agentenkit 0.4.0 → 0.5.0

package/dist/adapters/docker.js

@@ -0,0 +1,246 @@
+import { spawn } from 'node:child_process';
+import { DEFAULT_COMMAND_TIMEOUT_MS, SandboxFileNotFoundError, SandboxGoneError, SandboxUnsupportedError, TIMED_OUT_EXIT_CODE, } from '../ports/sandbox.js';
+import { FILE_SCRIPTS, NOT_FOUND_EXIT, OutputCollector, backgroundCommand, looksTimedOut, parseListing, randomId, resolveIn, runArgv, timeoutSeconds, toBytes, } from './sandbox-shell.js';
+const DEADLINE_FILE = '/tmp/.agentenkit-deadline';
+/** The container's main process: it waits until the deadline in
+ *  DEADLINE_FILE has passed and then exits, and `--rm` removes the
+ *  container. So a sandbox nobody uses ends by itself, even when the app
+ *  that made it is gone. `setTimeout` moves the deadline. */
+const WATCHDOG = `echo "$1" > ${DEADLINE_FILE}; ` +
+    `while [ "$(date +%s)" -lt "$(cat ${DEADLINE_FILE} 2>/dev/null || echo 0)" ]; do sleep 2; done`;
+/** What the docker CLI says when the container is not there any more. */
+const GONE = /Error response from daemon: (No such container|container \S+ is not running)|No such object/;
+/** Sandboxes as Docker containers on the machine the docker CLI talks to:
+ *  for self-hosting. One container per thread, removed when it has been idle
+ *  past its time. Uses the docker CLI, so it needs no SDK and follows your
+ *  DOCKER_HOST and contexts. The Go runtime has the same adapter
+ *  (adapters/docker). */
+export class DockerSandbox {
+    options;
+    name = 'docker';
+    docker;
+    constructor(options = {}) {
+        this.options = options;
+        this.docker = options.docker ?? 'docker';
+    }
+    async create(options) {
+        const network = options.network ?? this.options.network ?? 'none';
+        if (typeof network === 'object')
+            throw new SandboxUnsupportedError('docker', 'a network allow list');
+        const name = `agentenkit-${randomId()}`;
+        const workdir = this.options.workdir ?? '/workspace';
+        const deadline = Math.floor((Date.now() + options.timeoutMs) / 1000);
+        const args = [
+            'run', '-d', '--rm', '--init', '--name', name,
+            '--label', 'agentenkit=sandbox',
+            '--label', `agentenkit.threadId=${options.metadata.threadId}`,
+            ...(options.metadata.runId ? ['--label', `agentenkit.runId=${options.metadata.runId}`] : []),
+            '-w', workdir,
+            '--network', network === 'all' ? 'bridge' : 'none',
+            '--security-opt', 'no-new-privileges',
+        ];
+        const cpu = options.resources?.cpu ?? this.options.cpu;
+        const memory = options.resources?.memoryMiB ?? this.options.memoryMiB;
+        if (cpu)
+            args.push('--cpus', String(cpu));
+        if (memory)
+            args.push('--memory', `${memory}m`);
+        for (const port of this.options.ports ?? [])
+            args.push('-p', `127.0.0.1::${port}`);
+        for (const [k, v] of Object.entries({ ...this.options.env, ...options.envs }))
+            args.push('-e', `${k}=${v}`);
+        args.push(...(this.options.runArgs ?? []));
+        args.push(options.image ?? this.options.image ?? 'python:3.12-slim', 'sh', '-c', WATCHDOG, 'sandbox', String(deadline));
+        const r = await cli(this.docker, args);
+        if (r.code !== 0)
+            throw new Error(`docker: could not start a sandbox: ${text(r.stderr).trim()}`);
+        return new DockerBox(this.docker, name, workdir);
+    }
+    async connect(sandboxId) {
+        const r = await cli(this.docker, ['inspect', '-f', '{{.State.Running}}\t{{.Config.WorkingDir}}', sandboxId]);
+        const [running, workdir] = text(r.stdout).trim().split('\t');
