@geminixiang/mama 0.2.0-beta.6 → 0.2.0-beta.8

package/dist/runtime/session-runtime.js

@@ -1,15 +1,17 @@
-import { hasMaterializedSlackBranchSession, resolveSlackSessionScope, waitForSlackBranchBootstrap, } from "../adapters/slack/branch-manager.js";
+import { resolveSlackSessionScope } from "../adapters/slack/branch-manager.js";
 import { createRunner } from "../agent.js";
 import { createDefaultCommandRegistry } from "../commands/index.js";
-import { isPrivateConversation } from "../commands/utils.js";
 import * as log from "../log.js";
 import { createManagedSessionFile, createManagedSessionFileAtPath, getChannelSessionDir, getThreadSessionFile, resolveGenericSessionScope, } from "../session-store.js";
-import { addLifecycleBreadcrumb, applyRunScope } from "../sentry.js";
-import { formatNothingRunning, formatStopped, formatStopping } from "../ui-copy.js";
+import { formatNothingRunning, formatStopping } from "../ui-copy.js";
+import { ConversationOrchestrator, } from "./conversation-orchestrator.js";
 import * as Sentry from "@sentry/node";
 import { join } from "path";
 const MAX_SESSIONS = 500;
 const IDLE_TIMEOUT_MS = 3_600_000;
+function runtimeCwdForSandbox(type, hostCwd) {
+    return type === "host" ? hostCwd : "/workspace";
+}
 export function createSessionRuntime(options) {
     return new MamaSessionRuntime(options);
 }
@@ -17,10 +19,30 @@ class MamaSessionRuntime {
     constructor(options) {
         this.options = options;
         this.conversationStates = new Map();
+        this.sessionQueues = new Map();
         this.inFlightRuns = new Set();
         this.isShuttingDown = false;
         this.options.runtime = this;
         this.commandRegistry = options.commandRegistry ?? createDefaultCommandRegistry();
+        this.orchestrator = new ConversationOrchestrator({
+            workingDir: options.workingDir,
+            commandRegistry: this.commandRegistry,
+            commandServices: this.options,
+            isShuttingDown: () => this.isShuttingDown,
+            getState: (sessionKey) => this.conversationStates.get(sessionKey),
+            getOrCreateState: (createOptions) => this.getOrCreateState(createOptions),
+            beforeRunTracked: (runPromise) => {
+                this.inFlightRuns.add(runPromise);
+                Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size);
+            },
+            afterRunTracked: (runPromise) => {
+                this.inFlightRuns.delete(runPromise);
+            },
+            onRunFinished: () => {
+                Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size - 1);
+                this.evictIdleSessions();
+            },
+        });
     }
     isRunning(sessionKey) {
         const state = this.conversationStates.get(sessionKey);
@@ -62,164 +84,42 @@ class MamaSessionRuntime {
             state.running = false;
         }
     }
-    async handleNew(sessionKey, conversationId, bot) {
+    async handleNewCommand(sessionKey, conversationId, bot) {
         const state = this.conversationStates.get(sessionKey);
         if (state?.running) {
             state.stopRequested = true;
             state.runner.abort();
         }
         const conversationDir = join(this.options.workingDir, conversationId);
+        const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox.type, conversationDir);
         if (sessionKey.includes(":")) {
-            createManagedSessionFileAtPath(getThreadSessionFile(conversationDir, sessionKey), conversationDir);
+            createManagedSessionFileAtPath(getThreadSessionFile(conversationDir, sessionKey), runtimeCwd);
         }
         else {
-            createManagedSessionFile(getChannelSessionDir(conversationDir), conversationDir);
+            createManagedSessionFile(getChannelSessionDir(conversationDir), runtimeCwd);
         }
         this.conversationStates.delete(sessionKey);
         log.logInfo(`[${conversationId}] Session reset: ${sessionKey}`);
         await bot.postMessage(conversationId, "Conversation reset. Send a new message to start fresh.");
     }
-    async handleEvent(event, bot, adapters, isEvent) {
-        await this.runSession({ event, bot, adapters, isEvent });
-    }
-    async runSession({ event, bot, adapters, isEvent }) {
-        const conversationId = event.conversationId;
-        if (this.isShuttingDown) {
-            log.logInfo(`[${conversationId}] Rejected event during shutdown: ${event.text.substring(0, 50)}`);
-            return;
-        }
-        const sessionKey = event.sessionKey ?? `${conversationId}:${event.thread_ts ?? event.ts}`;
-        const privateConversation = isPrivateConversation(event);
-        const handledCommand = await this.commandRegistry.handle({
-            bot,
-            responseCtx: adapters.responseCtx,
-            platform: adapters.platform.name,
-            platformUserId: event.user,
-            conversationId,
-            vaultConversationId: event.vaultConversationId,
-            sessionKey,
-            commandText: event.text,
-            privateConversation,
-            services: this.options,
-        });
-        if (handledCommand)
-            return;
-        const conversationDir = join(this.options.workingDir, conversationId);
-        const waitedForParent = adapters.platform.name === "slack"
-            ? await waitForSlackBranchBootstrap({
-                parentSessionKey: conversationId,
-                sessionKey,
-                hasThreadSession: () => hasMaterializedSlackBranchSession(conversationDir, sessionKey),
-                isParentRunning: () => this.conversationStates.get(conversationId)?.running === true,
-            })
-            : false;
-        if (waitedForParent) {
-            log.logInfo(`[${conversationId}] Delayed thread bootstrap until parent session sealed: ${sessionKey}`);
-        }
-        const state = await this.getOrCreateState({
-            conversationId,
-            platformName: adapters.platform.name,
-            sessionKey,
-        });
-        state.running = true;
-        state.stopRequested = false;
-        state.startedAt = Date.now();
-        state.lastActivityAt = Date.now();
-        log.logInfo(`[${conversationId}] Starting run: ${event.text.substring(0, 50)}`);
-        const runPromise = (async () => {
-            try {
-                const result = await this.runWithInstrumentation(adapters, { conversationId, sessionKey, isEvent, startedAt: state.startedAt }, async () => {
-                    await adapters.responseCtx.setTyping(true);
-                    await adapters.responseCtx.setWorking(true);
-                    const r = await state.runner.run(adapters.message, adapters.responseCtx, adapters.platform);
-                    await adapters.responseCtx.setWorking(false);
-                    return r;
-                });
-                if (result?.stopReason === "aborted" && state.stopRequested) {
-                    if (state.stopMessageTs) {
-                        await bot.updateMessage(conversationId, state.stopMessageTs, formatStopped(bot));
-                        state.stopMessageTs = undefined;
-                    }
-                    else {
-                        await bot.postMessage(conversationId, formatStopped(bot));
-                    }
-                }
-            }
-            finally {
-                state.running = false;
-                state.lastAccessedAt = Date.now();
-                Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size - 1);
-                this.evictIdleSessions();
-            }
-        })();
-        this.inFlightRuns.add(runPromise);
+    async handleEvent(event, bot, adapters, isSyntheticEvent) {
+        const sessionKey = event.sessionKey ?? `${event.conversationId}:${event.thread_ts ?? event.ts}`;
+        const previous = this.sessionQueues.get(sessionKey) ?? Promise.resolve();
+        const next = previous
+            .catch(() => { })
+            .then(() => this.runSession({ event, bot, adapters, isSyntheticEvent }));
+        this.sessionQueues.set(sessionKey, next);
         try {
-            await runPromise;
+            await next;
         }
         finally {
-            this.inFlightRuns.delete(runPromise);
+            if (this.sessionQueues.get(sessionKey) === next) {
+                this.sessionQueues.delete(sessionKey);
+            }
         }
     }
-    async runWithInstrumentation(adapters, meta, body) {
-        const { conversationId, sessionKey, isEvent, startedAt } = meta;
-        const { message, platform } = adapters;
-        Sentry.metrics.count("agent.run.started", 1, {
-            attributes: { channel: conversationId },
-        });
-        Sentry.metrics.gauge("agent.sessions.active", this.inFlightRuns.size + 1);
-        return Sentry.startSpan({ name: "agent.run", op: "agent", attributes: { conversationId, sessionKey } }, async () => Sentry.withScope(async (scope) => {
-            applyRunScope(scope, {
-                conversationId,
-                sessionKey,
-                messageId: message.id,
-                platform: platform.name,
-                userId: message.userId,
-                userName: message.userName,
-                threadTs: message.threadTs,
-                isEvent,
-            });
-            addLifecycleBreadcrumb("agent.run.started", {
-                channel_id: conversationId,
-                platform: platform.name,
-                has_attachments: (message.attachments?.length ?? 0) > 0,
-            });
-            try {
-                const result = await body();
-                const durationMs = Date.now() - startedAt;
-                const completionAttrs = {
-                    channel: conversationId,
-                    platform: platform.name,
-                    stop_reason: result.stopReason,
-                };
-                Sentry.metrics.distribution("agent.run.duration", durationMs, {
-                    unit: "millisecond",
-                    attributes: completionAttrs,
-                });
-                Sentry.metrics.count("agent.run.completed", 1, { attributes: completionAttrs });
-                addLifecycleBreadcrumb("agent.run.completed", {
-                    channel_id: conversationId,
-                    platform: platform.name,
-                    stop_reason: result.stopReason,
-                    duration_ms: durationMs,
-                });
-                return result;
-            }
-            catch (err) {
-                scope.setContext("agent_run_error", {
-                    conversationId,
-                    sessionKey,
-                    platform: platform.name,
-                    messageId: message.id,
-                    threadTs: message.threadTs,
-                });
-                Sentry.captureException(err);
-                Sentry.metrics.count("agent.run.errors", 1, {
-                    attributes: { channel: conversationId, platform: platform.name },
-                });
-                log.logWarning(`[${conversationId}] Run error`, err instanceof Error ? err.message : String(err));
-                return undefined;
-            }
-        }));
+    async runSession({ event, bot, adapters, isSyntheticEvent }) {
+        await this.orchestrator.runSession({ event, bot, adapters, isSyntheticEvent });
     }
     async createSessionSandbox(options) {
         const state = await this.getOrCreateState(options);
@@ -249,10 +149,11 @@ class MamaSessionRuntime {
             return existing;
         }
         const conversationDir = join(this.options.workingDir, conversationId);
-        const sessionScope = await this.resolveSessionScope(platformName, conversationDir, sessionKey);
+        const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox.type, conversationDir);
+        const sessionScope = await this.resolveSessionScope(platformName, conversationDir, sessionKey, runtimeCwd);
         const state = {
             running: false,
-            runner: await createRunner(this.options.sandbox, sessionKey, conversationId, conversationDir, this.options.workingDir, sessionScope, this.options.vaultManager, this.options.bindingStore, this.options.provisioner),
+            runner: await createRunner(this.options.sandbox, sessionKey, conversationId, conversationDir, this.options.workingDir, sessionScope, this.options.vaultManager, this.options.provisioner),
             stopRequested: false,
             lastAccessedAt: Date.now(),
         };
@@ -272,11 +173,11 @@ class MamaSessionRuntime {
             log.logWarning(`Forcing exit with ${this.inFlightRuns.size} runs still in progress`);
         }
     }
-    async resolveSessionScope(platformName, conversationDir, sessionKey) {
+    async resolveSessionScope(platformName, conversationDir, sessionKey, cwd) {
         if (platformName === "slack") {
-            return resolveSlackSessionScope({ conversationDir, sessionKey });
+            return resolveSlackSessionScope({ conversationDir, sessionKey, cwd });
         }
-        return resolveGenericSessionScope({ conversationDir, sessionKey });
+        return resolveGenericSessionScope({ conversationDir, sessionKey, cwd });
     }
     evictIdleSessions() {
         const now = Date.now();

