@claxedo/sandbox-manager 0.10.3 → 0.10.4

package/dist/driver-catalog.d.ts

@@ -1,6 +1,6 @@
 import { validateSandboxPersistenceCapabilities, type SandboxDriverMetadata } from "./contract";
 import { type SandboxDriverBilling } from "./driver-billing";
-import { sandboxDriverId, type SandboxDriverEnv, type SandboxDriverID } from "@claxedo/sandbox-contract";
+import { sandboxDriverId, type SandboxDriverID } from "@claxedo/sandbox-contract";
 export { sandboxDriverId };
 export { sandboxMachineCostUsd, sandboxMachineRate, type SandboxDriverBilling, type SandboxMachineRate } from "./driver-billing";
 export type SandboxDriverCatalogEntry<ID extends string = SandboxDriverID> = {
@@ -50,4 +50,3 @@ export declare const localBrokeringTestDriverCatalogEntry: {
     };
 };
 export declare const sandboxDriverCatalog: Record<SandboxDriverID, SandboxDriverCatalogEntry>;
-export declare function dockerSandboxDriverEnabled(env?: SandboxDriverEnv): boolean;

package/dist/driver-catalog.mjs

@@ -82,6 +82,9 @@ function trimToUndefined(value) {
   const trimmed = value.trim();
   return trimmed.length > 0 ? trimmed : void 0;
 }
+function isEnabledFlag(value) {
+  return ["1", "true", "yes", "on"].includes(value?.trim().toLowerCase() ?? "");
+}
 var sandboxDriverIds = ["modal", "vercel", "cloudflare", "boat", "agent37", "docker"];
 var sandboxDriverCredentialFields = {
   modal: [
@@ -112,11 +115,8 @@ var sandboxDriverLabels = {
 function isSandboxDriverID(input) {
   return !!input && sandboxDriverIds.includes(input);
 }
-function enabled(input) {
-  return ["1", "true", "yes", "on"].includes(input?.trim().toLowerCase() ?? "");
-}
 function dockerSandboxDriverEnabled(env = process.env) {
-  return enabled(env.CLAXEDO_ENABLE_DOCKER_SANDBOX) || enabled(env.CLAXEDO_DEV_DOCKER_SANDBOX);
+  return isEnabledFlag(env.CLAXEDO_ENABLE_DOCKER_SANDBOX) || isEnabledFlag(env.CLAXEDO_DEV_DOCKER_SANDBOX);
 }
 function sandboxDriverAuthValues(cfg, id, env = process.env) {
   if (id === "modal") {
@@ -351,11 +351,7 @@ var sandboxDriverCatalog = {
     }
   }
 };
-function dockerSandboxDriverEnabled2(env = process.env) {
-  return dockerSandboxDriverEnabled(env);
-}
 export {
-  dockerSandboxDriverEnabled2 as dockerSandboxDriverEnabled,
   localBrokeringTestDriverCatalogEntry,
   sandboxDriverCatalog,
   sandboxDriverId,

package/dist/drivers/agent37.mjs

@@ -298,10 +298,8 @@ function isRecord(value) {
 function asRecord(value) {
   return isRecord(value) ? value : void 0;
 }
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+function asNumber(value) {
+  return typeof value === "number" ? value : void 0;
 }
 
 // src/lease-failure.ts
@@ -581,7 +579,7 @@ function driverErrorSignals(err) {
   return {
     // `response.status` is the axios shape; `statusCode` is what SDK-native
     // error classes expose instead.
-    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
+    status: asNumber(nested.status) ?? asNumber(shaped.status) ?? asNumber(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }

package/dist/drivers/boat-client.d.ts

@@ -44,7 +44,7 @@ export declare class BoatApiError extends Error {
     });
 }
 export declare function invalid(): never;
-export declare function requiredText(value: unknown): string;
+export declare function responseString(value: unknown): string;
 export type BoatClientOptions = {
     apiKey: string;
     baseUrl?: string;

package/dist/drivers/boat-template.mjs

@@ -429,10 +429,8 @@ function isRecord(value) {
 function asRecord(value) {
   return isRecord(value) ? value : void 0;
 }
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+function asNumber(value) {
+  return typeof value === "number" ? value : void 0;
 }
 
