@stigmer/server 3.14.0-dev.20260910084630

package/dist/runnerauth/runner-credential-provider.js

@@ -0,0 +1,28 @@
+import { InvalidTokenError, TOKEN_TYPE_EXECUTION_SCOPED, } from "./runnerauth.js";
+/**
+ * The OSS default: RunnerAuthService behind the provider contract,
+ * providing only the execution_scoped lane. A separate adapter rather
+ * than the service implementing the interface: the service's concrete
+ * lane-free signatures are a stable test surface (and the O2 sub-project
+ * edits runnerauth.ts in parallel — this file keeps O5 out of it).
+ */
+export function newExecutionScopedRunnerCredentialProvider(service) {
+    return {
+        isEnabled(lane) {
+            return lane === TOKEN_TYPE_EXECUTION_SCOPED && service.isEnabled();
+        },
+        mint(lane, binding, ttlSeconds) {
+            if (lane !== TOKEN_TYPE_EXECUTION_SCOPED) {
+                throw new Error(`runner credential lane '${lane}' is not provided by this implementation (provides '${TOKEN_TYPE_EXECUTION_SCOPED}')`);
+            }
+            return service.mint(binding, ttlSeconds);
+        },
+        verify(lane, token) {
+            if (lane !== TOKEN_TYPE_EXECUTION_SCOPED) {
+                throw new InvalidTokenError();
+            }
+            return service.verify(token);
+        },
+    };
+}
+//# sourceMappingURL=runner-credential-provider.js.map

package/dist/runnerauth/runner-credential-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-credential-provider.js","sourceRoot":"","sources":["../../src/runnerauth/runner-credential-provider.ts"],"names":[],"mappings":"AA0DA,OAAO,EACL,iBAAiB,EAEjB,2BAA2B,GAC5B,MAAM,iBAAiB,CAAC;AA4OzB;;;;;;GAMG;AACH,MAAM,UAAU,0CAA0C,CACxD,OAA0B;IAE1B,OAAO;QACL,SAAS,CAAC,IAAY;YACpB,OAAO,IAAI,KAAK,2BAA2B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,UAAkB;YACpD,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,uDAAuD,2BAA2B,IAAI,CACtH,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,MAAM,CAAC,IAAY,EAAE,KAAa;YAChC,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;gBACzC,MAAM,IAAI,iBAAiB,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runnerauth/runnerauth.d.ts

