@namzu/sandbox 1.1.0

package/dist/index.js

@@ -0,0 +1,376 @@
+/**
+ * @namzu/sandbox — pluggable sandbox provider for @namzu/sdk.
+ *
+ * The SDK already declares a `SandboxProvider` shape in
+ * `@namzu/sdk` (`packages/sdk/src/types/sandbox/index.ts`). This
+ * package implements that shape with concrete BACKENDS picked at
+ * construction time. The set is aligned with the 2026 industrial
+ * standard for AI-agent code-execution sandboxes:
+ *
+ *  • `docker` — plain OCI container per task, seccomp default
+ *    profile, tmpfs workdir, no-network-by-default. The universal
+ *    fallback every namzu host gets locally with `docker compose`
+ *    and on every Linux replica in any cloud. What Northflank /
+ *    Railway / Render / Compass-platform / GitHub Actions runners
+ *    actually ship for code execution. Trust boundary: namespaces.
+ *
+ *  • `e2b` — adapter for E2B's managed Firecracker microVM service
+ *    (`e2b.dev`). Sub-second cold-start via snapshot/restore, full
+ *    kernel-level trust boundary. The SaaS-friendly path to real
+ *    Firecracker isolation without running our own scheduler.
+ *
+ *  • `fly-machines` — adapter for Fly Machines (`fly.io/docs/machines`).
+ *    Also Firecracker microVMs; closer to bare-metal control than
+ *    E2B, useful when the workload is more "arbitrary tool calls"
+ *    than "Python REPL".
+ *
+ *  • `firecracker` — self-hosted `firecracker-containerd` on bare
+ *    metal (or KVM-enabled cloud instance). For hosts that need
+ *    Firecracker isolation AND insist on running the scheduler
+ *    themselves. Tier 3 isolation, highest operational cost.
+ *
+ *  • `gvisor` — adapter for `runsc` runtime (Google's userspace
+ *    kernel). What OpenAI Code Interpreter and Modal Labs ship.
+ *    Trusted-tenant tier with near-zero cold-start; runs on
+ *    commodity Linux without nested virt. Locally via Linux Docker
+ *    runtime; not available on macOS Docker Desktop.
+ *
+ *  • `passthrough` — no isolation, runs commands directly. For
+ *    tests and trusted environments only. Off by default; opt-in.
+ *
+ * **What we deliberately do NOT build** is yet-another Firecracker
+ * scheduler — that is E2B's and Fly's entire product, and writing
+ * our own is a years-long detour. We adapt to theirs.
+ *
+ * **Cloud portability:** the backend interface is cloud-agnostic.
+ * `docker` works on every cloud; `e2b` and `fly-machines` are
+ * managed services not tied to any cloud; `firecracker` and
+ * `gvisor` need infrastructure the host chooses (GKE Sandbox, AWS
+ * Fargate, self-hosted KVM, etc.). Picking a stronger backend may
+ * imply moving cloud — that's the host's call, not the SDK's.
+ *
+ * **Local dev story:** Phase 1 (`docker`) runs everywhere. Phase 2
+ * (`e2b` / `fly-machines`) hits the managed service from a dev
+ * laptop with no infra setup. Phase 3 (`firecracker` / `gvisor`)
+ * needs Lima/Colima on macOS or native KVM on Linux — only the
+ * adversarial-multi-tenant prod path needs that and it's clearly
+ * documented as such.
+ *
+ * This file is the public surface. Concrete backend implementations
+ * land under `./backends/<kind>/` in subsequent commits — the
+ * `SandboxBackend` interface here is the contract they implement.
+ *
+ * Refs: `e2b.dev/docs/sandbox`, `fly.io/docs/machines`,
+ * `firecracker-microvm.github.io`, `gvisor.dev/docs`,
+ * `cloud.google.com/kubernetes-engine/docs/concepts/sandbox-pods`,
+ * `aws.amazon.com/blogs/aws/firecracker-lightweight-virtualization-for-serverless-computing`.
