@mastra/factory 0.11.1 → 0.12.0-alpha.0

package/dist/integrations/github/sandbox-release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-release.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/sandbox-release.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,KAAK,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AACrH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0CAA0C,CAAC;AAGjF;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC7C,aAAa,EAAE,IAAI,CAAC,0BAA0B,EAAE,qBAAqB,GAAG,cAAc,CAAC,CAAC;IACxF,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB;AAED;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,UAAU,GAAG,iBAAiB,GAAG,iBAAiB,CAAC,CAAC;IAC9E,aAAa,EAAE,IAAI,CAAC,0BAA0B,EAAE,aAAa,GAAG,qBAAqB,GAAG,cAAc,CAAC,CAAC;IACxG,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,OAAO,GAAG,QAAQ,GAAG,qBAAqB,GAAG,WAAW,GAAG,gBAAgB,CAAC,CAAC;CAClH,GAAG,OAAO,CAAC,IAAI,CAAC,CAsChB;AAED;;;;;;;;;GASG;AACH,wBAAsB,wBAAwB,CAAC,OAAO,EAAE;IACtD,SAAS,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;IACzC,aAAa,EAAE,IAAI,CAAC,0BAA0B,EAAE,UAAU,GAAG,aAAa,GAAG,qBAAqB,GAAG,cAAc,CAAC,CAAC;IACrH,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CA+BhB"}
+{"version":3,"file":"sandbox-release.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/sandbox-release.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACnD,2DAA2D;IAC3D,SAAS,EAAE,MAAM,CAAC;IAClB,qEAAqE;IACrE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAAC,IAAI,CAAC,CAehB;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,IAAI,CAAC,OAAO,8CAA8C,EAAE,oBAAoB,EAAE,IAAI,CAAC,CAAC;CAClG,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB"}

package/dist/integrations/github/sandbox-release.js

@@ -1,117 +1,38 @@
-import { recycleClaimedWorkdir } from "./sandbox.js";
+import { evictSessionSandbox, peekSessionSandbox } from "../../sandbox/session-sandbox.js";
 //#region src/integrations/github/sandbox-release.ts
 /**
-* Scrub a sandbox that is about to enter the reuse pool: force-checkout the
-* default branch and drop the released session's local state, so idle pooled
-* VMs don't sit on stale branches, dirty worktrees, or abandoned work while
-* they wait for the next claim. Best-effort — the VM may already be reaped
-* (the pooled claim then falls back to fresh provisioning) and the claim
-* path recycles the workdir again before reuse, so a failed scrub never
-* blocks the release.
-*/
-async function cleanReleasedSandbox(options) {
-	try {
-		const projectRepository = await options.sourceControl.projectRepositories.get({
-			orgId: options.orgId,
-			id: options.projectRepositoryId
-		});
-		if (!projectRepository) return;
-		const repository = await options.sourceControl.repositories.get({
-			orgId: options.orgId,
-			id: projectRepository.repositoryId
-		});
-		if (!repository) return;
-		await recycleClaimedWorkdir(options.sandbox ?? await options.fleet.reattachSandbox(options.sandboxId, { actingUserId: options.actingUserId }), options.sandboxWorkdir, repository.defaultBranch);
-	} catch {}
-}
-/**
-* Reclaim the sandbox a just-deleted user session was holding: return a remote
-* VM to the reuse pool (scrubbed first), or tear a local/unpooled one down.
+* Stop or destroy the sandbox a session holds in this process, dropping it
+* from the per-process memo first so later opens construct fresh.
 *
-* Runs after the session row is already gone. Waking the VM and scrubbing a
-* large checkout takes minutes, and none of it is something the caller can act
-* on — the workspace has disappeared from their list either way. Nothing can
-* claim the sandbox until `release` publishes it to the pool, so deferring the
-* whole sequence preserves the scrub-before-reuse guarantee.
+* Sandbox identity is the session id, so there is no reuse pool to publish
+* into — a reopened session resolves the same id through its provider
+* (reconnect/resume, or a fresh VM whose setup hook re-materializes).
+* Sessions never opened in this replica have no memo entry; their VMs are
+* left to the provider's idle lifecycle (pause / idle GC).
 */
-async function reclaimDeletedSessionSandbox(options) {
-	const { fleet, sourceControl, session } = options;
-	if (!session.sandboxId) return;
-	if (fleet.provider !== "local" && session.sandboxWorkdir) {
-		await cleanReleasedSandbox({
-			fleet,
-			sourceControl,
-			orgId: session.orgId,
-			projectRepositoryId: session.projectRepositoryId,
-			sandboxId: session.sandboxId,
-			sandboxWorkdir: session.sandboxWorkdir,
-			actingUserId: session.userId
-		});
-		await sourceControl.sandboxPool.release({
-			orgId: session.orgId,
-			projectRepositoryId: session.projectRepositoryId,
-			userId: session.userId,
-			sandboxId: session.sandboxId,
-			sandboxWorkdir: session.sandboxWorkdir
-		});
+async function releaseSessionSandbox(options) {
+	const entry = peekSessionSandbox(options.sessionId);
+	if (!entry) return;
+	evictSessionSandbox(options.sessionId);
+	const sandbox = entry.sandbox;
+	if (options.destroy) {
+		await (sandbox._destroy ? sandbox._destroy() : sandbox.destroy?.());
 		return;
 	}
-	let sandbox;
-	try {
-		sandbox = await fleet.reattachSandbox(session.sandboxId, { actingUserId: session.userId });
-	} catch {}
-	await fleet.teardownSandbox({
-		sandboxId: session.sandboxId,
-		setSandboxId: async () => {},
-		clear: async () => {}
-	}, sandbox);
+	await (sandbox._stop ? sandbox._stop() : sandbox.stop?.());
 }
 /**
-* Release the sandboxes held by a work item's sessions back to the reuse pool.
