@openai/agents-core/dist/sandbox/internal.js

The OpenAI Agents SDK is a lightweight yet powerful framework for building multi-agent workflows.

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.replaceManifestMountCredentialExposurePolicy = exports.copyManifestMountCredentialExposurePolicy = exports.stableJsonStringify = exports.withExclusiveSandboxStateInspection = exports.withExclusiveSandboxManifestMutation = exports.validateMountEnvironmentCredentialBoundaries = exports.validateMountCredentialFileEffectivePaths = exports.validateMountCredentialBoundaries = exports.validateMountCredentialBoundariesAtEffectivePath = exports.sanitizeMountCredentialEnvironmentForPersistence = exports.resolveAndValidateMountEnvironment = exports.recordLiveMountCredentialAuthority = exports.markSandboxSessionStateUnsafe = exports.NON_RESUMABLE_MOUNT_AUTHORITY_KEY = exports.mountCredentialFileReferences = exports.mountCredentialEnvironmentForEntry = exports.manifestHasInContainerMounts = exports.isMountCredentialFileEnvironmentName = exports.isSandboxSessionStateUnsafe = exports.manifestHasNonResumableMountAuthority = exports.liveMountRuntimeAuthorityMatches = exports.liveMountEnvironmentAuthorityMatches = exports.liveMountCredentialAuthorityMatches = exports.configuredMountCredentialFields = exports.copyTrustedMountCredentialRebindProvenance = exports.copyValidatedMountEffectivePaths = exports.captureLiveMountRuntimeAuthority = exports.captureLiveMountEnvironmentAuthority = exports.captureLiveMountCredentialAuthorityIfAbsent = exports.captureLiveMountCredentialAuthority = exports.captureSandboxStateGeneration = exports.assertSandboxStateGenerationUnchanged = exports.assertSandboxSessionStateUsable = exports.assertMountCredentialsRebound = exports.assertLiveMountEnvironmentAuthorityMatches = exports.assertLiveMountCredentialAuthorityMatches = exports.assertExistingMountTopologyPreserved = exports.serializeManifestRecord = exports.serializeManifest = exports.serializeMountCredentialRedactionMetadata = exports.serializeHostPathGrantRedactionMetadata = exports.serializeEnvironmentForPersistence = exports.sanitizeEnvironmentForPersistence = exports.rebindPersistedMountCredentials = exports.mergeManifestDelta = exports.mergeManifestEntryDelta = exports.deserializeManifest = exports.deserializeHostPathGrantRedactionMetadata = exports.deserializeMountCredentialRedactionMetadata = exports.assertHostPathGrantsRebound = void 0;
exports.toUint8Array = exports.sniffImageMediaType = exports.MAX_VIEW_IMAGE_BYTES = exports.imageOutputFromBytes = exports.assertViewImageByteLength = exports.validateCredentialPair = exports.readStringArray = exports.readString = exports.readOptionalStringRecord = exports.readOptionalString = exports.readOptionalRecordArray = exports.readOptionalRecord = exports.readOptionalNumberArray = exports.readOptionalNumber = exports.readOptionalBoolean = exports.isStringRecord = exports.isRecord = exports.probeSandboxPathExists = exports.probeSandboxDirectoryExists = exports.isSandboxPathNotFoundError = exports.shellQuote = exports.serializeRuntimeEnvironmentForPersistence = exports.serializeManifestEnvironment = exports.resolveEnvironmentReferences = exports.rehydratePersistedEnvironmentForRuntime = exports.mergeStaticMaterializedEnvironment = exports.mergeMaterializedEnvironment = exports.materializeStaticEnvironment = exports.materializeEnvironment = exports.deserializePersistedEnvironmentForRuntime = exports.assertShellEnvironmentName = exports.relativePosixPathWithinRoot = exports.posixDirname = exports.normalizePosixPath = exports.isUnderPosixPath = exports.hasParentPathSegment = exports.hasEscapingParentPathSegment = exports.hasBackslashPathSeparator = exports.sandboxPathGrantHostPath = exports.relativeHostPathEscapesRootOrSelf = exports.relativeHostPathEscapesRoot = exports.isHostPathWithinRoot = exports.isHostPathStrictlyWithinRoot = exports.truncateOutput = exports.formatExecResponse = exports.elapsedSeconds = void 0;
