@agent-relay/sandbox 0.1.2 → 0.1.3

package/dist/vercel/config.d.ts

@@ -0,0 +1,119 @@
+/**
+ * SDK-free configuration for the Vercel Sandbox adapter.
+ *
+ * Nothing in this module imports `@vercel/sandbox`. Consumers can construct and
+ * type-check a configuration without the optional peer dependency installed.
+ */
+/**
+ * Credentials for the Vercel Sandbox API.
+ *
+ * Vercel Sandbox cannot be addressed with a bare API key: every request is
+ * scoped to a team and a project. `token` accepts either a personal access
+ * token or an OIDC token; the other two fields are required in both cases.
+ *
+ * These are always injected. The adapter never reads `VERCEL_TOKEN`,
+ * `VERCEL_TEAM_ID`, `VERCEL_PROJECT_ID`, or `VERCEL_OIDC_TOKEN` from ambient
+ * process state, because a runtime that silently picks up an operator's shell
+ * credentials cannot be reasoned about by its caller.
+ */
+export interface VercelCredentials {
+    /** Personal access token or OIDC token. */
+    token: string;
+    /** Team that owns the project. */
+    teamId: string;
+    /** Project the sandboxes are created under. */
+    projectId: string;
+}
+/**
+ * Sandbox environment selection. Exactly one of the three forms — a
+ * caller-chosen image, the deprecated legacy runtime, or the provider default
+ * — mirroring the provider's own mutual exclusion between them.
+ */
+export type VercelSandboxSource = {
+    type: "image";
+    image: string;
+}
+/** Legacy Vercel-managed runtime. Deprecated upstream; accepted for parity. */
+ | {
+    type: "runtime";
+    runtime: string;
+}
+/** Provider default (`vercel/sandbox/universal:latest` at time of writing). */
+ | {
+    type: "default";
+};
+export interface VercelRuntimeOptions extends VercelCredentials {
+    /**
+     * Prefix used to identify sandboxes this runtime is allowed to own.
+     *
+     * Ownership is by name, because a Vercel sandbox's name *is* its identity
+     * within a project. Every created sandbox is named `<prefix>-<suffix>`, and
+     * the adapter refuses to mutate or delete anything outside that prefix.
+     */
+    namePrefix: string;
+    /**
+     * Image-specific home directory. Required because no default is correct for
+     * every image; the managed universal image uses `/vercel/sandbox`.
+     */
+    defaultHomeDir: string;
+    /** Explicit environment selection; the adapter never picks an image itself. */
+    source?: VercelSandboxSource;
+    /**
+     * vCPUs per sandbox. The provider allocates 2048 MB of memory per vCPU, so
+     * memory is not separately configurable. Omitted means the provider default.
+     */
+    vcpus?: number;
+    /**
+     * Wall-clock lifetime in milliseconds after which the provider terminates
+     * the sandbox. Vercel has no never-idle tier: a sandbox always carries a
+     * termination deadline, so this is a real bound and not a hint.
+     */
+    sandboxTimeoutMs?: number;
+    /**
+     * Whether the provider restores the filesystem across sessions. Explicit
+     * because the durability contract differs materially between the two.
+     */
+    persistent?: boolean;
+    /** Ports to expose. The provider caps this at 15. */
+    ports?: readonly number[];
+    /**
+     * Default environment variables baked into the sandbox at create time and
+     * inherited by every command.
+     */
+    env?: Readonly<Record<string, string>>;
+    /** Fallback per-request deadline for operations without a specific one. */
+    requestTimeoutMs?: number;
+    /** Total deadline for sandbox creation. */
+    createTimeoutMs?: number;
+    /** Total deadline for list/get lookups. */
+    lookupTimeoutMs?: number;
+    /** Default total deadline for a command when the caller supplies none. */
+    execTimeoutMs?: number;
+    /** Total deadline for a single file read/write/mkdir. */
+    fileTimeoutMs?: number;
+    /** Deadline for a lifecycle transition to reach a settled state. */
+    lifecycleTimeoutMs?: number;
+    /** Deadline for delete submission plus verification of absence. */
+    deleteTimeoutMs?: number;
+    /** Lifecycle and delete-verification polling interval. */
+    pollIntervalMs?: number;
+    /**
+     * Absolute ceiling on any single SDK call including the SDK's own internal
+     * retries.
+     *
+     * The vendor SDK retries some failures internally (it depends on
+     * `async-retry`). Without an absolute signal that spans the whole call, a
+     * request that is retried N times can outlive the caller's deadline by a
+     * multiple of it. This value caps the entire retry chain, not one attempt.
+     */
+    retryDeadlineMs?: number;
+    /** Page size used when listing sandboxes. */
+    listPageSize?: number;
+    /**
+     * Hard cap on pages walked during a single listing, so a large or
+     * pathologically paginated project cannot turn a lookup into an unbounded
+     * crawl. Exceeding it is an error, never a silently truncated result.
+     */
+    maxListPages?: number;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/vercel/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/vercel/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,iBAAiB;IAChC,2CAA2C;IAC3C,KAAK,EAAE,MAAM,CAAC;IACd,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAClC,+EAA+E;GAC7E;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACtC,+EAA+E;GAC7E;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,qDAAqD;IACrD,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B;;;OAGG;IACH,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAQvC,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2CAA2C;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,2CAA2C;IAC3C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oEAAoE;IACpE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,mEAAmE;IACnE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IAGzB,6CAA6C;IAC7C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB"}

