langsmith 0.10.11 → 0.10.12

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## [0.10.12](https://github.com/langchain-ai/langsmith-javascript/compare/v0.10.11...v0.10.12) (2026-10-13)
+
+
+### Features
+
+* **runs:** add ai_search field and SSE streaming to query endpoints ([da3a95b](https://github.com/langchain-ai/langsmith-javascript/commit/da3a95bae3be74e8fe7af80ec84bfb1f893391e8))
+* **sandbox:** accept any JOSE asymmetric algorithm chosen by the JWKS key ([#46](https://github.com/langchain-ai/langsmith-javascript/issues/46)) ([988b7d1](https://github.com/langchain-ai/langsmith-javascript/commit/988b7d1366200930621092198919dad69e157bd9))
+* **sandboxes:** add encryption spec and cache/encryption mount variants ([6047b3c](https://github.com/langchain-ai/langsmith-javascript/commit/6047b3c2500b0291a8bb6b8492a15a243198790c))
+* **webhooks:** add test_webhook_destination endpoint ([a5c70fd](https://github.com/langchain-ai/langsmith-javascript/commit/a5c70fdb5fac90901a20b2a45a5dc1c43ec71ca9))
+
+
+### Bug Fixes
+
+* bump vulnerable transitive dependencies ([#43](https://github.com/langchain-ai/langsmith-javascript/issues/43)) ([caa8c27](https://github.com/langchain-ai/langsmith-javascript/commit/caa8c2747356093843f8a57f5ea08fdaed92e9b9))
+
+
+### Chores
+
+* move sandbox auth options to the bottom of README.md ([#44](https://github.com/langchain-ai/langsmith-javascript/issues/44)) ([d2d2a42](https://github.com/langchain-ai/langsmith-javascript/commit/d2d2a422166c5221df830f841e2ba6cedcc75b40))
+
 ## [0.10.11](https://github.com/langchain-ai/langsmith-javascript/compare/v0.10.10...v0.10.11) (2026-10-09)
 
 

package/README.md

@@ -25,204 +25,6 @@ A typical workflow looks like:
 
 We'll walk through these steps in more detail below.
 
-## Sandbox AWS Auth Proxy
-
-When sandbox code needs to call AWS services, use the sandbox AWS auth proxy.
-The proxy keeps the real AWS credentials outside the sandbox and signs supported
-AWS HTTPS requests with SigV4, so code in the sandbox can use AWS SDKs normally
-without storing long-lived AWS keys in files, environment variables, shell
-history, or logs.
-
-Store AWS credentials as LangSmith workspace secrets using names that make sense
-for your workspace. Then create the sandbox with an AWS auth proxy config:
-
-```ts
-import { SandboxClient, awsAuth, proxyConfig, workspaceSecret } from 'langsmith/sandbox';
-
-const client = new SandboxClient();
-const authConfig = proxyConfig({
-  rules: [
-    awsAuth({
-      accessKeyId: workspaceSecret('SANDBOX_AWS_ACCESS_KEY_ID'),
-      secretAccessKey: workspaceSecret('SANDBOX_AWS_SECRET_ACCESS_KEY'),
-    }),
-  ],
-});
-
-const sandbox = await client.createSandbox({
-  name: 'aws-sandbox',
-  proxyConfig: authConfig,
-});
-
-try {
-  const result = await sandbox.run('node your-aws-script.js');
-  console.log(result.stdout);
-} finally {
-  await sandbox.delete();
-}
-```
-
-Use `opaqueSecret("...")` instead of `workspaceSecret(...)` when your application
-needs to pass short-lived write-only AWS credentials at sandbox creation time.
-Plaintext AWS credential values are not accepted directly; wrap them as
-`opaqueSecret(...)` values.
-
-## Sandbox GCP Auth Proxy
-
-When sandbox code needs to call Google APIs, use the sandbox GCP auth proxy.
-The proxy keeps the service account JSON outside the sandbox and injects OAuth
-bearer tokens for Google API hosts matched automatically by the sandbox proxy.
-
-Store the service account JSON as a LangSmith workspace secret. Then create the
-sandbox with a GCP auth proxy config:
-
-```ts
-import { SandboxClient, gcpAuth, proxyConfig, workspaceSecret } from 'langsmith/sandbox';
-
-const client = new SandboxClient();
-const authConfig = proxyConfig({
-  rules: [
-    gcpAuth({
-      serviceAccountJson: workspaceSecret('SANDBOX_GCP_SERVICE_ACCOUNT_JSON'),
-      scopes: ['https://www.googleapis.com/auth/devstorage.read_write'],
-    }),
-  ],
-});
-
-const sandbox = await client.createSandbox({
-  name: 'gcp-sandbox',
-  proxyConfig: authConfig,
-});
-
-try {
-  const result = await sandbox.run('node your-gcp-script.js');
-  console.log(result.stdout);
-} finally {
-  await sandbox.delete();
-}
-```
-
-Use `opaqueSecret("...")` for short-lived write-only service account JSON.
-Plaintext service account JSON is not accepted directly.
-
-## Sandbox Mounts
-
-When you create a LangSmith sandbox that needs filesystem access to external
-data such as object storage buckets or public Git repositories, pass a
-`mountConfig` on sandbox creation. Mount specs contain only the mount target.
-Provider credentials stay in `mountConfig.auth`; the backend expands them into
-runtime proxy auth rules. You can also pass `proxyConfig` for non-mount proxy
-behavior such as custom headers, callbacks, access control, and generic egress
-rules. Explicit AWS/GCP proxy auth rules conflict with `mountConfig` auth for
-the same provider.