 // ../claxedo-helpers/dist/deadline.mjs
@@ -497,7 +495,7 @@ function startLimitOf(body) {
 function invalid() {
   throw new BoatApiError("Boat API returned an invalid response", "invalid_response");
 }
-function requiredText(value) {
+function responseString(value) {
   return typeof value === "string" ? value : invalid();
 }
 function requiredFlag(value) {
@@ -511,7 +509,7 @@ function isSandboxState(value) {
 }
 function sandbox(body) {
   const value = asRecord(body.sandbox) ?? invalid();
-  const id = requiredText(value.id);
+  const id = responseString(value.id);
   if (!/^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$/.test(id) || !isSandboxState(value.state)) invalid();
   return { id, state: value.state, hydrated: value.hydrated === true };
 }
@@ -634,8 +632,8 @@ function createBoatClient(options) {
       const body = await api(`${path(id)}/commands`, ["command.finished"], { method: "POST", body: input, timeoutMs });
       return {
         success: requiredFlag(body.success),
-        stdout: requiredText(body.stdout),
-        stderr: requiredText(body.stderr),
+        stdout: responseString(body.stdout),
+        stderr: responseString(body.stderr),
         exitCode: commandExitCode(body.exitCode),
         timedOut: requiredFlag(body.timedOut)
       };
@@ -653,7 +651,7 @@ function driverErrorSignals(err) {
   return {
     // `response.status` is the axios shape; `statusCode` is what SDK-native
     // error classes expose instead.
-    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
+    status: asNumber(nested.status) ?? asNumber(shaped.status) ?? asNumber(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }
@@ -766,6 +764,13 @@ function machineBootScripts(boot) {
   };
 }
 
+// ../claxedo-helpers/dist/index.mjs
+function sleep(ms) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, ms);
+  });
+}
+
 // src/drivers/boat.ts
 var DEFAULT_RUNTIME_COMMAND = "/usr/local/bin/workspace-runtime";
 var DEFAULT_WORKSPACE_DIR = "/workspace";
@@ -800,9 +805,6 @@ function archivedOrThrow(err) {
   if (err instanceof BoatApiError && err.code === "stop_failed" && err.sandboxState === "archived") return;
   hostGoneOrThrow(err);
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 function scrubbedTail(text, secrets) {
   return redactWorkspaceRuntimeBootSecrets(text, secrets).trim().slice(-STDERR_TAIL_CHARS);
 }
@@ -1108,13 +1110,13 @@ var STATUSES = ["saving", "ready", "failed"];
 function namedSnapshot(value) {
   const snapshot = asRecord(value) ?? invalid();
   const status = STATUSES.find((known) => known === snapshot.status) ?? invalid();
-  return { name: requiredText(snapshot.name), status, createdAt: requiredText(snapshot.createdAt) };
+  return { name: responseString(snapshot.name), status, createdAt: responseString(snapshot.createdAt) };
 }
 function share(value) {
   const entry = asRecord(value) ?? invalid();
-  const status = requiredText(entry.status);
+  const status = responseString(entry.status);
   if (status !== "active" && status !== "revoked") invalid();
-  return { id: requiredText(entry.id), status, createdAt: requiredText(entry.createdAt) };
+  return { id: responseString(entry.id), status, createdAt: responseString(entry.createdAt) };
 }
 function list(value, item) {
   return Array.isArray(value) ? value.map(item) : invalid();
@@ -1145,7 +1147,7 @@ function createBoatNamedSnapshotClient(options) {
     /** Boat shows the code only in this answer and keeps a hash of it. */
     async share(name) {
       const body = await api(`${path(name)}/shares`, ["snapshot.share.created"], { method: "POST" });
-      return { shareCode: requiredText(body.shareCode), share: share(body.share) };
+      return { shareCode: responseString(body.shareCode), share: share(body.share) };
     },
     async shares(name) {
       return list((await api(`${path(name)}/shares`, ["snapshot.share.list"])).shares, share);
@@ -1164,9 +1166,6 @@ var DEFAULT_POLL_INTERVAL_MS = 2e3;
 var DEFAULT_HYDRATION_TIMEOUT_MS = 10 * 6e4;
 var DEFAULT_STOP_TIMEOUT_MS = 10 * 6e4;
 var DEFAULT_SAVE_TIMEOUT_MS = 10 * 6e4;
-function sleep2(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 async function boatRuntimeTemplateName(image, prefix = DEFAULT_PREFIX) {
   const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(image)));
   const name = `${prefix}${Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("").slice(0, NAME_HASH_CHARS)}`;
@@ -1188,7 +1187,7 @@ async function pollBoat(label, timeoutMs, intervalMs, read) {
     const value = await read();
     if (value !== void 0) return value;
     if (Date.now() >= deadline) throw new Error(`${label} did not happen within ${Math.round(timeoutMs / 1e3)} s`);
-    await sleep2(intervalMs);
+    await sleep(intervalMs);
   }
 }
 async function ensureBoatRuntimeTemplate(options) {
@@ -1236,7 +1235,7 @@ async function buildTemplate(options, name) {
       const lease = sandboxLease({ workspaceId, homeRegion: "auto", driver: "boat", epoch, sandboxId });
       const result = sandboxId ? await driver.resumeHost({ lease, ensure: ensure(epoch) }) : await driver.ensureHost(ensure(epoch));
       if (!("provisioning" in result)) return result;
-      await sleep2(result.retryAfterMs);
+      await sleep(result.retryAfterMs);
     }
   };
   const archived = (id) => pollBoat(`Boat ${id} stop`, options.stopTimeoutMs ?? DEFAULT_STOP_TIMEOUT_MS, interval, async () => (await sandboxes.get(id)).state === "archived" ? true : void 0);

