@agent-relay/sandbox 0.1.2 → 0.1.3

package/dist/vercel/bench.js

@@ -0,0 +1,337 @@
+/**
+ * Live benchmark core for the Vercel adapter.
+ *
+ * Split out from the CLI in `scripts/vercel-bench.ts` so the safety guards are
+ * testable against a fake runtime *before* they are pointed at a real account.
+ * A harness whose ledger-before-use and verified-cleanup guards have never been
+ * exercised is exactly the unverified claim this package refuses to make about
+ * anything else.
+ *
+ * Not exported from the package barrel: this is an internal measurement tool,
+ * not public API.
+ */
+export class BenchBoundsError extends Error {
+    constructor(requested, max) {
+        super(`benchmark would create ${requested} sandboxes, exceeding the cap of ${max}`);
+        this.name = "BenchBoundsError";
+    }
+}
+/**
+ * Cost for one sandbox-hour at a given shape and CPU utilisation.
+ *
+ * The two lines are always reported separately and never blended. Active CPU
+ * excludes I/O wait; provisioned memory does not — it is wall-clock. Collapsing
+ * them into one number is precisely how the "cheapest provider" claim gets
+ * overstated for idle-heavy agent workloads.
+ */
+export function projectCost(vcpus, utilisation) {
+    const memoryGb = vcpus * 2; // the provider allocates 2 GB per vCPU
+    const cpuPerHour = vcpus * utilisation * 0.128;
+    const memoryPerHour = memoryGb * 0.0212;
+    return {
+        utilisation,
+        cpuPerHour: round4(cpuPerHour),
+        memoryPerHour: round4(memoryPerHour),
+        totalPerHour: round4(cpuPerHour + memoryPerHour),
+    };
+}
+/** Nearest-rank percentile. NaN entries are dropped, not treated as zero. */
+export function percentile(values, p) {
+    const clean = values
+        .filter((value) => Number.isFinite(value))
+        .sort((a, b) => a - b);
+    if (clean.length === 0) {
+        return NaN;
+    }
+    const rank = Math.ceil((p / 100) * clean.length) - 1;
+    return clean[Math.min(Math.max(rank, 0), clean.length - 1)];
+}
+function round4(value) {
+    return Number(value.toFixed(4));
+}
+/**
+ * Measure one sandbox end to end.
+ *
+ * The name is ledgered *before* `launch` is called. A record written after the
+ * response would be lost exactly when it matters — a crash between submit and
+ * response leaves a live sandbox nobody wrote down.
+ *
+ * Teardown runs in `finally`, so a failed measurement still destroys what it
+ * created. `destroyed` and `verifiedGone` are tracked separately because they
+ * are different facts, and conflating them is how a leak gets reported as a
+ * clean run.
+ */
+export async function measureOne(deps, index) {
+    const clock = deps.now ?? (() => Date.now());
+    const sample = {
+        index,
+        createMs: NaN,
+        stateAfterCreate: "unknown",
+        firstExecMs: NaN,
+        execExitCode: null,
+        execOutput: "",
+        destroyed: false,
+        verifiedGone: false,
+    };
+    const intended = `${deps.prefix}-s${index}`;
+    deps.ledger({ event: "intent", name: intended, index });
+    let handle;
+    try {
+        const t0 = clock();
+        handle = await deps.runtime.launch({
+            name: intended,
+            labels: { bench: deps.runId },
+        });
+        sample.createMs = clock() - t0;
+        sample.stateAfterCreate = handle.state ?? "unknown";
+        deps.ledger({
+            event: "created",
+            name: handle.id,
+            createMs: Math.round(sample.createMs),
+        });
+        const t1 = clock();
+        const exec = await deps.runtime.runScript(handle, {
+            command: "nproc; free -m | awk '/Mem:/{print $2}'; echo READY",
+            timeoutMs: 60_000,
+        });
+        sample.firstExecMs = clock() - t1;
+        sample.execExitCode = exec.exitCode;
+        sample.execOutput = exec.output.trim();
+        // Fail fast on a readiness probe that did not report a clean exit: a
+        // nonzero or null code would otherwise be recorded as a valid latency
+        // sample, hiding a broken sandbox behind a green-looking report.