-
-S3 mounts require AWS auth:
-
-```ts
-import { awsAuth, mountConfig, s3Mount, workspaceSecret } from 'langsmith/sandbox';
-
-const mountCfg = mountConfig({
-  auth: [
-    awsAuth({
-      accessKeyId: workspaceSecret('SANDBOX_AWS_ACCESS_KEY_ID'),
-      secretAccessKey: workspaceSecret('SANDBOX_AWS_SECRET_ACCESS_KEY'),
-    }),
-  ],
-  mounts: [
-    s3Mount({
-      id: 'customer_data',
-      mountPath: '/mnt/mounts/customer-data',
-      bucket: 'example-bucket',
-      prefix: 'datasets/customer-data',
-      region: 'us-east-1',
-      endpointUrl: 'https://s3.amazonaws.com',
-      pathStyle: false,
-      readOnly: false,
-    }),
-  ],
-});
-
-const sandbox = await client.createSandbox({
-  name: 's3-mount-sandbox',
-  mountConfig: mountCfg,
-});
-
-try {
-  const result = await sandbox.run('ls /mnt/mounts/customer-data');
-  console.log(result.stdout);
-} finally {
-  await sandbox.delete();
-}
-```
-
-GCS mounts require GCP auth:
-
-```ts
-import { gcpAuth, gcsMount, mountConfig, workspaceSecret } from 'langsmith/sandbox';
-
-const mountCfg = mountConfig({
-  auth: [
-    gcpAuth({
-      serviceAccountJson: workspaceSecret('SANDBOX_GCP_SERVICE_ACCOUNT_JSON'),
-    }),
-  ],
-  mounts: [
-    gcsMount({
-      id: 'customer_data',
-      mountPath: '/mnt/mounts/customer-data',
-      bucket: 'example-bucket',
-      prefix: 'datasets/customer-data',
-    }),
-  ],
-});
-
-const sandbox = await client.createSandbox({
-  name: 'gcs-mount-sandbox',
-  mountConfig: mountCfg,
-});
-
-try {
-  const result = await sandbox.run('ls /mnt/mounts/customer-data');
-  console.log(result.stdout);
-} finally {
-  await sandbox.delete();
-}
-```
-
-Public Git mounts do not require AWS or GCP auth:
-
-```ts
-import { gitMount, mountConfig } from 'langsmith/sandbox';
-
-const mountCfg = mountConfig({
-  mounts: [
-    gitMount({
-      id: 'repo',
-      mountPath: '/mnt/repo',
-      remoteUrl: 'https://github.com/langchain-ai/langsmith-javascript.git',
-      ref: { type: 'branch', name: 'main' },
-      refreshIntervalSeconds: 60,
-    }),
-  ],
-});
-
-const sandbox = await client.createSandbox({
-  name: 'git-mount-sandbox',
-  mountConfig: mountCfg,
-});
-
-try {
-  const result = await sandbox.run('ls /mnt/repo');
-  console.log(result.stdout);
-} finally {
-  await sandbox.delete();
-}
-```
-
-Private Git repositories can use low-level `proxyConfig` rules when the remote
-requires proxy-managed auth. There is not yet a high-level private Git auth
-helper.
-
 ## 1. Connect to LangSmith
 
 Sign up for [LangSmith](https://smith.langchain.com/) using your GitHub, Discord accounts, or an email address and password. If you sign up with an email, make sure to verify your email address before logging in.
@@ -1030,6 +832,204 @@ const client = new Langsmith({
 });
 ```
 
+### Sandbox AWS Auth Proxy
+
+When sandbox code needs to call AWS services, use the sandbox AWS auth proxy.
+The proxy keeps the real AWS credentials outside the sandbox and signs supported
+AWS HTTPS requests with SigV4, so code in the sandbox can use AWS SDKs normally
+without storing long-lived AWS keys in files, environment variables, shell
+history, or logs.
+
+Store AWS credentials as LangSmith workspace secrets using names that make sense
+for your workspace. Then create the sandbox with an AWS auth proxy config:
+
+```ts
+import { SandboxClient, awsAuth, proxyConfig, workspaceSecret } from 'langsmith/sandbox';
+
+const client = new SandboxClient();
+const authConfig = proxyConfig({
+  rules: [
+    awsAuth({
+      accessKeyId: workspaceSecret('SANDBOX_AWS_ACCESS_KEY_ID'),
+      secretAccessKey: workspaceSecret('SANDBOX_AWS_SECRET_ACCESS_KEY'),
+    }),
+  ],
+});
+
+const sandbox = await client.createSandbox({
+  name: 'aws-sandbox',
+  proxyConfig: authConfig,
+});
+
+try {
+  const result = await sandbox.run('node your-aws-script.js');
+  console.log(result.stdout);
+} finally {
+  await sandbox.delete();
+}
+```
+
+Use `opaqueSecret("...")` instead of `workspaceSecret(...)` when your application
+needs to pass short-lived write-only AWS credentials at sandbox creation time.
+Plaintext AWS credential values are not accepted directly; wrap them as
+`opaqueSecret(...)` values.
+
+### Sandbox GCP Auth Proxy
+
+When sandbox code needs to call Google APIs, use the sandbox GCP auth proxy.
+The proxy keeps the service account JSON outside the sandbox and injects OAuth
+bearer tokens for Google API hosts matched automatically by the sandbox proxy.
+
+Store the service account JSON as a LangSmith workspace secret. Then create the
+sandbox with a GCP auth proxy config:
+
+```ts
+import { SandboxClient, gcpAuth, proxyConfig, workspaceSecret } from 'langsmith/sandbox';
+
+const client = new SandboxClient();
+const authConfig = proxyConfig({
+  rules: [
+    gcpAuth({
+      serviceAccountJson: workspaceSecret('SANDBOX_GCP_SERVICE_ACCOUNT_JSON'),
+      scopes: ['https://www.googleapis.com/auth/devstorage.read_write'],
+    }),
+  ],
+});
+
+const sandbox = await client.createSandbox({
+  name: 'gcp-sandbox',
+  proxyConfig: authConfig,
+});
+
+try {
+  const result = await sandbox.run('node your-gcp-script.js');
+  console.log(result.stdout);
+} finally {
+  await sandbox.delete();
+}
+```
+
+Use `opaqueSecret("...")` for short-lived write-only service account JSON.
+Plaintext service account JSON is not accepted directly.
+
+### Sandbox Mounts
+
+When you create a LangSmith sandbox that needs filesystem access to external
+data such as object storage buckets or public Git repositories, pass a
+`mountConfig` on sandbox creation. Mount specs contain only the mount target.
+Provider credentials stay in `mountConfig.auth`; the backend expands them into
+runtime proxy auth rules. You can also pass `proxyConfig` for non-mount proxy
+behavior such as custom headers, callbacks, access control, and generic egress
+rules. Explicit AWS/GCP proxy auth rules conflict with `mountConfig` auth for
+the same provider.
