aec-agent 1.0.0

package/dist/components/sandbox-hub/logical-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logical-path.js","sourceRoot":"","sources":["../../../src/components/sandbox-hub/logical-path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAGpE,8EAA8E;AAC9E,kEAAkE;AAClE,EAAE;AACF,gBAAgB;AAChB,qFAAqF;AACrF,mEAAmE;AACnE,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,iEAAiE;AACjE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,cAAc,GAAG,YAAY,CAAC;AAC3C,8DAA8D;AAC9D,wDAAwD;AACxD,MAAM,CAAC,MAAM,UAAU,GAAG,GAAG,cAAc,SAAS,CAAC;AAErD,MAAM,aAAa,GAAG,oCAAoC,CAAC;AAE3D,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,YAAY,CAAC,aAAa,OAAO,2CAA2C,EAAE,eAAe,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,OAAiC,EACjC,OAAe;IAEf,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,cAAc,CAAC,EAAE,CAAC;IACtF,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,GAAG,UAAU,IAAI,OAAO,EAAE,CAAC;IACvC,wDAAwD;IACxD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAwB;IAClE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,UAAkB,EAClB,KAAwB,EACxB,SAAkB;IAElB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,YAAY,CAAC,uBAAuB,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,0BAA0B,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IAChF,CAAC;IACD,2EAA2E;IAC3E,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACjD,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,YAAY,CACpB,IAAI,KAAK,iEAAiE,cAAc,eAAe,EACvG,aAAa,EACb,SAAS,CACV,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpI,IAAI,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAE5F,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,YAAY,CACpB,IAAI,KAAK,kDAAkD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC9E,aAAa,EACb,SAAS,CACV,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/components/sandbox-hub/sandbox-hub.d.ts

@@ -0,0 +1,69 @@
+import type { SandboxKind, SandboxTraits, SandboxView } from "./types/sandbox.js";
+import type { SandboxSpec, SandboxProvider } from "./types/provider.js";
+import type { OwnSandboxConfig, SandboxApprovalPolicy, SandboxHubPolicy, SandboxOperation, SandboxSelection } from "./types/policy.js";
+/**
+ * Global hub for sandboxes — like LLMProviderHub / ToolHub, AgentCore owns one.
+ *
+ *   SandboxHub (shared / general concerns)
+ *     ├─ sandboxProviders   one factory per kind (docker now; host, remote later)
+ *     └─ shared sandbox     the one sandbox every agent uses by default
+ *
+ * Own sandboxes (one per agent) are managed by each agent's SandboxManager.
+ * Sandboxes that several agents share but that are NOT the shared one (a host folder,
+ * a user's own machine over a remote runner) are deferred: they need an instance
+ * registry keyed by target — see the note on SandboxSelection in types/policy.ts.
+ * The hub provides buildOwnSandboxSpec() to validate own configs against policy,
+ * and releaseAgentData() to clean up an agent's data in the shared sandbox when it is deleted
+ * (its own sandbox's data is deleted by SandboxManager.release({ removeData: true })).
+ *
+ * The shared sandbox is created lazily on the first tool call and cached;
+ * a failed creation is not cached, so the next call retries.
+ */
+export declare class SandboxHub {
+    private sandboxProviders;
+    private sharedSandboxSpec?;
+    private policy;
+    /** The running shared sandbox, created on first use. A failed creation is cleared, so the next call retries. */
+    private sharedSandbox?;
+    /**
+     * policy for actions need approval (like write action on host sandbox)
+     */
+    private approvalPolicy;
+    register(provider: SandboxProvider): void;
+    getSandboxProvider(kind: SandboxKind): SandboxProvider | undefined;
+    /** The sandbox every agent uses by default. Must be set before it is first used. */
+    configureShared(spec: SandboxSpec): void;
+    get sharedConfigured(): boolean;
+    setPolicy(policy: Partial<SandboxHubPolicy>): void;
+    getPolicy(): Readonly<SandboxHubPolicy>;
+    /** Kinds an own sandbox may use here: the default first, then the others the policy allows. */
+    allowedOwnKinds(): SandboxKind[];
+    /** Which sandbox operations need user approval in which sandboxes. Default: defaultSandboxApprovalPolicy. */
+    setApprovalPolicy(policy: SandboxApprovalPolicy): void;
+    /** Does `operation` in a sandbox with these traits need explicit user approval? */
+    requiresApproval(traits: SandboxTraits, operation: SandboxOperation): boolean;
+    /** Validate a profile-supplied own-sandbox config against the hub policy and return the spec. */
+    buildOwnSandboxSpec(own: OwnSandboxConfig): SandboxSpec;
+    /**
+     * Check a profile's selection without creating anything — lets the server reject a
+     * bad agent config at save time. Throws SandboxError ("policy_denied", "not_configured",
+     * "disabled", "provider_unavailable").
+     */
+    validateSelection(agentId: string, selection: SandboxSelection | undefined): void;
+    /** The shared sandbox an agent works in, created on first use. Own sandboxes go through SandboxManager. */
+    resolve(agentId: string, selection: SandboxSelection | undefined): Promise<SandboxView>;
+    /**
+     * Clean up an agent's data when it is deleted. Removes:
+     * - The agent's folder inside the shared sandbox
+     *
+     * Own-sandbox data (running or cold) is removed by SandboxManager.release({ removeData: true }).
+     */
+    releaseAgentData(agentId: string): Promise<void>;
+    /** Stop the shared sandbox. Files are kept (volumes / folders) for the next start. */
+    dispose(): Promise<void>;
+    private sharedSandboxId;
+    /** The spec a selection asks for. Own specs are checked against the policy; "none" throws. */
+    private specFor;
+    private getOrCreateShared;
+}
+//# sourceMappingURL=sandbox-hub.d.ts.map

