@openclaw/mxc-sandbox 2026.9.4 → 2026.9.5

package/node_modules/@microsoft/mxc-sdk/dist/state-aware-types.d.ts

@@ -1,4 +1,4 @@
-import { ContainmentBackend, FilesystemConfig, ProcessConfig } from './types.js';
+import { ContainmentBackend, FilesystemConfig, NetworkConfig, ProcessConfig } from './types.js';
 /**
  * Lifecycle phase in a state-aware sandbox request.
  */
@@ -7,7 +7,7 @@ export type Phase = 'provision' | 'start' | 'exec' | 'stop' | 'deprovision';
  * Subset of `ContainmentBackend` whose backends participate in the state-aware
  * lifecycle. Extended as more backends opt in.
  */
-export type StateAwareContainmentBackend = Extract<ContainmentBackend, 'isolation_session'>;
+export type StateAwareContainmentBackend = Extract<ContainmentBackend, 'isolation_session' | 'windows_sandbox' | 'wslc'>;
 /**
  * Branded sandbox identifier returned by `provisionSandbox` and routed back
  * to the same backend by subsequent phases. The runtime value is a plain
@@ -19,44 +19,47 @@ export type SandboxId<C extends StateAwareContainmentBackend> = string & {
     readonly __mxcBrand: 'SandboxId';
     readonly __mxcBackend: C;
 };
-declare const ISO_USER_INSPECT: unique symbol;
-/**
- * Entra credentials, supplied at provision to opt into an Entra-backed
- * sandbox and at start to authenticate the session. `wamToken` is treated
- * as a secret: `util.inspect` and `console.log` redact it. `JSON.stringify`
- * is unaffected — the wire envelope carries the token verbatim.
- */
-export declare class IsolationSessionUserConfig {
-    readonly upn: string;
-    readonly wamToken: string;
-    constructor(upn: string, wamToken: string);
-    [ISO_USER_INSPECT](): string;
-}
 export interface IsolationSessionProvisionConfig {
     /** Schema version (semver). When omitted, the SDK fills in its own SUPPORTED_VERSION. */
     version?: string;
-    filesystem?: FilesystemConfig;
     /**
-     * Optional Entra credentials. When supplied, provisioning uses the Entra
-     * identity for the sandbox; the same `user` must be supplied to
-     * `startSandbox`. Hosts that don't support this surface `backend_unavailable`.
+     * Optional identifier for the calling application.
+     *
+     * **A packaged application must supply its Package Family Name in the form
+     * `PFN:<packageFamilyName>`** — the literal `PFN:` prefix followed by the
+     * PFN, e.g. `PFN:Contoso.App_8wekyb3d8bbwe`. An unpackaged application may
+     * pass any string — MXC does not interpret or verify it. Carried verbatim
+     * inside the returned `SandboxId` so later lifecycle phases can recover it
+     * without the caller re-supplying it.
+     *
+     * Validated structurally only: no control characters, at most 256
+     * characters. Whitespace and case are preserved exactly. An explicitly
+     * supplied empty string is a **distinct** value from omitting the field and
+     * round-trips as such. Rejections
+     * surface as `MxcError` with `code: 'policy_validation'`.
+     *
+     * Provision-phase only — it is fixed for the sandbox's lifetime and is not
+     * accepted on any later phase.
+     */
+    appId?: string;
+    /**
+     * Unrestricted-network acknowledgment (**required**). The isolation session
+     * container runs on a network MXC cannot filter or deny — outbound is open,
+     * and a process inside can listen on a port reachable from outside via
+     * localhost. The caller must explicitly acknowledge this; the ONLY accepted
+     * value is `{ defaultPolicy: 'allow', allowLocalNetwork: true }`. Any other
+     * network policy (including omission, which the backend treats as the
+     * unenforceable default-deny) is rejected at provision. The posture is fixed
+     * at provision, so `network` is not accepted on the post-provision phases.
      */
-    user?: IsolationSessionUserConfig;
+    network: {
+        defaultPolicy: 'allow';
+        allowLocalNetwork: true;
+    };
 }
 export interface IsolationSessionStartConfig {
     /** Schema version (semver). */
     version?: string;
-    /**
-     * Selected IsoSession size profile. Unknown values are warned and
-     * downgraded to `'composable'` on the Rust side.
-     */
-    configurationId?: 'small' | 'medium' | 'large' | 'composable';
-    /**
-     * Entra credentials. Required when the sandbox was provisioned with a
-     * `user` bundle; rejected otherwise. When required, `upn` must match the
-     * UPN supplied at provision (case-insensitive).
-     */
-    user?: IsolationSessionUserConfig;
 }
 export interface IsolationSessionExecConfig {
     /** Schema version (semver). */
@@ -72,38 +75,217 @@ export interface IsolationSessionDeprovisionConfig {
     version?: string;
 }
 /**
- * IsolationSession's provision-phase metadata: the per-instance agent user
- * account name minted for this sandbox.