package/dist/runtime/session-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"session-runtime.js","sourceRoot":"","sources":["../../src/runtime/session-runtime.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,iCAAiC,EACjC,wBAAwB,EACxB,2BAA2B,GAC5B,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAmB,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAErF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAqC5B,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,eAAe,GAAG,SAAS,CAAC;AAElC,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,kBAAkB;IAMtB,YAA6B,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;QAL1C,uBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;QAC1D,iBAAY,GAAG,IAAI,GAAG,EAAiB,CAAC;QAEjD,mBAAc,GAAG,KAAK,CAAC;QAG7B,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,4BAA4B,EAAE,CAAC;IACnF,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC;IAC1B,CAAC;IAED,kBAAkB;QAChB,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1D,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC;oBACZ,UAAU;oBACV,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,WAAW,EAAE,WAAW,EAAE,KAAK,IAAI,WAAW,EAAE,QAAQ;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,cAAsB,EAAE,GAAQ;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,OAAO,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;YAClE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,UAAkB,EAAE,cAAsB,EAAE,GAAQ;QAClE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtE,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,8BAA8B,CAC5B,oBAAoB,CAAC,eAAe,EAAE,UAAU,CAAC,EACjD,eAAe,CAChB,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,wBAAwB,CAAC,oBAAoB,CAAC,eAAe,CAAC,EAAE,eAAe,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE3C,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,oBAAoB,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,wDAAwD,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAe,EACf,GAAQ,EACR,QAAqB,EACrB,OAAiB;QAEjB,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAqB;QACnE,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC5C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,GAAG,CAAC,OAAO,CACT,IAAI,cAAc,qCAAqC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CACrF,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,cAAc,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QAC1F,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;QACzD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC;YACvD,GAAG;YACH,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAoB;YAChD,cAAc,EAAE,KAAK,CAAC,IAAI;YAC1B,cAAc;YACd,mBAAmB,EAAE,KAAK,CAAC,mBAAmB;YAC9C,UAAU;YACV,WAAW,EAAE,KAAK,CAAC,IAAI;YACvB,mBAAmB;YACnB,QAAQ,EAAE,IAAI,CAAC,OAAO;SACvB,CAAC,CAAC;QACH,IAAI,cAAc;YAAE,OAAO;QAE3B,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,eAAe,GACnB,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;YAChC,CAAC,CAAC,MAAM,2BAA2B,CAAC;gBAChC,gBAAgB,EAAE,cAAc;gBAChC,UAAU;gBACV,gBAAgB,EAAE,GAAG,EAAE,CAAC,iCAAiC,CAAC,eAAe,EAAE,UAAU,CAAC;gBACtF,eAAe,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,OAAO,KAAK,IAAI;aACrF,CAAC;YACJ,CAAC,CAAC,KAAK,CAAC;QACZ,IAAI,eAAe,EAAE,CAAC;YACpB,GAAG,CAAC,OAAO,CACT,IAAI,cAAc,2DAA2D,UAAU,EAAE,CAC1F,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC;YACxC,cAAc;YACd,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI;YACpC,UAAU;SACX,CAAC,CAAC;QAEH,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC;QAC5B,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAElC,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,mBAAmB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAEhF,MAAM,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;YAC7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAC9C,QAAQ,EACR,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAU,EAAE,EACpE,KAAK,IAAI,EAAE;oBACT,MAAM,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;oBAC3C,MAAM,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;oBAC5C,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAC9B,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,WAAW,EACpB,QAAQ,CAAC,QAAQ,CAClB,CAAC;oBACF,MAAM,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;oBAC7C,OAAO,CAAC,CAAC;gBACX,CAAC,CACF,CAAC;gBAEF,IAAI,MAAM,EAAE,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;oBAC5D,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;wBACxB,MAAM,GAAG,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;wBACjF,KAAK,CAAC,aAAa,GAAG,SAAS,CAAC;oBAClC,CAAC;yBAAM,CAAC;wBACN,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;oBAC5D,CAAC;gBACH,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBACtB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;gBAC1E,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,UAAU,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,QAAqB,EACrB,IAA0F,EAC1F,IAAkE;QAElE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;QAChE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAEvC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC,EAAE;YAC3C,UAAU,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;SACxC,CAAC,CAAC;QACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAE1E,OAAO,MAAM,CAAC,SAAS,CACrB,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,cAAc,EAAE,UAAU,EAAE,EAAE,EAC9E,KAAK,IAAI,EAAE,CACT,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC/B,aAAa,CAAC,KAAK,EAAE;gBACnB,cAAc;gBACd,UAAU;gBACV,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO;aACR,CAAC,CAAC;YACH,sBAAsB,CAAC,mBAAmB,EAAE;gBAC1C,UAAU,EAAE,cAAc;gBAC1B,QAAQ,EAAE,QAAQ,CAAC,IAAI;gBACvB,eAAe,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;gBAC1C,MAAM,eAAe,GAAG;oBACtB,OAAO,EAAE,cAAc;oBACvB,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,WAAW,EAAE,MAAM,CAAC,UAAU;iBAC/B,CAAC;gBACF,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,oBAAoB,EAAE,UAAU,EAAE;oBAC5D,IAAI,EAAE,aAAa;oBACnB,UAAU,EAAE,eAAe;iBAC5B,CAAC,CAAC;gBACH,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;gBAChF,sBAAsB,CAAC,qBAAqB,EAAE;oBAC5C,UAAU,EAAE,cAAc;oBAC1B,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,WAAW,EAAE,MAAM,CAAC,UAAU;oBAC9B,WAAW,EAAE,UAAU;iBACxB,CAAC,CAAC;gBACH,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,KAAK,CAAC,UAAU,CAAC,iBAAiB,EAAE;oBAClC,cAAc;oBACd,UAAU;oBACV,QAAQ,EAAE,QAAQ,CAAC,IAAI;oBACvB,SAAS,EAAE,OAAO,CAAC,EAAE;oBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;gBACH,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC,EAAE;oBAC1C,UAAU,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;iBACjE,CAAC,CAAC;gBACH,GAAG,CAAC,UAAU,CACZ,IAAI,cAAc,aAAa,EAC/B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;gBACF,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC,CAAC,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAoC;QAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,uBAAuB,CAAC,cAAsB,EAAE,SAAiB,EAAE,MAAc;QAC/E,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5E,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,kDAAkD,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,qBAAqB,CAAC,UAAkB,EAAE,cAAsB;QACtE,OAAO,UAAU,KAAK,cAAc,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC;IACtF,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,EAC7B,cAAc,EACd,YAAY,EACZ,UAAU,GACkB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,EAAE,eAAe,EAAE,UAAU,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAsB;YAC/B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM,YAAY,CACxB,IAAI,CAAC,OAAO,CAAC,OAAO,EACpB,UAAU,EACV,cAAc,EACd,eAAe,EACf,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,YAAY,EACZ,IAAI,CAAC,OAAO,CAAC,YAAY,EACzB,IAAI,CAAC,OAAO,CAAC,YAAY,EACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CACzB;YACD,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM;QAC/B,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YAC1D,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,UAAU,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,YAAoB,EACpB,eAAuB,EACvB,UAAkB;QAElB,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,wBAAwB,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,0BAA0B,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACrE,CAAC;IAEO,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,cAAc,GAAG,eAAe,EAAE,CAAC;gBACnE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YAChD,MAAM,YAAY,GAAmD,EAAE,CAAC;YACxE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACnD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YAED,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,YAAY,CAAC;YAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;CACF","sourcesContent":["import type {\n  Bot,\n  BotAdapters,\n  BotEvent,\n  BotHandler,\n  PlatformName,\n  RunningSession,\n} from \"../adapter.js\";\nimport {\n  hasMaterializedSlackBranchSession,\n  resolveSlackSessionScope,\n  waitForSlackBranchBootstrap,\n} from \"../adapters/slack/branch-manager.js\";\nimport { type AgentRunner, createRunner } from \"../agent.js\";\nimport { CommandRegistry, createDefaultCommandRegistry } from \"../commands/index.js\";\nimport type { CommandServices } from \"../commands/index.js\";\nimport { isPrivateConversation } from \"../commands/utils.js\";\nimport * as log from \"../log.js\";\nimport {\n  createManagedSessionFile,\n  createManagedSessionFileAtPath,\n  getChannelSessionDir,\n  getThreadSessionFile,\n  resolveGenericSessionScope,\n  type ResolvedSessionScope,\n} from \"../session-store.js\";\nimport { addLifecycleBreadcrumb, applyRunScope } from \"../sentry.js\";\nimport { formatNothingRunning, formatStopped, formatStopping } from \"../ui-copy.js\";\nimport * as Sentry from \"@sentry/node\";\nimport { join } from \"path\";\n\ninterface ConversationState {\n  running: boolean;\n  runner: AgentRunner;\n  stopRequested: boolean;\n  stopMessageTs?: string;\n  lastAccessedAt: number;\n  startedAt?: number;\n  lastActivityAt?: number;\n}\n\nexport interface RunSessionOptions {\n  event: BotEvent;\n  bot: Bot;\n  adapters: BotAdapters;\n  isEvent?: boolean;\n}\n\nexport interface CreateSessionSandboxOptions {\n  conversationId: string;\n  platformName: string;\n  sessionKey: string;\n}\n\nexport interface SessionRuntimeOptions extends CommandServices {\n  /** Override the default command registry (e.g., to add /help, /status). */\n  commandRegistry?: CommandRegistry;\n}\n\nexport interface SessionRuntime extends BotHandler {\n  runSession(options: RunSessionOptions): Promise<void>;\n  createSessionSandbox(options: CreateSessionSandboxOptions): Promise<AgentRunner>;\n  switchConversationModel(conversationId: string, provider: string, model: string): boolean;\n  shutdown(timeoutMs?: number): Promise<void>;\n}\n\nconst MAX_SESSIONS = 500;\nconst IDLE_TIMEOUT_MS = 3_600_000;\n\nexport function createSessionRuntime(options: SessionRuntimeOptions): SessionRuntime {\n  return new MamaSessionRuntime(options);\n}\n\nclass MamaSessionRuntime implements SessionRuntime {\n  private readonly conversationStates = new Map<string, ConversationState>();\n  private readonly inFlightRuns = new Set<Promise<void>>();\n  private readonly commandRegistry: CommandRegistry;\n  private isShuttingDown = false;\n\n  constructor(private readonly options: SessionRuntimeOptions) {\n    this.options.runtime = this;\n    this.commandRegistry = options.commandRegistry ?? createDefaultCommandRegistry();\n  }\n\n  isRunning(sessionKey: string): boolean {\n    const state = this.conversationStates.get(sessionKey);\n    return !!state?.running;\n  }\n\n  getRunningSessions(): RunningSession[] {\n    const sessions: RunningSession[] = [];\n    for (const [sessionKey, state] of this.conversationStates) {\n      if (state.running && state.startedAt) {\n        const currentStep = state.runner.getCurrentStep();\n        sessions.push({\n          sessionKey,\n          startedAt: state.startedAt,\n          lastActivityAt: state.lastActivityAt,\n          currentTool: currentStep?.label || currentStep?.toolName,\n        });\n      }\n    }\n    return sessions;\n  }\n\n  async handleStop(sessionKey: string, conversationId: string, bot: Bot): Promise<void> {\n    const state = this.conversationStates.get(sessionKey);\n    if (state?.running) {\n      state.stopRequested = true;\n      state.runner.abort();\n      const ts = await bot.postMessage(conversationId, formatStopping(bot));\n      state.stopMessageTs = ts;\n    } else {\n      await bot.postMessage(conversationId, formatNothingRunning(bot));\n    }\n  }\n\n  forceStop(sessionKey: string): void {\n    const state = this.conversationStates.get(sessionKey);\n    if (state?.running) {\n      log.logInfo(`[Force Stop] Force stopping session: ${sessionKey}`);\n      state.stopRequested = true;\n      state.runner.abort();\n      state.running = false;\n    }\n  }\n\n  async handleNew(sessionKey: string, conversationId: string, bot: Bot): Promise<void> {\n    const state = this.conversationStates.get(sessionKey);\n    if (state?.running) {\n      state.stopRequested = true;\n      state.runner.abort();\n    }\n\n    const conversationDir = join(this.options.workingDir, conversationId);\n    if (sessionKey.includes(\":\")) {\n      createManagedSessionFileAtPath(\n        getThreadSessionFile(conversationDir, sessionKey),\n        conversationDir,\n      );\n    } else {\n      createManagedSessionFile(getChannelSessionDir(conversationDir), conversationDir);\n    }\n\n    this.conversationStates.delete(sessionKey);\n\n    log.logInfo(`[${conversationId}] Session reset: ${sessionKey}`);\n    await bot.postMessage(conversationId, \"Conversation reset. Send a new message to start fresh.