package/dist/vercel/config.js

@@ -0,0 +1,8 @@
+/**
+ * SDK-free configuration for the Vercel Sandbox adapter.
+ *
+ * Nothing in this module imports `@vercel/sandbox`. Consumers can construct and
+ * type-check a configuration without the optional peer dependency installed.
+ */
+export {};
+//# sourceMappingURL=config.js.map

package/dist/vercel/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/vercel/config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/vercel/internal/sdk.d.ts

@@ -0,0 +1,173 @@
+import type { Buffer } from "node:buffer";
+import type { VercelCredentials } from "../config.js";
+/**
+ * The vendor SDK boundary.
+ *
+ * This is the only module in the package that imports `@vercel/sandbox`, and
+ * the import is dynamic so the dependency stays genuinely optional. Everything
+ * above this file talks to the structural `*Like` interfaces below, which is
+ * what makes the adapter testable without the SDK and pinnable to one version.
+ */
+/** Session status as reported by the provider. */
+export type VercelSandboxStatus = "pending" | "running" | "stopping" | "stopped" | "failed" | "aborted" | "snapshotting" | (string & {});
+/** A row from `Sandbox.list`. */
+export interface VercelSandboxListItem {
+    name: string;
+    status: VercelSandboxStatus;
+    createdAt: number;
+    updatedAt?: number;
+    persistent?: boolean;
+    region?: string;
+    vcpus?: number;
+    memory?: number;
+    image?: string;
+    runtime?: string;
+    timeout?: number;
+    tags?: Record<string, string>;
+    expiresAt?: number;
+    totalActiveCpuDurationMs?: number;
+    totalDurationMs?: number;
+    totalEgressBytes?: number;
+    totalIngressBytes?: number;
+}
+export interface VercelSandboxListPage {
+    sandboxes: VercelSandboxListItem[];
+    pagination: {
+        count: number;
+        next: string | null;
+    };
+}
+export interface VercelListParams {
+    namePrefix?: string;
+    tags?: Record<string, string>;
+    limit?: number;
+    cursor?: string;
+    signal?: AbortSignal;
+}
+export interface VercelCreateParams {
+    name: string;
+    tags?: Record<string, string>;
+    env?: Record<string, string>;
+    ports?: number[];
+    timeout?: number;
+    persistent?: boolean;
+    resources?: {
+        vcpus: number;
+    };
+    image?: string;
+    runtime?: string;
+    signal?: AbortSignal;
+}
+export interface VercelRunCommandParams {
+    cmd: string;
+    args?: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+    sudo?: boolean;
+    detached?: boolean;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}
+/**
+ * A command in a sandbox.
+ *
+ * `exitCode` is `null` while a detached command is still running and after a
+ * re-resolution that has not observed an exit yet. It is never a stand-in for
+ * success.
+ */
+export interface VercelCommandLike {
+    readonly cmdId: string;
+    readonly exitCode: number | null;
+    output(stream?: "stdout" | "stderr" | "both", opts?: {
+        signal?: AbortSignal;
+    }): Promise<string>;
+}
+export interface VercelSessionLike {
+    readonly sessionId: string;
+}
+export interface VercelSandboxLike {
+    readonly name: string;
+    readonly status: VercelSandboxStatus;
+    readonly createdAt: Date;
+    readonly updatedAt: Date;
+    readonly vcpus?: number;
+    readonly memory?: number;
