@claxedo/sandbox-manager 0.9.0 → 0.10.0

package/dist/drivers/modal.d.ts

@@ -1,4 +1,4 @@
-import type { SandboxDriver, SandboxDriverEnsureInput } from "..";
+import type { SandboxDriver, SandboxDriverEnsureInput } from "../contract";
 import { type WorkspaceRuntimeControlEnv } from "../runtime-env";
 type ModalAppLike = unknown;
 type ModalImageLike = {
@@ -49,7 +49,7 @@ export type ModalSandboxDriverOptions = {
     runtimePort?: number;
     runtimeCommand?: string;
     workspaceDir?: string;
-    runner?: string;
+    nativeHarness?: string;
     controlEnv?: WorkspaceRuntimeControlEnv;
     env?: (input: SandboxDriverEnsureInput, host: {
         id: string;

package/dist/drivers/modal.mjs

@@ -1,11 +1,41 @@
 // src/runtime-env.ts
+var WORKSPACE_RUNTIME_IDENTITY_ENV_KEYS = [
+  "WORKSPACE_RUNTIME_WORKSPACE_ID",
+  "WORKSPACE_RUNTIME_HOST_ID",
+  "WORKSPACE_RUNTIME_RELAY_WORKSPACE_IDS"
+];
+function workspaceRuntimeIdentityEnvConflicts(env) {
+  if (!env) return [];
+  return WORKSPACE_RUNTIME_IDENTITY_ENV_KEYS.filter((key) => env[key] !== void 0);
+}
+function assertWorkspaceRuntimeIdentityEnv(env) {
+  const conflicts = workspaceRuntimeIdentityEnvConflicts(env);
+  if (conflicts.length === 0) return;
+  throw new Error(
+    `sandbox env cannot set runtime identity ${conflicts.join(", ")}: the driver's placement owns the identity its target reports and the lease records`
+  );
+}
+var WORKSPACE_RUNTIME_PUBLIC_ENV_KEYS = /* @__PURE__ */ new Set([
+  ...WORKSPACE_RUNTIME_IDENTITY_ENV_KEYS,
+  "WORKSPACE_RUNTIME_DIRECTORY",
+  "WORKSPACE_RUNTIME_PORT",
+  "WORKSPACE_RUNTIME_HOST",
+  "WORKSPACE_RUNTIME_SOURCE_KIND",
+  "WORKSPACE_RUNTIME_GIT_REPO_URL",
+  "WORKSPACE_RUNTIME_GIT_BRANCH",
+  "WORKSPACE_RUNTIME_NATIVE_HARNESS",
+  "WORKSPACE_RUNTIME_RELAY_JWKS_URL",
+  "WORKSPACE_RUNTIME_MANAGEMENT_JWKS_URL",
+  "WORKSPACE_RUNTIME_SESSION_AUTHORITY_URL"
+]);
 function workspaceRuntimeBootEnv(input) {
+  assertWorkspaceRuntimeIdentityEnv(input.env);
   const env = {
     ...workspaceRuntimeTargetEnv(input),
     ...workspaceRuntimeSourceEnv(input),
     ...input.env
   };
-  if (input.runner) env.WORKSPACE_RUNTIME_RUNNER = input.runner;
+  if (input.nativeHarness) env.WORKSPACE_RUNTIME_NATIVE_HARNESS = input.nativeHarness;
   if (input.controlEnv?.relayJwksUrl) env.WORKSPACE_RUNTIME_RELAY_JWKS_URL = input.controlEnv.relayJwksUrl;
   if (input.controlEnv?.relayVerifyPem) env.WORKSPACE_RUNTIME_RELAY_HOST_VERIFY_PEM = input.controlEnv.relayVerifyPem;
   if (input.controlEnv?.managementJwksUrl) env.WORKSPACE_RUNTIME_MANAGEMENT_JWKS_URL = input.controlEnv.managementJwksUrl;
@@ -58,61 +88,47 @@ function buildIdSuffix(buildId, env) {
   const id = (buildId ?? env.CLAXEDO_SANDBOX_BUILD_ID)?.trim();
   return id ? `-${snapshotVersion(id)}` : "";
 }
-function defaultSandboxImage(version = workspaceRuntimeVersion(), buildId, env = process.env) {
-  return `${sandboxImageRepository(env)}:workspace-runtime-${snapshotVersion(version)}${buildIdSuffix(buildId, env)}-v${SNAPSHOT_SCHEMA_VERSION}`;
-}
-function defaultSnapshotName(version = workspaceRuntimeVersion(), buildId, env = process.env) {
-  return `claxedo-workspace-runtime-${snapshotVersion(version)}${buildIdSuffix(buildId, env)}-v${SNAPSHOT_SCHEMA_VERSION}`;
-}
-
-// ../claxedo-helpers/dist/guards.mjs
-function isRecord(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function asRecord(value) {
-  return isRecord(value) ? value : void 0;
-}
-
-// src/json.ts
-function num(input) {
-  return typeof input === "number" ? input : void 0;
+var AGENT_PLUGINS_TAG = "-agent-plugins";
+function defaultSandboxImage(version = workspaceRuntimeVersion(), buildId, env = process.env, options = {}) {
+  const feature = options.agentPlugins ? AGENT_PLUGINS_TAG : "";
+  return `${sandboxImageRepository(env)}:workspace-runtime-${snapshotVersion(version)}${buildIdSuffix(buildId, env)}${feature}-v${SNAPSHOT_SCHEMA_VERSION}`;
 }
 
