@computesdk/sandbox-cli 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 computesdk
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,110 @@
-# Temporary Holding Version
+# @computesdk/sandbox-cli
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+[sandbox-cli](https://github.com/Amitgb14/sandbox-cli) provider for ComputeSDK.
+
+sandbox-cli runs every sandbox as a microVM with its own kernel, behind one HTTP
+API that is the same in three places: on a Mac (the native macOS `container`
+runtime), on a Linux machine you control (Firecracker under KVM), and in the
+cloud. This provider talks to that API with `fetch`; it has no other
+dependency.
+
+## Installation
+
+```bash
+npm install @computesdk/sandbox-cli
+```
+
+## Setup
+
+Point the provider at a `sandboxd` (one machine) or a `sandbox-gateway` (many
+machines) and give it a token:
+
+```bash
+export SANDBOX_ENDPOINT=https://sandbox.example.com
+export SANDBOX_TOKEN=your_token
+# on a gateway, optionally the organization to act in
+export SANDBOX_ORG=your_org
+```
+
+These are the same variables the `sandbox-cli` command and its SDKs read.
+
+The endpoint must be `https://`, except for a sandboxd on the same machine:
+plain `http://` is accepted only to `127.0.0.1`, `::1` or `localhost`, since every
+request carries the token.
+
+## Usage
+
+```typescript
+import { sandboxCli } from '@computesdk/sandbox-cli';
+
+const compute = sandboxCli({
+  endpoint: process.env.SANDBOX_ENDPOINT,
+  token: process.env.SANDBOX_TOKEN,
+});
+
+// Create a sandbox: resolves once the VM is booted and running
+const sandbox = await compute.sandbox.create();
+
+// Run a command
+const result = await sandbox.runCommand('node -v');
+console.log(result.stdout);
+
+// Live output
+await sandbox.runCommand('for i in 1 2 3; do echo $i; sleep 1; done', {
+  onStdout: (chunk) => process.stdout.write(chunk),
+});
+
+// Files
+await sandbox.filesystem.writeFile('/sandbox/home/hello.txt', 'hi');
+console.log(await sandbox.filesystem.readFile('/sandbox/home/hello.txt'));
+
+await sandbox.destroy();
+```
+
+## Configuration
+
+```typescript
+interface SandboxCliConfig {
+  /** API endpoint; falls back to SANDBOX_ENDPOINT */
+  endpoint?: string;
+  /** Bearer token; falls back to SANDBOX_TOKEN */
+  token?: string;
+  /** On a gateway, the organization to act in; falls back to SANDBOX_ORG */
+  org?: string;
+  /** Default sandbox lifetime in milliseconds; unset leaves the server's default */
+  timeout?: number;
+}
+```
+
+### Create options
+
+| ComputeSDK option | sandbox-cli field |
+|---|---|
+| `image` / `templateId` | `image` (an OCI image) |
+| `snapshotId` | `snapshot_id` |
+| `name` | `name` |
+| `envs` | `env` |
+| `metadata` | `labels` (values as strings) |
+| `cpus` / `vcpus` / `cpu` | `cpus` |
+| `memoryMb` / `memory` / `memoryMiB` / `memMiB` | `memory_mb` |
+| `diskMb` / `diskMiB` | `disk_mb` |
+| `timeout` (ms) | `lifetime_secs` |
+
+The server's policy has the last word: a request may tighten what is in force,
+never loosen it, and one it cannot honour is refused rather than weakened.
+
+## Supported
+
+- Sandbox lifecycle: `create`, `getById`, `list`, `destroy`
+- `runCommand`, with `cwd`, `env`, `timeout` and `background`
+- Live output (`onStdout` / `onStderr`) through the API's own process stream
+- Filesystem: `readFile`, `writeFile`, `mkdir`, `readdir`, `exists`, `remove`
+- `getInfo`
+
+## Limitations
+
+- `getUrl` is not supported. A port inside a sandbox is reached through the
+  API's tunnel (an upgraded connection to the guest's own loopback), not a
+  public URL; use `sandbox-cli tunnel`.
+- Commands run through `sh -c` as the sandbox user, starting in
+  `/sandbox/home`.

package/dist/index.d.mts

@@ -0,0 +1,62 @@
+import * as computesdk from 'computesdk';
+import * as _computesdk_provider from '@computesdk/provider';
+
+/**
+ * sandbox-cli Provider - Factory-based Implementation
+ *
+ * sandbox-cli runs each sandbox as a microVM with its own kernel, behind one
+ * HTTP API (v1) that is the same on a Mac, on a self-hosted Linux machine and
+ * in the cloud. This provider talks to that API directly with fetch, so it
+ * has no SDK dependency.
+ */
+/**
+ * sandbox-cli provider configuration
+ */
+interface SandboxCliConfig {
+    /** API endpoint, e.g. `https://sandbox.example.com` - falls back to SANDBOX_ENDPOINT */
+    endpoint?: string;
+    /** Bearer token - falls back to SANDBOX_TOKEN */
+    token?: string;
+    /** On a gateway, the organization to act in - falls back to SANDBOX_ORG */
+    org?: string;
+    /** Default sandbox lifetime in milliseconds; unset leaves the server's default */
+    timeout?: number;
+}
+/** A sandbox as the v1 API returns it (the fields this provider reads). */
+interface ApiSandbox {
+    id: string;
+    name?: string;
+    state: 'pending' | 'running' | 'suspended' | 'terminated';
+    image: string;
+    cpus: number;
+    memory_mb: number;
+    created_at: string;
+    lifetime_secs?: number;
+    labels?: Record<string, string>;
+}
+/** The native instance: the API record plus a client bound to it. */
+interface SandboxCliInstance {
+    client: ApiClient;
+    sandbox: ApiSandbox;
+}
+declare class ApiClient {
+    readonly base: string;
+    private readonly headers;
+    constructor(config: SandboxCliConfig);
+    request(method: string, path: string, init?: {
+        query?: Record<string, string>;
+        json?: unknown;
+        body?: BodyInit;
+        signal?: AbortSignal;
+    }): Promise<Response>;
+    json<T>(method: string, path: string, payload?: unknown): Promise<T>;
+    sbx(id: string): string;
+}
+/**
+ * Create a sandbox-cli provider instance using the factory pattern
+ */
+declare const sandboxCli: (config: SandboxCliConfig & _computesdk_provider.ProcessRuntimeOptions) => _computesdk_provider.Provider<SandboxCliInstance, any, any, computesdk.Volume> & {
+    readonly sizes: computesdk.InstanceSizeManager;
+};
+
+export { type SandboxCliConfig, type SandboxCliInstance, sandboxCli };

package/dist/index.d.ts

@@ -0,0 +1,62 @@
+import * as computesdk from 'computesdk';
+import * as _computesdk_provider from '@computesdk/provider';
+
+/**
+ * sandbox-cli Provider - Factory-based Implementation
+ *
+ * sandbox-cli runs each sandbox as a microVM with its own kernel, behind one
+ * HTTP API (v1) that is the same on a Mac, on a self-hosted Linux machine and
+ * in the cloud. This provider talks to that API directly with fetch, so it
+ * has no SDK dependency.
+ */
+/**
+ * sandbox-cli provider configuration
+ */
+interface SandboxCliConfig {
+    /** API endpoint, e.g. `https://sandbox.example.com` - falls back to SANDBOX_ENDPOINT */
+    endpoint?: string;
+    /** Bearer token - falls back to SANDBOX_TOKEN */
+    token?: string;
+    /** On a gateway, the organization to act in - falls back to SANDBOX_ORG */
+    org?: string;
+    /** Default sandbox lifetime in milliseconds; unset leaves the server's default */
+    timeout?: number;
+}
+/** A sandbox as the v1 API returns it (the fields this provider reads). */
+interface ApiSandbox {
+    id: string;
+    name?: string;
+    state: 'pending' | 'running' | 'suspended' | 'terminated';
+    image: string;
+    cpus: number;
+    memory_mb: number;
+    created_at: string;
+    lifetime_secs?: number;
+    labels?: Record<string, string>;
+}
+/** The native instance: the API record plus a client bound to it. */
+interface SandboxCliInstance {
+    client: ApiClient;
+    sandbox: ApiSandbox;
+}
+declare class ApiClient {
+    readonly base: string;
+    private readonly headers;
+    constructor(config: SandboxCliConfig);
+    request(method: string, path: string, init?: {
+        query?: Record<string, string>;
+        json?: unknown;
+        body?: BodyInit;
+        signal?: AbortSignal;
+    }): Promise<Response>;
+    json<T>(method: string, path: string, payload?: unknown): Promise<T>;
+    sbx(id: string): string;
+}
+/**
+ * Create a sandbox-cli provider instance using the factory pattern
+ */
+declare const sandboxCli: (config: SandboxCliConfig & _computesdk_provider.ProcessRuntimeOptions) => _computesdk_provider.Provider<SandboxCliInstance, any, any, computesdk.Volume> & {
+    readonly sizes: computesdk.InstanceSizeManager;
+};
+
+export { type SandboxCliConfig, type SandboxCliInstance, sandboxCli };

package/dist/index.js

@@ -0,0 +1,322 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  sandboxCli: () => sandboxCli
+});
+module.exports = __toCommonJS(index_exports);
+var import_provider = require("@computesdk/provider");
+var ApiError = class extends Error {
+  constructor(status, code, message) {
+    super(`sandbox-cli: ${code} (${status}): ${message}`);
+    this.status = status;
+    this.code = code;
+  }
+};
+function env(name) {
+  return typeof process !== "undefined" ? process.env?.[name] : void 0;
+}
+function fromB64(s) {
+  return s ? Buffer.from(s, "base64").toString("utf8") : "";
+}
+function isLoopback(hostname) {
+  return hostname === "localhost" || hostname === "[::1]" || /^127(\.\d{1,3}){3}$/.test(hostname);
+}
+var ApiClient = class {
+  constructor(config) {
+    const endpoint = config.endpoint || env("SANDBOX_ENDPOINT");
+    const token = config.token || env("SANDBOX_TOKEN");
+    if (!endpoint) {
+      throw new Error(
+        `Missing sandbox-cli endpoint. Provide 'endpoint' in config or set SANDBOX_ENDPOINT (the URL of a sandboxd or a gateway, e.g. https://sandbox.example.com).`
+      );
+    }
+    if (!token) {
+      throw new Error(`Missing sandbox-cli token. Provide 'token' in config or set SANDBOX_TOKEN.`);
+    }
+    const u = new URL(endpoint);
+    if (u.protocol !== "https:" && u.protocol !== "http:") {
+      throw new Error(`sandbox-cli endpoint must be http(s)://host[:port], got ${endpoint}`);
+    }
+    if (u.protocol === "http:" && !isLoopback(u.hostname)) {
+      throw new Error(
+        `sandbox-cli endpoint ${endpoint} is plain http to a non-loopback host, which would send the token unencrypted. Use https://, or http:// only to 127.0.0.1, ::1 or localhost.`