\");\n  }\n\n  async handleEvent(\n    event: BotEvent,\n    bot: Bot,\n    adapters: BotAdapters,\n    isEvent?: boolean,\n  ): Promise<void> {\n    await this.runSession({ event, bot, adapters, isEvent });\n  }\n\n  async runSession({ event, bot, adapters, isEvent }: RunSessionOptions): Promise<void> {\n    const conversationId = event.conversationId;\n    if (this.isShuttingDown) {\n      log.logInfo(\n        `[${conversationId}] Rejected event during shutdown: ${event.text.substring(0, 50)}`,\n      );\n      return;\n    }\n\n    const sessionKey = event.sessionKey ?? `${conversationId}:${event.thread_ts ?? event.ts}`;\n    const privateConversation = isPrivateConversation(event);\n    const handledCommand = await this.commandRegistry.handle({\n      bot,\n      responseCtx: adapters.responseCtx,\n      platform: adapters.platform.name as PlatformName,\n      platformUserId: event.user,\n      conversationId,\n      vaultConversationId: event.vaultConversationId,\n      sessionKey,\n      commandText: event.text,\n      privateConversation,\n      services: this.options,\n    });\n    if (handledCommand) return;\n\n    const conversationDir = join(this.options.workingDir, conversationId);\n    const waitedForParent =\n      adapters.platform.name === \"slack\"\n        ? await waitForSlackBranchBootstrap({\n            parentSessionKey: conversationId,\n            sessionKey,\n            hasThreadSession: () => hasMaterializedSlackBranchSession(conversationDir, sessionKey),\n            isParentRunning: () => this.conversationStates.get(conversationId)?.running === true,\n          })\n        : false;\n    if (waitedForParent) {\n      log.logInfo(\n        `[${conversationId}] Delayed thread bootstrap until parent session sealed: ${sessionKey}`,\n      );\n    }\n\n    const state = await this.getOrCreateState({\n      conversationId,\n      platformName: adapters.platform.name,\n      sessionKey,\n    });\n\n    state.running = true;\n    state.stopRequested = false;\n    state.startedAt = Date.now();\n    state.lastActivityAt = Date.now();\n\n    log.logInfo(`[${conversationId}] Starting run: ${event.text.substring(0, 50)}`);\n\n    const runPromise = (async () => {\n      try {\n        const result = await this.runWithInstrumentation(\n          adapters,\n          { conversationId, sessionKey, isEvent, startedAt: state.startedAt! },\n          async () => {\n            await adapters.responseCtx.setTyping(true);\n            await adapters.responseCtx.setWorking(true);\n            const r = await state.runner.run(\n              adapters.message,\n              adapters.responseCtx,\n              adapters.platform,\n            );\n            await adapters.responseCtx.setWorking(false);\n            return r;\n          },\n        );\n\n        if (result?.stopReason === \"aborted\" && state.stopRequested) {\n          if (state.stopMessageTs) {\n            await bot.updateMessage(conversationId, state.stopMessageTs, formatStopped(bot));\n            state.stopMessageTs = undefined;\n          } else {\n            await bot.postMessage(conversationId, formatStopped(bot));\n          }\n        }\n      } finally {\n        state.running = false;\n        state.lastAccessedAt = Date.now();\n        Sentry.metrics.gauge(\"agent.sessions.active\", this.inFlightRuns.size - 1);\n        this.evictIdleSessions();\n      }\n    })();\n\n    this.inFlightRuns.add(runPromise);\n    try {\n      await runPromise;\n    } finally {\n      this.inFlightRuns.delete(runPromise);\n    }\n  }\n\n  private async runWithInstrumentation(\n    adapters: BotAdapters,\n    meta: { conversationId: string; sessionKey: string; isEvent?: boolean; startedAt: number },\n    body: () => Promise<{ stopReason: string; errorMessage?: string }>,\n  ): Promise<{ stopReason: string; errorMessage?: string } | undefined> {\n    const { conversationId, sessionKey, isEvent, startedAt } = meta;\n    const { message, platform } = adapters;\n\n    Sentry.metrics.count(\"agent.run.started\", 1, {\n      attributes: { channel: conversationId },\n    });\n    Sentry.metrics.gauge(\"agent.sessions.active\", this.inFlightRuns.size + 1);\n\n    return Sentry.startSpan(\n      { name: \"agent.run\", op: \"agent\", attributes: { conversationId, sessionKey } },\n      async () =>\n        Sentry.withScope(async (scope) => {\n          applyRunScope(scope, {\n            conversationId,\n            sessionKey,\n            messageId: message.id,\n            platform: platform.name,\n            userId: message.userId,\n            userName: message.userName,\n            threadTs: message.threadTs,\n            isEvent,\n          });\n          addLifecycleBreadcrumb(\"agent.run.started\", {\n            channel_id: conversationId,\n            platform: platform.name,\n            has_attachments: (message.attachments?.length ?? 0) > 0,\n          });\n\n          try {\n            const result = await body();\n            const durationMs = Date.now() - startedAt;\n            const completionAttrs = {\n              channel: conversationId,\n              platform: platform.name,\n              stop_reason: result.stopReason,\n            };\n            Sentry.metrics.distribution(\"agent.run.duration\", durationMs, {\n              unit: \"millisecond\",\n              attributes: completionAttrs,\n            });\n            Sentry.metrics.count(\"agent.run.completed\", 1, { attributes: completionAttrs });\n            addLifecycleBreadcrumb(\"agent.run.completed\", {\n              channel_id: conversationId,\n              platform: platform.name,\n              stop_reason: result.stopReason,\n              duration_ms: durationMs,\n            });\n            return result;\n          } catch (err) {\n            scope.setContext(\"agent_run_error\", {\n              conversationId,\n              sessionKey,\n              platform: platform.name,\n              messageId: message.id,\n              threadTs: message.threadTs,\n            });\n            Sentry.captureException(err);\n            Sentry.metrics.count(\"agent.run.errors\", 1, {\n              attributes: { channel: conversationId, platform: platform.name },\n            });\n            log.logWarning(\n              `[${conversationId}] Run error`,\n              err instanceof Error ? err.message : String(err),\n            );\n            return undefined;\n          }\n        }),\n    );\n  }\n\n  async createSessionSandbox(options: CreateSessionSandboxOptions): Promise<AgentRunner> {\n    const state = await this.getOrCreateState(options);\n    return state.runner;\n  }\n\n  switchConversationModel(conversationId: string, _provider: string, _model: string): boolean {\n    for (const [sessionKey, state] of this.conversationStates) {\n      if (this.isConversationSession(sessionKey, conversationId) && state.running) {\n        return false;\n      }\n    }\n\n    for (const sessionKey of Array.from(this.conversationStates.keys())) {\n      if (this.isConversationSession(sessionKey, conversationId)) {\n        this.conversationStates.delete(sessionKey);\n      }\n    }\n    log.logInfo(`[${conversationId}] Model switched; cleared cached session runners`);\n    return true;\n  }\n\n  private isConversationSession(sessionKey: string, conversationId: string): boolean {\n    return sessionKey === conversationId || sessionKey.startsWith(`${conversationId}:`);\n  }\n\n  private async getOrCreateState({\n    conversationId,\n    platformName,\n    sessionKey,\n  }: CreateSessionSandboxOptions): Promise<ConversationState> {\n    const existing = this.conversationStates.get(sessionKey);\n    if (existing) {\n      existing.lastAccessedAt = Date.now();\n      return existing;\n    }\n\n    const conversationDir = join(this.options.workingDir, conversationId);\n    const sessionScope = await this.resolveSessionScope(platformName, conversationDir, sessionKey);\n    const state: ConversationState = {\n      running: false,\n      runner: await createRunner(\n        this.options.sandbox,\n        sessionKey,\n        conversationId,\n        conversationDir,\n        this.options.workingDir,\n        sessionScope,\n        this.options.vaultManager,\n        this.options.bindingStore,\n        this.options.provisioner,\n      ),\n      stopRequested: false,\n      lastAccessedAt: Date.now(),\n    };\n    this.conversationStates.set(sessionKey, state);\n    return state;\n  }\n\n  async shutdown(timeoutMs = 30_000): Promise<void> {\n    if (this.isShuttingDown) return;\n    this.isShuttingDown = true;\n    log.logInfo(\"Shutting down gracefully...\");\n\n    const timeout = Date.now() + timeoutMs;\n    while (this.inFlightRuns.size > 0 && Date.now() < timeout) {\n      await new Promise((resolve) => setTimeout(resolve, 500));\n    }\n\n    if (this.inFlightRuns.size > 0) {\n      log.logWarning(`Forcing exit with ${this.inFlightRuns.size} runs still in progress`);\n    }\n  }\n\n  private async resolveSessionScope(\n    platformName: string,\n    conversationDir: string,\n    sessionKey: string,\n  ): Promise<ResolvedSessionScope> {\n    if (platformName === \"slack\") {\n      return resolveSlackSessionScope({ conversationDir, sessionKey });\n    }\n    return resolveGenericSessionScope({ conversationDir, sessionKey });\n  }\n\n  private evictIdleSessions(): void {\n    const now = Date.now();\n\n    for (const [key, state] of this.conversationStates) {\n      if (!state.running && now - state.lastAccessedAt > IDLE_TIMEOUT_MS) {\n        this.conversationStates.delete(key);\n      }\n    }\n\n    if (this.conversationStates.size > MAX_SESSIONS) {\n      const idleSessions: Array<{ key: string; lastAccessedAt: number }> = [];\n      for (const [key, state] of this.conversationStates) {\n        if (!state.running) {\n          idleSessions.push({ key, lastAccessedAt: state.lastAccessedAt });\n        }\n      }\n\n      idleSessions.sort((a, b) => a.lastAccessedAt - b.lastAccessedAt);\n\n      const toEvict = this.conversationStates.size - MAX_SESSIONS;\n      for (let i = 0; i < toEvict && i < idleSessions.length; i++) {\n        this.conversationStates.delete(idleSessions[i].key);\n      }\n    }\n  }\n}\n"]}
+{"version":3,"file":"session-runtime.js","sourceRoot":"","sources":["../../src/runtime/session-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAC/E,OAAO,EAAoB,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAmB,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAErF,OAAO,KAAK,GAAG,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,wBAAwB,EACxB,8BAA8B,EAC9B,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,GAE3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EACL,wBAAwB,GAEzB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AA6B5B,MAAM,YAAY,GAAG,GAAG,CAAC;AACzB,MAAM,eAAe,GAAG,SAAS,CAAC;AAElC,SAAS,oBAAoB,CAC3B,IAA8C,EAC9C,OAAe;IAEf,OAAO,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,kBAAkB;IAQtB,YAA6B,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;QAP1C,uBAAkB,GAAG,IAAI,GAAG,EAA6B,CAAC;QAC1D,kBAAa,GAAG,IAAI,GAAG,EAAyB,CAAC;QACjD,iBAAY,GAAG,IAAI,GAAG,EAAiB,CAAC;QAGjD,mBAAc,GAAG,KAAK,CAAC;QAG7B,IAAI,CAAC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;QAC5B,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI,4BAA4B,EAAE,CAAC;QACjF,IAAI,CAAC,YAAY,GAAG,IAAI,wBAAwB,CAAC;YAC/C,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,eAAe,EAAE,IAAI,CAAC,OAAO;YAC7B,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc;YACzC,QAAQ,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;YACjE,gBAAgB,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC;YACzE,gBAAgB,EAAE,CAAC,UAAU,EAAE,EAAE;gBAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACxE,CAAC;YACD,eAAe,EAAE,CAAC,UAAU,EAAE,EAAE;gBAC9B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACvC,CAAC;YACD,aAAa,EAAE,GAAG,EAAE;gBAClB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;gBAC1E,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,CAAC;SACF,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC;IAC1B,CAAC;IAED,kBAAkB;QAChB,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1D,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrC,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAClD,QAAQ,CAAC,IAAI,CAAC;oBACZ,UAAU;oBACV,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,cAAc,EAAE,KAAK,CAAC,cAAc;oBACpC,WAAW,EAAE,WAAW,EAAE,KAAK,IAAI,WAAW,EAAE,QAAQ;iBACzD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB,EAAE,cAAsB,EAAE,GAAQ;QACnE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACtE,KAAK,CAAC,aAAa,GAAG,EAAE,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,SAAS,CAAC,UAAkB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;YACnB,GAAG,CAAC,OAAO,CAAC,wCAAwC,UAAU,EAAE,CAAC,CAAC;YAClE,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,UAAkB,EAAE,cAAsB,EAAE,GAAQ;QACzE,MAAM,KAAK,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,aAAa,GAAG,IAAI,CAAC;YAC3B,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACpF,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,8BAA8B,CAAC,oBAAoB,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC;QAChG,CAAC;aAAM,CAAC;YACN,wBAAwB,CAAC,oBAAoB,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,CAAC;QAC9E,CAAC;QAED,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAE3C,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,oBAAoB,UAAU,EAAE,CAAC,CAAC;QAChE,MAAM,GAAG,CAAC,WAAW,CAAC,cAAc,EAAE,wDAAwD,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,WAAW,CACf,KAAe,EACf,GAAQ,EACR,QAAqB,EACrB,gBAA0B;QAE1B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;QAChG,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACzE,MAAM,IAAI,