@droveragent/sandbox-cloudflare 0.0.0-stage → 0.3.0-next.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Nik Cubrilovic
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/cloudflare-sandbox.d.ts

@@ -0,0 +1,327 @@
+import { SandboxError } from "@droveragent/core";
+import type { SandboxAdapter } from "@droveragent/sandbox";
+import { Effect } from "effect";
+/**
+ * Egress posture for the container.
+ *
+ * Unlike Vercel Sandbox — where the firewall is a `getOrCreate` parameter —
+ * Cloudflare's egress controls live on the `Sandbox` **Durable Object**
+ * (`@cloudflare/containers`' `enableInternet` field plus the runtime
+ * `setAllowedHosts` / `setDeniedHosts` RPCs). Three consequences:
+ *
+ * 1. `deny-all` is only *real* when the DO subclass declares
+ *    `enableInternet = false`. The adapter cannot read that flag over RPC,
+ *    so it cannot verify it — see {@link CloudflareSandboxOptions.networkPolicy}.
+ * 2. `allow-all` is likewise not something the adapter can switch on; it
+ *    means "the adapter installs no host lists, the DO's own posture wins".
+ * 3. Installing either list flips the container into **intercept-all** mode
+ *    for the rest of its life (`@cloudflare/containers` promotes as soon as
+ *    the outbound config is mutated at runtime). Any catch-all `static
+ *    outbound` handler on the DO then sees *every* allowed host, not just
+ *    the one it was written for — so a credential-stamping handler must key
+ *    off `new URL(request.url).hostname` (or live in `static outboundByHost`)
+ *    rather than assume its target.
+ *
+ * Host patterns are matched by `@cloudflare/containers`' `simpleGlobMatch`:
+ * plain equality plus `*` wildcards, against the hostname only. As of
+ * `@cloudflare/containers@0.3.7` there is **no CIDR matching** despite what
+ * the docs suggest — a `"10.0.0.0/8"` entry matches nothing.
+ */
+export type CloudflareNetworkPolicy = "deny-all" | "allow-all" | {
+    /** Hostnames granted egress even when `enableInternet` is false. */
+    allow: readonly string[];
+    /** Hostnames blocked unconditionally, even when `enableInternet` is true. */
+    deny?: readonly string[];
+};
+/** Structural slice of the SDK's `ProcessOutput<string>`. */
+export interface CloudflareProcessOutput {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+    signal?: number;
+    /** True when the container-side `ExecOptions.timeout` fired. */
+    timedOut: boolean;
+    /** True when `maxBytes` clipped the captured streams. */
+    truncated: boolean;
+}
+/** Structural slice of the SDK's `SandboxProcess`. */
+export interface CloudflareProcessHandle {
+    readonly id: string;
+    output(options: {
+        encoding: "utf8";
+        maxBytes?: number;
+        timeout?: number;
+    }): Promise<CloudflareProcessOutput>;
+    /** POSIX signal *number* — 9 for SIGKILL. (The SDK takes no string form.) */
+    kill(signal?: number): Promise<void>;
+}
+/** Structural slice of the SDK's `ExecOptions`. Note: no `signal`. */
+export interface CloudflareExecOptions {
+    cwd?: string;
+    env?: Record<string, string>;
+    /** Container-side kill deadline, ms. */
+    timeout?: number;
+}
+export interface CloudflareReadFileResult {
+    success: boolean;
+    content: string;
+}
+export interface CloudflareWriteFileResult {
+    success: boolean;
+}
+export interface CloudflareMkdirResult {
+    success: boolean;
+}
+export interface CloudflareFileInfo {
+    name: string;
+}
+export interface CloudflareListFilesResult {
+    success: boolean;
+    files: CloudflareFileInfo[];
+}
+/**
+ * Structural slice of `SandboxClient<Sandbox>` — the stub `getSandbox()`
+ * returns. The optional members come from the `Container` base class rather
+ * than `ISandbox`; a real client has them, a hand-rolled test double need
+ * not (except where {@link CloudflareSandboxOptions.networkPolicy} requires
+ * the egress controls — see `createCloudflareSandbox`).
+ */
+export interface CloudflareSandboxHandle {
+    exec(command: readonly [string, ...string[]], options?: CloudflareExecOptions): Promise<CloudflareProcessHandle>;
+    readFile(path: string, options?: {
+        encoding?: "utf-8" | "utf8" | "base64";
+    }): Promise<CloudflareReadFileResult>;
+    writeFile(path: string, content: string, options?: {
+        encoding?: string;
+    }): Promise<CloudflareWriteFileResult>;
+    listFiles(path: string, options?: {
+        recursive?: boolean;
+        includeHidden?: boolean;
+    }): Promise<CloudflareListFilesResult>;
+    mkdir?(path: string, options?: {
+        recursive?: boolean;
+    }): Promise<CloudflareMkdirResult>;
+    setEnvVars?(envVars: Record<string, string | undefined>): Promise<void>;
+    setAllowedHosts?(hosts: string[]): Promise<void>;
+    setDeniedHosts?(hosts: string[]): Promise<void>;
+    /** Tear the container down. Not the same as "stop" — there is no snapshot. */
+    destroy?(): Promise<void>;
+}
+/** Structural slice of the SDK's `SandboxOptions`, forwarded to `getSandbox`. */
+export interface CloudflareGetSandboxOptions {
+    /** Idle sleep window — `"10m"`, `"1h"`, or seconds. SDK default `"10m"`. */
+    sleepAfter?: string | number;
+    /** Never auto-sleep. Requires an explicit `destroy()`. SDK default false. */
+    keepAlive?: boolean;
+    /** Lowercase the DO id. Recommended — and required for preview URLs. */
+    normalizeId?: boolean;
+    containerTimeouts?: {
+        instanceGetTimeoutMS?: number;
+        portReadyTimeoutMS?: number;
+        waitIntervalMS?: number;
+    };
+}
+/**
+ * SDK entry point, injectable for tests. In a Worker, build one with
+ * {@link cloudflareSdkClient}; the namespace binding is captured there so
+ * this interface stays free of Workers types.