var manifestPersistence_1 = require("./sandboxes/shared/manifestPersistence.js");
Object.defineProperty(exports, "assertHostPathGrantsRebound", { enumerable: true, get: function () { return manifestPersistence_1.assertHostPathGrantsRebound; } });
Object.defineProperty(exports, "deserializeMountCredentialRedactionMetadata", { enumerable: true, get: function () { return manifestPersistence_1.deserializeMountCredentialRedactionMetadata; } });
Object.defineProperty(exports, "deserializeHostPathGrantRedactionMetadata", { enumerable: true, get: function () { return manifestPersistence_1.deserializeHostPathGrantRedactionMetadata; } });
Object.defineProperty(exports, "deserializeManifest", { enumerable: true, get: function () { return manifestPersistence_1.deserializeManifest; } });
Object.defineProperty(exports, "mergeManifestEntryDelta", { enumerable: true, get: function () { return manifestPersistence_1.mergeManifestEntryDelta; } });
Object.defineProperty(exports, "mergeManifestDelta", { enumerable: true, get: function () { return manifestPersistence_1.mergeManifestDelta; } });
Object.defineProperty(exports, "rebindPersistedMountCredentials", { enumerable: true, get: function () { return manifestPersistence_1.rebindPersistedMountCredentials; } });
Object.defineProperty(exports, "sanitizeEnvironmentForPersistence", { enumerable: true, get: function () { return manifestPersistence_1.sanitizeEnvironmentForPersistence; } });
Object.defineProperty(exports, "serializeEnvironmentForPersistence", { enumerable: true, get: function () { return manifestPersistence_1.serializeEnvironmentForPersistence; } });
Object.defineProperty(exports, "serializeHostPathGrantRedactionMetadata", { enumerable: true, get: function () { return manifestPersistence_1.serializeHostPathGrantRedactionMetadata; } });
Object.defineProperty(exports, "serializeMountCredentialRedactionMetadata", { enumerable: true, get: function () { return manifestPersistence_1.serializeMountCredentialRedactionMetadata; } });
Object.defineProperty(exports, "serializeManifest", { enumerable: true, get: function () { return manifestPersistence_1.serializeManifest; } });
Object.defineProperty(exports, "serializeManifestRecord", { enumerable: true, get: function () { return manifestPersistence_1.serializeManifestRecord; } });
var mountSecurity_1 = require("./mountSecurity.js");
Object.defineProperty(exports, "assertExistingMountTopologyPreserved", { enumerable: true, get: function () { return mountSecurity_1.assertExistingMountTopologyPreserved; } });
Object.defineProperty(exports, "assertLiveMountCredentialAuthorityMatches", { enumerable: true, get: function () { return mountSecurity_1.assertLiveMountCredentialAuthorityMatches; } });
Object.defineProperty(exports, "assertLiveMountEnvironmentAuthorityMatches", { enumerable: true, get: function () { return mountSecurity_1.assertLiveMountEnvironmentAuthorityMatches; } });
Object.defineProperty(exports, "assertMountCredentialsRebound", { enumerable: true, get: function () { return mountSecurity_1.assertMountCredentialsRebound; } });
Object.defineProperty(exports, "assertSandboxSessionStateUsable", { enumerable: true, get: function () { return mountSecurity_1.assertSandboxSessionStateUsable; } });
Object.defineProperty(exports, "assertSandboxStateGenerationUnchanged", { enumerable: true, get: function () { return mountSecurity_1.assertSandboxStateGenerationUnchanged; } });
Object.defineProperty(exports, "captureSandboxStateGeneration", { enumerable: true, get: function () { return mountSecurity_1.captureSandboxStateGeneration; } });
Object.defineProperty(exports, "captureLiveMountCredentialAuthority", { enumerable: true, get: function () { return mountSecurity_1.captureLiveMountCredentialAuthority; } });
Object.defineProperty(exports, "captureLiveMountCredentialAuthorityIfAbsent", { enumerable: true, get: function () { return mountSecurity_1.captureLiveMountCredentialAuthorityIfAbsent; } });
Object.defineProperty(exports, "captureLiveMountEnvironmentAuthority", { enumerable: true, get: function () { return mountSecurity_1.captureLiveMountEnvironmentAuthority; } });