+        if (exec.exitCode !== 0) {
+            throw new Error(`readiness probe exited with ${exec.exitCode ?? "no exit code"}: `
+                + `${sample.execOutput || "(no output)"}`);
+        }
+        const owned = await deps.runtime.listOwned({ includeTerminated: true });
+        const row = owned.find((entry) => entry.name === handle.id);
+        sample.vcpus = row?.vcpus;
+        sample.memoryMiB = row?.memoryMiB;
+        sample.activeCpuMs = row?.activeCpuMs;
+        sample.wallClockMs = row?.wallClockMs;
+    }
+    catch (error) {
+        sample.error = describe(error);
+        deps.ledger({ event: "error", name: intended, error: sample.error });
+    }
+    finally {
+        // `finally` rather than a trailing block. Today the catch above is total,
+        // so the two are equivalent and no test can tell them apart — but the
+        // moment anyone makes that catch selective, a trailing block would silently
+        // stop tearing down on the rethrown path. The cost of being right in
+        // advance is one keyword.
+        if (handle) {
+            try {
+                await deps.runtime.destroy(handle);
+                sample.destroyed = true;
+                sample.verifiedGone = true;
+                deps.ledger({ event: "destroyed-verified", name: handle.id });
+            }
+            catch (error) {
+                // Only `VercelDestroyVerificationError` means the delete was accepted
+                // by the provider but absence was not proven — that is the case where
+                // `destroyed=true, verifiedGone=false` is honest. Any other error is a
+                // submission failure and must leave `destroyed=false`, or the cleanup
+                // summary would count a still-live sandbox as torn down.
+                const verificationFailed = isVerificationFailure(error);
+                sample.destroyed = verificationFailed;
+                sample.verifiedGone = false;
+                deps.ledger({
+                    event: verificationFailed ? "destroy-unverified" : "destroy-submit-failed",
+                    name: handle.id,
+                    error: describe(error),
+                });
+            }
+        }
+    }
+    return sample;
+}
+/** Concurrency probe: launch a burst, then tear all of it down. */
+export async function burstProbe(deps) {
+    const width = deps.limits.burstWidth;
+    deps.ledger({ event: "burst-start", name: deps.prefix, width });
+    const names = Array.from({ length: width }, (_, i) => `${deps.prefix}-b${i}`);
+    for (const name of names) {
+        deps.ledger({ event: "intent", name, burst: true });
+    }
+    const settled = await Promise.allSettled(names.map((name) => deps.runtime.launch({ name, labels: { bench: deps.runId, kind: "burst" } })));
+    const rejections = settled
+        .filter((r) => r.status === "rejected")
+        .map((r) => describe(r.reason));
+    let verifiedGone = 0;
+    for (const result of settled) {
+        if (result.status !== "fulfilled") {
+            continue;
+        }
+        try {
+            await deps.runtime.destroy(result.value);
+            verifiedGone += 1;
+            deps.ledger({
+                event: "destroyed-verified",
+                name: result.value.id,
+                burst: true,
+            });
+        }
+        catch (error) {
+            const verificationFailed = isVerificationFailure(error);
+            deps.ledger({
+                event: verificationFailed ? "destroy-unverified" : "destroy-submit-failed",
+                name: result.value.id,
+                burst: true,
+                error: describe(error),
+            });
+        }
+    }
+    return {
+        width,
+        admitted: settled.length - rejections.length,
+        rejected: rejections.length,
+        rejections: rejections.slice(0, 4),
+        verifiedGone,
+        // The provider ramps its vCPU allocation rate with sustained use and decays
+        // it after ~10 idle minutes, so this is the rate in force now, not a cap.
+        caveat: "dynamic vCPU allocation rate — measures the current rate, not a fixed cap",
+    };
+}
+/** Independent audit: nothing under this lane's prefix may survive a run. */
+export async function sweep(deps) {
+    const survivors = await deps.runtime.listOwned({
+        includeTerminated: true,
+        states: null,
+    });
+    for (const entry of survivors) {
+        deps.ledger({
+            event: "survivor",
+            name: entry.name,
+            status: entry.providerStatus,
+        });
+    }
+    return survivors.map((entry) => entry.name);
+}
+/**
+ * Run the benchmark.
