@librechat/agents 3.2.32 → 3.2.34

package/dist/esm/tools/cloudflare/CloudflareBridgeRuntime.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"CloudflareBridgeRuntime.mjs","sources":["../../../../src/tools/cloudflare/CloudflareBridgeRuntime.ts"],"sourcesContent":["import { posix as path } from 'path';\nimport type * as t from '@/types';\n\nconst DEFAULT_API_PREFIX = '/v1';\nconst DEFAULT_WORKSPACE_ROOT = '/workspace';\nconst DEFAULT_SHELL = 'bash';\n\nexport type CloudflareBridgeRuntimeConfig = {\n  /** Base URL of a Worker using `bridge()` from `@cloudflare/sandbox/bridge`. */\n  baseURL: string;\n  /** Bearer token stored in the bridge Worker as `SANDBOX_API_KEY`. */\n  apiKey?: string;\n  /** Existing sandbox id. If omitted, the adapter creates one lazily. */\n  sandboxId?: string;\n  /** Bridge API route prefix. Defaults to `/v1`. */\n  apiRoutePrefix?: string;\n  /** Workspace root used for path clamping. Defaults to `/workspace`. */\n  workspaceRoot?: string;\n  /** Optional bridge session id sent as `Session-Id`. */\n  sessionId?: string;\n  /** Shell used to run command strings over the bridge exec endpoint. */\n  shell?: string;\n  /** Optional fetch implementation. Defaults to global `fetch`. */\n  fetch?: typeof fetch;\n};\n\nexport type CloudflareBridgeRuntime = t.CloudflareSandboxRuntime & {\n  getSandboxId(): Promise<string>;\n};\n\ntype BridgeSSEEvent = {\n  event: string;\n  data: string;\n};\n\nfunction normalizeBaseURL(baseURL: string): string {\n  return baseURL.replace(/\\/+$/, '');\n}\n\nfunction normalizePrefix(prefix: string | undefined): string {\n  const raw = prefix ?? DEFAULT_API_PREFIX;\n  const withLeadingSlash = raw.startsWith('/') ? raw : `/${raw}`;\n  return withLeadingSlash.replace(/\\/+$/, '');\n}\n\nfunction normalizeWorkspaceRoot(workspaceRoot: string): string {\n  const normalized = path.normalize(workspaceRoot);\n  return normalized === '/' ? normalized : normalized.replace(/\\/+$/, '');\n}\n\nfunction getFetch(config: CloudflareBridgeRuntimeConfig): typeof fetch {\n  const fetchImpl = config.fetch ?? globalThis.fetch;\n  return fetchImpl.bind(globalThis) as typeof fetch;\n}\n\nfunction quote(value: string): string {\n  if (value === '') {\n    return '\\'\\'';\n  }\n  if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) {\n    return value;\n  }\n  return `'${value.replace(/'/g, '\\'\\\\\\'\\'')}'`;\n}\n\nfunction encodeBridgePath(filePath: string): string {\n  return filePath\n    .replace(/^\\/+/, '')\n    .split('/')\n    .map((part) => encodeURIComponent(part))\n    .join('/');\n}\n\nfunction toSandboxPath(filePath: string, workspaceRoot: string): string {\n  const raw = filePath === '' ? '.' : filePath;\n  const root = normalizeWorkspaceRoot(workspaceRoot);\n  const resolved = raw.startsWith('/')\n    ? path.normalize(raw)\n    : path.resolve(root, raw);\n  if (root === '/') {\n    return resolved;\n  }\n  if (resolved === root || resolved.startsWith(`${root}/`)) {\n    return resolved;\n  }\n  throw new Error(\n    `Path is outside the Cloudflare sandbox workspace: ${filePath}`\n  );\n}\n\nfunction typeFromFind(value: string): t.CloudflareSandboxFileInfo['type'] {\n  switch (value) {\n  case 'd':\n    return 'directory';\n  case 'l':\n    return 'symlink';\n  case 'f':\n    return 'file';\n  default:\n    return 'other';\n  }\n}\n\nfunction decodeBase64(value: string): string {\n  return Buffer.from(value, 'base64').toString('utf8');\n}\n\nasync function readResponseText(response: Response): Promise<string> {\n  try {\n    return await response.text();\n  } catch {\n    return '';\n  }\n}\n\nasync function assertOk(response: Response, operation: string): Promise<void> {\n  if (response.ok) {\n    return;\n  }\n  const text = await readResponseText(response);\n  throw new Error(\n    `Cloudflare sandbox bridge ${operation} failed (${response.status}): ${text}`\n  );\n}\n\nfunction createHeaders(\n  config: CloudflareBridgeRuntimeConfig,\n  extra?: HeadersInit\n): Headers {\n  const headers = new Headers(extra);\n  if (config.apiKey != null && config.apiKey !== '') {\n    headers.set('Authorization', `Bearer ${config.apiKey}`);\n  }\n  if (config.sessionId != null && config.sessionId !== '') {\n    headers.set('Session-Id', config.sessionId);\n  }\n  return headers;\n}\n\nfunction envScript(env?: Record<string, string | undefined>): string {\n  if (env == null) {\n    return '';\n  }\n  return Object.entries(env)\n    .filter((entry): entry is [string, string] => entry[1] != null)\n    .map(([key, value]) => `export ${key}=${quote(value)}`)\n    .join('\\n');\n}\n\nfunction commandWithEnv(\n  command: string,\n  env?: Record<string, string | undefined>\n): string {\n  const exports = envScript(env);\n  return exports === '' ? command : `${exports}\\n${command}`;\n}\n\nasync function collectReadableStream(\n  stream: ReadableStream<Uint8Array>\n): Promise<Uint8Array> {\n  const reader = stream.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      chunks.push(value);\n      total += value.byteLength;\n    }\n  } finally {\n    reader.releaseLock();\n  }\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return bytes;\n}\n\nasync function normalizeWriteBody(\n  content: string | ReadableStream<Uint8Array>,\n  options?: { encoding?: string }\n): Promise<Uint8Array> {\n  if (typeof content !== 'string') {\n    return collectReadableStream(content);\n  }\n  if (options?.encoding === 'base64') {\n    return Buffer.from(content, 'base64');\n  }\n  return Buffer.from(content, options?.encoding === 'utf8' ? 'utf8' : 'utf8');\n}\n\nfunction parseSSEChunk(buffer: string): {\n  events: BridgeSSEEvent[];\n  remainder: string;\n} {\n  const normalized = buffer.replace(/\\r\\n/g, '\\n');\n  const parts = normalized.split('\\n\\n');\n  const remainder = parts.pop() ?? '';\n  const events = parts\n    .map((part) => {\n      let event = 'message';\n      const dataLines: string[] = [];\n      for (const line of part.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event = line.slice('event:'.length).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice('data:'.length).trimStart());\n        }\n      }\n      return { event, data: dataLines.join('\\n') };\n    })\n    .filter((event) => event.data !== '' || event.event !== 'message');\n  return { events, remainder };\n}\n\nfunction parseExitCode(data: string): number {\n  try {\n    const parsed = JSON.parse(data) as { exit_code?: number };\n    return typeof parsed.exit_code === 'number' ? parsed.exit_code : 1;\n  } catch {\n    return 1;\n  }\n}\n\nfunction parseBridgeError(data: string): string {\n  try {\n    const parsed = JSON.parse(data) as { error?: string };\n    return parsed.error ?? data;\n  } catch {\n    return data;\n  }\n}\n\nexport function createCloudflareBridgeRuntime(\n  config: CloudflareBridgeRuntimeConfig\n): CloudflareBridgeRuntime {\n  const baseURL = normalizeBaseURL(config.baseURL);\n  const apiPrefix = normalizePrefix(config.apiRoutePrefix);\n  const workspaceRoot = normalizeWorkspaceRoot(\n    config.workspaceRoot ?? DEFAULT_WORKSPACE_ROOT\n  );\n  const shell = config.shell ?? DEFAULT_SHELL;\n  const fetchImpl = getFetch(config);\n  let sandboxIdPromise: Promise<string> | undefined =\n    config.sandboxId != null ? Promise.resolve(config.sandboxId) : undefined;\n\n  function bridgeURL(suffix: string): string {\n    return `${baseURL}${apiPrefix}${suffix}`;\n  }\n\n  async function getSandboxId(): Promise<string> {\n    if (sandboxIdPromise == null) {\n      sandboxIdPromise = (async (): Promise<string> => {\n        const response = await fetchImpl(bridgeURL('/sandbox'), {\n          method: 'POST',\n          headers: createHeaders(config),\n        });\n        await assertOk(response, 'sandbox create');\n        const payload = (await response.json()) as { id?: string };\n        if (typeof payload.id !== 'string' || payload.id === '') {\n          throw new Error(\n            'Cloudflare sandbox bridge create did not return an id.'\n          );\n        }\n        return payload.id;\n      })().catch((error: unknown) => {\n        sandboxIdPromise = undefined;\n        throw error;\n      });\n    }\n    return sandboxIdPromise;\n  }\n\n  async function exec(\n    command: string,\n    options: t.CloudflareSandboxExecOptions = {}\n  ): Promise<t.CloudflareSandboxExecResult> {\n    const sandboxId = await getSandboxId();\n    const sandboxPathId = encodeURIComponent(sandboxId);\n    const response = await fetchImpl(\n      bridgeURL(`/sandbox/${sandboxPathId}/exec`),\n      {\n        method: 'POST',\n        headers: createHeaders(config, {\n          'Content-Type': 'application/json',\n        }),\n        body: JSON.stringify({\n          argv: [shell, '-lc', commandWithEnv(command, options.env)],\n          cwd: toSandboxPath(options.cwd ?? workspaceRoot, workspaceRoot),\n          timeout_ms: options.timeout,\n        }),\n        signal: options.signal,\n      }\n    );\n    await assertOk(response, 'exec');\n    if (response.body == null) {\n      throw new Error(\n        'Cloudflare sandbox bridge exec response did not include a body.'