@claxedo/sandbox-manager 0.10.2 → 0.10.4

package/dist/drivers/cloudflare.d.ts

@@ -5,19 +5,16 @@ export type CloudflareSandboxDriverOptions = {
     workerUrl: string;
     /** Bearer token the Worker validates (its `API_TOKEN` secret). */
     apiToken: string;
-    /** Port the workspace-runtime listens on inside the sandbox (exposed publicly). */
+    /** Port the workspace-runtime listens on inside the container, which the Worker's proxy route forwards to. */
     runtimePort?: number;
-    /** Command that launches the workspace-runtime inside the image. */
     runtimeCommand?: string;
-    /** Workspace directory inside the sandbox. */
     workspaceDir?: string;
     /**
      * Static control-plane config injected into every sandbox so the runtime can
-     * verify relay-proxied requests. Never carries per-workspace secrets — those
-     * (if any) belong to the future egress broker.
-   *   relayJwksUrl     → WORKSPACE_RUNTIME_RELAY_JWKS_URL (relay public key for RAT verify)
-   *   relayVerifyPem   → WORKSPACE_RUNTIME_RELAY_HOST_VERIFY_PEM (fallback to JWKS)
-   *   managementJwksUrl → WORKSPACE_RUNTIME_MANAGEMENT_JWKS_URL (config apply)
+     * verify relay-proxied requests; never a per-workspace secret.
+     *   relayJwksUrl      → WORKSPACE_RUNTIME_RELAY_JWKS_URL (relay host token keys)
+     *   relayVerifyPem    → WORKSPACE_RUNTIME_RELAY_HOST_VERIFY_PEM (fallback to JWKS)
+     *   managementJwksUrl → WORKSPACE_RUNTIME_MANAGEMENT_JWKS_URL (config apply)
      */
     controlEnv?: WorkspaceRuntimeControlEnv;
     /** Default native harness injected as WORKSPACE_RUNTIME_NATIVE_HARNESS, for example "opencode". */
@@ -26,7 +23,6 @@ export type CloudflareSandboxDriverOptions = {
     env?: (input: SandboxDriverEnsureInput, sandbox: {
         id: string;
     }) => Record<string, string> | Promise<Record<string, string>>;
-    /** Injected for tests. */
     fetch?: typeof fetch;
     /** ensure-runtime/HTTP timeout. */
     timeoutMs?: number;