@@ -0,0 +1,87 @@
+import type { KeyLoaderOptions } from "../encryption/key-manager.js";
+/**
+ * The token_type claim of every OSS-minted runner token — Go
+ * TokenTypeExecutionScoped. Deliberately distinct from the cloud sandbox
+ * vocabulary (sandbox / workflow_sandbox / connect_sandbox): borrowing
+ * "sandbox" while carrying different claims would mislead anyone debugging
+ * across editions. One honest type with a direct execution_id binding.
+ */
+export declare const TOKEN_TYPE_EXECUTION_SCOPED = "execution_scoped";
+/** Env var for the signing key (Base64 32B) — Go EnvKeyName. */
+export declare const RUNNER_TOKEN_KEY_ENV_VAR = "STIGMER_RUNNER_TOKEN_KEY";
+/** Auto-generated key file under ~/.stigmer — Go KeyFileName. */
+export declare const RUNNER_TOKEN_KEY_FILE_NAME = "runner-token.key";
+/**
+ * Default token lifetime — Go DefaultTTL (1 hour). Tokens are minted
+ * immediately before each ExecutionContext read (or carried in a connect
+ * workflow's dispatch payload), so the TTL only needs to cover one unit of
+ * dispatched work including its Temporal retries: generous without being
+ * an effectively-permanent credential in Temporal history.
+ */
+export declare const DEFAULT_TTL_SECONDS = 3600;
+/**
+ * Go ErrInvalidToken: ANY verification failure — forged signature, wrong
+ * algorithm, expired, wrong type, empty binding — collapses to this one
+ * error. Callers fail closed to redaction on it; a finer-grained reason
+ * would just invite branching on it.
+ */
+export declare class InvalidTokenError extends Error {
+    constructor();
+}
+/**
+ * Go ErrMintingDisabled: minting with no signing key (keyless deployments,
+ * effectively test-only — fromEnv auto-generates). The exchange RPC maps
+ * it to the presence-based "not minted" response the runner handles.
+ */
+export declare class MintingDisabledError extends Error {
+    constructor();
+}
+/** A minted token with its lifetime in whole seconds (the RPC's shape). */
+export interface MintedToken {
+    readonly token: string;
+    readonly ttlSeconds: number;
+}
+/**
+ * Mints and verifies execution-scoped runner tokens with a single
+ * HMAC-SHA256 key. Stateless and safe for concurrent use.
+ */
+export declare class RunnerAuthService {
+    private readonly key;
+    private constructor();
+    /**
+     * Go NewService: nil/empty key → disabled service (Mint fails with
+     * MintingDisabledError, Verify rejects everything — fail closed: without
+     * a key no token can be genuine).
+     */
+    static create(key: Buffer | undefined): RunnerAuthService;
+    /**
+     * Go NewServiceFromEnv: key via the shared ladder (env var → key file →
+     * auto-generate). Errors only on unusable explicit configuration; the
+     * composition root maps that to the BOOT-FATAL posture (the ratified D2
+     * asymmetry: a server that cannot mint runner tokens would hand every
+     * execution redaction markers instead of its secrets — the silent-junk
+     * failure the oss#405 fail-loud doctrine forbids).
+     */
+    static fromEnv(options?: KeyLoaderOptions): RunnerAuthService;
+    /** Go IsEnabled: whether the service holds a signing key. */
+    isEnabled(): boolean;
+    /**
+     * Go Mint: a token bound to executionId, valid for ttlSeconds
+     * (DEFAULT_TTL_SECONDS when <= 0).
+     */
+    mint(executionId: string, ttlSeconds?: number): MintedToken;
+    /**
+     * Go Verify: checks signature, algorithm, expiry, and token type, and
+     * returns the execution id the token is bound to. Any failure throws the
+     * one InvalidTokenError — the caller's only correct reaction is to fall
+     * closed to redaction.
+     *
+     * Check order mirrors Go: enabled → three parts → exact encoded-header
+     * compare → constant-time HMAC → payload decode → claims. The expiry
+     * boundary is `now >= exp` (a token in its expiring second is invalid).
+     */
+    verify(token: string): string;
+    /** base64url HMAC-SHA256 of the signing input — Go sign(). */
+    private sign;
+}
+//# sourceMappingURL=runnerauth.d.ts.map

package/dist/runnerauth/runnerauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runnerauth.d.ts","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,qBAAqB,CAAC;AAE9D,gEAAgE;AAChE,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAE7D;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,OAAO,CAAC;AAExC;;;;;GAKG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;;CAK3C;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;;CAK9C;AAmBD,2EAA2E;AAC3E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAqB;IAEzC,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,iBAAiB;IAOzD;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,OAAO,GAAE,gBAAqB,GAAG,iBAAiB;IASjE,6DAA6D;IAC7D,SAAS,IAAI,OAAO;IAIpB;;;OAGG;IACH,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,GAAE,MAAU,GAAG,WAAW;IAwB9D;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM;IAgD7B,8DAA8D;IAC9D,OAAO,CAAC,IAAI;CAQb"}

