@agentproto/sandbox-e2b 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 agentproto contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,46 @@
+# @agentproto/sandbox-e2b
+
+e2b `SandboxProvider` for `@agentproto/sandbox`. Boots the pre-built
+`agentproto-workstation` e2b template, starts the agentproto daemon inside
+it, and exposes its MCP endpoint as a URL — so
+`createSandboxAgentSessionHost` can hand it straight to
+`connectDaemonAgentSessionHost` (`@agentproto/worktree`) and run any
+`AgentStep` inside the sandbox, unchanged.
+
+## Usage
+
+```ts
+import { createSandboxAgentSessionHost } from "@agentproto/sandbox"
+import { e2bSandboxProvider } from "@agentproto/sandbox-e2b"
+import { runWorkflow } from "@agentproto/workflow-runtime"
+import { worktreeAgentWorkflow } from "@agentproto/worktree"
+
+const host = await createSandboxAgentSessionHost({
+  provider: e2bSandboxProvider,
+  spec: { provider: "e2b", config: {} },
+  secrets: { slugs: ["OPENROUTER_API_KEY"] },
+})
+try {
+  await runWorkflow({ workflow: worktreeAgentWorkflow, input, agents: host })
+} finally {
+  await host.stop()
+}
+```
+
+Requires `E2B_API_KEY` in the host process's environment.
+
+## Notes
+
+- The daemon's own origin allowlist defaults to `localhost:*`; this provider
+  opens it for the sandbox's own public host (`--allow-origin
+  https://<getHost>`) so the host process can reach it over
+  `https://<getHost>/mcp`.
+- The pre-built `agentproto-workstation` template can lag behind the latest
+  `@agentproto/cli` release. This provider runs `npm i -g
+  @agentproto/cli@latest` before starting the daemon (set `updateCliOnBoot:
+  false` in `spec.config` to skip it — e.g. once the template is rebuilt
+  against a current release, which is the cleaner long-term fix).
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/index.d.ts

@@ -0,0 +1,33 @@
+import { SandboxProvider } from '@agentproto/sandbox';
+
+/**
+ * e2b `SandboxProvider` — boots the pre-built `agentproto-workstation`
+ * template, ensures the agentproto daemon is listening on it, and exposes
+ * the daemon's `/mcp` endpoint via `sandbox.getHost()` so
+ * `createSandboxAgentSessionHost` (`@agentproto/sandbox`) can hand it
+ * straight to `connectDaemonAgentSessionHost`.
+ *
+ * `getHost(port)` returns a publicly reachable hostname for that port
+ * directly — e2b's per-sandbox auth token (`SandboxOpts.secure`) gates the
+ * SDK's own control-plane (envd) traffic, not arbitrary listening ports the
+ * sandbox process opens, so no extra auth header is threaded through here.
+ * The daemon's OWN origin allowlist is a separate gate, though: it defaults
+ * to `localhost:*`, which rejects a connection from this host process
+ * against the sandbox's public `https://<getHost>` origin. `--allow-origin`
+ * is passed the sandbox's own getHost origin to open that gate.
+ *
+ * The workstation template MAY already autostart the daemon; since that
+ * can't be verified without a live template, this provider checks health
+ * first and only issues the start command when the daemon isn't already
+ * responding — correct either way. When it does start the daemon, it first
+ * updates the baked `@agentproto/cli` (the pre-built template can lag
+ * behind — verified stale against a live template) so callers aren't stuck
+ * on whatever agentproto version the template was last baked with.
+ */
+
+/** Pre-built template that bakes @agentproto/cli + adapters + node + git. */
+declare const DEFAULT_TEMPLATE = "53ybr99wdfgoebi9nee8";
+/** `e2bSandboxProvider.boot`/`.connect` — see module docs. */
+declare const e2bSandboxProvider: SandboxProvider;
+
+export { DEFAULT_TEMPLATE, e2bSandboxProvider };

package/dist/index.mjs

@@ -0,0 +1,106 @@
+import { Sandbox } from 'e2b';
+
+/**
+ * @agentproto/sandbox-e2b v0.1.0-alpha
+ * e2b SandboxProvider for @agentproto/sandbox.
