tensorlake 0.5.36 → 0.5.37

package/dist/{sandbox-image-CmX-BLMV.d.cts → sandbox-image-2y2fMVxI.d.cts}

@@ -52,8 +52,8 @@ declare function dockerfileContent(image: Image): string;
  * Dockerfile path/text + context to the Rust core via `@tensorlake/native`,
  * which parses, validates, materializes, and registers the image. The Rust
  * core owns parsing, the Dockerfile-instruction allowlist
- * (`ARG`/`ONBUILD`/`SHELL`/`USER` are rejected) and ignored-set warnings
- * (`CMD`/`ENTRYPOINT`/`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).
+ * (`ONBUILD`/`SHELL` are rejected) and ignored-set warnings
+ * (`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).
  */
 interface CreateSandboxImageOptions {
     registeredName?: string;

package/dist/{sandbox-image-CmX-BLMV.d.ts → sandbox-image-2y2fMVxI.d.ts}

@@ -52,8 +52,8 @@ declare function dockerfileContent(image: Image): string;
  * Dockerfile path/text + context to the Rust core via `@tensorlake/native`,
  * which parses, validates, materializes, and registers the image. The Rust
  * core owns parsing, the Dockerfile-instruction allowlist
- * (`ARG`/`ONBUILD`/`SHELL`/`USER` are rejected) and ignored-set warnings
- * (`CMD`/`ENTRYPOINT`/`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).
+ * (`ONBUILD`/`SHELL` are rejected) and ignored-set warnings
+ * (`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).
  */
 interface CreateSandboxImageOptions {
     registeredName?: string;

package/dist/sandbox-image.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/image.ts","../src/sandbox-image.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\n\n// Erased at runtime — safe despite the module cycle with sandbox-image.ts,\n// which imports Image from here.\nimport type { CreateSandboxImageOptions } from \"./sandbox-image.js\";\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nexport const ImageBuildOperationType = {\n  ADD: \"ADD\",\n  COPY: \"COPY\",\n  ENV: \"ENV\",\n  RUN: \"RUN\",\n  WORKDIR: \"WORKDIR\",\n} as const;\n\nexport type ImageBuildOperationType =\n  (typeof ImageBuildOperationType)[keyof typeof ImageBuildOperationType];\n\nexport interface ImageBuildOperation {\n  type: ImageBuildOperationType;\n  args: string[];\n  options: Record<string, string>;\n}\n\nexport interface ImageOptions {\n  name?: string;\n  tag?: string;\n  baseImage?: string | null;\n}\n\nfunction cloneOperation(op: ImageBuildOperation): ImageBuildOperation {\n  return {\n    type: op.type,\n    args: [...op.args],\n    options: { ...op.options },\n  };\n}\n\nexport class Image {\n  readonly _id: string;\n  readonly _name: string;\n  readonly _tag: string;\n  readonly _baseImage: string | null;\n  readonly _buildOperations: ImageBuildOperation[];\n\n  constructor();\n  constructor(name: string, tag?: string, baseImage?: string | null);\n  constructor(options: ImageOptions);\n  constructor(\n    nameOrOptions: string | ImageOptions = {},\n    tag = \"latest\",\n    baseImage: string | null = null,\n  ) {\n    this._id = randomUUID();\n    this._buildOperations = [];\n\n    if (typeof nameOrOptions === \"string\") {\n      this._name = nameOrOptions;\n      this._tag = tag;\n      this._baseImage = baseImage;\n      return;\n    }\n\n    this._name = nameOrOptions.name ?? DEFAULT_IMAGE_NAME;\n    this._tag = nameOrOptions.tag ?? \"latest\";\n    this._baseImage = nameOrOptions.baseImage ?? null;\n  }\n\n  get name(): string {\n    return this._name;\n  }\n\n  get tag(): string {\n    return this._tag;\n  }\n\n  get baseImage(): string | null {\n    return this._baseImage;\n  }\n\n  get buildOperations(): ImageBuildOperation[] {\n    return this._buildOperations.map(cloneOperation);\n  }\n\n  add(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ADD,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  copy(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.COPY,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  env(key: string, value: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ENV,\n      args: [key, value],\n      options: {},\n    });\n  }\n\n  run(\n    commands: string | string[],\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.RUN,\n      args: Array.isArray(commands) ? [...commands] : [commands],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  workdir(directory: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.WORKDIR,\n      args: [directory],\n      options: {},\n    });\n  }\n\n  /**\n   * Build this image as a sandbox template and register it.\n   *\n   * Materializes the image in a build sandbox, snapshots the filesystem,\n   * and registers the snapshot as a named sandbox template.\n   */\n  async build(\n    options: CreateSandboxImageOptions = {},\n  ): Promise<Record<string, unknown>> {\n    const { createSandboxImage } = await import(\"./sandbox-image.js\");\n    return createSandboxImage(this, options);\n  }\n\n  private _addOperation(op: ImageBuildOperation): this {\n    this._buildOperations.push(op);\n    return this;\n  }\n}\n\nfunction renderOptions(options: Record<string, string>): string {\n  const entries = Object.entries(options);\n  if (entries.length === 0) {\n    return \"\";\n  }\n  return ` ${entries.map(([key, value]) => `--${key}=${value}`).join(\" \")}`;\n}\n\nfunction renderBuildOp(op: ImageBuildOperation): string {\n  const options = renderOptions(op.options);\n  if (op.type === ImageBuildOperationType.ENV) {\n    return `ENV${options} ${op.args[0]}=${JSON.stringify(op.args[1])}`;\n  }\n  return `${op.type}${options} ${op.args.join(\" \")}`;\n}\n\nexport function dockerfileContent(image: Image): string {\n  const lines = image.baseImage == null ? [] : [`FROM ${image.baseImage}`];\n  lines.push(...image.buildOperations.map((op) => renderBuildOp(op)));\n  return lines.join(\"\\n\");\n}\n","import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport { existsSync } from \"node:fs\";\nimport { parseArgs } from \"node:util\";\nimport { Image, dockerfileContent } from \"./image.js\";\n\n/**\n * Sandbox-image build engine.\n *\n * Renders the source to a Dockerfile (for `Image` inputs) and hands the\n * Dockerfile path/text + context to the Rust core via `@tensorlake/native`,\n * which parses, validates, materializes, and registers the image. The Rust\n * core owns parsing, the Dockerfile-instruction allowlist\n * (`ARG`/`ONBUILD`/`SHELL`/`USER` are rejected) and ignored-set warnings\n * (`CMD`/`ENTRYPOINT`/`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).\n */\n\nexport interface CreateSandboxImageOptions {\n  registeredName?: string;\n  cpus?: number;\n  memoryMb?: number;\n  diskMb?: number;\n  builderDiskMb?: number;\n  isPublic?: boolean;\n  contextDir?: string;\n  /**\n   * Print build progress to stderr. Ignored when an explicit `emit` is\n   * passed via `deps`. Defaults to false — `createSandboxImage` is silent\n   * by default when invoked programmatically (e.g. `Image.build()`).\n   */\n  verbose?: boolean;\n}\n\nexport type SandboxImageSource = string | Image;\n\nexport interface CreateSandboxImageDeps {\n  emit?: (event: Record<string, unknown>) => void;\n}\n\n// --- Native binding loader -------------------------------------------------\n\ninterface NativeBindingOptions {\n  apiUrl: string;\n  bearerToken: string;\n  dockerfilePath: string;\n  registeredName?: string | undefined | null;\n  diskMb?: number | undefined | null;\n  builderDiskMb?: number | undefined | null;\n  cpus?: number | undefined | null;\n  memoryMb?: number | undefined | null;\n  isPublic?: boolean | undefined | null;\n  organizationId?: string | undefined | null;\n  projectId?: string | undefined | null;\n  namespace?: string | undefined | null;\n  useScopeHeaders?: boolean | undefined | null;\n  userAgent?: string | undefined | null;\n  dockerfileText?: string | undefined | null;\n  contextDir?: string | undefined | null;\n}\n\ninterface NativeBindingEvent {\n  eventType: string;\n  stream?: string | undefined | null;\n  message: string;\n}\n\ninterface NativeBinding {\n  buildSandboxImage(\n    options: NativeBindingOptions,\n    emit?: ((event: NativeBindingEvent) => void) | null | undefined,\n  ): Promise<string>;\n}\n\n// `require` exists in the CJS bundle but not in ESM; declared here so the\n// runtime check below typechecks under \"module\": \"esnext\".\ndeclare const require: NodeRequire | undefined;\ndeclare const module: { exports?: unknown } | undefined;\n\nlet cachedNativeBinding: NativeBinding | undefined;\nlet cachedNativeBindingError: Error | undefined;\n\nfunction resolveRequire(): NodeRequire {\n  // tsup rewrites `import.meta.url` to `import_meta.url` (where\n  // `import_meta = {}`) in the CJS output, so `createRequire(import.meta.url)`\n  // throws if called at all in CJS. CJS bundles get the real `require`\n  // injected at runtime; prefer it. ESM bundles fall back to the createRequire\n  // path, which only runs when `import.meta.url` is a real file URL.\n  if (\n    typeof module !== \"undefined\" &&\n    module.exports != null &&\n    typeof require !== \"undefined\"\n  ) {\n    return require;\n  }\n  return createRequire(import.meta.url);\n}\n\nfunction loadNativeBinding(): NativeBinding {\n  if (cachedNativeBinding) return cachedNativeBinding;\n  if (cachedNativeBindingError) throw cachedNativeBindingError;\n  try {\n    // The native binding is staged per-platform under\n    // `typescript/dist/native/<triple>/tensorlake-node.node`. Loading goes\n    // through the same helper the CLI binaries use so platform detection\n    // stays in one place (`typescript/lib/runtime.cjs`). Deferred require so\n    // the CJS bundle doesn't trip the `import.meta.url` → undefined fallback.\n    const { loadNative } = resolveRequire()(\"../lib/runtime.cjs\") as {\n      loadNative: () => NativeBinding;\n    };\n    cachedNativeBinding = loadNative();\n    return cachedNativeBinding;\n  } catch (error) {\n    cachedNativeBindingError =\n      error instanceof Error ? error : new Error(String(error));\n    throw cachedNativeBindingError;\n  }\n}\n\n/** Test seam: replace the native binding with a stub. */\nexport function __setNativeBindingForTest(binding: NativeBinding | undefined): void {\n  cachedNativeBinding = binding;\n  cachedNativeBindingError = undefined;\n}\n\n// --- Build context ---------------------------------------------------------\n\nexport interface BuildContext {\n  apiUrl: string;\n  apiKey?: string;\n  personalAccessToken?: string;\n  namespace: string;\n  organizationId?: string;\n  projectId?: string;\n  debug: boolean;\n}\n\nfunction nonEmpty(value: string | undefined): string | undefined {\n  return value && value.length > 0 ? value : undefined;\n}\n\nfunction buildContextFromEnv(): BuildContext {\n  const debugRaw = (process.env.TENSORLAKE_DEBUG ?? \"\").toLowerCase();\n  const debug = [\"1\", \"true\", \"yes\", \"on\"].includes(debugRaw);\n  return {\n    apiUrl: nonEmpty(process.env.TENSORLAKE_API_URL) ?? \"https://api.tensorlake.ai\",\n    apiKey: nonEmpty(process.env.TENSORLAKE_API_KEY),\n    personalAccessToken: nonEmpty(process.env.TENSORLAKE_PAT),\n    namespace: nonEmpty(process.env.INDEXIFY_NAMESPACE) ?? \"default\",\n    organizationId: nonEmpty(process.env.TENSORLAKE_ORGANIZATION_ID),\n    projectId: nonEmpty(process.env.TENSORLAKE_PROJECT_ID),\n    debug,\n  };\n}\n\n// --- Default-name helper ---------------------------------------------------\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nfunction defaultRegisteredName(dockerfilePath: string): string {\n  const parsed = path.parse(dockerfilePath);\n  if (parsed.name.toLowerCase() === \"dockerfile\") {\n    const parentName = path.basename(path.dirname(dockerfilePath)).trim();\n    return parentName || \"sandbox-image\";\n  }\n  return parsed.name || \"sandbox-image\";\n}\n\n// --- Emit helpers ----------------------------------------------------------\n\nfunction noopEmit(_event: Record<string, unknown>): void {}\n\nfunction stderrEmit(event: Record<string, unknown>): void {\n  const message = typeof event.message === \"string\" ? event.message : \"\";\n  const type = typeof event.type === \"string\" ? event.type : \"\";\n  if (type === \"build_log\") {\n    const stream = typeof event.stream === \"string\" ? event.stream : \"stdout\";\n    process.stderr.write(`[${stream}] ${message}\\n`);\n  } else if (message) {\n    process.stderr.write(`[${type}] ${message}\\n`);\n  }\n}\n\nfunction ndjsonStdoutEmit(event: Record<string, unknown>): void {\n  process.stdout.write(`${JSON.stringify(event)}\\n`);\n}\n\nfunction eventToEmitDict(event: NativeBindingEvent): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    type: event.eventType,\n    message: event.message,\n  };\n  if (event.stream != null) out.stream = event.stream;\n  return out;\n}\n\n// --- Public API ------------------------------------------------------------\n\nexport async function createSandboxImage(\n  source: SandboxImageSource,\n  options: CreateSandboxImageOptions = {},\n  deps: CreateSandboxImageDeps = {},\n): Promise<Record<string, unknown>> {\n  const emit = deps.emit ?? (options.verbose ? stderrEmit : noopEmit);\n  const context = buildContextFromEnv();\n\n  let dockerfilePath: string;\n  let dockerfileText: string | undefined;\n  let nativeContextDir: string | undefined;\n  let effectiveName: string;\n\n  if (source instanceof Image) {\n    if (!source.baseImage) {\n      throw new Error(\"Image must have a baseImage to build\");\n    }\n    const resolvedContext = path.resolve(options.contextDir ?? process.cwd());\n    dockerfilePath = path.join(resolvedContext, \"Dockerfile\");\n    let text = dockerfileContent(source);\n    if (!text.endsWith(\"\\n\")) text += \"\\n\";\n    dockerfileText = text;\n    nativeContextDir = resolvedContext;\n    effectiveName = options.registeredName ?? source.name;\n  } else if (typeof source === \"string\") {\n    const resolvedPath = path.resolve(source);\n    if (!existsSync(resolvedPath)) {\n      throw new Error(`Dockerfile not found: ${source}`);\n    }\n    dockerfilePath = resolvedPath;\n    dockerfileText = undefined;\n    nativeContextDir = undefined;\n    effectiveName =\n      options.registeredName ?? defaultRegisteredName(resolvedPath);\n  } else {\n    throw new TypeError(\n      `source must be an Image or a Dockerfile path, got ${typeof source}`,\n    );\n  }\n\n  if (effectiveName === DEFAULT_IMAGE_NAME) {\n    // eslint-disable-next-line no-console\n    console.warn(\n      `Building sandbox image with the default name \"${DEFAULT_IMAGE_NAME}\". ` +\n        \"Pass `registeredName` or `Image({ name })` to avoid collisions \" +\n        \"with other default-named images in this project.\",\n    );\n  }\n\n  const bearerToken = context.apiKey ?? context.personalAccessToken;\n  if (!bearerToken) {\n    throw new Error(\"Missing TENSORLAKE_API_KEY or TENSORLAKE_PAT credentials.\");\n  }\n\n  emit({ type: \"status\", message: `Building image '${effectiveName}'...` });\n\n  const binding = loadNativeBinding();\n  let emitError: unknown;\n  const resultJson = await binding.buildSandboxImage(\n    {\n      apiUrl: context.apiUrl,\n      bearerToken,\n      dockerfilePath,\n      registeredName: effectiveName,\n      diskMb: options.diskMb,\n      builderDiskMb: options.builderDiskMb,\n      cpus: options.cpus,\n      memoryMb: options.memoryMb,\n      isPublic: options.isPublic ?? false,\n      organizationId: context.organizationId,\n      projectId: context.projectId,\n      namespace: context.namespace,\n      useScopeHeaders:\n        context.personalAccessToken != null && context.apiKey == null,\n      userAgent: undefined,\n      dockerfileText,\n      contextDir: nativeContextDir,\n    },\n    (event) => {\n      try {\n        emit(eventToEmitDict(event));\n      } catch (error) {\n        emitError ??= error;\n      }\n    },\n  );\n\n  if (emitError != null) {\n    throw emitError;\n  }\n\n  let result: Record<string, unknown> = {};\n  if (resultJson.trim().length > 0) {\n    result = JSON.parse(resultJson) as Record<string, unknown>;\n  }\n  emit({\n    type: \"image_registered\",\n    name: effectiveName,\n    image_id:\n      (typeof result.id === \"string\" && result.id) ||\n      (typeof result.templateId === \"string\" && result.templateId) ||\n      \"\",\n  });\n  emit({ type: \"done\" });\n  return result;\n}\n\nexport async function runCreateSandboxImageCli(argv = process.argv.slice(2)) {\n  const parsed = parseArgs({\n    args: argv,\n    allowPositionals: true,\n    options: {\n      name: { type: \"string\", short: \"n\" },\n      cpus: { type: \"string\" },\n      memory: { type: \"string\" },\n      disk_mb: { type: \"string\" },\n      builder_disk_mb: { type: \"string\" },\n      public: { type: \"boolean\", default: false },\n    },\n  });\n\n  const dockerfilePath = parsed.positionals[0];\n  if (!dockerfilePath) {\n    throw new Error(\n      \"Usage: tensorlake-create-sandbox-image <dockerfile_path> [--name NAME] [--cpus N] [--memory MB] [--disk_mb MB] [--builder_disk_mb MB] [--public]\",\n    );\n  }\n\n  const cpus =\n    parsed.values.cpus != null ? Number(parsed.values.cpus) : undefined;\n  const memoryMb =\n    parsed.values.memory != null ? Number(parsed.values.memory) : undefined;\n  const diskMb =\n    parsed.values.disk_mb != null ? Number(parsed.values.disk_mb) : undefined;\n  const builderDiskMb =\n    parsed.values.builder_disk_mb != null\n      ? Number(parsed.values.builder_disk_mb)\n      : undefined;\n  if (cpus != null && !Number.isFinite(cpus)) {\n    throw new Error(`Invalid --cpus value: ${parsed.values.cpus}`);\n  }\n  if (memoryMb != null && !Number.isInteger(memoryMb)) {\n    throw new Error(`Invalid --memory value: ${parsed.values.memory}`);\n  }\n  if (diskMb != null && !Number.isInteger(diskMb)) {\n    throw new Error(`Invalid --disk_mb value: ${parsed.values.disk_mb}`);\n  }\n  if (builderDiskMb != null && !Number.isInteger(builderDiskMb)) {\n    throw new Error(\n      `Invalid --builder_disk_mb value: ${parsed.values.builder_disk_mb}`,\n    );\n  }\n\n  await createSandboxImage(\n    dockerfilePath,\n    {\n      registeredName: parsed.values.name,\n      cpus,\n      memoryMb,\n      diskMb,\n      builderDiskMb,\n      isPublic: parsed.values.public,\n    },\n    { emit: ndjsonStdoutEmit },\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,SAAS,eAAe,IAA8C;AACpE,SAAO;AAAA,IACL,MAAM,GAAG;AAAA,IACT,MAAM,CAAC,GAAG,GAAG,IAAI;AAAA,IACjB,SAAS,EAAE,GAAG,GAAG,QAAQ;AAAA,EAC3B;AACF;AAsHA,SAAS,cAAc,SAAyC;AAC9D,QAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC;AACzE;AAEA,SAAS,cAAc,IAAiC;AACtD,QAAM,UAAU,cAAc,GAAG,OAAO;AACxC,MAAI,GAAG,SAAS,wBAAwB,KAAK;AAC3C,WAAO,MAAM,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC;AAAA,EAClE;AACA,SAAO,GAAG,GAAG,IAAI,GAAG,OAAO,IAAI,GAAG,KAAK,KAAK,GAAG,CAAC;AAClD;AAEO,SAAS,kBAAkB,OAAsB;AACtD,QAAM,QAAQ,MAAM,aAAa,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,SAAS,EAAE;AACvE,QAAM,KAAK,GAAG,MAAM,gBAAgB,IAAI,CAAC,OAAO,cAAc,EAAE,CAAC,CAAC;AAClE,SAAO,MAAM,KAAK,IAAI;AACxB;AA/KA,wBAMM,oBAEO,yBA+BA;AAvCb;AAAA;AAAA;AAAA,yBAA2B;AAM3B,IAAM,qBAAqB;AAEpB,IAAM,0BAA0B;AAAA,MACrC,KAAK;AAAA,MACL,MAAM;AAAA,MACN,KAAK;AAAA,MACL,KAAK;AAAA,MACL,SAAS;AAAA,IACX;AAyBO,IAAM,QAAN,MAAY;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAKT,YACE,gBAAuC,CAAC,GACxC,MAAM,UACN,YAA2B,MAC3B;AACA,aAAK,UAAM,+BAAW;AACtB,aAAK,mBAAmB,CAAC;AAEzB,YAAI,OAAO,kBAAkB,UAAU;AACrC,eAAK,QAAQ;AACb,eAAK,OAAO;AACZ,eAAK,aAAa;AAClB;AAAA,QACF;AAEA,aAAK,QAAQ,cAAc,QAAQ;AACnC,aAAK,OAAO,cAAc,OAAO;AACjC,aAAK,aAAa,cAAc,aAAa;AAAA,MAC/C;AAAA,MAEA,IAAI,OAAe;AACjB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,MAAc;AAChB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,YAA2B;AAC7B,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,kBAAyC;AAC3C,eAAO,KAAK,iBAAiB,IAAI,cAAc;AAAA,MACjD;AAAA,MAEA,IACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,KACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,IAAI,KAAa,OAAqB;AACpC,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,KAAK;AAAA,UACjB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,MAEA,IACE,UACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,QAAQ;AAAA,UACzD,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,QAAQ,WAAyB;AAC/B,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,SAAS;AAAA,UAChB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,MAAM,MACJ,UAAqC,CAAC,GACJ;AAClC,cAAM,EAAE,oBAAAA,oBAAmB,IAAI,MAAM;AACrC,eAAOA,oBAAmB,MAAM,OAAO;AAAA,MACzC;AAAA,MAEQ,cAAc,IAA+B;AACnD,aAAK,iBAAiB,KAAK,EAAE;AAC7B,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;;;ACzJA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiFA,SAAS,iBAA8B;AAMrC,MACE,OAAO,WAAW,eAClB,OAAO,WAAW,QAClB,OAAO,YAAY,aACnB;AACA,WAAO;AAAA,EACT;AACA,aAAO,kCAAc,YAAY,GAAG;AACtC;AAEA,SAAS,oBAAmC;AAC1C,MAAI,oBAAqB,QAAO;AAChC,MAAI,yBAA0B,OAAM;AACpC,MAAI;AAMF,UAAM,EAAE,WAAW,IAAI,eAAe,EAAE,oBAAoB;AAG5D,0BAAsB,WAAW;AACjC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,+BACE,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAC1D,UAAM;AAAA,EACR;AACF;AAGO,SAAS,0BAA0B,SAA0C;AAClF,wBAAsB;AACtB,6BAA2B;AAC7B;AAcA,SAAS,SAAS,OAA+C;AAC/D,SAAO,SAAS,MAAM,SAAS,IAAI,QAAQ;AAC7C;AAEA,SAAS,sBAAoC;AAC3C,QAAM,YAAY,QAAQ,IAAI,oBAAoB,IAAI,YAAY;AAClE,QAAM,QAAQ,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,QAAQ;AAC1D,SAAO;AAAA,IACL,QAAQ,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACpD,QAAQ,SAAS,QAAQ,IAAI,kBAAkB;AAAA,IAC/C,qBAAqB,SAAS,QAAQ,IAAI,cAAc;AAAA,IACxD,WAAW,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACvD,gBAAgB,SAAS,QAAQ,IAAI,0BAA0B;AAAA,IAC/D,WAAW,SAAS,QAAQ,IAAI,qBAAqB;AAAA,IACrD;AAAA,EACF;AACF;AAMA,SAAS,sBAAsB,gBAAgC;AAC7D,QAAM,SAAS,iBAAAC,QAAK,MAAM,cAAc;AACxC,MAAI,OAAO,KAAK,YAAY,MAAM,cAAc;AAC9C,UAAM,aAAa,iBAAAA,QAAK,SAAS,iBAAAA,QAAK,QAAQ,cAAc,CAAC,EAAE,KAAK;AACpE,WAAO,cAAc;AAAA,EACvB;AACA,SAAO,OAAO,QAAQ;AACxB;AAIA,SAAS,SAAS,QAAuC;AAAC;AAE1D,SAAS,WAAW,OAAsC;AACxD,QAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AACpE,QAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,MAAI,SAAS,aAAa;AACxB,UAAM,SAAS,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACjE,YAAQ,OAAO,MAAM,IAAI,MAAM,KAAK,OAAO;AAAA,CAAI;AAAA,EACjD,WAAW,SAAS;AAClB,YAAQ,OAAO,MAAM,IAAI,IAAI,KAAK,OAAO;AAAA,CAAI;AAAA,EAC/C;AACF;AAEA,SAAS,iBAAiB,OAAsC;AAC9D,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AACnD;AAEA,SAAS,gBAAgB,OAAoD;AAC3E,QAAM,MAA+B;AAAA,IACnC,MAAM,MAAM;AAAA,IACZ,SAAS,MAAM;AAAA,EACjB;AACA,MAAI,MAAM,UAAU,KAAM,KAAI,SAAS,MAAM;AAC7C,SAAO;AACT;AAIA,eAAsB,mBACpB,QACA,UAAqC,CAAC,GACtC,OAA+B,CAAC,GACE;AAClC,QAAM,OAAO,KAAK,SAAS,QAAQ,UAAU,aAAa;AAC1D,QAAM,UAAU,oBAAoB;AAEpC,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,kBAAkB,OAAO;AAC3B,QAAI,CAAC,OAAO,WAAW;AACrB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,kBAAkB,iBAAAA,QAAK,QAAQ,QAAQ,cAAc,QAAQ,IAAI,CAAC;AACxE,qBAAiB,iBAAAA,QAAK,KAAK,iBAAiB,YAAY;AACxD,QAAI,OAAO,kBAAkB,MAAM;AACnC,QAAI,CAAC,KAAK,SAAS,IAAI,EAAG,SAAQ;AAClC,qBAAiB;AACjB,uBAAmB;AACnB,oBAAgB,QAAQ,kBAAkB,OAAO;AAAA,EACnD,WAAW,OAAO,WAAW,UAAU;AACrC,UAAM,eAAe,iBAAAA,QAAK,QAAQ,MAAM;AACxC,QAAI,KAAC,2BAAW,YAAY,GAAG;AAC7B,YAAM,IAAI,MAAM,yBAAyB,MAAM,EAAE;AAAA,IACnD;AACA,qBAAiB;AACjB,qBAAiB;AACjB,uBAAmB;AACnB,oBACE,QAAQ,kBAAkB,sBAAsB,YAAY;AAAA,EAChE,OAAO;AACL,UAAM,IAAI;AAAA,MACR,qDAAqD,OAAO,MAAM;AAAA,IACpE;AAAA,EACF;AAEA,MAAI,kBAAkBC,qBAAoB;AAExC,YAAQ;AAAA,MACN,iDAAiDA,mBAAkB;AAAA,IAGrE;AAAA,EACF;AAEA,QAAM,cAAc,QAAQ,UAAU,QAAQ;AAC9C,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AAEA,OAAK,EAAE,MAAM,UAAU,SAAS,mBAAmB,aAAa,OAAO,CAAC;AAExE,QAAM,UAAU,kBAAkB;AAClC,MAAI;AACJ,QAAM,aAAa,MAAM,QAAQ;AAAA,IAC/B;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,QAAQ,QAAQ;AAAA,MAChB,eAAe,QAAQ;AAAA,MACvB,MAAM,QAAQ;AAAA,MACd,UAAU,QAAQ;AAAA,MAClB,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ;AAAA,MACxB,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,MACnB,iBACE,QAAQ,uBAAuB,QAAQ,QAAQ,UAAU;AAAA,MAC3D,WAAW;AAAA,MACX;AAAA,MACA,YAAY;AAAA,IACd;AAAA,IACA,CAAC,UAAU;AACT,UAAI;AACF,aAAK,gBAAgB,KAAK,CAAC;AAAA,MAC7B,SAAS,OAAO;AACd,sBAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,MAAM;AACrB,UAAM;AAAA,EACR;AAEA,MAAI,SAAkC,CAAC;AACvC,MAAI,WAAW,KAAK,EAAE,SAAS,GAAG;AAChC,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC;AACA,OAAK;AAAA,IACH,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UACG,OAAO,OAAO,OAAO,YAAY,OAAO,MACxC,OAAO,OAAO,eAAe,YAAY,OAAO,cACjD;AAAA,EACJ,CAAC;AACD,OAAK,EAAE,MAAM,OAAO,CAAC;AACrB,SAAO;AACT;AAEA,eAAsB,yBAAyB,OAAO,QAAQ,KAAK,MAAM,CAAC,GAAG;AAC3E,QAAM,aAAS,4BAAU;AAAA,IACvB,MAAM;AAAA,IACN,kBAAkB;AAAA,IAClB,SAAS;AAAA,MACP,MAAM,EAAE,MAAM,UAAU,OAAO,IAAI;AAAA,MACnC,MAAM,EAAE,MAAM,SAAS;AAAA,MACvB,QAAQ,EAAE,MAAM,SAAS;AAAA,MACzB,SAAS,EAAE,MAAM,SAAS;AAAA,MAC1B,iBAAiB,EAAE,MAAM,SAAS;AAAA,MAClC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,QAAM,iBAAiB,OAAO,YAAY,CAAC;AAC3C,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OACJ,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO,OAAO,IAAI,IAAI;AAC5D,QAAM,WACJ,OAAO,OAAO,UAAU,OAAO,OAAO,OAAO,OAAO,MAAM,IAAI;AAChE,QAAM,SACJ,OAAO,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO,IAAI;AAClE,QAAM,gBACJ,OAAO,OAAO,mBAAmB,OAC7B,OAAO,OAAO,OAAO,eAAe,IACpC;AACN,MAAI,QAAQ,QAAQ,CAAC,OAAO,SAAS,IAAI,GAAG;AAC1C,UAAM,IAAI,MAAM,yBAAyB,OAAO,OAAO,IAAI,EAAE;AAAA,EAC/D;AACA,MAAI,YAAY,QAAQ,CAAC,OAAO,UAAU,QAAQ,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B,OAAO,OAAO,MAAM,EAAE;AAAA,EACnE;AACA,MAAI,UAAU,QAAQ,CAAC,OAAO,UAAU,MAAM,GAAG;AAC/C,UAAM,IAAI,MAAM,4BAA4B,OAAO,OAAO,OAAO,EAAE;AAAA,EACrE;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,UAAU,aAAa,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,oCAAoC,OAAO,OAAO,eAAe;AAAA,IACnE;AAAA,EACF;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,gBAAgB,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,OAAO,OAAO;AAAA,IAC1B;AAAA,IACA,EAAE,MAAM,iBAAiB;AAAA,EAC3B;AACF;AA1WA,wBACA,kBACA,gBACA,kBAHA,aA8EI,qBACA,0BA6EEA;AA5JN;AAAA;AAAA,yBAA8B;AAC9B,uBAAiB;AACjB,qBAA2B;AAC3B,uBAA0B;AAC1B;AAJA;AA4JA,IAAMA,sBAAqB;AAAA;AAAA;","names":["createSandboxImage","path","DEFAULT_IMAGE_NAME"]}
