effect-cf 0.48.0 → 0.50.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # effect-cf
 
+## 0.50.0
+
+### Minor Changes
+
+- [#197](https://github.com/danieljvdm/effect-cf/pull/197) [`e174201`](https://github.com/danieljvdm/effect-cf/commit/e174201015b89202988c1bac5a3b25f1bfa6f5d0) Thanks [@danieljvdm](https://github.com/danieljvdm)! - Add `DurableObjectContainer` for direct Effect access to `ctx.container`, including runtime image and instance selection, native process execution with scoped cleanup and output streams, filesystem snapshots, HTTP readiness, TCP/HTTP ports with preview proxying, outbound interception, and idle timeouts. Timeout and polling options accept Effect duration inputs. Supply its layer to `DurableObject.make`, or wrap a native container with `fromContainer`.
+
+  Add `ContainerFiles.fromFiles` for Effect file operations and streams backed by Sandbox SDK 1.x `Files` and its matching `sandbox-shim`. File and native container failures retain their original causes.
+
+  Update the tested Cloudflare baseline to workerd `1.20260926.1`, Workers types `5.20260926.1`, Miniflare `5.20260926.1-alpha`, and Wrangler `4.144.0`, with compatibility date `2026-09-26`. Consumers using the optional Workers types package should update to the supported range or regenerate their Wrangler runtime types.
+
+  Retain the legacy Container and Sandbox adapters and document migration to the native API. Allow Sandbox SDK 1.x utilities alongside the native adapter; `effect-cf/sandbox` continues to require the legacy SDK 0.13 API.
+
+## 0.49.0
+
+### Minor Changes
+
+- [#194](https://github.com/danieljvdm/effect-cf/pull/194) [`adf4e33`](https://github.com/danieljvdm/effect-cf/commit/adf4e339aaaef21ef2abb87595c07406a3e64ac3) Thanks [@danieljvdm](https://github.com/danieljvdm)! - Reacquire sandbox RPC clients after a failed native channel. Retained sandbox instances now use a fresh channel for subsequent operations while preserving invocation-local channel reuse. Failed operations are still returned to the caller without automatic replay.
+
+  `SandboxInstanceClient.rawUnsafe` now includes `SandboxOperationError` because acquiring a fresh native client can fail.
+
 ## 0.48.0
 
 ### Minor Changes

package/README.md

@@ -6,12 +6,14 @@ Cloudflare entrypoints and bindings as Effect services.
 npm install effect-cf "effect@^4.0.0-rc.115"
 ```
 
-The repository tests against workerd `1.20260825.1` and `@cloudflare/workers-types@5.20260825.1`. Use `compatibility_date: "2026-08-25"` in Wrangler.
+The repository tests against workerd `1.20260926.1` and `@cloudflare/workers-types@5.20260926.1`. Use `compatibility_date: "2026-09-26"` in Wrangler.
 
 See the [runtime performance guide](https://github.com/danieljvdm/effect-cf/blob/main/docs/runtime-performance.md) for measured alarm batching and telemetry configuration guidance.
 
 For typed WebSocket RPC clients whose connection lifetime is owned by an Effect layer, see the [WebSocket RPC guide](https://github.com/danieljvdm/effect-cf/blob/main/docs/websocket-rpc.md).
 
+`DurableObjectContainer.layer` adds native `ctx.container` control to `DurableObject.make`: runtime image selection, command execution, filesystem snapshots, networking, and idle timeouts. See the [container guide](https://github.com/danieljvdm/effect-cf/blob/main/docs/containers.md) for setup and migration from the legacy Container and Sandbox classes.