package/dist/runnerauth/runnerauth.js

@@ -0,0 +1,203 @@
+/**
+ * Execution-scoped runner tokens — ports pkg/runnerauth/runnerauth.go
+ * (oss#535), the lane that gates the ExecutionContext decrypt path.
+ *
+ * WHY: since oss#535 the EC read RPCs redact is_secret values for every
+ * caller — the same contract the cloud edition enforces — but the runner
+ * still needs the real values to serve executions. Cloud distinguishes the
+ * runner by the token_type claim of its platform-minted credential; OSS
+ * ships no token VERIFIERS on its identity chassis (O2, 20260827.01 — the
+ * verifier chain exists but resolves every request to the trusted-local
+ * identity until O3 lands the first verifiers), so this module supplies
+ * the minimal equivalent: the platform exchange mints a short-lived token
+ * bound to ONE execution, and the EC handler decrypts only for a token
+ * whose binding matches the requested ExecutionContext.
+ *
+ * A LANE DISCRIMINATOR, NOT A TRUST BOUNDARY (DD-004): in the trusted-local
+ * posture anyone who can reach the server can mint. What the token buys is
+ * the redaction-by-default read contract converging with cloud, on top of
+ * oss#405's encryption at rest. It is deliberately NOT an IdentityVerifier
+ * on the chassis: presenting it must never change the caller's identity
+ * (the Q6 fall-through keeps the runner's Bearer-on-every-RPC behavior
+ * byte-identical), only unlock this one decrypt lane.
+ *
+ * Token shape (field names are wire contract — the runner's
+ * token-claims.ts reads token_type by name):
+ *   {"token_type":"execution_scoped","execution_id":"<id>","iat":…,"exp":…}
+ *
+ * Consumers arrive with their own domains: the platform exchange RPC
+ * (mint) and the executioncontext resolve step (verify). This module lands
+ * with the encryption sub-project because its signing key rides the shared
+ * key ladder and its boot posture is a ratified cross-domain invariant
+ * (fatal — see compose.ts).
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { getOrCreateNamedKey } from "../encryption/key-manager.js";
+/**
+ * The token_type claim of every OSS-minted runner token — Go
+ * TokenTypeExecutionScoped. Deliberately distinct from the cloud sandbox
+ * vocabulary (sandbox / workflow_sandbox / connect_sandbox): borrowing
+ * "sandbox" while carrying different claims would mislead anyone debugging
+ * across editions. One honest type with a direct execution_id binding.
+ */
+export const TOKEN_TYPE_EXECUTION_SCOPED = "execution_scoped";
+/** Env var for the signing key (Base64 32B) — Go EnvKeyName. */
+export const RUNNER_TOKEN_KEY_ENV_VAR = "STIGMER_RUNNER_TOKEN_KEY";
+/** Auto-generated key file under ~/.stigmer — Go KeyFileName. */
+export const RUNNER_TOKEN_KEY_FILE_NAME = "runner-token.key";
+/**
+ * Default token lifetime — Go DefaultTTL (1 hour). Tokens are minted
+ * immediately before each ExecutionContext read (or carried in a connect
+ * workflow's dispatch payload), so the TTL only needs to cover one unit of
+ * dispatched work including its Temporal retries: generous without being
+ * an effectively-permanent credential in Temporal history.
+ */
+export const DEFAULT_TTL_SECONDS = 3600;
+/**
+ * Go ErrInvalidToken: ANY verification failure — forged signature, wrong
+ * algorithm, expired, wrong type, empty binding — collapses to this one
+ * error. Callers fail closed to redaction on it; a finer-grained reason
+ * would just invite branching on it.
+ */
+export class InvalidTokenError extends Error {
+    constructor() {
+        super("invalid runner token");
+        this.name = "InvalidTokenError";
+    }
+}
+/**
+ * Go ErrMintingDisabled: minting with no signing key (keyless deployments,
+ * effectively test-only — fromEnv auto-generates). The exchange RPC maps
+ * it to the presence-based "not minted" response the runner handles.
+ */
+export class MintingDisabledError extends Error {
+    constructor() {
+        super("runner token minting is disabled - no signing key configured");
+        this.name = "MintingDisabledError";
+    }
+}
+/**
+ * The constant JWT header: HS256 is the only algorithm this module ever
+ * produces or accepts — Verify refuses alg-confusion inputs by comparing
+ * the ENCODED header, without parsing attacker-controlled JSON.
+ */
+const JWT_HEADER = Buffer.from('{"alg":"HS256","typ":"JWT"}').toString("base64url");
+/**
+ * Mints and verifies execution-scoped runner tokens with a single
+ * HMAC-SHA256 key. Stateless and safe for concurrent use.
+ */
+export class RunnerAuthService {
+    key;
+    constructor(key) {
+        this.key = key;
+    }
+    /**
+     * Go NewService: nil/empty key → disabled service (Mint fails with
+     * MintingDisabledError, Verify rejects everything — fail closed: without
+     * a key no token can be genuine).
+     */
+    static create(key) {
+        if (key === undefined || key.length === 0) {
+            return new RunnerAuthService(undefined);
+        }
+        return new RunnerAuthService(key);
+    }
+    /**
+     * Go NewServiceFromEnv: key via the shared ladder (env var → key file →
+     * auto-generate). Errors only on unusable explicit configuration; the
+     * composition root maps that to the BOOT-FATAL posture (the ratified D2
+     * asymmetry: a server that cannot mint runner tokens would hand every
+     * execution redaction markers instead of its secrets — the silent-junk
+     * failure the oss#405 fail-loud doctrine forbids).
+     */
+    static fromEnv(options = {}) {
+        const key = getOrCreateNamedKey(RUNNER_TOKEN_KEY_ENV_VAR, RUNNER_TOKEN_KEY_FILE_NAME, options);
+        return RunnerAuthService.create(key);
+    }
+    /** Go IsEnabled: whether the service holds a signing key. */
+    isEnabled() {
+        return this.key !== undefined;
+    }
+    /**
+     * Go Mint: a token bound to executionId, valid for ttlSeconds
+     * (DEFAULT_TTL_SECONDS when <= 0).
+     */
+    mint(executionId, ttlSeconds = 0) {
+        if (this.key === undefined) {
+            throw new MintingDisabledError();
+        }
+        if (executionId === "") {
+            throw new Error("execution id is required to mint a runner token");
+        }
+        const ttl = ttlSeconds > 0 ? ttlSeconds : DEFAULT_TTL_SECONDS;
+        const nowSeconds = Math.floor(Date.now() / 1000);
+        const claims = {
+            token_type: TOKEN_TYPE_EXECUTION_SCOPED,
+            execution_id: executionId,
+            iat: nowSeconds,
+            exp: nowSeconds + ttl,
+        };
+        const signingInput = JWT_HEADER + "." + Buffer.from(JSON.stringify(claims)).toString("base64url");
+        return {
+            token: signingInput + "." + this.sign(signingInput),
+            ttlSeconds: ttl,
+        };
+    }
+    /**
+     * Go Verify: checks signature, algorithm, expiry, and token type, and
+     * returns the execution id the token is bound to. Any failure throws the
+     * one InvalidTokenError — the caller's only correct reaction is to fall
+     * closed to redaction.
+     *
+     * Check order mirrors Go: enabled → three parts → exact encoded-header
+     * compare → constant-time HMAC → payload decode → claims. The expiry
+     * boundary is `now >= exp` (a token in its expiring second is invalid).
+     */
+    verify(token) {
+        if (this.key === undefined) {
+            throw new InvalidTokenError();
+        }
+        const parts = token.split(".");
+        if (parts.length !== 3) {
+            throw new InvalidTokenError();
+        }
+        if (parts[0] !== JWT_HEADER) {
+            throw new InvalidTokenError();
+        }
+        const signingInput = parts[0] + "." + parts[1];
+        const expected = Buffer.from(this.sign(signingInput));
+        const provided = Buffer.from(parts[2]);
+        // Go's hmac.Equal returns false on length mismatch; Node's
+        // timingSafeEqual THROWS on it, so the length guard comes first (the
+        // signature length is not secret — no timing channel is opened).
+        if (expected.length !== provided.length ||
+            !timingSafeEqual(expected, provided)) {
+            throw new InvalidTokenError();
+        }
+        let claims;
+        try {
+            claims = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+        }
+        catch {
+            throw new InvalidTokenError();
+        }
+        if (claims.token_type !== TOKEN_TYPE_EXECUTION_SCOPED ||
+            typeof claims.execution_id !== "string" ||
+            claims.execution_id === "" ||
+            typeof claims.exp !== "number" ||
+            Math.floor(Date.now() / 1000) >= claims.exp) {
+            throw new InvalidTokenError();
+        }
+        return claims.execution_id;
+    }
+    /** base64url HMAC-SHA256 of the signing input — Go sign(). */
+    sign(signingInput) {
+        if (this.key === undefined) {
+            throw new InvalidTokenError();
+        }
+        return createHmac("sha256", this.key)
+            .update(signingInput)
+            .digest("base64url");
+    }
+}
+//# sourceMappingURL=runnerauth.js.map