-*
-* Called when the item commits into a terminal stage (`done` / `canceled`):
-* its branch sessions stop receiving runs, so their VMs — which would
-* otherwise idle until the provider reaps them — can serve the next session
-* for the same repository instead of a fresh provision. Each session
-* keeps its row (a reopened branch simply claims a pooled VM or provisions
-* fresh on next use); it only loses its sandbox binding.
+* Tear down the sandbox a just-deleted user session was holding. The row is
+* already gone, so the VM is destroyed rather than stopped — nothing will
+* ever resolve this session id again.
 */
-async function releaseWorkItemSandboxes(options) {
-	const { workItems, sourceControl } = options;
-	const item = await workItems.get({
-		orgId: options.orgId,
-		id: options.workItemId
+async function reclaimDeletedSessionSandbox(options) {
+	await releaseSessionSandbox({
+		sessionId: options.session.id,
+		destroy: true
 	});
-	if (!item) return;
-	const sessionIds = [...new Set(Object.values(item.sessions).map((session) => session.sessionId))];
-	for (const sessionId of sessionIds) {
-		const session = await sourceControl.sessions.getBySessionId(sessionId);
-		if (!session || session.orgId !== options.orgId) continue;
-		if (!session.sandboxId || !session.sandboxWorkdir) continue;
-		await cleanReleasedSandbox({
-			fleet: options.fleet,
-			sourceControl,
-			orgId: session.orgId,
-			projectRepositoryId: session.projectRepositoryId,
-			sandboxId: session.sandboxId,
-			sandboxWorkdir: session.sandboxWorkdir,
-			actingUserId: session.userId
-		});
-		await sourceControl.sandboxPool.release({
-			orgId: session.orgId,
-			projectRepositoryId: session.projectRepositoryId,
-			userId: session.userId,
-			sandboxId: session.sandboxId,
-			sandboxWorkdir: session.sandboxWorkdir
-		});
-		await sourceControl.sessions.setSandbox({
-			id: session.id,
-			sandboxId: null,
-			sandboxWorkdir: session.sandboxWorkdir
-		});
-	}
 }
 //#endregion
-export { cleanReleasedSandbox, reclaimDeletedSessionSandbox, releaseWorkItemSandboxes };
+export { reclaimDeletedSessionSandbox, releaseSessionSandbox };
 
 //# sourceMappingURL=sandbox-release.js.map

package/dist/integrations/github/sandbox-release.js.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox-release.js","names":[],"sources":["../../../src/integrations/github/sandbox-release.ts"],"sourcesContent":["import type { MaterializationSandbox, SandboxFleet } from '../../sandbox/fleet.js';\nimport type { SourceControlSession, SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';\nimport type { WorkItemsStorage } from '../../storage/domains/work-items/base.js';\nimport { recycleClaimedWorkdir } from './sandbox.js';\n\n/**\n * Scrub a sandbox that is about to enter the reuse pool: force-checkout the\n * default branch and drop the released session's local state, so idle pooled\n * VMs don't sit on stale branches, dirty worktrees, or abandoned work while\n * they wait for the next claim. Best-effort — the VM may already be reaped\n * (the pooled claim then falls back to fresh provisioning) and the claim\n * path recycles the workdir again before reuse, so a failed scrub never\n * blocks the release.\n */\nexport async function cleanReleasedSandbox(options: {\n  fleet: Pick<SandboxFleet, 'reattachSandbox'>;\n  sourceControl: Pick<SourceControlStorageHandle, 'projectRepositories' | 'repositories'>;\n  orgId: string;\n  projectRepositoryId: string;\n  sandboxId: string;\n  sandboxWorkdir: string;\n  actingUserId: string;\n  sandbox?: MaterializationSandbox;\n}): Promise<void> {\n  try {\n    const projectRepository = await options.sourceControl.projectRepositories.get({\n      orgId: options.orgId,\n      id: options.projectRepositoryId,\n    });\n    if (!projectRepository) return;\n    const repository = await options.sourceControl.repositories.get({\n      orgId: options.orgId,\n      id: projectRepository.repositoryId,\n    });\n    if (!repository) return;\n    const sandbox =\n      options.sandbox ??\n      (await options.fleet.reattachSandbox(options.sandboxId, {\n        actingUserId: options.actingUserId,\n      }));\n    await recycleClaimedWorkdir(sandbox, options.sandboxWorkdir, repository.defaultBranch);\n  } catch {\n    // Reaped, unreachable, or wedged — the claim-side recycle is the\n    // correctness guarantee; this scrub is hygiene for idle VMs.