@mastra/agentcore 0.0.0 → 0.2.0-alpha.0

package/CHANGELOG.md

@@ -1 +1,25 @@
 # @mastra/agentcore
+
+## 0.2.0-alpha.0
+
+### Minor Changes
+
+- Added AWS Bedrock AgentCore Runtime sandbox support. ([#16642](https://github.com/mastra-ai/mastra/pull/16642))
+
+  You can now run Workspace commands in AWS Bedrock AgentCore Runtime through a sandbox provider.
+
+  ```ts
+  import { AgentCoreRuntimeSandbox } from '@mastra/agentcore';
+
+  const sandbox = new AgentCoreRuntimeSandbox({
+    region: 'us-west-2',
+    agentRuntimeArn: process.env.AGENTCORE_RUNTIME_ARN!,
+  });
+
+  const result = await sandbox.executeCommand('node', ['--version']);
+  ```
+
+### Patch Changes
+
+- Updated dependencies [[`8ace89d`](https://github.com/mastra-ai/mastra/commit/8ace89df77f762e622d3b9f7f65ad7524350d050), [`fa63872`](https://github.com/mastra-ai/mastra/commit/fa6387280954e6b667bec5714b55ba082bc627ff), [`f07b646`](https://github.com/mastra-ai/mastra/commit/f07b64604ab7d25391179790b7fd4823df9e2dff), [`d8838ae`](https://github.com/mastra-ai/mastra/commit/d8838ae80b69780361693d27098f7f6684af12fe), [`40f9297`](https://github.com/mastra-ai/mastra/commit/40f9297003b921c62373d3e8d3a4bda76c9f6de3), [`0f0d1ba`](https://github.com/mastra-ai/mastra/commit/0f0d1ba67bfcb2204e571401662f1eceefc03357), [`8c31bcd`](https://github.com/mastra-ai/mastra/commit/8c31bcdb00e597880d5939b1b7d7566fbe5dacae), [`95b14cd`](https://github.com/mastra-ai/mastra/commit/95b14cdd820e86d97ac05fe568424c513a252e31), [`aa36be2`](https://github.com/mastra-ai/mastra/commit/aa36be23aa513b7dc53cb8ca16b7fab8f20e43ad), [`212c635`](https://github.com/mastra-ai/mastra/commit/212c635203e61d036ab41db8ff86c3893dc795b3), [`d8838ae`](https://github.com/mastra-ai/mastra/commit/d8838ae80b69780361693d27098f7f6684af12fe), [`9aa5a73`](https://github.com/mastra-ai/mastra/commit/9aa5a73e7e110f6e9365eec69364a33d5f03bb56), [`f73c789`](https://github.com/mastra-ai/mastra/commit/f73c789e8ef21561580395d2c410119cab5848c8), [`8bd16da`](https://github.com/mastra-ai/mastra/commit/8bd16da73a4cb874d739373643dbd6a6e7f88684), [`c8630f8`](https://github.com/mastra-ai/mastra/commit/c8630f80d4f40cb5d22e60ab162b618b1907167a), [`47f71dc`](https://github.com/mastra-ai/mastra/commit/47f71dc6fbcbd12d71e21a979e676e20a02bd77d), [`50ceae2`](https://github.com/mastra-ai/mastra/commit/50ceae270878e2f8fb2b2c6c2faab09df0007c8a), [`8cdde58`](https://github.com/mastra-ai/mastra/commit/8cdde5875bbba6702d9df226f2b20232b8d75d6c), [`847ff1e`](https://github.com/mastra-ai/mastra/commit/847ff1e0d94368d94b2e173e4e0908e115568ef3), [`259d409`](https://github.com/mastra-ai/mastra/commit/259d409a514174299dbde1ff5e1121209b3ba850), [`9e16c68`](https://github.com/mastra-ai/mastra/commit/9e16c6818b6485ccb43df28aba6f3a2219d28662), [`cefca33`](https://github.com/mastra-ai/mastra/commit/cefca33ae666e69810c935fedf95a929c173d1d7), [`d00e8c5`](https://github.com/mastra-ai/mastra/commit/d00e8c50daebe5bce5bf2f48bde39c86fc3d2fe4), [`36fa7e2`](https://github.com/mastra-ai/mastra/commit/36fa7e24d14e58a1eb46147097b32f583e5b8775), [`87e9774`](https://github.com/mastra-ai/mastra/commit/87e97741c1e493cd6d62f478eb810b49bda4d57c), [`65a72e7`](https://github.com/mastra-ai/mastra/commit/65a72e70c25eedea8ff985a6624b96be2850236b), [`0f77241`](https://github.com/mastra-ai/mastra/commit/0f7724108806703799a8ba80ad0f09414afd5066), [`92ff509`](https://github.com/mastra-ai/mastra/commit/92ff5098ef8a990438ca038077021a5f7541ec1d), [`3fce5e7`](https://github.com/mastra-ai/mastra/commit/3fce5e70d011d289043e75003ef3336ed4aa43c3), [`a763592`](https://github.com/mastra-ai/mastra/commit/a763592c3db46963ef1011cfe16fe372816e775e), [`80c7737`](https://github.com/mastra-ai/mastra/commit/80c7737e32d7917b5f356957d67c169d01744fd3), [`3f1cf47`](https://github.com/mastra-ai/mastra/commit/3f1cf476f74c1e4cc2df908837e05853a5347e31)]:
+  - @mastra/core@1.38.0-alpha.3

package/LICENSE.md

@@ -0,0 +1,30 @@
+Portions of this software are licensed as follows:
+
+- All content that resides under any directory named "ee/" within this
+  repository, including but not limited to:
+  - `packages/core/src/auth/ee/`
+  - `packages/server/src/server/auth/ee/`
+    is licensed under the license defined in `ee/LICENSE`.
+
+- All third-party components incorporated into the Mastra Software are
+  licensed under the original license provided by the owner of the
+  applicable component.
+
+- Content outside of the above-mentioned directories or restrictions is
+  available under the "Apache License 2.0" as defined below.
+
+# Apache License 2.0
+
+Copyright (c) 2025 Kepler Software, Inc.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.

package/dist/index.cjs

@@ -0,0 +1,331 @@
+'use strict';
+
+var crypto = require('crypto');
+var clientBedrockAgentcore = require('@aws-sdk/client-bedrock-agentcore');
+var workspace = require('@mastra/core/workspace');
+
+// src/sandbox/index.ts
+var LOG_PREFIX = "[AgentCoreRuntimeSandbox]";
+var DEFAULT_COMMAND_TIMEOUT_MS = 3e5;
+var MAX_AGENTCORE_TIMEOUT_SECONDS = 3600;
+var DEFAULT_ACCEPT = "application/vnd.amazon.eventstream";
+var DEFAULT_CONTENT_TYPE = "application/json";
+var CommandOutputAccumulator = class extends workspace.ProcessHandle {
+  pid = "agentcore-command";
+  exitCode;
+  async kill() {
+    return false;
+  }
+  async sendStdin() {
+    throw new Error("AgentCore Runtime command execution does not support stdin");
+  }
+  async wait() {
+    return {
+      success: this.exitCode === 0,
+      exitCode: this.exitCode ?? 1,
+      stdout: this.stdout,
+      stderr: this.stderr,
+      executionTimeMs: 0
+    };
+  }
+};
+function shellQuote(arg) {
+  if (/^[a-zA-Z0-9._\-\/=:@]+$/.test(arg)) return arg;
+  return `'${arg.replace(/'/g, "'\\''")}'`;
+}
+function safeEnvName(name) {
+  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(name);
+}
+function buildCommand(command, args, options) {
+  const baseCommand = args?.length ? `${command} ${args.map((arg) => shellQuote(arg)).join(" ")}` : command;
+  const parts = [];
+  if (options?.cwd) {
+    parts.push(`cd ${shellQuote(options.cwd)}`);
+  }
+  const env = options?.env ?? {};
+  const envAssignments = Object.entries(env).filter((entry) => entry[1] !== void 0).map(([key, value]) => {
+    if (!safeEnvName(key)) {
+      throw new Error(`Invalid environment variable name for AgentCore Runtime command: ${key}`);
+    }
+    return `${key}=${shellQuote(value)}`;
+  });
+  parts.push(`${envAssignments.length ? `${envAssignments.join(" ")} ` : ""}${baseCommand}`);
+  return parts.join(" && ");
+}
+function toAgentCoreTimeoutSeconds(timeoutMs) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new RangeError("AgentCore Runtime command timeout must be a positive number of milliseconds");
+  }
+  const timeoutSeconds = Math.ceil(timeoutMs / 1e3);
+  if (timeoutSeconds > MAX_AGENTCORE_TIMEOUT_SECONDS) {
+    throw new RangeError(`AgentCore Runtime command timeout must be at most ${MAX_AGENTCORE_TIMEOUT_SECONDS} seconds`);
+  }
+  return timeoutSeconds;
+}
+function generateSessionId() {
+  return crypto.randomUUID();
+}
+function getStreamException(event) {
+  const exceptionKeys = [
+    "accessDeniedException",
+    "internalServerException",
+    "resourceNotFoundException",
+    "serviceQuotaExceededException",
+    "throttlingException",
+    "validationException",
+    "runtimeClientError"
+  ];
+  for (const key of exceptionKeys) {
+    const value = event[key];
+    if (value) return { key, value };
+  }
+  if (event.$unknown) {
+    return { key: event.$unknown[0], value: event.$unknown[1] };
+  }
+  return void 0;
+}
+function formatStreamException(key, value) {
+  if (value && typeof value === "object") {
+    const exception = value;
+    const name = exception.name ?? key;
+    return exception.message ? `${name}: ${exception.message}` : name;
+  }
+  return `${key}: ${String(value)}`;
+}
+var AgentCoreRuntimeSandbox = class extends workspace.MastraSandbox {
+  id;
+  name = "AgentCoreRuntimeSandbox";
+  provider = "agentcore";
+  status = "pending";
+  _client;
+  _ownsClient;
+  _region;
+  _agentRuntimeArn;
+  _runtimeSessionId;
+  _qualifier;
+  _contentType;
+  _accept;
+  _commandTimeout;
+  _stopSessionOnLifecycle;
+  _stopClientToken;
+  _instructionsOverride;
+  _createdAt = /* @__PURE__ */ new Date();
+  _lastUsedAt;
+  constructor(options) {
+    super({ ...options, name: "AgentCoreRuntimeSandbox" });
+    if (!options.agentRuntimeArn) {
+      throw new Error(`${LOG_PREFIX} agentRuntimeArn is required`);
+    }
+    this.id = options.runtimeSessionId ?? generateSessionId();
+    this._agentRuntimeArn = options.agentRuntimeArn;
+    this._runtimeSessionId = this.id;
+    this._qualifier = options.qualifier;
+    this._contentType = options.contentType ?? DEFAULT_CONTENT_TYPE;
+    this._accept = options.accept ?? DEFAULT_ACCEPT;
+    this._commandTimeout = options.commandTimeout ?? DEFAULT_COMMAND_TIMEOUT_MS;
+    this._stopSessionOnLifecycle = options.stopSessionOnLifecycle ?? false;
+    this._stopClientToken = options.stopClientToken;
+    this._instructionsOverride = options.instructions;
+    this._client = options.client;
+    this._ownsClient = !options.client;
+    this._region = options.region;
+  }
+  get runtimeSessionId() {
+    return this._runtimeSessionId;
+  }
+  get agentRuntimeArn() {
+    return this._agentRuntimeArn;
+  }
+  async start() {
+    this.logger.debug(`${LOG_PREFIX} Using AgentCore Runtime session ${this._runtimeSessionId}`);
+  }
+  async stop() {
+    if (!this._stopSessionOnLifecycle) return;
+    await this.stopRuntimeSession();
+  }
+  async destroy() {
+    if (this._stopSessionOnLifecycle) {
+      await this.stopRuntimeSession();
+    }
+    if (this._ownsClient && this._client) {
+      this._client.destroy();
+      this._client = void 0;
+    }
+  }
+  /**
+   * Explicitly stops the AgentCore Runtime session used by this sandbox.
+   *
+   * This is separate from destroy() because AgentCore Runtime sessions can be
+   * shared with agent invocations outside the WorkspaceSandbox lifecycle.