+ * IsolationSession's provision-phase metadata surfaced to the caller: the
+ * per-instance agent user account name minted for this sandbox, the agent
+ * user's SID, and the ephemeral workspace directory shared between the caller
+ * and this isolated user (through which the caller can stage files into the
+ * session; deleted when the sandbox is deprovisioned).
  */
 export interface IsolationSessionProvisionMetadata {
     agentUserName: string;
+    agentUserSid: string;
+    ephemeralWorkspacePath: string;
+}
+export interface WindowsSandboxProvisionConfig {
+    /** Schema version (semver). When omitted, the SDK fills in its own SUPPORTED_VERSION. */
+    version?: string;
+    /**
+     * Filesystem policy applied at provision and frozen for the life of the
+     * sandbox. `readwritePaths` / `readonlyPaths` are mapped into the guest at
+     * the same absolute host path; `deniedPaths` name HOST paths the contained
+     * code must not reach. The SDK forwards this policy as-is; the backend
+     * enforces it at provision and rejects a `deniedPaths` entry equal to or
+     * nested within a mapped share (`.wsb` has no Deny primitive).
+     */
+    filesystem?: FilesystemConfig;
+}
+export interface WindowsSandboxStartConfig {
+    /** Schema version (semver). */
+    version?: string;
+}
+export interface WindowsSandboxExecConfig {
+    /** Schema version (semver). */
+    version?: string;
+    process: ProcessConfig;
+}
+export interface WindowsSandboxStopConfig {
+    /** Schema version (semver). */
+    version?: string;
+}
+export interface WindowsSandboxDeprovisionConfig {
+    /** Schema version (semver). */
+    version?: string;
+}
+export interface WslcProvisionConfig {
+    /** Schema version (semver). When omitted, the SDK fills in `0.8.0-alpha`. */
+    version?: string;
+    /**
+     * Filesystem policy applied at provision and frozen for the life of the
+     * sandbox. `readwritePaths` / `readonlyPaths` become container volume mounts
+     * at the same absolute host path. The backend runs the same object-identity
+     * normalization + delegation gate as the one-shot runner and rejects a
+     * `deniedPaths` entry equal to or nested within a mounted share (WSLc has no
+     * Deny mount primitive) with `code: 'policy_validation'`.
+     */
+    filesystem?: FilesystemConfig;
+    /**
+     * Network mode applied at provision and frozen thereafter. Only
+     * `defaultPolicy` is honored: `'allow'` provisions a bridged container,
+     * `'block'` (the default when omitted) provisions with no network. Per-host
+     * filtering (`allowedHosts` / `blockedHosts`) and a `proxy` are rejected at
+     * provision (`code: 'policy_validation'`) — WSLc has no in-kernel iptables,
+     * and the cooperative proxy is an exec-phase concern (see
+     * {@link WslcExecConfig.network}).
+     */
+    network?: NetworkConfig;
+    /**
+     * Container image reference (e.g. `alpine:latest`). Defaults to
+     * `alpine:latest` when omitted. Nested under
+     * `experimental.wslc.provision.image` on the wire.
+     */
+    image?: string;
+    /**
+     * Path to a local image tarball to import instead of pulling. Nested under
+     * `experimental.wslc.provision.imageTarPath` on the wire.
+     */
+    imageTarPath?: string;
+}
+export interface WslcStartConfig {
+    /** Schema version (semver). */
+    version?: string;
+}
+export interface WslcExecConfig {
+    /** Schema version (semver). */
+    version?: string;
+    process: ProcessConfig;
+    /**
+     * Per-exec network overrides. Only `proxy` is honored: it injects a
+     * cooperative `HTTP_PROXY` / `HTTPS_PROXY` into the command's environment
+     * (well-behaved HTTP clients honor it; raw-socket clients can bypass it).
+     * WSLc accepts only the `{ url }` proxy form — its containers run in their
+     * own network namespace, so the `localhost` / `builtinTestServer` loopback
+     * forms are unreachable and rejected. Every other network field — host
+     * filters, a `defaultPolicy` change, and `allowLocalNetwork` — is rejected
+     * with `code: 'policy_validation'` (network mode is fixed at provision).
+     */
+    network?: NetworkConfig;
+}
+export interface WslcStopConfig {
+    /** Schema version (semver). */
+    version?: string;
+}
+export interface WslcDeprovisionConfig {
+    /** Schema version (semver). */
+    version?: string;
 }
+/**
+ * The five per-phase Config slots every state-aware backend must declare.
+ * `object` (not `Record<string, unknown>`) is the slot base: interfaces have
+ * no implicit index signature, so a `Record<string, unknown>` base would
+ * spuriously reject `{ version?: string }`-shaped configs.
+ */
+type StateAwarePhaseConfigs = Record<Phase, object>;
+/**
+ * Identity helper that constrains the registry literal to declare an entry for
+ * **every** `StateAwareContainmentBackend`. Adding a backend to the union
+ * without a registry entry below is a compile error here (the literal no
+ * longer satisfies `Record<StateAwareContainmentBackend, …>`), rather than
+ * silently widening `ConfigsForBackend` to the slot base / `never`.