+ */
+import { buildAciStandbyPoolBackend } from './backends/aci-standby-pool/index.js';
+import { buildDockerBackend, resolveLayout } from './backends/docker/index.js';
+import { buildFirecrackerBackend } from './backends/firecracker/index.js';
+// Re-export the default container-path constants the prompt-template
+// generator side wants to import without also depending on
+// `@namzu/sdk` directly. Single source of truth: a Vandal prompt
+// saying "write outputs to `/mnt/user-data/outputs`" imports
+// `SANDBOX_DEFAULT_OUTPUTS_PATH` instead of hard-coding the string.
+export { SANDBOX_DEFAULT_OUTPUTS_PATH, SANDBOX_DEFAULT_SKILLS_PARENT, SANDBOX_DEFAULT_TOOL_RESULTS_PATH, SANDBOX_DEFAULT_TRANSCRIPTS_PATH, SANDBOX_DEFAULT_UPLOADS_PATH, } from '@namzu/sdk';
+export { VsockAgentTransport, } from './backends/firecracker/transport.js';
+/**
+ * Build a {@link SandboxProvider} the SDK can wire into
+ * `drainQuery`'s `sandboxProvider` field. Selects the backend at
+ * construction time; subsequent `provider.create()` calls all use
+ * the chosen backend.
+ *
+ * Backends are loaded lazily — the package only imports the
+ * platform-specific modules (Anthropic's sandbox-runtime, the
+ * Docker SDK, the E2B SDK, …) when the corresponding backend is
+ * requested. That keeps `@namzu/sandbox` reasonable to install in
+ * environments where one backend is genuinely impossible.
+ *
+ * **Not implemented in this commit** — this file declares the
+ * surface; backends arrive in subsequent commits per the ses_004
+ * phase plan:
+ *
+ *   - **P3.1** — `container` (docker runtime). Phase 1: ship now.
+ *   - **P3.2** — `EgressPolicy` plumbing + reference egress proxy.
+ *   - **P3.3** — `microvm` (E2B + Fly Machines adapters). Phase 2.
+ *   - **P3.4** — `process` (Anthropic sandbox-runtime adapter).
+ *   - **P3.5** — `microvm` (self-hosted firecracker-containerd) +
+ *     `container` (gVisor runtime). Phase 3 adversarial-multi-tenant.
+ *
+ * Calling this function now throws
+ * {@link SandboxBackendNotImplementedError} so consumers get a
+ * clear signal during the staged rollout.
+ */
+export function createSandboxProvider(config) {
+    const backend = pickBackend(config);
+    const id = `namzu-${backend.tier}-${backend.name}`;
+    const name = `@namzu/sandbox: ${describeBackend(config.backend)}`;
+    return {
+        id,
+        name,
+        environment: 'basic',
+        async create(perCall) {
+            return await backend.create({
+                workingDirectory: perCall?.workingDirectory ?? '/workspace',
+                ...(config.defaultEgress !== undefined ? { egress: config.defaultEgress } : {}),
+                ...(perCall?.timeoutMs !== undefined
+                    ? { timeoutMs: perCall.timeoutMs }
+                    : config.defaultTimeoutMs !== undefined
+                        ? { timeoutMs: config.defaultTimeoutMs }
+                        : {}),
+                ...(perCall?.memoryLimitMb !== undefined
+                    ? { memoryLimitMb: perCall.memoryLimitMb }
+                    : config.defaultMemoryLimitMb !== undefined
+                        ? { memoryLimitMb: config.defaultMemoryLimitMb }
+                        : {}),
+                ...(perCall?.maxProcesses !== undefined
+                    ? { maxProcesses: perCall.maxProcesses }
+                    : config.defaultMaxProcesses !== undefined
+                        ? { maxProcesses: config.defaultMaxProcesses }
+                        : {}),
+                ...(perCall?.env !== undefined ? { env: perCall.env } : {}),
+            });
+        },
+    };
+}
+function pickBackend(config) {
+    const backend = config.backend;
+    if (backend.tier === 'container' && (backend.runtime ?? 'docker') === 'docker') {
+        // `layout` is required for container-tier backends by the
+        // discriminated union — narrow safely without a non-null
+        // assertion.
