@usine/cloudflare 0.0.0-stage → 0.1.0

package/dist/worker.d.ts

@@ -0,0 +1,77 @@
+import { DurableObject, WorkerEntrypoint } from "cloudflare:workers";
+import { Schema } from "effect";
+/** The bindings and variables that `wrangler.jsonc` and `wrangler secret put` give the Worker. */
+interface Env {
+    readonly SANDBOX: DurableObjectNamespace<AttemptSandbox>;
+    readonly REGISTRY: DurableObjectNamespace<SandboxRegistry>;
+    readonly ACCESS_CLIENT_ID?: string;
+    readonly ACCESS_CLIENT_SECRET?: string;
+    readonly ALLOWED_HOSTS?: string;
+}
+/**
+ * The Worker's HTTP surface. Every request must carry the Access service token; the routes go to
+ * the sandbox's Durable Object, the registry, or any sandbox Durable Object for the health check.
+ */
+declare const _default: {
+    fetch(request: Request<unknown, IncomingRequestCfProperties<unknown>>, env: Env): Promise<Response>;
+};
+export default _default;
+/**
+ * The Durable Object and container of one Attempt's sandbox. It serves the sandbox routes of
+ * `SandboxApi` and the exec and attach streams, and keeps the container running with an alarm
+ * while the Attempt holds its lease.
+ */
+export declare class AttemptSandbox extends DurableObject<Env> {
+    #private;
+    constructor(ctx: DurableObjectState, env: Env);
+    fetch(request: Request): Promise<Response>;
+    alarm(): Promise<void>;
+}
+/**
+ * The registry of every sandbox, by owner. Sandboxes record themselves when they're created and
+ * leave when they're destroyed; `/v1/sandboxes` reads each one's current state.
+ */
+export declare class SandboxRegistry extends DurableObject<Env> {
+    #private;
+    constructor(ctx: DurableObjectState, env: Env);
+    fetch(request: Request): Promise<Response>;
+    /** Records `sandbox`, the JSON encoding of a `SandboxSummary`. */
+    record(sandbox: Schema.Json): Promise<void>;
+    forget(name: string): Promise<void>;
+}
+declare const GitHubProps: Schema.Struct<{
+    readonly host: Schema.Literals<readonly ["github.com", "api.github.com"]>;
+    readonly token: Schema.NonEmptyString;
+}>;
+declare const ProviderProps: Schema.Struct<{
+    readonly provider: Schema.Literals<readonly ["anthropic", "openai"]>;
+    readonly credential: Schema.Union<readonly [typeof import("./api/api.ts").ApiKeyCredential]>;
+}>;
+/** Adds the Attempt's installation token to the sandbox's requests for GitHub. */
+export declare class GitHubOutbound extends WorkerEntrypoint<Env, typeof GitHubProps.Encoded> {
+    fetch(request: Request): Promise<Response>;
+}
+/**
+ * Sends the sandbox's plain HTTP requests for a provider to the provider, with its API key.
+ * Refuses a request for a route that the harnesses don't call with status 404.
+ */
+export declare class ProviderOutbound extends WorkerEntrypoint<Env, typeof ProviderProps.Encoded> {
+    fetch(request: Request): Promise<Response>;
+}
+/** Forwards the sandbox's requests for an allowlisted host unchanged. */
+export declare class AllowedOutbound extends WorkerEntrypoint<Env, Record<string, never>> {
+    fetch(request: Request): Promise<Response>;
+}
+/** Refuses the sandbox's requests for a GitHub or provider host that has no credential. */
+export declare class DeniedOutbound extends WorkerEntrypoint<Env, Record<string, never>> {
+    fetch(request: Request): Promise<Response>;
+}
+declare global {
+    namespace Cloudflare {
+        interface GlobalProps {
+            mainModule: typeof import("./worker.ts");
+            durableNamespaces: "AttemptSandbox" | "SandboxRegistry";
+        }
+    }
+}
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAWL,MAAM,EACP,MAAM,QAAQ,CAAC;AAqBhB,kGAAkG;AAClG,UAAU,GAAG;IACX,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,cAAc,CAAC,CAAC;IACzD,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC,eAAe,CAAC,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAkDD;;;GAGG;;;;;AAuLH;;;;GAIG;AACH,qBAAa,cAAe,SAAQ,aAAa,CAAC,GAAG,CAAC;;IAMpD,YAAY,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,EA2C5C;IAYc,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAgCxD;IAEc,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAEpC;CACF;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,aAAa,CAAC,GAAG,CAAC;;IAGrD,YAAY,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,GAAG,EAqD5C;IAEc,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAExD;IAED,kEAAkE;IAC5D,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAIhD;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAExC;CACF;AAED,QAAA,MAAM,WAAW;;;EAGf,CAAC;AACH,QAAA,MAAM,aAAa;;;EAGjB,CAAC;AAcH,kFAAkF;AAClF,qBAAa,cAAe,SAAQ,gBAAgB,CAAC,GAAG,EAAE,OAAO,WAAW,CAAC,OAAO,CAAC;IACpE,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAKxD;CACF;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,gBAAgB,CAAC,GAAG,EAAE,OAAO,aAAa,CAAC,OAAO,CAAC;IACxE,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAoBxD;CACF;AAED,yEAAyE;AACzE,qBAAa,eAAgB,SAAQ,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAChE,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAIxD;CACF;AAED,2FAA2F;AAC3F,qBAAa,cAAe,SAAQ,gBAAgB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/D,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQxD;CACF;AAED,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,UAAU,CAAC;QACnB,UAAU,WAAW;YACnB,UAAU,EAAE,cAAc,aAAa,CAAC,CAAC;YACzC,iBAAiB,EAAE,gBAAgB,GAAG,iBAAiB,CAAC;SACzD;KACF;CACF"}

package/dist/worker.js

@@ -0,0 +1,362 @@
+import { Files, SandboxFileError } from "@cloudflare/sandbox";
+import { CloudflareLlmProvider } from "@usine/core/worker";
+import { DurableObject, WorkerEntrypoint } from "cloudflare:workers";
+import { DateTime, Duration, Effect, Layer, Logger, Match, Option, Queue, Redacted, Schema, } from "effect";
+import { HttpRouter } from "effect/http";
+import { accessGranted } from "./access.js";
+import { ProcessId, ProviderCredential, SandboxName, SandboxSummary } from "./api/api.js";
+import { GITHUB_HOSTS } from "./api/harness.js";
+import { AttachOffsets } from "./api/stream.js";
+import { registryRoutes, RegistryStorage, SandboxLookup, SandboxLookupFailed } from "./registry.js";
+import { allowedHostsOf, gitHubRequest, providerRequest } from "./sandbox/outbound.js";
+import { ContainerFailure, SandboxContainer, SandboxDirectory, SandboxSettings, SandboxStorage, StoredSandbox, } from "./sandbox/ports.js";
+import { commandOptions, readFromCommand } from "./sandbox/process.js";
+import { collectBytes, keepAlive, restore, sandboxRoutes } from "./sandbox/sandbox.js";
+import { attachStream, execStream } from "./sandbox/stream.js";
+const WorkerVariables = Schema.Struct({
+    ACCESS_CLIENT_ID: Schema.NonEmptyString,
+    ACCESS_CLIENT_SECRET: Schema.NonEmptyString,
+    ALLOWED_HOSTS: Schema.optionalKey(Schema.String),
+});
+const decodeVariables = Schema.decodeUnknownOption(WorkerVariables);
+/** Returns the Worker's settings, or `None` if the Access service token secrets are unset. */
+const settingsOf = (env) => Option.map(decodeVariables(env), (variables) => ({
+    access: {
+        clientId: Redacted.make(variables.ACCESS_CLIENT_ID),
+        clientSecret: Redacted.make(variables.ACCESS_CLIENT_SECRET),
+    },
+    allowedHosts: allowedHostsOf(variables.ALLOWED_HOSTS ?? ""),
+}));
+const logger = Logger.layer([Logger.consoleJson]);
+/** Runs `effect` with the Worker's JSON logger. */
+const run = (effect) => Effect.runPromise(effect.pipe(Effect.provide(logger)));
+/** The name of the Durable Object that answers `/v1/health`. It never starts a container. */
+const HEALTH_SANDBOX = "usine-health";
+/** The name of the registry Durable Object. */
+const REGISTRY = "usine-registry";
+const ROUTES = {
+    health: /^\/v1\/health$/u,
+    registry: /^\/v1\/sandboxes$/u,
+    sandbox: /^\/v1\/sandboxes\/([^/]+)(?:\/.*)?$/u,
+    exec: /^\/v1\/sandboxes\/([^/]+)\/exec$/u,
+    attach: /^\/v1\/sandboxes\/([^/]+)\/processes\/([^/]+)\/attach$/u,
+};
+const decodeSandboxName = Schema.decodeUnknownOption(SandboxName);
+const decodeProcessId = Schema.decodeUnknownOption(ProcessId);
+const decodeOffsets = Schema.decodeUnknownOption(AttachOffsets);
+const plain = (status, message) => new Response(message, { status, headers: { "content-type": "text/plain; charset=utf-8" } });
+/**
+ * The Worker's HTTP surface. Every request must carry the Access service token; the routes go to
+ * the sandbox's Durable Object, the registry, or any sandbox Durable Object for the health check.
