zeitlich 0.2.49 → 0.2.51

package/README.md

@@ -56,13 +56,12 @@ Vercel AI SDK and other provider-specific adapters can be built by implementing
 
 A sandbox adapter provides filesystem access for tools like `Bash`, `Read`, `Write`, and `Edit`:
 
-| Adapter    | Import                               | Use case                                          |
-| ---------- | ------------------------------------ | ------------------------------------------------- |
-| In-memory  | `zeitlich/adapters/sandbox/inmemory` | Tests and lightweight agents                      |
-| Virtual FS | `zeitlich` / `zeitlich/workflow`     | Built-in virtual filesystem with custom resolvers |
-| Daytona    | `zeitlich/adapters/sandbox/daytona`  | Remote Daytona workspaces                         |
-| E2B        | `zeitlich/adapters/sandbox/e2b`      | E2B cloud sandboxes                               |
-| Bedrock    | `zeitlich/adapters/sandbox/bedrock`  | AWS Bedrock AgentCore Code Interpreter            |
+| Adapter    | Import                              | Use case                                          |
+| ---------- | ----------------------------------- | ------------------------------------------------- |
+| Virtual FS | `zeitlich` / `zeitlich/workflow`    | Built-in virtual filesystem with custom resolvers |
+| Daytona    | `zeitlich/adapters/sandbox/daytona` | Remote Daytona workspaces                         |
+| E2B        | `zeitlich/adapters/sandbox/e2b`     | E2B cloud sandboxes                               |
+| Bedrock    | `zeitlich/adapters/sandbox/bedrock` | AWS Bedrock AgentCore Code Interpreter            |
 
 ### Example: LangChain Adapter
 
@@ -89,7 +88,7 @@ All adapters follow the same pattern — `createActivities(scope)` for worker re
 ## Installation
 
 ```bash
-npm install zeitlich ioredis \
+npm install zeitlich redis \
   @temporalio/workflow @temporalio/common
 ```
 
@@ -99,7 +98,7 @@ npm install zeitlich ioredis \
 - `@temporalio/common` >=1.16.0 <2.0.0 (required)
 - `@temporalio/worker` >=1.16.0 <2.0.0 (optional — only when running a worker)
 - `@temporalio/envconfig` >=1.16.0 <2.0.0 (optional — only when using envconfig)
-- `ioredis` >= 5.0.0
+- `redis` >= 4.6.0
 - `@langchain/core` >= 1.0.0 (optional — only when using the LangChain adapter)
 - `@google/genai` >= 1.0.0 (optional — only when using the Google GenAI adapter)
 - `@aws-sdk/client-bedrock-agentcore` >= 3.900.0 (optional — only when using the Bedrock adapter)
@@ -132,7 +131,7 @@ import {
 
 // Adapter workflow proxies (auto-scoped to current workflow)
 import { proxyLangChainThreadOps } from "zeitlich/adapters/thread/langchain/workflow";
-import { proxyInMemorySandboxOps } from "zeitlich/adapters/sandbox/inmemory/workflow";
+import { proxyE2bSandboxOps } from "zeitlich/adapters/sandbox/e2b/workflow";
 
 // In activity files and worker setup — framework-agnostic core
 import {
@@ -195,7 +194,7 @@ import type { MyActivities } from "./activities";
 import type { StoredMessage } from "@langchain/core/messages";
 
 import { proxyLangChainThreadOps } from "zeitlich/adapters/thread/langchain/workflow";
-import { proxyInMemorySandboxOps } from "zeitlich/adapters/sandbox/inmemory/workflow";
+import { proxyE2bSandboxOps } from "zeitlich/adapters/sandbox/e2b/workflow";
 
 const runAgentActivity = proxyRunAgent<StoredMessage>();
 
@@ -230,7 +229,7 @@ export const myAgentWorkflow = defineWorkflow(
       maxTurns: 20,
       thread: { mode: "new", threadId: runId },
       threadOps: proxyLangChainThreadOps(),
-      sandboxOps: proxyInMemorySandboxOps(),
+      sandboxOps: proxyE2bSandboxOps(),
       runAgent: runAgentActivity,
       buildContextMessage: () => [{ type: "text", text: prompt }],
       tools: {
@@ -266,7 +265,7 @@ export const myAgentWorkflow = defineWorkflow(
 Activities are factory functions that receive infrastructure dependencies (`redis`, `client`). The thread adapter and sandbox provider are configured here — swap imports to change LLM or sandbox backend.
 
 ```typescript
-import type Redis from "ioredis";
+import type { RedisClientType as Redis } from "redis";
 import type { WorkflowClient } from "@temporalio/client";
 import { ChatAnthropic } from "@langchain/anthropic";
 import {
@@ -276,11 +275,11 @@ import {
   createAskUserQuestionHandler,
   createRunAgentActivity,
 } from "zeitlich";
-import { InMemorySandboxProvider } from "zeitlich/adapters/sandbox/inmemory";
+import { E2bSandboxProvider } from "zeitlich/adapters/sandbox/e2b";
 
 import { createLangChainAdapter } from "zeitlich/adapters/thread/langchain";
 
-const sandboxProvider = new InMemorySandboxProvider();
+const sandboxProvider = new E2bSandboxProvider();
 const sandboxManager = new SandboxManager(sandboxProvider);
 
 export const createActivities = ({
@@ -318,7 +317,7 @@ export type MyActivities = ReturnType<typeof createActivities>;
 
 ```typescript
 import { Worker, NativeConnection } from "@temporalio/worker";
-import Redis from "ioredis";
+import { createClient } from "redis";
 import { fileURLToPath } from "node:url";
 import { createActivities } from "./activities";
 
@@ -326,7 +325,8 @@ async function run() {
   const connection = await NativeConnection.connect({
     address: "localhost:7233",
   });
-  const redis = new Redis({ host: "localhost", port: 6379 });
+  const redis = createClient({ url: "redis://localhost:6379" });
+  await redis.connect();
 
   const worker = await Worker.create({
     connection,
@@ -561,9 +561,9 @@ Use `FileSystemSkillProvider` to load skills from a directory. It accepts any `S
 
 ```typescript
 import { FileSystemSkillProvider } from "zeitlich";
-import { InMemorySandboxProvider } from "zeitlich/adapters/sandbox/inmemory";
+import { E2bSandboxProvider } from "zeitlich/adapters/sandbox/e2b";
 
-const provider = new InMemorySandboxProvider();
+const provider = new E2bSandboxProvider();
 const { sandbox } = await provider.create({});
 
 const skillProvider = new FileSystemSkillProvider(sandbox.fs, "/skills");
@@ -922,16 +922,19 @@ export const researcherWorkflow = defineSubagentWorkflow(
 
 ### Filesystem Utilities
 
-Built-in support for file operations with in-memory or custom filesystem providers (e.g. from [`just-bash`](https://github.com/nicholasgasior/just-bash)).
+Built-in support for file operations against any sandbox or custom filesystem provider.
 
-`toTree` generates a file tree string from an `IFileSystem` instance:
+`toTree` generates a file tree string from a `SandboxFileSystem` instance:
 
 ```typescript
 import { toTree } from "zeitlich";
 