+{"version":3,"sources":["../src/image.ts","../src/sandbox-image.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\n\n// Erased at runtime — safe despite the module cycle with sandbox-image.ts,\n// which imports Image from here.\nimport type { CreateSandboxImageOptions } from \"./sandbox-image.js\";\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nexport const ImageBuildOperationType = {\n  ADD: \"ADD\",\n  COPY: \"COPY\",\n  ENV: \"ENV\",\n  RUN: \"RUN\",\n  WORKDIR: \"WORKDIR\",\n} as const;\n\nexport type ImageBuildOperationType =\n  (typeof ImageBuildOperationType)[keyof typeof ImageBuildOperationType];\n\nexport interface ImageBuildOperation {\n  type: ImageBuildOperationType;\n  args: string[];\n  options: Record<string, string>;\n}\n\nexport interface ImageOptions {\n  name?: string;\n  tag?: string;\n  baseImage?: string | null;\n}\n\nfunction cloneOperation(op: ImageBuildOperation): ImageBuildOperation {\n  return {\n    type: op.type,\n    args: [...op.args],\n    options: { ...op.options },\n  };\n}\n\nexport class Image {\n  readonly _id: string;\n  readonly _name: string;\n  readonly _tag: string;\n  readonly _baseImage: string | null;\n  readonly _buildOperations: ImageBuildOperation[];\n\n  constructor();\n  constructor(name: string, tag?: string, baseImage?: string | null);\n  constructor(options: ImageOptions);\n  constructor(\n    nameOrOptions: string | ImageOptions = {},\n    tag = \"latest\",\n    baseImage: string | null = null,\n  ) {\n    this._id = randomUUID();\n    this._buildOperations = [];\n\n    if (typeof nameOrOptions === \"string\") {\n      this._name = nameOrOptions;\n      this._tag = tag;\n      this._baseImage = baseImage;\n      return;\n    }\n\n    this._name = nameOrOptions.name ?? DEFAULT_IMAGE_NAME;\n    this._tag = nameOrOptions.tag ?? \"latest\";\n    this._baseImage = nameOrOptions.baseImage ?? null;\n  }\n\n  get name(): string {\n    return this._name;\n  }\n\n  get tag(): string {\n    return this._tag;\n  }\n\n  get baseImage(): string | null {\n    return this._baseImage;\n  }\n\n  get buildOperations(): ImageBuildOperation[] {\n    return this._buildOperations.map(cloneOperation);\n  }\n\n  add(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ADD,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  copy(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.COPY,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  env(key: string, value: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ENV,\n      args: [key, value],\n      options: {},\n    });\n  }\n\n  run(\n    commands: string | string[],\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.RUN,\n      args: Array.isArray(commands) ? [...commands] : [commands],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  workdir(directory: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.WORKDIR,\n      args: [directory],\n      options: {},\n    });\n  }\n\n  /**\n   * Build this image as a sandbox template and register it.\n   *\n   * Materializes the image in a build sandbox, snapshots the filesystem,\n   * and registers the snapshot as a named sandbox template.\n   */\n  async build(\n    options: CreateSandboxImageOptions = {},\n  ): Promise<Record<string, unknown>> {\n    const { createSandboxImage } = await import(\"./sandbox-image.js\");\n    return createSandboxImage(this, options);\n  }\n\n  private _addOperation(op: ImageBuildOperation): this {\n    this._buildOperations.push(op);\n    return this;\n  }\n}\n\nfunction renderOptions(options: Record<string, string>): string {\n  const entries = Object.entries(options);\n  if (entries.length === 0) {\n    return \"\";\n  }\n  return ` ${entries.map(([key, value]) => `--${key}=${value}`).join(\" \")}`;\n}\n\nfunction renderBuildOp(op: ImageBuildOperation): string {\n  const options = renderOptions(op.options);\n  if (op.type === ImageBuildOperationType.ENV) {\n    return `ENV${options} ${op.args[0]}=${JSON.stringify(op.args[1])}`;\n  }\n  return `${op.type}${options} ${op.args.join(\" \")}`;\n}\n\nexport function dockerfileContent(image: Image): string {\n  const lines = image.baseImage == null ? [] : [`FROM ${image.baseImage}`];\n  lines.push(...image.buildOperations.map((op) => renderBuildOp(op)));\n  return lines.join(\"\\n\");\n}\n","import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport { existsSync } from \"node:fs\";\nimport { parseArgs } from \"node:util\";\nimport { Image, dockerfileContent } from \"./image.js\";\n\n/**\n * Sandbox-image build engine.\n *\n * Renders the source to a Dockerfile (for `Image` inputs) and hands the\n * Dockerfile path/text + context to the Rust core via `@tensorlake/native`,\n * which parses, validates, materializes, and registers the image. The Rust\n * core owns parsing, the Dockerfile-instruction allowlist\n * (`ONBUILD`/`SHELL` are rejected) and ignored-set warnings\n * (`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).\n */\n\nexport interface CreateSandboxImageOptions {\n  registeredName?: string;\n  cpus?: number;\n  memoryMb?: number;\n  diskMb?: number;\n  builderDiskMb?: number;\n  isPublic?: boolean;\n  contextDir?: string;\n  /**\n   * Print build progress to stderr. Ignored when an explicit `emit` is\n   * passed via `deps`. Defaults to false — `createSandboxImage` is silent\n   * by default when invoked programmatically (e.g. `Image.build()`).\n   */\n  verbose?: boolean;\n}\n\nexport type SandboxImageSource = string | Image;\n\nexport interface CreateSandboxImageDeps {\n  emit?: (event: Record<string, unknown>) => void;\n}\n\n// --- Native binding loader -------------------------------------------------\n\ninterface NativeBindingOptions {\n  apiUrl: string;\n  bearerToken: string;\n  dockerfilePath: string;\n  registeredName?: string | undefined | null;\n  diskMb?: number | undefined | null;\n  builderDiskMb?: number | undefined | null;\n  cpus?: number | undefined | null;\n  memoryMb?: number | undefined | null;\n  isPublic?: boolean | undefined | null;\n  organizationId?: string | undefined | null;\n  projectId?: string | undefined | null;\n  namespace?: string | undefined | null;\n  useScopeHeaders?: boolean | undefined | null;\n  userAgent?: string | undefined | null;\n  dockerfileText?: string | undefined | null;\n  contextDir?: string | undefined | null;\n}\n\ninterface NativeBindingEvent {\n  eventType: string;\n  stream?: string | undefined | null;\n  message: string;\n}\n\ninterface NativeBinding {\n  buildSandboxImage(\n    options: NativeBindingOptions,\n    emit?: ((event: NativeBindingEvent) => void) | null | undefined,\n  ): Promise<string>;\n}\n\n// `require` exists in the CJS bundle but not in ESM; declared here so the\n// runtime check below typechecks under \"module\": \"esnext\".\ndeclare const require: NodeRequire | undefined;\ndeclare const module: { exports?: unknown } | undefined;\n\nlet cachedNativeBinding: NativeBinding | undefined;\nlet cachedNativeBindingError: Error | undefined;\n\nfunction resolveRequire(): NodeRequire {\n  // tsup rewrites `import.meta.url` to `import_meta.url` (where\n  // `import_meta = {}`) in the CJS output, so `createRequire(import.meta.url)`\n  // throws if called at all in CJS. CJS bundles get the real `require`\n  // injected at runtime; prefer it. ESM bundles fall back to the createRequire\n  // path, which only runs when `import.meta.url` is a real file URL.\n  if (\n    typeof module !== \"undefined\" &&\n    module.exports != null &&\n    typeof require !== \"undefined\"\n  ) {\n    return require;\n  }\n  return createRequire(import.meta.url);\n}\n\nfunction loadNativeBinding(): NativeBinding {\n  if (cachedNativeBinding) return cachedNativeBinding;\n  if (cachedNativeBindingError) throw cachedNativeBindingError;\n  try {\n    // The native binding is staged per-platform under\n    // `typescript/dist/native/<triple>/tensorlake-node.node`. Loading goes\n    // through the same helper the CLI binaries use so platform detection\n    // stays in one place (`typescript/lib/runtime.cjs`). Deferred require so\n    // the CJS bundle doesn't trip the `import.meta.url` → undefined fallback.\n    const { loadNative } = resolveRequire()(\"../lib/runtime.cjs\") as {\n      loadNative: () => NativeBinding;\n    };\n    cachedNativeBinding = loadNative();\n    return cachedNativeBinding;\n  } catch (error) {\n    cachedNativeBindingError =\n      error instanceof Error ? error : new Error(String(error));\n    throw cachedNativeBindingError;\n  }\n}\n\n/** Test seam: replace the native binding with a stub. */\nexport function __setNativeBindingForTest(binding: NativeBinding | undefined): void {\n  cachedNativeBinding = binding;\n  cachedNativeBindingError = undefined;\n}\n\n// --- Build context ---------------------------------------------------------\n\nexport interface BuildContext {\n  apiUrl: string;\n  apiKey?: string;\n  personalAccessToken?: string;\n  namespace: string;\n  organizationId?: string;\n  projectId?: string;\n  debug: boolean;\n}\n\nfunction nonEmpty(value: string | undefined): string | undefined {\n  return value && value.length > 0 ? value : undefined;\n}\n\nfunction buildContextFromEnv(): BuildContext {\n  const debugRaw = (process.env.TENSORLAKE_DEBUG ?? \"\").toLowerCase();\n  const debug = [\"1\", \"true\", \"yes\", \"on\"].includes(debugRaw);\n  return {\n    apiUrl: nonEmpty(process.env.TENSORLAKE_API_URL) ?? \"https://api.tensorlake.ai\",\n    apiKey: nonEmpty(process.env.TENSORLAKE_API_KEY),\n    personalAccessToken: nonEmpty(process.env.TENSORLAKE_PAT),\n    namespace: nonEmpty(process.env.INDEXIFY_NAMESPACE) ?? \"default\",\n    organizationId: nonEmpty(process.env.TENSORLAKE_ORGANIZATION_ID),\n    projectId: nonEmpty(process.env.TENSORLAKE_PROJECT_ID),\n    debug,\n  };\n}\n\n// --- Default-name helper ---------------------------------------------------\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nfunction defaultRegisteredName(dockerfilePath: string): string {\n  const parsed = path.parse(dockerfilePath);\n  if (parsed.name.toLowerCase() === \"dockerfile\") {\n    const parentName = path.basename(path.dirname(dockerfilePath)).trim();\n    return parentName || \"sandbox-image\";\n  }\n  return parsed.name || \"sandbox-image\";\n}\n\n// --- Emit helpers ----------------------------------------------------------\n\nfunction noopEmit(_event: Record<string, unknown>): void {}\n\nfunction stderrEmit(event: Record<string, unknown>): void {\n  const message = typeof event.message === \"string\" ? event.message : \"\";\n  const type = typeof event.type === \"string\" ? event.type : \"\";\n  if (type === \"build_log\") {\n    const stream = typeof event.stream === \"string\" ? event.stream : \"stdout\";\n    process.stderr.write(`[${stream}] ${message}\\n`);\n  } else if (message) {\n    process.stderr.write(`[${type}] ${message}\\n`);\n  }\n}\n\nfunction ndjsonStdoutEmit(event: Record<string, unknown>): void {\n  process.stdout.write(`${JSON.stringify(event)}\\n`);\n}\n\nfunction eventToEmitDict(event: NativeBindingEvent): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    type: event.eventType,\n    message: event.message,\n  };\n  if (event.stream != null) out.stream = event.stream;\n  return out;\n}\n\n// --- Public API ------------------------------------------------------------\n\nexport async function createSandboxImage(\n  source: SandboxImageSource,\n  options: CreateSandboxImageOptions = {},\n  deps: CreateSandboxImageDeps = {},\n): Promise<Record<string, unknown>> {\n  const emit = deps.emit ?? (options.verbose ? stderrEmit : noopEmit);\n  const context = buildContextFromEnv();\n\n  let dockerfilePath: string;\n  let dockerfileText: string | undefined;\n  let nativeContextDir: string | undefined;\n  let effectiveName: string;\n\n  if (source instanceof Image) {\n    if (!source.baseImage) {\n      throw new Error(\"Image must have a baseImage to build\");\n    }\n    const resolvedContext = path.resolve(options.contextDir ?? process.cwd());\n    dockerfilePath = path.join(resolvedContext, \"Dockerfile\");\n    let text = dockerfileContent(source);\n    if (!text.endsWith(\"\\n\")) text += \"\\n\";\n    dockerfileText = text;\n    nativeContextDir = resolvedContext;\n    effectiveName = options.registeredName ?? source.name;\n  } else if (typeof source === \"string\") {\n    const resolvedPath = path.resolve(source);\n    if (!existsSync(resolvedPath)) {\n      throw new Error(`Dockerfile not found: ${source}`);\n    }\n    dockerfilePath = resolvedPath;\n    dockerfileText = undefined;\n    nativeContextDir = undefined;\n    effectiveName =\n      options.registeredName ?? defaultRegisteredName(resolvedPath);\n  } else {\n    throw new TypeError(\n      `source must be an Image or a Dockerfile path, got ${typeof source}`,\n    );\n  }\n\n  if (effectiveName === DEFAULT_IMAGE_NAME) {\n    // eslint-disable-next-line no-console\n    console.warn(\n      `Building sandbox image with the default name \"${DEFAULT_IMAGE_NAME}\". ` +\n        \"Pass `registeredName` or `Image({ name })` to avoid collisions \" +\n        \"with other default-named images in this project.