+
 ## Worker
 
 ```ts
@@ -108,7 +110,7 @@ Enable tracing in `wrangler.jsonc`:
 
 ```jsonc
 {
-  "compatibility_date": "2026-08-25",
+  "compatibility_date": "2026-09-26",
   "observability": {
     "traces": { "enabled": true },
   },

package/dist/ContainerFiles.d.mts

@@ -0,0 +1,66 @@
+import { ContainerError } from "./DurableObjectContainer.mjs";
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+declare namespace ContainerFiles_d_exports {
+  export { ContainerFiles, DirectoryEntry, FileContent, FileOperationOptions, FileStat, FileType, FilesResource, MkdirOptions, RemoveOptions, fromFiles };
+}
+type FileContent = string | ArrayBuffer | ArrayBufferView | Blob | ReadableStream<Uint8Array>;
+type FileType = "file" | "directory" | "symlink" | "blockDevice" | "characterDevice" | "fifo" | "socket";
+interface FileOperationOptions {
+  readonly cwd?: string;
+  readonly user?: string;
+}
+interface MkdirOptions extends FileOperationOptions {
+  readonly recursive?: boolean;
+}
+interface RemoveOptions extends FileOperationOptions {
+  readonly recursive?: boolean;
+  readonly force?: boolean;
+}
+interface FileStat {
+  readonly type: FileType;
+  readonly size: bigint;
+  readonly mode: number;
+  readonly uid: number;
+  readonly gid: number;
+  readonly accessedAt: Date;
+  readonly modifiedAt: Date;
+  readonly changedAt: Date;
+}
+interface DirectoryEntry {
+  readonly name: string;
+  readonly type: FileType;
+}
+type WithSignal<A> = A & {
+  readonly signal?: AbortSignal;
+};
+/** Structural contract of Sandbox SDK 1.x `Files`, without loading an SDK version. */
+interface FilesResource {
+  readFile(path: string, options?: WithSignal<FileOperationOptions>): Promise<Response>;
+  writeFile(path: string, content: FileContent, options?: WithSignal<FileOperationOptions>): Promise<void>;
+  stat(path: string, options?: WithSignal<FileOperationOptions>): Promise<FileStat>;
+  lstat(path: string, options?: WithSignal<FileOperationOptions>): Promise<FileStat>;
+  readDirectory(path: string, options?: WithSignal<FileOperationOptions>): Promise<ReadonlyArray<DirectoryEntry>>;
+  mkdir(path: string, options?: WithSignal<MkdirOptions>): Promise<void>;
+  rename(source: string, destination: string, options?: WithSignal<FileOperationOptions>): Promise<void>;
+  remove(path: string, options?: WithSignal<RemoveOptions>): Promise<void>;
+}
+interface ContainerFiles {
+  readonly raw: FilesResource;
+  /** The caller consumes or cancels the response body. Late failures retain native SDK errors. */
+  readonly readFile: (path: string, options?: FileOperationOptions) => Effect.Effect<Response, ContainerError>;
+  /** Includes failures that arrive while reading the response body. */
+  readonly readFileStream: (path: string, options?: FileOperationOptions) => Stream.Stream<Uint8Array, ContainerError>;
+  readonly readFileString: (path: string, options?: FileOperationOptions) => Effect.Effect<string, ContainerError>;
+  readonly writeFile: (path: string, content: FileContent, options?: FileOperationOptions) => Effect.Effect<void, ContainerError>;
+  readonly stat: (path: string, options?: FileOperationOptions) => Effect.Effect<FileStat, ContainerError>;
+  readonly lstat: (path: string, options?: FileOperationOptions) => Effect.Effect<FileStat, ContainerError>;
+  readonly readDirectory: (path: string, options?: FileOperationOptions) => Effect.Effect<ReadonlyArray<DirectoryEntry>, ContainerError>;
+  readonly mkdir: (path: string, options?: MkdirOptions) => Effect.Effect<void, ContainerError>;
+  readonly rename: (source: string, destination: string, options?: FileOperationOptions) => Effect.Effect<void, ContainerError>;
+  readonly remove: (path: string, options?: RemoveOptions) => Effect.Effect<void, ContainerError>;
+}
+/** Pass `new Files(container.raw)` from SDK 1.x. The image must supply its matching sandbox-shim. */
+declare const fromFiles: (files: FilesResource) => ContainerFiles;
+//#endregion
+export { ContainerFiles, ContainerFiles_d_exports, DirectoryEntry, FileContent, FileOperationOptions, FileStat, FileType, FilesResource, MkdirOptions, RemoveOptions, fromFiles };

package/dist/ContainerFiles.mjs

@@ -0,0 +1,66 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
+import { ContainerError } from "./DurableObjectContainer.mjs";
+import * as Effect from "effect/Effect";
+import * as Stream from "effect/Stream";
+//#region src/ContainerFiles.ts
+var ContainerFiles_exports = /* @__PURE__ */ __exportAll({ fromFiles: () => fromFiles });