 // In activities - generate a file tree string for agent context
 export const createActivities = ({ redis, client }) => ({
-  generateFileTreeActivity: async () => toTree(inMemoryFileSystem),
+  generateFileTreeActivity: async (sandboxId: string) => {
+    const sandbox = await sandboxManager.getSandbox(sandboxId);
+    return toTree(sandbox.fs);
+  },
   // ...
 });
 ```
@@ -965,7 +968,7 @@ import {
 const sandboxManager = new SandboxManager(provider);
 
 export const createActivities = ({ redis, client }) => ({
-  // scope auto-prepends the provider id (e.g. "inMemory", "virtual")
+  // scope auto-prepends the provider id (e.g. "e2b", "daytona", "virtual")
   ...sandboxManager.createActivities("MyAgentWorkflow"),
   globHandlerActivity: withSandbox(sandboxManager, globHandler),
   editHandlerActivity: withSandbox(sandboxManager, editHandler),

package/dist/adapters/sandbox/daytona/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/daytona/filesystem.ts","../../../../src/adapters/sandbox/daytona/index.ts"],"names":["ApplicationFailure","posix","path","Daytona"],"mappings":";;;;;;;AA4XO,IAAM,wBAAA,GAAN,cAAuCA,yBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AAEO,IAAM,oBAAA,GAAN,cAAmCA,yBAAA,CAAmB;AAAA,EAC3D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,SAAS,CAAA,CAAA,EAAI,sBAAA,EAAwB,IAAI,CAAA;AAAA,EACvE;AACF,CAAA;AC1XO,IAAM,2BAAN,MAA4D;AAAA,EAGjE,WAAA,CACU,OAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgBC,UAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,aAAa,CAAA;AAAA,EACvD;AAAA,EAJU,OAAA;AAAA,EAHD,aAAA;AAAA,EASD,cAAcC,MAAA,EAAsB;AAC1C,IAAA,OAAOD,UAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,EAAeC,MAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAc,iBAAiB,aAAA,EAAwC;AACrE,IAAA,MAAM,SAAS,IAAA,CAAK,aAAA,KAAkB,MAAM,GAAA,GAAM,CAAA,EAAG,KAAK,aAAa,CAAA,CAAA,CAAA;AACvE,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,KAAA,MAAW,KAAK,aAAA,EAAe;AAC7B,MAAA,IAAI,GAAA,GAAMD,UAAA,CAAM,OAAA,CAAQ,CAAC,CAAA;AACzB,MAAA,OAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,QAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,QAAA,GAAA,GAAMA,UAAA,CAAM,QAAQ,GAAG,CAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,IAAI,CAAA,CAAE,IAAA;AAAA,MACvB,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,GAAS,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE;AAAA,KAC/C;AACA,IAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,MAC/C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,GAAA,CAAI,SAAS,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,IAAI,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,UAAA,EAAY,IAAI,UAAU,CAAA;AAAA,EAClE;AAAA,EAEA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,GAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAC5B,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AACzB,IAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,CAAC,IAAI,CAAC,CAAA;AAClC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,WACJ,KAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MAChC,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,OAAO,CAAA;AAAA,MAC7B,WAAA,EAAa,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI;AAAA,KACxC,CAAE,CAAA;AACF,IAAA,MAAM,IAAA,CAAK,iBAAiB,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,CAAC,CAAA;AAC7D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,WAAA,CAAY,OAAO,CAAA;AAAA,EAC3C;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AAAA,IACpD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,IACrC;AAEA,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GAAW,OAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAAI,OAAA;AAChE,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,CAAO,CAAC,UAAU,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAC,CAAC,CAAA;AAC9D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,QAAQ,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,cAAA,CAAe,IAAI,CAAA;AACzC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,IAAI,CAAA;AACtD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,CAAC,IAAA,CAAK,KAAA;AAAA,MACd,aAAa,IAAA,CAAK,KAAA;AAAA,MAClB,cAAA,EAAgB,KAAA;AAAA,MAChB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAA,EAAO,IAAI,IAAA,CAAK,IAAA,CAAK,OAAO;AAAA,KAC9B;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,IAAA,EAAc,QAAA,EAAmD;AAC3E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,MAAM,KAAK,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAAA,EAClC;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACzB,MAAM,CAAA,CAAE,IAAA;AAAA,MACR,MAAA,EAAQ,CAAC,CAAA,CAAE,KAAA;AAAA,MACX,aAAa,CAAA,CAAE,KAAA;AAAA,MACf,cAAA,EAAgB;AAAA,KAClB,CAAE,CAAA;AAAA,EACJ;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,IAAA,EAAM,SAAS,SAAS,CAAA;AAAA,IAC3D,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,CAAC,OAAA,EAAS,KAAA,EAAO,MAAM,GAAA;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,OAAO,CAAA;AACzD,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,GAAG,CAAA,CAAE,CAAA;AAAA,MAClE;AACA,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,OAAA,EAAU,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OACjC;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,IAAA,EAAO,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,SAAS,QAAQ,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,SAAS,KAAA,EAAgC;AAC7C,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,WAAA,CAAY,MAAcC,MAAA,EAAsB;AAC9C,IAAA,OAAOD,WAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,IAAI,GAAGC,MAAI,CAAA;AAAA,EACrD;AACF;;;ACzKA,IAAM,qBAAN,MAA4C;AAAA,EAS1C,WAAA,CACW,EAAA,EACD,UAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAHS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AACD,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAGR,IAAA,IAAA,CAAK,EAAA,GAAK,IAAI,wBAAA,CAAyB,UAAA,EAAY,aAAa,CAAA;AAAA,EAClE;AAAA,EALW,EAAA;AAAA,EACD,UAAA;AAAA,EAVD,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAUT,MAAM,IAAA,CAAK,OAAA,EAAiB,OAAA,EAA4C;AACtE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,CAAW,OAAA,CAAQ,cAAA;AAAA,MAC7C,OAAA;AAAA,MACA,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS;AAAA,KACX;AAEA,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,SAAS,QAAA,IAAY,CAAA;AAAA,MAC/B,MAAA,EAAQ,SAAS,MAAA,IAAU,EAAA;AAAA,MAC3B,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,EAAE,CAAA;AAAA,EACjC;AACF,CAAA;AAYA,IAAM,eAAe,EAAC;AAUf,IAAM,yBAAN,MAGP;AAAA,EACW,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EACS,wBAAkD,IAAI,GAAA;AAAA,IAC7D;AAAA,GACF;AAAA,EAEQ,MAAA;AAAA,EACS,oBAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,MAAA,GAAS,IAAIC,WAAA,CAAQ,MAAM,CAAA;AAChC,IAAA,IAAA,CAAK,oBAAA,GAAuB,QAAQ,aAAA,IAAiB,eAAA;AAAA,EACvD;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA;AAAA,MACnC;AAAA,QACE,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,SAAS,OAAA,EAAS,GAAA;AAAA,QAClB,QAAQ,OAAA,EAAS,MAAA;AAAA,QACjB,kBAAkB,OAAA,EAAS,gBAAA;AAAA,QAC3B,qBAAqB,OAAA,EAAS,mBAAA;AAAA,QAC9B,oBAAoB,OAAA,EAAS;AAAA,OAC/B;AAAA,MACA,EAAE,OAAA,EAAS,OAAA,EAAS,OAAA,IAAW,EAAA;AAAG,KACpC;AAEA,IAAA,MAAM,aAAA,GAAgB,OAAA,EAAS,aAAA,IAAiB,IAAA,CAAK,oBAAA;AAErD,IAAA,MAAM,UAAU,IAAI,kBAAA;AAAA,MAClB,UAAA,CAAW,EAAA;AAAA,MACX,UAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,MAAM,QAAQ,EAAA,CAAG,UAAA;AAAA,QACf,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,CAAE,IAAI,CAAC,CAAC,IAAA,EAAM,OAAO,CAAA,MAAO;AAAA,UAC7D,IAAA;AAAA,UACA;AAAA,SACF,CAAE;AAAA,OACJ;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEA,MAAM,IAAI,SAAA,EAA4C;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,OAAO,IAAI,kBAAA;AAAA,QACT,UAAA,CAAW,EAAA;AAAA,QACX,UAAA;AAAA,QACA,IAAA,CAAK;AAAA,OACP;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,SAAA,EAAkC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA;AAAA,IACrC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"index.cjs","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n// ============================================================================\n// Network & lifecycle\n// ============================================================================\n\nexport interface SandboxNetworkConfig {\n  allowOut?: string[];\n  denyOut?: string[];\n  allowPublicTraffic?: boolean;\n}\n\nexport interface SandboxLifecycleConfig {\n  onTimeout: \"kill\" | \"pause\";\n  autoResume?: boolean;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\n/**\n * Runtime capability flags carried by a {@link Sandbox} instance.\n *\n * These are an orthogonal mechanism to the type-level\n * {@link SandboxCapability} union: this flag bag is for runtime\n * introspection (\"does the sandbox support a filesystem?\") whereas\n * {@link SandboxCapability} narrows the type-level provider/ops contract.\n */\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n/**\n * Type-level capability vocabulary for {@link SandboxProvider} and\n * {@link SandboxOps}. Adapters declare the subset they actually support; the\n * conditional types on each contract gate the corresponding methods so\n * unsupported calls become a compile-time error rather than a runtime\n * {@link SandboxNotSupportedError}.\n *\n * `pause` and `resume` are split because some adapters might support one\n * direction without the other. The `snapshot` cap covers both `snapshot()`\n * and `deleteSnapshot()` since they always travel together in practice.\n */\nexport type SandboxCapability =\n  | \"pause\"\n  | \"resume\"\n  | \"snapshot\"\n  | \"restore\"\n  | \"fork\";\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n  /** Key-value metadata surfaced via provider list/query APIs */\n  metadata?: Record<string, string>;\n  /** Sandbox idle timeout in milliseconds */\n  timeoutMs?: number;\n  /** Enable or disable outbound internet access */\n  allowInternetAccess?: boolean;\n  /** Outbound network allow/deny rules */\n  network?: SandboxNetworkConfig;\n  /** Sandbox timeout behaviour */\n  lifecycle?: SandboxLifecycleConfig;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n}\n\n/**\n * Internal helper: drop keys whose value is `never` from an object type.\n *\n * Used by the capability-gated contracts below so that an absent capability\n * removes the corresponding key entirely, instead of leaving a required\n * field with type `never` (which would make implementations impossible).\n */\ntype OmitNever<T> = {\n  [K in keyof T as [T[K]] extends [never] ? never : K]: T[K];\n};\n\n/**\n * Capability-gated provider lifecycle methods.\n *\n * Each field becomes `never` when its capability is absent from `TCaps`;\n * the wrapping `OmitNever` removes those keys entirely, so the method\n * isn't part of the type surface for adapters that don't support it.\n */\ntype SandboxProviderCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pause: \"pause\" extends TCaps\n    ? (sandboxId: string, ttlSeconds?: number) => Promise<void>\n    : never;\n  resume: \"resume\" extends TCaps ? (sandboxId: string) => Promise<void> : never;\n  snapshot: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restore: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<TSandbox>\n    : never;\n  fork: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<TSandbox>\n    : never;\n}>;\n\n/**\n * Always-present provider lifecycle methods. These do not depend on the\n * capability set and are required by every adapter.\n */\ninterface SandboxProviderBase<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  /**\n   * Runtime-introspectable list of supported capabilities.\n   *\n   * Constrained to `ReadonlySet<TCaps & SandboxCapability>` so the runtime\n   * set cannot include capabilities not declared at the type level — a\n   * provider typed as `SandboxProvider<…, never>` cannot ship a runtime\n   * set that contains `\"pause\"`, etc.\n   *\n   * The other direction (type declares a cap, runtime set omits it)\n   * cannot be enforced by TypeScript alone; adapters should derive both\n   * `TCaps` and the runtime set from the same `as const` array (see\n   * `SandboxManager`'s constructor-time consistency check) so the two\n   * surfaces cannot drift.\n   */\n  readonly supportedCapabilities: ReadonlySet<TCaps & SandboxCapability>;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n}\n\n/**\n * Provider-side sandbox lifecycle contract.\n *\n * Generic over an optional capability set (`TCaps`). Each capability gates\n * a specific method: when the cap is absent the corresponding key is\n * **removed** from the type entirely, so calling it produces a TypeScript\n * error at the call site instead of a runtime\n * {@link SandboxNotSupportedError}.\n *\n * The default `TCaps = SandboxCapability` resolves to the full union, so\n * existing usages that only pass `TOptions` / `TSandbox` continue to see\n * the full method surface (backwards compatible).\n *\n * Adapters that don't support a method should narrow `TCaps` accordingly:\n *\n * - In-memory / E2B: `SandboxCapability` (default — all caps present).\n * - Bedrock Code Interpreter / Daytona: `never` (only base ops).\n * - Bedrock AgentCore Runtime: `\"pause\" | \"resume\"`.\n */\nexport type SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxProviderBase<TOptions, TSandbox, TCaps> &\n  SandboxProviderCapMethods<TOptions, TSandbox, TCaps>;\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\n/**\n * Capability-gated workflow-side methods. Mirrors the provider's gating:\n * keys whose capability is absent from `TCaps` are removed from the type.\n */\ntype SandboxOpsCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pauseSandbox: \"pause\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  resumeSandbox: \"resume\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  snapshotSandbox: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSandboxSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restoreSandbox: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<string>\n    : never;\n  forkSandbox: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<string>\n    : never;\n}>;\n\n/**\n * Always-present workflow-side lifecycle methods.\n */\ninterface SandboxOpsBase<\n  TOptions extends SandboxCreateOptions,\n  TCtx,\n> {\n  createSandbox(\n    options?: TOptions,\n    ctx?: TCtx\n  ): Promise<{ sandboxId: string } | null>;\n  destroySandbox(sandboxId: string): Promise<void>;\n}\n\n/**\n * Workflow-side counterpart to {@link SandboxProvider}. Exposed as a set of\n * Temporal activities and consumed by `createSession`'s `sandboxOps` field\n * and by `defineSubagent`'s `sandbox.proxy`.\n *\n * Generic over a capability set (`TCaps`) — same semantics as the provider:\n * keys whose capability is absent are removed from the type, so calling\n * them is a TypeScript error rather than a runtime throw. The default\n * `TCaps = SandboxCapability` keeps the full method surface for existing\n * consumers.\n */\nexport type SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxOpsBase<TOptions, TCtx> & SandboxOpsCapMethods<TOptions, TCaps>;\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * Inherits the capability gating from {@link SandboxOps}: when `TCaps` omits\n * a capability the prefixed key carries the `never` type so call sites are\n * type-protected.\n *\n * @example\n * ```typescript\n * type InMemOps = PrefixedSandboxOps<\"inMemory\">;\n * // → { inMemoryCreateSandbox, inMemoryDestroySandbox, inMemorySnapshotSandbox, … }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = {\n  [K in keyof SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  > as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  >[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\n/**\n * Thrown by adapters that still surface an unsupported method at runtime.