experimental-ash 0.1.0-alpha.1

package/dist/src/runtime/sandboxes/ensure.js

@@ -0,0 +1,288 @@
+import { resolvePackageRoot } from "../../internal/application/package.js";
+import { resolveSandboxCacheDirectory } from "../../internal/application/paths.js";
+import { getRuntimeCompiledArtifactsAppRoot, } from "../compiled-artifacts-source.js";
+import { createLocalRuntimeSandboxBinding } from "./bindings/local.js";
+import { createVercelRuntimeSandboxBinding } from "./bindings/vercel.js";
+import { createRuntimeSandboxKeys } from "./keys.js";
+import { createRuntimeSandboxToolName } from "./tool-name.js";
+const MAX_RUNTIME_SANDBOX_CACHE_SIZE = 32;
+const runtimeSandboxCache = new Map();
+/**
+ * Internal environment override used to force a runtime sandbox backend.
+ */
+export const ASH_SANDBOX_BACKEND_ENV = "ASH_SANDBOX_BACKEND";
+/**
+ * Creates or reattaches the live runtime sandboxes for one harness turn.
+ */
+export async function ensureRuntimeSandboxes(input) {
+    const registry = input.registry;
+    const observedEvents = [];
+    if (registry === undefined || registry.preparedSandboxes.length === 0) {
+        return createEmptyManagedRuntimeSandboxes();
+    }
+    const emitObservedEvent = async (event) => {
+        observedEvents.push(event);
+        await input.eventSink?.(event);
+    };
+    const initializedSandboxNames = new Set(input.state?.initializedSandboxNames ?? []);
+    const sessionRecordsBySandboxName = new Map((input.state?.sessions ?? []).map((sessionState) => [sessionState.sandboxName, sessionState]));
+    const managedSandboxes = await Promise.all([...registry.sandboxesByName.values()].map(async (registeredSandbox) => {
+        const adapter = resolveRuntimeSandboxAdapterType();
+        const keys = await createRuntimeSandboxKeys({
+            adapter,
+            compiledArtifactsSource: input.compiledArtifactsSource,
+            sandboxName: registeredSandbox.definition.name,
+            sessionId: input.sessionId,
+            sourceId: registeredSandbox.definition.sourceId,
+        });
+        const binding = createRuntimeSandboxBinding(adapter, input.compiledArtifactsSource);
+        const existingRecord = sessionRecordsBySandboxName.get(registeredSandbox.definition.name);
+        const template = await binding.upsertTemplate({
+            bootstrap: registeredSandbox.definition.bootstrap === undefined
+                ? undefined
+                : async (sandbox) => {
+                    await registeredSandbox.definition.bootstrap?.({
+                        sandbox: createLifecycleSandboxSession({
+                            context: "bootstrap",
+                            eventSink: emitObservedEvent,
+                            sandbox,
+                            sandboxName: registeredSandbox.definition.name,
+                        }),
+                    });
+                },
+            templateKey: keys.templateKey,
+        });
+        const managedSandbox = await ensureManagedRuntimeSandbox({
+            binding,
+            definition: registeredSandbox.definition,
+            eventSink: emitObservedEvent,
+            existingRecord,
+            sessionKey: keys.sessionKey,
+            template,
+        });
+        if (!initializedSandboxNames.has(registeredSandbox.definition.name)) {
+            await registeredSandbox.definition.onSession?.({
+                sandbox: createLifecycleSandboxSession({
+                    context: "on-session",
+                    eventSink: emitObservedEvent,
+                    sandbox: managedSandbox.live,
+                    sandboxName: registeredSandbox.definition.name,
+                }),
+            });
+            initializedSandboxNames.add(registeredSandbox.definition.name);
+        }
+        return managedSandbox;
+    }));
+    return {
+        async captureState() {
+            const sessions = await Promise.all(managedSandboxes.map(async (managedSandbox) => await managedSandbox.captureState()));
+            return {
+                initializedSandboxNames: [...initializedSandboxNames].sort((left, right) => left.localeCompare(right)),
+                sessions: sessions.sort((left, right) => left.sandboxName.localeCompare(right.sandboxName)),
+            };
+        },
+        async dispose() {
+            await Promise.all(managedSandboxes.map(async (managedSandbox) => await managedSandbox.dispose()));
+        },
+        readEvents() {
+            return [...observedEvents];
+        },
+        sandboxes: managedSandboxes.map((managedSandbox) => managedSandbox.tool),
+    };
+}
+/**
+ * Clears every cached live runtime sandbox retained in process memory.
+ */
+export function clearRuntimeSandboxCache() {
+    const cachedSandboxes = [...runtimeSandboxCache.values()];
+    runtimeSandboxCache.clear();
+    for (const cachedSandbox of cachedSandboxes) {
+        void disposeManagedSandbox(cachedSandbox);
+    }
+}
+function createEmptyManagedRuntimeSandboxes() {
+    return {
+        async captureState() {
+            return {
+                initializedSandboxNames: [],
+                sessions: [],
+            };
+        },
+        async dispose() { },
+        readEvents() {
+            return [];
+        },
+        sandboxes: [],
+    };
+}
+async function ensureManagedRuntimeSandbox(input) {
+    const cachedSandbox = getCachedRuntimeSandbox(input.sessionKey);
+    if (cachedSandbox !== undefined) {
+        const managedSandbox = await cachedSandbox;
+        await emitRuntimeSandboxEvent(input.eventSink, {
+            adapter: managedSandbox.live.adapter,
+            kind: "restored",
+            sandboxName: input.definition.name,
+        });
+        return managedSandbox;
+    }
+    const sandboxPromise = input.binding
