@zhivex-ai/sandbox-docker 0.0.1 → 0.2.0

package/dist/tar.js

@@ -0,0 +1,230 @@
+import { SandboxError } from "./errors.js";
+const BLOCK = 512;
+const MAX_PATH_BYTES = 4096;
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const octal = (value, length) => {
+    const digits = Math.max(0, Math.floor(value)).toString(8).padStart(length - 1, "0").slice(-(length - 1));
+    return encoder.encode(`${digits}\0`);
+};
+const writeField = (header, offset, length, value) => {
+    const bytes = encoder.encode(value);
+    if (bytes.length > length) {
+        throw new SandboxError("TAR_PATH", `Tar field exceeds ${length} bytes.`);
+    }
+    header.set(bytes, offset);
+};
+const checksum = (header) => {
+    let sum = 0;
+    for (let index = 0; index < BLOCK; index += 1) {
+        sum += index >= 148 && index < 156 ? 32 : header[index] ?? 0;
+    }
+    return sum;
+};
+const pad = (bytes) => {
+    const extra = (BLOCK - (bytes.length % BLOCK)) % BLOCK;
+    if (extra === 0)
+        return bytes;
+    const out = new Uint8Array(bytes.length + extra);
+    out.set(bytes);
+    return out;
+};
+const finishHeader = (header) => {
+    const sum = checksum(header);
+    header.set(encoder.encode(`${sum.toString(8).padStart(6, "0")}\0 `), 148);
+    return header;
+};
+const headerShell = (name, size, typeFlag, prefix = "") => {
+    const header = new Uint8Array(BLOCK);
+    writeField(header, 0, 100, name);
+    header.set(octal(typeFlag === "5" ? 0o755 : 0o644, 8), 100);
+    header.set(octal(0, 8), 108);
+    header.set(octal(0, 8), 116);
+    header.set(octal(size, 12), 124);
+    header.set(octal(0, 12), 136);
+    header.set(encoder.encode("        "), 148);
+    header[156] = encoder.encode(typeFlag)[0] ?? 0;
+    writeField(header, 257, 6, "ustar");
+    header.set(encoder.encode("00"), 263);
+    if (prefix)
+        writeField(header, 345, 155, prefix);
+    return finishHeader(header);
+};
+const ustarSplit = (filePath) => {
+    if (encoder.encode(filePath).length <= 100)
+        return { name: filePath, prefix: "" };
+    let match;
+    for (let index = 0; index < filePath.length; index += 1) {
+        if (filePath[index] !== "/")
+            continue;
+        const prefix = filePath.slice(0, index);
+        const name = filePath.slice(index + 1);
+        if (!prefix || !name)
+            continue;
+        if (encoder.encode(prefix).length <= 155 && encoder.encode(name).length <= 100)
+            match = { name, prefix };
+    }
+    return match;
+};
+const shortName = (filePath) => {
+    const slash = filePath.lastIndexOf("/");
+    const base = slash === -1 ? filePath : filePath.slice(slash + 1);
+    return encoder.encode(base).length <= 100 ? base : "entry";
+};
+const paxPathRecord = (filePath) => {
+    const payload = encoder.encode(` path=${filePath}\n`);
+    let digits = 1;
+    let total = digits + payload.length;
+    while (String(total).length !== digits) {
+        digits = String(total).length;
+        total = digits + payload.length;
+    }
+    return encoder.encode(`${total} path=${filePath}\n`);
+};
+const paxBlocks = (filePath) => {
+    const content = paxPathRecord(filePath);
+    const label = `PaxHeaders.0/${shortName(filePath)}`;
+    const header = headerShell(encoder.encode(label).length <= 100 ? label : "PaxHeaders.0/entry", content.byteLength, "x");
+    return [header, pad(content)];
+};
+export const packTar = (entries) => {
+    const blocks = [];
+    for (const entry of entries) {
+        if (encoder.encode(entry.path).length > MAX_PATH_BYTES) {
+            throw new SandboxError("TAR_PATH", `Tar path exceeds ${MAX_PATH_BYTES} bytes.`);
+        }
+        if (entry.linkTarget && encoder.encode(entry.linkTarget).length > 100) {
+            throw new SandboxError("TAR_PATH", "Tar link target exceeds 100 bytes.");
+        }
+        const split = ustarSplit(entry.path);
+        if (!split)
+            blocks.push(...paxBlocks(entry.path));
+        const header = new Uint8Array(BLOCK);
+        const content = entry.type === "file" ? entry.content ?? new Uint8Array() : new Uint8Array();
+        writeField(header, 0, 100, split?.name ?? shortName(entry.path));
+        header.set(octal(entry.mode ?? (entry.type === "directory" ? 0o755 : 0o644), 8), 100);
+        header.set(octal(entry.uid ?? 65534, 8), 108);
+        header.set(octal(entry.gid ?? 65534, 8), 116);
+        header.set(octal(content.byteLength, 12), 124);
+        header.set(octal(0, 12), 136);
+        header.set(encoder.encode("        "), 148);
+        header[156] = encoder.encode(entry.type === "directory" ? "5" : entry.type === "symlink" ? "2" : "0")[0] ?? 0;
+        if (entry.linkTarget)
+            writeField(header, 157, 100, entry.linkTarget);
+        writeField(header, 257, 6, "ustar");
+        header.set(encoder.encode("00"), 263);