+        if (r.code !== 0 || running !== 'true')
+            throw new SandboxGoneError(sandboxId);
+        return new DockerBox(this.docker, sandboxId, workdir || '/');
+    }
+}
+class DockerBox {
+    docker;
+    sandboxId;
+    workdir;
+    provider = 'docker';
+    filesystem;
+    constructor(docker, sandboxId, workdir) {
+        this.docker = docker;
+        this.sandboxId = sandboxId;
+        this.workdir = workdir;
+        this.filesystem = new DockerFiles(this);
+    }
+    /** `docker exec` a script with `sh -c`; a container that is gone throws. */
+    async script(script, args, stdin) {
+        const r = await cli(this.docker, ['exec', ...(stdin ? ['-i'] : []), this.sandboxId, 'sh', '-c', script, 'sandbox', ...args], { stdin });
+        this.checkGone(r);
+        return r;
+    }
+    checkGone(r) {
+        if (r.code !== 0 && GONE.test(text(r.stderr)))
+            throw new SandboxGoneError(this.sandboxId);
+    }
+    path(p) {
+        return resolveIn(this.workdir, p);
+    }
+    async runCommand(command, options = {}) {
+        const limit = options.timeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;
+        const args = ['exec', '-w', this.path(options.cwd ?? '.')];
+        for (const [k, v] of Object.entries(options.env ?? {}))
+            args.push('-e', `${k}=${v}`);
+        const cmd = options.background ? backgroundCommand(command) : command;
+        args.push(this.sandboxId, ...runArgv(cmd, options.background ? undefined : timeoutSeconds(limit)));
+        const started = Date.now();
+        const out = new OutputCollector(options.background ? undefined : options.onStdout);
+        const err = new OutputCollector(options.background ? undefined : options.onStderr);
+        // `timeout` inside the container stops the command; this is the backstop
+        // for an image without it.
+        const r = await cli(this.docker, args, { out, err, limitMs: limit + 5_000, signal: options.signal });
+        const stdout = out.end();
+        const stderr = err.end();
+        if (r.code !== 0 && GONE.test(stderr))
+            throw new SandboxGoneError(this.sandboxId);
+        const durationMs = Date.now() - started;
+        if (options.background)
+            return { stdout: '', stderr: '', exitCode: r.code, durationMs };
+        const timedOut = r.killed || looksTimedOut(r.code, durationMs, limit);
+        return {
+            stdout,
+            stderr,
+            exitCode: timedOut ? TIMED_OUT_EXIT_CODE : r.code,
+            durationMs,
+            ...(timedOut ? { timedOut: true } : {}),
+            ...(out.truncated || err.truncated ? { truncated: true } : {}),
+        };
+    }
+    async getUrl(options) {
+        const r = await cli(this.docker, ['port', this.sandboxId, `${options.port}/tcp`]);
+        this.checkGone(r);
+        const hostPort = text(r.stdout).trim().split('\n')[0];
+        if (r.code !== 0 || !hostPort) {
+            throw new SandboxUnsupportedError('docker', `a URL for port ${options.port} (publish it with the ports option)`);
+        }
+        return `${options.protocol ?? 'http'}://${hostPort.replace('0.0.0.0', '127.0.0.1')}`;
+    }
+    async getInfo() {
+        const r = await cli(this.docker, [
+            'inspect', '-f', '{{.Created}}\t{{.State.Status}}\t{{json .Config.Labels}}', this.sandboxId,
+        ]);
+        if (r.code !== 0)
+            throw new SandboxGoneError(this.sandboxId);
+        const [created, status, labels] = text(r.stdout).trim().split('\t');
+        const metadata = {};
+        for (const [k, v] of Object.entries((JSON.parse(labels || '{}') ?? {}))) {
+            if (k.startsWith('agentenkit.'))