+   */
+  async stopRuntimeSession() {
+    await this._getClient().send(
+      new clientBedrockAgentcore.StopRuntimeSessionCommand({
+        agentRuntimeArn: this._agentRuntimeArn,
+        runtimeSessionId: this._runtimeSessionId,
+        qualifier: this._qualifier,
+        clientToken: this._stopClientToken ?? generateSessionId()
+      })
+    );
+  }
+  async executeCommand(command, args, options) {
+    await this.ensureRunning();
+    const fullCommand = buildCommand(command, args, options);
+    const timeoutMs = options?.timeout ?? this._commandTimeout;
+    const timeoutSeconds = toAgentCoreTimeoutSeconds(timeoutMs);
+    const startTime = Date.now();
+    const output = new CommandOutputAccumulator({
+      maxRetainedBytes: options?.maxRetainedBytes ?? Infinity,
+      onStdout: options?.onStdout,
+      onStderr: options?.onStderr
+    });
+    let stopStatus;
+    this.logger.debug(`${LOG_PREFIX} Executing command`, {
+      runtimeSessionId: this._runtimeSessionId,
+      command: fullCommand,
+      timeoutSeconds
+    });
+    const response = await this._getClient().send(
+      new clientBedrockAgentcore.InvokeAgentRuntimeCommandCommand({
+        agentRuntimeArn: this._agentRuntimeArn,
+        runtimeSessionId: this._runtimeSessionId,
+        qualifier: this._qualifier,
+        contentType: this._contentType,
+        accept: this._accept,
+        body: {
+          command: fullCommand,
+          timeout: timeoutSeconds
+        }
+      }),
+      { abortSignal: options?.abortSignal }
+    );
+    for await (const event of response.stream ?? []) {
+      const streamEvent = event;
+      const streamException = getStreamException(streamEvent);
+      if (streamException) {
+        throw new Error(`${LOG_PREFIX} ${formatStreamException(streamException.key, streamException.value)}`);
+      }
+      const chunk = streamEvent.chunk;
+      if (!chunk) continue;
+      if (chunk.contentDelta?.stdout) {
+        output.emitStdout(chunk.contentDelta.stdout);
+      }
+      if (chunk.contentDelta?.stderr) {
+        output.emitStderr(chunk.contentDelta.stderr);
+      }
+      if (chunk.contentStop) {
+        output.exitCode = chunk.contentStop.exitCode ?? 1;
+        stopStatus = chunk.contentStop.status;
+      }
+    }
+    const executionTimeMs = Date.now() - startTime;
+    const exitCode = output.exitCode ?? 1;
+    const timedOut = stopStatus === "TIMED_OUT";
+    const finalExitCode = timedOut ? 124 : exitCode;
+    this._lastUsedAt = /* @__PURE__ */ new Date();
+    return {
+      command: fullCommand,
+      args,
+      success: finalExitCode === 0 && !timedOut,
+      exitCode: finalExitCode,
+      stdout: output.stdout,
+      stderr: output.stderr,
+      executionTimeMs,
+      timedOut,
+      stdoutTruncated: output.stdoutTruncated,
+      stderrTruncated: output.stderrTruncated,
+      stdoutDroppedBytes: output.stdoutDroppedBytes,
+      stderrDroppedBytes: output.stderrDroppedBytes
+    };
+  }
+  getInstructions(opts) {
+    const defaultInstructions = this._getDefaultInstructions();
+    if (this._instructionsOverride === void 0) return defaultInstructions;
+    if (typeof this._instructionsOverride === "string") return this._instructionsOverride;
+    return this._instructionsOverride({ defaultInstructions, requestContext: opts?.requestContext });
+  }
+  async getInfo() {
+    return {
+      id: this.id,
+      name: this.name,
+      provider: this.provider,
+      status: this.status,
+      createdAt: this._createdAt,
+      lastUsedAt: this._lastUsedAt,
+      metadata: {
+        agentRuntimeArn: this._agentRuntimeArn,
+        runtimeSessionId: this._runtimeSessionId,
+        qualifier: this._qualifier ?? "DEFAULT",
+        stopSessionOnLifecycle: this._stopSessionOnLifecycle
+      }
+    };
+  }
+  _getDefaultInstructions() {
+    return [
+      "AWS Bedrock AgentCore Runtime sandbox.",
+      "Commands run inside the configured AgentCore Runtime session container.",
+      "Command output streams from AgentCore Runtime as stdout and stderr.",
+      "Limitations:",
+      "- Commands are one-shot and non-interactive.",
+      "- There is no persistent shell session between commands.",
+      "- Background process management is not exposed by this provider.",
+      "- Filesystem mounts are not exposed by this provider.",
+      "- Developer tools such as git, npm, Python, or Node must exist in the AgentCore container image.",
+      "- AgentCore Code Interpreter is a separate service and is not part of this runtime sandbox."
+    ].join("\n");
+  }
+  _getClient() {
+    if (!this._client) {
+      this._client = new clientBedrockAgentcore.BedrockAgentCoreClient({ region: this._region });
+    }
+    return this._client;
+  }
+};
+
+// src/provider.ts
+var agentCoreRuntimeSandboxProvider = {
+  id: "agentcore",
+  name: "AgentCore Runtime Sandbox",
+  description: "AWS Bedrock AgentCore Runtime command execution sandbox",
+  configSchema: {
+    type: "object",
+    required: ["agentRuntimeArn"],
+    properties: {
+      region: {
+        type: "string",
+        description: "AWS region for Bedrock AgentCore"
+      },
+      agentRuntimeArn: {
+        type: "string",
+        description: "AgentCore Runtime ARN"
+      },
+      runtimeSessionId: {
+        type: "string",
+        description: "Runtime session ID. Defaults to a generated UUID."
+      },
+      qualifier: {
+        type: "string",
+        description: "Agent runtime qualifier/endpoint",
+        default: "DEFAULT"
+      },
+      commandTimeout: {
+        type: "number",
+        description: "Default command timeout in milliseconds. Must be between 1 and 3,600,000.",
+        default: 3e5,
+        minimum: 1,
+        maximum: 36e5
+      },
+      stopSessionOnLifecycle: {
+        type: "boolean",
+        description: "Stop the AgentCore Runtime session during stop()/destroy()",
+        default: false
+      }
+    }
+  },
+  createSandbox: (config) => new AgentCoreRuntimeSandbox(config)
+};
+
+exports.AgentCoreRuntimeSandbox = AgentCoreRuntimeSandbox;
+exports.agentCoreRuntimeSandboxProvider = agentCoreRuntimeSandboxProvider;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox/index.ts","../src/provider.ts"],"names":["ProcessHandle","randomUUID","MastraSandbox","StopRuntimeSessionCommand","InvokeAgentRuntimeCommandCommand","BedrockAgentCoreClient"],"mappings":";;;;;;;AA2BA,IAAM,UAAA,GAAa,2BAAA;AACnB,IAAM,0BAAA,GAA6B,GAAA;AACnC,IAAM,6BAAA,GAAgC,IAAA;AACtC,IAAM,cAAA,GAAiB,oCAAA;AACvB,IAAM,oBAAA,GAAuB,kBAAA;AA+B7B,IAAM,wBAAA,GAAN,cAAuCA,uBAAA,CAAc;AAAA,EAC1C,GAAA,GAAM,mBAAA;AAAA,EACf,QAAA;AAAA,EAEA,MAAM,IAAA,GAAyB;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAA,GAA2B;AAC/B,IAAA,MAAM,IAAI,MAAM,4DAA4D,CAAA;AAAA,EAC9E;AAAA,EAEA,MAAM,IAAA,GAA+B;AACnC,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAK,QAAA,KAAa,CAAA;AAAA,MAC3B,QAAA,EAAU,KAAK,QAAA,IAAY,CAAA;AAAA,MAC3B,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,eAAA,EAAiB;AAAA,KACnB;AAAA,EACF;AACF,CAAA;AAEA,SAAS,WAAW,GAAA,EAAqB;AACvC,EAAA,IAAI,yBAAA,CAA0B,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,GAAA;AAChD,EAAA,OAAO,CAAA,CAAA,EAAI,GAAA,CAAI,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAC,CAAA,CAAA,CAAA;AACvC;AAEA,SAAS,YAAY,IAAA,EAAuB;AAC1C,EAAA,OAAO,0BAAA,CAA2B,KAAK,IAAI,CAAA;AAC7C;AAEA,SAAS,YAAA,CAAa,OAAA,EAAiB,IAAA,EAA4B,OAAA,EAAoD;AACrH,EAAA,MAAM,cAAc,IAAA,EAAM,MAAA,GAAS,CAAA,EAAG,OAAO,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,GAAA,KAAO,UAAA,CAAW,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,GAAK,OAAA;AAChG,EAAA,MAAM,QAAkB,EAAC;AAEzB,EAAA,IAAI,SAAS,GAAA,EAAK;AAChB,IAAA,KAAA,CAAM,KAAK,CAAA,GAAA,EAAM,UAAA,CAAW,OAAA,CAAQ,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EAC5C;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,EAAS,GAAA,IAAO,EAAC;AAC7B,EAAA,MAAM,iBAAiB,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,CACtC,MAAA,CAAO,CAAC,KAAA,KAAqC,KAAA,CAAM,CAAC,CAAA,KAAM,MAAS,CAAA,CACnE,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AACrB,IAAA,IAAI,CAAC,WAAA,CAAY,GAAG,CAAA,EAAG;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iEAAA,EAAoE,GAAG,CAAA,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,UAAA,CAAW,KAAK,CAAC,CAAA,CAAA;AAAA,EACpC,CAAC,CAAA;AAEH,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,cAAA,CAAe,MAAA,GAAS,CAAA,EAAG,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA,GAAM,EAAE,CAAA,EAAG,WAAW,CAAA,CAAE,CAAA;AACzF,EAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAC1B;AAEA,SAAS,0BAA0B,SAAA,EAA2B;AAC5D,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,IAAK,aAAa,CAAA,EAAG;AACjD,IAAA,MAAM,IAAI,WAAW,6EAA6E,CAAA;AAAA,EACpG;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,SAAA,GAAY,GAAI,CAAA;AACjD,EAAA,IAAI,iBAAiB,6BAAA,EAA+B;AAClD,IAAA,MAAM,IAAI,UAAA,CAAW,CAAA,kDAAA,EAAqD,6BAA6B,CAAA,QAAA,CAAU,CAAA;AAAA,EACnH;AAEA,EAAA,OAAO,cAAA;AACT;AAEA,SAAS,iBAAA,GAA4B;AACnC,EAAA,OAAOC,iBAAA,EAAW;AACpB;AAEA,SAAS,mBAAmB,KAAA,EAA0E;AACpG,EAAA,MAAM,aAAA,GAAgB;AAAA,IACpB,uBAAA;AAAA,IACA,yBAAA;AAAA,IACA,2BAAA;AAAA,IACA,+BAAA;AAAA,IACA,qBAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,KAAA,MAAW,OAAO,aAAA,EAAe;AAC/B,IAAA,MAAM,KAAA,GAAQ,MAAM,GAAG,CAAA;AACvB,IAAA,IAAI,KAAA,EAAO,OAAO,EAAE,GAAA,EAAK,KAAA,EAAM;AAAA,EACjC;AAEA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,OAAO,EAAE,GAAA,EAAK,KAAA,CAAM,QAAA,CAAS,CAAC,GAAG,KAAA,EAAO,KAAA,CAAM,QAAA,CAAS,CAAC,CAAA,EAAE;AAAA,EAC5D;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,qBAAA,CAAsB,KAAa,KAAA,EAAwB;AAClE,EAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACtC,IAAA,MAAM,SAAA,GAAY,KAAA;AAClB,IAAA,MAAM,IAAA,GAAO,UAAU,IAAA,IAAQ,GAAA;AAC/B,IAAA,OAAO,UAAU,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,SAAA,CAAU,OAAO,CAAA,CAAA,GAAK,IAAA;AAAA,EAC/D;AAEA,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AACjC;AAwCO,IAAM,uBAAA,GAAN,cAAsCC,uBAAA,CAAc;AAAA,EAChD,EAAA;AAAA,EACA,IAAA,GAAO,yBAAA;AAAA,EACP,QAAA,GAAW,WAAA;AAAA,EACpB,MAAA,GAAyB,SAAA;AAAA,EAEjB,OAAA;AAAA,EACS,WAAA;AAAA,EACA,OAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,OAAA;AAAA,EACA,eAAA;AAAA,EACA,uBAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA,UAAA,uBAAiB,IAAA,EAAK;AAAA,EAC/B,WAAA;AAAA,EAER,YAAY,OAAA,EAAyC;AACnD,IAAA,KAAA,CAAM,EAAE,GAAG,OAAA,EAAS,IAAA,EAAM,2BAA2B,CAAA;AAErD,IAAA,IAAI,CAAC,QAAQ,eAAA,EAAiB;AAC5B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,4BAAA,CAA8B,CAAA;AAAA,IAC7D;AAEA,IAAA,IAAA,CAAK,EAAA,GAAK,OAAA,CAAQ,gBAAA,IAAoB,iBAAA,EAAkB;AACxD,IAAA,IAAA,CAAK,mBAAmB,OAAA,CAAQ,eAAA;AAChC,IAAA,IAAA,CAAK,oBAAoB,IAAA,CAAK,EAAA;AAC9B,IAAA,IAAA,CAAK,aAAa,OAAA,CAAQ,SAAA;AAC1B,IAAA,IAAA,CAAK,YAAA,GAAe,QAAQ,WAAA,IAAe,oBAAA;AAC3C,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,MAAA,IAAU,cAAA;AACjC,IAAA,IAAA,CAAK,eAAA,GAAkB,QAAQ,cAAA,IAAkB,0BAAA;AACjD,IAAA,IAAA,CAAK,uBAAA,GAA0B,QAAQ,sBAAA,IAA0B,KAAA;AACjE,IAAA,IAAA,CAAK,mBAAmB,OAAA,CAAQ,eAAA;AAChC,IAAA,IAAA,CAAK,wBAAwB,OAAA,CAAQ,YAAA;AACrC,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAA;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,CAAC,OAAA,CAAQ,MAAA;AAC5B,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAA;AAAA,EACzB;AAAA,EAEA,IAAI,gBAAA,GAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA,EAEA,IAAI,eAAA,GAA0B;AAC5B,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,OAAO,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,iCAAA,EAAoC,IAAA,CAAK,iBAAiB,CAAA,CAAE,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAI,CAAC,KAAK,uBAAA,EAAyB;AACnC,IAAA,MAAM,KAAK,kBAAA,EAAmB;AAAA,EAChC;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,KAAK,uBAAA,EAAyB;AAChC,MAAA,MAAM,KAAK,kBAAA,EAAmB;AAAA,IAChC;AAEA,IAAA,IAAI,IAAA,CAAK,WAAA,IAAe,IAAA,CAAK,OAAA,EAAS;AACpC,MAAA,IAAA,CAAK,QAAQ,OAAA,EAAQ;AACrB,MAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,IACjB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,kBAAA,GAAoC;AACxC,IAAA,MAAM,IAAA,CAAK,YAAW,CAAE,IAAA;AAAA,MACtB,IAAIC,gDAAA,CAA0B;AAAA,QAC5B,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,WAAW,IAAA,CAAK,UAAA;AAAA,QAChB,WAAA,EAAa,IAAA,CAAK,gBAAA,IAAoB,iBAAA;AAAkB,OACzD;AAAA,KACH;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CAAe,OAAA,EAAiB,IAAA,EAAiB,OAAA,EAAyD;AAC9G,IAAA,MAAM,KAAK,aAAA,EAAc;AAEzB,IAAA,MAAM,WAAA,GAAc,YAAA,CAAa,OAAA,EAAS,IAAA,EAAM,OAAO,CAAA;AACvD,IAAA,MAAM,SAAA,GAAY,OAAA,EAAS,OAAA,IAAW,IAAA,CAAK,eAAA;AAC3C,IAAA,MAAM,cAAA,GAAiB,0BAA0B,SAAS,CAAA;AAC1D,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAC3B,IAAA,MAAM,MAAA,GAAS,IAAI,wBAAA,CAAyB;AAAA,MAC1C,gBAAA,EAAkB,SAAS,gBAAA,IAAoB,QAAA;AAAA,MAC/C,UAAU,OAAA,EAAS,QAAA;AAAA,MACnB,UAAU,OAAA,EAAS;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,UAAA;AAEJ,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,kBAAA,CAAA,EAAsB;AAAA,MACnD,kBAAkB,IAAA,CAAK,iBAAA;AAAA,MACvB,OAAA,EAAS,WAAA;AAAA,MACT;AAAA,KACD,CAAA;AAED,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,EAAW,CAAE,IAAA;AAAA,MACvC,IAAIC,uDAAA,CAAiC;AAAA,QACnC,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,WAAW,IAAA,CAAK,UAAA;AAAA,QAChB,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,QAAQ,IAAA,CAAK,OAAA;AAAA,QACb,IAAA,EAAM;AAAA,UACJ,OAAA,EAAS,WAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX,OACD,CAAA;AAAA,MACD,EAAE,WAAA,EAAa,OAAA,EAAS,WAAA;AAAY,KACtC;AAEA,IAAA,WAAA,MAAiB,KAAA,IAAS,QAAA,CAAS,MAAA,IAAU,EAAC,EAAG;AAC/C,MAAA,MAAM,WAAA,GAAc,KAAA;AACpB,MAAA,MAAM,eAAA,GAAkB,mBAAmB,WAAW,CAAA;AACtD,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,qBAAA,CAAsB,eAAA,CAAgB,GAAA,EAAK,eAAA,CAAgB,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,MACtG;AAEA,MAAA,MAAM,QAAQ,WAAA,CAAY,KAAA;AAC1B,MAAA,IAAI,CAAC,KAAA,EAAO;AAEZ,MAAA,IAAI,KAAA,CAAM,cAAc,MAAA,EAAQ;AAC9B,QAAA,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,YAAA,CAAa,MAAM,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,KAAA,CAAM,cAAc,MAAA,EAAQ;AAC9B,QAAA,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,YAAA,CAAa,MAAM,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,MAAM,WAAA,EAAa;AACrB,QAAA,MAAA,CAAO,QAAA,GAAW,KAAA,CAAM,WAAA,CAAY,QAAA,IAAY,CAAA;AAChD,QAAA,UAAA,GAAa,MAAM,WAAA,CAAY,MAAA;AAAA,MACjC;AAAA,IACF;AAEA,IAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AACrC,IAAA,MAAM,QAAA,GAAW,OAAO,QAAA,IAAY,CAAA;AACpC,IAAA,MAAM,WAAW,UAAA,KAAe,WAAA;AAChC,IAAA,MAAM,aAAA,GAAgB,WAAW,GAAA,GAAM,QAAA;AACvC,IAAA,IAAA,CAAK,WAAA,uBAAkB,IAAA,EAAK;AAE5B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,WAAA;AAAA,MACT,IAAA;AAAA,MACA,OAAA,EAAS,aAAA,KAAkB,CAAA,IAAK,CAAC,QAAA;AAAA,MACjC,QAAA,EAAU,aAAA;AAAA,MACV,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,eAAA;AAAA,MACA,QAAA;AAAA,MACA,iBAAiB,MAAA,CAAO,eAAA;AAAA,MACxB,iBAAiB,MAAA,CAAO,eAAA;AAAA,MACxB,oBAAoB,MAAA,CAAO,kBAAA;AAAA,MAC3B,oBAAoB,MAAA,CAAO;AAAA,KAC7B;AAAA,EACF;AAAA,EAEA,gBAAgB,IAAA,EAAoD;AAClE,IAAA,MAAM,mBAAA,GAAsB,KAAK,uBAAA,EAAwB;AACzD,IAAA,IAAI,IAAA,CAAK,qBAAA,KAA0B,MAAA,EAAW,OAAO,mBAAA;AACrD,IAAA,IAAI,OAAO,IAAA,CAAK,qBAAA,KAA0B,QAAA,SAAiB,IAAA,CAAK,qBAAA;AAChE,IAAA,OAAO,KAAK,qBAAA,CAAsB,EAAE,qBAAqB,cAAA,EAAgB,IAAA,EAAM,gBAAgB,CAAA;AAAA,EACjG;AAAA,EAEA,MAAM,OAAA,GAAgC;AACpC,IAAA,OAAO;AAAA,MACL,IAAI,IAAA,CAAK,EAAA;AAAA,MACT,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,WAAW,IAAA,CAAK,UAAA;AAAA,MAChB,YAAY,IAAA,CAAK,WAAA;AAAA,MACjB,QAAA,EAAU;AAAA,QACR,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,SAAA,EAAW,KAAK,UAAA,IAAc,SAAA;AAAA,QAC9B,wBAAwB,IAAA,CAAK;AAAA;AAC/B,KACF;AAAA,EACF;AAAA,EAEQ,uBAAA,GAAkC;AACxC,IAAA,OAAO;AAAA,MACL,wCAAA;AAAA,MACA,yEAAA;AAAA,MACA,qEAAA;AAAA,MACA,cAAA;AAAA,MACA,8CAAA;AAAA,MACA,0DAAA;AAAA,MACA,kEAAA;AAAA,MACA,uDAAA;AAAA,MACA,kGAAA;AAAA,MACA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,EACb;AAAA,EAEQ,UAAA,GAAqC;AAC3C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,IAAA,CAAK,UAAU,IAAIC,6CAAA,CAAuB,EAAE,MAAA,EAAQ,IAAA,CAAK,SAAS,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AACF;;;AC1YO,IAAM,+BAAA,GAAmF;AAAA,EAC9F,EAAA,EAAI,WAAA;AAAA,EACJ,IAAA,EAAM,2BAAA;AAAA,EACN,WAAA,EAAa,yDAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ,IAAA,EAAM,QAAA;AAAA,IACN,QAAA,EAAU,CAAC,iBAAiB,CAAA;AAAA,IAC5B,UAAA,EAAY;AAAA,MACV,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,eAAA,EAAiB;AAAA,QACf,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,gBAAA,EAAkB;AAAA,QAChB,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,SAAA,EAAW;AAAA,QACT,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa,kCAAA;AAAA,QACb,OAAA,EAAS;AAAA,OACX;AAAA,MACA,cAAA,EAAgB;AAAA,QACd,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa,2EAAA;AAAA,QACb,OAAA,EAAS,GAAA;AAAA,QACT,OAAA,EAAS,CAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACX;AAAA,MACA,sBAAA,EAAwB;AAAA,QACtB,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa,4DAAA;AAAA,QACb,OAAA,EAAS;AAAA;AACX;AACF,GACF;AAAA,EACA,aAAA,EAAe,CAAA,MAAA,KAAU,IAAI,uBAAA,CAAwB,MAAM;AAC7D","file":"index.cjs","sourcesContent":["/**\n * AWS Bedrock AgentCore Runtime sandbox provider.\n *\n * This provider maps Mastra's one-shot command execution contract to\n * InvokeAgentRuntimeCommand. It intentionally does not expose process\n * management or filesystem mounts because AgentCore Runtime command execution\n * does not provide those WorkspaceSandbox semantics.\n *\n * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-execute-command.html\n */\n\nimport { randomUUID } from 'node:crypto';\nimport {\n  BedrockAgentCoreClient,\n  InvokeAgentRuntimeCommandCommand,\n  StopRuntimeSessionCommand,\n} from '@aws-sdk/client-bedrock-agentcore';\nimport type { RequestContext } from '@mastra/core/di';\nimport type {\n  CommandResult,\n  ExecuteCommandOptions,\n  MastraSandboxOptions,\n  ProviderStatus,\n  SandboxInfo,\n} from '@mastra/core/workspace';\nimport { MastraSandbox, ProcessHandle } from '@mastra/core/workspace';\n\nconst LOG_PREFIX = '[AgentCoreRuntimeSandbox]';\nconst DEFAULT_COMMAND_TIMEOUT_MS = 300_000;\nconst MAX_AGENTCORE_TIMEOUT_SECONDS = 3600;\nconst DEFAULT_ACCEPT = 'application/vnd.amazon.eventstream';\nconst DEFAULT_CONTENT_TYPE = 'application/json';\n\ntype AgentCoreRuntimeClient = Pick<BedrockAgentCoreClient, 'send' | 'destroy'>;\ntype InstructionsOption = string | ((opts: { defaultInstructions: string; requestContext?: RequestContext }) => string);\ntype AgentCoreStreamException = {\n  name?: string;\n  message?: string;\n};\n\ntype AgentCoreStreamEvent = {\n  chunk?: {\n    contentStart?: unknown;\n    contentDelta?: {\n      stdout?: string;\n      stderr?: string;\n    };\n    contentStop?: {\n      exitCode?: number;\n      status?: string;\n    };\n  };\n  accessDeniedException?: AgentCoreStreamException;\n  internalServerException?: AgentCoreStreamException;\n  resourceNotFoundException?: AgentCoreStreamException;\n  serviceQuotaExceededException?: AgentCoreStreamException;\n  throttlingException?: AgentCoreStreamException;\n  validationException?: AgentCoreStreamException;\n  runtimeClientError?: AgentCoreStreamException;\n  $unknown?: [string, unknown];\n};\n\nclass CommandOutputAccumulator extends ProcessHandle {\n  readonly pid = 'agentcore-command';\n  exitCode: number | undefined;\n\n  async kill(): Promise<boolean> {\n    return false;\n  }\n\n  async sendStdin(): Promise<void> {\n    throw new Error('AgentCore Runtime command execution does not support stdin');\n  }\n\n  async wait(): Promise<CommandResult> {\n    return {\n      success: this.exitCode === 0,\n      exitCode: this.exitCode ?? 1,\n      stdout: this.stdout,\n      stderr: this.stderr,\n      executionTimeMs: 0,\n    };\n  }\n}\n\nfunction shellQuote(arg: string): string {\n  if (/^[a-zA-Z0-9._\\-\\/=:@]+$/.test(arg)) return arg;\n  return `'${arg.replace(/'/g, \"'\\\\''\")}'`;\n}\n\nfunction safeEnvName(name: string): boolean {\n  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(name);\n}\n\nfunction buildCommand(command: string, args: string[] | undefined, options: ExecuteCommandOptions | undefined): string {\n  const baseCommand = args?.length ? `${command} ${args.map(arg => shellQuote(arg)).join(' ')}` : command;\n  const parts: string[] = [];\n\n  if (options?.cwd) {\n    parts.push(`cd ${shellQuote(options.cwd)}`);\n  }\n\n  const env = options?.env ?? {};\n  const envAssignments = Object.entries(env)\n    .filter((entry): entry is [string, string] => entry[1] !== undefined)\n    .map(([key, value]) => {\n      if (!safeEnvName(key)) {\n        throw new Error(`Invalid environment variable name for AgentCore Runtime command: ${key}`);\n      }\n      return `${key}=${shellQuote(value)}`;\n    });\n\n  parts.push(`${envAssignments.length ? `${envAssignments.join(' ')} ` : ''}${baseCommand}`);\n  return parts.join(' && ');\n}\n\nfunction toAgentCoreTimeoutSeconds(timeoutMs: number): number {\n  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {\n    throw new RangeError('AgentCore Runtime command timeout must be a positive number of milliseconds');\n  }\n\n  const timeoutSeconds = Math.ceil(timeoutMs / 1000);\n  if (timeoutSeconds > MAX_AGENTCORE_TIMEOUT_SECONDS) {\n    throw new RangeError(`AgentCore Runtime command timeout must be at most ${MAX_AGENTCORE_TIMEOUT_SECONDS} seconds`);\n  }\n\n  return timeoutSeconds;\n}\n\nfunction generateSessionId(): string {\n  return randomUUID();\n}\n\nfunction getStreamException(event: AgentCoreStreamEvent): { key: string; value: unknown } | undefined {\n  const exceptionKeys = [\n    'accessDeniedException',\n    'internalServerException',\n    'resourceNotFoundException',\n    'serviceQuotaExceededException',\n    'throttlingException',\n    'validationException',\n    'runtimeClientError',\n  ] as const;\n\n  for (const key of exceptionKeys) {\n    const value = event[key];\n    if (value) return { key, value };\n  }\n\n  if (event.$unknown) {\n    return { key: event.$unknown[0], value: event.$unknown[1] };\n  }\n\n  return undefined;\n}\n\nfunction formatStreamException(key: string, value: unknown): string {\n  if (value && typeof value === 'object') {\n    const exception = value as AgentCoreStreamException;\n    const name = exception.name ?? key;\n    return exception.message ? `${name}: ${exception.message}` : name;\n  }\n\n  return `${key}: ${String(value)}`;\n}\n\n// =============================================================================\n// Options\n// =============================================================================\n\nexport interface AgentCoreRuntimeSandboxOptions extends Omit<MastraSandboxOptions, 'processes'> {\n  /** AWS region for the Bedrock AgentCore client. Falls back to the AWS SDK default region chain. */\n  region?: string;\n  /** AgentCore Runtime ARN where commands should execute. */\n  agentRuntimeArn: string;\n  /** Runtime session ID. Defaults to a generated UUID, which satisfies AgentCore's 33 character minimum. */\n  runtimeSessionId?: string;\n  /** Agent runtime qualifier/endpoint. Defaults to AWS AgentCore's DEFAULT qualifier. */\n  qualifier?: string;\n  /** MIME type sent for command requests. */\n  contentType?: string;\n  /** Accept header for command event streams. */\n  accept?: string;\n  /** Default command timeout in milliseconds. */\n  commandTimeout?: number;\n  /**\n   * Stop the AgentCore Runtime session during stop()/destroy().\n   *\n   * Defaults to false because sessions are often shared with agent invocations\n   * outside the WorkspaceSandbox instance.\n   */\n  stopSessionOnLifecycle?: boolean;\n  /** Client token used for StopRuntimeSession. Defaults to a generated UUID when needed. */\n  stopClientToken?: string;\n  /** Optional preconfigured AWS SDK client, primarily for advanced credential setup and tests. */\n  client?: AgentCoreRuntimeClient;\n  /** Custom instructions for getInstructions(). String replaces the default; function receives it. */\n  instructions?: InstructionsOption;\n}\n\n// =============================================================================\n// Implementation\n// =============================================================================\n\nexport class AgentCoreRuntimeSandbox extends MastraSandbox {\n  readonly id: string;\n  readonly name = 'AgentCoreRuntimeSandbox';\n  readonly provider = 'agentcore';\n  status: ProviderStatus = 'pending';\n\n  private _client?: AgentCoreRuntimeClient;\n  private readonly _ownsClient: boolean;\n  private readonly _region?: string;\n  private readonly _agentRuntimeArn: string;\n  private readonly _runtimeSessionId: string;\n  private readonly _qualifier?: string;\n  private readonly _contentType: string;\n  private readonly _accept: string;\n  private readonly _commandTimeout: number;\n  private readonly _stopSessionOnLifecycle: boolean;\n  private readonly _stopClientToken?: string;\n  private readonly _instructionsOverride?: InstructionsOption;\n  private readonly _createdAt = new Date();\n  private _lastUsedAt?: Date;\n\n  constructor(options: AgentCoreRuntimeSandboxOptions) {\n    super({ ...options, name: 'AgentCoreRuntimeSandbox' });\n\n    if (!options.agentRuntimeArn) {\n      throw new Error(`${LOG_PREFIX} agentRuntimeArn is required`);\n    }\n\n    this.id = options.runtimeSessionId ?? generateSessionId();\n    this._agentRuntimeArn = options.agentRuntimeArn;\n    this._runtimeSessionId = this.id;\n    this._qualifier = options.qualifier;\n    this._contentType = options.contentType ?? DEFAULT_CONTENT_TYPE;\n    this._accept = options.accept ?? DEFAULT_ACCEPT;\n    this._commandTimeout = options.commandTimeout ?? DEFAULT_COMMAND_TIMEOUT_MS;\n    this._stopSessionOnLifecycle = options.stopSessionOnLifecycle ?? false;\n    this._stopClientToken = options.stopClientToken;\n    this._instructionsOverride = options.instructions;\n    this._client = options.client;\n    this._ownsClient = !options.client;\n    this._region = options.region;\n  }\n\n  get runtimeSessionId(): string {\n    return this._runtimeSessionId;\n  }\n\n  get agentRuntimeArn(): string {\n    return this._agentRuntimeArn;\n  }\n\n  async start(): Promise<void> {\n    this.logger.debug(`${LOG_PREFIX} Using AgentCore Runtime session ${this._runtimeSessionId}`);\n  }\n\n  async stop(): Promise<void> {\n    if (!this._stopSessionOnLifecycle) return;\n    await this.stopRuntimeSession();\n  }\n\n  async destroy(): Promise<void> {\n    if (this._stopSessionOnLifecycle) {\n      await this.stopRuntimeSession();\n    }\n\n    if (this._ownsClient && this._client) {\n      this._client.destroy();\n      this._client = undefined;\n    }\n  }\n\n  /**\n   * Explicitly stops the AgentCore Runtime session used by this sandbox.