+ */
+export default {
+    async fetch(request, env) {
+        const settings = settingsOf(env);
+        if (Option.isNone(settings)) {
+            await run(Effect.logError("The Worker has no Access service token; set ACCESS_CLIENT_ID and ACCESS_CLIENT_SECRET with wrangler secret put"));
+            return plain(500, "The Worker has no Access service token configured.\n");
+        }
+        const url = new URL(request.url);
+        if (!(await run(accessGranted(request.headers, settings.value.access)))) {
+            await run(Effect.logWarning("Refused a request without the Access service token", {
+                path: url.pathname,
+            }));
+            return plain(401, "The request lacks the Access service token.\n");
+        }
+        if (ROUTES.health.test(url.pathname))
+            return env.SANDBOX.getByName(HEALTH_SANDBOX).fetch(request);
+        if (ROUTES.registry.test(url.pathname))
+            return env.REGISTRY.getByName(REGISTRY).fetch(request);
+        const name = decodeSandboxName(ROUTES.sandbox.exec(url.pathname)?.[1]);
+        if (Option.isNone(name))
+            return plain(404, "Not found.\n");
+        return env.SANDBOX.getByName(name.value).fetch(request);
+    },
+};
+const containerFailure = (operation) => (cause) => new ContainerFailure({
+    operation,
+    message: cause instanceof Error ? cause.message : String(cause),
+});
+const isMissingFile = (cause) => SandboxFileError.is(cause) && cause.code === "ENOENT";
+/** Returns the `SandboxContainer` over the Durable Object Container API and the Sandbox SDK. */
+const containerOf = (container, exports) => {
+    const files = new Files(container);
+    const tryContainer = (operation, evaluate) => Effect.tryPromise({ try: evaluate, catch: containerFailure(operation) });
+    return {
+        running: Effect.sync(() => container.running),
+        images: Effect.sync(() => container.images),
+        start: (image, instanceType) => Effect.try({
+            try: () => container.start({ image, instance: instanceType, enableInternet: false }),
+            catch: containerFailure("start"),
+        }),
+        exec: (command, stdin) => tryContainer("exec", () => container.exec([...command], commandOptions(stdin))),
+        read: (path) => tryContainer("read", async () => {
+            try {
+                const response = await files.readFile(path);
+                return Option.some(new Uint8Array(await response.arrayBuffer()));
+            }
+            catch (cause) {
+                if (isMissingFile(cause))
+                    return Option.none();
+                throw cause;
+            }
+        }),
+        readFrom: (path, offset) => tryContainer("read", () => container.exec([...readFromCommand(path, offset)], commandOptions("closed"))).pipe(
+        // Keeps the bytes as they are: the attach stream counts them to resume at an offset.
+        Effect.flatMap((process) => collectBytes(process)), Effect.flatMap(({ stdout, exitCode, stderr }) => {
+            if (exitCode === 0)
+                return Effect.succeed(Option.some(stdout));
+            const message = new TextDecoder().decode(stderr).trim();
+            return message.includes("No such file")
+                ? Effect.succeedNone
+                : Effect.fail(new ContainerFailure({ operation: "read", message }));
+        })),
+        size: (path) => tryContainer("read", async () => {
+            try {
+                return Option.some(Number((await files.stat(path)).size));
+            }
+            catch (cause) {
+                if (isMissingFile(cause))
+                    return Option.none();
+                throw cause;
+            }
+        }),
+        destroy: tryContainer("destroy", () => container.destroy()),
+        keepAlive: (inactivity) => tryContainer("keep-alive", () => container.setInactivityTimeout(Duration.toMillis(inactivity))),
+        intercept: (interception) => Match.valueTags(interception, {
+            GitHub: ({ host, token }) => tryContainer("intercept", () => container.interceptOutboundHttps(host, exports.GitHubOutbound({ props: { host, token: Redacted.value(token) } }))),
+            Provider: ({ host, provider, credential }) => tryContainer("intercept", () => container.interceptOutboundHttp(host, exports.ProviderOutbound({
+                props: { provider, credential: Schema.encodeSync(ProviderCredential)(credential) },
+            }))),
+            Allowed: ({ host }) => tryContainer("intercept", () => container.interceptOutboundHttps(host, exports.AllowedOutbound({ props: {} }))),
+            Denied: ({ host, scheme }) => tryContainer("intercept", () => scheme === "https"
+                ? container.interceptOutboundHttps(host, exports.DeniedOutbound({ props: {} }))
+                : container.interceptOutboundHttp(host, exports.DeniedOutbound({ props: {} }))),
+        }),
+    };
+};
+const STORED_KEY = "sandbox";
+const encodeStored = Schema.encodeSync(Schema.toCodecJson(StoredSandbox));
+const decodeStored = Schema.decodeUnknownOption(Schema.toCodecJson(StoredSandbox));
+/** Returns `SandboxStorage` over the Durable Object's storage, with the sandbox as JSON. */
+const storageOf = (storage) => ({
+    load: Effect.promise(() => storage.get(STORED_KEY)).pipe(Effect.map((value) => (value === undefined ? Option.none() : decodeStored(value)))),
+    // No other request runs between the read and the write: the input gate holds events while a
+    // storage read runs, and nothing but storage is awaited until the write.
+    modify: (change) => Effect.promise(async () => {
+        const value = await storage.get(STORED_KEY);
+        const [result, changed] = change(value === undefined ? Option.none() : decodeStored(value));
+        if (Option.isSome(changed))
+            await storage.put(STORED_KEY, encodeStored(changed.value));
+        return result;
+    }),
+    clear: Effect.promise(async () => {
+        await storage.deleteAlarm();
+        await storage.deleteAll();
+    }),
+    alarmAt: (at) => Effect.promise(() => storage.setAlarm(DateTime.toEpochMillis(at))),
+});
+const encodeSummary = Schema.encodeSync(Schema.toCodecJson(SandboxSummary));
+const decodeSummary = Schema.decodeUnknownOption(Schema.toCodecJson(SandboxSummary));
+/** Returns a `StreamSocket` over the server end of a `WebSocketPair`, which it accepts. */
+const socketOf = (socket) => Effect.gen(function* () {
+    const messages = yield* Queue.unbounded();
+    socket.accept();
+    socket.addEventListener("message", (event) => {
+        Queue.offerUnsafe(messages, event.data instanceof ArrayBuffer ? new Uint8Array(event.data) : String(event.data));
+    });
+    socket.addEventListener("close", () => Queue.endUnsafe(messages));
+    socket.addEventListener("error", () => Queue.endUnsafe(messages));
+    const attempt = (action) => Effect.sync(() => {
+        try {
+            action();
+        }
+        catch {
+            // The client already closed the socket.