+ *
+ * Refuses up front to exceed the sandbox cap: a bound checked after the fact is
+ * not a bound. The sweep runs in `finally`, so an aborted run still audits.
+ */
+export async function runBenchmark(deps, mode) {
+    deps.ledger({ event: "run-start", name: deps.prefix, mode });
+    const n = mode === "sweep" ? 0 : mode === "full" ? 7 : 1;
+    const burstCount = mode === "full" ? deps.limits.burstWidth : 0;
+    if (n + burstCount > deps.limits.maxSandboxes) {
+        throw new BenchBoundsError(n + burstCount, deps.limits.maxSandboxes);
+    }
+    const samples = [];
+    let burst = null;
+    let survivors = [];
+    let sweepError;
+    try {
+        for (let i = 0; i < n; i += 1) {
+            samples.push(await measureOne(deps, i));
+        }
+        if (mode === "full") {
+            burst = await burstProbe(deps);
+        }
+    }
+    finally {
+        // `run-end` and `sweep` must both attempt regardless of what the main body
+        // did — an uncaught error there would otherwise strand admitted burst
+        // sandboxes and leave the cleanup audit that was the whole point of the
+        // ledger unfinished. Ledger failure must not preempt the audit either.
+        try {
+            deps.ledger({ event: "run-end", name: deps.prefix });
+        }
+        catch {
+            // deliberately swallowed; the sweep is what matters here
+        }
+        try {
+            survivors = await sweep(deps);
+        }
+        catch (error) {
+            sweepError = describe(error);
+            try {
+                deps.ledger({
+                    event: "sweep-failed",
+                    name: deps.prefix,
+                    error: sweepError,
+                });
+            }
+            catch {
+                // deliberately swallowed; the error is captured in the report
+            }
+        }
+    }
+    const createMs = samples.map((s) => s.createMs);
+    const observedVcpus = samples.find((s) => s.vcpus)?.vcpus
+        ?? deps.limits.vcpus;
+    const destroyed = samples.filter((s) => s.destroyed).length
+        + (burst?.admitted ?? 0);
+    const verifiedGone = samples.filter((s) => s.verifiedGone).length
+        + (burst?.verifiedGone ?? 0);
+    // `created` counts everything admitted by the provider — sequential probes
+    // plus burst admits — so it is a coherent denominator for `destroyed` and
+    // `verifiedGone`, which already include both.
+    const created = samples.filter((s) => Number.isFinite(s.createMs)).length
+        + (burst?.admitted ?? 0);
+    return {
+        runId: deps.runId,
+        prefix: deps.prefix,
+        mode,
+        n: samples.length,
+        coldCreate: {
+            p50Ms: Math.round(percentile(createMs, 50)),
+            p95Ms: Math.round(percentile(createMs, 95)),
+        },
+        firstExec: {
+            p50Ms: Math.round(percentile(samples.map((s) => s.firstExecMs), 50)),
+            p95Ms: Math.round(percentile(samples.map((s) => s.firstExecMs), 95)),
+        },
+        readyStateAfterCreate: [...new Set(samples.map((s) => s.stateAfterCreate))],
+        deliveredShape: {
+            vcpus: [...new Set(samples.map((s) => s.vcpus).filter(isNumber))],
+            memoryMiB: [...new Set(samples.map((s) => s.memoryMiB).filter(isNumber))],
+            documented: "1 or even 2-32 vCPUs, default 2; 2 GB memory per vCPU",
+        },
+        cleanup: {
+            created,
+            destroyed,
+            verifiedGone,
+            survivors,
+            ...(sweepError ? { sweepError } : {}),
+        },
+        burst,
+        costProjection: {
+            shape: `${observedVcpus} vCPU / ${observedVcpus * 2} GB`,
+            note: "Active CPU excludes I/O wait; provisioned memory is billed on WALL "
+                + "CLOCK. The memory line is a floor an idle-heavy agent cannot duck.",
+            perHour: [1, 0.5, 0.1, 0].map((u) => projectCost(observedVcpus, u)),
+        },
+        errors: samples
+            .filter((s) => s.error)
+            .map((s) => ({ index: s.index, error: s.error })),
+        // A sweep that never ran cannot certify a clean run.
