@openai/agents-core 0.8.5 → 0.9.1

package/dist/sandbox/shared/posixPath.mjs

@@ -0,0 +1,81 @@
+export function hasBackslashPathSeparator(path) {
+    return path.trim().includes('\\');
+}
+export function hasParentPathSegment(path) {
+    return path
+        .trim()
+        .split('/')
+        .some((segment) => segment === '..');
+}
+export function hasEscapingParentPathSegment(path) {
+    let depth = 0;
+    for (const segment of path.trim().split('/')) {
+        if (!segment || segment === '.') {
+            continue;
+        }
+        if (segment !== '..') {
+            depth += 1;
+            continue;
+        }
+        if (depth === 0) {
+            return true;
+        }
+        depth -= 1;
+    }
+    return false;
+}
+export function normalizePosixPath(path) {
+    const trimmed = path.trim();
+    const isAbsolute = trimmed.startsWith('/');
+    const segments = [];
+    for (const segment of trimmed.split('/')) {
+        if (!segment || segment === '.') {
+            continue;
+        }
+        if (segment === '..') {
+            if (segments.length > 0) {
+                segments.pop();
+            }
+            continue;
+        }
+        segments.push(segment);
+    }
+    const normalized = segments.join('/');
+    if (isAbsolute) {
+        return normalized ? `/${normalized}` : '/';
+    }
+    return normalized || '.';
+}
+export function posixDirname(path) {
+    if (path === '/') {
+        return '/';
+    }
+    const normalized = path.replace(/\/+$/u, '');
+    if (!normalized || normalized === '/') {
+        return '.';
+    }
+    const index = normalized.lastIndexOf('/');
+    if (index < 0) {
+        return '.';
+    }
+    return index === 0 ? '/' : normalized.slice(0, index);
+}
+export function isUnderPosixPath(path, root) {
+    if (root === '/') {
+        return path.startsWith('/');
+    }
+    return path === root || path.startsWith(`${root}/`);
+}
+export function relativePosixPathWithinRoot(root, path) {
+    if (!isUnderPosixPath(path, root)) {
+        return null;
+    }
+    if (path === root) {
+        return '';
+    }
+    if (root === '/') {
+        return path.slice(1);
+    }
+    return path.slice(root.length + 1);
+}
+//# sourceMappingURL=posixPath.mjs.map

package/dist/sandbox/shared/posixPath.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"posixPath.mjs","sourceRoot":"","sources":["../../../src/sandbox/shared/posixPath.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,IAAI;SACR,IAAI,EAAE;SACN,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;YAChC,SAAS;QACX,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxB,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;YACD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7C,CAAC;IACD,OAAO,UAAU,IAAI,GAAG,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,EAAE,CAAC;QACtC,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAY;IACzD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,IAAY,EACZ,IAAY;IAEZ,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/sandbox/shared/remoteMountCommandAllowlist.d.ts

@@ -0,0 +1,3 @@
+export declare const DEFAULT_REMOTE_MOUNT_COMMAND_ALLOWLIST: string[];
+export declare function isDefaultRemoteMountCommandAllowlist(allowlist: readonly string[]): boolean;
+export declare function hasCustomRemoteMountCommandAllowlist(allowlist: readonly string[]): boolean;

package/dist/sandbox/shared/remoteMountCommandAllowlist.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_REMOTE_MOUNT_COMMAND_ALLOWLIST = void 0;
+exports.isDefaultRemoteMountCommandAllowlist = isDefaultRemoteMountCommandAllowlist;
+exports.hasCustomRemoteMountCommandAllowlist = hasCustomRemoteMountCommandAllowlist;
+const compare_1 = require("./compare.js");
+exports.DEFAULT_REMOTE_MOUNT_COMMAND_ALLOWLIST = [
+    'ls',
+    'find',
+    'stat',
+    'cat',
+    'less',
+    'head',
+    'tail',
+    'du',
+    'grep',
+    'rg',
+    'wc',
+    'sort',
+    'cut',
+    'cp',
+    'tee',
+    'echo',
+    'mkdir',
+    'rm',
+];
+function isDefaultRemoteMountCommandAllowlist(allowlist) {
+    return (0, compare_1.arraysEqual)(allowlist, exports.DEFAULT_REMOTE_MOUNT_COMMAND_ALLOWLIST);
+}
+function hasCustomRemoteMountCommandAllowlist(allowlist) {
+    return (allowlist.length > 0 && !isDefaultRemoteMountCommandAllowlist(allowlist));
+}
+//# sourceMappingURL=remoteMountCommandAllowlist.js.map