GAAG,QAAQ;aAClB,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC;aACf,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC;QACb,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;gBAChD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAqB;QAC5E,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,OAAoC;QAC7D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnD,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,uBAAuB,CAAC,cAAsB,EAAE,SAAiB,EAAE,MAAc;QAC/E,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAC5E,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QAED,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC3D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,kDAAkD,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,qBAAqB,CAAC,UAAkB,EAAE,cAAsB;QACtE,OAAO,UAAU,KAAK,cAAc,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,CAAC,CAAC;IACtF,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,EAC7B,cAAc,EACd,YAAY,EACZ,UAAU,GACkB;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACrC,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACpF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACjD,YAAY,EACZ,eAAe,EACf,UAAU,EACV,UAAU,CACX,CAAC;QACF,MAAM,KAAK,GAAsB;YAC/B,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,MAAM,YAAY,CACxB,IAAI,CAAC,OAAO,CAAC,OAAO,EACpB,UAAU,EACV,cAAc,EACd,eAAe,EACf,IAAI,CAAC,OAAO,CAAC,UAAU,EACvB,YAAY,EACZ,IAAI,CAAC,OAAO,CAAC,YAAY,EACzB,IAAI,CAAC,OAAO,CAAC,WAAW,CACzB;YACD,aAAa,EAAE,KAAK;YACpB,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE;SAC3B,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM;QAC/B,IAAI,IAAI,CAAC,cAAc;YAAE,OAAO;QAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACvC,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;YAC1D,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,UAAU,CAAC,qBAAqB,IAAI,CAAC,YAAY,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,YAAoB,EACpB,eAAuB,EACvB,UAAkB,EAClB,GAAW;QAEX,IAAI,YAAY,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,wBAAwB,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,0BAA0B,CAAC,EAAE,eAAe,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,CAAC;IAEO,iBAAiB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEvB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACnD,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,GAAG,GAAG,KAAK,CAAC,cAAc,GAAG,eAAe,EAAE,CAAC;gBACnE,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YAChD,MAAM,YAAY,GAAmD,EAAE,CAAC;YACxE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACnD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;oBACnB,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC;YAED,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;YAEjE,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,IAAI,GAAG,YAAY,CAAC;YAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC5D,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;IACH,CAAC;CACF","sourcesContent":["import type { Bot, BotAdapters, BotEvent, BotHandler, RunningSession } from \"../adapter.js\";\nimport { resolveSlackSessionScope } from \"../adapters/slack/branch-manager.js\";\nimport { type AgentRunner, createRunner } from \"../agent.js\";\nimport { CommandRegistry, createDefaultCommandRegistry } from \"../commands/index.js\";\nimport type { CommandServices } from \"../commands/index.js\";\nimport * as log from \"../log.js\";\nimport {\n  createManagedSessionFile,\n  createManagedSessionFileAtPath,\n  getChannelSessionDir,\n  getThreadSessionFile,\n  resolveGenericSessionScope,\n  type ResolvedSessionScope,\n} from \"../session-store.js\";\nimport { formatNothingRunning, formatStopping } from \"../ui-copy.js\";\nimport {\n  ConversationOrchestrator,\n  type ConversationRuntimeState,\n} from \"./conversation-orchestrator.js\";\nimport * as Sentry from \"@sentry/node\";\nimport { join } from \"path\";\n\ntype ConversationState = ConversationRuntimeState;\n\nexport interface RunSessionOptions {\n  event: BotEvent;\n  bot: Bot;\n  adapters: BotAdapters;\n  isSyntheticEvent?: boolean;\n}\n\nexport interface CreateSessionSandboxOptions {\n  conversationId: string;\n  platformName: string;\n  sessionKey: string;\n}\n\nexport interface SessionRuntimeOptions extends CommandServices {\n  /** Override the default command registry (e.g., to add /help, /status). */\n  commandRegistry?: CommandRegistry;\n}\n\nexport interface SessionRuntime extends BotHandler {\n  runSession(options: RunSessionOptions): Promise<void>;\n  createSessionSandbox(options: CreateSessionSandboxOptions): Promise<AgentRunner>;\n  switchConversationModel(conversationId: string, provider: string, model: string): boolean;\n  shutdown(timeoutMs?: number): Promise<void>;\n}\n\nconst MAX_SESSIONS = 500;\nconst IDLE_TIMEOUT_MS = 3_600_000;\n\nfunction runtimeCwdForSandbox(\n  type: SessionRuntimeOptions[\"sandbox\"][\"type\"],\n  hostCwd: string,\n): string {\n  return type === \"host\" ? hostCwd : \"/workspace\";\n}\n\nexport function createSessionRuntime(options: SessionRuntimeOptions): SessionRuntime {\n  return new MamaSessionRuntime(options);\n}\n\nclass MamaSessionRuntime implements SessionRuntime {\n  private readonly conversationStates = new Map<string, ConversationState>();\n  private readonly sessionQueues = new Map<string, Promise<void>>();\n  private readonly inFlightRuns = new Set<Promise<void>>();\n  private readonly commandRegistry: CommandRegistry;\n  private readonly orchestrator: ConversationOrchestrator;\n  private isShuttingDown = false;\n\n  constructor(private readonly options: SessionRuntimeOptions) {\n    this.options.runtime = this;\n    this.commandRegistry = options.commandRegistry ?? createDefaultCommandRegistry();\n    this.orchestrator = new ConversationOrchestrator({\n      workingDir: options.workingDir,\n      commandRegistry: this.commandRegistry,\n      commandServices: this.options,\n      isShuttingDown: () => this.isShuttingDown,\n      getState: (sessionKey) => this.conversationStates.get(sessionKey),\n      getOrCreateState: (createOptions) => this.getOrCreateState(createOptions),\n      beforeRunTracked: (runPromise) => {\n        this.inFlightRuns.add(runPromise);\n        Sentry.metrics.gauge(\"agent.sessions.active\", this.inFlightRuns.size);\n      },\n      afterRunTracked: (runPromise) => {\n        this.inFlightRuns.delete(runPromise);\n      },\n      onRunFinished: () => {\n        Sentry.metrics.gauge(\"agent.sessions.active\", this.inFlightRuns.size - 1);\n        this.evictIdleSessions();\n      },\n    });\n  }\n\n  isRunning(sessionKey: string): boolean {\n    const state = this.conversationStates.get(sessionKey);\n    return !!state?.running;\n  }\n\n  getRunningSessions(): RunningSession[] {\n    const sessions: RunningSession[] = [];\n    for (const [sessionKey, state] of this.conversationStates) {\n      if (state.running && state.startedAt) {\n        const currentStep = state.runner.getCurrentStep();\n        sessions.push({\n          sessionKey,\n          startedAt: state.startedAt,\n          lastActivityAt: state.lastActivityAt,\n          currentTool: currentStep?.label || currentStep?.toolName,\n        });\n      }\n    }\n    return sessions;\n  }\n\n  async handleStop(sessionKey: string, conversationId: string, bot: Bot): Promise<void> {\n    const state = this.conversationStates.get(sessionKey);\n    if (state?.running) {\n      state.stopRequested = true;\n      state.runner.abort();\n      const ts = await bot.postMessage(conversationId, formatStopping(bot));\n      state.stopMessageTs = ts;\n    } else {\n      await bot.postMessage(conversationId, formatNothingRunning(bot));\n    }\n  }\n\n  forceStop(sessionKey: string): void {\n    const state = this.conversationStates.get(sessionKey);\n    if (state?.running) {\n      log.logInfo(`[Force Stop] Force stopping session: ${sessionKey}`);\n      state.stopRequested = true;\n      state.runner.abort();\n      state.running = false;\n    }\n  }\n\n  async handleNewCommand(sessionKey: string, conversationId: string, bot: Bot): Promise<void> {\n    const state = this.conversationStates.get(sessionKey);\n    if (state?.running) {\n      state.stopRequested = true;\n      state.runner.abort();\n    }\n\n    const conversationDir = join(this.options.workingDir, conversationId);\n    const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox.type, conversationDir);\n    if (sessionKey.includes(\":\")) {\n      createManagedSessionFileAtPath(getThreadSessionFile(conversationDir, sessionKey), runtimeCwd);\n    } else {\n      createManagedSessionFile(getChannelSessionDir(conversationDir), runtimeCwd);\n    }\n\n    this.conversationStates.delete(sessionKey);\n\n    log.logInfo(`[${conversationId}] Session reset: ${sessionKey}`);\n    await bot.postMessage(conversationId, \"Conversation reset. Send a new message to start fresh.\");\n  }\n\n  async handleEvent(\n    event: BotEvent,\n    bot: Bot,\n    adapters: BotAdapters,\n    isSyntheticEvent?: boolean,\n  ): Promise<void> {\n    const sessionKey = event.sessionKey ?? `${event.conversationId}:${event.thread_ts ?? event.ts}`;\n    const previous = this.sessionQueues.get(sessionKey) ?? Promise.resolve();\n    const next = previous\n      .catch(() => {})\n      .then(() => this.runSession({ event, bot, adapters, isSyntheticEvent }));\n    this.sessionQueues.set(sessionKey, next);\n    try {\n      await next;\n    } finally {\n      if (this.sessionQueues.get(sessionKey) === next) {\n        this.sessionQueues.delete(sessionKey);\n      }\n    }\n  }\n\n  async runSession({ event, bot, adapters, isSyntheticEvent }: RunSessionOptions): Promise<void> {\n    await this.orchestrator.runSession({ event, bot, adapters, isSyntheticEvent });\n  }\n\n  async createSessionSandbox(options: CreateSessionSandboxOptions): Promise<AgentRunner> {\n    const state = await this.getOrCreateState(options);\n    return state.runner;\n  }\n\n  switchConversationModel(conversationId: string, _provider: string, _model: string): boolean {\n    for (const [sessionKey, state] of this.conversationStates) {\n      if (this.isConversationSession(sessionKey, conversationId) && state.running) {\n        return false;\n      }\n    }\n\n    for (const sessionKey of Array.from(this.conversationStates.keys())) {\n      if (this.isConversationSession(sessionKey, conversationId)) {\n        this.conversationStates.delete(sessionKey);\n      }\n    }\n    log.logInfo(`[${conversationId}] Model switched; cleared cached session runners`);\n    return true;\n  }\n\n  private isConversationSession(sessionKey: string, conversationId: string): boolean {\n    return sessionKey === conversationId || sessionKey.startsWith(`${conversationId}:`);\n  }\n\n  private async getOrCreateState({\n    conversationId,\n    platformName,\n    sessionKey,\n  }: CreateSessionSandboxOptions): Promise<ConversationState> {\n    const existing = this.conversationStates.get(sessionKey);\n    if (existing) {\n      existing.lastAccessedAt = Date.now();\n      return existing;\n    }\n\n    const conversationDir = join(this.options.workingDir, conversationId);\n    const runtimeCwd = runtimeCwdForSandbox(this.options.sandbox.type, conversationDir);\n    const sessionScope = await this.resolveSessionScope(\n      platformName,\n      conversationDir,\n      sessionKey,\n      runtimeCwd,\n    );\n    const state: ConversationState = {\n      running: false,\n      runner: await createRunner(\n        this.options.sandbox,\n        sessionKey,\n        conversationId,\n        conversationDir,\n        this.options.workingDir,\n        sessionScope,\n        this.options.vaultManager,\n        this.options.provisioner,\n      ),\n      stopRequested: false,\n      lastAccessedAt: Date.now(),\n    };\n    this.conversationStates.set(sessionKey, state);\n    return state;\n  }\n\n  async shutdown(timeoutMs = 30_000): Promise<void> {\n    if (this.isShuttingDown) return;\n    this.isShuttingDown = true;\n    log.logInfo(\"Shutting down gracefully...\");\n\n    const timeout = Date.now() + timeoutMs;\n    while (this.inFlightRuns.size > 0 && Date.now() < timeout) {\n      await new Promise((resolve) => setTimeout(resolve, 500));\n    }\n\n    if (this.inFlightRuns.size > 0) {\n      log.logWarning(`Forcing exit with ${this.inFlightRuns.size} runs still in progress`);\n    }\n  }\n\n  private async resolveSessionScope(\n    platformName: string,\n    conversationDir: string,\n    sessionKey: string,\n    cwd: string,\n  ): Promise<ResolvedSessionScope> {\n    if (platformName === \"slack\") {\n      return resolveSlackSessionScope({ conversationDir, sessionKey, cwd });\n    }\n    return resolveGenericSessionScope({ conversationDir, sessionKey, cwd });\n  }\n\n  private evictIdleSessions(): void {\n    const now = Date.now();\n\n    for (const [key, state] of this.conversationStates) {\n      if (!state.running && now - state.lastAccessedAt > IDLE_TIMEOUT_MS) {\n        this.conversationStates.delete(key);\n      }\n    }\n\n    if (this.conversationStates.size > MAX_SESSIONS) {\n      const idleSessions: Array<{ key: string; lastAccessedAt: number }> = [];\n      for (const [key, state] of this.conversationStates) {\n        if (!state.running) {\n          idleSessions.push({ key, lastAccessedAt: state.lastAccessedAt });\n        }\n      }\n\n      idleSessions.sort((a, b) => a.lastAccessedAt - b.lastAccessedAt);\n\n      const toEvict = this.conversationStates.size - MAX_SESSIONS;\n      for (let i = 0; i < toEvict && i < idleSessions.length; i++) {\n        this.conversationStates.delete(idleSessions[i].key);\n      }\n    }\n  }\n}\n"]}