+                metadata[k.slice('agentenkit.'.length)] = v;
+        }
+        const deadline = Number(text((await this.script(`cat ${DEADLINE_FILE}`, [])).stdout).trim());
+        return {
+            id: this.sandboxId,
+            provider: 'docker',
+            status: status === 'running' ? 'running' : status === 'exited' ? 'stopped' : 'error',
+            createdAt: new Date(created),
+            ...(deadline ? { expiresAt: new Date(deadline * 1000) } : {}),
+            workdir: this.workdir,
+            metadata,
+        };
+    }
+    async setTimeout(timeoutMs) {
+        const deadline = Math.floor((Date.now() + timeoutMs) / 1000);
+        const r = await this.script(`echo "$1" > ${DEADLINE_FILE}`, [String(deadline)]);
+        if (r.code !== 0)
+            throw new Error(`docker: could not set the sandbox's time: ${text(r.stderr).trim()}`);
+    }
+    async destroy() {
+        const r = await cli(this.docker, ['rm', '-f', this.sandboxId]);
+        if (r.code !== 0 && !GONE.test(text(r.stderr))) {
+            throw new Error(`docker: could not remove ${this.sandboxId}: ${text(r.stderr).trim()}`);
+        }
+    }
+}
+class DockerFiles {
+    box;
+    constructor(box) {
+        this.box = box;
+    }
+    async run(script, path, stdin) {
+        const r = await this.box.script(script, [this.box.path(path)], stdin);
+        if (r.code === NOT_FOUND_EXIT)
+            throw new SandboxFileNotFoundError(path);
+        if (r.code !== 0)
+            throw new Error(`docker: ${text(r.stderr).trim() || `exit ${r.code}`}`);
+        return r;
+    }
+    async readFile(path) {
+        return text((await this.run(FILE_SCRIPTS.read, path)).stdout);
+    }
+    async readFileBytes(path) {
+        return (await this.run(FILE_SCRIPTS.read, path)).stdout;
+    }
+    async writeFile(path, content) {
+        await this.run(FILE_SCRIPTS.write, path, toBytes(content));
+    }
+    async readdir(path) {
+        return parseListing(text((await this.run(FILE_SCRIPTS.list, path)).stdout));
+    }
+    async mkdir(path) {
+        await this.run(FILE_SCRIPTS.mkdir, path);
+    }
+    async exists(path) {
+        return (await this.box.script(FILE_SCRIPTS.exists, [this.box.path(path)])).code === 0;
+    }
+    async remove(path) {
+        await this.run(FILE_SCRIPTS.remove, path);
+    }
+}
+const text = (b) => new TextDecoder().decode(b);
+/** Runs the docker CLI. With `out` / `err` the output goes there as it
+ *  comes; otherwise it is collected whole. */
+function cli(docker, args, opts = {}) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(docker, args, { stdio: [opts.stdin ? 'pipe' : 'ignore', 'pipe', 'pipe'] });
+        const stdout = [];
+        const stderr = [];
+        child.stdout.on('data', (b) => (opts.out ? opts.out.push(b) : stdout.push(b)));
+        child.stderr.on('data', (b) => (opts.err ? opts.err.push(b) : stderr.push(b)));
+        let killed = false;
+        let aborted = false;
+        const timer = opts.limitMs
+            ? setTimeout(() => {
+                killed = true;
+                child.kill('SIGKILL');
+            }, opts.limitMs)
+            : undefined;
+        const onAbort = () => {
+            aborted = true;
+            child.kill('SIGKILL');
+        };
+        opts.signal?.addEventListener('abort', onAbort, { once: true });
+        if (opts.signal?.aborted)
+            onAbort();
+        const done = () => {
+            if (timer)
+                clearTimeout(timer);
+            opts.signal?.removeEventListener('abort', onAbort);
+        };
+        child.on('error', (e) => {
+            done();
+            reject(new Error(`docker: could not run ${docker}: ${e.message}`));
+        });
+        child.on('close', (code) => {
+            done();
+            if (aborted)
+                return reject(opts.signal.reason ?? new Error('aborted'));
+            resolve({ code: code ?? -1, stdout: new Uint8Array(Buffer.concat(stdout)), stderr: new Uint8Array(Buffer.concat(stderr)), killed });
+        });
+        if (opts.stdin)
+            child.stdin.end(Buffer.from(opts.stdin));
+    });
+}
+//# sourceMappingURL=docker.js.map