package/dist/components/sandbox-hub/sandbox-hub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-hub.d.ts","sourceRoot":"","sources":["../../../src/components/sandbox-hub/sandbox-hub.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAElF,OAAO,KAAK,EAAE,WAAW,EAAkB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,mBAAmB,CAAC;AAW3B;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,gBAAgB,CAA2C;IACnE,OAAO,CAAC,iBAAiB,CAAC,CAAc;IACxC,OAAO,CAAC,MAAM,CAA+H;IAC7I,gHAAgH;IAChH,OAAO,CAAC,aAAa,CAAC,CAAmB;IACzC;;OAEG;IACH,OAAO,CAAC,cAAc,CAAuD;IAI7E,QAAQ,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAKxC;IAED,kBAAkB,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,SAAS,CAEjE;IAED,oFAAoF;IACpF,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,CAKvC;IAED,IAAI,gBAAgB,IAAI,OAAO,CAE9B;IAED,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAMjD;IAED,SAAS,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAEtC;IAED,+FAA+F;IAC/F,eAAe,IAAI,WAAW,EAAE,CAE/B;IAED,6GAA6G;IAC7G,iBAAiB,CAAC,MAAM,EAAE,qBAAqB,GAAG,IAAI,CAErD;IAED,mFAAmF;IACnF,gBAAgB,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAE5E;IAID,iGAAiG;IACjG,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,WAAW,CAkCtD;IAID;;;;OAIG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,IAAI,CAQhF;IAED,2GAA2G;IACrG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAa5F;IAID;;;;;OAKG;IACG,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBrD;IAED,sFAAsF;IAChF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAK7B;IAID,OAAO,CAAC,eAAe;IAIvB,8FAA8F;IAC9F,OAAO,CAAC,OAAO;YAkBD,iBAAiB;CAoBhC"}

