@alchemy.run/e2b 0.0.0 → 2.0.0-beta.87

package/lib/CreateSandbox.d.ts

@@ -0,0 +1,139 @@
+import type * as sandboxes from "@distilled.cloud/e2b/sandboxes";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { BoundVolumeMount, VolumeMount } from "./MountVolume.ts";
+import type { E2BError, E2BSandbox } from "./SandboxClient.ts";
+import type { Snapshot } from "./Snapshot.ts";
+import type { Template } from "./Template.ts";
+/** A template or snapshot sandboxes are created from. */
+export type SandboxBase = Template | Snapshot;
+/**
+ * E2B's `createSandbox` parameters. `templateID` defaults to the bound base;
+ * `metadata` is merged with the host's ownership stamp; `mounts` replaces
+ * E2B's `volumeMounts`.
+ */
+export type CreateSandboxOptions = Omit<sandboxes.CreateSandboxRequest, "templateID" | "volumeMounts"> & {
+    readonly templateID?: string;
+    /**
+     * Volumes to mount: a volume `CreateVolume` returned with a `path`, or a
+     * reference from `E2B.MountVolume`. A bound template's own mounts are
+     * added.
+     */
+    readonly mounts?: ReadonlyArray<VolumeMount | BoundVolumeMount>;
+};
+/** E2B's `listSandboxes` filters, with `metadata` as a record instead of a query string. */
+export type ListSandboxesOptions = Omit<sandboxes.ListSandboxesRequest, "metadata" | "nextToken"> & {
+    readonly metadata?: Readonly<Record<string, string>>;
+};
+/** E2B sandboxes: create, look up, list and kill them. */
+export interface SandboxesClient {
+    /** Creates a sandbox from the bound base (or `templateID`). */
+    create(options?: CreateSandboxOptions): Effect.Effect<E2BSandbox, E2BError, RuntimeContext>;
+    /**
+     * A handle to an existing sandbox. A paused sandbox is resumed; `timeout`
+     * (seconds) resets its lifetime.
+     */
+    connect(sandboxId: string, options?: {
+        readonly timeout?: number;
+        readonly memory?: boolean;
+    }): Effect.Effect<E2BSandbox, E2BError, RuntimeContext>;
+    /** A sandbox's details, without resuming it. */
+    get(sandboxId: string): Effect.Effect<sandboxes.SandboxDetail, E2BError, RuntimeContext>;
+    /** Sandboxes, filtered by metadata, state or template (the bound base by default). */
+    list(options?: ListSandboxesOptions): Effect.Effect<ReadonlyArray<sandboxes.ListedSandbox>, E2BError, RuntimeContext>;
+    /** Kills a sandbox. Killing one that is gone succeeds. */
+    kill(sandboxId: string): Effect.Effect<void, E2BError, RuntimeContext>;
+    /** The latest CPU, memory and disk metrics of several sandboxes at once, by id. */
+    metrics(sandboxIds: ReadonlyArray<string>): Effect.Effect<sandboxes.SandboxesWithMetrics, E2BError, RuntimeContext>;
+}
+/**
+ * Create and manage E2B sandboxes from a Worker, Function or any other host.
+ *
+ * `E2B.CreateSandbox(base)` creates sandboxes from a template or snapshot
+ * declared in the stack; `E2B.CreateSandbox()` takes the template per call.
+ * Both return the same client, whose calls take E2B's own parameters.
+ *
+ * Sandboxes created at run time are tagged with the stack, stage and
+ * binding (`alchemy::stack`, `alchemy::stage`, `alchemy::id` in their E2B
+ * metadata) and are not deleted when the stack is destroyed. List them by
+ * those tags to clean them up:
+ * `sandboxes.list({ metadata: { "alchemy::stack": "my-app", "alchemy::stage": "prod" } })`.
+ * Metadata you pass to `create` merges underneath; it never replaces the
+ * `alchemy::*` keys.
+ *
+ * The host gets its own E2B API key, minted at deploy and revoked when the
+ * host is destroyed. E2B keys are not scoped, so the key reaches the whole
+ * team; it is never the deployer's own.
+ *
+ * ### Creating sandboxes
+ * **Example:** One sandbox per request, killed when the request ends
+ * ```typescript
+ * const sandboxes = yield* E2B.CreateSandbox(Agent);
+ * // in fetch:
+ * const sandbox = yield* Effect.acquireRelease(
+ *   sandboxes.create({ timeout: 120 }),
+ *   (sandbox) => Effect.ignore(sandbox.kill()),
+ * );
+ * const result = yield* sandbox.exec("node --version");
+ * ```
+ *
+ * **Example:** A long-lived sandbox per task, found by metadata
+ * ```typescript
+ * const [existing] = yield* sandboxes.list({ metadata: { task }, state: ["running", "paused"] });
+ * const sandbox = existing
+ *   ? yield* sandboxes.connect(existing.sandboxID)
+ *   : yield* sandboxes.create({ metadata: { task }, autoPause: true, timeout: 1800 });
+ * ```
+ *
+ * ### Running commands
+ * `exec` runs to completion and returns `{ exitCode, stdout, stderr }`; a
+ * non-zero exit is returned, not failed. A string runs in a login shell, an
+ * array runs directly.
+ *
+ * **Example:** A shell line, an argument vector, stdin and a timeout
+ * ```typescript
+ * const test = yield* sandbox.exec("npm test", { cwd: "/home/user/app" });
+ * const version = yield* sandbox.exec(["node", "--version"]);
+ * const sorted = yield* sandbox.exec("sort", { stdin: "b\na\n" });
+ * const slow = yield* sandbox.exec("make", { timeout: "2 minutes" }); // E2B.ExecTimedOut
+ * ```
+ *
+ * **Example:** Stream a process, then wait for it
+ * ```typescript
+ * const build = yield* sandbox.start("npm run build", { cwd: "/home/user/app" });
+ * yield* build.output.pipe(
+ *   Stream.runForEach((chunk) => Effect.log(new TextDecoder().decode(chunk.data))),
+ * );
+ * const { exitCode } = yield* build.wait;
+ * ```
+ *
+ * Closing the scope detaches: the process keeps running, and
+ * `sandbox.processes.attach({ pid })` picks it up again.
+ *
+ * **Example:** A terminal
+ * ```typescript
+ * const pty = yield* sandbox.pty.open({ cols: 120, rows: 40 });
+ * yield* pty.write("ls\n");
+ * yield* pty.resize({ cols: 160, rows: 48 });
+ * ```
+ *
+ * ### Network and secrets
+ * **Example:** Allow only GitHub and inject a token at egress
+ * ```typescript
+ * const github = yield* GitHubToken;
+ * const sandbox = yield* sandboxes.create({
+ *   network: {
+ *     allowOut: ["github.com", "*.github.com"],
+ *     rules: { "api.github.com": [{ transform: { headers: { Authorization: `Bearer ${github.ref}` } } }] },
+ *   },
+ * });
+ * ```
+ *
+ * @binding
+ * @product Sandbox
+ */
+export interface CreateSandbox extends Binding.Service<CreateSandbox, "E2B.CreateSandbox", (base?: SandboxBase) => Effect.Effect<SandboxesClient>> {
+}
+export declare const CreateSandbox: CreateSandbox;
+//# sourceMappingURL=CreateSandbox.d.ts.map