package/dist/sandbox/cloudflare.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/sandbox/cloudflare.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,cAAc,EACf,MAAM,YAAY,CAAC;AAoBpB,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAa5F;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB/F;AAED,qBAAa,yBAA0B,YAAW,QAAQ;IAItD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;IAJvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YACmB,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA,EAC7C,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAGnC;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAiEtE;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1C;IAED,gBAAgB,IAAI,uBAAuB,CAE1C;CACF;AAED,eAAO,MAAM,wBAAwB,EAAE,cAAc,CAAC,uBAAuB,CAM5E,CAAC","sourcesContent":["import type {\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\n\nconst DEFAULT_CLOUDFLARE_CWD = \"/workspace\";\n\ninterface CloudflareExecPayload {\n  sandboxId: string;\n  command: string;\n  timeoutSeconds?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\ninterface CloudflareExecResponse {\n  stdout?: string;\n  stderr?: string;\n  code?: number;\n  error?: string;\n}\n\nexport function parseCloudflareSandboxArg(value: string): CloudflareSandboxConfig | undefined {\n  if (!value.startsWith(\"cloudflare:\")) {\n    return undefined;\n  }\n\n  const sandboxId = value.slice(\"cloudflare:\".length).trim();\n  if (!sandboxId) {\n    throw new SandboxError(\n      \"Error: cloudflare sandbox requires sandbox id (e.g., cloudflare:slack-u123)\",\n    );\n  }\n\n  return { type: \"cloudflare\", sandboxId };\n}\n\nexport async function validateCloudflareSandbox(_config: CloudflareSandboxConfig): Promise<void> {\n  const url = resolveCloudflareSandboxUrl();\n  try {\n    const response = await fetch(new URL(\"/health\", url), {\n      headers: buildCloudflareHeaders(),\n    });\n    if (!response.ok) {\n      throw new SandboxError(\n        `Error: Cloudflare sandbox bridge health check failed with HTTP ${response.status}`,\n      );\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: Cloudflare sandbox bridge is not reachable: ${detail}`);\n  }\n\n  console.log(\n    `  Cloudflare sandbox bridge enabled. Base URL: ${url.toString().replace(/\\/$/, \"\")}`,\n  );\n}\n\nexport class CloudflareSandboxExecutor implements Executor {\n  private readonly cwd: string;\n\n  constructor(\n    private readonly sandboxId: string,\n    private readonly env?: Record<string, string>,\n    _ensureReady?: () => Promise<void>,\n  ) {\n    this.cwd = process.env.MAMA_CLOUDFLARE_SANDBOX_CWD?.trim() || DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const controller = new AbortController();\n    const timeoutHandle =\n      options?.timeout && options.timeout > 0\n        ? setTimeout(() => controller.abort(), options.timeout * 1000)\n        : undefined;\n\n    const onAbort = () => controller.abort();\n    if (options?.signal) {\n      if (options.signal.aborted) {\n        controller.abort();\n      } else {\n        options.signal.addEventListener(\"abort\", onAbort, { once: true });\n      }\n    }\n\n    try {\n      const payload: CloudflareExecPayload = {\n        sandboxId: this.sandboxId,\n        command,\n        cwd: this.cwd,\n      };\n      if (options?.timeout) payload.timeoutSeconds = options.timeout;\n      if (this.env && Object.keys(this.env).length > 0) payload.env = this.env;\n\n      const response = await fetch(new URL(\"/exec\", resolveCloudflareSandboxUrl()), {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          ...buildCloudflareHeaders(),\n        },\n        body: JSON.stringify(payload),\n        signal: controller.signal,\n      });\n\n      const raw = (await response.text()).trim();\n      const parsed = raw ? (JSON.parse(raw) as CloudflareExecResponse) : {};\n\n      if (!response.ok) {\n        throw new Error(\n          parsed.error ||\n            parsed.stderr ||\n            `Cloudflare sandbox bridge returned HTTP ${response.status}`,\n        );\n      }\n\n      return {\n        stdout: parsed.stdout || \"\",\n        stderr: parsed.stderr || \"\",\n        code: parsed.code ?? 0,\n      };\n    } catch (error) {\n      if (controller.signal.aborted) {\n        if (options?.signal?.aborted) {\n          throw new Error(\"Command aborted\");\n        }\n        throw new Error(`Command timed out after ${options?.timeout} seconds`);\n      }\n      throw error;\n    } finally {\n      if (timeoutHandle) clearTimeout(timeoutHandle);\n      if (options?.signal) {\n        options.signal.removeEventListener(\"abort\", onAbort);\n      }\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  getSandboxConfig(): CloudflareSandboxConfig {\n    return { type: \"cloudflare\", sandboxId: this.sandboxId };\n  }\n}\n\nexport const cloudflareSandboxAdapter: SandboxAdapter<CloudflareSandboxConfig> = {\n  type: \"cloudflare\",\n  parse: parseCloudflareSandboxArg,\n  validate: validateCloudflareSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new CloudflareSandboxExecutor(config.sandboxId, env, ensureReady),\n};\n\nfunction resolveCloudflareSandboxUrl(): URL {\n  const raw = process.env.MAMA_CLOUDFLARE_SANDBOX_URL?.trim();\n  if (!raw) {\n    throw new SandboxError(\n      \"Error: MAMA_CLOUDFLARE_SANDBOX_URL is required for cloudflare sandbox mode\",\n    );\n  }\n\n  try {\n    return new URL(raw);\n  } catch (error) {\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: invalid MAMA_CLOUDFLARE_SANDBOX_URL: ${detail}`);\n  }\n}\n\nfunction buildCloudflareHeaders(): Record<string, string> {\n  const token = process.env.MAMA_CLOUDFLARE_SANDBOX_TOKEN?.trim();\n  return token ? { authorization: `Bearer ${token}` } : {};\n}\n"]}
+{"version":3,"file":"cloudflare.d.ts","sourceRoot":"","sources":["../../src/sandbox/cloudflare.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,cAAc,EACf,MAAM,YAAY,CAAC;AAoBpB,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS,CAa5F;AAED,wBAAsB,yBAAyB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsB/F;AAED,qBAAa,yBAA0B,YAAW,QAAQ;IAItD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;IAJvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAE7B,YACmB,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA,EAC7C,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAGnC;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAiEtE;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1C;IAED,gBAAgB,IAAI,uBAAuB,CAE1C;CACF;AAED,eAAO,MAAM,wBAAwB,EAAE,cAAc,CAAC,uBAAuB,CAM5E,CAAC","sourcesContent":["import type {\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\n\nconst DEFAULT_CLOUDFLARE_CWD = \"/workspace\";\n\ninterface CloudflareExecPayload {\n  sandboxId: string;\n  command: string;\n  timeoutSeconds?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\ninterface CloudflareExecResponse {\n  stdout?: string;\n  stderr?: string;\n  code?: number;\n  error?: string;\n}\n\nexport function parseCloudflareSandboxArg(value: string): CloudflareSandboxConfig | undefined {\n  if (!value.startsWith(\"cloudflare:\")) {\n    return undefined;\n  }\n\n  const sandboxId = value.slice(\"cloudflare:\".length).trim();\n  if (!sandboxId) {\n    throw new SandboxError(\n      \"Error: cloudflare sandbox requires sandbox id (e.g., cloudflare:slack-u123)\",\n    );\n  }\n\n  return { type: \"cloudflare\", sandboxId };\n}\n\nexport async function validateCloudflareSandbox(_config: CloudflareSandboxConfig): Promise<void> {\n  const url = resolveCloudflareSandboxUrl();\n  try {\n    const response = await fetch(new URL(\"/health\", url), {\n      headers: buildCloudflareHeaders(),\n    });\n    if (!response.ok) {\n      throw new SandboxError(\n        `Error: Cloudflare sandbox bridge health check failed with HTTP ${response.status}`,\n      );\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: Cloudflare sandbox bridge is not reachable: ${detail}`);\n  }\n\n  console.log(\n    `  Cloudflare sandbox bridge enabled. Base URL: ${url.toString().replace(/\\/$/, \"\")}`,\n  );\n}\n\nexport class CloudflareSandboxExecutor implements Executor {\n  private readonly cwd: string;\n\n  constructor(\n    private readonly sandboxId: string,\n    private readonly env?: Record<string, string>,\n    _ensureReady?: () => Promise<void>,\n  ) {\n    this.cwd = process.env.MAMA_CLOUDFLARE_SANDBOX_CWD?.trim() || DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const controller = new AbortController();\n    const timeoutHandle =\n      options?.timeout && options.timeout > 0\n        ? setTimeout(() => controller.abort(), options.timeout * 1000)\n        : undefined;\n\n    const onAbort = () => controller.abort();\n    if (options?.signal) {\n      if (options.signal.aborted) {\n        controller.abort();\n      } else {\n        options.signal.addEventListener(\"abort\", onAbort, { once: true });\n      }\n    }\n\n    try {\n      const payload: CloudflareExecPayload = {\n        sandboxId: this.sandboxId,\n        command,\n        cwd: this.cwd,\n      };\n      if (options?.timeout) payload.timeoutSeconds = options.timeout;\n      if (this.env && Object.keys(this.env).length > 0) payload.env = this.env;\n\n      const response = await fetch(new URL(\"/exec\", resolveCloudflareSandboxUrl()), {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          ...buildCloudflareHeaders(),\n        },\n        body: JSON.stringify(payload),\n        signal: controller.signal,\n      });\n\n      const raw = (await response.text()).trim();\n      const parsed = raw ? (JSON.parse(raw) as CloudflareExecResponse) : {};\n\n      if (!response.ok) {\n        throw new Error(\n          parsed.error ||\n            parsed.stderr ||\n            `Cloudflare sandbox bridge returned HTTP ${response.status}`,\n        );\n      }\n\n      return {\n        stdout: parsed.stdout || \"\",\n        stderr: parsed.stderr || \"\",\n        code: parsed.code ?? 0,\n      };\n    } catch (error) {\n      if (controller.signal.aborted) {\n        if (options?.signal?.aborted) {\n          throw new Error(\"Command aborted\", { cause: error });\n        }\n        throw new Error(`Command timed out after ${options?.timeout} seconds`, { cause: error });\n      }\n      throw error;\n    } finally {\n      if (timeoutHandle) clearTimeout(timeoutHandle);\n      if (options?.signal) {\n        options.signal.removeEventListener(\"abort\", onAbort);\n      }\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  getSandboxConfig(): CloudflareSandboxConfig {\n    return { type: \"cloudflare\", sandboxId: this.sandboxId };\n  }\n}\n\nexport const cloudflareSandboxAdapter: SandboxAdapter<CloudflareSandboxConfig> = {\n  type: \"cloudflare\",\n  parse: parseCloudflareSandboxArg,\n  validate: validateCloudflareSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new CloudflareSandboxExecutor(config.sandboxId, env, ensureReady),\n};\n\nfunction resolveCloudflareSandboxUrl(): URL {\n  const raw = process.env.MAMA_CLOUDFLARE_SANDBOX_URL?.trim();\n  if (!raw) {\n    throw new SandboxError(\n      \"Error: MAMA_CLOUDFLARE_SANDBOX_URL is required for cloudflare sandbox mode\",\n    );\n  }\n\n  try {\n    return new URL(raw);\n  } catch (error) {\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: invalid MAMA_CLOUDFLARE_SANDBOX_URL: ${detail}`);\n  }\n}\n\nfunction buildCloudflareHeaders(): Record<string, string> {\n  const token = process.env.MAMA_CLOUDFLARE_SANDBOX_TOKEN?.trim();\n  return token ? { authorization: `Bearer ${token}` } : {};\n}\n"]}