+        if (split?.prefix)
+            writeField(header, 345, 155, split.prefix);
+        blocks.push(finishHeader(header), pad(content));
+    }
+    blocks.push(new Uint8Array(BLOCK * 2));
+    const size = blocks.reduce((total, block) => total + block.length, 0);
+    const out = new Uint8Array(size);
+    let offset = 0;
+    for (const block of blocks) {
+        out.set(block, offset);
+        offset += block.length;
+    }
+    return out;
+};
+const fieldText = (header, offset, length) => {
+    const field = header.subarray(offset, offset + length);
+    const nul = field.indexOf(0);
+    return decoder.decode(nul === -1 ? field : field.subarray(0, nul));
+};
+const readOctal = (header, offset, length) => {
+    const text = fieldText(header, offset, length).trim();
+    if (!text)
+        return 0;
+    const value = Number.parseInt(text, 8);
+    if (!Number.isFinite(value)) {
+        throw new SandboxError("TAR_INVALID", "Tar header contains a non-octal numeric field.");
+    }
+    return value;
+};
+const readText = (header, offset, length) => fieldText(header, offset, length);
+const isZero = (header) => header.every(byte => byte === 0);
+const parsePax = (content) => {
+    const records = new Map();
+    let offset = 0;
+    while (offset < content.length) {
+        if (content[offset] === 0)
+            break;
+        const space = content.indexOf(0x20, offset);
+        if (space <= offset)
+            throw new SandboxError("TAR_INVALID", "Tar pax record is missing its length.");
+        let length = 0;
+        for (let index = offset; index < space; index += 1) {
+            const digit = content[index] ?? 0;
+            if (digit < 0x30 || digit > 0x39)
+                throw new SandboxError("TAR_INVALID", "Tar pax record length is not decimal.");
+            length = length * 10 + (digit - 0x30);
+        }
+        if (length < space - offset + 1 || offset + length > content.length) {
+            throw new SandboxError("TAR_INVALID", "Tar pax record length is invalid.");
+        }
+        const record = content.subarray(offset, offset + length);
+        const equals = record.indexOf(0x3d);
+        if (equals === -1)
+            throw new SandboxError("TAR_INVALID", "Tar pax record is missing a key.");
+        const key = decoder.decode(record.subarray(space - offset + 1, equals));
+        const end = record[record.length - 1] === 0x0a ? record.length - 1 : record.length;
+        records.set(key, decoder.decode(record.subarray(equals + 1, end)));
+        offset += length;
+    }
+    return records;
+};
+export const unpackTar = (bytes) => {
+    const entries = [];
+    let offset = 0;
+    let extendedPath;
+    while (offset + BLOCK <= bytes.length) {
+        const header = bytes.subarray(offset, offset + BLOCK);
+        offset += BLOCK;
+        if (isZero(header))
+            break;
+        const stored = readOctal(header, 148, 8);
+        if (stored !== checksum(header)) {
+            throw new SandboxError("TAR_INVALID", "Tar header checksum does not match.");
+        }
+        const typeFlag = String.fromCharCode(header[156] ?? 0);
+        const size = readOctal(header, 124, 12);
+        const content = bytes.subarray(offset, offset + size);
+        offset += Math.ceil(size / BLOCK) * BLOCK;
+        if (typeFlag === "x" || typeFlag === "g") {
+            const records = parsePax(content);
+            const extended = records.get("path");
+            if (extended !== undefined) {
+                if (encoder.encode(extended).length > MAX_PATH_BYTES) {
+                    throw new SandboxError("TAR_PATH", `Tar path exceeds ${MAX_PATH_BYTES} bytes.`);
+                }
+                extendedPath = extended;
+            }
+            continue;
+        }
+        const name = readText(header, 0, 100);
+        const prefix = readText(header, 345, 155);
+        const path = extendedPath ?? (prefix ? `${prefix}/${name}` : name);
+        extendedPath = undefined;
+        const type = typeFlag === "5" ? "directory" : typeFlag === "2" ? "symlink" : "file";
+        entries.push({
+            path: path.endsWith("/") ? path.slice(0, -1) : path,
+            type,
+            content: type === "file" ? content : undefined,
+            linkTarget: type === "symlink" ? readText(header, 157, 100) : "",
+            mode: readOctal(header, 100, 8),
+            uid: readOctal(header, 108, 8),
+            gid: readOctal(header, 116, 8)
+        });
+    }
+    return entries;
+};
+export const stripTarRoot = (entries, rootName) => entries.flatMap(entry => {
+    if (entry.path === rootName)
+        return [];
+    const prefix = `${rootName}/`;
+    if (!entry.path.startsWith(prefix))
+        return [entry];
+    return [{ ...entry, path: entry.path.slice(prefix.length) }];
+});
+//# sourceMappingURL=tar.js.map