package/lib/CreateSandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandbox.d.ts","sources":["../src/CreateSandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,SAAS,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE9C;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,SAAS,CAAC,oBAAoB,EAC9B,YAAY,GAAG,cAAc,CAC9B,GAAG;IACF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,WAAW,GAAG,gBAAgB,CAAC,CAAC;CACjE,CAAC;AAEF,4FAA4F;AAC5F,MAAM,MAAM,oBAAoB,GAAG,IAAI,CACrC,SAAS,CAAC,oBAAoB,EAC9B,UAAU,GAAG,WAAW,CACzB,GAAG;IACF,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD,CAAC;AAEF,0DAA0D;AAC1D,MAAM,WAAW,eAAe;IAC9B,+DAA+D;IAC/D,MAAM,CAAC,OAAO,CAAC,EAAE,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5F;;;OAGG;IACH,OAAO,CACL,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GACjE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACvD,gDAAgD;IAChD,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACzF,sFAAsF;IACtF,IAAI,CACF,OAAO,CAAC,EAAE,oBAAoB,GAC7B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACnF,0DAA0D;IAC1D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACvE,mFAAmF;IACnF,OAAO,CACL,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,GAChC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,oBAAoB,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;CAC5E;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqFG;AACH,MAAM,WAAW,aAAc,SAAQ,OAAO,CAAC,OAAO,CACpD,aAAa,EACb,mBAAmB,EACnB,CAAC,IAAI,CAAC,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CACvD;CAAG;AAEJ,eAAO,MAAM,aAAa,eAAsD,CAAC"}