+const attempt = (operation, evaluate) => Effect.tryPromise({
+	try: evaluate,
+	catch: (cause) => new ContainerError({
+		operation: `files.${operation}`,
+		cause
+	})
+});
+/** Pass `new Files(container.raw)` from SDK 1.x. The image must supply its matching sandbox-shim. */
+const fromFiles = (files) => {
+	const readFile = (path, options) => attempt("readFile", (signal) => files.readFile(path, {
+		...options,
+		signal
+	}));
+	const readFileStream = (path, options) => Stream.unwrap(Effect.map(readFile(path, options), (response) => {
+		const body = response.body;
+		return body === null ? Stream.empty : Stream.fromReadableStream({
+			evaluate: () => body,
+			onError: (cause) => new ContainerError({
+				operation: "files.readFile",
+				cause
+			})
+		});
+	}));
+	return {
+		raw: files,
+		readFile,
+		readFileStream,
+		readFileString: (path, options) => readFileStream(path, options).pipe(Stream.decodeText(), Stream.mkString),
+		writeFile: (path, content, options) => attempt("writeFile", (signal) => files.writeFile(path, content, {
+			...options,
+			signal
+		})),
+		stat: (path, options) => attempt("stat", (signal) => files.stat(path, {
+			...options,
+			signal
+		})),
+		lstat: (path, options) => attempt("lstat", (signal) => files.lstat(path, {
+			...options,
+			signal
+		})),
+		readDirectory: (path, options) => attempt("readDirectory", (signal) => files.readDirectory(path, {
+			...options,
+			signal
+		})),
+		mkdir: (path, options) => attempt("mkdir", (signal) => files.mkdir(path, {
+			...options,
+			signal
+		})),
+		rename: (source, destination, options) => attempt("rename", (signal) => files.rename(source, destination, {
+			...options,
+			signal
+		})),
+		remove: (path, options) => attempt("remove", (signal) => files.remove(path, {
+			...options,
+			signal
+		}))
+	};
+};
+//#endregion
+export { ContainerFiles_exports, fromFiles };

package/dist/ContainerNamespace.d.mts

@@ -43,10 +43,12 @@ declare const ContainerState: S.Union<readonly [S.Struct<{
 }>]>;
 type ContainerState = typeof ContainerState.Type;
 /**
- * Native Container stub shape exposed by a Container namespace binding.
+ * RPC stub exposed by the legacy `@cloudflare/containers` Container class.
  *
  * This is structural so using Container bindings does not make
  * `@cloudflare/containers` a runtime dependency of effect-cf.
+ * Use `DurableObjectContainer` inside a Durable Object for the native
+ * `ctx.container` API and the `durable_object` scheduling policy.
  */
 interface ContainerStub {
   fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response>;

package/dist/DurableObjectContainer.d.mts

@@ -0,0 +1,133 @@
+import { DurableObjectState } from "./DurableObjectState.mjs";
+import * as Context$1 from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Layer$1 from "effect/Layer";
+import * as Option from "effect/Option";
+import * as Duration from "effect/Duration";
+import * as Stream from "effect/Stream";
+import { Scope } from "effect";
+declare namespace DurableObjectContainer_d_exports {
+  export { ContainerError, ContainerExecOptions, ContainerExecOutput, ContainerExecOutputText, ContainerHttpReadinessOptions, ContainerInfo, ContainerNotConfiguredError, ContainerProcess, ContainerProcessLog, ContainerReadinessTimeoutError, ContainerSnapshot, ContainerSnapshotOptions, ContainerStartOptions, ContainerTcpPort, DurableObjectContainer, DurableObjectContainerService, fromContainer, layer };
+}
+type ContainerStartOptions = globalThis.ContainerStartupOptions;
+type ContainerExecOptions = Omit<globalThis.ContainerExecOptions, "signal">;
+type ContainerInfo = globalThis.ContainerInfo;
+type ContainerSnapshot = globalThis.ContainerSnapshot;
+type ContainerSnapshotOptions = globalThis.ContainerSnapshotOptions;
+type ContainerExecOutput = globalThis.ExecOutput;
+interface ContainerExecOutputText {
+  readonly stdout: string;
+  readonly stderr: string;
+  readonly exitCode: number;
+}
+interface ContainerProcessLog {
+  readonly stream: "stdout" | "stderr";
+  readonly data: Uint8Array;
+}
+interface ContainerHttpReadinessOptions {
+  /** Defaults to 30 seconds. All durations accept numbers in milliseconds. */
+  readonly timeout?: Duration.Input;
+  /** Delay between probes. Defaults to 100 milliseconds. */
+  readonly interval?: Duration.Input;
+  /** Bounds each connection or HTTP probe. Defaults to 1 second. */
+  readonly attemptTimeout?: Duration.Input;
+  readonly path?: string;