+      );
+    }
+    this.base = endpoint.replace(/\/+$/, "");
+    this.headers = { Authorization: `Bearer ${token}` };
+    const org = config.org || env("SANDBOX_ORG");
+    if (org) this.headers["X-Sandbox-Org"] = org;
+  }
+  async request(method, path, init = {}) {
+    let url = this.base + path;
+    if (init.query) url += "?" + new URLSearchParams(init.query).toString();
+    const headers = { ...this.headers };
+    let body = init.body;
+    if (init.json !== void 0) {
+      headers["Content-Type"] = "application/json";
+      body = JSON.stringify(init.json);
+    } else if (body !== void 0) {
+      headers["Content-Type"] = "application/octet-stream";
+    }
+    const resp = await fetch(url, { method, headers, body, signal: init.signal });
+    if (!resp.ok) {
+      const text = await resp.text();
+      let code = "internal";
+      let message = text.trim();
+      try {
+        const e = JSON.parse(text).error;
+        code = e.code ?? code;
+        message = e.message ?? message;
+      } catch {
+      }
+      throw new ApiError(resp.status, code, message);
+    }
+    return resp;
+  }
+  async json(method, path, payload) {
+    const resp = await this.request(method, path, payload === void 0 ? {} : { json: payload });
+    const text = await resp.text();
+    return text ? JSON.parse(text) : void 0;
+  }
+  sbx(id) {
+    return "/v1/sandboxes/" + encodeURIComponent(id);
+  }
+};
+function pick(...vals) {
+  return vals.find((v) => typeof v === "number" && Number.isFinite(v));
+}
+async function run(instance, command, options) {
+  const { client, sandbox } = instance;
+  const startTime = Date.now();
+  const req = { argv: ["sh", "-c", command] };
+  if (options?.cwd) req.cwd = options.cwd;
+  if (options?.env && Object.keys(options.env).length > 0) req.env = options.env;
+  if (options?.background) {
+    await client.json("POST", client.sbx(sandbox.id) + "/processes", req);
+    return { stdout: "", stderr: "", exitCode: 0, durationMs: Date.now() - startTime };
+  }
+  if (options?.timeout) req.timeout_secs = Math.max(1, Math.ceil(options.timeout / 1e3));
+  const r = await client.json(
+    "POST",
+    client.sbx(sandbox.id) + "/run",
+    req
+  );
+  return {
+    stdout: fromB64(r.stdout),
+    stderr: fromB64(r.stderr),
+    exitCode: r.timed_out && r.exit_code === 0 ? -1 : r.exit_code,
+    durationMs: Date.now() - startTime
+  };
+}
+var KILL_GRACE_MS = 2e3;
+async function stream(instance, command, options) {
+  const { client, sandbox } = instance;
+  const startTime = Date.now();
+  const req = { argv: ["sh", "-c", command] };
+  if (options.cwd) req.cwd = options.cwd;
+  if (options.env && Object.keys(options.env).length > 0) req.env = options.env;
+  const proc = await client.json("POST", client.sbx(sandbox.id) + "/processes", req);
+  const procPath = `${client.sbx(sandbox.id)}/processes/${proc.pid}`;
+  const kill = () => client.json("POST", procPath + "/signal", { signal: "KILL" }).catch(() => {
+  });
+  const abort = new AbortController();
+  let timedOut = false;
+  let grace;
+  const timer = options.timeout ? setTimeout(() => {
+    timedOut = true;
+    void kill();
+    grace = setTimeout(() => abort.abort(), KILL_GRACE_MS);
+  }, options.timeout) : void 0;
+  const decoders = { stdout: new TextDecoder(), stderr: new TextDecoder() };
+  const out = { stdout: "", stderr: "" };
+  const emit = (s, text) => {
+    if (!text) return;
+    out[s] += text;
+    (s === "stdout" ? options.onStdout : options.onStderr)?.(text);
+  };
+  let exitCode;
+  let reader;
+  try {
+    const resp = await client.request("GET", procPath + "/output", { signal: abort.signal });
+    if (!resp.body) throw new Error("sandbox-cli: output stream has no body");
+    reader = resp.body.getReader();
+    const dec = new TextDecoder();
+    let buf = "";
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      buf += dec.decode(value, { stream: true });
+      let nl;
+      while ((nl = buf.indexOf("\n")) >= 0) {
+        const line = buf.slice(0, nl).trim();
+        buf = buf.slice(nl + 1);
+        if (!line) continue;
+        const ev = JSON.parse(line);
+        if (typeof ev.exit_code === "number") {
+          exitCode = ev.exit_code;
+        } else if (ev.stream === "stdout" || ev.stream === "stderr") {
+          emit(ev.stream, decoders[ev.stream].decode(Buffer.from(ev.data ?? "", "base64"), { stream: true }));
+        }
+      }
+    }
+  } catch (error) {
+    if (!(timedOut && abort.signal.aborted)) {
+      if (exitCode === void 0) await kill();
+      throw error;
+    }
+  } finally {
+    clearTimeout(timer);
+    clearTimeout(grace);
+    reader?.cancel().catch(() => {
+    });
+  }
+  emit("stdout", decoders.stdout.decode());
+  emit("stderr", decoders.stderr.decode());
+  if (exitCode === void 0 || timedOut && exitCode === 0) exitCode = -1;
+  return { stdout: out.stdout, stderr: out.stderr, exitCode, durationMs: Date.now() - startTime };
+}
+var sandboxCli = (0, import_provider.defineProvider)({
+  name: "sandbox-cli",
+  methods: {
+    instances: {
+      create: async (config, options) => {
+        const client = new ApiClient(config);
+        const o = options || {};
+        const req = {};
+        const image = o.image || o.templateId;
+        if (image) req.image = image;
+        if (o.snapshotId) req.snapshot_id = o.snapshotId;
+        if (o.name) req.name = o.name;
+        if (o.envs && Object.keys(o.envs).length > 0) req.env = o.envs;
+        if (o.metadata && Object.keys(o.metadata).length > 0) {
+          req.labels = Object.fromEntries(Object.entries(o.metadata).map(([k, v]) => [k, String(v)]));
+        }
+        const cpus = pick(o.cpus, o.vcpus, o.cpu);
+        if (cpus !== void 0) req.cpus = cpus;
+        const memoryMb = pick(o.memoryMb, o.memory, o.memoryMiB, o.memMiB);
+        if (memoryMb !== void 0) req.memory_mb = memoryMb;
+        const diskMb = pick(o.diskMb, o.diskMiB);
+        if (diskMb !== void 0) req.disk_mb = diskMb;
+        const lifetimeMs = o.timeout ?? config.timeout;
+        if (lifetimeMs) req.lifetime_secs = Math.max(1, Math.ceil(lifetimeMs / 1e3));
+        try {
+          const sandbox = await client.json("POST", "/v1/sandboxes", req);
+          return { instance: { client, sandbox }, instanceId: sandbox.id };
+        } catch (error) {
+          if (error instanceof ApiError && error.status === 401) {
+            throw new Error(`sandbox-cli authentication failed. Check your SANDBOX_TOKEN.`);
+          }
+          throw new Error(
+            `Failed to create sandbox-cli sandbox: ${error instanceof Error ? error.message : String(error)}`
+          );
+        }
+      },
+      getById: async (config, sandboxId) => {
+        const client = new ApiClient(config);
+        try {
+          const sandbox = await client.json("GET", client.sbx(sandboxId));
+          if (sandbox.state === "terminated") return null;
+          return { instance: { client, sandbox }, instanceId: sandbox.id };
+        } catch (error) {
+          if (error instanceof ApiError && error.status === 404) return null;
+          throw error;
+        }
+      },
+      list: async (config) => {
+        const client = new ApiClient(config);
+        const { sandboxes } = await client.json("GET", "/v1/sandboxes");
+        return (sandboxes ?? []).filter((s) => s.state !== "terminated").map((sandbox) => ({ instance: { client, sandbox }, instanceId: sandbox.id }));
+      },
+      destroy: async (config, sandboxId) => {
+        const client = new ApiClient(config);
+        try {
+          await client.json("DELETE", client.sbx(sandboxId));
+        } catch (error) {
+          if (error instanceof ApiError && error.status === 404) return;
+          throw error;
+        }
+      },
+      runCommand: run,
+      streamCommand: stream,
+      getInfo: async (instance) => {
+        const { client, sandbox } = instance;
+        const s = await client.json("GET", client.sbx(sandbox.id));
+        return {
+          id: s.id,
+          provider: "sandbox-cli",
+          // A pending sandbox is still being created and refuses commands; its
+          // native state stays in metadata.
+          status: s.state === "running" ? "running" : "stopped",
+          createdAt: new Date(s.created_at),
+          timeout: (s.lifetime_secs ?? 0) * 1e3,
+          metadata: { state: s.state, image: s.image, cpus: s.cpus, memoryMb: s.memory_mb, name: s.name, labels: s.labels }
+        };
+      },
+      getUrl: async () => {
+        throw new Error(
+          "sandbox-cli does not expose sandbox ports as URLs. Use `sandbox-cli tunnel` or the API tunnel endpoint."
+        );
+      },
+      filesystem: {
+        readFile: async (instance, path) => {
+          const { client, sandbox } = instance;
+          const resp = await client.request("GET", client.sbx(sandbox.id) + "/files", { query: { path } });
+          return await resp.text();
+        },
+        writeFile: async (instance, path, content) => {
+          const { client, sandbox } = instance;
+          await client.request("PUT", client.sbx(sandbox.id) + "/files", { query: { path }, body: content });
+        },
+        mkdir: async (instance, path) => {
+          const r = await run(instance, `mkdir -p -- ${shellQuote(path)}`);
+          if (r.exitCode !== 0) throw new Error(`Failed to create directory ${path}: ${r.stderr}`);
+        },
+        readdir: async (instance, path) => {
+          const { client, sandbox } = instance;
+          const resp = await client.request("GET", client.sbx(sandbox.id) + "/dirs", { query: { path } });
+          const { entries } = await resp.json();
+          return (entries ?? []).map((e) => ({
+            name: e.name,
+            type: e.type === "dir" ? "directory" : "file",
+            size: e.size
+          }));
+        },
+        exists: async (instance, path) => {