package/dist/drivers/boat.mjs

@@ -397,10 +397,8 @@ function isRecord(value) {
 function asRecord(value) {
   return isRecord(value) ? value : void 0;
 }
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+function asNumber(value) {
+  return typeof value === "number" ? value : void 0;
 }
 
 // ../claxedo-helpers/dist/deadline.mjs
@@ -465,7 +463,7 @@ function startLimitOf(body) {
 function invalid() {
   throw new BoatApiError("Boat API returned an invalid response", "invalid_response");
 }
-function requiredText(value) {
+function responseString(value) {
   return typeof value === "string" ? value : invalid();
 }
 function requiredFlag(value) {
@@ -479,7 +477,7 @@ function isSandboxState(value) {
 }
 function sandbox(body) {
   const value = asRecord(body.sandbox) ?? invalid();
-  const id = requiredText(value.id);
+  const id = responseString(value.id);
   if (!/^bx_[23456789abcdefghjkmnpqrstuvwxyz]{8}$/.test(id) || !isSandboxState(value.state)) invalid();
   return { id, state: value.state, hydrated: value.hydrated === true };
 }
@@ -602,8 +600,8 @@ function createBoatClient(options) {
       const body = await api(`${path(id)}/commands`, ["command.finished"], { method: "POST", body: input, timeoutMs });
       return {
         success: requiredFlag(body.success),
-        stdout: requiredText(body.stdout),
-        stderr: requiredText(body.stderr),
+        stdout: responseString(body.stdout),
+        stderr: responseString(body.stderr),
         exitCode: commandExitCode(body.exitCode),
         timedOut: requiredFlag(body.timedOut)
       };
@@ -621,7 +619,7 @@ function driverErrorSignals(err) {
   return {
     // `response.status` is the axios shape; `statusCode` is what SDK-native
     // error classes expose instead.
-    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
+    status: asNumber(nested.status) ?? asNumber(shaped.status) ?? asNumber(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }
@@ -723,6 +721,13 @@ function machineBootScripts(boot) {
   };
 }
 
+// ../claxedo-helpers/dist/index.mjs
+function sleep(ms) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, ms);
+  });
+}
+
 // src/drivers/boat.ts
 function formatBoatRuntimeTemplate(template) {
   return JSON.stringify({ image: template.image, shareCode: template.shareCode });
@@ -773,9 +778,6 @@ function archivedOrThrow(err) {
   if (err instanceof BoatApiError && err.code === "stop_failed" && err.sandboxState === "archived") return;
   hostGoneOrThrow(err);
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 function scrubbedTail(text, secrets) {
   return redactWorkspaceRuntimeBootSecrets(text, secrets).trim().slice(-STDERR_TAIL_CHARS);
 }

package/dist/drivers/cloudflare.mjs

@@ -254,6 +254,17 @@ var sandboxDriverCatalog = {
   }
 };
 
+// ../claxedo-helpers/dist/deadline.mjs
+async function withDeadlineSignal(timeoutMs, work, parent) {
+  const deadline = new AbortController();
+  const timer = setTimeout(() => deadline.abort(new DOMException("The operation timed out.", "TimeoutError")), timeoutMs);
+  try {
+    return await work(parent ? AbortSignal.any([parent, deadline.signal]) : deadline.signal);
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 // src/egress-policy.ts
 function brokeredSecretPlaceholder(name) {
   return `claxedo-broker:${name}`;
@@ -292,10 +303,11 @@ function isRecord(value) {
 function asRecord(value) {
   return isRecord(value) ? value : void 0;
 }
-
-// src/json.ts
-function text(input) {
-  return typeof input === "string" && input.length > 0 ? input : void 0;
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function nonEmptyString(value) {
+  return isNonEmptyString(value) ? value : void 0;
 }
 