package/lib/CreateSandbox.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const CreateSandbox = Binding.Service("E2B.CreateSandbox");
+//# sourceMappingURL=CreateSandbox.js.map

package/lib/CreateSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandbox.js","sources":["../src/CreateSandbox.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA2J3C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAgB,mBAAmB,CAAC,CAAC"}

package/lib/CreateSandboxHttp.d.ts

@@ -0,0 +1,22 @@
+import * as Layer from "effect/Layer";
+import { CreateSandbox } from "./CreateSandbox.ts";
+/**
+ * HTTP implementation of {@link CreateSandbox}: E2B's control plane with the
+ * team key, and envd inside each sandbox with that sandbox's own token.
+ * Works on any host.
+ *
+ * ### Provide the layer
+ * **Example:** On a Cloudflare Worker
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const sandboxes = yield* E2B.CreateSandbox(Agent);
+ *   // ...
+ * }).pipe(Effect.provide(E2B.CreateSandboxHttp))
+ * ```
+ *
+ * @layer
+ * @product Sandbox
+ * @provides E2B.CreateSandbox
+ */
+export declare const CreateSandboxHttp: Layer.Layer<CreateSandbox, never, never>;
+//# sourceMappingURL=CreateSandboxHttp.d.ts.map

package/lib/CreateSandboxHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandboxHttp.d.ts","sources":["../src/CreateSandboxHttp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,aAAa,EAA0C,MAAM,oBAAoB,CAAC;AAO3F;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,iBAAiB,0CAoG7B,CAAC"}

package/lib/CreateSandboxHttp.js

@@ -0,0 +1,99 @@
+import * as sandboxes from "@distilled.cloud/e2b/sandboxes";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Stream from "effect/Stream";
+import { CreateSandbox } from "./CreateSandbox.js";
+import { bindE2B, bindOwnerTags, metadataQuery } from "./E2BBindings.js";
+import { SandboxBaseMissing } from "./Errors.js";
+import { denyUnlisted, makeSandboxHandle } from "./internal/SandboxHandle.js";
+/**
+ * HTTP implementation of {@link CreateSandbox}: E2B's control plane with the
+ * team key, and envd inside each sandbox with that sandbox's own token.
+ * Works on any host.
+ *
+ * ### Provide the layer
+ * **Example:** On a Cloudflare Worker
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const sandboxes = yield* E2B.CreateSandbox(Agent);
+ *   // ...
+ * }).pipe(Effect.provide(E2B.CreateSandboxHttp))
+ * ```
+ *
+ * @layer
+ * @product Sandbox
+ * @provides E2B.CreateSandbox
+ */
+export const CreateSandboxHttp = Layer.effect(CreateSandbox, Effect.gen(function* () {
+    return Effect.fn("E2B.CreateSandbox")(function* (base) {
+        const auth = yield* bindE2B;
+        const owner = yield* bindOwnerTags;
+        // Both a Template and a Snapshot expose the template id sandboxes boot from.
+        const baseId = base === undefined
+            ? undefined
+            : yield* base.templateId.asEffect();
+        // A template program's own mounts (`E2B.MountVolume`) go on every sandbox.
+        const baseMounts = base !== undefined && base.Type === "E2B.Template"
+            ? yield* base.mounts.asEffect()
+            : Effect.succeed([]);
+        /** The template's mounts and the call's own, by path (the call's win). */
+        const mountsOf = Effect.fn(function* (mounts) {
+            const byPath = new Map();
+            for (const mount of yield* baseMounts) {
+                byPath.set(mount.path, { name: mount.volume.name, path: mount.path });
+            }
+            for (const mount of mounts ?? []) {
+                const name = typeof mount.volume.name === "string" ? mount.volume.name : yield* mount.volume.name;
+                byPath.set(mount.path, { name, path: mount.path });
+            }
+            return [...byPath.values()];
+        });
+        const withStamp = Effect.fn(function* (metadata) {
+            return { ...metadata, ...(yield* owner) };
+        });
+        const client = {
+            create: Effect.fn("E2B.CreateSandbox.create")(function* (createOptions) {
+                const templateID = createOptions?.templateID ?? (baseId === undefined ? undefined : yield* baseId);
+                if (templateID === undefined) {
+                    return yield* new SandboxBaseMissing({
+                        message: "E2B.CreateSandbox() has no bound base: pass `templateID` to create()",
+                    });
+                }
+                const domain = yield* auth.domain;
+                const { mounts, ...request } = createOptions ?? {};
+                const volumeMounts = yield* mountsOf(mounts);
+                const created = yield* auth.authorize(sandboxes.createSandbox({
+                    ...request,
+                    ...(volumeMounts.length === 0 ? {} : { volumeMounts }),
+                    ...(createOptions?.network === undefined
+                        ? {}
+                        : { network: denyUnlisted(createOptions.network) }),
+                    templateID,
+                    metadata: yield* withStamp(createOptions?.metadata),
+                }));
+                return makeSandboxHandle(auth, created, domain);
+            }),
+            connect: Effect.fn("E2B.CreateSandbox.connect")(function* (sandboxId, connectOptions) {
+                const domain = yield* auth.domain;
+                const connected = yield* auth.authorize(sandboxes.connectSandbox({ sandboxID: sandboxId, ...connectOptions }));
+                return makeSandboxHandle(auth, connected, domain);
+            }),
+            get: (sandboxId) => auth.authorize(sandboxes.getSandbox({ sandboxID: sandboxId })),
+            list: Effect.fn("E2B.CreateSandbox.list")(function* (listOptions) {
+                const template = listOptions?.template ?? (baseId === undefined ? undefined : yield* baseId);
+                const all = yield* auth.authorize(Stream.runCollect(sandboxes.listSandboxes.items({
+                    ...listOptions,
+                    ...(template === undefined ? {} : { template }),
+                    metadata: listOptions?.metadata === undefined
+                        ? undefined
+                        : metadataQuery(listOptions.metadata),
+                })));
+                return Array.from(all);
+            }),
+            kill: (sandboxId) => auth.authorize(sandboxes.deleteSandbox({ sandboxID: sandboxId })).pipe(Effect.asVoid, Effect.catchTag("NotFound", () => Effect.void)),
+            metrics: (sandboxIds) => auth.authorize(sandboxes.listSandboxesMetrics({ sandbox_ids: [...sandboxIds] })),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=CreateSandboxHttp.js.map