+ */
+type DefineStateAwareConfigRegistry<T extends Record<StateAwareContainmentBackend, StateAwarePhaseConfigs>> = T;
+/**
+ * Closed per-backend per-phase Config registry. Keyed by backend; each entry
+ * names the concrete Config interface for each phase.
+ */
+type StateAwareConfigRegistry = DefineStateAwareConfigRegistry<{
+    isolation_session: {
+        provision: IsolationSessionProvisionConfig;
+        start: IsolationSessionStartConfig;
+        exec: IsolationSessionExecConfig;
+        stop: IsolationSessionStopConfig;
+        deprovision: IsolationSessionDeprovisionConfig;
+    };
+    windows_sandbox: {
+        provision: WindowsSandboxProvisionConfig;
+        start: WindowsSandboxStartConfig;
+        exec: WindowsSandboxExecConfig;
+        stop: WindowsSandboxStopConfig;
+        deprovision: WindowsSandboxDeprovisionConfig;
+    };
+    wslc: {
+        provision: WslcProvisionConfig;
+        start: WslcStartConfig;
+        exec: WslcExecConfig;
+        stop: WslcStopConfig;
+        deprovision: WslcDeprovisionConfig;
+    };
+}>;
 /**
  * Per-backend per-phase typed Config bundle. Selects the correct Config
  * bundle for the backend type parameter.
  */
-export type ConfigsForBackend<C extends StateAwareContainmentBackend> = C extends 'isolation_session' ? {
-    provision: IsolationSessionProvisionConfig;
-    start: IsolationSessionStartConfig;
-    exec: IsolationSessionExecConfig;
-    stop: IsolationSessionStopConfig;
-    deprovision: IsolationSessionDeprovisionConfig;
-} : never;
+export type ConfigsForBackend<C extends StateAwareContainmentBackend> = StateAwareConfigRegistry[C];
 export type ProvisionConfigFor<C extends StateAwareContainmentBackend> = ConfigsForBackend<C>['provision'];
+/**
+ * True when every member of `T` is optional — i.e. `{}` is a valid value.
+ *
+ * Applied to a single config type. For a possibly-union backend see
+ * {@link EveryBackendConfigIsOptional}, which is what `provisionSandbox`
+ * actually uses.
+ */
+export type HasNoRequiredMembers<T> = Record<string, never> extends T ? true : false;
+/**
+ * True only when **every** backend in `C` has an all-optional provision config.
+ *
+ * `provisionSandbox` uses this to require its config argument exactly when the
+ * selected backend needs one. The rule is derived from the types rather than an
+ * enumerated list of backends, so a future backend gaining or losing a required
+ * member is handled automatically.
+ *
+ * The `[C] extends [never]` shape is deliberate and is the whole point of this
+ * type. `C` is not always a single literal — a caller holding a variable typed
+ * as the full `StateAwareContainmentBackend` union instantiates it with that
+ * union. Asking `HasNoRequiredMembers` about the *union* of configs answers
+ * "yes" as soon as any one member is all-optional, because `{}` is assignable
+ * to that member — which would make the config optional for every backend,
+ * including the ones that require it. Instead this distributes over `C`, keeps
+ * only the backends that DO require a config, and reports "all optional" only
+ * when that set is empty. A union backend therefore behaves like its strictest
+ * member, which is the safe direction.
+ *
+ * Without this, a required field could be bypassed by omitting the whole
+ * argument — the config type would advertise a guarantee the call signature did
+ * not enforce. IsolationSession depends on it: its unrestricted-network
+ * acknowledgment is mandatory, and the backend refuses a provision without it.
+ */
+export type EveryBackendConfigIsOptional<C extends StateAwareContainmentBackend> = [
+    C extends unknown ? (HasNoRequiredMembers<ProvisionConfigFor<C>> extends true ? never : C) : never
+] extends [never] ? true : false;
 export type StartConfigFor<C extends StateAwareContainmentBackend> = ConfigsForBackend<C>['start'];
 export type ExecConfigFor<C extends StateAwareContainmentBackend> = ConfigsForBackend<C>['exec'];
 export type StopConfigFor<C extends StateAwareContainmentBackend> = ConfigsForBackend<C>['stop'];
 export type DeprovisionConfigFor<C extends StateAwareContainmentBackend> = ConfigsForBackend<C>['deprovision'];
 /**
- * Per-backend per-phase metadata bundle. Backends that don't return
- * metadata for a given phase omit that key.
+ * Identity helper that constrains the metadata registry literal to declare an
+ * entry for **every** `StateAwareContainmentBackend`. A future backend added to
+ * the union without a metadata entry below is a compile error here, symmetric
+ * to `DefineStateAwareConfigRegistry`.