+ */
+export interface CloudflareSandboxClient {
+    getSandbox(id: string, options?: CloudflareGetSandboxOptions): CloudflareSandboxHandle;
+}
+/**
+ * Bind `@cloudflare/sandbox`'s `getSandbox` to a Durable Object namespace,
+ * producing the adapter's structural client. This is the *only* place the
+ * real SDK types meet the adapter's, so it is also the only cast:
+ *
+ * ```ts
+ * import { getSandbox } from "@cloudflare/sandbox";
+ *
+ * const sandbox = createCloudflareSandbox({
+ *   name: `conv-${conversationId}`,
+ *   client: cloudflareSdkClient(getSandbox, env.Sandbox),
+ *   networkPolicy: { allow: ["data.example.org"] },
+ * });
+ * ```
+ *
+ * The adapter itself never imports `@cloudflare/sandbox`, so it type-checks
+ * and unit-tests in plain bun — the SDK only runs inside `workerd`.
+ */
+export declare function cloudflareSdkClient<NS, H>(getSandbox: (ns: NS, id: string, options?: CloudflareGetSandboxOptions) => H, namespace: NS): CloudflareSandboxClient;
+export interface CloudflareSandboxOptions {
+    /**
+     * Durable Object id — the sandbox's identity *and* its persistence key.
+     * The same name reattaches to the same container (and its disk) across
+     * requests, isolates and sessions. This is Cloudflare's `getOrCreate`.
+     */
+    name: string;
+    /** SDK entry point. See {@link cloudflareSdkClient}. */
+    client: CloudflareSandboxClient;
+    /**
+     * Egress firewall. Defaults to `"deny-all"` — drover sandboxes ship locked
+     * down.
+     *
+     * **Read this before trusting it.** Cloudflare's real deny-all switch is
+     * `enableInternet = false` on your `Sandbox` Durable Object subclass; the
+     * host lists this adapter installs are an *allowlist on top of that*. The
+     * adapter cannot read `enableInternet` over RPC, so it cannot assert the
+     * base posture. Declare it yourself:
+     *
+     * ```ts
+     * export class MySandbox extends Sandbox<Env> {
+     *   override enableInternet = false;
+     *   // Required to see (and therefore modify) HTTPS egress. Defaults to
+     *   // false on Container; Sandbox does not override it. Left false, an
+     *   // allowed HTTPS host is a transparent tunnel — outbound handlers
+     *   // never run and no header can be added.
+     *   override interceptHttps = true;
+     * }
+     * // Without this re-export the DO throws on the first list install:
+     * // "ctx.exports.ContainerProxy is undefined".
+     * export { ContainerProxy } from "@cloudflare/sandbox";
+     * ```
+     *
+     * With `interceptHttps = true` the platform mints an ephemeral CA at
+     * `/etc/cloudflare/certs/cloudflare-containers-ca.crt` inside the
+     * container. The stock sandbox image trusts it; anything with its own
+     * trust store (python `certifi`, node, curl built against a pinned
+     * bundle) needs `SSL_CERT_FILE` / `REQUESTS_CA_BUNDLE` /
+     * `NODE_EXTRA_CA_CERTS` pointed at a bundle that includes it, or TLS
+     * verification fails for every intercepted host. The CA-free alternative
+     * (what the SDK's own git/s3/r2 credential proxies do): have the container
+     * speak plain `http://` to the host, and let the `outboundByHost` handler
+     * upgrade to `https://` and stamp the credential before forwarding.
+     *
+     * Anything other than `"allow-all"` requires the handle to expose
+     * `setAllowedHosts` / `setDeniedHosts`; the adapter fails closed with a
+     * `SandboxError` when they are missing rather than running wide open.
+     */
+    networkPolicy?: CloudflareNetworkPolicy;
+    /** Options forwarded to `getSandbox`. `normalizeId` defaults to true. */
+    sandboxOptions?: CloudflareGetSandboxOptions;
+    /**
+     * Environment for everything this adapter runs.
+     *
+     * Applied two ways, deliberately:
+     *
+     * 1. `setEnvVars` once per acquire. **This only reaches a container that has
+     *    not started yet** — the SDK's `setEnvVars` mutates the Durable Object's
+     *    `envVars` record, and that record is handed to the container exactly
+     *    once, in the `container.start()` config. Call it against a container
+     *    that is already running (a warm sandbox reattached from a later
+     *    isolate) and it is a silent no-op until the next cold start.
+     * 2. Merged under `ExecOptions.env` on **every** `run`, so it is in effect
+     *    regardless of container warmth. Per-call `env` wins on key collisions.
+     *
+     * Secrets do not belong here either way: they would be visible to every
+     * process in the container. Inject them at the egress handler instead.
+     */
+    env?: Record<string, string>;
+    /**
+     * Default cwd for `run` and the base for `resolvePath`. Default
+     * `"/workspace"` — the container's working root.
+     */
+    cwd?: string;
+    /**
+     * Restrict `assertPathAllowed` to these prefixes. Omit (the default) to
+     * allow every path: the container is the isolation boundary, exactly as
+     * with the Vercel adapter. Set it when you also want intra-container
+     * confinement (e.g. `["/workspace"]`).
+     */
+    allowedRoots?: readonly string[];
+    /**
+     * Ran once per adapter instance, right after the stub is acquired and the
+     * env/egress policy are applied. Note this is NOT "on container create" —
+     * the SDK gives no such signal — so it fires on every cold isolate. Make
+     * it idempotent (a marker file is the usual guard).
+     */
+    onAcquire?: (sandbox: CloudflareSandboxHandle) => Promise<void>;
+    /** Per-call default exec timeout, ms. Default 30_000 (matches just-bash). */
+    timeoutMs?: number;
+    /**
+     * Tail cap per output stream, in bytes. Default 16 KiB. Longer output is
+     * truncated to its tail with a note, so a runaway `cat` cannot blow the
+     * transcript.
+     */
+    maxOutputBytes?: number;
+    /**
+     * `maxBytes` handed to the SDK's `output()` — the cap on what crosses the
+     * RPC boundary at all, before the tail cap above. Default 1 MiB.
+     */
+    transportMaxBytes?: number;
+    /** How long to wait after SIGKILL for exit code + output harvest, ms. Default 2_000. */
+    killGraceMs?: number;
+    /** Telemetry identifier. Default `"cloudflare-sandbox"`. */
+    id?: string;
+}
+/**
+ * The SDK's "the container behind this stub was replaced" family.
+ *
+ * Matched on the SDK's error `code` first (`OPERATION_INTERRUPTED` with a
+ * `runtime_replaced` reason, `STALE_PROCESS_HANDLE`) and on its messages as a
+ * fallback, through up to eight `cause` links, because the SDK wraps DO
+ * transport failures before they reach the adapter. Also true for a
+ * `SandboxError` this adapter minted from one, so callers can classify the
+ * error they were handed without keeping the original.