package/dist/drivers/cloudflare.mjs

@@ -12,6 +12,27 @@ var boatBilling = {
     large: { size: "large", vcpu: 8, memoryGb: 16, usdPerHour: 0.072 }
   }
 };
+var AGENT37_USD_PER_MONTH = { vcpu: 0.8, memoryGb: 0.7, diskGb: 0.09 };
+var AGENT37_MONTH_HOURS = 730;
+var agent37MachineShapes = {
+  small: { cpu: 2, memory: 4, disk: 10 },
+  default: { cpu: 4, memory: 8, disk: 20 },
+  large: { cpu: 4, memory: 16, disk: 40 }
+};
+function agent37Rate(shape) {
+  const usdPerMonth = shape.cpu * AGENT37_USD_PER_MONTH.vcpu + shape.memory * AGENT37_USD_PER_MONTH.memoryGb + shape.disk * AGENT37_USD_PER_MONTH.diskGb;
+  return { size: `${shape.cpu} vCPU / ${shape.memory} GB`, vcpu: shape.cpu, memoryGb: shape.memory, usdPerHour: usdPerMonth / AGENT37_MONTH_HOURS };
+}
+var agent37Billing = {
+  source: { url: "https://www.agent37.com/docs/agents-api/billing", readOn: "2026-11-11" },
+  meter: "Agent37 meters an instance per minute at a monthly rate over 730 hours: $0.80 per vCPU, $0.70 per GB of memory and $0.09 per GB of disk while it runs, and the disk alone while it is stopped.",
+  rates: {
+    small: agent37Rate(agent37MachineShapes.small),
+    default: agent37Rate(agent37MachineShapes.default),
+    large: agent37Rate(agent37MachineShapes.large)
+  },
+  excludes: `the disk of a stopped instance, billed at $${AGENT37_USD_PER_MONTH.diskGb} per GB a month until the instance is deleted`
+};
 var CLOUDFLARE_USD_PER_GIB_SECOND_MEMORY = 25e-7;
 var CLOUDFLARE_USD_PER_GB_SECOND_DISK = 7e-8;
 var CLOUDFLARE_USD_PER_VCPU_SECOND_ACTIVE = 2e-5;
@@ -50,6 +71,7 @@ var sandboxDriverCredentialFields = {
     { key: "worker_url", label: "Worker URL" }
   ],
   boat: [{ key: "api_key", label: "API Key", secret: true }],
+  agent37: [{ key: "api_key", label: "API Key", secret: true }],
   docker: [{ key: "image", label: "Image" }]
 };
 var sandboxDriverLabels = {
@@ -57,6 +79,7 @@ var sandboxDriverLabels = {
   vercel: "Vercel",
   cloudflare: "Cloudflare",
   boat: "Boat",
+  agent37: "Agent37",
   docker: "Docker"
 };
 function cloudflareWorkerBaseUrl(input) {
@@ -139,8 +162,8 @@ var sandboxDriverCatalog = {
       hostWatchesIdle: true,
       targetAccess: "relay",
       secretBrokering: "native",
-      // Credential handlers do not restrict unrelated destinations.
-      egressControl: "none",
+      // The sandbox Worker starts the container without internet and routes each allowed host through itself; a Worker that cannot confirm that refuses the start.
+      egressControl: "hosts",
       // A container snapshot holds the whole root filesystem; the platform keeps it 30 days past its last restore and offers no deletion.
       persistence: {
         resume: "replacement-restore",
@@ -178,6 +201,33 @@ var sandboxDriverCatalog = {
       machineClasses: ["small", "default", "large"]
     }
   },
+  agent37: {
+    id: "agent37",
+    label: sandboxDriverLabels.agent37,
+    credentialFields: sandboxDriverCredentialFields.agent37,
+    runtimeNetwork: { controlPlane: "direct", relay: "configured" },
+    runtimeEnv: "callback",
+    preparedImage: true,
+    billing: agent37Billing,
+    metadata: {
+      driverRunsIn: ["worker", "node"],
+      hostStopBehavior: "suspends-host",
+      hostResumeBehavior: "same-host",
+      targetAccess: "relay",
+      secretBrokering: "none",
+      // An instance's network policy lists domains, reached over HTTPS on 443 alone, and IPv4 ranges; private ranges stay blocked whatever it lists.
+      egressControl: "hosts-and-cidrs",
+      persistence: {
+        resume: "same-sandbox",
+        capture: "none",
+        clone: false,
+        captureSource: "not-applicable",
+        retention: "provider-managed",
+        restoreMount: "same-resource"
+      },
+      machineClasses: ["small", "default", "large"]
+    }
+  },
   docker: {
     id: "docker",
     label: sandboxDriverLabels.docker,
@@ -204,6 +254,17 @@ var sandboxDriverCatalog = {
   }
 };
 
+// ../claxedo-helpers/dist/deadline.mjs
+async function withDeadlineSignal(timeoutMs, work, parent) {
+  const deadline = new AbortController();
+  const timer = setTimeout(() => deadline.abort(new DOMException("The operation timed out.", "TimeoutError")), timeoutMs);
+  try {
+    return await work(parent ? AbortSignal.any([parent, deadline.signal]) : deadline.signal);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 // src/egress-policy.ts
 function brokeredSecretPlaceholder(name) {
   return `claxedo-broker:${name}`;
@@ -242,10 +303,11 @@ function isRecord(value) {
 function asRecord(value) {
   return isRecord(value) ? value : void 0;
 }
-
-// src/json.ts
-function text(input) {
-  return typeof input === "string" && input.length > 0 ? input : void 0;
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function nonEmptyString(value) {
+  return isNonEmptyString(value) ? value : void 0;
 }
 