\n      );\n    }\n\n    const decoder = new TextDecoder();\n    const reader = response.body.getReader();\n    let buffer = '';\n    let stdout = '';\n    let stderr = '';\n    let exitCode: number | undefined;\n\n    try {\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        buffer += decoder.decode(value, { stream: true });\n        const parsed = parseSSEChunk(buffer);\n        buffer = parsed.remainder;\n        for (const event of parsed.events) {\n          if (event.event === 'stdout') {\n            const decoded = decodeBase64(event.data);\n            stdout += decoded;\n            options.onOutput?.('stdout', decoded);\n          } else if (event.event === 'stderr') {\n            const decoded = decodeBase64(event.data);\n            stderr += decoded;\n            options.onOutput?.('stderr', decoded);\n          } else if (event.event === 'exit') {\n            exitCode = parseExitCode(event.data);\n          } else if (event.event === 'error') {\n            throw new Error(parseBridgeError(event.data));\n          }\n        }\n      }\n      buffer += decoder.decode();\n      const parsed = parseSSEChunk(buffer);\n      buffer = parsed.remainder;\n      for (const event of parsed.events) {\n        if (event.event === 'stdout') {\n          const decoded = decodeBase64(event.data);\n          stdout += decoded;\n          options.onOutput?.('stdout', decoded);\n        } else if (event.event === 'stderr') {\n          const decoded = decodeBase64(event.data);\n          stderr += decoded;\n          options.onOutput?.('stderr', decoded);\n        } else if (event.event === 'exit') {\n          exitCode = parseExitCode(event.data);\n        } else if (event.event === 'error') {\n          throw new Error(parseBridgeError(event.data));\n        }\n      }\n    } finally {\n      reader.releaseLock();\n    }\n\n    if (exitCode == null) {\n      throw new Error(\n        'Cloudflare sandbox bridge exec stream closed before an exit event.'\n      );\n    }\n\n    return {\n      success: exitCode === 0,\n      exitCode,\n      stdout,\n      stderr,\n      command,\n    };\n  }\n\n  async function readFile(filePath: string): Promise<Buffer> {\n    const sandboxId = await getSandboxId();\n    const sandboxPathId = encodeURIComponent(sandboxId);\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const response = await fetchImpl(\n      bridgeURL(\n        `/sandbox/${sandboxPathId}/file/${encodeBridgePath(resolvedPath)}`\n      ),\n      {\n        headers: createHeaders(config),\n      }\n    );\n    await assertOk(response, 'readFile');\n    return Buffer.from(await response.arrayBuffer());\n  }\n\n  async function writeFile(\n    filePath: string,\n    content: string | ReadableStream<Uint8Array>,\n    options?: { encoding?: string }\n  ): Promise<unknown> {\n    const sandboxId = await getSandboxId();\n    const sandboxPathId = encodeURIComponent(sandboxId);\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const body = await normalizeWriteBody(content, options);\n    const response = await fetchImpl(\n      bridgeURL(\n        `/sandbox/${sandboxPathId}/file/${encodeBridgePath(resolvedPath)}`\n      ),\n      {\n        method: 'PUT',\n        headers: createHeaders(config, {\n          'Content-Type': 'application/octet-stream',\n        }),\n        body,\n      }\n    );\n    await assertOk(response, 'writeFile');\n    return response.json().catch(() => ({ ok: true }));\n  }\n\n  async function mkdir(\n    filePath: string,\n    options?: { recursive?: boolean }\n  ): Promise<unknown> {\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const command = `${options?.recursive === true ? 'mkdir -p' : 'mkdir'} -- ${quote(resolvedPath)}`;\n    const result = await exec(command, { cwd: workspaceRoot });\n    if (result.exitCode !== 0) {\n      throw new Error(result.stderr || `mkdir failed for ${resolvedPath}`);\n    }\n    return { ok: true };\n  }\n\n  async function listFiles(\n    filePath: string,\n    options?: t.CloudflareSandboxListFilesOptions\n  ): Promise<t.CloudflareSandboxFileInfo[]> {\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const maxDepth = options?.recursive === true ? '' : '-maxdepth 1';\n    const hiddenFilter =\n      options?.includeHidden === true ? '' : ' \\\\( -name \\'.*\\' -prune \\\\) -o';\n    const quotedPath = quote(resolvedPath);\n    const command =\n      `[ -d ${quotedPath} ] || { printf '%s is not a directory\\\\n' ${quotedPath} >&2; exit 20; }; ` +\n      `find ${quotedPath} -mindepth 1 ${maxDepth}${hiddenFilter} ` +\n      '-printf \\'%y\\\\t%s\\\\t%p\\\\n\\'';\n    const result = await exec(command, { cwd: workspaceRoot });\n    if (result.exitCode !== 0) {\n      throw new Error(result.stderr || `listFiles failed for ${resolvedPath}`);\n    }\n    return result.stdout\n      .split('\\n')\n      .filter(Boolean)\n      .map((line) => {\n        const [rawType, rawSize, ...pathParts] = line.split('\\t');\n        const absolutePath = pathParts.join('\\t');\n        return {\n          name: path.basename(absolutePath),\n          absolutePath,\n          relativePath: path.relative(resolvedPath, absolutePath),\n          type: typeFromFind(rawType),\n          size: Number.parseInt(rawSize, 10) || 0,\n        };\n      });\n  }\n\n  async function deleteFile(filePath: string): Promise<unknown> {\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const result = await exec(`rm -rf -- ${quote(resolvedPath)}`, {\n      cwd: workspaceRoot,\n    });\n    if (result.exitCode !== 0) {\n      throw new Error(result.stderr || `deleteFile failed for ${resolvedPath}`);\n    }\n    return { ok: true };\n  }\n\n  return {\n    supportsExecSignal: true,\n    getSandboxId,\n    exec,\n    readFile,\n    writeFile,\n    mkdir,\n    listFiles,\n    deleteFile,\n  };\n}\n"],"names":["path","exports"],"mappings":";;AAGA,MAAM,kBAAkB,GAAG,KAAK;AAChC,MAAM,sBAAsB,GAAG,YAAY;AAC3C,MAAM,aAAa,GAAG,MAAM;AA8B5B,SAAS,gBAAgB,CAAC,OAAe,EAAA;IACvC,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACpC;AAEA,SAAS,eAAe,CAAC,MAA0B,EAAA;AACjD,IAAA,MAAM,GAAG,GAAG,MAAM,IAAI,kBAAkB;AACxC,IAAA,MAAM,gBAAgB,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAA,CAAA,EAAI,GAAG,EAAE;IAC9D,OAAO,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AAC7C;AAEA,SAAS,sBAAsB,CAAC,aAAqB,EAAA;IACnD,MAAM,UAAU,GAAGA,KAAI,CAAC,SAAS,CAAC,aAAa,CAAC;AAChD,IAAA,OAAO,UAAU,KAAK,GAAG,GAAG,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACzE;AAEA,SAAS,QAAQ,CAAC,MAAqC,EAAA;IACrD,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK;AAClD,IAAA,OAAO,SAAS,CAAC,IAAI,CAAC,UAAU,CAAiB;AACnD;AAEA,SAAS,KAAK,CAAC,KAAa,EAAA;AAC1B,IAAA,IAAI,KAAK,KAAK,EAAE,EAAE;AAChB,QAAA,OAAO,MAAM;IACf;AACA,IAAA,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;AAC1C,QAAA,OAAO,KAAK;IACd;IACA,OAAO,CAAA,CAAA,EAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA,CAAA,CAAG;AAC/C;AAEA,SAAS,gBAAgB,CAAC,QAAgB,EAAA;AACxC,IAAA,OAAO;AACJ,SAAA,OAAO,CAAC,MAAM,EAAE,EAAE;SAClB,KAAK,CAAC,GAAG;SACT,GAAG,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,IAAI,CAAC;SACtC,IAAI,CAAC,GAAG,CAAC;AACd;AAEA,SAAS,aAAa,CAAC,QAAgB,EAAE,aAAqB,EAAA;AAC5D,IAAA,MAAM,GAAG,GAAG,QAAQ,KAAK,EAAE,GAAG,GAAG,GAAG,QAAQ;AAC5C,IAAA,MAAM,IAAI,GAAG,sBAAsB,CAAC,aAAa,CAAC;AAClD,IAAA,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG;AACjC,UAAEA,KAAI,CAAC,SAAS,CAAC,GAAG;UAClBA,KAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;AAC3B,IAAA,IAAI,IAAI,KAAK,GAAG,EAAE;AAChB,QAAA,OAAO,QAAQ;IACjB;AACA,IAAA,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAA,EAAG,IAAI,CAAA,CAAA,CAAG,CAAC,EAAE;AACxD,QAAA,OAAO,QAAQ;IACjB;AACA,IAAA,MAAM,IAAI,KAAK,CACb,qDAAqD,QAAQ,CAAA,CAAE,CAChE;AACH;AAEA,SAAS,YAAY,CAAC,KAAa,EAAA;IACjC,QAAQ,KAAK;AACb,QAAA,KAAK,GAAG;AACN,YAAA,OAAO,WAAW;AACpB,QAAA,KAAK,GAAG;AACN,YAAA,OAAO,SAAS;AAClB,QAAA,KAAK,GAAG;AACN,YAAA,OAAO,MAAM;AACf,QAAA;AACE,YAAA,OAAO,OAAO;;AAElB;AAEA,SAAS,YAAY,CAAC,KAAa,EAAA;AACjC,IAAA,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;AACtD;AAEA,eAAe,gBAAgB,CAAC,QAAkB,EAAA;AAChD,IAAA,IAAI;AACF,QAAA,