+        .upsertSession({
+        existingMetadata: input.existingRecord?.adapter === input.binding.type
+            ? input.existingRecord.metadata
+            : undefined,
+        sessionKey: input.sessionKey,
+        template: input.template,
+    })
+        .then(async (sessionResult) => {
+        const managedSandbox = await createManagedRuntimeSandbox({
+            definition: input.definition,
+            eventSink: input.eventSink,
+            liveSandbox: sessionResult.liveSandbox,
+        });
+        await emitRuntimeSandboxEvent(input.eventSink, {
+            adapter: sessionResult.liveSandbox.adapter,
+            kind: sessionResult.status,
+            sandboxName: input.definition.name,
+        });
+        return managedSandbox;
+    })
+        .catch((error) => {
+        runtimeSandboxCache.delete(input.sessionKey);
+        throw error;
+    });
+    runtimeSandboxCache.set(input.sessionKey, sandboxPromise);
+    await evictExcessRuntimeSandboxes(input.sessionKey);
+    return await sandboxPromise;
+}
+async function createManagedRuntimeSandbox(input) {
+    return {
+        async captureState() {
+            const metadata = (await input.liveSandbox.captureState?.()) ?? {};
+            return {
+                adapter: input.liveSandbox.adapter,
+                metadata,
+                sandboxName: input.definition.name,
+                sessionKey: input.liveSandbox.sessionKey,
+            };
+        },
+        async dispose() {
+            await input.liveSandbox.dispose?.();
+        },
+        live: input.liveSandbox,
+        tool: {
+            cwd: input.liveSandbox.cwd,
+            description: input.definition.description,
+            name: input.definition.name,
+            sandbox: createObservedRuntimeSandboxTool({
+                eventSink: input.eventSink,
+                sandbox: input.liveSandbox,
+                sandboxName: input.definition.name,
+            }),
+            toolName: createRuntimeSandboxToolName(input.definition.name),
+        },
+    };
+}
+function getCachedRuntimeSandbox(sessionKey) {
+    const cachedSandbox = runtimeSandboxCache.get(sessionKey);
+    if (cachedSandbox === undefined) {
+        return undefined;
+    }
+    runtimeSandboxCache.delete(sessionKey);
+    runtimeSandboxCache.set(sessionKey, cachedSandbox);
+    return cachedSandbox;
+}
+async function evictExcessRuntimeSandboxes(keepSessionKey) {
+    while (runtimeSandboxCache.size > MAX_RUNTIME_SANDBOX_CACHE_SIZE) {
+        const oldestEntry = runtimeSandboxCache.entries().next().value;
+        if (oldestEntry === undefined) {
+            return;
+        }
+        const [sessionKey, sandboxPromise] = oldestEntry;
+        if (sessionKey === keepSessionKey) {
+            return;
+        }
+        runtimeSandboxCache.delete(sessionKey);
+        await disposeManagedSandbox(sandboxPromise);
+    }
+}
+async function disposeManagedSandbox(sandboxPromise) {
+    try {
+        const sandbox = await sandboxPromise;
+        await sandbox.dispose();
+    }
+    catch {
+        // Ignore disposal failures while evicting process-local live sandboxes.
+    }
+}
+function createRuntimeSandboxBinding(adapter, compiledArtifactsSource) {
+    if (adapter === "local") {
+        return createLocalRuntimeSandboxBinding({
+            cacheDirectory: resolveRuntimeSandboxCacheDirectory(compiledArtifactsSource),
+        });
+    }
+    if (adapter === "vercel") {
+        return createVercelRuntimeSandboxBinding();
+    }
+    throw new Error(`Sandbox backend "${adapter}" is not implemented yet.`);
+}
+function createLifecycleSandboxSession(input) {
+    return {
+        async runCommand(command) {
+            await emitRuntimeSandboxCommand({
+                command,
+                context: input.context,
+                eventSink: input.eventSink,
+                sandbox: input.sandbox,
+                sandboxName: input.sandboxName,
+            });
+            return await input.sandbox.executeCommand(command);
+        },
+    };
+}
+function createObservedRuntimeSandboxTool(input) {
+    return {
+        async executeCommand(command) {
+            await emitRuntimeSandboxCommand({
+                command,
+                context: "tool",
+                eventSink: input.eventSink,
+                sandbox: input.sandbox,
+                sandboxName: input.sandboxName,
+            });
+            return await input.sandbox.executeCommand(command);
+        },
+        async readFile(path) {
+            return await input.sandbox.readFile(path);
+        },
+        async writeFiles(files) {
+            await input.sandbox.writeFiles(files);
+        },
+    };
+}
+async function emitRuntimeSandboxCommand(input) {
+    await emitRuntimeSandboxEvent(input.eventSink, {
+        adapter: input.sandbox.adapter,
+        command: input.command,
+        context: input.context,
+        kind: "command",
+        sandboxName: input.sandboxName,
+    });
+}
+async function emitRuntimeSandboxEvent(eventSink, event) {
+    await eventSink?.(event);
+}
+function resolveRuntimeSandboxAdapterType() {
+    const explicitBackend = process.env[ASH_SANDBOX_BACKEND_ENV]?.trim();
+    if (explicitBackend === "docker" || explicitBackend === "local" || explicitBackend === "vercel") {
+        return explicitBackend;
+    }
+    return process.env.VERCEL ? "vercel" : "local";
+}
+function resolveRuntimeSandboxCacheDirectory(compiledArtifactsSource) {
+    const appRoot = getRuntimeCompiledArtifactsAppRoot(compiledArtifactsSource);
+    return appRoot === undefined
+        ? resolveSandboxCacheDirectory(resolvePackageRoot())
+        : resolveSandboxCacheDirectory(appRoot);
+}
+//# sourceMappingURL=ensure.js.map