+  /** Accepts any HTTP response unless a status range is supplied. */
+  readonly status?: {
+    readonly min: number;
+    readonly max: number;
+  };
+}
+declare const ContainerNotConfiguredError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+  readonly _tag: "ContainerNotConfiguredError";
+} & Readonly<A>;
+declare class ContainerNotConfiguredError extends ContainerNotConfiguredError_base<{
+  readonly durableObjectId: string;
+}> {
+  get message(): string;
+}
+declare const ContainerError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+  readonly _tag: "ContainerError";
+} & Readonly<A>;
+declare class ContainerError extends ContainerError_base<{
+  readonly operation: string;
+  readonly cause: unknown;
+}> {
+  get message(): string;
+}
+declare const ContainerReadinessTimeoutError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+  readonly _tag: "ContainerReadinessTimeoutError";
+} & Readonly<A>;
+declare class ContainerReadinessTimeoutError extends ContainerReadinessTimeoutError_base<{
+  readonly port: number;
+  readonly timeout: Duration.Duration;
+  /** The last completed probe failure, when available. */
+  readonly cause: unknown;
+}> {
+  get message(): string;
+}
+/** A native process handle owned by its creating request. Choose one output consumer. */
+interface ContainerProcess {
+  readonly raw: globalThis.ExecProcess;
+  readonly pid: number;
+  readonly isPty: boolean;
+  readonly stdin: globalThis.ExecProcess["stdin"];
+  /** Empty when the corresponding native stream is absent. */
+  readonly stdout: Stream.Stream<Uint8Array, ContainerError>;
+  readonly stderr: Stream.Stream<Uint8Array, ContainerError>;
+  /** Drains both channels concurrently. Single-use, without buffering or replay. */
+  readonly logs: Stream.Stream<ContainerProcessLog, ContainerError>;
+  /** Nonzero exit codes are values, not Effect failures. */
+  readonly exitCode: Effect.Effect<number, ContainerError>;
+  readonly output: Effect.Effect<ContainerExecOutput, ContainerError>;
+  readonly outputText: Effect.Effect<ContainerExecOutputText, ContainerError>;
+  /** Signals the main process only; does nothing after its exit has been observed. */
+  readonly kill: (signal?: number) => Effect.Effect<void, ContainerError>;
+  readonly resize: (cols: number, rows: number) => Effect.Effect<void, ContainerError>;
+}
+interface ContainerTcpPort {
+  readonly raw: globalThis.Fetcher;
+  readonly fetch: (input: RequestInfo | URL, init?: RequestInit) => Effect.Effect<Response, ContainerError>;
+  /** Forwards an authorized preview request once, using the container's HTTP transport. */
+  readonly proxy: (request: Request) => Effect.Effect<Response, ContainerError>;
+  /** The caller owns the returned socket and must close it. */
+  readonly connect: (...args: Parameters<globalThis.Fetcher["connect"]>) => Effect.Effect<ReturnType<globalThis.Fetcher["connect"]>, ContainerError>;
+}
+/** Direct container control inside a Durable Object; lifecycle policy belongs to the application. */
+interface DurableObjectContainerService {
+  readonly raw: globalThis.Container;
+  readonly running: Effect.Effect<boolean, ContainerError>;
+  readonly images: Effect.Effect<Readonly<Record<string, string>>, ContainerError>;
+  readonly inspect: Effect.Effect<Option.Option<ContainerInfo>, ContainerError>;
+  /** Validates options and initiates startup. It does not wait for readiness. */
+  readonly start: (options?: ContainerStartOptions) => Effect.Effect<void, ContainerError>;
+  /** Waits for the container to stop; failures retain the native cause, including its exitCode. */
+  readonly monitor: Effect.Effect<void, ContainerError>;
+  readonly destroy: (reason?: Parameters<globalThis.Container["destroy"]>[0]) => Effect.Effect<void, ContainerError>;
+  readonly signal: (signal: number) => Effect.Effect<void, ContainerError>;
+  /** Effect duration input: numbers are milliseconds; bigints are nanoseconds. */
+  readonly setInactivityTimeout: (duration: Duration.Input) => Effect.Effect<void, ContainerError>;
+  readonly getTcpPort: (port: number) => Effect.Effect<ContainerTcpPort, ContainerError>;
+  /** Sends HTTP GET probes to an already-started container. Never retries a caller's request. */
+  readonly waitForHttp: (port: number, options?: ContainerHttpReadinessOptions) => Effect.Effect<void, ContainerError | ContainerReadinessTimeoutError>;
+  /**
+   * Runs an executable with arguments, without a shell or automatic container startup.