  */
-export interface StateAwareMetadata {
-    isolation_session?: {
+type DefineStateAwareMetadataRegistry<T extends Record<StateAwareContainmentBackend, object>> = T;
+/**
+ * Per-backend per-phase metadata bundle. Backends that don't return metadata
+ * for a given phase omit that phase key; backends that return no metadata at
+ * all use `Record<never, never>` (so every `*MetadataFor<C>` resolves to
+ * `undefined`). Keyed by backend; every backend must declare an entry.
+ */
+export type StateAwareMetadata = DefineStateAwareMetadataRegistry<{
+    isolation_session: {
         provision?: IsolationSessionProvisionMetadata;
     };
-}
-type MetadataForPhase<C extends StateAwareContainmentBackend, Phase extends string> = Phase extends keyof NonNullable<StateAwareMetadata[C]> ? NonNullable<StateAwareMetadata[C]>[Phase] : undefined;
+    windows_sandbox: Record<never, never>;
+    wslc: Record<never, never>;
+}>;
+type MetadataForPhase<C extends StateAwareContainmentBackend, Phase extends string> = Phase extends keyof StateAwareMetadata[C] ? StateAwareMetadata[C][Phase] : undefined;
 export type ProvisionMetadataFor<C extends StateAwareContainmentBackend> = MetadataForPhase<C, 'provision'>;
 export type StartMetadataFor<C extends StateAwareContainmentBackend> = MetadataForPhase<C, 'start'>;
 export type StopMetadataFor<C extends StateAwareContainmentBackend> = MetadataForPhase<C, 'stop'>;
@@ -111,6 +293,16 @@ export type DeprovisionMetadataFor<C extends StateAwareContainmentBackend> = Met
 export interface ProvisionResult<C extends StateAwareContainmentBackend> {
     sandboxId: SandboxId<C>;
     metadata?: ProvisionMetadataFor<C>;
+    /**
+     * Correlation vector (MS-CV) seeded by the executor for this lifecycle when
+     * experimental telemetry is enabled. Relay it verbatim as
+     * {@link SandboxSpawnOptions.correlationVector} on every later phase so all
+     * phases of the lifecycle share a telemetry base prefix. The client relays it
+     * unchanged; the executor derives each phase's own vector from it (spinning a
+     * mutable base or reseeding a missing/malformed value). Absent when telemetry
+     * is not active.
+     */
+    correlationVector?: string;
 }
 export interface StartResult<C extends StateAwareContainmentBackend> {
     metadata?: StartMetadataFor<C>;

package/node_modules/@microsoft/mxc-sdk/dist/state-aware-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state-aware-types.d.ts","sourceRoot":"","sources":["../src/state-aware-types.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,MAAM,KAAK,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC;AAE5E;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;AAE5F;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,4BAA4B,IAC1D,MAAM,GAAG;IAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAA;CAAE,CAAC;AAE1E,QAAA,MAAM,gBAAgB,eAA2C,CAAC;AAElE;;;;;GAKG;AACH,qBAAa,0BAA0B;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAKzC,CAAC,gBAAgB,CAAC,IAAI,MAAM;CAG7B;AAOD,MAAM,WAAW,+BAA+B;IAC9C,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;OAIG;IACH,IAAI,CAAC,EAAE,0BAA0B,CAAC;CACnC;AAED,MAAM,WAAW,2BAA2B;IAC1C,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,eAAe,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,YAAY,CAAC;IAC9D;;;;OAIG;IACH,IAAI,CAAC,EAAE,0BAA0B,CAAC;CACnC;AAED,MAAM,WAAW,0BAA0B;IACzC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,4BAA4B,IAClE,CAAC,SAAS,mBAAmB,GACzB;IACE,SAAS,EAAE,+BAA+B,CAAC;IAC3C,KAAK,EAAE,2BAA2B,CAAC;IACnC,IAAI,EAAE,0BAA0B,CAAC;IACjC,IAAI,EAAE,0BAA0B,CAAC;IACjC,WAAW,EAAE,iCAAiC,CAAC;CAChD,GACD,KAAK,CAAC;AAEZ,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,4BAA4B,IACnE,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AACpC,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,4BAA4B,IAC/D,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAChC,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,4BAA4B,IAC9D,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/B,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,4BAA4B,IAC9D,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/B,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,4BAA4B,IACrE,iBAAiB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AAEtC;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,CAAC,EAAE;QAClB,SAAS,CAAC,EAAE,iCAAiC,CAAC;KAE/C,CAAC;CAEH;AAED,KAAK,gBAAgB,CAAC,CAAC,SAAS,4BAA4B,EAAE,KAAK,SAAS,MAAM,IAChF,KAAK,SAAS,MAAM,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,GAClD,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GACzC,SAAS,CAAC;AAEhB,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AAC5G,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACpG,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAClG,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AAEhH,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,4BAA4B;IACrE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,4BAA4B;IACjE,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,4BAA4B;IAChE,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,4BAA4B;IACvE,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB"}