\n  }\n}\n\n/**\n * Reclaim the sandbox a just-deleted user session was holding: return a remote\n * VM to the reuse pool (scrubbed first), or tear a local/unpooled one down.\n *\n * Runs after the session row is already gone. Waking the VM and scrubbing a\n * large checkout takes minutes, and none of it is something the caller can act\n * on — the workspace has disappeared from their list either way. Nothing can\n * claim the sandbox until `release` publishes it to the pool, so deferring the\n * whole sequence preserves the scrub-before-reuse guarantee.\n */\nexport async function reclaimDeletedSessionSandbox(options: {\n  fleet: Pick<SandboxFleet, 'provider' | 'reattachSandbox' | 'teardownSandbox'>;\n  sourceControl: Pick<SourceControlStorageHandle, 'sandboxPool' | 'projectRepositories' | 'repositories'>;\n  session: Pick<SourceControlSession, 'orgId' | 'userId' | 'projectRepositoryId' | 'sandboxId' | 'sandboxWorkdir'>;\n}): Promise<void> {\n  const { fleet, sourceControl, session } = options;\n  if (!session.sandboxId) return;\n  if (fleet.provider !== 'local' && session.sandboxWorkdir) {\n    // Keep the remote VM alive: return it to the reuse pool so the next\n    // session for this repository link and user claims it (repo already\n    // cloned) instead of provisioning a fresh sandbox. Scrub the session's\n    // work off the VM first so it doesn't idle with stale branches or dirty\n    // state, and so nothing claims it mid-scrub.\n    await cleanReleasedSandbox({\n      fleet,\n      sourceControl,\n      orgId: session.orgId,\n      projectRepositoryId: session.projectRepositoryId,\n      sandboxId: session.sandboxId,\n      sandboxWorkdir: session.sandboxWorkdir,\n      actingUserId: session.userId,\n    });\n    await sourceControl.sandboxPool.release({\n      orgId: session.orgId,\n      projectRepositoryId: session.projectRepositoryId,\n      userId: session.userId,\n      sandboxId: session.sandboxId,\n      sandboxWorkdir: session.sandboxWorkdir,\n    });\n    return;\n  }\n  let sandbox: MaterializationSandbox | undefined;\n  try {\n    sandbox = await fleet.reattachSandbox(session.sandboxId, { actingUserId: session.userId });\n  } catch {\n    // The provider may already have reclaimed the sandbox.\n  }\n  // The session row is deleted, so there is no binding left to clear.\n  await fleet.teardownSandbox(\n    { sandboxId: session.sandboxId, setSandboxId: async () => {}, clear: async () => {} },\n    sandbox,\n  );\n}\n\n/**\n * Release the sandboxes held by a work item's sessions back to the reuse pool.\n *\n * Called when the item commits into a terminal stage (`done` / `canceled`):\n * its branch sessions stop receiving runs, so their VMs — which would\n * otherwise idle until the provider reaps them — can serve the next session\n * for the same repository instead of a fresh provision. Each session\n * keeps its row (a reopened branch simply claims a pooled VM or provisions\n * fresh on next use); it only loses its sandbox binding.\n */\nexport async function releaseWorkItemSandboxes(options: {\n  workItems: Pick<WorkItemsStorage, 'get'>;\n  sourceControl: Pick<SourceControlStorageHandle, 'sessions' | 'sandboxPool' | 'projectRepositories' | 'repositories'>;\n  fleet: Pick<SandboxFleet, 'reattachSandbox'>;\n  orgId: string;\n  workItemId: string;\n}): Promise<void> {\n  const { workItems, sourceControl } = options;\n  const item = await workItems.get({ orgId: options.orgId, id: options.workItemId });\n  if (!item) return;\n  const sessionIds = [...new Set(Object.values(item.sessions).map(session => session.sessionId))];\n  for (const sessionId of sessionIds) {\n    const session = await sourceControl.sessions.getBySessionId(sessionId);\n    if (!session || session.orgId !== options.orgId) continue;\n    if (!session.sandboxId || !session.sandboxWorkdir) continue;\n    await cleanReleasedSandbox({\n      fleet: options.fleet,\n      sourceControl,\n      orgId: session.orgId,\n      projectRepositoryId: session.projectRepositoryId,\n      sandboxId: session.sandboxId,\n      sandboxWorkdir: session.sandboxWorkdir,\n      actingUserId: session.userId,\n    });\n    await sourceControl.sandboxPool.release({\n      orgId: session.orgId,\n      projectRepositoryId: session.projectRepositoryId,\n      userId: session.userId,\n      sandboxId: session.sandboxId,\n      sandboxWorkdir: session.sandboxWorkdir,\n    });\n    await sourceControl.sessions.setSandbox({\n      