+          const r = await run(instance, `test -e ${shellQuote(path)}`);
+          return r.exitCode === 0;
+        },
+        remove: async (instance, path) => {
+          const r = await run(instance, `rm -rf -- ${shellQuote(path)}`);
+          if (r.exitCode !== 0) throw new Error(`Failed to remove ${path}: ${r.stderr}`);
+        }
+      }
+    }
+  }
+});
+function shellQuote(s) {
+  return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  sandboxCli
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * sandbox-cli Provider - Factory-based Implementation\n *\n * sandbox-cli runs each sandbox as a microVM with its own kernel, behind one\n * HTTP API (v1) that is the same on a Mac, on a self-hosted Linux machine and\n * in the cloud. This provider talks to that API directly with fetch, so it\n * has no SDK dependency.\n */\n\nimport { defineProvider } from '@computesdk/provider';\n\nimport type {\n  CommandResult,\n  InstanceInfo,\n  CreateInstanceOptions,\n  FileEntry,\n  RunCommandOptions,\n} from '@computesdk/provider';\n\n/**\n * sandbox-cli provider configuration\n */\nexport interface SandboxCliConfig {\n  /** API endpoint, e.g. `https://sandbox.example.com` - falls back to SANDBOX_ENDPOINT */\n  endpoint?: string;\n  /** Bearer token - falls back to SANDBOX_TOKEN */\n  token?: string;\n  /** On a gateway, the organization to act in - falls back to SANDBOX_ORG */\n  org?: string;\n  /** Default sandbox lifetime in milliseconds; unset leaves the server's default */\n  timeout?: number;\n}\n\n/** A sandbox as the v1 API returns it (the fields this provider reads). */\ninterface ApiSandbox {\n  id: string;\n  name?: string;\n  state: 'pending' | 'running' | 'suspended' | 'terminated';\n  image: string;\n  cpus: number;\n  memory_mb: number;\n  created_at: string;\n  lifetime_secs?: number;\n  labels?: Record<string, string>;\n}\n\n/** The native instance: the API record plus a client bound to it. */\nexport interface SandboxCliInstance {\n  client: ApiClient;\n  sandbox: ApiSandbox;\n}\n\nclass ApiError extends Error {\n  constructor(readonly status: number, readonly code: string, message: string) {\n    super(`sandbox-cli: ${code} (${status}): ${message}`);\n  }\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined;\n}\n\nfunction fromB64(s: string | null | undefined): string {\n  return s ? Buffer.from(s, 'base64').toString('utf8') : '';\n}\n\n/** `URL.hostname` of a loopback address: 127.0.0.0/8, [::1] or localhost. */\nfunction isLoopback(hostname: string): boolean {\n  return hostname === 'localhost' || hostname === '[::1]' || /^127(\\.\\d{1,3}){3}$/.test(hostname);\n}\n\nclass ApiClient {\n  readonly base: string;\n  private readonly headers: Record<string, string>;\n\n  constructor(config: SandboxCliConfig) {\n    const endpoint = config.endpoint || env('SANDBOX_ENDPOINT');\n    const token = config.token || env('SANDBOX_TOKEN');\n    if (!endpoint) {\n      throw new Error(\n        `Missing sandbox-cli endpoint. Provide 'endpoint' in config or set SANDBOX_ENDPOINT ` +\n          `(the URL of a sandboxd or a gateway, e.g. https://sandbox.example.com).`\n      );\n    }\n    if (!token) {\n      throw new Error(`Missing sandbox-cli token. Provide 'token' in config or set SANDBOX_TOKEN.`);\n    }\n    const u = new URL(endpoint);\n    if (u.protocol !== 'https:' && u.protocol !== 'http:') {\n      throw new Error(`sandbox-cli endpoint must be http(s)://host[:port], got ${endpoint}`);\n    }\n    // Every request carries the bearer token, so plain http is only for a\n    // sandboxd on this machine.\n    if (u.protocol === 'http:' && !isLoopback(u.hostname)) {\n      throw new Error(\n        `sandbox-cli endpoint ${endpoint} is plain http to a non-loopback host, which would send the token ` +\n          `unencrypted. Use https://, or http:// only to 127.0.0.1, ::1 or localhost.`\n      );\n    }\n    this.base = endpoint.replace(/\\/+$/, '');\n    this.headers = { Authorization: `Bearer ${token}` };\n    const org = config.org || env('SANDBOX_ORG');\n    if (org) this.headers['X-Sandbox-Org'] = org;\n  }\n\n  async request(\n    method: string,\n    path: string,\n    init: { query?: Record<string, string>; json?: unknown; body?: BodyInit; signal?: AbortSignal } = {}\n  ): Promise<Response> {\n    let url = this.base + path;\n    if (init.query) url += '?' + new URLSearchParams(init.query).toString();\n    const headers: Record<string, string> = { ...this.headers };\n    let body = init.body;\n    if (init.json !== undefined) {\n      headers['Content-Type'] = 'application/json';\n      body = JSON.stringify(init.json);\n    } else if (body !== undefined) {\n      headers['Content-Type'] = 'application/octet-stream';\n    }\n    const resp = await fetch(url, { method, headers, body, signal: init.signal });\n    if (!resp.ok) {\n      const text = await resp.text();\n      let code = 'internal';\n      let message = text.trim();\n      try {\n        const e = JSON.parse(text).error;\n        code = e.code ?? code;\n        message = e.message ?? message;\n      } catch {\n        // not a JSON error body\n      }\n      throw new ApiError(resp.status, code, message);\n    }\n    return resp;\n  }\n\n  async json<T>(method: string, path: string, payload?: unknown): Promise<T> {\n    const resp = await this.request(method, path, payload === undefined ? {} : { json: payload });\n    const text = await resp.text();\n    return (text ? JSON.parse(text) : undefined) as T;\n  }\n\n  sbx(id: string): string {\n    return '/v1/sandboxes/' + encodeURIComponent(id);\n  }\n}\n\n/** First defined number among the generic resource option spellings. */\nfunction pick(...vals: Array<number | undefined>): number | undefined {\n  return vals.find((v) => typeof v === 'number' && Number.isFinite(v));\n}\n\n/** The v1 `/run` call: `command` goes through `sh -c`, as ComputeSDK commands are shell strings. */\nasync function run(instance: SandboxCliInstance, command: string, options?: RunCommandOptions): Promise<CommandResult> {\n  const { client, sandbox } = instance;\n  const startTime = Date.now();\n  const req: Record<string, unknown> = { argv: ['sh', '-c', command] };\n  if (options?.cwd) req.cwd = options.cwd;\n  if (options?.env && Object.keys(options.env).length > 0) req.env = options.env;\n\n  if (options?.background) {\n    // A background process keeps running after this returns; its output stays\n    // readable through the API's process list.\n    await client.json('POST', client.sbx(sandbox.id) + '/processes', req);\n    return { stdout: '', stderr: '', exitCode: 0, durationMs: Date.now() - startTime };\n  }\n\n  if (options?.timeout) req.timeout_secs = Math.max(1, Math.ceil(options.timeout / 1000));\n  const r = await client.json<{ exit_code: number; stdout: string; stderr: string; timed_out: boolean }>(\n    'POST',\n    client.sbx(sandbox.id) + '/run',\n    req\n  );\n  return {\n    stdout: fromB64(r.stdout),\n    stderr: fromB64(r.stderr),\n    exitCode: r.timed_out && r.exit_code === 0 ? -1 : r.exit_code,\n    durationMs: Date.now() - startTime,\n  };\n}\n\n/** How long after a timeout's KILL the output stream may take to end. */\nconst KILL_GRACE_MS = 2_000;\n\n/**\n * Live output through the API's own process stream: start the process, then\n * read `GET …/processes/{pid}/output`, one JSON object per line, until the\n * `{\"exit_code\": N}` line.\n *\n * A timeout sends KILL, which ends the stream once it lands (the guest kills\n * the whole process group). The output request has a deadline of its own as\n * well, so a kill that fails cannot leave the caller waiting on a command\n * that is still running. Any other failure - the output request, a read, a\n * callback - kills the process before the error is reported, so nothing is\n * left running without a reader.\n */\nasync function stream(instance: SandboxCliInstance, command: string, options: RunCommandOptions): Promise<CommandResult> {\n  const { client, sandbox } = instance;\n  const startTime = Date.now();\n  const req: Record<string, unknown> = { argv: ['sh', '-c', command] };\n  if (options.cwd) req.cwd = options.cwd;\n  if (options.env && Object.keys(options.env).length > 0) req.env = options.env;\n\n  const proc = await client.json<{ pid: number }>('POST', client.sbx(sandbox.id) + '/processes', req);\n  const procPath = `${client.sbx(sandbox.id)}/processes/${proc.pid}`;\n  const kill = () => client.json('POST', procPath + '/signal', { signal: 'KILL' }).catch(() => {});\n\n  const abort = new AbortController();\n  let timedOut = false;\n  let grace: ReturnType<typeof setTimeout> | undefined;\n  const timer = options.timeout\n    ? setTimeout(() => {\n        timedOut = true;\n        void kill();\n        grace = setTimeout(() => abort.abort(), KILL_GRACE_MS);\n      }, options.timeout)\n    : undefined;\n\n  // Output arrives in byte chunks that can split a character, so each stream\n  // keeps one decoder across events and is flushed at the end.\n  const decoders = { stdout: new TextDecoder(), stderr: new TextDecoder() };\n  const out = { stdout: '', stderr: '' };\n  const emit = (s: 'stdout' | 'stderr', text: string) => {\n    if (!text) return;\n    out[s] += text;\n    (s === 'stdout' ? options.onStdout : options.onStderr)?.(text);\n  };\n\n  let exitCode: number | undefined;\n  let reader: ReadableStreamDefaultReader<Uint8Array> | undefined;\n  try {\n    const resp = await client.request('GET', procPath + '/output', { signal: abort.signal });\n    if (!resp.body) throw new Error('sandbox-cli: output stream has no body');\n    reader = resp.body.getReader();\n    const dec = new TextDecoder();\n    let buf = '';\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      buf += dec.decode(value, { stream: true });\n      let nl: number;\n      while ((nl = buf.indexOf('\\n')) >= 0) {\n        const line = buf.slice(0, nl).trim();\n        buf = buf.slice(nl + 1);\n        if (!line) continue;\n        const ev = JSON.parse(line) as { stream?: 'stdout' | 'stderr'; data?: string; exit_code?: number };\n        if (typeof ev.exit_code === 'number') {\n          exitCode = ev.exit_code;\n        } else if (ev.stream === 'stdout' || ev.stream === 'stderr') {\n          emit(ev.stream, decoders[ev.stream].decode(Buffer.from(ev.data ?? '', 'base64'), { stream: true }));\n        }\n      }\n    }\n  } catch (error) {\n    if (!