package/dist/components/sandbox-hub/sandbox-hub.js

@@ -0,0 +1,216 @@
+import { SandboxError, asSandboxError } from "../../kernel/errors/sandbox-error.js";
+import { assertSafeAgentId } from "./logical-path.js";
+import { defaultSandboxApprovalPolicy } from "./approval-policy.js";
+const DEFAULT_POLICY = {
+    allowedImages: [],
+    maxLimits: { cpus: 2, memoryMb: 2048, pids: 256 },
+    allowedNetwork: ["none"],
+    ownKinds: ["docker"],
+    defaultOwnKind: "docker",
+};
+/**
+ * Global hub for sandboxes — like LLMProviderHub / ToolHub, AgentCore owns one.
+ *
+ *   SandboxHub (shared / general concerns)
+ *     ├─ sandboxProviders   one factory per kind (docker now; host, remote later)
+ *     └─ shared sandbox     the one sandbox every agent uses by default
+ *
+ * Own sandboxes (one per agent) are managed by each agent's SandboxManager.
+ * Sandboxes that several agents share but that are NOT the shared one (a host folder,
+ * a user's own machine over a remote runner) are deferred: they need an instance
+ * registry keyed by target — see the note on SandboxSelection in types/policy.ts.
+ * The hub provides buildOwnSandboxSpec() to validate own configs against policy,
+ * and releaseAgentData() to clean up an agent's data in the shared sandbox when it is deleted
+ * (its own sandbox's data is deleted by SandboxManager.release({ removeData: true })).
+ *
+ * The shared sandbox is created lazily on the first tool call and cached;
+ * a failed creation is not cached, so the next call retries.
+ */
+export class SandboxHub {
+    sandboxProviders = new Map();
+    sharedSandboxSpec;
+    policy = { ...DEFAULT_POLICY, maxLimits: { ...DEFAULT_POLICY.maxLimits }, ownKinds: [...DEFAULT_POLICY.ownKinds] };
+    /** The running shared sandbox, created on first use. A failed creation is cleared, so the next call retries. */
+    sharedSandbox;
+    /**
+     * policy for actions need approval (like write action on host sandbox)
+     */
+    approvalPolicy = defaultSandboxApprovalPolicy;
+    // ── Registration (host code only) ──
+    register(provider) {
+        if (this.sandboxProviders.has(provider.kind)) {
+            throw new Error(`A sandbox provider for "${provider.kind}" is already registered`);
+        }
+        this.sandboxProviders.set(provider.kind, provider);
+    }
+    getSandboxProvider(kind) {
+        return this.sandboxProviders.get(kind);
+    }
+    /** The sandbox every agent uses by default. Must be set before it is first used. */
+    configureShared(spec) {
+        if (this.sharedSandbox) {
+            throw new Error("The shared sandbox is already running — configure it before the first agent uses it");
+        }
+        this.sharedSandboxSpec = { ...spec };
+    }
+    get sharedConfigured() {
+        return this.sharedSandboxSpec !== undefined;
+    }
+    setPolicy(policy) {
+        this.policy = {
+            ...this.policy,
+            ...policy,
+            maxLimits: { ...this.policy.maxLimits, ...policy.maxLimits },
+        };
+    }
+    getPolicy() {
+        return this.policy;
+    }
+    /** Kinds an own sandbox may use here: the default first, then the others the policy allows. */
+    allowedOwnKinds() {
+        return [...new Set([this.policy.defaultOwnKind, ...this.policy.ownKinds])];
+    }
+    /** Which sandbox operations need user approval in which sandboxes. Default: defaultSandboxApprovalPolicy. */
+    setApprovalPolicy(policy) {
+        this.approvalPolicy = policy;
+    }
+    /** Does `operation` in a sandbox with these traits need explicit user approval? */
+    requiresApproval(traits, operation) {
+        return this.approvalPolicy(traits, operation);
+    }
+    // ── Own sandbox spec (validation for SandboxManager) ──
+    /** Validate a profile-supplied own-sandbox config against the hub policy and return the spec. */
+    buildOwnSandboxSpec(own) {
+        const { policy } = this;
+        const kind = own.kind ?? policy.defaultOwnKind;
+        if (!this.allowedOwnKinds().includes(kind)) {
+            throw new SandboxError(`Own sandboxes of kind "${kind}" are not allowed on this server`, "policy_denied");
+        }
+        // A host folder runs on the machine itself — no image, network or resource settings.
+        if (kind === "host")
+            return { kind };
+        const image = own.image ?? this.sharedSandboxSpec?.image;
+        if (own.image !== undefined && own.image !== this.sharedSandboxSpec?.image && !policy.allowedImages.includes(own.image)) {
+            throw new SandboxError(`Image "${own.image}" is not in the allowed image list`, "policy_denied");
+        }
+        const network = own.network ?? "none";
+        if (!policy.allowedNetwork.includes(network)) {
+            throw new SandboxError(`Network mode "${network}" is not allowed for agent sandboxes`, "policy_denied");
+        }
+        const limits = {};