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE;IAC9B;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,EAAE;IACX;AACF;AAEA,eAAe,QAAQ,CAAC,QAAkB,EAAE,SAAiB,EAAA;AAC3D,IAAA,IAAI,QAAQ,CAAC,EAAE,EAAE;QACf;IACF;AACA,IAAA,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC;AAC7C,IAAA,MAAM,IAAI,KAAK,CACb,CAAA,0BAAA,EAA6B,SAAS,CAAA,SAAA,EAAY,QAAQ,CAAC,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAC9E;AACH;AAEA,SAAS,aAAa,CACpB,MAAqC,EACrC,KAAmB,EAAA;AAEnB,IAAA,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;AAClC,IAAA,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE;QACjD,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,MAAM,CAAC,MAAM,CAAA,CAAE,CAAC;IACzD;AACA,IAAA,IAAI,MAAM,CAAC,SAAS,IAAI,IAAI,IAAI,MAAM,CAAC,SAAS,KAAK,EAAE,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC;IAC7C;AACA,IAAA,OAAO,OAAO;AAChB;AAEA,SAAS,SAAS,CAAC,GAAwC,EAAA;AACzD,IAAA,IAAI,GAAG,IAAI,IAAI,EAAE;AACf,QAAA,OAAO,EAAE;IACX;AACA,IAAA,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG;AACtB,SAAA,MAAM,CAAC,CAAC,KAAK,KAAgC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI;AAC7D,SAAA,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAA,OAAA,EAAU,GAAG,CAAA,CAAA,EAAI,KAAK,CAAC,KAAK,CAAC,EAAE;SACrD,IAAI,CAAC,IAAI,CAAC;AACf;AAEA,SAAS,cAAc,CACrB,OAAe,EACf,GAAwC,EAAA;AAExC,IAAA,MAAMC,SAAO,GAAG,SAAS,CAAC,GAAG,CAAC;AAC9B,IAAA,OAAOA,SAAO,KAAK,EAAE,GAAG,OAAO,GAAG,CAAA,EAAGA,SAAO,CAAA,EAAA,EAAK,OAAO,EAAE;AAC5D;AAEA,eAAe,qBAAqB,CAClC,MAAkC,EAAA;AAElC,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE;IACjC,MAAM,MAAM,GAAiB,EAAE;IAC/B,IAAI,KAAK,GAAG,CAAC;AACb,IAAA,IAAI;AACF,QAAA,SAAS;YACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC3C,YAAA,IAAI,IAAI;gBAAE;AACV,YAAA,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AAClB,YAAA,KAAK,IAAI,KAAK,CAAC,UAAU;QAC3B;IACF;YAAU;QACR,MAAM,CAAC,WAAW,EAAE;IACtB;AACA,IAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC;AACd,IAAA,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE;AAC1B,QAAA,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC;AACxB,QAAA,MAAM,IAAI,KAAK,CAAC,UAAU;IAC5B;AACA,IAAA,OAAO,KAAK;AACd;AAEA,eAAe,kBAAkB,CAC/B,OAA4C,EAC5C,OAA+B,EAAA;AAE/B,IAAA,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE;AAC/B,QAAA,OAAO,qBAAqB,CAAC,OAAO,CAAC;IACvC;AACA,IAAA,IAAI,OAAO,EAAE,QAAQ,KAAK,QAAQ,EAAE;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC;IACvC;IACA,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,KAAK,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAC7E;AAEA,SAAS,aAAa,CAAC,MAAc,EAAA;IAInC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;IACtC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE;IACnC,MAAM,MAAM,GAAG;AACZ,SAAA,GAAG,CAAC,CAAC,IAAI,KAAI;QACZ,IAAI,KAAK,GAAG,SAAS;QACrB,MAAM,SAAS,GAAa,EAAE;QAC9B,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;AACnC,YAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;AAC7B,gBAAA,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE;YAC5C;AAAO,iBAAA,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AACnC,gBAAA,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;YACxD;QACF;AACA,QAAA,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAC9C,IAAA,CAAC;AACA,SAAA,MAAM,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,KAAK,EAAE,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;AACpE,IAAA,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;AAC9B;AAEA,SAAS,aAAa,CAAC,IAAY,EAAA;AACjC,IAAA,IAAI;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA2B;AACzD,QAAA,OAAO,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,GAAG,MAAM,CAAC,SAAS,GAAG,CAAC;IACpE;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,CAAC;IACV;AACF;AAEA,SAAS,gBAAgB,CAAC,IAAY,EAAA;AACpC,IAAA,IAAI;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB;AACrD,QAAA,OAAO,MAAM,CAAC,KAAK,IAAI,IAAI;IAC7B;AAAE,IAAA,MAAM;AACN,QAAA,OAAO,IAAI;IACb;AACF;AAEM,SAAU,6BAA6B,CAC3C,MAAqC,EAAA;IAErC,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC;IAChD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,cAAc,CAAC;IACxD,MAAM,aAAa,GAAG,sBAAsB,CAC1C,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAC/C;AACD,IAAA,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,aAAa;AAC3C,IAAA,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC;IAClC,IAAI,gBAAgB,GAClB,MAAM,CAAC,SAAS,IAAI,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS;IAE1E,SAAS,SAAS,CAAC,MAAc,EAAA;AAC/B,QAAA,OAAO,GAAG,OAAO,CAAA,EAAG,SAAS,CAAA,EAAG,MAAM,EAAE;IAC1C;AAEA,IAAA,eAAe,YAAY,GAAA;AACzB,QAAA,IAAI,gBAAgB,IAAI,IAAI,EAAE;AAC5B,YAAA,gBAAgB,GAAG,CAAC,YAA4B;gBAC9C,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE;AACtD,oBAAA,MAAM,EAAE,MAAM;AACd,oBAAA,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;AAC/B,iBAAA,CAAC;AACF,gBAAA,MAAM,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBAC1C,MAAM,OAAO,IAAI,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB;AAC1D,gBAAA,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE;AACvD,oBAAA,MAAM,IAAI,KAAK,CACb,wDAAwD,CACzD;gBACH;gBACA,OAAO,OAAO,CAAC,EAAE;YACnB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAc,KAAI;gBAC5B,gBAAgB,GAAG,SAAS;AAC5B,gBAAA,MAAM,KAAK;AACb,YAAA,CAAC,CAAC;QACJ;AACA,QAAA,OAAO,gBAAgB;IACzB;AAEA,IAAA,eAAe,IAAI,CACjB,OAAe,EACf,UAA0C,EAAE,EAAA;AAE5C,QAAA,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE;AACtC,QAAA,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,SAAS,CAAC,CAAA,SAAA,EAAY,aAAa,CAAA,KAAA,CAAO,CAAC,EAC3C;AACE,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE;AAC7B,gBAAA,cAAc,EAAE,kBAAkB;aACnC,CAAC;AACF,YAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;AACnB,gBAAA,IAAI,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;gBAC1D,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,aAAa,EAAE,aAAa,CAAC;gBAC/D,UAAU,EAAE,OAAO,CAAC,OAAO;aAC5B,CAAC;YACF,MAAM,EAAE,OAAO,CAAC,MAAM;AACvB,SAAA,CACF;AACD,QAAA,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;AAChC,QAAA,IAAI,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE;AACzB,YAAA,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE;QACH;AAEA,QAAA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE;QACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE;QACxC,IAAI,MAAM,GAAG,EAAE;QACf,IAAI,MAAM,GAAG,EAAE;QACf,IAAI,MAAM,GAAG,EAAE;AACf,QAAA,IAAI,QAA4B;AAEhC,QAAA,IAAI;AACF,YAAA,SAAS;gBACP,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE;AAC3C,gBAAA,IAAI,IAAI;oBAAE;AACV,gBAAA,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACjD,gBAAA,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;AACpC,gBAAA,MAAM,GAAG,MAAM,CAAC,SAAS;AACzB,gBAAA,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;AACjC,oBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE;wBAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;wBACxC,MAAM,IAAI,OAAO;wBACjB,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,OAAO,CAAC;oBACvC;AAAO,yBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE;wBACnC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;wBACxC,MAAM,IAAI,OAAO;wBACjB,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,OAAO,CAAC;oBACvC;AAAO,yBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE;AACjC,wBAAA,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;oBACtC;AAAO,yBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE;wBAClC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC/C;gBACF;YACF;AACA,YAAA,MAAM,IAAI,OAAO,CAAC,MAAM,EAAE;AAC1B,YAAA,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC;AACpC,YAAA,MAAM,GAAG,MAAM,CAAC,SAAS;AACzB,YAAA,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE;AACjC,gBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE;oBAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxC,MAAM,IAAI,OAAO;oBACjB,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,OAAO,CAAC;gBACvC;AAAO,qBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE;oBACnC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC;oBACxC,MAAM,IAAI,OAAO;oBACjB,OAAO,CAAC,QAAQ,GAAG,QAAQ,EAAE,OAAO,CAAC;gBACvC;AAAO,qBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,MAAM,EAAE;AACjC,oBAAA,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;gBACtC;AAAO,qBAAA,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE;oBAClC,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC/C;YACF;QACF;gBAAU;YACR,MAAM,CAAC,WAAW,EAAE;QACtB;AAEA,QAAA,IAAI,QAAQ,IAAI,IAAI,EAAE;AACpB,YAAA,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE;QACH;QAEA,OAAO;YACL,OAAO,EAAE,QAAQ,KAAK,CAAC;YACvB,QAAQ;YACR,MAAM;YACN,MAAM;YACN,OAAO;SACR;IACH;IAEA,eAAe,QAAQ,CAAC,QAAgB,EAAA;AACtC,QAAA,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE;AACtC,QAAA,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,CAAC;QACnD,