 // src/runtime-env.ts
@@ -387,19 +399,6 @@ var DEFAULT_RUNTIME_COMMAND = "/usr/local/bin/workspace-runtime";
 var DEFAULT_TIMEOUT_MS = 45e3;
 var DEFAULT_ENSURE_TIMEOUT_MS = 3e5;
 var DEFAULT_SNAPSHOT_TIMEOUT_MS = 18e4;
-function deadlineSignal(timeoutMs) {
-  const controller = new AbortController();
-  const timer = setTimeout(
-    () => controller.abort(new DOMException("The operation timed out", "TimeoutError")),
-    timeoutMs
-  );
-  return {
-    signal: controller.signal,
-    cleanup() {
-      clearTimeout(timer);
-    }
-  };
-}
 var RUNTIME_HOME = "/home/claxedo";
 function sandboxIdFor(workspaceId) {
   return `claxedo-${workspaceId}`;
@@ -431,19 +430,17 @@ function createCloudflareSandboxDriver(options) {
   };
   async function call(sandboxId, action, body, method = "POST") {
     const url = `${base}/sandbox/${encodeURIComponent(sandboxId)}${action ? `/${action}` : ""}`;
-    const deadline = deadlineSignal(action === "ensure-runtime" ? ensureTimeoutMs : action === "snapshot" ? snapshotTimeoutMs : timeoutMs);
-    try {
+    const deadlineMs = action === "ensure-runtime" ? ensureTimeoutMs : action === "snapshot" ? snapshotTimeoutMs : timeoutMs;
+    return withDeadlineSignal(deadlineMs, async (signal) => {
       const res = await doFetch(url, {
         method,
         headers,
         ...method === "POST" ? { body: JSON.stringify(body) } : {},
-        signal: deadline.signal
+        signal
       });
       const data = asRecord(await res.json().catch(() => ({}))) ?? {};
       return { status: res.status, data };
-    } finally {
-      deadline.cleanup();
-    }
+    });
   }
   function workspaceDirectory(input) {
     return input.workspaceRoot ?? workspaceDir;
@@ -521,16 +518,16 @@ function createCloudflareSandboxDriver(options) {
     });
     if (!response) return { provisioning: true, retryAfterMs: 0 };
     const { status, data } = response;
-    const runtimeUrl = text(data.url);
+    const runtimeUrl = nonEmptyString(data.url);
     if (status === 503 && data.error === "workspace-runtime did not become ready") {
       return { provisioning: true, retryAfterMs: 0 };
     }
-    if (data.exited === true) throw new SandboxRuntimeBootError(text(data.error) ?? "The workspace runtime exited before it was ready");
+    if (data.exited === true) throw new SandboxRuntimeBootError(nonEmptyString(data.error) ?? "The workspace runtime exited before it was ready");
     if (status === 410 && isSandboxCheckpointUnusableCause(data.checkpointUnusable)) {
-      throw new SandboxCheckpointUnusableError(data.checkpointUnusable, text(data.error) ?? "This workspace's saved files cannot be restored; choose Start fresh.");
+      throw new SandboxCheckpointUnusableError(data.checkpointUnusable, nonEmptyString(data.error) ?? "This workspace's saved files cannot be restored; choose Start fresh.");
     }
     if (status >= 400 || !runtimeUrl) {
-      const reason = `Cloudflare ensure-runtime failed (${status}): ${text(data.error) ?? "no runtime url"}`;
+      const reason = `Cloudflare ensure-runtime failed (${status}): ${nonEmptyString(data.error) ?? "no runtime url"}`;
       throw status === 401 || status === 403 ? new SandboxProviderKeyRefusedError(reason) : new Error(reason);
     }
     if (net && asRecord(data.egress)?.contained !== true) {
@@ -574,12 +571,11 @@ function createCloudflareSandboxDriver(options) {
     //
     // A missing registry route or R2 binding cannot establish an empty inventory.
     async list() {
-      const deadline = deadlineSignal(timeoutMs);
-      try {
+      return withDeadlineSignal(timeoutMs, async (signal) => {