package/lib/CreateSandboxHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandboxHttp.js","sources":["../src/CreateSandboxHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,gCAAgC,CAAC;AAE5D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,aAAa,EAA0C,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAI9E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAC3C,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,MAAM,CAAC,EAAE,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAkB;QACjE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QACnC,6EAA6E;QAC7E,MAAM,MAAM,GACV,IAAI,KAAK,SAAS;YAChB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,KAAK,CAAC,CAAE,IAAI,CAAC,UAA2C,CAAC,QAAQ,EAAE,CAAC;QAC1E,2EAA2E;QAC3E,MAAM,UAAU,GACd,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc;YAChD,CAAC,CAAC,KAAK,CAAC,CAAG,IAAiB,CAAC,MAA8C,CAAC,QAAQ,EAAE;YACtF,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAEzB,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAClC,MAAiE;YAEjE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0C,CAAC;YACjE,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;gBACtC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;gBACjC,MAAM,IAAI,GACR,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;gBACvF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACnC,QAAkE;YAElE,OAAO,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAoB;YAC9B,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAC,QAAQ,CAAC,EAAE,aAAa;gBACpE,MAAM,UAAU,GACd,aAAa,EAAE,UAAU,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;gBAClF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,OAAO,KAAK,CAAC,CAAC,IAAI,kBAAkB,CAAC;wBACnC,OAAO,EAAE,sEAAsE;qBAChF,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,GAAG,aAAa,IAAI,EAAE,CAAC;gBACnD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CACnC,SAAS,CAAC,aAAa,CAAC;oBACtB,GAAG,OAAO;oBACV,GAAG,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;oBACtD,GAAG,CAAC,aAAa,EAAE,OAAO,KAAK,SAAS;wBACtC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrD,UAAU;oBACV,QAAQ,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,QAAQ,CAAC;iBACpD,CAAC,CACH,CAAC;gBACF,OAAO,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YAClD,CAAC,CAAC;YACF,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,2BAA2B,CAAC,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,cAAc;gBAClF,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;gBAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CACrC,SAAS,CAAC,cAAc,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,cAAc,EAAE,CAAC,CACtE,CAAC;gBACF,OAAO,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACpD,CAAC,CAAC;YACF,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAClF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EAAE,WAAW;gBAC9D,MAAM,QAAQ,GACZ,WAAW,EAAE,QAAQ,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;gBAC9E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC/B,MAAM,CAAC,UAAU,CACf,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC;oBAC5B,GAAG,WAAW;oBACd,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;oBAC/C,QAAQ,EACN,WAAW,EAAE,QAAQ,KAAK,SAAS;wBACjC,CAAC,CAAC,SAAS;wBACX,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC;iBAC1C,CAAC,CACH,CACF,CAAC;gBACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,CAAC,CAAC;YACF,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAClB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CACpE,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C;YACH,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CACtB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,oBAAoB,CAAC,EAAE,WAAW,EAAE,CAAC,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;SACnF,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/CreateSecret.d.ts