package/dist/sandbox/shared/remoteMountCommandAllowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteMountCommandAllowlist.js","sourceRoot":"","sources":["../../../src/sandbox/shared/remoteMountCommandAllowlist.ts"],"names":[],"mappings":";;;AAuBA,oFAIC;AAED,oFAMC;AAnCD,0CAAwC;AAE3B,QAAA,sCAAsC,GAAG;IACpD,IAAI;IACJ,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,OAAO;IACP,IAAI;CACL,CAAC;AAEF,SAAgB,oCAAoC,CAClD,SAA4B;IAE5B,OAAO,IAAA,qBAAW,EAAC,SAAS,EAAE,8CAAsC,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,oCAAoC,CAClD,SAA4B;IAE5B,OAAO,CACL,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAS,CAAC,CACzE,CAAC;AACJ,CAAC"}

package/dist/sandbox/shared/remoteMountCommandAllowlist.mjs

@@ -0,0 +1,28 @@
+import { arraysEqual } from "./compare.mjs";
+export const DEFAULT_REMOTE_MOUNT_COMMAND_ALLOWLIST = [
+    'ls',
+    'find',
+    'stat',
+    'cat',
+    'less',
+    'head',
+    'tail',
+    'du',
+    'grep',
+    'rg',
+    'wc',
+    'sort',
+    'cut',
+    'cp',
+    'tee',
+    'echo',
+    'mkdir',
+    'rm',
+];
+export function isDefaultRemoteMountCommandAllowlist(allowlist) {
+    return arraysEqual(allowlist, DEFAULT_REMOTE_MOUNT_COMMAND_ALLOWLIST);
+}
+export function hasCustomRemoteMountCommandAllowlist(allowlist) {
+    return (allowlist.length > 0 && !isDefaultRemoteMountCommandAllowlist(allowlist));
+}
+//# sourceMappingURL=remoteMountCommandAllowlist.mjs.map

package/dist/sandbox/shared/remoteMountCommandAllowlist.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remoteMountCommandAllowlist.mjs","sourceRoot":"","sources":["../../../src/sandbox/shared/remoteMountCommandAllowlist.ts"],"names":[],"mappings":"OAAO,EAAE,WAAW,EAAE;AAEtB,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,IAAI;IACJ,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,MAAM;IACN,KAAK;IACL,IAAI;IACJ,KAAK;IACL,MAAM;IACN,OAAO;IACP,IAAI;CACL,CAAC;AAEF,MAAM,UAAU,oCAAoC,CAClD,SAA4B;IAE5B,OAAO,WAAW,CAAC,SAAS,EAAE,sCAAsC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,oCAAoC,CAClD,SAA4B;IAE5B,OAAO,CACL,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,oCAAoC,CAAC,SAAS,CAAC,CACzE,CAAC;AACJ,CAAC"}

package/dist/sandbox/shared/shell.d.ts

@@ -0,0 +1 @@
+export declare function shellQuote(value: string): string;

package/dist/sandbox/shared/shell.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shellQuote = shellQuote;
+function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=shell.js.map

package/dist/sandbox/shared/shell.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.js","sourceRoot":"","sources":["../../../src/sandbox/shared/shell.ts"],"names":[],"mappings":";;AAAA,gCAEC;AAFD,SAAgB,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC"}