+   * Interruption cancels acquisition. After acquisition, the caller owns the process.
+   * To observe it from later requests, redirect output to files and ignore the native pipes.
+   */
+  readonly exec: (command: ReadonlyArray<string>, options?: ContainerExecOptions) => Effect.Effect<ContainerProcess, ContainerError>;
+  /** Sends SIGKILL to a still-running main process when the scope closes. */
+  readonly execScoped: (command: ReadonlyArray<string>, options?: ContainerExecOptions) => Effect.Effect<ContainerProcess, ContainerError, Scope.Scope>;
+  readonly snapshotContainer: (options?: ContainerSnapshotOptions) => Effect.Effect<ContainerSnapshot, ContainerError>;
+  readonly interceptOutboundHttp: (address: string, binding: globalThis.Fetcher) => Effect.Effect<void, ContainerError>;
+  readonly interceptAllOutboundHttp: (binding: globalThis.Fetcher) => Effect.Effect<void, ContainerError>;
+  readonly interceptOutboundHttps: (address: string, binding: globalThis.Fetcher) => Effect.Effect<void, ContainerError>;
+}
+declare const DurableObjectContainer_base: Context$1.ServiceClass<DurableObjectContainer, "effect-cf/DurableObjectContainer", DurableObjectContainerService>;
+declare class DurableObjectContainer extends DurableObjectContainer_base {}
+/** Wraps `ctx.container` without starting it or taking ownership of its lifecycle. */
+declare const fromContainer: (container: globalThis.Container) => DurableObjectContainerService;
+/** Supplies the container attached to the current Durable Object, without owning it. */
+declare const layer: Layer$1.Layer<DurableObjectContainer, ContainerNotConfiguredError, DurableObjectState>;
+//#endregion
+export { ContainerError, ContainerExecOptions, ContainerExecOutput, ContainerExecOutputText, ContainerHttpReadinessOptions, ContainerInfo, ContainerNotConfiguredError, ContainerProcess, ContainerProcessLog, ContainerReadinessTimeoutError, ContainerSnapshot, ContainerSnapshotOptions, ContainerStartOptions, ContainerTcpPort, DurableObjectContainer, DurableObjectContainerService, DurableObjectContainer_d_exports, fromContainer, layer };

package/dist/DurableObjectContainer.mjs

@@ -0,0 +1,179 @@
+import { __exportAll } from "./_virtual/_rolldown/runtime.mjs";
+import { causeMessage } from "./internal/ErrorMessage.mjs";
+import { DurableObjectState } from "./DurableObjectState.mjs";
+import * as Context from "effect/Context";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Option from "effect/Option";
+import * as Duration from "effect/Duration";
+import * as Stream from "effect/Stream";
+//#region src/DurableObjectContainer.ts
+var DurableObjectContainer_exports = /* @__PURE__ */ __exportAll({
+	ContainerError: () => ContainerError,
+	ContainerNotConfiguredError: () => ContainerNotConfiguredError,
+	ContainerReadinessTimeoutError: () => ContainerReadinessTimeoutError,
+	DurableObjectContainer: () => DurableObjectContainer,
+	fromContainer: () => fromContainer,
+	layer: () => layer
+});
+var ContainerNotConfiguredError = class extends Data.TaggedError("ContainerNotConfiguredError") {
+	get message() {
+		return `No container is configured for Durable Object "${this.durableObjectId}"`;
+	}
+};
+var ContainerError = class extends Data.TaggedError("ContainerError") {
+	get message() {
+		return `Durable Object container ${this.operation} failed: ${causeMessage(this.cause)}`;
+	}
+};
+var ContainerReadinessTimeoutError = class extends Data.TaggedError("ContainerReadinessTimeoutError") {
+	get message() {
+		return `Container port ${this.port} was not ready within ${Duration.toMillis(this.timeout)}ms`;