+        for (const key of ["cpus", "memoryMb", "pids"]) {
+            const value = own.limits?.[key];
+            if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+                limits[key] = Math.min(value, policy.maxLimits[key]);
+            }
+        }
+        return {
+            kind,
+            ...(image ? { image } : {}),
+            network,
+            limits: { ...policy.maxLimits, ...limits },
+        };
+    }
+    // ── Selection ──
+    /**
+     * Check a profile's selection without creating anything — lets the server reject a
+     * bad agent config at save time. Throws SandboxError ("policy_denied", "not_configured",
+     * "disabled", "provider_unavailable").
+     */
+    validateSelection(agentId, selection) {
+        // "none" is always a valid choice — it only fails when a tool asks for a sandbox.
+        assertSafeAgentId(agentId);
+        if (selection === "none")
+            return;
+        const spec = this.specFor(selection);
+        if (!this.sandboxProviders.has(spec.kind)) {
+            throw new SandboxError(`No sandbox provider is registered for "${spec.kind}"`, "provider_unavailable");
+        }
+    }
+    /** The shared sandbox an agent works in, created on first use. Own sandboxes go through SandboxManager. */
+    async resolve(agentId, selection) {
+        const choice = selection ?? "shared";
+        if (typeof choice === "object" && "own" in choice) {
+            throw new Error("Own sandboxes are managed by the agent's SandboxManager, not SandboxHub.resolve()");
+        }
+        assertSafeAgentId(agentId);
+        const spec = this.specFor(selection);
+        const managed = await this.getOrCreateShared(spec);
+        try {
+            return await managed.forAgent(agentId);
+        }
+        catch (error) {
+            throw asSandboxError(error, this.sharedSandboxId(spec));
+        }
+    }
+    // ── Lifecycle ──
+    /**
+     * Clean up an agent's data when it is deleted. Removes:
+     * - The agent's folder inside the shared sandbox
+     *
+     * Own-sandbox data (running or cold) is removed by SandboxManager.release({ removeData: true }).
+     */
+    async releaseAgentData(agentId) {
+        assertSafeAgentId(agentId);
+        // Remove agent's folder from the shared sandbox
+        if (this.sharedSandboxSpec) {
+            const sharedId = this.sharedSandboxId(this.sharedSandboxSpec);
+            const shared = await this.sharedSandbox?.catch(() => null);
+            if (shared) {
+                await shared.removeAgentData?.(agentId);
+            }
+            else {
+                await this.sandboxProviders.get(this.sharedSandboxSpec.kind)?.removeData?.(this.sharedSandboxSpec, { id: sharedId, tenancy: "shared" }, { agentId });
+            }
+        }
+    }
+    /** Stop the shared sandbox. Files are kept (volumes / folders) for the next start. */
+    async dispose() {
+        const pending = this.sharedSandbox;
+        this.sharedSandbox = undefined;
+        const env = await pending?.catch(() => null);
+        await env?.dispose({ removeData: false }).catch(() => { });
+    }
+    // ── Internals ──
+    sharedSandboxId(spec) {
+        return `${spec.kind}:shared`;
+    }
+    /** The spec a selection asks for. Own specs are checked against the policy; "none" throws. */
+    specFor(selection) {
+        const choice = selection ?? "shared";
+        if (choice === "none") {
+            throw new SandboxError("This agent has no sandbox (sandbox: \"none\")", "disabled");
+        }
+        if (choice === "shared") {
+            if (!this.sharedSandboxSpec) {
+                throw new SandboxError("No shared sandbox is configured on this server", "not_configured");
+            }
+            return this.sharedSandboxSpec;
+        }
+        if (typeof choice === "object" && choice !== null && "own" in choice) {
+            return this.buildOwnSandboxSpec(choice.own ?? {});
+        }
+        throw new SandboxError("Unrecognised sandbox selection", "policy_denied");
+    }
+    async getOrCreateShared(spec) {
+        const cached = this.sharedSandbox;
+        if (cached)
+            return cached;
+        const id = this.sharedSandboxId(spec);
+        const provider = this.sandboxProviders.get(spec.kind);
+        if (!provider) {
+            throw new SandboxError(`No sandbox provider is registered for "${spec.kind}"`, "provider_unavailable", id);
+        }
+        const creating = provider
+            .create(spec, { id, tenancy: "shared" })
+            .catch((error) => {
+            // Not cached — the next call retries (e.g. Docker Desktop was still starting).
+            if (this.sharedSandbox === creating)
+                this.sharedSandbox = undefined;
+            throw asSandboxError(error, id);
+        });
+        this.sharedSandbox = creating;
+        return creating;
+    }
+}
+//# sourceMappingURL=sandbox-hub.js.map