\",\n    );\n  }\n\n  const bearerToken = context.apiKey ?? context.personalAccessToken;\n  if (!bearerToken) {\n    throw new Error(\"Missing TENSORLAKE_API_KEY or TENSORLAKE_PAT credentials.\");\n  }\n\n  emit({ type: \"status\", message: `Building image '${effectiveName}'...` });\n\n  const binding = loadNativeBinding();\n  let emitError: unknown;\n  const resultJson = await binding.buildSandboxImage(\n    {\n      apiUrl: context.apiUrl,\n      bearerToken,\n      dockerfilePath,\n      registeredName: effectiveName,\n      diskMb: options.diskMb,\n      builderDiskMb: options.builderDiskMb,\n      cpus: options.cpus,\n      memoryMb: options.memoryMb,\n      isPublic: options.isPublic ?? false,\n      organizationId: context.organizationId,\n      projectId: context.projectId,\n      namespace: context.namespace,\n      useScopeHeaders:\n        context.personalAccessToken != null && context.apiKey == null,\n      userAgent: undefined,\n      dockerfileText,\n      contextDir: nativeContextDir,\n    },\n    (event) => {\n      try {\n        emit(eventToEmitDict(event));\n      } catch (error) {\n        emitError ??= error;\n      }\n    },\n  );\n\n  if (emitError != null) {\n    throw emitError;\n  }\n\n  let result: Record<string, unknown> = {};\n  if (resultJson.trim().length > 0) {\n    result = JSON.parse(resultJson) as Record<string, unknown>;\n  }\n  emit({\n    type: \"image_registered\",\n    name: effectiveName,\n    image_id:\n      (typeof result.id === \"string\" && result.id) ||\n      (typeof result.templateId === \"string\" && result.templateId) ||\n      \"\",\n  });\n  emit({ type: \"done\" });\n  return result;\n}\n\nexport async function runCreateSandboxImageCli(argv = process.argv.slice(2)) {\n  const parsed = parseArgs({\n    args: argv,\n    allowPositionals: true,\n    options: {\n      name: { type: \"string\", short: \"n\" },\n      cpus: { type: \"string\" },\n      memory: { type: \"string\" },\n      disk_mb: { type: \"string\" },\n      builder_disk_mb: { type: \"string\" },\n      public: { type: \"boolean\", default: false },\n    },\n  });\n\n  const dockerfilePath = parsed.positionals[0];\n  if (!dockerfilePath) {\n    throw new Error(\n      \"Usage: tensorlake-create-sandbox-image <dockerfile_path> [--name NAME] [--cpus N] [--memory MB] [--disk_mb MB] [--builder_disk_mb MB] [--public]\",\n    );\n  }\n\n  const cpus =\n    parsed.values.cpus != null ? Number(parsed.values.cpus) : undefined;\n  const memoryMb =\n    parsed.values.memory != null ? Number(parsed.values.memory) : undefined;\n  const diskMb =\n    parsed.values.disk_mb != null ? Number(parsed.values.disk_mb) : undefined;\n  const builderDiskMb =\n    parsed.values.builder_disk_mb != null\n      ? Number(parsed.values.builder_disk_mb)\n      : undefined;\n  if (cpus != null && !Number.isFinite(cpus)) {\n    throw new Error(`Invalid --cpus value: ${parsed.values.cpus}`);\n  }\n  if (memoryMb != null && !Number.isInteger(memoryMb)) {\n    throw new Error(`Invalid --memory value: ${parsed.values.memory}`);\n  }\n  if (diskMb != null && !Number.isInteger(diskMb)) {\n    throw new Error(`Invalid --disk_mb value: ${parsed.values.disk_mb}`);\n  }\n  if (builderDiskMb != null && !Number.isInteger(builderDiskMb)) {\n    throw new Error(\n      `Invalid --builder_disk_mb value: ${parsed.values.builder_disk_mb}`,\n    );\n  }\n\n  await createSandboxImage(\n    dockerfilePath,\n    {\n      registeredName: parsed.values.name,\n      cpus,\n      memoryMb,\n      diskMb,\n      builderDiskMb,\n      isPublic: parsed.values.public,\n    },\n    { emit: ndjsonStdoutEmit },\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,SAAS,eAAe,IAA8C;AACpE,SAAO;AAAA,IACL,MAAM,GAAG;AAAA,IACT,MAAM,CAAC,GAAG,GAAG,IAAI;AAAA,IACjB,SAAS,EAAE,GAAG,GAAG,QAAQ;AAAA,EAC3B;AACF;AAsHA,SAAS,cAAc,SAAyC;AAC9D,QAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC;AACzE;AAEA,SAAS,cAAc,IAAiC;AACtD,QAAM,UAAU,cAAc,GAAG,OAAO;AACxC,MAAI,GAAG,SAAS,wBAAwB,KAAK;AAC3C,WAAO,MAAM,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC;AAAA,EAClE;AACA,SAAO,GAAG,GAAG,IAAI,GAAG,OAAO,IAAI,GAAG,KAAK,KAAK,GAAG,CAAC;AAClD;AAEO,SAAS,kBAAkB,OAAsB;AACtD,QAAM,QAAQ,MAAM,aAAa,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,SAAS,EAAE;AACvE,QAAM,KAAK,GAAG,MAAM,gBAAgB,IAAI,CAAC,OAAO,cAAc,EAAE,CAAC,CAAC;AAClE,SAAO,MAAM,KAAK,IAAI;AACxB;AA/KA,wBAMM,oBAEO,yBA+BA;AAvCb;AAAA;AAAA;AAAA,yBAA2B;AAM3B,IAAM,qBAAqB;AAEpB,IAAM,0BAA0B;AAAA,MACrC,KAAK;AAAA,MACL,MAAM;AAAA,MACN,KAAK;AAAA,MACL,KAAK;AAAA,MACL,SAAS;AAAA,IACX;AAyBO,IAAM,QAAN,MAAY;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAKT,YACE,gBAAuC,CAAC,GACxC,MAAM,UACN,YAA2B,MAC3B;AACA,aAAK,UAAM,+BAAW;AACtB,aAAK,mBAAmB,CAAC;AAEzB,YAAI,OAAO,kBAAkB,UAAU;AACrC,eAAK,QAAQ;AACb,eAAK,OAAO;AACZ,eAAK,aAAa;AAClB;AAAA,QACF;AAEA,aAAK,QAAQ,cAAc,QAAQ;AACnC,aAAK,OAAO,cAAc,OAAO;AACjC,aAAK,aAAa,cAAc,aAAa;AAAA,MAC/C;AAAA,MAEA,IAAI,OAAe;AACjB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,MAAc;AAChB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,YAA2B;AAC7B,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,kBAAyC;AAC3C,eAAO,KAAK,iBAAiB,IAAI,cAAc;AAAA,MACjD;AAAA,MAEA,IACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,KACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,IAAI,KAAa,OAAqB;AACpC,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,KAAK;AAAA,UACjB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,MAEA,IACE,UACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,QAAQ;AAAA,UACzD,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,QAAQ,WAAyB;AAC/B,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,SAAS;AAAA,UAChB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,MAAM,MACJ,UAAqC,CAAC,GACJ;AAClC,cAAM,EAAE,oBAAAA,oBAAmB,IAAI,MAAM;AACrC,eAAOA,oBAAmB,MAAM,OAAO;AAAA,MACzC;AAAA,MAEQ,cAAc,IAA+B;AACnD,aAAK,iBAAiB,KAAK,EAAE;AAC7B,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;;;ACzJA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiFA,SAAS,iBAA8B;AAMrC,MACE,OAAO,WAAW,eAClB,OAAO,WAAW,QAClB,OAAO,YAAY,aACnB;AACA,WAAO;AAAA,EACT;AACA,aAAO,kCAAc,YAAY,GAAG;AACtC;AAEA,SAAS,oBAAmC;AAC1C,MAAI,oBAAqB,QAAO;AAChC,MAAI,yBAA0B,OAAM;AACpC,MAAI;AAMF,UAAM,EAAE,WAAW,IAAI,eAAe,EAAE,oBAAoB;AAG5D,0BAAsB,WAAW;AACjC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,+BACE,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAC1D,UAAM;AAAA,EACR;AACF;AAGO,SAAS,0BAA0B,SAA0C;AAClF,wBAAsB;AACtB,6BAA2B;AAC7B;AAcA,SAAS,SAAS,OAA+C;AAC/D,SAAO,SAAS,MAAM,SAAS,IAAI,QAAQ;AAC7C;AAEA,SAAS,sBAAoC;AAC3C,QAAM,YAAY,QAAQ,IAAI,oBAAoB,IAAI,YAAY;AAClE,QAAM,QAAQ,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,QAAQ;AAC1D,SAAO;AAAA,IACL,QAAQ,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACpD,QAAQ,SAAS,QAAQ,IAAI,kBAAkB;AAAA,IAC/C,qBAAqB,SAAS,QAAQ,IAAI,cAAc;AAAA,IACxD,WAAW,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACvD,gBAAgB,SAAS,QAAQ,IAAI,0BAA0B;AAAA,IAC/D,WAAW,SAAS,QAAQ,IAAI,qBAAqB;AAAA,IACrD;AAAA,EACF;AACF;AAMA,SAAS,sBAAsB,gBAAgC;AAC7D,QAAM,SAAS,iBAAAC,QAAK,MAAM,cAAc;AACxC,MAAI,OAAO,KAAK,YAAY,MAAM,cAAc;AAC9C,UAAM,aAAa,iBAAAA,QAAK,SAAS,iBAAAA,QAAK,QAAQ,cAAc,CAAC,EAAE,KAAK;AACpE,WAAO,cAAc;AAAA,EACvB;AACA,SAAO,OAAO,QAAQ;AACxB;AAIA,SAAS,SAAS,QAAuC;AAAC;AAE1D,SAAS,WAAW,OAAsC;AACxD,QAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AACpE,QAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,MAAI,SAAS,aAAa;AACxB,UAAM,SAAS,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACjE,YAAQ,OAAO,MAAM,IAAI,MAAM,KAAK,OAAO;AAAA,CAAI;AAAA,EACjD,WAAW,SAAS;AAClB,YAAQ,OAAO,MAAM,IAAI,IAAI,KAAK,OAAO;AAAA,CAAI;AAAA,EAC/C;AACF;AAEA,SAAS,iBAAiB,OAAsC;AAC9D,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AACnD;AAEA,SAAS,gBAAgB,OAAoD;AAC3E,QAAM,MAA+B;AAAA,IACnC,MAAM,MAAM;AAAA,IACZ,SAAS,MAAM;AAAA,EACjB;AACA,MAAI,MAAM,UAAU,KAAM,KAAI,SAAS,MAAM;AAC7C,SAAO;AACT;AAIA,eAAsB,mBACpB,QACA,UAAqC,CAAC,GACtC,OAA+B,CAAC,GACE;AAClC,QAAM,OAAO,KAAK,SAAS,QAAQ,UAAU,aAAa;AAC1D,QAAM,UAAU,oBAAoB;AAEpC,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,kBAAkB,OAAO;AAC3B,QAAI,CAAC,OAAO,WAAW;AACrB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,kBAAkB,iBAAAA,QAAK,QAAQ,QAAQ,cAAc,QAAQ,IAAI,CAAC;AACxE,qBAAiB,iBAAAA,QAAK,KAAK,iBAAiB,YAAY;AACxD,QAAI,OAAO,kBAAkB,MAAM;AACnC,QAAI,CAAC,KAAK,SAAS,IAAI,EAAG,SAAQ;AAClC,qBAAiB;AACjB,uBAAmB;AACnB,oBAAgB,QAAQ,kBAAkB,OAAO;AAAA,EACnD,WAAW,OAAO,WAAW,UAAU;AACrC,UAAM,eAAe,iBAAAA,QAAK,QAAQ,MAAM;AACxC,QAAI,KAAC,2BAAW,YAAY,GAAG;AAC7B,YAAM,IAAI,MAAM,yBAAyB,MAAM,EAAE;AAAA,IACnD;AACA,qBAAiB;AACjB,qBAAiB;AACjB,uBAAmB;AACnB,oBACE,QAAQ,kBAAkB,sBAAsB,YAAY;AAAA,EAChE,OAAO;AACL,UAAM,IAAI;AAAA,MACR,qDAAqD,OAAO,MAAM;AAAA,IACpE;AAAA,EACF;AAEA,MAAI,kBAAkBC,qBAAoB;AAExC,YAAQ;AAAA,MACN,iDAAiDA,mBAAkB;AAAA,IAGrE;AAAA,EACF;AAEA,QAAM,cAAc,QAAQ,UAAU,QAAQ;AAC9C,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AAEA,OAAK,EAAE,MAAM,UAAU,SAAS,mBAAmB,aAAa,OAAO,CAAC;AAExE,QAAM,UAAU,kBAAkB;AAClC,MAAI;AACJ,QAAM,aAAa,MAAM,QAAQ;AAAA,IAC/B;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,QAAQ,QAAQ;AAAA,MAChB,eAAe,QAAQ;AAAA,MACvB,MAAM,QAAQ;AAAA,MACd,UAAU,QAAQ;AAAA,MAClB,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ;AAAA,MACxB,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,MACnB,iBACE,QAAQ,uBAAuB,QAAQ,QAAQ,UAAU;AAAA,MAC3D,WAAW;AAAA,MACX;AAAA,MACA,YAAY;AAAA,IACd;AAAA,IACA,CAAC,UAAU;AACT,UAAI;AACF,aAAK,gBAAgB,KAAK,CAAC;AAAA,MAC7B,SAAS,OAAO;AACd,sBAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,MAAM;AACrB,UAAM;AAAA,EACR;AAEA,MAAI,SAAkC,CAAC;AACvC,MAAI,WAAW,KAAK,EAAE,SAAS,GAAG;AAChC,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC;AACA,OAAK;AAAA,IACH,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UACG,OAAO,OAAO,OAAO,YAAY,OAAO,MACxC,OAAO,OAAO,eAAe,YAAY,OAAO,cACjD;AAAA,EACJ,CAAC;AACD,OAAK,EAAE,MAAM,OAAO,CAAC;AACrB,SAAO;AACT;AAEA,eAAsB,yBAAyB,OAAO,QAAQ,KAAK,MAAM,CAAC,GAAG;AAC3E,QAAM,aAAS,4BAAU;AAAA,IACvB,MAAM;AAAA,IACN,kBAAkB;AAAA,IAClB,SAAS;AAAA,MACP,MAAM,EAAE,MAAM,UAAU,OAAO,IAAI;AAAA,MACnC,MAAM,EAAE,MAAM,SAAS;AAAA,MACvB,QAAQ,EAAE,MAAM,SAAS;AAAA,MACzB,SAAS,EAAE,MAAM,SAAS;AAAA,MAC1B,iBAAiB,EAAE,MAAM,SAAS;AAAA,MAClC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,QAAM,iBAAiB,OAAO,YAAY,CAAC;AAC3C,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OACJ,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO,OAAO,IAAI,IAAI;AAC5D,QAAM,WACJ,OAAO,OAAO,UAAU,OAAO,OAAO,OAAO,OAAO,MAAM,IAAI;AAChE,QAAM,SACJ,OAAO,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO,IAAI;AAClE,QAAM,gBACJ,OAAO,OAAO,mBAAmB,OAC7B,OAAO,OAAO,OAAO,eAAe,IACpC;AACN,MAAI,QAAQ,QAAQ,CAAC,OAAO,SAAS,IAAI,GAAG;AAC1C,UAAM,IAAI,MAAM,yBAAyB,OAAO,OAAO,IAAI,EAAE;AAAA,EAC/D;AACA,MAAI,YAAY,QAAQ,CAAC,OAAO,UAAU,QAAQ,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B,OAAO,OAAO,MAAM,EAAE;AAAA,EACnE;AACA,MAAI,UAAU,QAAQ,CAAC,OAAO,UAAU,MAAM,GAAG;AAC/C,UAAM,IAAI,MAAM,4BAA4B,OAAO,OAAO,OAAO,EAAE;AAAA,EACrE;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,UAAU,aAAa,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,oCAAoC,OAAO,OAAO,eAAe;AAAA,IACnE;AAAA,EACF;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,gBAAgB,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,OAAO,OAAO;AAAA,IAC1B;AAAA,IACA,EAAE,MAAM,iBAAiB;AAAA,EAC3B;AACF;AA1WA,wBACA,kBACA,gBACA,kBAHA,aA8EI,qBACA,0BA6EEA;AA5JN;AAAA;AAAA,yBAA8B;AAC9B,uBAAiB;AACjB,qBAA2B;AAC3B,uBAA0B;AAC1B;AAJA;AA4JA,IAAMA,sBAAqB;AAAA;AAAA;","names":["createSandboxImage","path","DEFAULT_IMAGE_NAME"]}