id: session.id,\n      sandboxId: null,\n      sandboxWorkdir: session.sandboxWorkdir,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;AAcA,eAAsB,qBAAqB,SASzB;CAChB,IAAI;EACF,MAAM,oBAAoB,MAAM,QAAQ,cAAc,oBAAoB,IAAI;GAC5E,OAAO,QAAQ;GACf,IAAI,QAAQ;EACd,CAAC;EACD,IAAI,CAAC,mBAAmB;EACxB,MAAM,aAAa,MAAM,QAAQ,cAAc,aAAa,IAAI;GAC9D,OAAO,QAAQ;GACf,IAAI,kBAAkB;EACxB,CAAC;EACD,IAAI,CAAC,YAAY;EAMjB,MAAM,sBAJJ,QAAQ,WACP,MAAM,QAAQ,MAAM,gBAAgB,QAAQ,WAAW,EACtD,cAAc,QAAQ,aACxB,CAAC,GACkC,QAAQ,gBAAgB,WAAW,aAAa;CACvF,QAAQ,CAGR;AACF;;;;;;;;;;;AAYA,eAAsB,6BAA6B,SAIjC;CAChB,MAAM,EAAE,OAAO,eAAe,YAAY;CAC1C,IAAI,CAAC,QAAQ,WAAW;CACxB,IAAI,MAAM,aAAa,WAAW,QAAQ,gBAAgB;EAMxD,MAAM,qBAAqB;GACzB;GACA;GACA,OAAO,QAAQ;GACf,qBAAqB,QAAQ;GAC7B,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;GACxB,cAAc,QAAQ;EACxB,CAAC;EACD,MAAM,cAAc,YAAY,QAAQ;GACtC,OAAO,QAAQ;GACf,qBAAqB,QAAQ;GAC7B,QAAQ,QAAQ;GAChB,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;EAC1B,CAAC;EACD;CACF;CACA,IAAI;CACJ,IAAI;EACF,UAAU,MAAM,MAAM,gBAAgB,QAAQ,WAAW,EAAE,cAAc,QAAQ,OAAO,CAAC;CAC3F,QAAQ,CAER;CAEA,MAAM,MAAM,gBACV;EAAE,WAAW,QAAQ;EAAW,cAAc,YAAY,CAAC;EAAG,OAAO,YAAY,CAAC;CAAE,GACpF,OACF;AACF;;;;;;;;;;;AAYA,eAAsB,yBAAyB,SAM7B;CAChB,MAAM,EAAE,WAAW,kBAAkB;CACrC,MAAM,OAAO,MAAM,UAAU,IAAI;EAAE,OAAO,QAAQ;EAAO,IAAI,QAAQ;CAAW,CAAC;CACjF,IAAI,CAAC,MAAM;CACX,MAAM,aAAa,CAAC,GAAG,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,KAAI,YAAW,QAAQ,SAAS,CAAC,CAAC;CAC9F,KAAK,MAAM,aAAa,YAAY;EAClC,MAAM,UAAU,MAAM,cAAc,SAAS,eAAe,SAAS;EACrE,IAAI,CAAC,WAAW,QAAQ,UAAU,QAAQ,OAAO;EACjD,IAAI,CAAC,QAAQ,aAAa,CAAC,QAAQ,gBAAgB;EACnD,MAAM,qBAAqB;GACzB,OAAO,QAAQ;GACf;GACA,OAAO,QAAQ;GACf,qBAAqB,QAAQ;GAC7B,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;GACxB,cAAc,QAAQ;EACxB,CAAC;EACD,MAAM,cAAc,YAAY,QAAQ;GACtC,OAAO,QAAQ;GACf,qBAAqB,QAAQ;GAC7B,QAAQ,QAAQ;GAChB,WAAW,QAAQ;GACnB,gBAAgB,QAAQ;EAC1B,CAAC;EACD,MAAM,cAAc,SAAS,WAAW;GACtC,IAAI,QAAQ;GACZ,WAAW;GACX,gBAAgB,QAAQ;EAC1B,CAAC;CACH;AACF"}
+{"version":3,"file":"sandbox-release.js","names":[],"sources":["../../../src/integrations/github/sandbox-release.ts"],"sourcesContent":["import { evictSessionSandbox, peekSessionSandbox } from '../../sandbox/session-sandbox.js';\n\n/**\n * Stop or destroy the sandbox a session holds in this process, dropping it\n * from the per-process memo first so later opens construct fresh.\n *\n * Sandbox identity is the session id, so there is no reuse pool to publish\n * into — a reopened session resolves the same id through its provider\n * (reconnect/resume, or a fresh VM whose setup hook re-materializes).\n * Sessions never opened in this replica have no memo entry; their VMs are\n * left to the provider's idle lifecycle (pause / idle GC).\n */\nexport async function releaseSessionSandbox(options: {\n  /** The session's storage row id (the sandbox identity). */\n  sessionId: string;\n  /** Destroy instead of stop — for sessions that are gone for good. */\n  destroy?: boolean;\n}): Promise<void> {\n  const entry = peekSessionSandbox(options.sessionId);\n  if (!entry) return;\n  evictSessionSandbox(options.sessionId);\n  const sandbox = entry.sandbox as unknown as {\n    _stop?: () => Promise<void>;\n    _destroy?: () => Promise<void>;\n    stop?: () => Promise<void>;\n    destroy?: () => Promise<void>;\n  };\n  if (options.destroy) {\n    await (sandbox._destroy ? sandbox._destroy() : sandbox.destroy?.());\n    return;\n  }\n  await (sandbox._stop ? sandbox._stop() : sandbox.stop?.());\n}\n\n/**\n * Tear down the sandbox a just-deleted user session was holding. The row is\n * already gone, so the VM is destroyed rather than stopped — nothing will\n * ever resolve this session id again.\n */\nexport async function reclaimDeletedSessionSandbox(options: {\n  session: Pick<import('../../storage/domains/source-control/base.js').SourceControlSession, 'id'>;\n}): Promise<void> {\n  await releaseSessionSandbox({ sessionId: options.session.id, destroy: true });\n}\n"],"mappings":";;;;;;;;;;;;AAYA,eAAsB,sBAAsB,SAK1B;CAChB,MAAM,QAAQ,mBAAmB,QAAQ,SAAS;CAClD,IAAI,CAAC,OAAO;CACZ,oBAAoB,QAAQ,SAAS;CACrC,MAAM,UAAU,MAAM;CAMtB,IAAI,QAAQ,SAAS;EACnB,OAAO,QAAQ,WAAW,QAAQ,SAAS,IAAI,QAAQ,UAAU;EACjE;CACF;CACA,OAAO,QAAQ,QAAQ,QAAQ,MAAM,IAAI,QAAQ,OAAO;AAC1D;;;;;;AAOA,eAAsB,6BAA6B,SAEjC;CAChB,MAAM,sBAAsB;EAAE,WAAW,QAAQ,QAAQ;EAAI,SAAS;CAAK,CAAC;AAC9E"}

package/dist/integrations/github/sandbox.d.ts

@@ -1,57 +1,25 @@
 /**
  * Repo materialization for GitHub-backed repositories.