+        const layout = config
+            .layout;
+        // Resolve once at construction. Validation throws synchronously
+        // here, before the provider is returned, so any layout error
+        // surfaces during host wiring rather than mid-run.
+        const resolved = resolveLayout(layout);
+        return buildDockerBackend({
+            image: backend.image,
+            layout: resolved,
+            ...(backend.hostReachability !== undefined
+                ? { hostReachability: backend.hostReachability }
+                : {}),
+            ...(backend.network !== undefined ? { network: backend.network } : {}),
+            ...(backend.labels !== undefined ? { labels: backend.labels } : {}),
+        });
+    }
+    if (backend.tier === 'container' &&
+        backend.runtime === 'aci-standby-pool') {
+        const aciBackend = backend;
+        const layout = config
+            .layout;
+        const resolved = resolveLayout(layout);
+        return buildAciStandbyPoolBackend({
+            subscriptionId: aciBackend.subscriptionId,
+            resourceGroup: aciBackend.resourceGroup,
+            location: aciBackend.location,
+            standbyPoolResourceId: aciBackend.standbyPoolResourceId,
+            containerGroupProfileResourceId: aciBackend.containerGroupProfileResourceId,
+            ...(aciBackend.containerGroupProfileRevision !== undefined
+                ? { containerGroupProfileRevision: aciBackend.containerGroupProfileRevision }
+                : {}),
+            layout: resolved,
+            getArmToken: aciBackend.getArmToken,
+            ...(aciBackend.subnetId !== undefined ? { subnetId: aciBackend.subnetId } : {}),
+            ...(aciBackend.readyPollIntervalMs !== undefined
+                ? { readyPollIntervalMs: aciBackend.readyPollIntervalMs }
+                : {}),
+            ...(aciBackend.readyTimeoutMs !== undefined
+                ? { readyTimeoutMs: aciBackend.readyTimeoutMs }
+                : {}),
+            ...(aciBackend.workerPort !== undefined ? { workerPort: aciBackend.workerPort } : {}),
+            ...(aciBackend.armApiVersion !== undefined
+                ? { armApiVersion: aciBackend.armApiVersion }
+                : {}),
+            ...(aciBackend.containerNamePrefix !== undefined
+                ? { containerNamePrefix: aciBackend.containerNamePrefix }
+                : {}),
+        });
+    }
+    if (backend.tier === 'container' && backend.runtime === 'runsc') {
+        const layout = config
+            .layout;
+        const resolved = resolveLayout(layout);
+        return buildDockerBackend({
+            image: backend.image,
+            layout: resolved,
+            runtime: 'runsc',
+            ...(backend.hostReachability !== undefined
+                ? { hostReachability: backend.hostReachability }
+                : {}),
+            ...(backend.network !== undefined ? { network: backend.network } : {}),
+            ...(backend.labels !== undefined ? { labels: backend.labels } : {}),
+        });
+    }
+    // `microvm:self-hosted` targeting the OWNED Azure Firecracker
+    // orchestrator (ses_051). The presence of `orchestratorEndpoint` +
+    // `getToken` distinguishes the owned-platform shape from the legacy
+    // local `firecracker-containerd` shape (still unimplemented → throws
+    // below). No layout: FC is a remote-copy backend (archive-sync over
+    // vsock, like ACI), so it carries no host bind-mount layout.