+{"version":3,"file":"state-aware-types.d.ts","sourceRoot":"","sources":["../src/state-aware-types.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACd,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,MAAM,MAAM,KAAK,GAAG,WAAW,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,aAAa,CAAC;AAE5E;;;GAGG;AACH,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAChD,kBAAkB,EAClB,mBAAmB,GAAG,iBAAiB,GAAG,MAAM,CACjD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,CAAC,CAAC,SAAS,4BAA4B,IAC1D,MAAM,GAAG;IAAE,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAA;CAAE,CAAC;AAO1E,MAAM,WAAW,+BAA+B;IAC9C,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,OAAO,EAAE;QAAE,aAAa,EAAE,OAAO,CAAC;QAAC,iBAAiB,EAAE,IAAI,CAAA;KAAE,CAAC;CAC9D;AAED,MAAM,WAAW,2BAA2B;IAC1C,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iCAAiC;IAChD,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAOD,MAAM,WAAW,6BAA6B;IAC5C,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,+BAA+B;IAC9C,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAQD,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB;;;;OAIG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,aAAa,CAAC;IACvB;;;;;;;;;OASG;IACH,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,cAAc;IAC7B,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;GAKG;AACH,KAAK,sBAAsB,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAEpD;;;;;;GAMG;AACH,KAAK,8BAA8B,CACjC,CAAC,SAAS,MAAM,CAAC,4BAA4B,EAAE,sBAAsB,CAAC,IACpE,CAAC,CAAC;AAEN;;;GAGG;AACH,KAAK,wBAAwB,GAAG,8BAA8B,CAAC;IAC7D,iBAAiB,EAAE;QACjB,SAAS,EAAE,+BAA+B,CAAC;QAC3C,KAAK,EAAE,2BAA2B,CAAC;QACnC,IAAI,EAAE,0BAA0B,CAAC;QACjC,IAAI,EAAE,0BAA0B,CAAC;QACjC,WAAW,EAAE,iCAAiC,CAAC;KAChD,CAAC;IACF,eAAe,EAAE;QACf,SAAS,EAAE,6BAA6B,CAAC;QACzC,KAAK,EAAE,yBAAyB,CAAC;QACjC,IAAI,EAAE,wBAAwB,CAAC;QAC/B,IAAI,EAAE,wBAAwB,CAAC;QAC/B,WAAW,EAAE,+BAA+B,CAAC;KAC9C,CAAC;IACF,IAAI,EAAE;QACJ,SAAS,EAAE,mBAAmB,CAAC;QAC/B,KAAK,EAAE,eAAe,CAAC;QACvB,IAAI,EAAE,cAAc,CAAC;QACrB,IAAI,EAAE,cAAc,CAAC;QACrB,WAAW,EAAE,qBAAqB,CAAC;KACpC,CAAC;CACH,CAAC,CAAC;AAQH;;;GAGG;AACH,MAAM,MAAM,iBAAiB,CAAC,CAAC,SAAS,4BAA4B,IAClE,wBAAwB,CAAC,CAAC,CAAC,CAAC;AAE9B,MAAM,MAAM,kBAAkB,CAAC,CAAC,SAAS,4BAA4B,IACnE,iBAAiB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AAEpC;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC;AAErF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,4BAA4B,CAAC,CAAC,SAAS,4BAA4B,IAC7E;IAAC,CAAC,SAAS,OAAO,GAAG,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK;CAAC,SAAS,CAAC,KAAK,CAAC,GAChH,IAAI,GACJ,KAAK,CAAC;AACZ,MAAM,MAAM,cAAc,CAAC,CAAC,SAAS,4BAA4B,IAC/D,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAChC,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,4BAA4B,IAC9D,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/B,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,4BAA4B,IAC9D,iBAAiB,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AAC/B,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,4BAA4B,IACrE,iBAAiB,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AAEtC;;;;;GAKG;AACH,KAAK,gCAAgC,CACnC,CAAC,SAAS,MAAM,CAAC,4BAA4B,EAAE,MAAM,CAAC,IACpD,CAAC,CAAC;AAEN;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,gCAAgC,CAAC;IAChE,iBAAiB,EAAE;QACjB,SAAS,CAAC,EAAE,iCAAiC,CAAC;KAE/C,CAAC;IAKF,eAAe,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAItC,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;CAE5B,CAAC,CAAC;AAOH,KAAK,gBAAgB,CAAC,CAAC,SAAS,4BAA4B,EAAE,KAAK,SAAS,MAAM,IAChF,KAAK,SAAS,MAAM,kBAAkB,CAAC,CAAC,CAAC,GACrC,kBAAkB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAC5B,SAAS,CAAC;AAEhB,MAAM,MAAM,oBAAoB,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AAC5G,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACpG,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAClG,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,4BAA4B,IAAI,gBAAgB,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;AAEhH,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,4BAA4B;IACrE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IACxB,QAAQ,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC;IACnC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,4BAA4B;IACjE,QAAQ,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,4BAA4B;IAChE,QAAQ,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB,CAAC,CAAC,SAAS,4BAA4B;IACvE,QAAQ,CAAC,EAAE,sBAAsB,CAAC,CAAC,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/node_modules/@microsoft/mxc-sdk/dist/state-aware-types.js

@@ -1,21 +1,4 @@
 // Copyright (c) Microsoft Corporation.