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC;AAC3D,QAAA,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,SAAS,CACP,CAAA,SAAA,EAAY,aAAa,CAAA,MAAA,EAAS,gBAAgB,CAAC,YAAY,CAAC,CAAA,CAAE,CACnE,EACD;AACE,YAAA,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC;AAC/B,SAAA,CACF;AACD,QAAA,MAAM,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;QACpC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;IAClD;AAEA,IAAA,eAAe,SAAS,CACtB,QAAgB,EAChB,OAA4C,EAC5C,OAA+B,EAAA;AAE/B,QAAA,MAAM,SAAS,GAAG,MAAM,YAAY,EAAE;AACtC,QAAA,MAAM,aAAa,GAAG,kBAAkB,CAAC,SAAS,CAAC;QACnD,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC3D,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC;AACvD,QAAA,MAAM,QAAQ,GAAG,MAAM,SAAS,CAC9B,SAAS,CACP,CAAA,SAAA,EAAY,aAAa,CAAA,MAAA,EAAS,gBAAgB,CAAC,YAAY,CAAC,CAAA,CAAE,CACnE,EACD;AACE,YAAA,MAAM,EAAE,KAAK;AACb,YAAA,OAAO,EAAE,aAAa,CAAC,MAAM,EAAE;AAC7B,gBAAA,cAAc,EAAE,0BAA0B;aAC3C,CAAC;YACF,IAAI;AACL,SAAA,CACF;AACD,QAAA,MAAM,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;AACrC,QAAA,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD;AAEA,IAAA,eAAe,KAAK,CAClB,QAAgB,EAChB,OAAiC,EAAA;QAEjC,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC3D,MAAM,OAAO,GAAG,CAAA,EAAG,OAAO,EAAE,SAAS,KAAK,IAAI,GAAG,UAAU,GAAG,OAAO,CAAA,IAAA,EAAO,KAAK,CAAC,YAAY,CAAC,CAAA,CAAE;AACjG,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;AAC1D,QAAA,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE;YACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAA,iBAAA,EAAoB,YAAY,CAAA,CAAE,CAAC;QACtE;AACA,QAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE;IACrB;AAEA,IAAA,eAAe,SAAS,CACtB,QAAgB,EAChB,OAA6C,EAAA;QAE7C,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC;AAC3D,QAAA,MAAM,QAAQ,GAAG,OAAO,EAAE,SAAS,KAAK,IAAI,GAAG,EAAE,GAAG,aAAa;AACjE,QAAA,MAAM,YAAY,GAChB,OAAO,EAAE,aAAa,KAAK,IAAI,GAAG,EAAE,GAAG,iCAAiC;AAC1E,QAAA,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC;AACtC,QAAA,MAAM,OAAO,GACX,CAAA,KAAA,EAAQ,UAAU,CAAA,0CAAA,EAA6C,UAAU,CAAA,kBAAA,CAAoB;AAC7F,YAAA,CAAA,KAAA,EAAQ,UAAU,CAAA,aAAA,EAAgB,QAAQ,CAAA,EAAG,YAAY,CAAA,CAAA,CAAG;AAC5D,YAAA,6BAA6B;AAC/B,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;AAC1D,QAAA,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE;YACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAA,qBAAA,EAAwB,YAAY,CAAA,CAAE,CAAC;QAC1E;QACA,OAAO,MAAM,CAAC;aACX,KAAK,CAAC,IAAI;aACV,MAAM,CAAC,OAAO;AACd,aAAA,GAAG,CAAC,CAAC,IAAI,KAAI;AACZ,YAAA,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACzD,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YACzC,OAAO;AACL,gBAAA,IAAI,EAAED,KAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBACjC,YAAY;gBACZ,YAAY,EAAEA,KAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;AACvD,gBAAA,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC;gBAC3B,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC;aACxC;AACH,QAAA,CAAC,CAAC;IACN;IAEA,eAAe,UAAU,CAAC,QAAgB,EAAA;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,CAAA,UAAA,EAAa,KAAK,CAAC,YAAY,CAAC,CAAA,CAAE,EAAE;AAC5D,YAAA,GAAG,EAAE,aAAa;AACnB,SAAA,CAAC;AACF,QAAA,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE;YACzB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAA,sBAAA,EAAyB,YAAY,CAAA,CAAE,CAAC;QAC3E;AACA,QAAA,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE;IACrB;IAEA,OAAO;AACL,QAAA,kBAAkB,EAAE,IAAI;QACxB,YAAY;QACZ,IAAI;QACJ,QAAQ;QACR,SAAS;QACT,KAAK;QACL,SAAS;QACT,UAAU;KACX;AACH;;;;"}
+{"version":3,"file":"CloudflareBridgeRuntime.mjs","names":["path"],"sources":["../../../../src/tools/cloudflare/CloudflareBridgeRuntime.ts"],"sourcesContent":["import { posix as path } from 'path';\nimport type * as t from '@/types';\n\nconst DEFAULT_API_PREFIX = '/v1';\nconst DEFAULT_WORKSPACE_ROOT = '/workspace';\nconst DEFAULT_SHELL = 'bash';\n\nexport type CloudflareBridgeRuntimeConfig = {\n  /** Base URL of a Worker using `bridge()` from `@cloudflare/sandbox/bridge`. */\n  baseURL: string;\n  /** Bearer token stored in the bridge Worker as `SANDBOX_API_KEY`. */\n  apiKey?: string;\n  /** Existing sandbox id. If omitted, the adapter creates one lazily. */\n  sandboxId?: string;\n  /** Bridge API route prefix. Defaults to `/v1`. */\n  apiRoutePrefix?: string;\n  /** Workspace root used for path clamping. Defaults to `/workspace`. */\n  workspaceRoot?: string;\n  /** Optional bridge session id sent as `Session-Id`. */\n  sessionId?: string;\n  /** Shell used to run command strings over the bridge exec endpoint. */\n  shell?: string;\n  /** Optional fetch implementation. Defaults to global `fetch`. */\n  fetch?: typeof fetch;\n};\n\nexport type CloudflareBridgeRuntime = t.CloudflareSandboxRuntime & {\n  getSandboxId(): Promise<string>;\n};\n\ntype BridgeSSEEvent = {\n  event: string;\n  data: string;\n};\n\nfunction normalizeBaseURL(baseURL: string): string {\n  return baseURL.replace(/\\/+$/, '');\n}\n\nfunction normalizePrefix(prefix: string | undefined): string {\n  const raw = prefix ?? DEFAULT_API_PREFIX;\n  const withLeadingSlash = raw.startsWith('/') ? raw : `/${raw}`;\n  return withLeadingSlash.replace(/\\/+$/, '');\n}\n\nfunction normalizeWorkspaceRoot(workspaceRoot: string): string {\n  const normalized = path.normalize(workspaceRoot);\n  return normalized === '/' ? normalized : normalized.replace(/\\/+$/, '');\n}\n\nfunction getFetch(config: CloudflareBridgeRuntimeConfig): typeof fetch {\n  const fetchImpl = config.fetch ?? globalThis.fetch;\n  return fetchImpl.bind(globalThis) as typeof fetch;\n}\n\nfunction quote(value: string): string {\n  if (value === '') {\n    return '\\'\\'';\n  }\n  if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) {\n    return value;\n  }\n  return `'${value.replace(/'/g, '\\'\\\\\\'\\'')}'`;\n}\n\nfunction encodeBridgePath(filePath: string): string {\n  return filePath\n    .replace(/^\\/+/, '')\n    .split('/')\n    .map((part) => encodeURIComponent(part))\n    .join('/');\n}\n\nfunction toSandboxPath(filePath: string, workspaceRoot: string): string {\n  const raw = filePath === '' ? '.' : filePath;\n  const root = normalizeWorkspaceRoot(workspaceRoot);\n  const resolved = raw.startsWith('/')\n    ? path.normalize(raw)\n    : path.resolve(root, raw);\n  if (root === '/') {\n    return resolved;\n  }\n  if (resolved === root || resolved.startsWith(`${root}/`)) {\n    return resolved;\n  }\n  throw new Error(\n    `Path is outside the Cloudflare sandbox workspace: ${filePath}`\n  );\n}\n\nfunction typeFromFind(value: string): t.CloudflareSandboxFileInfo['type'] {\n  switch (value) {\n  case 'd':\n    return 'directory';\n  case 'l':\n    return 'symlink';\n  case 'f':\n    return 'file';\n  default:\n    return 'other';\n  }\n}\n\nfunction decodeBase64(value: string): string {\n  return Buffer.from(value, 'base64').toString('utf8');\n}\n\nasync function readResponseText(response: Response): Promise<string> {\n  try {\n    return await response.text();\n  } catch {\n    return '';\n  }\n}\n\nasync function assertOk(response: Response, operation: string): Promise<void> {\n  if (response.ok) {\n    return;\n  }\n  const text = await readResponseText(response);\n  throw new Error(\n    `Cloudflare sandbox bridge ${operation} failed (${response.status}): ${text}`\n  );\n}\n\nfunction createHeaders(\n  config: CloudflareBridgeRuntimeConfig,\n  extra?: HeadersInit\n): Headers {\n  const headers = new Headers(extra);\n  if (config.apiKey != null && config.apiKey !== '') {\n    headers.set('Authorization', `Bearer ${config.apiKey}`);\n  }\n  if (config.sessionId != null && config.sessionId !== '') {\n    headers.set('Session-Id', config.sessionId);\n  }\n  return headers;\n}\n\nfunction envScript(env?: Record<string, string | undefined>): string {\n  if (env == null) {\n    return '';\n  }\n  return Object.entries(env)\n    .filter((entry): entry is [string, string] => entry[1] != null)\n    .map(([key, value]) => `export ${key}=${quote(value)}`)\n    .join('\\n');\n}\n\nfunction commandWithEnv(\n  command: string,\n  env?: Record<string, string | undefined>\n): string {\n  const exports = envScript(env);\n  return exports === '' ? command : `${exports}\\n${command}`;\n}\n\nasync function collectReadableStream(\n  stream: ReadableStream<Uint8Array>\n): Promise<Uint8Array> {\n  const reader = stream.getReader();\n  const chunks: Uint8Array[] = [];\n  let total = 0;\n  try {\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      chunks.push(value);\n      total += value.byteLength;\n    }\n  } finally {\n    reader.releaseLock();\n  }\n  const bytes = new Uint8Array(total);\n  let offset = 0;\n  for (const chunk of chunks) {\n    bytes.