package/dist/components/sandbox-hub/sandbox-hub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-hub.js","sourceRoot":"","sources":["../../../src/components/sandbox-hub/sandbox-hub.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAWtD,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAEpE,MAAM,cAAc,GAAqB;IACvC,aAAa,EAAE,EAAE;IACjB,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;IACjD,cAAc,EAAE,CAAC,MAAM,CAAC;IACxB,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,cAAc,EAAE,QAAQ;CACzB,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,UAAU;IACb,gBAAgB,GAAG,IAAI,GAAG,EAAgC,CAAC;IAC3D,iBAAiB,CAAe;IAChC,MAAM,GAAqB,EAAE,GAAG,cAAc,EAAE,SAAS,EAAE,EAAE,GAAG,cAAc,CAAC,SAAS,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7I,gHAAgH;IACxG,aAAa,CAAoB;IACzC;;OAEG;IACK,cAAc,GAA0B,4BAA4B,CAAC;IAE7E,sCAAsC;IAEtC,QAAQ,CAAC,QAAyB;QAChC,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IAED,kBAAkB,CAAC,IAAiB;QAClC,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,oFAAoF;IACpF,eAAe,CAAC,IAAiB;QAC/B,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,CAAC,iBAAiB,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IACvC,CAAC;IAED,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC;IAC9C,CAAC;IAED,SAAS,CAAC,MAAiC;QACzC,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,IAAI,CAAC,MAAM;YACd,GAAG,MAAM;YACT,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE;SAC7D,CAAC;IACJ,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,+FAA+F;IAC/F,eAAe;QACb,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,6GAA6G;IAC7G,iBAAiB,CAAC,MAA6B;QAC7C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;IAC/B,CAAC;IAED,mFAAmF;IACnF,gBAAgB,CAAC,MAAqB,EAAE,SAA2B;QACjE,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,yDAAyD;IAEzD,iGAAiG;IACjG,mBAAmB,CAAC,GAAqB;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;QAExB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,YAAY,CAAC,0BAA0B,IAAI,kCAAkC,EAAE,eAAe,CAAC,CAAC;QAC5G,CAAC;QACD,qFAAqF;QACrF,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAErC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC;QACzD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,iBAAiB,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACxH,MAAM,IAAI,YAAY,CAAC,UAAU,GAAG,CAAC,KAAK,oCAAoC,EAAE,eAAe,CAAC,CAAC;QACnG,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,YAAY,CAAC,iBAAiB,OAAO,sCAAsC,EAAE,eAAe,CAAC,CAAC;QAC1G,CAAC;QAED,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,CAAU,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;gBACrE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI;YACJ,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,OAAO;YACP,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,kBAAkB;IAElB;;;;OAIG;IACH,iBAAiB,CAAC,OAAe,EAAE,SAAuC;QACxE,kFAAkF;QAClF,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,SAAS,KAAK,MAAM;YAAE,OAAO;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,YAAY,CAAC,0CAA0C,IAAI,CAAC,IAAI,GAAG,EAAE,sBAAsB,CAAC,CAAC;QACzG,CAAC;IACH,CAAC;IAED,2GAA2G;IAC3G,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,SAAuC;QACpE,MAAM,MAAM,GAAG,SAAS,IAAI,QAAQ,CAAC;QACrC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,mFAAmF,CAAC,CAAC;QACvG,CAAC;QACD,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,kBAAkB;IAElB;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CAAC,OAAe;QACpC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAE3B,gDAAgD;QAChD,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CACxE,IAAI,CAAC,iBAAiB,EACtB,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EACnC,EAAE,OAAO,EAAE,CACZ,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,MAAM,GAAG,GAAG,MAAM,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,GAAG,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,kBAAkB;IAEV,eAAe,CAAC,IAAiB;QACvC,OAAO,GAAG,IAAI,CAAC,IAAI,SAAS,CAAC;IAC/B,CAAC;IAED,8FAA8F;IACtF,OAAO,CAAC,SAAuC;QACrD,MAAM,MAAM,GAAG,SAAS,IAAI,QAAQ,CAAC;QAErC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,IAAI,YAAY,CAAC,+CAA+C,EAAE,UAAU,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAC5B,MAAM,IAAI,YAAY,CAAC,gDAAgD,EAAE,gBAAgB,CAAC,CAAC;YAC7F,CAAC;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,YAAY,CAAC,gCAAgC,EAAE,eAAe,CAAC,CAAC;IAC5E,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,IAAiB;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC;QAClC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,YAAY,CAAC,0CAA0C,IAAI,CAAC,IAAI,GAAG,EAAE,sBAAsB,EAAE,EAAE,CAAC,CAAC;QAC7G,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ;aACtB,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;aACvC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,+EAA+E;YAC/E,IAAI,IAAI,CAAC,aAAa,KAAK,QAAQ;gBAAE,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;YACpE,MAAM,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;QAC9B,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF"}