+        }
+    });
+    return {
+        messages,
+        send: (message) => attempt(() => socket.send(message)),
+        close: (code, reason) => attempt(() => socket.close(code, reason)),
+    };
+});
+/**
+ * The Durable Object and container of one Attempt's sandbox. It serves the sandbox routes of
+ * `SandboxApi` and the exec and attach streams, and keeps the container running with an alarm
+ * while the Attempt holds its lease.
+ */
+export class AttemptSandbox extends DurableObject {
+    #services;
+    #web;
+    constructor(ctx, env) {
+        super(ctx, env);
+        const container = ctx.container;
+        if (container === undefined)
+            throw new Error("AttemptSandbox needs a container: add it to the containers of wrangler.jsonc");
+        const registry = env.REGISTRY.getByName(REGISTRY);
+        const directory = {
+            record: (sandbox) => Effect.tryPromise(() => registry.record(encodeSummary(sandbox))).pipe(Effect.tapError(() => Effect.logError("Could not record the sandbox in the registry", {
+                sandbox: sandbox.name,
+            })), Effect.ignore),
+            forget: (name) => Effect.tryPromise(() => registry.forget(name)).pipe(Effect.tapError(() => Effect.logError("Could not remove the sandbox from the registry", { sandbox: name })), Effect.ignore),
+        };
+        this.#services = Layer.mergeAll(Layer.succeed(SandboxContainer)(containerOf(container, ctx.exports)), Layer.succeed(SandboxStorage)(storageOf(ctx.storage)), Layer.succeed(SandboxDirectory)(directory), Layer.succeed(SandboxSettings)({
+            allowedHosts: Option.match(settingsOf(env), {
+                onNone: () => [],
+                onSome: ({ allowedHosts }) => allowedHosts,
+            }),
+        }), logger);
+        const web = HttpRouter.toWebHandler(sandboxRoutes.pipe(HttpRouter.provideRequest(this.#services)));
+        this.#web = (request) => web.handler(request);
+        void ctx.blockConcurrencyWhile(() => this.#run(restore()));
+    }
+    #run(effect) {
+        return Effect.runPromise(effect.pipe(Effect.provide(this.#services)));
+    }
+    async fetch(request) {
+        const url = new URL(request.url);
+        const exec = ROUTES.exec.exec(url.pathname);
+        const attach = ROUTES.attach.exec(url.pathname);
+        if (exec === null && attach === null)
+            return this.#web(request);
+        if (request.headers.get("upgrade")?.toLowerCase() !== "websocket")
+            return plain(426, "Open this path as a WebSocket.\n");
+        const name = decodeSandboxName((exec ?? attach)?.[1]);
+        if (Option.isNone(name))
+            return plain(404, "Not found.\n");
+        const pair = new WebSocketPair();
+        const [client, server] = [pair[0], pair[1]];
+        const stream = attach === null
+            ? Effect.flatMap(socketOf(server), (socket) => execStream(name.value, socket))
+            : Option.match(Option.all({
+                process: decodeProcessId(attach[2]),
+                offsets: decodeOffsets(Object.fromEntries(url.searchParams)),
+            }), {
+                onNone: () => Effect.flatMap(socketOf(server), (socket) => socket.close(1008, "Expected a process ID and stdout and stderr offsets")),
+                onSome: ({ process, offsets }) => Effect.flatMap(socketOf(server), (socket) => attachStream(name.value, process, offsets, socket)),
+            });
+        this.ctx.waitUntil(this.#run(stream.pipe(Effect.scoped)));
+        return new Response(null, { status: 101, webSocket: client });
+    }
+    async alarm() {
+        await this.#run(keepAlive());
+    }
+}
+/**
+ * The registry of every sandbox, by owner. Sandboxes record themselves when they're created and
+ * leave when they're destroyed; `/v1/sandboxes` reads each one's current state.
+ */
+export class SandboxRegistry extends DurableObject {
+    #web;
+    constructor(ctx, env) {
+        super(ctx, env);
+        const storage = {
+            list: Effect.promise(() => ctx.storage.list({ prefix: "sandbox:" })).pipe(Effect.map((entries) => [...entries.values()].flatMap((value) => Option.toArray(decodeSummary(value))))),
+            put: (sandbox) => Effect.promise(() => ctx.storage.put(`sandbox:${sandbox.name}`, encodeSummary(sandbox))),
+            remove: (name) => Effect.promise(() => ctx.storage.delete(`sandbox:${name}`)).pipe(Effect.asVoid),
+        };
+        const lookup = {
+            get: (name) => {
+                const failed = (reason) => new SandboxLookupFailed({ name, reason });
+                return Effect.tryPromise({
+                    try: () => env.SANDBOX.getByName(name).fetch(`https://sandbox.internal/v1/sandboxes/${name}`),
+                    catch: (cause) => failed(`no response: ${cause instanceof Error ? cause.message : String(cause)}`),
+                }).pipe(Effect.flatMap((response) => {
+                    // Only a 404 from the sandbox's own Durable Object says that the sandbox is gone.