+    if (backend.tier === 'microvm' &&
+        backend.service === 'self-hosted' &&
+        backend.orchestratorEndpoint !== undefined &&
+        backend.getToken !== undefined) {
+        return buildFirecrackerBackend({
+            orchestratorEndpoint: backend.orchestratorEndpoint,
+            getToken: backend.getToken,
+            ...(backend.template !== undefined ? { template: backend.template } : {}),
+            ...(backend.agentSnapshot !== undefined ? { agentSnapshot: backend.agentSnapshot } : {}),
+            ...(backend.agentVsockPort !== undefined ? { agentVsockPort: backend.agentVsockPort } : {}),
+            ...(backend.readyTimeoutMs !== undefined ? { readyTimeoutMs: backend.readyTimeoutMs } : {}),
+            ...(backend.readyPollIntervalMs !== undefined
+                ? { readyPollIntervalMs: backend.readyPollIntervalMs }
+                : {}),
+            ...(backend.mtls !== undefined ? { mtls: backend.mtls } : {}),
+            ...(backend.controlPlaneMtls !== undefined
+                ? { controlPlaneMtls: backend.controlPlaneMtls }
+                : {}),
+        });
+    }
+    throw new SandboxBackendNotImplementedError(describeBackend(backend));
+}
+/**
+ * Human-readable backend label for error messages. Returns the
+ * tier plus the concrete service / runtime when present, e.g.
+ * `'microvm:e2b'` or `'container:runsc'`.
+ */
+function describeBackend(config) {
+    if (config.tier === 'microvm')
+        return `microvm:${config.service}`;
+    if (config.tier === 'container')
+        return `container:${config.runtime ?? 'docker'}`;
+    if (config.tier === 'process')
+        return `process:${config.engine ?? 'auto'}`;
+    return config.tier;
+}
+// ---------------------------------------------------------------------------
+// Errors
+// ---------------------------------------------------------------------------
+/**
+ * Thrown by the factory when a backend is requested before its
+ * implementation has landed. Makes the staged rollout legible —
+ * consumers see exactly which backend is missing rather than a
+ * generic `TypeError: foo is not a function`.
+ *
+ * Subclasses Error so existing host error handling (instanceof
+ * checks, JSON.stringify, etc.) keeps working.
+ */
+export class SandboxBackendNotImplementedError extends Error {
+    backend;
+    name = 'SandboxBackendNotImplementedError';
+    constructor(backend) {
+        super(`Sandbox backend '${backend}' is not implemented yet. Track progress in vendor/namzu/docs.local/sessions/ses_004-native-agentic-runtime-and-sandbox.`);
+        this.backend = backend;
+    }
+}
+/**
+ * Thrown when a {@link ContainerSandboxLayout} fails validation:
+ * missing required `outputs` mount, malformed skill id, duplicate
+ * skill id, duplicate `containerPath` across mounts. The `reasons`
+ * array carries one entry per violation so consumers can surface
+ * every problem in one round-trip rather than fix-then-rerun.
+ *
+ * **Transport caveat.** `JSON.stringify(err)` works because
+ * `toJSON()` returns a plain object with `reasons` preserved. But
+ * `structuredClone(err)` on the Error object itself drops the
+ * subclass name and any non-enumerable fields. For transport
+ * boundaries (postMessage, worker IPC, log shippers) call
+ * {@link serializeSandboxError} which returns a plain object that
+ * is `structuredClone`-safe and `JSON.stringify`-safe in one shape.
+ */
+export class ContainerSandboxLayoutValidationError extends Error {
+    reasons;
+    name = 'ContainerSandboxLayoutValidationError';
+    constructor(reasons, options) {
+        super(`Invalid ContainerSandboxLayout: ${reasons.join('; ')}`, options?.cause !== undefined ? { cause: options.cause } : undefined);
+        this.reasons = reasons;
+    }
+    toJSON() {
+        return {
+            name: this.name,
+            message: this.message,
+            reasons: this.reasons,
+            ...(this.cause !== undefined ? { cause: this.cause } : {}),
+        };
+    }
+}
+/**
+ * Convert a non-Error `cause` value into a typed envelope that is
+ * safe through every transport channel. Categorises the input by
+ * runtime type so the receiver can tell e.g. "this was a Symbol"
+ * apart from "this was a string" without inspecting the message
+ * format.