 // src/image.ts
 var SANDBOX_IMAGE_REPOSITORY = sandboxImageRepository();
 var SANDBOX_IMAGE = process.env.CLAXEDO_SANDBOX_IMAGE || defaultSandboxImage();
-var SNAPSHOT_NAME = process.env.CLAXEDO_SNAPSHOT_NAME || defaultSnapshotName();
 
-// src/hosted-network-policy.ts
-var SANDBOX_MODEL_PROVIDER_HOSTS = [
-  "api.anthropic.com",
-  "api.openai.com",
-  "generativelanguage.googleapis.com",
-  "openrouter.ai",
-  // Model catalog + engine config, fetched on runner startup.
-  "models.dev",
-  "opencode.ai"
-];
-var SANDBOX_PACKAGE_REGISTRY_HOSTS = [
-  "registry.npmjs.org",
-  "nodejs.org",
-  "pypi.org",
-  "files.pythonhosted.org",
-  "crates.io",
-  "static.crates.io",
-  "index.crates.io",
-  "proxy.golang.org",
-  "sum.golang.org"
-];
-var SANDBOX_BASELINE_EGRESS_HOSTS = [
-  ...SANDBOX_MODEL_PROVIDER_HOSTS,
-  ...SANDBOX_PACKAGE_REGISTRY_HOSTS
-];
+// src/driver-billing.ts
+var HOUR_SECONDS = 3600;
+var boatBilling = {
+  source: { url: "https://docs.boat.dev/pricing", readOn: "2026-10-12" },
+  meter: "Boat bills machine time per second while a sandbox runs, at an hourly rate per size; a stopped sandbox costs nothing.",
+  rates: {
+    small: { size: "small", vcpu: 2, memoryGb: 4, usdPerHour: 0.018 },
+    default: { size: "default", vcpu: 4, memoryGb: 8, usdPerHour: 0.036 },
+    large: { size: "large", vcpu: 8, memoryGb: 16, usdPerHour: 0.072 }
+  }
+};
+var CLOUDFLARE_USD_PER_GIB_SECOND_MEMORY = 25e-7;
+var CLOUDFLARE_USD_PER_GB_SECOND_DISK = 7e-8;
+var CLOUDFLARE_USD_PER_VCPU_SECOND_ACTIVE = 2e-5;
+var CLOUDFLARE_STANDARD_1 = { size: "standard-1", vcpu: 0.5, memoryGb: 4, diskGb: 8 };
+var cloudflareBilling = {
+  source: { url: "https://developers.cloudflare.com/containers/pricing/", readOn: "2026-10-12" },
+  meter: "Cloudflare bills a container for every 10 ms it runs: memory at $0.0000025 per GiB-second and disk at $0.00000007 per GB-second for the whole run, plus CPU at $0.00002 per vCPU-second of active use.",
+  rates: {
+    default: {
+      size: CLOUDFLARE_STANDARD_1.size,
+      vcpu: CLOUDFLARE_STANDARD_1.vcpu,
+      memoryGb: CLOUDFLARE_STANDARD_1.memoryGb,
+      usdPerHour: (CLOUDFLARE_STANDARD_1.memoryGb * CLOUDFLARE_USD_PER_GIB_SECOND_MEMORY + CLOUDFLARE_STANDARD_1.diskGb * CLOUDFLARE_USD_PER_GB_SECOND_DISK) * HOUR_SECONDS
+    }
+  },
+  excludes: `active CPU, billed at $${CLOUDFLARE_USD_PER_VCPU_SECOND_ACTIVE} per vCPU-second and not measured by Claxedo, and the monthly allowance a Workers Paid plan includes`
+};
 
