@claxedo/sandbox-manager 0.9.0 → 0.10.0

package/dist/stores/memory.mjs

@@ -1,47 +1,50 @@
-// src/hosted-network-policy.ts
-var SANDBOX_MODEL_PROVIDER_HOSTS = [
-  "api.anthropic.com",
-  "api.openai.com",
-  "generativelanguage.googleapis.com",
-  "openrouter.ai",
-  // Model catalog + engine config, fetched on runner startup.
-  "models.dev",
-  "opencode.ai"
-];
-var SANDBOX_PACKAGE_REGISTRY_HOSTS = [
-  "registry.npmjs.org",
-  "nodejs.org",
-  "pypi.org",
-  "files.pythonhosted.org",
-  "crates.io",
-  "static.crates.io",
-  "index.crates.io",
-  "proxy.golang.org",
-  "sum.golang.org"
-];
-var SANDBOX_BASELINE_EGRESS_HOSTS = [
-  ...SANDBOX_MODEL_PROVIDER_HOSTS,
-  ...SANDBOX_PACKAGE_REGISTRY_HOSTS
-];
-
-// src/index.ts
+// src/contract.ts
+function sandboxLeaseHeldHost(lease) {
+  return lease?.sandboxId !== void 0 && (lease.status === "stopped" || lease.status === "unavailable") ? lease : void 0;
+}
 function applySandboxLeasePatch(current, patch, updatedAt) {
   return {
     ...current,
     ...patch.status === void 0 ? {} : { status: patch.status },
-    ...patch.sandboxId === void 0 ? {} : { sandboxId: patch.sandboxId },
-    ...patch.url === void 0 ? {} : { url: patch.url },
-    ...patch.hostId === void 0 ? {} : { hostId: patch.hostId },
-    ...patch.driverResourceId === void 0 ? {} : { driverResourceId: patch.driverResourceId },
     ...patch.retryCount === void 0 ? {} : { retryCount: patch.retryCount },
     ...patch.lastHeartbeatAt === void 0 ? {} : { lastHeartbeatAt: patch.lastHeartbeatAt },
     ...patch.lastActivityAt === void 0 ? {} : { lastActivityAt: patch.lastActivityAt },
-    ...patch.labels === void 0 ? {} : { labels: patch.labels },
+    ...patch.lastHealthFailureAt === void 0 ? {} : { lastHealthFailureAt: patch.lastHealthFailureAt },
     ...patch.nextRetryAt === void 0 ? {} : { nextRetryAt: patch.nextRetryAt ?? void 0 },
     ...patch.lastError === void 0 ? {} : { lastError: patch.lastError ?? void 0 },
     ...patch.checkpoint === void 0 ? {} : { checkpoint: patch.checkpoint ?? void 0 },
-    ...patch.persistence === void 0 ? {} : { persistence: patch.persistence ?? void 0 },
     ...patch.restore === void 0 ? {} : { restore: patch.restore ?? void 0 },
+    ...patch.start === void 0 ? {} : { start: patch.start },
+    updatedAt
+  };
+}
+function applySandboxLeaseFailure(current, error, nextRetryAt, failedAt) {
+  return {
+    ...current,
+    status: "unavailable",
+    retryCount: current.retryCount + 1,
+    lastError: error,
+    nextRetryAt,
+    lastHealthFailureAt: failedAt,
+    updatedAt: failedAt,
+    ...current.start ? { start: { ...current.start, failures: [...current.start.failures ?? [], { epoch: current.epoch, failedAt, error }] } } : {}
+  };
+}
+function applySandboxProvisionedTarget(current, target, updatedAt) {
+  const sameTarget = current.status === "ready" && current.url === target.url && current.sandboxId === target.sandboxId && current.hostId === target.hostId && current.driverResourceId === target.driverResourceId;
+  return {
+    ...current,
+    status: target.url === void 0 ? "acquiring" : "ready",
+    routingId: sameTarget && current.routingId ? current.routingId : crypto.randomUUID(),
+    sandboxId: target.sandboxId,
+    url: target.url,
+    hostId: target.hostId,
+    driverResourceId: target.driverResourceId,
+    labels: target.labels,
+    ...target.persistence === void 0 ? {} : { persistence: target.persistence },
+    retryCount: 0,
+    nextRetryAt: void 0,
+    lastError: void 0,
     updatedAt
   };
 }
@@ -63,7 +66,7 @@ function createMemoryLeaseStore(seed = []) {
           retryAfterMs: Math.max(0, input.staleAfterMs - (now - current.updatedAt))
         };
       }
-      const resumable = current?.status === "stopped";
+      const held = sandboxLeaseHeldHost(current);
       const next = {
         workspaceId,
         homeRegion: current?.homeRegion ?? input.homeRegion,
@@ -73,23 +76,34 @@ function createMemoryLeaseStore(seed = []) {
         retryCount: current?.retryCount ?? 0,
         createdAt: current?.createdAt ?? now,