 // src/runtime-env.ts
@@ -337,19 +399,6 @@ var DEFAULT_RUNTIME_COMMAND = "/usr/local/bin/workspace-runtime";
 var DEFAULT_TIMEOUT_MS = 45e3;
 var DEFAULT_ENSURE_TIMEOUT_MS = 3e5;
 var DEFAULT_SNAPSHOT_TIMEOUT_MS = 18e4;
-function deadlineSignal(timeoutMs) {
-  const controller = new AbortController();
-  const timer = setTimeout(
-    () => controller.abort(new DOMException("The operation timed out", "TimeoutError")),
-    timeoutMs
-  );
-  return {
-    signal: controller.signal,
-    cleanup() {
-      clearTimeout(timer);
-    }
-  };
-}
 var RUNTIME_HOME = "/home/claxedo";
 function sandboxIdFor(workspaceId) {
   return `claxedo-${workspaceId}`;
@@ -381,19 +430,17 @@ function createCloudflareSandboxDriver(options) {
   };
   async function call(sandboxId, action, body, method = "POST") {
     const url = `${base}/sandbox/${encodeURIComponent(sandboxId)}${action ? `/${action}` : ""}`;
-    const deadline = deadlineSignal(action === "ensure-runtime" ? ensureTimeoutMs : action === "snapshot" ? snapshotTimeoutMs : timeoutMs);
-    try {
+    const deadlineMs = action === "ensure-runtime" ? ensureTimeoutMs : action === "snapshot" ? snapshotTimeoutMs : timeoutMs;
+    return withDeadlineSignal(deadlineMs, async (signal) => {
       const res = await doFetch(url, {
         method,
         headers,
         ...method === "POST" ? { body: JSON.stringify(body) } : {},
-        signal: deadline.signal
+        signal
       });
       const data = asRecord(await res.json().catch(() => ({}))) ?? {};
       return { status: res.status, data };
-    } finally {
-      deadline.cleanup();
-    }
+    });
   }
   function workspaceDirectory(input) {
     return input.workspaceRoot ?? workspaceDir;
@@ -441,10 +488,15 @@ function createCloudflareSandboxDriver(options) {
       };
     });
   }
+  function networkPolicy(input) {
+    if (!input.net || input.net.mode === "allow-all") return void 0;
+    return { hosts: [...new Set(input.net.hosts ?? [])] };
+  }
   async function ensureHost(input) {
     const sandboxId = sandboxIdFor(input.workspaceId);
     const hostId = sandboxId;
     const egress = egressRegistrations(input);
+    const net = networkPolicy(input);
     const response = await call(
       sandboxId,
       "ensure-runtime",
@@ -457,7 +509,8 @@ function createCloudflareSandboxDriver(options) {
         // Not container env — labels are control-plane metadata.
         labels: input.labels,
         ...input.bootSource?.kind === "driver-snapshot" ? { restore: { snapshotId: input.bootSource.snapshotId }, minimumRuntimeVersion: MINIMUM_SERVED_WORKSPACE_RUNTIME_VERSION } : {},
-        ...egress ? { egress } : {}
+        ...egress ? { egress } : {},
+        ...net ? { net } : {}
       }
     ).catch((error) => {
       if (error instanceof Error && error.name === "TimeoutError") return void 0;
@@ -465,18 +518,22 @@ function createCloudflareSandboxDriver(options) {
     });
     if (!response) return { provisioning: true, retryAfterMs: 0 };
     const { status, data } = response;
-    const runtimeUrl = text(data.url);
+    const runtimeUrl = nonEmptyString(data.url);
     if (status === 503 && data.error === "workspace-runtime did not become ready") {
       return { provisioning: true, retryAfterMs: 0 };
     }
-    if (data.exited === true) throw new SandboxRuntimeBootError(text(data.error) ?? "The workspace runtime exited before it was ready");
+    if (data.exited === true) throw new SandboxRuntimeBootError(nonEmptyString(data.error) ?? "The workspace runtime exited before it was ready");
     if (status === 410 && isSandboxCheckpointUnusableCause(data.checkpointUnusable)) {
-      throw new SandboxCheckpointUnusableError(data.checkpointUnusable, text(data.error) ?? "This workspace's saved files cannot be restored; choose Start fresh.");
+      throw new SandboxCheckpointUnusableError(data.checkpointUnusable, nonEmptyString(data.error) ?? "This workspace's saved files cannot be restored; choose Start fresh.");
     }
     if (status >= 400 || !runtimeUrl) {
-      const reason = `Cloudflare ensure-runtime failed (${status}): ${text(data.error) ?? "no runtime url"}`;
+      const reason = `Cloudflare ensure-runtime failed (${status}): ${nonEmptyString(data.error) ?? "no runtime url"}`;
       throw status === 401 || status === 403 ? new SandboxProviderKeyRefusedError(reason) : new Error(reason);
     }
+    if (net && asRecord(data.egress)?.contained !== true) {
+      await call(sandboxId, "stop", { epoch: input.epoch }).catch(() => void 0);
