isol8 0.5.1 → 0.6.1

package/dist/index.js

@@ -1,315 +1,176 @@
-// src/client/remote.ts
-class RemoteIsol8 {
-  host;
-  apiKey;
-  sessionId;
-  isol8Options;
-  constructor(options, isol8Options) {
-    this.host = options.host.replace(/\/$/, "");
-    this.apiKey = options.apiKey;
-    this.sessionId = options.sessionId;
-    this.isol8Options = isol8Options;
-  }
-  async start() {
-    const res = await this.fetch("/health");
-    if (!res.ok) {
-      throw new Error(`Remote server health check failed: ${res.status}`);
-    }
-  }
-  async stop() {
-    if (this.sessionId) {
-      await this.fetch(`/session/${this.sessionId}`, { method: "DELETE" });
-    }
-  }
-  async execute(req) {
-    const res = await this.fetch("/execute", {
-      method: "POST",
-      body: JSON.stringify({
-        request: req,
-        options: this.isol8Options,
-        sessionId: this.sessionId
-      })
-    });
-    if (!res.ok) {
-      const body = await res.json().catch(() => ({}));
-      throw new Error(`Execution failed: ${body.error ?? res.statusText}`);
-    }
-    return res.json();
-  }
-  async* executeStream(req) {
-    const res = await this.fetch("/execute/stream", {
-      method: "POST",
-      body: JSON.stringify({
-        request: req,
-        options: this.isol8Options,
-        sessionId: this.sessionId
-      })
-    });
-    if (!res.ok) {
-      const body = await res.json().catch(() => ({}));
-      throw new Error(`Stream failed: ${body.error ?? res.statusText}`);
-    }
-    if (!res.body) {
-      throw new Error("No response body for streaming");
-    }
-    const reader = res.body.getReader();
-    const decoder = new TextDecoder;
-    let buffer = "";
-    try {
-      while (true) {
-        const { done, value } = await reader.read();
-        if (done) {
-          break;
-        }
-        buffer += decoder.decode(value, { stream: true });
-        const lines = buffer.split(`
-`);
-        buffer = lines.pop() ?? "";
-        for (const line of lines) {
-          if (line.startsWith("data: ")) {
-            const json = line.slice(6).trim();
-            if (json) {
-              yield JSON.parse(json);
-            }
-          }
-        }
-      }
-      if (buffer.startsWith("data: ")) {
-        const json = buffer.slice(6).trim();
-        if (json) {
-          yield JSON.parse(json);
-        }
-      }
-    } finally {
-      reader.releaseLock();
-    }
-  }
-  async putFile(path, content) {
-    if (!this.sessionId) {
-      throw new Error("File operations require a sessionId (persistent mode)");
-    }
-    const base64 = typeof content === "string" ? Buffer.from(content).toString("base64") : content.toString("base64");
-    const res = await this.fetch("/file", {
-      method: "POST",
-      body: JSON.stringify({
-        sessionId: this.sessionId,
-        path,
-        content: base64
-      })
-    });
-    if (!res.ok) {
-      throw new Error(`File upload failed: ${res.statusText}`);
-    }
-  }
-  async getFile(path) {
-    if (!this.sessionId) {
-      throw new Error("File operations require a sessionId (persistent mode)");
-    }
-    const params = new URLSearchParams({ sessionId: this.sessionId, path });
-    const res = await this.fetch(`/file?${params}`);
-    if (!res.ok) {
-      throw new Error(`File download failed: ${res.statusText}`);
-    }
-    const body = await res.json();
-    return Buffer.from(body.content, "base64");
-  }
-  async fetch(path, init) {
-    return globalThis.fetch(`${this.host}${path}`, {
-      ...init,
-      headers: {
-        "Content-Type": "application/json",
-        Authorization: `Bearer ${this.apiKey}`,
-        ...init?.headers ?? {}
-      }