package/dist/runnerauth/runnerauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runnerauth.js","sourceRoot":"","sources":["../../src/runnerauth/runnerauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAGnE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,kBAAkB,CAAC;AAE9D,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,iEAAiE;AACjE,MAAM,CAAC,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AAExC;;;;;GAKG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C;QACE,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C;QACE,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,QAAQ,CACpE,WAAW,CACZ,CAAC;AAgBF;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,GAAG,CAAqB;IAEzC,YAAoB,GAAuB;QACzC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,MAAM,CAAC,GAAuB;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1C,OAAO,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,CAAC,OAAO,CAAC,UAA4B,EAAE;QAC3C,MAAM,GAAG,GAAG,mBAAmB,CAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,OAAO,CACR,CAAC;QACF,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IAED,6DAA6D;IAC7D,SAAS;QACP,OAAO,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;IAChC,CAAC;IAED;;;OAGG;IACH,IAAI,CAAC,WAAmB,EAAE,aAAqB,CAAC;QAC9C,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,oBAAoB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC;QAE9D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAgB;YAC1B,UAAU,EAAE,2BAA2B;YACvC,YAAY,EAAE,WAAW;YACzB,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,UAAU,GAAG,GAAG;SACtB,CAAC;QACF,MAAM,YAAY,GAChB,UAAU,GAAG,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC/E,OAAO;YACL,KAAK,EAAE,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YACnD,UAAU,EAAE,GAAG;SAChB,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,MAAM,CAAC,KAAa;QAClB,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC;QACjD,2DAA2D;QAC3D,qEAAqE;QACrE,iEAAiE;QACjE,IACE,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YACnC,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IAAI,MAAmB,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CACjB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC/C,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,IACE,MAAM,CAAC,UAAU,KAAK,2BAA2B;YACjD,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACvC,MAAM,CAAC,YAAY,KAAK,EAAE;YAC1B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;YAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,MAAM,CAAC,GAAG,EAC3C,CAAC;YACD,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QAED,OAAO,MAAM,CAAC,YAAY,CAAC;IAC7B,CAAC;IAED,8DAA8D;IACtD,IAAI,CAAC,YAAoB;QAC/B,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAChC,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC;aAClC,MAAM,CAAC,YAAY,CAAC;aACpB,MAAM,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC;CACF"}