+        clean: sweepError === undefined
+            && survivors.length === 0
+            && destroyed === verifiedGone,
+    };
+}
+function isNumber(value) {
+    return typeof value === "number";
+}
+function describe(error) {
+    return error instanceof Error
+        ? `${error.name}: ${error.message}`
+        : String(error);
+}
+/**
+ * The one destroy error where the sandbox may already be gone but we cannot
+ * prove it. Matched on name to keep the harness decoupled from the provider
+ * error class — a benchmark shim over a different runtime can raise the same
+ * name and get the same accounting.
+ */
+function isVerificationFailure(error) {
+    return (error instanceof Error
+        && error.name === "VercelDestroyVerificationError");
+}
+//# sourceMappingURL=bench.js.map

package/dist/vercel/bench.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bench.js","sourceRoot":"","sources":["../../src/vercel/bench.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAkEH,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,SAAiB,EAAE,GAAW;QACxC,KAAK,CACH,0BAA0B,SAAS,oCAAoC,GAAG,EAAE,CAC7E,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAkBD;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,WAAmB;IAC5D,MAAM,QAAQ,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,uCAAuC;IACnE,MAAM,UAAU,GAAG,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC;IAC/C,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,CAAC;IACxC,OAAO;QACL,WAAW;QACX,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC;QAC9B,aAAa,EAAE,MAAM,CAAC,aAAa,CAAC;QACpC,YAAY,EAAE,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC;KACjD,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,MAAyB,EAAE,CAAS;IAC7D,MAAM,KAAK,GAAG,MAAM;SACjB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;SACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAE,CAAC;AAC/D,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAClC,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAe,EACf,KAAa;IAEb,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAW;QACrB,KAAK;QACL,QAAQ,EAAE,GAAG;QACb,gBAAgB,EAAE,SAAS;QAC3B,WAAW,EAAE,GAAG;QAChB,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,KAAK;KACpB,CAAC;IACF,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,IAAI,MAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACjC,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;SAC9B,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,GAAG,KAAK,EAAE,GAAG,EAAE,CAAC;QAC/B,MAAM,CAAC,gBAAgB,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,SAAS;YAChB,IAAI,EAAE,MAAM,CAAC,EAAE;YACf,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE;YAChD,OAAO,EAAE,qDAAqD;YAC9D,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,WAAW,GAAG,KAAK,EAAE,GAAG,EAAE,CAAC;QAClC,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC;QACpC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAEvC,qEAAqE;QACrE,sEAAsE;QACtE,iEAAiE;QACjE,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,+BAA+B,IAAI,CAAC,QAAQ,IAAI,cAAc,IAAI;kBAC9D,GAAG,MAAM,CAAC,UAAU,IAAI,aAAa,EAAE,CAC5C,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAO,CAAC,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,GAAG,GAAG,EAAE,KAAK,CAAC;QAC1B,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE,SAAS,CAAC;QAClC,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE,WAAW,CAAC;QACtC,MAAM,CAAC,WAAW,GAAG,GAAG,EAAE,WAAW,CAAC;IACxC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,sEAAsE;QACtE,4EAA4E;QAC5E,qEAAqE;QACrE,0BAA0B;QAC1B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBACnC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;gBACxB,MAAM,CAAC,YAAY,GAAG,IAAI,CAAC;gBAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;YAChE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,sEAAsE;gBACtE,sEAAsE;gBACtE,uEAAuE;gBACvE,sEAAsE;gBACtE,yDAAyD;gBACzD,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBACxD,MAAM,CAAC,SAAS,GAAG,kBAAkB,CAAC;gBACtC,MAAM,CAAC,YAAY,GAAG,KAAK,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC;oBACV,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,uBAAuB;oBAC1E,IAAI,EAAE,MAAM,CAAC,EAAE;oBACf,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAWD,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAe;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACjB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAC5E,CACF,CAAC;IACF,MAAM,UAAU,GAAG,OAAO;SACvB,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC;SAClE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAElC,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACzC,YAAY,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC;gBACV,KAAK,EAAE,oBAAoB;gBAC3B,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBACrB,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC;gBACV,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,uBAAuB;gBAC1E,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE;gBACrB,KAAK,EAAE,IAAI;gBACX,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK;QACL,QAAQ,EAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM;QAC5C,QAAQ,EAAE,UAAU,CAAC,MAAM;QAC3B,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAClC,YAAY;QACZ,4EAA4E;QAC5E,0EAA0E;QAC1E,MAAM,EACJ,2EAA2E;KAC9E,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAe;IACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,iBAAiB,EAAE,IAAI;QACvB,MAAM,EAAE,IAAI;KACb,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC;YACV,KAAK,EAAE,UAAU;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,MAAM,EAAE,KAAK,CAAC,cAAc;SAC7B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAgCD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAe,EACf,IAAe;IAEf,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QAC9C,MAAM,IAAI,gBAAgB,CAAC,CAAC,GAAG,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAuB,IAAI,CAAC;IACrC,IAAI,SAAS,GAAa,EAAE,CAAC;IAC7B,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,2EAA2E;QAC3E,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,yDAAyD;QAC3D,CAAC;QACD,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC;oBACV,KAAK,EAAE,cAAc;oBACrB,IAAI,EAAE,IAAI,CAAC,MAAM;oBACjB,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK;WACpD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;IACvB,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM;UACvD,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;IAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM;UAC7D,CAAC,KAAK,EAAE,YAAY,IAAI,CAAC,CAAC,CAAC;IAC/B,2EAA2E;IAC3E,0EAA0E;IAC1E,8CAA8C;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;UACrE,CAAC,KAAK,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;IAE3B,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,IAAI;QACJ,CAAC,EAAE,OAAO,CAAC,MAAM;QACjB,UAAU,EAAE;YACV,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC5C;QACD,SAAS,EAAE;YACT,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;YACpE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;SACrE;QACD,qBAAqB,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC3E,cAAc,EAAE;YACd,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACjE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzE,UAAU,EAAE,uDAAuD;SACpE;QACD,OAAO,EAAE;YACP,OAAO;YACP,SAAS;YACT,YAAY;YACZ,SAAS;YACT,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC;QACD,KAAK;QACL,cAAc,EAAE;YACd,KAAK,EAAE,GAAG,aAAa,WAAW,aAAa,GAAG,CAAC,KAAK;YACxD,IAAI,EACF,qEAAqE;kBACnE,oEAAoE;YACxE,OAAO,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;SACpE;QACD,MAAM,EAAE,OAAO;aACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAM,EAAE,CAAC,CAAC;QACpD,qDAAqD;QACrD,KAAK,EACH,UAAU,KAAK,SAAS;eACrB,SAAS,CAAC,MAAM,KAAK,CAAC;eACtB,SAAS,KAAK,YAAY;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,YAAY,KAAK;QAC3B,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE;QACnC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,KAAc;IAC3C,OAAO,CACL,KAAK,YAAY,KAAK;WACnB,KAAK,CAAC,IAAI,KAAK,gCAAgC,CACnD,CAAC;AACJ,CAAC"}

package/dist/vercel/capabilities.d.ts

@@ -0,0 +1,106 @@
+/**
+ * SDK-free capability metadata for the Vercel Sandbox adapter.
+ *
+ * Two rules govern this file:
+ *
+ *  1. A capability means *reachable through this package's ports*. The vendor
+ *     SDK having a method is not the same as this adapter exposing it, and the
+ *     gap is where false capability claims come from.
+ *  2. A behavioral claim stays `false` until a live probe against the pinned
+ *     SDK establishes it. Shape is not evidence.
+ */
+export declare const vercelSandboxCapabilities: {
+    readonly warmLease: false;
+    readonly lifecycle: false;
+};
+export declare const vercelWorkflowCapabilities: {
+    readonly pty: false;
+    readonly snapshots: false;
+    readonly isolation: "strong";
+    readonly persistentHandle: true;
+    readonly streamingLogs: false;
+};
+export type VercelObservedCapabilities = {
+    cleanupVerified: boolean;
+    fork: boolean;
+    lifecycle: boolean;
+    neverIdle: boolean;
+    ptySurvival: boolean;
+    snapshotCapture: boolean;
+    streamingExec: boolean;
+    warmLease: boolean;
+};
+/**
+ * Cells not yet proven live remain `false` rather than inferred from SDK shape.