package/dist/sandbox/cloudflare.js

@@ -84,9 +84,9 @@ export class CloudflareSandboxExecutor {
         catch (error) {
             if (controller.signal.aborted) {
                 if (options?.signal?.aborted) {
-                    throw new Error("Command aborted");
+                    throw new Error("Command aborted", { cause: error });
                 }
-                throw new Error(`Command timed out after ${options?.timeout} seconds`);
+                throw new Error(`Command timed out after ${options?.timeout} seconds`, { cause: error });
             }
             throw error;
         }

package/dist/sandbox/cloudflare.js.map

@@ -1 +1 @@
-{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../src/sandbox/cloudflare.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAiB5C,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAgC;IAC9E,MAAM,GAAG,GAAG,2BAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE;YACpD,OAAO,EAAE,sBAAsB,EAAE;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CACpB,kEAAkE,QAAQ,CAAC,MAAM,EAAE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,sDAAsD,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,CAAC,GAAG,CACT,kDAAkD,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CACtF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAGpC,YACmB,SAAiB,EACjB,GAA4B,EAC7C,YAAkC;yBAFjB,SAAS;mBACT,GAAG;QAGpB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,sBAAsB,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,aAAa,GACjB,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;YACrC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAA0B;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO;gBACP,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;YACF,IAAI,OAAO,EAAE,OAAO;gBAAE,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;YAC/D,IAAI,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YAEzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,2BAA2B,EAAE,CAAC,EAAE;gBAC5E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,sBAAsB,EAAE;iBAC5B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;YAEtE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,KAAK;oBACV,MAAM,CAAC,MAAM;oBACb,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAC/D,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;gBACrC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,OAAO,UAAU,CAAC,CAAC;YACzE,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,gBAAgB;QACd,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,wBAAwB,GAA4C;IAC/E,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,yBAAyB;IAChC,QAAQ,EAAE,yBAAyB;IACnC,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAC3C,IAAI,yBAAyB,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC;CACpE,CAAC;AAEF,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,YAAY,CACpB,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,+CAA+C,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["import type {\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\n\nconst DEFAULT_CLOUDFLARE_CWD = \"/workspace\";\n\ninterface CloudflareExecPayload {\n  sandboxId: string;\n  command: string;\n  timeoutSeconds?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\ninterface CloudflareExecResponse {\n  stdout?: string;\n  stderr?: string;\n  code?: number;\n  error?: string;\n}\n\nexport function parseCloudflareSandboxArg(value: string): CloudflareSandboxConfig | undefined {\n  if (!value.startsWith(\"cloudflare:\")) {\n    return undefined;\n  }\n\n  const sandboxId = value.slice(\"cloudflare:\".length).trim();\n  if (!sandboxId) {\n    throw new SandboxError(\n      \"Error: cloudflare sandbox requires sandbox id (e.g., cloudflare:slack-u123)\",\n    );\n  }\n\n  return { type: \"cloudflare\", sandboxId };\n}\n\nexport async function validateCloudflareSandbox(_config: CloudflareSandboxConfig): Promise<void> {\n  const url = resolveCloudflareSandboxUrl();\n  try {\n    const response = await fetch(new URL(\"/health\", url), {\n      headers: buildCloudflareHeaders(),\n    });\n    if (!response.ok) {\n      throw new SandboxError(\n        `Error: Cloudflare sandbox bridge health check failed with HTTP ${response.status}`,\n      );\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: Cloudflare sandbox bridge is not reachable: ${detail}`);\n  }\n\n  console.log(\n    `  Cloudflare sandbox bridge enabled. Base URL: ${url.toString().replace(/\\/$/, \"\")}`,\n  );\n}\n\nexport class CloudflareSandboxExecutor implements Executor {\n  private readonly cwd: string;\n\n  constructor(\n    private readonly sandboxId: string,\n    private readonly env?: Record<string, string>,\n    _ensureReady?: () => Promise<void>,\n  ) {\n    this.cwd = process.env.MAMA_CLOUDFLARE_SANDBOX_CWD?.trim() || DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const controller = new AbortController();\n    const timeoutHandle =\n      options?.timeout && options.timeout > 0\n        ? setTimeout(() => controller.abort(), options.timeout * 1000)\n        : undefined;\n\n    const onAbort = () => controller.abort();\n    if (options?.signal) {\n      if (options.signal.aborted) {\n        controller.abort();\n      } else {\n        options.signal.addEventListener(\"abort\", onAbort, { once: true });\n      }\n    }\n\n    try {\n      const payload: CloudflareExecPayload = {\n        sandboxId: this.sandboxId,\n        command,\n        cwd: this.cwd,\n      };\n      if (options?.timeout) payload.timeoutSeconds = options.timeout;\n      if (this.env && Object.keys(this.env).length > 0) payload.env = this.env;\n\n      const response = await fetch(new URL(\"/exec\", resolveCloudflareSandboxUrl()), {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          ...buildCloudflareHeaders(),\n        },\n        body: JSON.stringify(payload),\n        signal: controller.signal,\n      });\n\n      const raw = (await response.text()).trim();\n      const parsed = raw ? (JSON.parse(raw) as CloudflareExecResponse) : {};\n\n      if (!response.ok) {\n        throw new Error(\n          parsed.error ||\n            parsed.stderr ||\n            `Cloudflare sandbox bridge returned HTTP ${response.status}`,\n        );\n      }\n\n      return {\n        stdout: parsed.stdout || \"\",\n        stderr: parsed.stderr || \"\",\n        code: parsed.code ?? 0,\n      };\n    } catch (error) {\n      if (controller.signal.aborted) {\n        if (options?.signal?.aborted) {\n          throw new Error(\"Command aborted\");\n        }\n        throw new Error(`Command timed out after ${options?.timeout} seconds`);\n      }\n      throw error;\n    } finally {\n      if (timeoutHandle) clearTimeout(timeoutHandle);\n      if (options?.signal) {\n        options.signal.removeEventListener(\"abort\", onAbort);\n      }\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  getSandboxConfig(): CloudflareSandboxConfig {\n    return { type: \"cloudflare\", sandboxId: this.sandboxId };\n  }\n}\n\nexport const cloudflareSandboxAdapter: SandboxAdapter<CloudflareSandboxConfig> = {\n  type: \"cloudflare\",\n  parse: parseCloudflareSandboxArg,\n  validate: validateCloudflareSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new CloudflareSandboxExecutor(config.sandboxId, env, ensureReady),\n};\n\nfunction resolveCloudflareSandboxUrl(): URL {\n  const raw = process.env.MAMA_CLOUDFLARE_SANDBOX_URL?.trim();\n  if (!raw) {\n    throw new SandboxError(\n      \"Error: MAMA_CLOUDFLARE_SANDBOX_URL is required for cloudflare sandbox mode\",\n    );\n  }\n\n  try {\n    return new URL(raw);\n  } catch (error) {\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: invalid MAMA_CLOUDFLARE_SANDBOX_URL: ${detail}`);\n  }\n}\n\nfunction buildCloudflareHeaders(): Record<string, string> {\n  const token = process.env.MAMA_CLOUDFLARE_SANDBOX_TOKEN?.trim();\n  return token ? { authorization: `Bearer ${token}` } : {};\n}\n"]}
+{"version":3,"file":"cloudflare.js","sourceRoot":"","sources":["../../src/sandbox/cloudflare.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,MAAM,sBAAsB,GAAG,YAAY,CAAC;AAiB5C,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAAgC;IAC9E,MAAM,GAAG,GAAG,2BAA2B,EAAE,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE;YACpD,OAAO,EAAE,sBAAsB,EAAE;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CACpB,kEAAkE,QAAQ,CAAC,MAAM,EAAE,CACpF,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,sDAAsD,MAAM,EAAE,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,CAAC,GAAG,CACT,kDAAkD,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CACtF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAGpC,YACmB,SAAiB,EACjB,GAA4B,EAC7C,YAAkC;yBAFjB,SAAS;mBACT,GAAG;QAGpB,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,sBAAsB,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,aAAa,GACjB,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,OAAO,GAAG,CAAC;YACrC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;YAC9D,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC3B,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAA0B;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO;gBACP,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;YACF,IAAI,OAAO,EAAE,OAAO;gBAAE,OAAO,CAAC,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;YAC/D,IAAI,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YAEzE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,2BAA2B,EAAE,CAAC,EAAE;gBAC5E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,sBAAsB,EAAE;iBAC5B;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC,CAAC,CAAC,EAAE,CAAC;YAEtE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,KAAK;oBACV,MAAM,CAAC,MAAM;oBACb,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAC/D,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC;aACvB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC9B,IAAI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;oBAC7B,MAAM,IAAI,KAAK,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvD,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,OAAO,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,aAAa;gBAAE,YAAY,CAAC,aAAa,CAAC,CAAC;YAC/C,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;gBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,sBAAsB,CAAC;IAChC,CAAC;IAED,gBAAgB;QACd,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC3D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,wBAAwB,GAA4C;IAC/E,IAAI,EAAE,YAAY;IAClB,KAAK,EAAE,yBAAyB;IAChC,QAAQ,EAAE,yBAAyB;IACnC,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAC3C,IAAI,yBAAyB,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC;CACpE,CAAC;AAEF,SAAS,2BAA2B;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,YAAY,CACpB,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,IAAI,YAAY,CAAC,+CAA+C,MAAM,EAAE,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB;IAC7B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC","sourcesContent":["import type {\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\n\nconst DEFAULT_CLOUDFLARE_CWD = \"/workspace\";\n\ninterface CloudflareExecPayload {\n  sandboxId: string;\n  command: string;\n  timeoutSeconds?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\ninterface CloudflareExecResponse {\n  stdout?: string;\n  stderr?: string;\n  code?: number;\n  error?: string;\n}\n\nexport function parseCloudflareSandboxArg(value: string): CloudflareSandboxConfig | undefined {\n  if (!value.startsWith(\"cloudflare:\")) {\n    return undefined;\n  }\n\n  const sandboxId = value.slice(\"cloudflare:\".length).trim();\n  if (!sandboxId) {\n    throw new SandboxError(\n      \"Error: cloudflare sandbox requires sandbox id (e.g., cloudflare:slack-u123)\",\n    );\n  }\n\n  return { type: \"cloudflare\", sandboxId };\n}\n\nexport async function validateCloudflareSandbox(_config: CloudflareSandboxConfig): Promise<void> {\n  const url = resolveCloudflareSandboxUrl();\n  try {\n    const response = await fetch(new URL(\"/health\", url), {\n      headers: buildCloudflareHeaders(),\n    });\n    if (!response.ok) {\n      throw new SandboxError(\n        `Error: Cloudflare sandbox bridge health check failed with HTTP ${response.status}`,\n      );\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: Cloudflare sandbox bridge is not reachable: ${detail}`);\n  }\n\n  console.log(\n    `  Cloudflare sandbox bridge enabled. Base URL: ${url.toString().replace(/\\/$/, \"\")}`,\n  );\n}\n\nexport class CloudflareSandboxExecutor implements Executor {\n  private readonly cwd: string;\n\n  constructor(\n    private readonly sandboxId: string,\n    private readonly env?: Record<string, string>,\n    _ensureReady?: () => Promise<void>,\n  ) {\n    this.cwd = process.env.MAMA_CLOUDFLARE_SANDBOX_CWD?.trim() || DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const controller = new AbortController();\n    const timeoutHandle =\n      options?.timeout && options.timeout > 0\n        ? setTimeout(() => controller.abort(), options.timeout * 1000)\n        : undefined;\n\n    const onAbort = () => controller.abort();\n    if (options?.signal) {\n      if (options.signal.aborted) {\n        controller.abort();\n      } else {\n        options.signal.addEventListener(\"abort\", onAbort, { once: true });\n      }\n    }\n\n    try {\n      const payload: CloudflareExecPayload = {\n        sandboxId: this.sandboxId,\n        command,\n        cwd: this.cwd,\n      };\n      if (options?.timeout) payload.timeoutSeconds = options.timeout;\n      if (this.env && Object.keys(this.env).length > 0) payload.env = this.env;\n\n      const response = await fetch(new URL(\"/exec\", resolveCloudflareSandboxUrl()), {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n          ...buildCloudflareHeaders(),\n        },\n        body: JSON.stringify(payload),\n        signal: controller.signal,\n      });\n\n      const raw = (await response.text()).trim();\n      const parsed = raw ? (JSON.parse(raw) as CloudflareExecResponse) : {};\n\n      if (!response.ok) {\n        throw new Error(\n          parsed.error ||\n            parsed.stderr ||\n            `Cloudflare sandbox bridge returned HTTP ${response.status}`,\n        );\n      }\n\n      return {\n        stdout: parsed.stdout || \"\",\n        stderr: parsed.stderr || \"\",\n        code: parsed.code ?? 0,\n      };\n    } catch (error) {\n      if (controller.signal.aborted) {\n        if (options?.signal?.aborted) {\n          throw new Error(\"Command aborted\", { cause: error });\n        }\n        throw new Error(`Command timed out after ${options?.timeout} seconds`, { cause: error });\n      }\n      throw error;\n    } finally {\n      if (timeoutHandle) clearTimeout(timeoutHandle);\n      if (options?.signal) {\n        options.signal.removeEventListener(\"abort\", onAbort);\n      }\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return DEFAULT_CLOUDFLARE_CWD;\n  }\n\n  getSandboxConfig(): CloudflareSandboxConfig {\n    return { type: \"cloudflare\", sandboxId: this.sandboxId };\n  }\n}\n\nexport const cloudflareSandboxAdapter: SandboxAdapter<CloudflareSandboxConfig> = {\n  type: \"cloudflare\",\n  parse: parseCloudflareSandboxArg,\n  validate: validateCloudflareSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new CloudflareSandboxExecutor(config.sandboxId, env, ensureReady),\n};\n\nfunction resolveCloudflareSandboxUrl(): URL {\n  const raw = process.env.MAMA_CLOUDFLARE_SANDBOX_URL?.trim();\n  if (!raw) {\n    throw new SandboxError(\n      \"Error: MAMA_CLOUDFLARE_SANDBOX_URL is required for cloudflare sandbox mode\",\n    );\n  }\n\n  try {\n    return new URL(raw);\n  } catch (error) {\n    const detail = error instanceof Error ? error.message : String(error);\n    throw new SandboxError(`Error: invalid MAMA_CLOUDFLARE_SANDBOX_URL: ${detail}`);\n  }\n}\n\nfunction buildCloudflareHeaders(): Record<string, string> {\n  const token = process.env.MAMA_CLOUDFLARE_SANDBOX_TOKEN?.trim();\n  return token ? { authorization: `Bearer ${token}` } : {};\n}\n"]}