         const res = await doFetch(`${base}/sandboxes`, {
           method: "GET",
           headers,
-          signal: deadline.signal
+          signal
         });
         if (res.status === 404 || res.status === 501) {
           throw new CloudflareSandboxListingUnsupportedError(`Cloudflare sandbox Worker cannot enumerate sandboxes (${res.status}); requires the /sandboxes registry route and SANDBOX_REGISTRY binding`);
@@ -588,11 +584,11 @@ function createCloudflareSandboxDriver(options) {
         if (!data) throw new Error("Invalid Cloudflare sandbox listing envelope");
         if (data.supported === false) {
           throw new CloudflareSandboxListingUnsupportedError(
-            text(data.error) ?? `Cloudflare sandbox Worker cannot enumerate sandboxes (${res.status}) \u2014 deploy a Worker with the /sandboxes registry route and an R2 SANDBOX_REGISTRY binding`
+            nonEmptyString(data.error) ?? `Cloudflare sandbox Worker cannot enumerate sandboxes (${res.status}) \u2014 deploy a Worker with the /sandboxes registry route and an R2 SANDBOX_REGISTRY binding`
           );
         }
         if (!res.ok) {
-          throw new Error(`Cloudflare sandbox listing failed (${res.status}): ${text(data.error) ?? "unknown error"}`);
+          throw new Error(`Cloudflare sandbox listing failed (${res.status}): ${nonEmptyString(data.error) ?? "unknown error"}`);
         }
         return registryEntries(data.sandboxes).flatMap((entry) => {
           const sandboxId = entry.sandboxId;
@@ -611,9 +607,7 @@ function createCloudflareSandboxDriver(options) {
           };
           return [target];
         });
-      } finally {
-        deadline.cleanup();
-      }
+      });
     },
     metadata: {
       driverRunsIn: ["worker"],
@@ -635,14 +629,14 @@ function createCloudflareSandboxDriver(options) {
     async stop(target) {
       const { status, data } = await call(target.sandboxId, "stop", { epoch: target.epoch });
       if (status >= 400 || data.ok !== true) {
-        throw new Error(`Cloudflare stop failed (${status}) for ${target.sandboxId}: ${text(data.error) ?? "not stopped"}`);
+        throw new Error(`Cloudflare stop failed (${status}) for ${target.sandboxId}: ${nonEmptyString(data.error) ?? "not stopped"}`);
       }
     },
     // The sandbox's object outlives its container and keeps the snapshots it took, so a container that is not running is a stopped host, never a gone one.
     async inspect(target) {
       const { status, data } = await call(target.sandboxId, "inspect", {});
       if (status < 200 || status >= 300 || typeof data.running !== "boolean") {
-        throw new Error(`Cloudflare inspect failed (${status}) for ${target.sandboxId}: ${text(data.error) ?? "no container state"}`);
+        throw new Error(`Cloudflare inspect failed (${status}) for ${target.sandboxId}: ${nonEmptyString(data.error) ?? "no container state"}`);
       }
       return data.running ? "serving" : "stopped";
     },
@@ -654,9 +648,9 @@ function createCloudflareSandboxDriver(options) {
     },
     async snapshot(target) {
       const { status, data } = await call(target.sandboxId, "snapshot", {});
-      const snapshotId = text(data.snapshotId);
+      const snapshotId = nonEmptyString(data.snapshotId);
       if (status >= 400 || !snapshotId) {
-        throw new Error(`Cloudflare snapshot failed (${status}): ${text(data.error) ?? "no snapshot id"}`);
+        throw new Error(`Cloudflare snapshot failed (${status}): ${nonEmptyString(data.error) ?? "no snapshot id"}`);
       }
       return { snapshotId };
     }