\n *\n * After the capability-generic refactor most adapters drop their\n * unsupported methods entirely so the type system rejects them at call\n * sites. This symbol is still exported so consumers running against older\n * adapter versions can keep their backwards-compatible error-handling\n * paths until they finish migrating.\n */\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type { Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\n\n/**\n * {@link SandboxFileSystem} backed by a Daytona SDK sandbox.\n *\n * Maps zeitlich's filesystem interface to Daytona's `sandbox.fs` and\n * `sandbox.process` APIs. Operations that have no direct Daytona equivalent\n * (e.g. `appendFile`, `cp`) are composed from primitives.\n */\nexport class DaytonaSandboxFileSystem implements SandboxFileSystem {\n  readonly workspaceBase: string;\n\n  constructor(\n    private sandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.workspaceBase = posix.resolve(\"/\", workspaceBase);\n  }\n\n  private normalisePath(path: string): string {\n    return posix.resolve(this.workspaceBase, path);\n  }\n\n  private async ensureParentDirs(absolutePaths: string[]): Promise<void> {\n    const prefix = this.workspaceBase === \"/\" ? \"/\" : `${this.workspaceBase}/`;\n    const dirs = new Set<string>();\n    for (const p of absolutePaths) {\n      let dir = posix.dirname(p);\n      while (dir.startsWith(prefix)) {\n        dirs.add(dir);\n        dir = posix.dirname(dir);\n      }\n    }\n    const sorted = [...dirs].sort(\n      (a, b) => a.split(\"/\").length - b.split(\"/\").length\n    );\n    for (const dir of sorted) {\n      try {\n        await this.sandbox.fs.createFolder(dir, \"755\");\n      } catch {\n        // Folder already exists — Daytona's createFolder throws in that case.\n      }\n    }\n  }\n\n  async readFile(path: string): Promise<string> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return buf.toString(\"utf-8\");\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);\n  }\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    const buf =\n      typeof content === \"string\"\n        ? Buffer.from(content, \"utf-8\")\n        : Buffer.from(content);\n    await this.ensureParentDirs([norm]);\n    await this.sandbox.fs.uploadFile(buf, norm);\n  }\n\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array }[]\n  ): Promise<void> {\n    const uploads = files.map((f) => ({\n      source: Buffer.from(f.content),\n      destination: this.normalisePath(f.path),\n    }));\n    await this.ensureParentDirs(uploads.map((u) => u.destination));\n    await this.sandbox.fs.uploadFiles(uploads);\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    let existing: Buffer;\n    try {\n      existing = await this.sandbox.fs.downloadFile(norm);\n    } catch {\n      return this.writeFile(norm, content);\n    }\n\n    const addition =\n      typeof content === \"string\" ? Buffer.from(content, \"utf-8\") : content;\n    const merged = Buffer.concat([existing, Buffer.from(addition)]);\n    await this.sandbox.fs.uploadFile(merged, norm);\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.getFileDetails(norm);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = this.normalisePath(path);\n    const info = await this.sandbox.fs.getFileDetails(norm);\n    return {\n      isFile: !info.isDir,\n      isDirectory: info.isDir,\n      isSymbolicLink: false,\n      size: info.size,\n      mtime: new Date(info.modTime),\n    };\n  }\n\n  async mkdir(path: string, _options?: { recursive?: boolean }): Promise<void> {\n    const norm = this.normalisePath(path);\n    await this.sandbox.fs.createFolder(norm, \"755\");\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => e.name);\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => ({\n      name: e.name,\n      isFile: !e.isDir,\n      isDirectory: e.isDir,\n      isSymbolicLink: false,\n    }));\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.deleteFile(norm, options?.recursive);\n    } catch (err) {\n      if (!options?.force) throw err;\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const info = await this.sandbox.fs.getFileDetails(normSrc);\n    if (info.isDir) {\n      if (!options?.recursive) {\n        throw new Error(`EISDIR: is a directory (use recursive): ${src}`);\n      }\n      await this.sandbox.process.executeCommand(\n        `cp -r \"${normSrc}\" \"${normDest}\"`\n      );\n    } else {\n      await this.sandbox.process.executeCommand(\n        `cp \"${normSrc}\" \"${normDest}\"`\n      );\n    }\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    await this.sandbox.fs.moveFiles(normSrc, normDest);\n  }\n\n  async readlink(_path: string): Promise<string> {\n    throw new SandboxNotSupportedError(\"readlink\");\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(this.normalisePath(base), path);\n  }\n}\n","import { Daytona, type Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  Sandbox,\n  SandboxCapabilities,\n  SandboxCapability,\n  SandboxCreateResult,\n  SandboxProvider,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotFoundError } from \"../../../lib/sandbox/types\";\nimport { DaytonaSandboxFileSystem } from \"./filesystem\";\nimport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n\n// ============================================================================\n// DaytonaSandbox\n// ============================================================================\n\nclass DaytonaSandboxImpl implements Sandbox {\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  readonly fs: DaytonaSandboxFileSystem;\n\n  constructor(\n    readonly id: string,\n    private sdkSandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.fs = new DaytonaSandboxFileSystem(sdkSandbox, workspaceBase);\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const response = await this.sdkSandbox.process.executeCommand(\n      command,\n      options?.cwd,\n      options?.env,\n      options?.timeout\n    );\n\n    return {\n      exitCode: response.exitCode ?? 0,\n      stdout: response.result ?? \"\",\n      stderr: \"\",\n    };\n  }\n\n  async destroy(): Promise<void> {\n    await this.sdkSandbox.delete(60);\n  }\n}\n\n// ============================================================================\n// DaytonaSandboxProvider\n// ============================================================================\n\n/**\n * Single source of truth for the Daytona adapter's capability set. Daytona\n * implements only base lifecycle (`create` / `get` / `destroy`); both the\n * type-level `TCaps` (`never`) and the runtime `supportedCapabilities`\n * set fall out of this empty array, so the two surfaces cannot drift.\n */\nconst DAYTONA_CAPS = [] as const satisfies readonly SandboxCapability[];\ntype DaytonaCaps = (typeof DAYTONA_CAPS)[number]; // → never\n\n/**\n * Daytona implements only base sandbox lifecycle (`create` / `get` /\n * `destroy`). Snapshot, restore, fork, pause, and resume are not supported\n * — the type-level capability set is `never`, so calling any of those\n * methods on a Daytona provider, manager, or `SandboxOps` proxy is a\n * compile-time TypeScript error.\n */\nexport class DaytonaSandboxProvider\n  implements\n    SandboxProvider<DaytonaSandboxCreateOptions, DaytonaSandbox, DaytonaCaps>\n{\n  readonly id = \"daytona\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n  readonly supportedCapabilities: ReadonlySet<DaytonaCaps> = new Set(\n    DAYTONA_CAPS\n  );\n\n  private client: Daytona;\n  private readonly defaultWorkspaceBase: string;\n\n  constructor(config?: DaytonaSandboxConfig) {\n    this.client = new Daytona(config);\n    this.defaultWorkspaceBase = config?.workspaceBase ?? \"/home/daytona\";\n  }\n\n  async create(\n    options?: DaytonaSandboxCreateOptions\n  ): Promise<SandboxCreateResult> {\n    const sdkSandbox = await this.client.create(\n      {\n        language: options?.language,\n        snapshot: options?.snapshot,\n        envVars: options?.env,\n        labels: options?.labels,\n        autoStopInterval: options?.autoStopInterval,\n        autoArchiveInterval: options?.autoArchiveInterval,\n        autoDeleteInterval: options?.autoDeleteInterval,\n      },\n      { timeout: options?.timeout ?? 60 }\n    );\n\n    const workspaceBase = options?.workspaceBase ?? this.defaultWorkspaceBase;\n\n    const sandbox = new DaytonaSandboxImpl(\n      sdkSandbox.id,\n      sdkSandbox,\n      workspaceBase\n    );\n\n    if (options?.initialFiles) {\n      await sandbox.fs.writeFiles(\n        Object.entries(options.initialFiles).map(([path, content]) => ({\n          path,\n          content,\n        }))\n      );\n    }\n\n    return { sandbox };\n  }\n\n  async get(sandboxId: string): Promise<DaytonaSandbox> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      return new DaytonaSandboxImpl(\n        sdkSandbox.id,\n        sdkSandbox,\n        this.defaultWorkspaceBase\n      );\n    } catch {\n      throw new SandboxNotFoundError(sandboxId);\n    }\n  }\n\n  async destroy(sandboxId: string): Promise<void> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      await this.client.delete(sdkSandbox);\n    } catch {\n      // Already gone\n    }\n  }\n}\n\n// Re-exports\nexport { DaytonaSandboxFileSystem } from \"./filesystem\";\nexport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n"]}
+{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/daytona/filesystem.ts","../../../../src/adapters/sandbox/daytona/index.ts"],"names":["ApplicationFailure","posix","path","Daytona"],"mappings":";;;;;;;AA4XO,IAAM,wBAAA,GAAN,cAAuCA,yBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AAEO,IAAM,oBAAA,GAAN,cAAmCA,yBAAA,CAAmB;AAAA,EAC3D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,SAAS,CAAA,CAAA,EAAI,sBAAA,EAAwB,IAAI,CAAA;AAAA,EACvE;AACF,CAAA;AC1XO,IAAM,2BAAN,MAA4D;AAAA,EAGjE,WAAA,CACU,OAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgBC,UAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,aAAa,CAAA;AAAA,EACvD;AAAA,EAJU,OAAA;AAAA,EAHD,aAAA;AAAA,EASD,cAAcC,MAAA,EAAsB;AAC1C,IAAA,OAAOD,UAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,EAAeC,MAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAc,iBAAiB,aAAA,EAAwC;AACrE,IAAA,MAAM,SAAS,IAAA,CAAK,aAAA,KAAkB,MAAM,GAAA,GAAM,CAAA,EAAG,KAAK,aAAa,CAAA,CAAA,CAAA;AACvE,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,KAAA,MAAW,KAAK,aAAA,EAAe;AAC7B,MAAA,IAAI,GAAA,GAAMD,UAAA,CAAM,OAAA,CAAQ,CAAC,CAAA;AACzB,MAAA,OAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,QAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,QAAA,GAAA,GAAMA,UAAA,CAAM,QAAQ,GAAG,CAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,IAAI,CAAA,CAAE,IAAA;AAAA,MACvB,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,GAAS,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE;AAAA,KAC/C;AACA,IAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,MAC/C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,GAAA,CAAI,SAAS,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,IAAI,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,UAAA,EAAY,IAAI,UAAU,CAAA;AAAA,EAClE;AAAA,EAEA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,GAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAC5B,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AACzB,IAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,CAAC,IAAI,CAAC,CAAA;AAClC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,WACJ,KAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MAChC,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,OAAO,CAAA;AAAA,MAC7B,WAAA,EAAa,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI;AAAA,KACxC,CAAE,CAAA;AACF,IAAA,MAAM,IAAA,CAAK,iBAAiB,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,CAAC,CAAA;AAC7D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,WAAA,CAAY,OAAO,CAAA;AAAA,EAC3C;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AAAA,IACpD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,IACrC;AAEA,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GAAW,OAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAAI,OAAA;AAChE,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,CAAO,CAAC,UAAU,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAC,CAAC,CAAA;AAC9D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,QAAQ,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,cAAA,CAAe,IAAI,CAAA;AACzC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,IAAI,CAAA;AACtD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,CAAC,IAAA,CAAK,KAAA;AAAA,MACd,aAAa,IAAA,CAAK,KAAA;AAAA,MAClB,cAAA,EAAgB,KAAA;AAAA,MAChB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAA,EAAO,IAAI,IAAA,CAAK,IAAA,CAAK,OAAO;AAAA,KAC9B;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,IAAA,EAAc,QAAA,EAAmD;AAC3E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,MAAM,KAAK,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAAA,EAClC;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACzB,MAAM,CAAA,CAAE,IAAA;AAAA,MACR,MAAA,EAAQ,CAAC,CAAA,CAAE,KAAA;AAAA,MACX,aAAa,CAAA,CAAE,KAAA;AAAA,MACf,cAAA,EAAgB;AAAA,KAClB,CAAE,CAAA;AAAA,EACJ;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,IAAA,EAAM,SAAS,SAAS,CAAA;AAAA,IAC3D,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,CAAC,OAAA,EAAS,KAAA,EAAO,MAAM,GAAA;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,OAAO,CAAA;AACzD,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,GAAG,CAAA,CAAE,CAAA;AAAA,MAClE;AACA,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,OAAA,EAAU,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OACjC;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,IAAA,EAAO,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,SAAS,QAAQ,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,SAAS,KAAA,EAAgC;AAC7C,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,WAAA,CAAY,MAAcC,MAAA,EAAsB;AAC9C,IAAA,OAAOD,WAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,IAAI,GAAGC,MAAI,CAAA;AAAA,EACrD;AACF;;;ACzKA,IAAM,qBAAN,MAA4C;AAAA,EAS1C,WAAA,CACW,EAAA,EACD,UAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAHS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AACD,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAGR,IAAA,IAAA,CAAK,EAAA,GAAK,IAAI,wBAAA,CAAyB,UAAA,EAAY,aAAa,CAAA;AAAA,EAClE;AAAA,EALW,EAAA;AAAA,EACD,UAAA;AAAA,EAVD,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAUT,MAAM,IAAA,CAAK,OAAA,EAAiB,OAAA,EAA4C;AACtE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,CAAW,OAAA,CAAQ,cAAA;AAAA,MAC7C,OAAA;AAAA,MACA,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS;AAAA,KACX;AAEA,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,SAAS,QAAA,IAAY,CAAA;AAAA,MAC/B,MAAA,EAAQ,SAAS,MAAA,IAAU,EAAA;AAAA,MAC3B,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,EAAE,CAAA;AAAA,EACjC;AACF,CAAA;AAYA,IAAM,eAAe,EAAC;AAUf,IAAM,yBAAN,MAGP;AAAA,EACW,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EACS,wBAAkD,IAAI,GAAA;AAAA,IAC7D;AAAA,GACF;AAAA,EAEQ,MAAA;AAAA,EACS,oBAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,MAAA,GAAS,IAAIC,WAAA,CAAQ,MAAM,CAAA;AAChC,IAAA,IAAA,CAAK,oBAAA,GAAuB,QAAQ,aAAA,IAAiB,eAAA;AAAA,EACvD;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA;AAAA,MACnC;AAAA,QACE,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,SAAS,OAAA,EAAS,GAAA;AAAA,QAClB,QAAQ,OAAA,EAAS,MAAA;AAAA,QACjB,kBAAkB,OAAA,EAAS,gBAAA;AAAA,QAC3B,qBAAqB,OAAA,EAAS,mBAAA;AAAA,QAC9B,oBAAoB,OAAA,EAAS;AAAA,OAC/B;AAAA,MACA,EAAE,OAAA,EAAS,OAAA,EAAS,OAAA,IAAW,EAAA;AAAG,KACpC;AAEA,IAAA,MAAM,aAAA,GAAgB,OAAA,EAAS,aAAA,IAAiB,IAAA,CAAK,oBAAA;AAErD,IAAA,MAAM,UAAU,IAAI,kBAAA;AAAA,MAClB,UAAA,CAAW,EAAA;AAAA,MACX,UAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,MAAM,QAAQ,EAAA,CAAG,UAAA;AAAA,QACf,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,CAAE,IAAI,CAAC,CAAC,IAAA,EAAM,OAAO,CAAA,MAAO;AAAA,UAC7D,IAAA;AAAA,UACA;AAAA,SACF,CAAE;AAAA,OACJ;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEA,MAAM,IAAI,SAAA,EAA4C;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,OAAO,IAAI,kBAAA;AAAA,QACT,UAAA,CAAW,EAAA;AAAA,QACX,UAAA;AAAA,QACA,IAAA,CAAK;AAAA,OACP;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,SAAA,EAAkC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA;AAAA,IACrC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"index.cjs","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n// ============================================================================\n// Network & lifecycle\n// ============================================================================\n\nexport interface SandboxNetworkConfig {\n  allowOut?: string[];\n  denyOut?: string[];\n  allowPublicTraffic?: boolean;\n}\n\nexport interface SandboxLifecycleConfig {\n  onTimeout: \"kill\" | \"pause\";\n  autoResume?: boolean;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\n/**\n * Runtime capability flags carried by a {@link Sandbox} instance.