package/dist/sandbox/shared/shell.mjs

@@ -0,0 +1,4 @@
+export function shellQuote(value) {
+    return `'${value.replace(/'/g, "'\\''")}'`;
+}
+//# sourceMappingURL=shell.mjs.map

package/dist/sandbox/shared/shell.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"shell.mjs","sourceRoot":"","sources":["../../../src/sandbox/shared/shell.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AAC7C,CAAC"}

package/dist/sandbox/shared/stableJson.d.ts

@@ -0,0 +1,12 @@
+type StableJsonFunction = {
+    readonly name?: string;
+};
+export type StableJsonValueOptions = {
+    encodeBytes?: (value: Uint8Array) => unknown;
+    encodeFunction?: (value: StableJsonFunction) => unknown;
+    encodeNonPlainObject?: (value: object) => unknown;
+};
+export declare function stableJsonStringify(value: unknown, options?: StableJsonValueOptions): string;
+export declare function stableJsonPrettyStringify(value: unknown, options?: StableJsonValueOptions): string;
+export declare function stableJsonValue(value: unknown, options?: StableJsonValueOptions): unknown;
+export {};

package/dist/sandbox/shared/stableJson.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stableJsonStringify = stableJsonStringify;
+exports.stableJsonPrettyStringify = stableJsonPrettyStringify;
+exports.stableJsonValue = stableJsonValue;
+function stableJsonStringify(value, options = {}) {
+    return JSON.stringify(stableJsonValue(value, options));
+}
+function stableJsonPrettyStringify(value, options = {}) {
+    return JSON.stringify(stableJsonValue(value, options), null, 2).replace(/": /g, '":');
+}
+function stableJsonValue(value, options = {}) {
+    if (value instanceof Uint8Array) {
+        return options.encodeBytes
+            ? options.encodeBytes(value)
+            : { type: 'Uint8Array', data: Array.from(value) };
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => stableJsonValue(entry, options));
+    }
+    if (typeof value === 'function') {
+        return options.encodeFunction
+            ? options.encodeFunction(value)
+            : value;
+    }
+    if (!value || typeof value !== 'object') {
+        return value;
+    }
+    if (options.encodeNonPlainObject && !isPlainRecord(value)) {
+        return options.encodeNonPlainObject(value);
+    }
+    return Object.fromEntries(Object.entries(value)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, entry]) => [key, stableJsonValue(entry, options)]));
+}
+function isPlainRecord(value) {
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+//# sourceMappingURL=stableJson.js.map

package/dist/sandbox/shared/stableJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stableJson.js","sourceRoot":"","sources":["../../../src/sandbox/shared/stableJson.ts"],"names":[],"mappings":";;AAUA,kDAKC;AAED,8DAQC;AAED,0CA4BC;AA7CD,SAAgB,mBAAmB,CACjC,KAAc,EACd,UAAkC,EAAE;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,SAAgB,yBAAyB,CACvC,KAAc,EACd,UAAkC,EAAE;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CACrE,MAAM,EACN,IAAI,CACL,CAAC;AACJ,CAAC;AAED,SAAgB,eAAe,CAC7B,KAAc,EACd,UAAkC,EAAE;IAEpC,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,WAAW;YACxB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,cAAc;YAC3B,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,KAA2B,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC"}