+      throw new Error("Cloudflare sandbox Worker did not confirm egress containment; deploy the current sandbox Worker (scripts/sandbox/cloudflare-worker)");
+    }
     const targetOut = {
       workspaceId: input.workspaceId,
       sandboxId,
@@ -514,12 +571,11 @@ function createCloudflareSandboxDriver(options) {
     //
     // A missing registry route or R2 binding cannot establish an empty inventory.
     async list() {
-      const deadline = deadlineSignal(timeoutMs);
-      try {
+      return withDeadlineSignal(timeoutMs, async (signal) => {
         const res = await doFetch(`${base}/sandboxes`, {
           method: "GET",
           headers,
-          signal: deadline.signal
+          signal
         });
         if (res.status === 404 || res.status === 501) {
           throw new CloudflareSandboxListingUnsupportedError(`Cloudflare sandbox Worker cannot enumerate sandboxes (${res.status}); requires the /sandboxes registry route and SANDBOX_REGISTRY binding`);
@@ -528,11 +584,11 @@ function createCloudflareSandboxDriver(options) {
         if (!data) throw new Error("Invalid Cloudflare sandbox listing envelope");
         if (data.supported === false) {
           throw new CloudflareSandboxListingUnsupportedError(
-            text(data.error) ?? `Cloudflare sandbox Worker cannot enumerate sandboxes (${res.status}) \u2014 deploy a Worker with the /sandboxes registry route and an R2 SANDBOX_REGISTRY binding`
+            nonEmptyString(data.error) ?? `Cloudflare sandbox Worker cannot enumerate sandboxes (${res.status}) \u2014 deploy a Worker with the /sandboxes registry route and an R2 SANDBOX_REGISTRY binding`
           );
         }
         if (!res.ok) {
-          throw new Error(`Cloudflare sandbox listing failed (${res.status}): ${text(data.error) ?? "unknown error"}`);
+          throw new Error(`Cloudflare sandbox listing failed (${res.status}): ${nonEmptyString(data.error) ?? "unknown error"}`);
         }
         return registryEntries(data.sandboxes).flatMap((entry) => {
           const sandboxId = entry.sandboxId;
@@ -551,9 +607,7 @@ function createCloudflareSandboxDriver(options) {
           };
           return [target];
         });
-      } finally {
-        deadline.cleanup();
-      }
+      });
     },
     metadata: {
       driverRunsIn: ["worker"],
@@ -562,7 +616,7 @@ function createCloudflareSandboxDriver(options) {
       hostWatchesIdle: true,
       targetAccess: "relay",
       secretBrokering: "native",
-      egressControl: "none",
+      egressControl: "hosts",
       persistence: sandboxDriverCatalog.cloudflare.metadata.persistence
     },
     ensureHost,
@@ -575,14 +629,14 @@ function createCloudflareSandboxDriver(options) {
     async stop(target) {
       const { status, data } = await call(target.sandboxId, "stop", { epoch: target.epoch });
       if (status >= 400 || data.ok !== true) {
-        throw new Error(`Cloudflare stop failed (${status}) for ${target.sandboxId}: ${text(data.error) ?? "not stopped"}`);
+        throw new Error(`Cloudflare stop failed (${status}) for ${target.sandboxId}: ${nonEmptyString(data.error) ?? "not stopped"}`);
       }
     },
     // The sandbox's object outlives its container and keeps the snapshots it took, so a container that is not running is a stopped host, never a gone one.
     async inspect(target) {
       const { status, data } = await call(target.sandboxId, "inspect", {});
       if (status < 200 || status >= 300 || typeof data.running !== "boolean") {
-        throw new Error(`Cloudflare inspect failed (${status}) for ${target.sandboxId}: ${text(data.error) ?? "no container state"}`);
+        throw new Error(`Cloudflare inspect failed (${status}) for ${target.sandboxId}: ${nonEmptyString(data.error) ?? "no container state"}`);
       }
       return data.running ? "serving" : "stopped";
     },
@@ -594,9 +648,9 @@ function createCloudflareSandboxDriver(options) {
     },
     async snapshot(target) {
       const { status, data } = await call(target.sandboxId, "snapshot", {});
-      const snapshotId = text(data.snapshotId);
+      const snapshotId = nonEmptyString(data.snapshotId);
       if (status >= 400 || !snapshotId) {
-        throw new Error(`Cloudflare snapshot failed (${status}): ${text(data.error) ?? "no snapshot id"}`);
+        throw new Error(`Cloudflare snapshot failed (${status}): ${nonEmptyString(data.error) ?? "no snapshot id"}`);
       }
       return { snapshotId };
     }