Object.defineProperty(exports, "captureLiveMountRuntimeAuthority", { enumerable: true, get: function () { return mountSecurity_1.captureLiveMountRuntimeAuthority; } });
Object.defineProperty(exports, "copyValidatedMountEffectivePaths", { enumerable: true, get: function () { return mountSecurity_1.copyValidatedMountEffectivePaths; } });
Object.defineProperty(exports, "copyTrustedMountCredentialRebindProvenance", { enumerable: true, get: function () { return mountSecurity_1.copyTrustedMountCredentialRebindProvenance; } });
Object.defineProperty(exports, "configuredMountCredentialFields", { enumerable: true, get: function () { return mountSecurity_1.configuredMountCredentialFields; } });
Object.defineProperty(exports, "liveMountCredentialAuthorityMatches", { enumerable: true, get: function () { return mountSecurity_1.liveMountCredentialAuthorityMatches; } });
Object.defineProperty(exports, "liveMountEnvironmentAuthorityMatches", { enumerable: true, get: function () { return mountSecurity_1.liveMountEnvironmentAuthorityMatches; } });
Object.defineProperty(exports, "liveMountRuntimeAuthorityMatches", { enumerable: true, get: function () { return mountSecurity_1.liveMountRuntimeAuthorityMatches; } });
Object.defineProperty(exports, "manifestHasNonResumableMountAuthority", { enumerable: true, get: function () { return mountSecurity_1.manifestHasNonResumableMountAuthority; } });
Object.defineProperty(exports, "isSandboxSessionStateUnsafe", { enumerable: true, get: function () { return mountSecurity_1.isSandboxSessionStateUnsafe; } });
Object.defineProperty(exports, "isMountCredentialFileEnvironmentName", { enumerable: true, get: function () { return mountSecurity_1.isMountCredentialFileEnvironmentName; } });
Object.defineProperty(exports, "manifestHasInContainerMounts", { enumerable: true, get: function () { return mountSecurity_1.manifestHasInContainerMounts; } });
Object.defineProperty(exports, "mountCredentialEnvironmentForEntry", { enumerable: true, get: function () { return mountSecurity_1.mountCredentialEnvironmentForEntry; } });
Object.defineProperty(exports, "mountCredentialFileReferences", { enumerable: true, get: function () { return mountSecurity_1.mountCredentialFileReferences; } });
Object.defineProperty(exports, "NON_RESUMABLE_MOUNT_AUTHORITY_KEY", { enumerable: true, get: function () { return mountSecurity_1.NON_RESUMABLE_MOUNT_AUTHORITY_KEY; } });
Object.defineProperty(exports, "markSandboxSessionStateUnsafe", { enumerable: true, get: function () { return mountSecurity_1.markSandboxSessionStateUnsafe; } });
Object.defineProperty(exports, "recordLiveMountCredentialAuthority", { enumerable: true, get: function () { return mountSecurity_1.recordLiveMountCredentialAuthority; } });
Object.defineProperty(exports, "resolveAndValidateMountEnvironment", { enumerable: true, get: function () { return mountSecurity_1.resolveAndValidateMountEnvironment; } });
Object.defineProperty(exports, "sanitizeMountCredentialEnvironmentForPersistence", { enumerable: true, get: function () { return mountSecurity_1.sanitizeMountCredentialEnvironmentForPersistence; } });
Object.defineProperty(exports, "validateMountCredentialBoundariesAtEffectivePath", { enumerable: true, get: function () { return mountSecurity_1.validateMountCredentialBoundariesAtEffectivePath; } });
Object.defineProperty(exports, "validateMountCredentialBoundaries", { enumerable: true, get: function () { return mountSecurity_1.validateMountCredentialBoundaries; } });
Object.defineProperty(exports, "validateMountCredentialFileEffectivePaths", { enumerable: true, get: function () { return mountSecurity_1.validateMountCredentialFileEffectivePaths; } });
Object.defineProperty(exports, "validateMountEnvironmentCredentialBoundaries", { enumerable: true, get: function () { return mountSecurity_1.validateMountEnvironmentCredentialBoundaries; } });
Object.defineProperty(exports, "withExclusiveSandboxManifestMutation", { enumerable: true, get: function () { return mountSecurity_1.withExclusiveSandboxManifestMutation; } });