package/dist/adapters/docker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../../src/adapters/docker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,GAUpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,QAAQ,EACR,SAAS,EACT,OAAO,EACP,cAAc,EACd,OAAO,GACR,MAAM,oBAAoB,CAAC;AAuB5B,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAElD;;;6DAG6D;AAC7D,MAAM,QAAQ,GACZ,eAAe,aAAa,IAAI;IAChC,oCAAoC,aAAa,8CAA8C,CAAC;AAElG,yEAAyE;AACzE,MAAM,IAAI,GAAG,6FAA6F,CAAC;AAE3G;;;;yBAIyB;AACzB,MAAM,OAAO,aAAa;IAIK;IAHpB,IAAI,GAAG,QAAQ,CAAC;IACR,MAAM,CAAS;IAEhC,YAA6B,UAAgC,EAAE;QAAlC,YAAO,GAAP,OAAO,CAA2B;QAC7D,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA6B;QACxC,MAAM,OAAO,GAAmB,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC;QAClF,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,uBAAuB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,cAAc,QAAQ,EAAE,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG;YACX,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI;YAC7C,SAAS,EAAE,oBAAoB;YAC/B,SAAS,EAAE,uBAAuB,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE;YAC7D,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,oBAAoB,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,IAAI,EAAE,OAAO;YACb,WAAW,EAAE,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;YAClD,gBAAgB,EAAE,mBAAmB;SACtC,CAAC;QACF,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;QACvD,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QACtE,IAAI,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,GAAG,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC;QACnF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5G,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,kBAAkB,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxH,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,SAAiB;QAC7B,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,4CAA4C,EAAE,SAAS,CAAC,CAAC,CAAC;QAC7G,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,KAAK,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC9E,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,IAAI,GAAG,CAAC,CAAC;IAC/D,CAAC;CACF;AAED,MAAM,SAAS;IAKM;IACR;IACQ;IANV,QAAQ,GAAG,QAAQ,CAAC;IACpB,UAAU,CAAoB;IAEvC,YACmB,MAAc,EACtB,SAAiB,EACT,OAAe;QAFf,WAAM,GAAN,MAAM,CAAQ;QACtB,cAAS,GAAT,SAAS,CAAQ;QACT,YAAO,GAAP,OAAO,CAAQ;QAEhC,IAAI,CAAC,UAAU,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAC5E,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,IAAc,EAAE,KAAkB;QAC7D,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,SAAS,CAAC,CAAO;QACf,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,CAAC,CAAS;QACZ,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,UAA6B,EAAE;QAC/D,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,0BAA0B,CAAC;QAC9D,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;QAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnF,MAAM,GAAG,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnF,yEAAyE;QACzE,2BAA2B;QAC3B,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,GAAG,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClF,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACxC,IAAI,OAAO,CAAC,UAAU;YAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;QACxF,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QACtE,OAAO;YACL,MAAM;YACN,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YACjD,UAAU;YACV,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAsD;QACjE,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,uBAAuB,CAAC,QAAQ,EAAE,kBAAkB,OAAO,CAAC,IAAI,qCAAqC,CAAC,CAAC;QACnH,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,QAAQ,IAAI,MAAM,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;IACvF,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE;YAC/B,SAAS,EAAE,IAAI,EAAE,0DAA0D,EAAE,IAAI,CAAC,SAAS;SAC5F,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpE,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,EAAE,CAA2B,CAAC,EAAE,CAAC;YAClG,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC;gBAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,SAAS;YAClB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;YACpF,SAAS,EAAE,IAAI,IAAI,CAAC,OAAQ,CAAC;YAC7B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,aAAa,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC;CACF;AAED,MAAM,WAAW;IACc;IAA7B,YAA6B,GAAc;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAEvC,KAAK,CAAC,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,KAAkB;QAChE,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc;YAAE,MAAM,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1F,OAAO,CAAC,CAAC;IACX,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QACzB,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAY;QAC9B,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,IAAY,EAAE,OAA4B;QACxD,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY;QACtB,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;CACF;AAUD,MAAM,IAAI,GAAG,CAAC,CAAa,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAE5D;8CAC8C;AAC9C,SAAS,GAAG,CACV,MAAc,EACd,IAAc,EACd,OAAqH,EAAE;IAEvH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,KAAK,CAAC,MAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxF,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO;YACxB,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE;gBACd,MAAM,GAAG,IAAI,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC;YAClB,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,OAAO,GAAG,IAAI,CAAC;YACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;YACtB,IAAI,EAAE,CAAC;YACP,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,MAAM,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,EAAE,CAAC;YACP,IAAI,OAAO;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAO,CAAC,MAAM,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YACxE,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACtI,CAAC,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,KAAK,CAAC,KAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/adapters/e2b.d.ts

@@ -0,0 +1,44 @@
+import { type CreateSandboxOptions, type Sandbox, type SandboxNetwork, type SandboxProvider } from '../ports/sandbox.js';
+export interface E2BSandboxOptions {
+    apiKey: string;
+    /** The template each sandbox starts from. Default `base`. */
+    template?: string;
+    /** `none` (the default), `all`, or `{ allow: [...] }`: only these hosts. */
+    network?: SandboxNetwork;
+    /** Default `e2b.app`. */
+    domain?: string;
+    /** Default `https://api.<domain>`. */
+    apiUrl?: string;
+    /** Sends every call to one sandbox here instead of
+     *  `https://49983-<id>.<domain>`, naming the sandbox in a header. For
+     *  tests and proxies. */
+    sandboxUrl?: string;
+    /** For tests. */
+    fetch?: typeof fetch;
+}
+/** Hosted sandboxes on E2B: each is a small VM that starts in under a
+ *  second. It talks to E2B's HTTP API directly, so it needs no SDK; the Go
+ *  runtime has the same adapter (adapters/e2b). A sandbox shuts itself down
+ *  at its timeout, which the runtime pushes back while the thread uses it. */
+export declare class E2BSandbox implements SandboxProvider {
+    private readonly options;
+    readonly name = "e2b";
+    private readonly domain;
+    private readonly apiUrl;
+    constructor(options: E2BSandboxOptions);
+    get doFetch(): typeof fetch;
+    /** A call to E2B's API. */
+    api(method: string, path: string, body?: unknown): Promise<Response>;
+    create(options: CreateSandboxOptions): Promise<Sandbox>;
+    connect(sandboxId: string): Promise<Sandbox>;
+    private box;
+}
+/** One Connect streaming message: a flags byte, a 4-byte length, the JSON. */
+export declare function envelope(message: unknown, flags?: number): Uint8Array<ArrayBuffer>;
+/** The messages of a Connect stream. The last has `end: true` and says
+ *  whether the call failed. */
+export declare function frames(body: ReadableStream<Uint8Array>): AsyncGenerator<{
+    end: boolean;
+    message: any;
+}>;
+//# sourceMappingURL=e2b.d.ts.map

package/dist/adapters/e2b.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"e2b.d.ts","sourceRoot":"","sources":["../../src/adapters/e2b.ts"],"names":[],"mappings":"AAAA,OAAO,EAML,KAAK,oBAAoB,EAGzB,KAAK,OAAO,EAGZ,KAAK,cAAc,EACnB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAY7B,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;6BAEyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iBAAiB;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAWD;;;8EAG8E;AAC9E,qBAAa,UAAW,YAAW,eAAe;IAKpC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAJpC,QAAQ,CAAC,IAAI,SAAS;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEH,OAAO,EAAE,iBAAiB;IAMvD,IAAI,OAAO,IAAI,OAAO,KAAK,CAE1B;IAED,2BAA2B;IACrB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAQpE,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBvD,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAOlD,OAAO,CAAC,GAAG;CAIZ;AAkPD,8EAA8E;AAC9E,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,SAAI,GAAG,UAAU,CAAC,WAAW,CAAC,CAO7E;AAED;+BAC+B;AAC/B,wBAAuB,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC;IAAE,GAAG,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,GAAG,CAAA;CAAE,CAAC,CAwB9G"}

package/dist/adapters/e2b.js

@@ -0,0 +1,349 @@
+import { DEFAULT_COMMAND_TIMEOUT_MS, SandboxFileNotFoundError, SandboxGoneError, TIMED_OUT_EXIT_CODE, } from '../ports/sandbox.js';
+import { OutputCollector, backgroundCommand, looksTimedOut, resolveIn, runArgv, sortEntries, timeoutSeconds, toBytes, } from './sandbox-shell.js';
+const ENVD_PORT = 49983;
+const WORKDIR = '/home/user';
+/** Hosted sandboxes on E2B: each is a small VM that starts in under a
+ *  second. It talks to E2B's HTTP API directly, so it needs no SDK; the Go
+ *  runtime has the same adapter (adapters/e2b). A sandbox shuts itself down