@@ -0,0 +1,57 @@
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type * as Redacted from "effect/Redacted";
+import type { E2BError } from "./SandboxClient.ts";
+import type { SecretAttributes } from "./Secret.ts";
+/** A secret as E2B reports it: never its value. `ref` is the egress placeholder. */
+export type SecretInfo = SecretAttributes;
+/** E2B secrets by name: store, look up, list and delete them. */
+export interface SecretsClient {
+    /**
+     * Stores a value under a name: creates the secret, or adds a new version
+     * of an existing one. Returns its `ref` to use in sandbox network rules.
+     */
+    put(name: string, value: Redacted.Redacted<string>, options?: {
+        readonly metadata?: Readonly<Record<string, string>>;
+    }): Effect.Effect<SecretInfo, E2BError, RuntimeContext>;
+    /** The secret with this name or id, or `undefined`. */
+    get(nameOrId: string): Effect.Effect<SecretInfo | undefined, E2BError, RuntimeContext>;
+    /** The secrets this host created. */
+    list(): Effect.Effect<ReadonlyArray<SecretInfo>, E2BError, RuntimeContext>;
+    /** Deletes a secret. Deleting one that is gone succeeds. */
+    delete(nameOrId: string): Effect.Effect<void, E2BError, RuntimeContext>;
+}
+/**
+ * Store per-user credentials as E2B secrets at runtime, and reference them
+ * from a sandbox's network rules so the sandbox never sees the value.
+ *
+ * Secrets created at run time are tagged with the stack, stage and binding
+ * (`alchemy::stack`, `alchemy::stage`, `alchemy::id` in their E2B metadata)
+ * and are not deleted when the stack is destroyed. List them by those tags
+ * to clean them up: `secrets.list()` returns the ones this binding stored.
+ * Metadata you pass to `put` merges underneath; it never replaces the
+ * `alchemy::*` keys.
+ *
+ * ### Per-user credentials at egress
+ * **Example:** A user's GitHub token, injected into their sandbox's GitHub calls
+ * ```typescript
+ * const secrets = yield* E2B.CreateSecret();
+ * const sandboxes = yield* E2B.CreateSandbox(Agent);
+ * // in fetch:
+ * const github = yield* secrets.put(`github-${user}`, Redacted.make(token));
+ * const sandbox = yield* sandboxes.create({
+ *   network: {
+ *     allowOut: ["api.github.com"],
+ *     rules: { "api.github.com": [{ transform: { headers: { Authorization: `Bearer ${github.ref}` } } }] },
+ *   },
+ * });
+ * ```
+ *
+ * @binding
+ * @product Secret
+ */
+export interface CreateSecret extends Binding.Service<CreateSecret, "E2B.CreateSecret", () => Effect.Effect<SecretsClient>> {
+}
+export declare const CreateSecret: CreateSecret;
+//# sourceMappingURL=CreateSecret.d.ts.map

package/lib/CreateSecret.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecret.d.ts","sources":["../src/CreateSecret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpD,oFAAoF;AACpF,MAAM,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAE1C,iEAAiE;AACjE,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,GAAG,CACD,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAChC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,GACjE,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACvD,uDAAuD;IACvD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,SAAS,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACvF,qCAAqC;IACrC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3E,4DAA4D;IAC5D,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;CACzE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAM,WAAW,YAAa,SAAQ,OAAO,CAAC,OAAO,CACnD,YAAY,EACZ,kBAAkB,EAClB,MAAM,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CACnC;CAAG;AAEJ,eAAO,MAAM,YAAY,cAAoD,CAAC"}

package/lib/CreateSecret.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const CreateSecret = Binding.Service("E2B.CreateSecret");
+//# sourceMappingURL=CreateSecret.js.map

package/lib/CreateSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecret.js","sources":["../src/CreateSecret.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAgE3C,MAAM,CAAC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAe,kBAAkB,CAAC,CAAC"}