package/dist/drivers/docker.mjs

@@ -138,6 +138,27 @@ var boatBilling = {
     large: { size: "large", vcpu: 8, memoryGb: 16, usdPerHour: 0.072 }
   }
 };
+var AGENT37_USD_PER_MONTH = { vcpu: 0.8, memoryGb: 0.7, diskGb: 0.09 };
+var AGENT37_MONTH_HOURS = 730;
+var agent37MachineShapes = {
+  small: { cpu: 2, memory: 4, disk: 10 },
+  default: { cpu: 4, memory: 8, disk: 20 },
+  large: { cpu: 4, memory: 16, disk: 40 }
+};
+function agent37Rate(shape) {
+  const usdPerMonth = shape.cpu * AGENT37_USD_PER_MONTH.vcpu + shape.memory * AGENT37_USD_PER_MONTH.memoryGb + shape.disk * AGENT37_USD_PER_MONTH.diskGb;
+  return { size: `${shape.cpu} vCPU / ${shape.memory} GB`, vcpu: shape.cpu, memoryGb: shape.memory, usdPerHour: usdPerMonth / AGENT37_MONTH_HOURS };
+}
+var agent37Billing = {
+  source: { url: "https://www.agent37.com/docs/agents-api/billing", readOn: "2026-11-11" },
+  meter: "Agent37 meters an instance per minute at a monthly rate over 730 hours: $0.80 per vCPU, $0.70 per GB of memory and $0.09 per GB of disk while it runs, and the disk alone while it is stopped.",
+  rates: {
+    small: agent37Rate(agent37MachineShapes.small),
+    default: agent37Rate(agent37MachineShapes.default),
+    large: agent37Rate(agent37MachineShapes.large)
+  },
+  excludes: `the disk of a stopped instance, billed at $${AGENT37_USD_PER_MONTH.diskGb} per GB a month until the instance is deleted`
+};
 var CLOUDFLARE_USD_PER_GIB_SECOND_MEMORY = 25e-7;
 var CLOUDFLARE_USD_PER_GB_SECOND_DISK = 7e-8;
 var CLOUDFLARE_USD_PER_VCPU_SECOND_ACTIVE = 2e-5;
@@ -172,6 +193,7 @@ var sandboxDriverCredentialFields = {
     { key: "worker_url", label: "Worker URL" }
   ],
   boat: [{ key: "api_key", label: "API Key", secret: true }],
+  agent37: [{ key: "api_key", label: "API Key", secret: true }],
   docker: [{ key: "image", label: "Image" }]
 };
 var sandboxDriverLabels = {
@@ -179,6 +201,7 @@ var sandboxDriverLabels = {
   vercel: "Vercel",
   cloudflare: "Cloudflare",
   boat: "Boat",
+  agent37: "Agent37",
   docker: "Docker"
 };
 
@@ -249,8 +272,8 @@ var sandboxDriverCatalog = {
       hostWatchesIdle: true,
       targetAccess: "relay",
       secretBrokering: "native",
-      // Credential handlers do not restrict unrelated destinations.
-      egressControl: "none",
+      // The sandbox Worker starts the container without internet and routes each allowed host through itself; a Worker that cannot confirm that refuses the start.
+      egressControl: "hosts",
       // A container snapshot holds the whole root filesystem; the platform keeps it 30 days past its last restore and offers no deletion.
       persistence: {
         resume: "replacement-restore",
@@ -288,6 +311,33 @@ var sandboxDriverCatalog = {
       machineClasses: ["small", "default", "large"]
     }
   },
+  agent37: {
+    id: "agent37",
+    label: sandboxDriverLabels.agent37,
+    credentialFields: sandboxDriverCredentialFields.agent37,
+    runtimeNetwork: { controlPlane: "direct", relay: "configured" },
+    runtimeEnv: "callback",
+    preparedImage: true,
+    billing: agent37Billing,
+    metadata: {
+      driverRunsIn: ["worker", "node"],
+      hostStopBehavior: "suspends-host",
+      hostResumeBehavior: "same-host",
+      targetAccess: "relay",
+      secretBrokering: "none",
+      // An instance's network policy lists domains, reached over HTTPS on 443 alone, and IPv4 ranges; private ranges stay blocked whatever it lists.
+      egressControl: "hosts-and-cidrs",
+      persistence: {
+        resume: "same-sandbox",
+        capture: "none",
+        clone: false,
+        captureSource: "not-applicable",
+        retention: "provider-managed",
+        restoreMount: "same-resource"
+      },
+      machineClasses: ["small", "default", "large"]
+    }
+  },
   docker: {
     id: "docker",
     label: sandboxDriverLabels.docker,
@@ -318,10 +368,8 @@ var sandboxDriverCatalog = {
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+function asNumber(value) {
+  return typeof value === "number" ? value : void 0;
 }
 