(timedOut && abort.signal.aborted)) {\n      if (exitCode === undefined) await kill();\n      throw error;\n    }\n  } finally {\n    clearTimeout(timer);\n    clearTimeout(grace);\n    reader?.cancel().catch(() => {});\n  }\n  emit('stdout', decoders.stdout.decode());\n  emit('stderr', decoders.stderr.decode());\n\n  if (exitCode === undefined || (timedOut && exitCode === 0)) exitCode = -1;\n  return { stdout: out.stdout, stderr: out.stderr, exitCode, durationMs: Date.now() - startTime };\n}\n\n/**\n * Create a sandbox-cli provider instance using the factory pattern\n */\nexport const sandboxCli = defineProvider<SandboxCliInstance, SandboxCliConfig>({\n  name: 'sandbox-cli',\n  methods: {\n    instances: {\n      create: async (config: SandboxCliConfig, options?: CreateInstanceOptions) => {\n        const client = new ApiClient(config);\n        const o = options || {};\n\n        // POST /v1/sandboxes returns once the VM is booted and running, so the\n        // sandbox is usable as soon as this resolves.\n        const req: Record<string, unknown> = {};\n        const image = o.image || o.templateId;\n        if (image) req.image = image;\n        if (o.snapshotId) req.snapshot_id = o.snapshotId;\n        if (o.name) req.name = o.name;\n        if (o.envs && Object.keys(o.envs).length > 0) req.env = o.envs;\n        if (o.metadata && Object.keys(o.metadata).length > 0) {\n          req.labels = Object.fromEntries(Object.entries(o.metadata).map(([k, v]) => [k, String(v)]));\n        }\n        const cpus = pick(o.cpus, o.vcpus, o.cpu);\n        if (cpus !== undefined) req.cpus = cpus;\n        const memoryMb = pick(o.memoryMb, o.memory, o.memoryMiB, o.memMiB);\n        if (memoryMb !== undefined) req.memory_mb = memoryMb;\n        const diskMb = pick(o.diskMb, o.diskMiB);\n        if (diskMb !== undefined) req.disk_mb = diskMb;\n        const lifetimeMs = o.timeout ?? config.timeout;\n        if (lifetimeMs) req.lifetime_secs = Math.max(1, Math.ceil(lifetimeMs / 1000));\n\n        try {\n          const sandbox = await client.json<ApiSandbox>('POST', '/v1/sandboxes', req);\n          return { instance: { client, sandbox }, instanceId: sandbox.id };\n        } catch (error) {\n          if (error instanceof ApiError && error.status === 401) {\n            throw new Error(`sandbox-cli authentication failed. Check your SANDBOX_TOKEN.`);\n          }\n          throw new Error(\n            `Failed to create sandbox-cli sandbox: ${error instanceof Error ? error.message : String(error)}`\n          );\n        }\n      },\n\n      getById: async (config: SandboxCliConfig, sandboxId: string) => {\n        const client = new ApiClient(config);\n        try {\n          const sandbox = await client.json<ApiSandbox>('GET', client.sbx(sandboxId));\n          if (sandbox.state === 'terminated') return null;\n          return { instance: { client, sandbox }, instanceId: sandbox.id };\n        } catch (error) {\n          if (error instanceof ApiError && error.status === 404) return null;\n          throw error;\n        }\n      },\n\n      list: async (config: SandboxCliConfig) => {\n        const client = new ApiClient(config);\n        const { sandboxes } = await client.json<{ sandboxes: ApiSandbox[] }>('GET', '/v1/sandboxes');\n        return (sandboxes ?? [])\n          .filter((s) => s.state !== 'terminated')\n          .map((sandbox) => ({ instance: { client, sandbox }, instanceId: sandbox.id }));\n      },\n\n      destroy: async (config: SandboxCliConfig, sandboxId: string) => {\n        const client = new ApiClient(config);\n        try {\n          await client.json('DELETE', client.sbx(sandboxId));\n        } catch (error) {\n          // Idempotent: the sandbox may already be gone.\n          if (error instanceof ApiError && error.status === 404) return;\n          throw error;\n        }\n      },\n\n      runCommand: run,\n\n      streamCommand: stream,\n\n      getInfo: async (instance: SandboxCliInstance): Promise<InstanceInfo> => {\n        const { client, sandbox } = instance;\n        const s = await client.json<ApiSandbox>('GET', client.sbx(sandbox.id));\n        return {\n          id: s.id,\n          provider: 'sandbox-cli',\n          // A pending sandbox is still being created and refuses commands; its\n          // native state stays in metadata.\n          status: s.state === 'running' ? 'running' : 'stopped',\n          createdAt: new Date(s.created_at),\n          timeout: (s.lifetime_secs ?? 0) * 1000,\n          metadata: { state: s.state, image: s.image, cpus: s.cpus, memoryMb: s.memory_mb, name: s.name, labels: s.labels },\n        };\n      },\n\n      getUrl: async (): Promise<string> => {\n        // A port is reached through the API's tunnel (an upgraded connection to\n        // the guest's own loopback), never through a public URL.\n        throw new Error(\n          'sandbox-cli does not expose sandbox ports as URLs. Use `sandbox-cli tunnel` or the API tunnel endpoint.'\n        );\n      },\n\n      filesystem: {\n        readFile: async (instance: SandboxCliInstance, path: string): Promise<string> => {\n          const { client, sandbox } = instance;\n          const resp = await client.request('GET', client.sbx(sandbox.id) + '/files', { query: { path } });\n          return await resp.text();\n        },\n\n        writeFile: async (instance: SandboxCliInstance, path: string, content: string): Promise<void> => {\n          // The API creates parent directories.\n          const { client, sandbox } = instance;\n          await client.request('PUT', client.sbx(sandbox.id) + '/files', { query: { path }, body: content });\n        },\n\n        mkdir: async (instance: SandboxCliInstance, path: string): Promise<void> => {\n          const r = await run(instance, `mkdir -p -- ${shellQuote(path)}`);\n          if (r.exitCode !== 0) throw new Error(`Failed to create directory ${path}: ${r.stderr}`);\n        },\n\n        readdir: async (instance: SandboxCliInstance, path: string): Promise<FileEntry[]> => {\n          const { client, sandbox } = instance;\n          const resp = await client.request('GET', client.sbx(sandbox.id) + '/dirs', { query: { path } });\n          const { entries } = (await resp.json()) as { entries: Array<{ name: string; type: 'file' | 'dir'; size: number }> };\n          return (entries ?? []).map((e) => ({\n            name: e.name,\n            type: e.type === 'dir' ? ('directory' as const) : ('file' as const),\n            size: e.size,\n          }));\n        },\n\n        exists: async (instance: SandboxCliInstance, path: string): Promise<boolean> => {\n          const r = await run(instance, `test -e ${shellQuote(path)}`);\n          return r.exitCode === 0;\n        },\n\n        remove: async (instance: SandboxCliInstance, path: string): Promise<void> => {\n          // The API's DELETE removes only a file or an empty directory;\n          // ComputeSDK's remove is recursive.\n          const r = await run(instance, `rm -rf -- ${shellQuote(path)}`);\n          if (r.exitCode !== 0) throw new Error(`Failed to remove ${path}: ${r.stderr}`);\n        },\n      },\n    },\n  },\n});\n\n/** Single-quotes a value for `sh -c`, safe for any byte sequence. */\nfunction shellQuote(s: string): string {\n  return `'${s.replace(/'/g, `'\\\\''`)}'`;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AASA,sBAA+B;AA2C/B,IAAM,WAAN,cAAuB,MAAM;AAAA,EAC3B,YAAqB,QAAyB,MAAc,SAAiB;AAC3E,UAAM,gBAAgB,IAAI,KAAK,MAAM,MAAM,OAAO,EAAE;AADjC;AAAyB;AAAA,EAE9C;AACF;AAEA,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAEA,SAAS,QAAQ,GAAsC;AACrD,SAAO,IAAI,OAAO,KAAK,GAAG,QAAQ,EAAE,SAAS,MAAM,IAAI;AACzD;AAGA,SAAS,WAAW,UAA2B;AAC7C,SAAO,aAAa,eAAe,aAAa,WAAW,sBAAsB,KAAK,QAAQ;AAChG;AAEA,IAAM,YAAN,MAAgB;AAAA,EAId,YAAY,QAA0B;AACpC,UAAM,WAAW,OAAO,YAAY,IAAI,kBAAkB;AAC1D,UAAM,QAAQ,OAAO,SAAS,IAAI,eAAe;AACjD,QAAI,CAAC,UAAU;AACb,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,4EAA4E;AAAA,IAC9F;AACA,UAAM,IAAI,IAAI,IAAI,QAAQ;AAC1B,QAAI,EAAE,aAAa,YAAY,EAAE,aAAa,SAAS;AACrD,YAAM,IAAI,MAAM,2DAA2D,QAAQ,EAAE;AAAA,IACvF;AAGA,QAAI,EAAE,aAAa,WAAW,CAAC,WAAW,EAAE,QAAQ,GAAG;AACrD,YAAM,IAAI;AAAA,QACR,wBAAwB,QAAQ;AAAA,MAElC;AAAA,IACF;AACA,SAAK,OAAO,SAAS,QAAQ,QAAQ,EAAE;AACvC,SAAK,UAAU,EAAE,eAAe,UAAU,KAAK,GAAG;AAClD,UAAM,MAAM,OAAO,OAAO,IAAI,aAAa;AAC3C,QAAI,IAAK,MAAK,QAAQ,eAAe,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,QACJ,QACA,MACA,OAAkG,CAAC,GAChF;AACnB,QAAI,MAAM,KAAK,OAAO;AACtB,QAAI,KAAK,MAAO,QAAO,MAAM,IAAI,gBAAgB,KAAK,KAAK,EAAE,SAAS;AACtE,UAAM,UAAkC,EAAE,GAAG,KAAK,QAAQ;AAC1D,QAAI,OAAO,KAAK;AAChB,QAAI,KAAK,SAAS,QAAW;AAC3B,cAAQ,cAAc,IAAI;AAC1B,aAAO,KAAK,UAAU,KAAK,IAAI;AAAA,IACjC,WAAW,SAAS,QAAW;AAC7B,cAAQ,cAAc,IAAI;AAAA,IAC5B;AACA,UAAM,OAAO,MAAM,MAAM,KAAK,EAAE,QAAQ,SAAS,MAAM,QAAQ,KAAK,OAAO,CAAC;AAC5E,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,UAAI,OAAO;AACX,UAAI,UAAU,KAAK,KAAK;AACxB,UAAI;AACF,cAAM,IAAI,KAAK,MAAM,IAAI,EAAE;AAC3B,eAAO,EAAE,QAAQ;AACjB,kBAAU,EAAE,WAAW;AAAA,MACzB,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,SAAS,KAAK,QAAQ,MAAM,OAAO;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAQ,QAAgB,MAAc,SAA+B;AACzE,UAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC5F,UAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,WAAQ,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,EACpC;AAAA,EAEA,IAAI,IAAoB;AACtB,WAAO,mBAAmB,mBAAmB,EAAE;AAAA,EACjD;AACF;AAGA,SAAS,QAAQ,MAAqD;AACpE,SAAO,KAAK,KAAK,CAAC,MAAM,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,CAAC;AACrE;AAGA,eAAe,IAAI,UAA8B,SAAiB,SAAqD;AACrH,QAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,MAA+B,EAAE,MAAM,CAAC,MAAM,MAAM,OAAO,EAAE;AACnE,MAAI,SAAS,IAAK,KAAI,MAAM,QAAQ;AACpC,MAAI,SAAS,OAAO,OAAO,KAAK,QAAQ,GAAG,EAAE,SAAS,EAAG,KAAI,MAAM,QAAQ;AAE3E,MAAI,SAAS,YAAY;AAGvB,UAAM,OAAO,KAAK,QAAQ,OAAO,IAAI,QAAQ,EAAE,IAAI,cAAc,GAAG;AACpE,WAAO,EAAE,QAAQ,IAAI,QAAQ,IAAI,UAAU,GAAG,YAAY,KAAK,IAAI,IAAI,UAAU;AAAA,EACnF;AAEA,MAAI,SAAS,QAAS,KAAI,eAAe,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,UAAU,GAAI,CAAC;AACtF,QAAM,IAAI,MAAM,OAAO;AAAA,IACrB;AAAA,IACA,OAAO,IAAI,QAAQ,EAAE,IAAI;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ,QAAQ,EAAE,MAAM;AAAA,IACxB,QAAQ,QAAQ,EAAE,MAAM;AAAA,IACxB,UAAU,EAAE,aAAa,EAAE,cAAc,IAAI,KAAK,EAAE;AAAA,IACpD,YAAY,KAAK,IAAI,IAAI;AAAA,EAC3B;AACF;AAGA,IAAM,gBAAgB;AActB,eAAe,OAAO,UAA8B,SAAiB,SAAoD;AACvH,QAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,MAA+B,EAAE,MAAM,CAAC,MAAM,MAAM,OAAO,EAAE;AACnE,MAAI,QAAQ,IAAK,KAAI,MAAM,QAAQ;AACnC,MAAI,QAAQ,OAAO,OAAO,KAAK,QAAQ,GAAG,EAAE,SAAS,EAAG,KAAI,MAAM,QAAQ;AAE1E,QAAM,OAAO,MAAM,OAAO,KAAsB,QAAQ,OAAO,IAAI,QAAQ,EAAE,IAAI,cAAc,GAAG;AAClG,QAAM,WAAW,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,cAAc,KAAK,GAAG;AAChE,QAAM,OAAO,MAAM,OAAO,KAAK,QAAQ,WAAW,WAAW,EAAE,QAAQ,OAAO,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAE/F,QAAM,QAAQ,IAAI,gBAAgB;AAClC,MAAI,WAAW;AACf,MAAI;AACJ,QAAM,QAAQ,QAAQ,UAClB,WAAW,MAAM;AACf,eAAW;AACX,SAAK,KAAK;AACV,YAAQ,WAAW,MAAM,MAAM,MAAM,GAAG,aAAa;AAAA,EACvD,GAAG,QAAQ,OAAO,IAClB;AAIJ,QAAM,WAAW,EAAE,QAAQ,IAAI,YAAY,GAAG,QAAQ,IAAI,YAAY,EAAE;AACxE,QAAM,MAAM,EAAE,QAAQ,IAAI,QAAQ,GAAG;AACrC,QAAM,OAAO,CAAC,GAAwB,SAAiB;AACrD,QAAI,CAAC,KAAM;AACX,QAAI,CAAC,KAAK;AACV,KAAC,MAAM,WAAW,QAAQ,WAAW,QAAQ,YAAY,IAAI;AAAA,EAC/D;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,WAAW,WAAW,EAAE,QAAQ,MAAM,OAAO,CAAC;AACvF,QAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,wCAAwC;AACxE,aAAS,KAAK,KAAK,UAAU;AAC7B,UAAM,MAAM,IAAI,YAAY;AAC5B,QAAI,MAAM;AACV,eAAS;AACP,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,aAAO,IAAI,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AACzC,UAAI;AACJ,cAAQ,KAAK,IAAI,QAAQ,IAAI,MAAM,GAAG;AACpC,cAAM,OAAO,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK;AACnC,cAAM,IAAI,MAAM,KAAK,CAAC;AACtB,YAAI,CAAC,KAAM;AACX,cAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,YAAI,OAAO,GAAG,cAAc,UAAU;AACpC,qBAAW,GAAG;AAAA,QAChB,WAAW,GAAG,WAAW,YAAY,GAAG,WAAW,UAAU;AAC3D,eAAK,GAAG,QAAQ,SAAS,GAAG,MAAM,EAAE,OAAO,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,QACpG;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,EAAE,YAAY,MAAM,OAAO,UAAU;AACvC,UAAI,aAAa,OAAW,OAAM,KAAK;AACvC,YAAM;AAAA,IACR;AAAA,EACF,UAAE;AACA,iBAAa,KAAK;AAClB,iBAAa,KAAK;AAClB,YAAQ,OAAO,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACjC;AACA,OAAK,UAAU,SAAS,OAAO,OAAO,CAAC;AACvC,OAAK,UAAU,SAAS,OAAO,OAAO,CAAC;AAEvC,MAAI,aAAa,UAAc,YAAY,aAAa,EAAI,YAAW;AACvE,SAAO,EAAE,QAAQ,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,YAAY,KAAK,IAAI,IAAI,UAAU;AAChG;AAKO,IAAM,iBAAa,gCAAqD;AAAA,EAC7E,MAAM;AAAA,EACN,SAAS;AAAA,IACP,WAAW;AAAA,MACT,QAAQ,OAAO,QAA0B,YAAoC;AAC3E,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,cAAM,IAAI,WAAW,CAAC;AAItB,cAAM,MAA+B,CAAC;AACtC,cAAM,QAAQ,EAAE,SAAS,EAAE;AAC3B,YAAI,MAAO,KAAI,QAAQ;AACvB,YAAI,EAAE,WAAY,KAAI,cAAc,EAAE;AACtC,YAAI,EAAE,KAAM,KAAI,OAAO,EAAE;AACzB,YAAI,EAAE,QAAQ,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAG,KAAI,MAAM,EAAE;AAC1D,YAAI,EAAE,YAAY,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG;AACpD,cAAI,SAAS,OAAO,YAAY,OAAO,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAAA,QAC5F;AACA,cAAM,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG;AACxC,YAAI,SAAS,OAAW,KAAI,OAAO;AACnC,cAAM,WAAW,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM;AACjE,YAAI,aAAa,OAAW,KAAI,YAAY;AAC5C,cAAM,SAAS,KAAK,EAAE,QAAQ,EAAE,OAAO;AACvC,YAAI,WAAW,OAAW,KAAI,UAAU;AACxC,cAAM,aAAa,EAAE,WAAW,OAAO;AACvC,YAAI,WAAY,KAAI,gBAAgB,KAAK,IAAI,GAAG,KAAK,KAAK,aAAa,GAAI,CAAC;AAE5E,YAAI;AACF,gBAAM,UAAU,MAAM,OAAO,KAAiB,QAAQ,iBAAiB,GAAG;AAC1E,iBAAO,EAAE,UAAU,EAAE,QAAQ,QAAQ,GAAG,YAAY,QAAQ,GAAG;AAAA,QACjE,SAAS,OAAO;AACd,cAAI,iBAAiB,YAAY,MAAM,WAAW,KAAK;AACrD,kBAAM,IAAI,MAAM,8DAA8D;AAAA,UAChF;AACA,gBAAM,IAAI;AAAA,YACR,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,UACjG;AAAA,QACF;AAAA,MACF;AAAA,MAEA,SAAS,OAAO,QAA0B,cAAsB;AAC9D,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,YAAI;AACF,gBAAM,UAAU,MAAM,OAAO,KAAiB,OAAO,OAAO,IAAI,SAAS,CAAC;AAC1E,cAAI,QAAQ,UAAU,aAAc,QAAO;AAC3C,iBAAO,EAAE,UAAU,EAAE,QAAQ,QAAQ,GAAG,YAAY,QAAQ,GAAG;AAAA,QACjE,SAAS,OAAO;AACd,cAAI,iBAAiB,YAAY,MAAM,WAAW,IAAK,QAAO;AAC9D,gBAAM;AAAA,QACR;AAAA,MACF;AAAA,MAEA,MAAM,OAAO,WAA6B;AACxC,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,OAAO,KAAkC,OAAO,eAAe;AAC3F,gBAAQ,aAAa,CAAC,GACnB,OAAO,CAAC,MAAM,EAAE,UAAU,YAAY,EACtC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,QAAQ,GAAG,YAAY,QAAQ,GAAG,EAAE;AAAA,MACjF;AAAA,MAEA,SAAS,OAAO,QAA0B,cAAsB;AAC9D,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,YAAI;AACF,gBAAM,OAAO,KAAK,UAAU,OAAO,IAAI,SAAS,CAAC;AAAA,QACnD,SAAS,OAAO;AAEd,cAAI,iBAAiB,YAAY,MAAM,WAAW,IAAK;AACvD,gBAAM;AAAA,QACR;AAAA,MACF;AAAA,MAEA,YAAY;AAAA,MAEZ,eAAe;AAAA,MAEf,SAAS,OAAO,aAAwD;AACtE,cAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,cAAM,IAAI,MAAM,OAAO,KAAiB,OAAO,OAAO,IAAI,QAAQ,EAAE,CAAC;AACrE,eAAO;AAAA,UACL,IAAI,EAAE;AAAA,UACN,UAAU;AAAA;AAAA;AAAA,UAGV,QAAQ,EAAE,UAAU,YAAY,YAAY;AAAA,UAC5C,WAAW,IAAI,KAAK,EAAE,UAAU;AAAA,UAChC,UAAU,EAAE,iBAAiB,KAAK;AAAA,UAClC,UAAU,EAAE,OAAO,EAAE,OAAO,OAAO,EAAE,OAAO,MAAM,EAAE,MAAM,UAAU,EAAE,WAAW,MAAM,EAAE,MAAM,QAAQ,EAAE,OAAO;AAAA,QAClH;AAAA,MACF;AAAA,MAEA,QAAQ,YAA6B;AAGnC,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,MAEA,YAAY;AAAA,QACV,UAAU,OAAO,UAA8B,SAAkC;AAC/E,gBAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,gBAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,IAAI,QAAQ,EAAE,IAAI,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/F,iBAAO,MAAM,KAAK,KAAK;AAAA,QACzB;AAAA,QAEA,WAAW,OAAO,UAA8B,MAAc,YAAmC;AAE/F,gBAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,gBAAM,OAAO,QAAQ,OAAO,OAAO,IAAI,QAAQ,EAAE,IAAI,UAAU,EAAE,OAAO,EAAE,KAAK,GAAG,MAAM,QAAQ,CAAC;AAAA,QACnG;AAAA,QAEA,OAAO,OAAO,UAA8B,SAAgC;AAC1E,gBAAM,IAAI,MAAM,IAAI,UAAU,eAAe,WAAW,IAAI,CAAC,EAAE;AAC/D,cAAI,EAAE,aAAa,EAAG,OAAM,IAAI,MAAM,8BAA8B,IAAI,KAAK,EAAE,MAAM,EAAE;AAAA,QACzF;AAAA,QAEA,SAAS,OAAO,UAA8B,SAAuC;AACnF,gBAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,gBAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,IAAI,QAAQ,EAAE,IAAI,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9F,gBAAM,EAAE,QAAQ,IAAK,MAAM,KAAK,KAAK;AACrC,kBAAQ,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO;AAAA,YACjC,MAAM,EAAE;AAAA,YACR,MAAM,EAAE,SAAS,QAAS,cAAyB;AAAA,YACnD,MAAM,EAAE;AAAA,UACV,EAAE;AAAA,QACJ;AAAA,QAEA,QAAQ,OAAO,UAA8B,SAAmC;AAC9E,gBAAM,IAAI,MAAM,IAAI,UAAU,WAAW,WAAW,IAAI,CAAC,EAAE;AAC3D,iBAAO,EAAE,aAAa;AAAA,QACxB;AAAA,QAEA,QAAQ,OAAO,UAA8B,SAAgC;AAG3E,gBAAM,IAAI,MAAM,IAAI,UAAU,aAAa,WAAW,IAAI,CAAC,EAAE;AAC7D,cAAI,EAAE,aAAa,EAAG,OAAM,IAAI,MAAM,oBAAoB,IAAI,KAAK,EAAE,MAAM,EAAE;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAGD,SAAS,WAAW,GAAmB;AACrC,SAAO,IAAI,EAAE,QAAQ,MAAM,OAAO,CAAC;AACrC;","names":[]}

package/dist/index.mjs

@@ -0,0 +1,297 @@
+// src/index.ts
+import { defineProvider } from "@computesdk/provider";
+var ApiError = class extends Error {
+  constructor(status, code, message) {
+    super(`sandbox-cli: ${code} (${status}): ${message}`);
+    this.status = status;
+    this.code = code;
+  }
+};
+function env(name) {
+  return typeof process !== "undefined" ? process.env?.[name] : void 0;
+}
+function fromB64(s) {
+  return s ? Buffer.from(s, "base64").toString("utf8") : "";
+}
+function isLoopback(hostname) {
+  return hostname === "localhost" || hostname === "[::1]" || /^127(\.\d{1,3}){3}$/.test(hostname);
+}
+var ApiClient = class {
+  constructor(config) {
+    const endpoint = config.endpoint || env("SANDBOX_ENDPOINT");
+    const token = config.token || env("SANDBOX_TOKEN");
+    if (!endpoint) {
+      throw new Error(
+        `Missing sandbox-cli endpoint. Provide 'endpoint' in config or set SANDBOX_ENDPOINT (the URL of a sandboxd or a gateway, e.g. https://sandbox.example.com).`
+      );
+    }
+    if (!token) {
+      throw new Error(`Missing sandbox-cli token. Provide 'token' in config or set SANDBOX_TOKEN.`);
+    }
+    const u = new URL(endpoint);
+    if (u.protocol !== "https:" && u.protocol !== "http:") {
+      throw new Error(`sandbox-cli endpoint must be http(s)://host[:port], got ${endpoint}`);
+    }
+    if (u.protocol === "http:" && !isLoopback(u.hostname)) {
+      throw new Error(
+        `sandbox-cli endpoint ${endpoint} is plain http to a non-loopback host, which would send the token unencrypted. Use https://, or http:// only to 127.0.0.1, ::1 or localhost.`
+      );
+    }
+    this.base = endpoint.replace(/\/+$/, "");
+    this.headers = { Authorization: `Bearer ${token}` };
+    const org = config.org || env("SANDBOX_ORG");
+    if (org) this.headers["X-Sandbox-Org"] = org;
+  }
+  async request(method, path, init = {}) {
+    let url = this.base + path;
+    if (init.query) url += "?" + new URLSearchParams(init.query).toString();
+    const headers = { ...this.headers };
+    let body = init.body;
+    if (init.json !== void 0) {
+      headers["Content-Type"] = "application/json";
+      body = JSON.stringify(init.json);
+    } else if (body !== void 0) {
+      headers["Content-Type"] = "application/octet-stream";
+    }
+    const resp = await fetch(url, { method, headers, body, signal: init.signal });
+    if (!resp.ok) {
+      const text = await resp.text();
+      let code = "internal";
+      let message = text.trim();
+      try {
+        const e = JSON.parse(text).error;
+        code = e.code ?? code;
+        message = e.message ?? message;
+      } catch {
+      }
+      throw new ApiError(resp.status, code, message);
+    }
+    return resp;
+  }
+  async json(method, path, payload) {
+    const resp = await this.request(method, path, payload === void 0 ? {} : { json: payload });
+    const text = await resp.text();
+    return text ? JSON.parse(text) : void 0;
+  }
+  sbx(id) {
+    return "/v1/sandboxes/" + encodeURIComponent(id);
+  }
+};
+function pick(...vals) {