+var __defProp = Object.defineProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: (newValue) => all[name] = () => newValue
     });
-  }
-}
-// src/config.ts
-import { existsSync, readFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join, resolve } from "node:path";
-var DEFAULT_CONFIG = {
-  maxConcurrent: 10,
-  defaults: {
-    timeoutMs: 30000,
-    memoryLimit: "512m",
-    cpuLimit: 1,
-    network: "none",
-    sandboxSize: "512m",
-    tmpSize: "256m"
-  },
-  network: {
-    whitelist: [],
-    blacklist: []
-  },
-  cleanup: {
-    autoPrune: true,
-    maxContainerAgeMs: 3600000
-  },
-  dependencies: {},
-  debug: false
 };
-function loadConfig(cwd) {
-  const searchPaths = [
-    join(resolve(cwd ?? process.cwd()), "isol8.config.json"),
-    join(homedir(), ".isol8", "config.json")
-  ];
-  for (const configPath of searchPaths) {
-    if (existsSync(configPath)) {
-      const raw = readFileSync(configPath, "utf-8");
-      const parsed = JSON.parse(raw);
-      return mergeConfig(DEFAULT_CONFIG, parsed);
-    }
-  }
-  return { ...DEFAULT_CONFIG };
-}
-function mergeConfig(defaults, overrides) {
-  return {
-    maxConcurrent: overrides.maxConcurrent ?? defaults.maxConcurrent,
-    defaults: {
-      ...defaults.defaults,
-      ...overrides.defaults
-    },
-    network: {
-      whitelist: overrides.network?.whitelist ?? defaults.network.whitelist,
-      blacklist: overrides.network?.blacklist ?? defaults.network.blacklist
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/runtime/adapter.ts
+var adapters, extensionMap, RuntimeRegistry;
+var init_adapter = __esm(() => {
+  adapters = new Map;
+  extensionMap = new Map;
+  RuntimeRegistry = {
+    register(adapter, aliases = []) {
+      adapters.set(adapter.name, adapter);
+      extensionMap.set(adapter.getFileExtension(), adapter);
+      for (const ext of aliases) {
+        extensionMap.set(ext, adapter);
+      }
     },
-    cleanup: {
-      ...defaults.cleanup,
-      ...overrides.cleanup
+    get(name) {
+      const adapter = adapters.get(name);
+      if (!adapter) {
+        throw new Error(`Unknown runtime: "${name}". Available: ${[...adapters.keys()].join(", ")}`);
+      }
+      return adapter;
     },
-    dependencies: {
-      ...defaults.dependencies,
-      ...overrides.dependencies
+    detect(filename) {
+      const ext = `.${filename.split(".").pop()}`;
+      const adapter = extensionMap.get(ext);
+      if (!adapter) {
+        throw new Error(`Cannot detect runtime for "${filename}". Known extensions: ${[...extensionMap.keys()].join(", ")}`);
+      }
+      return adapter;
     },
-    debug: overrides.debug ?? defaults.debug
-  };
-}
-// src/engine/docker.ts
-import { randomUUID } from "node:crypto";
-import { PassThrough } from "node:stream";
-import Docker from "dockerode";
-
-// src/runtime/adapter.ts
-var adapters = new Map;
-var extensionMap = new Map;
-var RuntimeRegistry = {
-  register(adapter, aliases = []) {
-    adapters.set(adapter.name, adapter);
-    extensionMap.set(adapter.getFileExtension(), adapter);
-    for (const ext of aliases) {
-      extensionMap.set(ext, adapter);
-    }
-  },
-  get(name) {
-    const adapter = adapters.get(name);
-    if (!adapter) {
-      throw new Error(`Unknown runtime: "${name}". Available: ${[...adapters.keys()].join(", ")}`);
-    }
-    return adapter;
-  },
-  detect(filename) {
-    const ext = `.${filename.split(".").pop()}`;
-    const adapter = extensionMap.get(ext);
-    if (!adapter) {
-      throw new Error(`Cannot detect runtime for "${filename}". Known extensions: ${[...extensionMap.keys()].join(", ")}`);
+    list() {
+      return [...adapters.values()];
     }
-    return adapter;
-  },
-  list() {
-    return [...adapters.values()];
-  }
-};
+  };
+});
 
