agent-bundle 0.1.0

package/dist/sandbox/providers/kubernetes.js

@@ -0,0 +1,258 @@
+import { randomUUID } from "node:crypto";
+import { rmSync } from "node:fs";
+import { setTimeout as sleep } from "node:timers/promises";
+import { quoteShellArg } from "../utils.js";
+import { requestCommandRun } from "./kubernetes-command-run.js";
+import { createCoreApi } from "./kubernetes-kubeconfig.js";
+import { spawnKubernetesProcess } from "./kubernetes-spawn.js";
+import { DIRECT_POD_HEALTH_TIMEOUT_MS, DEFAULT_HEALTH_TIMEOUT_MS, READY_POLL_INTERVAL_MS, } from "./kubernetes.constants.js";
+import { EXECD_PORT, isNotFoundError, isPodReady, requestJson, startPortForward, toFileEntries, unwrapPodResponse, waitForHealth, } from "./kubernetes-helpers.js";
+function isDeleteEndpointMissingError(error) {
+    if (!(error instanceof Error)) {
+        return false;
+    }
+    return /HTTP 404 .*\/files\/delete/.test(error.message);
+}
+export class K8sSandbox {
+    config;
+    hooks;
+    id = `k8s-${randomUUID()}`;
+    coreApi;
+    namespace;
+    podName;
+    kubectlKubeconfigPath;
+    temporaryKubeconfigPath;
+    runtimeStatus = "idle";
+    execdBaseUrl = null;
+    portForward = null;
+    file = {
+        read: async (path) => {
+            const baseUrl = this.getExecdBaseUrl();
+            const response = await requestJson(`${baseUrl}/files/read`, {
+                method: "POST",
+                body: JSON.stringify({ path }),
+            });
+            return response.content;
+        },
+        write: async (path, content) => {
+            const baseUrl = this.getExecdBaseUrl();
+            await requestJson(`${baseUrl}/files/write`, {
+                method: "POST",
+                body: JSON.stringify({
+                    path,
+                    content: typeof content === "string" ? content : content.toString("utf8"),
+                }),
+            });
+        },
+        list: async (path) => {
+            const baseUrl = this.getExecdBaseUrl();
+            const queryPath = encodeURIComponent(path);
+            const response = await requestJson(`${baseUrl}/files/list?path=${queryPath}`, {
+                method: "GET",
+            });
+            return toFileEntries(path, response);
+        },
+        delete: async (path) => {
+            const baseUrl = this.getExecdBaseUrl();
+            try {
+                await requestJson(`${baseUrl}/files/delete`, {
+                    method: "POST",
+                    body: JSON.stringify({ path }),
+                });
+            }
+            catch (error) {
+                if (!isDeleteEndpointMissingError(error)) {
+                    throw error;
+                }
+                await this.exec(`rm -rf ${quoteShellArg(path)}`);
+            }
+        },
+    };
+    constructor(config, hooks = {}) {
+        this.config = config;
+        this.hooks = hooks;
+        const coreApiContext = createCoreApi(this.config.kubernetes?.kubeconfig);
+        this.coreApi = coreApiContext.coreApi;
+        this.namespace = this.config.kubernetes?.namespace ?? "default";
+        this.podName = `agent-sandbox-${this.id}`;
+        this.kubectlKubeconfigPath = coreApiContext.kubectlKubeconfigPath;
+        this.temporaryKubeconfigPath = coreApiContext.temporaryKubeconfigPath;
+    }
+    get status() {
+        return this.runtimeStatus;
+    }
+    async start() {
+        if (this.runtimeStatus === "ready") {
+            return;
+        }
+        this.runtimeStatus = "starting";
+        try {
+            await this.coreApi.createNamespacedPod({
+                namespace: this.namespace,
+                body: this.buildPodSpec(),
+            });
+            const readyPod = await this.waitForPodReady();
+            await this.connectExecd(readyPod);
+            await this.runMountHook("preMount");
+            await this.runMountHook("postMount");
+            this.runtimeStatus = "ready";
+        }
+        catch (error) {
+            await this.cleanupInfrastructure();
+            this.runtimeStatus = "stopped";
+            throw error;
+        }
+    }
+    async exec(command, opts) {
+        const baseUrl = this.getExecdBaseUrl();
+        return await requestCommandRun(`${baseUrl}/command/run`, {
+            cmd: command,
+            cwd: opts?.cwd,
+            timeout: opts?.timeout,
+        }, opts?.onChunk);
+    }
+    async spawn(command, args = [], opts) {
+        return await spawnKubernetesProcess(this.getExecdBaseUrl(), command, args, opts);
+    }
+    async shutdown() {
+        this.runtimeStatus = "stopping";
+        let firstError = null;
+        await this.runUnmountHook("preUnmount", (error) => {