\n   *\n   * This is separate from destroy() because AgentCore Runtime sessions can be\n   * shared with agent invocations outside the WorkspaceSandbox lifecycle.\n   */\n  async stopRuntimeSession(): Promise<void> {\n    await this._getClient().send(\n      new StopRuntimeSessionCommand({\n        agentRuntimeArn: this._agentRuntimeArn,\n        runtimeSessionId: this._runtimeSessionId,\n        qualifier: this._qualifier,\n        clientToken: this._stopClientToken ?? generateSessionId(),\n      }),\n    );\n  }\n\n  async executeCommand(command: string, args?: string[], options?: ExecuteCommandOptions): Promise<CommandResult> {\n    await this.ensureRunning();\n\n    const fullCommand = buildCommand(command, args, options);\n    const timeoutMs = options?.timeout ?? this._commandTimeout;\n    const timeoutSeconds = toAgentCoreTimeoutSeconds(timeoutMs);\n    const startTime = Date.now();\n    const output = new CommandOutputAccumulator({\n      maxRetainedBytes: options?.maxRetainedBytes ?? Infinity,\n      onStdout: options?.onStdout,\n      onStderr: options?.onStderr,\n    });\n    let stopStatus: string | undefined;\n\n    this.logger.debug(`${LOG_PREFIX} Executing command`, {\n      runtimeSessionId: this._runtimeSessionId,\n      command: fullCommand,\n      timeoutSeconds,\n    });\n\n    const response = await this._getClient().send(\n      new InvokeAgentRuntimeCommandCommand({\n        agentRuntimeArn: this._agentRuntimeArn,\n        runtimeSessionId: this._runtimeSessionId,\n        qualifier: this._qualifier,\n        contentType: this._contentType,\n        accept: this._accept,\n        body: {\n          command: fullCommand,\n          timeout: timeoutSeconds,\n        },\n      }),\n      { abortSignal: options?.abortSignal },\n    );\n\n    for await (const event of response.stream ?? []) {\n      const streamEvent = event as AgentCoreStreamEvent;\n      const streamException = getStreamException(streamEvent);\n      if (streamException) {\n        throw new Error(`${LOG_PREFIX} ${formatStreamException(streamException.key, streamException.value)}`);\n      }\n\n      const chunk = streamEvent.chunk;\n      if (!chunk) continue;\n\n      if (chunk.contentDelta?.stdout) {\n        output.emitStdout(chunk.contentDelta.stdout);\n      }\n\n      if (chunk.contentDelta?.stderr) {\n        output.emitStderr(chunk.contentDelta.stderr);\n      }\n\n      if (chunk.contentStop) {\n        output.exitCode = chunk.contentStop.exitCode ?? 1;\n        stopStatus = chunk.contentStop.status;\n      }\n    }\n\n    const executionTimeMs = Date.now() - startTime;\n    const exitCode = output.exitCode ?? 1;\n    const timedOut = stopStatus === 'TIMED_OUT';\n    const finalExitCode = timedOut ? 124 : exitCode;\n    this._lastUsedAt = new Date();\n\n    return {\n      command: fullCommand,\n      args,\n      success: finalExitCode === 0 && !timedOut,\n      exitCode: finalExitCode,\n      stdout: output.stdout,\n      stderr: output.stderr,\n      executionTimeMs,\n      timedOut,\n      stdoutTruncated: output.stdoutTruncated,\n      stderrTruncated: output.stderrTruncated,\n      stdoutDroppedBytes: output.stdoutDroppedBytes,\n      stderrDroppedBytes: output.stderrDroppedBytes,\n    };\n  }\n\n  getInstructions(opts?: { requestContext?: RequestContext }): string {\n    const defaultInstructions = this._getDefaultInstructions();\n    if (this._instructionsOverride === undefined) return defaultInstructions;\n    if (typeof this._instructionsOverride === 'string') return this._instructionsOverride;\n    return this._instructionsOverride({ defaultInstructions, requestContext: opts?.requestContext });\n  }\n\n  async getInfo(): Promise<SandboxInfo> {\n    return {\n      id: this.id,\n      name: this.name,\n      provider: this.provider,\n      status: this.status,\n      createdAt: this._createdAt,\n      lastUsedAt: this._lastUsedAt,\n      metadata: {\n        agentRuntimeArn: this._agentRuntimeArn,\n        runtimeSessionId: this._runtimeSessionId,\n        qualifier: this._qualifier ?? 'DEFAULT',\n        stopSessionOnLifecycle: this._stopSessionOnLifecycle,\n      },\n    };\n  }\n\n  private _getDefaultInstructions(): string {\n    return [\n      'AWS Bedrock AgentCore Runtime sandbox.',\n      'Commands run inside the configured AgentCore Runtime session container.',\n      'Command output streams from AgentCore Runtime as stdout and stderr.',\n      'Limitations:',\n      '- Commands are one-shot and non-interactive.',\n      '- There is no persistent shell session between commands.',\n      '- Background process management is not exposed by this provider.',\n      '- Filesystem mounts are not exposed by this provider.',\n      '- Developer tools such as git, npm, Python, or Node must exist in the AgentCore container image.',\n      '- AgentCore Code Interpreter is a separate service and is not part of this runtime sandbox.',\n    ].join('\\n');\n  }\n\n  private _getClient(): AgentCoreRuntimeClient {\n    if (!this._client) {\n      this._client = new BedrockAgentCoreClient({ region: this._region });\n    }\n    return this._client;\n  }\n}\n","/**\n * AWS Bedrock AgentCore Runtime sandbox provider descriptor.\n *\n * Enables registration with MastraEditor for UI-driven sandbox configuration.\n */\n\nimport type { SandboxProvider } from '@mastra/core/editor';\nimport { AgentCoreRuntimeSandbox } from './sandbox';\n\nexport interface AgentCoreRuntimeProviderConfig {\n  /** AWS region for the Bedrock AgentCore client */\n  region?: string;\n  /** AgentCore Runtime ARN where commands should execute */\n  agentRuntimeArn: string;\n  /** Runtime session ID */\n  runtimeSessionId?: string;\n  /** Agent runtime qualifier/endpoint */\n  qualifier?: string;\n  /** Default command timeout in milliseconds */\n  commandTimeout?: number;\n  /** Stop the runtime session during stop()/destroy() */\n  stopSessionOnLifecycle?: boolean;\n}\n\nexport const agentCoreRuntimeSandboxProvider: SandboxProvider<AgentCoreRuntimeProviderConfig> = {\n  id: 'agentcore',\n  name: 'AgentCore Runtime Sandbox',\n  description: 'AWS Bedrock AgentCore Runtime command execution sandbox',\n  configSchema: {\n    type: 'object',\n    required: ['agentRuntimeArn'],\n    properties: {\n      region: {\n        type: 'string',\n        description: 'AWS region for Bedrock AgentCore',\n      },\n      agentRuntimeArn: {\n        type: 'string',\n        description: 'AgentCore Runtime ARN',\n      },\n      runtimeSessionId: {\n        type: 'string',\n        description: 'Runtime session ID. Defaults to a generated UUID.',\n      },\n      qualifier: {\n        type: 'string',\n        description: 'Agent runtime qualifier/endpoint',\n        default: 'DEFAULT',\n      },\n      commandTimeout: {\n        type: 'number',\n        description: 'Default command timeout in milliseconds. Must be between 1 and 3,600,000.',\n        default: 300_000,\n        minimum: 1,\n        maximum: 3_600_000,\n      },\n      stopSessionOnLifecycle: {\n        type: 'boolean',\n        description: 'Stop the AgentCore Runtime session during stop()/destroy()',\n        default: false,\n      },\n    },\n  },\n  createSandbox: config => new AgentCoreRuntimeSandbox(config),\n};\n"]}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { AgentCoreRuntimeSandbox, type AgentCoreRuntimeSandboxOptions } from './sandbox/index.js';
+export { agentCoreRuntimeSandboxProvider, type AgentCoreRuntimeProviderConfig } from './provider.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,KAAK,8BAA8B,EAAE,MAAM,WAAW,CAAC;AACzF,OAAO,EAAE,+BAA+B,EAAE,KAAK,8BAA8B,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,328 @@
+import { randomUUID } from 'crypto';
+import { StopRuntimeSessionCommand, InvokeAgentRuntimeCommandCommand, BedrockAgentCoreClient } from '@aws-sdk/client-bedrock-agentcore';
+import { MastraSandbox, ProcessHandle } from '@mastra/core/workspace';
+
+// src/sandbox/index.ts
+var LOG_PREFIX = "[AgentCoreRuntimeSandbox]";
+var DEFAULT_COMMAND_TIMEOUT_MS = 3e5;
+var MAX_AGENTCORE_TIMEOUT_SECONDS = 3600;
+var DEFAULT_ACCEPT = "application/vnd.amazon.eventstream";
+var DEFAULT_CONTENT_TYPE = "application/json";
+var CommandOutputAccumulator = class extends ProcessHandle {
+  pid = "agentcore-command";
+  exitCode;
+  async kill() {
+    return false;
+  }
+  async sendStdin() {
+    throw new Error("AgentCore Runtime command execution does not support stdin");
+  }
+  async wait() {
+    return {
+      success: this.exitCode === 0,
+      exitCode: this.exitCode ?? 1,
+      stdout: this.stdout,
+      stderr: this.stderr,
+      executionTimeMs: 0
+    };
+  }
+};
+function shellQuote(arg) {
+  if (/^[a-zA-Z0-9._\-\/=:@]+$/.test(arg)) return arg;
+  return `'${arg.replace(/'/g, "'\\''")}'`;
+}
+function safeEnvName(name) {
+  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(name);
+}
+function buildCommand(command, args, options) {
+  const baseCommand = args?.length ? `${command} ${args.map((arg) => shellQuote(arg)).join(" ")}` : command;
+  const parts = [];
+  if (options?.cwd) {
+    parts.push(`cd ${shellQuote(options.cwd)}`);
+  }
+  const env = options?.env ?? {};
+  const envAssignments = Object.entries(env).filter((entry) => entry[1] !== void 0).map(([key, value]) => {
+    if (!safeEnvName(key)) {
+      throw new Error(`Invalid environment variable name for AgentCore Runtime command: ${key}`);
+    }
+    return `${key}=${shellQuote(value)}`;
+  });
+  parts.push(`${envAssignments.length ? `${envAssignments.join(" ")} ` : ""}${baseCommand}`);
+  return parts.join(" && ");
+}
+function toAgentCoreTimeoutSeconds(timeoutMs) {
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
+    throw new RangeError("AgentCore Runtime command timeout must be a positive number of milliseconds");
+  }
+  const timeoutSeconds = Math.ceil(timeoutMs / 1e3);
+  if (timeoutSeconds > MAX_AGENTCORE_TIMEOUT_SECONDS) {
+    throw new RangeError(`AgentCore Runtime command timeout must be at most ${MAX_AGENTCORE_TIMEOUT_SECONDS} seconds`);
+  }
+  return timeoutSeconds;
+}
+function generateSessionId() {
+  return randomUUID();
+}
+function getStreamException(event) {
+  const exceptionKeys = [
+    "accessDeniedException",
+    "internalServerException",
+    "resourceNotFoundException",
+    "serviceQuotaExceededException",
+    "throttlingException",
+    "validationException",
+    "runtimeClientError"
+  ];
+  for (const key of exceptionKeys) {
+    const value = event[key];
+    if (value) return { key, value };
+  }
+  if (event.$unknown) {
+    return { key: event.$unknown[0], value: event.$unknown[1] };
+  }
+  return void 0;
+}
+function formatStreamException(key, value) {
+  if (value && typeof value === "object") {
+    const exception = value;
+    const name = exception.name ?? key;
+    return exception.message ? `${name}: ${exception.message}` : name;
+  }
+  return `${key}: ${String(value)}`;
+}
+var AgentCoreRuntimeSandbox = class extends MastraSandbox {
+  id;
+  name = "AgentCoreRuntimeSandbox";
+  provider = "agentcore";
+  status = "pending";
+  _client;
+  _ownsClient;
+  _region;
+  _agentRuntimeArn;
+  _runtimeSessionId;
+  _qualifier;
+  _contentType;
+  _accept;
+  _commandTimeout;
+  _stopSessionOnLifecycle;
+  _stopClientToken;
+  _instructionsOverride;
+  _createdAt = /* @__PURE__ */ new Date();
+  _lastUsedAt;
+  constructor(options) {
+    super({ ...options, name: "AgentCoreRuntimeSandbox" });
+    if (!options.agentRuntimeArn) {
+      throw new Error(`${LOG_PREFIX} agentRuntimeArn is required`);
+    }
+    this.id = options.runtimeSessionId ?? generateSessionId();
+    this._agentRuntimeArn = options.agentRuntimeArn;
+    this._runtimeSessionId = this.id;
+    this._qualifier = options.qualifier;
+    this._contentType = options.contentType ?? DEFAULT_CONTENT_TYPE;
+    this._accept = options.accept ?? DEFAULT_ACCEPT;
+    this._commandTimeout = options.commandTimeout ?? DEFAULT_COMMAND_TIMEOUT_MS;
+    this._stopSessionOnLifecycle = options.stopSessionOnLifecycle ?? false;
+    this._stopClientToken = options.stopClientToken;
+    this._instructionsOverride = options.instructions;
+    this._client = options.client;
+    this._ownsClient = !options.client;
+    this._region = options.region;
+  }
+  get runtimeSessionId() {
+    return this._runtimeSessionId;
+  }
+  get agentRuntimeArn() {
+    return this._agentRuntimeArn;
+  }
+  async start() {
+    this.logger.debug(`${LOG_PREFIX} Using AgentCore Runtime session ${this._runtimeSessionId}`);
+  }
+  async stop() {
+    if (!this._stopSessionOnLifecycle) return;
+    await this.stopRuntimeSession();
+  }
+  async destroy() {
+    if (this._stopSessionOnLifecycle) {
+      await this.stopRuntimeSession();
+    }
+    if (this._ownsClient && this._client) {
+      this._client.destroy();
+      this._client = void 0;
+    }
+  }
+  /**
+   * Explicitly stops the AgentCore Runtime session used by this sandbox.