  *
- * A GitHub repo is never cloned onto the server host. Instead each project gets
- * its own isolated sandbox (provisioned by the fleet in `../sandbox/fleet`) and
- * the repo is cloned *inside* that sandbox. The agent's file tools and command
- * tools then operate entirely against the remote checkout.
+ * A GitHub repo is never cloned onto the server host. The repo is cloned
+ * *inside* the session's sandbox, so the agent's file tools and command tools
+ * operate entirely against the remote checkout.
  *
- * - `ensureProjectSandbox(row)` / `teardownProjectSandbox(row)` bind the fleet's
- *   provision/reattach/teardown lifecycle to the per-(project,user) sandbox row.
  * - `materializeRepo(row, token)` runs `git clone` (first open) or `git pull`
  *   (re-open) inside the sandbox, using a short-lived installation token that is
  *   scrubbed from the git remote afterwards so it never persists in the VM.
  *
- * This module owns everything git/GitHub: clone/pull, commit/push, worktrees,
- * and `gh pr create`. Sandbox provisioning, budgets, and workdir layout live in
- * the fleet module.
+ * This module owns everything git/GitHub: clone/pull, commit/push, setup/teardown commands,
+ * and `gh pr create`. Workdir layout lives in `../sandbox/workdir`.
  */
-import type { MaterializationSandbox, ProgressFn, SandboxCommandResult, SandboxFleet } from '../../sandbox/fleet.js';
-import type { ProjectRepositorySandbox, SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';
-type SourceControlSandboxStorage = SourceControlStorageHandle['sandboxes'];
-type MaterializationStore = Pick<SourceControlSandboxStorage, 'markMaterialized'>;
+import type { ExecutableSandbox, SandboxCommandResult } from '../../sandbox/materialization.js';
+import type { SourceControlStorageHandle } from '../../storage/domains/source-control/base.js';
+type MaterializationStore = Pick<SourceControlStorageHandle['sessions'], 'markMaterialized'>;
 interface RepoMaterializationBinding {
     id: string;
     sandboxWorkdir: string;
     materializedAt: Date | null;
 }
-/**
- * Provision a new sandbox (persisting its provider id on first open) or
- * reattach to the stored one. Returns a started, live sandbox.
- */
-export declare function ensureProjectSandbox(options: {
-    fleet: SandboxFleet;
-    row: ProjectRepositorySandbox;
-    storage: SourceControlSandboxStorage;
-    token: string;
-    onProgress?: ProgressFn;
-    /** Repo base checkpoint to seed a fresh provision from (boot-only). */
-    seedCheckpointName?: string;
-}): Promise<MaterializationSandbox>;
-/**
- * Tear down a user's sandbox for a project: stop the live VM (best-effort) and
- * clear the persisted `sandboxId`/`materializedAt` on the per-(project,user)
- * binding row so the next open re-provisions cleanly.
- *
- * @param row     the per-(project,user) sandbox binding to tear down
- * @param sandbox an already-reattached live sandbox to stop, when available
- */
-export declare function teardownProjectSandbox(options: {
-    fleet: SandboxFleet;
-    row: ProjectRepositorySandbox;
-    storage: SourceControlSandboxStorage;
-    sandbox?: MaterializationSandbox;
-}): Promise<void>;
 /**
  * Single-quote a string for safe POSIX shell interpolation. Wraps the value in
  * single quotes and escapes any embedded single quote using the canonical
@@ -82,7 +50,7 @@ interface ShOptions {
  * to re-run. Hang-guard timeouts are NOT retried — the budget applies to the
  * command as a whole.
  */
-export declare function sh(sandbox: MaterializationSandbox, script: string, options?: ShOptions): Promise<SandboxCommandResult>;
+export declare function sh(sandbox: ExecutableSandbox, script: string, options?: ShOptions): Promise<SandboxCommandResult>;
 /** Error raised when the sandbox cannot materialize the repo (actionable). */
 export declare class MaterializeError extends Error {
     readonly code: 'git-missing' | 'egress-blocked' | 'clone-failed' | 'pull-failed' | 'push-failed' | 'commit-failed' | 'gh-missing' | 'pr-failed';
@@ -95,47 +63,24 @@ export interface RepoMaterializeInfo {
 }
 /** Options for {@link materializeRepo}. */
 export interface MaterializeRepoOptions {
-    /** The per-(project,user) sandbox binding (provisioned via `ensureProjectSandbox`). */
+    /** The per-(project,user) sandbox binding whose workdir this materializes into. */
     row: RepoMaterializationBinding;
     /** Repo metadata from the org-owned project row. */
     repoInfo: RepoMaterializeInfo;
     /** The live sandbox to run git inside. */
-    sandbox: MaterializationSandbox;
+    sandbox: ExecutableSandbox;
     /** A freshly minted, short-lived installation access token. */
     token: string;
     storage: MaterializationStore;
-    onProgress?: ProgressFn;
-    /**
-     * Skip the default-branch `git pull --ff-only` when the workdir already
-     * holds a checkout. Set when the checkout was just seeded from a fresh base
-     * checkpoint (rebuilt on every default-branch push), where the pull is
-     * redundant network cost: session work happens on a branch that
-     * `checkoutSessionBranch` fetches fresh regardless.
-     */
-    skipPullOnExistingCheckout?: boolean;
 }
 /**
  * Materialize the repo inside the user's sandbox. Clones on first open, pulls on
  * re-open. Always scrubs the install token from the remote afterwards and sets
  * `materialized_at` on the per-user sandbox binding row.
- *
  */
 export declare function materializeRepo(options: MaterializeRepoOptions): Promise<void>;
-/**
- * Reset a pooled workdir that a new session just claimed: the previous
- * session's branch and dirty state must not leak into the new session, so
- * force-checkout the default branch, drop all local modifications, and delete
- * every other local branch (a surviving branch would otherwise hand the next
- * session for the same branch the previous session's stale tip instead of a
- * fresh fork from the base branch). When the claimed VM was reaped and
- * re-provisioned there is no checkout yet and this is a no-op (the clone path
- * handles it). A wedged checkout falls back to wiping the workdir so
- * `materializeRepo` re-clones inside the same VM instead of permanently
- * failing the session.
- */
-export declare function recycleClaimedWorkdir(sandbox: MaterializationSandbox, workdir: string, defaultBranch: string): Promise<void>;
 /** Check out a session's branch inside its isolated repository clone. */
-export declare function checkoutSessionBranch(sandbox: MaterializationSandbox, workdir: string, options: {
+export declare function checkoutSessionBranch(sandbox: ExecutableSandbox, workdir: string, options: {
     branch: string;
     baseBranch: string;
     token: string;
@@ -146,7 +91,7 @@ export declare function checkoutSessionBranch(sandbox: MaterializationSandbox, w
  * this exact repo. Matches both the clean and token-auth URL forms; any other
  * remote (or no git dir at all) falls back to the clone path.
  */
-export declare function hasExistingCheckout(sandbox: MaterializationSandbox, workdir: string, repoFullName: string): Promise<boolean>;
+export declare function hasExistingCheckout(sandbox: ExecutableSandbox, workdir: string, repoFullName: string): Promise<boolean>;
 /**
  * Validate a git ref (branch) name. Server-side defense-in-depth: only allow a
  * conservative character set so a branch can never be built into a shell
@@ -173,7 +118,7 @@ export declare function resolveGitIdentity(identity: GitIdentity): {
  * Configure `user.name` / `user.email` for the given repo working tree inside
  * the sandbox so commits are authored correctly. Values are shell-quoted.
  */
-export declare function configureGitIdentity(sandbox: MaterializationSandbox, workdir: string, identity: GitIdentity): Promise<void>;
+export declare function configureGitIdentity(sandbox: ExecutableSandbox, workdir: string, identity: GitIdentity): Promise<void>;
 /**
  * Temporarily rewrite `origin` to a tokenized URL, run `fn` (e.g. a push), and
  * **always** scrub the remote back to the tokenless URL afterwards. The token
@@ -186,14 +131,14 @@ export declare function configureGitIdentity(sandbox: MaterializationSandbox, wo
  * Only a failed set-url (the token never reached the remote) downgrades the
  * scrub to best-effort.
  */
-export declare function withInstallToken<T>(sandbox: MaterializationSandbox, workdir: string, repoFullName: string, token: string, fn: () => Promise<T>): Promise<T>;
+export declare function withInstallToken<T>(sandbox: ExecutableSandbox, workdir: string, repoFullName: string, token: string, fn: () => Promise<T>): Promise<T>;
 /**
  * Push a branch back to GitHub from inside the sandbox using a short-lived
  * installation token. The branch is ref-validated, the token is injected only
  * into the remote URL via `withInstallToken`, and egress failures are
  * classified into actionable errors.
  */
-export declare function pushBranch(sandbox: MaterializationSandbox, workdir: string, branch: string, token: string, repoFullName: string): Promise<void>;
+export declare function pushBranch(sandbox: ExecutableSandbox, workdir: string, branch: string, token: string, repoFullName: string): Promise<void>;
 export interface CommitResult {
     /** True when a commit was created; false when there was nothing to commit. */
     committed: boolean;
@@ -205,85 +150,26 @@ export interface CommitResult {
  * error, so callers can safely commit-then-push without first diffing.