package/dist/components/sandbox-hub/traced-sandbox.d.ts

@@ -0,0 +1,15 @@
+import type { SpanHandle } from "../trace-service/types/span.js";
+import type { SandboxView } from "./types/sandbox.js";
+/** Starts a "sandbox-op" span — bound by the caller to a trace context. */
+export type SandboxSpanStarter = (operation: string, attributes: Record<string, unknown>) => SpanHandle;
+/**
+ * Wrap a sandbox so every operation is recorded as a "sandbox-op" span.
+ * Spans carry the path or a command SUMMARY (program + argument count) and result
+ * metadata — never file contents, command arguments or command output, which may
+ * hold secrets (A-60 requirement).
+ */
+export declare function withTracing(env: SandboxView, startSpan: SandboxSpanStarter, context?: {
+    agentId?: string;
+    sessionId?: string;
+}): SandboxView;
+//# sourceMappingURL=traced-sandbox.d.ts.map

package/dist/components/sandbox-hub/traced-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-sandbox.d.ts","sourceRoot":"","sources":["../../../src/components/sandbox-hub/traced-sandbox.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,UAAU,CAAC;AAExG;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,GAAG,EAAE,WAAW,EAChB,SAAS,EAAE,kBAAkB,EAC7B,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACrD,WAAW,CA6Eb"}

package/dist/components/sandbox-hub/traced-sandbox.js

@@ -0,0 +1,69 @@
+import { SandboxError } from "../../kernel/errors/sandbox-error.js";
+/**
+ * Wrap a sandbox so every operation is recorded as a "sandbox-op" span.
+ * Spans carry the path or a command SUMMARY (program + argument count) and result
+ * metadata — never file contents, command arguments or command output, which may
+ * hold secrets (A-60 requirement).
+ */
+export function withTracing(env, startSpan, context = {}) {
+    const base = {
+        sandboxId: env.id,
+        kind: env.traits.kind,
+        tenancy: env.traits.tenancy,
+        agentId: context.agentId,
+        sessionId: context.sessionId,
+    };
+    async function traced(operation, attributes, run, summarize) {
+        const span = startSpan(operation, { ...base, operation, ...attributes });
+        try {
+            const result = await run();
+            span.end(summarize(result));
+            return result;
+        }
+        catch (error) {
+            span.end({
+                error: error instanceof SandboxError ? error.code : "error",
+                message: error instanceof Error ? error.message : String(error),
+            });
+            throw error;
+        }
+    }
+    return {
+        id: env.id,
+        traits: env.traits,
+        capabilities: env.capabilities,
+        limits: env.limits,
+        workingDir: env.workingDir,
+        roots: env.roots,
+        readFile: (path, opts) => traced("fs.read", { path }, () => env.readFile(path, opts), (r) => ({
+            path: r.path, bytes: r.size, truncated: r.truncated,
+        })),
+        writeFile: (path, content, opts) => traced("fs.write", { path, bytes: content.length }, () => env.writeFile(path, content, opts), (r) => ({
+            path: r.path, bytes: r.bytes, created: r.created,
+        })),
+        stat: (path, opts) => traced("fs.stat", { path }, () => env.stat(path, opts), (r) => ({ exists: r !== null, type: r?.type })),
+        list: (path, opts) => traced("fs.list", { path, recursive: opts?.recursive ?? false }, () => env.list(path, opts), (r) => ({
+            entries: r.entries.length, truncated: r.truncated,
+        })),
+        search: (query, opts) => traced("fs.search", { path: query.path, literal: query.literal ?? true }, () => env.search(query, opts), (r) => ({
+            matches: r.matches.length, truncated: r.truncated,
+        })),
+        exec: (request, opts) => traced("exec", {
+            command: request.shell ? "shell" : request.command[0],
+            argCount: Math.max(0, request.command.length - 1),
+            cwd: request.cwd,
+            timeoutMs: request.timeoutMs,
+        }, () => env.exec(request, opts), (r) => ({
+            exitCode: r.exitCode,
+            timedOut: r.timedOut,
+            cancelled: r.cancelled,
+            truncated: r.truncated,
+            stdoutBytes: r.stdout.length,
+            stderrBytes: r.stderr.length,
+            durationMs: r.durationMs,
+            // A failed command is still a successful sandbox operation — flag, don't mark the span as error.
+            failed: r.exitCode !== 0,
+        })),
+    };
+}
+//# sourceMappingURL=traced-sandbox.js.map