 // src/runtime/adapters/bash.ts
-var bashAdapter = {
-  name: "bash",
-  image: "isol8:bash",
-  getCommand(code, filePath) {
-    if (filePath) {
-      return ["bash", filePath];
-    }
-    return ["bash", "-c", code];
-  },
-  getFileExtension() {
-    return ".sh";
-  }
-};
+var bashAdapter;
+var init_bash = __esm(() => {
+  bashAdapter = {
+    name: "bash",
+    image: "isol8:bash",
+    getCommand(code, filePath) {
+      if (filePath) {
+        return ["bash", filePath];
+      }
+      return ["bash", "-c", code];
+    },
+    getFileExtension() {
+      return ".sh";
+    }
+  };
+});
 
 // src/runtime/adapters/bun.ts
-var BunAdapter = {
-  name: "bun",
-  image: "isol8:bun",
-  getCommand(code, filePath) {
-    if (filePath) {
-      return ["bun", "run", filePath];
-    }
-    return ["bun", "-e", code];
-  },
-  getFileExtension() {
-    return ".ts";
-  }
-};
+var BunAdapter;
+var init_bun = __esm(() => {
+  BunAdapter = {
+    name: "bun",
+    image: "isol8:bun",
+    getCommand(code, filePath) {
+      if (filePath) {
+        return ["bun", "run", filePath];
+      }
+      return ["bun", "-e", code];
+    },
+    getFileExtension() {
+      return ".ts";
+    }
+  };
+});
 
 // src/runtime/adapters/deno.ts
-var DenoAdapter = {
-  name: "deno",
-  image: "isol8:deno",
-  getCommand(_code, filePath) {
-    if (!filePath) {
-      throw new Error("Deno adapter requires a file path — inline code is not supported.");
-    }
-    return [
-      "deno",
-      "run",
-      "--allow-read=/sandbox,/tmp",
-      "--allow-write=/sandbox,/tmp",
-      "--allow-env",
-      "--allow-net",
-      filePath
-    ];
-  },
-  getFileExtension() {
-    return ".mts";
-  }
-};
+var DenoAdapter;
+var init_deno = __esm(() => {
+  DenoAdapter = {
+    name: "deno",
+    image: "isol8:deno",
+    getCommand(_code, filePath) {
+      if (!filePath) {
+        throw new Error("Deno adapter requires a file path — inline code is not supported.");
+      }
+      return [
+        "deno",
+        "run",
+        "--allow-read=/sandbox,/tmp",
+        "--allow-write=/sandbox,/tmp",
+        "--allow-env",
+        "--allow-net",
+        filePath
+      ];
+    },
+    getFileExtension() {
+      return ".mts";
+    }
+  };
+});
 
 // src/runtime/adapters/node.ts
-var NodeAdapter = {
-  name: "node",
-  image: "isol8:node",
-  getCommand(code, filePath) {
-    if (filePath) {
-      return ["node", filePath];
-    }
-    return ["node", "-e", code];
-  },
-  getFileExtension() {
-    return ".mjs";
-  }
-};
+var NodeAdapter;
+var init_node = __esm(() => {
+  NodeAdapter = {
+    name: "node",
+    image: "isol8:node",
+    getCommand(code, filePath) {
+      if (filePath) {
+        return ["node", filePath];
+      }
+      return ["node", "-e", code];
+    },
+    getFileExtension() {
+      return ".mjs";
+    }
+  };
+});
 
 // src/runtime/adapters/python.ts
-var PythonAdapter = {
-  name: "python",
-  image: "isol8:python",
-  getCommand(code, filePath) {
-    if (filePath) {
-      return ["python3", filePath];
-    }
-    return ["python3", "-c", code];
-  },
-  getFileExtension() {
-    return ".py";
-  }
-};
+var PythonAdapter;
+var init_python = __esm(() => {
+  PythonAdapter = {
+    name: "python",
+    image: "isol8:python",
+    getCommand(code, filePath) {
+      if (filePath) {
+        return ["python3", filePath];
+      }
+      return ["python3", "-c", code];
+    },
+    getFileExtension() {
+      return ".py";
+    }
+  };
+});
 
