@opengeni/runtime 2.4.2-canary.1 → 2.4.3-canary.0

package/dist/{chunk-7DAVK6Y5.js → chunk-WATBACLT.js}

@@ -20588,9 +20588,9 @@ function decodePage(prior, input, terminal) {
   };
 }
 var ModalCommandControl = class _ModalCommandControl {
-  constructor(client, sandboxId, root, environment = {}) {
+  constructor(client, sandboxIdentity, root, environment = {}) {
     this.client = client;
-    this.sandboxId = sandboxId;
+    this.sandboxIdentity = sandboxIdentity;
     this.root = root;
     this.environment = environment;
   }
@@ -20599,16 +20599,19 @@ var ModalCommandControl = class _ModalCommandControl {
       throw new Error("Modal command control requires the verified 0.9.0 SDK contract");
     return new _ModalCommandControl(commandControlPlane(client), sandboxId, root, environment);
   }
+  get sandboxId() {
+    return typeof this.sandboxIdentity === "function" ? this.sandboxIdentity() : this.sandboxIdentity;
+  }
   async start(args, signal) {
     signal?.throwIfAborted();
     const workdir = posix2.resolve(this.root, args.workdir ?? this.root);
     if (workdir !== this.root && !workdir.startsWith(`${this.root.replace(/\/$/u, "")}/`))
       throw new Error("Command workdir is outside the sandbox workspace");
-    const task = await this.client.sandboxGetTaskId(
-      { sandboxId: this.sandboxId },
-      signal ? { signal } : void 0
-    );
+    const sandboxId = this.sandboxId;
+    const task = await this.client.sandboxGetTaskId({ sandboxId }, signal ? { signal } : void 0);
     if (!task.taskId || task.taskResult) throw new Error("Modal command task is unavailable");
+    if (sandboxId !== this.sandboxId)
+      throw new Error("Modal sandbox changed during command preparation");
     const login = args.shell ? args.login ?? true : false;
     let command = [args.shell ?? "/bin/sh", login ? "-lc" : "-c", args.cmd];
     if (args.runAs) {
@@ -20655,7 +20658,7 @@ var ModalCommandControl = class _ModalCommandControl {
     if (!result.execId) throw new Error("Modal command start returned no execution identity");
     return {
       kind: "modal-control-v1",
-      sandboxId: this.sandboxId,
+      sandboxId,
       taskId: task.taskId,
       execId: result.execId,
       ...args.tty ? { pty: true } : {},
@@ -21070,7 +21073,11 @@ function installOpenGeniModalSnapshotPolicy(session) {
           profile: mutable.modal.profile,
           ...mutable.modal.logger ? { logger: mutable.modal.logger } : {}
         },
-        mutable.state.sandboxId,
+        () => {
+          const sandboxId = mutable.state?.sandboxId;
+          if (!sandboxId) throw new Error("Modal session sandbox identity is unavailable");
+          return sandboxId;
+        },
         mutable.state.manifest.root,
         () => mutable.state?.environment ?? {}
       )
@@ -36115,4 +36122,4 @@ export {
   collectSandboxEnvironment2 as collectSandboxEnvironment,
   parseExposedPorts2 as parseExposedPorts
 };
-//# sourceMappingURL=chunk-7DAVK6Y5.js.map
+//# sourceMappingURL=chunk-WATBACLT.js.map