         updatedAt: now,
-        sandboxId: resumable ? current.sandboxId : void 0,
-        url: resumable ? current.url : void 0,
-        hostId: resumable ? current.hostId : void 0,
-        driverResourceId: resumable ? current.driverResourceId : void 0,
-        lastHeartbeatAt: resumable ? current.lastHeartbeatAt : void 0,
-        lastActivityAt: resumable ? current.lastActivityAt : void 0,
-        labels: resumable ? current.labels : void 0,
+        sandboxId: held?.sandboxId,
+        url: held?.url,
+        hostId: held?.hostId,
+        driverResourceId: held?.driverResourceId,
+        lastHeartbeatAt: held?.lastHeartbeatAt,
+        lastActivityAt: held?.lastActivityAt,
+        labels: held ? held.labels : input.labels,
+        machineClass: input.machineClass ?? held?.machineClass,
         checkpoint: current?.checkpoint,
         persistence: current?.persistence,
-        restore: current?.restore
+        restore: current?.restore,
+        start: input.start
       };
       leases.set(workspaceId, next);
       return { acquired: true, lease: next };
     },
-    async update(workspaceId, expectedEpoch, patch) {
+    async recordTarget(workspaceId, expectedEpoch, target) {
       const current = leases.get(workspaceId);
       if (!current || current.epoch !== expectedEpoch) return void 0;
+      if (current.status === "stopped" || current.status === "destroyed") return void 0;
+      const next = applySandboxProvisionedTarget(current, target, Date.now());
+      leases.set(workspaceId, next);
+      return next;
+    },
+    async update(workspaceId, expectedEpoch, patch, expectedStatus) {
+      const current = leases.get(workspaceId);
+      if (!current || current.epoch !== expectedEpoch) return void 0;
+      if (expectedStatus !== void 0 && current.status !== expectedStatus) return void 0;
       const next = applySandboxLeasePatch(current, patch, Date.now());
       leases.set(workspaceId, next);
       return next;
@@ -97,14 +111,8 @@ function createMemoryLeaseStore(seed = []) {
     async recordFailure(workspaceId, expectedEpoch, error, nextRetryAt) {
       const current = leases.get(workspaceId);
       if (!current || current.epoch !== expectedEpoch) return void 0;
-      const next = {
-        ...current,
-        status: "unavailable",
-        retryCount: current.retryCount + 1,
-        lastError: error,
-        nextRetryAt,
-        updatedAt: Date.now()
-      };
+      if (current.status === "stopped" || current.status === "destroyed") return void 0;
+      const next = applySandboxLeaseFailure(current, error, nextRetryAt, Date.now());
       leases.set(workspaceId, next);
       return next;
     },
@@ -126,6 +134,7 @@ function sandboxLease(input) {
     homeRegion: input.homeRegion ?? "us-east",
     driver: input.driver ?? "test",
     epoch: input.epoch ?? 1,
+    routingId: input.routingId,
     status: input.status ?? "ready",
     retryCount: input.retryCount ?? 0,
     createdAt: input.createdAt ?? Date.now(),
@@ -141,7 +150,9 @@ function sandboxLease(input) {
     labels: input.labels,
     checkpoint: input.checkpoint,
     persistence: input.persistence,
-    restore: input.restore
+    restore: input.restore,
+    start: input.start,
+    machineClass: input.machineClass
   };
 }
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "type": "module",
-  "description": "Sandbox lifecycle manager with epoch-based leases and pluggable drivers for Daytona, Modal, Vercel Sandbox, Cloudflare, Box, and Docker",
+  "description": "Sandbox lifecycle manager with epoch-based leases and pluggable drivers for Modal, Vercel Sandbox, Cloudflare, Boat, and Docker",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -10,12 +10,11 @@
   "keywords": [
     "claxedo",
     "sandbox",
-    "daytona",
     "modal",
     "vercel",
     "cloudflare",
     "docker",
-    "box",
+    "boat",
     "agents"
   ],
   "main": "./dist/index.mjs",
@@ -63,19 +62,19 @@
       "import": "./dist/driver-catalog.mjs",
       "default": "./dist/driver-catalog.mjs"