+  return vals.find((v) => typeof v === "number" && Number.isFinite(v));
+}
+async function run(instance, command, options) {
+  const { client, sandbox } = instance;
+  const startTime = Date.now();
+  const req = { argv: ["sh", "-c", command] };
+  if (options?.cwd) req.cwd = options.cwd;
+  if (options?.env && Object.keys(options.env).length > 0) req.env = options.env;
+  if (options?.background) {
+    await client.json("POST", client.sbx(sandbox.id) + "/processes", req);
+    return { stdout: "", stderr: "", exitCode: 0, durationMs: Date.now() - startTime };
+  }
+  if (options?.timeout) req.timeout_secs = Math.max(1, Math.ceil(options.timeout / 1e3));
+  const r = await client.json(
+    "POST",
+    client.sbx(sandbox.id) + "/run",
+    req
+  );
+  return {
+    stdout: fromB64(r.stdout),
+    stderr: fromB64(r.stderr),
+    exitCode: r.timed_out && r.exit_code === 0 ? -1 : r.exit_code,
+    durationMs: Date.now() - startTime
+  };
+}
+var KILL_GRACE_MS = 2e3;
+async function stream(instance, command, options) {
+  const { client, sandbox } = instance;
+  const startTime = Date.now();
+  const req = { argv: ["sh", "-c", command] };
+  if (options.cwd) req.cwd = options.cwd;
+  if (options.env && Object.keys(options.env).length > 0) req.env = options.env;
+  const proc = await client.json("POST", client.sbx(sandbox.id) + "/processes", req);
+  const procPath = `${client.sbx(sandbox.id)}/processes/${proc.pid}`;
+  const kill = () => client.json("POST", procPath + "/signal", { signal: "KILL" }).catch(() => {
+  });
+  const abort = new AbortController();
+  let timedOut = false;
+  let grace;
+  const timer = options.timeout ? setTimeout(() => {
+    timedOut = true;
+    void kill();
+    grace = setTimeout(() => abort.abort(), KILL_GRACE_MS);
+  }, options.timeout) : void 0;
+  const decoders = { stdout: new TextDecoder(), stderr: new TextDecoder() };
+  const out = { stdout: "", stderr: "" };
+  const emit = (s, text) => {
+    if (!text) return;
+    out[s] += text;
+    (s === "stdout" ? options.onStdout : options.onStderr)?.(text);
+  };
+  let exitCode;
+  let reader;
+  try {
+    const resp = await client.request("GET", procPath + "/output", { signal: abort.signal });
+    if (!resp.body) throw new Error("sandbox-cli: output stream has no body");
+    reader = resp.body.getReader();
+    const dec = new TextDecoder();
+    let buf = "";
+    for (; ; ) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      buf += dec.decode(value, { stream: true });
+      let nl;
+      while ((nl = buf.indexOf("\n")) >= 0) {
+        const line = buf.slice(0, nl).trim();
+        buf = buf.slice(nl + 1);
+        if (!line) continue;
+        const ev = JSON.parse(line);
+        if (typeof ev.exit_code === "number") {
+          exitCode = ev.exit_code;
+        } else if (ev.stream === "stdout" || ev.stream === "stderr") {
+          emit(ev.stream, decoders[ev.stream].decode(Buffer.from(ev.data ?? "", "base64"), { stream: true }));
+        }
+      }
+    }
+  } catch (error) {
+    if (!(timedOut && abort.signal.aborted)) {
+      if (exitCode === void 0) await kill();
+      throw error;
+    }
+  } finally {
+    clearTimeout(timer);
+    clearTimeout(grace);
+    reader?.cancel().catch(() => {
+    });
+  }
+  emit("stdout", decoders.stdout.decode());
+  emit("stderr", decoders.stderr.decode());
+  if (exitCode === void 0 || timedOut && exitCode === 0) exitCode = -1;
+  return { stdout: out.stdout, stderr: out.stderr, exitCode, durationMs: Date.now() - startTime };
+}
+var sandboxCli = defineProvider({
+  name: "sandbox-cli",
+  methods: {
+    instances: {
+      create: async (config, options) => {
+        const client = new ApiClient(config);
+        const o = options || {};
+        const req = {};
+        const image = o.image || o.templateId;
+        if (image) req.image = image;
+        if (o.snapshotId) req.snapshot_id = o.snapshotId;
+        if (o.name) req.name = o.name;
+        if (o.envs && Object.keys(o.envs).length > 0) req.env = o.envs;
+        if (o.metadata && Object.keys(o.metadata).length > 0) {
+          req.labels = Object.fromEntries(Object.entries(o.metadata).map(([k, v]) => [k, String(v)]));
+        }
+        const cpus = pick(o.cpus, o.vcpus, o.cpu);
+        if (cpus !== void 0) req.cpus = cpus;
+        const memoryMb = pick(o.memoryMb, o.memory, o.memoryMiB, o.memMiB);
+        if (memoryMb !== void 0) req.memory_mb = memoryMb;
+        const diskMb = pick(o.diskMb, o.diskMiB);
+        if (diskMb !== void 0) req.disk_mb = diskMb;
+        const lifetimeMs = o.timeout ?? config.timeout;
+        if (lifetimeMs) req.lifetime_secs = Math.max(1, Math.ceil(lifetimeMs / 1e3));
+        try {
+          const sandbox = await client.json("POST", "/v1/sandboxes", req);
+          return { instance: { client, sandbox }, instanceId: sandbox.id };
+        } catch (error) {
+          if (error instanceof ApiError && error.status === 401) {
+            throw new Error(`sandbox-cli authentication failed. Check your SANDBOX_TOKEN.`);
+          }
+          throw new Error(
+            `Failed to create sandbox-cli sandbox: ${error instanceof Error ? error.message : String(error)}`
+          );
+        }
+      },
+      getById: async (config, sandboxId) => {
+        const client = new ApiClient(config);
+        try {
+          const sandbox = await client.json("GET", client.sbx(sandboxId));
+          if (sandbox.state === "terminated") return null;
+          return { instance: { client, sandbox }, instanceId: sandbox.id };
+        } catch (error) {
+          if (error instanceof ApiError && error.status === 404) return null;
+          throw error;
+        }
+      },
+      list: async (config) => {
+        const client = new ApiClient(config);
+        const { sandboxes } = await client.json("GET", "/v1/sandboxes");
+        return (sandboxes ?? []).filter((s) => s.state !== "terminated").map((sandbox) => ({ instance: { client, sandbox }, instanceId: sandbox.id }));
+      },
+      destroy: async (config, sandboxId) => {
+        const client = new ApiClient(config);
+        try {
+          await client.json("DELETE", client.sbx(sandboxId));
+        } catch (error) {
+          if (error instanceof ApiError && error.status === 404) return;
+          throw error;
+        }
+      },
+      runCommand: run,
+      streamCommand: stream,
+      getInfo: async (instance) => {
+        const { client, sandbox } = instance;
+        const s = await client.json("GET", client.sbx(sandbox.id));
+        return {
+          id: s.id,
+          provider: "sandbox-cli",
+          // A pending sandbox is still being created and refuses commands; its
+          // native state stays in metadata.
+          status: s.state === "running" ? "running" : "stopped",
+          createdAt: new Date(s.created_at),
+          timeout: (s.lifetime_secs ?? 0) * 1e3,
+          metadata: { state: s.state, image: s.image, cpus: s.cpus, memoryMb: s.memory_mb, name: s.name, labels: s.labels }
+        };
+      },
+      getUrl: async () => {
+        throw new Error(
+          "sandbox-cli does not expose sandbox ports as URLs. Use `sandbox-cli tunnel` or the API tunnel endpoint."
+        );
+      },
+      filesystem: {
+        readFile: async (instance, path) => {
+          const { client, sandbox } = instance;
+          const resp = await client.request("GET", client.sbx(sandbox.id) + "/files", { query: { path } });
+          return await resp.text();
+        },
+        writeFile: async (instance, path, content) => {
+          const { client, sandbox } = instance;
+          await client.request("PUT", client.sbx(sandbox.id) + "/files", { query: { path }, body: content });
+        },
+        mkdir: async (instance, path) => {
+          const r = await run(instance, `mkdir -p -- ${shellQuote(path)}`);
+          if (r.exitCode !== 0) throw new Error(`Failed to create directory ${path}: ${r.stderr}`);
+        },
+        readdir: async (instance, path) => {
+          const { client, sandbox } = instance;
+          const resp = await client.request("GET", client.sbx(sandbox.id) + "/dirs", { query: { path } });
+          const { entries } = await resp.json();
+          return (entries ?? []).map((e) => ({
+            name: e.name,
+            type: e.type === "dir" ? "directory" : "file",
+            size: e.size
+          }));
+        },
+        exists: async (instance, path) => {
+          const r = await run(instance, `test -e ${shellQuote(path)}`);
+          return r.exitCode === 0;
+        },
+        remove: async (instance, path) => {
+          const r = await run(instance, `rm -rf -- ${shellQuote(path)}`);
+          if (r.exitCode !== 0) throw new Error(`Failed to remove ${path}: ${r.stderr}`);
+        }
+      }
+    }
+  }
+});
+function shellQuote(s) {
+  return `'${s.replace(/'/g, `'\\''`)}'`;
+}
+export {
+  sandboxCli
+};