Object.defineProperty(exports, "withExclusiveSandboxStateInspection", { enumerable: true, get: function () { return mountSecurity_1.withExclusiveSandboxStateInspection; } });
var stableJson_1 = require("./shared/stableJson.js");
Object.defineProperty(exports, "stableJsonStringify", { enumerable: true, get: function () { return stableJson_1.stableJsonStringify; } });
var manifest_1 = require("./manifest.js");
Object.defineProperty(exports, "copyManifestMountCredentialExposurePolicy", { enumerable: true, get: function () { return manifest_1.copyManifestMountCredentialExposurePolicy; } });
Object.defineProperty(exports, "replaceManifestMountCredentialExposurePolicy", { enumerable: true, get: function () { return manifest_1.replaceManifestMountCredentialExposurePolicy; } });
var output_1 = require("./shared/output.js");
Object.defineProperty(exports, "elapsedSeconds", { enumerable: true, get: function () { return output_1.elapsedSeconds; } });
Object.defineProperty(exports, "formatExecResponse", { enumerable: true, get: function () { return output_1.formatExecResponse; } });
Object.defineProperty(exports, "truncateOutput", { enumerable: true, get: function () { return output_1.truncateOutput; } });
var hostPath_1 = require("./shared/hostPath.js");
Object.defineProperty(exports, "isHostPathStrictlyWithinRoot", { enumerable: true, get: function () { return hostPath_1.isHostPathStrictlyWithinRoot; } });
Object.defineProperty(exports, "isHostPathWithinRoot", { enumerable: true, get: function () { return hostPath_1.isHostPathWithinRoot; } });
Object.defineProperty(exports, "relativeHostPathEscapesRoot", { enumerable: true, get: function () { return hostPath_1.relativeHostPathEscapesRoot; } });
Object.defineProperty(exports, "relativeHostPathEscapesRootOrSelf", { enumerable: true, get: function () { return hostPath_1.relativeHostPathEscapesRootOrSelf; } });
Object.defineProperty(exports, "sandboxPathGrantHostPath", { enumerable: true, get: function () { return hostPath_1.sandboxPathGrantHostPath; } });
var posixPath_1 = require("./shared/posixPath.js");
Object.defineProperty(exports, "hasBackslashPathSeparator", { enumerable: true, get: function () { return posixPath_1.hasBackslashPathSeparator; } });
Object.defineProperty(exports, "hasEscapingParentPathSegment", { enumerable: true, get: function () { return posixPath_1.hasEscapingParentPathSegment; } });
Object.defineProperty(exports, "hasParentPathSegment", { enumerable: true, get: function () { return posixPath_1.hasParentPathSegment; } });
Object.defineProperty(exports, "isUnderPosixPath", { enumerable: true, get: function () { return posixPath_1.isUnderPosixPath; } });
Object.defineProperty(exports, "normalizePosixPath", { enumerable: true, get: function () { return posixPath_1.normalizePosixPath; } });
Object.defineProperty(exports, "posixDirname", { enumerable: true, get: function () { return posixPath_1.posixDirname; } });
Object.defineProperty(exports, "relativePosixPathWithinRoot", { enumerable: true, get: function () { return posixPath_1.relativePosixPathWithinRoot; } });
var environment_1 = require("./shared/environment.js");
Object.defineProperty(exports, "assertShellEnvironmentName", { enumerable: true, get: function () { return environment_1.assertShellEnvironmentName; } });
Object.defineProperty(exports, "deserializePersistedEnvironmentForRuntime", { enumerable: true, get: function () { return environment_1.deserializePersistedEnvironmentForRuntime; } });
Object.defineProperty(exports, "materializeEnvironment", { enumerable: true, get: function () { return environment_1.materializeEnvironment; } });
Object.defineProperty(exports, "materializeStaticEnvironment", { enumerable: true, get: function () { return environment_1.materializeStaticEnvironment; } });
Object.defineProperty(exports, "mergeMaterializedEnvironment", { enumerable: true, get: function () { return environment_1.mergeMaterializedEnvironment; } });