+
+S3 mounts require AWS auth:
+
+```ts
+import { awsAuth, mountConfig, s3Mount, workspaceSecret } from 'langsmith/sandbox';
+
+const mountCfg = mountConfig({
+  auth: [
+    awsAuth({
+      accessKeyId: workspaceSecret('SANDBOX_AWS_ACCESS_KEY_ID'),
+      secretAccessKey: workspaceSecret('SANDBOX_AWS_SECRET_ACCESS_KEY'),
+    }),
+  ],
+  mounts: [
+    s3Mount({
+      id: 'customer_data',
+      mountPath: '/mnt/mounts/customer-data',
+      bucket: 'example-bucket',
+      prefix: 'datasets/customer-data',
+      region: 'us-east-1',
+      endpointUrl: 'https://s3.amazonaws.com',
+      pathStyle: false,
+      readOnly: false,
+    }),
+  ],
+});
+
+const sandbox = await client.createSandbox({
+  name: 's3-mount-sandbox',
+  mountConfig: mountCfg,
+});
+
+try {
+  const result = await sandbox.run('ls /mnt/mounts/customer-data');
+  console.log(result.stdout);
+} finally {
+  await sandbox.delete();
+}
+```
+
+GCS mounts require GCP auth:
+
+```ts
+import { gcpAuth, gcsMount, mountConfig, workspaceSecret } from 'langsmith/sandbox';
+
+const mountCfg = mountConfig({
+  auth: [
+    gcpAuth({
+      serviceAccountJson: workspaceSecret('SANDBOX_GCP_SERVICE_ACCOUNT_JSON'),
+    }),
+  ],
+  mounts: [
+    gcsMount({
+      id: 'customer_data',
+      mountPath: '/mnt/mounts/customer-data',
+      bucket: 'example-bucket',
+      prefix: 'datasets/customer-data',
+    }),
+  ],
+});
+
+const sandbox = await client.createSandbox({
+  name: 'gcs-mount-sandbox',
+  mountConfig: mountCfg,
+});
+
+try {
+  const result = await sandbox.run('ls /mnt/mounts/customer-data');
+  console.log(result.stdout);
+} finally {
+  await sandbox.delete();
+}
+```
+
+Public Git mounts do not require AWS or GCP auth:
+
+```ts
+import { gitMount, mountConfig } from 'langsmith/sandbox';
+
+const mountCfg = mountConfig({
+  mounts: [
+    gitMount({
+      id: 'repo',
+      mountPath: '/mnt/repo',
+      remoteUrl: 'https://github.com/langchain-ai/langsmith-javascript.git',
+      ref: { type: 'branch', name: 'main' },
+      refreshIntervalSeconds: 60,
+    }),
+  ],
+});
+
+const sandbox = await client.createSandbox({
+  name: 'git-mount-sandbox',
+  mountConfig: mountCfg,
+});
+
+try {
+  const result = await sandbox.run('ls /mnt/repo');
+  console.log(result.stdout);
+} finally {
+  await sandbox.delete();
+}
+```
+
+Private Git repositories can use low-level `proxyConfig` rules when the remote
+requires proxy-managed auth. There is not yet a high-level private Git auth
+helper.
+
 ## Frequently Asked Questions
 
 ## Semantic versioning

package/lib/sandbox/index.d.mts

@@ -38,6 +38,6 @@ export type { AudienceMatcher, SandboxCallback, SandboxCallbackIdentity, Sandbox
 export { contextHubMount, gcsMount, gitMount, mountConfig, s3Mount, } from "./mounts.mjs";
 export type { AccessDelegation, AccessDelegationMode, } from "./access_delegation.mjs";
 export type { ServiceAccess, ServiceUrlData } from "./service_url.mjs";
-export type { ExecutionResult, FileChunk, FileInfo, FileStat, GlobOptions, GlobResult, GrepMatch, GrepOptions, GrepResult, ReadRangeOptions, RunConfig, OutputChunk, WsMessage, WsRunOptions, ResourceStatus, Snapshot, SandboxData, SandboxClientConfig, RunOptions, CreateSandboxOptions, SandboxAccessControl, SandboxAwsAuthRule, SandboxAwsMountAuthConfig, SandboxGcpAuthRule, SandboxGcpMountAuthConfig, SandboxMountAuth, SandboxMountAuthConfig, SandboxMountConfig, SandboxProxyConfig, SandboxProxyRule, SandboxProxySecret, SandboxMount, MountCacheConfig, ContextHubMountConfig, ContextHubMountSpec, GCSMountConfig, GCSMountSpec, GitMountConfig, GitMountRefSpec, GitMountSpec, S3MountConfig, S3MountSpec, CreateSnapshotOptions, CreateDockerfileSnapshotOptions, CaptureSnapshotOptions, DownloadContentDisposition, DownloadURL, GenerateDownloadURLOptions, ListSnapshotsOptions, WaitForSnapshotOptions, StartSandboxOptions, UpdateSandboxOptions, WaitForSandboxOptions, } from "./types.mjs";
+export type { ExecutionResult, FileChunk, FileInfo, FileStat, GlobOptions, GlobResult, GrepMatch, GrepOptions, GrepResult, ReadRangeOptions, RunConfig, OutputChunk, WsMessage, WsRunOptions, ResourceStatus, Snapshot, SandboxData, SandboxClientConfig, RunOptions, CreateSandboxOptions, SandboxAccessControl, SandboxAwsAuthRule, SandboxAwsMountAuthConfig, SandboxGcpAuthRule, SandboxGcpMountAuthConfig, SandboxMountAuth, SandboxMountAuthConfig, SandboxMountConfig, SandboxProxyConfig, SandboxProxyRule, SandboxProxySecret, SandboxMount, MountCacheConfig, MountEncryptionConfig, ContextHubMountConfig, ContextHubMountSpec, GCSMountConfig, GCSMountSpec, GitMountConfig, GitMountRefSpec, GitMountSpec, S3MountConfig, S3MountSpec, CreateSnapshotOptions, CreateDockerfileSnapshotOptions, CaptureSnapshotOptions, DownloadContentDisposition, DownloadURL, GenerateDownloadURLOptions, ListSnapshotsOptions, WaitForSnapshotOptions, StartSandboxOptions, UpdateSandboxOptions, WaitForSandboxOptions, } from "./types.mjs";
 export { LangSmithSandboxError, LangSmithSandboxAPIError, LangSmithSandboxAuthenticationError, LangSmithSandboxConnectionError, LangSmithSandboxRetryableConnectionError, LangSmithSandboxConnectTimeoutError, LangSmithSandboxServerReloadError, LangSmithResourceNotFoundError, LangSmithResourceTimeoutError, LangSmithResourceInUseError, LangSmithResourceAlreadyExistsError, LangSmithResourceNameConflictError, LangSmithValidationError, LangSmithQuotaExceededError, LangSmithResourceCreationError, LangSmithSandboxCreationError, LangSmithSandboxNotReadyError, LangSmithSandboxOperationError, LangSmithCommandTimeoutError, LangSmithDataplaneNotConfiguredError, LangSmithSandboxTokenVerificationError, } from "./errors.mjs";
 //# sourceMappingURL=index.d.mts.map