package/dist/src/runtime/sandboxes/ensure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure.js","sourceRoot":"","sources":["../../../../src/runtime/sandboxes/ensure.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,uCAAuC,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EACL,kCAAkC,GAEnC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,gCAAgC,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,iCAAiC,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,WAAW,CAAC;AAErD,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAc9D,MAAM,8BAA8B,GAAG,EAAE,CAAC;AAC1C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA0C,CAAC;AAE9E;;GAEG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAwB7D;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAkC;IAElC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,MAAM,cAAc,GAAkC,EAAE,CAAC;IAEzD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtE,OAAO,kCAAkC,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,iBAAiB,GAAG,KAAK,EAAE,KAAkC,EAAiB,EAAE;QACpF,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC;IACF,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,uBAAuB,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,2BAA2B,GAAG,IAAI,GAAG,CACzC,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC,CAC9F,CAAC;IACF,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,GAAG,CACxC,CAAC,GAAG,QAAQ,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE;QACrE,MAAM,OAAO,GAAG,gCAAgC,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,MAAM,wBAAwB,CAAC;YAC1C,OAAO;YACP,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;YACtD,WAAW,EAAE,iBAAiB,CAAC,UAAU,CAAC,IAAI;YAC9C,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,QAAQ,EAAE,iBAAiB,CAAC,UAAU,CAAC,QAAQ;SAChD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACpF,MAAM,cAAc,GAAG,2BAA2B,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;YAC5C,SAAS,EACP,iBAAiB,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS;gBAClD,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;oBAChB,MAAM,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;wBAC7C,OAAO,EAAE,6BAA6B,CAAC;4BACrC,OAAO,EAAE,WAAW;4BACpB,SAAS,EAAE,iBAAiB;4BAC5B,OAAO;4BACP,WAAW,EAAE,iBAAiB,CAAC,UAAU,CAAC,IAAI;yBAC/C,CAAC;qBACH,CAAC,CAAC;gBACL,CAAC;YACP,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,2BAA2B,CAAC;YACvD,OAAO;YACP,UAAU,EAAE,iBAAiB,CAAC,UAAU;YACxC,SAAS,EAAE,iBAAiB;YAC5B,cAAc;YACd,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ;SACT,CAAC,CAAC;QAEH,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACpE,MAAM,iBAAiB,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;gBAC7C,OAAO,EAAE,6BAA6B,CAAC;oBACrC,OAAO,EAAE,YAAY;oBACrB,SAAS,EAAE,iBAAiB;oBAC5B,OAAO,EAAE,cAAc,CAAC,IAAI;oBAC5B,WAAW,EAAE,iBAAiB,CAAC,UAAU,CAAC,IAAI;iBAC/C,CAAC;aACH,CAAC,CAAC;YACH,uBAAuB,CAAC,GAAG,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjE,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC,CACH,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC,CACpF,CAAC;YAEF,OAAO;gBACL,uBAAuB,EAAE,CAAC,GAAG,uBAAuB,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACzE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B;gBACD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;aAC5F,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,OAAO,CAAC,GAAG,CACf,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,CAAC,CAC/E,CAAC;QACJ,CAAC;QACD,UAAU;YACR,OAAO,CAAC,GAAG,cAAc,CAAC,CAAC;QAC7B,CAAC;QACD,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC;KACzE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB;IACtC,MAAM,eAAe,GAAG,CAAC,GAAG,mBAAmB,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,CAAC;IAE5B,KAAK,MAAM,aAAa,IAAI,eAAe,EAAE,CAAC;QAC5C,KAAK,qBAAqB,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,SAAS,kCAAkC;IACzC,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,OAAO;gBACL,uBAAuB,EAAE,EAAE;gBAC3B,QAAQ,EAAE,EAAE;aACb,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,KAAI,CAAC;QAClB,UAAU;YACR,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,SAAS,EAAE,EAAE;KACd,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAO1C;IACC,MAAM,aAAa,GAAG,uBAAuB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEhE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC;QAE3C,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE;YAC7C,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO;YACpC,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;SACnC,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO;SACjC,aAAa,CAAC;QACb,gBAAgB,EACd,KAAK,CAAC,cAAc,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,IAAI;YAClD,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ;YAC/B,CAAC,CAAC,SAAS;QACf,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;SACD,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,EAAE;QAC5B,MAAM,cAAc,GAAG,MAAM,2BAA2B,CAAC;YACvD,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,WAAW,EAAE,aAAa,CAAC,WAAW;SACvC,CAAC,CAAC;QAEH,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE;YAC7C,OAAO,EAAE,aAAa,CAAC,WAAW,CAAC,OAAO;YAC1C,IAAI,EAAE,aAAa,CAAC,MAAM;YAC1B,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;SACnC,CAAC,CAAC;QAEH,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACf,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,mBAAmB,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC1D,MAAM,2BAA2B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAEpD,OAAO,MAAM,cAAc,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,KAI1C;IACC,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YAElE,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,OAAO;gBAClC,QAAQ;gBACR,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;gBAClC,UAAU,EAAE,KAAK,CAAC,WAAW,CAAC,UAAU;aACzC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO;YACX,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,EAAE,KAAK,CAAC,WAAW;QACvB,IAAI,EAAE;YACJ,GAAG,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG;YAC1B,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW;YACzC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;YAC3B,OAAO,EAAE,gCAAgC,CAAC;gBACxC,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,WAAW;gBAC1B,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI;aACnC,CAAC;YACF,QAAQ,EAAE,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;SAC9D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB;IACjD,MAAM,aAAa,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAEnD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,cAAsB;IAC/D,OAAO,mBAAmB,CAAC,IAAI,GAAG,8BAA8B,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;QAE/D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,GAAG,WAAW,CAAC;QAEjD,IAAI,UAAU,KAAK,cAAc,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,cAA8C;IAE9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC;QAErC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAClC,OAAkC,EAClC,uBAAuD;IAEvD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,gCAAgC,CAAC;YACtC,cAAc,EAAE,mCAAmC,CAAC,uBAAuB,CAAC;SAC7E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,iCAAiC,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,2BAA2B,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,6BAA6B,CAAC,KAKtC;IACC,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,OAAe;YAC9B,MAAM,yBAAyB,CAAC;gBAC9B,OAAO;gBACP,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gCAAgC,CAAC,KAIzC;IACC,OAAO;QACL,KAAK,CAAC,cAAc,CAAC,OAAe;YAClC,MAAM,yBAAyB,CAAC;gBAC9B,OAAO;gBACP,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YAEH,OAAO,MAAM,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,IAAY;YACzB,OAAO,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAwD;YACvE,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,yBAAyB,CAAC,KAMxC;IACC,MAAM,uBAAuB,CAAC,KAAK,CAAC,SAAS,EAAE;QAC7C,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,SAAS;QACf,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,SAA8C,EAC9C,KAAkC;IAElC,MAAM,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,gCAAgC;IACvC,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC;IAErE,IAAI,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,OAAO,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;QAChG,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAED,SAAS,mCAAmC,CAC1C,uBAAuD;IAEvD,MAAM,OAAO,GAAG,kCAAkC,CAAC,uBAAuB,CAAC,CAAC;IAC5E,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC,4BAA4B,CAAC,kBAAkB,EAAE,CAAC;QACpD,CAAC,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC"}