     },
-    "./drivers/box": {
-      "development": "./src/drivers/box.ts",
-      "bun": "./src/drivers/box.ts",
-      "types": "./dist/drivers/box.d.ts",
-      "import": "./dist/drivers/box.mjs",
-      "default": "./dist/drivers/box.mjs"
+    "./drivers/boat": {
+      "development": "./src/drivers/boat.ts",
+      "bun": "./src/drivers/boat.ts",
+      "types": "./dist/drivers/boat.d.ts",
+      "import": "./dist/drivers/boat.mjs",
+      "default": "./dist/drivers/boat.mjs"
     },
-    "./drivers/exe": {
-      "development": "./src/drivers/exe.ts",
-      "bun": "./src/drivers/exe.ts",
-      "types": "./dist/drivers/exe.d.ts",
-      "import": "./dist/drivers/exe.mjs",
-      "default": "./dist/drivers/exe.mjs"
+    "./drivers/boat-template": {
+      "development": "./src/drivers/boat-template.ts",
+      "bun": "./src/drivers/boat-template.ts",
+      "types": "./dist/drivers/boat-template.d.ts",
+      "import": "./dist/drivers/boat-template.mjs",
+      "default": "./dist/drivers/boat-template.mjs"
     },
     "./drivers/cloudflare": {
       "development": "./src/drivers/cloudflare.ts",
@@ -84,13 +83,6 @@
       "import": "./dist/drivers/cloudflare.mjs",
       "default": "./dist/drivers/cloudflare.mjs"
     },
-    "./drivers/daytona": {
-      "development": "./src/drivers/daytona.ts",
-      "bun": "./src/drivers/daytona.ts",
-      "types": "./dist/drivers/daytona.d.ts",
-      "import": "./dist/drivers/daytona.mjs",
-      "default": "./dist/drivers/daytona.mjs"
-    },
     "./drivers/docker": {
       "development": "./src/drivers/docker.ts",
       "bun": "./src/drivers/docker.ts",
@@ -98,12 +90,12 @@
       "import": "./dist/drivers/docker.mjs",
       "default": "./dist/drivers/docker.mjs"
     },
-    "./drivers/fetch-bridge": {
-      "development": "./src/drivers/fetch-bridge.ts",
-      "bun": "./src/drivers/fetch-bridge.ts",
-      "types": "./dist/drivers/fetch-bridge.d.ts",
-      "import": "./dist/drivers/fetch-bridge.mjs",
-      "default": "./dist/drivers/fetch-bridge.mjs"
+    "./drivers/local-brokering": {
+      "development": "./src/drivers/local-brokering.ts",
+      "bun": "./src/drivers/local-brokering.ts",
+      "types": "./dist/drivers/local-brokering.d.ts",
+      "import": "./dist/drivers/local-brokering.mjs",
+      "default": "./dist/drivers/local-brokering.mjs"
     },
     "./drivers/modal": {
       "development": "./src/drivers/modal.ts",
@@ -133,13 +125,6 @@
       "import": "./dist/image-name.mjs",
       "default": "./dist/image-name.mjs"
     },
-    "./lease-policy": {
-      "development": "./src/lease-policy.ts",
-      "bun": "./src/lease-policy.ts",
-      "types": "./dist/lease-policy.d.ts",
-      "import": "./dist/lease-policy.mjs",
-      "default": "./dist/lease-policy.mjs"
-    },
     "./lease-types": {
       "development": "./src/lease-types.ts",
       "bun": "./src/lease-types.ts",
@@ -178,17 +163,17 @@
     "access": "public"
   },
   "name": "@claxedo/sandbox-manager",
-  "version": "0.9.0",
+  "version": "0.10.0",
   "scripts": {
-    "build": "tsx scripts/build.ts",
+    "build": "bun scripts/build.ts",
     "prepublishOnly": "npm run build",
     "typecheck": "tsc --noEmit -p tsconfig.json",
-    "test": "mkdir -p .artifacts/unit && node ../../scripts/test-deadline.mjs bun test src --reporter=junit --reporter-outfile=.artifacts/unit/junit.xml"
+    "live:boat": "bun scripts/boat-live-check.ts",
+    "test": "mkdir -p .artifacts/unit && node ../../script/test-deadline.mjs bun test src --reporter=junit --reporter-outfile=.artifacts/unit/junit.xml"
   },
   "dependencies": {
-    "@claxedo/helpers": "0.1.0",
-    "@claxedo/sandbox-contract": "0.8.0",
-    "@daytona/sdk": "0.211.2",
+    "@claxedo/helpers": "0.2.0",
+    "@claxedo/sandbox-contract": "0.10.0",
     "@vercel/sandbox": "3.3.0",
     "modal": "0.10.1"
   },
@@ -197,7 +182,6 @@
     "@types/bun": "1.3.13",
     "@types/node": "24.12.2",
     "esbuild": "0.25.12",
-    "tsx": "4.22.3",
     "typescript": "catalog:",
     "vitest": "2.1.9"
   }