+                    if (response.status === 404)
+                        return Effect.succeedNone;
+                    if (!response.ok)
+                        return Effect.fail(failed(`status ${String(response.status)}`));
+                    return Effect.tryPromise({
+                        try: () => response.json(),
+                        catch: () => failed("the response isn't JSON"),
+                    }).pipe(Effect.flatMap((body) => Option.match(decodeSummary(body), {
+                        onNone: () => Effect.fail(failed("the response isn't a sandbox summary")),
+                        onSome: (summary) => Effect.succeed(Option.some(summary)),
+                    })));
+                }));
+            },
+        };
+        const web = HttpRouter.toWebHandler(registryRoutes.pipe(HttpRouter.provideRequest(Layer.mergeAll(Layer.succeed(RegistryStorage)(storage), Layer.succeed(SandboxLookup)(lookup), logger))));
+        this.#web = (request) => web.handler(request);
+    }
+    async fetch(request) {
+        return this.#web(request);
+    }
+    /** Records `sandbox`, the JSON encoding of a `SandboxSummary`. */
+    async record(sandbox) {
+        const decoded = decodeSummary(sandbox);
+        if (Option.isSome(decoded))
+            await this.ctx.storage.put(`sandbox:${decoded.value.name}`, encodeSummary(decoded.value));
+    }
+    async forget(name) {
+        await this.ctx.storage.delete(`sandbox:${name}`);
+    }
+}
+const GitHubProps = Schema.Struct({
+    host: Schema.Literals(GITHUB_HOSTS),
+    token: Schema.NonEmptyString,
+});
+const ProviderProps = Schema.Struct({
+    provider: CloudflareLlmProvider,
+    credential: ProviderCredential,
+});
+/** Logs one forwarded request without its headers, body, or query string. */
+const logForwarded = (handler, request, response) => run(Effect.logInfo("Forwarded a sandbox request", {
+    handler,
+    method: request.method,
+    host: new URL(request.url).host,
+    path: new URL(request.url).pathname,
+    status: response.status,
+}));
+/** Adds the Attempt's installation token to the sandbox's requests for GitHub. */
+export class GitHubOutbound extends WorkerEntrypoint {
+    async fetch(request) {
+        const props = Schema.decodeUnknownSync(GitHubProps)(this.ctx.props);
+        const response = await fetch(gitHubRequest(request, props.host, Redacted.make(props.token)));
+        await logForwarded("github", request, response);
+        return response;
+    }
+}
+/**
+ * Sends the sandbox's plain HTTP requests for a provider to the provider, with its API key.
+ * Refuses a request for a route that the harnesses don't call with status 404.
+ */
+export class ProviderOutbound extends WorkerEntrypoint {
+    async fetch(request) {
+        const props = Schema.decodeUnknownSync(ProviderProps)(this.ctx.props);
+        const forwarded = providerRequest(request, props.provider, props.credential);
+        if (Option.isNone(forwarded)) {
+            await run(Effect.logWarning("Refused a sandbox request for a route the harnesses don't call", {
+                handler: props.provider,
+                method: request.method,
+                host: new URL(request.url).host,
+                path: new URL(request.url).pathname,
+            }));
+            return plain(404, `usine forwards only the routes Claude Code and Codex call to ${props.provider}.\n`);
+        }
+        const response = await fetch(forwarded.value);
+        await logForwarded(props.provider, request, response);
+        return response;
+    }
+}
+/** Forwards the sandbox's requests for an allowlisted host unchanged. */
+export class AllowedOutbound extends WorkerEntrypoint {
+    async fetch(request) {
+        const response = await fetch(request);
+        await logForwarded("allowed", request, response);
+        return response;
+    }
+}
+/** Refuses the sandbox's requests for a GitHub or provider host that has no credential. */
+export class DeniedOutbound extends WorkerEntrypoint {
+    async fetch(request) {
+        await run(Effect.logWarning("Refused a sandbox request for a host without a credential", {
+            method: request.method,
+            host: new URL(request.url).host,
+        }));
+        return plain(403, "usine attached no credential for this host to the sandbox.\n");
+    }
+}
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAEL,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,EACL,MAAM,EACN,KAAK,EACL,QAAQ,EACR,MAAM,GACP,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAoB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpG,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EACL,gBAAgB,EAEhB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,aAAa,GACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,YAAY,EAAE,UAAU,EAAqB,MAAM,qBAAqB,CAAC;AAWlF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IACpC,gBAAgB,EAAE,MAAM,CAAC,cAAc;IACvC,oBAAoB,EAAE,MAAM,CAAC,cAAc;IAC3C,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC;CACjD,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;AAOpE,8FAA8F;AAC9F,MAAM,UAAU,GAAG,CAAC,GAAQ,EAAiC,EAAE,CAC7D,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,EAAE;QACN,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;QACnD,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,oBAAoB,CAAC;KAC5D;IACD,YAAY,EAAE,cAAc,CAAC,SAAS,CAAC,aAAa,IAAI,EAAE,CAAC;CAC5D,CAAC,CAAC,CAAC;AAEN,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;AAElD,mDAAmD;AACnD,MAAM,GAAG,GAAG,CAAI,MAAwB,EAAc,EAAE,CACtD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEzD,6FAA6F;AAC7F,MAAM,cAAc,GAAG,cAAc,CAAC;AACtC,+CAA+C;AAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAElC,MAAM,MAAM,GAAG;IACb,MAAM,EAAE,iBAAiB;IACzB,QAAQ,EAAE,oBAAoB;IAC9B,OAAO,EAAE,sCAAsC;IAC/C,IAAI,EAAE,mCAAmC;IACzC,MAAM,EAAE,yDAAyD;CACzD,CAAC;AAEX,MAAM,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;AAClE,MAAM,eAAe,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;AAC9D,MAAM,aAAa,GAAG,MAAM,