package/dist/sandbox/shared/stableJson.mjs

@@ -0,0 +1,35 @@
+export function stableJsonStringify(value, options = {}) {
+    return JSON.stringify(stableJsonValue(value, options));
+}
+export function stableJsonPrettyStringify(value, options = {}) {
+    return JSON.stringify(stableJsonValue(value, options), null, 2).replace(/": /g, '":');
+}
+export function stableJsonValue(value, options = {}) {
+    if (value instanceof Uint8Array) {
+        return options.encodeBytes
+            ? options.encodeBytes(value)
+            : { type: 'Uint8Array', data: Array.from(value) };
+    }
+    if (Array.isArray(value)) {
+        return value.map((entry) => stableJsonValue(entry, options));
+    }
+    if (typeof value === 'function') {
+        return options.encodeFunction
+            ? options.encodeFunction(value)
+            : value;
+    }
+    if (!value || typeof value !== 'object') {
+        return value;
+    }
+    if (options.encodeNonPlainObject && !isPlainRecord(value)) {
+        return options.encodeNonPlainObject(value);
+    }
+    return Object.fromEntries(Object.entries(value)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, entry]) => [key, stableJsonValue(entry, options)]));
+}
+function isPlainRecord(value) {
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+//# sourceMappingURL=stableJson.mjs.map

package/dist/sandbox/shared/stableJson.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"stableJson.mjs","sourceRoot":"","sources":["../../../src/sandbox/shared/stableJson.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,mBAAmB,CACjC,KAAc,EACd,UAAkC,EAAE;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAc,EACd,UAAkC,EAAE;IAEpC,OAAO,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CACrE,MAAM,EACN,IAAI,CACL,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,UAAkC,EAAE;IAEpC,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,WAAW;YACxB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;YAC5B,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;IACtD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC,cAAc;YAC3B,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,KAA2B,CAAC;YACrD,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC"}

package/dist/sandbox/shared/typeGuards.d.ts

@@ -0,0 +1,6 @@
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function isStringRecord(value: unknown): value is Record<string, string>;
+export declare function readOptionalString(value: Record<string, unknown>, key: string): string | undefined;
+export declare function readString(value: Record<string, unknown>, key: string, fallback?: string): string;
+export declare function readOptionalNumberArray(value: unknown): number[] | undefined;
+export declare function readStringArray(value: unknown): string[];

package/dist/sandbox/shared/typeGuards.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRecord = isRecord;
+exports.isStringRecord = isStringRecord;
+exports.readOptionalString = readOptionalString;
+exports.readString = readString;
+exports.readOptionalNumberArray = readOptionalNumberArray;
+exports.readStringArray = readStringArray;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isStringRecord(value) {
+    return (isRecord(value) &&
+        Object.values(value).every((entry) => typeof entry === 'string'));
+}
+function readOptionalString(value, key) {
+    const result = value[key];
+    return typeof result === 'string' ? result : undefined;
+}
+function readString(value, key, fallback = '') {
+    const result = value[key];
+    return result === undefined || result === null ? fallback : String(result);
+}
+function readOptionalNumberArray(value) {
+    return Array.isArray(value)
+        ? value.filter((entry) => typeof entry === 'number')
+        : undefined;
+}
+function readStringArray(value) {
+    return Array.isArray(value)
+        ? value.filter((entry) => typeof entry === 'string')
+        : [];
+}
+//# sourceMappingURL=typeGuards.js.map

package/dist/sandbox/shared/typeGuards.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeGuards.js","sourceRoot":"","sources":["../../../src/sandbox/shared/typeGuards.ts"],"names":[],"mappings":";;AAAA,4BAEC;AAED,wCAOC;AAED,gDAMC;AAED,gCAOC;AAED,0DAIC;AAED,0CAIC;AAxCD,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAgB,cAAc,CAC5B,KAAc;IAEd,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,SAAgB,kBAAkB,CAChC,KAA8B,EAC9B,GAAW;IAEX,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,SAAgB,UAAU,CACxB,KAA8B,EAC9B,GAAW,EACX,WAAmB,EAAE;IAErB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAgB,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/sandbox/shared/typeGuards.mjs