+ *  at its timeout, which the runtime pushes back while the thread uses it. */
+export class E2BSandbox {
+    options;
+    name = 'e2b';
+    domain;
+    apiUrl;
+    constructor(options) {
+        this.options = options;
+        if (!options.apiKey)
+            throw new Error('E2BSandbox: apiKey is required');
+        this.domain = options.domain ?? 'e2b.app';
+        this.apiUrl = options.apiUrl ?? `https://api.${this.domain}`;
+    }
+    get doFetch() {
+        return this.options.fetch ?? fetch;
+    }
+    /** A call to E2B's API. */
+    async api(method, path, body) {
+        return this.doFetch(`${this.apiUrl}${path}`, {
+            method,
+            headers: { 'x-api-key': this.options.apiKey, ...(body !== undefined ? { 'content-type': 'application/json' } : {}) },
+            ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+        });
+    }
+    async create(options) {
+        const network = options.network ?? this.options.network ?? 'none';
+        const metadata = { 'agentenkit.threadId': options.metadata.threadId };
+        if (options.metadata.runId)
+            metadata['agentenkit.runId'] = options.metadata.runId;
+        const res = await this.api('POST', '/v2/sandboxes', {
+            templateID: options.template ?? this.options.template ?? 'base',
+            timeout: seconds(options.timeoutMs),
+            metadata,
+            ...(options.envs ? { envVars: options.envs } : {}),
+            ...(typeof network === 'object'
+                ? { allow_internet_access: true, network: { allowOut: network.allow, denyOut: ['0.0.0.0/0'] } }
+                : { allow_internet_access: network === 'all' }),
+            ...(options.extra ?? {}),
+        });
+        if (!res.ok)
+            throw new Error(`e2b: could not start a sandbox: ${res.status} ${(await res.text()).slice(0, 300)}`);
+        return this.box((await res.json()));
+    }
+    async connect(sandboxId) {
+        const res = await this.api('POST', `/v2/sandboxes/${encodeURIComponent(sandboxId)}/connect`, {});
+        if (res.status === 404 || res.status === 410)
+            throw new SandboxGoneError(sandboxId);
+        if (!res.ok)
+            throw new Error(`e2b: could not reach sandbox ${sandboxId}: ${res.status} ${(await res.text()).slice(0, 300)}`);
+        return this.box((await res.json()));
+    }
+    box(c) {
+        const envdUrl = this.options.sandboxUrl ?? `https://${ENVD_PORT}-${c.sandboxID}.${c.domain || this.domain}`;
+        return new E2BBox(this, c.sandboxID, c.domain || this.domain, envdUrl, c.envdAccessToken ?? undefined);
+    }
+}
+class E2BBox {
+    e2b;
+    sandboxId;
+    domain;
+    envdUrl;
+    accessToken;
+    provider = 'e2b';
+    filesystem;
+    constructor(e2b, sandboxId, domain, envdUrl, accessToken) {
+        this.e2b = e2b;
+        this.sandboxId = sandboxId;
+        this.domain = domain;
+        this.envdUrl = envdUrl;
+        this.accessToken = accessToken;
+        this.filesystem = new E2BFiles(this);
+    }
+    headers(extra = {}) {
+        return {
+            'e2b-sandbox-id': this.sandboxId,
+            'e2b-sandbox-port': String(ENVD_PORT),
+            ...(this.accessToken ? { 'x-access-token': this.accessToken } : {}),
+            ...extra,
+        };
+    }
+    /** A call to the sandbox's own daemon (envd). */
+    async envd(path, init = {}) {
+        const res = await this.e2b.doFetch(`${this.envdUrl}${path}`, { ...init, headers: this.headers(init.headers) });
+        // E2B's proxy answers 502 for a sandbox that is not running any more.
+        if (res.status === 502)
+            throw new SandboxGoneError(this.sandboxId);
+        return res;
+    }
+    /** A unary Connect call to envd, in JSON. */
+    async rpc(method, body) {
+        const res = await this.envd(`/${method}`, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json', 'connect-protocol-version': '1' },
+            body: JSON.stringify(body),
+        });
+        const data = (await res.json().catch(() => ({})));
+        if (res.ok)
+            return { ok: true, data };
+        return { ok: false, code: String(data?.code ?? res.status), message: String(data?.message ?? '') };
+    }
+    path(p) {
+        return resolveIn(WORKDIR, p);
+    }
+    async runCommand(command, options = {}) {
+        const limit = options.timeoutMs ?? DEFAULT_COMMAND_TIMEOUT_MS;
+        const cmd = options.background ? backgroundCommand(command) : command;
+        // `timeout` inside the sandbox stops the command and what it started;
+        // the timer here is the backstop, and kills it through envd.