+ */
+export declare function isRuntimeReplacedError(err: unknown): boolean;
+/**
+ * Pure POSIX `normalize`. Hand-rolled rather than `node:path/posix` so the
+ * adapter needs no `nodejs_compat` flag in the consuming Worker. Trailing
+ * slashes are dropped (node keeps them); nothing else differs for the
+ * absolute paths a container deals in.
+ */
+export declare function normalizePosix(p: string): string;
+/**
+ * Cloudflare Sandbox adapter: every op runs inside a Cloudflare **container**
+ * fronted by a `Sandbox` Durable Object. **A real isolation boundary** — the
+ * container is remote, has its own filesystem, and (with
+ * `enableInternet = false` on the DO) no egress — so `bash` is safe to
+ * compose by default and `capabilities.shell` is unconditionally `true`.
+ *
+ * ### Identity and persistence
+ * `getSandbox(ns, name)` *is* the getOrCreate: the name is the Durable Object
+ * id, so the same name reattaches to the same container and the same disk.
+ * There is no Vercel-style snapshot on stop — the container simply sleeps
+ * after `sleepAfter` and wakes with its disk intact. For durable, portable
+ * state use the SDK's `createBackup`/`restoreBackup` (R2) directly on the
+ * handle; the adapter does not wrap them.
+ *
+ * ### What differs from `@droveragent/sandbox-vercel`
+ * - **Egress is DO-side, not per-acquire.** See
+ *   {@link CloudflareSandboxOptions.networkPolicy}.
+ * - **No `AbortSignal` on `exec`.** The SDK's `ExecOptions` has `cwd`, `env`
+ *   and `timeout` only, so cancellation is a client-side race plus an
+ *   explicit `kill(9)`, exactly as the Vercel adapter does for timeouts.
+ * - **`stop()` does not snapshot.** It drops the memoised handle so the next
+ *   op re-acquires; the container sleeps on its own schedule. Use
+ *   {@link CloudflareSandboxAdapter.destroy} to actually tear it down.
+ * - **No node builtins.** Path handling and byte counting use plain string
+ *   ops and `TextEncoder`, so no `nodejs_compat` flag is needed.
+ *
+ * `run` enforces `timeoutMs`/`signal` with its own deadline race and
+ * SIGKILLs the container-side process on expiry, resolving with
+ * `killed: true` (matching just-bash) rather than failing, so the tool layer
+ * can report the partial result. `SandboxError` is reserved for
+ * SDK/transport failures, including failure to acquire within the deadline.
+ */
+export interface CloudflareSandboxAdapter extends SandboxAdapter {
+    /** List directory entry names inside the container (always implemented here). */
+    readdir(path: string): Effect.Effect<ReadonlyArray<string>, SandboxError, never>;
+    /** `mkdir -p` inside the container. */
+    mkdir(path: string): Effect.Effect<void, SandboxError, never>;
+    /**
+     * Drop the memoised handle. The container is left running and sleeps on
+     * its own `sleepAfter` schedule with its disk intact; the next operation
+     * re-acquires it. A no-op when nothing was acquired. Safe to call repeatedly.
+     */
+    stop(): Effect.Effect<void, SandboxError, never>;
+    /**
+     * Tear the container down for good (`Sandbox.destroy()`), then drop the
+     * handle. Unlike {@link CloudflareSandboxAdapter.stop} this is destructive:
+     * the filesystem does not survive.
+     */
+    destroy(): Effect.Effect<void, SandboxError, never>;
+}
+export declare function createCloudflareSandbox(opts: CloudflareSandboxOptions): CloudflareSandboxAdapter;
+//# sourceMappingURL=cloudflare-sandbox.d.ts.map

package/dist/cloudflare-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-sandbox.d.ts","sourceRoot":"","sources":["../src/cloudflare-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,KAAK,EAA2B,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,MAAM,uBAAuB,GAC/B,UAAU,GACV,WAAW,GACX;IACE,oEAAoE;IACpE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,6EAA6E;IAC7E,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B,CAAC;AAcN,6DAA6D;AAC7D,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,QAAQ,EAAE,OAAO,CAAC;IAClB,yDAAyD;IACzD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,sDAAsD;AACtD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,OAAO,EAAE;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACrC,6EAA6E;IAC7E,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,sEAAsE;AACtE,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,kBAAkB,EAAE,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,uBAAuB;IACtC,IAAI,CACF,OAAO,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,EACvC,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,QAAQ,CACN,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAA;KAAE,GACnD,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACrC,SAAS,CACP,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC9B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC,SAAS,CACP,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACzD,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxF,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,eAAe,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,cAAc,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,8EAA8E;IAC9E,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED,iFAAiF;AACjF,MAAM,WAAW,2BAA2B;IAC1C,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,6EAA6E;IAC7E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE;QAClB,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,2BAA2B,GAAG,uBAAuB,CAAC;CACxF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,CAAC,EACvC,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,2BAA2B,KAAK,CAAC,EAC5E,SAAS,EAAE,EAAE,GACZ,uBAAuB,CAKzB;AAED,MAAM,WAAW,wBAAwB;IACvC;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,MAAM,EAAE,uBAAuB,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,yEAAyE;IACzE,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C;;;;;;;;;;;;;;;;OAgBG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;OAGG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,uBAAuB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAeD;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAiB5D;AAmDD;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAgBhD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,WAAW,wBAAyB,SAAQ,cAAc;IAC9D,iFAAiF;IACjF,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACjF,uCAAuC;IACvC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IAC9D;;;;OAIG;IACH,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACjD;;;;OAIG;IACH,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;CACrD;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,wBAAwB,GAAG,wBAAwB,CA0VhG"}

package/dist/cloudflare-sandbox.js

@@ -0,0 +1,428 @@
+import { SandboxError } from "@droveragent/core";
+import { Effect } from "effect";
+/**
+ * Bind `@cloudflare/sandbox`'s `getSandbox` to a Durable Object namespace,
+ * producing the adapter's structural client. This is the *only* place the
+ * real SDK types meet the adapter's, so it is also the only cast:
+ *
+ * ```ts
+ * import { getSandbox } from "@cloudflare/sandbox";
+ *
+ * const sandbox = createCloudflareSandbox({
+ *   name: `conv-${conversationId}`,
+ *   client: cloudflareSdkClient(getSandbox, env.Sandbox),
+ *   networkPolicy: { allow: ["data.example.org"] },
+ * });
+ * ```
+ *
+ * The adapter itself never imports `@cloudflare/sandbox`, so it type-checks
+ * and unit-tests in plain bun — the SDK only runs inside `workerd`.