package/dist/tar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.js","sourceRoot":"","sources":["../src/tar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAY3C,MAAM,KAAK,GAAG,GAAG,CAAC;AAClB,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,EAAE;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACzG,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;AACvC,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,MAAkB,EAAE,MAAc,EAAE,MAAc,EAAE,KAAa,EAAE,EAAE;IACvF,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,qBAAqB,MAAM,SAAS,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAE,EAAE;IACtC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC9C,GAAG,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,KAAiB,EAAE,EAAE;IAChC,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC;IACvD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,MAAkB,EAAE,EAAE;IAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,IAAY,EAAE,QAAgB,EAAE,MAAM,GAAG,EAAE,EAAE,EAAE;IAChF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/C,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM;QAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAgD,EAAE;IACpF,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClF,IAAI,KAAmD,CAAC;IACxD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,SAAS;QAC/B,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;YAAE,KAAK,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3G,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,EAAE;IACrC,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7D,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,EAAE;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,QAAQ,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IACpC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACvC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QAC9B,KAAK,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,QAAQ,IAAI,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAE,EAAE;IACrC,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,gBAAgB,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpD,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACxH,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAA4B,EAAc,EAAE;IAClE,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;YACvD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,oBAAoB,cAAc,SAAS,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YACtE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,UAAU,EAAE,CAAC;QAC7F,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9G,IAAI,KAAK,CAAC,UAAU;YAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACrE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,KAAK,EAAE,MAAM;YAAE,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAkB,EAAE,MAAc,EAAE,MAAc,EAAE,EAAE;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,MAAkB,EAAE,MAAc,EAAE,MAAc,EAAE,EAAE;IACvE,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,CAAC;IACpB,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,gDAAgD,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,MAAkB,EAAE,MAAc,EAAE,MAAc,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE3G,MAAM,MAAM,GAAG,CAAC,MAAkB,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC;AAExE,MAAM,QAAQ,GAAG,CAAC,OAAmB,EAAE,EAAE;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,IAAI,KAAK,IAAI,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;QACpG,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,IAAI,KAAK,GAAG,MAAM,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI;gBAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,uCAAuC,CAAC,CAAC;YACjH,MAAM,GAAG,MAAM,GAAG,EAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YACpE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,mCAAmC,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,MAAM,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,GAAG,MAAM,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;QACnF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAc,EAAE;IACzD,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,YAAgC,CAAC;IACrC,OAAO,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC;QAChB,IAAI,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM;QAC1B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,YAAY,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;QACtD,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;QAC1C,IAAI,QAAQ,KAAK,GAAG,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;oBACrD,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,oBAAoB,cAAc,SAAS,CAAC,CAAC;gBAClF,CAAC;gBACD,YAAY,GAAG,QAAQ,CAAC;YAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,YAAY,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,YAAY,GAAG,SAAS,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACnD,IAAI;YACJ,OAAO,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YAC9C,UAAU,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;YAChE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC/B,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC9B,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAA4B,EAAE,QAAgB,EAAc,EAAE,CACzF,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;IACtB,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC;IAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC,CAAC,CAAC"}