package/dist/src/runtime/sandboxes/keys.d.ts

@@ -0,0 +1,30 @@
+import { type RuntimeCompiledArtifactsSource } from "../compiled-artifacts-source.js";
+import type { RuntimeSandboxAdapterType } from "./types.js";
+/**
+ * Input for deriving the stable runtime keys used for one sandbox definition.
+ */
+export interface CreateRuntimeSandboxKeysInput {
+    readonly adapter: RuntimeSandboxAdapterType;
+    readonly compiledArtifactsSource: RuntimeCompiledArtifactsSource;
+    readonly sandboxName: string;
+    readonly sessionId: string;
+    readonly sourceId: string;
+}
+/**
+ * Creates the stable runtime template and session keys for one sandbox
+ * definition under the current artifact source and adapter.
+ */
+export declare function createRuntimeSandboxKeys(input: CreateRuntimeSandboxKeysInput): Promise<{
+    readonly sessionKey: string;
+    readonly templateKey: string;
+}>;
+/**
+ * Creates the stable reusable template key for one sandbox definition.
+ */
+export declare function createRuntimeSandboxTemplateKey(input: {
+    readonly adapter: RuntimeSandboxAdapterType;
+    readonly compiledArtifactsSource: RuntimeCompiledArtifactsSource;
+    readonly sandboxName: string;
+    readonly sourceId: string;
+}): Promise<string>;
+//# sourceMappingURL=keys.d.ts.map

package/dist/src/runtime/sandboxes/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandboxes/keys.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,8BAA8B,EACpC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAI5D;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,EAAE,8BAA8B,CAAC;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC;IAC5F,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC,CAKD;AAED;;GAEG;AACH,wBAAsB,+BAA+B,CAAC,KAAK,EAAE;IAC3D,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;IAC5C,QAAQ,CAAC,uBAAuB,EAAE,8BAA8B,CAAC;IACjE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GAAG,OAAO,CAAC,MAAM,CAAC,CAalB"}

package/dist/src/runtime/sandboxes/keys.js

@@ -0,0 +1,61 @@
+import { createHash } from "node:crypto";
+import { realpath } from "node:fs/promises";
+import { resolveInstalledPackageInfo } from "../../internal/application/package.js";
+import { getRuntimeCompiledArtifactsAppRoot, getRuntimeCompiledArtifactsCacheKey, } from "../compiled-artifacts-source.js";
+import { loadCompileMetadata } from "../loaders/compile-metadata.js";
+const RUNTIME_SANDBOX_CONTRACT_VERSION = 1;
+/**
+ * Creates the stable runtime template and session keys for one sandbox
+ * definition under the current artifact source and adapter.
+ */
+export async function createRuntimeSandboxKeys(input) {
+    return {
+        sessionKey: await createRuntimeSandboxSessionKey(input),
+        templateKey: await createRuntimeSandboxTemplateKey(input),
+    };
+}
+/**
+ * Creates the stable reusable template key for one sandbox definition.
+ */
+export async function createRuntimeSandboxTemplateKey(input) {
+    const scope = await resolveRuntimeSandboxScope(input.adapter, input.compiledArtifactsSource);
+    const versionHash = await resolveRuntimeSandboxVersionHash({
+        compiledArtifactsSource: input.compiledArtifactsSource,
+        sourceId: input.sourceId,
+    });
+    const templateHash = createStableHash(`${resolveInstalledPackageInfo().version}:${RUNTIME_SANDBOX_CONTRACT_VERSION}:${versionHash}`).slice(0, 20);
+    return sanitizeRuntimeSandboxKey(`ash-sbx-tpl-${input.adapter}-${scope}-${input.sandboxName}-${templateHash}`);
+}
+async function createRuntimeSandboxSessionKey(input) {
+    const scope = await resolveRuntimeSandboxScope(input.adapter, input.compiledArtifactsSource);
+    return sanitizeRuntimeSandboxKey(`ash-sbx-ses-${input.adapter}-${scope}-${input.sessionId}-${input.sandboxName}`);
+}
+async function resolveRuntimeSandboxScope(adapter, compiledArtifactsSource) {
+    if (adapter === "vercel") {
+        const deploymentId = process.env.VERCEL_DEPLOYMENT_ID?.trim();
+        if (deploymentId === undefined || deploymentId.length === 0) {
+            throw new Error('Expected "VERCEL_DEPLOYMENT_ID" to be available when resolving a Vercel sandbox scope.');
+        }
+        return createStableHash(deploymentId).slice(0, 16);
+    }
+    const appRoot = getRuntimeCompiledArtifactsAppRoot(compiledArtifactsSource);
+    if (appRoot !== undefined) {
+        return createStableHash(await realpath(appRoot)).slice(0, 16);
+    }
+    return createStableHash(getRuntimeCompiledArtifactsCacheKey(compiledArtifactsSource)).slice(0, 16);
+}
+async function resolveRuntimeSandboxVersionHash(input) {
+    const metadata = await loadCompileMetadata({
+        compiledArtifactsSource: input.compiledArtifactsSource,
+    });
+    const sourceGraphHash = metadata?.discovery.sourceGraphHash ??
+        getRuntimeCompiledArtifactsCacheKey(input.compiledArtifactsSource);
+    return createStableHash(`${sourceGraphHash}:${input.sourceId}`);
+}
+function createStableHash(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function sanitizeRuntimeSandboxKey(value) {
+    return value.replaceAll(/[^a-zA-Z0-9._-]+/g, "-").slice(0, 120);
+}
+//# sourceMappingURL=keys.js.map