package/lib/sandbox/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,aAAa,EAAE,qBAAoB;AAC5C,OAAO,EAAE,OAAO,EAAE,sBAAqB;AACvC,OAAO,EAAE,aAAa,EAAE,6BAA4B;AACpD,OAAO,EACL,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,2BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,gCAA+B;AAClE,OAAO,EACL,UAAU,EACV,eAAe,EACf,oBAAoB,GACrB,0BAAyB;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,qBAAoB;AACrB,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,qBAAoB;AACrB,OAAO,EACL,eAAe,EACf,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,OAAO,GACR,qBAAoB;AAGrB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,GACrB,gCAA+B;AAChC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,0BAAyB;AACtE,YAAY,EACV,eAAe,EACf,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,YAAY,EACZ,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,+BAA+B,EAC/B,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,GACtB,oBAAmB;AAGpB,OAAO,EAEL,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC,EAEjC,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,mCAAmC,EACnC,kCAAkC,EAElC,wBAAwB,EACxB,2BAA2B,EAE3B,8BAA8B,EAE9B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,oCAAoC,EACpC,sCAAsC,GACvC,qBAAoB"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,aAAa,EAAE,qBAAoB;AAC5C,OAAO,EAAE,OAAO,EAAE,sBAAqB;AACvC,OAAO,EAAE,aAAa,EAAE,6BAA4B;AACpD,OAAO,EACL,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,2BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,gCAA+B;AAClE,OAAO,EACL,UAAU,EACV,eAAe,EACf,oBAAoB,GACrB,0BAAyB;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,qBAAoB;AACrB,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,qBAAoB;AACrB,OAAO,EACL,eAAe,EACf,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,OAAO,GACR,qBAAoB;AAGrB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,GACrB,gCAA+B;AAChC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,0BAAyB;AACtE,YAAY,EACV,eAAe,EACf,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,YAAY,EACZ,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,+BAA+B,EAC/B,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,GACtB,oBAAmB;AAGpB,OAAO,EAEL,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC,EAEjC,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,mCAAmC,EACnC,kCAAkC,EAElC,wBAAwB,EACxB,2BAA2B,EAE3B,8BAA8B,EAE9B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,oCAAoC,EACpC,sCAAsC,GACvC,qBAAoB"}

package/lib/sandbox/index.d.ts

@@ -38,6 +38,6 @@ export type { AudienceMatcher, SandboxCallback, SandboxCallbackIdentity, Sandbox
 export { contextHubMount, gcsMount, gitMount, mountConfig, s3Mount, } from "./mounts.js";
 export type { AccessDelegation, AccessDelegationMode, } from "./access_delegation.js";
 export type { ServiceAccess, ServiceUrlData } from "./service_url.js";
-export type { ExecutionResult, FileChunk, FileInfo, FileStat, GlobOptions, GlobResult, GrepMatch, GrepOptions, GrepResult, ReadRangeOptions, RunConfig, OutputChunk, WsMessage, WsRunOptions, ResourceStatus, Snapshot, SandboxData, SandboxClientConfig, RunOptions, CreateSandboxOptions, SandboxAccessControl, SandboxAwsAuthRule, SandboxAwsMountAuthConfig, SandboxGcpAuthRule, SandboxGcpMountAuthConfig, SandboxMountAuth, SandboxMountAuthConfig, SandboxMountConfig, SandboxProxyConfig, SandboxProxyRule, SandboxProxySecret, SandboxMount, MountCacheConfig, ContextHubMountConfig, ContextHubMountSpec, GCSMountConfig, GCSMountSpec, GitMountConfig, GitMountRefSpec, GitMountSpec, S3MountConfig, S3MountSpec, CreateSnapshotOptions, CreateDockerfileSnapshotOptions, CaptureSnapshotOptions, DownloadContentDisposition, DownloadURL, GenerateDownloadURLOptions, ListSnapshotsOptions, WaitForSnapshotOptions, StartSandboxOptions, UpdateSandboxOptions, WaitForSandboxOptions, } from "./types.js";
+export type { ExecutionResult, FileChunk, FileInfo, FileStat, GlobOptions, GlobResult, GrepMatch, GrepOptions, GrepResult, ReadRangeOptions, RunConfig, OutputChunk, WsMessage, WsRunOptions, ResourceStatus, Snapshot, SandboxData, SandboxClientConfig, RunOptions, CreateSandboxOptions, SandboxAccessControl, SandboxAwsAuthRule, SandboxAwsMountAuthConfig, SandboxGcpAuthRule, SandboxGcpMountAuthConfig, SandboxMountAuth, SandboxMountAuthConfig, SandboxMountConfig, SandboxProxyConfig, SandboxProxyRule, SandboxProxySecret, SandboxMount, MountCacheConfig, MountEncryptionConfig, ContextHubMountConfig, ContextHubMountSpec, GCSMountConfig, GCSMountSpec, GitMountConfig, GitMountRefSpec, GitMountSpec, S3MountConfig, S3MountSpec, CreateSnapshotOptions, CreateDockerfileSnapshotOptions, CaptureSnapshotOptions, DownloadContentDisposition, DownloadURL, GenerateDownloadURLOptions, ListSnapshotsOptions, WaitForSnapshotOptions, StartSandboxOptions, UpdateSandboxOptions, WaitForSandboxOptions, } from "./types.js";
 export { LangSmithSandboxError, LangSmithSandboxAPIError, LangSmithSandboxAuthenticationError, LangSmithSandboxConnectionError, LangSmithSandboxRetryableConnectionError, LangSmithSandboxConnectTimeoutError, LangSmithSandboxServerReloadError, LangSmithResourceNotFoundError, LangSmithResourceTimeoutError, LangSmithResourceInUseError, LangSmithResourceAlreadyExistsError, LangSmithResourceNameConflictError, LangSmithValidationError, LangSmithQuotaExceededError, LangSmithResourceCreationError, LangSmithSandboxCreationError, LangSmithSandboxNotReadyError, LangSmithSandboxOperationError, LangSmithCommandTimeoutError, LangSmithDataplaneNotConfiguredError, LangSmithSandboxTokenVerificationError, } from "./errors.js";
 //# sourceMappingURL=index.d.ts.map

package/lib/sandbox/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,aAAa,EAAE,oBAAoB;AAC5C,OAAO,EAAE,OAAO,EAAE,qBAAqB;AACvC,OAAO,EAAE,aAAa,EAAE,4BAA4B;AACpD,OAAO,EACL,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,0BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,+BAA+B;AAClE,OAAO,EACL,UAAU,EACV,eAAe,EACf,oBAAoB,GACrB,yBAAyB;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,oBAAoB;AACrB,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,oBAAoB;AACrB,OAAO,EACL,eAAe,EACf,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,OAAO,GACR,oBAAoB;AAGrB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,GACrB,+BAA+B;AAChC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,yBAAyB;AACtE,YAAY,EACV,eAAe,EACf,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,YAAY,EACZ,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,+BAA+B,EAC/B,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,GACtB,mBAAmB;AAGpB,OAAO,EAEL,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC,EAEjC,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,mCAAmC,EACnC,kCAAkC,EAElC,wBAAwB,EACxB,2BAA2B,EAE3B,8BAA8B,EAE9B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,oCAAoC,EACpC,sCAAsC,GACvC,oBAAoB"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAGH,OAAO,EAAE,aAAa,EAAE,oBAAoB;AAC5C,OAAO,EAAE,OAAO,EAAE,qBAAqB;AACvC,OAAO,EAAE,aAAa,EAAE,4BAA4B;AACpD,OAAO,EACL,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,0BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,+BAA+B;AAClE,OAAO,EACL,UAAU,EACV,eAAe,EACf,oBAAoB,GACrB,yBAAyB;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,oBAAoB;AACrB,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,qBAAqB,EACrB,sBAAsB,GACvB,oBAAoB;AACrB,OAAO,EACL,eAAe,EACf,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,OAAO,GACR,oBAAoB;AAGrB,YAAY,EACV,gBAAgB,EAChB,oBAAoB,GACrB,+BAA+B;AAChC,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,yBAAyB;AACtE,YAAY,EACV,eAAe,EACf,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,UAAU,EACV,SAAS,EACT,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,WAAW,EACX,SAAS,EACT,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,oBAAoB,EACpB,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,EAChB,sBAAsB,EACtB,kBAAkB,EAClB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,YAAY,EACZ,cAAc,EACd,eAAe,EACf,YAAY,EACZ,aAAa,EACb,WAAW,EACX,qBAAqB,EACrB,+BAA+B,EAC/B,sBAAsB,EACtB,0BAA0B,EAC1B,WAAW,EACX,0BAA0B,EAC1B,oBAAoB,EACpB,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,GACtB,mBAAmB;AAGpB,OAAO,EAEL,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC,EAEjC,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,mCAAmC,EACnC,kCAAkC,EAElC,wBAAwB,EACxB,2BAA2B,EAE3B,8BAA8B,EAE9B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,oCAAoC,EACpC,sCAAsC,GACvC,oBAAoB"}

package/lib/sandbox/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAEH,eAAe;AACf,yCAA4C;AAAnC,0GAAA,aAAa,OAAA;AACtB,2CAAuC;AAA9B,qGAAA,OAAO,OAAA;AAChB,yDAAoD;AAA3C,kHAAA,aAAa,OAAA;AACtB,qDAM2B;AALzB,0GAAA,OAAO,OAAA;AACP,0GAAA,OAAO,OAAA;AACP,+GAAA,YAAY,OAAA;AACZ,8GAAA,WAAW,OAAA;AACX,kHAAA,eAAe,OAAA;AAEjB,+DAAkE;AAAzD,gIAAA,wBAAwB,OAAA;AACjC,mDAI0B;AAHxB,4GAAA,UAAU,OAAA;AACV,iHAAA,eAAe,OAAA;AACf,sHAAA,oBAAoB,OAAA;AAEtB,yCAIqB;AAHnB,iHAAA,oBAAoB,OAAA;AACpB,8GAAA,iBAAiB,OAAA;AACjB,sHAAA,yBAAyB,OAAA;AAY3B,yCAMqB;AALnB,4GAAA,eAAe,OAAA;AACf,qGAAA,QAAQ,OAAA;AACR,qGAAA,QAAQ,OAAA;AACR,wGAAA,WAAW,OAAA;AACX,oGAAA,OAAO,OAAA;AAiET,SAAS;AACT,yCA2BqB;AA1BnB,6BAA6B;AAC7B,kHAAA,qBAAqB,OAAA;AACrB,qHAAA,wBAAwB,OAAA;AACxB,gIAAA,mCAAmC,OAAA;AACnC,4HAAA,+BAA+B,OAAA;AAC/B,qIAAA,wCAAwC,OAAA;AACxC,gIAAA,mCAAmC,OAAA;AACnC,8HAAA,iCAAiC,OAAA;AACjC,2DAA2D;AAC3D,2HAAA,8BAA8B,OAAA;AAC9B,0HAAA,6BAA6B,OAAA;AAC7B,wHAAA,2BAA2B,OAAA;AAC3B,gIAAA,mCAAmC,OAAA;AACnC,+HAAA,kCAAkC,OAAA;AAClC,8BAA8B;AAC9B,qHAAA,wBAAwB,OAAA;AACxB,wHAAA,2BAA2B,OAAA;AAC3B,2BAA2B;AAC3B,2HAAA,8BAA8B,OAAA;AAC9B,0BAA0B;AAC1B,0HAAA,6BAA6B,OAAA;AAC7B,0HAAA,6BAA6B,OAAA;AAC7B,2HAAA,8BAA8B,OAAA;AAC9B,yHAAA,4BAA4B,OAAA;AAC5B,iIAAA,oCAAoC,OAAA;AACpC,mIAAA,sCAAsC,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAEH,eAAe;AACf,yCAA4C;AAAnC,0GAAA,aAAa,OAAA;AACtB,2CAAuC;AAA9B,qGAAA,OAAO,OAAA;AAChB,yDAAoD;AAA3C,kHAAA,aAAa,OAAA;AACtB,qDAM2B;AALzB,0GAAA,OAAO,OAAA;AACP,0GAAA,OAAO,OAAA;AACP,+GAAA,YAAY,OAAA;AACZ,8GAAA,WAAW,OAAA;AACX,kHAAA,eAAe,OAAA;AAEjB,+DAAkE;AAAzD,gIAAA,wBAAwB,OAAA;AACjC,mDAI0B;AAHxB,4GAAA,UAAU,OAAA;AACV,iHAAA,eAAe,OAAA;AACf,sHAAA,oBAAoB,OAAA;AAEtB,yCAIqB;AAHnB,iHAAA,oBAAoB,OAAA;AACpB,8GAAA,iBAAiB,OAAA;AACjB,sHAAA,yBAAyB,OAAA;AAY3B,yCAMqB;AALnB,4GAAA,eAAe,OAAA;AACf,qGAAA,QAAQ,OAAA;AACR,qGAAA,QAAQ,OAAA;AACR,wGAAA,WAAW,OAAA;AACX,oGAAA,OAAO,OAAA;AAkET,SAAS;AACT,yCA2BqB;AA1BnB,6BAA6B;AAC7B,kHAAA,qBAAqB,OAAA;AACrB,qHAAA,wBAAwB,OAAA;AACxB,gIAAA,mCAAmC,OAAA;AACnC,4HAAA,+BAA+B,OAAA;AAC/B,qIAAA,wCAAwC,OAAA;AACxC,gIAAA,mCAAmC,OAAA;AACnC,8HAAA,iCAAiC,OAAA;AACjC,2DAA2D;AAC3D,2HAAA,8BAA8B,OAAA;AAC9B,0HAAA,6BAA6B,OAAA;AAC7B,wHAAA,2BAA2B,OAAA;AAC3B,gIAAA,mCAAmC,OAAA;AACnC,+HAAA,kCAAkC,OAAA;AAClC,8BAA8B;AAC9B,qHAAA,wBAAwB,OAAA;AACxB,wHAAA,2BAA2B,OAAA;AAC3B,2BAA2B;AAC3B,2HAAA,8BAA8B,OAAA;AAC9B,0BAA0B;AAC1B,0HAAA,6BAA6B,OAAA;AAC7B,0HAAA,6BAA6B,OAAA;AAC7B,2HAAA,8BAA8B,OAAA;AAC9B,yHAAA,4BAA4B,OAAA;AAC5B,iIAAA,oCAAoC,OAAA;AACpC,mIAAA,sCAAsC,OAAA"}

package/lib/sandbox/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,eAAe;AACf,OAAO,EAAE,aAAa,EAAE,qBAAoB;AAC5C,OAAO,EAAE,OAAO,EAAE,sBAAqB;AACvC,OAAO,EAAE,aAAa,EAAE,6BAA4B;AACpD,OAAO,EACL,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,2BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,gCAA+B;AAClE,OAAO,EACL,UAAU,EACV,eAAe,EACf,oBAAoB,GACrB,0BAAyB;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,qBAAoB;AAWrB,OAAO,EACL,eAAe,EACf,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,OAAO,GACR,qBAAoB;AAgErB,SAAS;AACT,OAAO;AACL,6BAA6B;AAC7B,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC;AACjC,2DAA2D;AAC3D,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,mCAAmC,EACnC,kCAAkC;AAClC,8BAA8B;AAC9B,wBAAwB,EACxB,2BAA2B;AAC3B,2BAA2B;AAC3B,8BAA8B;AAC9B,0BAA0B;AAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,oCAAoC,EACpC,sCAAsC,GACvC,qBAAoB"}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/lib/sandbox/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,eAAe;AACf,OAAO,EAAE,aAAa,EAAE,qBAAoB;AAC5C,OAAO,EAAE,OAAO,EAAE,sBAAqB;AACvC,OAAO,EAAE,aAAa,EAAE,6BAA4B;AACpD,OAAO,EACL,OAAO,EACP,OAAO,EACP,YAAY,EACZ,WAAW,EACX,eAAe,GAChB,2BAA0B;AAC3B,OAAO,EAAE,wBAAwB,EAAE,gCAA+B;AAClE,OAAO,EACL,UAAU,EACV,eAAe,EACf,oBAAoB,GACrB,0BAAyB;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,yBAAyB,GAC1B,qBAAoB;AAWrB,OAAO,EACL,eAAe,EACf,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,OAAO,GACR,qBAAoB;AAiErB,SAAS;AACT,OAAO;AACL,6BAA6B;AAC7B,qBAAqB,EACrB,wBAAwB,EACxB,mCAAmC,EACnC,+BAA+B,EAC/B,wCAAwC,EACxC,mCAAmC,EACnC,iCAAiC;AACjC,2DAA2D;AAC3D,8BAA8B,EAC9B,6BAA6B,EAC7B,2BAA2B,EAC3B,mCAAmC,EACnC,kCAAkC;AAClC,8BAA8B;AAC9B,wBAAwB,EACxB,2BAA2B;AAC3B,2BAA2B;AAC3B,8BAA8B;AAC9B,0BAA0B;AAC1B,6BAA6B,EAC7B,6BAA6B,EAC7B,8BAA8B,EAC9B,4BAA4B,EAC5B,oCAAoC,EACpC,sCAAsC,GACvC,qBAAoB"}

package/lib/sandbox/mounts.d.mts

@@ -1,5 +1,5 @@
-import type { ContextHubMountSpec, GCSMountSpec, GitMountRefSpec, GitMountSpec, MountCacheConfig, S3MountSpec, SandboxMount, SandboxMountAuth, SandboxMountConfig, SandboxProxyConfig } from "./types.mjs";