Object.defineProperty(exports, "mergeStaticMaterializedEnvironment", { enumerable: true, get: function () { return environment_1.mergeStaticMaterializedEnvironment; } });
Object.defineProperty(exports, "rehydratePersistedEnvironmentForRuntime", { enumerable: true, get: function () { return environment_1.rehydratePersistedEnvironmentForRuntime; } });
Object.defineProperty(exports, "resolveEnvironmentReferences", { enumerable: true, get: function () { return environment_1.resolveEnvironmentReferences; } });
Object.defineProperty(exports, "serializeManifestEnvironment", { enumerable: true, get: function () { return environment_1.serializeManifestEnvironment; } });
Object.defineProperty(exports, "serializeRuntimeEnvironmentForPersistence", { enumerable: true, get: function () { return environment_1.serializeRuntimeEnvironmentForPersistence; } });
var shell_1 = require("./shared/shell.js");
Object.defineProperty(exports, "shellQuote", { enumerable: true, get: function () { return shell_1.shellQuote; } });
var pathProbe_1 = require("./shared/pathProbe.js");
Object.defineProperty(exports, "isSandboxPathNotFoundError", { enumerable: true, get: function () { return pathProbe_1.isSandboxPathNotFoundError; } });
Object.defineProperty(exports, "probeSandboxDirectoryExists", { enumerable: true, get: function () { return pathProbe_1.probeSandboxDirectoryExists; } });
Object.defineProperty(exports, "probeSandboxPathExists", { enumerable: true, get: function () { return pathProbe_1.probeSandboxPathExists; } });
var typeGuards_1 = require("./shared/typeGuards.js");
Object.defineProperty(exports, "isRecord", { enumerable: true, get: function () { return typeGuards_1.isRecord; } });
Object.defineProperty(exports, "isStringRecord", { enumerable: true, get: function () { return typeGuards_1.isStringRecord; } });
Object.defineProperty(exports, "readOptionalBoolean", { enumerable: true, get: function () { return typeGuards_1.readOptionalBoolean; } });
Object.defineProperty(exports, "readOptionalNumber", { enumerable: true, get: function () { return typeGuards_1.readOptionalNumber; } });
Object.defineProperty(exports, "readOptionalNumberArray", { enumerable: true, get: function () { return typeGuards_1.readOptionalNumberArray; } });
Object.defineProperty(exports, "readOptionalRecord", { enumerable: true, get: function () { return typeGuards_1.readOptionalRecord; } });
Object.defineProperty(exports, "readOptionalRecordArray", { enumerable: true, get: function () { return typeGuards_1.readOptionalRecordArray; } });
Object.defineProperty(exports, "readOptionalString", { enumerable: true, get: function () { return typeGuards_1.readOptionalString; } });
Object.defineProperty(exports, "readOptionalStringRecord", { enumerable: true, get: function () { return typeGuards_1.readOptionalStringRecord; } });
Object.defineProperty(exports, "readString", { enumerable: true, get: function () { return typeGuards_1.readString; } });
Object.defineProperty(exports, "readStringArray", { enumerable: true, get: function () { return typeGuards_1.readStringArray; } });
var credentials_1 = require("./shared/credentials.js");
Object.defineProperty(exports, "validateCredentialPair", { enumerable: true, get: function () { return credentials_1.validateCredentialPair; } });
var media_1 = require("./shared/media.js");
Object.defineProperty(exports, "assertViewImageByteLength", { enumerable: true, get: function () { return media_1.assertViewImageByteLength; } });
Object.defineProperty(exports, "imageOutputFromBytes", { enumerable: true, get: function () { return media_1.imageOutputFromBytes; } });
Object.defineProperty(exports, "MAX_VIEW_IMAGE_BYTES", { enumerable: true, get: function () { return media_1.MAX_VIEW_IMAGE_BYTES; } });
Object.defineProperty(exports, "sniffImageMediaType", { enumerable: true, get: function () { return media_1.sniffImageMediaType; } });
Object.defineProperty(exports, "toUint8Array", { enumerable: true, get: function () { return media_1.toUint8Array; } });
//# sourceMappingURL=internal.js.map