+ */
+
+var DEFAULT_TEMPLATE = "53ybr99wdfgoebi9nee8";
+var DEFAULT_PORT = 18790;
+var DEFAULT_WORKSPACE = "/home/user";
+var HEALTH_PROBE_TIMEOUT_MS = 3e3;
+var DAEMON_READY_TIMEOUT_MS = 3e4;
+var POLL_INTERVAL_MS = 500;
+var UPDATE_CLI_TIMEOUT_MS = 12e4;
+function readE2bConfig(spec) {
+  const config = spec.config ?? {};
+  return {
+    template: typeof config.template === "string" ? config.template : void 0,
+    port: typeof config.port === "number" ? config.port : void 0,
+    workspace: typeof config.workspace === "string" ? config.workspace : void 0,
+    timeoutMs: typeof config.timeoutMs === "number" ? config.timeoutMs : void 0,
+    healthProbeTimeoutMs: typeof config.healthProbeTimeoutMs === "number" ? config.healthProbeTimeoutMs : void 0,
+    daemonReadyTimeoutMs: typeof config.daemonReadyTimeoutMs === "number" ? config.daemonReadyTimeoutMs : void 0,
+    pollIntervalMs: typeof config.pollIntervalMs === "number" ? config.pollIntervalMs : void 0,
+    updateCliOnBoot: typeof config.updateCliOnBoot === "boolean" ? config.updateCliOnBoot : void 0,
+    updateCliTimeoutMs: typeof config.updateCliTimeoutMs === "number" ? config.updateCliTimeoutMs : void 0
+  };
+}
+async function ensureDaemonHealthy(sandbox, host, port, workspace, config, env) {
+  const healthUrl = `https://${host}/health`;
+  const healthProbeTimeoutMs = config.healthProbeTimeoutMs ?? HEALTH_PROBE_TIMEOUT_MS;
+  const daemonReadyTimeoutMs = config.daemonReadyTimeoutMs ?? DAEMON_READY_TIMEOUT_MS;
+  const pollIntervalMs = config.pollIntervalMs ?? POLL_INTERVAL_MS;
+  const alreadyUp = await probeHealth(healthUrl, healthProbeTimeoutMs, pollIntervalMs);
+  if (alreadyUp) return;
+  if (config.updateCliOnBoot ?? true) {
+    await sandbox.commands.run("sudo npm i -g @agentproto/cli@latest", {
+      envs: env,
+      timeoutMs: config.updateCliTimeoutMs ?? UPDATE_CLI_TIMEOUT_MS
+    });
+  }
+  await sandbox.commands.run(
+    `agentproto serve --port ${port} --bind 0.0.0.0 --workspace ${workspace} --allow-origin https://${host}`,
+    { background: true, envs: env }
+  );
+  const ready = await probeHealth(healthUrl, daemonReadyTimeoutMs, pollIntervalMs);
+  if (!ready) {
+    await sandbox.kill();
+    throw new Error(
+      `@agentproto/sandbox-e2b: agentproto daemon did not become healthy at ${healthUrl} within ${daemonReadyTimeoutMs}ms (sandbox ${sandbox.sandboxId}).`
+    );
+  }
+}
+function toBootedSandbox(sandbox, host) {
+  return {
+    mcpUrl: `https://${host}/mcp`,
+    sandboxId: sandbox.sandboxId,
+    async stop() {
+      await sandbox.kill();
+    },
+    async pause() {
+      await sandbox.pause({ keepMemory: true });
+    }
+  };
+}
+var e2bSandboxProvider = {
+  async boot(spec, opts) {
+    const config = readE2bConfig(spec);
+    const template = config.template ?? DEFAULT_TEMPLATE;
+    const port = config.port ?? DEFAULT_PORT;
+    const workspace = config.workspace ?? DEFAULT_WORKSPACE;
+    const sandbox = await Sandbox.create(template, {