package/dist/tools.d.ts

@@ -0,0 +1,35 @@
+import { z } from "zod";
+/** Filesystem and shell tools that execute only inside the acquired Docker session. */
+export declare const createDockerSandboxTools: () => {
+    sandbox_read_file: import("@zhivex-ai/core").ToolDefinition<z.ZodObject<{
+        path: z.ZodString;
+    }, z.core.$strip>, {
+        path: string;
+        encoding: string;
+        text: string;
+    }, unknown>;
+    sandbox_write_file: import("@zhivex-ai/core").ToolDefinition<z.ZodObject<{
+        path: z.ZodString;
+        contents: z.ZodString;
+    }, z.core.$strip>, {
+        path: string;
+        bytes: number;
+    }, unknown>;
+    sandbox_list: import("@zhivex-ai/core").ToolDefinition<z.ZodObject<{
+        path: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, {
+        path: string;
+        entries: string[];
+    }, unknown>;
+    sandbox_exec: import("@zhivex-ai/core").ToolDefinition<z.ZodObject<{
+        argv: z.ZodArray<z.ZodString>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>, {
+        exitCode: number;
+        stdout: string;
+        stderr: string;
+        truncated: boolean;
+        timedOut: boolean;
+    }, unknown>;
+};
+//# sourceMappingURL=tools.d.ts.map

package/dist/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkBxB,uFAAuF;AACvF,eAAO,MAAM,wBAAwB;IACnC,iBAAiB;;;;;;;IAejB,kBAAkB;;;;;;;IAgBlB,YAAY;;;;;;IAeZ,YAAY;;;;;;;;;;CAyBZ,CAAC"}

package/dist/tools.js

@@ -0,0 +1,90 @@
+import { tool } from "@zhivex-ai/core";
+import { z } from "zod";
+import { SandboxError } from "./errors.js";
+import { isDockerSandboxSession } from "./environment.js";
+const sessionFrom = (context) => {
+    if (!isDockerSandboxSession(context?.executionEnvironment)) {
+        throw new SandboxError("SESSION_REQUIRED", "Sandbox tools require an acquired Docker execution environment.");
+    }
+    return context.executionEnvironment;
+};
+const approval = {
+    requiresApproval: true,
+    approvalMode: "interrupt",
+    approvalVersion: "docker-sandbox-1"
+};
+/** Filesystem and shell tools that execute only inside the acquired Docker session. */
+export const createDockerSandboxTools = () => ({
+    sandbox_read_file: tool({
+        name: "sandbox_read_file",
+        description: "Read a UTF-8 file inside the sandbox workspace.",
+        schema: z.object({ path: z.string().min(1) }),
+        metadata: {
+            advancedRegistry: {
+                permissions: ["filesystem"],
+                audit: { riskLevel: "low" }
+            }
+        },
+        execute: async ({ path }, context) => {
+            const bytes = await sessionFrom(context).readFile(path);
+            return { path, encoding: "utf-8", text: new TextDecoder("utf-8", { fatal: false }).decode(bytes) };
+        }
+    }),
+    sandbox_write_file: tool({
+        name: "sandbox_write_file",
+        description: "Write a UTF-8 file inside the sandbox workspace.",
+        schema: z.object({ path: z.string().min(1), contents: z.string() }),
+        ...approval,
+        metadata: {
+            advancedRegistry: {
+                permissions: ["filesystem", "write"],
+                audit: { riskLevel: "high" }
+            }
+        },
+        execute: async ({ path, contents }, context) => {
+            await sessionFrom(context).writeFile(path, contents);
+            return { path, bytes: new TextEncoder().encode(contents).byteLength };
+        }
+    }),
+    sandbox_list: tool({
+        name: "sandbox_list",
+        description: "List one directory level inside the sandbox workspace.",
+        schema: z.object({ path: z.string().min(1).optional() }),
+        metadata: {
+            advancedRegistry: {
+                permissions: ["filesystem"],
+                audit: { riskLevel: "low" }
+            }
+        },
+        execute: async ({ path }, context) => ({
+            path: path ?? ".",
+            entries: await sessionFrom(context).list(path ?? ".")
+        })
+    }),
+    sandbox_exec: tool({
+        name: "sandbox_exec",
+        description: "Run an argv command inside the sandbox. There is no host shell and no inherited process environment.",
+        schema: z.object({
+            argv: z.array(z.string().min(1)).min(1).max(64),
+            timeoutMs: z.number().int().positive().optional()
+        }),
+        ...approval,
+        metadata: {
+            advancedRegistry: {
+                permissions: ["shell", "code-execution"],
+                audit: { riskLevel: "high" }
+            }
+        },
+        execute: async ({ argv, timeoutMs }, context) => {
+            const result = await sessionFrom(context).exec(argv, timeoutMs === undefined ? undefined : { timeoutMs });
+            return {
+                exitCode: result.exitCode,
+                stdout: result.stdout,
+                stderr: result.stderr,
+                truncated: result.truncated,
+                timedOut: result.timedOut
+            };
+        }
+    })
+});
+//# sourceMappingURL=tools.js.map