-export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpointUrl, pathStyle, readOnly, cache, }: {
+import type { ContextHubMountSpec, GCSMountSpec, GitMountRefSpec, GitMountSpec, MountCacheConfig, MountEncryptionConfig, S3MountSpec, SandboxMount, SandboxMountAuth, SandboxMountConfig, SandboxProxyConfig } from "./types.mjs";
+export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpointUrl, pathStyle, readOnly, cache, encryption, }: {
     id: string;
     mountPath: string;
     bucket: string;
@@ -9,6 +9,7 @@ export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpoin
     pathStyle?: boolean;
     readOnly?: boolean;
     cache?: MountCacheConfig;
+    encryption?: MountEncryptionConfig;
 }): S3MountSpec;
 export declare function gitMount({ id, mountPath, remoteUrl, ref, refreshIntervalSeconds, }: {
     id: string;

package/lib/sandbox/mounts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"mounts.d.mts","sourceRoot":"","sources":["../../src/lib/sandbox/mounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,EAGhB,WAAW,EACX,YAAY,EACZ,gBAAgB,EAEhB,kBAAkB,EAClB,kBAAkB,EAGnB,oBAAmB;AA0EpB,wBAAgB,OAAO,CAAC,EACtB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAoB,EACpB,MAAM,EACN,WAAwC,EACxC,SAAiB,EACjB,QAAQ,EACR,KAAK,GACN,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,GAAG,WAAW,CAsBd;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,SAAS,EACT,GAAG,EACH,sBAAsB,GACvB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,YAAY,CAmBf;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,GACN,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,GAAG,YAAY,CAmBf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAC9B,EAAE,EACF,SAAS,EACT,IAAI,EACJ,eAAe,GAChB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,mBAAmB,CAatB;AAwGD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAC1B,IAAS,EACT,MAAM,EACN,WAAW,GACZ,EAAE;IACD,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,GAAG,kBAAkB,CAiCrB;AAED,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,kBAAkB,EAC/B,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAC1C,IAAI,CAsBN"}
+{"version":3,"file":"mounts.d.mts","sourceRoot":"","sources":["../../src/lib/sandbox/mounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EAGrB,WAAW,EACX,YAAY,EACZ,gBAAgB,EAEhB,kBAAkB,EAClB,kBAAkB,EAGnB,oBAAmB;AA0EpB,wBAAgB,OAAO,CAAC,EACtB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAoB,EACpB,MAAM,EACN,WAAwC,EACxC,SAAiB,EACjB,QAAQ,EACR,KAAK,EACL,UAAU,GACX,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,WAAW,CA2Bd;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,SAAS,EACT,GAAG,EACH,sBAAsB,GACvB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,YAAY,CAmBf;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,GACN,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,GAAG,YAAY,CAmBf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAC9B,EAAE,EACF,SAAS,EACT,IAAI,EACJ,eAAe,GAChB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,mBAAmB,CAatB;AAwGD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAC1B,IAAS,EACT,MAAM,EACN,WAAW,GACZ,EAAE;IACD,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,GAAG,kBAAkB,CAiCrB;AAED,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,kBAAkB,EAC/B,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAC1C,IAAI,CAsBN"}

package/lib/sandbox/mounts.d.ts

@@ -1,5 +1,5 @@
-import type { ContextHubMountSpec, GCSMountSpec, GitMountRefSpec, GitMountSpec, MountCacheConfig, S3MountSpec, SandboxMount, SandboxMountAuth, SandboxMountConfig, SandboxProxyConfig } from "./types.js";
-export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpointUrl, pathStyle, readOnly, cache, }: {
+import type { ContextHubMountSpec, GCSMountSpec, GitMountRefSpec, GitMountSpec, MountCacheConfig, MountEncryptionConfig, S3MountSpec, SandboxMount, SandboxMountAuth, SandboxMountConfig, SandboxProxyConfig } from "./types.js";
+export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpointUrl, pathStyle, readOnly, cache, encryption, }: {
     id: string;
     mountPath: string;
     bucket: string;
@@ -9,6 +9,7 @@ export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpoin
     pathStyle?: boolean;
     readOnly?: boolean;
     cache?: MountCacheConfig;
+    encryption?: MountEncryptionConfig;
 }): S3MountSpec;
 export declare function gitMount({ id, mountPath, remoteUrl, ref, refreshIntervalSeconds, }: {
     id: string;

package/lib/sandbox/mounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mounts.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox/mounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,EAGhB,WAAW,EACX,YAAY,EACZ,gBAAgB,EAEhB,kBAAkB,EAClB,kBAAkB,EAGnB,mBAAmB;AA0EpB,wBAAgB,OAAO,CAAC,EACtB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAoB,EACpB,MAAM,EACN,WAAwC,EACxC,SAAiB,EACjB,QAAQ,EACR,KAAK,GACN,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,GAAG,WAAW,CAsBd;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,SAAS,EACT,GAAG,EACH,sBAAsB,GACvB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,YAAY,CAmBf;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,GACN,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,GAAG,YAAY,CAmBf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAC9B,EAAE,EACF,SAAS,EACT,IAAI,EACJ,eAAe,GAChB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,mBAAmB,CAatB;AAwGD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAC1B,IAAS,EACT,MAAM,EACN,WAAW,GACZ,EAAE;IACD,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,GAAG,kBAAkB,CAiCrB;AAED,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,kBAAkB,EAC/B,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAC1C,IAAI,CAsBN"}