+   *
+   * This is separate from destroy() because AgentCore Runtime sessions can be
+   * shared with agent invocations outside the WorkspaceSandbox lifecycle.
+   */
+  async stopRuntimeSession() {
+    await this._getClient().send(
+      new StopRuntimeSessionCommand({
+        agentRuntimeArn: this._agentRuntimeArn,
+        runtimeSessionId: this._runtimeSessionId,
+        qualifier: this._qualifier,
+        clientToken: this._stopClientToken ?? generateSessionId()
+      })
+    );
+  }
+  async executeCommand(command, args, options) {
+    await this.ensureRunning();
+    const fullCommand = buildCommand(command, args, options);
+    const timeoutMs = options?.timeout ?? this._commandTimeout;
+    const timeoutSeconds = toAgentCoreTimeoutSeconds(timeoutMs);
+    const startTime = Date.now();
+    const output = new CommandOutputAccumulator({
+      maxRetainedBytes: options?.maxRetainedBytes ?? Infinity,
+      onStdout: options?.onStdout,
+      onStderr: options?.onStderr
+    });
+    let stopStatus;
+    this.logger.debug(`${LOG_PREFIX} Executing command`, {
+      runtimeSessionId: this._runtimeSessionId,
+      command: fullCommand,
+      timeoutSeconds
+    });
+    const response = await this._getClient().send(
+      new InvokeAgentRuntimeCommandCommand({
+        agentRuntimeArn: this._agentRuntimeArn,
+        runtimeSessionId: this._runtimeSessionId,
+        qualifier: this._qualifier,
+        contentType: this._contentType,
+        accept: this._accept,
+        body: {
+          command: fullCommand,
+          timeout: timeoutSeconds
+        }
+      }),
+      { abortSignal: options?.abortSignal }
+    );
+    for await (const event of response.stream ?? []) {
+      const streamEvent = event;
+      const streamException = getStreamException(streamEvent);
+      if (streamException) {
+        throw new Error(`${LOG_PREFIX} ${formatStreamException(streamException.key, streamException.value)}`);
+      }
+      const chunk = streamEvent.chunk;
+      if (!chunk) continue;
+      if (chunk.contentDelta?.stdout) {
+        output.emitStdout(chunk.contentDelta.stdout);
+      }
+      if (chunk.contentDelta?.stderr) {
+        output.emitStderr(chunk.contentDelta.stderr);
+      }
+      if (chunk.contentStop) {
+        output.exitCode = chunk.contentStop.exitCode ?? 1;
+        stopStatus = chunk.contentStop.status;
+      }
+    }
+    const executionTimeMs = Date.now() - startTime;
+    const exitCode = output.exitCode ?? 1;
+    const timedOut = stopStatus === "TIMED_OUT";
+    const finalExitCode = timedOut ? 124 : exitCode;
+    this._lastUsedAt = /* @__PURE__ */ new Date();
+    return {
+      command: fullCommand,
+      args,
+      success: finalExitCode === 0 && !timedOut,
+      exitCode: finalExitCode,
+      stdout: output.stdout,
+      stderr: output.stderr,
+      executionTimeMs,
+      timedOut,
+      stdoutTruncated: output.stdoutTruncated,
+      stderrTruncated: output.stderrTruncated,
+      stdoutDroppedBytes: output.stdoutDroppedBytes,
+      stderrDroppedBytes: output.stderrDroppedBytes
+    };
+  }
+  getInstructions(opts) {
+    const defaultInstructions = this._getDefaultInstructions();
+    if (this._instructionsOverride === void 0) return defaultInstructions;
+    if (typeof this._instructionsOverride === "string") return this._instructionsOverride;
+    return this._instructionsOverride({ defaultInstructions, requestContext: opts?.requestContext });
+  }
+  async getInfo() {
+    return {
+      id: this.id,
+      name: this.name,
+      provider: this.provider,
+      status: this.status,
+      createdAt: this._createdAt,
+      lastUsedAt: this._lastUsedAt,
+      metadata: {
+        agentRuntimeArn: this._agentRuntimeArn,
+        runtimeSessionId: this._runtimeSessionId,
+        qualifier: this._qualifier ?? "DEFAULT",
+        stopSessionOnLifecycle: this._stopSessionOnLifecycle
+      }
+    };
+  }
+  _getDefaultInstructions() {
+    return [
+      "AWS Bedrock AgentCore Runtime sandbox.",
+      "Commands run inside the configured AgentCore Runtime session container.",
+      "Command output streams from AgentCore Runtime as stdout and stderr.",
+      "Limitations:",
+      "- Commands are one-shot and non-interactive.",
+      "- There is no persistent shell session between commands.",
+      "- Background process management is not exposed by this provider.",
+      "- Filesystem mounts are not exposed by this provider.",
+      "- Developer tools such as git, npm, Python, or Node must exist in the AgentCore container image.",
+      "- AgentCore Code Interpreter is a separate service and is not part of this runtime sandbox."
+    ].join("\n");
+  }
+  _getClient() {
+    if (!this._client) {
+      this._client = new BedrockAgentCoreClient({ region: this._region });
+    }
+    return this._client;
+  }
+};
+
+// src/provider.ts
+var agentCoreRuntimeSandboxProvider = {
+  id: "agentcore",
+  name: "AgentCore Runtime Sandbox",
+  description: "AWS Bedrock AgentCore Runtime command execution sandbox",
+  configSchema: {
+    type: "object",
+    required: ["agentRuntimeArn"],
+    properties: {
+      region: {
+        type: "string",
+        description: "AWS region for Bedrock AgentCore"
+      },
+      agentRuntimeArn: {
+        type: "string",
+        description: "AgentCore Runtime ARN"
+      },
+      runtimeSessionId: {
+        type: "string",
+        description: "Runtime session ID. Defaults to a generated UUID."
+      },
+      qualifier: {
+        type: "string",
+        description: "Agent runtime qualifier/endpoint",
+        default: "DEFAULT"
+      },
+      commandTimeout: {
+        type: "number",
+        description: "Default command timeout in milliseconds. Must be between 1 and 3,600,000.",
+        default: 3e5,
+        minimum: 1,
+        maximum: 36e5
+      },
+      stopSessionOnLifecycle: {
+        type: "boolean",
+        description: "Stop the AgentCore Runtime session during stop()/destroy()",
+        default: false
+      }
+    }
+  },
+  createSandbox: (config) => new AgentCoreRuntimeSandbox(config)
+};
+
+export { AgentCoreRuntimeSandbox, agentCoreRuntimeSandboxProvider };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sandbox/index.ts","../src/provider.ts"],"names":[],"mappings":";;;;;AA2BA,IAAM,UAAA,GAAa,2BAAA;AACnB,IAAM,0BAAA,GAA6B,GAAA;AACnC,IAAM,6BAAA,GAAgC,IAAA;AACtC,IAAM,cAAA,GAAiB,oCAAA;AACvB,IAAM,oBAAA,GAAuB,kBAAA;AA+B7B,IAAM,wBAAA,GAAN,cAAuC,aAAA,CAAc;AAAA,EAC1C,GAAA,GAAM,mBAAA;AAAA,EACf,QAAA;AAAA,EAEA,MAAM,IAAA,GAAyB;AAC7B,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAA,GAA2B;AAC/B,IAAA,MAAM,IAAI,MAAM,4DAA4D,CAAA;AAAA,EAC9E;AAAA,EAEA,MAAM,IAAA,GAA+B;AACnC,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAK,QAAA,KAAa,CAAA;AAAA,MAC3B,QAAA,EAAU,KAAK,QAAA,IAAY,CAAA;AAAA,MAC3B,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,eAAA,EAAiB;AAAA,KACnB;AAAA,EACF;AACF,CAAA;AAEA,SAAS,WAAW,GAAA,EAAqB;AACvC,EAAA,IAAI,yBAAA,CAA0B,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,GAAA;AAChD,EAAA,OAAO,CAAA,CAAA,EAAI,GAAA,CAAI,OAAA,CAAQ,IAAA,EAAM,OAAO,CAAC,CAAA,CAAA,CAAA;AACvC;AAEA,SAAS,YAAY,IAAA,EAAuB;AAC1C,EAAA,OAAO,0BAAA,CAA2B,KAAK,IAAI,CAAA;AAC7C;AAEA,SAAS,YAAA,CAAa,OAAA,EAAiB,IAAA,EAA4B,OAAA,EAAoD;AACrH,EAAA,MAAM,cAAc,IAAA,EAAM,MAAA,GAAS,CAAA,EAAG,OAAO,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,GAAA,KAAO,UAAA,CAAW,GAAG,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,GAAK,OAAA;AAChG,EAAA,MAAM,QAAkB,EAAC;AAEzB,EAAA,IAAI,SAAS,GAAA,EAAK;AAChB,IAAA,KAAA,CAAM,KAAK,CAAA,GAAA,EAAM,UAAA,CAAW,OAAA,CAAQ,GAAG,CAAC,CAAA,CAAE,CAAA;AAAA,EAC5C;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,EAAS,GAAA,IAAO,EAAC;AAC7B,EAAA,MAAM,iBAAiB,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,CACtC,MAAA,CAAO,CAAC,KAAA,KAAqC,KAAA,CAAM,CAAC,CAAA,KAAM,MAAS,CAAA,CACnE,GAAA,CAAI,CAAC,CAAC,GAAA,EAAK,KAAK,CAAA,KAAM;AACrB,IAAA,IAAI,CAAC,WAAA,CAAY,GAAG,CAAA,EAAG;AACrB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,iEAAA,EAAoE,GAAG,CAAA,CAAE,CAAA;AAAA,IAC3F;AACA,IAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,UAAA,CAAW,KAAK,CAAC,CAAA,CAAA;AAAA,EACpC,CAAC,CAAA;AAEH,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,EAAG,cAAA,CAAe,MAAA,GAAS,CAAA,EAAG,cAAA,CAAe,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA,GAAM,EAAE,CAAA,EAAG,WAAW,CAAA,CAAE,CAAA;AACzF,EAAA,OAAO,KAAA,CAAM,KAAK,MAAM,CAAA;AAC1B;AAEA,SAAS,0BAA0B,SAAA,EAA2B;AAC5D,EAAA,IAAI,CAAC,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,IAAK,aAAa,CAAA,EAAG;AACjD,IAAA,MAAM,IAAI,WAAW,6EAA6E,CAAA;AAAA,EACpG;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAA,CAAK,IAAA,CAAK,SAAA,GAAY,GAAI,CAAA;AACjD,EAAA,IAAI,iBAAiB,6BAAA,EAA+B;AAClD,IAAA,MAAM,IAAI,UAAA,CAAW,CAAA,kDAAA,EAAqD,6BAA6B,CAAA,QAAA,CAAU,CAAA;AAAA,EACnH;AAEA,EAAA,OAAO,cAAA;AACT;AAEA,SAAS,iBAAA,GAA4B;AACnC,EAAA,OAAO,UAAA,EAAW;AACpB;AAEA,SAAS,mBAAmB,KAAA,EAA0E;AACpG,EAAA,MAAM,aAAA,GAAgB;AAAA,IACpB,uBAAA;AAAA,IACA,yBAAA;AAAA,IACA,2BAAA;AAAA,IACA,+BAAA;AAAA,IACA,qBAAA;AAAA,IACA,qBAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,KAAA,MAAW,OAAO,aAAA,EAAe;AAC/B,IAAA,MAAM,KAAA,GAAQ,MAAM,GAAG,CAAA;AACvB,IAAA,IAAI,KAAA,EAAO,OAAO,EAAE,GAAA,EAAK,KAAA,EAAM;AAAA,EACjC;AAEA,EAAA,IAAI,MAAM,QAAA,EAAU;AAClB,IAAA,OAAO,EAAE,GAAA,EAAK,KAAA,CAAM,QAAA,CAAS,CAAC,GAAG,KAAA,EAAO,KAAA,CAAM,QAAA,CAAS,CAAC,CAAA,EAAE;AAAA,EAC5D;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,SAAS,qBAAA,CAAsB,KAAa,KAAA,EAAwB;AAClE,EAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACtC,IAAA,MAAM,SAAA,GAAY,KAAA;AAClB,IAAA,MAAM,IAAA,GAAO,UAAU,IAAA,IAAQ,GAAA;AAC/B,IAAA,OAAO,UAAU,OAAA,GAAU,CAAA,EAAG,IAAI,CAAA,EAAA,EAAK,SAAA,CAAU,OAAO,CAAA,CAAA,GAAK,IAAA;AAAA,EAC/D;AAEA,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAA,EAAK,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AACjC;AAwCO,IAAM,uBAAA,GAAN,cAAsC,aAAA,CAAc;AAAA,EAChD,EAAA;AAAA,EACA,IAAA,GAAO,yBAAA;AAAA,EACP,QAAA,GAAW,WAAA;AAAA,EACpB,MAAA,GAAyB,SAAA;AAAA,EAEjB,OAAA;AAAA,EACS,WAAA;AAAA,EACA,OAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,UAAA;AAAA,EACA,YAAA;AAAA,EACA,OAAA;AAAA,EACA,eAAA;AAAA,EACA,uBAAA;AAAA,EACA,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA,UAAA,uBAAiB,IAAA,EAAK;AAAA,EAC/B,WAAA;AAAA,EAER,YAAY,OAAA,EAAyC;AACnD,IAAA,KAAA,CAAM,EAAE,GAAG,OAAA,EAAS,IAAA,EAAM,2BAA2B,CAAA;AAErD,IAAA,IAAI,CAAC,QAAQ,eAAA,EAAiB;AAC5B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,4BAAA,CAA8B,CAAA;AAAA,IAC7D;AAEA,IAAA,IAAA,CAAK,EAAA,GAAK,OAAA,CAAQ,gBAAA,IAAoB,iBAAA,EAAkB;AACxD,IAAA,IAAA,CAAK,mBAAmB,OAAA,CAAQ,eAAA;AAChC,IAAA,IAAA,CAAK,oBAAoB,IAAA,CAAK,EAAA;AAC9B,IAAA,IAAA,CAAK,aAAa,OAAA,CAAQ,SAAA;AAC1B,IAAA,IAAA,CAAK,YAAA,GAAe,QAAQ,WAAA,IAAe,oBAAA;AAC3C,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