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC;AAEhE,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE,CAChD,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,EAAE,CAAC,CAAC;AAE9F;;;GAGG;AACH,eAAe;IACb,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG;QACtB,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,CACP,MAAM,CAAC,QAAQ,CACb,gHAAgH,CACjH,CACF,CAAC;YACF,OAAO,KAAK,CAAC,GAAG,EAAE,sDAAsD,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,GAAG,CACP,MAAM,CAAC,UAAU,CAAC,oDAAoD,EAAE;gBACtE,IAAI,EAAE,GAAG,CAAC,QAAQ;aACnB,CAAC,CACH,CAAC;YACF,OAAO,KAAK,CAAC,GAAG,EAAE,+CAA+C,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClC,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;CAC6B,CAAC;AAEjC,MAAM,gBAAgB,GAAG,CAAC,SAA6B,EAAE,EAAE,CAAC,CAAC,KAAc,EAAE,EAAE,CAC7E,IAAI,gBAAgB,CAAC;IACnB,SAAS;IACT,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;CAChE,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,CAAC,KAAc,EAAW,EAAE,CAChD,gBAAgB,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAExD,gGAAgG;AAChG,MAAM,WAAW,GAAG,CAClB,SAAoB,EACpB,OAA2B,EACE,EAAE;IAC/B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG,CAAI,SAA6B,EAAE,QAA0B,EAAE,EAAE,CACpF,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAC3E,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC;QAC7C,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC;QAC3C,KAAK,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,CAC7B,MAAM,CAAC,GAAG,CAAC;YACT,GAAG,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;YACpF,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC;SACjC,CAAC;QACJ,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CACvB,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACjF,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,YAAY,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YAC9B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACnE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,aAAa,CAAC,KAAK,CAAC;oBAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACJ,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CACzB,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,CACxB,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC,CAC7E,CAAC,IAAI;QACJ,qFAAqF;QACrF,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAClD,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;YAC9C,IAAI,QAAQ,KAAK,CAAC;gBAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,OAAO,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACrC,CAAC,CAAC,MAAM,CAAC,WAAW;gBACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACxE,CAAC,CAAC,CACH;QACH,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACb,YAAY,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;YAC9B,IAAI,CAAC;gBACH,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,aAAa,CAAC,KAAK,CAAC;oBAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC/C,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACJ,OAAO,EAAE,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC3D,SAAS,EAAE,CAAC,UAAU,EAAE,EAAE,CACxB,YAAY,CAAC,YAAY,EAAE,GAAG,EAAE,CAC9B,SAAS,CAAC,oBAAoB,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAC9D;QACH,SAAS,EAAE,CAAC,YAAY,EAAE,EAAE,CAC1B,KAAK,CAAC,SAAS,CAAC,YAAY,EAAE;YAC5B,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAC1B,YAAY,CAAC,WAAW,EAAE,GAAG,EAAE,CAC7B,SAAS,CAAC,sBAAsB,CAC9B,IAAI,EACJ,OAAO,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAC1E,CACF;YACH,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAC3C,YAAY,CAAC,WAAW,EAAE,GAAG,EAAE,CAC7B,SAAS,CAAC,qBAAqB,CAC7B,IAAI,EACJ,OAAO,CAAC,gBAAgB,CAAC;gBACvB,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,UAAU,CAAC,EAAE;aACnF,CAAC,CACH,CACF;YACH,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACpB,YAAY,CAAC,WAAW,EAAE,GAAG,EAAE,CAC7B,SAAS,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAC/E;YACH,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAC3B,YAAY,CAAC,WAAW,EAAE,GAAG,EAAE,CAC7B,MAAM,KAAK,OAAO;gBAChB,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC/E,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CACjF;SACJ,CAAC;KACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;AAC1E,MAAM,YAAY,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;AAEnF,4FAA4F;AAC5F,MAAM,SAAS,GAAG,CAAC,OAA6B,EAA6B,EAAE,CAAC,CAAC;IAC/E,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CACtD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CACnF;IACD,4FAA4F;IAC5F,yEAAyE;IACzE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;QACxB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5F,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACJ,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;QAC/B,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC;IAC5B,CAAC,CAAC;IACF,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;CACpF,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;AAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;AAErF,2FAA2F;AAC3F,MAAM,QAAQ,GAAG,CAAC,MAAiB,EAA+B,EAAE,CAClE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,EAAmC,CAAC;IAC3E,MAAM,CAAC,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3C,KAAK,CAAC,WAAW,CACf,QAAQ,EACR,KAAK,CAAC,IAAI,YAAY,WAAW,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CACpF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,MAAkB,EAAE,EAAE,CACrC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,IAAI,CAAC;YACH,MAAM,EAAE,CAAC;QACX,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IACL,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;KAC5C,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEL;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,aAAkB;IAC3C,SAAS,CAEhB;IACO,IAAI,CAA0C;IAEvD,YAAY,GAAuB,EAAE,GAAQ;QAC3C,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChB,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;QAChC,IAAI,SAAS,KAAK,SAAS;YACzB,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,SAAS,GAAgC;YAC7C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAClB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CACnE