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return bytes;\n}\n\nasync function normalizeWriteBody(\n  content: string | ReadableStream<Uint8Array>,\n  options?: { encoding?: string }\n): Promise<Uint8Array> {\n  if (typeof content !== 'string') {\n    return collectReadableStream(content);\n  }\n  if (options?.encoding === 'base64') {\n    return Buffer.from(content, 'base64');\n  }\n  return Buffer.from(content, options?.encoding === 'utf8' ? 'utf8' : 'utf8');\n}\n\nfunction parseSSEChunk(buffer: string): {\n  events: BridgeSSEEvent[];\n  remainder: string;\n} {\n  const normalized = buffer.replace(/\\r\\n/g, '\\n');\n  const parts = normalized.split('\\n\\n');\n  const remainder = parts.pop() ?? '';\n  const events = parts\n    .map((part) => {\n      let event = 'message';\n      const dataLines: string[] = [];\n      for (const line of part.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event = line.slice('event:'.length).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice('data:'.length).trimStart());\n        }\n      }\n      return { event, data: dataLines.join('\\n') };\n    })\n    .filter((event) => event.data !== '' || event.event !== 'message');\n  return { events, remainder };\n}\n\nfunction parseExitCode(data: string): number {\n  try {\n    const parsed = JSON.parse(data) as { exit_code?: number };\n    return typeof parsed.exit_code === 'number' ? parsed.exit_code : 1;\n  } catch {\n    return 1;\n  }\n}\n\nfunction parseBridgeError(data: string): string {\n  try {\n    const parsed = JSON.parse(data) as { error?: string };\n    return parsed.error ?? data;\n  } catch {\n    return data;\n  }\n}\n\nexport function createCloudflareBridgeRuntime(\n  config: CloudflareBridgeRuntimeConfig\n): CloudflareBridgeRuntime {\n  const baseURL = normalizeBaseURL(config.baseURL);\n  const apiPrefix = normalizePrefix(config.apiRoutePrefix);\n  const workspaceRoot = normalizeWorkspaceRoot(\n    config.workspaceRoot ?? DEFAULT_WORKSPACE_ROOT\n  );\n  const shell = config.shell ?? DEFAULT_SHELL;\n  const fetchImpl = getFetch(config);\n  let sandboxIdPromise: Promise<string> | undefined =\n    config.sandboxId != null ? Promise.resolve(config.sandboxId) : undefined;\n\n  function bridgeURL(suffix: string): string {\n    return `${baseURL}${apiPrefix}${suffix}`;\n  }\n\n  async function getSandboxId(): Promise<string> {\n    if (sandboxIdPromise == null) {\n      sandboxIdPromise = (async (): Promise<string> => {\n        const response = await fetchImpl(bridgeURL('/sandbox'), {\n          method: 'POST',\n          headers: createHeaders(config),\n        });\n        await assertOk(response, 'sandbox create');\n        const payload = (await response.json()) as { id?: string };\n        if (typeof payload.id !== 'string' || payload.id === '') {\n          throw new Error(\n            'Cloudflare sandbox bridge create did not return an id.'\n          );\n        }\n        return payload.id;\n      })().catch((error: unknown) => {\n        sandboxIdPromise = undefined;\n        throw error;\n      });\n    }\n    return sandboxIdPromise;\n  }\n\n  async function exec(\n    command: string,\n    options: t.CloudflareSandboxExecOptions = {}\n  ): Promise<t.CloudflareSandboxExecResult> {\n    const sandboxId = await getSandboxId();\n    const sandboxPathId = encodeURIComponent(sandboxId);\n    const response = await fetchImpl(\n      bridgeURL(`/sandbox/${sandboxPathId}/exec`),\n      {\n        method: 'POST',\n        headers: createHeaders(config, {\n          'Content-Type': 'application/json',\n        }),\n        body: JSON.stringify({\n          argv: [shell, '-lc', commandWithEnv(command, options.env)],\n          cwd: toSandboxPath(options.cwd ?? workspaceRoot, workspaceRoot),\n          timeout_ms: options.timeout,\n        }),\n        signal: options.signal,\n      }\n    );\n    await assertOk(response, 'exec');\n    if (response.body == null) {\n      throw new Error(\n        'Cloudflare sandbox bridge exec response did not include a body.'\n      );\n    }\n\n    const decoder = new TextDecoder();\n    const reader = response.body.getReader();\n    let buffer = '';\n    let stdout = '';\n    let stderr = '';\n    let exitCode: number | undefined;\n\n    try {\n      for (;;) {\n        const { done, value } = await reader.read();\n        if (done) break;\n        buffer += decoder.decode(value, { stream: true });\n        const parsed = parseSSEChunk(buffer);\n        buffer = parsed.remainder;\n        for (const event of parsed.events) {\n          if (event.event === 'stdout') {\n            const decoded = decodeBase64(event.data);\n            stdout += decoded;\n            options.onOutput?.('stdout', decoded);\n          } else if (event.event === 'stderr') {\n            const decoded = decodeBase64(event.data);\n            stderr += decoded;\n            options.onOutput?.('stderr', decoded);\n          } else if (event.event === 'exit') {\n            exitCode = parseExitCode(event.data);\n          } else if (event.event === 'error') {\n            throw new Error(parseBridgeError(event.data));\n          }\n        }\n      }\n      buffer += decoder.decode();\n      const parsed = parseSSEChunk(buffer);\n      buffer = parsed.remainder;\n      for (const event of parsed.events) {\n        if (event.event === 'stdout') {\n          const decoded = decodeBase64(event.data);\n          stdout += decoded;\n          options.onOutput?.('stdout', decoded);\n        } else if (event.event === 'stderr') {\n          const decoded = decodeBase64(event.data);\n          stderr += decoded;\n          options.onOutput?.('stderr', decoded);\n        } else if (event.event === 'exit') {\n          exitCode = parseExitCode(event.data);\n        } else if (event.event === 'error') {\n          throw new Error(parseBridgeError(event.data));\n        }\n      }\n    } finally {\n      reader.releaseLock();\n    }\n\n    if (exitCode == null) {\n      throw new Error(\n        'Cloudflare sandbox bridge exec stream closed before an exit event.'\n      );\n    }\n\n    return {\n      success: exitCode === 0,\n      exitCode,\n      stdout,\n      stderr,\n      command,\n    };\n  }\n\n  async function readFile(filePath: string): Promise<Buffer> {\n    const sandboxId = await getSandboxId();\n    const sandboxPathId = encodeURIComponent(sandboxId);\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const response = await fetchImpl(\n      bridgeURL(\n        `/sandbox/${sandboxPathId}/file/${encodeBridgePath(resolvedPath)}`\n      ),\n      {\n        headers: createHeaders(config),\n      }\n    );\n    await assertOk(response, 'readFile');\n    return Buffer.from(await response.arrayBuffer());\n  }\n\n  async function writeFile(\n    filePath: string,\n    content: string | ReadableStream<Uint8Array>,\n    options?: { encoding?: string }\n  ): Promise<unknown> {\n    const sandboxId = await getSandboxId();\n    const sandboxPathId = encodeURIComponent(sandboxId);\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const body = await normalizeWriteBody(content, options);\n    const response = await fetchImpl(\n      bridgeURL(\n        `/sandbox/${sandboxPathId}/file/${encodeBridgePath(resolvedPath)}`\n      ),\n      {\n        method: 'PUT',\n        headers: createHeaders(config, {\n          'Content-Type': 'application/octet-stream',\n        }),\n        body,\n      }\n    );\n    await assertOk(response, 'writeFile');\n    return response.json().catch(() => ({ ok: true }));\n  }\n\n  async function mkdir(\n    filePath: string,\n    options?: { recursive?: boolean }\n  ): Promise<unknown> {\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const command = `${options?.recursive === true ? 'mkdir -p' : 'mkdir'} -- ${quote(resolvedPath)}`;\n    const result = await exec(command, { cwd: workspaceRoot });\n    if (result.exitCode !== 0) {\n      throw new Error(result.stderr || `mkdir failed for ${resolvedPath}`);\n    }\n    return { ok: true };\n  }\n\n  async function listFiles(\n    filePath: string,\n    options?: t.CloudflareSandboxListFilesOptions\n  ): Promise<t.CloudflareSandboxFileInfo[]> {\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const maxDepth = options?.recursive === true ? '' : '-maxdepth 1';\n    const hiddenFilter =\n      options?.includeHidden === true ? '' : ' \\\\( -name \\'.*\\' -prune \\\\) -o';\n    const quotedPath = quote(resolvedPath);\n    const command =\n      `[ -d ${quotedPath} ] || { printf '%s is not a directory\\\\n' ${quotedPath} >&2; exit 20; }; ` +\n      `find ${quotedPath} -mindepth 1 ${maxDepth}${hiddenFilter} ` +\n      '-printf \\'%y\\\\t%s\\\\t%p\\\\n\\'';\n    const result = await exec(command, { cwd: workspaceRoot });\n    if (result.exitCode !