package/dist/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../src/tools.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAA6B,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,sBAAsB,EAA6B,MAAM,kBAAkB,CAAC;AAErF,MAAM,WAAW,GAAG,CAAC,OAAyC,EAAwB,EAAE;IACtF,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,iEAAiE,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,OAAO,CAAC,oBAAoB,CAAC;AACtC,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG;IACf,gBAAgB,EAAE,IAAI;IACtB,YAAY,EAAE,WAAoB;IAClC,eAAe,EAAE,kBAAkB;CACpC,CAAC;AAEF,uFAAuF;AACvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,GAAG,EAAE,CAAC,CAAC;IAC7C,iBAAiB,EAAE,IAAI,CAAC;QACtB,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,iDAAiD;QAC9D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,QAAQ,EAAE;YACR,gBAAgB,EAAE;gBAChB,WAAW,EAAE,CAAC,YAAY,CAAC;gBAC3B,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;aAC5B;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE;YACnC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrG,CAAC;KACF,CAAC;IACF,kBAAkB,EAAE,IAAI,CAAC;QACvB,IAAI,EAAE,oBAAoB;QAC1B,WAAW,EAAE,kDAAkD;QAC/D,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;QACnE,GAAG,QAAQ;QACX,QAAQ,EAAE;YACR,gBAAgB,EAAE;gBAChB,WAAW,EAAE,CAAC,YAAY,EAAE,OAAO,CAAC;gBACpC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC7B;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE;YAC7C,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QACxE,CAAC;KACF,CAAC;IACF,YAAY,EAAE,IAAI,CAAC;QACjB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,wDAAwD;QACrE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACxD,QAAQ,EAAE;YACR,gBAAgB,EAAE;gBAChB,WAAW,EAAE,CAAC,YAAY,CAAC;gBAC3B,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;aAC5B;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,IAAI,IAAI,GAAG;YACjB,OAAO,EAAE,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;SACtD,CAAC;KACH,CAAC;IACF,YAAY,EAAE,IAAI,CAAC;QACjB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,sGAAsG;QACnH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;SAClD,CAAC;QACF,GAAG,QAAQ;QACX,QAAQ,EAAE;YACR,gBAAgB,EAAE;gBAChB,WAAW,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBACxC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC7B;SACF;QACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE;YAC9C,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;YAC1G,OAAO;gBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;aAC1B,CAAC;QACJ,CAAC;KACF,CAAC;CACH,CAAC,CAAC"}

package/docker/Dockerfile

@@ -0,0 +1,11 @@
+# Optional image for createDockerSandboxEnvironment({ image, user: "1000:1000" }).
+# The default configuration uses the public alpine:3.21 image and user 65534:65534.
+FROM alpine:3.21
+
+RUN adduser -D -u 1000 -h /tmp sandbox \
+  && mkdir -p /workspace \
+  && chown 1000:1000 /workspace
+
+USER 1000:1000
+WORKDIR /workspace
+CMD ["/bin/sh", "-c", "while true; do sleep 3600; done"]

package/package.json

@@ -1,7 +1,49 @@
 {
   "name": "@zhivex-ai/sandbox-docker",
-  "version": "0.0.1",
-  "description": "Placeholder. Real releases are published from github.com/Zhivex/zhivex-ai-sdk via trusted publishing.",
-  "license": "Apache-2.0",
-  "repository": {"type": "git", "url": "git+https://github.com/Zhivex/zhivex-ai-sdk.git", "directory": "packages/sandbox-docker"}
+  "version": "0.2.0",
+  "description": "Reference Docker execution environment for Zhivex workspace agents.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "engines": {
+    "node": ">=18.18.0",
+    "bun": ">=1.3.7"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "docker",
+    "README.md"
+  ],
+  "sideEffects": false,
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Zhivex/zhivex-ai-sdk.git",
+    "directory": "packages/sandbox-docker"
+  },
+  "homepage": "https://github.com/Zhivex/zhivex-ai-sdk#readme",
+  "bugs": {
+    "url": "https://github.com/Zhivex/zhivex-ai-sdk/issues"
+  },
+  "keywords": [
+    "ai",
+    "sdk",
+    "sandbox",
+    "docker",
+    "agents",
+    "typescript"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@zhivex-ai/core": "^1.35.0",
+    "zod": "^4.6.3"
+  }
 }