 // Licensed under the MIT License.
-const ISO_USER_INSPECT = Symbol.for('nodejs.util.inspect.custom');
-/**
- * Entra credentials, supplied at provision to opt into an Entra-backed
- * sandbox and at start to authenticate the session. `wamToken` is treated
- * as a secret: `util.inspect` and `console.log` redact it. `JSON.stringify`
- * is unaffected — the wire envelope carries the token verbatim.
- */
-export class IsolationSessionUserConfig {
-    upn;
-    wamToken;
-    constructor(upn, wamToken) {
-        this.upn = upn;
-        this.wamToken = wamToken;
-    }
-    [ISO_USER_INSPECT]() {
-        return `IsolationSessionUserConfig { upn: '${this.upn}', wamToken: '<redacted>' }`;
-    }
-}
+export {};
 //# sourceMappingURL=state-aware-types.js.map

package/node_modules/@microsoft/mxc-sdk/dist/state-aware-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"state-aware-types.js","sourceRoot":"","sources":["../src/state-aware-types.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AA6BlC,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;AAElE;;;;;GAKG;AACH,MAAM,OAAO,0BAA0B;IAC5B,GAAG,CAAS;IACZ,QAAQ,CAAS;IAE1B,YAAY,GAAW,EAAE,QAAgB;QACvC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,CAAC,gBAAgB,CAAC;QAChB,OAAO,sCAAsC,IAAI,CAAC,GAAG,6BAA6B,CAAC;IACrF,CAAC;CACF"}
+{"version":3,"file":"state-aware-types.js","sourceRoot":"","sources":["../src/state-aware-types.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC"}

package/node_modules/@microsoft/mxc-sdk/dist/state-aware.d.ts

@@ -1,11 +1,26 @@
 import pty from 'node-pty';
 import { SandboxSpawnOptions } from './sandbox.js';
-import { DeprovisionConfigFor, DeprovisionResult, ExecConfigFor, ExecResult, ProvisionConfigFor, ProvisionResult, SandboxId, StartConfigFor, StartResult, StateAwareContainmentBackend, StopConfigFor, StopResult } from './state-aware-types.js';
+import { DeprovisionConfigFor, DeprovisionResult, EveryBackendConfigIsOptional, ExecConfigFor, ExecResult, ProvisionConfigFor, ProvisionResult, SandboxId, StartConfigFor, StartResult, StateAwareContainmentBackend, StopConfigFor, StopResult } from './state-aware-types.js';
+/**
+ * Trailing parameters of {@link provisionSandbox}: the config is required
+ * unless *every* backend in `C` has an all-optional provision config. See
+ * {@link EveryBackendConfigIsOptional} for why the check is written over the
+ * backend union rather than over the union of configs.
+ */
+export type ProvisionArgs<C extends StateAwareContainmentBackend> = EveryBackendConfigIsOptional<C> extends true ? [config?: ProvisionConfigFor<C>, options?: SandboxSpawnOptions] : [config: ProvisionConfigFor<C>, options?: SandboxSpawnOptions];
 /**
  * Provisions a state-aware sandbox of the requested backend. Returns a
  * branded sandbox id and any provision-time metadata the backend produces.
+ *
+ * The config parameter is **required for backends whose provision config has
+ * a required member**, and optional otherwise — see {@link ProvisionArgs}.
+ * Without that, a config type could declare a field as required and still be
+ * skipped entirely by omitting the argument, which is a guarantee the type
+ * appears to offer but does not enforce. IsolationSession relies on this: its
+ * unrestricted-network acknowledgment is mandatory, and the backend refuses a
+ * provision that omits it.
  */
-export declare function provisionSandbox<C extends StateAwareContainmentBackend>(containment: C, config?: ProvisionConfigFor<C>, options?: SandboxSpawnOptions): Promise<ProvisionResult<C>>;
+export declare function provisionSandbox<C extends StateAwareContainmentBackend>(containment: C, ...rest: ProvisionArgs<C>): Promise<ProvisionResult<C>>;
 /**
  * Starts a previously provisioned sandbox. The backend is inferred from
  * the `sandboxId` prefix.