+ *
+ * Promotion protocol: a cell flips to `true` only in a commit that also records
+ * the dated live evidence that justified it, exactly as the Freestyle adapter
+ * did for `cleanupVerified`.
+ */
+export declare const vercelObservedCapabilities: VercelObservedCapabilities;
+/**
+ * Structured capability modes for the Vercel Sandbox adapter.
+ *
+ * These restate, in the type system, distinctions this file already draws in
+ * prose. The booleans above cannot separate "the provider cannot do this" from
+ * "the provider can, but this package's port exposes no operation reaching it"
+ * from "nobody has checked yet" — and rule 1 of this file is precisely that
+ * distinction. `not-exposed` is that rule as a type.
+ *
+ * Note which cell is **missing**: `filesystem`. See below.
+ */
+export declare const vercelCapabilityModes: {
+    /**
+     * `Command.logs()` is an async iterator, so the SDK can genuinely stream. This
+     * adapter awaits `output("stdout")` and `output("stderr")` to completion and
+     * returns a finished `RunScriptResult`, and the port exposes no streaming
+     * operation. Both streaming members of the union mean *streamed live*, so
+     * `buffered` is the honest shape for this port.
+     */
+    readonly outputStreams: "buffered";
+    /**
+     * Settled, not pending. A Vercel sandbox always carries a wall-clock
+     * termination deadline (`sandboxTimeoutMs`) — there is no never-idle tier to
+     * promote to, which is the same fact recorded against
+     * {@link vercelObservedCapabilities.neverIdle}. Per the union's own note,
+     * `deadline` says this without needing `unsupported`.
+     */
+    readonly lifetime: "deadline";
+    /**
+     * `sandbox.openInteractive()` exists in the SDK; `WorkflowRuntime` exposes no
+     * PTY operation, so it is unreachable *here*. `not-exposed` rather than
+     * `unsupported`: this is a fact about our port, and it moves only if someone
+     * adds an operation — never on the strength of a live probe against Vercel.
+     */
+    readonly interactive: "not-exposed";
+    /**
+     * `sandbox.snapshot()` and `Sandbox.fork()` exist in the SDK and are likewise
+     * unreachable through this port. Note this is a *different* claim from
+     * {@link vercelObservedCapabilities.snapshotCapture}, which is a pending
+     * observation about Vercel: a canary may promote that one and must never
+     * promote this one.
+     */
+    readonly snapshots: "not-exposed";
+};
+/**
+ * Why `filesystem` is deliberately left undeclared, and so resolves to
+ * `"unknown"`.
+ *
+ * Unlike the cells above, this one is not a fact this adapter is in a position
+ * to state. Two reasons compound:
+ *
+ *  1. It is **configurable per instance**, not a property of the provider.
+ *     `VercelSandboxRuntimeOptions.persistent` selects the durability contract,
+ *     so no single static value is correct for every `VercelSandboxRuntime`.
+ *  2. Even for a `persistent: true` instance, the union's `"persistent"` means
+ *     *restored across stop/start of the same sandbox* — which is exactly the
+ *     round trip that `vercelSandboxCapabilities.lifecycle` is still waiting on
+ *     a live probe to establish. Declaring it would promote, through a mode,
+ *     the very behavior the boolean is holding back for lack of evidence.
+ *
+ * `"unknown"` is the accurate answer and the only one that keeps
+ * `isPendingEvidence()` truthful: a live stop -> resume -> read-back probe
+ * genuinely can settle this, and should be what does.
+ */
+export declare const VERCEL_FILESYSTEM_MODE_UNDECLARED: string;
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/vercel/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/vercel/capabilities.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,yBAAyB;;;CAWiB,CAAC;AAExD,eAAO,MAAM,0BAA0B;;;;;;CAcC,CAAC;AAEzC,MAAM,MAAM,0BAA0B,GAAG;IACvC,eAAe,EAAE,OAAO,CAAC;IACzB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,0BAexC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB;IAChC;;;;;;OAMG;;IAEH;;;;;;OAMG;;IAEH;;;;;OAKG;;IAEH;;;;;;OAMG;;CAE+C,CAAC;AAErD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,iCAAiC,QAEsB,CAAC"}

package/dist/vercel/capabilities.js

@@ -0,0 +1,128 @@
+/**
+ * SDK-free capability metadata for the Vercel Sandbox adapter.