@@ -0,0 +1,26 @@
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function isStringRecord(value) {
+    return (isRecord(value) &&
+        Object.values(value).every((entry) => typeof entry === 'string'));
+}
+export function readOptionalString(value, key) {
+    const result = value[key];
+    return typeof result === 'string' ? result : undefined;
+}
+export function readString(value, key, fallback = '') {
+    const result = value[key];
+    return result === undefined || result === null ? fallback : String(result);
+}
+export function readOptionalNumberArray(value) {
+    return Array.isArray(value)
+        ? value.filter((entry) => typeof entry === 'number')
+        : undefined;
+}
+export function readStringArray(value) {
+    return Array.isArray(value)
+        ? value.filter((entry) => typeof entry === 'string')
+        : [];
+}
+//# sourceMappingURL=typeGuards.mjs.map

package/dist/sandbox/shared/typeGuards.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"typeGuards.mjs","sourceRoot":"","sources":["../../../src/sandbox/shared/typeGuards.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAc;IAEd,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,KAA8B,EAC9B,GAAW;IAEX,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,KAA8B,EAC9B,GAAW,EACX,WAAmB,EAAE;IAErB,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;QACrE,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/sandbox/snapshot.d.ts

@@ -0,0 +1,60 @@
+export interface Snapshot {
+    id: string;
+    type: string;
+    [key: string]: unknown;
+}
+export interface SnapshotSpec {
+    type: string;
+    [key: string]: unknown;
+}
+export type RemoteSnapshotSaveArgs = {
+    id?: string;
+    data: Uint8Array;
+    metadata?: Record<string, unknown>;
+};
+export type RemoteSnapshotLoadArgs = {
+    id: string;
+};
+export type RemoteSnapshotDeleteArgs = {
+    id: string;
+};
+export interface RemoteSnapshotStore {
+    save(args: RemoteSnapshotSaveArgs): Promise<{
+        id: string;
+        metadata?: Record<string, unknown>;
+    }>;
+    load(args: RemoteSnapshotLoadArgs): Promise<{
+        data: Uint8Array;
+        metadata?: Record<string, unknown>;
+    }>;
+    delete?(args: RemoteSnapshotDeleteArgs): Promise<void>;
+    exists?(args: RemoteSnapshotLoadArgs): Promise<boolean>;
+}
+export interface RemoteSnapshot extends Snapshot {
+    type: 'remote';
+    metadata?: Record<string, unknown>;
+}
+export interface RemoteSnapshotSpec extends SnapshotSpec {
+    type: 'remote';
+    id?: string;
+    store: RemoteSnapshotStore;
+    metadata?: Record<string, unknown>;
+}
+export declare class NoopSnapshotSpec implements SnapshotSpec {
+    readonly type = "noop";
+    readonly [key: string]: unknown;
+}
+export declare function isNoopSnapshotSpec(spec: SnapshotSpec | null | undefined): spec is NoopSnapshotSpec;
+export declare class InMemoryRemoteSnapshotStore implements RemoteSnapshotStore {
+    private readonly snapshots;
+    save(args: RemoteSnapshotSaveArgs): Promise<{
+        id: string;
+        metadata?: Record<string, unknown>;
+    }>;
+    load(args: RemoteSnapshotLoadArgs): Promise<{
+        data: Uint8Array;
+        metadata?: Record<string, unknown>;
+    }>;
+    delete(args: RemoteSnapshotDeleteArgs): Promise<void>;
+    exists(args: RemoteSnapshotLoadArgs): Promise<boolean>;
+}