+      apiKey: process.env.E2B_API_KEY,
+      envs: opts.env,
+      ...config.timeoutMs !== void 0 ? { timeoutMs: config.timeoutMs } : {}
+    });
+    const host = sandbox.getHost(port);
+    await ensureDaemonHealthy(sandbox, host, port, workspace, config, opts.env);
+    return toBootedSandbox(sandbox, host);
+  },
+  async connect(sandboxId, spec, opts) {
+    const config = readE2bConfig(spec);
+    const port = config.port ?? DEFAULT_PORT;
+    const workspace = config.workspace ?? DEFAULT_WORKSPACE;
+    const sandbox = await Sandbox.connect(sandboxId, { apiKey: process.env.E2B_API_KEY });
+    const host = sandbox.getHost(port);
+    await ensureDaemonHealthy(sandbox, host, port, workspace, config, opts.env);
+    return toBootedSandbox(sandbox, host);
+  }
+};
+async function probeHealth(url, timeoutMs, pollIntervalMs) {
+  const deadline = Date.now() + timeoutMs;
+  for (; ; ) {
+    try {
+      const res = await fetch(url, { signal: AbortSignal.timeout(pollIntervalMs) });
+      if (res.ok) return true;
+    } catch {
+    }
+    if (Date.now() >= deadline) return false;
+    await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+  }
+}
+
+export { DEFAULT_TEMPLATE, e2bSandboxProvider };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provider.ts"],"names":[],"mappings":";;;;;;;AA6BO,IAAM,gBAAA,GAAmB;AAGhC,IAAM,YAAA,GAAe,KAAA;AACrB,IAAM,iBAAA,GAAoB,YAAA;AAC1B,IAAM,uBAAA,GAA0B,GAAA;AAChC,IAAM,uBAAA,GAA0B,GAAA;AAChC,IAAM,gBAAA,GAAmB,GAAA;AACzB,IAAM,qBAAA,GAAwB,IAAA;AA0B9B,SAAS,cAAc,IAAA,EAAqC;AAC1D,EAAA,MAAM,MAAA,GAAU,IAAA,CAAK,MAAA,IAAU,EAAC;AAChC,EAAA,OAAO;AAAA,IACL,UAAU,OAAO,MAAA,CAAO,QAAA,KAAa,QAAA,GAAW,OAAO,QAAA,GAAW,MAAA;AAAA,IAClE,MAAM,OAAO,MAAA,CAAO,IAAA,KAAS,QAAA,GAAW,OAAO,IAAA,GAAO,MAAA;AAAA,IACtD,WAAW,OAAO,MAAA,CAAO,SAAA,KAAc,QAAA,GAAW,OAAO,SAAA,GAAY,MAAA;AAAA,IACrE,WAAW,OAAO,MAAA,CAAO,SAAA,KAAc,QAAA,GAAW,OAAO,SAAA,GAAY,MAAA;AAAA,IACrE,sBACE,OAAO,MAAA,CAAO,oBAAA,KAAyB,QAAA,GAAW,OAAO,oBAAA,GAAuB,MAAA;AAAA,IAClF,sBACE,OAAO,MAAA,CAAO,oBAAA,KAAyB,QAAA,GAAW,OAAO,oBAAA,GAAuB,MAAA;AAAA,IAClF,gBAAgB,OAAO,MAAA,CAAO,cAAA,KAAmB,QAAA,GAAW,OAAO,cAAA,GAAiB,MAAA;AAAA,IACpF,iBAAiB,OAAO,MAAA,CAAO,eAAA,KAAoB,SAAA,GAAY,OAAO,eAAA,GAAkB,MAAA;AAAA,IACxF,oBACE,OAAO,MAAA,CAAO,kBAAA,KAAuB,QAAA,GAAW,OAAO,kBAAA,GAAqB;AAAA,GAChF;AACF;AAUA,eAAe,oBACb,OAAA,EACA,IAAA,EACA,IAAA,EACA,SAAA,EACA,QACA,GAAA,EACe;AACf,EAAA,MAAM,SAAA,GAAY,WAAW,IAAI,CAAA,OAAA,CAAA;AACjC,EAAA,MAAM,oBAAA,GAAuB,OAAO,oBAAA,IAAwB,uBAAA;AAC5D,EAAA,MAAM,oBAAA,GAAuB,OAAO,oBAAA,IAAwB,uBAAA;AAC5D,EAAA,MAAM,cAAA,GAAiB,OAAO,cAAA,IAAkB,gBAAA;AAEhD,EAAA,MAAM,SAAA,GAAY,MAAM,WAAA,CAAY,SAAA,EAAW,sBAAsB,cAAc,CAAA;AACnF,EAAA,IAAI,SAAA,EAAW;AAEf,EAAA,IAAI,MAAA,CAAO,mBAAmB,IAAA,EAAM;AAClC,IAAA,MAAM,OAAA,CAAQ,QAAA,CAAS,GAAA,CAAI,sCAAA,EAAwC;AAAA,MACjE,IAAA,EAAM,GAAA;AAAA,MACN,SAAA,EAAW,OAAO,kBAAA,IAAsB;AAAA,KACzC,CAAA;AAAA,EACH;AACA,EAAA,MAAM,QAAQ,QAAA,CAAS,GAAA;AAAA,IACrB,CAAA,wBAAA,EAA2B,IAAI,CAAA,4BAAA,EAA+B,SAAS,2BAA2B,IAAI,CAAA,CAAA;AAAA,IACtG,EAAE,UAAA,EAAY,IAAA,EAAM,IAAA,EAAM,GAAA;AAAI,GAChC;AACA,EAAA,MAAM,KAAA,GAAQ,MAAM,WAAA,CAAY,SAAA,EAAW,sBAAsB,cAAc,CAAA;AAC/E,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,QAAQ,IAAA,EAAK;AACnB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,wEAAwE,SAAS,CAAA,QAAA,EACrE,oBAAoB,CAAA,YAAA,EAAe,QAAQ,SAAS,CAAA,EAAA;AAAA,KAClE;AAAA,EACF;AACF;AAOA,SAAS,eAAA,CAAgB,SAAqD,IAAA,EAA6B;AACzG,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,WAAW,IAAI,CAAA,IAAA,CAAA;AAAA,IACvB,WAAW,OAAA,CAAQ,SAAA;AAAA,IACnB,MAAM,IAAA,GAAsB;AAC1B,MAAA,MAAM,QAAQ,IAAA,EAAK;AAAA,IACrB,CAAA;AAAA,IACA,MAAM,KAAA,GAAuB;AAC3B,MAAA,MAAM,OAAA,CAAQ,KAAA,CAAM,EAAE,UAAA,EAAY,MAAM,CAAA;AAAA,IAC1C;AAAA,GACF;AACF;AAGO,IAAM,kBAAA,GAAsC;AAAA,EACjD,MAAM,IAAA,CAAK,IAAA,EAAmB,IAAA,EAA+C;AAC3E,IAAA,MAAM,MAAA,GAAS,cAAc,IAAI,CAAA;AACjC,IAAA,MAAM,QAAA,GAAW,OAAO,QAAA,IAAY,gBAAA;AACpC,IAAA,MAAM,IAAA,GAAO,OAAO,IAAA,IAAQ,YAAA;AAC5B,IAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,iBAAA;AAEtC,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,MAAA,CAAO,QAAA,EAAU;AAAA,MAC7C,MAAA,EAAQ,QAAQ,GAAA,CAAI,WAAA;AAAA,MACpB,MAAM,IAAA,CAAK,GAAA;AAAA,MACX,GAAI,OAAO,SAAA,KAAc,MAAA,GAAY,EAAE,SAAA,EAAW,MAAA,CAAO,SAAA,EAAU,GAAI;AAAC,KACzE,CAAA;AAED,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AACjC,IAAA,MAAM,oBAAoB,OAAA,EAAS,IAAA,EAAM,MAAM,SAAA,EAAW,MAAA,EAAQ,KAAK,GAAG,CAAA;AAC1E,IAAA,OAAO,eAAA,CAAgB,SAAS,IAAI,CAAA;AAAA,EACtC,CAAA;AAAA,EAEA,MAAM,OAAA,CAAQ,SAAA,EAAmB,IAAA,EAAmB,IAAA,EAA+C;AACjG,IAAA,MAAM,MAAA,GAAS,cAAc,IAAI,CAAA;AACjC,IAAA,MAAM,IAAA,GAAO,OAAO,IAAA,IAAQ,YAAA;AAC5B,IAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,iBAAA;AAEtC,IAAA,MAAM,OAAA,GAAU,MAAM,OAAA,CAAQ,OAAA,CAAQ,SAAA,EAAW,EAAE,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,EAAa,CAAA;AAEpF,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,OAAA,CAAQ,IAAI,CAAA;AACjC,IAAA,MAAM,oBAAoB,OAAA,EAAS,IAAA,EAAM,MAAM,SAAA,EAAW,MAAA,EAAQ,KAAK,GAAG,CAAA;AAC1E,IAAA,OAAO,eAAA,CAAgB,SAAS,IAAI,CAAA;AAAA,EACtC;AACF;AAGA,eAAe,WAAA,CAAY,GAAA,EAAa,SAAA,EAAmB,cAAA,EAA0C;AACnG,EAAA,MAAM,QAAA,GAAW,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAC9B,EAAA,WAAS;AACP,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,QAAQ,WAAA,CAAY,OAAA,CAAQ,cAAc,CAAA,EAAG,CAAA;AAC5E,MAAA,IAAI,GAAA,CAAI,IAAI,OAAO,IAAA;AAAA,IACrB,CAAA,CAAA,MAAQ;AAAA,IAER;AACA,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,IAAK,QAAA,EAAU,OAAO,KAAA;AACnC,IAAA,MAAM,IAAI,OAAA,CAAQ,CAAA,OAAA,KAAW,UAAA,CAAW,OAAA,EAAS,cAAc,CAAC,CAAA;AAAA,EAClE;AACF","file":"index.mjs","sourcesContent":["/**\n * e2b `SandboxProvider` — boots the pre-built `agentproto-workstation`\n * template, ensures the agentproto daemon is listening on it, and exposes\n * the daemon's `/mcp` endpoint via `sandbox.getHost()` so\n * `createSandboxAgentSessionHost` (`@agentproto/sandbox`) can hand it\n * straight to `connectDaemonAgentSessionHost`.\n *\n * `getHost(port)` returns a publicly reachable hostname for that port\n * directly — e2b's per-sandbox auth token (`SandboxOpts.secure`) gates the\n * SDK's own control-plane (envd) traffic, not arbitrary listening ports the\n * sandbox process opens, so no extra auth header is threaded through here.