 // ../sandbox-contract/dist/index.mjs
 var sandboxDriverCredentialFields = {
-  exe: [{ key: "api_token", label: "API Token", secret: true }],
-  daytona: [{ key: "api_key", label: "API Key", secret: true }],
   modal: [
     { key: "token_id", label: "Token ID", secret: true },
     { key: "token_secret", label: "Token Secret", secret: true }
@@ -126,68 +142,26 @@ var sandboxDriverCredentialFields = {
     { key: "api_token", label: "API Token", secret: true },
     { key: "worker_url", label: "Worker URL" }
   ],
-  box: [{ key: "api_key", label: "API Key", secret: true }],
+  boat: [{ key: "api_key", label: "API Key", secret: true }],
   docker: [{ key: "image", label: "Image" }]
 };
 var sandboxDriverLabels = {
-  exe: "exe.dev",
-  daytona: "Daytona",
   modal: "Modal",
   vercel: "Vercel",
   cloudflare: "Cloudflare",
-  box: "Box",
+  boat: "Boat",
   docker: "Docker"
 };
 
 // src/driver-catalog.ts
 var sandboxDriverCatalog = {
-  exe: {
-    id: "exe",
-    label: sandboxDriverLabels.exe,
-    credentialFields: sandboxDriverCredentialFields.exe,
-    metadata: {
-      driverRunsIn: ["worker", "node"],
-      hostStopBehavior: "not-supported",
-      hostResumeBehavior: "same-host",
-      targetAccess: "relay",
-      secretBrokering: "none",
-      egressControl: "none",
-      persistence: {
-        resume: "same-sandbox",
-        capture: "none",
-        clone: true,
-        captureSource: "not-applicable",
-        retention: "provider-managed",
-        restoreMount: "same-resource"
-      }
-    }
-  },
-  daytona: {
-    id: "daytona",
-    label: sandboxDriverLabels.daytona,
-    credentialFields: sandboxDriverCredentialFields.daytona,
-    metadata: {
-      driverRunsIn: ["worker", "node"],
-      hostStopBehavior: "suspends-host",
-      hostResumeBehavior: "same-host",
-      targetAccess: "relay",
-      secretBrokering: "native",
-      // The driver translates names to domainAllowList, or addresses to networkAllowList.
-      egressControl: "hosts-and-cidrs",
-      persistence: {
-        resume: "same-sandbox",
-        capture: "filesystem",
-        clone: false,
-        captureSource: "preserved",
-        retention: "provider-managed",
-        restoreMount: "new-resource"
-      }
-    }
-  },
   modal: {
     id: "modal",
     label: sandboxDriverLabels.modal,
     credentialFields: sandboxDriverCredentialFields.modal,
+    runtimeNetwork: { controlPlane: "direct", relay: "configured" },
+    runtimeEnv: "callback",
+    preparedImage: true,
     metadata: {
       driverRunsIn: ["node"],
       hostStopBehavior: "terminates-host",
@@ -210,6 +184,9 @@ var sandboxDriverCatalog = {
     id: "vercel",
     label: sandboxDriverLabels.vercel,