 // src/drivers/transient-error.ts
@@ -334,7 +382,7 @@ function driverErrorSignals(err) {
   return {
     // `response.status` is the axios shape; `statusCode` is what SDK-native
     // error classes expose instead.
-    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
+    status: asNumber(nested.status) ?? asNumber(shaped.status) ?? asNumber(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }
@@ -356,6 +404,18 @@ async function withDeadlineSignal(timeoutMs, work, parent) {
   }
 }
 
+// ../claxedo-helpers/dist/index.mjs
+function sleep(ms) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, ms);
+  });
+}
+
+// ../claxedo-helpers/dist/env.mjs
+function isEnabledFlag(value) {
+  return ["1", "true", "yes", "on"].includes(value?.trim().toLowerCase() ?? "");
+}
+
 // src/drivers/docker.ts
 var execFileAsync = promisify(execFile);
 var DEFAULT_OPERATION_TIMEOUT_MS = 6e4;
@@ -366,7 +426,7 @@ var DEFAULT_WORKSPACE_DIR = "/workspace";
 var DOCKER_LABEL = "claxedo";
 var AUTH_STAGE_DIR = "/tmp/claxedo-auth";
 function dockerSandboxSyncLocalAuth(env = process.env) {
-  return enabledFlag(env.CLAXEDO_DOCKER_SANDBOX_SYNC_LOCAL_AUTH);
+  return isEnabledFlag(env.CLAXEDO_DOCKER_SANDBOX_SYNC_LOCAL_AUTH);
 }
 function dockerSandboxAuthHome(env = process.env) {
   return trimToUndefined(env.CLAXEDO_DOCKER_SANDBOX_AUTH_HOME) ?? trimToUndefined(env.HOME) ?? os.homedir();
@@ -403,9 +463,6 @@ function dockerLocalAuthCandidates(home) {
     }
   ];
 }
-function enabledFlag(input) {
-  return ["1", "true", "yes", "on"].includes(input?.trim().toLowerCase() ?? "");
-}
 function nameFor(workspaceId) {
   const cleanId = workspaceId.toLowerCase().replace(/[^a-z0-9_.-]+/g, "-").replace(/^-+|-+$/g, "");
   return `claxedo-${cleanId || "workspace"}-${Date.now().toString(36)}`.slice(0, 63);
@@ -417,9 +474,6 @@ async function docker(args, timeoutMs = DEFAULT_OPERATION_TIMEOUT_MS, env) {
     ...env ? { env: { ...process.env, ...env } } : {}
   });
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 async function stageLocalAgentAuth(containerId, input) {
   if (!input.syncLocalAuth) return;
   const tmp = await fs.mkdtemp(path.join(os.tmpdir(), "claxedo-docker-auth-"));
@@ -472,9 +526,6 @@ function labelArgs(input) {
   return Object.entries(input).flatMap(([key, value]) => ["--label", `${key}=${value}`]);
 }
 var TRANSIENT_MARKERS = ["timeout", "temporarily unavailable", "connection refused"];
-function transientDriverError(err) {
-  return isTransientDriverError(err, TRANSIENT_MARKERS);
-}
 function createDockerSandboxDriver(options) {
   const dockerCommand = options.docker ?? docker;
   const runtimeCommand = options.runtimeCommand ?? DEFAULT_RUNTIME_COMMAND;
@@ -571,7 +622,7 @@ function createDockerSandboxDriver(options) {
       "-lc",
       bootScript(workspaceDirectory(input), runtimeCommand)
     ], 12e4, env).catch((err) => {
-      if (transientDriverError(err)) return void 0;
+      if (isTransientDriverError(err, TRANSIENT_MARKERS)) return void 0;
       throw err;
     });
     if (!created) return { provisioning: true, retryAfterMs: TRANSIENT_DRIVER_RETRY_MS };
@@ -585,7 +636,7 @@ function createDockerSandboxDriver(options) {
     if (!sandboxId) return ensureHost(input.ensure);
     await dockerCommand(["inspect", "-f", "{{.Id}}", sandboxId], timeoutMs);
     await dockerCommand(["start", sandboxId], timeoutMs).catch((err) => {
-      if (transientDriverError(err)) return void 0;
+      if (isTransientDriverError(err, TRANSIENT_MARKERS)) return void 0;
       throw err;
     });
     return readyTarget(input.ensure, sandboxId, input.ensure.hostId ?? sandboxId);