\n *\n * These are an orthogonal mechanism to the type-level\n * {@link SandboxCapability} union: this flag bag is for runtime\n * introspection (\"does the sandbox support a filesystem?\") whereas\n * {@link SandboxCapability} narrows the type-level provider/ops contract.\n */\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n/**\n * Type-level capability vocabulary for {@link SandboxProvider} and\n * {@link SandboxOps}. Adapters declare the subset they actually support; the\n * conditional types on each contract gate the corresponding methods so\n * unsupported calls become a compile-time error rather than a runtime\n * {@link SandboxNotSupportedError}.\n *\n * `pause` and `resume` are split because some adapters might support one\n * direction without the other. The `snapshot` cap covers both `snapshot()`\n * and `deleteSnapshot()` since they always travel together in practice.\n */\nexport type SandboxCapability =\n  | \"pause\"\n  | \"resume\"\n  | \"snapshot\"\n  | \"restore\"\n  | \"fork\";\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n  /** Key-value metadata surfaced via provider list/query APIs */\n  metadata?: Record<string, string>;\n  /** Sandbox idle timeout in milliseconds */\n  timeoutMs?: number;\n  /** Enable or disable outbound internet access */\n  allowInternetAccess?: boolean;\n  /** Outbound network allow/deny rules */\n  network?: SandboxNetworkConfig;\n  /** Sandbox timeout behaviour */\n  lifecycle?: SandboxLifecycleConfig;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n}\n\n/**\n * Internal helper: drop keys whose value is `never` from an object type.\n *\n * Used by the capability-gated contracts below so that an absent capability\n * removes the corresponding key entirely, instead of leaving a required\n * field with type `never` (which would make implementations impossible).\n */\ntype OmitNever<T> = {\n  [K in keyof T as [T[K]] extends [never] ? never : K]: T[K];\n};\n\n/**\n * Capability-gated provider lifecycle methods.\n *\n * Each field becomes `never` when its capability is absent from `TCaps`;\n * the wrapping `OmitNever` removes those keys entirely, so the method\n * isn't part of the type surface for adapters that don't support it.\n */\ntype SandboxProviderCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pause: \"pause\" extends TCaps\n    ? (sandboxId: string, ttlSeconds?: number) => Promise<void>\n    : never;\n  resume: \"resume\" extends TCaps ? (sandboxId: string) => Promise<void> : never;\n  snapshot: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restore: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<TSandbox>\n    : never;\n  fork: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<TSandbox>\n    : never;\n}>;\n\n/**\n * Always-present provider lifecycle methods. These do not depend on the\n * capability set and are required by every adapter.\n */\ninterface SandboxProviderBase<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  /**\n   * Runtime-introspectable list of supported capabilities.\n   *\n   * Constrained to `ReadonlySet<TCaps & SandboxCapability>` so the runtime\n   * set cannot include capabilities not declared at the type level — a\n   * provider typed as `SandboxProvider<…, never>` cannot ship a runtime\n   * set that contains `\"pause\"`, etc.\n   *\n   * The other direction (type declares a cap, runtime set omits it)\n   * cannot be enforced by TypeScript alone; adapters should derive both\n   * `TCaps` and the runtime set from the same `as const` array (see\n   * `SandboxManager`'s constructor-time consistency check) so the two\n   * surfaces cannot drift.\n   */\n  readonly supportedCapabilities: ReadonlySet<TCaps & SandboxCapability>;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n}\n\n/**\n * Provider-side sandbox lifecycle contract.\n *\n * Generic over an optional capability set (`TCaps`). Each capability gates\n * a specific method: when the cap is absent the corresponding key is\n * **removed** from the type entirely, so calling it produces a TypeScript\n * error at the call site instead of a runtime\n * {@link SandboxNotSupportedError}.\n *\n * The default `TCaps = SandboxCapability` resolves to the full union, so\n * existing usages that only pass `TOptions` / `TSandbox` continue to see\n * the full method surface (backwards compatible).\n *\n * Adapters that don't support a method should narrow `TCaps` accordingly:\n *\n * - In-memory / E2B: `SandboxCapability` (default — all caps present).\n * - Bedrock Code Interpreter / Daytona: `never` (only base ops).\n * - Bedrock AgentCore Runtime: `\"pause\" | \"resume\"`.\n */\nexport type SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxProviderBase<TOptions, TSandbox, TCaps> &\n  SandboxProviderCapMethods<TOptions, TSandbox, TCaps>;\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\n/**\n * Capability-gated workflow-side methods. Mirrors the provider's gating:\n * keys whose capability is absent from `TCaps` are removed from the type.\n */\ntype SandboxOpsCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pauseSandbox: \"pause\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  resumeSandbox: \"resume\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  snapshotSandbox: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSandboxSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restoreSandbox: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<string>\n    : never;\n  forkSandbox: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<string>\n    : never;\n}>;\n\n/**\n * Always-present workflow-side lifecycle methods.\n */\ninterface SandboxOpsBase<\n  TOptions extends SandboxCreateOptions,\n  TCtx,\n> {\n  createSandbox(\n    options?: TOptions,\n    ctx?: TCtx\n  ): Promise<{ sandboxId: string } | null>;\n  destroySandbox(sandboxId: string): Promise<void>;\n}\n\n/**\n * Workflow-side counterpart to {@link SandboxProvider}. Exposed as a set of\n * Temporal activities and consumed by `createSession`'s `sandboxOps` field\n * and by `defineSubagent`'s `sandbox.proxy`.\n *\n * Generic over a capability set (`TCaps`) — same semantics as the provider:\n * keys whose capability is absent are removed from the type, so calling\n * them is a TypeScript error rather than a runtime throw. The default\n * `TCaps = SandboxCapability` keeps the full method surface for existing\n * consumers.\n */\nexport type SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxOpsBase<TOptions, TCtx> & SandboxOpsCapMethods<TOptions, TCaps>;\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * Inherits the capability gating from {@link SandboxOps}: when `TCaps` omits\n * a capability the prefixed key carries the `never` type so call sites are\n * type-protected.\n *\n * @example\n * ```typescript\n * type E2bOps = PrefixedSandboxOps<\"e2b\">;\n * // → { e2bCreateSandbox, e2bDestroySandbox, e2bSnapshotSandbox, … }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = {\n  [K in keyof SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  > as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  >[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\n/**\n * Thrown by adapters that still surface an unsupported method at runtime.\n *\n * After the capability-generic refactor most adapters drop their\n * unsupported methods entirely so the type system rejects them at call\n * sites. This symbol is still exported so consumers running against older\n * adapter versions can keep their backwards-compatible error-handling\n * paths until they finish migrating.\n */\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type { Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\n\n/**\n * {@link SandboxFileSystem} backed by a Daytona SDK sandbox.\n *\n * Maps zeitlich's filesystem interface to Daytona's `sandbox.fs` and\n * `sandbox.process` APIs. Operations that have no direct Daytona equivalent\n * (e.g. `appendFile`, `cp`) are composed from primitives.\n */\nexport class DaytonaSandboxFileSystem implements SandboxFileSystem {\n  readonly workspaceBase: string;\n\n  constructor(\n    private sandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.workspaceBase = posix.resolve(\"/\", workspaceBase);\n  }\n\n  private normalisePath(path: string): string {\n    return posix.resolve(this.workspaceBase, path);\n  }\n\n  private async ensureParentDirs(absolutePaths: string[]): Promise<void> {\n    const prefix = this.workspaceBase === \"/\" ? \"/\" : `${this.workspaceBase}/`;\n    const dirs = new Set<string>();\n    for (const p of absolutePaths) {\n      let dir = posix.dirname(p);\n      while (dir.startsWith(prefix)) {\n        dirs.add(dir);\n        dir = posix.dirname(dir);\n      }\n    }\n    const sorted = [...dirs].sort(\n      (a, b) => a.split(\"/\").length - b.split(\"/\").length\n    );\n    for (const dir of sorted) {\n      try {\n        await this.sandbox.fs.createFolder(dir, \"755\");\n      } catch {\n        // Folder already exists — Daytona's createFolder throws in that case.\n      }\n    }\n  }\n\n  async readFile(path: string): Promise<string> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return buf.toString(\"utf-8\");\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);\n  }\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    const buf =\n      typeof content === \"string\"\n        ? Buffer.from(content, \"utf-8\")\n        : Buffer.from(content);\n    await this.ensureParentDirs([norm]);\n    await this.sandbox.fs.uploadFile(buf, norm);\n  }\n\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array }[]\n  ): Promise<void> {\n    const uploads = files.map((f) => ({\n      source: Buffer.from(f.content),\n      destination: this.normalisePath(f.path),\n    }));\n    await this.ensureParentDirs(uploads.map((u) => u.destination));\n    await this.sandbox.fs.uploadFiles(uploads);\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    let existing: Buffer;\n    try {\n      existing = await this.sandbox.fs.downloadFile(norm);\n    } catch {\n      return this.writeFile(norm, content);\n    }\n\n    const addition =\n      typeof content === \"string\" ? Buffer.from(content, \"utf-8\") : content;\n    const merged = Buffer.concat([existing, Buffer.from(addition)]);\n    await this.sandbox.fs.uploadFile(merged, norm);\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.getFileDetails(norm);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = this.normalisePath(path);\n    const info = await this.sandbox.fs.getFileDetails(norm);\n    return {\n      isFile: !info.isDir,\n      isDirectory: info.isDir,\n      isSymbolicLink: false,\n      size: info.size,\n      mtime: new Date(info.modTime),\n    };\n  }\n\n  async mkdir(path: string, _options?: { recursive?: boolean }): Promise<void> {\n    const norm = this.normalisePath(path);\n    await this.sandbox.fs.createFolder(norm, \"755\");\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => e.name);\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => ({\n      name: e.name,\n      isFile: !e.isDir,\n      isDirectory: e.isDir,\n      isSymbolicLink: false,\n    }));\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.deleteFile(norm, options?.recursive);\n    } catch (err) {\n      if (!options?.force) throw err;\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const info = await this.sandbox.fs.getFileDetails(normSrc);\n    if (info.isDir) {\n      if (!options?.recursive) {\n        throw new Error(`EISDIR: is a directory (use recursive): ${src}`);\n      }\n      await this.sandbox.process.executeCommand(\n        `cp -r \"${normSrc}\" \"${normDest}\"`\n      );\n    } else {\n      await this.sandbox.process.executeCommand(\n        `cp \"${normSrc}\" \"${normDest}\"`\n      );\n    }\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    await this.sandbox.fs.moveFiles(normSrc, normDest);\n  }\n\n  async readlink(_path: string): Promise<string> {\n    throw new SandboxNotSupportedError(\"readlink\");\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(this.normalisePath(base), path);\n  }\n}\n","import { Daytona, type Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  Sandbox,\n  SandboxCapabilities,\n  SandboxCapability,\n  SandboxCreateResult,\n  SandboxProvider,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotFoundError } from \"../../../lib/sandbox/types\";\nimport { DaytonaSandboxFileSystem } from \"./filesystem\";\nimport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n\n// ============================================================================\n// DaytonaSandbox\n// ============================================================================\n\nclass DaytonaSandboxImpl implements Sandbox {\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  readonly fs: DaytonaSandboxFileSystem;\n\n  constructor(\n    readonly id: string,\n    private sdkSandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.fs = new DaytonaSandboxFileSystem(sdkSandbox, workspaceBase);\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const response = await this.sdkSandbox.process.executeCommand(\n      command,\n      options?.cwd,\n      options?.env,\n      options?.timeout\n    );\n\n    return {\n      exitCode: response.exitCode ?? 0,\n      stdout: response.result ?? \"\",\n      stderr: \"\",\n    };\n  }\n\n  async destroy(): Promise<void> {\n    await this.sdkSandbox.delete(60);\n  }\n}\n\n// ============================================================================\n// DaytonaSandboxProvider\n// ============================================================================\n\n/**\n * Single source of truth for the Daytona adapter's capability set. Daytona\n * implements only base lifecycle (`create` / `get` / `destroy`); both the\n * type-level `TCaps` (`never`) and the runtime `supportedCapabilities`\n * set fall out of this empty array, so the two surfaces cannot drift.