== 0) {\n      throw new Error(result.stderr || `listFiles failed for ${resolvedPath}`);\n    }\n    return result.stdout\n      .split('\\n')\n      .filter(Boolean)\n      .map((line) => {\n        const [rawType, rawSize, ...pathParts] = line.split('\\t');\n        const absolutePath = pathParts.join('\\t');\n        return {\n          name: path.basename(absolutePath),\n          absolutePath,\n          relativePath: path.relative(resolvedPath, absolutePath),\n          type: typeFromFind(rawType),\n          size: Number.parseInt(rawSize, 10) || 0,\n        };\n      });\n  }\n\n  async function deleteFile(filePath: string): Promise<unknown> {\n    const resolvedPath = toSandboxPath(filePath, workspaceRoot);\n    const result = await exec(`rm -rf -- ${quote(resolvedPath)}`, {\n      cwd: workspaceRoot,\n    });\n    if (result.exitCode !== 0) {\n      throw new Error(result.stderr || `deleteFile failed for ${resolvedPath}`);\n    }\n    return { ok: true };\n  }\n\n  return {\n    supportsExecSignal: true,\n    getSandboxId,\n    exec,\n    readFile,\n    writeFile,\n    mkdir,\n    listFiles,\n    deleteFile,\n  };\n}\n"],"mappings":";;AAGA,MAAM,qBAAqB;AAC3B,MAAM,yBAAyB;AAC/B,MAAM,gBAAgB;AA8BtB,SAAS,iBAAiB,SAAyB;CACjD,OAAO,QAAQ,QAAQ,QAAQ,EAAE;AACnC;AAEA,SAAS,gBAAgB,QAAoC;CAC3D,MAAM,MAAM,UAAU;CAEtB,QADyB,IAAI,WAAW,GAAG,IAAI,MAAM,IAAI,MAAA,CACjC,QAAQ,QAAQ,EAAE;AAC5C;AAEA,SAAS,uBAAuB,eAA+B;CAC7D,MAAM,aAAaA,MAAK,UAAU,aAAa;CAC/C,OAAO,eAAe,MAAM,aAAa,WAAW,QAAQ,QAAQ,EAAE;AACxE;AAEA,SAAS,SAAS,QAAqD;CAErE,QADkB,OAAO,SAAS,WAAW,MAAA,CAC5B,KAAK,UAAU;AAClC;AAEA,SAAS,MAAM,OAAuB;CACpC,IAAI,UAAU,IACZ,OAAO;CAET,IAAI,2BAA2B,KAAK,KAAK,GACvC,OAAO;CAET,OAAO,IAAI,MAAM,QAAQ,MAAM,OAAU,EAAE;AAC7C;AAEA,SAAS,iBAAiB,UAA0B;CAClD,OAAO,SACJ,QAAQ,QAAQ,EAAE,CAAC,CACnB,MAAM,GAAG,CAAC,CACV,KAAK,SAAS,mBAAmB,IAAI,CAAC,CAAC,CACvC,KAAK,GAAG;AACb;AAEA,SAAS,cAAc,UAAkB,eAA+B;CACtE,MAAM,MAAM,aAAa,KAAK,MAAM;CACpC,MAAM,OAAO,uBAAuB,aAAa;CACjD,MAAM,WAAW,IAAI,WAAW,GAAG,IAC/BA,MAAK,UAAU,GAAG,IAClBA,MAAK,QAAQ,MAAM,GAAG;CAC1B,IAAI,SAAS,KACX,OAAO;CAET,IAAI,aAAa,QAAQ,SAAS,WAAW,GAAG,KAAK,EAAE,GACrD,OAAO;CAET,MAAM,IAAI,MACR,qDAAqD,UACvD;AACF;AAEA,SAAS,aAAa,OAAoD;CACxE,QAAQ,OAAR;EACA,KAAK,KACH,OAAO;EACT,KAAK,KACH,OAAO;EACT,KAAK,KACH,OAAO;EACT,SACE,OAAO;CACT;AACF;AAEA,SAAS,aAAa,OAAuB;CAC3C,OAAO,OAAO,KAAK,OAAO,QAAQ,CAAC,CAAC,SAAS,MAAM;AACrD;AAEA,eAAe,iBAAiB,UAAqC;CACnE,IAAI;EACF,OAAO,MAAM,SAAS,KAAK;CAC7B,QAAQ;EACN,OAAO;CACT;AACF;AAEA,eAAe,SAAS,UAAoB,WAAkC;CAC5E,IAAI,SAAS,IACX;CAEF,MAAM,OAAO,MAAM,iBAAiB,QAAQ;CAC5C,MAAM,IAAI,MACR,6BAA6B,UAAU,WAAW,SAAS,OAAO,KAAK,MACzE;AACF;AAEA,SAAS,cACP,QACA,OACS;CACT,MAAM,UAAU,IAAI,QAAQ,KAAK;CACjC,IAAI,OAAO,UAAU,QAAQ,OAAO,WAAW,IAC7C,QAAQ,IAAI,iBAAiB,UAAU,OAAO,QAAQ;CAExD,IAAI,OAAO,aAAa,QAAQ,OAAO,cAAc,IACnD,QAAQ,IAAI,cAAc,OAAO,SAAS;CAE5C,OAAO;AACT;AAEA,SAAS,UAAU,KAAkD;CACnE,IAAI,OAAO,MACT,OAAO;CAET,OAAO,OAAO,QAAQ,GAAG,CAAC,CACvB,QAAQ,UAAqC,MAAM,MAAM,IAAI,CAAC,CAC9D,KAAK,CAAC,KAAK,WAAW,UAAU,IAAI,GAAG,MAAM,KAAK,GAAG,CAAC,CACtD,KAAK,IAAI;AACd;AAEA,SAAS,eACP,SACA,KACQ;CACR,MAAM,UAAU,UAAU,GAAG;CAC7B,OAAO,YAAY,KAAK,UAAU,GAAG,QAAQ,IAAI;AACnD;AAEA,eAAe,sBACb,QACqB;CACrB,MAAM,SAAS,OAAO,UAAU;CAChC,MAAM,SAAuB,CAAC;CAC9B,IAAI,QAAQ;CACZ,IAAI;EACF,SAAS;GACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;GAC1C,IAAI,MAAM;GACV,OAAO,KAAK,KAAK;GACjB,SAAS,MAAM;EACjB;CACF,UAAU;EACR,OAAO,YAAY;CACrB;CACA,MAAM,QAAQ,IAAI,WAAW,KAAK;CAClC,IAAI,SAAS;CACb,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,IAAI,OAAO,MAAM;EACvB,UAAU,MAAM;CAClB;CACA,OAAO;AACT;AAEA,eAAe,mBACb,SACA,SACqB;CACrB,IAAI,OAAO,YAAY,UACrB,OAAO,sBAAsB,OAAO;CAEtC,IAAI,SAAS,aAAa,UACxB,OAAO,OAAO,KAAK,SAAS,QAAQ;CAEtC,OAAO,OAAO,KAAK,SAAS,SAAS,aAAa,SAAS,SAAS,MAAM;AAC5E;AAEA,SAAS,cAAc,QAGrB;CAEA,MAAM,QADa,OAAO,QAAQ,SAAS,IACpB,CAAC,CAAC,MAAM,MAAM;CACrC,MAAM,YAAY,MAAM,IAAI,KAAK;CAejC,OAAO;EAAE,QAdM,MACZ,KAAK,SAAS;GACb,IAAI,QAAQ;GACZ,MAAM,YAAsB,CAAC;GAC7B,KAAK,MAAM,QAAQ,KAAK,MAAM,IAAI,GAChC,IAAI,KAAK,WAAW,QAAQ,GAC1B,QAAQ,KAAK,MAAM,CAAe,CAAC,CAAC,KAAK;QACpC,IAAI,KAAK,WAAW,OAAO,GAChC,UAAU,KAAK,KAAK,MAAM,CAAc,CAAC,CAAC,UAAU,CAAC;GAGzD,OAAO;IAAE;IAAO,MAAM,UAAU,KAAK,IAAI;GAAE;EAC7C,CAAC,CAAC,CACD,QAAQ,UAAU,MAAM,SAAS,MAAM,MAAM,UAAU,SAC5C;EAAG;CAAU;AAC7B;AAEA,SAAS,cAAc,MAAsB;CAC3C,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,IAAI;EAC9B,OAAO,OAAO,OAAO,cAAc,WAAW,OAAO,YAAY;CACnE,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAS,iBAAiB,MAAsB;CAC9C,IAAI;EAEF,OADe,KAAK,MAAM,IACd,CAAC,CAAC,SAAS;CACzB,QAAQ;EACN,OAAO;CACT;AACF;AAEA,SAAgB,8BACd,QACyB;CACzB,MAAM,UAAU,iBAAiB,OAAO,OAAO;CAC/C,MAAM,YAAY,gBAAgB,OAAO,cAAc;CACvD,MAAM,gBAAgB,uBACpB,OAAO,iBAAiB,sBAC1B;CACA,MAAM,QAAQ,OAAO,SAAS;CAC9B,MAAM,YAAY,SAAS,MAAM;CACjC,IAAI,mBACF,OAAO,aAAa,OAAO,QAAQ,QAAQ,OAAO,SAAS,IAAI,KAAA;CAEjE,SAAS,UAAU,QAAwB;EACzC,OAAO,GAAG,UAAU,YAAY;CAClC;CAEA,eAAe,eAAgC;EAC7C,IAAI,oBAAoB,MACtB,oBAAoB,YAA6B;GAC/C,MAAM,WAAW,MAAM,UAAU,UAAU,UAAU,GAAG;IACtD,QAAQ;IACR,SAAS,cAAc,MAAM;GAC/B,CAAC;GACD,MAAM,SAAS,UAAU,gBAAgB;GACzC,MAAM,UAAW,MAAM,SAAS,KAAK;GACrC,IAAI,OAAO,QAAQ,OAAO,YAAY,QAAQ,OAAO,IACnD,MAAM,IAAI,MACR,wDACF;GAEF,OAAO,QAAQ;EACjB,EAAA,CAAG,CAAC,CAAC,OAAO,UAAmB;GAC7B,mBAAmB,KAAA;GACnB,MAAM;EACR,CAAC;EAEH,OAAO;CACT;CAEA,eAAe,KACb,SACA,UAA0C,CAAC,GACH;EACxC,MAAM,YAAY,MAAM,aAAa;EAErC,MAAM,WAAW,MAAM,UACrB,UAAU,YAFU,mBAAmB,SAEL,EAAE,MAAM,GAC1C;GACE,QAAQ;GACR,SAAS,cAAc,QAAQ,EAC7B,gBAAgB,mBAClB,CAAC;GACD,MAAM,KAAK,UAAU;IACnB,MAAM;KAAC;KAAO;KAAO,eAAe,SAAS,QAAQ,GAAG;IAAC;IACzD,KAAK,cAAc,QAAQ,OAAO,eAAe,aAAa;IAC9D,YAAY,QAAQ;GACtB,CAAC;GACD,QAAQ,QAAQ;EAClB,CACF;EACA,MAAM,SAAS,UAAU,MAAM;EAC/B,IAAI,SAAS,QAAQ,MACnB,MAAM,IAAI,MACR,iEACF;EAGF,MAAM,UAAU,IAAI,YAAY;EAChC,MAAM,SAAS,SAAS,KAAK,UAAU;EACvC,IAAI,SAAS;EACb,IAAI,SAAS;EACb,IAAI,SAAS;EACb,IAAI;EAEJ,IAAI;GACF,SAAS;IACP,MAAM,EAAE,MAAM,UAAU,MAAM,OAAO,KAAK;IAC1C,IAAI,MAAM;IACV,UAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;IAChD,MAAM,SAAS,cAAc,MAAM;IACnC,SAAS,OAAO;IAChB,KAAK,MAAM,SAAS,OAAO,QACzB,IAAI,MAAM,UAAU,UAAU;KAC5B,MAAM,UAAU,aAAa,MAAM,IAAI;KACvC,UAAU;KACV,QAAQ,WAAW,UAAU,OAAO;IACtC,OAAO,IAAI,MAAM,UAAU,UAAU;KACnC,MAAM,UAAU,aAAa,MAAM,IAAI;KACvC,UAAU;KACV,QAAQ,WAAW,UAAU,OAAO;IACtC,OAAO,IAAI,MAAM,UAAU,QACzB,WAAW,cAAc,MAAM,IAAI;SAC9B,IAAI,MAAM,UAAU,SACzB,MAAM,IAAI,MAAM,iBAAiB,MAAM,IAAI,CAAC;GAGlD;GACA,UAAU,QAAQ,OAAO;GACzB,MAAM,SAAS,cAAc,MAAM;GACnC,SAAS,OAAO;GAChB,KAAK,MAAM,SAAS,OAAO,QACzB,IAAI,MAAM,UAAU,UAAU;IAC5B,MAAM,UAAU,aAAa,MAAM,IAAI;IACvC,UAAU;IACV,QAAQ,WAAW,UAAU,OAAO;GACtC,OAAO,IAAI,MAAM,UAAU,UAAU;IACnC,MAAM,UAAU,aAAa,MAAM,IAAI;IACvC,UAAU;IACV,QAAQ,WAAW,UAAU,OAAO;GACtC,OAAO,IAAI,MAAM,UAAU,QACzB,WAAW,cAAc,MAAM,IAAI;QAC9B,IAAI,MAAM,UAAU,SACzB,MAAM,IAAI,MAAM,iBAAiB,MAAM,IAAI,CAAC;EAGlD,UAAU;GACR,OAAO,YAAY;EACrB;EAEA,IAAI,YAAY,MACd,MAAM,IAAI,MACR,oEACF;EAGF,OAAO;GACL,SAAS,aAAa;GACtB;GACA;GACA;GACA;EACF;CACF;CAEA,eAAe,SAAS,UAAmC;EACzD,MAAM,YAAY,MAAM,aAAa;EAGrC,MAAM,WAAW,MAAM,UACrB,UACE,YAJkB,mBAAmB,SAIb,EAAE,QAAQ,iBAHjB,cAAc,UAAU,aAGqB,CAAC,GACjE,GACA,EACE,SAAS,cAAc,MAAM,EAC/B,CACF;EACA,MAAM,SAAS,UAAU,UAAU;EACnC,OAAO,OAAO,KAAK,MAAM,SAAS,YAAY,CAAC;CACjD;CAEA,eAAe,UACb,UACA,SACA,SACkB;EAClB,MAAM,YAAY,MAAM,aAAa;EACrC,MAAM,gBAAgB,mBAAmB,SAAS;EAClD,MAAM,eAAe,cAAc,UAAU,aAAa;EAC1D,MAAM,OAAO,MAAM,mBAAmB,SAAS,OAAO;EACtD,MAAM,WAAW,MAAM,UACrB,UACE,YAAY,cAAc,QAAQ,iBAAiB,YAAY,GACjE,GACA;GACE,QAAQ;GACR,SAAS,cAAc,QAAQ,EAC7B,gBAAgB,2BAClB,CAAC;GACD;EACF,CACF;EACA,MAAM,SAAS,UAAU,WAAW;EACpC,OAAO,SAAS,KAAK,CAAC,CAAC,aAAa,EAAE,IAAI,KAAK,EAAE;CACnD;CAEA,eAAe,MACb,UACA,SACkB;EAClB,MAAM,eAAe,cAAc,UAAU,aAAa;EAE1D,MAAM,SAAS,MAAM,KAAK,GADP,SAAS,cAAc,OAAO,aAAa,QAAQ,MAAM,MAAM,YAAY,KAC3D,EAAE,KAAK,cAAc,CAAC;EACzD,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,OAAO,UAAU,oBAAoB,cAAc;EAErE,OAAO,EAAE,IAAI,KAAK;CACpB;CAEA,eAAe,UACb,UACA,SACwC;EACxC,MAAM,eAAe,cAAc,UAAU,aAAa;EAC1D,MAAM,WAAW,SAAS,cAAc,OAAO,KAAK;EACpD,MAAM,eACJ,SAAS,kBAAkB,OAAO,KAAK;EACzC,MAAM,aAAa,MAAM,YAAY;EAKrC,MAAM,SAAS,MAAM,KAAK,QAHhB,WAAW,4CAA4C,WAAW,yBAClE,WAAW,eAAe,WAAW,aAAa,6BAEzB,EAAE,KAAK,cAAc,CAAC;EACzD,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,OAAO,UAAU,wBAAwB,cAAc;EAEzE,OAAO,OAAO,OACX,MAAM,IAAI,CAAC,CACX,OAAO,OAAO,CAAC,CACf,KAAK,SAAS;GACb,MAAM,CAAC,SAAS,SAAS,GAAG,aAAa,KAAK,MAAM,GAAI;GACxD,MAAM,eAAe,UAAU,KAAK,GAAI;GACxC,OAAO;IACL,MAAMA,MAAK,SAAS,YAAY;IAChC;IACA,cAAcA,MAAK,SAAS,cAAc,YAAY;IACtD,MAAM,aAAa,OAAO;IAC1B,MAAM,OAAO,SAAS,SAAS,EAAE,KAAK;GACxC;EACF,CAAC;CACL;CAEA,eAAe,WAAW,UAAoC;EAC5D,MAAM,eAAe,cAAc,UAAU,aAAa;EAC1D,MAAM,SAAS,MAAM,KAAK,aAAa,MAAM,YAAY,KAAK,EAC5D,KAAK,cACP,CAAC;EACD,IAAI,OAAO,aAAa,GACtB,MAAM,IAAI,MAAM,OAAO,UAAU,yBAAyB,cAAc;EAE1E,OAAO,EAAE,IAAI,KAAK;CACpB;CAEA,OAAO;EACL,oBAAoB;EACpB;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF"}