package/dist/drivers/docker.mjs

@@ -368,10 +368,8 @@ var sandboxDriverCatalog = {
 function isRecord(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+function asNumber(value) {
+  return typeof value === "number" ? value : void 0;
 }
 
 // src/drivers/transient-error.ts
@@ -384,7 +382,7 @@ function driverErrorSignals(err) {
   return {
     // `response.status` is the axios shape; `statusCode` is what SDK-native
     // error classes expose instead.
-    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
+    status: asNumber(nested.status) ?? asNumber(shaped.status) ?? asNumber(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }
@@ -406,6 +404,18 @@ async function withDeadlineSignal(timeoutMs, work, parent) {
   }
 }
 
+// ../claxedo-helpers/dist/index.mjs
+function sleep(ms) {
+  return new Promise((resolve) => {
+    setTimeout(resolve, ms);
+  });
+}
+
+// ../claxedo-helpers/dist/env.mjs
+function isEnabledFlag(value) {
+  return ["1", "true", "yes", "on"].includes(value?.trim().toLowerCase() ?? "");
+}
+
 // src/drivers/docker.ts
 var execFileAsync = promisify(execFile);
 var DEFAULT_OPERATION_TIMEOUT_MS = 6e4;
@@ -416,7 +426,7 @@ var DEFAULT_WORKSPACE_DIR = "/workspace";
 var DOCKER_LABEL = "claxedo";
 var AUTH_STAGE_DIR = "/tmp/claxedo-auth";
 function dockerSandboxSyncLocalAuth(env = process.env) {
-  return enabledFlag(env.CLAXEDO_DOCKER_SANDBOX_SYNC_LOCAL_AUTH);
+  return isEnabledFlag(env.CLAXEDO_DOCKER_SANDBOX_SYNC_LOCAL_AUTH);
 }
 function dockerSandboxAuthHome(env = process.env) {
   return trimToUndefined(env.CLAXEDO_DOCKER_SANDBOX_AUTH_HOME) ?? trimToUndefined(env.HOME) ?? os.homedir();
@@ -453,9 +463,6 @@ function dockerLocalAuthCandidates(home) {
     }
   ];
 }
-function enabledFlag(input) {
-  return ["1", "true", "yes", "on"].includes(input?.trim().toLowerCase() ?? "");
-}
 function nameFor(workspaceId) {
   const cleanId = workspaceId.toLowerCase().replace(/[^a-z0-9_.-]+/g, "-").replace(/^-+|-+$/g, "");
   return `claxedo-${cleanId || "workspace"}-${Date.now().toString(36)}`.slice(0, 63);
@@ -467,9 +474,6 @@ async function docker(args, timeoutMs = DEFAULT_OPERATION_TIMEOUT_MS, env) {
     ...env ? { env: { ...process.env, ...env } } : {}
   });
 }
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
 async function stageLocalAgentAuth(containerId, input) {
   if (!input.syncLocalAuth) return;
   const tmp = await fs.mkdtemp(path.join(os.tmpdir(), "claxedo-docker-auth-"));
@@ -522,9 +526,6 @@ function labelArgs(input) {
   return Object.entries(input).flatMap(([key, value]) => ["--label", `${key}=${value}`]);
 }
 var TRANSIENT_MARKERS = ["timeout", "temporarily unavailable", "connection refused"];
-function transientDriverError(err) {
-  return isTransientDriverError(err, TRANSIENT_MARKERS);
-}
 function createDockerSandboxDriver(options) {
   const dockerCommand = options.docker ?? docker;
   const runtimeCommand = options.runtimeCommand ?? DEFAULT_RUNTIME_COMMAND;
@@ -621,7 +622,7 @@ function createDockerSandboxDriver(options) {
       "-lc",
       bootScript(workspaceDirectory(input), runtimeCommand)
     ], 12e4, env).catch((err) => {
-      if (transientDriverError(err)) return void 0;
+      if (isTransientDriverError(err, TRANSIENT_MARKERS)) return void 0;
       throw err;
     });
     if (!created) return { provisioning: true, retryAfterMs: TRANSIENT_DRIVER_RETRY_MS };
@@ -635,7 +636,7 @@ function createDockerSandboxDriver(options) {
     if (!sandboxId) return ensureHost(input.ensure);
     await dockerCommand(["inspect", "-f", "{{.Id}}", sandboxId], timeoutMs);
     await dockerCommand(["start", sandboxId], timeoutMs).catch((err) => {
-      if (transientDriverError(err)) return void 0;
+      if (isTransientDriverError(err, TRANSIENT_MARKERS)) return void 0;
       throw err;
     });
     return readyTarget(input.ensure, sandboxId, input.ensure.hostId ?? sandboxId);

package/dist/drivers/local-brokering.mjs

@@ -48,6 +48,8 @@ var CLAXEDO_TOOL_NAMES = [
   "ui_guide"
 ];
 var CLAXEDO_TOOL_NAME_SET = new Set(CLAXEDO_TOOL_NAMES);
+var PROMPT_ATTACHMENT_MAX_BYTES = 32 * 1024 * 1024;
+var PROMPT_ATTACHMENT_UPLOAD_MAX_BODY_BYTES = Math.ceil(PROMPT_ATTACHMENT_MAX_BYTES / 3) * 4 + 64 * 1024;
 var CREDENTIAL_BROKER_ERRORS = {
   binding_route_required: {
     fault: "harness",

package/dist/drivers/modal.mjs

@@ -347,10 +347,8 @@ function isRecord(value) {
 function asRecord(value) {
   return isRecord(value) ? value : void 0;
 }
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+function asNumber(value) {
+  return typeof value === "number" ? value : void 0;
 }
 
 // src/drivers/transient-error.ts
@@ -363,7 +361,7 @@ function driverErrorSignals(err) {
   return {
     // `response.status` is the axios shape; `statusCode` is what SDK-native
     // error classes expose instead.
-    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
+    status: asNumber(nested.status) ?? asNumber(shaped.status) ?? asNumber(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }
@@ -389,9 +387,6 @@ function nameFor(workspaceId) {
   return `claxedo-${workspaceId}`;
 }
 var TRANSIENT_MARKERS = ["timeout", "unavailable", "deadline"];
-function transientDriverError(err) {
-  return isTransientDriverError(err, TRANSIENT_MARKERS);
-}
 function createModalSandboxDriver(options) {
   let defaultClient;
   function resolveClient() {
@@ -489,7 +484,7 @@ function createModalSandboxDriver(options) {
         ...network(input)
       }
     ).catch((err) => {
-      if (transientDriverError(err)) return void 0;
+      if (isTransientDriverError(err, TRANSIENT_MARKERS)) return void 0;
       throw err;
     });
     if (!sandbox) return { provisioning: true, retryAfterMs: TRANSIENT_DRIVER_RETRY_MS };

package/dist/drivers/vercel.mjs

@@ -334,10 +334,8 @@ function isRecord(value) {
 function asRecord(value) {
   return isRecord(value) ? value : void 0;
 }
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+function asNumber(value) {
+  return typeof value === "number" ? value : void 0;
 }
 