\n * The daemon's OWN origin allowlist is a separate gate, though: it defaults\n * to `localhost:*`, which rejects a connection from this host process\n * against the sandbox's public `https://<getHost>` origin. `--allow-origin`\n * is passed the sandbox's own getHost origin to open that gate.\n *\n * The workstation template MAY already autostart the daemon; since that\n * can't be verified without a live template, this provider checks health\n * first and only issues the start command when the daemon isn't already\n * responding — correct either way. When it does start the daemon, it first\n * updates the baked `@agentproto/cli` (the pre-built template can lag\n * behind — verified stale against a live template) so callers aren't stuck\n * on whatever agentproto version the template was last baked with.\n */\n\nimport { Sandbox } from \"e2b\"\nimport type { BootedSandbox, SandboxBootOpts, SandboxProvider, SandboxSpec } from \"@agentproto/sandbox\"\n\n/** Pre-built template that bakes @agentproto/cli + adapters + node + git. */\nexport const DEFAULT_TEMPLATE = \"53ybr99wdfgoebi9nee8\"\n\n/** `serve.ts`'s default port (`DEFAULT_MCP_URL` in `@agentproto/harness`). */\nconst DEFAULT_PORT = 18790\nconst DEFAULT_WORKSPACE = \"/home/user\"\nconst HEALTH_PROBE_TIMEOUT_MS = 3_000\nconst DAEMON_READY_TIMEOUT_MS = 30_000\nconst POLL_INTERVAL_MS = 500\nconst UPDATE_CLI_TIMEOUT_MS = 120_000\n\ninterface E2bSandboxConfig {\n  /** Template name or id. Defaults to the `agentproto-workstation` template. */\n  template?: string\n  /** Port the agentproto daemon listens on inside the sandbox. Default 18790. */\n  port?: number\n  /** `--workspace` passed to `agentproto serve`. Default `/home/user`. */\n  workspace?: string\n  /** Sandbox lifetime cap, forwarded to `Sandbox.create`. */\n  timeoutMs?: number\n  /** How long to wait for the health probe before assuming the daemon isn't autostarted. */\n  healthProbeTimeoutMs?: number\n  /** How long to wait for the daemon to become healthy after starting it. */\n  daemonReadyTimeoutMs?: number\n  /** Delay between health-probe attempts. */\n  pollIntervalMs?: number\n  /** Run `npm i -g @agentproto/cli@latest` before starting the daemon, so a\n   *  stale template bake doesn't pin callers to an old agentproto version.\n   *  Default true. Only runs when this provider is the one starting the\n   *  daemon (skipped when the health probe finds it already autostarted). */\n  updateCliOnBoot?: boolean\n  /** Timeout for the `npm i -g` update command. Default 120s. */\n  updateCliTimeoutMs?: number\n}\n\nfunction readE2bConfig(spec: SandboxSpec): E2bSandboxConfig {\n  const config = (spec.config ?? {}) as Record<string, unknown>\n  return {\n    template: typeof config.template === \"string\" ? config.template : undefined,\n    port: typeof config.port === \"number\" ? config.port : undefined,\n    workspace: typeof config.workspace === \"string\" ? config.workspace : undefined,\n    timeoutMs: typeof config.timeoutMs === \"number\" ? config.timeoutMs : undefined,\n    healthProbeTimeoutMs:\n      typeof config.healthProbeTimeoutMs === \"number\" ? config.healthProbeTimeoutMs : undefined,\n    daemonReadyTimeoutMs:\n      typeof config.daemonReadyTimeoutMs === \"number\" ? config.daemonReadyTimeoutMs : undefined,\n    pollIntervalMs: typeof config.pollIntervalMs === \"number\" ? config.pollIntervalMs : undefined,\n    updateCliOnBoot: typeof config.updateCliOnBoot === \"boolean\" ? config.updateCliOnBoot : undefined,\n    updateCliTimeoutMs:\n      typeof config.updateCliTimeoutMs === \"number\" ? config.updateCliTimeoutMs : undefined,\n  }\n}\n\n/**\n * Probe health, and — if the daemon isn't already up — update the (possibly\n * stale) baked CLI and start it, then re-probe. Shared by `boot` (a fresh\n * template's autostart may not have fired yet) and `connect` (a resumed box\n * may wake with a dead daemon process — see PR3 risk \"stale daemon on\n * reconnect\"). Throws (after killing the sandbox) if the daemon never comes\n * up.\n */\nasync function ensureDaemonHealthy(\n  sandbox: Sandbox,\n  host: string,\n  port: number,\n  workspace: string,\n  config: E2bSandboxConfig,\n  env: Record<string, string>,\n): Promise<void> {\n  const healthUrl = `https://${host}/health`\n  const healthProbeTimeoutMs = config.healthProbeTimeoutMs ?? HEALTH_PROBE_TIMEOUT_MS\n  const daemonReadyTimeoutMs = config.daemonReadyTimeoutMs ?? DAEMON_READY_TIMEOUT_MS\n  const pollIntervalMs = config.pollIntervalMs ?? POLL_INTERVAL_MS\n\n  const alreadyUp = await probeHealth(healthUrl, healthProbeTimeoutMs, pollIntervalMs)\n  if (alreadyUp) return\n\n  if (config.updateCliOnBoot ?? true) {\n    await sandbox.commands.run(\"sudo npm i -g @agentproto/cli@latest\", {\n      envs: env,\n      timeoutMs: config.updateCliTimeoutMs ?? UPDATE_CLI_TIMEOUT_MS,\n    })\n  }\n  await sandbox.commands.run(\n    `agentproto serve --port ${port} --bind 0.0.0.0 --workspace ${workspace} --allow-origin https://${host}`,\n    { background: true, envs: env },\n  )\n  const ready = await probeHealth(healthUrl, daemonReadyTimeoutMs, pollIntervalMs)\n  if (!ready) {\n    await sandbox.kill()\n    throw new Error(\n      `@agentproto/sandbox-e2b: agentproto daemon did not become healthy at ${healthUrl} ` +\n        `within ${daemonReadyTimeoutMs}ms (sandbox ${sandbox.sandboxId}).`,\n    )\n  }\n}\n\n/** Wrap a healthy sandbox handle into the `BootedSandbox` shape common to\n *  `boot` and `connect`. `pause()` always keeps the full memory snapshot\n *  (`keepMemory: true`, the SDK default) — a filesystem-only pause would\n *  cold-boot the box on resume, dropping the running agentproto daemon and\n *  any open connections (PR3 risk \"e2b pause loses in-memory state\"). */\nfunction toBootedSandbox(sandbox: Awaited<ReturnType<typeof Sandbox.create>>, host: string): BootedSandbox {\n  return {\n    mcpUrl: `https://${host}/mcp`,\n    