package/lib/CreateSecretHttp.d.ts

@@ -0,0 +1,20 @@
+import * as Layer from "effect/Layer";
+import { CreateSecret } from "./CreateSecret.ts";
+/**
+ * HTTP implementation of {@link CreateSecret}. Works on any host.
+ *
+ * ### Provide the layer
+ * **Example:** On a Worker
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const secrets = yield* E2B.CreateSecret();
+ *   // ...
+ * }).pipe(Effect.provide(E2B.CreateSecretHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret
+ * @provides E2B.CreateSecret
+ */
+export declare const CreateSecretHttp: Layer.Layer<CreateSecret, never, never>;
+//# sourceMappingURL=CreateSecretHttp.d.ts.map

package/lib/CreateSecretHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecretHttp.d.ts","sources":["../src/CreateSecretHttp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,YAAY,EAAsB,MAAM,mBAAmB,CAAC;AAKrE;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,gBAAgB,yCAoE5B,CAAC"}

package/lib/CreateSecretHttp.js

@@ -0,0 +1,64 @@
+import * as secrets from "@distilled.cloud/e2b/secrets";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Stream from "effect/Stream";
+import { CreateSecret } from "./CreateSecret.js";
+import { bindE2B, bindOwnerTags } from "./E2BBindings.js";
+import { E2BUnexpectedResponse } from "./Errors.js";
+import { toSecretAttributes } from "./Secret.js";
+/**
+ * HTTP implementation of {@link CreateSecret}. Works on any host.
+ *
+ * ### Provide the layer
+ * **Example:** On a Worker
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const secrets = yield* E2B.CreateSecret();
+ *   // ...
+ * }).pipe(Effect.provide(E2B.CreateSecretHttp))
+ * ```
+ *
+ * @layer
+ * @product Secret
+ * @provides E2B.CreateSecret
+ */
+export const CreateSecretHttp = Layer.effect(CreateSecret, Effect.gen(function* () {
+    return Effect.fn("E2B.CreateSecret")(function* () {
+        const auth = yield* bindE2B;
+        const owner = yield* bindOwnerTags;
+        const get = (nameOrId) => auth.authorize(secrets.getSecret({ secretID: nameOrId.toLowerCase() })).pipe(Effect.map((secret) => secret), Effect.catchTag("NotFound", () => Effect.undefined));
+        const client = {
+            put: Effect.fn("E2B.CreateSecret.put")(function* (name, value, putOptions) {
+                const metadata = { ...putOptions?.metadata, ...(yield* owner) };
+                const existing = yield* get(name);
+                const stored = existing !== undefined
+                    ? yield* auth.authorize(secrets.updateSecret({ secretID: existing.secretID, value, metadata }))
+                    : yield* auth.authorize(secrets.createSecret({ name, value, metadata })).pipe(
+                    // A concurrent put created it first: add our version.
+                    Effect.catchTag("Conflict", () => Effect.gen(function* () {
+                        const raced = yield* get(name);
+                        if (raced === undefined) {
+                            return yield* new E2BUnexpectedResponse({
+                                message: `E2B secret ${name} vanished during put`,
+                            });
+                        }
+                        return yield* auth.authorize(secrets.updateSecret({ secretID: raced.secretID, value, metadata }));
+                    })));
+                return toSecretAttributes(stored);
+            }),
+            get: (nameOrId) => get(nameOrId).pipe(Effect.map((secret) => (secret === undefined ? undefined : toSecretAttributes(secret)))),
+            list: Effect.fn("E2B.CreateSecret.list")(function* () {
+                const owned = yield* owner;
+                const all = yield* auth.authorize(Stream.runCollect(secrets.listSecrets.items({ limit: 100 })));
+                return Array.from(all)
+                    .filter((secret) => Object.entries(owned).every(([key, value]) => secret.metadata[key] === value))
+                    .map(toSecretAttributes);
+            }),
+            delete: (nameOrId) => Effect.flatMap(get(nameOrId), (secret) => secret === undefined
+                ? Effect.void
+                : auth.authorize(secrets.deleteSecret({ secretID: secret.secretID })).pipe(Effect.asVoid, Effect.catchTag("NotFound", () => Effect.void))),
+        };
+        return client;
+    });
+}));
+//# sourceMappingURL=CreateSecretHttp.js.map