package/dist/sandbox/builtins.d.ts

@@ -0,0 +1,3 @@
+import type { SandboxProvisionerFactory } from "./provisioner.js";
+export declare function builtInSandboxProvisionerFactories(): ReadonlyMap<string, SandboxProvisionerFactory>;
+//# sourceMappingURL=builtins.d.ts.map

package/dist/sandbox/builtins.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.d.ts","sourceRoot":"","sources":["../../src/sandbox/builtins.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAElE,wBAAgB,kCAAkC,IAAI,WAAW,CAC/D,MAAM,EACN,yBAAyB,CAC1B,CAMA"}

package/dist/sandbox/builtins.js

@@ -0,0 +1,18 @@
+/**
+ * The built-in sandbox driver assembly — the name → factory table the
+ * composition root hands to newSandboxProvisioner, one entry per tier of
+ * DD-002's isolation ladder. Kept separate from provisioner.ts so the
+ * contract module never imports driver implementations (extensions
+ * compile against the contract alone through the exports map).
+ */
+import { newDockerSandboxProvisioner } from "./docker.js";
+import { newKubernetesSandboxProvisioner } from "./kubernetes.js";
+import { newLocalProcessSandboxProvisioner } from "./local-process.js";
+export function builtInSandboxProvisionerFactories() {
+    return new Map([
+        ["local-process", newLocalProcessSandboxProvisioner],
+        ["docker", newDockerSandboxProvisioner],
+        ["kubernetes", newKubernetesSandboxProvisioner],
+    ]);
+}
+//# sourceMappingURL=builtins.js.map

package/dist/sandbox/builtins.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builtins.js","sourceRoot":"","sources":["../../src/sandbox/builtins.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,+BAA+B,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAGvE,MAAM,UAAU,kCAAkC;IAIhD,OAAO,IAAI,GAAG,CAAoC;QAChD,CAAC,eAAe,EAAE,iCAAiC,CAAC;QACpD,CAAC,QAAQ,EAAE,2BAA2B,CAAC;QACvC,CAAC,YAAY,EAAE,+BAA+B,CAAC;KAChD,CAAC,CAAC;AACL,CAAC"}

package/dist/sandbox/docker.d.ts

@@ -0,0 +1,3 @@
+import type { SandboxProvisionerFactory } from "./provisioner.js";
+export declare const newDockerSandboxProvisioner: SandboxProvisionerFactory;
+//# sourceMappingURL=docker.d.ts.map

package/dist/sandbox/docker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../../src/sandbox/docker.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAIV,yBAAyB,EAE1B,MAAM,kBAAkB,CAAC;AAqB1B,eAAO,MAAM,2BAA2B,EAAE,yBAqIzC,CAAC"}