\n */\nconst DAYTONA_CAPS = [] as const satisfies readonly SandboxCapability[];\ntype DaytonaCaps = (typeof DAYTONA_CAPS)[number]; // → never\n\n/**\n * Daytona implements only base sandbox lifecycle (`create` / `get` /\n * `destroy`). Snapshot, restore, fork, pause, and resume are not supported\n * — the type-level capability set is `never`, so calling any of those\n * methods on a Daytona provider, manager, or `SandboxOps` proxy is a\n * compile-time TypeScript error.\n */\nexport class DaytonaSandboxProvider\n  implements\n    SandboxProvider<DaytonaSandboxCreateOptions, DaytonaSandbox, DaytonaCaps>\n{\n  readonly id = \"daytona\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n  readonly supportedCapabilities: ReadonlySet<DaytonaCaps> = new Set(\n    DAYTONA_CAPS\n  );\n\n  private client: Daytona;\n  private readonly defaultWorkspaceBase: string;\n\n  constructor(config?: DaytonaSandboxConfig) {\n    this.client = new Daytona(config);\n    this.defaultWorkspaceBase = config?.workspaceBase ?? \"/home/daytona\";\n  }\n\n  async create(\n    options?: DaytonaSandboxCreateOptions\n  ): Promise<SandboxCreateResult> {\n    const sdkSandbox = await this.client.create(\n      {\n        language: options?.language,\n        snapshot: options?.snapshot,\n        envVars: options?.env,\n        labels: options?.labels,\n        autoStopInterval: options?.autoStopInterval,\n        autoArchiveInterval: options?.autoArchiveInterval,\n        autoDeleteInterval: options?.autoDeleteInterval,\n      },\n      { timeout: options?.timeout ?? 60 }\n    );\n\n    const workspaceBase = options?.workspaceBase ?? this.defaultWorkspaceBase;\n\n    const sandbox = new DaytonaSandboxImpl(\n      sdkSandbox.id,\n      sdkSandbox,\n      workspaceBase\n    );\n\n    if (options?.initialFiles) {\n      await sandbox.fs.writeFiles(\n        Object.entries(options.initialFiles).map(([path, content]) => ({\n          path,\n          content,\n        }))\n      );\n    }\n\n    return { sandbox };\n  }\n\n  async get(sandboxId: string): Promise<DaytonaSandbox> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      return new DaytonaSandboxImpl(\n        sdkSandbox.id,\n        sdkSandbox,\n        this.defaultWorkspaceBase\n      );\n    } catch {\n      throw new SandboxNotFoundError(sandboxId);\n    }\n  }\n\n  async destroy(sandboxId: string): Promise<void> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      await this.client.delete(sdkSandbox);\n    } catch {\n      // Already gone\n    }\n  }\n}\n\n// Re-exports\nexport { DaytonaSandboxFileSystem } from \"./filesystem\";\nexport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n"]}

package/dist/adapters/sandbox/daytona/index.d.cts

@@ -1,6 +1,6 @@
-import { d as SandboxProvider, e as SandboxCapabilities, f as SandboxCreateResult } from '../../../types-CJ7tCdl6.cjs';
-import { D as DaytonaSandboxCreateOptions, a as DaytonaSandbox, b as DaytonaSandboxConfig } from '../../../types-CjY93AWZ.cjs';
-export { c as DaytonaSandboxFileSystem } from '../../../types-CjY93AWZ.cjs';
+import { S as SandboxProvider, a as SandboxCapabilities, b as SandboxCreateResult } from '../../../types-D8W5TnSa.cjs';
+import { D as DaytonaSandboxCreateOptions, a as DaytonaSandbox, b as DaytonaSandboxConfig } from '../../../types-OEN1xrFg.cjs';
+export { c as DaytonaSandboxFileSystem } from '../../../types-OEN1xrFg.cjs';
 import '@temporalio/common';
 import '@daytonaio/sdk';
 

package/dist/adapters/sandbox/daytona/index.d.ts

@@ -1,6 +1,6 @@
-import { d as SandboxProvider, e as SandboxCapabilities, f as SandboxCreateResult } from '../../../types-CJ7tCdl6.js';
-import { D as DaytonaSandboxCreateOptions, a as DaytonaSandbox, b as DaytonaSandboxConfig } from '../../../types-gVa5XCWD.js';
-export { c as DaytonaSandboxFileSystem } from '../../../types-gVa5XCWD.js';
+import { S as SandboxProvider, a as SandboxCapabilities, b as SandboxCreateResult } from '../../../types-D8W5TnSa.js';
+import { D as DaytonaSandboxCreateOptions, a as DaytonaSandbox, b as DaytonaSandboxConfig } from '../../../types-BQvXWcft.js';
+export { c as DaytonaSandboxFileSystem } from '../../../types-BQvXWcft.js';
 import '@temporalio/common';
 import '@daytonaio/sdk';
 

package/dist/adapters/sandbox/daytona/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/daytona/filesystem.ts","../../../../src/adapters/sandbox/daytona/index.ts"],"names":[],"mappings":";;;;;AA4XO,IAAM,wBAAA,GAAN,cAAuC,kBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AAEO,IAAM,oBAAA,GAAN,cAAmC,kBAAA,CAAmB;AAAA,EAC3D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,SAAS,CAAA,CAAA,EAAI,sBAAA,EAAwB,IAAI,CAAA;AAAA,EACvE;AACF,CAAA;AC1XO,IAAM,2BAAN,MAA4D;AAAA,EAGjE,WAAA,CACU,OAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,aAAa,CAAA;AAAA,EACvD;AAAA,EAJU,OAAA;AAAA,EAHD,aAAA;AAAA,EASD,cAAc,IAAA,EAAsB;AAC1C,IAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,EAAe,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAc,iBAAiB,aAAA,EAAwC;AACrE,IAAA,MAAM,SAAS,IAAA,CAAK,aAAA,KAAkB,MAAM,GAAA,GAAM,CAAA,EAAG,KAAK,aAAa,CAAA,CAAA,CAAA;AACvE,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,KAAA,MAAW,KAAK,aAAA,EAAe;AAC7B,MAAA,IAAI,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA;AACzB,MAAA,OAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,QAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,QAAA,GAAA,GAAM,KAAA,CAAM,QAAQ,GAAG,CAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,IAAI,CAAA,CAAE,IAAA;AAAA,MACvB,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,GAAS,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE;AAAA,KAC/C;AACA,IAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,MAC/C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,GAAA,CAAI,SAAS,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,IAAI,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,UAAA,EAAY,IAAI,UAAU,CAAA;AAAA,EAClE;AAAA,EAEA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,GAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAC5B,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AACzB,IAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,CAAC,IAAI,CAAC,CAAA;AAClC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,WACJ,KAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MAChC,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,OAAO,CAAA;AAAA,MAC7B,WAAA,EAAa,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI;AAAA,KACxC,CAAE,CAAA;AACF,IAAA,MAAM,IAAA,CAAK,iBAAiB,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,CAAC,CAAA;AAC7D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,WAAA,CAAY,OAAO,CAAA;AAAA,EAC3C;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AAAA,IACpD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,IACrC;AAEA,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GAAW,OAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAAI,OAAA;AAChE,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,CAAO,CAAC,UAAU,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAC,CAAC,CAAA;AAC9D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,QAAQ,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,cAAA,CAAe,IAAI,CAAA;AACzC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,IAAI,CAAA;AACtD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,CAAC,IAAA,CAAK,KAAA;AAAA,MACd,aAAa,IAAA,CAAK,KAAA;AAAA,MAClB,cAAA,EAAgB,KAAA;AAAA,MAChB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAA,EAAO,IAAI,IAAA,CAAK,IAAA,CAAK,OAAO;AAAA,KAC9B;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,IAAA,EAAc,QAAA,EAAmD;AAC3E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,MAAM,KAAK,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAAA,EAClC;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACzB,MAAM,CAAA,CAAE,IAAA;AAAA,MACR,MAAA,EAAQ,CAAC,CAAA,CAAE,KAAA;AAAA,MACX,aAAa,CAAA,CAAE,KAAA;AAAA,MACf,cAAA,EAAgB;AAAA,KAClB,CAAE,CAAA;AAAA,EACJ;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,IAAA,EAAM,SAAS,SAAS,CAAA;AAAA,IAC3D,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,CAAC,OAAA,EAAS,KAAA,EAAO,MAAM,GAAA;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,OAAO,CAAA;AACzD,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,GAAG,CAAA,CAAE,CAAA;AAAA,MAClE;AACA,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,OAAA,EAAU,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OACjC;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,IAAA,EAAO,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,SAAS,QAAQ,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,SAAS,KAAA,EAAgC;AAC7C,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,WAAA,CAAY,MAAc,IAAA,EAAsB;AAC9C,IAAA,OAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,IAAI,CAAA;AAAA,EACrD;AACF;;;ACzKA,IAAM,qBAAN,MAA4C;AAAA,EAS1C,WAAA,CACW,EAAA,EACD,UAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAHS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AACD,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAGR,IAAA,IAAA,CAAK,EAAA,GAAK,IAAI,wBAAA,CAAyB,UAAA,EAAY,aAAa,CAAA;AAAA,EAClE;AAAA,EALW,EAAA;AAAA,EACD,UAAA;AAAA,EAVD,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAUT,MAAM,IAAA,CAAK,OAAA,EAAiB,OAAA,EAA4C;AACtE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,CAAW,OAAA,CAAQ,cAAA;AAAA,MAC7C,OAAA;AAAA,MACA,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS;AAAA,KACX;AAEA,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,SAAS,QAAA,IAAY,CAAA;AAAA,MAC/B,MAAA,EAAQ,SAAS,MAAA,IAAU,EAAA;AAAA,MAC3B,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,EAAE,CAAA;AAAA,EACjC;AACF,CAAA;AAYA,IAAM,eAAe,EAAC;AAUf,IAAM,yBAAN,MAGP;AAAA,EACW,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EACS,wBAAkD,IAAI,GAAA;AAAA,IAC7D;AAAA,GACF;AAAA,EAEQ,MAAA;AAAA,EACS,oBAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,OAAA,CAAQ,MAAM,CAAA;AAChC,IAAA,IAAA,CAAK,oBAAA,GAAuB,QAAQ,aAAA,IAAiB,eAAA;AAAA,EACvD;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA;AAAA,MACnC;AAAA,QACE,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,SAAS,OAAA,EAAS,GAAA;AAAA,QAClB,QAAQ,OAAA,EAAS,MAAA;AAAA,QACjB,kBAAkB,OAAA,EAAS,gBAAA;AAAA,QAC3B,qBAAqB,OAAA,EAAS,mBAAA;AAAA,QAC9B,oBAAoB,OAAA,EAAS;AAAA,OAC/B;AAAA,MACA,EAAE,OAAA,EAAS,OAAA,EAAS,OAAA,IAAW,EAAA;AAAG,KACpC;AAEA,IAAA,MAAM,aAAA,GAAgB,OAAA,EAAS,aAAA,IAAiB,IAAA,CAAK,oBAAA;AAErD,IAAA,MAAM,UAAU,IAAI,kBAAA;AAAA,MAClB,UAAA,CAAW,EAAA;AAAA,MACX,UAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,MAAM,QAAQ,EAAA,CAAG,UAAA;AAAA,QACf,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,CAAE,IAAI,CAAC,CAAC,IAAA,EAAM,OAAO,CAAA,MAAO;AAAA,UAC7D,IAAA;AAAA,UACA;AAAA,SACF,CAAE;AAAA,OACJ;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEA,MAAM,IAAI,SAAA,EAA4C;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,OAAO,IAAI,kBAAA;AAAA,QACT,UAAA,CAAW,EAAA;AAAA,QACX,UAAA;AAAA,QACA,IAAA,CAAK;AAAA,OACP;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,SAAA,EAAkC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA;AAAA,IACrC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"index.js","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n// ============================================================================\n// Network & lifecycle\n// ============================================================================\n\nexport interface SandboxNetworkConfig {\n  allowOut?: string[];\n  denyOut?: string[];\n  allowPublicTraffic?: boolean;\n}\n\nexport interface SandboxLifecycleConfig {\n  onTimeout: \"kill\" | \"pause\";\n  autoResume?: boolean;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\n/**\n * Runtime capability flags carried by a {@link Sandbox} instance.\n *\n * These are an orthogonal mechanism to the type-level\n * {@link SandboxCapability} union: this flag bag is for runtime\n * introspection (\"does the sandbox support a filesystem?\") whereas\n * {@link SandboxCapability} narrows the type-level provider/ops contract.\n */\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n/**\n * Type-level capability vocabulary for {@link SandboxProvider} and\n * {@link SandboxOps}. Adapters declare the subset they actually support; the\n * conditional types on each contract gate the corresponding methods so\n * unsupported calls become a compile-time error rather than a runtime\n * {@link SandboxNotSupportedError}.\n *\n * `pause` and `resume` are split because some adapters might support one\n * direction without the other. The `snapshot` cap covers both `snapshot()`\n * and `deleteSnapshot()` since they always travel together in practice.\n */\nexport type SandboxCapability =\n  | \"pause\"\n  | \"resume\"\n  | \"snapshot\"\n  | \"restore\"\n  | \"fork\";\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n  /** Key-value metadata surfaced via provider list/query APIs */\n  metadata?: Record<string, string>;\n  /** Sandbox idle timeout in milliseconds */\n  timeoutMs?: number;\n  /** Enable or disable outbound internet access */\n  allowInternetAccess?: boolean;\n  /** Outbound network allow/deny rules */\n  network?: SandboxNetworkConfig;\n  /** Sandbox timeout behaviour */\n  lifecycle?: SandboxLifecycleConfig;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n}\n\n/**\n * Internal helper: drop keys whose value is `never` from an object type.\n *\n * Used by the capability-gated contracts below so that an absent capability\n * removes the corresponding key entirely, instead of leaving a required\n * field with type `never` (which would make implementations impossible).\n */\ntype OmitNever<T> = {\n  [K in keyof T as [T[K]] extends [never] ? never : K]: T[K];\n};\n\n/**\n * Capability-gated provider lifecycle methods.\n *\n * Each field becomes `never` when its capability is absent from `TCaps`;\n * the wrapping `OmitNever` removes those keys entirely, so the method\n * isn't part of the type surface for adapters that don't support it.\n */\ntype SandboxProviderCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pause: \"pause\" extends TCaps\n    ? (sandboxId: string, ttlSeconds?: number) => Promise<void>\n    : never;\n  resume: \"resume\" extends TCaps ? (sandboxId: string) => Promise<void> : never;\n  snapshot: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restore: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<TSandbox>\n    : never;\n  fork: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<TSandbox>\n    : never;\n}>;\n\n/**\n * Always-present provider lifecycle methods. These do not depend on the\n * capability set and are required by every adapter.\n */\ninterface SandboxProviderBase<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  /**\n   * Runtime-introspectable list of supported capabilities.\n   *\n   * Constrained to `ReadonlySet<TCaps & SandboxCapability>` so the runtime\n   * set cannot include capabilities not declared at the type level — a\n   * provider typed as `SandboxProvider<…, never>` cannot ship a runtime\n   * set that contains `\"pause\"`, etc.\n   *\n   * The other direction (type declares a cap, runtime set omits it)\n   * cannot be enforced by TypeScript alone; adapters should derive both\n   * `TCaps` and the runtime set from the same `as const` array (see\n   * `SandboxManager`'s constructor-time consistency check) so the two\n   * surfaces cannot drift.