+ */
+function serializeNonErrorCause(value) {
+    if (value === null)
+        return { name: 'NonError', message: 'null' };
+    if (value === undefined)
+        return { name: 'NonError', message: 'undefined' };
+    if (typeof value === 'function')
+        return { name: 'Function', message: '[function]' };
+    if (typeof value === 'symbol')
+        return { name: 'Symbol', message: value.toString() };
+    if (typeof value === 'bigint')
+        return { name: 'BigInt', message: value.toString() };
+    if (typeof value === 'number' && !Number.isFinite(value)) {
+        return { name: 'NonFiniteNumber', message: String(value) };
+    }
+    if (typeof value === 'string')
+        return { name: 'NonError', message: value };
+    if (typeof value === 'number' || typeof value === 'boolean') {
+        return { name: 'NonError', message: String(value) };
+    }
+    // Plain objects / arrays — JSON-stringify with a fallback so
+    // values that contain non-JSON-safe leaves (Symbol-keyed props,
+    // BigInt, …) still produce a printable message.
+    return { name: 'NonError', message: safeStringify(value) };
+}
+export function serializeSandboxError(err) {
+    return serializeWithGuard(err, new WeakSet());
+}
+function serializeWithGuard(err, seen) {
+    // Non-Error inputs go through the typed-envelope path. Primitive
+    // values can't participate in a cycle so the WeakSet is a no-op
+    // for them; object inputs (plain objects, arrays) DO need the
+    // cycle guard before `safeStringify` is reached.
+    if (!(err instanceof Error)) {
+        if (typeof err === 'object' && err !== null) {
+            if (seen.has(err))
+                return { name: 'CircularReference', message: '[circular]' };
+            seen.add(err);
+        }
+        return serializeNonErrorCause(err);
+    }
+    if (seen.has(err)) {
+        return { name: 'CircularReference', message: '[circular]' };
+    }
+    seen.add(err);
+    const out = {
+        name: err.name,
+        message: err.message,
+    };
+    if (err.stack !== undefined)
+        out.stack = err.stack;
+    if (err instanceof ContainerSandboxLayoutValidationError) {
+        out.reasons = err.reasons;
+    }
+    // Walk the cause chain. The same `seen` set is threaded through
+    // the recursion so a cycle detected at any depth replaces the
+    // offending node with the sentinel rather than blowing the stack.
+    if ('cause' in err && err.cause !== undefined) {
+        out.cause = serializeWithGuard(err.cause, seen);
+    }
+    return out;
+}
+function safeStringify(value) {
+    try {
+        return JSON.stringify(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkEG;AASH,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAA;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAA;AAazE,qEAAqE;AACrE,2DAA2D;AAC3D,iEAAiE;AACjE,6DAA6D;AAC7D,oEAAoE;AACpE,OAAO,EACN,4BAA4B,EAC5B,6BAA6B,EAC7B,iCAAiC,EACjC,gCAAgC,EAChC,4BAA4B,GAC5B,MAAM,YAAY,CAAA;AAUnB,OAAO,EAGN,mBAAmB,GACnB,MAAM,qCAAqC,CAAA;AA4b5C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IAClE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IACnC,MAAM,EAAE,GAAG,SAAS,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE,CAAA;IAClD,MAAM,IAAI,GAAG,mBAAmB,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAA;IACjE,OAAO;QACN,EAAE;QACF,IAAI;QACJ,WAAW,EAAE,OAAO;QACpB,KAAK,CAAC,MAAM,CAAC,OAA6B;YACzC,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC;gBAC3B,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,IAAI,YAAY;gBAC3D,GAAG,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,GAAG,CAAC,OAAO,EAAE,SAAS,KAAK,SAAS;oBACnC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE;oBAClC,CAAC,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;wBACtC