+            firstError = error;
+        });
+        await this.runUnmountHook("postUnmount", (error) => {
+            if (firstError === null) {
+                firstError = error;
+            }
+        });
+        try {
+            await this.cleanupInfrastructure();
+        }
+        catch (error) {
+            if (firstError === null) {
+                firstError = error;
+            }
+        }
+        this.runtimeStatus = "stopped";
+        if (firstError !== null) {
+            throw firstError;
+        }
+    }
+    buildPodSpec() {
+        const cpu = String(this.config.resources.cpu);
+        const memory = this.config.resources.memory;
+        return {
+            metadata: {
+                name: this.podName,
+                labels: {
+                    app: "agent-sandbox",
+                    "sandbox-id": this.id,
+                },
+            },
+            spec: {
+                restartPolicy: "Never",
+                nodeSelector: this.config.kubernetes?.nodeSelector,
+                containers: [
+                    {
+                        name: "execd",
+                        image: this.config.kubernetes?.image ?? "agent-bundle/execd:latest",
+                        imagePullPolicy: "IfNotPresent",
+                        ports: [{ containerPort: EXECD_PORT, name: "http" }],
+                        resources: {
+                            requests: { cpu, memory },
+                            limits: { cpu, memory },
+                        },
+                    },
+                ],
+            },
+        };
+    }
+    async waitForPodReady() {
+        const timeoutMs = Math.max(1, Math.trunc(this.config.timeout * 1000));
+        const startAt = Date.now();
+        for (;;) {
+            const response = await this.coreApi.readNamespacedPod({
+                namespace: this.namespace,
+                name: this.podName,
+            });
+            const pod = unwrapPodResponse(response);
+            if (isPodReady(pod)) {
+                return pod;
+            }
+            if (pod.status?.phase === "Failed") {
+                throw new Error(`Pod ${this.podName} entered Failed phase.`);
+            }
+            if (Date.now() - startAt >= timeoutMs) {
+                throw new Error(`Timed out waiting for pod ${this.podName} readiness.`);
+            }
+            await sleep(READY_POLL_INTERVAL_MS);
+        }
+    }
+    async connectExecd(pod) {
+        const podIp = pod.status?.podIP?.trim() ?? "";
+        if (podIp.length > 0) {
+            const directBaseUrl = `http://${podIp}:${EXECD_PORT}`;
+            try {
+                await waitForHealth(directBaseUrl, DIRECT_POD_HEALTH_TIMEOUT_MS, READY_POLL_INTERVAL_MS);
+                this.execdBaseUrl = directBaseUrl;
+                return;
+            }
+            catch {
+                // Fall back to port-forward on clusters where pod IP is not routable from host.
+            }
+        }
+        const forwarded = await startPortForward(this.podName, this.namespace, this.kubectlKubeconfigPath ?? undefined);
+        this.execdBaseUrl = forwarded.baseUrl;
+        this.portForward = forwarded.handle;
+        await waitForHealth(this.execdBaseUrl, DEFAULT_HEALTH_TIMEOUT_MS, READY_POLL_INTERVAL_MS);
+    }
+    async runMountHook(hookName) {
+        const hook = this.hooks[hookName];
+        if (hook) {
+            await hook(this);
+        }
+    }
+    async runUnmountHook(hookName, onError) {
+        const hook = this.hooks[hookName];
+        if (!hook) {
+            return;
+        }
+        try {
+            await hook(this);
+        }
+        catch (error) {
+            onError(error);
+        }
+    }
+    getExecdBaseUrl() {
+        if (this.execdBaseUrl === null) {
+            throw new Error("Kubernetes sandbox is not started.");
+        }
+        return this.execdBaseUrl;
+    }
+    async cleanupInfrastructure() {
+        if (this.portForward) {
+            await this.portForward.stop();
+            this.portForward = null;
+        }
+        try {
+            await this.coreApi.deleteNamespacedPod({
+                namespace: this.namespace,
+                name: this.podName,
+            });
+        }
+        catch (error) {
+            if (!isNotFoundError(error)) {
+                throw error;
+            }
+        }
+        finally {
+            this.execdBaseUrl = null;
+            if (this.temporaryKubeconfigPath) {
+                rmSync(this.temporaryKubeconfigPath, { force: true });
+                this.temporaryKubeconfigPath = null;
+            }
+        }
+    }
+}
+//# sourceMappingURL=kubernetes.js.map

