,MAAa,YAAY;CAErB,gBAAgB;CAEhB,mBAAmB;CAEnB,aAAa;CAEb,cAAc;CACd,eAAe;CAEf,gBAAgB;CAEhB,UAAU;CACV,gBAAgB;CAChB,eAAe;CACf,WAAW;CACX,eAAe;CACf,gBAAgB;CAChB,kBAAkB;CAElB,mBAAmB;CAEnB,2BAA2B;CAC3B,iBAAiB;CAEjB,yBAAyB;CACzB,oBAAoB;CAEpB,mBAAmB;CAEnB,2BAA2B;CAC3B,eAAe;CAEf,wBAAwB;CAExB,mBAAmB;CACnB,oBAAoB;CAEpB,sBAAsB;CACtB,aAAa;CAEb,kBAAkB;CAElB,qBAAqB;CACrB,cAAc;CAEd,wBAAwB;CACxB,sBAAsB;CAEtB,wBAAwB;CAExB,0BAA0B;CAC1B,sBAAsB;CAEtB,iBAAiB;CAEjB,mBAAmB;CAEnB,iBAAiB;CAEjB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,oBAAoB;CACpB,sBAAsB;CACtB,kBAAkB;CAClB,qBAAqB;CACrB,sBAAsB;CAEtB,sBAAsB;CACtB,uBAAuB;CAEvB,kBAAkB;CAElB,gBAAgB;CAChB,uBAAuB;CAEvB,uBAAuB;CAEvB,mBAAmB;CAEnB,sBAAsB;CAEtB,sBAAsB;CACtB,0BAA0B;CAE1B,yBAAyB;CAEzB,uBAAuB;CACvB,6BAA6B;CAE7B,qBAAqB;CAErB,sBAAsB;CAEtB,qBAAqB;CAErB,yBAAyB;CAEzB,yBAAyB;CACzB,6BAA6B;CAE7B,iBAAiB;CAEjB,mBAAmB;CACnB,kBAAkB;CAElB,mBAAmB;CAEnB,uBAAuB;CACvB,eAAe;CACf,gBAAgB;CAMhB,qBAAqB;CACxB;;;;;;;;ACvHD,MAAa,mBAAmB;EAE3B,UAAU,iBAAiB;EAC3B,UAAU,oBAAoB;EAC9B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,2BAA2B;EACrC,UAAU,uBAAuB;EACjC,UAAU,oBAAoB;EAC9B,UAAU,kBAAkB;EAE5B,UAAU,eAAe;EACzB,UAAU,gBAAgB;EAC1B,UAAU,kBAAkB;EAC5B,UAAU,sBAAsB;EAChC,UAAU,eAAe;EACzB,UAAU,kBAAkB;EAC5B,UAAU,yBAAyB;EACnC,UAAU,wBAAwB;EAClC,UAAU,gBAAgB;EAC1B,UAAU,oBAAoB;EAC9B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EAEjC,UAAU,kBAAkB;EAE5B,UAAU,oBAAoB;EAC9B,UAAU,4BAA4B;EACtC,UAAU,4BAA4B;EACtC,UAAU,YAAY;EAEtB,UAAU,cAAc;EACxB,UAAU,uBAAuB;EACjC,UAAU,cAAc;EACxB,UAAU,gBAAgB;EAC1B,UAAU,yBAAyB;EAEnC,UAAU,oBAAoB;EAC9B,UAAU,qBAAqB;EAE/B,UAAU,iBAAiB;EAE3B,UAAU,yBAAyB;EACnC,UAAU,oBAAoB;EAE9B,UAAU,mBAAmB;EAC7B,UAAU,iBAAiB;EAC3B,UAAU,wBAAwB;EAClC,UAAU,uBAAuB;EACjC,UAAU,wBAAwB;EAElC,UAAU,uBAAuB;EACjC,UAAU,2BAA2B;EAErC,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EACjC,UAAU,sBAAsB;EAChC,UAAU,0BAA0B;EACpC,UAAU,0BAA0B;EACpC,UAAU,8BAA8B;EAExC,UAAU,wBAAwB;EAClC,UAAU,0BAA0B;EACpC,UAAU,sBAAsB;EAEhC,UAAU,wBAAwB;EAElC,UAAU,8BAA8B;EACxC,UAAU,WAAW;EACrB,UAAU,iBAAiB;EAC3B,UAAU,iBAAiB;EAC3B,UAAU,mBAAmB;EAC7B,UAAU,0BAA0B;EACpC,UAAU,qBAAqB;EAC/B,UAAU,gBAAgB;EAC1B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,sBAAsB;EAChC,UAAU,uBAAuB;EACjC,UAAU,uBAAuB;EACjC,UAAU,qBAAqB;EAC/B,UAAU,uBAAuB;EACjC,UAAU,mBAAmB;EAC7B,UAAU,oBAAoB;EAC9B,UAAU,mBAAmB;EAC7B,UAAU,gBAAgB;EAC1B,UAAU,iBAAiB;CAC/B;;;;;AAKD,SAAgB,cAAc,MAAM;AAChC,QAAO,iBAAiB,SAAS;;;;;;;;;AC7FrC,SAAgB,cAAc,MAAM,SAAS;AACzC,SAAQ,MAAR;EACI,KAAK,UAAU,eACX,QAAO,6BAA6B,QAAQ,KAAK;EACrD,KAAK,UAAU,YACX,QAAO,0BAA0B,QAAQ,KAAK;EAClD,KAAK,UAAU,kBACX,QAAO,eAAe,QAAQ,QAAQ;EAC1C,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,qBACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,YACX,QAAO,QAAQ,QAAQ,KAAK;EAChC,KAAK,UAAU,uBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,mBACX,QAAO,YAAY,QAAQ,UAAU,+CAA+C,QAAQ,YAAY,UAAU;EACtH,KAAK,UAAU,aACX,QAAO,0CAA0C,QAAQ,KAAK,MAAM,QAAQ;EAChF,KAAK,UAAU,yBACX,QAAO;EACX,KAAK,UAAU,gBACX,QAAO;EACX,KAAK,UAAU,qBACX,QAAO,WAAW,QAAQ,OAAO;EACrC,KAAK,UAAU,sBACX,QAAO,QAAQ,aACT,gDAAgD,QAAQ,WAAW,YACnE;EACV,KAAK,UAAU,kBACX,QAAO,YAAY,QAAQ,UAAU;EACzC,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,SACX,QAAO;EACX,KAAK,UAAU,kBACX,QAAO;EACX,KAAK,UAAU,aACX,QAAO,sDAAsD,QAAQ,KAAK;EAC9E,KAAK,UAAU,cACX,QAAO,4CAA4C,QAAQ;EAC/D,KAAK,UAAU,cACX,QAAO;EACX,KAAK,UAAU,UACX,QAAO;EACX,KAAK,UAAU,uBACX,QAAO;EACX,KAAK,UAAU,iBACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,eACX,QAAO,WAAW,QAAQ,SAAS;EACvC,KAAK,UAAU,sBACX,QAAO,iCAAiC,QAAQ;EACpD,KAAK,UAAU,qBACX,QAAO;EACX,KAAK,UAAU,sBACX,QAAO;EACX,KAAK,UAAU,oBACX,QAAO;EACX,KAAK,UAAU,qBACX,QAAO,4BAA4B,QAAQ,UAAU,gBAAgB;EACzE,KAAK,UAAU,oBACX,QAAO;EACX,KAAK,UAAU,wBACX,QAAO,oBAAoB,QAAQ,eAAe;EACtD,KAAK,UAAU,wBACX,QAAO,4BAA4B,QAAQ,OAAO;EACtD,KAAK,UAAU,4BACX,QAAO,gBAAgB,QAAQ,EAAE,IAAI,QAAQ,EAAE,kCAAkC,QAAQ,aAAa,GAAG,QAAQ,cAAc;EACnI,KAAK,UAAU,oBAEX,SADa,QAAQ,MACrB;GACI,KAAK,cACD,QAAO;GACX,KAAK,oBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,gBACD,QAAO;GACX,KAAK,iBACD,QAAO;GACX,KAAK,mBACD,QAAO;GACX,QACI,QAAO;;EAInB,QACI"}