sandboxId: sandbox.sandboxId,\n    async stop(): Promise<void> {\n      await sandbox.kill()\n    },\n    async pause(): Promise<void> {\n      await sandbox.pause({ keepMemory: true })\n    },\n  }\n}\n\n/** `e2bSandboxProvider.boot`/`.connect` — see module docs. */\nexport const e2bSandboxProvider: SandboxProvider = {\n  async boot(spec: SandboxSpec, opts: SandboxBootOpts): Promise<BootedSandbox> {\n    const config = readE2bConfig(spec)\n    const template = config.template ?? DEFAULT_TEMPLATE\n    const port = config.port ?? DEFAULT_PORT\n    const workspace = config.workspace ?? DEFAULT_WORKSPACE\n\n    const sandbox = await Sandbox.create(template, {\n      apiKey: process.env.E2B_API_KEY,\n      envs: opts.env,\n      ...(config.timeoutMs !== undefined ? { timeoutMs: config.timeoutMs } : {}),\n    })\n\n    const host = sandbox.getHost(port)\n    await ensureDaemonHealthy(sandbox, host, port, workspace, config, opts.env)\n    return toBootedSandbox(sandbox, host)\n  },\n\n  async connect(sandboxId: string, spec: SandboxSpec, opts: SandboxBootOpts): Promise<BootedSandbox> {\n    const config = readE2bConfig(spec)\n    const port = config.port ?? DEFAULT_PORT\n    const workspace = config.workspace ?? DEFAULT_WORKSPACE\n\n    const sandbox = await Sandbox.connect(sandboxId, { apiKey: process.env.E2B_API_KEY })\n\n    const host = sandbox.getHost(port)\n    await ensureDaemonHealthy(sandbox, host, port, workspace, config, opts.env)\n    return toBootedSandbox(sandbox, host)\n  },\n}\n\n/** Poll `url` until it responds OK, or return false once `timeoutMs` elapses. */\nasync function probeHealth(url: string, timeoutMs: number, pollIntervalMs: number): Promise<boolean> {\n  const deadline = Date.now() + timeoutMs\n  for (;;) {\n    try {\n      const res = await fetch(url, { signal: AbortSignal.timeout(pollIntervalMs) })\n      if (res.ok) return true\n    } catch {\n      // not up yet — fall through to the deadline check\n    }\n    if (Date.now() >= deadline) return false\n    await new Promise(resolve => setTimeout(resolve, pollIntervalMs))\n  }\n}\n"]}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "@agentproto/sandbox-e2b",
+  "version": "0.1.0",
+  "description": "@agentproto/sandbox-e2b — e2b `SandboxProvider` for @agentproto/sandbox. Boots the `agentproto-workstation` e2b template, starts the agentproto daemon inside it, and exposes its MCP endpoint as a URL so any AgentSessionHost consumer (worktreeAgentWorkflow, worktree-agent CLI) can run a coding-agent step inside the sandbox.",
+  "keywords": [
+    "agentproto",
+    "aip-36",
+    "sandbox",
+    "e2b",
+    "open-standard",
+    "agentic"
+  ],
+  "homepage": "https://agentproto.sh/docs/aip-36",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "packages/sandbox-e2b"
+  },
+  "bugs": {
+    "url": "https://github.com/agentproto/ts/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "e2b": "^2.31.0",
+    "@agentproto/sandbox": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}