+        const [file, ...args] = runArgv(cmd, options.background ? undefined : timeoutSeconds(limit), true);
+        const started = Date.now();
+        const out = new OutputCollector(options.background ? undefined : options.onStdout);
+        const err = new OutputCollector(options.background ? undefined : options.onStderr);
+        const request = new AbortController();
+        let pid;
+        let timedOut = false;
+        const stop = async () => {
+            if (pid !== undefined) {
+                await this.rpc('process.Process/SendSignal', { process: { pid }, signal: 'SIGNAL_SIGKILL' }).catch(() => undefined);
+            }
+            request.abort();
+        };
+        const timer = setTimeout(() => {
+            timedOut = true;
+            void stop();
+        }, limit + 1_000);
+        const onAbort = () => void stop();
+        if (options.signal?.aborted) {
+            clearTimeout(timer);
+            throw options.signal.reason;
+        }
+        options.signal?.addEventListener('abort', onAbort, { once: true });
+        let exitCode = -1;
+        try {
+            const res = await this.envd('/process.Process/Start', {
+                method: 'POST',
+                headers: {
+                    'content-type': 'application/connect+json',
+                    'connect-protocol-version': '1',
+                    'keepalive-ping-interval': '50',
+                },
+                body: envelope({
+                    process: { cmd: file, args, cwd: this.path(options.cwd ?? '.'), envs: options.env ?? {} },
+                    stdin: false,
+                }),
+                signal: request.signal,
+            });
+            if (!res.ok) {
+                const text = await res.text();
+                if (res.status === 404)
+                    throw new SandboxGoneError(this.sandboxId);
+                throw new Error(`e2b: could not run the command: ${res.status} ${text.slice(0, 300)}`);
+            }
+            for await (const frame of frames(res.body)) {
+                if (frame.end) {
+                    const e = frame.message?.error;
+                    if (e) {
+                        if (e.code === 'not_found' || e.code === 'unavailable')
+                            throw new SandboxGoneError(this.sandboxId, e.message);
+                        throw new Error(`e2b: ${e.code}: ${e.message}`);
+                    }
+                    break;
+                }
+                const event = frame.message?.event ?? {};
+                if (event.start)
+                    pid = event.start.pid;
+                if (event.data?.stdout)
+                    out.push(base64Bytes(event.data.stdout));
+                if (event.data?.stderr)
+                    err.push(base64Bytes(event.data.stderr));
+                if (event.end)
+                    exitCode = event.end.exitCode ?? 0;
+            }
+        }
+        catch (e) {
+            if (!request.signal.aborted)
+                throw e;
+            if (!timedOut)
+                throw options.signal?.reason ?? e;
+        }
+        finally {
+            clearTimeout(timer);
+            options.signal?.removeEventListener('abort', onAbort);
+        }
+        const durationMs = Date.now() - started;
+        if (options.background)
+            return { stdout: '', stderr: '', exitCode, durationMs };
+        timedOut ||= looksTimedOut(exitCode, durationMs, limit);
+        return {
+            stdout: out.end(),
+            stderr: err.end(),
+            exitCode: timedOut ? TIMED_OUT_EXIT_CODE : exitCode,
+            durationMs,
+            ...(timedOut ? { timedOut: true } : {}),
+            ...(out.truncated || err.truncated ? { truncated: true } : {}),
+        };
+    }
+    async getUrl(options) {
+        return `${options.protocol ?? 'https'}://${options.port}-${this.sandboxId}.${this.domain}`;
+    }
+    async getInfo() {
+        const res = await this.e2b.api('GET', `/sandboxes/${encodeURIComponent(this.sandboxId)}`);
+        if (res.status === 404)
+            throw new SandboxGoneError(this.sandboxId);
+        if (!res.ok)
+            throw new Error(`e2b: ${res.status} ${(await res.text()).slice(0, 300)}`);
+        const d = (await res.json());
+        const metadata = {};
+        for (const [k, v] of Object.entries(d.metadata ?? {})) {
+            if (k.startsWith('agentenkit.'))
+                metadata[k.slice('agentenkit.'.length)] = v;
+        }
+        return {
+            id: this.sandboxId,
+            provider: 'e2b',
+            status: !d.state || d.state === 'running' ? 'running' : 'stopped',
+            createdAt: new Date(d.startedAt),
+            ...(d.endAt ? { expiresAt: new Date(d.endAt) } : {}),
+            workdir: WORKDIR,
+            metadata,
+        };
+    }
+    async setTimeout(timeoutMs) {
+        const res = await this.e2b.api('POST', `/sandboxes/${encodeURIComponent(this.sandboxId)}/timeout`, {
+            timeout: seconds(timeoutMs),
+        });
+        if (res.status === 404)
+            throw new SandboxGoneError(this.sandboxId);
+        if (!res.ok)
+            throw new Error(`e2b: could not set the sandbox's time: ${res.status} ${(await res.text()).slice(0, 300)}`);
+    }
+    async destroy() {
+        const res = await this.e2b.api('DELETE', `/sandboxes/${encodeURIComponent(this.sandboxId)}`);
+        if (!res.ok && res.status !== 404)
+            throw new Error(`e2b: could not end ${this.sandboxId}: ${res.status}`);
+    }
+}
+class E2BFiles {
+    box;
+    constructor(box) {
+        this.box = box;
+    }
+    async readFile(path) {
+        return new TextDecoder().decode(await this.readFileBytes(path));
+    }
+    async readFileBytes(path) {
+        const res = await this.box.envd(`/files?${new URLSearchParams({ path: this.box.path(path) })}`);
+        if (res.status === 404)
+            throw new SandboxFileNotFoundError(path);
+        if (!res.ok)
+            throw new Error(`e2b: could not read ${path}: ${res.status} ${(await res.text()).slice(0, 300)}`);
+        return new Uint8Array(await res.arrayBuffer());
+    }
+    async writeFile(path, content) {
+        const full = this.box.path(path);
+        const form = new FormData();
+        // A copy, so its buffer is a plain ArrayBuffer as Blob wants.