+    readonly timeout?: number;
+    readonly tags?: Record<string, string>;
+    readonly expiresAt?: Date;
+    readonly totalActiveCpuDurationMs?: number;
+    readonly totalDurationMs?: number;
+    currentSession(): VercelSessionLike;
+    runCommand(params: VercelRunCommandParams): Promise<VercelCommandLike>;
+    getCommand(cmdId: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<VercelCommandLike>;
+    writeFiles(files: Array<{
+        path: string;
+        content: string | Uint8Array;
+        mode?: number;
+    }>, opts?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
+    readFileToBuffer(file: {
+        path: string;
+        cwd?: string;
+    }, opts?: {
+        signal?: AbortSignal;
+    }): Promise<Buffer | null>;
+    mkDir(path: string, opts?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
+    stop(opts?: {
+        signal?: AbortSignal;
+    }): Promise<unknown>;
+    delete(opts?: {
+        signal?: AbortSignal;
+    }): Promise<void>;
+}
+/** The provider surface this adapter depends on, and nothing more. */
+export interface VercelSandboxApiLike {
+    create(params: VercelCreateParams): Promise<VercelSandboxLike>;
+    get(params: {
+        name: string;
+        resume?: boolean;
+        signal?: AbortSignal;
+    }): Promise<VercelSandboxLike>;
+    list(params: VercelListParams): Promise<VercelSandboxListPage>;
+}
+export type VercelSandboxApiFactory = () => Promise<VercelSandboxApiLike> | VercelSandboxApiLike;
+/**
+ * True when the provider reports the named sandbox as absent.
+ *
+ * Delete verification and reattach both need to tell "gone" apart from "the
+ * lookup failed", and treating a transport error as absence is how a leaked
+ * sandbox gets reported as cleaned up.
+ */
+export declare function isVercelNotFoundError(error: unknown): boolean;
+/** Run `fn` with an absolute deadline applied to every request it triggers. */
+export declare function withRequestDeadline<T>(timeoutMs: number, fn: () => Promise<T>): Promise<T>;
+/** The deadline signal in force, if any. Exported for the adapter's callers. */
+export declare function currentRequestDeadlineSignal(): AbortSignal | undefined;
+/**
+ * Wrap `fetch` so every request also observes the ambient operation deadline.
+ *
+ * `AbortSignal.any` keeps the caller's own per-request signal intact instead of
+ * replacing it, so an explicit cancellation and a deadline expiry both work.
+ */
+export declare function deadlineBoundFetch(baseFetch?: typeof globalThis.fetch): typeof globalThis.fetch;
+/**
+ * The official client, bound to injected credentials and the deadline-aware
+ * fetch.
+ *
+ * Credentials are passed explicitly on every static call rather than left to
+ * the SDK's ambient resolution, which would otherwise fall back to the
+ * operator's environment or an on-disk OAuth token.
+ *
+ * Note what this function does *not* do: cast. Each vendor result is assigned
+ * **through** the structural type above, so if the SDK changes a signature the
+ * build breaks here, in the one file that owns the boundary. An
+ * `as unknown as` would accept the drift silently and surface it later as a
+ * runtime failure against a live sandbox.
+ */
+export declare function createOfficialVercelSandboxApi(credentials: VercelCredentials): Promise<VercelSandboxApiLike>;
+//# sourceMappingURL=sdk.d.ts.map