package/dist/sandbox-image.d.cts

@@ -1 +1 @@
-export { B as BuildContext, f as CreateSandboxImageDeps, C as CreateSandboxImageOptions, S as SandboxImageSource, _ as __setNativeBindingForTest, d as createSandboxImage, r as runCreateSandboxImageCli } from './sandbox-image-CmX-BLMV.cjs';
+export { B as BuildContext, f as CreateSandboxImageDeps, C as CreateSandboxImageOptions, S as SandboxImageSource, _ as __setNativeBindingForTest, d as createSandboxImage, r as runCreateSandboxImageCli } from './sandbox-image-2y2fMVxI.cjs';

package/dist/sandbox-image.d.ts

@@ -1 +1 @@
-export { B as BuildContext, f as CreateSandboxImageDeps, C as CreateSandboxImageOptions, S as SandboxImageSource, _ as __setNativeBindingForTest, d as createSandboxImage, r as runCreateSandboxImageCli } from './sandbox-image-CmX-BLMV.js';
+export { B as BuildContext, f as CreateSandboxImageDeps, C as CreateSandboxImageOptions, S as SandboxImageSource, _ as __setNativeBindingForTest, d as createSandboxImage, r as runCreateSandboxImageCli } from './sandbox-image-2y2fMVxI.js';

package/dist/sandbox-image.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/image.ts","../src/sandbox-image.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\n\n// Erased at runtime — safe despite the module cycle with sandbox-image.ts,\n// which imports Image from here.\nimport type { CreateSandboxImageOptions } from \"./sandbox-image.js\";\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nexport const ImageBuildOperationType = {\n  ADD: \"ADD\",\n  COPY: \"COPY\",\n  ENV: \"ENV\",\n  RUN: \"RUN\",\n  WORKDIR: \"WORKDIR\",\n} as const;\n\nexport type ImageBuildOperationType =\n  (typeof ImageBuildOperationType)[keyof typeof ImageBuildOperationType];\n\nexport interface ImageBuildOperation {\n  type: ImageBuildOperationType;\n  args: string[];\n  options: Record<string, string>;\n}\n\nexport interface ImageOptions {\n  name?: string;\n  tag?: string;\n  baseImage?: string | null;\n}\n\nfunction cloneOperation(op: ImageBuildOperation): ImageBuildOperation {\n  return {\n    type: op.type,\n    args: [...op.args],\n    options: { ...op.options },\n  };\n}\n\nexport class Image {\n  readonly _id: string;\n  readonly _name: string;\n  readonly _tag: string;\n  readonly _baseImage: string | null;\n  readonly _buildOperations: ImageBuildOperation[];\n\n  constructor();\n  constructor(name: string, tag?: string, baseImage?: string | null);\n  constructor(options: ImageOptions);\n  constructor(\n    nameOrOptions: string | ImageOptions = {},\n    tag = \"latest\",\n    baseImage: string | null = null,\n  ) {\n    this._id = randomUUID();\n    this._buildOperations = [];\n\n    if (typeof nameOrOptions === \"string\") {\n      this._name = nameOrOptions;\n      this._tag = tag;\n      this._baseImage = baseImage;\n      return;\n    }\n\n    this._name = nameOrOptions.name ?? DEFAULT_IMAGE_NAME;\n    this._tag = nameOrOptions.tag ?? \"latest\";\n    this._baseImage = nameOrOptions.baseImage ?? null;\n  }\n\n  get name(): string {\n    return this._name;\n  }\n\n  get tag(): string {\n    return this._tag;\n  }\n\n  get baseImage(): string | null {\n    return this._baseImage;\n  }\n\n  get buildOperations(): ImageBuildOperation[] {\n    return this._buildOperations.map(cloneOperation);\n  }\n\n  add(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ADD,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  copy(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.COPY,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  env(key: string, value: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ENV,\n      args: [key, value],\n      options: {},\n    });\n  }\n\n  run(\n    commands: string | string[],\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.RUN,\n      args: Array.isArray(commands) ? [...commands] : [commands],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  workdir(directory: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.WORKDIR,\n      args: [directory],\n      options: {},\n    });\n  }\n\n  /**\n   * Build this image as a sandbox template and register it.\n   *\n   * Materializes the image in a build sandbox, snapshots the filesystem,\n   * and registers the snapshot as a named sandbox template.\n   */\n  async build(\n    options: CreateSandboxImageOptions = {},\n  ): Promise<Record<string, unknown>> {\n    const { createSandboxImage } = await import(\"./sandbox-image.js\");\n    return createSandboxImage(this, options);\n  }\n\n  private _addOperation(op: ImageBuildOperation): this {\n    this._buildOperations.push(op);\n    return this;\n  }\n}\n\nfunction renderOptions(options: Record<string, string>): string {\n  const entries = Object.entries(options);\n  if (entries.length === 0) {\n    return \"\";\n  }\n  return ` ${entries.map(([key, value]) => `--${key}=${value}`).join(\" \")}`;\n}\n\nfunction renderBuildOp(op: ImageBuildOperation): string {\n  const options = renderOptions(op.options);\n  if (op.type === ImageBuildOperationType.ENV) {\n    return `ENV${options} ${op.args[0]}=${JSON.stringify(op.args[1])}`;\n  }\n  return `${op.type}${options} ${op.args.join(\" \")}`;\n}\n\nexport function dockerfileContent(image: Image): string {\n  const lines = image.baseImage == null ? [] : [`FROM ${image.baseImage}`];\n  lines.push(...image.buildOperations.map((op) => renderBuildOp(op)));\n  return lines.join(\"\\n\");\n}\n","import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport { existsSync } from \"node:fs\";\nimport { parseArgs } from \"node:util\";\nimport { Image, dockerfileContent } from \"./image.js\";\n\n/**\n * Sandbox-image build engine.\n *\n * Renders the source to a Dockerfile (for `Image` inputs) and hands the\n * Dockerfile path/text + context to the Rust core via `@tensorlake/native`,\n * which parses, validates, materializes, and registers the image. The Rust\n * core owns parsing, the Dockerfile-instruction allowlist\n * (`ARG`/`ONBUILD`/`SHELL`/`USER` are rejected) and ignored-set warnings\n * (`CMD`/`ENTRYPOINT`/`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).\n */\n\nexport interface CreateSandboxImageOptions {\n  registeredName?: string;\n  cpus?: number;\n  memoryMb?: number;\n  diskMb?: number;\n  builderDiskMb?: number;\n  isPublic?: boolean;\n  contextDir?: string;\n  /**\n   * Print build progress to stderr. Ignored when an explicit `emit` is\n   * passed via `deps`. Defaults to false — `createSandboxImage` is silent\n   * by default when invoked programmatically (e.g. `Image.build()`).\n   */\n  verbose?: boolean;\n}\n\nexport type SandboxImageSource = string | Image;\n\nexport interface CreateSandboxImageDeps {\n  emit?: (event: Record<string, unknown>) => void;\n}\n\n// --- Native binding loader -------------------------------------------------\n\ninterface NativeBindingOptions {\n  apiUrl: string;\n  bearerToken: string;\n  dockerfilePath: string;\n  registeredName?: string | undefined | null;\n  diskMb?: number | undefined | null;\n  builderDiskMb?: number | undefined | null;\n  cpus?: number | undefined | null;\n  memoryMb?: number | undefined | null;\n  isPublic?: boolean | undefined | null;\n  organizationId?: string | undefined | null;\n  projectId?: string | undefined | null;\n  namespace?: string | undefined | null;\n  useScopeHeaders?: boolean | undefined | null;\n  userAgent?: string | undefined | null;\n  dockerfileText?: string | undefined | null;\n  contextDir?: string | undefined | null;\n}\n\ninterface NativeBindingEvent {\n  eventType: string;\n  stream?: string | undefined | null;\n  message: string;\n}\n\ninterface NativeBinding {\n  buildSandboxImage(\n    options: NativeBindingOptions,\n    emit?: ((event: NativeBindingEvent) => void) | null | undefined,\n  ): Promise<string>;\n}\n\n// `require` exists in the CJS bundle but not in ESM; declared here so the\n// runtime check below typechecks under \"module\": \"esnext\".\ndeclare const require: NodeRequire | undefined;\ndeclare const module: { exports?: unknown } | undefined;\n\nlet cachedNativeBinding: NativeBinding | undefined;\nlet cachedNativeBindingError: Error | undefined;\n\nfunction resolveRequire(): NodeRequire {\n  // tsup rewrites `import.meta.url` to `import_meta.url` (where\n  // `import_meta = {}`) in the CJS output, so `createRequire(import.meta.url)`\n  // throws if called at all in CJS. CJS bundles get the real `require`\n  // injected at runtime; prefer it. ESM bundles fall back to the createRequire\n  // path, which only runs when `import.meta.url` is a real file URL.\n  if (\n    typeof module !== \"undefined\" &&\n    module.exports != null &&\n    typeof require !== \"undefined\"\n  ) {\n    return require;\n  }\n  return createRequire(import.meta.url);\n}\n\nfunction loadNativeBinding(): NativeBinding {\n  if (cachedNativeBinding) return cachedNativeBinding;\n  if (cachedNativeBindingError) throw cachedNativeBindingError;\n  try {\n    // The native binding is staged per-platform under\n    // `typescript/dist/native/<triple>/tensorlake-node.node`. Loading goes\n    // through the same helper the CLI binaries use so platform detection\n    // stays in one place (`typescript/lib/runtime.cjs`). Deferred require so\n    // the CJS bundle doesn't trip the `import.meta.url` → undefined fallback.\n    const { loadNative } = resolveRequire()(\"../lib/runtime.cjs\") as {\n      loadNative: () => NativeBinding;\n    };\n    cachedNativeBinding = loadNative();\n    return cachedNativeBinding;\n  } catch (error) {\n    cachedNativeBindingError =\n      error instanceof Error ? error : new Error(String(error));\n    throw cachedNativeBindingError;\n  }\n}\n\n/** Test seam: replace the native binding with a stub. */\nexport function __setNativeBindingForTest(binding: NativeBinding | undefined): void {\n  cachedNativeBinding = binding;\n  cachedNativeBindingError = undefined;\n}\n\n// --- Build context ---------------------------------------------------------\n\nexport interface BuildContext {\n  apiUrl: string;\n  apiKey?: string;\n  personalAccessToken?: string;\n  namespace: string;\n  organizationId?: string;\n  projectId?: string;\n  debug: boolean;\n}\n\nfunction nonEmpty(value: string | undefined): string | undefined {\n  return value && value.length > 0 ? value : undefined;\n}\n\nfunction buildContextFromEnv(): BuildContext {\n  const debugRaw = (process.env.TENSORLAKE_DEBUG ?? \"\").toLowerCase();\n  const debug = [\"1\", \"true\", \"yes\", \"on\"].includes(debugRaw);\n  return {\n    apiUrl: nonEmpty(process.env.TENSORLAKE_API_URL) ?? \"https://api.tensorlake.ai\",\n    apiKey: nonEmpty(process.env.TENSORLAKE_API_KEY),\n    personalAccessToken: nonEmpty(process.env.TENSORLAKE_PAT),\n    namespace: nonEmpty(process.env.INDEXIFY_NAMESPACE) ?? \"default\",\n    organizationId: nonEmpty(process.env.TENSORLAKE_ORGANIZATION_ID),\n    projectId: nonEmpty(process.env.TENSORLAKE_PROJECT_ID),\n    debug,\n  };\n}\n\n// --- Default-name helper ---------------------------------------------------\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nfunction defaultRegisteredName(dockerfilePath: string): string {\n  const parsed = path.parse(dockerfilePath);\n  if (parsed.name.toLowerCase() === \"dockerfile\") {\n    const parentName = path.basename(path.dirname(dockerfilePath)).trim();\n    return parentName || \"sandbox-image\";\n  }\n  return parsed.name || \"sandbox-image\";\n}\n\n// --- Emit helpers ----------------------------------------------------------\n\nfunction noopEmit(_event: Record<string, unknown>): void {}\n\nfunction stderrEmit(event: Record<string, unknown>): void {\n  const message = typeof event.message === \"string\" ? event.message : \"\";\n  const type = typeof event.type === \"string\" ? event.type : \"\";\n  if (type === \"build_log\") {\n    const stream = typeof event.stream === \"string\" ? event.stream : \"stdout\";\n    process.stderr.write(`[${stream}] ${message}\\n`);\n  } else if (message) {\n    process.stderr.write(`[${type}] ${message}\\n`);\n  }\n}\n\nfunction ndjsonStdoutEmit(event: Record<string, unknown>): void {\n  process.stdout.write(`${JSON.stringify(event)}\\n`);\n}\n\nfunction eventToEmitDict(event: NativeBindingEvent): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    type: event.eventType,\n    message: event.message,\n  };\n  if (event.stream != null) out.stream = event.stream;\n  return out;\n}\n\n// --- Public API ------------------------------------------------------------\n\nexport async function createSandboxImage(\n  source: SandboxImageSource,\n  options: CreateSandboxImageOptions = {},\n  deps: CreateSandboxImageDeps = {},\n): Promise<Record<string, unknown>> {\n  const emit = deps.emit ?? (options.verbose ? stderrEmit : noopEmit);\n  const context = buildContextFromEnv();\n\n  let dockerfilePath: string;\n  let dockerfileText: string | undefined;\n  let nativeContextDir: string | undefined;\n  let effectiveName: string;\n\n  if (source instanceof Image) {\n    if (!source.baseImage) {\n      throw new Error(\"Image must have a baseImage to build\");\n    }\n    const resolvedContext = path.resolve(options.contextDir ?? process.cwd());\n    dockerfilePath = path.join(resolvedContext, \"Dockerfile\");\n    let text = dockerfileContent(source);\n    if (!text.endsWith(\"\\n\")) text += \"\\n\";\n    dockerfileText = text;\n    nativeContextDir = resolvedContext;\n    effectiveName = options.registeredName ?? source.name;\n  } else if (typeof source === \"string\") {\n    const resolvedPath = path.resolve(source);\n    if (!existsSync(resolvedPath)) {\n      throw new Error(`Dockerfile not found: ${source}`);\n    }\n    dockerfilePath = resolvedPath;\n    dockerfileText = undefined;\n    nativeContextDir = undefined;\n    effectiveName =\n      options.registeredName ?? defaultRegisteredName(resolvedPath);\n  } else {\n    throw new TypeError(\n      `source must be an Image or a Dockerfile path, got ${typeof source}`,\n    );\n  }\n\n  if (effectiveName === DEFAULT_IMAGE_NAME) {\n    // eslint-disable-next-line no-console\n    console.warn(\n      `Building sandbox image with the default name \"${DEFAULT_IMAGE_NAME}\". ` +\n        \"Pass `registeredName` or `Image({ name })` to avoid collisions \" +\n        \"with other default-named images in this project.