+{"version":3,"file":"mounts.d.ts","sourceRoot":"","sources":["../../src/lib/sandbox/mounts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,YAAY,EACZ,eAAe,EACf,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EAGrB,WAAW,EACX,YAAY,EACZ,gBAAgB,EAEhB,kBAAkB,EAClB,kBAAkB,EAGnB,mBAAmB;AA0EpB,wBAAgB,OAAO,CAAC,EACtB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAoB,EACpB,MAAM,EACN,WAAwC,EACxC,SAAiB,EACjB,QAAQ,EACR,KAAK,EACL,UAAU,GACX,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,WAAW,CA2Bd;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,SAAS,EACT,GAAG,EACH,sBAAsB,GACvB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,eAAe,CAAC;IACtB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CACjC,GAAG,YAAY,CAmBf;AAED,wBAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,GACN,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,gBAAgB,CAAC;CAC1B,GAAG,YAAY,CAmBf;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,EAC9B,EAAE,EACF,SAAS,EACT,IAAI,EACJ,eAAe,GAChB,EAAE;IACD,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,mBAAmB,CAatB;AAwGD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,EAC1B,IAAS,EACT,MAAM,EACN,WAAW,GACZ,EAAE;IACD,IAAI,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC1B,MAAM,EAAE,YAAY,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,kBAAkB,CAAC;CAClC,GAAG,kBAAkB,CAiCrB;AAED,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,kBAAkB,EAC/B,WAAW,EAAE,kBAAkB,GAAG,SAAS,GAC1C,IAAI,CAsBN"}

package/lib/sandbox/mounts.js

@@ -71,7 +71,7 @@ function copyGitRef(ref) {
         name: requireNonEmptyString(ref.name, "ref.name"),
     };
 }
-function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, endpointUrl = "https://s3.amazonaws.com", pathStyle = false, readOnly, cache, }) {
+function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, endpointUrl = "https://s3.amazonaws.com", pathStyle = false, readOnly, cache, encryption, }) {
     const mount = {
         id: requireNonEmptyString(id, "id"),
         type: "s3",
@@ -92,6 +92,11 @@ function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, endpoint
     if (cache !== undefined) {
         mount.cache = { ...cache };
     }
+    if (encryption !== undefined) {
+        mount.encryption = {
+            kms_key: requireNonEmptyString(encryption.kms_key, "encryption.kms_key"),
+        };
+    }
     return mount;
 }
 function gitMount({ id, mountPath, remoteUrl, ref, refreshIntervalSeconds, }) {

package/lib/sandbox/mounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"mounts.js","sourceRoot":"","sources":["../../src/lib/sandbox/mounts.ts"],"names":[],"mappings":";;AA0FA,0BA0CC;AAED,4BA+BC;AAED,4BAiCC;AAOD,0CAuBC;AA6GD,kCAyCC;AAED,wEAyBC;AAtYD,uDAAkD;AAElD,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,MAAe,EAAE,KAAa;IACrD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,SAAS,GAAG,MAAqC,CAAC;IACxD,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IACE,SAAS,CAAC,IAAI,EAAE,KAAK,SAAS;QAC9B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAgB,OAAO,CAAC,EACtB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,GAAG,WAAW,EACpB,MAAM,EACN,WAAW,GAAG,0BAA0B,EACxC,SAAS,GAAG,KAAK,EACjB,QAAQ,EACR,KAAK,GAWN;IACC,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,EAAE,EAAE;YACF,YAAY,EAAE,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC;YAC/D,MAAM,EAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC/C,MAAM,EAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC/C,UAAU,EAAE,SAAS;SACtB;KACF,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,SAAS,EACT,GAAG,EACH,sBAAsB,GAOvB;IACC,MAAM,KAAK,GAAiB;QAC1B,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,GAAG,EAAE;YACH,UAAU,EAAE,mBAAmB,CAAC,SAAS,CAAC;SAC3C;KACF,CAAC;IACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,wBAAwB,GAAG,sBAAsB,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,GAQN;IACC,MAAM,KAAK,GAAiB;QAC1B,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,GAAG,EAAE;YACH,MAAM,EAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;SAChD;KACF,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,EAC9B,EAAE,EACF,SAAS,EACT,IAAI,EACJ,eAAe,GAMhB;IACC,MAAM,KAAK,GAAwB;QACjC,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,UAAU,EAAE;YACV,IAAI,EAAE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC;SAC1C;KACF,CAAC;IACF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,KAAK,CAAC,UAAU,CAAC,iBAAiB,GAAG,eAAe,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,MAAsB;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IACE,KAAK,CAAC,IAAI,KAAK,IAAI;YACnB,KAAK,CAAC,IAAI,KAAK,KAAK;YACpB,KAAK,CAAC,IAAI,KAAK,KAAK;YACpB,KAAK,CAAC,IAAI,KAAK,YAAY,EAC3B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAC;IAChD,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,sBAAsB;IACtB,cAAc;IACd,eAAe;IACf,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,gCAAgC,CAAC,KAAc;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAwB;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,QAAQ,GAAI,KAA4C,CAAC,IAAI,CAAC;QACpE,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,MAAM,GAAG,GAAI,KAAqC,CAAC,GAAG,CAAC;YACvD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,+BAAa,EAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,UAAU,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,UAAU,CAAC,GAAG,GAAG;gBACf,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC;gBAChE,iBAAiB,EAAE,eAAe,CAChC,GAAG,CAAC,iBAAiB,EACrB,iBAAiB,CAClB;aACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAI,KAAqC,CAAC,GAAG,CAAC;YACvD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,UAAU,CAAC,GAAG,GAAG;gBACf,oBAAoB,EAAE,eAAe,CACnC,GAAG,CAAC,oBAAoB,EACxB,oBAAoB,CACrB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,EAC1B,IAAI,GAAG,EAAE,EACT,MAAM,EACN,WAAW,GAKZ;IACC,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5B,CAAC;IAEF,IACE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,cAAc,CAAC,GAAG,KAAK,SAAS;QAChC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAuB;QACjC,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACF,8BAA8B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,8BAA8B,CAC5C,WAA+B,EAC/B,WAA2C;IAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAI,IAAyB,CAAC,IAAI,CAAC;QACjD,IACE,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,8DAA8D,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"mounts.js","sourceRoot":"","sources":["../../src/lib/sandbox/mounts.ts"],"names":[],"mappings":";;AA2FA,0BAiDC;AAED,4BA+BC;AAED,4BAiCC;AAOD,0CAuBC;AA6GD,kCAyCC;AAED,wEAyBC;AA7YD,uDAAkD;AAElD,SAAS,qBAAqB,CAAC,KAAa,EAAE,KAAa;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,6BAA6B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,MAAe,EAAE,KAAa;IACrD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