Sandbox Next Skill 安全审计

19| ----- | ---------- |20| npm dependency | `@cloudflare/sandbox@next` (or another preview tag) |21| Container image | Same line (e.g. `cloudflare/sandbox:next`, `next-python`) |22

24| ------------ | ------ |25| Default `@cloudflare/sandbox` (no `@next`) | **Stop.** Load **`sandbox-stable`**. Do not apply this skill’s APIs. |26| User wants to port stable → `@next` | **Stop.** Load **`sandbox-migrate-to-next`**. |27| Self-deployed **bridge** only | Bridge is **not** on the 1.0 preview line yet. Keep bridge on stable package + image. [Bridge (stable)](https://developers.cloudflare.com/sandbox/bridge/) |2829Never mix an `@next` Worker package with a stable container image (or the reverse).30

3435- `sandbox.exec(argv)` takes an **argv** list and resolves when the process **starts**. It returns a **handle**, not a finished command result.36- Collect results with handle methods: `output()`, `logs()`, `waitForExit()`, `waitForPort()`, `waitForLog()`, `kill(signal?)`.37- No implicit shell. Shell syntax needs an explicit shell, e.g. `["/bin/bash", "-lc", script]`.38- Each launch is independent. A `cd` / `export` in one `exec` is not visible to the next. Pass `cwd` and `env` per launch, or one shell script.39- Process handles have **no stdin**. Interactive use → terminals (`createTerminal` + `connect`).40- Local wait `timeout` / `AbortSignal` cancel the **wait only**. They do not kill the process. Use `kill` or `exec`’s remote `timeout`.41- `getProcess` / `listProcesses` / `getTerminal` / `listTerminals` do **not** start a container; they return `null` / `[]` when none is up.

5354const sandbox = getSandbox(env.Sandbox, "user-123");55const process = await sandbox.exec(["python3", "-c", "print(2 + 2)"]);56const result = await process.output({ encoding: "utf8" });57// result.stdout, result.exitCode58```

42- Process and terminal IDs belong to the **current container**, not forever to a sandbox ID. For work that must survive replace, store the full job (argv, cwd, env, app state)—not only an id.43- Non-secret config only in `setEnvVars` / launch `env`. Live credentials stay in the Worker; use outbound handlers when the sandbox calls external APIs.44- Do **not** invent removed stable APIs (`gitCheckout` on core, string-`exec` completion, session execution, `sandbox.terminal(request)`).

8889- Lockfile and Dockerfile on the **same** `@next` line  90- Typecheck against installed `@next` types  91- No live secrets in sandbox env  92- Production preview hostnames need wildcard DNS on a custom domain when using those URL patterns  93

6364## 3. Retrieve — open the doc for the task6566Fetch the page before implementing. Installed `@next` types win over guesses.67

82| Files, mounts, backups, ports, tunnels, `proxyToSandbox` | Main docs for shared surfaces (ignore stable-only session/transport/`sandbox.terminal`): [Files](https://developers.cloudflare.com/sandbox/api/files/) · [Storage / mounts](https://developers.cloudflare.com/sandbox/api/storage/) · [Ports](https://developers.cloudflare.com/sandbox/api/ports/) · [Tunnels](https://developers.cloudflare.com/sandbox/api/tunnels/) · [Backups](https://developers.cloudflare.com/sandbox/api/backups/) · [Outbound traffic](https://developers.cloudflare.com/sandbox/guides/outbound-traffic/) · [Expose services](https://developers.cloudflare.com/sandbox/guides/expose-services/) · [Production](https://developers.cloudflare.com/sandbox/guides/production-deployment/) |83| Example apps | [examples on `next`](https://github.com/cloudflare/sandbox-sdk/tree/next/examples) |84| Still on stable package | **`sandbox-stable`** · [Main Sandbox docs](https://developers.cloudflare.com/sandbox/) |85| Porting an existing stable app | **`sandbox-migrate-to-next`** · [Migrate](https://developers.cloudflare.com/sandbox/1-0-preview/migrate/) |86

23Pointers only—not a full catalog. Prefer the repo tree and docs.45https://github.com/cloudflare/sandbox-sdk/tree/next/examples6