 // src/runtime/index.ts
-RuntimeRegistry.register(PythonAdapter);
-RuntimeRegistry.register(NodeAdapter, [".js", ".cjs"]);
-RuntimeRegistry.register(BunAdapter);
-RuntimeRegistry.register(bashAdapter);
-RuntimeRegistry.register(DenoAdapter);
+var exports_runtime = {};
+__export(exports_runtime, {
+  bashAdapter: () => bashAdapter,
+  RuntimeRegistry: () => RuntimeRegistry,
+  PythonAdapter: () => PythonAdapter,
+  NodeAdapter: () => NodeAdapter,
+  DenoAdapter: () => DenoAdapter,
+  BunAdapter: () => BunAdapter
+});
+var init_runtime = __esm(() => {
+  init_adapter();
+  init_bash();
+  init_bun();
+  init_deno();
+  init_node();
+  init_python();
+  init_adapter();
+  init_bash();
+  init_bun();
+  init_deno();
+  init_node();
+  init_python();
+  RuntimeRegistry.register(PythonAdapter);
+  RuntimeRegistry.register(NodeAdapter, [".js", ".cjs"]);
+  RuntimeRegistry.register(BunAdapter);
+  RuntimeRegistry.register(bashAdapter);
+  RuntimeRegistry.register(DenoAdapter);
+});
 
 // src/utils/logger.ts
 class Logger {
@@ -332,7 +193,10 @@ class Logger {
     console.error("[ERROR]", ...args);
   }
 }
-var logger = new Logger;
+var logger;
+var init_logger = __esm(() => {
+  logger = new Logger;
+});
 
 // src/engine/concurrency.ts
 class Semaphore {
@@ -475,6 +339,9 @@ class ContainerPool {
     this.pendingReplenishments.add(promise);
   }
 }
+var init_pool = __esm(() => {
+  init_logger();
+});
 
 // src/engine/utils.ts
 function parseMemoryLimit(limit) {
@@ -567,6 +434,13 @@ function extractFromTar(tarBuffer, targetPath) {
 }
 
 // src/engine/docker.ts
+var exports_docker = {};
+__export(exports_docker, {
+  DockerIsol8: () => DockerIsol8
+});
+import { randomUUID } from "node:crypto";
+import { PassThrough } from "node:stream";
+import Docker from "dockerode";
 async function writeFileViaExec(container, filePath, content) {
   const data = typeof content === "string" ? Buffer.from(content, "utf-8") : content;
   const b64 = data.toString("base64");
@@ -609,11 +483,6 @@ async function readFileViaExec(container, filePath) {
   const b64Output = Buffer.concat(chunks).toString("utf-8").trim();
   return Buffer.from(b64Output, "base64");
 }
-var SANDBOX_WORKDIR = "/sandbox";
-var MAX_OUTPUT_BYTES = 1024 * 1024;
-var PROXY_PORT = 8118;
-var PROXY_STARTUP_TIMEOUT_MS = 5000;
-var PROXY_POLL_INTERVAL_MS = 100;
 async function startProxy(container, networkFilter) {
   const envParts = [];
   if (networkFilter) {
@@ -1256,35 +1125,348 @@ class DockerIsol8 {
     return { removed, failed, errors };
   }
 }
-// src/server/index.ts
-import { Hono } from "hono";
+var SANDBOX_WORKDIR = "/sandbox", MAX_OUTPUT_BYTES, PROXY_PORT = 8118, PROXY_STARTUP_TIMEOUT_MS = 5000, PROXY_POLL_INTERVAL_MS = 100;
+var init_docker = __esm(() => {
+  init_runtime();
+  init_logger();
+  init_pool();
+  MAX_OUTPUT_BYTES = 1024 * 1024;
+});
 