package/dist/src/runtime/sandboxes/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../../../src/runtime/sandboxes/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,uCAAuC,CAAC;AACpF,OAAO,EACL,kCAAkC,EAClC,mCAAmC,GAEpC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAGrE,MAAM,gCAAgC,GAAG,CAAC,CAAC;AAa3C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAAoC;IAIjF,OAAO;QACL,UAAU,EAAE,MAAM,8BAA8B,CAAC,KAAK,CAAC;QACvD,WAAW,EAAE,MAAM,+BAA+B,CAAC,KAAK,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAKrD;IACC,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC7F,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC;QACzD,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;QACtD,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,gBAAgB,CACnC,GAAG,2BAA2B,EAAE,CAAC,OAAO,IAAI,gCAAgC,IAAI,WAAW,EAAE,CAC9F,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEf,OAAO,yBAAyB,CAC9B,eAAe,KAAK,CAAC,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,WAAW,IAAI,YAAY,EAAE,CAC7E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,8BAA8B,CAAC,KAK7C;IACC,MAAM,KAAK,GAAG,MAAM,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE7F,OAAO,yBAAyB,CAC9B,eAAe,KAAK,CAAC,OAAO,IAAI,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE,CAChF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,OAAkC,EAClC,uBAAuD;IAEvD,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;QAE9D,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;QACJ,CAAC;QAED,OAAO,gBAAgB,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,OAAO,GAAG,kCAAkC,CAAC,uBAAuB,CAAC,CAAC;IAE5E,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,gBAAgB,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,gBAAgB,CAAC,mCAAmC,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,CACzF,CAAC,EACD,EAAE,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gCAAgC,CAAC,KAG/C;IACC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QACzC,uBAAuB,EAAE,KAAK,CAAC,uBAAuB;KACvD,CAAC,CAAC;IACH,MAAM,eAAe,GACnB,QAAQ,EAAE,SAAS,CAAC,eAAe;QACnC,mCAAmC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAErE,OAAO,gBAAgB,CAAC,GAAG,eAAe,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAa;IAC9C,OAAO,KAAK,CAAC,UAAU,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAClE,CAAC"}

package/dist/src/runtime/sandboxes/registry.d.ts

@@ -0,0 +1,44 @@
+import type { PreparedRuntimeSandbox } from "../sessions/turn.js";
+import type { ResolvedSandboxDefinition } from "../types.js";
+/**
+ * Error raised when resolved sandboxes cannot be lowered into a runtime-owned
+ * registry.
+ */
+export declare class RuntimeSandboxRegistryError extends Error {
+    readonly logicalPath?: string;
+    readonly sandboxName?: string;
+    readonly sourceId?: string;
+    constructor(message: string, input?: {
+        logicalPath?: string;
+        sandboxName?: string;
+        sourceId?: string;
+    });
+}
+/**
+ * One resolved sandbox tracked by the runtime-owned registry.
+ */
+export interface RuntimeRegisteredSandbox {
+    readonly definition: ResolvedSandboxDefinition;
+    readonly prepared: PreparedRuntimeSandbox;
+}
+/**
+ * Runtime-owned registry that exposes resolved sandboxes to the harness startup
+ * path.
+ */
+export interface RuntimeSandboxRegistry {
+    readonly preparedSandboxes: readonly PreparedRuntimeSandbox[];
+    readonly sandboxesByName: ReadonlyMap<string, RuntimeRegisteredSandbox>;
+}
+/**
+ * Builds the runtime-owned registry for one resolved authored agent's
+ * sandboxes.
+ */
+export declare function createRuntimeSandboxRegistry(sandboxes: readonly ResolvedSandboxDefinition[], input?: {
+    readonly reservedToolNames?: readonly string[];
+}): RuntimeSandboxRegistry;
+/**
+ * Looks up one registered runtime sandbox by its internal authored sandbox
+ * name.
+ */
+export declare function findRegisteredRuntimeSandbox(registry: RuntimeSandboxRegistry, sandboxName: string): RuntimeRegisteredSandbox | null;
+//# sourceMappingURL=registry.d.ts.map