package/dist/components/sandbox-hub/traced-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"traced-sandbox.js","sourceRoot":"","sources":["../../../src/components/sandbox-hub/traced-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,sCAAsC,CAAC;AAOpE;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,GAAgB,EAChB,SAA6B,EAC7B,OAAO,GAA6C,EAAE;IAEtD,MAAM,IAAI,GAAG;QACX,SAAS,EAAE,GAAG,CAAC,EAAE;QACjB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI;QACrB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO;QAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC;IAEF,KAAK,UAAU,MAAM,CACnB,SAAiB,EACjB,UAAmC,EACnC,GAAqB,EACrB,SAAiD;QAEjD,MAAM,IAAI,GAAG,SAAS,CAAC,SAAS,EAAE,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,GAAG,EAAE,CAAC;YAC3B,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,GAAG,CAAC;gBACP,KAAK,EAAE,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;gBAC3D,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACvB,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;SACpD,CAAC,CAAC;QACL,SAAS,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CACjC,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;SACjD,CAAC,CAAC;QACL,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACnB,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACzG,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CACnB,MAAM,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnG,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;SAClD,CAAC,CAAC;QACL,MAAM,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACtB,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/G,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;SAClD,CAAC,CAAC;QACL,IAAI,EAAE,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CACtB,MAAM,CACJ,MAAM,EACN;YACE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACrD,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;YACjD,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,EACD,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACN,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;YAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM;YAC5B,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,iGAAiG;YACjG,MAAM,EAAE,CAAC,CAAC,QAAQ,KAAK,CAAC;SACzB,CAAC,CACH;KACJ,CAAC;AACJ,CAAC"}

package/dist/components/sandbox-hub/types/policy.d.ts

@@ -0,0 +1,40 @@
+import type { SandboxCapability, SandboxKind, SandboxTraits } from "./sandbox.js";
+import type { ResourceLimits } from "./provider.js";
+export interface OwnSandboxConfig {
+    /**
+     * Which provider runs it — must be one of SandboxHubPolicy.ownKinds (the server decides
+     * where each kind lives; a profile only picks the kind). Default: defaultOwnKind.
+     * image / network / limits below are container settings and are ignored for "host".
+     */
+    kind?: SandboxKind;
+    /** Must be in SandboxHubPolicy.allowedImages (or equal the shared image). */
+    image?: string;
+    /** Must be in SandboxHubPolicy.allowedNetwork — "full" only when the host opted in. Default "none". */
+    network?: "none" | "allowlist" | "full";
+    /** Clamped to SandboxHubPolicy.maxLimits. */
+    limits?: Partial<ResourceLimits>;
+}
+export type SandboxSelection = "shared" | "none" | {
+    own: OwnSandboxConfig;
+};
+/** Host-controlled rules applied to profile-supplied selections. */
+export interface SandboxHubPolicy {
+    /** Images an agent may request for its own sandbox, besides the shared image. */
+    allowedImages: string[];
+    /** Ceiling for own-sandbox resources; requested values above are clamped. */
+    maxLimits: ResourceLimits;
+    /** Network modes an own sandbox may request. Add "full" only as a deliberate host opt-in (unrestricted internet). */
+    allowedNetwork: Array<"none" | "allowlist" | "full">;
+    /** Provider kinds a profile may pick for its own sandbox. Default ["docker"]. */
+    ownKinds: SandboxKind[];
+    /** Provider kind used for own sandboxes when the profile names none. Default "docker". */
+    defaultOwnKind: SandboxKind;
+}
+/** Operation classes the approval policy reasons about. */
+export type SandboxOperation = Extract<SandboxCapability, "fs.read" | "fs.write" | "fs.search" | "exec">;
+/**
+ * Decides whether an operation needs explicit user approval in a given sandbox.
+ * Wired into the A-58 approval gate by A-61.
+ */
+export type SandboxApprovalPolicy = (traits: SandboxTraits, operation: SandboxOperation) => boolean;
+//# sourceMappingURL=policy.d.ts.map