-// src/server/auth.ts
-function authMiddleware(apiKey) {
-  return async (c, next) => {
-    if (c.req.path === "/health") {
-      return next();
-    }
-    const authHeader = c.req.header("Authorization");
-    if (!authHeader) {
-      return c.json({ error: "Missing Authorization header" }, 401);
-    }
-    const token = authHeader.replace(/^Bearer\s+/i, "");
-    if (token !== apiKey) {
-      return c.json({ error: "Invalid API key" }, 403);
-    }
+// src/client/remote.ts
+class RemoteIsol8 {
+  host;
+  apiKey;
+  sessionId;
+  isol8Options;
+  constructor(options, isol8Options) {
+    this.host = options.host.replace(/\/$/, "");
+    this.apiKey = options.apiKey;
+    this.sessionId = options.sessionId;
+    this.isol8Options = isol8Options;
+  }
+  async start() {
+    const res = await this.fetch("/health");
+    if (!res.ok) {
+      throw new Error(`Remote server health check failed: ${res.status}`);
+    }
+  }
+  async stop() {
+    if (this.sessionId) {
+      await this.fetch(`/session/${this.sessionId}`, { method: "DELETE" });
+    }
+  }
+  async execute(req) {
+    const res = await this.fetch("/execute", {
+      method: "POST",
+      body: JSON.stringify({
+        request: req,
+        options: this.isol8Options,
+        sessionId: this.sessionId
+      })
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(`Execution failed: ${body.error ?? res.statusText}`);
+    }
+    return res.json();
+  }
+  async* executeStream(req) {
+    const res = await this.fetch("/execute/stream", {
+      method: "POST",
+      body: JSON.stringify({
+        request: req,
+        options: this.isol8Options,
+        sessionId: this.sessionId
+      })
+    });
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(`Stream failed: ${body.error ?? res.statusText}`);
+    }
+    if (!res.body) {
+      throw new Error("No response body for streaming");
+    }
+    const reader = res.body.getReader();
+    const decoder = new TextDecoder;
+    let buffer = "";
+    try {
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) {
+          break;
+        }
+        buffer += decoder.decode(value, { stream: true });
+        const lines = buffer.split(`
+`);
+        buffer = lines.pop() ?? "";
+        for (const line of lines) {
+          if (line.startsWith("data: ")) {
+            const json = line.slice(6).trim();
+            if (json) {
+              yield JSON.parse(json);
+            }
+          }
+        }
+      }
+      if (buffer.startsWith("data: ")) {
+        const json = buffer.slice(6).trim();
+        if (json) {
+          yield JSON.parse(json);
+        }
+      }
+    } finally {
+      reader.releaseLock();
+    }
+  }
+  async putFile(path, content) {
+    if (!this.sessionId) {
+      throw new Error("File operations require a sessionId (persistent mode)");
+    }
+    const base64 = typeof content === "string" ? Buffer.from(content).toString("base64") : content.toString("base64");
+    const res = await this.fetch("/file", {
+      method: "POST",
+      body: JSON.stringify({