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,MAAM,CAAC,QAAQ,CAAC,8CAA8C,EAAE;gBAC9D,OAAO,EAAE,OAAO,CAAC,IAAI;aACtB,CAAC,CACH,EACD,MAAM,CAAC,MAAM,CACd;YACH,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACjD,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CACnB,MAAM,CAAC,QAAQ,CAAC,gDAAgD,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CACrF,EACD,MAAM,CAAC,MAAM,CACd;SACJ,CAAC;QACF,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,CAC7B,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,EACpE,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,EACrD,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,SAAS,CAAC,EAC1C,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YAC7B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;gBAC1C,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE;gBAChB,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY;aAC3C,CAAC;SACH,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CACjC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAC9D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,GAAG,CAAC,qBAAqB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CACF,MAIC;QAED,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,OAAgB;QACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,KAAK,WAAW;YAC/D,OAAO,KAAK,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,MAAM,GACV,MAAM,KAAK,IAAI;YACb,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC9E,CAAC,CAAC,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,GAAG,CAAC;gBACT,OAAO,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACnC,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;aAC7D,CAAC,EACF;gBACE,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,qDAAqD,CAAC,CAC1E;gBACH,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAC/B,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAC1C,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CACnD;aACJ,CACF,CAAC;QACR,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;IAEQ,KAAK,CAAC,KAAK;QAClB,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC/B,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,eAAgB,SAAQ,aAAkB;IAC5C,IAAI,CAA0C;IAEvD,YAAY,GAAuB,EAAE,GAAQ;QAC3C,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAChB,MAAM,OAAO,GAA+B;YAC1C,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CACvE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrB,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAC/E,CACF;YACD,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CACf,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC1F,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;SAClF,CAAC;QACF,MAAM,MAAM,GAA6B;YACvC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;gBACZ,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7E,OAAO,MAAM,CAAC,UAAU,CAAC;oBACvB,GAAG,EAAE,GAAG,EAAE,CACR,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC;oBACpF,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;iBACnF,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;oBAC1B,kFAAkF;oBAClF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;wBAAE,OAAO,MAAM,CAAC,WAAW,CAAC;oBACvD,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;oBAClF,OAAO,MAAM,CAAC,UAAU,CAAC;wBACvB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;wBAC1B,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yBAAyB,CAAC;qBAC/C,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACtB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE;wBAChC,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,sCAAsC,CAAC,CAAC;wBACzE,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;qBAC1D,CAAC,CACH,CACF,CAAC;gBACJ,CAAC,CAAC,CACH,CAAC;YACJ,CAAC;SACF,CAAC;QACF,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CACjC,cAAc,CAAC,IAAI,CACjB,UAAU,CAAC,cAAc,CACvB,KAAK,CAAC,QAAQ,CACZ,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EACvC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,EACpC,MAAM,CACP,CACF,CACF,CACF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;IAEQ,KAAK,CAAC,KAAK,CAAC,OAAgB;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAED,kEAAkE;IAClE,KAAK,CAAC,MAAM,CAAC,OAAoB;QAC/B,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;YACxB,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;CACF;AAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;IACnC,KAAK,EAAE,MAAM,CAAC,cAAc;CAC7B,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,qBAAqB;IAC/B,UAAU,EAAE,kBAAkB;CAC/B,CAAC,CAAC;AAEH,6EAA6E;AAC7E,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,OAAgB,EAAE,QAAkB,EAAE,EAAE,CAC7E,GAAG,CACD,MAAM,CAAC,OAAO,CAAC,6BAA6B,EAAE;IAC5C,OAAO;IACP,MAAM,EAAE,OAAO,CAAC,MAAM;IACtB,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI;IAC/B,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ;IACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;CACxB,CAAC,CACH,CAAC;AAEJ,kFAAkF;AAClF,MAAM,OAAO,cAAe,SAAQ,gBAAiD;IAC1E,KAAK,CAAC,KAAK,CAAC,OAAgB;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,OAAO,gBAAiB,SAAQ,gBAAmD;IAC9E,KAAK,CAAC,KAAK,CAAC,OAAgB;QACnC,MAAM,KAAK,GAAG,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,GAAG,CACP,MAAM,CAAC,UAAU,CAAC,gEAAgE,EAAE;gBAClF,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI;gBAC/B,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ;aACpC,CAAC,CACH,CAAC;YACF,OAAO,KAAK,CACV,GAAG,EACH,gEAAgE,KAAK,CAAC,QAAQ,KAAK,CACpF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,OAAO,eAAgB,SAAQ,gBAA4C;IACtE,KAAK,CAAC,KAAK,CAAC,OAAgB;QACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF;AAED,2FAA2F;AAC3F,MAAM,OAAO,cAAe,SAAQ,gBAA4C;IACrE,KAAK,CAAC,KAAK,CAAC,OAAgB;QACnC,MAAM,GAAG,CACP,MAAM,CAAC,UAAU,CAAC,2DAA2D,EAAE;YAC7E,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI;SAChC,CAAC,CACH,CAAC;QACF,OAAO,KAAK,CAAC,GAAG,EAAE,8DAA8D,CAAC,CAAC;IACpF,CAAC;CACF"}

package/image/Dockerfile

@@ -0,0 +1,43 @@
+# The image of a usine sandbox: Node.js 22, pnpm, Git, gh, Claude Code, and Codex, with the
+# Sandbox SDK's file helper. The npm versions match infra/hetzner/cloud-init.yaml;
+# test/image.test.ts checks them.