     credentialFields: sandboxDriverCredentialFields.vercel,
+    runtimeNetwork: { controlPlane: "direct", relay: "configured" },
+    runtimeEnv: "callback",
+    preparedImage: false,
     metadata: {
       driverRunsIn: ["node"],
       hostStopBehavior: "terminates-host",
@@ -232,30 +209,40 @@ var sandboxDriverCatalog = {
     id: "cloudflare",
     label: sandboxDriverLabels.cloudflare,
     credentialFields: sandboxDriverCredentialFields.cloudflare,
+    runtimeNetwork: { controlPlane: "direct", relay: "configured" },
+    runtimeEnv: "callback",
+    preparedImage: false,
+    billing: cloudflareBilling,
     metadata: {
       driverRunsIn: ["worker"],
-      hostStopBehavior: "not-supported",
+      hostStopBehavior: "terminates-host",
       hostResumeBehavior: "same-host",
+      hostWatchesIdle: true,
       targetAccess: "relay",
       secretBrokering: "native",
       // Credential handlers do not restrict unrelated destinations.
       egressControl: "none",
+      // A container snapshot holds the whole root filesystem; the platform keeps it 30 days past its last restore and offers no deletion.
       persistence: {
         resume: "replacement-restore",
-        capture: "directories",
+        capture: "filesystem",
         clone: false,
         captureSource: "preserved",
         retention: "provider-managed",
-        restoreMount: "copy-on-write"
+        restoreMount: "new-resource"
       }
     }
   },
-  box: {
-    id: "box",
-    label: sandboxDriverLabels.box,
-    credentialFields: sandboxDriverCredentialFields.box,
+  boat: {
+    id: "boat",
+    label: sandboxDriverLabels.boat,
+    credentialFields: sandboxDriverCredentialFields.boat,
+    runtimeNetwork: { controlPlane: "direct", relay: "configured" },
+    runtimeEnv: "callback",
+    preparedImage: true,
+    billing: boatBilling,
     metadata: {
-      driverRunsIn: ["node"],
+      driverRunsIn: ["worker", "node"],
       hostStopBehavior: "suspends-host",
       hostResumeBehavior: "same-host",
       targetAccess: "relay",
@@ -268,13 +255,17 @@ var sandboxDriverCatalog = {
         captureSource: "not-applicable",
         retention: "provider-managed",
         restoreMount: "same-resource"
-      }
+      },
+      machineClasses: ["small", "default", "large"]
     }
   },
   docker: {
     id: "docker",
     label: sandboxDriverLabels.docker,
     credentialFields: sandboxDriverCredentialFields.docker,
+    runtimeNetwork: { controlPlane: "docker-host", relay: "configured" },
+    runtimeEnv: "callback",
+    preparedImage: true,
     metadata: {
       driverRunsIn: ["local"],
       hostStopBehavior: "terminates-host",
@@ -294,6 +285,19 @@ var sandboxDriverCatalog = {
   }
 };
 