+        sessionId: this.sessionId,
+        path,
+        content: base64
+      })
+    });
+    if (!res.ok) {
+      throw new Error(`File upload failed: ${res.statusText}`);
+    }
+  }
+  async getFile(path) {
+    if (!this.sessionId) {
+      throw new Error("File operations require a sessionId (persistent mode)");
+    }
+    const params = new URLSearchParams({ sessionId: this.sessionId, path });
+    const res = await this.fetch(`/file?${params}`);
+    if (!res.ok) {
+      throw new Error(`File download failed: ${res.statusText}`);
+    }
+    const body = await res.json();
+    return Buffer.from(body.content, "base64");
+  }
+  async fetch(path, init) {
+    return globalThis.fetch(`${this.host}${path}`, {
+      ...init,
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${this.apiKey}`,
+        ...init?.headers ?? {}
+      }
+    });
+  }
+}
+// src/config.ts
+import { existsSync, readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+var DEFAULT_CONFIG = {
+  maxConcurrent: 10,
+  defaults: {
+    timeoutMs: 30000,
+    memoryLimit: "512m",
+    cpuLimit: 1,
+    network: "none",
+    sandboxSize: "512m",
+    tmpSize: "256m"
+  },
+  network: {
+    whitelist: [],
+    blacklist: []
+  },
+  cleanup: {
+    autoPrune: true,
+    maxContainerAgeMs: 3600000
+  },
+  dependencies: {},
+  debug: false
+};
+function loadConfig(cwd) {
+  const searchPaths = [
+    join(resolve(cwd ?? process.cwd()), "isol8.config.json"),
+    join(homedir(), ".isol8", "config.json")
+  ];
+  for (const configPath of searchPaths) {
+    if (existsSync(configPath)) {
+      const raw = readFileSync(configPath, "utf-8");
+      const parsed = JSON.parse(raw);
+      return mergeConfig(DEFAULT_CONFIG, parsed);
+    }
+  }
+  return { ...DEFAULT_CONFIG };
+}
+function mergeConfig(defaults, overrides) {
+  return {
+    maxConcurrent: overrides.maxConcurrent ?? defaults.maxConcurrent,
+    defaults: {
+      ...defaults.defaults,
+      ...overrides.defaults
+    },
+    network: {
+      whitelist: overrides.network?.whitelist ?? defaults.network.whitelist,
+      blacklist: overrides.network?.blacklist ?? defaults.network.blacklist
+    },
+    cleanup: {
+      ...defaults.cleanup,
+      ...overrides.cleanup
+    },
+    dependencies: {
+      ...defaults.dependencies,
+      ...overrides.dependencies
+    },
+    debug: overrides.debug ?? defaults.debug
+  };
+}
+
+// src/index.ts
+init_docker();
+init_runtime();
+
+// src/server/index.ts
+import { Hono } from "hono";
+// package.json
+var package_default = {
+  name: "isol8",
+  version: "0.6.0",
+  description: "Secure code execution engine for AI agents",
+  author: "Illusion47586",
+  license: "MIT",
+  repository: {
+    type: "git",
+    url: "https://github.com/Illusion47586/isol8.git"
+  },
+  homepage: "https://github.com/Illusion47586/isol8",
+  bugs: {
+    url: "https://github.com/Illusion47586/isol8/issues"
+  },
+  keywords: [
+    "sandbox",
+    "docker",
+    "code-execution",
+    "isolation",
+    "security",
+    "ai-agents",