,MAAA,IAAU,cAAA;AACjC,IAAA,IAAA,CAAK,eAAA,GAAkB,QAAQ,cAAA,IAAkB,0BAAA;AACjD,IAAA,IAAA,CAAK,uBAAA,GAA0B,QAAQ,sBAAA,IAA0B,KAAA;AACjE,IAAA,IAAA,CAAK,mBAAmB,OAAA,CAAQ,eAAA;AAChC,IAAA,IAAA,CAAK,wBAAwB,OAAA,CAAQ,YAAA;AACrC,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAA;AACvB,IAAA,IAAA,CAAK,WAAA,GAAc,CAAC,OAAA,CAAQ,MAAA;AAC5B,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,MAAA;AAAA,EACzB;AAAA,EAEA,IAAI,gBAAA,GAA2B;AAC7B,IAAA,OAAO,IAAA,CAAK,iBAAA;AAAA,EACd;AAAA,EAEA,IAAI,eAAA,GAA0B;AAC5B,IAAA,OAAO,IAAA,CAAK,gBAAA;AAAA,EACd;AAAA,EAEA,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAA,CAAK,OAAO,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,iCAAA,EAAoC,IAAA,CAAK,iBAAiB,CAAA,CAAE,CAAA;AAAA,EAC7F;AAAA,EAEA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAI,CAAC,KAAK,uBAAA,EAAyB;AACnC,IAAA,MAAM,KAAK,kBAAA,EAAmB;AAAA,EAChC;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,KAAK,uBAAA,EAAyB;AAChC,MAAA,MAAM,KAAK,kBAAA,EAAmB;AAAA,IAChC;AAEA,IAAA,IAAI,IAAA,CAAK,WAAA,IAAe,IAAA,CAAK,OAAA,EAAS;AACpC,MAAA,IAAA,CAAK,QAAQ,OAAA,EAAQ;AACrB,MAAA,IAAA,CAAK,OAAA,GAAU,MAAA;AAAA,IACjB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,kBAAA,GAAoC;AACxC,IAAA,MAAM,IAAA,CAAK,YAAW,CAAE,IAAA;AAAA,MACtB,IAAI,yBAAA,CAA0B;AAAA,QAC5B,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,WAAW,IAAA,CAAK,UAAA;AAAA,QAChB,WAAA,EAAa,IAAA,CAAK,gBAAA,IAAoB,iBAAA;AAAkB,OACzD;AAAA,KACH;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CAAe,OAAA,EAAiB,IAAA,EAAiB,OAAA,EAAyD;AAC9G,IAAA,MAAM,KAAK,aAAA,EAAc;AAEzB,IAAA,MAAM,WAAA,GAAc,YAAA,CAAa,OAAA,EAAS,IAAA,EAAM,OAAO,CAAA;AACvD,IAAA,MAAM,SAAA,GAAY,OAAA,EAAS,OAAA,IAAW,IAAA,CAAK,eAAA;AAC3C,IAAA,MAAM,cAAA,GAAiB,0BAA0B,SAAS,CAAA;AAC1D,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAC3B,IAAA,MAAM,MAAA,GAAS,IAAI,wBAAA,CAAyB;AAAA,MAC1C,gBAAA,EAAkB,SAAS,gBAAA,IAAoB,QAAA;AAAA,MAC/C,UAAU,OAAA,EAAS,QAAA;AAAA,MACnB,UAAU,OAAA,EAAS;AAAA,KACpB,CAAA;AACD,IAAA,IAAI,UAAA;AAEJ,IAAA,IAAA,CAAK,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,kBAAA,CAAA,EAAsB;AAAA,MACnD,kBAAkB,IAAA,CAAK,iBAAA;AAAA,MACvB,OAAA,EAAS,WAAA;AAAA,MACT;AAAA,KACD,CAAA;AAED,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,EAAW,CAAE,IAAA;AAAA,MACvC,IAAI,gCAAA,CAAiC;AAAA,QACnC,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,WAAW,IAAA,CAAK,UAAA;AAAA,QAChB,aAAa,IAAA,CAAK,YAAA;AAAA,QAClB,QAAQ,IAAA,CAAK,OAAA;AAAA,QACb,IAAA,EAAM;AAAA,UACJ,OAAA,EAAS,WAAA;AAAA,UACT,OAAA,EAAS;AAAA;AACX,OACD,CAAA;AAAA,MACD,EAAE,WAAA,EAAa,OAAA,EAAS,WAAA;AAAY,KACtC;AAEA,IAAA,WAAA,MAAiB,KAAA,IAAS,QAAA,CAAS,MAAA,IAAU,EAAC,EAAG;AAC/C,MAAA,MAAM,WAAA,GAAc,KAAA;AACpB,MAAA,MAAM,eAAA,GAAkB,mBAAmB,WAAW,CAAA;AACtD,MAAA,IAAI,eAAA,EAAiB;AACnB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,qBAAA,CAAsB,eAAA,CAAgB,GAAA,EAAK,eAAA,CAAgB,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,MACtG;AAEA,MAAA,MAAM,QAAQ,WAAA,CAAY,KAAA;AAC1B,MAAA,IAAI,CAAC,KAAA,EAAO;AAEZ,MAAA,IAAI,KAAA,CAAM,cAAc,MAAA,EAAQ;AAC9B,QAAA,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,YAAA,CAAa,MAAM,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,KAAA,CAAM,cAAc,MAAA,EAAQ;AAC9B,QAAA,MAAA,CAAO,UAAA,CAAW,KAAA,CAAM,YAAA,CAAa,MAAM,CAAA;AAAA,MAC7C;AAEA,MAAA,IAAI,MAAM,WAAA,EAAa;AACrB,QAAA,MAAA,CAAO,QAAA,GAAW,KAAA,CAAM,WAAA,CAAY,QAAA,IAAY,CAAA;AAChD,QAAA,UAAA,GAAa,MAAM,WAAA,CAAY,MAAA;AAAA,MACjC;AAAA,IACF;AAEA,IAAA,MAAM,eAAA,GAAkB,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AACrC,IAAA,MAAM,QAAA,GAAW,OAAO,QAAA,IAAY,CAAA;AACpC,IAAA,MAAM,WAAW,UAAA,KAAe,WAAA;AAChC,IAAA,MAAM,aAAA,GAAgB,WAAW,GAAA,GAAM,QAAA;AACvC,IAAA,IAAA,CAAK,WAAA,uBAAkB,IAAA,EAAK;AAE5B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,WAAA;AAAA,MACT,IAAA;AAAA,MACA,OAAA,EAAS,aAAA,KAAkB,CAAA,IAAK,CAAC,QAAA;AAAA,MACjC,QAAA,EAAU,aAAA;AAAA,MACV,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,eAAA;AAAA,MACA,QAAA;AAAA,MACA,iBAAiB,MAAA,CAAO,eAAA;AAAA,MACxB,iBAAiB,MAAA,CAAO,eAAA;AAAA,MACxB,oBAAoB,MAAA,CAAO,kBAAA;AAAA,MAC3B,oBAAoB,MAAA,CAAO;AAAA,KAC7B;AAAA,EACF;AAAA,EAEA,gBAAgB,IAAA,EAAoD;AAClE,IAAA,MAAM,mBAAA,GAAsB,KAAK,uBAAA,EAAwB;AACzD,IAAA,IAAI,IAAA,CAAK,qBAAA,KAA0B,MAAA,EAAW,OAAO,mBAAA;AACrD,IAAA,IAAI,OAAO,IAAA,CAAK,qBAAA,KAA0B,QAAA,SAAiB,IAAA,CAAK,qBAAA;AAChE,IAAA,OAAO,KAAK,qBAAA,CAAsB,EAAE,qBAAqB,cAAA,EAAgB,IAAA,EAAM,gBAAgB,CAAA;AAAA,EACjG;AAAA,EAEA,MAAM,OAAA,GAAgC;AACpC,IAAA,OAAO;AAAA,MACL,IAAI,IAAA,CAAK,EAAA;AAAA,MACT,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,WAAW,IAAA,CAAK,UAAA;AAAA,MAChB,YAAY,IAAA,CAAK,WAAA;AAAA,MACjB,QAAA,EAAU;AAAA,QACR,iBAAiB,IAAA,CAAK,gBAAA;AAAA,QACtB,kBAAkB,IAAA,CAAK,iBAAA;AAAA,QACvB,SAAA,EAAW,KAAK,UAAA,IAAc,SAAA;AAAA,QAC9B,wBAAwB,IAAA,CAAK;AAAA;AAC/B,KACF;AAAA,EACF;AAAA,EAEQ,uBAAA,GAAkC;AACxC,IAAA,OAAO;AAAA,MACL,wCAAA;AAAA,MACA,yEAAA;AAAA,MACA,qEAAA;AAAA,MACA,cAAA;AAAA,MACA,8CAAA;AAAA,MACA,0DAAA;AAAA,MACA,kEAAA;AAAA,MACA,uDAAA;AAAA,MACA,kGAAA;AAAA,MACA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,EACb;AAAA,EAEQ,UAAA,GAAqC;AAC3C,IAAA,IAAI,CAAC,KAAK,OAAA,EAAS;AACjB,MAAA,IAAA,CAAK,UAAU,IAAI,sBAAA,CAAuB,EAAE,MAAA,EAAQ,IAAA,CAAK,SAAS,CAAA;AAAA,IACpE;AACA,IAAA,OAAO,IAAA,CAAK,OAAA;AAAA,EACd;AACF;;;AC1YO,IAAM,+BAAA,GAAmF;AAAA,EAC9F,EAAA,EAAI,WAAA;AAAA,EACJ,IAAA,EAAM,2BAAA;AAAA,EACN,WAAA,EAAa,yDAAA;AAAA,EACb,YAAA,EAAc;AAAA,IACZ,IAAA,EAAM,QAAA;AAAA,IACN,QAAA,EAAU,CAAC,iBAAiB,CAAA;AAAA,IAC5B,UAAA,EAAY;AAAA,MACV,MAAA,EAAQ;AAAA,QACN,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,eAAA,EAAiB;AAAA,QACf,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,gBAAA,EAAkB;AAAA,QAChB,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa;AAAA,OACf;AAAA,MACA,SAAA,EAAW;AAAA,QACT,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa,kCAAA;AAAA,QACb,OAAA,EAAS;AAAA,OACX;AAAA,MACA,cAAA,EAAgB;AAAA,QACd,IAAA,EAAM,QAAA;AAAA,QACN,WAAA,EAAa,2EAAA;AAAA,QACb,OAAA,EAAS,GAAA;AAAA,QACT,OAAA,EAAS,CAAA;AAAA,QACT,OAAA,EAAS;AAAA,OACX;AAAA,MACA,sBAAA,EAAwB;AAAA,QACtB,IAAA,EAAM,SAAA;AAAA,QACN,WAAA,EAAa,4DAAA;AAAA,QACb,OAAA,EAAS;AAAA;AACX;AACF,GACF;AAAA,EACA,aAAA,EAAe,CAAA,MAAA,KAAU,IAAI,uBAAA,CAAwB,MAAM;AAC7D","file":"index.js","sourcesContent":["/**\n * AWS Bedrock AgentCore Runtime sandbox provider.\n *\n * This provider maps Mastra's one-shot command execution contract to\n * InvokeAgentRuntimeCommand. It intentionally does not expose process\n * management or filesystem mounts because AgentCore Runtime command execution\n * does not provide those WorkspaceSandbox semantics.\n *\n * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-execute-command.html\n */\n\nimport { randomUUID } from 'node:crypto';\nimport {\n  BedrockAgentCoreClient,\n  InvokeAgentRuntimeCommandCommand,\n  StopRuntimeSessionCommand,\n} from '@aws-sdk/client-bedrock-agentcore';\nimport type { RequestContext } from '@mastra/core/di';\nimport type {\n  CommandResult,\n  ExecuteCommandOptions,\n  MastraSandboxOptions,\n  ProviderStatus,\n  SandboxInfo,\n} from '@mastra/core/workspace';\nimport { MastraSandbox, ProcessHandle } from '@mastra/core/workspace';\n\nconst LOG_PREFIX = '[AgentCoreRuntimeSandbox]';\nconst DEFAULT_COMMAND_TIMEOUT_MS = 300_000;\nconst MAX_AGENTCORE_TIMEOUT_SECONDS = 3600;\nconst DEFAULT_ACCEPT = 'application/vnd.amazon.eventstream';\nconst DEFAULT_CONTENT_TYPE = 'application/json';\n\ntype AgentCoreRuntimeClient = Pick<BedrockAgentCoreClient, 'send' | 'destroy'>;\ntype InstructionsOption = string | ((opts: { defaultInstructions: string; requestContext?: RequestContext }) => string);\ntype AgentCoreStreamException = {\n  name?: string;\n  message?: string;\n};\n\ntype AgentCoreStreamEvent = {\n  chunk?: {\n    contentStart?: unknown;\n    contentDelta?: {\n      stdout?: string;\n      stderr?: string;\n    };\n    contentStop?: {\n      exitCode?: number;\n      status?: string;\n    };\n  };\n  accessDeniedException?: AgentCoreStreamException;\n  internalServerException?: AgentCoreStreamException;\n  resourceNotFoundException?: AgentCoreStreamException;\n  serviceQuotaExceededException?: AgentCoreStreamException;\n  throttlingException?: AgentCoreStreamException;\n  validationException?: AgentCoreStreamException;\n  runtimeClientError?: AgentCoreStreamException;\n  $unknown?: [string, unknown];\n};\n\nclass CommandOutputAccumulator extends ProcessHandle {\n  readonly pid = 'agentcore-command';\n  exitCode: number | undefined;\n\n  async kill(): Promise<boolean> {\n    return false;\n  }\n\n  async sendStdin(): Promise<void> {\n    throw new Error('AgentCore Runtime command execution does not support stdin');\n  }\n\n  async wait(): Promise<CommandResult> {\n    return {\n      success: this.exitCode === 0,\n      exitCode: this.exitCode ?? 1,\n      stdout: this.stdout,\n      stderr: this.stderr,\n      executionTimeMs: 0,\n    };\n  }\n}\n\nfunction shellQuote(arg: string): string {\n  if (/^[a-zA-Z0-9._\\-\\/=:@]+$/.test(arg)) return arg;\n  return `'${arg.replace(/'/g, \"'\\\\''\")}'`;\n}\n\nfunction safeEnvName(name: string): boolean {\n  return /^[A-Za-z_][A-Za-z0-9_]*$/.test(name);\n}\n\nfunction buildCommand(command: string, args: string[] | undefined, options: ExecuteCommandOptions | undefined): string {\n  const baseCommand = args?.length ? `${command} ${args.map(arg => shellQuote(arg)).join(' ')}` : command;\n  const parts: string[] = [];\n\n  if (options?.cwd) {\n    parts.push(`cd ${shellQuote(options.cwd)}`);\n  }\n\n  const env = options?.env ?? {};\n  const envAssignments = Object.entries(env)\n    .filter((entry): entry is [string, string] => entry[1] !== undefined)\n    .map(([key, value]) => {\n      if (!safeEnvName(key)) {\n        throw new Error(`Invalid environment variable name for AgentCore Runtime command: ${key}`);\n      }\n      return `${key}=${shellQuote(value)}`;\n    });\n\n  parts.push(`${envAssignments.length ? `${envAssignments.join(' ')} ` : ''}${baseCommand}`);\n  return parts.join(' && ');\n}\n\nfunction toAgentCoreTimeoutSeconds(timeoutMs: number): number {\n  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {\n    throw new RangeError('AgentCore Runtime command timeout must be a positive number of milliseconds');\n  }\n\n  const timeoutSeconds = Math.ceil(timeoutMs / 1000);\n  if (timeoutSeconds > MAX_AGENTCORE_TIMEOUT_SECONDS) {\n    throw new RangeError(`AgentCore Runtime command timeout must be at most ${MAX_AGENTCORE_TIMEOUT_SECONDS} seconds`);\n  }\n\n  return timeoutSeconds;\n}\n\nfunction generateSessionId(): string {\n  return randomUUID();\n}\n\nfunction getStreamException(event: AgentCoreStreamEvent): { key: string; value: unknown } | undefined {\n  const exceptionKeys = [\n    'accessDeniedException',\n    'internalServerException',\n    'resourceNotFoundException',\n    'serviceQuotaExceededException',\n    'throttlingException',\n    'validationException',\n    'runtimeClientError',\n  ] as const;\n\n  for (const key of exceptionKeys) {\n    const value = event[key];\n    if (value) return { key, value };\n  }\n\n  if (event.