 // src/drivers/transient-error.ts
@@ -350,7 +348,7 @@ function driverErrorSignals(err) {
   return {
     // `response.status` is the axios shape; `statusCode` is what SDK-native
     // error classes expose instead.
-    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
+    status: asNumber(nested.status) ?? asNumber(shaped.status) ?? asNumber(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }
@@ -379,7 +377,8 @@ var HARNESS_RELEASE_AGE_EXCLUSIONS = `printf '%s\\n' ${[
   "@anthropic-ai/claude-*",
   "@cursor/sdk*",
   "@earendil-works/*",
-  "@openai/codex"
+  "@openai/codex",
+  "@opencode/*"
 ].map((name) => `'min-release-age-exclude[]=${name}'`).join(" ")} >> "$HOME/.npmrc"`;
 var DEFAULT_RUNTIME_COMMAND = "/usr/local/bin/workspace-runtime";
 var DEFAULT_WORKSPACE_DIR = "/workspace";
@@ -401,9 +400,6 @@ function nameFor(workspaceId) {
   return `claxedo-${workspaceId}`;
 }
 var TRANSIENT_MARKERS = ["timeout", "unavailable", "deadline", "pending"];
-function transientDriverError(err) {
-  return isTransientDriverError(err, TRANSIENT_MARKERS);
-}
 function network(input) {
   if (!input.net || input.net.mode === "allow-all") return void 0;
   const hosts = input.net.hosts ?? [];
@@ -538,7 +534,9 @@ function createVercelSandboxDriver(options) {
       await runSetup(builder, "sudo dnf install -y git make gcc-c++ python3 > /dev/null 2>&1");
       await runSetup(builder, [
         HARNESS_RELEASE_AGE_EXCLUSIONS,
-        "npm i -g --min-release-age=2 tsx@4.22.3 opencode-ai@1.15.10 @anthropic-ai/claude-code@2.1.285 @openai/codex@0.159.2",
+        "npm i -g --min-release-age=2 tsx@4.22.3 @anthropic-ai/claude-code@2.1.323 @openai/codex@0.165.0",
+        "sudo mkdir -p /etc/codex",
+        "printf 'check_for_update_on_startup = false\\n' | sudo tee /etc/codex/config.toml > /dev/null",
         "curl https://cursor.com/install -fsS | bash",
         "curl -fsSL https://ampcode.com/install.sh | bash",
         "curl -fsSL https://app.factory.ai/cli | sh",
@@ -548,7 +546,6 @@ function createVercelSandboxDriver(options) {
         "sudo ln -sf $HOME/.local/bin/amp /usr/local/bin/amp",
         "sudo ln -sf $HOME/.local/bin/droid /usr/local/bin/droid",
         "sudo ln -sf $HOME/.local/bin/agy /usr/local/bin/agy",
-        "command -v opencode",
         "command -v claude",
         "command -v codex",
         "command -v agent",
@@ -631,7 +628,7 @@ function createVercelSandboxDriver(options) {
       env,
       ...createPolicy ? { networkPolicy: createPolicy } : {}
     }).catch((err) => {
-      if (transientDriverError(err)) return void 0;
+      if (isTransientDriverError(err, TRANSIENT_MARKERS)) return void 0;
       throw err;
     });
     if (!sandbox) return { provisioning: true, retryAfterMs: TRANSIENT_DRIVER_RETRY_MS };

package/dist/index.mjs

@@ -553,10 +553,8 @@ function sandboxRuntimeBootFailure(error) {
   return workspaceRuntimeBootReason(diagnostic) ?? diagnostic;
 }
 var SANDBOX_RUNTIME_UNHEALTHY = "runtime_unhealthy";
-var SANDBOX_RETRY_CAP_EXCEEDED = "runtime_retry_cap_exceeded";
 var CODED_REASONS = /* @__PURE__ */ new Map([
   [SANDBOX_RUNTIME_UNHEALTHY, "The workspace machine stopped answering."],
-  [SANDBOX_RETRY_CAP_EXCEEDED, "Several tries in a row failed; try again later."],
   [SANDBOX_UPDATE_DOWNLOAD_INTERRUPTED, "The update couldn't finish downloading; your workspace is still running. Try again."]
 ]);
 function firstLine(text) {
@@ -1543,14 +1541,6 @@ function createSandboxManager(options) {
         ...existing.retryCount >= maxRetryCount ? { exhausted: true } : {}
       };
     }
-    if (existing.status === "unavailable" && existing.retryCount >= maxRetryCount && existing.nextRetryAt === void 0 && sandboxProviderRateLimit(existing.lastError) !== "day") {
-      return {
-        status: "unavailable",
-        error: existing.lastError ?? SANDBOX_RETRY_CAP_EXCEEDED,
-        epoch: existing.epoch,
-        homeRegion: existing.homeRegion
-      };
-    }
     return void 0;
   }
   function continues(lease) {
@@ -1757,7 +1747,6 @@ export {
   SANDBOX_IMAGE_LABEL,
   SANDBOX_MODEL_PROVIDER_HOSTS,
   SANDBOX_PACKAGE_REGISTRY_HOSTS,
-  SANDBOX_RETRY_CAP_EXCEEDED,
   SANDBOX_RUNTIME_UNHEALTHY,
   SANDBOX_START_WINDOWS,
   SANDBOX_UPDATE_DOWNLOAD_INTERRUPTED,