+// ../claxedo-helpers/dist/guards.mjs
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function asRecord(value) {
+  return isRecord(value) ? value : void 0;
+}
+
+// src/json.ts
+function num(input) {
+  return typeof input === "number" ? input : void 0;
+}
+
 // src/drivers/transient-error.ts
 function textOf(input) {
   return typeof input === "string" ? input : "";
@@ -302,15 +306,18 @@ function driverErrorSignals(err) {
   const shaped = isRecord(err) ? err : {};
   const nested = isRecord(shaped.response) ? shaped.response : {};
   return {
-    status: num(nested.status) ?? num(shaped.status),
+    // `response.status` is the axios shape; `statusCode` is what SDK-native
+    // error classes expose instead.
+    status: num(nested.status) ?? num(shaped.status) ?? num(shaped.statusCode),
     text: `${textOf(shaped.code)} ${textOf(shaped.name)} ${textOf(shaped.message)}`.toLowerCase()
   };
 }
 function isTransientDriverError(err, markers) {
-  const { status, text: text2 } = driverErrorSignals(err);
+  const { status, text } = driverErrorSignals(err);
   if (status !== void 0 && status >= 500) return true;
-  return markers.some((marker) => text2.includes(marker));
+  return markers.some((marker) => text.includes(marker));
 }
+var TRANSIENT_DRIVER_RETRY_MS = 2e3;
 
 // src/drivers/modal.ts
 var DEFAULT_APP_NAME = "claxedo";
@@ -365,7 +372,7 @@ function createModalSandboxDriver(options) {
       host: "0.0.0.0",
       source: input.source,
       env: input.env,
-      runner: options.runner,
+      nativeHarness: options.nativeHarness,
       controlEnv: options.controlEnv
     });
   }
@@ -383,10 +390,13 @@ function createModalSandboxDriver(options) {
     return { blockNetwork: true };
   }
   async function readyTarget(input, sandbox, hostId) {
-    await sandbox.setTags(input.labels).catch(() => void 0);
-    const tunnels = await sandbox.tunnels(tunnelTimeoutMs).catch(() => void 0);
+    await sandbox.setTags(input.labels);
+    const tunnels = await sandbox.tunnels(tunnelTimeoutMs).catch((error) => {
+      if (error instanceof Error && error.name === "SandboxTimeoutError") return void 0;
+      throw error;
+    });
     const tunnel = tunnels?.[runtimePort];
-    if (!tunnel?.url) return { provisioning: true, retryAfterMs: 2e3 };
+    if (!tunnel?.url) return { provisioning: true, retryAfterMs: 0 };
     return {
       workspaceId: input.workspaceId,
       sandboxId: sandbox.sandboxId,
@@ -427,7 +437,7 @@ function createModalSandboxDriver(options) {
       if (transientDriverError(err)) return void 0;
       throw err;
     });
-    if (!sandbox) return { provisioning: true, retryAfterMs: 2e3 };
+    if (!sandbox) return { provisioning: true, retryAfterMs: TRANSIENT_DRIVER_RETRY_MS };
     return readyTarget(input, sandbox, hostId);
   }
   async function sandboxById(target) {

package/dist/drivers/transient-error.d.ts

@@ -9,3 +9,5 @@ export declare function driverErrorSignals(err: unknown): {
  * seen its own SDK produce.
  */
 export declare function isTransientDriverError(err: unknown, markers: readonly string[]): boolean;
+/** How long a driver waits before asking a provider again after a failure `isTransientDriverError` admits, so a provider in trouble is not asked at once. */
+export declare const TRANSIENT_DRIVER_RETRY_MS = 2000;

package/dist/drivers/vercel.d.ts

@@ -1,5 +1,6 @@
 import type { NetworkPolicy } from "@vercel/sandbox";
-import { type SandboxBrokeredSecret, type SandboxDriver, type SandboxDriverEnsureInput } from "..";
+import { type SandboxDriver, type SandboxDriverEnsureInput } from "../contract";
+import { type SandboxBrokeredSecret } from "../egress-policy";
 import { type WorkspaceRuntimeControlEnv } from "../runtime-env";
 type VercelSnapshotLike = {
     snapshotId: string;
@@ -80,7 +81,7 @@ export type VercelSandboxDriverOptions = {
     runtimePort?: number;
     runtimeCommand?: string;
     workspaceDir?: string;
-    runner?: string;
+    nativeHarness?: string;
     controlEnv?: WorkspaceRuntimeControlEnv;
     env?: (input: SandboxDriverEnsureInput, host: {
         id: string;