\",\n    );\n  }\n\n  const bearerToken = context.apiKey ?? context.personalAccessToken;\n  if (!bearerToken) {\n    throw new Error(\"Missing TENSORLAKE_API_KEY or TENSORLAKE_PAT credentials.\");\n  }\n\n  emit({ type: \"status\", message: `Building image '${effectiveName}'...` });\n\n  const binding = loadNativeBinding();\n  let emitError: unknown;\n  const resultJson = await binding.buildSandboxImage(\n    {\n      apiUrl: context.apiUrl,\n      bearerToken,\n      dockerfilePath,\n      registeredName: effectiveName,\n      diskMb: options.diskMb,\n      builderDiskMb: options.builderDiskMb,\n      cpus: options.cpus,\n      memoryMb: options.memoryMb,\n      isPublic: options.isPublic ?? false,\n      organizationId: context.organizationId,\n      projectId: context.projectId,\n      namespace: context.namespace,\n      useScopeHeaders:\n        context.personalAccessToken != null && context.apiKey == null,\n      userAgent: undefined,\n      dockerfileText,\n      contextDir: nativeContextDir,\n    },\n    (event) => {\n      try {\n        emit(eventToEmitDict(event));\n      } catch (error) {\n        emitError ??= error;\n      }\n    },\n  );\n\n  if (emitError != null) {\n    throw emitError;\n  }\n\n  let result: Record<string, unknown> = {};\n  if (resultJson.trim().length > 0) {\n    result = JSON.parse(resultJson) as Record<string, unknown>;\n  }\n  emit({\n    type: \"image_registered\",\n    name: effectiveName,\n    image_id:\n      (typeof result.id === \"string\" && result.id) ||\n      (typeof result.templateId === \"string\" && result.templateId) ||\n      \"\",\n  });\n  emit({ type: \"done\" });\n  return result;\n}\n\nexport async function runCreateSandboxImageCli(argv = process.argv.slice(2)) {\n  const parsed = parseArgs({\n    args: argv,\n    allowPositionals: true,\n    options: {\n      name: { type: \"string\", short: \"n\" },\n      cpus: { type: \"string\" },\n      memory: { type: \"string\" },\n      disk_mb: { type: \"string\" },\n      builder_disk_mb: { type: \"string\" },\n      public: { type: \"boolean\", default: false },\n    },\n  });\n\n  const dockerfilePath = parsed.positionals[0];\n  if (!dockerfilePath) {\n    throw new Error(\n      \"Usage: tensorlake-create-sandbox-image <dockerfile_path> [--name NAME] [--cpus N] [--memory MB] [--disk_mb MB] [--builder_disk_mb MB] [--public]\",\n    );\n  }\n\n  const cpus =\n    parsed.values.cpus != null ? Number(parsed.values.cpus) : undefined;\n  const memoryMb =\n    parsed.values.memory != null ? Number(parsed.values.memory) : undefined;\n  const diskMb =\n    parsed.values.disk_mb != null ? Number(parsed.values.disk_mb) : undefined;\n  const builderDiskMb =\n    parsed.values.builder_disk_mb != null\n      ? Number(parsed.values.builder_disk_mb)\n      : undefined;\n  if (cpus != null && !Number.isFinite(cpus)) {\n    throw new Error(`Invalid --cpus value: ${parsed.values.cpus}`);\n  }\n  if (memoryMb != null && !Number.isInteger(memoryMb)) {\n    throw new Error(`Invalid --memory value: ${parsed.values.memory}`);\n  }\n  if (diskMb != null && !Number.isInteger(diskMb)) {\n    throw new Error(`Invalid --disk_mb value: ${parsed.values.disk_mb}`);\n  }\n  if (builderDiskMb != null && !Number.isInteger(builderDiskMb)) {\n    throw new Error(\n      `Invalid --builder_disk_mb value: ${parsed.values.builder_disk_mb}`,\n    );\n  }\n\n  await createSandboxImage(\n    dockerfilePath,\n    {\n      registeredName: parsed.values.name,\n      cpus,\n      memoryMb,\n      diskMb,\n      builderDiskMb,\n      isPublic: parsed.values.public,\n    },\n    { emit: ndjsonStdoutEmit },\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AA+B3B,SAAS,eAAe,IAA8C;AACpE,SAAO;AAAA,IACL,MAAM,GAAG;AAAA,IACT,MAAM,CAAC,GAAG,GAAG,IAAI;AAAA,IACjB,SAAS,EAAE,GAAG,GAAG,QAAQ;AAAA,EAC3B;AACF;AAsHA,SAAS,cAAc,SAAyC;AAC9D,QAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC;AACzE;AAEA,SAAS,cAAc,IAAiC;AACtD,QAAM,UAAU,cAAc,GAAG,OAAO;AACxC,MAAI,GAAG,SAAS,wBAAwB,KAAK;AAC3C,WAAO,MAAM,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC;AAAA,EAClE;AACA,SAAO,GAAG,GAAG,IAAI,GAAG,OAAO,IAAI,GAAG,KAAK,KAAK,GAAG,CAAC;AAClD;AAEO,SAAS,kBAAkB,OAAsB;AACtD,QAAM,QAAQ,MAAM,aAAa,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,SAAS,EAAE;AACvE,QAAM,KAAK,GAAG,MAAM,gBAAgB,IAAI,CAAC,OAAO,cAAc,EAAE,CAAC,CAAC;AAClE,SAAO,MAAM,KAAK,IAAI;AACxB;AA/KA,IAMM,oBAEO,yBA+BA;AAvCb;AAAA;AAAA;AAMA,IAAM,qBAAqB;AAEpB,IAAM,0BAA0B;AAAA,MACrC,KAAK;AAAA,MACL,MAAM;AAAA,MACN,KAAK;AAAA,MACL,KAAK;AAAA,MACL,SAAS;AAAA,IACX;AAyBO,IAAM,QAAN,MAAY;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAKT,YACE,gBAAuC,CAAC,GACxC,MAAM,UACN,YAA2B,MAC3B;AACA,aAAK,MAAM,WAAW;AACtB,aAAK,mBAAmB,CAAC;AAEzB,YAAI,OAAO,kBAAkB,UAAU;AACrC,eAAK,QAAQ;AACb,eAAK,OAAO;AACZ,eAAK,aAAa;AAClB;AAAA,QACF;AAEA,aAAK,QAAQ,cAAc,QAAQ;AACnC,aAAK,OAAO,cAAc,OAAO;AACjC,aAAK,aAAa,cAAc,aAAa;AAAA,MAC/C;AAAA,MAEA,IAAI,OAAe;AACjB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,MAAc;AAChB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,YAA2B;AAC7B,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,kBAAyC;AAC3C,eAAO,KAAK,iBAAiB,IAAI,cAAc;AAAA,MACjD;AAAA,MAEA,IACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,KACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,IAAI,KAAa,OAAqB;AACpC,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,KAAK;AAAA,UACjB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,MAEA,IACE,UACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,QAAQ;AAAA,UACzD,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,QAAQ,WAAyB;AAC/B,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,SAAS;AAAA,UAChB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,MAAM,MACJ,UAAqC,CAAC,GACJ;AAClC,cAAM,EAAE,oBAAAA,oBAAmB,IAAI,MAAM;AACrC,eAAOA,oBAAmB,MAAM,OAAO;AAAA,MACzC;AAAA,MAEQ,cAAc,IAA+B;AACnD,aAAK,iBAAiB,KAAK,EAAE;AAC7B,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;;;ACzJA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAS,qBAAqB;AAC9B,OAAO,UAAU;AACjB,SAAS,kBAAkB;AAC3B,SAAS,iBAAiB;AA8E1B,SAAS,iBAA8B;AAMrC,MACE,OAAO,WAAW,eAClB,OAAO,WAAW,QAClB,OAAO,cAAY,aACnB;AACA,WAAO;AAAA,EACT;AACA,SAAO,cAAc,YAAY,GAAG;AACtC;AAEA,SAAS,oBAAmC;AAC1C,MAAI,oBAAqB,QAAO;AAChC,MAAI,yBAA0B,OAAM;AACpC,MAAI;AAMF,UAAM,EAAE,WAAW,IAAI,eAAe,EAAE,oBAAoB;AAG5D,0BAAsB,WAAW;AACjC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,+BACE,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAC1D,UAAM;AAAA,EACR;AACF;AAGO,SAAS,0BAA0B,SAA0C;AAClF,wBAAsB;AACtB,6BAA2B;AAC7B;AAcA,SAAS,SAAS,OAA+C;AAC/D,SAAO,SAAS,MAAM,SAAS,IAAI,QAAQ;AAC7C;AAEA,SAAS,sBAAoC;AAC3C,QAAM,YAAY,QAAQ,IAAI,oBAAoB,IAAI,YAAY;AAClE,QAAM,QAAQ,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,QAAQ;AAC1D,SAAO;AAAA,IACL,QAAQ,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACpD,QAAQ,SAAS,QAAQ,IAAI,kBAAkB;AAAA,IAC/C,qBAAqB,SAAS,QAAQ,IAAI,cAAc;AAAA,IACxD,WAAW,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACvD,gBAAgB,SAAS,QAAQ,IAAI,0BAA0B;AAAA,IAC/D,WAAW,SAAS,QAAQ,IAAI,qBAAqB;AAAA,IACrD;AAAA,EACF;AACF;AAMA,SAAS,sBAAsB,gBAAgC;AAC7D,QAAM,SAAS,KAAK,MAAM,cAAc;AACxC,MAAI,OAAO,KAAK,YAAY,MAAM,cAAc;AAC9C,UAAM,aAAa,KAAK,SAAS,KAAK,QAAQ,cAAc,CAAC,EAAE,KAAK;AACpE,WAAO,cAAc;AAAA,EACvB;AACA,SAAO,OAAO,QAAQ;AACxB;AAIA,SAAS,SAAS,QAAuC;AAAC;AAE1D,SAAS,WAAW,OAAsC;AACxD,QAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AACpE,QAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,MAAI,SAAS,aAAa;AACxB,UAAM,SAAS,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACjE,YAAQ,OAAO,MAAM,IAAI,MAAM,KAAK,OAAO;AAAA,CAAI;AAAA,EACjD,WAAW,SAAS;AAClB,YAAQ,OAAO,MAAM,IAAI,IAAI,KAAK,OAAO;AAAA,CAAI;AAAA,EAC/C;AACF;AAEA,SAAS,iBAAiB,OAAsC;AAC9D,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AACnD;AAEA,SAAS,gBAAgB,OAAoD;AAC3E,QAAM,MAA+B;AAAA,IACnC,MAAM,MAAM;AAAA,IACZ,SAAS,MAAM;AAAA,EACjB;AACA,MAAI,MAAM,UAAU,KAAM,KAAI,SAAS,MAAM;AAC7C,SAAO;AACT;AAIA,eAAsB,mBACpB,QACA,UAAqC,CAAC,GACtC,OAA+B,CAAC,GACE;AAClC,QAAM,OAAO,KAAK,SAAS,QAAQ,UAAU,aAAa;AAC1D,QAAM,UAAU,oBAAoB;AAEpC,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,kBAAkB,OAAO;AAC3B,QAAI,CAAC,OAAO,WAAW;AACrB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,kBAAkB,KAAK,QAAQ,QAAQ,cAAc,QAAQ,IAAI,CAAC;AACxE,qBAAiB,KAAK,KAAK,iBAAiB,YAAY;AACxD,QAAI,OAAO,kBAAkB,MAAM;AACnC,QAAI,CAAC,KAAK,SAAS,IAAI,EAAG,SAAQ;AAClC,qBAAiB;AACjB,uBAAmB;AACnB,oBAAgB,QAAQ,kBAAkB,OAAO;AAAA,EACnD,WAAW,OAAO,WAAW,UAAU;AACrC,UAAM,eAAe,KAAK,QAAQ,MAAM;AACxC,QAAI,CAAC,WAAW,YAAY,GAAG;AAC7B,YAAM,IAAI,MAAM,yBAAyB,MAAM,EAAE;AAAA,IACnD;AACA,qBAAiB;AACjB,qBAAiB;AACjB,uBAAmB;AACnB,oBACE,QAAQ,kBAAkB,sBAAsB,YAAY;AAAA,EAChE,OAAO;AACL,UAAM,IAAI;AAAA,MACR,qDAAqD,OAAO,MAAM;AAAA,IACpE;AAAA,EACF;AAEA,MAAI,kBAAkBC,qBAAoB;AAExC,YAAQ;AAAA,MACN,iDAAiDA,mBAAkB;AAAA,IAGrE;AAAA,EACF;AAEA,QAAM,cAAc,QAAQ,UAAU,QAAQ;AAC9C,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AAEA,OAAK,EAAE,MAAM,UAAU,SAAS,mBAAmB,aAAa,OAAO,CAAC;AAExE,QAAM,UAAU,kBAAkB;AAClC,MAAI;AACJ,QAAM,aAAa,MAAM,QAAQ;AAAA,IAC/B;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,QAAQ,QAAQ;AAAA,MAChB,eAAe,QAAQ;AAAA,MACvB,MAAM,QAAQ;AAAA,MACd,UAAU,QAAQ;AAAA,MAClB,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ;AAAA,MACxB,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,MACnB,iBACE,QAAQ,uBAAuB,QAAQ,QAAQ,UAAU;AAAA,MAC3D,WAAW;AAAA,MACX;AAAA,MACA,YAAY;AAAA,IACd;AAAA,IACA,CAAC,UAAU;AACT,UAAI;AACF,aAAK,gBAAgB,KAAK,CAAC;AAAA,MAC7B,SAAS,OAAO;AACd,sBAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,MAAM;AACrB,UAAM;AAAA,EACR;AAEA,MAAI,SAAkC,CAAC;AACvC,MAAI,WAAW,KAAK,EAAE,SAAS,GAAG;AAChC,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC;AACA,OAAK;AAAA,IACH,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UACG,OAAO,OAAO,OAAO,YAAY,OAAO,MACxC,OAAO,OAAO,eAAe,YAAY,OAAO,cACjD;AAAA,EACJ,CAAC;AACD,OAAK,EAAE,MAAM,OAAO,CAAC;AACrB,SAAO;AACT;AAEA,eAAsB,yBAAyB,OAAO,QAAQ,KAAK,MAAM,CAAC,GAAG;AAC3E,QAAM,SAAS,UAAU;AAAA,IACvB,MAAM;AAAA,IACN,kBAAkB;AAAA,IAClB,SAAS;AAAA,MACP,MAAM,EAAE,MAAM,UAAU,OAAO,IAAI;AAAA,MACnC,MAAM,EAAE,MAAM,SAAS;AAAA,MACvB,QAAQ,EAAE,MAAM,SAAS;AAAA,MACzB,SAAS,EAAE,MAAM,SAAS;AAAA,MAC1B,iBAAiB,EAAE,MAAM,SAAS;AAAA,MAClC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,QAAM,iBAAiB,OAAO,YAAY,CAAC;AAC3C,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OACJ,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO,OAAO,IAAI,IAAI;AAC5D,QAAM,WACJ,OAAO,OAAO,UAAU,OAAO,OAAO,OAAO,OAAO,MAAM,IAAI;AAChE,QAAM,SACJ,OAAO,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO,IAAI;AAClE,QAAM,gBACJ,OAAO,OAAO,mBAAmB,OAC7B,OAAO,OAAO,OAAO,eAAe,IACpC;AACN,MAAI,QAAQ,QAAQ,CAAC,OAAO,SAAS,IAAI,GAAG;AAC1C,UAAM,IAAI,MAAM,yBAAyB,OAAO,OAAO,IAAI,EAAE;AAAA,EAC/D;AACA,MAAI,YAAY,QAAQ,CAAC,OAAO,UAAU,QAAQ,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B,OAAO,OAAO,MAAM,EAAE;AAAA,EACnE;AACA,MAAI,UAAU,QAAQ,CAAC,OAAO,UAAU,MAAM,GAAG;AAC/C,UAAM,IAAI,MAAM,4BAA4B,OAAO,OAAO,OAAO,EAAE;AAAA,EACrE;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,UAAU,aAAa,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,oCAAoC,OAAO,OAAO,eAAe;AAAA,IACnE;AAAA,EACF;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,gBAAgB,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,OAAO,OAAO;AAAA,IAC1B;AAAA,IACA,EAAE,MAAM,iBAAiB;AAAA,EAC3B;AACF;AA1WA,IA8EI,qBACA,0BA6EEA;AA5JN;AAAA;AAIA;AAwJA,IAAMA,sBAAqB;AAAA;AAAA;","names":["createSandboxImage","DEFAULT_IMAGE_NAME"]}