package/dist/sandbox/container.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/sandbox/container.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,cAAc,EACf,MAAM,YAAY,CAAC;AAQpB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAY1F;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B5F;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAGR;AAED,qBAAa,iBAAkB,YAAW,QAAQ;IAE9C,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG,CAAC;IACZ,OAAO,CAAC,WAAW,CAAC;IAHtB,YACU,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA,EAC5B,WAAW,CAAC,GAAE,MAAM,OAAO,CAAC,IAAI,CAAC,aAAA,EACvC;IAEE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAetE;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1C;IAED,gBAAgB,IAAI,sBAAsB,CAEzC;CACF;AAED,eAAO,MAAM,uBAAuB,EAAE,cAAc,CAAC,sBAAsB,CAM1E,CAAC","sourcesContent":["import { chmodSync, mkdtempSync, rmSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\nimport { execSimple, shellEscape } from \"./utils.js\";\nimport { HostExecutor } from \"./host.js\";\n\nconst PRIVATE_DIR_MODE = 0o700;\nconst PRIVATE_FILE_MODE = 0o600;\n\nexport function parseContainerSandboxArg(value: string): ContainerSandboxConfig | undefined {\n  if (!value.startsWith(\"container:\")) {\n    return undefined;\n  }\n\n  const container = value.slice(\"container:\".length);\n  if (!container) {\n    throw new SandboxError(\n      \"Error: container sandbox requires container name (e.g., container:mama-sandbox)\",\n    );\n  }\n  return { type: \"container\", container };\n}\n\nexport async function validateContainerSandbox(config: ContainerSandboxConfig): Promise<void> {\n  try {\n    await execSimple(\"docker\", [\"--version\"]);\n  } catch {\n    throw new SandboxError(\"Error: Docker is not installed or not in PATH\");\n  }\n\n  try {\n    const result = await execSimple(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{.State.Running}}\",\n      config.container,\n    ]);\n    if (result.trim() !== \"true\") {\n      throw new SandboxError(`Error: Container '${config.container}' is not running.`, [\n        `Start it with: docker start ${config.container}`,\n      ]);\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    throw new SandboxError(`Error: Container '${config.container}' does not exist.`, [\n      `Create it with: docker run -d --name ${config.container} -v <workspace>:/workspace alpine:latest sleep infinity`,\n    ]);\n  }\n\n  console.log(`  Container '${config.container}' is running.`);\n}\n\nexport function buildContainerExecCommand(\n  container: string,\n  command: string,\n  envFilePath?: string,\n): string {\n  const envPart = envFilePath ? `--env-file ${shellEscape(envFilePath)} ` : \"\";\n  return `docker exec ${envPart}-w /workspace ${container} sh -c ${shellEscape(command)}`;\n}\n\nexport class ContainerExecutor implements Executor {\n  constructor(\n    private container: string,\n    private env?: Record<string, string>,\n    private ensureReady?: () => Promise<void>,\n  ) {}\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    if (this.ensureReady) {\n      await this.ensureReady();\n    } else {\n      await ensureContainerRunning(this.container);\n    }\n\n    const hostExecutor = new HostExecutor();\n    const temp = this.env ? createSecureEnvFile(this.env) : undefined;\n    try {\n      const dockerCmd = buildContainerExecCommand(this.container, command, temp?.envFilePath);\n      return await hostExecutor.exec(dockerCmd, options);\n    } finally {\n      temp?.cleanup();\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return \"/workspace\";\n  }\n\n  getSandboxConfig(): ContainerSandboxConfig {\n    return { type: \"container\", container: this.container };\n  }\n}\n\nexport const containerSandboxAdapter: SandboxAdapter<ContainerSandboxConfig> = {\n  type: \"container\",\n  parse: parseContainerSandboxArg,\n  validate: validateContainerSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new ContainerExecutor(config.container, env, ensureReady),\n};\n\nasync function ensureContainerRunning(container: string): Promise<void> {\n  try {\n    const running = await execSimple(\"docker\", [\"inspect\", \"-f\", \"{{.State.Running}}\", container]);\n    if (running.trim() === \"true\") {\n      return;\n    }\n    await execSimple(\"docker\", [\"start\", container]);\n  } catch (error) {\n    const details = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `Container \"${container}\" is not available. ` +\n        `Expected a pre-existing container or image provisioning to keep it running.\\n${details}`.trim(),\n    );\n  }\n}\n\nfunction createSecureEnvFile(env: Record<string, string>): {\n  envFilePath: string;\n  cleanup: () => void;\n} {\n  const tempDir = mkdtempSync(join(tmpdir(), \"mama-docker-env-\"));\n  chmodSync(tempDir, PRIVATE_DIR_MODE);\n  const envFilePath = join(tempDir, \"env.list\");\n  const content =\n    Object.entries(env)\n      .map(([key, value]) => `${key}=${sanitizeEnvValue(value)}`)\n      .join(\"\\n\") + \"\\n\";\n  writeFileSync(envFilePath, content, { encoding: \"utf-8\", mode: PRIVATE_FILE_MODE });\n  chmodSync(envFilePath, PRIVATE_FILE_MODE);\n\n  return {\n    envFilePath,\n    cleanup: () => {\n      rmSync(tempDir, { recursive: true, force: true });\n    },\n  };\n}\n\nfunction sanitizeEnvValue(value: string): string {\n  return value.replace(/\\r?\\n/g, \"\");\n}\n"]}
+{"version":3,"file":"container.d.ts","sourceRoot":"","sources":["../../src/sandbox/container.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,sBAAsB,EACtB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,cAAc,EACf,MAAM,YAAY,CAAC;AAQpB,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,GAAG,SAAS,CAY1F;AAED,wBAAsB,wBAAwB,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CA6B5F;AAED,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,GACnB,MAAM,CAGR;AAED,qBAAa,iBAAkB,YAAW,QAAQ;IAE9C,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,GAAG,CAAC;IACZ,OAAO,CAAC,WAAW,CAAC;IAHtB,YACU,SAAS,EAAE,MAAM,EACjB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,YAAA,EAC5B,WAAW,CAAC,GAAE,MAAM,OAAO,CAAC,IAAI,CAAC,aAAA,EACvC;IAEE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAetE;IAED,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1C;IAED,gBAAgB,IAAI,sBAAsB,CAEzC;CACF;AAED,eAAO,MAAM,uBAAuB,EAAE,cAAc,CAAC,sBAAsB,CAM1E,CAAC","sourcesContent":["import { chmodSync, mkdtempSync, rmSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\nimport { execSimple, shellEscape } from \"./utils.js\";\nimport { HostExecutor } from \"./host.js\";\n\nconst PRIVATE_DIR_MODE = 0o700;\nconst PRIVATE_FILE_MODE = 0o600;\n\nexport function parseContainerSandboxArg(value: string): ContainerSandboxConfig | undefined {\n  if (!value.startsWith(\"container:\")) {\n    return undefined;\n  }\n\n  const container = value.slice(\"container:\".length);\n  if (!container) {\n    throw new SandboxError(\n      \"Error: container sandbox requires container name (e.g., container:mama-sandbox)\",\n    );\n  }\n  return { type: \"container\", container };\n}\n\nexport async function validateContainerSandbox(config: ContainerSandboxConfig): Promise<void> {\n  try {\n    await execSimple(\"docker\", [\"--version\"]);\n  } catch {\n    throw new SandboxError(\"Error: Docker is not installed or not in PATH\");\n  }\n\n  try {\n    const result = await execSimple(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{.State.Running}}\",\n      config.container,\n    ]);\n    if (result.trim() !== \"true\") {\n      throw new SandboxError(`Error: Container '${config.container}' is not running.`, [\n        `Start it with: docker start ${config.container}`,\n      ]);\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    throw new SandboxError(`Error: Container '${config.container}' does not exist.`, [\n      `Create it with: docker run -d --name ${config.container} -v <workspace>:/workspace alpine:latest sleep infinity`,\n    ]);\n  }\n\n  console.log(`  Container '${config.container}' is running.`);\n}\n\nexport function buildContainerExecCommand(\n  container: string,\n  command: string,\n  envFilePath?: string,\n): string {\n  const envPart = envFilePath ? `--env-file ${shellEscape(envFilePath)} ` : \"\";\n  return `docker exec ${envPart}-w /workspace ${container} sh -c ${shellEscape(command)}`;\n}\n\nexport class ContainerExecutor implements Executor {\n  constructor(\n    private container: string,\n    private env?: Record<string, string>,\n    private ensureReady?: () => Promise<void>,\n  ) {}\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    if (this.ensureReady) {\n      await this.ensureReady();\n    } else {\n      await ensureContainerRunning(this.container);\n    }\n\n    const hostExecutor = new HostExecutor();\n    const temp = this.env ? createSecureEnvFile(this.env) : undefined;\n    try {\n      const dockerCmd = buildContainerExecCommand(this.container, command, temp?.envFilePath);\n      return await hostExecutor.exec(dockerCmd, options);\n    } finally {\n      temp?.cleanup();\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return \"/workspace\";\n  }\n\n  getSandboxConfig(): ContainerSandboxConfig {\n    return { type: \"container\", container: this.container };\n  }\n}\n\nexport const containerSandboxAdapter: SandboxAdapter<ContainerSandboxConfig> = {\n  type: \"container\",\n  parse: parseContainerSandboxArg,\n  validate: validateContainerSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new ContainerExecutor(config.container, env, ensureReady),\n};\n\nasync function ensureContainerRunning(container: string): Promise<void> {\n  try {\n    const running = await execSimple(\"docker\", [\"inspect\", \"-f\", \"{{.State.Running}}\", container]);\n    if (running.trim() === \"true\") {\n      return;\n    }\n    await execSimple(\"docker\", [\"start\", container]);\n  } catch (error) {\n    const details = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `Container \"${container}\" is not available. ` +\n        `Expected a pre-existing container or image provisioning to keep it running.\\n${details}`.trim(),\n      { cause: error },\n    );\n  }\n}\n\nfunction createSecureEnvFile(env: Record<string, string>): {\n  envFilePath: string;\n  cleanup: () => void;\n} {\n  const tempDir = mkdtempSync(join(tmpdir(), \"mama-docker-env-\"));\n  chmodSync(tempDir, PRIVATE_DIR_MODE);\n  const envFilePath = join(tempDir, \"env.list\");\n  const content =\n    Object.entries(env)\n      .map(([key, value]) => `${key}=${sanitizeEnvValue(value)}`)\n      .join(\"\\n\") + \"\\n\";\n  writeFileSync(envFilePath, content, { encoding: \"utf-8\", mode: PRIVATE_FILE_MODE });\n  chmodSync(envFilePath, PRIVATE_FILE_MODE);\n\n  return {\n    envFilePath,\n    cleanup: () => {\n      rmSync(tempDir, { recursive: true, force: true });\n    },\n  };\n}\n\nfunction sanitizeEnvValue(value: string): string {\n  return value.replace(/\\r?\\n/g, \"\");\n}\n"]}

package/dist/sandbox/container.js

@@ -97,7 +97,7 @@ async function ensureContainerRunning(container) {
     catch (error) {
         const details = error instanceof Error ? error.message : String(error);
         throw new Error(`Container "${container}" is not available. ` +
-            `Expected a pre-existing container or image provisioning to keep it running.\n${details}`.trim());
+            `Expected a pre-existing container or image provisioning to keep it running.\n${details}`.trim(), { cause: error });
     }
 }
 function createSecureEnvFile(env) {