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["/**\n * sandbox-cli Provider - Factory-based Implementation\n *\n * sandbox-cli runs each sandbox as a microVM with its own kernel, behind one\n * HTTP API (v1) that is the same on a Mac, on a self-hosted Linux machine and\n * in the cloud. This provider talks to that API directly with fetch, so it\n * has no SDK dependency.\n */\n\nimport { defineProvider } from '@computesdk/provider';\n\nimport type {\n  CommandResult,\n  InstanceInfo,\n  CreateInstanceOptions,\n  FileEntry,\n  RunCommandOptions,\n} from '@computesdk/provider';\n\n/**\n * sandbox-cli provider configuration\n */\nexport interface SandboxCliConfig {\n  /** API endpoint, e.g. `https://sandbox.example.com` - falls back to SANDBOX_ENDPOINT */\n  endpoint?: string;\n  /** Bearer token - falls back to SANDBOX_TOKEN */\n  token?: string;\n  /** On a gateway, the organization to act in - falls back to SANDBOX_ORG */\n  org?: string;\n  /** Default sandbox lifetime in milliseconds; unset leaves the server's default */\n  timeout?: number;\n}\n\n/** A sandbox as the v1 API returns it (the fields this provider reads). */\ninterface ApiSandbox {\n  id: string;\n  name?: string;\n  state: 'pending' | 'running' | 'suspended' | 'terminated';\n  image: string;\n  cpus: number;\n  memory_mb: number;\n  created_at: string;\n  lifetime_secs?: number;\n  labels?: Record<string, string>;\n}\n\n/** The native instance: the API record plus a client bound to it. */\nexport interface SandboxCliInstance {\n  client: ApiClient;\n  sandbox: ApiSandbox;\n}\n\nclass ApiError extends Error {\n  constructor(readonly status: number, readonly code: string, message: string) {\n    super(`sandbox-cli: ${code} (${status}): ${message}`);\n  }\n}\n\nfunction env(name: string): string | undefined {\n  return typeof process !== 'undefined' ? process.env?.[name] : undefined;\n}\n\nfunction fromB64(s: string | null | undefined): string {\n  return s ? Buffer.from(s, 'base64').toString('utf8') : '';\n}\n\n/** `URL.hostname` of a loopback address: 127.0.0.0/8, [::1] or localhost. */\nfunction isLoopback(hostname: string): boolean {\n  return hostname === 'localhost' || hostname === '[::1]' || /^127(\\.\\d{1,3}){3}$/.test(hostname);\n}\n\nclass ApiClient {\n  readonly base: string;\n  private readonly headers: Record<string, string>;\n\n  constructor(config: SandboxCliConfig) {\n    const endpoint = config.endpoint || env('SANDBOX_ENDPOINT');\n    const token = config.token || env('SANDBOX_TOKEN');\n    if (!endpoint) {\n      throw new Error(\n        `Missing sandbox-cli endpoint. Provide 'endpoint' in config or set SANDBOX_ENDPOINT ` +\n          `(the URL of a sandboxd or a gateway, e.g. https://sandbox.example.com).`\n      );\n    }\n    if (!token) {\n      throw new Error(`Missing sandbox-cli token. Provide 'token' in config or set SANDBOX_TOKEN.`);\n    }\n    const u = new URL(endpoint);\n    if (u.protocol !== 'https:' && u.protocol !== 'http:') {\n      throw new Error(`sandbox-cli endpoint must be http(s)://host[:port], got ${endpoint}`);\n    }\n    // Every request carries the bearer token, so plain http is only for a\n    // sandboxd on this machine.\n    if (u.protocol === 'http:' && !isLoopback(u.hostname)) {\n      throw new Error(\n        `sandbox-cli endpoint ${endpoint} is plain http to a non-loopback host, which would send the token ` +\n          `unencrypted. Use https://, or http:// only to 127.0.0.1, ::1 or localhost.`\n      );\n    }\n    this.base = endpoint.replace(/\\/+$/, '');\n    this.headers = { Authorization: `Bearer ${token}` };\n    const org = config.org || env('SANDBOX_ORG');\n    if (org) this.headers['X-Sandbox-Org'] = org;\n  }\n\n  async request(\n    method: string,\n    path: string,\n    init: { query?: Record<string, string>; json?: unknown; body?: BodyInit; signal?: AbortSignal } = {}\n  ): Promise<Response> {\n    let url = this.base + path;\n    if (init.query) url += '?' + new URLSearchParams(init.query).toString();\n    const headers: Record<string, string> = { ...this.headers };\n    let body = init.body;\n    if (init.json !== undefined) {\n      headers['Content-Type'] = 'application/json';\n      body = JSON.stringify(init.json);\n    } else if (body !== undefined) {\n      headers['Content-Type'] = 'application/octet-stream';\n    }\n    const resp = await fetch(url, { method, headers, body, signal: init.signal });\n    if (!resp.ok) {\n      const text = await resp.text();\n      let code = 'internal';\n      let message = text.trim();\n      try {\n        const e = JSON.parse(text).error;\n        code = e.code ?? code;\n        message = e.message ?? message;\n      } catch {\n        // not a JSON error body\n      }\n      throw new ApiError(resp.status, code, message);\n    }\n    return resp;\n  }\n\n  async json<T>(method: string, path: string, payload?: unknown): Promise<T> {\n    const resp = await this.request(method, path, payload === undefined ? {} : { json: payload });\n    const text = await resp.text();\n    return (text ? JSON.parse(text) : undefined) as T;\n  }\n\n  sbx(id: string): string {\n    return '/v1/sandboxes/' + encodeURIComponent(id);\n  }\n}\n\n/** First defined number among the generic resource option spellings. */\nfunction pick(...vals: Array<number | undefined>): number | undefined {\n  return vals.find((v) => typeof v === 'number' && Number.isFinite(v));\n}\n\n/** The v1 `/run` call: `command` goes through `sh -c`, as ComputeSDK commands are shell strings. */\nasync function run(instance: SandboxCliInstance, command: string, options?: RunCommandOptions): Promise<CommandResult> {\n  const { client, sandbox } = instance;\n  const startTime = Date.now();\n  const req: Record<string, unknown> = { argv: ['sh', '-c', command] };\n  if (options?.cwd) req.cwd = options.cwd;\n  if (options?.env && Object.keys(options.env).length > 0) req.env = options.env;\n\n  if (options?.background) {\n    // A background process keeps running after this returns; its output stays\n    // readable through the API's process list.\n    await client.json('POST', client.sbx(sandbox.id) + '/processes', req);\n    return { stdout: '', stderr: '', exitCode: 0, durationMs: Date.now() - startTime };\n  }\n\n  if (options?.timeout) req.timeout_secs = Math.max(1, Math.ceil(options.timeout / 1000));\n  const r = await client.json<{ exit_code: number; stdout: string; stderr: string; timed_out: boolean }>(\n    'POST',\n    client.sbx(sandbox.id) + '/run',\n    req\n  );\n  return {\n    stdout: fromB64(r.stdout),\n    stderr: fromB64(r.stderr),\n    exitCode: r.timed_out && r.exit_code === 0 ? -1 : r.exit_code,\n    durationMs: Date.now() - startTime,\n  };\n}\n\n/** How long after a timeout's KILL the output stream may take to end. */\nconst KILL_GRACE_MS = 2_000;\n\n/**\n * Live output through the API's own process stream: start the process, then\n * read `GET …/processes/{pid}/output`, one JSON object per line, until the\n * `{\"exit_code\": N}` line.\n *\n * A timeout sends KILL, which ends the stream once it lands (the guest kills\n * the whole process group). The output request has a deadline of its own as\n * well, so a kill that fails cannot leave the caller waiting on a command\n * that is still running. Any other failure - the output request, a read, a\n * callback - kills the process before the error is reported, so nothing is\n * left running without a reader.\n */\nasync function stream(instance: SandboxCliInstance, command: string, options: RunCommandOptions): Promise<CommandResult> {\n  const { client, sandbox } = instance;\n  const startTime = Date.now();\n  const req: Record<string, unknown> = { argv: ['sh', '-c', command] };\n  if (options.cwd) req.cwd = options.cwd;\n  if (options.env && Object.keys(options.env).length > 0) req.env = options.env;\n\n  const proc = await client.json<{ pid: number }>('POST', client.sbx(sandbox.id) + '/processes', req);\n  const procPath = `${client.sbx(sandbox.id)}/processes/${proc.pid}`;\n  const kill = () => client.json('POST', procPath + '/signal', { signal: 'KILL' }).catch(() => {});\n\n  const abort = new AbortController();\n  let timedOut = false;\n  let grace: ReturnType<typeof setTimeout> | undefined;\n  const timer = options.timeout\n    ? setTimeout(() => {\n        timedOut = true;\n        void kill();\n        grace = setTimeout(() => abort.abort(), KILL_GRACE_MS);\n      }, options.timeout)\n    : undefined;\n\n  // Output arrives in byte chunks that can split a character, so each stream\n  // keeps one decoder across events and is flushed at the end.\n  const decoders = { stdout: new TextDecoder(), stderr: new TextDecoder() };\n  const out = { stdout: '', stderr: '' };\n  const emit = (s: 'stdout' | 'stderr', text: string) => {\n    if (!text) return;\n    out[s] += text;\n    (s === 'stdout' ? options.onStdout : options.onStderr)?.(text);\n  };\n\n  let exitCode: number | undefined;\n  let reader: ReadableStreamDefaultReader<Uint8Array> | undefined;\n  try {\n    const resp = await client.request('GET', procPath + '/output', { signal: abort.signal });\n    if (!resp.body) throw new Error('sandbox-cli: output stream has no body');\n    reader = resp.body.getReader();\n    const dec = new TextDecoder();\n    let buf = '';\n    for (;;) {\n      const { done, value } = await reader.read();\n      if (done) break;\n      buf += dec.decode(value, { stream: true });\n      let nl: number;\n      while ((nl = buf.indexOf('\\n')) >= 0) {\n        const line = buf.slice(0, nl).trim();\n        buf = buf.slice(nl + 1);\n        if (!line) continue;\n        const ev = JSON.parse(line) as { stream?: 'stdout' | 'stderr'; data?: string; exit_code?: number };\n        if (typeof ev.exit_code === 'number') {\n          exitCode = ev.exit_code;\n        } else if (ev.stream === 'stdout' || ev.stream === 'stderr') {\n          emit(ev.stream, decoders[ev.stream].decode(Buffer.from(ev.data ?? '', 'base64'), { stream: true }));\n        }\n      }\n    }\n  } catch (error) {\n    if (!(timedOut && abort.signal.aborted)) {\n      if (exitCode === undefined) await kill();\n      throw error;\n    }\n  } finally {\n    clearTimeout(timer);\n    clearTimeout(grace);\n    reader?.cancel().catch(() => {});\n  }\n  emit('stdout', decoders.stdout.decode());\n  emit('stderr', decoders.stderr.decode());\n\n  if (exitCode === undefined || (timedOut && exitCode === 0)) exitCode = -1;\n  return { stdout: out.stdout, stderr: out.stderr, exitCode, durationMs: Date.now() - startTime };\n}\n\n/**\n * Create a sandbox-cli provider instance using the factory pattern\n */\nexport const sandboxCli = defineProvider<SandboxCliInstance, SandboxCliConfig>({\n  name: 'sandbox-cli',\n  methods: {\n    instances: {\n      create: async (config: SandboxCliConfig, options?: CreateInstanceOptions) => {\n        const client = new ApiClient(config);\n        const o = options || {};\n\n        // POST /v1/sandboxes returns once the VM is booted and running, so the\n        // sandbox is usable as soon as this resolves.