package/dist/sandbox/docker.js

@@ -0,0 +1,168 @@
+/**
+ * The Docker sandbox driver — DD-002's second isolation tier, built by
+ * O6 (20260827.05). Each sandbox is one container running the published
+ * runner image, polling exactly one task queue. Mechanism per the
+ * mid-session owner ruling: the docker CLI via child_process — zero new
+ * dependencies, present wherever this tier's audience (dev and small
+ * self-host boxes) already has Docker; the driver seam keeps an
+ * Engine-API swap mechanical if demand appears.
+ *
+ * The ensure state machine (the Java KubernetesSandboxProvisioner's
+ * arms, minus the cloud-only archive ladder): container absent → run;
+ * exists but stopped → start; running → fast path. State is derived
+ * from the container itself — name + labels — never a store table (gate
+ * ruling Q4).
+ *
+ * Deliberate divergences from the cloud manifest, named:
+ *
+ *   - MODE=local, not cloud: the runner's MODE distinguishes
+ *     proxy-transport posture (cloud routes LLM/artifact traffic through
+ *     the proxy and REQUIRES a token), not isolation. An OSS container
+ *     talks to the backend directly, exactly like the compose stack's
+ *     runner container.
+ *   - The token rides `docker run -e STIGMER_TOKEN` with the VALUE
+ *     supplied through the CLI's environment (never argv — argv is
+ *     world-readable in the host process table). It remains visible in
+ *     `docker inspect`, the same trust boundary as the cloud's
+ *     per-sandbox Secret (cluster admins can read those too).
+ *
+ * Both endpoints are construct-time REQUIRED: a container cannot reach
+ * the server or Temporal on this process's localhost, and a driver that
+ * launched sandboxes pointing nowhere would fail as activity timeouts
+ * minutes later — the loud-fail doctrine puts the error at boot instead.
+ */
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { SANDBOX_ID_LABEL, SANDBOX_MANAGED_BY_LABEL, SANDBOX_MANAGED_BY_VALUE, SANDBOX_SCOPE_LABEL, sandboxBaseName, } from "./naming.js";
+const execFileAsync = promisify(execFile);
+/**
+ * The runner entrypoint inside the sandbox image — the image's CMD is
+ * /bin/bash by design (Dockerfile.sandbox: the provisioner sets the
+ * command, exactly as the cloud pod spec does).
+ */
+const RUNNER_CONTAINER_COMMAND = ["node", "/runner/dist/main.js"];
+/** The in-container workspace mount point (the cloud manifest's value). */
+const CONTAINER_WORKSPACE_DIR = "/workspace";
+export const newDockerSandboxProvisioner = ({ config, logger, }) => {
+    if (config.backendEndpoint === "") {
+        throw new Error("sandbox provisioner 'docker' requires STIGMER_SANDBOX_BACKEND_ENDPOINT — a container cannot reach the server on this process's localhost");
+    }
+    if (config.temporalAddress === "") {
+        throw new Error("sandbox provisioner 'docker' requires STIGMER_SANDBOX_TEMPORAL_ADDRESS (or TEMPORAL_HOST_PORT) reachable from inside a container");
+    }
+    async function docker(args, env) {
+        const { stdout } = await execFileAsync("docker", args, {
+            env: env ?? process.env,
+        });
+        return stdout.trim();
+    }
+    /** Live container state by name: absent | stopped | running (Q5's probe). */
+    async function inspectState(name) {
+        try {
+            const running = await docker([
+                "inspect",
+                "--format",
+                "{{.State.Running}}",
+                name,
+            ]);
+            return running === "true" ? "running" : "stopped";
+        }
+        catch (error) {
+            if (isNoSuchContainer(error)) {
+                return "absent";
+            }
+            throw error;
+        }
+    }
+    async function ensure(scope, id, env) {
+        const name = sandboxBaseName(scope, id);
+        const state = await inspectState(name);
+        if (state === "running") {
+            return; // The fast path.
+        }
+        if (state === "stopped") {
+            // The scale-up arm: the container keeps its original env (token
+            // included) — the cloud's defer-restart posture for a stale token
+            // degenerates here to "the next full recreate re-mints" (Q6).
+            await docker(["start", name]);
+            logger.info("Docker sandbox restarted", { scope, id, container: name });
+            return;
+        }
+        const runArgs = [
+            "run",
+            "--detach",
+            "--name",
+            name,
+            "--label",
+            `${SANDBOX_MANAGED_BY_LABEL}=${SANDBOX_MANAGED_BY_VALUE}`,
+            "--label",
+            `${SANDBOX_SCOPE_LABEL}=${scope}`,
+            "--label",
+            `${SANDBOX_ID_LABEL}=${id}`,
+            "--env",
+            "MODE=local",
+            "--env",
+            `STIGMER_TASK_QUEUE=${env.taskQueue}`,
+            "--env",
+            `STIGMER_BACKEND_ENDPOINT=${config.backendEndpoint}`,
+            "--env",
+            `TEMPORAL_SERVICE_ADDRESS=${config.temporalAddress}`,
+            "--env",
+            `WORKSPACE_ROOT_DIR=${CONTAINER_WORKSPACE_DIR}`,
+        ];
+        let runEnv;
+        if (env.stigmerToken !== "") {
+            // Value-less --env inherits from the CLI's environment (module
+            // header: the token must never appear in argv).
+            runArgs.push("--env", "STIGMER_TOKEN");
+            runEnv = { ...process.env, STIGMER_TOKEN: env.stigmerToken };
+        }
+        runArgs.push(config.runnerImage, ...RUNNER_CONTAINER_COMMAND);
+        await docker(runArgs, runEnv);
+        logger.info("Docker sandbox provisioned", {
+            scope,
+            id,
+            container: name,
+            taskQueue: env.taskQueue,
+            image: config.runnerImage,
+        });
+    }
+    async function deprovision(scope, id) {
+        const name = sandboxBaseName(scope, id);
+        try {
+            await docker(["rm", "--force", name]);
+            logger.info("Docker sandbox deprovisioned", {
+                scope,
+                id,
+                container: name,
+            });
+        }
+        catch (error) {
+            if (isNoSuchContainer(error)) {
+                return; // Missing is success — idempotent teardown.
+            }
+            throw error;
+        }
+    }
+    const provisioner = {
+        ensureSessionSandbox: (sessionId, env) => ensure("session", sessionId, env),
+        deprovisionSessionSandbox: (sessionId) => deprovision("session", sessionId),
+        ensureWorkflowSandbox: (executionId, env) => ensure("workflow", executionId, env),
+        deprovisionWorkflowSandbox: (executionId) => deprovision("workflow", executionId),
+        async createConnectSandbox(connectRequestId, env) {
+            await ensure("connect", connectRequestId, env);
+            return connectRequestId;
+        },
+        deprovisionConnectSandbox: (sandboxId) => deprovision("connect", sandboxId),
+        probe: (scope, id) => inspectState(sandboxBaseName(scope, id)),
+    };
+    return provisioner;
+};
+/** Docker CLI's not-found shapes ("No such container"/"No such object"). */
+function isNoSuchContainer(error) {
+    const text = error instanceof Error
+        ? `${error.message} ${error.stderr ?? ""}`
+        : String(error);
+    return text.includes("No such container") || text.includes("No such object");
+}
+//# sourceMappingURL=docker.js.map