+        form.append('file', new Blob([toBytes(content).slice()]), full);
+        const res = await this.box.envd(`/files?${new URLSearchParams({ path: full })}`, { method: 'POST', body: form });
+        if (!res.ok)
+            throw new Error(`e2b: could not write ${path}: ${res.status} ${(await res.text()).slice(0, 300)}`);
+    }
+    async readdir(path) {
+        const r = await this.box.rpc('filesystem.Filesystem/ListDir', { path: this.box.path(path), depth: 1 });
+        if (!r.ok) {
+            if (r.code === 'not_found' || r.code === 'invalid_argument')
+                throw new SandboxFileNotFoundError(path);
+            throw new Error(`e2b: could not list ${path}: ${r.code} ${r.message}`);
+        }
+        const entries = [];
+        for (const e of (r.data.entries ?? [])) {
+            entries.push(e.type === 'FILE_TYPE_DIRECTORY'
+                ? { name: e.name, type: 'directory' }
+                : { name: e.name, type: 'file', size: Number(e.size ?? 0) });
+        }
+        return sortEntries(entries);
+    }
+    async mkdir(path) {
+        const r = await this.box.rpc('filesystem.Filesystem/MakeDir', { path: this.box.path(path) });
+        if (!r.ok && r.code !== 'already_exists')
+            throw new Error(`e2b: could not make ${path}: ${r.code} ${r.message}`);
+    }
+    async exists(path) {
+        const r = await this.box.rpc('filesystem.Filesystem/Stat', { path: this.box.path(path) });
+        if (r.ok)
+            return true;
+        if (r.code === 'not_found')
+            return false;
+        throw new Error(`e2b: could not check ${path}: ${r.code} ${r.message}`);
+    }
+    async remove(path) {
+        const r = await this.box.rpc('filesystem.Filesystem/Remove', { path: this.box.path(path) });
+        if (!r.ok && r.code !== 'not_found')
+            throw new Error(`e2b: could not remove ${path}: ${r.code} ${r.message}`);
+    }
+}
+/** E2B takes whole seconds. */
+function seconds(ms) {
+    return Math.max(1, Math.ceil(ms / 1000));
+}
+function base64Bytes(s) {
+    return Uint8Array.from(Buffer.from(s, 'base64'));
+}
+/** One Connect streaming message: a flags byte, a 4-byte length, the JSON. */
+export function envelope(message, flags = 0) {
+    const json = new TextEncoder().encode(JSON.stringify(message));
+    const out = new Uint8Array(5 + json.length);
+    out[0] = flags;
+    new DataView(out.buffer).setUint32(1, json.length);
+    out.set(json, 5);
+    return out;
+}
+/** The messages of a Connect stream. The last has `end: true` and says
+ *  whether the call failed. */
+export async function* frames(body) {
+    let buf = new Uint8Array(0);
+    const reader = body.getReader();
+    try {
+        for (;;) {
+            while (buf.length >= 5) {
+                const size = new DataView(buf.buffer, buf.byteOffset).getUint32(1);
+                if (buf.length < 5 + size)
+                    break;
+                const flags = buf[0];
+                const payload = buf.subarray(5, 5 + size);
+                buf = buf.slice(5 + size);
+                const message = payload.length ? JSON.parse(new TextDecoder().decode(payload)) : {};
+                yield { end: (flags & 0x02) !== 0, message };
+            }
+            const { value, done } = await reader.read();
+            if (done)
+                return;
+            const next = new Uint8Array(buf.length + value.length);
+            next.set(buf);
+            next.set(value, buf.length);
+            buf = next;
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+//# sourceMappingURL=e2b.js.map