+{"version":3,"sources":["../src/image.ts","../src/sandbox-image.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\n\n// Erased at runtime — safe despite the module cycle with sandbox-image.ts,\n// which imports Image from here.\nimport type { CreateSandboxImageOptions } from \"./sandbox-image.js\";\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nexport const ImageBuildOperationType = {\n  ADD: \"ADD\",\n  COPY: \"COPY\",\n  ENV: \"ENV\",\n  RUN: \"RUN\",\n  WORKDIR: \"WORKDIR\",\n} as const;\n\nexport type ImageBuildOperationType =\n  (typeof ImageBuildOperationType)[keyof typeof ImageBuildOperationType];\n\nexport interface ImageBuildOperation {\n  type: ImageBuildOperationType;\n  args: string[];\n  options: Record<string, string>;\n}\n\nexport interface ImageOptions {\n  name?: string;\n  tag?: string;\n  baseImage?: string | null;\n}\n\nfunction cloneOperation(op: ImageBuildOperation): ImageBuildOperation {\n  return {\n    type: op.type,\n    args: [...op.args],\n    options: { ...op.options },\n  };\n}\n\nexport class Image {\n  readonly _id: string;\n  readonly _name: string;\n  readonly _tag: string;\n  readonly _baseImage: string | null;\n  readonly _buildOperations: ImageBuildOperation[];\n\n  constructor();\n  constructor(name: string, tag?: string, baseImage?: string | null);\n  constructor(options: ImageOptions);\n  constructor(\n    nameOrOptions: string | ImageOptions = {},\n    tag = \"latest\",\n    baseImage: string | null = null,\n  ) {\n    this._id = randomUUID();\n    this._buildOperations = [];\n\n    if (typeof nameOrOptions === \"string\") {\n      this._name = nameOrOptions;\n      this._tag = tag;\n      this._baseImage = baseImage;\n      return;\n    }\n\n    this._name = nameOrOptions.name ?? DEFAULT_IMAGE_NAME;\n    this._tag = nameOrOptions.tag ?? \"latest\";\n    this._baseImage = nameOrOptions.baseImage ?? null;\n  }\n\n  get name(): string {\n    return this._name;\n  }\n\n  get tag(): string {\n    return this._tag;\n  }\n\n  get baseImage(): string | null {\n    return this._baseImage;\n  }\n\n  get buildOperations(): ImageBuildOperation[] {\n    return this._buildOperations.map(cloneOperation);\n  }\n\n  add(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ADD,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  copy(\n    src: string,\n    dest: string,\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.COPY,\n      args: [src, dest],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  env(key: string, value: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.ENV,\n      args: [key, value],\n      options: {},\n    });\n  }\n\n  run(\n    commands: string | string[],\n    options: Record<string, string> | undefined = undefined,\n  ): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.RUN,\n      args: Array.isArray(commands) ? [...commands] : [commands],\n      options: options == null ? {} : { ...options },\n    });\n  }\n\n  workdir(directory: string): this {\n    return this._addOperation({\n      type: ImageBuildOperationType.WORKDIR,\n      args: [directory],\n      options: {},\n    });\n  }\n\n  /**\n   * Build this image as a sandbox template and register it.\n   *\n   * Materializes the image in a build sandbox, snapshots the filesystem,\n   * and registers the snapshot as a named sandbox template.\n   */\n  async build(\n    options: CreateSandboxImageOptions = {},\n  ): Promise<Record<string, unknown>> {\n    const { createSandboxImage } = await import(\"./sandbox-image.js\");\n    return createSandboxImage(this, options);\n  }\n\n  private _addOperation(op: ImageBuildOperation): this {\n    this._buildOperations.push(op);\n    return this;\n  }\n}\n\nfunction renderOptions(options: Record<string, string>): string {\n  const entries = Object.entries(options);\n  if (entries.length === 0) {\n    return \"\";\n  }\n  return ` ${entries.map(([key, value]) => `--${key}=${value}`).join(\" \")}`;\n}\n\nfunction renderBuildOp(op: ImageBuildOperation): string {\n  const options = renderOptions(op.options);\n  if (op.type === ImageBuildOperationType.ENV) {\n    return `ENV${options} ${op.args[0]}=${JSON.stringify(op.args[1])}`;\n  }\n  return `${op.type}${options} ${op.args.join(\" \")}`;\n}\n\nexport function dockerfileContent(image: Image): string {\n  const lines = image.baseImage == null ? [] : [`FROM ${image.baseImage}`];\n  lines.push(...image.buildOperations.map((op) => renderBuildOp(op)));\n  return lines.join(\"\\n\");\n}\n","import { createRequire } from \"node:module\";\nimport path from \"node:path\";\nimport { existsSync } from \"node:fs\";\nimport { parseArgs } from \"node:util\";\nimport { Image, dockerfileContent } from \"./image.js\";\n\n/**\n * Sandbox-image build engine.\n *\n * Renders the source to a Dockerfile (for `Image` inputs) and hands the\n * Dockerfile path/text + context to the Rust core via `@tensorlake/native`,\n * which parses, validates, materializes, and registers the image. The Rust\n * core owns parsing, the Dockerfile-instruction allowlist\n * (`ONBUILD`/`SHELL` are rejected) and ignored-set warnings\n * (`EXPOSE`/`HEALTHCHECK`/`LABEL`/`STOPSIGNAL`/`VOLUME`).\n */\n\nexport interface CreateSandboxImageOptions {\n  registeredName?: string;\n  cpus?: number;\n  memoryMb?: number;\n  diskMb?: number;\n  builderDiskMb?: number;\n  isPublic?: boolean;\n  contextDir?: string;\n  /**\n   * Print build progress to stderr. Ignored when an explicit `emit` is\n   * passed via `deps`. Defaults to false — `createSandboxImage` is silent\n   * by default when invoked programmatically (e.g. `Image.build()`).\n   */\n  verbose?: boolean;\n}\n\nexport type SandboxImageSource = string | Image;\n\nexport interface CreateSandboxImageDeps {\n  emit?: (event: Record<string, unknown>) => void;\n}\n\n// --- Native binding loader -------------------------------------------------\n\ninterface NativeBindingOptions {\n  apiUrl: string;\n  bearerToken: string;\n  dockerfilePath: string;\n  registeredName?: string | undefined | null;\n  diskMb?: number | undefined | null;\n  builderDiskMb?: number | undefined | null;\n  cpus?: number | undefined | null;\n  memoryMb?: number | undefined | null;\n  isPublic?: boolean | undefined | null;\n  organizationId?: string | undefined | null;\n  projectId?: string | undefined | null;\n  namespace?: string | undefined | null;\n  useScopeHeaders?: boolean | undefined | null;\n  userAgent?: string | undefined | null;\n  dockerfileText?: string | undefined | null;\n  contextDir?: string | undefined | null;\n}\n\ninterface NativeBindingEvent {\n  eventType: string;\n  stream?: string | undefined | null;\n  message: string;\n}\n\ninterface NativeBinding {\n  buildSandboxImage(\n    options: NativeBindingOptions,\n    emit?: ((event: NativeBindingEvent) => void) | null | undefined,\n  ): Promise<string>;\n}\n\n// `require` exists in the CJS bundle but not in ESM; declared here so the\n// runtime check below typechecks under \"module\": \"esnext\".\ndeclare const require: NodeRequire | undefined;\ndeclare const module: { exports?: unknown } | undefined;\n\nlet cachedNativeBinding: NativeBinding | undefined;\nlet cachedNativeBindingError: Error | undefined;\n\nfunction resolveRequire(): NodeRequire {\n  // tsup rewrites `import.meta.url` to `import_meta.url` (where\n  // `import_meta = {}`) in the CJS output, so `createRequire(import.meta.url)`\n  // throws if called at all in CJS. CJS bundles get the real `require`\n  // injected at runtime; prefer it. ESM bundles fall back to the createRequire\n  // path, which only runs when `import.meta.url` is a real file URL.\n  if (\n    typeof module !== \"undefined\" &&\n    module.exports != null &&\n    typeof require !== \"undefined\"\n  ) {\n    return require;\n  }\n  return createRequire(import.meta.url);\n}\n\nfunction loadNativeBinding(): NativeBinding {\n  if (cachedNativeBinding) return cachedNativeBinding;\n  if (cachedNativeBindingError) throw cachedNativeBindingError;\n  try {\n    // The native binding is staged per-platform under\n    // `typescript/dist/native/<triple>/tensorlake-node.node`. Loading goes\n    // through the same helper the CLI binaries use so platform detection\n    // stays in one place (`typescript/lib/runtime.cjs`). Deferred require so\n    // the CJS bundle doesn't trip the `import.meta.url` → undefined fallback.\n    const { loadNative } = resolveRequire()(\"../lib/runtime.cjs\") as {\n      loadNative: () => NativeBinding;\n    };\n    cachedNativeBinding = loadNative();\n    return cachedNativeBinding;\n  } catch (error) {\n    cachedNativeBindingError =\n      error instanceof Error ? error : new Error(String(error));\n    throw cachedNativeBindingError;\n  }\n}\n\n/** Test seam: replace the native binding with a stub. */\nexport function __setNativeBindingForTest(binding: NativeBinding | undefined): void {\n  cachedNativeBinding = binding;\n  cachedNativeBindingError = undefined;\n}\n\n// --- Build context ---------------------------------------------------------\n\nexport interface BuildContext {\n  apiUrl: string;\n  apiKey?: string;\n  personalAccessToken?: string;\n  namespace: string;\n  organizationId?: string;\n  projectId?: string;\n  debug: boolean;\n}\n\nfunction nonEmpty(value: string | undefined): string | undefined {\n  return value && value.length > 0 ? value : undefined;\n}\n\nfunction buildContextFromEnv(): BuildContext {\n  const debugRaw = (process.env.TENSORLAKE_DEBUG ?? \"\").toLowerCase();\n  const debug = [\"1\", \"true\", \"yes\", \"on\"].includes(debugRaw);\n  return {\n    apiUrl: nonEmpty(process.env.TENSORLAKE_API_URL) ?? \"https://api.tensorlake.ai\",\n    apiKey: nonEmpty(process.env.TENSORLAKE_API_KEY),\n    personalAccessToken: nonEmpty(process.env.TENSORLAKE_PAT),\n    namespace: nonEmpty(process.env.INDEXIFY_NAMESPACE) ?? \"default\",\n    organizationId: nonEmpty(process.env.TENSORLAKE_ORGANIZATION_ID),\n    projectId: nonEmpty(process.env.TENSORLAKE_PROJECT_ID),\n    debug,\n  };\n}\n\n// --- Default-name helper ---------------------------------------------------\n\nconst DEFAULT_IMAGE_NAME = \"default\";\n\nfunction defaultRegisteredName(dockerfilePath: string): string {\n  const parsed = path.parse(dockerfilePath);\n  if (parsed.name.toLowerCase() === \"dockerfile\") {\n    const parentName = path.basename(path.dirname(dockerfilePath)).trim();\n    return parentName || \"sandbox-image\";\n  }\n  return parsed.name || \"sandbox-image\";\n}\n\n// --- Emit helpers ----------------------------------------------------------\n\nfunction noopEmit(_event: Record<string, unknown>): void {}\n\nfunction stderrEmit(event: Record<string, unknown>): void {\n  const message = typeof event.message === \"string\" ? event.message : \"\";\n  const type = typeof event.type === \"string\" ? event.type : \"\";\n  if (type === \"build_log\") {\n    const stream = typeof event.stream === \"string\" ? event.stream : \"stdout\";\n    process.stderr.write(`[${stream}] ${message}\\n`);\n  } else if (message) {\n    process.stderr.write(`[${type}] ${message}\\n`);\n  }\n}\n\nfunction ndjsonStdoutEmit(event: Record<string, unknown>): void {\n  process.stdout.write(`${JSON.stringify(event)}\\n`);\n}\n\nfunction eventToEmitDict(event: NativeBindingEvent): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    type: event.eventType,\n    message: event.message,\n  };\n  if (event.stream != null) out.stream = event.stream;\n  return out;\n}\n\n// --- Public API ------------------------------------------------------------\n\nexport async function createSandboxImage(\n  source: SandboxImageSource,\n  options: CreateSandboxImageOptions = {},\n  deps: CreateSandboxImageDeps = {},\n): Promise<Record<string, unknown>> {\n  const emit = deps.emit ?? (options.verbose ? stderrEmit : noopEmit);\n  const context = buildContextFromEnv();\n\n  let dockerfilePath: string;\n  let dockerfileText: string | undefined;\n  let nativeContextDir: string | undefined;\n  let effectiveName: string;\n\n  if (source instanceof Image) {\n    if (!source.baseImage) {\n      throw new Error(\"Image must have a baseImage to build\");\n    }\n    const resolvedContext = path.resolve(options.contextDir ?? process.cwd());\n    dockerfilePath = path.join(resolvedContext, \"Dockerfile\");\n    let text = dockerfileContent(source);\n    if (!text.endsWith(\"\\n\")) text += \"\\n\";\n    dockerfileText = text;\n    nativeContextDir = resolvedContext;\n    effectiveName = options.registeredName ?? source.name;\n  } else if (typeof source === \"string\") {\n    const resolvedPath = path.resolve(source);\n    if (!existsSync(resolvedPath)) {\n      throw new Error(`Dockerfile not found: ${source}`);\n    }\n    dockerfilePath = resolvedPath;\n    dockerfileText = undefined;\n    nativeContextDir = undefined;\n    effectiveName =\n      options.registeredName ?? defaultRegisteredName(resolvedPath);\n  } else {\n    throw new TypeError(\n      `source must be an Image or a Dockerfile path, got ${typeof source}`,\n    );\n  }\n\n  if (effectiveName === DEFAULT_IMAGE_NAME) {\n    // eslint-disable-next-line no-console\n    console.warn(\n      `Building sandbox image with the default name \"${DEFAULT_IMAGE_NAME}\". ` +\n        \"Pass `registeredName` or `Image({ name })` to avoid collisions \" +\n        \"with other default-named images in this project.