package/node_modules/@microsoft/mxc-sdk/dist/state-aware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state-aware.d.ts","sourceRoot":"","sources":["../src/state-aware.ts"],"names":[],"mappings":"AAGA,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGnD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,kBAAkB,EAElB,eAAe,EACf,SAAS,EACT,cAAc,EACd,WAAW,EACX,4BAA4B,EAC5B,aAAa,EACb,UAAU,EACX,MAAM,wBAAwB,CAAC;AAShC;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,SAAS,4BAA4B,EAC3E,WAAW,EAAE,CAAC,EACd,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAC9B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAe7B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,SAAS,4BAA4B,EACvE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,EAC1B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CASzB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,4BAA4B,EAClE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE,mBAAwB,GAChC,GAAG,CAAC,IAAI,CA4BV;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,4BAA4B,EAC7E,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,UAAU,CAAC,CAmBrB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,CAAC,SAAS,4BAA4B,EACtE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,EACzB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CASxB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,4BAA4B,EAC7E,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAChC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAS/B"}
+{"version":3,"file":"state-aware.d.ts","sourceRoot":"","sources":["../src/state-aware.ts"],"names":[],"mappings":"AAGA,OAAO,GAAG,MAAM,UAAU,CAAC;AAE3B,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAGnD,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,4BAA4B,EAC5B,aAAa,EACb,UAAU,EACV,kBAAkB,EAElB,eAAe,EACf,SAAS,EACT,cAAc,EACd,WAAW,EACX,4BAA4B,EAC5B,aAAa,EACb,UAAU,EACX,MAAM,wBAAwB,CAAC;AAShC;;;;;GAKG;AACH,MAAM,MAAM,aAAa,CAAC,CAAC,SAAS,4BAA4B,IAC9D,4BAA4B,CAAC,CAAC,CAAC,SAAS,IAAI,GACxC,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,mBAAmB,CAAC,GAC/D,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,mBAAmB,CAAC,CAAC;AAErE;;;;;;;;;;;GAWG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,SAAS,4BAA4B,EAC3E,WAAW,EAAE,CAAC,EACd,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,GACxB,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAqB7B;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,SAAS,4BAA4B,EACvE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,EAC1B,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAUzB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,CAAC,SAAS,4BAA4B,EAClE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE,mBAAwB,GAChC,GAAG,CAAC,IAAI,CA6BV;AAED;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,4BAA4B,EAC7E,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,UAAU,CAAC,CAmBrB;AAED;;;GAGG;AACH,wBAAsB,WAAW,CAAC,CAAC,SAAS,4BAA4B,EACtE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,EACzB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAUxB;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,4BAA4B,EAC7E,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EACvB,MAAM,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAChC,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAU/B"}

package/node_modules/@microsoft/mxc-sdk/dist/state-aware.js

@@ -2,14 +2,23 @@
 // Licensed under the MIT License.
 import pty from 'node-pty';
 import { resolveBinaryAndCommonArgs } from './helper.js';
-import { mxcErrorFromCode } from './errors.js';
+import { mxcErrorFromEnvelope } from './errors.js';
 import { diagLog } from './diagnostic.js';
 import { backendForSandboxId, buildStateAwareEnvelope, nonExecCall, spawnAndCollect, tryParseErrorEnvelope, } from './state-aware-helper.js';
 /**
  * Provisions a state-aware sandbox of the requested backend. Returns a
  * branded sandbox id and any provision-time metadata the backend produces.
+ *
+ * The config parameter is **required for backends whose provision config has
+ * a required member**, and optional otherwise — see {@link ProvisionArgs}.
+ * Without that, a config type could declare a field as required and still be
+ * skipped entirely by omitting the argument, which is a guarantee the type
+ * appears to offer but does not enforce. IsolationSession relies on this: its
+ * unrestricted-network acknowledgment is mandatory, and the backend refuses a
+ * provision that omits it.