+ *
+ * Two rules govern this file:
+ *
+ *  1. A capability means *reachable through this package's ports*. The vendor
+ *     SDK having a method is not the same as this adapter exposing it, and the
+ *     gap is where false capability claims come from.
+ *  2. A behavioral claim stays `false` until a live probe against the pinned
+ *     SDK establishes it. Shape is not evidence.
+ */
+export const vercelSandboxCapabilities = {
+    // `Sandbox.list` accepts a server-side `tags` filter, so unlike Freestyle the
+    // implementation here is a real label search rather than a degraded `[]`.
+    // It still declares false: server-side filtering that is silently ignored by
+    // the API would return foreign sandboxes as lease candidates, which is worse
+    // than no lease at all. Promote only once a live probe shows that a tag query
+    // excludes a known non-matching sandbox.
+    warmLease: false,
+    // `stop()` is real, and `Sandbox.get({ resume: true })` is the resume path.
+    // Promotion waits on a live stop -> settled -> resume -> exec round trip.
+    lifecycle: false,
+};
+export const vercelWorkflowCapabilities = {
+    // `sandbox.openInteractive()` exists in the SDK, but WorkflowRuntime exposes
+    // no PTY operation, so it is not reachable through this port.
+    pty: false,
+    // `sandbox.snapshot()` and `Sandbox.fork()` exist in the SDK; likewise not
+    // reachable through this port.
+    snapshots: false,
+    // Each sandbox is a dedicated Firecracker-class microVM.
+    isolation: "strong",
+    // `getById` re-resolves a sandbox by name across processes.
+    persistentHandle: true,
+    // `Command.logs()` is an async iterator in the SDK, but this adapter buffers
+    // and returns a completed result; no streaming surface is exposed.
+    streamingLogs: false,
+};
+/**
+ * Cells not yet proven live remain `false` rather than inferred from SDK shape.
+ *
+ * Promotion protocol: a cell flips to `true` only in a commit that also records
+ * the dated live evidence that justified it, exactly as the Freestyle adapter
+ * did for `cleanupVerified`.
+ */
+export const vercelObservedCapabilities = {
+    // Implemented: `destroy` submits the delete and then verifies absence in a
+    // fresh prefix listing, treating a same-name row with a different createdAt
+    // as a *different* sandbox rather than a survivor. Promotion is gated on the
+    // live canary showing destroyed === verifiedGone across the n=7 run.
+    cleanupVerified: false,
+    fork: false,
+    lifecycle: false,
+    // Not merely unproven: Vercel sandboxes always carry a termination deadline,
+    // so there is no never-idle tier to promote this to. This one is settled.
+    neverIdle: false,
+    ptySurvival: false,
+    snapshotCapture: false,
+    streamingExec: false,
+    warmLease: false,
+};
+/**
+ * Structured capability modes for the Vercel Sandbox adapter.
+ *
+ * These restate, in the type system, distinctions this file already draws in
+ * prose. The booleans above cannot separate "the provider cannot do this" from
+ * "the provider can, but this package's port exposes no operation reaching it"
+ * from "nobody has checked yet" — and rule 1 of this file is precisely that
+ * distinction. `not-exposed` is that rule as a type.
+ *
+ * Note which cell is **missing**: `filesystem`. See below.
+ */
+export const vercelCapabilityModes = {
+    /**
+     * `Command.logs()` is an async iterator, so the SDK can genuinely stream. This
+     * adapter awaits `output("stdout")` and `output("stderr")` to completion and
+     * returns a finished `RunScriptResult`, and the port exposes no streaming
+     * operation. Both streaming members of the union mean *streamed live*, so
+     * `buffered` is the honest shape for this port.
+     */
+    outputStreams: "buffered",
+    /**
+     * Settled, not pending. A Vercel sandbox always carries a wall-clock
+     * termination deadline (`sandboxTimeoutMs`) — there is no never-idle tier to
+     * promote to, which is the same fact recorded against
+     * {@link vercelObservedCapabilities.neverIdle}. Per the union's own note,
+     * `deadline` says this without needing `unsupported`.