\n   */\n  readonly supportedCapabilities: ReadonlySet<TCaps & SandboxCapability>;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n}\n\n/**\n * Provider-side sandbox lifecycle contract.\n *\n * Generic over an optional capability set (`TCaps`). Each capability gates\n * a specific method: when the cap is absent the corresponding key is\n * **removed** from the type entirely, so calling it produces a TypeScript\n * error at the call site instead of a runtime\n * {@link SandboxNotSupportedError}.\n *\n * The default `TCaps = SandboxCapability` resolves to the full union, so\n * existing usages that only pass `TOptions` / `TSandbox` continue to see\n * the full method surface (backwards compatible).\n *\n * Adapters that don't support a method should narrow `TCaps` accordingly:\n *\n * - In-memory / E2B: `SandboxCapability` (default — all caps present).\n * - Bedrock Code Interpreter / Daytona: `never` (only base ops).\n * - Bedrock AgentCore Runtime: `\"pause\" | \"resume\"`.\n */\nexport type SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxProviderBase<TOptions, TSandbox, TCaps> &\n  SandboxProviderCapMethods<TOptions, TSandbox, TCaps>;\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\n/**\n * Capability-gated workflow-side methods. Mirrors the provider's gating:\n * keys whose capability is absent from `TCaps` are removed from the type.\n */\ntype SandboxOpsCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pauseSandbox: \"pause\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  resumeSandbox: \"resume\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  snapshotSandbox: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSandboxSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restoreSandbox: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<string>\n    : never;\n  forkSandbox: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<string>\n    : never;\n}>;\n\n/**\n * Always-present workflow-side lifecycle methods.\n */\ninterface SandboxOpsBase<\n  TOptions extends SandboxCreateOptions,\n  TCtx,\n> {\n  createSandbox(\n    options?: TOptions,\n    ctx?: TCtx\n  ): Promise<{ sandboxId: string } | null>;\n  destroySandbox(sandboxId: string): Promise<void>;\n}\n\n/**\n * Workflow-side counterpart to {@link SandboxProvider}. Exposed as a set of\n * Temporal activities and consumed by `createSession`'s `sandboxOps` field\n * and by `defineSubagent`'s `sandbox.proxy`.\n *\n * Generic over a capability set (`TCaps`) — same semantics as the provider:\n * keys whose capability is absent are removed from the type, so calling\n * them is a TypeScript error rather than a runtime throw. The default\n * `TCaps = SandboxCapability` keeps the full method surface for existing\n * consumers.\n */\nexport type SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxOpsBase<TOptions, TCtx> & SandboxOpsCapMethods<TOptions, TCaps>;\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * Inherits the capability gating from {@link SandboxOps}: when `TCaps` omits\n * a capability the prefixed key carries the `never` type so call sites are\n * type-protected.\n *\n * @example\n * ```typescript\n * type InMemOps = PrefixedSandboxOps<\"inMemory\">;\n * // → { inMemoryCreateSandbox, inMemoryDestroySandbox, inMemorySnapshotSandbox, … }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = {\n  [K in keyof SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  > as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  >[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\n/**\n * Thrown by adapters that still surface an unsupported method at runtime.\n *\n * After the capability-generic refactor most adapters drop their\n * unsupported methods entirely so the type system rejects them at call\n * sites. This symbol is still exported so consumers running against older\n * adapter versions can keep their backwards-compatible error-handling\n * paths until they finish migrating.\n */\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type { Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\n\n/**\n * {@link SandboxFileSystem} backed by a Daytona SDK sandbox.\n *\n * Maps zeitlich's filesystem interface to Daytona's `sandbox.fs` and\n * `sandbox.process` APIs. Operations that have no direct Daytona equivalent\n * (e.g. `appendFile`, `cp`) are composed from primitives.\n */\nexport class DaytonaSandboxFileSystem implements SandboxFileSystem {\n  readonly workspaceBase: string;\n\n  constructor(\n    private sandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.workspaceBase = posix.resolve(\"/\", workspaceBase);\n  }\n\n  private normalisePath(path: string): string {\n    return posix.resolve(this.workspaceBase, path);\n  }\n\n  private async ensureParentDirs(absolutePaths: string[]): Promise<void> {\n    const prefix = this.workspaceBase === \"/\" ? \"/\" : `${this.workspaceBase}/`;\n    const dirs = new Set<string>();\n    for (const p of absolutePaths) {\n      let dir = posix.dirname(p);\n      while (dir.startsWith(prefix)) {\n        dirs.add(dir);\n        dir = posix.dirname(dir);\n      }\n    }\n    const sorted = [...dirs].sort(\n      (a, b) => a.split(\"/\").length - b.split(\"/\").length\n    );\n    for (const dir of sorted) {\n      try {\n        await this.sandbox.fs.createFolder(dir, \"755\");\n      } catch {\n        // Folder already exists — Daytona's createFolder throws in that case.\n      }\n    }\n  }\n\n  async readFile(path: string): Promise<string> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return buf.toString(\"utf-8\");\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);\n  }\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    const buf =\n      typeof content === \"string\"\n        ? Buffer.from(content, \"utf-8\")\n        : Buffer.from(content);\n    await this.ensureParentDirs([norm]);\n    await this.sandbox.fs.uploadFile(buf, norm);\n  }\n\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array }[]\n  ): Promise<void> {\n    const uploads = files.map((f) => ({\n      source: Buffer.from(f.content),\n      destination: this.normalisePath(f.path),\n    }));\n    await this.ensureParentDirs(uploads.map((u) => u.destination));\n    await this.sandbox.fs.uploadFiles(uploads);\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    let existing: Buffer;\n    try {\n      existing = await this.sandbox.fs.downloadFile(norm);\n    } catch {\n      return this.writeFile(norm, content);\n    }\n\n    const addition =\n      typeof content === \"string\" ? Buffer.from(content, \"utf-8\") : content;\n    const merged = Buffer.concat([existing, Buffer.from(addition)]);\n    await this.sandbox.fs.uploadFile(merged, norm);\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.getFileDetails(norm);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = this.normalisePath(path);\n    const info = await this.sandbox.fs.getFileDetails(norm);\n    return {\n      isFile: !info.isDir,\n      isDirectory: info.isDir,\n      isSymbolicLink: false,\n      size: info.size,\n      mtime: new Date(info.modTime),\n    };\n  }\n\n  async mkdir(path: string, _options?: { recursive?: boolean }): Promise<void> {\n    const norm = this.normalisePath(path);\n    await this.sandbox.fs.createFolder(norm, \"755\");\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => e.name);\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => ({\n      name: e.name,\n      isFile: !e.isDir,\n      isDirectory: e.isDir,\n      isSymbolicLink: false,\n    }));\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.deleteFile(norm, options?.recursive);\n    } catch (err) {\n      if (!options?.force) throw err;\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const info = await this.sandbox.fs.getFileDetails(normSrc);\n    if (info.isDir) {\n      if (!options?.recursive) {\n        throw new Error(`EISDIR: is a directory (use recursive): ${src}`);\n      }\n      await this.sandbox.process.executeCommand(\n        `cp -r \"${normSrc}\" \"${normDest}\"`\n      );\n    } else {\n      await this.sandbox.process.executeCommand(\n        `cp \"${normSrc}\" \"${normDest}\"`\n      );\n    }\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    await this.sandbox.fs.moveFiles(normSrc, normDest);\n  }\n\n  async readlink(_path: string): Promise<string> {\n    throw new SandboxNotSupportedError(\"readlink\");\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(this.normalisePath(base), path);\n  }\n}\n","import { Daytona, type Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  Sandbox,\n  SandboxCapabilities,\n  SandboxCapability,\n  SandboxCreateResult,\n  SandboxProvider,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotFoundError } from \"../../../lib/sandbox/types\";\nimport { DaytonaSandboxFileSystem } from \"./filesystem\";\nimport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n\n// ============================================================================\n// DaytonaSandbox\n// ============================================================================\n\nclass DaytonaSandboxImpl implements Sandbox {\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  readonly fs: DaytonaSandboxFileSystem;\n\n  constructor(\n    readonly id: string,\n    private sdkSandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.fs = new DaytonaSandboxFileSystem(sdkSandbox, workspaceBase);\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const response = await this.sdkSandbox.process.executeCommand(\n      command,\n      options?.cwd,\n      options?.env,\n      options?.timeout\n    );\n\n    return {\n      exitCode: response.exitCode ?? 0,\n      stdout: response.result ?? \"\",\n      stderr: \"\",\n    };\n  }\n\n  async destroy(): Promise<void> {\n    await this.sdkSandbox.delete(60);\n  }\n}\n\n// ============================================================================\n// DaytonaSandboxProvider\n// ============================================================================\n\n/**\n * Single source of truth for the Daytona adapter's capability set. Daytona\n * implements only base lifecycle (`create` / `get` / `destroy`); both the\n * type-level `TCaps` (`never`) and the runtime `supportedCapabilities`\n * set fall out of this empty array, so the two surfaces cannot drift.\n */\nconst DAYTONA_CAPS = [] as const satisfies readonly SandboxCapability[];\ntype DaytonaCaps = (typeof DAYTONA_CAPS)[number]; // → never\n\n/**\n * Daytona implements only base sandbox lifecycle (`create` / `get` /\n * `destroy`). Snapshot, restore, fork, pause, and resume are not supported\n * — the type-level capability set is `never`, so calling any of those\n * methods on a Daytona provider, manager, or `SandboxOps` proxy is a\n * compile-time TypeScript error.\n */\nexport class DaytonaSandboxProvider\n  implements\n    SandboxProvider<DaytonaSandboxCreateOptions, DaytonaSandbox, DaytonaCaps>\n{\n  readonly id = \"daytona\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n  readonly supportedCapabilities: ReadonlySet<DaytonaCaps> = new Set(\n    DAYTONA_CAPS\n  );\n\n  private client: Daytona;\n  private readonly defaultWorkspaceBase: string;\n\n  constructor(config?: DaytonaSandboxConfig) {\n    this.client = new Daytona(config);\n    this.defaultWorkspaceBase = config?.workspaceBase ?? \"/home/daytona\";\n  }\n\n  async create(\n    options?: DaytonaSandboxCreateOptions\n  ): Promise<SandboxCreateResult> {\n    const sdkSandbox = await this.client.create(\n      {\n        language: options?.language,\n        snapshot: options?.snapshot,\n        envVars: options?.env,\n        labels: options?.labels,\n        autoStopInterval: options?.autoStopInterval,\n        autoArchiveInterval: options?.autoArchiveInterval,\n        autoDeleteInterval: options?.autoDeleteInterval,\n      },\n      { timeout: options?.timeout ?? 60 }\n    );\n\n    const workspaceBase = options?.workspaceBase ?? this.defaultWorkspaceBase;\n\n    const sandbox = new DaytonaSandboxImpl(\n      sdkSandbox.id,\n      sdkSandbox,\n      workspaceBase\n    );\n\n    if (options?.initialFiles) {\n      await sandbox.fs.writeFiles(\n        Object.entries(options.initialFiles).map(([path, content]) => ({\n          path,\n          content,\n        }))\n      );\n    }\n\n    return { sandbox };\n  }\n\n  async get(sandboxId: string): Promise<DaytonaSandbox> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      return new DaytonaSandboxImpl(\n        sdkSandbox.id,\n        sdkSandbox,\n        this.defaultWorkspaceBase\n      );\n    } catch {\n      throw new SandboxNotFoundError(sandboxId);\n    }\n  }\n\n  async destroy(sandboxId: string): Promise<void> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      await this.client.delete(sdkSandbox);\n    } catch {\n      // Already gone\n    }\n  }\n}\n\n// Re-exports\nexport { DaytonaSandboxFileSystem } from \"./filesystem\";\nexport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n"]}
+{"version":3,"sources":["../../../../src/lib/sandbox/types.ts","../../../../src/adapters/sandbox/daytona/filesystem.ts","../../../../src/adapters/sandbox/daytona/index.ts"],"names":[],"mappings":";;;;;AA4XO,IAAM,wBAAA,GAAN,cAAuC,kBAAA,CAAmB;AAAA,EAC/D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA;AAAA,MACE,6BAA6B,SAAS,CAAA,CAAA;AAAA,MACtC,0BAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF,CAAA;AAEO,IAAM,oBAAA,GAAN,cAAmC,kBAAA,CAAmB;AAAA,EAC3D,YAAY,SAAA,EAAmB;AAC7B,IAAA,KAAA,CAAM,CAAA,mBAAA,EAAsB,SAAS,CAAA,CAAA,EAAI,sBAAA,EAAwB,IAAI,CAAA;AAAA,EACvE;AACF,CAAA;AC1XO,IAAM,2BAAN,MAA4D;AAAA,EAGjE,WAAA,CACU,OAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAFQ,IAAA,IAAA,CAAA,OAAA,GAAA,OAAA;AAGR,IAAA,IAAA,CAAK,aAAA,GAAgB,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,aAAa,CAAA;AAAA,EACvD;AAAA,EAJU,OAAA;AAAA,EAHD,aAAA;AAAA,EASD,cAAc,IAAA,EAAsB;AAC1C,IAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,EAAe,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAc,iBAAiB,aAAA,EAAwC;AACrE,IAAA,MAAM,SAAS,IAAA,CAAK,aAAA,KAAkB,MAAM,GAAA,GAAM,CAAA,EAAG,KAAK,aAAa,CAAA,CAAA,CAAA;AACvE,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,KAAA,MAAW,KAAK,aAAA,EAAe;AAC7B,MAAA,IAAI,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA;AACzB,MAAA,OAAO,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG;AAC7B,QAAA,IAAA,CAAK,IAAI,GAAG,CAAA;AACZ,QAAA,GAAA,GAAM,KAAA,CAAM,QAAQ,GAAG,CAAA;AAAA,MACzB;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,CAAC,GAAG,IAAI,CAAA,CAAE,IAAA;AAAA,MACvB,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE,MAAA,GAAS,CAAA,CAAE,KAAA,CAAM,GAAG,CAAA,CAAE;AAAA,KAC/C;AACA,IAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,KAAK,KAAK,CAAA;AAAA,MAC/C,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,IAAA,EAA+B;AAC5C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,GAAA,CAAI,SAAS,OAAO,CAAA;AAAA,EAC7B;AAAA,EAEA,MAAM,eAAe,IAAA,EAAmC;AACtD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AACnD,IAAA,OAAO,IAAI,UAAA,CAAW,GAAA,CAAI,QAAQ,GAAA,CAAI,UAAA,EAAY,IAAI,UAAU,CAAA;AAAA,EAClE;AAAA,EAEA,MAAM,SAAA,CAAU,IAAA,EAAc,OAAA,EAA6C;AACzE,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,GAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GACf,MAAA,CAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAC5B,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA;AACzB,IAAA,MAAM,IAAA,CAAK,gBAAA,CAAiB,CAAC,IAAI,CAAC,CAAA;AAClC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,KAAK,IAAI,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