+    "container",
+    "runtime"
+  ],
+  type: "module",
+  main: "./dist/index.js",
+  types: "./dist/index.d.ts",
+  exports: {
+    ".": {
+      import: "./dist/index.js",
+      types: "./dist/index.d.ts"
+    },
+    "./schema": "./schema/isol8.config.schema.json"
+  },
+  bin: {
+    isol8: "./dist/cli.js"
+  },
+  scripts: {
+    dev: "bun run src/cli.ts",
+    build: "bun run scripts/build.ts",
+    "build:server": "bun run scripts/build-server.ts",
+    "build:server:all": "bun run scripts/build-server.ts --all",
+    test: "bun test",
+    "lint:check": "ultracite check",
+    "lint:fix": "ultracite fix",
+    bench: "bunx tsx benchmarks/spawn.ts",
+    "bench:pool": "bunx tsx benchmarks/spawn-pool.ts",
+    "bench:detailed": "bunx tsx benchmarks/spawn-detailed.ts",
+    "docs:dev": "cd docs && mint dev",
+    "docs:validate": "cd docs && mint validate",
+    "docs:broken-links": "cd docs && mint broken-links",
+    schema: "ts-json-schema-generator --path src/types.ts --type Isol8UserConfig --tsconfig tsconfig.json -o schema/isol8.config.schema.json && ultracite fix schema/isol8.config.schema.json",
+    "publish:alpha": "bun run build && bun publish --tag alpha --access public --ignore-scripts",
+    prepare: "simple-git-hooks"
+  },
+  dependencies: {
+    commander: "^14.0.3",
+    dockerode: "^4.0.9",
+    hono: "^4.11.9",
+    ora: "^9.3.0"
+  },
+  devDependencies: {
+    "@biomejs/biome": "^2.3.15",
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/git": "^10.0.1",
+    "@semantic-release/github": "^12.0.6",
+    "@semantic-release/npm": "^13.1.4",
+    "@types/bun": "latest",
+    "@types/dockerode": "^4.0.1",
+    "@types/node": "^25.2.3",
+    "lint-staged": "^16.2.7",
+    mint: "^4.2.348",
+    "semantic-release": "^25.0.3",
+    "simple-git-hooks": "^2.13.1",
+    "ts-json-schema-generator": "^2.5.0",
+    typescript: "^5.9.3",
+    ultracite: "^7.2.0"
+  },
+  files: [
+    "dist/cli.js",
+    "dist/index.js",
+    "dist/src",
+    "dist/docker",
+    "schema",
+    "README.md",
+    "LICENSE"
+  ],
+  jsonValidation: [
+    {
+      fileMatch: "isol8.config.json",
+      url: "./schema/isol8.config.schema.json"
+    }
+  ],
+  "simple-git-hooks": {
+    "pre-commit": "bun run lint-staged"
+  },
+  "lint-staged": {
+    "*.{ts,tsx}": [
+      "ultracite fix",
+      "bash -c 'bunx tsc --noEmit -p tsconfig.json'"
+    ],
+    "src/types.ts": [
+      "bash -c 'bun run schema'",
+      "git add schema/isol8.config.schema.json"
+    ]
+  }
+};
+
+// src/version.ts
+var VERSION = package_default.version;
+
+// src/server/auth.ts
+function authMiddleware(apiKey) {
+  return async (c, next) => {
+    if (c.req.path === "/health") {
+      return next();
+    }
+    const authHeader = c.req.header("Authorization");
+    if (!authHeader) {
+      return c.json({ error: "Missing Authorization header" }, 401);
+    }
+    const token = authHeader.replace(/^Bearer\s+/i, "");
+    if (token !== apiKey) {
+      return c.json({ error: "Invalid API key" }, 403);
+    }
     return next();
   };
 }
 