+     */
+    lifetime: "deadline",
+    /**
+     * `sandbox.openInteractive()` exists in the SDK; `WorkflowRuntime` exposes no
+     * PTY operation, so it is unreachable *here*. `not-exposed` rather than
+     * `unsupported`: this is a fact about our port, and it moves only if someone
+     * adds an operation — never on the strength of a live probe against Vercel.
+     */
+    interactive: "not-exposed",
+    /**
+     * `sandbox.snapshot()` and `Sandbox.fork()` exist in the SDK and are likewise
+     * unreachable through this port. Note this is a *different* claim from
+     * {@link vercelObservedCapabilities.snapshotCapture}, which is a pending
+     * observation about Vercel: a canary may promote that one and must never
+     * promote this one.
+     */
+    snapshots: "not-exposed",
+};
+/**
+ * Why `filesystem` is deliberately left undeclared, and so resolves to
+ * `"unknown"`.
+ *
+ * Unlike the cells above, this one is not a fact this adapter is in a position
+ * to state. Two reasons compound:
+ *
+ *  1. It is **configurable per instance**, not a property of the provider.
+ *     `VercelSandboxRuntimeOptions.persistent` selects the durability contract,
+ *     so no single static value is correct for every `VercelSandboxRuntime`.
+ *  2. Even for a `persistent: true` instance, the union's `"persistent"` means
+ *     *restored across stop/start of the same sandbox* — which is exactly the
+ *     round trip that `vercelSandboxCapabilities.lifecycle` is still waiting on
+ *     a live probe to establish. Declaring it would promote, through a mode,
+ *     the very behavior the boolean is holding back for lack of evidence.
+ *
+ * `"unknown"` is the accurate answer and the only one that keeps
+ * `isPendingEvidence()` truthful: a live stop -> resume -> read-back probe
+ * genuinely can settle this, and should be what does.
+ */
+export const VERCEL_FILESYSTEM_MODE_UNDECLARED = "filesystem durability is per-instance (options.persistent) and its across-restart "
+    + "behavior is gated on the same unproven live probe as lifecycle";
+//# sourceMappingURL=capabilities.js.map

package/dist/vercel/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/vercel/capabilities.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,8EAA8E;IAC9E,0EAA0E;IAC1E,6EAA6E;IAC7E,6EAA6E;IAC7E,8EAA8E;IAC9E,yCAAyC;IACzC,SAAS,EAAE,KAAK;IAChB,4EAA4E;IAC5E,0EAA0E;IAC1E,SAAS,EAAE,KAAK;CACqC,CAAC;AAExD,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,6EAA6E;IAC7E,8DAA8D;IAC9D,GAAG,EAAE,KAAK;IACV,2EAA2E;IAC3E,+BAA+B;IAC/B,SAAS,EAAE,KAAK;IAChB,yDAAyD;IACzD,SAAS,EAAE,QAAQ;IACnB,4DAA4D;IAC5D,gBAAgB,EAAE,IAAI;IACtB,6EAA6E;IAC7E,mEAAmE;IACnE,aAAa,EAAE,KAAK;CACkB,CAAC;AAazC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAA+B;IACpE,2EAA2E;IAC3E,4EAA4E;IAC5E,6EAA6E;IAC7E,qEAAqE;IACrE,eAAe,EAAE,KAAK;IACtB,IAAI,EAAE,KAAK;IACX,SAAS,EAAE,KAAK;IAChB,6EAA6E;IAC7E,0EAA0E;IAC1E,SAAS,EAAE,KAAK;IAChB,WAAW,EAAE,KAAK;IAClB,eAAe,EAAE,KAAK;IACtB,aAAa,EAAE,KAAK;IACpB,SAAS,EAAE,KAAK;CACjB,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC;;;;;;OAMG;IACH,aAAa,EAAE,UAAU;IACzB;;;;;;OAMG;IACH,QAAQ,EAAE,UAAU;IACpB;;;;;OAKG;IACH,WAAW,EAAE,aAAa;IAC1B;;;;;;OAMG;IACH,SAAS,EAAE,aAAa;CAC0B,CAAC;AAErD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAC5C,oFAAoF;MAClF,gEAAgE,CAAC"}