,WACJ,KAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MAChC,MAAA,EAAQ,MAAA,CAAO,IAAA,CAAK,CAAA,CAAE,OAAO,CAAA;AAAA,MAC7B,WAAA,EAAa,IAAA,CAAK,aAAA,CAAc,CAAA,CAAE,IAAI;AAAA,KACxC,CAAE,CAAA;AACF,IAAA,MAAM,IAAA,CAAK,iBAAiB,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,WAAW,CAAC,CAAA;AAC7D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,WAAA,CAAY,OAAO,CAAA;AAAA,EAC3C;AAAA,EAEA,MAAM,UAAA,CAAW,IAAA,EAAc,OAAA,EAA6C;AAC1E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,aAAa,IAAI,CAAA;AAAA,IACpD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA,CAAK,SAAA,CAAU,IAAA,EAAM,OAAO,CAAA;AAAA,IACrC;AAEA,IAAA,MAAM,QAAA,GACJ,OAAO,OAAA,KAAY,QAAA,GAAW,OAAO,IAAA,CAAK,OAAA,EAAS,OAAO,CAAA,GAAI,OAAA;AAChE,IAAA,MAAM,MAAA,GAAS,OAAO,MAAA,CAAO,CAAC,UAAU,MAAA,CAAO,IAAA,CAAK,QAAQ,CAAC,CAAC,CAAA;AAC9D,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,QAAQ,IAAI,CAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,OAAO,IAAA,EAAgC;AAC3C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,cAAA,CAAe,IAAI,CAAA;AACzC,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,IAAA,EAAiC;AAC1C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,IAAI,CAAA;AACtD,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,CAAC,IAAA,CAAK,KAAA;AAAA,MACd,aAAa,IAAA,CAAK,KAAA;AAAA,MAClB,cAAA,EAAgB,KAAA;AAAA,MAChB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,KAAA,EAAO,IAAI,IAAA,CAAK,IAAA,CAAK,OAAO;AAAA,KAC9B;AAAA,EACF;AAAA,EAEA,MAAM,KAAA,CAAM,IAAA,EAAc,QAAA,EAAmD;AAC3E,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,YAAA,CAAa,MAAM,KAAK,CAAA;AAAA,EAChD;AAAA,EAEA,MAAM,QAAQ,IAAA,EAAiC;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,IAAI,CAAA;AAAA,EAClC;AAAA,EAEA,MAAM,qBAAqB,IAAA,EAAsC;AAC/D,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,MAAM,UAAU,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,UAAU,IAAI,CAAA;AACpD,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,MACzB,MAAM,CAAA,CAAE,IAAA;AAAA,MACR,MAAA,EAAQ,CAAC,CAAA,CAAE,KAAA;AAAA,MACX,aAAa,CAAA,CAAE,KAAA;AAAA,MACf,cAAA,EAAgB;AAAA,KAClB,CAAE,CAAA;AAAA,EACJ;AAAA,EAEA,MAAM,EAAA,CACJ,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACpC,IAAA,IAAI;AACF,MAAA,MAAM,KAAK,OAAA,CAAQ,EAAA,CAAG,UAAA,CAAW,IAAA,EAAM,SAAS,SAAS,CAAA;AAAA,IAC3D,SAAS,GAAA,EAAK;AACZ,MAAA,IAAI,CAAC,OAAA,EAAS,KAAA,EAAO,MAAM,GAAA;AAAA,IAC7B;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CACJ,GAAA,EACA,IAAA,EACA,OAAA,EACe;AACf,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,OAAO,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,eAAe,OAAO,CAAA;AACzD,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,IAAI,CAAC,SAAS,SAAA,EAAW;AACvB,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,wCAAA,EAA2C,GAAG,CAAA,CAAE,CAAA;AAAA,MAClE;AACA,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,OAAA,EAAU,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OACjC;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,IAAA,CAAK,QAAQ,OAAA,CAAQ,cAAA;AAAA,QACzB,CAAA,IAAA,EAAO,OAAO,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,OAC9B;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,EAAA,CAAG,GAAA,EAAa,IAAA,EAA6B;AACjD,IAAA,MAAM,OAAA,GAAU,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,aAAA,CAAc,IAAI,CAAA;AACxC,IAAA,MAAM,IAAA,CAAK,OAAA,CAAQ,EAAA,CAAG,SAAA,CAAU,SAAS,QAAQ,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,SAAS,KAAA,EAAgC;AAC7C,IAAA,MAAM,IAAI,yBAAyB,UAAU,CAAA;AAAA,EAC/C;AAAA,EAEA,WAAA,CAAY,MAAc,IAAA,EAAsB;AAC9C,IAAA,OAAO,MAAM,OAAA,CAAQ,IAAA,CAAK,aAAA,CAAc,IAAI,GAAG,IAAI,CAAA;AAAA,EACrD;AACF;;;ACzKA,IAAM,qBAAN,MAA4C;AAAA,EAS1C,WAAA,CACW,EAAA,EACD,UAAA,EACR,aAAA,GAAgB,eAAA,EAChB;AAHS,IAAA,IAAA,CAAA,EAAA,GAAA,EAAA;AACD,IAAA,IAAA,CAAA,UAAA,GAAA,UAAA;AAGR,IAAA,IAAA,CAAK,EAAA,GAAK,IAAI,wBAAA,CAAyB,UAAA,EAAY,aAAa,CAAA;AAAA,EAClE;AAAA,EALW,EAAA;AAAA,EACD,UAAA;AAAA,EAVD,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EAES,EAAA;AAAA,EAUT,MAAM,IAAA,CAAK,OAAA,EAAiB,OAAA,EAA4C;AACtE,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,UAAA,CAAW,OAAA,CAAQ,cAAA;AAAA,MAC7C,OAAA;AAAA,MACA,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS,GAAA;AAAA,MACT,OAAA,EAAS;AAAA,KACX;AAEA,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,SAAS,QAAA,IAAY,CAAA;AAAA,MAC/B,MAAA,EAAQ,SAAS,MAAA,IAAU,EAAA;AAAA,MAC3B,MAAA,EAAQ;AAAA,KACV;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,MAAM,IAAA,CAAK,UAAA,CAAW,MAAA,CAAO,EAAE,CAAA;AAAA,EACjC;AACF,CAAA;AAYA,IAAM,eAAe,EAAC;AAUf,IAAM,yBAAN,MAGP;AAAA,EACW,EAAA,GAAK,SAAA;AAAA,EACL,YAAA,GAAoC;AAAA,IAC3C,UAAA,EAAY,IAAA;AAAA,IACZ,SAAA,EAAW,IAAA;AAAA,IACX,WAAA,EAAa;AAAA,GACf;AAAA,EACS,wBAAkD,IAAI,GAAA;AAAA,IAC7D;AAAA,GACF;AAAA,EAEQ,MAAA;AAAA,EACS,oBAAA;AAAA,EAEjB,YAAY,MAAA,EAA+B;AACzC,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,OAAA,CAAQ,MAAM,CAAA;AAChC,IAAA,IAAA,CAAK,oBAAA,GAAuB,QAAQ,aAAA,IAAiB,eAAA;AAAA,EACvD;AAAA,EAEA,MAAM,OACJ,OAAA,EAC8B;AAC9B,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA;AAAA,MACnC;AAAA,QACE,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,UAAU,OAAA,EAAS,QAAA;AAAA,QACnB,SAAS,OAAA,EAAS,GAAA;AAAA,QAClB,QAAQ,OAAA,EAAS,MAAA;AAAA,QACjB,kBAAkB,OAAA,EAAS,gBAAA;AAAA,QAC3B,qBAAqB,OAAA,EAAS,mBAAA;AAAA,QAC9B,oBAAoB,OAAA,EAAS;AAAA,OAC/B;AAAA,MACA,EAAE,OAAA,EAAS,OAAA,EAAS,OAAA,IAAW,EAAA;AAAG,KACpC;AAEA,IAAA,MAAM,aAAA,GAAgB,OAAA,EAAS,aAAA,IAAiB,IAAA,CAAK,oBAAA;AAErD,IAAA,MAAM,UAAU,IAAI,kBAAA;AAAA,MAClB,UAAA,CAAW,EAAA;AAAA,MACX,UAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,SAAS,YAAA,EAAc;AACzB,MAAA,MAAM,QAAQ,EAAA,CAAG,UAAA;AAAA,QACf,MAAA,CAAO,OAAA,CAAQ,OAAA,CAAQ,YAAY,CAAA,CAAE,IAAI,CAAC,CAAC,IAAA,EAAM,OAAO,CAAA,MAAO;AAAA,UAC7D,IAAA;AAAA,UACA;AAAA,SACF,CAAE;AAAA,OACJ;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,OAAA,EAAQ;AAAA,EACnB;AAAA,EAEA,MAAM,IAAI,SAAA,EAA4C;AACpD,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,OAAO,IAAI,kBAAA;AAAA,QACT,UAAA,CAAW,EAAA;AAAA,QACX,UAAA;AAAA,QACA,IAAA,CAAK;AAAA,OACP;AAAA,IACF,CAAA,CAAA,MAAQ;AACN,MAAA,MAAM,IAAI,qBAAqB,SAAS,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,MAAM,QAAQ,SAAA,EAAkC;AAC9C,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,MAAA,CAAO,IAAI,SAAS,CAAA;AAClD,MAAA,MAAM,IAAA,CAAK,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA;AAAA,IACrC,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AACF","file":"index.js","sourcesContent":["// ============================================================================\n// Sandbox Filesystem\n// ============================================================================\n\nexport interface DirentEntry {\n  name: string;\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n}\n\nexport interface FileStat {\n  isFile: boolean;\n  isDirectory: boolean;\n  isSymbolicLink: boolean;\n  size: number;\n  mtime: Date;\n}\n\n// ============================================================================\n// Network & lifecycle\n// ============================================================================\n\nexport interface SandboxNetworkConfig {\n  allowOut?: string[];\n  denyOut?: string[];\n  allowPublicTraffic?: boolean;\n}\n\nexport interface SandboxLifecycleConfig {\n  onTimeout: \"kill\" | \"pause\";\n  autoResume?: boolean;\n}\n\n/**\n * Provider-agnostic filesystem interface.\n *\n * Implementations that don't support a method should throw\n * {@link SandboxNotSupportedError}.\n */\nexport interface SandboxFileSystem {\n  /** Base directory used when resolving relative paths. */\n  readonly workspaceBase: string;\n  readFile(path: string): Promise<string>;\n  readFileBuffer(path: string): Promise<Uint8Array>;\n  writeFile(path: string, content: string | Uint8Array): Promise<void>;\n  appendFile(path: string, content: string | Uint8Array): Promise<void>;\n  exists(path: string): Promise<boolean>;\n  stat(path: string): Promise<FileStat>;\n  mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;\n  readdir(path: string): Promise<string[]>;\n  readdirWithFileTypes(path: string): Promise<DirentEntry[]>;\n  rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void>;\n  cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void>;\n  mv(src: string, dest: string): Promise<void>;\n  readlink(path: string): Promise<string>;\n  resolvePath(base: string, path: string): string;\n}\n\n// ============================================================================\n// Execution\n// ============================================================================\n\nexport interface ExecOptions {\n  timeout?: number;\n  cwd?: string;\n  env?: Record<string, string>;\n}\n\nexport interface ExecResult {\n  exitCode: number;\n  stdout: string;\n  stderr: string;\n}\n\n// ============================================================================\n// Capabilities\n// ============================================================================\n\n/**\n * Runtime capability flags carried by a {@link Sandbox} instance.\n *\n * These are an orthogonal mechanism to the type-level\n * {@link SandboxCapability} union: this flag bag is for runtime\n * introspection (\"does the sandbox support a filesystem?\") whereas\n * {@link SandboxCapability} narrows the type-level provider/ops contract.\n */\nexport interface SandboxCapabilities {\n  /** Sandbox supports filesystem operations */\n  filesystem: boolean;\n  /** Sandbox supports shell/command execution */\n  execution: boolean;\n  /** Sandbox state can be persisted and restored */\n  persistence: boolean;\n}\n\n/**\n * Type-level capability vocabulary for {@link SandboxProvider} and\n * {@link SandboxOps}. Adapters declare the subset they actually support; the\n * conditional types on each contract gate the corresponding methods so\n * unsupported calls become a compile-time error rather than a runtime\n * {@link SandboxNotSupportedError}.\n *\n * `pause` and `resume` are split because some adapters might support one\n * direction without the other. The `snapshot` cap covers both `snapshot()`\n * and `deleteSnapshot()` since they always travel together in practice.\n */\nexport type SandboxCapability =\n  | \"pause\"\n  | \"resume\"\n  | \"snapshot\"\n  | \"restore\"\n  | \"fork\";\n\n// ============================================================================\n// Sandbox\n// ============================================================================\n\nexport interface Sandbox {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  readonly fs: SandboxFileSystem;\n\n  exec(command: string, options?: ExecOptions): Promise<ExecResult>;\n  destroy(): Promise<void>;\n}\n\n// ============================================================================\n// Snapshots\n// ============================================================================\n\nexport interface SandboxSnapshot {\n  sandboxId: string;\n  providerId: string;\n  /** Provider-specific serialised state */\n  data: unknown;\n  createdAt: string;\n}\n\n// ============================================================================\n// Provider\n// ============================================================================\n\nexport interface SandboxCreateOptions {\n  /** Preferred sandbox ID (provider may ignore) */\n  id?: string;\n  /** Seed the filesystem with these files */\n  initialFiles?: Record<string, string | Uint8Array>;\n  /** Environment variables available inside the sandbox */\n  env?: Record<string, string>;\n  /** Key-value metadata surfaced via provider list/query APIs */\n  metadata?: Record<string, string>;\n  /** Sandbox idle timeout in milliseconds */\n  timeoutMs?: number;\n  /** Enable or disable outbound internet access */\n  allowInternetAccess?: boolean;\n  /** Outbound network allow/deny rules */\n  network?: SandboxNetworkConfig;\n  /** Sandbox timeout behaviour */\n  lifecycle?: SandboxLifecycleConfig;\n}\n\nexport interface SandboxCreateResult {\n  sandbox: Sandbox;\n}\n\n/**\n * Internal helper: drop keys whose value is `never` from an object type.\n *\n * Used by the capability-gated contracts below so that an absent capability\n * removes the corresponding key entirely, instead of leaving a required\n * field with type `never` (which would make implementations impossible).\n */\ntype OmitNever<T> = {\n  [K in keyof T as [T[K]] extends [never] ? never : K]: T[K];\n};\n\n/**\n * Capability-gated provider lifecycle methods.\n *\n * Each field becomes `never` when its capability is absent from `TCaps`;\n * the wrapping `OmitNever` removes those keys entirely, so the method\n * isn't part of the type surface for adapters that don't support it.\n */\ntype SandboxProviderCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pause: \"pause\" extends TCaps\n    ? (sandboxId: string, ttlSeconds?: number) => Promise<void>\n    : never;\n  resume: \"resume\" extends TCaps ? (sandboxId: string) => Promise<void> : never;\n  snapshot: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restore: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<TSandbox>\n    : never;\n  fork: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<TSandbox>\n    : never;\n}>;\n\n/**\n * Always-present provider lifecycle methods. These do not depend on the\n * capability set and are required by every adapter.\n */\ninterface SandboxProviderBase<\n  TOptions extends SandboxCreateOptions,\n  TSandbox extends Sandbox,\n  TCaps extends SandboxCapability,\n> {\n  readonly id: string;\n  readonly capabilities: SandboxCapabilities;\n  /**\n   * Runtime-introspectable list of supported capabilities.\n   *\n   * Constrained to `ReadonlySet<TCaps & SandboxCapability>` so the runtime\n   * set cannot include capabilities not declared at the type level — a\n   * provider typed as `SandboxProvider<…, never>` cannot ship a runtime\n   * set that contains `\"pause\"`, etc.\n   *\n   * The other direction (type declares a cap, runtime set omits it)\n   * cannot be enforced by TypeScript alone; adapters should derive both\n   * `TCaps` and the runtime set from the same `as const` array (see\n   * `SandboxManager`'s constructor-time consistency check) so the two\n   * surfaces cannot drift.\n   */\n  readonly supportedCapabilities: ReadonlySet<TCaps & SandboxCapability>;\n\n  create(options?: TOptions): Promise<SandboxCreateResult>;\n  get(sandboxId: string): Promise<TSandbox>;\n  destroy(sandboxId: string): Promise<void>;\n}\n\n/**\n * Provider-side sandbox lifecycle contract.\n *\n * Generic over an optional capability set (`TCaps`). Each capability gates\n * a specific method: when the cap is absent the corresponding key is\n * **removed** from the type entirely, so calling it produces a TypeScript\n * error at the call site instead of a runtime\n * {@link SandboxNotSupportedError}.\n *\n * The default `TCaps = SandboxCapability` resolves to the full union, so\n * existing usages that only pass `TOptions` / `TSandbox` continue to see\n * the full method surface (backwards compatible).\n *\n * Adapters that don't support a method should narrow `TCaps` accordingly:\n *\n * - In-memory / E2B: `SandboxCapability` (default — all caps present).\n * - Bedrock Code Interpreter / Daytona: `never` (only base ops).\n * - Bedrock AgentCore Runtime: `\"pause\" | \"resume\"`.\n */\nexport type SandboxProvider<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TSandbox extends Sandbox = Sandbox,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxProviderBase<TOptions, TSandbox, TCaps> &\n  SandboxProviderCapMethods<TOptions, TSandbox, TCaps>;\n\n// ============================================================================\n// SandboxOps — workflow-side activity interface (like ThreadOps)\n// ============================================================================\n\n/**\n * Capability-gated workflow-side methods. Mirrors the provider's gating:\n * keys whose capability is absent from `TCaps` are removed from the type.