$unknown) {\n    return { key: event.$unknown[0], value: event.$unknown[1] };\n  }\n\n  return undefined;\n}\n\nfunction formatStreamException(key: string, value: unknown): string {\n  if (value && typeof value === 'object') {\n    const exception = value as AgentCoreStreamException;\n    const name = exception.name ?? key;\n    return exception.message ? `${name}: ${exception.message}` : name;\n  }\n\n  return `${key}: ${String(value)}`;\n}\n\n// =============================================================================\n// Options\n// =============================================================================\n\nexport interface AgentCoreRuntimeSandboxOptions extends Omit<MastraSandboxOptions, 'processes'> {\n  /** AWS region for the Bedrock AgentCore client. Falls back to the AWS SDK default region chain. */\n  region?: string;\n  /** AgentCore Runtime ARN where commands should execute. */\n  agentRuntimeArn: string;\n  /** Runtime session ID. Defaults to a generated UUID, which satisfies AgentCore's 33 character minimum. */\n  runtimeSessionId?: string;\n  /** Agent runtime qualifier/endpoint. Defaults to AWS AgentCore's DEFAULT qualifier. */\n  qualifier?: string;\n  /** MIME type sent for command requests. */\n  contentType?: string;\n  /** Accept header for command event streams. */\n  accept?: string;\n  /** Default command timeout in milliseconds. */\n  commandTimeout?: number;\n  /**\n   * Stop the AgentCore Runtime session during stop()/destroy().\n   *\n   * Defaults to false because sessions are often shared with agent invocations\n   * outside the WorkspaceSandbox instance.\n   */\n  stopSessionOnLifecycle?: boolean;\n  /** Client token used for StopRuntimeSession. Defaults to a generated UUID when needed. */\n  stopClientToken?: string;\n  /** Optional preconfigured AWS SDK client, primarily for advanced credential setup and tests. */\n  client?: AgentCoreRuntimeClient;\n  /** Custom instructions for getInstructions(). String replaces the default; function receives it. */\n  instructions?: InstructionsOption;\n}\n\n// =============================================================================\n// Implementation\n// =============================================================================\n\nexport class AgentCoreRuntimeSandbox extends MastraSandbox {\n  readonly id: string;\n  readonly name = 'AgentCoreRuntimeSandbox';\n  readonly provider = 'agentcore';\n  status: ProviderStatus = 'pending';\n\n  private _client?: AgentCoreRuntimeClient;\n  private readonly _ownsClient: boolean;\n  private readonly _region?: string;\n  private readonly _agentRuntimeArn: string;\n  private readonly _runtimeSessionId: string;\n  private readonly _qualifier?: string;\n  private readonly _contentType: string;\n  private readonly _accept: string;\n  private readonly _commandTimeout: number;\n  private readonly _stopSessionOnLifecycle: boolean;\n  private readonly _stopClientToken?: string;\n  private readonly _instructionsOverride?: InstructionsOption;\n  private readonly _createdAt = new Date();\n  private _lastUsedAt?: Date;\n\n  constructor(options: AgentCoreRuntimeSandboxOptions) {\n    super({ ...options, name: 'AgentCoreRuntimeSandbox' });\n\n    if (!options.agentRuntimeArn) {\n      throw new Error(`${LOG_PREFIX} agentRuntimeArn is required`);\n    }\n\n    this.id = options.runtimeSessionId ?? generateSessionId();\n    this._agentRuntimeArn = options.agentRuntimeArn;\n    this._runtimeSessionId = this.id;\n    this._qualifier = options.qualifier;\n    this._contentType = options.contentType ?? DEFAULT_CONTENT_TYPE;\n    this._accept = options.accept ?? DEFAULT_ACCEPT;\n    this._commandTimeout = options.commandTimeout ?? DEFAULT_COMMAND_TIMEOUT_MS;\n    this._stopSessionOnLifecycle = options.stopSessionOnLifecycle ?? false;\n    this._stopClientToken = options.stopClientToken;\n    this._instructionsOverride = options.instructions;\n    this._client = options.client;\n    this._ownsClient = !options.client;\n    this._region = options.region;\n  }\n\n  get runtimeSessionId(): string {\n    return this._runtimeSessionId;\n  }\n\n  get agentRuntimeArn(): string {\n    return this._agentRuntimeArn;\n  }\n\n  async start(): Promise<void> {\n    this.logger.debug(`${LOG_PREFIX} Using AgentCore Runtime session ${this._runtimeSessionId}`);\n  }\n\n  async stop(): Promise<void> {\n    if (!this._stopSessionOnLifecycle) return;\n    await this.stopRuntimeSession();\n  }\n\n  async destroy(): Promise<void> {\n    if (this._stopSessionOnLifecycle) {\n      await this.stopRuntimeSession();\n    }\n\n    if (this._ownsClient && this._client) {\n      this._client.destroy();\n      this._client = undefined;\n    }\n  }\n\n  /**\n   * Explicitly stops the AgentCore Runtime session used by this sandbox.\n   *\n   * This is separate from destroy() because AgentCore Runtime sessions can be\n   * shared with agent invocations outside the WorkspaceSandbox lifecycle.\n   */\n  async stopRuntimeSession(): Promise<void> {\n    await this._getClient().send(\n      new StopRuntimeSessionCommand({\n        agentRuntimeArn: this._agentRuntimeArn,\n        runtimeSessionId: this._runtimeSessionId,\n        qualifier: this._qualifier,\n        clientToken: this._stopClientToken ?? generateSessionId(),\n      }),\n    );\n  }\n\n  async executeCommand(command: string, args?: string[], options?: ExecuteCommandOptions): Promise<CommandResult> {\n    await this.ensureRunning();\n\n    const fullCommand = buildCommand(command, args, options);\n    const timeoutMs = options?.timeout ?? this._commandTimeout;\n    const timeoutSeconds = toAgentCoreTimeoutSeconds(timeoutMs);\n    const startTime = Date.now();\n    const output = new CommandOutputAccumulator({\n      maxRetainedBytes: options?.maxRetainedBytes ?? Infinity,\n      onStdout: options?.onStdout,\n      onStderr: options?.onStderr,\n    });\n    let stopStatus: string | undefined;\n\n    this.logger.debug(`${LOG_PREFIX} Executing command`, {\n      runtimeSessionId: this._runtimeSessionId,\n      command: fullCommand,\n      timeoutSeconds,\n    });\n\n    const response = await this._getClient().send(\n      new InvokeAgentRuntimeCommandCommand({\n        agentRuntimeArn: this._agentRuntimeArn,\n        runtimeSessionId: this._runtimeSessionId,\n        qualifier: this._qualifier,\n        contentType: this._contentType,\n        accept: this._accept,\n        body: {\n          command: fullCommand,\n          timeout: timeoutSeconds,\n        },\n      }),\n      { abortSignal: options?.abortSignal },\n    );\n\n    for await (const event of response.stream ?? []) {\n      const streamEvent = event as AgentCoreStreamEvent;\n      const streamException = getStreamException(streamEvent);\n      if (streamException) {\n        throw new Error(`${LOG_PREFIX} ${formatStreamException(streamException.key, streamException.value)}`);\n      }\n\n      const chunk = streamEvent.chunk;\n      if (!chunk) continue;\n\n      if (chunk.contentDelta?.stdout) {\n        output.emitStdout(chunk.contentDelta.stdout);\n      }\n\n      if (chunk.contentDelta?.stderr) {\n        output.emitStderr(chunk.contentDelta.stderr);\n      }\n\n      if (chunk.contentStop) {\n        output.exitCode = chunk.contentStop.exitCode ?? 1;\n        stopStatus = chunk.contentStop.status;\n      }\n    }\n\n    const executionTimeMs = Date.now() - startTime;\n    const exitCode = output.exitCode ?? 1;\n    const timedOut = stopStatus === 'TIMED_OUT';\n    const finalExitCode = timedOut ? 124 : exitCode;\n    this._lastUsedAt = new Date();\n\n    return {\n      command: fullCommand,\n      args,\n      success: finalExitCode === 0 && !timedOut,\n      exitCode: finalExitCode,\n      stdout: output.stdout,\n      stderr: output.stderr,\n      executionTimeMs,\n      timedOut,\n      stdoutTruncated: output.stdoutTruncated,\n      stderrTruncated: output.stderrTruncated,\n      stdoutDroppedBytes: output.stdoutDroppedBytes,\n      stderrDroppedBytes: output.stderrDroppedBytes,\n    };\n  }\n\n  getInstructions(opts?: { requestContext?: RequestContext }): string {\n    const defaultInstructions = this._getDefaultInstructions();\n    if (this._instructionsOverride === undefined) return defaultInstructions;\n    if (typeof this._instructionsOverride === 'string') return this._instructionsOverride;\n    return this._instructionsOverride({ defaultInstructions, requestContext: opts?.requestContext });\n  }\n\n  async getInfo(): Promise<SandboxInfo> {\n    return {\n      id: this.id,\n      name: this.name,\n      provider: this.provider,\n      status: this.status,\n      createdAt: this._createdAt,\n      lastUsedAt: this._lastUsedAt,\n      metadata: {\n        agentRuntimeArn: this._agentRuntimeArn,\n        runtimeSessionId: this._runtimeSessionId,\n        qualifier: this._qualifier ?? 'DEFAULT',\n        stopSessionOnLifecycle: this._stopSessionOnLifecycle,\n      },\n    };\n  }\n\n  private _getDefaultInstructions(): string {\n    return [\n      'AWS Bedrock AgentCore Runtime sandbox.',\n      'Commands run inside the configured AgentCore Runtime session container.',\n      'Command output streams from AgentCore Runtime as stdout and stderr.',\n      'Limitations:',\n      '- Commands are one-shot and non-interactive.',\n      '- There is no persistent shell session between commands.',\n      '- Background process management is not exposed by this provider.',\n      '- Filesystem mounts are not exposed by this provider.',\n      '- Developer tools such as git, npm, Python, or Node must exist in the AgentCore container image.',\n      '- AgentCore Code Interpreter is a separate service and is not part of this runtime sandbox.',\n    ].join('\\n');\n  }\n\n  private _getClient(): AgentCoreRuntimeClient {\n    if (!this._client) {\n      this._client = new BedrockAgentCoreClient({ region: this._region });\n    }\n    return this._client;\n  }\n}\n","/**\n * AWS Bedrock AgentCore Runtime sandbox provider descriptor.\n *\n * Enables registration with MastraEditor for UI-driven sandbox configuration.\n */\n\nimport type { SandboxProvider } from '@mastra/core/editor';\nimport { AgentCoreRuntimeSandbox } from './sandbox';\n\nexport interface AgentCoreRuntimeProviderConfig {\n  /** AWS region for the Bedrock AgentCore client */\n  region?: string;\n  /** AgentCore Runtime ARN where commands should execute */\n  agentRuntimeArn: string;\n  /** Runtime session ID */\n  runtimeSessionId?: string;\n  /** Agent runtime qualifier/endpoint */\n  qualifier?: string;\n  /** Default command timeout in milliseconds */\n  commandTimeout?: number;\n  /** Stop the runtime session during stop()/destroy() */\n  stopSessionOnLifecycle?: boolean;\n}\n\nexport const agentCoreRuntimeSandboxProvider: SandboxProvider<AgentCoreRuntimeProviderConfig> = {\n  id: 'agentcore',\n  name: 'AgentCore Runtime Sandbox',\n  description: 'AWS Bedrock AgentCore Runtime command execution sandbox',\n  configSchema: {\n    type: 'object',\n    required: ['agentRuntimeArn'],\n    properties: {\n      region: {\n        type: 'string',\n        description: 'AWS region for Bedrock AgentCore',\n      },\n      agentRuntimeArn: {\n        type: 'string',\n        description: 'AgentCore Runtime ARN',\n      },\n      runtimeSessionId: {\n        type: 'string',\n        description: 'Runtime session ID. Defaults to a generated UUID.',\n      },\n      qualifier: {\n        type: 'string',\n        description: 'Agent runtime qualifier/endpoint',\n        default: 'DEFAULT',\n      },\n      commandTimeout: {\n        type: 'number',\n        description: 'Default command timeout in milliseconds. Must be between 1 and 3,600,000.',\n        default: 300_000,\n        minimum: 1,\n        maximum: 3_600_000,\n      },\n      stopSessionOnLifecycle: {\n        type: 'boolean',\n        description: 'Stop the AgentCore Runtime session during stop()/destroy()',\n        default: false,\n      },\n    },\n  },\n  createSandbox: config => new AgentCoreRuntimeSandbox(config),\n};\n"]}