package/dist/sandbox/providers/kubernetes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kubernetes.js","sourceRoot":"","sources":["../../../src/sandbox/providers/kubernetes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAc3D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EACL,4BAA4B,EAC5B,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,UAAU,EACV,eAAe,EACf,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,aAAa,GACd,MAAM,yBAAyB,CAAC;AAEjC,SAAS,4BAA4B,CAAC,KAAc;IAClD,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,OAAO,UAAU;IAyDF;IACA;IAzDH,EAAE,GAAG,OAAO,UAAU,EAAE,EAAE,CAAC;IAE1B,OAAO,CAAY;IACnB,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,qBAAqB,CAAgB;IAC9C,uBAAuB,CAAgB;IACvC,aAAa,GAAkB,MAAM,CAAC;IACtC,YAAY,GAAkB,IAAI,CAAC;IACnC,WAAW,GAA6B,IAAI,CAAC;IAErC,IAAI,GAAG;QACrB,IAAI,EAAE,KAAK,EAAE,IAAY,EAAmB,EAAE;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAmB,GAAG,OAAO,aAAa,EAAE;gBAC5E,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;aAC/B,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC,OAAO,CAAC;QAC1B,CAAC;QACD,KAAK,EAAE,KAAK,EAAE,IAAY,EAAE,OAAwB,EAAiB,EAAE;YACrE,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,WAAW,CAAC,GAAG,OAAO,cAAc,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,IAAI;oBACJ,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;iBAC1E,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,IAAY,EAAwB,EAAE;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAmB,GAAG,OAAO,oBAAoB,SAAS,EAAE,EAAE;gBAC9F,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,OAAO,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAY,EAAiB,EAAE;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,GAAG,OAAO,eAAe,EAAE;oBAC3C,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;iBAC/B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,4BAA4B,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;gBAED,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;KACF,CAAC;IAEF,YACmB,MAAqB,EACrB,QAAsB,EAAE;QADxB,WAAM,GAAN,MAAM,CAAe;QACrB,UAAK,GAAL,KAAK,CAAmB;QAEzC,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,IAAI,SAAS,CAAC;QAChE,IAAI,CAAC,OAAO,GAAG,iBAAiB,IAAI,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,qBAAqB,GAAG,cAAc,CAAC,qBAAqB,CAAC;QAClE,IAAI,CAAC,uBAAuB,GAAG,cAAc,CAAC,uBAAuB,CAAC;IACxE,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAEM,KAAK,CAAC,KAAK;QAChB,IAAI,IAAI,CAAC,aAAa,KAAK,OAAO,EAAE,CAAC;YACnC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE;aAC1B,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9C,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;YACpC,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;YACrC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;YACnC,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,OAAe,EAAE,IAIlC;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACvC,OAAO,MAAM,iBAAiB,CAC5B,GAAG,OAAO,cAAc,EACxB;YACE,GAAG,EAAE,OAAO;YACZ,GAAG,EAAE,IAAI,EAAE,GAAG;YACd,OAAO,EAAE,IAAI,EAAE,OAAO;SACvB,EACD,IAAI,EAAE,OAAO,CACd,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,KAAK,CAChB,OAAe,EACf,OAAiB,EAAE,EACnB,IAAmB;QAEnB,OAAO,MAAM,sBAAsB,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;IAEM,KAAK,CAAC,QAAQ;QACnB,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC;QAChC,IAAI,UAAU,GAAY,IAAI,CAAC;QAE/B,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;YAChD,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE;YACjD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QAC/B,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,UAAU,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAC5C,OAAO;YACL,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,OAAO;gBAClB,MAAM,EAAE;oBACN,GAAG,EAAE,eAAe;oBACpB,YAAY,EAAE,IAAI,CAAC,EAAE;iBACtB;aACF;YACD,IAAI,EAAE;gBACJ,aAAa,EAAE,OAAO;gBACtB,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY;gBAClD,UAAU,EAAE;oBACV;wBACE,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI,2BAA2B;wBACnE,eAAe,EAAE,cAAc;wBAC/B,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;wBACpD,SAAS,EAAE;4BACT,QAAQ,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;4BACzB,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;yBACxB;qBACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,eAAe;QAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,SAAS,CAAC;YACR,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;gBACpD,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,OAAO;aACnB,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACpB,OAAO,GAAG,CAAC;YACb,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,OAAO,wBAAwB,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,CAAC,OAAO,aAAa,CAAC,CAAC;YAC1E,CAAC;YAED,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,GAAU;QACnC,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,aAAa,GAAG,UAAU,KAAK,IAAI,UAAU,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,aAAa,CACjB,aAAa,EACb,4BAA4B,EAC5B,sBAAsB,CACvB,CAAC;gBACF,IAAI,CAAC,YAAY,GAAG,aAAa,CAAC;gBAClC,OAAO;YACT,CAAC;YAAC,MAAM,CAAC;gBACP,gFAAgF;YAClF,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,gBAAgB,CACtC,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,qBAAqB,IAAI,SAAS,CACxC,CAAC;QACF,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;QAEpC,MAAM,aAAa,CACjB,IAAI,CAAC,YAAY,EACjB,yBAAyB,EACzB,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,QAAkC;QAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,QAAsC,EACtC,OAAiC;QAEjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,qBAAqB;QACjC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;gBACrC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,IAAI,EAAE,IAAI,CAAC,OAAO;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC5B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;gBACjC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/sandbox/types.d.ts