+	}
+};
+var DurableObjectContainer = class extends Context.Service()("effect-cf/DurableObjectContainer") {};
+const attempt = (operation, evaluate) => Effect.try({
+	try: evaluate,
+	catch: (cause) => new ContainerError({
+		operation,
+		cause
+	})
+});
+const attemptPromise = (operation, evaluate) => Effect.tryPromise({
+	try: evaluate,
+	catch: (cause) => new ContainerError({
+		operation,
+		cause
+	})
+});
+const processStream = (stream, operation) => stream === null || stream === void 0 ? Stream.empty : Stream.fromReadableStream({
+	evaluate: () => stream,
+	onError: (cause) => new ContainerError({
+		operation,
+		cause
+	})
+});
+const fromProcess = (process) => {
+	let exited = false;
+	const onExit = () => {
+		exited = true;
+	};
+	process.exitCode.then(onExit, onExit);
+	const stdout = processStream(process.stdout, "exec.stdout");
+	const stderr = processStream(process.stderr, "exec.stderr");
+	const output = attemptPromise("exec.output", () => process.output());
+	return {
+		raw: process,
+		pid: process.pid,
+		isPty: process.isPty,
+		stdin: process.stdin ?? null,
+		stdout,
+		stderr,
+		logs: Stream.merge(Stream.map(stdout, (data) => ({
+			stream: "stdout",
+			data
+		})), Stream.map(stderr, (data) => ({
+			stream: "stderr",
+			data
+		}))),
+		exitCode: attemptPromise("exec.exitCode", () => process.exitCode),
+		output,
+		outputText: Effect.map(output, (result) => ({
+			stdout: new TextDecoder().decode(result.stdout),
+			stderr: new TextDecoder().decode(result.stderr),
+			exitCode: result.exitCode
+		})),
+		kill: (signal) => attemptPromise("exec.kill", async () => {
+			await Promise.resolve();
+			if (!exited) process.kill(signal);
+		}),
+		resize: (cols, rows) => attempt("exec.resize", () => process.resize(cols, rows))
+	};
+};
+const fromTcpPort = (port) => {
+	const fetch = (input, init) => attemptPromise("getTcpPort.fetch", (signal) => {
+		const callerSignal = init?.signal !== void 0 ? init.signal : input instanceof Request ? input.signal : void 0;
+		return port.fetch(input, {
+			...init,
+			signal: callerSignal === null || callerSignal === void 0 ? signal : AbortSignal.any([callerSignal, signal])
+		});
+	});
+	return {
+		raw: port,
+		fetch,
+		proxy: (request) => attempt("getTcpPort.proxy", () => {
+			const url = new URL(request.url);
+			url.protocol = "http:";
+			return new Request(url, request);
+		}).pipe(Effect.flatMap((forwarded) => fetch(forwarded))),
+		connect: (...args) => attempt("getTcpPort.connect", () => port.connect(...args))
+	};
+};
+/** Wraps `ctx.container` without starting it or taking ownership of its lifecycle. */
+const fromContainer = (container) => {
+	const exec = (command, options) => attemptPromise("exec", (signal) => container.exec([...command], {
+		...options,
+		signal
+	})).pipe(Effect.map(fromProcess));
+	const waitForHttp = Effect.fnUntraced(function* (portNumber, options = {}) {
+		const timeout = yield* attempt("waitForHttp", () => Duration.fromInputUnsafe(options.timeout ?? "30 seconds"));
+		let lastFailure;
+		const probe = attemptPromise("waitForHttp", async (signal) => {
+			const response = await container.getTcpPort(portNumber).fetch(new URL(options.path ?? "/", "http://container"), { signal });
+			await response.body?.cancel();
+			if (options.status !== void 0 && (response.status < options.status.min || response.status > options.status.max)) throw new Error(`HTTP readiness probe returned status ${response.status}`);
+		});
+		return yield* Effect.gen(function* () {
+			while (true) {