package/dist/provider.d.ts

@@ -0,0 +1,22 @@
+/**
+ * AWS Bedrock AgentCore Runtime sandbox provider descriptor.
+ *
+ * Enables registration with MastraEditor for UI-driven sandbox configuration.
+ */
+import type { SandboxProvider } from '@mastra/core/editor';
+export interface AgentCoreRuntimeProviderConfig {
+    /** AWS region for the Bedrock AgentCore client */
+    region?: string;
+    /** AgentCore Runtime ARN where commands should execute */
+    agentRuntimeArn: string;
+    /** Runtime session ID */
+    runtimeSessionId?: string;
+    /** Agent runtime qualifier/endpoint */
+    qualifier?: string;
+    /** Default command timeout in milliseconds */
+    commandTimeout?: number;
+    /** Stop the runtime session during stop()/destroy() */
+    stopSessionOnLifecycle?: boolean;
+}
+export declare const agentCoreRuntimeSandboxProvider: SandboxProvider<AgentCoreRuntimeProviderConfig>;
+//# sourceMappingURL=provider.d.ts.map

package/dist/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAG3D,MAAM,WAAW,8BAA8B;IAC7C,kDAAkD;IAClD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,yBAAyB;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,eAAO,MAAM,+BAA+B,EAAE,eAAe,CAAC,8BAA8B,CAwC3F,CAAC"}

package/dist/sandbox/index.d.ts

@@ -0,0 +1,90 @@
+/**
+ * AWS Bedrock AgentCore Runtime sandbox provider.
+ *
+ * This provider maps Mastra's one-shot command execution contract to
+ * InvokeAgentRuntimeCommand. It intentionally does not expose process
+ * management or filesystem mounts because AgentCore Runtime command execution
+ * does not provide those WorkspaceSandbox semantics.
+ *
+ * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-execute-command.html
+ */
+import { BedrockAgentCoreClient } from '@aws-sdk/client-bedrock-agentcore';
+import type { RequestContext } from '@mastra/core/di';
+import type { CommandResult, ExecuteCommandOptions, MastraSandboxOptions, ProviderStatus, SandboxInfo } from '@mastra/core/workspace';
+import { MastraSandbox } from '@mastra/core/workspace';
+type AgentCoreRuntimeClient = Pick<BedrockAgentCoreClient, 'send' | 'destroy'>;
+type InstructionsOption = string | ((opts: {
+    defaultInstructions: string;
+    requestContext?: RequestContext;
+}) => string);
+export interface AgentCoreRuntimeSandboxOptions extends Omit<MastraSandboxOptions, 'processes'> {
+    /** AWS region for the Bedrock AgentCore client. Falls back to the AWS SDK default region chain. */
+    region?: string;
+    /** AgentCore Runtime ARN where commands should execute. */
+    agentRuntimeArn: string;
+    /** Runtime session ID. Defaults to a generated UUID, which satisfies AgentCore's 33 character minimum. */
+    runtimeSessionId?: string;
+    /** Agent runtime qualifier/endpoint. Defaults to AWS AgentCore's DEFAULT qualifier. */
+    qualifier?: string;
+    /** MIME type sent for command requests. */
+    contentType?: string;
+    /** Accept header for command event streams. */
+    accept?: string;
+    /** Default command timeout in milliseconds. */
+    commandTimeout?: number;
+    /**
+     * Stop the AgentCore Runtime session during stop()/destroy().
+     *
+     * Defaults to false because sessions are often shared with agent invocations
+     * outside the WorkspaceSandbox instance.
+     */
+    stopSessionOnLifecycle?: boolean;
+    /** Client token used for StopRuntimeSession. Defaults to a generated UUID when needed. */
+    stopClientToken?: string;
+    /** Optional preconfigured AWS SDK client, primarily for advanced credential setup and tests. */
+    client?: AgentCoreRuntimeClient;
+    /** Custom instructions for getInstructions(). String replaces the default; function receives it. */
+    instructions?: InstructionsOption;
+}
+export declare class AgentCoreRuntimeSandbox extends MastraSandbox {
+    readonly id: string;
+    readonly name = "AgentCoreRuntimeSandbox";
+    readonly provider = "agentcore";
+    status: ProviderStatus;
+    private _client?;
+    private readonly _ownsClient;
+    private readonly _region?;
+    private readonly _agentRuntimeArn;
+    private readonly _runtimeSessionId;
+    private readonly _qualifier?;
+    private readonly _contentType;
+    private readonly _accept;
+    private readonly _commandTimeout;
+    private readonly _stopSessionOnLifecycle;
+    private readonly _stopClientToken?;
+    private readonly _instructionsOverride?;
+    private readonly _createdAt;
+    private _lastUsedAt?;
+    constructor(options: AgentCoreRuntimeSandboxOptions);
+    get runtimeSessionId(): string;
+    get agentRuntimeArn(): string;
+    start(): Promise<void>;
+    stop(): Promise<void>;
+    destroy(): Promise<void>;
+    /**
+     * Explicitly stops the AgentCore Runtime session used by this sandbox.
+     *
+     * This is separate from destroy() because AgentCore Runtime sessions can be
+     * shared with agent invocations outside the WorkspaceSandbox lifecycle.
+     */
+    stopRuntimeSession(): Promise<void>;
+    executeCommand(command: string, args?: string[], options?: ExecuteCommandOptions): Promise<CommandResult>;
+    getInstructions(opts?: {
+        requestContext?: RequestContext;
+    }): string;
+    getInfo(): Promise<SandboxInfo>;
+    private _getDefaultInstructions;
+    private _getClient;
+}
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/sandbox/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EACL,sBAAsB,EAGvB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,KAAK,EACV,aAAa,EACb,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,WAAW,EACZ,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAiB,MAAM,wBAAwB,CAAC;AAQtE,KAAK,sBAAsB,GAAG,IAAI,CAAC,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAC/E,KAAK,kBAAkB,GAAG,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE;IAAE,mBAAmB,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,cAAc,CAAA;CAAE,KAAK,MAAM,CAAC,CAAC;AAwIxH,MAAM,WAAW,8BAA+B,SAAQ,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC;IAC7F,mGAAmG;IACnG,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,0GAA0G;IAC1G,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,0FAA0F;IAC1F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,MAAM,CAAC,EAAE,sBAAsB,CAAC;IAChC,oGAAoG;IACpG,YAAY,CAAC,EAAE,kBAAkB,CAAC;CACnC;AAMD,qBAAa,uBAAwB,SAAQ,aAAa;IACxD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,6BAA6B;IAC1C,QAAQ,CAAC,QAAQ,eAAe;IAChC,MAAM,EAAE,cAAc,CAAa;IAEnC,OAAO,CAAC,OAAO,CAAC,CAAyB;IACzC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAU;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAU;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAqB;IAC5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAc;IACzC,OAAO,CAAC,WAAW,CAAC,CAAO;gBAEf,OAAO,EAAE,8BAA8B;IAsBnD,IAAI,gBAAgB,IAAI,MAAM,CAE7B;IAED,IAAI,eAAe,IAAI,MAAM,CAE5B;IAEK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAKrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAW9B;;;;;OAKG;IACG,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAWnC,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC;IAiF/G,eAAe,CAAC,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,cAAc,CAAA;KAAE,GAAG,MAAM;IAO7D,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;IAiBrC,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,UAAU;CAMnB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mastra/agentcore",
-  "version": "0.0.0",
+  "version": "0.2.0-alpha.0",
   "description": "AWS Bedrock AgentCore Runtime sandbox provider for Mastra workspaces",
   "type": "module",
   "main": "dist/index.js",
@@ -18,32 +18,22 @@
     },
     "./package.json": "./package.json"
   },
-  "scripts": {
-    "build": "tsup --silent --config tsup.config.ts",
-    "build:lib": "pnpm build",
-    "build:watch": "pnpm build --watch",
-    "test:unit": "vitest run --exclude '**/*.integration.test.ts'",
-    "test:watch": "vitest watch",
-    "test": "vitest run ./src/**/*.integration.test.ts",
-    "test:cloud": "pnpm test",
-    "lint": "eslint ."
-  },
   "license": "Apache-2.0",
   "dependencies": {
     "@aws-sdk/client-bedrock-agentcore": "^3.1045.0"
   },
   "devDependencies": {
-    "@internal/lint": "workspace:*",
-    "@internal/types-builder": "workspace:*",
-    "@mastra/core": "workspace:*",
     "@types/node": "22.19.15",
-    "@vitest/coverage-v8": "catalog:",
-    "@vitest/ui": "catalog:",
+    "@vitest/coverage-v8": "4.1.5",
+    "@vitest/ui": "4.1.5",
     "dotenv": "^17.3.1",
     "eslint": "^10.2.1",
     "tsup": "^8.5.1",
-    "typescript": "catalog:",
-    "vitest": "catalog:"
+    "typescript": "^6.0.3",
+    "vitest": "4.1.5",
+    "@internal/types-builder": "0.0.74",
+    "@mastra/core": "1.38.0-alpha.3",
+    "@internal/lint": "0.0.99"
   },
   "peerDependencies": {
     "@mastra/core": ">=1.12.0-0 <2.0.0-0"
@@ -63,5 +53,15 @@
   },
   "engines": {
     "node": ">=22.13.0"
+  },
+  "scripts": {
+    "build": "tsup --silent --config tsup.config.ts",
+    "build:lib": "pnpm build",
+    "build:watch": "pnpm build --watch",
+    "test:unit": "vitest run --exclude '**/*.integration.test.ts'",
+    "test:watch": "vitest watch",
+    "test": "vitest run ./src/**/*.integration.test.ts",
+    "test:cloud": "pnpm test",
+    "lint": "eslint ."
   }
-}
+}