package/dist/vercel/internal/sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.d.ts","sourceRoot":"","sources":["../../../src/vercel/internal/sdk.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEtD;;;;;;;GAOG;AAEH,kDAAkD;AAClD,MAAM,MAAM,mBAAmB,GAC3B,SAAS,GACT,SAAS,GACT,UAAU,GACV,SAAS,GACT,QAAQ,GACR,SAAS,GACT,cAAc,GACd,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,iCAAiC;AACjC,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,mBAAmB,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CACpD;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,SAAS,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,CACJ,MAAM,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,EACrC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,cAAc,IAAI,iBAAiB,CAAC;IACpC,UAAU,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvE,UAAU,CACR,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B,UAAU,CACR,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAC3E,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,gBAAgB,CACd,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,EACpC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAC9B,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1B,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAED,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/D,GAAG,CAAC,MAAM,EAAE;QACV,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,uBAAuB,GAAG,MAClC,OAAO,CAAC,oBAAoB,CAAC,GAC7B,oBAAoB,CAAC;AAEzB;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAW7D;AAgBD,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,CAAC,EACnC,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAEZ;AAED,gFAAgF;AAChF,wBAAgB,4BAA4B,IAAI,WAAW,GAAG,SAAS,CAEtE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,GAAE,OAAO,UAAU,CAAC,KAAwB,GACpD,OAAO,UAAU,CAAC,KAAK,CAWzB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,8BAA8B,CAClD,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CA0C/B"}

package/dist/vercel/internal/sdk.js

@@ -0,0 +1,117 @@
+import { AsyncLocalStorage } from "node:async_hooks";
+/**
+ * True when the provider reports the named sandbox as absent.
+ *
+ * Delete verification and reattach both need to tell "gone" apart from "the
+ * lookup failed", and treating a transport error as absence is how a leaked
+ * sandbox gets reported as cleaned up.
+ */
+export function isVercelNotFoundError(error) {
+    if (!error || typeof error !== "object") {
+        return false;
+    }
+    const status = error.response?.status;
+    if (status === 404) {
+        return true;
+    }
+    const code = error.json?.error
+        ?.code;
+    return code === "not_found" || code === "sandbox_not_found";
+}
+/**
+ * Absolute deadline for one logical operation, including SDK-internal retries.
+ *
+ * The vendor SDK retries some failures itself. A per-attempt timeout therefore
+ * bounds nothing: N retries multiply it. This store carries a single signal for
+ * the whole operation, and the fetch wrapper below joins it onto every request
+ * the SDK makes inside that operation — retries included.
+ *
+ * `AsyncLocalStorage` rather than a mutable field because operations on one
+ * runtime run concurrently, and a shared cell would let a short lookup abort a
+ * long exec that happened to overlap it.
+ */
+const operationDeadline = new AsyncLocalStorage();
+/** Run `fn` with an absolute deadline applied to every request it triggers. */
+export function withRequestDeadline(timeoutMs, fn) {
+    return operationDeadline.run(AbortSignal.timeout(timeoutMs), fn);
+}
+/** The deadline signal in force, if any. Exported for the adapter's callers. */
+export function currentRequestDeadlineSignal() {
+    return operationDeadline.getStore();
+}
+/**
+ * Wrap `fetch` so every request also observes the ambient operation deadline.
+ *
+ * `AbortSignal.any` keeps the caller's own per-request signal intact instead of
+ * replacing it, so an explicit cancellation and a deadline expiry both work.
+ */
+export function deadlineBoundFetch(baseFetch = globalThis.fetch) {
+    return (input, init) => {
+        const deadline = operationDeadline.getStore();
+        if (!deadline) {
+            return baseFetch(input, init);
+        }
+        const signal = init?.signal
+            ? AbortSignal.any([init.signal, deadline])
+            : deadline;
+        return baseFetch(input, { ...init, signal });
+    };
+}
+/**
+ * The official client, bound to injected credentials and the deadline-aware
+ * fetch.
+ *
+ * Credentials are passed explicitly on every static call rather than left to
+ * the SDK's ambient resolution, which would otherwise fall back to the
+ * operator's environment or an on-disk OAuth token.
+ *
+ * Note what this function does *not* do: cast. Each vendor result is assigned
+ * **through** the structural type above, so if the SDK changes a signature the
+ * build breaks here, in the one file that owns the boundary. An
+ * `as unknown as` would accept the drift silently and surface it later as a
+ * runtime failure against a live sandbox.
+ */
+export async function createOfficialVercelSandboxApi(credentials) {
+    const { Sandbox } = await import("@vercel/sandbox");
+    const fetch = deadlineBoundFetch();
+    const auth = {
+        token: credentials.token,
+        teamId: credentials.teamId,
+        projectId: credentials.projectId,
+    };
+    return {
+        create: async (params) => {
+            const { image, runtime, ...rest } = params;
+            // `image` and `runtime` are mutually exclusive upstream, so the call is
+            // narrowed to one branch instead of handing over an object that claims
+            // both are possible.
+            const created = runtime
+                ? await Sandbox.create({ ...rest, runtime, ...auth, fetch })
+                : await Sandbox.create({
+                    ...rest,
+                    ...(image ? { image } : {}),
+                    ...auth,
+                    fetch,
+                });
+            const checked = created;
+            return checked;
+        },
+        get: async (params) => {
+            const checked = await Sandbox.get({
+                ...params,
+                ...auth,
+                fetch,
+            });
+            return checked;
+        },
+        list: async (params) => {
+            const checked = await Sandbox.list({
+                ...params,
+                ...auth,
+                fetch,
+            });
+            return checked;
+        },
+    };
+}
+//# sourceMappingURL=sdk.js.map