package/dist/sandbox/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/sandbox/docker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAStC,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,aAAa,CAAC;AAErB,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AAElE,2EAA2E;AAC3E,MAAM,uBAAuB,GAAG,YAAY,CAAC;AAE7C,MAAM,CAAC,MAAM,2BAA2B,GAA8B,CAAC,EACrE,MAAM,EACN,MAAM,GACP,EAAE,EAAE;IACH,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,0IAA0I,CAC3I,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,kIAAkI,CACnI,CAAC;IACJ,CAAC;IAED,KAAK,UAAU,MAAM,CACnB,IAAc,EACd,GAAuB;QAEvB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE;YACrD,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG;SACxB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IAED,6EAA6E;IAC7E,KAAK,UAAU,YAAY,CAAC,IAAY;QACtC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC;gBAC3B,SAAS;gBACT,UAAU;gBACV,oBAAoB;gBACpB,IAAI;aACL,CAAC,CAAC;YACH,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACpD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,UAAU,MAAM,CACnB,KAAmB,EACnB,EAAU,EACV,GAAuB;QAEvB,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,iBAAiB;QAC3B,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,gEAAgE;YAChE,kEAAkE;YAClE,8DAA8D;YAC9D,MAAM,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG;YACd,KAAK;YACL,UAAU;YACV,QAAQ;YACR,IAAI;YACJ,SAAS;YACT,GAAG,wBAAwB,IAAI,wBAAwB,EAAE;YACzD,SAAS;YACT,GAAG,mBAAmB,IAAI,KAAK,EAAE;YACjC,SAAS;YACT,GAAG,gBAAgB,IAAI,EAAE,EAAE;YAC3B,OAAO;YACP,YAAY;YACZ,OAAO;YACP,sBAAsB,GAAG,CAAC,SAAS,EAAE;YACrC,OAAO;YACP,4BAA4B,MAAM,CAAC,eAAe,EAAE;YACpD,OAAO;YACP,4BAA4B,MAAM,CAAC,eAAe,EAAE;YACpD,OAAO;YACP,sBAAsB,uBAAuB,EAAE;SAChD,CAAC;QACF,IAAI,MAAqC,CAAC;QAC1C,IAAI,GAAG,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YAC5B,+DAA+D;YAC/D,gDAAgD;YAChD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACvC,MAAM,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,wBAAwB,CAAC,CAAC;QAC9D,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;YACxC,KAAK;YACL,EAAE;YACF,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,MAAM,CAAC,WAAW;SAC1B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,UAAU,WAAW,CAAC,KAAmB,EAAE,EAAU;QACxD,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;gBAC1C,KAAK;gBACL,EAAE;gBACF,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,4CAA4C;YACtD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAuB;QACtC,oBAAoB,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC;QAC3E,yBAAyB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3E,qBAAqB,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAC1C,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,GAAG,CAAC;QACtC,0BAA0B,EAAE,CAAC,WAAW,EAAE,EAAE,CAC1C,WAAW,CAAC,UAAU,EAAE,WAAW,CAAC;QACtC,KAAK,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,GAAG;YAC9C,MAAM,MAAM,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;YAC/C,OAAO,gBAAgB,CAAC;QAC1B,CAAC;QACD,yBAAyB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,CAAC;QAC3E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;KAC/D,CAAC;IACF,OAAO,WAAW,CAAC;AACrB,CAAC,CAAC;AAEF,4EAA4E;AAC5E,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,IAAI,GACR,KAAK,YAAY,KAAK;QACpB,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,IAAK,KAA6B,CAAC,MAAM,IAAI,EAAE,EAAE;QACnE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AAC/E,CAAC"}