+ */
+export function cloudflareSdkClient(getSandbox, namespace) {
+    return {
+        getSandbox: (id, options) => getSandbox(namespace, id, options),
+    };
+}
+const DEFAULT_TIMEOUT_MS = 30_000;
+const DEFAULT_MAX_OUTPUT_BYTES = 16 * 1024;
+const DEFAULT_TRANSPORT_MAX_BYTES = 1024 * 1024;
+const DEFAULT_KILL_GRACE_MS = 2_000;
+const DEFAULT_CWD = "/workspace";
+// The container-side timeout backstop trails the adapter's own deadline so
+// the client-side race decides `killed` in the normal case.
+const SDK_TIMEOUT_PAD_MS = 500;
+const SIGKILL = 9;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder("utf-8");
+/**
+ * The SDK's "the container behind this stub was replaced" family.
+ *
+ * Matched on the SDK's error `code` first (`OPERATION_INTERRUPTED` with a
+ * `runtime_replaced` reason, `STALE_PROCESS_HANDLE`) and on its messages as a
+ * fallback, through up to eight `cause` links, because the SDK wraps DO
+ * transport failures before they reach the adapter. Also true for a
+ * `SandboxError` this adapter minted from one, so callers can classify the
+ * error they were handed without keeping the original.
+ */
+export function isRuntimeReplacedError(err) {
+    let current = err;
+    for (let depth = 0; depth < 8 && current != null; depth += 1) {
+        if (typeof current === "object") {
+            const { code, message, cause } = current;
+            if (code === "OPERATION_INTERRUPTED" || code === "STALE_PROCESS_HANDLE")
+                return true;
+            if (typeof message === "string" && RUNTIME_REPLACED_PATTERN.test(message))
+                return true;
+            current = cause;
+            continue;
+        }
+        return false;
+    }
+    return false;
+}
+/** Appended to a wrapped message that was recognised by `code` alone. */
+const RUNTIME_REPLACED_TAG = "(sandbox runtime replaced)";
+const RUNTIME_REPLACED_PATTERN = /interrupted while the platform was updating the sandbox runtime|refers to a previous runtime incarnation|runtime incarnation does not match|\(sandbox runtime replaced\)/i;
+const sandboxError = (op, err, path) => err instanceof SandboxError
+    ? err
+    : new SandboxError({
+        runId: "(sandbox)",
+        op,
+        ...(path !== undefined ? { path } : {}),
+        message: err instanceof Error ? err.message : String(err),
+    });
+const startDeadline = (ms) => {
+    let timer;
+    const promise = new Promise((resolve) => {
+        timer = setTimeout(() => resolve({ kind: "timeout" }), ms);
+    });
+    return { promise, clear: () => clearTimeout(timer) };
+};
+const watchAbort = (signal) => {
+    let cleanup = () => { };
+    const promise = new Promise((resolve) => {
+        if (!signal)
+            return; // never resolves; the deadline branch always does
+        if (signal.aborted) {
+            resolve({ kind: "abort" });
+            return;
+        }
+        const onAbort = () => resolve({ kind: "abort" });
+        signal.addEventListener("abort", onAbort, { once: true });
+        cleanup = () => signal.removeEventListener("abort", onAbort);
+    });
+    return { promise, cleanup };
+};
+/**
+ * Pure POSIX `normalize`. Hand-rolled rather than `node:path/posix` so the
+ * adapter needs no `nodejs_compat` flag in the consuming Worker. Trailing
+ * slashes are dropped (node keeps them); nothing else differs for the
+ * absolute paths a container deals in.
+ */
+export function normalizePosix(p) {
+    const absolute = p.startsWith("/");
+    const parts = [];
+    for (const seg of p.split("/")) {
+        if (seg === "" || seg === ".")
+            continue;
+        if (seg === "..") {
+            const last = parts[parts.length - 1];
+            if (parts.length > 0 && last !== "..")
+                parts.pop();
+            else if (!absolute)
+                parts.push("..");
+            continue;
+        }
+        parts.push(seg);
+    }
+    const joined = parts.join("/");
+    if (absolute)
+        return `/${joined}`;
+    return joined === "" ? "." : joined;
+}
+export function createCloudflareSandbox(opts) {
+    const id = opts.id ?? "cloudflare-sandbox";
+    const defaultTimeout = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const maxOutputBytes = opts.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
+    const transportMaxBytes = opts.transportMaxBytes ?? DEFAULT_TRANSPORT_MAX_BYTES;
+    const killGraceMs = opts.killGraceMs ?? DEFAULT_KILL_GRACE_MS;
+    const baseCwd = normalizePosix(opts.cwd ?? DEFAULT_CWD);
+    const policy = opts.networkPolicy ?? "deny-all";
+    const allowedRoots = opts.allowedRoots?.map((r) => normalizePosix(r));
+    const getSandboxOptions = {
+        normalizeId: true,
+        ...opts.sandboxOptions,
+    };
+    const applyNetworkPolicy = async (sandbox) => {
+        if (policy === "allow-all")
+            return; // the DO's own posture stands
+        const allow = policy === "deny-all" ? [] : [...policy.allow];
+        const deny = policy === "deny-all" ? [] : [...(policy.deny ?? [])];
+        if (!sandbox.setAllowedHosts || !sandbox.setDeniedHosts) {
+            // Fail closed: silently skipping the lists would leave the container
+            // on whatever posture the DO happens to have.
+            throw new SandboxError({
+                runId: "(sandbox)",
+                op: "exec",
+                message: `network policy "${policy === "deny-all" ? "deny-all" : "allowlist"}" requires the sandbox handle to expose ` +
+                    "setAllowedHosts/setDeniedHosts (the @cloudflare/containers egress controls). " +
+                    'Pass networkPolicy: "allow-all" to opt out of adapter-managed egress.',
+            });
+        }
+        await sandbox.setAllowedHosts(allow);
+        await sandbox.setDeniedHosts(deny);
+    };
+    // Lazy, memoised acquisition. `getSandbox` itself is synchronous (it just
+    // builds a DO stub), but the one-time setup around it is not, so the same
+    // memoisation shape as the Vercel adapter applies: concurrent first ops
+    // share one setup; a failure resets so the next op can retry.
+    let sandboxP = null;
+    const acquire = () => {
+        sandboxP ??= (async () => {
+            const sandbox = opts.client.getSandbox(opts.name, getSandboxOptions);
+            if (opts.env && sandbox.setEnvVars)
+                await sandbox.setEnvVars({ ...opts.env });
+            await applyNetworkPolicy(sandbox);
+            if (opts.onAcquire)
+                await opts.onAcquire(sandbox);
+            return sandbox;
+        })().catch((err) => {
+            sandboxP = null;
+            throw err;
+        });
+        return sandboxP;
+    };
+    /**
+     * Wrap an SDK failure, and drop the memoised handle when the SDK reports
+     * that the container behind it was REPLACED.