package/dist/sandbox/snapshot.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryRemoteSnapshotStore = exports.NoopSnapshotSpec = void 0;
+exports.isNoopSnapshotSpec = isNoopSnapshotSpec;
+const _shims_1 = require("@openai/agents-core/_shims");
+class NoopSnapshotSpec {
+    type = 'noop';
+}
+exports.NoopSnapshotSpec = NoopSnapshotSpec;
+function isNoopSnapshotSpec(spec) {
+    return spec?.type === 'noop';
+}
+class InMemoryRemoteSnapshotStore {
+    snapshots = new Map();
+    async save(args) {
+        const id = args.id ?? (0, _shims_1.randomUUID)();
+        const metadata = args.metadata ? { ...args.metadata } : undefined;
+        this.snapshots.set(id, {
+            data: new Uint8Array(args.data),
+            ...(metadata ? { metadata } : {}),
+        });
+        return {
+            id,
+            ...(metadata ? { metadata } : {}),
+        };
+    }
+    async load(args) {
+        const snapshot = this.snapshots.get(args.id);
+        if (!snapshot) {
+            throw new Error(`Remote snapshot not found: ${args.id}`);
+        }
+        return {
+            data: new Uint8Array(snapshot.data),
+            ...(snapshot.metadata ? { metadata: { ...snapshot.metadata } } : {}),
+        };
+    }
+    async delete(args) {
+        this.snapshots.delete(args.id);
+    }
+    async exists(args) {
+        return this.snapshots.has(args.id);
+    }
+}
+exports.InMemoryRemoteSnapshotStore = InMemoryRemoteSnapshotStore;
+//# sourceMappingURL=snapshot.js.map

package/dist/sandbox/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/sandbox/snapshot.ts"],"names":[],"mappings":";;;AAyDA,gDAIC;AA7DD,uDAAwD;AAoDxD,MAAa,gBAAgB;IAClB,IAAI,GAAG,MAAM,CAAC;CAExB;AAHD,4CAGC;AAED,SAAgB,kBAAkB,CAChC,IAAqC;IAErC,OAAO,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC;AAC/B,CAAC;AAED,MAAa,2BAA2B;IACrB,SAAS,GAAG,IAAI,GAAG,EAGjC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,IAA4B;QAIrC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,IAAA,mBAAU,GAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC,CAAC;QACH,OAAO;YACL,EAAE;YACF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAA4B;QAIrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA8B;QACzC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA4B;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;CACF;AA3CD,kEA2CC"}

package/dist/sandbox/snapshot.mjs

@@ -0,0 +1,39 @@
+import { randomUUID } from '@openai/agents-core/_shims';
+export class NoopSnapshotSpec {
+    type = 'noop';
+}
+export function isNoopSnapshotSpec(spec) {
+    return spec?.type === 'noop';
+}
+export class InMemoryRemoteSnapshotStore {
+    snapshots = new Map();
+    async save(args) {
+        const id = args.id ?? randomUUID();
+        const metadata = args.metadata ? { ...args.metadata } : undefined;
+        this.snapshots.set(id, {
+            data: new Uint8Array(args.data),
+            ...(metadata ? { metadata } : {}),
+        });
+        return {
+            id,
+            ...(metadata ? { metadata } : {}),
+        };
+    }
+    async load(args) {
+        const snapshot = this.snapshots.get(args.id);
+        if (!snapshot) {
+            throw new Error(`Remote snapshot not found: ${args.id}`);
+        }
+        return {
+            data: new Uint8Array(snapshot.data),
+            ...(snapshot.metadata ? { metadata: { ...snapshot.metadata } } : {}),
+        };
+    }
+    async delete(args) {
+        this.snapshots.delete(args.id);
+    }
+    async exists(args) {
+        return this.snapshots.has(args.id);
+    }
+}
+//# sourceMappingURL=snapshot.mjs.map

package/dist/sandbox/snapshot.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.mjs","sourceRoot":"","sources":["../../src/sandbox/snapshot.ts"],"names":[],"mappings":"OAAO,EAAE,UAAU,EAAE,MAAM,4BAA4B;AAoDvD,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,MAAM,CAAC;CAExB;AAED,MAAM,UAAU,kBAAkB,CAChC,IAAqC;IAErC,OAAO,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC;AAC/B,CAAC;AAED,MAAM,OAAO,2BAA2B;IACrB,SAAS,GAAG,IAAI,GAAG,EAGjC,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,IAA4B;QAIrC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE;YACrB,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC,CAAC;QACH,OAAO;YACL,EAAE;YACF,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAA4B;QAIrC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;YACnC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA8B;QACzC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA4B;QACvC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/sandbox/users.d.ts