@@ -0,0 +1,57 @@
+import type { BundleConfig } from "../schema/bundle.js";
+export type SandboxConfig = BundleConfig["sandbox"];
+export type ExecResult = {
+    stdout: string;
+    stderr: string;
+    exitCode: number;
+};
+export type FileEntry = {
+    name: string;
+    path: string;
+    type: "file" | "directory";
+};
+export type ExecOptions = {
+    timeout?: number;
+    cwd?: string;
+    onChunk?: (chunk: string) => void;
+};
+export type SpawnOptions = {
+    cwd?: string;
+    env?: Record<string, string>;
+};
+export type SpawnedProcess = {
+    readonly pid: number;
+    readonly stdin: WritableStream<Uint8Array>;
+    readonly stdout: ReadableStream<Uint8Array>;
+    readonly stderr: ReadableStream<Uint8Array>;
+    readonly exited: Promise<number>;
+    kill(signal?: string): Promise<void>;
+};
+export interface SandboxIO {
+    exec(command: string, opts?: ExecOptions): Promise<ExecResult>;
+    spawn(command: string, args?: string[], opts?: SpawnOptions): Promise<SpawnedProcess>;
+    file: {
+        read(path: string): Promise<string>;
+        write(path: string, content: string | Buffer): Promise<void>;
+        list(path: string): Promise<FileEntry[]>;
+        delete(path: string): Promise<void>;
+    };
+}
+export type SandboxHooks = {
+    preMount?: (io: SandboxIO) => Promise<void>;
+    postMount?: (io: SandboxIO) => Promise<void>;
+    preUnmount?: (io: SandboxIO) => Promise<void>;
+    postUnmount?: (io: SandboxIO) => Promise<void>;
+};
+export type SandboxStatus = "idle" | "starting" | "ready" | "stopping" | "stopped";
+export interface Sandbox extends SandboxIO {
+    readonly id: string;
+    readonly status: SandboxStatus;
+    start(): Promise<void>;
+    shutdown(): Promise<void>;
+}
+export type SandboxMode = "build" | "serve";
+export type CreateSandboxOptions = {
+    mode?: SandboxMode;
+};
+export type CreateSandbox = (config: SandboxConfig, hooks?: SandboxHooks, options?: CreateSandboxOptions) => Sandbox;

package/dist/sandbox/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/sandbox/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sandbox/types.ts"],"names":[],"mappings":""}

package/dist/sandbox/utils.d.ts

@@ -0,0 +1 @@
+export declare function quoteShellArg(input: string): string;

package/dist/sandbox/utils.js

@@ -0,0 +1,4 @@
+export function quoteShellArg(input) {
+    return `'${input.replaceAll("'", `'\"'\"'`)}'`;
+}
+//# sourceMappingURL=utils.js.map

package/dist/sandbox/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/sandbox/utils.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC;AACjD,CAAC"}