  *
  * @param sandbox  the live sandbox containing the checkout
- * @param workdir  the worktree (or repo) path to commit in
+ * @param workdir  the session workdir to commit in
  * @param message  the commit message (quoted; arbitrary text is safe)
  * @param identity authorship identity for the commit
  */
-export declare function commitAll(sandbox: MaterializationSandbox, workdir: string, message: string, identity: GitIdentity): Promise<CommitResult>;
-/** Error raised when a worktree cannot be created/reused inside the sandbox. */
-export declare class WorktreeError extends Error {
-    readonly code: 'invalid-branch' | 'worktree-failed' | 'setup-failed' | 'teardown-failed';
-    constructor(message: string, code: 'invalid-branch' | 'worktree-failed' | 'setup-failed' | 'teardown-failed');
-}
-/**
- * Reduce a (already ref-validated) branch name to a filesystem-safe directory
- * segment for the worktree path: slashes/dots/unsafe chars collapsed to `-`.
- * This only affects the *directory name*, never the git branch itself.
- *
- * Sanitization is lossy (e.g. `feat/a` and `feat-a` both reduce to `feat-a`),
- * so an 8-char hash of the original branch is appended whenever the sanitized
- * form differs from the input. That keeps clean names (`main`) readable while
- * guaranteeing distinct branches never share a worktree directory.
- */
-export declare function safeBranchDir(branch: string): string;
-/**
- * Compute the absolute worktree path for a branch, server-side only. Worktrees
- * live alongside the repo checkout under a sibling `worktrees/` directory so the
- * repo's `.git` is shared. Never derived from client-supplied paths.
- */
-export declare function computeWorktreePath(repoWorkdir: string, branch: string): string;
-export interface EnsureWorktreeResult {
-    worktreePath: string;
-    branch: string;
-    baseBranch: string;
-    /** True when an existing worktree was reused rather than freshly created. */
-    reused: boolean;
+export declare function commitAll(sandbox: ExecutableSandbox, workdir: string, message: string, identity: GitIdentity): Promise<CommitResult>;
+/** Error raised when the org's setup or teardown command fails in the sandbox. */
+export declare class SetupCommandError extends Error {
+    readonly code: 'setup-failed' | 'teardown-failed';
+    constructor(message: string, code: 'setup-failed' | 'teardown-failed');
 }
-/**
- * Create (or reuse) a git worktree + branch inside the sandbox for a unit of
- * work. Idempotent: if a worktree already exists at the computed path it is
- * reused. The branch is created from the freshly fetched `origin/<baseBranch>`
- * — never the sandbox's possibly stale local ref — so new worktrees always
- * start from the latest remote state.
- *
- * @param sandbox       live sandbox containing the base checkout
- * @param repoWorkdir   the base repo checkout path inside the sandbox
- * @param branch        the feature branch (ref-validated server-side)
- * @param baseBranch    the branch to fork from (ref-validated; defaults to the repo's default branch)
- * @param token         short-lived installation token used only for the base-branch fetch
- * @param repoFullName  `owner/repo` used to build the tokenized remote URL
- */
-export declare function ensureWorktree(sandbox: MaterializationSandbox, repoWorkdir: string, { branch, baseBranch, token, repoFullName, }: {
-    branch: string;
-    baseBranch: string;
-    token: string;
-    repoFullName: string;
-}): Promise<EnsureWorktreeResult>;
-export declare function runWorktreeSetup(sandbox: MaterializationSandbox, worktreePath: string, command: string): Promise<void>;
+export declare function runSetupCommand(sandbox: ExecutableSandbox, workdir: string, command: string): Promise<void>;
 /**
  * Run the repository's best-effort teardown command from the materialized
  * session workdir. Callers own lifecycle policy: this helper reports failures
  * so the retirement coordinator can log them while still continuing with
  * scrub, pooling/destruction, cache invalidation, and row deletion.
  */
-export declare function runWorktreeTeardown(sandbox: MaterializationSandbox, worktreePath: string, command: string, options?: {
+export declare function runTeardownCommand(sandbox: ExecutableSandbox, workdir: string, command: string, options?: {
     timeoutMs?: number;
 }): Promise<void>;
-/**
- * Remove a worktree (and its local feature branch) from the sandbox. The
- * checkout is removed with `--force` — the caller owns confirming that any
- * uncommitted work in it can be discarded. Idempotent: a worktree whose
- * directory is already gone only has its metadata pruned.