 // src/server/index.ts
 var sessions = new Map;
-function createServer(options) {
+async function createServer(options) {
+  const { DockerIsol8: DockerIsol82 } = await Promise.resolve().then(() => (init_docker(), exports_docker));
+  await Promise.resolve().then(() => (init_runtime(), exports_runtime));
   const config = loadConfig();
   const app = new Hono;
   const globalSemaphore = new Semaphore(config.maxConcurrent);
   app.use("*", authMiddleware(options.apiKey));
-  app.get("/health", (c) => c.json({ status: "ok", version: "0.1.0" }));
+  app.get("/health", (c) => c.json({ status: "ok", version: VERSION }));
   app.post("/execute", async (c) => {
     const body = await c.req.json();
     const engineOptions = {
@@ -1304,12 +1486,12 @@ function createServer(options) {
         engine = session.engine;
         session.lastAccessedAt = Date.now();
       } else {
-        engine = new DockerIsol8(engineOptions, config.maxConcurrent);
+        engine = new DockerIsol82(engineOptions, config.maxConcurrent);
         await engine.start();
         sessions.set(body.sessionId, { engine, lastAccessedAt: Date.now() });
       }
     } else {
-      engine = new DockerIsol8(engineOptions, config.maxConcurrent);
+      engine = new DockerIsol82(engineOptions, config.maxConcurrent);
       await engine.start();
     }
     try {
@@ -1341,7 +1523,7 @@ function createServer(options) {
       ...body.options,
       mode: "ephemeral"
     };
-    const engine = new DockerIsol8(engineOptions, config.maxConcurrent);
+    const engine = new DockerIsol82(engineOptions, config.maxConcurrent);
     await engine.start();
     const encoder = new TextEncoder;
     const stream = new ReadableStream({
@@ -1430,113 +1612,6 @@ function createServer(options) {
     port: options.port
   };
 }
-// package.json
-var package_default = {
-  name: "isol8",
-  version: "0.5.0",
-  description: "Secure code execution engine for AI agents",
-  author: "Illusion47586",
-  license: "MIT",
-  repository: {
-    type: "git",
-    url: "https://github.com/Illusion47586/isol8.git"
-  },
-  homepage: "https://github.com/Illusion47586/isol8",
-  bugs: {
-    url: "https://github.com/Illusion47586/isol8/issues"
-  },
-  keywords: [
-    "sandbox",
-    "docker",
-    "code-execution",
-    "isolation",
-    "security",
-    "ai-agents",
-    "container",
-    "runtime"
-  ],
-  type: "module",
-  main: "./dist/index.js",
-  types: "./dist/index.d.ts",
-  exports: {
-    ".": {
-      import: "./dist/index.js",
-      types: "./dist/index.d.ts"
-    },
-    "./schema": "./schema/isol8.config.schema.json"
-  },
-  bin: {
-    isol8: "./dist/cli.js"
-  },
-  scripts: {
-    dev: "bun run src/cli.ts",
-    build: "bun run scripts/build.ts",
-    test: "bun test",
-    "lint:check": "ultracite check",
-    "lint:fix": "ultracite fix",
-    bench: "bunx tsx benchmarks/spawn.ts",
-    "bench:pool": "bunx tsx benchmarks/spawn-pool.ts",
-    "bench:detailed": "bunx tsx benchmarks/spawn-detailed.ts",
-    "docs:dev": "cd docs && mint dev",
-    "docs:validate": "cd docs && mint validate",
-    "docs:broken-links": "cd docs && mint broken-links",
-    schema: "ts-json-schema-generator --path src/types.ts --type Isol8UserConfig --tsconfig tsconfig.json -o schema/isol8.config.schema.json && ultracite fix schema/isol8.config.schema.json",
-    "publish:alpha": "bun run build && bun publish --tag alpha --access public --ignore-scripts",
-    prepare: "simple-git-hooks"
-  },
-  dependencies: {
-    commander: "^14.0.3",
-    dockerode: "^4.0.9",
-    hono: "^4.11.9",
-    ora: "^9.3.0"
-  },
-  devDependencies: {
-    "@biomejs/biome": "^2.3.15",
-    "@semantic-release/changelog": "^6.0.3",
-    "@semantic-release/git": "^10.0.1",
-    "@semantic-release/github": "^12.0.6",
-    "@semantic-release/npm": "^13.1.4",
-    "@types/bun": "latest",
-    "@types/dockerode": "^4.0.1",
-    "@types/node": "^25.2.3",
-    "lint-staged": "^16.2.7",
-    mint: "^4.2.348",
-    "semantic-release": "^25.0.3",
-    "simple-git-hooks": "^2.13.1",
-    "ts-json-schema-generator": "^2.5.0",
-    typescript: "^5.9.3",
-    ultracite: "^7.2.0"
-  },
-  files: [
-    "dist",
-    "schema",
-    "docker",
-    "README.md",
-    "LICENSE"
-  ],
-  jsonValidation: [
-    {
-      fileMatch: "isol8.config.json",
-      url: "./schema/isol8.config.schema.json"
-    }
-  ],
-  "simple-git-hooks": {
-    "pre-commit": "bun run lint-staged"
-  },
-  "lint-staged": {
-    "*.{ts,tsx}": [
-      "ultracite fix",
-      "bash -c 'bunx tsc --noEmit -p tsconfig.json'"
-    ],
-    "src/types.ts": [
-      "bash -c 'bun run schema'",
-      "git add schema/isol8.config.schema.json"
-    ]
-  }
-};
-
-// src/version.ts
-var VERSION = package_default.version;
 export {
   loadConfig,
   createServer,
@@ -1551,4 +1626,4 @@ export {
   BunAdapter
 };
 
-//# debugId=F7892F8784782B0464756E2164756E21
+//# debugId=BE9F771BA94691E364756E2164756E21