+     *
+     * When the container restarts under a live stub — the platform killed it
+     * (out of memory is the usual reason), it crashed, or the runtime was
+     * updated — the SDK fails the in-flight op with `OPERATION_INTERRUPTED`
+     * ("interrupted while the platform was updating the sandbox runtime") and
+     * every later op on the SAME stub with the same error, or with
+     * `STALE_PROCESS_HANDLE` ("Process handle refers to a previous runtime
+     * incarnation"). Those are not retryable in place, but a FRESH acquire is:
+     * `getSandbox` addresses the same Durable Object, whose new runtime
+     * incarnation accepts work. Without this reset one container restart wedged
+     * every remaining tool call of the turn.
+     *
+     * The disk did not survive the restart. The error is returned unchanged so
+     * the caller can recognise it (see {@link isRuntimeReplacedError}) and
+     * re-stage whatever it had written.
+     */
+    const failed = (op, err, path) => {
+        if (!isRuntimeReplacedError(err))
+            return sandboxError(op, err, path);
+        sandboxP = null;
+        const wrapped = sandboxError(op, err, path);
+        // `SandboxError` carries only a message, so an SDK error recognised by its
+        // `code` alone would stop being recognisable once wrapped. Tag it.
+        return RUNTIME_REPLACED_PATTERN.test(wrapped.message)
+            ? wrapped
+            : new SandboxError({
+                runId: wrapped.runId,
+                op: wrapped.op,
+                ...(wrapped.path !== undefined ? { path: wrapped.path } : {}),
+                message: `${wrapped.message} ${RUNTIME_REPLACED_TAG}`,
+            });
+    };
+    const capTail = (text) => {
+        const bytes = encoder.encode(text);
+        if (bytes.length <= maxOutputBytes)
+            return text;
+        const tail = decoder
+            .decode(bytes.subarray(bytes.length - maxOutputBytes))
+            // drop the partial code point a byte-boundary slice can leave behind
+            .replace(/^�+/, "");
+        return `[truncated: showing last ${maxOutputBytes} of ${bytes.length} bytes]\n${tail}`;
+    };
+    const interruptedResult = (kind, timeoutMs, stdout, stderr, exitCode = -1) => {
+        const note = kind === "timeout"
+            ? `[command timed out after ${timeoutMs}ms and was killed]`
+            : "[command aborted and was killed]";
+        const capped = capTail(stderr);
+        return {
+            exitCode,
+            stdout: capTail(stdout),
+            stderr: capped === "" ? note : `${capped}\n${note}`,
+            killed: true,
+        };
+    };
+    const execRun = async (cmd, args, runOpts) => {
+        const timeoutMs = runOpts?.timeoutMs ?? defaultTimeout;
+        // Already-aborted: report killed without ever touching the container
+        // (matches just-bash).
+        if (runOpts?.signal?.aborted)
+            return interruptedResult("abort", timeoutMs, "", "");
+        const deadline = startDeadline(timeoutMs);
+        const abort = watchAbort(runOpts?.signal);
+        try {
+            // Acquisition counts against the exec deadline — a cold container can
+            // take minutes to provision and must not hang the tool call. No process
+            // exists yet, so an expiry here is infra failure (SandboxError), not a
+            // killed result.
+            const acquireP = acquire().then((sandbox) => ({ kind: "acquired", sandbox }), (error) => ({ kind: "acquire-error", error }));
+            const acquired = await Promise.race([acquireP, deadline.promise, abort.promise]);
+            if (acquired.kind === "acquire-error")
+                throw acquired.error;
+            if (acquired.kind !== "acquired") {
+                throw new SandboxError({
+                    runId: "(sandbox)",
+                    op: "exec",
+                    message: acquired.kind === "timeout"
+                        ? `sandbox acquisition timed out after ${timeoutMs}ms`
+                        : "sandbox acquisition aborted",
+                });
+            }
+            // `setEnvVars` only lands on a container that has yet to start, so the
+            // adapter-wide env rides on every exec too. Per-call env wins.
+            const execEnv = opts.env !== undefined || runOpts?.env !== undefined
+                ? { ...opts.env, ...runOpts?.env }
+                : undefined;
+            const startP = acquired.sandbox
+                .exec([cmd, ...args], {
+                cwd: runOpts?.cwd ?? baseCwd,
+                // Container-side backstop; the client-side race is the primary.
+                timeout: timeoutMs + SDK_TIMEOUT_PAD_MS,
+                ...(execEnv !== undefined ? { env: execEnv } : {}),
+            })
+                .then((process) => ({ kind: "started", process }), (error) => ({ kind: "start-error", error }));
+            const started = await Promise.race([startP, deadline.promise, abort.promise]);
+            if (started.kind === "start-error")
+                throw started.error;
+            if (started.kind !== "started") {
+                // Reap the orphan if the spawn ever completes.
+                void startP.then((s) => {
+                    if (s.kind === "started")
+                        void s.process.kill(SIGKILL).catch(() => { });
+                });
+                return interruptedResult(started.kind, timeoutMs, "", "");
+            }
+            // One `output()` call, raced — a second call after the kill would be a
+            // second log replay, so the grace window reuses this same promise.
+            const outputP = started.process
+                .output({ encoding: "utf8", maxBytes: transportMaxBytes })
+                .then((out) => ({ kind: "finished", out }), (error) => ({ kind: "output-error", error }));
+            const first = await Promise.race([outputP, deadline.promise, abort.promise]);
+            if (first.kind === "output-error")
+                throw first.error;
+            if (first.kind === "finished") {
+                return {
+                    exitCode: first.out.exitCode,
+                    stdout: capTail(first.out.stdout),
+                    stderr: capTail(first.out.stderr),
+                    // The container's own `timeout` can fire just before ours does.
+                    killed: first.out.timedOut,
+                };
+            }
+            // Deadline or abort: kill, then a bounded grace to harvest the exit
+            // code and any partial output.