@@ -0,0 +1,11 @@
+export type SandboxUser = {
+    name: string;
+};
+export type SandboxGroup = {
+    name: string;
+    users?: SandboxUser[];
+};
+export type SandboxEntryGroup = SandboxUser | SandboxGroup;
+export declare function normalizeUser(user: SandboxUser): SandboxUser;
+export declare function normalizeGroup(group: SandboxGroup): SandboxGroup;
+export declare function normalizeEntryGroup(group: SandboxEntryGroup): SandboxEntryGroup;

package/dist/sandbox/users.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeUser = normalizeUser;
+exports.normalizeGroup = normalizeGroup;
+exports.normalizeEntryGroup = normalizeEntryGroup;
+function normalizeUser(user) {
+    const name = user.name.trim();
+    if (!name) {
+        throw new Error('Sandbox user name must be non-empty.');
+    }
+    return { name };
+}
+function normalizeGroup(group) {
+    const name = group.name.trim();
+    if (!name) {
+        throw new Error('Sandbox group name must be non-empty.');
+    }
+    return {
+        name,
+        ...(group.users
+            ? { users: group.users.map((user) => normalizeUser(user)) }
+            : {}),
+    };
+}
+function normalizeEntryGroup(group) {
+    if ('users' in group) {
+        return normalizeGroup(group);
+    }
+    return normalizeUser(group);
+}
+//# sourceMappingURL=users.js.map

package/dist/sandbox/users.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/sandbox/users.ts"],"names":[],"mappings":";;AAWA,sCAMC;AAED,wCAWC;AAED,kDAOC;AA5BD,SAAgB,aAAa,CAAC,IAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,SAAgB,cAAc,CAAC,KAAmB;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,KAAK,CAAC,KAAK;YACb,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CACjC,KAAwB;IAExB,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/sandbox/users.mjs

@@ -0,0 +1,26 @@
+export function normalizeUser(user) {
+    const name = user.name.trim();
+    if (!name) {
+        throw new Error('Sandbox user name must be non-empty.');
+    }
+    return { name };
+}
+export function normalizeGroup(group) {
+    const name = group.name.trim();
+    if (!name) {
+        throw new Error('Sandbox group name must be non-empty.');
+    }
+    return {
+        name,
+        ...(group.users
+            ? { users: group.users.map((user) => normalizeUser(user)) }
+            : {}),
+    };
+}
+export function normalizeEntryGroup(group) {
+    if ('users' in group) {
+        return normalizeGroup(group);
+    }
+    return normalizeUser(group);
+}
+//# sourceMappingURL=users.mjs.map

package/dist/sandbox/users.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"users.mjs","sourceRoot":"","sources":["../../src/sandbox/users.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,aAAa,CAAC,IAAiB;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO;QACL,IAAI;QACJ,GAAG,CAAC,KAAK,CAAC,KAAK;YACb,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE;YAC3D,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAwB;IAExB,IAAI,OAAO,IAAI,KAAK,EAAE,CAAC;QACrB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/dist/sandbox/workspacePaths.d.ts

@@ -0,0 +1,20 @@
+import { type SandboxPathGrant, type SandboxPathGrantInit } from './pathGrants';
+export type WorkspacePathPolicyOptions = {
+    root: string;
+    extraPathGrants?: SandboxPathGrantInit[];
+};
+export type ResolveSandboxPathOptions = {
+    forWrite?: boolean;
+};
+export type ResolvedSandboxPath = {
+    path: string;
+    workspaceRelativePath?: string;
+    grant?: SandboxPathGrant;
+};
+export declare class WorkspacePathPolicy {
+    readonly root: string;
+    readonly extraPathGrants: SandboxPathGrant[];
+    constructor(options: WorkspacePathPolicyOptions);
+    resolve(path?: string, options?: ResolveSandboxPathOptions): ResolvedSandboxPath;
+    private matchingGrant;
+}