+FROM docker.io/cloudflare/sandbox:1.0.3 AS sandbox-tools
+
+FROM --platform=linux/amd64 docker.io/library/node:22-bookworm-slim
+
+RUN apt-get update \
+  && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
+    ca-certificates curl git gpg procps tini \
+  && install -d -m 0755 /etc/apt/keyrings \
+  && curl -fsSL https://cli.github.com/packages/githubcli-archive-keyring.gpg \
+    -o /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+  && chmod 0644 /etc/apt/keyrings/githubcli-archive-keyring.gpg \
+  && echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/githubcli-archive-keyring.gpg] https://cli.github.com/packages stable main" \
+    > /etc/apt/sources.list.d/github-cli.list \
+  && apt-get update \
+  && DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends gh \
+  && rm -rf /var/lib/apt/lists/*
+
+RUN npm install -g pnpm@11.20.0 @anthropic-ai/claude-code@2.1.308 @openai/codex@0.159.2 \
+  && npm cache clean --force
+
+# Files in @cloudflare/sandbox runs this helper to read the process files.
+COPY --from=sandbox-tools /usr/local/bin/sandbox-shim /usr/local/bin/sandbox-shim
+
+# Records the platform's SIGTERM for the Worker; see init.sh.
+COPY init.sh /usr/local/bin/usine-sandbox-init
+RUN chmod 0755 /usr/local/bin/usine-sandbox-init
+
+RUN useradd --create-home --shell /bin/bash usine \
+  && install -d -o usine -g usine /home/usine/.codex /home/usine/.usine/processes /home/usine/workspace
+COPY --chown=usine:usine codex-config.toml /home/usine/.codex/config.toml
+
+USER usine
+WORKDIR /home/usine
+ENV HOME=/home/usine
+
+# tini reaps the commands that the Worker starts and passes the platform's SIGTERM to the init
+# script. The container runs until the Worker destroys it, its inactivity timeout passes, or the
+# platform stops it.
+ENTRYPOINT ["/usr/bin/tini", "--"]
+CMD ["/usr/local/bin/usine-sandbox-init"]

package/image/codex-config.toml

@@ -0,0 +1,10 @@
+# Codex's model provider in a usine sandbox. The Worker's OpenAI outbound handler serves
+# openai.usine.internal over plain HTTP and replaces the placeholder in OPENAI_API_KEY with the
+# Attempt's API key.
+model_provider = "usine"
+
+[model_providers.usine]
+name = "OpenAI through the usine sandbox Worker"
+base_url = "http://openai.usine.internal/v1"
+env_key = "OPENAI_API_KEY"
+wire_api = "responses"

package/image/init.sh

@@ -0,0 +1,17 @@
+#!/bin/sh
+# The init process of a usine sandbox, under tini. When the platform restarts the host or replaces
+# the instance, it sends SIGTERM and stops the container up to 15 minutes later, and a new
+# container starts with an empty disk. This script records that time in the drain marker, which
+# the Worker reports to usine, and keeps the container running until the platform stops it or
+# usine destroys it, so that the Attempt can salvage its checkout first.
+set -u
+marker="$HOME/.usine/draining"
+drain() {
+  mkdir -p "$(dirname "$marker")"
+  date -u +%Y-%m-%dT%H:%M:%SZ >"$marker"
+}
+trap drain TERM
+while :; do
+  sleep 3600 &
+  wait "$!" || true
+done

package/package.json

@@ -1,6 +1,62 @@
 {
   "name": "@usine/cloudflare",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "The Cloudflare Worker that runs each usine Attempt in its own sandbox, and the sandbox API the executor calls.",
+  "license": "AGPL-3.0-only",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/basaltbytes/usine.git",
+    "directory": "packages/cloudflare"
+  },
+  "files": [
+    "dist",
+    "!dist/tsconfig.tsbuildinfo",
+    "image",
+    "wrangler.jsonc"
+  ],
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/api/api.d.ts",
+      "default": "./dist/api/api.js"
+    },
+    "./harness": {
+      "types": "./dist/api/harness.d.ts",
+      "default": "./dist/api/harness.js"
+    },
+    "./stream": {
+      "types": "./dist/api/stream.d.ts",
+      "default": "./dist/api/stream.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@cloudflare/sandbox": "1.0.3",
+    "@usine/core": "0.5.0"
+  },
+  "devDependencies": {
+    "@cloudflare/workers-types": "5.20261019.1",
+    "@effect/vitest": "4.0.6",
+    "@types/node": "^26.6.5",
+    "effect": "4.0.6",
+    "typescript": "7.0.2",
+    "vitest": "5.0.5",
+    "wrangler": "4.151.2",
+    "@usine/tsconfig": "0.0.0"
+  },
+  "peerDependencies": {
+    "effect": "4.0.6"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "check": "tsc -p tsconfig.check.json",
+    "test": "vitest run",
+    "deploy": "wrangler deploy"
+  }
 }