+            await started.process.kill(SIGKILL).catch(() => { });
+            const grace = startDeadline(killGraceMs);
+            const graced = await Promise.race([outputP, grace.promise]);
+            grace.clear();
+            if (graced.kind === "finished") {
+                return interruptedResult(first.kind, timeoutMs, graced.out.stdout, graced.out.stderr, graced.out.exitCode);
+            }
+            return interruptedResult(first.kind, timeoutMs, "", "");
+        }
+        finally {
+            deadline.clear();
+            abort.cleanup();
+        }
+    };
+    const run = (cmd, args, runOpts) => Effect.tryPromise({
+        try: () => execRun(cmd, args, runOpts),
+        catch: (err) => failed("exec", err),
+    });
+    const readFile = (p) => Effect.tryPromise({
+        try: async () => {
+            const sandbox = await acquire();
+            // Force utf-8: the default auto-detects and hands back base64 for
+            // anything it thinks is binary, which the adapter contract (a
+            // `string` of file contents) cannot express.
+            const result = await sandbox.readFile(p, { encoding: "utf-8" });
+            if (!result.success)
+                throw new Error(`readFile failed for '${p}'`);
+            return result.content;
+        },
+        catch: (err) => failed("read", err, p),
+    });
+    const writeFile = (p, contents) => Effect.tryPromise({
+        try: async () => {
+            const sandbox = await acquire();
+            const write = async () => {
+                const result = await sandbox.writeFile(p, contents);
+                if (!result.success)
+                    throw new Error(`writeFile failed for '${p}'`);
+            };
+            try {
+                await write();
+            }
+            catch (err) {
+                // `writeFile` must create missing parents (the SandboxAdapter conformance suite
+                // checks it). A backend that refuses to write into a missing directory gets the
+                // parent made with `mkdir -p` and one retry.
+                const parent = normalizePosix(`${p}/..`);
+                if (!sandbox.mkdir || parent === normalizePosix(p))
+                    throw err;
+                const made = await sandbox.mkdir(parent, { recursive: true });
+                if (!made.success)
+                    throw err;
+                await write();
+            }
+        },
+        catch: (err) => failed("write", err, p),
+    });
+    const readdir = (p) => Effect.tryPromise({
+        try: async () => {
+            const sandbox = await acquire();
+            const result = await sandbox.listFiles(p);
+            if (!result.success)
+                throw new Error(`listFiles failed for '${p}'`);
+            return result.files.map((f) => f.name);
+        },
+        catch: (err) => failed("read", err, p),
+    });
+    const mkdir = (p) => Effect.tryPromise({
+        try: async () => {
+            const sandbox = await acquire();
+            if (!sandbox.mkdir)
+                throw new Error("sandbox handle does not implement mkdir");
+            const result = await sandbox.mkdir(p, { recursive: true });
+            if (!result.success)
+                throw new Error(`mkdir failed for '${p}'`);
+        },
+        catch: (err) => failed("write", err, p),
+    });
+    const resolvePath = (p, cwd) => p.startsWith("/") ? normalizePosix(p) : normalizePosix(`${cwd || baseCwd}/${p}`);
+    const assertPathAllowed = (p) => {
+        // No roots configured: the container *is* the boundary, and there is
+        // nothing of the host's to escape to — same structural argument as the
+        // Vercel adapter and just-bash's mount namespace.
+        if (!allowedRoots || allowedRoots.length === 0)
+            return Effect.void;
+        const target = resolvePath(p, baseCwd);
+        const ok = allowedRoots.some((root) => target === root || target.startsWith(root.endsWith("/") ? root : `${root}/`));
+        return ok
+            ? Effect.void
+            : Effect.fail(new SandboxError({
+                runId: "(sandbox)",
+                op: "read",
+                path: target,
+                message: `path '${target}' is outside the sandbox's allowed roots (${allowedRoots.join(", ")})`,
+            }));
+    };
+    const release = (op) => Effect.tryPromise({
+        try: async () => {
+            const pending = sandboxP;
+            if (!pending)
+                return;
+            // Reset first: the next op re-acquires.
+            sandboxP = null;
+            const sandbox = await pending.catch(() => null);
+            if (sandbox)
+                await op(sandbox);
+        },
+        catch: (err) => failed("exec", err),
+    });
+    return {
+        id,
+        // The container is a real isolation boundary, so `bash` composes safely.
+        capabilities: { shell: true },
+        run,
+        readFile,
+        writeFile,
+        readdir,
+        mkdir,
+        resolvePath,
+        assertPathAllowed,
+        stop: () => release(async () => { }),
+        destroy: () => release(async (sandbox) => {
+            if (sandbox.destroy)
+                await sandbox.destroy();
+        }),
+    };
+}
+//# sourceMappingURL=cloudflare-sandbox.js.map

package/dist/cloudflare-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-sandbox.js","sourceRoot":"","sources":["../src/cloudflare-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAiKhC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAA4E,EAC5E,SAAa;IAEb,OAAO;QACL,UAAU,EAAE,CAAC,EAAE,EAAE,OAAO,EAA2B,EAAE,CACnD,UAAU,CAAC,SAAS,EAAE,EAAE,EAAE,OAAO,CAAuC;KAC3E,CAAC;AACJ,CAAC;AA6GD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,2BAA2B,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,MAAM,qBAAqB,GAAG,KAAK,CAAC;AACpC,MAAM,WAAW,GAAG,YAAY,CAAC;AACjC,2EAA2E;AAC3E,4DAA4D;AAC5D,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,OAAO,GAAG,CAAC,CAAC;AAElB,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAEzC;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,IAAI,OAAO,GAAY,GAAG,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,IAAI,OAAO,IAAI,IAAI,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,OAIhC,CAAC;YACF,IAAI,IAAI,KAAK,uBAAuB,IAAI,IAAI,KAAK,sBAAsB;gBAAE,OAAO,IAAI,CAAC;YACrF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;YACvF,OAAO,GAAG,KAAK,CAAC;YAChB,SAAS;QACX,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAE1D,MAAM,wBAAwB,GAC5B,2KAA2K,CAAC;AAE9K,MAAM,YAAY,GAAG,CAAC,EAA6B,EAAE,GAAY,EAAE,IAAa,EAAgB,EAAE,CAChG,GAAG,YAAY,YAAY;IACzB,CAAC,CAAC,GAAG;IACL,CAAC,CAAC,IAAI,YAAY,CAAC;QACf,KAAK,EAAE,WAAW;QAClB,EAAE;QACF,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;KAC1D,CAAC,CAAC;AAOT,MAAM,aAAa,GAAG,CAAC,EAAU,EAAY,EAAE;IAC7C,IAAI,KAAqC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAsB,CAAC,OAAO,EAAE,EAAE;QAC3D,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAS,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7D,CAAC,CAAC;AAOF,MAAM,UAAU,GAAG,CAAC,MAA+B,EAAc,EAAE;IACjE,IAAI,OAAO,GAAG,GAAS,EAAE,GAAE,CAAC,CAAC;IAC7B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAoB,CAAC,OAAO,EAAE,EAAE;QACzD,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,kDAAkD;QACvE,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,GAAS,EAAE,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,OAAO,GAAG,GAAS,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS;QACxC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,IAAI;gBAAE,KAAK,CAAC,GAAG,EAAE,CAAC;iBAC9C,IAAI,CAAC,QAAQ;gBAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,QAAQ;QAAE,OAAO,IAAI,MAAM,EAAE,CAAC;IAClC,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AACtC,CAAC;AAsDD,MAAM,UAAU,uBAAuB,CAAC,IAA8B;IACpE,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,oBAAoB,CAAC;IAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC5D,MAAM,cAAc,GAAG,IAAI,CAAC,cAAc,IAAI,wBAAwB,CAAC;IACvE,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,2BAA2B,CAAC;IAChF,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,qBAAqB,CAAC;IAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC;IACxD,MAAM,MAAM,GAA4B,IAAI,CAAC,aAAa,IAAI,UAAU,CAAC;IACzE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,iBAAiB,GAAgC;QACrD,WAAW,EAAE,IAAI;QACjB,GAAG,IAAI,CAAC,cAAc;KACvB,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,OAAgC,EAAiB,EAAE;QACnF,IAAI,MAAM,KAAK,WAAW;YAAE,OAAO,CAAC,8BAA8B;QAClE,MAAM,KAAK,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;YACxD,qEAAqE;YACrE,8CAA8C;YAC9C,MAAM,IAAI,YAAY,CAAC;gBACrB,KAAK,EAAE,WAAW;gBAClB,EAAE,EAAE,MAAM;gBACV,OAAO,EACL,mBAAmB,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,0CAA0C;oBAC7G,+EAA+E;oBAC/E,uEAAuE;aAC1E,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,0EAA0E;IAC1E,0EAA0E;IAC1E,wEAAwE;IACxE,8DAA8D;IAC9D,IAAI,QAAQ,GAA4C,IAAI,CAAC;IAC7D,MAAM,OAAO,GAAG,GAAqC,EAAE;QACrD,QAAQ,KAAK,CAAC,KAAK,IAAsC,EAAE;YACzD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;YACrE,IAAI,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,UAAU;gBAAE,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC9E,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAClD,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC1B,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,GAAG,CAAC;QACZ,CAAC,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF;;;;;;;;;;;;;;;;;;OAkBG;IACH,MAAM,MAAM,GAAG,CAAC,EAA6B,EAAE,GAAY,EAAE,IAAa,EAAgB,EAAE;QAC1F,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YAAE,OAAO,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrE,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QAC5C,2EAA2E;QAC3E,mEAAmE;QACnE,OAAO,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAI,YAAY,CAAC;gBACf,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,IAAI,oBAAoB,EAAE;aACtD,CAAC,CAAC;IACT,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,IAAI,cAAc;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,IAAI,GAAG,OAAO;aACjB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC;YACtD,qEAAqE;aACpE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACtB,OAAO,4BAA4B,cAAc,OAAO,KAAK,CAAC,MAAM,YAAY,IAAI,EAAE,CAAC;IACzF,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,CACxB,IAAyB,EACzB,SAAiB,EACjB,MAAc,EACd,MAAc,EACd,QAAQ,GAAG,CAAC,CAAC,EACD,EAAE;QACd,MAAM,IAAI,GACR,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,4BAA4B,SAAS,oBAAoB;YAC3D,CAAC,CAAC,kCAAkC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO;YACL,QAAQ;YACR,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;YACvB,MAAM,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE;YACnD,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EACnB,GAAW,EACX,IAA2B,EAC3B,OAAqB,EACA,EAAE;QACvB,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,IAAI,cAAc,CAAC;QACvD,qEAAqE;QACrE,uBAAuB;QACvB,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO;YAAE,OAAO,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,iBAAiB;YACjB,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,IAAI,CAC7B,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,OAAO,EAAE,CAAC,EACrD,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAwB,EAAE,KAAK,EAAE,CAAC,CAChE,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACjF,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe;gBAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;YAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,IAAI,YAAY,CAAC;oBACrB,KAAK,EAAE,WAAW;oBAClB,EAAE,EAAE,MAAM;oBACV,OAAO,EACL,QAAQ,CAAC,IAAI,KAAK,SAAS;wBACzB,CAAC,CAAC,uCAAuC,SAAS,IAAI;wBACtD,CAAC,CAAC,6BAA6B;iBACpC,CAAC,CAAC;YACL,CAAC;YAED,uEAAuE;YACvE,+DAA+D;YAC/D,MAAM,OAAO,GACX,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,EAAE,GAAG,KAAK,SAAS;gBAClD,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE;gBAClC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO;iBAC5B,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;gBACpB,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,OAAO;gBAC5B,gEAAgE;gBAChE,OAAO,EAAE,SAAS,GAAG,kBAAkB;gBACvC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnD,CAAC;iBACD,IAAI,CACH,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,SAAkB,EAAE,OAAO,EAAE,CAAC,EACpD,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAsB,EAAE,KAAK,EAAE,CAAC,CAC9D,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC9E,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC;YACxD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,+CAA+C;gBAC/C,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;oBACrB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;wBAAE,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACzE,CAAC,CAAC,CAAC;gBACH,OAAO,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5D,CAAC;YAED,uEAAuE;YACvE,mEAAmE;YACnE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;iBAC5B,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;iBACzD,IAAI,CACH,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAmB,EAAE,GAAG,EAAE,CAAC,EAC7C,CAAC,KAAc,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,cAAuB,EAAE,KAAK,EAAE,CAAC,CAC/D,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7E,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,MAAM,KAAK,CAAC,KAAK,CAAC;YACrD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC9B,OAAO;oBACL,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ;oBAC5B,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;oBACjC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;oBACjC,gEAAgE;oBAChE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ;iBAC3B,CAAC;YACJ,CAAC;YAED,oEAAoE;YACpE,+BAA+B;YAC/B,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACpD,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAC5D,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC/B,OAAO,iBAAiB,CACtB,KAAK,CAAC,IAAI,EACV,SAAS,EACT,MAAM,CAAC,GAAG,CAAC,MAAM,EACjB,MAAM,CAAC,GAAG,CAAC,MAAM,EACjB,MAAM,CAAC,GAAG,CAAC,QAAQ,CACpB,CAAC;YACJ,CAAC;YACD,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1D,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,CACV,GAAW,EACX,IAA2B,EAC3B,OAAqB,EAC2B,EAAE,CAClD,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,GAAwB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC;QAC3D,KAAK,EAAE,CAAC,GAAG,EAAgB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;KAClD,CAAC,CAAC;IAEL,MAAM,QAAQ,GAAG,CAAC,CAAS,EAA8C,EAAE,CACzE,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,KAAK,IAAqB,EAAE;YAC/B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,kEAAkE;YAClE,8DAA8D;YAC9D,6CAA6C;YAC7C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;YACnE,OAAO,MAAM,CAAC,OAAO,CAAC;QACxB,CAAC;QACD,KAAK,EAAE,CAAC,GAAG,EAAgB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;KACrD,CAAC,CAAC;IAEL,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,QAAgB,EAA4C,EAAE,CAC1F,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,KAAK,IAAmB,EAAE;YAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,MAAM,KAAK,GAAG,KAAK,IAAmB,EAAE;gBACtC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;gBACpD,IAAI,CAAC,MAAM,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACtE,CAAC,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,KAAK,EAAE,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,gFAAgF;gBAChF,gFAAgF;gBAChF,6CAA6C;gBAC7C,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,MAAM,KAAK,cAAc,CAAC,CAAC,CAAC;oBAAE,MAAM,GAAG,CAAC;gBAC9D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9D,IAAI,CAAC,IAAI,CAAC,OAAO;oBAAE,MAAM,GAAG,CAAC;gBAC7B,MAAM,KAAK,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,KAAK,EAAE,CAAC,GAAG,EAAgB,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;KACtD,CAAC,CAAC;IAEL,MAAM,OAAO,GAAG,CAAC,CAAS,EAA6D,EAAE,CACvF,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,KAAK,IAAoC,EAAE;YAC9C,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,GAAG,CAAC,CAAC;YACpE,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,EAAE,CAAC,GAAG,EAAgB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;KACrD,CAAC,CAAC;IAEL,MAAM,KAAK,GAAG,CAAC,CAAS,EAA4C,EAAE,CACpE,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,KAAK,IAAmB,EAAE;YAC7B,MAAM,OAAO,GAAG,MAAM,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,KAAK,EAAE,CAAC,GAAG,EAAgB,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;KACtD,CAAC,CAAC;IAEL,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,GAAW,EAAU,EAAE,CACrD,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,GAAG,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IAEnF,MAAM,iBAAiB,GAAG,CAAC,CAAS,EAA4C,EAAE;QAChF,qEAAqE;QACrE,uEAAuE;QACvE,kDAAkD;QAClD,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QACnE,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,YAAY,CAAC,IAAI,CAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CACvF,CAAC;QACF,OAAO,EAAE;YACP,CAAC,CAAC,MAAM,CAAC,IAAI;YACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,YAAY,CAAC;gBACf,KAAK,EAAE,WAAW;gBAClB,EAAE,EAAE,MAAM;gBACV,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,SAAS,MAAM,6CAA6C,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aAChG,CAAC,CACH,CAAC;IACR,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,CACd,EAAuD,EACb,EAAE,CAC5C,MAAM,CAAC,UAAU,CAAC;QAChB,GAAG,EAAE,KAAK,IAAmB,EAAE;YAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC;YACzB,IAAI,CAAC,OAAO;gBAAE,OAAO;YACrB,wCAAwC;YACxC,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,OAAO;gBAAE,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,EAAE,CAAC,GAAG,EAAgB,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;KAClD,CAAC,CAAC;IAEL,OAAO;QACL,EAAE;QACF,yEAAyE;QACzE,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;QAC7B,GAAG;QACH,QAAQ;QACR,SAAS;QACT,OAAO;QACP,KAAK;QACL,WAAW;QACX,iBAAiB;QACjB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;QACnC,OAAO,EAAE,GAAG,EAAE,CACZ,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;YACxB,IAAI,OAAO,CAAC,OAAO;gBAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/C,CAAC,CAAC;KACL,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+import "./version.js";
+export * from "./cloudflare-sandbox.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,CAAC;AACtB,cAAc,yBAAyB,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+import "./version.js";
+export * from "./cloudflare-sandbox.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,cAAc,CAAC;AACtB,cAAc,yBAAyB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,2 @@
+export declare const version: string;
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,OAAO,EAAE,MAAiB,CAAC"}

package/dist/version.js

@@ -0,0 +1,12 @@
+// This package's version, registered for `droverVersions()` (@droveragent/core).
+// Stamped into dist/version.js at build time by scripts/postbuild-version.ts: the plain
+// package.json version for a release build (DROVER_RELEASE=1), "<version>+local.<sha>" for any
+// other build. "source" when this file runs unbuilt.
+export const version = "0.3.0-next.2";
+const KEY = Symbol.for("droveragent.versions");
+const holder = globalThis;
+const registry = (holder[KEY] ??= new Map());
+const seen = registry.get("@droveragent/sandbox-cloudflare") ?? new Set();
+seen.add(version);
+registry.set("@droveragent/sandbox-cloudflare", seen);
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,wFAAwF;AACxF,+FAA+F;AAC/F,qDAAqD;AACrD,MAAM,CAAC,MAAM,OAAO,GAAW,QAAQ,CAAC;AAGxC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,UAAoE,CAAC;AACpF,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;AAC7C,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,iCAAiC,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;AAClF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClB,QAAQ,CAAC,GAAG,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,44 @@
 {
   "name": "@droveragent/sandbox-cloudflare",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.3.0-next.2",
+  "private": false,
+  "homepage": "https://nc9.github.io/drover/",
+  "bugs": {
+    "url": "https://github.com/nc9/drover/issues"
+  },
+  "license": "MIT",
+  "author": "Nik Cubrilovic",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/nc9/drover.git",
+    "directory": "packages/sandbox-cloudflare"
+  },
+  "files": [
+    "dist",
+    "LICENSE"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "typecheck": "tsgo --noEmit",
+    "test": "bun test",
+    "build": "tsc -p tsconfig.build.json && bun run ../../scripts/postbuild-dts.ts",
+    "prepublishOnly": "tsc -p tsconfig.build.json && bun run ../../scripts/postbuild-dts.ts"
+  },
+  "dependencies": {
+    "@droveragent/core": "0.3.0-next.2",
+    "@droveragent/sandbox": "0.3.0-next.2",
+    "effect": "^3.10.0"
+  }
+}

package/README.md

@@ -1,3 +0,0 @@
-# Temporary Holding Version
-
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.