package/dist/schema/bundle.d.ts

@@ -0,0 +1,143 @@
+import { z } from "zod";
+declare const commandEntrySchema: z.ZodUnion<readonly [z.ZodObject<{
+    path: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    github: z.ZodString;
+    command: z.ZodOptional<z.ZodString>;
+    ref: z.ZodDefault<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    url: z.ZodString;
+    version: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>]>;
+declare const pluginEntrySchema: z.ZodObject<{
+    marketplace: z.ZodString;
+    name: z.ZodString;
+    ref: z.ZodDefault<z.ZodString>;
+    skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    commands: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export declare const bundleSchema: z.ZodObject<{
+    name: z.ZodString;
+    model: z.ZodObject<{
+        provider: z.ZodEnum<{
+            anthropic: "anthropic";
+            openai: "openai";
+            gemini: "gemini";
+            ollama: "ollama";
+            openrouter: "openrouter";
+        }>;
+        model: z.ZodString;
+        ollama: z.ZodOptional<z.ZodObject<{
+            baseUrl: z.ZodOptional<z.ZodString>;
+            contextWindow: z.ZodOptional<z.ZodNumber>;
+            maxTokens: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    prompt: z.ZodObject<{
+        system: z.ZodString;
+        variables: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>;
+    sandbox: z.ZodObject<{
+        provider: z.ZodEnum<{
+            e2b: "e2b";
+            kubernetes: "kubernetes";
+        }>;
+        timeout: z.ZodDefault<z.ZodNumber>;
+        resources: z.ZodDefault<z.ZodObject<{
+            cpu: z.ZodNumber;
+            memory: z.ZodString;
+        }, z.core.$strict>>;
+        e2b: z.ZodOptional<z.ZodObject<{
+            template: z.ZodOptional<z.ZodString>;
+            build: z.ZodOptional<z.ZodObject<{
+                dockerfile: z.ZodString;
+                context: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        kubernetes: z.ZodOptional<z.ZodObject<{
+            namespace: z.ZodOptional<z.ZodString>;
+            kubeconfig: z.ZodOptional<z.ZodString>;
+            nodeSelector: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            registry: z.ZodOptional<z.ZodString>;
+            image: z.ZodOptional<z.ZodString>;
+            build: z.ZodOptional<z.ZodObject<{
+                dockerfile: z.ZodString;
+                context: z.ZodOptional<z.ZodString>;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>;
+        serve: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodEnum<{
+                e2b: "e2b";
+                kubernetes: "kubernetes";
+            }>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+    deploy: z.ZodOptional<z.ZodObject<{
+        target: z.ZodEnum<{
+            aws: "aws";
+        }>;
+        aws: z.ZodOptional<z.ZodObject<{
+            region: z.ZodDefault<z.ZodString>;
+            cpu: z.ZodDefault<z.ZodString>;
+            memory: z.ZodDefault<z.ZodString>;
+            desiredCount: z.ZodDefault<z.ZodNumber>;
+            containerPort: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    skills: z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        github: z.ZodString;
+        skill: z.ZodOptional<z.ZodString>;
+        ref: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        url: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>;
+    commands: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodObject<{
+        path: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        github: z.ZodString;
+        command: z.ZodOptional<z.ZodString>;
+        ref: z.ZodDefault<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        url: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>]>>>;
+    mcp: z.ZodOptional<z.ZodObject<{
+        servers: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            transport: z.ZodLiteral<"http">;
+            name: z.ZodString;
+            url: z.ZodString;
+            auth: z.ZodEnum<{
+                bearer: "bearer";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            transport: z.ZodLiteral<"stdio">;
+            name: z.ZodString;
+            command: z.ZodString;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strict>, z.ZodObject<{
+            transport: z.ZodLiteral<"sse">;
+            name: z.ZodString;
+            url: z.ZodString;
+            auth: z.ZodOptional<z.ZodEnum<{
+                bearer: "bearer";
+            }>>;
+        }, z.core.$strict>], "transport">>;
+    }, z.core.$strict>>;
+    plugins: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        marketplace: z.ZodString;
+        name: z.ZodString;
+        ref: z.ZodDefault<z.ZodString>;
+        skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        commands: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type BundleConfig = z.infer<typeof bundleSchema>;
+export type SkillEntry = BundleConfig["skills"][number];
+export type CommandEntry = z.infer<typeof commandEntrySchema>;
+export type PluginEntry = z.infer<typeof pluginEntrySchema>;
+export declare function parseBundleConfig(raw: unknown): BundleConfig;
+export {};