package/lib/CreateSecretHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSecretHttp.js","sources":["../src/CreateSecretHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,8BAA8B,CAAC;AACxD,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAsB,MAAM,mBAAmB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAC1C,YAAY,EACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,OAAO,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;QAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QAEnC,MAAM,GAAG,GAAG,CAAC,QAAgB,EAAE,EAAE,CAC/B,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAC1E,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAA8B,EAAE,CAAC,MAAM,CAAC,EAC1D,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CACpD,CAAC;QAEJ,MAAM,MAAM,GAAkB;YAC5B,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU;gBACvE,MAAM,QAAQ,GAAG,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAClC,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS;oBACpB,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CACnB,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACvE;oBACH,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;oBACzE,sDAAsD;oBACtD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAC/B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;wBAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;wBAC/B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;4BACxB,OAAO,KAAK,CAAC,CAAC,IAAI,qBAAqB,CAAC;gCACtC,OAAO,EAAE,cAAc,IAAI,sBAAsB;6BAClD,CAAC,CAAC;wBACL,CAAC;wBACD,OAAO,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC1B,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CACpE,CAAC;oBACJ,CAAC,CAAC,CACH,CACF,CAAC;gBACR,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC,CAAC;YACF,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAChB,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAChB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CACxF;YACH,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC;gBAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAC/B,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAC7D,CAAC;gBACF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;qBACnB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACjB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAC9E;qBACA,GAAG,CAAC,kBAAkB,CAAC,CAAC;YAC7B,CAAC,CAAC;YACF,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CACnB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CACvC,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CACtE,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C,CACN;SACJ,CAAC;QACF,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/CreateSnapshot.d.ts

@@ -0,0 +1,53 @@
+import type * as sandboxes from "@distilled.cloud/e2b/sandboxes";
+import type * as snapshots from "@distilled.cloud/e2b/snapshots";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { SnapshotSetupFailed } from "./Errors.ts";
+import type { SnapshotSetup } from "./internal/SnapshotBuild.ts";
+import type { E2BError } from "./SandboxClient.ts";
+export type { SnapshotSetup } from "./internal/SnapshotBuild.ts";
+/** E2B snapshots: take, list and delete them at runtime. */
+export interface SnapshotsClient {
+    /**
+     * Boots `template`, runs the setup commands, snapshots it under `name` and
+     * kills the setup sandbox. Snapshotting under an existing name adds a new
+     * version. Use `sandbox.snapshot()` to snapshot a sandbox you already have.
+     */
+    create(name: string, setup: SnapshotSetup): Effect.Effect<sandboxes.SnapshotInfo, E2BError | SnapshotSetupFailed, RuntimeContext>;
+    /** Snapshots, filtered by source sandbox or name. */
+    list(options?: Omit<snapshots.ListSnapshotsRequest, "nextToken">): Effect.Effect<ReadonlyArray<snapshots.SnapshotInfo>, E2BError, RuntimeContext>;
+    /** Deletes a snapshot (and every version of it). Deleting one that is gone succeeds. */
+    delete(name: string): Effect.Effect<void, E2BError, RuntimeContext>;
+}
+/**
+ * Take and manage E2B snapshots at runtime: a warm base per repository or
+ * per customer, created on demand and forked into sandboxes.
+ *
+ * Snapshots taken at runtime carry no metadata, so they are not deleted when
+ * the host is destroyed. Delete them with `delete` when their owner goes
+ * away.
+ *
+ * ### Warm bases at runtime
+ * **Example:** A warm base per repository
+ * ```typescript
+ * const snapshots = yield* E2B.CreateSnapshot();
+ * const sandboxes = yield* E2B.CreateSandbox();
+ * // in fetch:
+ * const [existing] = yield* snapshots.list({ name: `warm-${slug}` });
+ * const base =
+ *   existing ??
+ *   (yield* snapshots.create(`warm-${slug}`, {
+ *     template: "node-22",
+ *     run: [`git clone https://github.com/${repo} repo`, "cd repo && npm ci"],
+ *   }));
+ * const sandbox = yield* sandboxes.create({ templateID: base.snapshotID });
+ * ```
+ *
+ * @binding
+ * @product Snapshot
+ */
+export interface CreateSnapshot extends Binding.Service<CreateSnapshot, "E2B.CreateSnapshot", () => Effect.Effect<SnapshotsClient>> {
+}
+export declare const CreateSnapshot: CreateSnapshot;
+//# sourceMappingURL=CreateSnapshot.d.ts.map

package/lib/CreateSnapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshot.d.ts","sources":["../src/CreateSnapshot.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,SAAS,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,KAAK,SAAS,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEnD,YAAY,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAEjE,4DAA4D;AAC5D,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,MAAM,CACJ,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,aAAa,GACnB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,QAAQ,GAAG,mBAAmB,EAAE,cAAc,CAAC,CAAC;IACzF,qDAAqD;IACrD,IAAI,CACF,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,oBAAoB,EAAE,WAAW,CAAC,GAC1D,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IAClF,wFAAwF;IACxF,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;CACrE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,WAAW,cAAe,SAAQ,OAAO,CAAC,OAAO,CACrD,cAAc,EACd,oBAAoB,EACpB,MAAM,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CACrC;CAAG;AAEJ,eAAO,MAAM,cAAc,gBAAwD,CAAC"}