\n */\ntype SandboxOpsCapMethods<\n  TOptions extends SandboxCreateOptions,\n  TCaps extends SandboxCapability,\n> = OmitNever<{\n  pauseSandbox: \"pause\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  resumeSandbox: \"resume\" extends TCaps\n    ? (sandboxId: string) => Promise<void>\n    : never;\n  snapshotSandbox: \"snapshot\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<SandboxSnapshot>\n    : never;\n  deleteSandboxSnapshot: \"snapshot\" extends TCaps\n    ? (snapshot: SandboxSnapshot) => Promise<void>\n    : never;\n  restoreSandbox: \"restore\" extends TCaps\n    ? (snapshot: SandboxSnapshot, options?: TOptions) => Promise<string>\n    : never;\n  forkSandbox: \"fork\" extends TCaps\n    ? (sandboxId: string, options?: TOptions) => Promise<string>\n    : never;\n}>;\n\n/**\n * Always-present workflow-side lifecycle methods.\n */\ninterface SandboxOpsBase<\n  TOptions extends SandboxCreateOptions,\n  TCtx,\n> {\n  createSandbox(\n    options?: TOptions,\n    ctx?: TCtx\n  ): Promise<{ sandboxId: string } | null>;\n  destroySandbox(sandboxId: string): Promise<void>;\n}\n\n/**\n * Workflow-side counterpart to {@link SandboxProvider}. Exposed as a set of\n * Temporal activities and consumed by `createSession`'s `sandboxOps` field\n * and by `defineSubagent`'s `sandbox.proxy`.\n *\n * Generic over a capability set (`TCaps`) — same semantics as the provider:\n * keys whose capability is absent are removed from the type, so calling\n * them is a TypeScript error rather than a runtime throw. The default\n * `TCaps = SandboxCapability` keeps the full method surface for existing\n * consumers.\n */\nexport type SandboxOps<\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = SandboxOpsBase<TOptions, TCtx> & SandboxOpsCapMethods<TOptions, TCaps>;\n\n/**\n * Maps generic {@link SandboxOps} method names to adapter-prefixed names.\n *\n * Inherits the capability gating from {@link SandboxOps}: when `TCaps` omits\n * a capability the prefixed key carries the `never` type so call sites are\n * type-protected.\n *\n * @example\n * ```typescript\n * type E2bOps = PrefixedSandboxOps<\"e2b\">;\n * // → { e2bCreateSandbox, e2bDestroySandbox, e2bSnapshotSandbox, … }\n * ```\n */\nexport type PrefixedSandboxOps<\n  TPrefix extends string,\n  TOptions extends SandboxCreateOptions = SandboxCreateOptions,\n  TCtx = unknown,\n  TCaps extends SandboxCapability = SandboxCapability,\n> = {\n  [K in keyof SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  > as `${TPrefix}${Capitalize<K & string>}`]: SandboxOps<\n    TOptions,\n    TCtx,\n    TCaps\n  >[K];\n};\n\n// ============================================================================\n// Errors\n// ============================================================================\n\nimport { ApplicationFailure } from \"@temporalio/common\";\n\n/**\n * Thrown by adapters that still surface an unsupported method at runtime.\n *\n * After the capability-generic refactor most adapters drop their\n * unsupported methods entirely so the type system rejects them at call\n * sites. This symbol is still exported so consumers running against older\n * adapter versions can keep their backwards-compatible error-handling\n * paths until they finish migrating.\n */\nexport class SandboxNotSupportedError extends ApplicationFailure {\n  constructor(operation: string) {\n    super(\n      `Sandbox does not support: ${operation}`,\n      \"SandboxNotSupportedError\",\n      true\n    );\n  }\n}\n\nexport class SandboxNotFoundError extends ApplicationFailure {\n  constructor(sandboxId: string) {\n    super(`Sandbox not found: ${sandboxId}`, \"SandboxNotFoundError\", true);\n  }\n}\n","import type { Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  SandboxFileSystem,\n  DirentEntry,\n  FileStat,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotSupportedError } from \"../../../lib/sandbox/types\";\nimport { posix } from \"node:path\";\n\n/**\n * {@link SandboxFileSystem} backed by a Daytona SDK sandbox.\n *\n * Maps zeitlich's filesystem interface to Daytona's `sandbox.fs` and\n * `sandbox.process` APIs. Operations that have no direct Daytona equivalent\n * (e.g. `appendFile`, `cp`) are composed from primitives.\n */\nexport class DaytonaSandboxFileSystem implements SandboxFileSystem {\n  readonly workspaceBase: string;\n\n  constructor(\n    private sandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.workspaceBase = posix.resolve(\"/\", workspaceBase);\n  }\n\n  private normalisePath(path: string): string {\n    return posix.resolve(this.workspaceBase, path);\n  }\n\n  private async ensureParentDirs(absolutePaths: string[]): Promise<void> {\n    const prefix = this.workspaceBase === \"/\" ? \"/\" : `${this.workspaceBase}/`;\n    const dirs = new Set<string>();\n    for (const p of absolutePaths) {\n      let dir = posix.dirname(p);\n      while (dir.startsWith(prefix)) {\n        dirs.add(dir);\n        dir = posix.dirname(dir);\n      }\n    }\n    const sorted = [...dirs].sort(\n      (a, b) => a.split(\"/\").length - b.split(\"/\").length\n    );\n    for (const dir of sorted) {\n      try {\n        await this.sandbox.fs.createFolder(dir, \"755\");\n      } catch {\n        // Folder already exists — Daytona's createFolder throws in that case.\n      }\n    }\n  }\n\n  async readFile(path: string): Promise<string> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return buf.toString(\"utf-8\");\n  }\n\n  async readFileBuffer(path: string): Promise<Uint8Array> {\n    const norm = this.normalisePath(path);\n    const buf = await this.sandbox.fs.downloadFile(norm);\n    return new Uint8Array(buf.buffer, buf.byteOffset, buf.byteLength);\n  }\n\n  async writeFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    const buf =\n      typeof content === \"string\"\n        ? Buffer.from(content, \"utf-8\")\n        : Buffer.from(content);\n    await this.ensureParentDirs([norm]);\n    await this.sandbox.fs.uploadFile(buf, norm);\n  }\n\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array }[]\n  ): Promise<void> {\n    const uploads = files.map((f) => ({\n      source: Buffer.from(f.content),\n      destination: this.normalisePath(f.path),\n    }));\n    await this.ensureParentDirs(uploads.map((u) => u.destination));\n    await this.sandbox.fs.uploadFiles(uploads);\n  }\n\n  async appendFile(path: string, content: string | Uint8Array): Promise<void> {\n    const norm = this.normalisePath(path);\n    let existing: Buffer;\n    try {\n      existing = await this.sandbox.fs.downloadFile(norm);\n    } catch {\n      return this.writeFile(norm, content);\n    }\n\n    const addition =\n      typeof content === \"string\" ? Buffer.from(content, \"utf-8\") : content;\n    const merged = Buffer.concat([existing, Buffer.from(addition)]);\n    await this.sandbox.fs.uploadFile(merged, norm);\n  }\n\n  async exists(path: string): Promise<boolean> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.getFileDetails(norm);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  async stat(path: string): Promise<FileStat> {\n    const norm = this.normalisePath(path);\n    const info = await this.sandbox.fs.getFileDetails(norm);\n    return {\n      isFile: !info.isDir,\n      isDirectory: info.isDir,\n      isSymbolicLink: false,\n      size: info.size,\n      mtime: new Date(info.modTime),\n    };\n  }\n\n  async mkdir(path: string, _options?: { recursive?: boolean }): Promise<void> {\n    const norm = this.normalisePath(path);\n    await this.sandbox.fs.createFolder(norm, \"755\");\n  }\n\n  async readdir(path: string): Promise<string[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => e.name);\n  }\n\n  async readdirWithFileTypes(path: string): Promise<DirentEntry[]> {\n    const norm = this.normalisePath(path);\n    const entries = await this.sandbox.fs.listFiles(norm);\n    return entries.map((e) => ({\n      name: e.name,\n      isFile: !e.isDir,\n      isDirectory: e.isDir,\n      isSymbolicLink: false,\n    }));\n  }\n\n  async rm(\n    path: string,\n    options?: { recursive?: boolean; force?: boolean }\n  ): Promise<void> {\n    const norm = this.normalisePath(path);\n    try {\n      await this.sandbox.fs.deleteFile(norm, options?.recursive);\n    } catch (err) {\n      if (!options?.force) throw err;\n    }\n  }\n\n  async cp(\n    src: string,\n    dest: string,\n    options?: { recursive?: boolean }\n  ): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    const info = await this.sandbox.fs.getFileDetails(normSrc);\n    if (info.isDir) {\n      if (!options?.recursive) {\n        throw new Error(`EISDIR: is a directory (use recursive): ${src}`);\n      }\n      await this.sandbox.process.executeCommand(\n        `cp -r \"${normSrc}\" \"${normDest}\"`\n      );\n    } else {\n      await this.sandbox.process.executeCommand(\n        `cp \"${normSrc}\" \"${normDest}\"`\n      );\n    }\n  }\n\n  async mv(src: string, dest: string): Promise<void> {\n    const normSrc = this.normalisePath(src);\n    const normDest = this.normalisePath(dest);\n    await this.sandbox.fs.moveFiles(normSrc, normDest);\n  }\n\n  async readlink(_path: string): Promise<string> {\n    throw new SandboxNotSupportedError(\"readlink\");\n  }\n\n  resolvePath(base: string, path: string): string {\n    return posix.resolve(this.normalisePath(base), path);\n  }\n}\n","import { Daytona, type Sandbox as DaytonaSdkSandbox } from \"@daytonaio/sdk\";\nimport type {\n  Sandbox,\n  SandboxCapabilities,\n  SandboxCapability,\n  SandboxCreateResult,\n  SandboxProvider,\n  ExecOptions,\n  ExecResult,\n} from \"../../../lib/sandbox/types\";\nimport { SandboxNotFoundError } from \"../../../lib/sandbox/types\";\nimport { DaytonaSandboxFileSystem } from \"./filesystem\";\nimport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n\n// ============================================================================\n// DaytonaSandbox\n// ============================================================================\n\nclass DaytonaSandboxImpl implements Sandbox {\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n\n  readonly fs: DaytonaSandboxFileSystem;\n\n  constructor(\n    readonly id: string,\n    private sdkSandbox: DaytonaSdkSandbox,\n    workspaceBase = \"/home/daytona\"\n  ) {\n    this.fs = new DaytonaSandboxFileSystem(sdkSandbox, workspaceBase);\n  }\n\n  async exec(command: string, options?: ExecOptions): Promise<ExecResult> {\n    const response = await this.sdkSandbox.process.executeCommand(\n      command,\n      options?.cwd,\n      options?.env,\n      options?.timeout\n    );\n\n    return {\n      exitCode: response.exitCode ?? 0,\n      stdout: response.result ?? \"\",\n      stderr: \"\",\n    };\n  }\n\n  async destroy(): Promise<void> {\n    await this.sdkSandbox.delete(60);\n  }\n}\n\n// ============================================================================\n// DaytonaSandboxProvider\n// ============================================================================\n\n/**\n * Single source of truth for the Daytona adapter's capability set. Daytona\n * implements only base lifecycle (`create` / `get` / `destroy`); both the\n * type-level `TCaps` (`never`) and the runtime `supportedCapabilities`\n * set fall out of this empty array, so the two surfaces cannot drift.\n */\nconst DAYTONA_CAPS = [] as const satisfies readonly SandboxCapability[];\ntype DaytonaCaps = (typeof DAYTONA_CAPS)[number]; // → never\n\n/**\n * Daytona implements only base sandbox lifecycle (`create` / `get` /\n * `destroy`). Snapshot, restore, fork, pause, and resume are not supported\n * — the type-level capability set is `never`, so calling any of those\n * methods on a Daytona provider, manager, or `SandboxOps` proxy is a\n * compile-time TypeScript error.\n */\nexport class DaytonaSandboxProvider\n  implements\n    SandboxProvider<DaytonaSandboxCreateOptions, DaytonaSandbox, DaytonaCaps>\n{\n  readonly id = \"daytona\";\n  readonly capabilities: SandboxCapabilities = {\n    filesystem: true,\n    execution: true,\n    persistence: false,\n  };\n  readonly supportedCapabilities: ReadonlySet<DaytonaCaps> = new Set(\n    DAYTONA_CAPS\n  );\n\n  private client: Daytona;\n  private readonly defaultWorkspaceBase: string;\n\n  constructor(config?: DaytonaSandboxConfig) {\n    this.client = new Daytona(config);\n    this.defaultWorkspaceBase = config?.workspaceBase ?? \"/home/daytona\";\n  }\n\n  async create(\n    options?: DaytonaSandboxCreateOptions\n  ): Promise<SandboxCreateResult> {\n    const sdkSandbox = await this.client.create(\n      {\n        language: options?.language,\n        snapshot: options?.snapshot,\n        envVars: options?.env,\n        labels: options?.labels,\n        autoStopInterval: options?.autoStopInterval,\n        autoArchiveInterval: options?.autoArchiveInterval,\n        autoDeleteInterval: options?.autoDeleteInterval,\n      },\n      { timeout: options?.timeout ?? 60 }\n    );\n\n    const workspaceBase = options?.workspaceBase ?? this.defaultWorkspaceBase;\n\n    const sandbox = new DaytonaSandboxImpl(\n      sdkSandbox.id,\n      sdkSandbox,\n      workspaceBase\n    );\n\n    if (options?.initialFiles) {\n      await sandbox.fs.writeFiles(\n        Object.entries(options.initialFiles).map(([path, content]) => ({\n          path,\n          content,\n        }))\n      );\n    }\n\n    return { sandbox };\n  }\n\n  async get(sandboxId: string): Promise<DaytonaSandbox> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      return new DaytonaSandboxImpl(\n        sdkSandbox.id,\n        sdkSandbox,\n        this.defaultWorkspaceBase\n      );\n    } catch {\n      throw new SandboxNotFoundError(sandboxId);\n    }\n  }\n\n  async destroy(sandboxId: string): Promise<void> {\n    try {\n      const sdkSandbox = await this.client.get(sandboxId);\n      await this.client.delete(sdkSandbox);\n    } catch {\n      // Already gone\n    }\n  }\n}\n\n// Re-exports\nexport { DaytonaSandboxFileSystem } from \"./filesystem\";\nexport type {\n  DaytonaSandbox,\n  DaytonaSandboxConfig,\n  DaytonaSandboxCreateOptions,\n} from \"./types\";\n"]}

package/dist/adapters/sandbox/daytona/workflow.d.cts

@@ -1,6 +1,6 @@
 import { proxyActivities } from '@temporalio/workflow';
-import { S as SandboxOps } from '../../../types-CJ7tCdl6.cjs';
-import { D as DaytonaSandboxCreateOptions } from '../../../types-CjY93AWZ.cjs';
+import { c as SandboxOps } from '../../../types-D8W5TnSa.cjs';
+import { D as DaytonaSandboxCreateOptions } from '../../../types-OEN1xrFg.cjs';
 import '@temporalio/common';
 import '@daytonaio/sdk';
 

package/dist/adapters/sandbox/daytona/workflow.d.ts

@@ -1,6 +1,6 @@
 import { proxyActivities } from '@temporalio/workflow';
-import { S as SandboxOps } from '../../../types-CJ7tCdl6.js';
-import { D as DaytonaSandboxCreateOptions } from '../../../types-gVa5XCWD.js';
+import { c as SandboxOps } from '../../../types-D8W5TnSa.js';
+import { D as DaytonaSandboxCreateOptions } from '../../../types-BQvXWcft.js';
 import '@temporalio/common';
 import '@daytonaio/sdk';