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,gBAAgB,EAAE;wBACxC,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,aAAa,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;oBAC1C,CAAC,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS;wBAC1C,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,oBAAoB,EAAE;wBAChD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,YAAY,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE;oBACxC,CAAC,CAAC,MAAM,CAAC,mBAAmB,KAAK,SAAS;wBACzC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,mBAAmB,EAAE;wBAC9C,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAA;QACH,CAAC;KACD,CAAA;AACF,CAAC;AAED,SAAS,WAAW,CAAC,MAA6B;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChF,0DAA0D;QAC1D,yDAAyD;QACzD,aAAa;QACb,MAAM,MAAM,GAAI,MAA6E;aAC3F,MAAM,CAAA;QACR,gEAAgE;QAChE,6DAA6D;QAC7D,mDAAmD;QACnD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QACtC,OAAO,kBAAkB,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,QAAQ;YAChB,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAA;IACH,CAAC;IACD,IACC,OAAO,CAAC,IAAI,KAAK,WAAW;QAC3B,OAA2C,CAAC,OAAO,KAAK,kBAAkB,EAC1E,CAAC;QACF,MAAM,UAAU,GAAG,OAAiD,CAAA;QACpE,MAAM,MAAM,GAAI,MAA6E;aAC3F,MAAM,CAAA;QACR,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QACtC,OAAO,0BAA0B,CAAC;YACjC,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,aAAa,EAAE,UAAU,CAAC,aAAa;YACvC,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,qBAAqB,EAAE,UAAU,CAAC,qBAAqB;YACvD,+BAA+B,EAAE,UAAU,CAAC,+BAA+B;YAC3E,GAAG,CAAC,UAAU,CAAC,6BAA6B,KAAK,SAAS;gBACzD,CAAC,CAAC,EAAE,6BAA6B,EAAE,UAAU,CAAC,6BAA6B,EAAE;gBAC7E,CAAC,CAAC,EAAE,CAAC;YACN,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,GAAG,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,UAAU,CAAC,mBAAmB,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE,mBAAmB,EAAE,UAAU,CAAC,mBAAmB,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,UAAU,CAAC,cAAc,KAAK,SAAS;gBAC1C,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE;gBAC/C,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,GAAG,CAAC,UAAU,CAAC,aAAa,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,CAAC,aAAa,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,UAAU,CAAC,mBAAmB,KAAK,SAAS;gBAC/C,CAAC,CAAC,EAAE,mBAAmB,EAAE,UAAU,CAAC,mBAAmB,EAAE;gBACzD,CAAC,CAAC,EAAE,CAAC;SACN,CAAC,CAAA;IACH,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QACjE,MAAM,MAAM,GAAI,MAA6E;aAC3F,MAAM,CAAA;QACR,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAA;QACtC,OAAO,kBAAkB,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,OAAO;YAChB,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAA;IACH,CAAC;IACD,8DAA8D;IAC9D,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,oEAAoE;IACpE,6DAA6D;IAC7D,IACC,OAAO,CAAC,IAAI,KAAK,SAAS;QAC1B,OAAO,CAAC,OAAO,KAAK,aAAa;QACjC,OAAO,CAAC,oBAAoB,KAAK,SAAS;QAC1C,OAAO,CAAC,QAAQ,KAAK,SAAS,EAC7B,CAAC;QACF,OAAO,uBAAuB,CAAC;YAC9B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;YAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,GAAG,CAAC,OAAO,CAAC,mBAAmB,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE;gBACtD,CAAC,CAAC,EAAE,CAAC;YACN,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,gBAAgB,KAAK,SAAS;gBACzC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;SACN,CAAC,CAAA;IACH,CAAC;IACD,MAAM,IAAI,iCAAiC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAA;AACtE,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAA4B;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,MAAM,CAAC,OAAO,EAAE,CAAA;IACjE,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,aAAa,MAAM,CAAC,OAAO,IAAI,QAAQ,EAAE,CAAA;IACjF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,WAAW,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE,CAAA;IAC1E,OAAO,MAAM,CAAC,IAAI,CAAA;AACnB,CAAC;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAG/B;IAFV,IAAI,GAAG,mCAAmC,CAAA;IAE5D,YAA4B,OAAe;QAC1C,KAAK,CACJ,oBAAoB,OAAO,0HAA0H,CACrJ,CAAA;QAH0B,YAAO,GAAP,OAAO,CAAQ;IAI3C,CAAC;CACD;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,OAAO,qCAAsC,SAAQ,KAAK;IAI9C;IAHC,IAAI,GAAG,uCAAuC,CAAA;IAEhE,YACiB,OAA0B,EAC1C,OAA6B;QAE7B,KAAK,CACJ,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EACvD,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CACnE,CAAA;QANe,YAAO,GAAP,OAAO,CAAmB;IAO3C,CAAC;IAED,MAAM;QAML,OAAO;YACN,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1D,CAAA;IACF,CAAC;CACD;AAsDD;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,KAAc;IAC7C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;IAC1E,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAA;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAA;IACnF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IAC3D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC1E,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;IACpD,CAAC;IACD,6DAA6D;IAC7D,gEAAgE;IAChE,gDAAgD;IAChD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAA;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAY;IACjD,OAAO,kBAAkB,CAAC,GAAG,EAAE,IAAI,OAAO,EAAE,CAAC,CAAA;AAC9C,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAY,EAAE,IAAqB;IAC9D,iEAAiE;IACjE,gEAAgE;IAChE,8DAA8D;IAC9D,iDAAiD;IACjD,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,CAAC,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;YAC9E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QACd,CAAC;QACD,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAA;IACnC,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,YAAY,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAEb,MAAM,GAAG,GAML;QACH,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,GAAG,CAAC,OAAO;KACpB,CAAA;IACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAA;IAClD,IAAI,GAAG,YAAY,qCAAqC,EAAE,CAAC;QAC1D,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;IAC1B,CAAC;IACD,gEAAgE;IAChE,8DAA8D;IAC9D,kEAAkE;IAClE,IAAI,OAAO,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/C,GAAG,CAAC,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;IAC7B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACF,CAAC"}

package/dist/index.test.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Behavioural contract for `createSandboxProvider`, `resolveLayout`,
+ * and `renderLayoutMountArgs`:
+ *
+ * - Builds a `SandboxProvider` for the `container:docker` tier
+ *   without spawning anything (the container only spawns on
+ *   `provider.create()`, not at construction time). The provider
+ *   carries a layout baked in at construction; per-task hosts
+ *   construct one provider per task.
+ * - Throws `SandboxBackendNotImplementedError` for tiers the docker
+ *   backend has not landed yet, with a label that names the missing
+ *   tier and concrete service.
+ * - Layout validation happens synchronously inside
+ *   `createSandboxProvider`; `ContainerSandboxLayoutValidationError` exposes
+ *   a `reasons` array so consumers see every violation in one
+ *   round-trip.
+ * - Every `--volume` source rendered by the docker backend traces
+ *   back to a layout `hostDir.hostPath` declared by the consumer —
+ *   pinned here as a regression guard against the old `mkdtemp`-
+ *   allocated workspace path that hit EACCES in sibling-container
+ *   deployments.
+ *
+ * Docker-touching integration tests live under
+ * `backends/docker/__tests__/` and skip when `docker` isn't
+ * available; this file stays pure-unit.
+ */
+export {};
+//# sourceMappingURL=index.test.d.ts.map

package/dist/index.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.test.d.ts","sourceRoot":"","sources":["../src/index.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG"}