package/dist/vercel/internal/sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk.js","sourceRoot":"","sources":["../../../src/vercel/internal/sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAqJrD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAI,KAA6C,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC/E,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAI,KAAmD,CAAC,IAAI,EAAE,KAAK;QAC3E,EAAE,IAAI,CAAC;IACT,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,mBAAmB,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAe,CAAC;AAE/D,+EAA+E;AAC/E,MAAM,UAAU,mBAAmB,CACjC,SAAiB,EACjB,EAAoB;IAEpB,OAAO,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,4BAA4B;IAC1C,OAAO,iBAAiB,CAAC,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAAqC,UAAU,CAAC,KAAK;IAErD,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM;YACzB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAC1C,CAAC,CAAC,QAAQ,CAAC;QACb,OAAO,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAClD,WAA8B;IAE9B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,kBAAkB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,SAAS,EAAE,WAAW,CAAC,SAAS;KACjC,CAAC;IACF,OAAO;QACL,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;YAC3C,wEAAwE;YACxE,uEAAuE;YACvE,qBAAqB;YACrB,MAAM,OAAO,GAAG,OAAO;gBACrB,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC;gBAC5D,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC;oBACnB,GAAG,IAAI;oBACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3B,GAAG,IAAI;oBACP,KAAK;iBACN,CAAC,CAAC;YACP,MAAM,OAAO,GAAsB,OAAO,CAAC;YAC3C,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACpB,MAAM,OAAO,GAAsB,MAAM,OAAO,CAAC,GAAG,CAAC;gBACnD,GAAG,MAAM;gBACT,GAAG,IAAI;gBACP,KAAK;aACN,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACrB,MAAM,OAAO,GAA0B,MAAM,OAAO,CAAC,IAAI,CAAC;gBACxD,GAAG,MAAM;gBACT,GAAG,IAAI;gBACP,KAAK;aACN,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}