package/dist/sandbox/container.js.map

@@ -1 +1 @@
-{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/sandbox/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAA8B;IAC3E,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,+CAA+C,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE;YACxC,SAAS;YACT,IAAI;YACJ,oBAAoB;YACpB,MAAM,CAAC,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,YAAY,CAAC,qBAAqB,MAAM,CAAC,SAAS,mBAAmB,EAAE;gBAC/E,+BAA+B,MAAM,CAAC,SAAS,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,qBAAqB,MAAM,CAAC,SAAS,mBAAmB,EAAE;YAC/E,wCAAwC,MAAM,CAAC,SAAS,yDAAyD;SAClH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,SAAS,eAAe,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,OAAe,EACf,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,cAAc,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,OAAO,eAAe,OAAO,iBAAiB,SAAS,UAAU,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,YACU,SAAiB,EACjB,GAA4B,EAC5B,WAAiC;yBAFjC,SAAS;mBACT,GAAG;2BACH,WAAW;IAClB,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACxF,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,gBAAgB;QACd,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,uBAAuB,GAA2C;IAC7E,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,wBAAwB;IAC/B,QAAQ,EAAE,wBAAwB;IAClC,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAC3C,IAAI,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC;CAC5D,CAAC;AAEF,KAAK,UAAU,sBAAsB,CAAC,SAAiB;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/F,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,sBAAsB;YAC3C,gFAAgF,OAAO,EAAE,CAAC,IAAI,EAAE,CACnG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAA2B;IAItD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChE,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvB,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACpF,SAAS,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAE1C,OAAO;QACL,WAAW;QACX,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import { chmodSync, mkdtempSync, rmSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\nimport { execSimple, shellEscape } from \"./utils.js\";\nimport { HostExecutor } from \"./host.js\";\n\nconst PRIVATE_DIR_MODE = 0o700;\nconst PRIVATE_FILE_MODE = 0o600;\n\nexport function parseContainerSandboxArg(value: string): ContainerSandboxConfig | undefined {\n  if (!value.startsWith(\"container:\")) {\n    return undefined;\n  }\n\n  const container = value.slice(\"container:\".length);\n  if (!container) {\n    throw new SandboxError(\n      \"Error: container sandbox requires container name (e.g., container:mama-sandbox)\",\n    );\n  }\n  return { type: \"container\", container };\n}\n\nexport async function validateContainerSandbox(config: ContainerSandboxConfig): Promise<void> {\n  try {\n    await execSimple(\"docker\", [\"--version\"]);\n  } catch {\n    throw new SandboxError(\"Error: Docker is not installed or not in PATH\");\n  }\n\n  try {\n    const result = await execSimple(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{.State.Running}}\",\n      config.container,\n    ]);\n    if (result.trim() !== \"true\") {\n      throw new SandboxError(`Error: Container '${config.container}' is not running.`, [\n        `Start it with: docker start ${config.container}`,\n      ]);\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    throw new SandboxError(`Error: Container '${config.container}' does not exist.`, [\n      `Create it with: docker run -d --name ${config.container} -v <workspace>:/workspace alpine:latest sleep infinity`,\n    ]);\n  }\n\n  console.log(`  Container '${config.container}' is running.`);\n}\n\nexport function buildContainerExecCommand(\n  container: string,\n  command: string,\n  envFilePath?: string,\n): string {\n  const envPart = envFilePath ? `--env-file ${shellEscape(envFilePath)} ` : \"\";\n  return `docker exec ${envPart}-w /workspace ${container} sh -c ${shellEscape(command)}`;\n}\n\nexport class ContainerExecutor implements Executor {\n  constructor(\n    private container: string,\n    private env?: Record<string, string>,\n    private ensureReady?: () => Promise<void>,\n  ) {}\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    if (this.ensureReady) {\n      await this.ensureReady();\n    } else {\n      await ensureContainerRunning(this.container);\n    }\n\n    const hostExecutor = new HostExecutor();\n    const temp = this.env ? createSecureEnvFile(this.env) : undefined;\n    try {\n      const dockerCmd = buildContainerExecCommand(this.container, command, temp?.envFilePath);\n      return await hostExecutor.exec(dockerCmd, options);\n    } finally {\n      temp?.cleanup();\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return \"/workspace\";\n  }\n\n  getSandboxConfig(): ContainerSandboxConfig {\n    return { type: \"container\", container: this.container };\n  }\n}\n\nexport const containerSandboxAdapter: SandboxAdapter<ContainerSandboxConfig> = {\n  type: \"container\",\n  parse: parseContainerSandboxArg,\n  validate: validateContainerSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new ContainerExecutor(config.container, env, ensureReady),\n};\n\nasync function ensureContainerRunning(container: string): Promise<void> {\n  try {\n    const running = await execSimple(\"docker\", [\"inspect\", \"-f\", \"{{.State.Running}}\", container]);\n    if (running.trim() === \"true\") {\n      return;\n    }\n    await execSimple(\"docker\", [\"start\", container]);\n  } catch (error) {\n    const details = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `Container \"${container}\" is not available. ` +\n        `Expected a pre-existing container or image provisioning to keep it running.\\n${details}`.trim(),\n    );\n  }\n}\n\nfunction createSecureEnvFile(env: Record<string, string>): {\n  envFilePath: string;\n  cleanup: () => void;\n} {\n  const tempDir = mkdtempSync(join(tmpdir(), \"mama-docker-env-\"));\n  chmodSync(tempDir, PRIVATE_DIR_MODE);\n  const envFilePath = join(tempDir, \"env.list\");\n  const content =\n    Object.entries(env)\n      .map(([key, value]) => `${key}=${sanitizeEnvValue(value)}`)\n      .join(\"\\n\") + \"\\n\";\n  writeFileSync(envFilePath, content, { encoding: \"utf-8\", mode: PRIVATE_FILE_MODE });\n  chmodSync(envFilePath, PRIVATE_FILE_MODE);\n\n  return {\n    envFilePath,\n    cleanup: () => {\n      rmSync(tempDir, { recursive: true, force: true });\n    },\n  };\n}\n\nfunction sanitizeEnvValue(value: string): string {\n  return value.replace(/\\r?\\n/g, \"\");\n}\n"]}
+{"version":3,"file":"container.js","sourceRoot":"","sources":["../../src/sandbox/container.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAC/B,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,MAA8B;IAC3E,IAAI,CAAC;QACH,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,+CAA+C,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE;YACxC,SAAS;YACT,IAAI;YACJ,oBAAoB;YACpB,MAAM,CAAC,SAAS;SACjB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,YAAY,CAAC,qBAAqB,MAAM,CAAC,SAAS,mBAAmB,EAAE;gBAC/E,+BAA+B,MAAM,CAAC,SAAS,EAAE;aAClD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,qBAAqB,MAAM,CAAC,SAAS,mBAAmB,EAAE;YAC/E,wCAAwC,MAAM,CAAC,SAAS,yDAAyD;SAClH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,SAAS,eAAe,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,OAAe,EACf,WAAoB;IAEpB,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,cAAc,WAAW,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,OAAO,eAAe,OAAO,iBAAiB,SAAS,UAAU,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,OAAO,iBAAiB;IAC5B,YACU,SAAiB,EACjB,GAA4B,EAC5B,WAAiC;yBAFjC,SAAS;mBACT,GAAG;2BACH,WAAW;IAClB,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,OAAqB;QAC/C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,MAAM,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YACxF,OAAO,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,SAAiB;QAChC,OAAO,YAAY,CAAC;IACtB,CAAC;IAED,gBAAgB;QACd,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;CACF;AAED,MAAM,CAAC,MAAM,uBAAuB,GAA2C;IAC7E,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,wBAAwB;IAC/B,QAAQ,EAAE,wBAAwB;IAClC,cAAc,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,CAC3C,IAAI,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,WAAW,CAAC;CAC5D,CAAC;AAEF,KAAK,UAAU,sBAAsB,CAAC,SAAiB;IACrD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/F,IAAI,OAAO,CAAC,IAAI,EAAE,KAAK,MAAM,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QACD,MAAM,UAAU,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CACb,cAAc,SAAS,sBAAsB;YAC3C,gFAAgF,OAAO,EAAE,CAAC,IAAI,EAAE,EAClG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,GAA2B;IAItD,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IAChE,SAAS,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;SAC1D,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IACvB,aAAa,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACpF,SAAS,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;IAE1C,OAAO;QACL,WAAW;QACX,OAAO,EAAE,GAAG,EAAE;YACZ,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import { chmodSync, mkdtempSync, rmSync, writeFileSync } from \"node:fs\";\nimport { tmpdir } from \"node:os\";\nimport { join } from \"node:path\";\nimport type {\n  ContainerSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  SandboxAdapter,\n} from \"./types.js\";\nimport { SandboxError } from \"./errors.js\";\nimport { execSimple, shellEscape } from \"./utils.js\";\nimport { HostExecutor } from \"./host.js\";\n\nconst PRIVATE_DIR_MODE = 0o700;\nconst PRIVATE_FILE_MODE = 0o600;\n\nexport function parseContainerSandboxArg(value: string): ContainerSandboxConfig | undefined {\n  if (!value.startsWith(\"container:\")) {\n    return undefined;\n  }\n\n  const container = value.slice(\"container:\".length);\n  if (!container) {\n    throw new SandboxError(\n      \"Error: container sandbox requires container name (e.g., container:mama-sandbox)\",\n    );\n  }\n  return { type: \"container\", container };\n}\n\nexport async function validateContainerSandbox(config: ContainerSandboxConfig): Promise<void> {\n  try {\n    await execSimple(\"docker\", [\"--version\"]);\n  } catch {\n    throw new SandboxError(\"Error: Docker is not installed or not in PATH\");\n  }\n\n  try {\n    const result = await execSimple(\"docker\", [\n      \"inspect\",\n      \"-f\",\n      \"{{.State.Running}}\",\n      config.container,\n    ]);\n    if (result.trim() !== \"true\") {\n      throw new SandboxError(`Error: Container '${config.container}' is not running.`, [\n        `Start it with: docker start ${config.container}`,\n      ]);\n    }\n  } catch (error) {\n    if (error instanceof SandboxError) {\n      throw error;\n    }\n    throw new SandboxError(`Error: Container '${config.container}' does not exist.`, [\n      `Create it with: docker run -d --name ${config.container} -v <workspace>:/workspace alpine:latest sleep infinity`,\n    ]);\n  }\n\n  console.log(`  Container '${config.container}' is running.`);\n}\n\nexport function buildContainerExecCommand(\n  container: string,\n  command: string,\n  envFilePath?: string,\n): string {\n  const envPart = envFilePath ? `--env-file ${shellEscape(envFilePath)} ` : \"\";\n  return `docker exec ${envPart}-w /workspace ${container} sh -c ${shellEscape(command)}`;\n}\n\nexport class ContainerExecutor implements Executor {\n  constructor(\n    private container: string,\n    private env?: Record<string, string>,\n    private ensureReady?: () => Promise<void>,\n  ) {}\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    if (this.ensureReady) {\n      await this.ensureReady();\n    } else {\n      await ensureContainerRunning(this.container);\n    }\n\n    const hostExecutor = new HostExecutor();\n    const temp = this.env ? createSecureEnvFile(this.env) : undefined;\n    try {\n      const dockerCmd = buildContainerExecCommand(this.container, command, temp?.envFilePath);\n      return await hostExecutor.exec(dockerCmd, options);\n    } finally {\n      temp?.cleanup();\n    }\n  }\n\n  getWorkspacePath(_hostPath: string): string {\n    return \"/workspace\";\n  }\n\n  getSandboxConfig(): ContainerSandboxConfig {\n    return { type: \"container\", container: this.container };\n  }\n}\n\nexport const containerSandboxAdapter: SandboxAdapter<ContainerSandboxConfig> = {\n  type: \"container\",\n  parse: parseContainerSandboxArg,\n  validate: validateContainerSandbox,\n  createExecutor: (config, env, ensureReady) =>\n    new ContainerExecutor(config.container, env, ensureReady),\n};\n\nasync function ensureContainerRunning(container: string): Promise<void> {\n  try {\n    const running = await execSimple(\"docker\", [\"inspect\", \"-f\", \"{{.State.Running}}\", container]);\n    if (running.trim() === \"true\") {\n      return;\n    }\n    await execSimple(\"docker\", [\"start\", container]);\n  } catch (error) {\n    const details = error instanceof Error ? error.message : String(error);\n    throw new Error(\n      `Container \"${container}\" is not available. ` +\n        `Expected a pre-existing container or image provisioning to keep it running.\\n${details}`.trim(),\n      { cause: error },\n    );\n  }\n}\n\nfunction createSecureEnvFile(env: Record<string, string>): {\n  envFilePath: string;\n  cleanup: () => void;\n} {\n  const tempDir = mkdtempSync(join(tmpdir(), \"mama-docker-env-\"));\n  chmodSync(tempDir, PRIVATE_DIR_MODE);\n  const envFilePath = join(tempDir, \"env.list\");\n  const content =\n    Object.entries(env)\n      .map(([key, value]) => `${key}=${sanitizeEnvValue(value)}`)\n      .join(\"\\n\") + \"\\n\";\n  writeFileSync(envFilePath, content, { encoding: \"utf-8\", mode: PRIVATE_FILE_MODE });\n  chmodSync(envFilePath, PRIVATE_FILE_MODE);\n\n  return {\n    envFilePath,\n    cleanup: () => {\n      rmSync(tempDir, { recursive: true, force: true });\n    },\n  };\n}\n\nfunction sanitizeEnvValue(value: string): string {\n  return value.replace(/\\r?\\n/g, \"\");\n}\n"]}

package/dist/sandbox/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EAIlB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EAIpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,yBAAyB,EAI1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,YAAY,EAIb,MAAM,WAAW,CAAC;AAGnB,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,QAAA,MAAM,eAAe,sTAMX,CAAC;AAKX,wBAAgB,kBAAkB,IAAI,SAAS,CAAC,GAAG,OAAO,eAAe,CAAC,CAEzE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAiB5D;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAMV","sourcesContent":["import {\n  ContainerExecutor,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nimport {\n  FirecrackerExecutor,\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nimport {\n  CloudflareSandboxExecutor,\n  cloudflareSandboxAdapter,\n  parseCloudflareSandboxArg,\n  validateCloudflareSandbox,\n} from \"./cloudflare.js\";\nimport {\n  HostExecutor,\n  hostSandboxAdapter,\n  parseHostSandboxArg,\n  validateHostSandbox,\n} from \"./host.js\";\nimport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport {\n  cloudflareSandboxAdapter,\n  parseCloudflareSandboxArg,\n  validateCloudflareSandbox,\n} from \"./cloudflare.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n  cloudflareSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAA2B,MAAM,gBAAgB,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAA6B,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,yBAAyB,EAA4B,MAAM,iBAAiB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAsB,MAAM,WAAW,CAAC;AAG7D,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE1E,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,WAAW,EACX,UAAU,EACV,QAAQ,EACR,wBAAwB,EACxB,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,aAAa,GACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,GAC1B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE7F,QAAA,MAAM,eAAe,sTAMX,CAAC;AAKX,wBAAgB,kBAAkB,IAAI,SAAS,CAAC,GAAG,OAAO,eAAe,CAAC,CAEzE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,aAAa,CAiB5D;AAED,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,aAAa,EACrB,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAChC,QAAQ,CAMV","sourcesContent":["import { ContainerExecutor, containerSandboxAdapter } from \"./container.js\";\nimport { FirecrackerExecutor, firecrackerSandboxAdapter } from \"./firecracker.js\";\nimport { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from \"./cloudflare.js\";\nimport { HostExecutor, hostSandboxAdapter } from \"./host.js\";\nimport { imageSandboxAdapter } from \"./image.js\";\nimport { SandboxError } from \"./errors.js\";\nimport type { Executor, SandboxAdapter, SandboxConfig } from \"./types.js\";\n\nexport type {\n  ContainerSandboxConfig,\n  CloudflareSandboxConfig,\n  ExecOptions,\n  ExecResult,\n  Executor,\n  FirecrackerSandboxConfig,\n  HostSandboxConfig,\n  ImageSandboxConfig,\n  SandboxAdapter,\n  SandboxConfig,\n} from \"./types.js\";\nexport { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };\nexport { SandboxError } from \"./errors.js\";\nexport {\n  buildContainerExecCommand,\n  containerSandboxAdapter,\n  parseContainerSandboxArg,\n  validateContainerSandbox,\n} from \"./container.js\";\nexport {\n  firecrackerSandboxAdapter,\n  parseFirecrackerSandboxArg,\n  validateFirecrackerSandbox,\n} from \"./firecracker.js\";\nexport {\n  cloudflareSandboxAdapter,\n  parseCloudflareSandboxArg,\n  validateCloudflareSandbox,\n} from \"./cloudflare.js\";\nexport { hostSandboxAdapter, parseHostSandboxArg, validateHostSandbox } from \"./host.js\";\nexport { imageSandboxAdapter, parseImageSandboxArg, validateImageSandbox } from \"./image.js\";\n\nconst sandboxAdapters = [\n  hostSandboxAdapter,\n  containerSandboxAdapter,\n  imageSandboxAdapter,\n  firecrackerSandboxAdapter,\n  cloudflareSandboxAdapter,\n] as const;\nconst sandboxAdapterByType = new Map(\n  sandboxAdapters.map((adapter) => [adapter.type, adapter]),\n) as Map<SandboxConfig[\"type\"], SandboxAdapter>;\n\nexport function getSandboxAdapters(): readonly [...typeof sandboxAdapters] {\n  return sandboxAdapters;\n}\n\nexport function parseSandboxArg(value: string): SandboxConfig {\n  for (const adapter of sandboxAdapters) {\n    const config = adapter.parse(value);\n    if (config) {\n      return config;\n    }\n  }\n\n  if (value.startsWith(\"docker:\")) {\n    throw new SandboxError(\n      `Error: '${value}' is not supported. Use 'container:<container-name>' for the shared-container mode or 'image:<image-name>' for mama-managed per-user containers.`,\n    );\n  }\n\n  throw new SandboxError(\n    `Error: Invalid sandbox type '${value}'. Use 'host', 'container:<container-name>', 'image:<image-name>', 'firecracker:<vm-id>:<host-path>', or 'cloudflare:<sandbox-id>'`,\n  );\n}\n\nexport async function validateSandbox(config: SandboxConfig): Promise<void> {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n\n  await adapter.validate(config);\n}\n\n/**\n * Create an executor that runs commands on host, in Docker, in a Firecracker VM, or through a Cloudflare sandbox bridge.\n */\nexport function createExecutor(\n  config: SandboxConfig,\n  env?: Record<string, string>,\n  ensureReady?: () => Promise<void>,\n): Executor {\n  const adapter = sandboxAdapterByType.get(config.type);\n  if (!adapter) {\n    throw new SandboxError(`Error: Unsupported sandbox type '${config.type}'`);\n  }\n  return adapter.createExecutor(config, env, ensureReady);\n}\n"]}

package/dist/sandbox/index.js

@@ -1,7 +1,7 @@
-import { ContainerExecutor, containerSandboxAdapter, } from "./container.js";
-import { FirecrackerExecutor, firecrackerSandboxAdapter, } from "./firecracker.js";
-import { CloudflareSandboxExecutor, cloudflareSandboxAdapter, } from "./cloudflare.js";
-import { HostExecutor, hostSandboxAdapter, } from "./host.js";
+import { ContainerExecutor, containerSandboxAdapter } from "./container.js";
+import { FirecrackerExecutor, firecrackerSandboxAdapter } from "./firecracker.js";
+import { CloudflareSandboxExecutor, cloudflareSandboxAdapter } from "./cloudflare.js";
+import { HostExecutor, hostSandboxAdapter } from "./host.js";
 import { imageSandboxAdapter } from "./image.js";
 import { SandboxError } from "./errors.js";
 export { CloudflareSandboxExecutor, ContainerExecutor, FirecrackerExecutor, HostExecutor };