package/dist/json.d.ts

@@ -1,4 +1 @@
-export { asRecord as record, isRecord } from "@claxedo/helpers/guards";
-/** An empty string is absent. */
-export declare function text(input: unknown): string | undefined;
-export declare function num(input: unknown): number | undefined;
+export { asNumber as num, asRecord as record, isRecord, nonEmptyString as text } from "@claxedo/helpers/guards";

package/dist/lease-failure.d.ts

@@ -158,8 +158,6 @@ export declare function runtimeBootDiagnostic(log: string, maxChars: number): st
 export declare function sandboxRuntimeBootFailure(error: string | undefined): string | undefined;
 /** The error a lease keeps when the runtime it serves stopped answering its health reports. */
 export declare const SANDBOX_RUNTIME_UNHEALTHY = "runtime_unhealthy";
-/** The error a capped lease answers when it kept none of its own. */
-export declare const SANDBOX_RETRY_CAP_EXCEEDED = "runtime_retry_cap_exceeded";
 /**
  * The one line a person is told for a start step's error: the runtime's own
  * reason for a boot that failed, the provider's refusal in Claxedo's words,

package/dist/runtime-env.d.ts

@@ -1,4 +1,3 @@
-import type { SandboxDriverID } from "@claxedo/sandbox-contract";
 export type WorkspaceRuntimeControlEnv = {
     relayJwksUrl?: string;
     relayVerifyPem?: string;
@@ -35,9 +34,3 @@ export declare function workspaceRuntimeSourceEnv(input: {
         kind: "empty";
     };
 }): Record<string, string>;
-export declare function workspaceRuntimeServiceExposureEnv(input: {
-    driver: SandboxDriverID;
-    source: "driver-service-url";
-    access: "private" | "public" | "driver-authenticated" | "unknown";
-    note?: string;
-}): Record<string, string>;

package/dist/runtime-env.mjs

@@ -66,22 +66,12 @@ function workspaceRuntimeSourceEnv(input) {
     ...input.source.branch ? { WORKSPACE_RUNTIME_GIT_BRANCH: input.source.branch } : {}
   };
 }
-function workspaceRuntimeServiceExposureEnv(input) {
-  return {
-    ...input.driver === "docker" ? { WORKSPACE_RUNTIME_HOST: "0.0.0.0" } : {},
-    WORKSPACE_RUNTIME_SERVICE_EXPOSURE_SOURCE: input.source,
-    WORKSPACE_RUNTIME_SERVICE_EXPOSURE_ACCESS: input.access,
-    WORKSPACE_RUNTIME_SERVICE_EXPOSURE_DRIVER: input.driver,
-    ...input.note ? { WORKSPACE_RUNTIME_SERVICE_EXPOSURE_NOTE: input.note } : {}
-  };
-}
 export {
   assertWorkspaceRuntimeIdentityEnv,
   redactWorkspaceRuntimeBootSecrets,
   workspaceRuntimeBootEnv,
   workspaceRuntimeBootSecrets,
   workspaceRuntimeIdentityEnvConflicts,
-  workspaceRuntimeServiceExposureEnv,
   workspaceRuntimeSourceEnv,
   workspaceRuntimeTargetEnv
 };

package/package.json

@@ -171,7 +171,7 @@
     "access": "public"
   },
   "name": "@claxedo/sandbox-manager",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "scripts": {
     "build": "bun scripts/build.ts",
     "prepublishOnly": "npm run build",
@@ -180,8 +180,8 @@
     "test": "mkdir -p .artifacts/unit && node ../../script/test-deadline.mjs bun test src --reporter=junit --reporter-outfile=.artifacts/unit/junit.xml"
   },
   "dependencies": {
-    "@claxedo/helpers": "0.2.3",
-    "@claxedo/sandbox-contract": "0.10.3",
+    "@claxedo/helpers": "0.2.4",
+    "@claxedo/sandbox-contract": "0.10.4",
     "@vercel/sandbox": "3.3.0",
     "modal": "0.10.1"
   },