\",\n    );\n  }\n\n  const bearerToken = context.apiKey ?? context.personalAccessToken;\n  if (!bearerToken) {\n    throw new Error(\"Missing TENSORLAKE_API_KEY or TENSORLAKE_PAT credentials.\");\n  }\n\n  emit({ type: \"status\", message: `Building image '${effectiveName}'...` });\n\n  const binding = loadNativeBinding();\n  let emitError: unknown;\n  const resultJson = await binding.buildSandboxImage(\n    {\n      apiUrl: context.apiUrl,\n      bearerToken,\n      dockerfilePath,\n      registeredName: effectiveName,\n      diskMb: options.diskMb,\n      builderDiskMb: options.builderDiskMb,\n      cpus: options.cpus,\n      memoryMb: options.memoryMb,\n      isPublic: options.isPublic ?? false,\n      organizationId: context.organizationId,\n      projectId: context.projectId,\n      namespace: context.namespace,\n      useScopeHeaders:\n        context.personalAccessToken != null && context.apiKey == null,\n      userAgent: undefined,\n      dockerfileText,\n      contextDir: nativeContextDir,\n    },\n    (event) => {\n      try {\n        emit(eventToEmitDict(event));\n      } catch (error) {\n        emitError ??= error;\n      }\n    },\n  );\n\n  if (emitError != null) {\n    throw emitError;\n  }\n\n  let result: Record<string, unknown> = {};\n  if (resultJson.trim().length > 0) {\n    result = JSON.parse(resultJson) as Record<string, unknown>;\n  }\n  emit({\n    type: \"image_registered\",\n    name: effectiveName,\n    image_id:\n      (typeof result.id === \"string\" && result.id) ||\n      (typeof result.templateId === \"string\" && result.templateId) ||\n      \"\",\n  });\n  emit({ type: \"done\" });\n  return result;\n}\n\nexport async function runCreateSandboxImageCli(argv = process.argv.slice(2)) {\n  const parsed = parseArgs({\n    args: argv,\n    allowPositionals: true,\n    options: {\n      name: { type: \"string\", short: \"n\" },\n      cpus: { type: \"string\" },\n      memory: { type: \"string\" },\n      disk_mb: { type: \"string\" },\n      builder_disk_mb: { type: \"string\" },\n      public: { type: \"boolean\", default: false },\n    },\n  });\n\n  const dockerfilePath = parsed.positionals[0];\n  if (!dockerfilePath) {\n    throw new Error(\n      \"Usage: tensorlake-create-sandbox-image <dockerfile_path> [--name NAME] [--cpus N] [--memory MB] [--disk_mb MB] [--builder_disk_mb MB] [--public]\",\n    );\n  }\n\n  const cpus =\n    parsed.values.cpus != null ? Number(parsed.values.cpus) : undefined;\n  const memoryMb =\n    parsed.values.memory != null ? Number(parsed.values.memory) : undefined;\n  const diskMb =\n    parsed.values.disk_mb != null ? Number(parsed.values.disk_mb) : undefined;\n  const builderDiskMb =\n    parsed.values.builder_disk_mb != null\n      ? Number(parsed.values.builder_disk_mb)\n      : undefined;\n  if (cpus != null && !Number.isFinite(cpus)) {\n    throw new Error(`Invalid --cpus value: ${parsed.values.cpus}`);\n  }\n  if (memoryMb != null && !Number.isInteger(memoryMb)) {\n    throw new Error(`Invalid --memory value: ${parsed.values.memory}`);\n  }\n  if (diskMb != null && !Number.isInteger(diskMb)) {\n    throw new Error(`Invalid --disk_mb value: ${parsed.values.disk_mb}`);\n  }\n  if (builderDiskMb != null && !Number.isInteger(builderDiskMb)) {\n    throw new Error(\n      `Invalid --builder_disk_mb value: ${parsed.values.builder_disk_mb}`,\n    );\n  }\n\n  await createSandboxImage(\n    dockerfilePath,\n    {\n      registeredName: parsed.values.name,\n      cpus,\n      memoryMb,\n      diskMb,\n      builderDiskMb,\n      isPublic: parsed.values.public,\n    },\n    { emit: ndjsonStdoutEmit },\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA,SAAS,kBAAkB;AA+B3B,SAAS,eAAe,IAA8C;AACpE,SAAO;AAAA,IACL,MAAM,GAAG;AAAA,IACT,MAAM,CAAC,GAAG,GAAG,IAAI;AAAA,IACjB,SAAS,EAAE,GAAG,GAAG,QAAQ;AAAA,EAC3B;AACF;AAsHA,SAAS,cAAc,SAAyC;AAC9D,QAAM,UAAU,OAAO,QAAQ,OAAO;AACtC,MAAI,QAAQ,WAAW,GAAG;AACxB,WAAO;AAAA,EACT;AACA,SAAO,IAAI,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,KAAK,GAAG,IAAI,KAAK,EAAE,EAAE,KAAK,GAAG,CAAC;AACzE;AAEA,SAAS,cAAc,IAAiC;AACtD,QAAM,UAAU,cAAc,GAAG,OAAO;AACxC,MAAI,GAAG,SAAS,wBAAwB,KAAK;AAC3C,WAAO,MAAM,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC;AAAA,EAClE;AACA,SAAO,GAAG,GAAG,IAAI,GAAG,OAAO,IAAI,GAAG,KAAK,KAAK,GAAG,CAAC;AAClD;AAEO,SAAS,kBAAkB,OAAsB;AACtD,QAAM,QAAQ,MAAM,aAAa,OAAO,CAAC,IAAI,CAAC,QAAQ,MAAM,SAAS,EAAE;AACvE,QAAM,KAAK,GAAG,MAAM,gBAAgB,IAAI,CAAC,OAAO,cAAc,EAAE,CAAC,CAAC;AAClE,SAAO,MAAM,KAAK,IAAI;AACxB;AA/KA,IAMM,oBAEO,yBA+BA;AAvCb;AAAA;AAAA;AAMA,IAAM,qBAAqB;AAEpB,IAAM,0BAA0B;AAAA,MACrC,KAAK;AAAA,MACL,MAAM;AAAA,MACN,KAAK;AAAA,MACL,KAAK;AAAA,MACL,SAAS;AAAA,IACX;AAyBO,IAAM,QAAN,MAAY;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MAKT,YACE,gBAAuC,CAAC,GACxC,MAAM,UACN,YAA2B,MAC3B;AACA,aAAK,MAAM,WAAW;AACtB,aAAK,mBAAmB,CAAC;AAEzB,YAAI,OAAO,kBAAkB,UAAU;AACrC,eAAK,QAAQ;AACb,eAAK,OAAO;AACZ,eAAK,aAAa;AAClB;AAAA,QACF;AAEA,aAAK,QAAQ,cAAc,QAAQ;AACnC,aAAK,OAAO,cAAc,OAAO;AACjC,aAAK,aAAa,cAAc,aAAa;AAAA,MAC/C;AAAA,MAEA,IAAI,OAAe;AACjB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,MAAc;AAChB,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,YAA2B;AAC7B,eAAO,KAAK;AAAA,MACd;AAAA,MAEA,IAAI,kBAAyC;AAC3C,eAAO,KAAK,iBAAiB,IAAI,cAAc;AAAA,MACjD;AAAA,MAEA,IACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,KACE,KACA,MACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,IAAI;AAAA,UAChB,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,IAAI,KAAa,OAAqB;AACpC,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,KAAK,KAAK;AAAA,UACjB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA,MAEA,IACE,UACA,UAA8C,QACxC;AACN,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,MAAM,QAAQ,QAAQ,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,QAAQ;AAAA,UACzD,SAAS,WAAW,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,MAEA,QAAQ,WAAyB;AAC/B,eAAO,KAAK,cAAc;AAAA,UACxB,MAAM,wBAAwB;AAAA,UAC9B,MAAM,CAAC,SAAS;AAAA,UAChB,SAAS,CAAC;AAAA,QACZ,CAAC;AAAA,MACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAQA,MAAM,MACJ,UAAqC,CAAC,GACJ;AAClC,cAAM,EAAE,oBAAAA,oBAAmB,IAAI,MAAM;AACrC,eAAOA,oBAAmB,MAAM,OAAO;AAAA,MACzC;AAAA,MAEQ,cAAc,IAA+B;AACnD,aAAK,iBAAiB,KAAK,EAAE;AAC7B,eAAO;AAAA,MACT;AAAA,IACF;AAAA;AAAA;;;ACzJA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,SAAS,qBAAqB;AAC9B,OAAO,UAAU;AACjB,SAAS,kBAAkB;AAC3B,SAAS,iBAAiB;AA8E1B,SAAS,iBAA8B;AAMrC,MACE,OAAO,WAAW,eAClB,OAAO,WAAW,QAClB,OAAO,cAAY,aACnB;AACA,WAAO;AAAA,EACT;AACA,SAAO,cAAc,YAAY,GAAG;AACtC;AAEA,SAAS,oBAAmC;AAC1C,MAAI,oBAAqB,QAAO;AAChC,MAAI,yBAA0B,OAAM;AACpC,MAAI;AAMF,UAAM,EAAE,WAAW,IAAI,eAAe,EAAE,oBAAoB;AAG5D,0BAAsB,WAAW;AACjC,WAAO;AAAA,EACT,SAAS,OAAO;AACd,+BACE,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,OAAO,KAAK,CAAC;AAC1D,UAAM;AAAA,EACR;AACF;AAGO,SAAS,0BAA0B,SAA0C;AAClF,wBAAsB;AACtB,6BAA2B;AAC7B;AAcA,SAAS,SAAS,OAA+C;AAC/D,SAAO,SAAS,MAAM,SAAS,IAAI,QAAQ;AAC7C;AAEA,SAAS,sBAAoC;AAC3C,QAAM,YAAY,QAAQ,IAAI,oBAAoB,IAAI,YAAY;AAClE,QAAM,QAAQ,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,QAAQ;AAC1D,SAAO;AAAA,IACL,QAAQ,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACpD,QAAQ,SAAS,QAAQ,IAAI,kBAAkB;AAAA,IAC/C,qBAAqB,SAAS,QAAQ,IAAI,cAAc;AAAA,IACxD,WAAW,SAAS,QAAQ,IAAI,kBAAkB,KAAK;AAAA,IACvD,gBAAgB,SAAS,QAAQ,IAAI,0BAA0B;AAAA,IAC/D,WAAW,SAAS,QAAQ,IAAI,qBAAqB;AAAA,IACrD;AAAA,EACF;AACF;AAMA,SAAS,sBAAsB,gBAAgC;AAC7D,QAAM,SAAS,KAAK,MAAM,cAAc;AACxC,MAAI,OAAO,KAAK,YAAY,MAAM,cAAc;AAC9C,UAAM,aAAa,KAAK,SAAS,KAAK,QAAQ,cAAc,CAAC,EAAE,KAAK;AACpE,WAAO,cAAc;AAAA,EACvB;AACA,SAAO,OAAO,QAAQ;AACxB;AAIA,SAAS,SAAS,QAAuC;AAAC;AAE1D,SAAS,WAAW,OAAsC;AACxD,QAAM,UAAU,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU;AACpE,QAAM,OAAO,OAAO,MAAM,SAAS,WAAW,MAAM,OAAO;AAC3D,MAAI,SAAS,aAAa;AACxB,UAAM,SAAS,OAAO,MAAM,WAAW,WAAW,MAAM,SAAS;AACjE,YAAQ,OAAO,MAAM,IAAI,MAAM,KAAK,OAAO;AAAA,CAAI;AAAA,EACjD,WAAW,SAAS;AAClB,YAAQ,OAAO,MAAM,IAAI,IAAI,KAAK,OAAO;AAAA,CAAI;AAAA,EAC/C;AACF;AAEA,SAAS,iBAAiB,OAAsC;AAC9D,UAAQ,OAAO,MAAM,GAAG,KAAK,UAAU,KAAK,CAAC;AAAA,CAAI;AACnD;AAEA,SAAS,gBAAgB,OAAoD;AAC3E,QAAM,MAA+B;AAAA,IACnC,MAAM,MAAM;AAAA,IACZ,SAAS,MAAM;AAAA,EACjB;AACA,MAAI,MAAM,UAAU,KAAM,KAAI,SAAS,MAAM;AAC7C,SAAO;AACT;AAIA,eAAsB,mBACpB,QACA,UAAqC,CAAC,GACtC,OAA+B,CAAC,GACE;AAClC,QAAM,OAAO,KAAK,SAAS,QAAQ,UAAU,aAAa;AAC1D,QAAM,UAAU,oBAAoB;AAEpC,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,kBAAkB,OAAO;AAC3B,QAAI,CAAC,OAAO,WAAW;AACrB,YAAM,IAAI,MAAM,sCAAsC;AAAA,IACxD;AACA,UAAM,kBAAkB,KAAK,QAAQ,QAAQ,cAAc,QAAQ,IAAI,CAAC;AACxE,qBAAiB,KAAK,KAAK,iBAAiB,YAAY;AACxD,QAAI,OAAO,kBAAkB,MAAM;AACnC,QAAI,CAAC,KAAK,SAAS,IAAI,EAAG,SAAQ;AAClC,qBAAiB;AACjB,uBAAmB;AACnB,oBAAgB,QAAQ,kBAAkB,OAAO;AAAA,EACnD,WAAW,OAAO,WAAW,UAAU;AACrC,UAAM,eAAe,KAAK,QAAQ,MAAM;AACxC,QAAI,CAAC,WAAW,YAAY,GAAG;AAC7B,YAAM,IAAI,MAAM,yBAAyB,MAAM,EAAE;AAAA,IACnD;AACA,qBAAiB;AACjB,qBAAiB;AACjB,uBAAmB;AACnB,oBACE,QAAQ,kBAAkB,sBAAsB,YAAY;AAAA,EAChE,OAAO;AACL,UAAM,IAAI;AAAA,MACR,qDAAqD,OAAO,MAAM;AAAA,IACpE;AAAA,EACF;AAEA,MAAI,kBAAkBC,qBAAoB;AAExC,YAAQ;AAAA,MACN,iDAAiDA,mBAAkB;AAAA,IAGrE;AAAA,EACF;AAEA,QAAM,cAAc,QAAQ,UAAU,QAAQ;AAC9C,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC7E;AAEA,OAAK,EAAE,MAAM,UAAU,SAAS,mBAAmB,aAAa,OAAO,CAAC;AAExE,QAAM,UAAU,kBAAkB;AAClC,MAAI;AACJ,QAAM,aAAa,MAAM,QAAQ;AAAA,IAC/B;AAAA,MACE,QAAQ,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,MACA,gBAAgB;AAAA,MAChB,QAAQ,QAAQ;AAAA,MAChB,eAAe,QAAQ;AAAA,MACvB,MAAM,QAAQ;AAAA,MACd,UAAU,QAAQ;AAAA,MAClB,UAAU,QAAQ,YAAY;AAAA,MAC9B,gBAAgB,QAAQ;AAAA,MACxB,WAAW,QAAQ;AAAA,MACnB,WAAW,QAAQ;AAAA,MACnB,iBACE,QAAQ,uBAAuB,QAAQ,QAAQ,UAAU;AAAA,MAC3D,WAAW;AAAA,MACX;AAAA,MACA,YAAY;AAAA,IACd;AAAA,IACA,CAAC,UAAU;AACT,UAAI;AACF,aAAK,gBAAgB,KAAK,CAAC;AAAA,MAC7B,SAAS,OAAO;AACd,sBAAc;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,aAAa,MAAM;AACrB,UAAM;AAAA,EACR;AAEA,MAAI,SAAkC,CAAC;AACvC,MAAI,WAAW,KAAK,EAAE,SAAS,GAAG;AAChC,aAAS,KAAK,MAAM,UAAU;AAAA,EAChC;AACA,OAAK;AAAA,IACH,MAAM;AAAA,IACN,MAAM;AAAA,IACN,UACG,OAAO,OAAO,OAAO,YAAY,OAAO,MACxC,OAAO,OAAO,eAAe,YAAY,OAAO,cACjD;AAAA,EACJ,CAAC;AACD,OAAK,EAAE,MAAM,OAAO,CAAC;AACrB,SAAO;AACT;AAEA,eAAsB,yBAAyB,OAAO,QAAQ,KAAK,MAAM,CAAC,GAAG;AAC3E,QAAM,SAAS,UAAU;AAAA,IACvB,MAAM;AAAA,IACN,kBAAkB;AAAA,IAClB,SAAS;AAAA,MACP,MAAM,EAAE,MAAM,UAAU,OAAO,IAAI;AAAA,MACnC,MAAM,EAAE,MAAM,SAAS;AAAA,MACvB,QAAQ,EAAE,MAAM,SAAS;AAAA,MACzB,SAAS,EAAE,MAAM,SAAS;AAAA,MAC1B,iBAAiB,EAAE,MAAM,SAAS;AAAA,MAClC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,QAAM,iBAAiB,OAAO,YAAY,CAAC;AAC3C,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OACJ,OAAO,OAAO,QAAQ,OAAO,OAAO,OAAO,OAAO,IAAI,IAAI;AAC5D,QAAM,WACJ,OAAO,OAAO,UAAU,OAAO,OAAO,OAAO,OAAO,MAAM,IAAI;AAChE,QAAM,SACJ,OAAO,OAAO,WAAW,OAAO,OAAO,OAAO,OAAO,OAAO,IAAI;AAClE,QAAM,gBACJ,OAAO,OAAO,mBAAmB,OAC7B,OAAO,OAAO,OAAO,eAAe,IACpC;AACN,MAAI,QAAQ,QAAQ,CAAC,OAAO,SAAS,IAAI,GAAG;AAC1C,UAAM,IAAI,MAAM,yBAAyB,OAAO,OAAO,IAAI,EAAE;AAAA,EAC/D;AACA,MAAI,YAAY,QAAQ,CAAC,OAAO,UAAU,QAAQ,GAAG;AACnD,UAAM,IAAI,MAAM,2BAA2B,OAAO,OAAO,MAAM,EAAE;AAAA,EACnE;AACA,MAAI,UAAU,QAAQ,CAAC,OAAO,UAAU,MAAM,GAAG;AAC/C,UAAM,IAAI,MAAM,4BAA4B,OAAO,OAAO,OAAO,EAAE;AAAA,EACrE;AACA,MAAI,iBAAiB,QAAQ,CAAC,OAAO,UAAU,aAAa,GAAG;AAC7D,UAAM,IAAI;AAAA,MACR,oCAAoC,OAAO,OAAO,eAAe;AAAA,IACnE;AAAA,EACF;AAEA,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,MACE,gBAAgB,OAAO,OAAO;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,OAAO,OAAO;AAAA,IAC1B;AAAA,IACA,EAAE,MAAM,iBAAiB;AAAA,EAC3B;AACF;AA1WA,IA8EI,qBACA,0BA6EEA;AA5JN;AAAA;AAIA;AAwJA,IAAMA,sBAAqB;AAAA;AAAA;","names":["createSandboxImage","DEFAULT_IMAGE_NAME"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tensorlake",
-  "version": "0.5.36",
+  "version": "0.5.37",
   "description": "TensorLake SDK and CLI for applications, sandboxes, and cloud services",
   "type": "module",
   "main": "./dist/index.cjs",