- *
- * @param sandbox       live sandbox containing the base checkout
- * @param repoWorkdir   the base repo checkout path inside the sandbox
- * @param branch        the worktree's feature branch (ref-validated)
- * @param worktreePath  the persisted, server-computed worktree path
- */
-export declare function removeWorktree(sandbox: MaterializationSandbox, repoWorkdir: string, { branch, worktreePath }: {
-    branch: string;
-    worktreePath: string;
-}): Promise<void>;
 export interface CreatePullRequestArgs {
     /** Short-lived installation token, injected only into the `gh` process env. */
     token: string;
@@ -309,6 +195,6 @@ export interface CreatePullRequestResult {
  * @param sandbox live sandbox containing the checkout
  * @param workdir the worktree (or repo) path the PR head branch is checked out in
  */
-export declare function createPullRequest(sandbox: MaterializationSandbox, workdir: string, { token, base, head, title, body }: CreatePullRequestArgs): Promise<CreatePullRequestResult>;
+export declare function createPullRequest(sandbox: ExecutableSandbox, workdir: string, { token, base, head, title, body }: CreatePullRequestArgs): Promise<CreatePullRequestResult>;
 export {};
 //# sourceMappingURL=sandbox.d.ts.map

package/dist/integrations/github/sandbox.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EACV,sBAAsB,EACtB,UAAU,EAEV,oBAAoB,EACpB,YAAY,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAC3B,MAAM,8CAA8C,CAAC;AAGtD,KAAK,2BAA2B,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;AAC3E,KAAK,oBAAoB,GAAG,IAAI,CAAC,2BAA2B,EAAE,kBAAkB,CAAC,CAAC;AAElF,UAAU,0BAA0B;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAoBD;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IAClD,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,OAAO,EAAE,2BAA2B,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAKlC;AAED;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,KAAK,EAAE,YAAY,CAAC;IACpB,GAAG,EAAE,wBAAwB,CAAC;IAC9B,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,EAAE,sBAAsB,CAAC;CAClC,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAc,CAAC;AACtD,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,QAAa,CAAC;AAEtD,UAAU,SAAS;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAkBD;;;;;;GAMG;AACH,wBAAsB,EAAE,CACtB,OAAO,EAAE,sBAAsB,EAC/B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,SAAc,GACtB,OAAO,CAAC,oBAAoB,CAAC,CAc/B;AA+ED,8EAA8E;AAC9E,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;gBATf,OAAO,EAAE,MAAM,EACN,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;CAKlB;AAcD,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,uFAAuF;IACvF,GAAG,EAAE,0BAA0B,CAAC;IAChC,oDAAoD;IACpD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,0CAA0C;IAC1C,OAAO,EAAE,sBAAsB,CAAC;IAChC,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB,CAAC;IAC9B,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB;;;;;;OAMG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;AAyJD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,IAAI,CAAC,CAmCf;AAED,yEAAyE;AACzE,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACnF,OAAO,CAAC,IAAI,CAAC,CAEf;AA2GD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAMlB;AA6HD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAU7D;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOzF;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAyBZ;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAqBvB;AAUD,gFAAgF;AAChF,qBAAa,aAAc,SAAQ,KAAK;IAGpC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,cAAc,GAAG,iBAAiB;gBADxF,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,cAAc,GAAG,iBAAiB;CAK3F;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAUpD;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAG/E;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,MAAM,EAAE,OAAO,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,MAAM,EACnB,EACE,MAAM,EACN,UAAU,EACV,KAAK,EACL,YAAY,GACb,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAC7E,OAAO,CAAC,oBAAoB,CAAC,CAgD/B;AA0CD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,sBAAsB,EAC/B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,sBAAsB,EAC/B,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACnC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,sBAAsB,EAC/B,WAAW,EAAE,MAAM,EACnB,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACjE,OAAO,CAAC,IAAI,CAAC,CA0Bf;AAYD,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;CACb;AAuBD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,sBAAsB,EAC/B,OAAO,EAAE,MAAM,EACf,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,qBAAqB,GACxD,OAAO,CAAC,uBAAuB,CAAC,CAwClC"}
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/integrations/github/sandbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAChG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8CAA8C,CAAC;AAG/F,KAAK,oBAAoB,GAAG,IAAI,CAAC,0BAA0B,CAAC,UAAU,CAAC,EAAE,kBAAkB,CAAC,CAAC;AAE7F,UAAU,0BAA0B;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,IAAI,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAAc,CAAC;AACtD,4EAA4E;AAC5E,eAAO,MAAM,2BAA2B,QAAa,CAAC;AAEtD,UAAU,SAAS;IACjB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAkBD;;;;;;GAMG;AACH,wBAAsB,EAAE,CACtB,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,SAAc,GACtB,OAAO,CAAC,oBAAoB,CAAC,CAc/B;AA+ED,8EAA8E;AAC9E,qBAAa,gBAAiB,SAAQ,KAAK;IAGvC,QAAQ,CAAC,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;gBATf,OAAO,EAAE,MAAM,EACN,IAAI,EACT,aAAa,GACb,gBAAgB,GAChB,cAAc,GACd,aAAa,GACb,aAAa,GACb,eAAe,GACf,YAAY,GACZ,WAAW;CAKlB;AAcD,gFAAgF;AAChF,MAAM,WAAW,mBAAmB;IAClC,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,mFAAmF;IACnF,GAAG,EAAE,0BAA0B,CAAC;IAChC,oDAAoD;IACpD,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,0CAA0C;IAC1C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEpF;AAyHD,yEAAyE;AACzE,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GACnF,OAAO,CAAC,IAAI,CAAC,CAEf;AA2GD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,OAAO,CAAC,CAMlB;AA6HD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAU7D;AAED,0DAA0D;AAC1D,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yFAAyF;IACzF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAOzF;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,IAAI,CAAC,CAUf;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EACtC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAyBZ;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAWf;AAED,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,SAAS,CAC7B,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,WAAW,GACpB,OAAO,CAAC,YAAY,CAAC,CAqBvB;AAUD,kFAAkF;AAClF,qBAAa,iBAAkB,SAAQ,KAAK;IAGxC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,iBAAiB;gBADjD,OAAO,EAAE,MAAM,EACN,IAAI,EAAE,cAAc,GAAG,iBAAiB;CAKpD;AA2CD,wBAAsB,eAAe,CACnC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAEf;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACnC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,MAAM,WAAW,qBAAqB;IACpC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;CACb;AAuBD;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,MAAM,EACf,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,qBAAqB,GACxD,OAAO,CAAC,uBAAuB,CAAC,CAwClC"}