+				if (!(yield* attempt("running", () => container.running))) return yield* new ContainerError({
+					operation: "waitForHttp",
+					cause: /* @__PURE__ */ new Error("Container stopped before the port became ready")
+				});
+				if (yield* probe.pipe(Effect.timeout(options.attemptTimeout ?? "1 second"), Effect.match({
+					onSuccess: () => true,
+					onFailure: (error) => {
+						lastFailure = error;
+						return false;
+					}
+				}))) return;
+				yield* Effect.sleep(options.interval ?? "100 millis");
+			}
+		}).pipe(Effect.timeoutOrElse({
+			duration: timeout,
+			orElse: () => Effect.fail(new ContainerReadinessTimeoutError({
+				port: portNumber,
+				timeout,
+				cause: lastFailure
+			}))
+		}));
+	});
+	return {
+		raw: container,
+		running: attempt("running", () => container.running),
+		images: attempt("images", () => container.images),
+		inspect: attemptPromise("inspect", () => container.inspect()).pipe(Effect.map(Option.fromNullishOr)),
+		start: (options) => attempt("start", () => container.start(options)),
+		monitor: attemptPromise("monitor", () => container.monitor()),
+		destroy: (reason) => attemptPromise("destroy", () => container.destroy(reason)),
+		signal: (signal) => attempt("signal", () => container.signal(signal)),
+		setInactivityTimeout: (duration) => attemptPromise("setInactivityTimeout", () => container.setInactivityTimeout(Duration.toMillis(duration))),
+		getTcpPort: (port) => attempt("getTcpPort", () => fromTcpPort(container.getTcpPort(port))),
+		waitForHttp,
+		exec,
+		execScoped: (command, options) => Effect.acquireRelease(exec(command, options), (process) => process.kill(9).pipe(Effect.orDie), { interruptible: true }),
+		snapshotContainer: (options = {}) => attemptPromise("snapshotContainer", () => container.snapshotContainer(options)),
+		interceptOutboundHttp: (address, binding) => attemptPromise("interceptOutboundHttp", () => container.interceptOutboundHttp(address, binding)),
+		interceptAllOutboundHttp: (binding) => attemptPromise("interceptAllOutboundHttp", () => container.interceptAllOutboundHttp(binding)),
+		interceptOutboundHttps: (address, binding) => attemptPromise("interceptOutboundHttps", () => container.interceptOutboundHttps(address, binding))
+	};
+};
+/** Supplies the container attached to the current Durable Object, without owning it. */
+const layer = Layer.effect(DurableObjectContainer, Effect.gen(function* () {
+	const state = yield* DurableObjectState;
+	const container = state.raw.container;
+	if (container === void 0) return yield* new ContainerNotConfiguredError({ durableObjectId: state.id.toString() });
+	return fromContainer(container);
+}));
+//#endregion
+export { ContainerError, ContainerNotConfiguredError, ContainerReadinessTimeoutError, DurableObjectContainer, DurableObjectContainer_exports, fromContainer, layer };

package/dist/Sandbox.d.mts

@@ -115,7 +115,7 @@ interface SandboxTunnelsClient {
   readonly destroy: (portOrInfo: number | TunnelInfo$1) => Effect.Effect<void, SandboxOperationError>;
 }
 interface SandboxInstanceClient {
-  readonly rawUnsafe: Effect.Effect<SandboxClientResource>;
+  readonly rawUnsafe: Effect.Effect<SandboxClientResource, SandboxOperationError>;
   readonly exec: (command: SandboxCommand$1, options?: ExecOptions$1) => Effect.Effect<SandboxProcessHandle, SandboxOperationError>;
   readonly getProcess: (id: string) => Effect.Effect<Option.Option<SandboxProcessHandle>, SandboxOperationError>;
   readonly listProcesses: Effect.Effect<Array<ProcessStatus$1>, SandboxOperationError>;