package/dist/esm/tools/cloudflare/CloudflareProgrammaticToolCalling.mjs

@@ -1,148 +1,138 @@
-import { tool } from '@langchain/core/tools';
-import { ProgrammaticToolCallingDescription, ProgrammaticToolCallingName, formatCompletedResponse, ProgrammaticToolCallingSchema, normalizeToPythonIdentifier, filterToolsByUsage } from '../ProgrammaticToolCalling.mjs';
-import { BashProgrammaticToolCallingDescription, BashProgrammaticToolCallingSchema, normalizeToBashIdentifier, filterBashToolsByUsage } from '../BashProgrammaticToolCalling.mjs';
-import { Constants } from '../../common/enum.mjs';
-import { getCloudflareWorkspaceRoot, validateCloudflareBashCommand, executeCloudflareCode, resolveCloudflareSandbox } from './CloudflareSandboxExecutionEngine.mjs';
-
-const DEFAULT_TIMEOUT = 60000;
-const MIN_TIMEOUT = 1000;
-const MAX_TIMEOUT = 300000;
-const DEFAULT_MAX_OUTPUT_CHARS = 200000;
+import "../../common/enum.mjs";
+import "../../common/index.mjs";
+import { ProgrammaticToolCallingDescription, ProgrammaticToolCallingName, ProgrammaticToolCallingSchema, filterToolsByUsage, formatCompletedResponse, normalizeToPythonIdentifier } from "../ProgrammaticToolCalling.mjs";
+import { BashProgrammaticToolCallingDescription, BashProgrammaticToolCallingSchema, filterBashToolsByUsage, normalizeToBashIdentifier } from "../BashProgrammaticToolCalling.mjs";
+import { executeCloudflareCode, getCloudflareWorkspaceRoot, resolveCloudflareSandbox, validateCloudflareBashCommand } from "./CloudflareSandboxExecutionEngine.mjs";
+import { tool } from "@langchain/core/tools";
+//#region src/tools/cloudflare/CloudflareProgrammaticToolCalling.ts
+const DEFAULT_TIMEOUT = 6e4;
+const MIN_TIMEOUT = 1e3;
+const MAX_TIMEOUT = 3e5;
+const DEFAULT_MAX_OUTPUT_CHARS = 2e5;
 const NATIVE_TOOL_NAMES = new Set([
-    Constants.READ_FILE,
-    Constants.WRITE_FILE,
-    Constants.EDIT_FILE,
-    Constants.GREP_SEARCH,
-    Constants.GLOB_SEARCH,
-    Constants.LIST_DIRECTORY,
-    Constants.COMPILE_CHECK,
-    Constants.BASH_TOOL,
-    Constants.EXECUTE_CODE,
+	"read_file",
+	"write_file",
+	"edit_file",
+	"grep_search",
+	"glob_search",
+	"list_directory",
+	"compile_check",
+	"bash_tool",
+	"execute_code"
 ]);
 function normalizeTimeout(timeoutMs) {
-    if (timeoutMs == null || !Number.isFinite(timeoutMs)) {
-        return DEFAULT_TIMEOUT;
-    }
-    return Math.max(MIN_TIMEOUT, Math.floor(timeoutMs));
+	if (timeoutMs == null || !Number.isFinite(timeoutMs)) return DEFAULT_TIMEOUT;
+	return Math.max(MIN_TIMEOUT, Math.floor(timeoutMs));
 }
 function formatTimeout(timeoutMs) {
-    return timeoutMs % 1000 === 0
-        ? `${timeoutMs / 1000} seconds`
-        : `${timeoutMs} milliseconds`;
+	return timeoutMs % 1e3 === 0 ? `${timeoutMs / 1e3} seconds` : `${timeoutMs} milliseconds`;
 }
 function createTimeoutSchema(timeoutMs) {
-    const defaultTimeout = normalizeTimeout(timeoutMs);
-    const maxTimeout = Math.max(MAX_TIMEOUT, defaultTimeout);
-    return {
-        type: 'integer',
-        minimum: MIN_TIMEOUT,
-        maximum: maxTimeout,
-        default: defaultTimeout,
-        description: 'Maximum Cloudflare Sandbox execution time in milliseconds. ' +
-            `Default: ${formatTimeout(defaultTimeout)}. Max: ${formatTimeout(maxTimeout)}.`,
-    };
+	const defaultTimeout = normalizeTimeout(timeoutMs);
+	const maxTimeout = Math.max(MAX_TIMEOUT, defaultTimeout);
+	return {
+		type: "integer",
+		minimum: MIN_TIMEOUT,
+		maximum: maxTimeout,
+		default: defaultTimeout,
+		description: `Maximum Cloudflare Sandbox execution time in milliseconds. Default: ${formatTimeout(defaultTimeout)}. Max: ${formatTimeout(maxTimeout)}.`
+	};
 }
 function clampExecutionTimeout(requestedTimeoutMs, configuredTimeoutMs) {
-    const defaultTimeout = normalizeTimeout(configuredTimeoutMs);
-    const maxTimeout = Math.max(MAX_TIMEOUT, defaultTimeout);
-    if (requestedTimeoutMs == null || !Number.isFinite(requestedTimeoutMs)) {
-        return defaultTimeout;
-    }
-    return Math.min(Math.max(MIN_TIMEOUT, Math.floor(requestedTimeoutMs)), maxTimeout);
+	const defaultTimeout = normalizeTimeout(configuredTimeoutMs);
+	const maxTimeout = Math.max(MAX_TIMEOUT, defaultTimeout);
+	if (requestedTimeoutMs == null || !Number.isFinite(requestedTimeoutMs)) return defaultTimeout;
+	return Math.min(Math.max(MIN_TIMEOUT, Math.floor(requestedTimeoutMs)), maxTimeout);
 }
 function quoteShell(value) {
-    if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) {
-        return value;
-    }
-    const escapedQuote = String.raw `'\''`;
-    return `'${value.replace(/'/g, escapedQuote)}'`;
+	if (/^[A-Za-z0-9_/:=.,@%+-]+$/.test(value)) return value;
+	const escapedQuote = String.raw`'\''`;
+	return `'${value.replace(/'/g, escapedQuote)}'`;
 }
 function truncateOutput(value, maxChars = DEFAULT_MAX_OUTPUT_CHARS) {
-    if (value.length <= maxChars) {
-        return value;
-    }
-    const head = Math.floor(maxChars * 0.6);
-    const tail = maxChars - head;
-    const omitted = value.length - maxChars;
-    return `${value.slice(0, head)}\n\n[... ${omitted} characters truncated ...]\n\n${value.slice(value.length - tail)}`;
+	if (value.length <= maxChars) return value;
+	const head = Math.floor(maxChars * .6);
+	const tail = maxChars - head;
+	const omitted = value.length - maxChars;
+	return `${value.slice(0, head)}\n\n[... ${omitted} characters truncated ...]\n\n${value.slice(value.length - tail)}`;
 }
 function withInSandboxTimeout(command, timeoutMs) {
-    const timeoutSeconds = Math.max(1, Math.ceil(timeoutMs / 1000));
-    return `timeout -k 2s ${timeoutSeconds}s ${command}`;
+	return `timeout -k 2s ${Math.max(1, Math.ceil(timeoutMs / 1e3))}s ${command}`;
 }
 function outerTimeoutMs(timeoutMs) {
-    return timeoutMs + 5000;
+	return timeoutMs + 5e3;
 }
 function isInSandboxTimeoutExit(exitCode) {
-    return exitCode === 124 || exitCode === 137;
+	return exitCode === 124 || exitCode === 137;
 }
 async function executeGeneratedCloudflareBash(command, config) {
-    const sandbox = await resolveCloudflareSandbox(config);
-    const workspaceRoot = getCloudflareWorkspaceRoot(config);
-    const shell = config.shell ?? 'bash';
-    const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT;
-    const result = await sandbox.exec(withInSandboxTimeout(`${shell} -lc ${quoteShell(command)}`, timeoutMs), {
-        cwd: workspaceRoot,
-        env: config.env,
-        timeout: outerTimeoutMs(timeoutMs),
-    });
-    const maxOutputChars = config.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;
-    return {
-        stdout: truncateOutput(result.stdout, maxOutputChars),
-        stderr: truncateOutput(result.stderr, maxOutputChars),
-        exitCode: result.exitCode,
-        timedOut: isInSandboxTimeoutExit(result.exitCode),
-    };
+	const sandbox = await resolveCloudflareSandbox(config);
+	const workspaceRoot = getCloudflareWorkspaceRoot(config);
+	const shell = config.shell ?? "bash";
+	const timeoutMs = config.timeoutMs ?? DEFAULT_TIMEOUT;
+	const result = await sandbox.exec(withInSandboxTimeout(`${shell} -lc ${quoteShell(command)}`, timeoutMs), {
+		cwd: workspaceRoot,
+		env: config.env,
+		timeout: outerTimeoutMs(timeoutMs)
+	});
+	const maxOutputChars = config.maxOutputChars ?? DEFAULT_MAX_OUTPUT_CHARS;
+	return {
+		stdout: truncateOutput(result.stdout, maxOutputChars),
+		stderr: truncateOutput(result.stderr, maxOutputChars),
+		exitCode: result.exitCode,
+		timedOut: isInSandboxTimeoutExit(result.exitCode)
+	};
 }
 function createCloudflareProgrammaticToolCallingSchema(config) {
-    return {
-        ...ProgrammaticToolCallingSchema,
-        properties: {
-            ...ProgrammaticToolCallingSchema.properties,
-            timeout: createTimeoutSchema(config.timeoutMs),
-            lang: {
-                type: 'string',
-                enum: ['py', 'python', 'bash', 'sh'],
-                default: 'bash',
-                description: 'Cloudflare Sandbox runtime for orchestration code. Defaults to bash; use py/python for Python orchestration.',
-            },
-        },
-    };
+	return {
+		...ProgrammaticToolCallingSchema,
+		properties: {
+			...ProgrammaticToolCallingSchema.properties,
+			timeout: createTimeoutSchema(config.timeoutMs),
+			lang: {
+				type: "string",
+				enum: [
+					"py",
+					"python",
+					"bash",
+					"sh"
+				],
+				default: "bash",
+				description: "Cloudflare Sandbox runtime for orchestration code. Defaults to bash; use py/python for Python orchestration."