  */
-export async function provisionSandbox(containment, config, options = {}) {
+export async function provisionSandbox(containment, ...rest) {
+    const [config, options = {}] = rest;
     const envelope = buildStateAwareEnvelope({
         phase: 'provision',
         backendKey: containment,
@@ -20,6 +29,7 @@ export async function provisionSandbox(containment, config, options = {}) {
     return {
         sandboxId: result.sandboxId,
         metadata: result.metadata,
+        correlationVector: result.correlationVector,
     };
 }
 /**
@@ -32,6 +42,7 @@ export async function startSandbox(sandboxId, config, options = {}) {
         phase: 'start',
         backendKey,
         sandboxId,
+        correlationVector: options.correlationVector,
         config: config,
     });
     return nonExecCall(envelope, options);
@@ -49,6 +60,7 @@ export function execInSandbox(sandboxId, config, options = {}) {
         phase: 'exec',
         backendKey,
         sandboxId,
+        correlationVector: options.correlationVector,
         config: config,
     });
     const { executablePath, args } = resolveBinaryAndCommonArgs(JSON.stringify(envelope), options);
@@ -85,14 +97,14 @@ export async function execInSandboxAsync(sandboxId, config, options = {}) {
         phase: 'exec',
         backendKey,
         sandboxId,
+        correlationVector: options.correlationVector,
         config: config,
     });
     const { stdout, stderr, exitCode } = await spawnAndCollect(envelope, options);
     if (exitCode !== 0) {
         const errorEnvelope = tryParseErrorEnvelope(stdout);
         if (errorEnvelope) {
-            const e = errorEnvelope.error;
-            throw mxcErrorFromCode(e.code, e.message, e.details);
+            throw mxcErrorFromEnvelope(errorEnvelope.error);
         }
     }
     return { stdout, stderr, exitCode };
@@ -107,6 +119,7 @@ export async function stopSandbox(sandboxId, config, options = {}) {
         phase: 'stop',
         backendKey,
         sandboxId,
+        correlationVector: options.correlationVector,
         config: config,
     });
     return nonExecCall(envelope, options);
@@ -121,6 +134,7 @@ export async function deprovisionSandbox(sandboxId, config, options = {}) {
         phase: 'deprovision',
         backendKey,
         sandboxId,
+        correlationVector: options.correlationVector,
         config: config,
     });
     return nonExecCall(envelope, options);

package/node_modules/@microsoft/mxc-sdk/dist/state-aware.js.map

@@ -1 +1 @@
-{"version":3,"file":"state-aware.js","sourceRoot":"","sources":["../src/state-aware.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAgB1C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAEjC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAc,EACd,MAA8B,EAC9B,UAA+B,EAAE;IAEjC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,WAAW;QACvB,WAAW;QACX,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAC9B,QAAQ,EACR,OAAO,CACR,CAAC;IACF,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAyB;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAuB,EACvB,MAA0B,EAC1B,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,OAAO;QACd,UAAU;QACV,SAAS;QACT,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,OAAO,WAAW,CAAiB,QAAQ,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAuB,EACvB,MAAwB,EACxB,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,MAAM;QACb,UAAU;QACV,SAAS;QACT,MAAM,EAAE,MAA4C;KACrD,CAAC,CAAC;IACH,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/F,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE;QACjD,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,EAAE;QACR,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,GAAG,OAAO,CAAC,UAAU;KACtB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAuB,EACvB,MAAwB,EACxB,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,MAAM;QACb,UAAU;QACV,SAAS;QACT,MAAM,EAAE,MAA4C;KACrD,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE9E,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC;YAC9B,MAAM,gBAAgB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAuB,EACvB,MAAyB,EACzB,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,MAAM;QACb,UAAU;QACV,SAAS;QACT,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,OAAO,WAAW,CAAgB,QAAQ,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAuB,EACvB,MAAgC,EAChC,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,aAAa;QACpB,UAAU;QACV,SAAS;QACT,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,OAAO,WAAW,CAAuB,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"state-aware.js","sourceRoot":"","sources":["../src/state-aware.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,kCAAkC;AAElC,OAAO,GAAG,MAAM,UAAU,CAAC;AAC3B,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAiB1C,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,WAAW,EACX,eAAe,EACf,qBAAqB,GACtB,MAAM,yBAAyB,CAAC;AAajC;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAc,EACd,GAAG,IAAsB;IAEzB,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,EAAE,CAAC,GAAG,IAG9B,CAAC;IACF,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,WAAW;QAClB,UAAU,EAAE,WAAW;QACvB,WAAW;QACX,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,WAAW,CAI7B,QAAQ,EAAE,OAAO,CAAC,CAAC;IACtB,OAAO;QACL,SAAS,EAAE,MAAM,CAAC,SAAyB;QAC3C,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAuB,EACvB,MAA0B,EAC1B,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,OAAO;QACd,UAAU;QACV,SAAS;QACT,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,OAAO,WAAW,CAAiB,QAAQ,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,SAAuB,EACvB,MAAwB,EACxB,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,MAAM;QACb,UAAU;QACV,SAAS;QACT,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,MAA4C;KACrD,CAAC,CAAC;IACH,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC/F,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE;QACjD,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,GAAG;QACT,IAAI,EAAE,EAAE;QACR,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,GAAG,OAAO,CAAC,UAAU;KACtB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,EAAE,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAuB,EACvB,MAAwB,EACxB,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,MAAM;QACb,UAAU;QACV,SAAS;QACT,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,MAA4C;KACrD,CAAC,CAAC;IACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAE9E,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,oBAAoB,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,SAAuB,EACvB,MAAyB,EACzB,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,MAAM;QACb,UAAU;QACV,SAAS;QACT,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,OAAO,WAAW,CAAgB,QAAQ,EAAE,OAAO,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAuB,EACvB,MAAgC,EAChC,UAA+B,EAAE;IAEjC,MAAM,UAAU,GAAG,mBAAmB,CAAC,SAAS,CAAM,CAAC;IACvD,MAAM,QAAQ,GAAG,uBAAuB,CAAC;QACvC,KAAK,EAAE,aAAa;QACpB,UAAU;QACV,SAAS;QACT,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,MAA6C;KACtD,CAAC,CAAC;IACH,OAAO,WAAW,CAAuB,QAAQ,EAAE,OAAO,CAAC,CAAC;AAC9D,CAAC"}