package/lib/CreateSnapshot.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const CreateSnapshot = Binding.Service("E2B.CreateSnapshot");
+//# sourceMappingURL=CreateSnapshot.js.map

package/lib/CreateSnapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshot.js","sources":["../src/CreateSnapshot.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA6D3C,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAiB,oBAAoB,CAAC,CAAC"}

package/lib/CreateSnapshotHttp.d.ts

@@ -0,0 +1,20 @@
+import * as Layer from "effect/Layer";
+import { CreateSnapshot } from "./CreateSnapshot.ts";
+/**
+ * HTTP implementation of {@link CreateSnapshot}. Works on any host.
+ *
+ * ### Provide the layer
+ * **Example:** On a Worker
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const snapshots = yield* E2B.CreateSnapshot();
+ *   // ...
+ * }).pipe(Effect.provide(E2B.CreateSnapshotHttp))
+ * ```
+ *
+ * @layer
+ * @product Snapshot
+ * @provides E2B.CreateSnapshot
+ */
+export declare const CreateSnapshotHttp: Layer.Layer<CreateSnapshot, never, never>;
+//# sourceMappingURL=CreateSnapshotHttp.d.ts.map

package/lib/CreateSnapshotHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshotHttp.d.ts","sources":["../src/CreateSnapshotHttp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAwB,MAAM,qBAAqB,CAAC;AAI3E;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,kBAAkB,2CA6B9B,CAAC"}

package/lib/CreateSnapshotHttp.js

@@ -0,0 +1,41 @@
+import * as snapshots from "@distilled.cloud/e2b/snapshots";
+import * as templates from "@distilled.cloud/e2b/templates";
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import * as Stream from "effect/Stream";
+import { CreateSnapshot } from "./CreateSnapshot.js";
+import { bindE2B } from "./E2BBindings.js";
+import { takeSnapshot } from "./internal/SnapshotBuild.js";
+/**
+ * HTTP implementation of {@link CreateSnapshot}. Works on any host.
+ *
+ * ### Provide the layer
+ * **Example:** On a Worker
+ * ```typescript
+ * Effect.gen(function* () {
+ *   const snapshots = yield* E2B.CreateSnapshot();
+ *   // ...
+ * }).pipe(Effect.provide(E2B.CreateSnapshotHttp))
+ * ```
+ *
+ * @layer
+ * @product Snapshot
+ * @provides E2B.CreateSnapshot
+ */
+export const CreateSnapshotHttp = Layer.succeed(CreateSnapshot, Effect.fn("E2B.CreateSnapshot")(function* () {
+    const auth = yield* bindE2B;
+    const client = {
+        create: (name, setup) => auth.authorize(takeSnapshot(name, setup)),
+        list: (options) => auth
+            .authorize(Stream.runCollect(snapshots.listSnapshots.items({ ...options })))
+            .pipe(Effect.map((all) => Array.from(all))),
+        // A snapshot is stored as a template under its name.
+        delete: (name) => auth
+            .authorize(templates
+            .getTemplateByAlias({ alias: name })
+            .pipe(Effect.flatMap((alias) => templates.deleteTemplate({ templateID: alias.templateID }))))
+            .pipe(Effect.asVoid, Effect.catchTag("NotFound", () => Effect.void)),
+    };
+    return client;
+}));
+//# sourceMappingURL=CreateSnapshotHttp.js.map

package/lib/CreateSnapshotHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSnapshotHttp.js","sources":["../src/CreateSnapshotHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,SAAS,MAAM,gCAAgC,CAAC;AAC5D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,cAAc,EAAwB,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAE3D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAC7C,cAAc,EACd,MAAM,CAAC,EAAE,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC;IACvC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,MAAM,GAAoB;QAC9B,MAAM,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,IAAI;aACD,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC;aAC3E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC/C,qDAAqD;QACrD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,IAAI;aACD,SAAS,CACR,SAAS;aACN,kBAAkB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aACnC,IAAI,CACH,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,SAAS,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAC3D,CACF,CACJ;aACA,IAAI,CACH,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAC/C;KACN,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,CACH,CAAC"}