+			}
+		}
+	};
 }
 function createCloudflareBashProgrammaticToolCallingSchema(config) {
-    return {
-        ...BashProgrammaticToolCallingSchema,
-        properties: {
-            ...BashProgrammaticToolCallingSchema.properties,
-            timeout: createTimeoutSchema(config.timeoutMs),
-        },
-    };
+	return {
+		...BashProgrammaticToolCallingSchema,
+		properties: {
+			...BashProgrammaticToolCallingSchema.properties,
+			timeout: createTimeoutSchema(config.timeoutMs)
+		}
+	};
 }
 function resolveRuntime(params) {
-    const raw = params.lang ?? params.runtime ?? params.language ?? 'bash';
-    return raw === 'py' || raw === 'python' ? 'python' : 'bash';
+	const raw = params.lang ?? params.runtime ?? params.language ?? "bash";
+	return raw === "py" || raw === "python" ? "python" : "bash";
 }
 function filterNativeTools(toolDefs, code, runtime) {
-    const nativeDefs = toolDefs.filter((def) => NATIVE_TOOL_NAMES.has(def.name));
-    const filter = runtime === 'bash' ? filterBashToolsByUsage : filterToolsByUsage;
-    return filter(nativeDefs, code);
+	const nativeDefs = toolDefs.filter((def) => NATIVE_TOOL_NAMES.has(def.name));
+	return (runtime === "bash" ? filterBashToolsByUsage : filterToolsByUsage)(nativeDefs, code);
 }
 function indent(code, spaces = 4) {
-    const prefix = ' '.repeat(spaces);
-    return code
-        .split('\n')
-        .map((line) => (line === '' ? line : prefix + line))
-        .join('\n');
+	const prefix = " ".repeat(spaces);
+	return code.split("\n").map((line) => line === "" ? line : prefix + line).join("\n");
 }
 function pythonBoolean(value) {
-    return value === true ? 'True' : 'False';
+	return value === true ? "True" : "False";
 }
 function createPythonNativeToolSource(config, workspaceRoot) {
-    return `
+	return `
 import asyncio, fnmatch, glob, json, os, pathlib, re, shlex, shutil, subprocess, sys, tempfile
 
 WORKSPACE = ${JSON.stringify(workspaceRoot)}
-SHELL = ${JSON.stringify(config.shell ?? 'bash')}
+SHELL = ${JSON.stringify(config.shell ?? "bash")}
 READ_ONLY = ${pythonBoolean(config.readOnly)}
 ALLOW_DANGEROUS_COMMANDS = ${pythonBoolean(config.allowDangerousCommands)}
 DESTRUCTIVE_TARGET = r"(?:/|~|\\$\\{?HOME\\}?|\\.)(?:/?\\.?\\*|/)?"
@@ -452,14 +442,14 @@ glob_module = glob
 `.trim();
 }
 function createNodeNativeToolSource(config, workspaceRoot) {
-    return `
+	return `
 const fs = require("fs");
 const fsp = fs.promises;
 const path = require("path");
 const cp = require("child_process");
 
 const WORKSPACE = ${JSON.stringify(workspaceRoot)};
-const SHELL = ${JSON.stringify(config.shell ?? 'bash')};
+const SHELL = ${JSON.stringify(config.shell ?? "bash")};
 const READ_ONLY = ${JSON.stringify(config.readOnly === true)};
 const ALLOW_DANGEROUS_COMMANDS = ${JSON.stringify(config.allowDangerousCommands === true)};
 const DESTRUCTIVE_TARGET = "(?:\\\\/|~|\\\\$\\\\{?HOME\\\\}?|\\\\.)(?:\\\\/?\\\\.?\\\\*|\\\\/)?";
@@ -882,16 +872,11 @@ main().catch((error) => {
 `.trim();
 }
 function createPythonProgram(userCode, toolDefs, config, workspaceRoot) {
-    const aliases = toolDefs
-        .map((def) => {
-        const pythonName = normalizeToPythonIdentifier(def.name);
-        return NATIVE_TOOL_NAMES.has(def.name) && pythonName !== def.name
-            ? `${pythonName} = globals()[${JSON.stringify(def.name)}]`
-            : '';
-    })
-        .filter(Boolean)
-        .join('\n');
-    return `${createPythonNativeToolSource(config, workspaceRoot)}
+	const aliases = toolDefs.map((def) => {
+		const pythonName = normalizeToPythonIdentifier(def.name);
+		return NATIVE_TOOL_NAMES.has(def.name) && pythonName !== def.name ? `${pythonName} = globals()[${JSON.stringify(def.name)}]` : "";
+	}).filter(Boolean).join("\n");
+	return `${createPythonNativeToolSource(config, workspaceRoot)}
 ${aliases}
 
 async def __lc_user_main__():
@@ -901,94 +886,84 @@ asyncio.run(__lc_user_main__())
 `;
 }
 function createBashProgram(userCode, toolDefs, config, workspaceRoot) {
-    const helper = createNodeNativeToolSource(config, workspaceRoot);
-    const functions = toolDefs
-        .map((def) => {
-        const bashName = normalizeToBashIdentifier(def.name);
-        if (!NATIVE_TOOL_NAMES.has(def.name)) {
-            return '';
-        }
-        return `${bashName}() { node "$__LC_TOOL_HELPER" ${JSON.stringify(def.name)} "$1"; }`;
-    })
-        .filter(Boolean)
-        .join('\n');
-    return `
+	return `
 set -euo pipefail
 command -v node >/dev/null 2>&1 || { echo "Cloudflare programmatic tool calling requires node in the sandbox image." >&2; exit 127; }
 __LC_TOOL_HELPER="$(mktemp /tmp/lc-tools.XXXXXX.js)"
 cat > "$__LC_TOOL_HELPER" <<'JS'
-${helper}
+${createNodeNativeToolSource(config, workspaceRoot)}
 JS
 trap 'rm -f "$__LC_TOOL_HELPER"' EXIT
-${functions}
+${toolDefs.map((def) => {
+		const bashName = normalizeToBashIdentifier(def.name);
+		if (!NATIVE_TOOL_NAMES.has(def.name)) return "";
+		return `${bashName}() { node "$__LC_TOOL_HELPER" ${JSON.stringify(def.name)} "$1"; }`;
+	}).filter(Boolean).join("\n")}
 ${userCode}
 `.trim();
 }
 async function runProgrammatic(args) {
-    const toolCall = (args.config?.toolCall ??
-        {});
-    const toolDefs = toolCall.toolDefs ?? [];
-    const effectiveTools = filterNativeTools(toolDefs, args.params.code, args.runtime);
-    const timeoutMs = clampExecutionTimeout(args.params.timeout, args.cloudflareConfig.timeoutMs);
-    const workspaceRoot = getCloudflareWorkspaceRoot(args.cloudflareConfig);
-    let result;
-    if (args.runtime === 'bash') {
-        await validateCloudflareBashCommand(args.params.code, [], {
-            ...args.cloudflareConfig,
-            timeoutMs,
-        });
-        result = await executeGeneratedCloudflareBash(createBashProgram(args.params.code, effectiveTools, args.cloudflareConfig, workspaceRoot), { ...args.cloudflareConfig, timeoutMs });
-    }
-    else {
-        result = await executeCloudflareCode({
-            lang: 'py',
-            code: createPythonProgram(args.params.code, effectiveTools, args.cloudflareConfig, workspaceRoot),
-        }, { ...args.cloudflareConfig, timeoutMs });
-    }
-    if (result.exitCode !== 0 || result.timedOut) {
-        throw new Error(result.stderr !== ''
-            ? result.stderr
-            : `Cloudflare ${args.runtime} programmatic execution exited with code ${result.exitCode ?? 'unknown'}`);
-    }
-    return formatCompletedResponse({
-        session_id: 'cloudflare-sandbox',
-        stdout: result.stdout,
-        stderr: result.stderr,
-        files: [],
-    });
+	const effectiveTools = filterNativeTools((args.config?.toolCall ?? {}).toolDefs ?? [], args.params.code, args.runtime);
+	const timeoutMs = clampExecutionTimeout(args.params.timeout, args.cloudflareConfig.timeoutMs);
+	const workspaceRoot = getCloudflareWorkspaceRoot(args.cloudflareConfig);
+	let result;
+	if (args.runtime === "bash") {
+		await validateCloudflareBashCommand(args.params.code, [], {
+			...args.cloudflareConfig,
+			timeoutMs
+		});
+		result = await executeGeneratedCloudflareBash(createBashProgram(args.params.code, effectiveTools, args.cloudflareConfig, workspaceRoot), {
+			...args.cloudflareConfig,
+			timeoutMs
+		});
+	} else result = await executeCloudflareCode({
+		lang: "py",
+		code: createPythonProgram(args.params.code, effectiveTools, args.cloudflareConfig, workspaceRoot)
+	}, {
+		...args.cloudflareConfig,
+		timeoutMs
+	});
+	if (result.exitCode !== 0 || result.timedOut) throw new Error(result.stderr !== "" ? result.stderr : `Cloudflare ${args.runtime} programmatic execution exited with code ${result.exitCode ?? "unknown"}`);
+	return formatCompletedResponse({
+		status: "completed",
+		session_id: "cloudflare-sandbox",
+		stdout: result.stdout,
+		stderr: result.stderr,
+		files: []
+	});
 }
 function createCloudflareProgrammaticToolCallingTool(cloudflareConfig) {
-    return tool(async (rawParams, config) => {
-        const params = rawParams;
-        return runProgrammatic({
-            params,
-            config,
-            cloudflareConfig,
-            runtime: resolveRuntime(params),
-        });
-    }, {
-        name: ProgrammaticToolCallingName,
-        description: `${ProgrammaticToolCallingDescription}\n\nCloudflare Sandbox engine: exposes the built-in coding tools inside the sandbox process. Non-coding host tools are not callable from this in-sandbox programmatic runner.`,
-        schema: createCloudflareProgrammaticToolCallingSchema(cloudflareConfig),
-        responseFormat: Constants.CONTENT_AND_ARTIFACT,
-    });
+	return tool(async (rawParams, config) => {
+		const params = rawParams;
+		return runProgrammatic({
+			params,
+			config,
+			cloudflareConfig,
+			runtime: resolveRuntime(params)
+		});
+	}, {
+		name: ProgrammaticToolCallingName,
+		description: `${ProgrammaticToolCallingDescription}\n\nCloudflare Sandbox engine: exposes the built-in coding tools inside the sandbox process. Non-coding host tools are not callable from this in-sandbox programmatic runner.`,
+		schema: createCloudflareProgrammaticToolCallingSchema(cloudflareConfig),
+		responseFormat: "content_and_artifact"
+	});
 }
 function createCloudflareBashProgrammaticToolCallingTool(cloudflareConfig) {
-    return tool(async (rawParams, config) => {
-        const params = rawParams;
-        return runProgrammatic({
-            params,
-            config,
-            cloudflareConfig,
-            runtime: 'bash',
-        });
-    }, {
-        name: Constants.BASH_PROGRAMMATIC_TOOL_CALLING,
-        description: `${BashProgrammaticToolCallingDescription}\n\nCloudflare Sandbox engine: exposes the built-in coding tools as bash functions inside the sandbox process. Non-coding host tools are not callable from this in-sandbox programmatic runner.`,
-        schema: createCloudflareBashProgrammaticToolCallingSchema(cloudflareConfig),
-        responseFormat: Constants.CONTENT_AND_ARTIFACT,
-    });
-}
-
+	return tool(async (rawParams, config) => {
+		return runProgrammatic({
+			params: rawParams,
+			config,
+			cloudflareConfig,
+			runtime: "bash"
+		});
+	}, {
+		name: "run_tools_with_bash",
+		description: `${BashProgrammaticToolCallingDescription}\n\nCloudflare Sandbox engine: exposes the built-in coding tools as bash functions inside the sandbox process. Non-coding host tools are not callable from this in-sandbox programmatic runner.`,
+		schema: createCloudflareBashProgrammaticToolCallingSchema(cloudflareConfig),
+		responseFormat: "content_and_artifact"
+	});
+}
+//#endregion
 export { createCloudflareBashProgrammaticToolCallingTool, createCloudflareProgrammaticToolCallingTool };
-//# sourceMappingURL=CloudflareProgrammaticToolCalling.mjs.map
+
+//# sourceMappingURL=CloudflareProgrammaticToolCalling.mjs.map