,SAAS,GAAG,MAAqC,CAAC;IACxD,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,IAAI,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,IACE,SAAS,CAAC,IAAI,EAAE,KAAK,SAAS;QAC9B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,UAAU,CAAC,GAAoB;IACtC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO;QACL,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC;KAClD,CAAC;AACJ,CAAC;AAED,SAAgB,OAAO,CAAC,EACtB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,GAAG,WAAW,EACpB,MAAM,EACN,WAAW,GAAG,0BAA0B,EACxC,SAAS,GAAG,KAAK,EACjB,QAAQ,EACR,KAAK,EACL,UAAU,GAYX;IACC,MAAM,KAAK,GAAgB;QACzB,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,EAAE,EAAE;YACF,YAAY,EAAE,qBAAqB,CAAC,WAAW,EAAE,aAAa,CAAC;YAC/D,MAAM,EAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC/C,MAAM,EAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC/C,UAAU,EAAE,SAAS;SACtB;KACF,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,KAAK,CAAC,UAAU,GAAG;YACjB,OAAO,EAAE,qBAAqB,CAAC,UAAU,CAAC,OAAO,EAAE,oBAAoB,CAAC;SACzE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,SAAS,EACT,GAAG,EACH,sBAAsB,GAOvB;IACC,MAAM,KAAK,GAAiB;QAC1B,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,GAAG,EAAE;YACH,UAAU,EAAE,mBAAmB,CAAC,SAAS,CAAC;SAC3C;KACF,CAAC;IACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,KAAK,CAAC,GAAG,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,sBAAsB,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,sBAAsB,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,wBAAwB,GAAG,sBAAsB,CAAC;IAC9D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,QAAQ,CAAC,EACvB,EAAE,EACF,SAAS,EACT,MAAM,EACN,MAAM,EACN,QAAQ,EACR,KAAK,GAQN;IACC,MAAM,KAAK,GAAiB;QAC1B,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,KAAK;QACX,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,GAAG,EAAE;YACH,MAAM,EAAE,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC;SAChD;KACF,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,CAAC,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC7B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,EAC9B,EAAE,EACF,SAAS,EACT,IAAI,EACJ,eAAe,GAMhB;IACC,MAAM,KAAK,GAAwB;QACjC,EAAE,EAAE,qBAAqB,CAAC,EAAE,EAAE,IAAI,CAAC;QACnC,IAAI,EAAE,YAAY;QAClB,UAAU,EAAE,qBAAqB,CAAC,SAAS,EAAE,WAAW,CAAC;QACzD,UAAU,EAAE;YACV,IAAI,EAAE,qBAAqB,CAAC,IAAI,EAAE,MAAM,CAAC;SAC1C;KACF,CAAC;IACF,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,KAAK,CAAC,UAAU,CAAC,iBAAiB,GAAG,eAAe,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,MAAsB;IAC7C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IACE,KAAK,CAAC,IAAI,KAAK,IAAI;YACnB,KAAK,CAAC,IAAI,KAAK,KAAK;YACpB,KAAK,CAAC,IAAI,KAAK,KAAK;YACpB,KAAK,CAAC,IAAI,KAAK,YAAY,EAC3B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,gCAAgC,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,iCAAiC,GAAG,IAAI,GAAG,CAAC;IAChD,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,sBAAsB;IACtB,cAAc;IACd,eAAe;IACf,aAAa;IACb,YAAY;CACb,CAAC,CAAC;AAEH,SAAS,gCAAgC,CAAC,KAAc;IACtD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,iCAAiC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,gCAAgC,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAwB;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,UAAU,GAA2B,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,QAAQ,GAAI,KAA4C,CAAC,IAAI,CAAC;QACpE,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,aAAa,QAAQ,2BAA2B,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,MAAM,GAAG,GAAI,KAAqC,CAAC,GAAG,CAAC;YACvD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,+BAAa,EAAC,GAAG,CAAC,CAAC;YACnC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,UAAU,CAAC,GAAG,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,UAAU,CAAC,GAAG,GAAG;gBACf,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,aAAa,EAAE,aAAa,CAAC;gBAChE,iBAAiB,EAAE,eAAe,CAChC,GAAG,CAAC,iBAAiB,EACrB,iBAAiB,CAClB;aACF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,GAAI,KAAqC,CAAC,GAAG,CAAC;YACvD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D,CAAC;YACD,UAAU,CAAC,GAAG,GAAG;gBACf,oBAAoB,EAAE,eAAe,CACnC,GAAG,CAAC,oBAAoB,EACxB,oBAAoB,CACrB;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,SAAgB,WAAW,CAAC,EAC1B,IAAI,GAAG,EAAE,EACT,MAAM,EACN,WAAW,GAKZ;IACC,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,CAAC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC;SACvB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAC5B,CAAC;IAEF,IACE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QACxB,cAAc,CAAC,GAAG,KAAK,SAAS;QAChC,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAC1B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,cAAc,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,MAAM,GAAuB;QACjC,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,gBAAgB;KACzB,CAAC;IACF,8BAA8B,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,8BAA8B,CAC5C,WAA+B,EAC/B,WAA2C;IAE3C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACrE,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAI,IAAyB,CAAC,IAAI,CAAC;QACjD,IACE,CAAC,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,CAAC;YAC1C,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,QAAQ,8DAA8D,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/sandbox/mounts.mjs

@@ -63,7 +63,7 @@ function copyGitRef(ref) {
         name: requireNonEmptyString(ref.name, "ref.name"),
     };
 }
-export function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, endpointUrl = "https://s3.amazonaws.com", pathStyle = false, readOnly, cache, }) {
+export function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, endpointUrl = "https://s3.amazonaws.com", pathStyle = false, readOnly, cache, encryption, }) {
     const mount = {
         id: requireNonEmptyString(id, "id"),
         type: "s3",
@@ -84,6 +84,11 @@ export function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, e
     if (cache !== undefined) {
         mount.cache = { ...cache };
     }
+    if (encryption !== undefined) {
+        mount.encryption = {
+            kms_key: requireNonEmptyString(encryption.kms_key, "encryption.kms_key"),
+        };
+    }
     return mount;
 }
 export function gitMount({ id, mountPath, remoteUrl, ref, refreshIntervalSeconds, }) {