package/dist/src/runtime/sandboxes/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandboxes/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAG7D;;;GAGG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;gBAGzB,OAAO,EAAE,MAAM,EACf,KAAK,GAAE;QACL,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACd;CAiBT;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,yBAAyB,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;CAC3C;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC9D,QAAQ,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;CACzE;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,SAAS,yBAAyB,EAAE,EAC/C,KAAK,GAAE;IACL,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C,GACL,sBAAsB,CA0DxB;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,sBAAsB,EAChC,WAAW,EAAE,MAAM,GAClB,wBAAwB,GAAG,IAAI,CAEjC"}

package/dist/src/runtime/sandboxes/registry.js

@@ -0,0 +1,87 @@
+import { createRuntimeSandboxToolName } from "./tool-name.js";
+/**
+ * Error raised when resolved sandboxes cannot be lowered into a runtime-owned
+ * registry.
+ */
+export class RuntimeSandboxRegistryError extends Error {
+    logicalPath;
+    sandboxName;
+    sourceId;
+    constructor(message, input = {}) {
+        super(message);
+        this.name = "RuntimeSandboxRegistryError";
+        if (input.logicalPath !== undefined) {
+            this.logicalPath = input.logicalPath;
+        }
+        if (input.sandboxName !== undefined) {
+            this.sandboxName = input.sandboxName;
+        }
+        if (input.sourceId !== undefined) {
+            this.sourceId = input.sourceId;
+        }
+    }
+}
+/**
+ * Builds the runtime-owned registry for one resolved authored agent's
+ * sandboxes.
+ */
+export function createRuntimeSandboxRegistry(sandboxes, input = {}) {
+    const preparedSandboxes = [];
+    const sandboxesByName = new Map();
+    const reservedToolNames = new Set(input.reservedToolNames ?? []);
+    const sandboxToolNames = new Set();
+    for (const sandboxDefinition of sandboxes) {
+        const sandboxToolName = createRuntimeSandboxToolName(sandboxDefinition.name);
+        if (reservedToolNames.has(sandboxToolName)) {
+            throw new RuntimeSandboxRegistryError(`Sandbox "${sandboxDefinition.name}" lowers to tool "${sandboxToolName}", which collides with another runtime-visible tool name.`, {
+                logicalPath: sandboxDefinition.logicalPath,
+                sandboxName: sandboxDefinition.name,
+                sourceId: sandboxDefinition.sourceId,
+            });
+        }
+        if (sandboxesByName.has(sandboxDefinition.name)) {
+            throw new RuntimeSandboxRegistryError(`Found multiple authored sandboxes named "${sandboxDefinition.name}". Sandbox names must be unique at runtime.`, {
+                logicalPath: sandboxDefinition.logicalPath,
+                sandboxName: sandboxDefinition.name,
+                sourceId: sandboxDefinition.sourceId,
+            });
+        }
+        if (sandboxToolNames.has(sandboxToolName)) {
+            throw new RuntimeSandboxRegistryError(`Found multiple authored sandboxes that lower to the same tool name "${sandboxToolName}". Sandbox tool names must be unique at runtime.`, {
+                logicalPath: sandboxDefinition.logicalPath,
+                sandboxName: sandboxDefinition.name,
+                sourceId: sandboxDefinition.sourceId,
+            });
+        }
+        const prepared = createPreparedRuntimeSandbox(sandboxDefinition);
+        const registeredSandbox = {
+            definition: sandboxDefinition,
+            prepared,
+        };
+        reservedToolNames.add(sandboxToolName);
+        sandboxToolNames.add(sandboxToolName);
+        preparedSandboxes.push(prepared);
+        sandboxesByName.set(sandboxDefinition.name, registeredSandbox);
+    }
+    return {
+        preparedSandboxes,
+        sandboxesByName,
+    };
+}
+/**
+ * Looks up one registered runtime sandbox by its internal authored sandbox
+ * name.
+ */
+export function findRegisteredRuntimeSandbox(registry, sandboxName) {
+    return registry.sandboxesByName.get(sandboxName) ?? null;
+}
+function createPreparedRuntimeSandbox(definition) {
+    return {
+        description: definition.description,
+        logicalPath: definition.logicalPath,
+        name: definition.name,
+        sourceId: definition.sourceId,
+        toolName: createRuntimeSandboxToolName(definition.name),
+    };
+}
+//# sourceMappingURL=registry.js.map