package/dist/sandbox/kubernetes.d.ts

@@ -0,0 +1,27 @@
+import type { V1Deployment, V1PersistentVolumeClaim, V1Secret } from "@kubernetes/client-node";
+import type { SandboxDriverConfig, SandboxEnvironment, SandboxProvisioner, SandboxProvisionerFactory, SandboxScope } from "./provisioner.js";
+export interface KubernetesSandboxGateway {
+    /** Replicas of the named Deployment; undefined when it does not exist. */
+    deploymentReplicas(name: string): Promise<number | undefined>;
+    applySecret(secret: V1Secret): Promise<void>;
+    applyPvc(pvc: V1PersistentVolumeClaim): Promise<void>;
+    applyDeployment(deployment: V1Deployment): Promise<void>;
+    scaleDeployment(name: string, replicas: number): Promise<void>;
+    /** Deletes are idempotent — missing objects are success. */
+    deleteDeployment(name: string): Promise<void>;
+    deleteSecret(name: string): Promise<void>;
+    deletePvc(name: string): Promise<void>;
+}
+export declare function buildSandboxSecret(scope: SandboxScope, id: string, stigmerToken: string): V1Secret;
+export declare function buildWorkspacePvc(scope: SandboxScope, id: string): V1PersistentVolumeClaim;
+export declare function buildSandboxDeployment(scope: SandboxScope, id: string, env: SandboxEnvironment, config: SandboxDriverConfig): V1Deployment;
+export declare const newKubernetesSandboxProvisioner: SandboxProvisionerFactory;
+/**
+ * The driver over an injected gateway — the unit-test seam (the live
+ * factory above builds the client gateway; tests inject a fake and pin
+ * the ensure arms without a cluster).
+ */
+export declare function newKubernetesSandboxProvisionerOverGateway(gateway: KubernetesSandboxGateway, config: SandboxDriverConfig, logger: {
+    info: (msg: string, fields?: Record<string, unknown>) => void;
+}): SandboxProvisioner;
+//# sourceMappingURL=kubernetes.d.ts.map

package/dist/sandbox/kubernetes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes.d.ts","sourceRoot":"","sources":["../../src/sandbox/kubernetes.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EACV,YAAY,EACZ,uBAAuB,EACvB,QAAQ,EACT,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EACV,mBAAmB,EACnB,kBAAkB,EAElB,kBAAkB,EAClB,yBAAyB,EACzB,YAAY,EACb,MAAM,kBAAkB,CAAC;AA8C1B,MAAM,WAAW,wBAAwB;IACvC,0EAA0E;IAC1E,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9D,WAAW,CAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,eAAe,CAAC,UAAU,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzD,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,4DAA4D;IAC5D,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAwID,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,MAAM,GACnB,QAAQ,CAWV;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,GACT,uBAAuB,CAczB;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,EACnB,EAAE,EAAE,MAAM,EACV,GAAG,EAAE,kBAAkB,EACvB,MAAM,EAAE,mBAAmB,GAC1B,YAAY,CA6Ed;AAMD,eAAO,MAAM,+BAA+B,EAAE,yBAgB7C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,0CAA0C,CACxD,OAAO,EAAE,wBAAwB,EACjC,MAAM,EAAE,mBAAmB,EAC3B,MAAM,EAAE;IACN,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC/D,GACA,kBAAkB,CA8EpB"}