package/dist/components/sandbox-hub/types/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/types/policy.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAwBpD,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uGAAuG;IACvG,OAAO,CAAC,EAAE,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxC,6CAA6C;IAC7C,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CAClC;AAED,MAAM,MAAM,gBAAgB,GACxB,QAAQ,GACR,MAAM,GACN;IAAE,GAAG,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAE9B,oEAAoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,iFAAiF;IACjF,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,6EAA6E;IAC7E,SAAS,EAAE,cAAc,CAAC;IAC1B,qHAAqH;IACrH,cAAc,EAAE,KAAK,CAAC,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC;IACrD,iFAAiF;IACjF,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,0FAA0F;IAC1F,cAAc,EAAE,WAAW,CAAC;CAC7B;AAED,2DAA2D;AAC3D,MAAM,MAAM,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,MAAM,CAAC,CAAC;AAEzG;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,gBAAgB,KAAK,OAAO,CAAC"}

package/dist/components/sandbox-hub/types/policy.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=policy.js.map

package/dist/components/sandbox-hub/types/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/types/policy.ts"],"names":[],"mappings":""}

package/dist/components/sandbox-hub/types/provider.d.ts

@@ -0,0 +1,40 @@
+import type { Plugin } from "../../../kernel/interfaces/plugin.js";
+import type { SandboxKind, SandboxTraits, Sandbox } from "./sandbox.js";
+export interface ResourceLimits {
+    cpus: number;
+    memoryMb: number;
+    /** Max processes inside the sandbox. */
+    pids: number;
+}
+/** Everything a provider needs to create one sandbox. */
+export interface SandboxSpec {
+    kind: SandboxKind;
+    /** Container image (docker). */
+    image?: string;
+    network?: SandboxTraits["network"];
+    limits?: Partial<ResourceLimits>;
+    /** Provider-specific settings (e.g. a host folder, a runner address). Never taken from agent profiles. */
+    options?: Record<string, unknown>;
+}
+export interface CreateSandboxContext {
+    /** Stable id the hub assigned, e.g. "docker:shared", "docker:own:<agentId>". */
+    id: string;
+    tenancy: SandboxTraits["tenancy"];
+    /** Owning agent for "own" tenancy. */
+    agentId?: string;
+}
+export interface SandboxProvider extends Plugin {
+    readonly kind: SandboxKind;
+    /** Create or reconnect to a sandbox. Called lazily on first use, never at agent spawn. */
+    create(spec: SandboxSpec, context: CreateSandboxContext): Promise<Sandbox>;
+    /**
+     * Delete the stored data of a sandbox that is NOT running in this process —
+     * the whole sandbox (own tenancy), or with `agentId` one agent's folder in a
+     * shared one. Used when an agent is deleted; running sandboxes are cleaned
+     * through Sandbox instead.
+     */
+    removeData?(spec: SandboxSpec, context: CreateSandboxContext, opts?: {
+        agentId?: string;
+    }): Promise<void>;
+}
+//# sourceMappingURL=provider.d.ts.map

package/dist/components/sandbox-hub/types/provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/types/provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sCAAsC,CAAC;AACnE,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQxE,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;CACd;AAED,yDAAyD;AACzD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,WAAW,CAAC;IAClB,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACjC,0GAA0G;IAC1G,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IAClC,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAgB,SAAQ,MAAM;IAC7C,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,0FAA0F;IAC1F,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3E;;;;;OAKG;IACH,UAAU,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3G"}

package/dist/components/sandbox-hub/types/provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=provider.js.map

package/dist/components/sandbox-hub/types/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../../../src/components/sandbox-hub/types/provider.ts"],"names":[],"mappings":""}