package/dist/src/runtime/sandboxes/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/runtime/sandboxes/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAE9D;;;GAGG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAC3C,WAAW,CAAU;IACrB,WAAW,CAAU;IACrB,QAAQ,CAAU;IAE3B,YACE,OAAe,EACf,QAII,EAAE;QAEN,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAE1C,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QACvC,CAAC;QAED,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QACjC,CAAC;IACH,CAAC;CACF;AAmBD;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,SAA+C,EAC/C,QAEI,EAAE;IAEN,MAAM,iBAAiB,GAA6B,EAAE,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAoC,CAAC;IACpE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAE3C,KAAK,MAAM,iBAAiB,IAAI,SAAS,EAAE,CAAC;QAC1C,MAAM,eAAe,GAAG,4BAA4B,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAE7E,IAAI,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,2BAA2B,CACnC,YAAY,iBAAiB,CAAC,IAAI,qBAAqB,eAAe,2DAA2D,EACjI;gBACE,WAAW,EAAE,iBAAiB,CAAC,WAAW;gBAC1C,WAAW,EAAE,iBAAiB,CAAC,IAAI;gBACnC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACrC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,MAAM,IAAI,2BAA2B,CACnC,4CAA4C,iBAAiB,CAAC,IAAI,6CAA6C,EAC/G;gBACE,WAAW,EAAE,iBAAiB,CAAC,WAAW;gBAC1C,WAAW,EAAE,iBAAiB,CAAC,IAAI;gBACnC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACrC,CACF,CAAC;QACJ,CAAC;QAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,2BAA2B,CACnC,uEAAuE,eAAe,kDAAkD,EACxI;gBACE,WAAW,EAAE,iBAAiB,CAAC,WAAW;gBAC1C,WAAW,EAAE,iBAAiB,CAAC,IAAI;gBACnC,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACrC,CACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,4BAA4B,CAAC,iBAAiB,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAA6B;YAClD,UAAU,EAAE,iBAAiB;YAC7B,QAAQ;SACT,CAAC;QAEF,iBAAiB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACvC,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACtC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,eAAe,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,iBAAiB;QACjB,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgC,EAChC,WAAmB;IAEnB,OAAO,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;AAC3D,CAAC;AAED,SAAS,4BAA4B,CACnC,UAAqC;IAErC,OAAO;QACL,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,WAAW,EAAE,UAAU,CAAC,WAAW;QACnC,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,QAAQ,EAAE,4BAA4B,CAAC,UAAU,CAAC,IAAI,CAAC;KACxD,CAAC;AACJ,CAAC"}

package/dist/src/runtime/sandboxes/tool-name.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Creates the model-visible ToolLoop name for one authored sandbox without
+ * changing the sandbox's internal runtime identity.
+ */
+export declare function createRuntimeSandboxToolName(sandboxName: string): string;
+//# sourceMappingURL=tool-name.d.ts.map

package/dist/src/runtime/sandboxes/tool-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-name.d.ts","sourceRoot":"","sources":["../../../../src/runtime/sandboxes/tool-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAUxE"}

package/dist/src/runtime/sandboxes/tool-name.js

@@ -0,0 +1,15 @@
+/**
+ * Creates the model-visible ToolLoop name for one authored sandbox without
+ * changing the sandbox's internal runtime identity.
+ */
+export function createRuntimeSandboxToolName(sandboxName) {
+    const snakeCaseName = sandboxName
+        .replaceAll(/[\\/]+/g, "_")
+        .replaceAll(/([a-z0-9])([A-Z])/g, "$1_$2")
+        .replaceAll(/[^a-zA-Z0-9]+/g, "_")
+        .replaceAll(/^_+|_+$/g, "")
+        .replaceAll(/_+/g, "_")
+        .toLowerCase();
+    return snakeCaseName.endsWith("_sandbox") ? snakeCaseName : `${snakeCaseName}_sandbox`;
+}
+//# sourceMappingURL=tool-name.js.map

package/dist/src/runtime/sandboxes/tool-name.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-name.js","sourceRoot":"","sources":["../../../../src/runtime/sandboxes/tool-name.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAAC,WAAmB;IAC9D,MAAM,aAAa,GAAG,WAAW;SAC9B,UAAU,CAAC,SAAS,EAAE,GAAG,CAAC;SAC1B,UAAU,CAAC,oBAAoB,EAAE,OAAO,CAAC;SACzC,UAAU,CAAC,gBAAgB,EAAE,GAAG,CAAC;SACjC,UAAU,CAAC,UAAU,EAAE,EAAE,CAAC;SAC1B,UAAU,CAAC,KAAK,EAAE,GAAG,CAAC;SACtB,WAAW,EAAE,CAAC;IAEjB,OAAO,aAAa,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,aAAa,UAAU,CAAC;AACzF,CAAC"}