the universal sandbox runtime for agents and humans.
pocketenv.io
sandbox
openclaw
agent
claude-code
vercel-sandbox
deno-sandbox
cloudflare-sandbox
atproto
sprites
daytona
Decrypt env values for sandbox endpoints
Import decrypt helper and apply it when building environment maps in
the sandbox start and terminal websocket handlers to decode stored
secrets
+3
-2
+3
-2
apps/cf-sandbox/src/index.ts
+3
-2
apps/cf-sandbox/src/index.ts
···
25
25
import { NodePgQueryResultHKT } from "drizzle-orm/node-postgres";
26
26
import jwt from "@tsndr/cloudflare-worker-jwt";
27
27
import { consola } from "consola";
28
+
import decrypt from "./lib/decrypt";
28
29
29
30
type Bindings = {
30
31
Sandbox: DurableObjectNamespace<Sandbox<Env>>;
···
281
282
.filter((v) => v !== null)
282
283
.reduce(
283
284
(acc, v) => {
284
-
acc[v.name] = v.value;
285
+
acc[v.name] = decrypt(v.value);
285
286
return acc;
286
287
},
287
288
{} as Record<string, string>,
···
463
464
.filter((v) => v !== null)
464
465
.reduce(
465
466
(acc, v) => {
466
-
acc[v.name] = v.value;
467
+
acc[v.name] = decrypt(v.value);
467
468
return acc;
468
469
},
469
470
{} as Record<string, string>,