package/dist/daytona-allow-list.d.ts

@@ -1,16 +0,0 @@
-/**
- * Format CIDRs for Daytona SDK `networkAllowList` parameter.
- * Daytona currently accepts at most 10 entries.
- */
-export declare function formatDaytonaAllowList(cidrs: string[]): string;
-/**
- * Format hostnames for Daytona SDK `domainAllowList` parameter.
- *
- * Deliberately does NOT truncate, unlike the CIDR formatter above. Silently
- * dropping entries from an egress allowlist is the worst of both worlds: the
- * sandbox stays contained, but it loses reachability the caller believed it
- * granted and nothing anywhere says so. Daytona documents no cap on
- * `domainAllowList`; if one exists, an over-long list fails the create call
- * loudly, which is the outcome we want.
- */
-export declare function formatDaytonaDomainAllowList(hosts: string[]): string;

package/dist/daytona-allow-list.mjs

@@ -1,11 +0,0 @@
-// src/daytona-allow-list.ts
-function formatDaytonaAllowList(cidrs) {
-  return cidrs.slice(0, 10).join(",");
-}
-function formatDaytonaDomainAllowList(hosts) {
-  return [...new Set(hosts)].join(",");
-}
-export {
-  formatDaytonaAllowList,
-  formatDaytonaDomainAllowList
-};

package/dist/drivers/box.d.ts

@@ -1,52 +0,0 @@
-import type { SandboxDriver, SandboxDriverEnsureInput } from "..";
-export type BoxApiBox = {
-    id: string;
-    name?: string;
-    state: string;
-    url?: string | null;
-    ip?: string | null;
-    subdomain?: string | null;
-    createdAt?: string | null;
-};
-export type BoxCommandResult = {
-    stdout?: string;
-    stderr?: string;
-    exitCode?: number;
-};
-export type BoxFetch = (input: string, init?: RequestInit) => Promise<Response>;
-export type BoxSandboxDriverOptions = {
-    apiKey: string;
-    baseUrl?: string;
-    image?: string;
-    runtimePort?: number;
-    runtimeCommand?: string;
-    workspaceDir?: string;
-    runner?: string;
-    /** Container name used for the runtime container inside the box. */
-    containerName?: string;
-    /**
-     * Box auto-archives after this many seconds of inactivity. `null` (default)
-     * disables auto-archival so the SandboxManager owns the lifecycle; a number
-     * lets Box reclaim idle boxes to save cost.
-     */
-    ttlSeconds?: number | null;
-    /**
-     * Optional `docker login` before the pull, for a private runtime registry
-     * (the default image lives on ghcr.io). Omit for public images.
-     */
-    registryAuth?: {
-        server: string;
-        username: string;
-        password: string;
-    };
-    env?: (input: SandboxDriverEnsureInput, host: {
-        id: string;
-    }) => Record<string, string> | Promise<Record<string, string>>;
-    provisionTimeoutMs?: number;
-    provisionIntervalMs?: number;
-    healthTimeoutMs?: number;
-    healthIntervalMs?: number;
-    operationTimeoutMs?: number;
-    fetchImpl?: BoxFetch;
-};
-export declare function createBoxSandboxDriver(options: BoxSandboxDriverOptions): SandboxDriver;