\n        const req: Record<string, unknown> = {};\n        const image = o.image || o.templateId;\n        if (image) req.image = image;\n        if (o.snapshotId) req.snapshot_id = o.snapshotId;\n        if (o.name) req.name = o.name;\n        if (o.envs && Object.keys(o.envs).length > 0) req.env = o.envs;\n        if (o.metadata && Object.keys(o.metadata).length > 0) {\n          req.labels = Object.fromEntries(Object.entries(o.metadata).map(([k, v]) => [k, String(v)]));\n        }\n        const cpus = pick(o.cpus, o.vcpus, o.cpu);\n        if (cpus !== undefined) req.cpus = cpus;\n        const memoryMb = pick(o.memoryMb, o.memory, o.memoryMiB, o.memMiB);\n        if (memoryMb !== undefined) req.memory_mb = memoryMb;\n        const diskMb = pick(o.diskMb, o.diskMiB);\n        if (diskMb !== undefined) req.disk_mb = diskMb;\n        const lifetimeMs = o.timeout ?? config.timeout;\n        if (lifetimeMs) req.lifetime_secs = Math.max(1, Math.ceil(lifetimeMs / 1000));\n\n        try {\n          const sandbox = await client.json<ApiSandbox>('POST', '/v1/sandboxes', req);\n          return { instance: { client, sandbox }, instanceId: sandbox.id };\n        } catch (error) {\n          if (error instanceof ApiError && error.status === 401) {\n            throw new Error(`sandbox-cli authentication failed. Check your SANDBOX_TOKEN.`);\n          }\n          throw new Error(\n            `Failed to create sandbox-cli sandbox: ${error instanceof Error ? error.message : String(error)}`\n          );\n        }\n      },\n\n      getById: async (config: SandboxCliConfig, sandboxId: string) => {\n        const client = new ApiClient(config);\n        try {\n          const sandbox = await client.json<ApiSandbox>('GET', client.sbx(sandboxId));\n          if (sandbox.state === 'terminated') return null;\n          return { instance: { client, sandbox }, instanceId: sandbox.id };\n        } catch (error) {\n          if (error instanceof ApiError && error.status === 404) return null;\n          throw error;\n        }\n      },\n\n      list: async (config: SandboxCliConfig) => {\n        const client = new ApiClient(config);\n        const { sandboxes } = await client.json<{ sandboxes: ApiSandbox[] }>('GET', '/v1/sandboxes');\n        return (sandboxes ?? [])\n          .filter((s) => s.state !== 'terminated')\n          .map((sandbox) => ({ instance: { client, sandbox }, instanceId: sandbox.id }));\n      },\n\n      destroy: async (config: SandboxCliConfig, sandboxId: string) => {\n        const client = new ApiClient(config);\n        try {\n          await client.json('DELETE', client.sbx(sandboxId));\n        } catch (error) {\n          // Idempotent: the sandbox may already be gone.\n          if (error instanceof ApiError && error.status === 404) return;\n          throw error;\n        }\n      },\n\n      runCommand: run,\n\n      streamCommand: stream,\n\n      getInfo: async (instance: SandboxCliInstance): Promise<InstanceInfo> => {\n        const { client, sandbox } = instance;\n        const s = await client.json<ApiSandbox>('GET', client.sbx(sandbox.id));\n        return {\n          id: s.id,\n          provider: 'sandbox-cli',\n          // A pending sandbox is still being created and refuses commands; its\n          // native state stays in metadata.\n          status: s.state === 'running' ? 'running' : 'stopped',\n          createdAt: new Date(s.created_at),\n          timeout: (s.lifetime_secs ?? 0) * 1000,\n          metadata: { state: s.state, image: s.image, cpus: s.cpus, memoryMb: s.memory_mb, name: s.name, labels: s.labels },\n        };\n      },\n\n      getUrl: async (): Promise<string> => {\n        // A port is reached through the API's tunnel (an upgraded connection to\n        // the guest's own loopback), never through a public URL.\n        throw new Error(\n          'sandbox-cli does not expose sandbox ports as URLs. Use `sandbox-cli tunnel` or the API tunnel endpoint.'\n        );\n      },\n\n      filesystem: {\n        readFile: async (instance: SandboxCliInstance, path: string): Promise<string> => {\n          const { client, sandbox } = instance;\n          const resp = await client.request('GET', client.sbx(sandbox.id) + '/files', { query: { path } });\n          return await resp.text();\n        },\n\n        writeFile: async (instance: SandboxCliInstance, path: string, content: string): Promise<void> => {\n          // The API creates parent directories.\n          const { client, sandbox } = instance;\n          await client.request('PUT', client.sbx(sandbox.id) + '/files', { query: { path }, body: content });\n        },\n\n        mkdir: async (instance: SandboxCliInstance, path: string): Promise<void> => {\n          const r = await run(instance, `mkdir -p -- ${shellQuote(path)}`);\n          if (r.exitCode !== 0) throw new Error(`Failed to create directory ${path}: ${r.stderr}`);\n        },\n\n        readdir: async (instance: SandboxCliInstance, path: string): Promise<FileEntry[]> => {\n          const { client, sandbox } = instance;\n          const resp = await client.request('GET', client.sbx(sandbox.id) + '/dirs', { query: { path } });\n          const { entries } = (await resp.json()) as { entries: Array<{ name: string; type: 'file' | 'dir'; size: number }> };\n          return (entries ?? []).map((e) => ({\n            name: e.name,\n            type: e.type === 'dir' ? ('directory' as const) : ('file' as const),\n            size: e.size,\n          }));\n        },\n\n        exists: async (instance: SandboxCliInstance, path: string): Promise<boolean> => {\n          const r = await run(instance, `test -e ${shellQuote(path)}`);\n          return r.exitCode === 0;\n        },\n\n        remove: async (instance: SandboxCliInstance, path: string): Promise<void> => {\n          // The API's DELETE removes only a file or an empty directory;\n          // ComputeSDK's remove is recursive.\n          const r = await run(instance, `rm -rf -- ${shellQuote(path)}`);\n          if (r.exitCode !== 0) throw new Error(`Failed to remove ${path}: ${r.stderr}`);\n        },\n      },\n    },\n  },\n});\n\n/** Single-quotes a value for `sh -c`, safe for any byte sequence. */\nfunction shellQuote(s: string): string {\n  return `'${s.replace(/'/g, `'\\\\''`)}'`;\n}\n"],"mappings":";AASA,SAAS,sBAAsB;AA2C/B,IAAM,WAAN,cAAuB,MAAM;AAAA,EAC3B,YAAqB,QAAyB,MAAc,SAAiB;AAC3E,UAAM,gBAAgB,IAAI,KAAK,MAAM,MAAM,OAAO,EAAE;AADjC;AAAyB;AAAA,EAE9C;AACF;AAEA,SAAS,IAAI,MAAkC;AAC7C,SAAO,OAAO,YAAY,cAAc,QAAQ,MAAM,IAAI,IAAI;AAChE;AAEA,SAAS,QAAQ,GAAsC;AACrD,SAAO,IAAI,OAAO,KAAK,GAAG,QAAQ,EAAE,SAAS,MAAM,IAAI;AACzD;AAGA,SAAS,WAAW,UAA2B;AAC7C,SAAO,aAAa,eAAe,aAAa,WAAW,sBAAsB,KAAK,QAAQ;AAChG;AAEA,IAAM,YAAN,MAAgB;AAAA,EAId,YAAY,QAA0B;AACpC,UAAM,WAAW,OAAO,YAAY,IAAI,kBAAkB;AAC1D,UAAM,QAAQ,OAAO,SAAS,IAAI,eAAe;AACjD,QAAI,CAAC,UAAU;AACb,YAAM,IAAI;AAAA,QACR;AAAA,MAEF;AAAA,IACF;AACA,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,4EAA4E;AAAA,IAC9F;AACA,UAAM,IAAI,IAAI,IAAI,QAAQ;AAC1B,QAAI,EAAE,aAAa,YAAY,EAAE,aAAa,SAAS;AACrD,YAAM,IAAI,MAAM,2DAA2D,QAAQ,EAAE;AAAA,IACvF;AAGA,QAAI,EAAE,aAAa,WAAW,CAAC,WAAW,EAAE,QAAQ,GAAG;AACrD,YAAM,IAAI;AAAA,QACR,wBAAwB,QAAQ;AAAA,MAElC;AAAA,IACF;AACA,SAAK,OAAO,SAAS,QAAQ,QAAQ,EAAE;AACvC,SAAK,UAAU,EAAE,eAAe,UAAU,KAAK,GAAG;AAClD,UAAM,MAAM,OAAO,OAAO,IAAI,aAAa;AAC3C,QAAI,IAAK,MAAK,QAAQ,eAAe,IAAI;AAAA,EAC3C;AAAA,EAEA,MAAM,QACJ,QACA,MACA,OAAkG,CAAC,GAChF;AACnB,QAAI,MAAM,KAAK,OAAO;AACtB,QAAI,KAAK,MAAO,QAAO,MAAM,IAAI,gBAAgB,KAAK,KAAK,EAAE,SAAS;AACtE,UAAM,UAAkC,EAAE,GAAG,KAAK,QAAQ;AAC1D,QAAI,OAAO,KAAK;AAChB,QAAI,KAAK,SAAS,QAAW;AAC3B,cAAQ,cAAc,IAAI;AAC1B,aAAO,KAAK,UAAU,KAAK,IAAI;AAAA,IACjC,WAAW,SAAS,QAAW;AAC7B,cAAQ,cAAc,IAAI;AAAA,IAC5B;AACA,UAAM,OAAO,MAAM,MAAM,KAAK,EAAE,QAAQ,SAAS,MAAM,QAAQ,KAAK,OAAO,CAAC;AAC5E,QAAI,CAAC,KAAK,IAAI;AACZ,YAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,UAAI,OAAO;AACX,UAAI,UAAU,KAAK,KAAK;AACxB,UAAI;AACF,cAAM,IAAI,KAAK,MAAM,IAAI,EAAE;AAC3B,eAAO,EAAE,QAAQ;AACjB,kBAAU,EAAE,WAAW;AAAA,MACzB,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,SAAS,KAAK,QAAQ,MAAM,OAAO;AAAA,IAC/C;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,KAAQ,QAAgB,MAAc,SAA+B;AACzE,UAAM,OAAO,MAAM,KAAK,QAAQ,QAAQ,MAAM,YAAY,SAAY,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC5F,UAAM,OAAO,MAAM,KAAK,KAAK;AAC7B,WAAQ,OAAO,KAAK,MAAM,IAAI,IAAI;AAAA,EACpC;AAAA,EAEA,IAAI,IAAoB;AACtB,WAAO,mBAAmB,mBAAmB,EAAE;AAAA,EACjD;AACF;AAGA,SAAS,QAAQ,MAAqD;AACpE,SAAO,KAAK,KAAK,CAAC,MAAM,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,CAAC;AACrE;AAGA,eAAe,IAAI,UAA8B,SAAiB,SAAqD;AACrH,QAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,MAA+B,EAAE,MAAM,CAAC,MAAM,MAAM,OAAO,EAAE;AACnE,MAAI,SAAS,IAAK,KAAI,MAAM,QAAQ;AACpC,MAAI,SAAS,OAAO,OAAO,KAAK,QAAQ,GAAG,EAAE,SAAS,EAAG,KAAI,MAAM,QAAQ;AAE3E,MAAI,SAAS,YAAY;AAGvB,UAAM,OAAO,KAAK,QAAQ,OAAO,IAAI,QAAQ,EAAE,IAAI,cAAc,GAAG;AACpE,WAAO,EAAE,QAAQ,IAAI,QAAQ,IAAI,UAAU,GAAG,YAAY,KAAK,IAAI,IAAI,UAAU;AAAA,EACnF;AAEA,MAAI,SAAS,QAAS,KAAI,eAAe,KAAK,IAAI,GAAG,KAAK,KAAK,QAAQ,UAAU,GAAI,CAAC;AACtF,QAAM,IAAI,MAAM,OAAO;AAAA,IACrB;AAAA,IACA,OAAO,IAAI,QAAQ,EAAE,IAAI;AAAA,IACzB;AAAA,EACF;AACA,SAAO;AAAA,IACL,QAAQ,QAAQ,EAAE,MAAM;AAAA,IACxB,QAAQ,QAAQ,EAAE,MAAM;AAAA,IACxB,UAAU,EAAE,aAAa,EAAE,cAAc,IAAI,KAAK,EAAE;AAAA,IACpD,YAAY,KAAK,IAAI,IAAI;AAAA,EAC3B;AACF;AAGA,IAAM,gBAAgB;AActB,eAAe,OAAO,UAA8B,SAAiB,SAAoD;AACvH,QAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,MAA+B,EAAE,MAAM,CAAC,MAAM,MAAM,OAAO,EAAE;AACnE,MAAI,QAAQ,IAAK,KAAI,MAAM,QAAQ;AACnC,MAAI,QAAQ,OAAO,OAAO,KAAK,QAAQ,GAAG,EAAE,SAAS,EAAG,KAAI,MAAM,QAAQ;AAE1E,QAAM,OAAO,MAAM,OAAO,KAAsB,QAAQ,OAAO,IAAI,QAAQ,EAAE,IAAI,cAAc,GAAG;AAClG,QAAM,WAAW,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,cAAc,KAAK,GAAG;AAChE,QAAM,OAAO,MAAM,OAAO,KAAK,QAAQ,WAAW,WAAW,EAAE,QAAQ,OAAO,CAAC,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAE/F,QAAM,QAAQ,IAAI,gBAAgB;AAClC,MAAI,WAAW;AACf,MAAI;AACJ,QAAM,QAAQ,QAAQ,UAClB,WAAW,MAAM;AACf,eAAW;AACX,SAAK,KAAK;AACV,YAAQ,WAAW,MAAM,MAAM,MAAM,GAAG,aAAa;AAAA,EACvD,GAAG,QAAQ,OAAO,IAClB;AAIJ,QAAM,WAAW,EAAE,QAAQ,IAAI,YAAY,GAAG,QAAQ,IAAI,YAAY,EAAE;AACxE,QAAM,MAAM,EAAE,QAAQ,IAAI,QAAQ,GAAG;AACrC,QAAM,OAAO,CAAC,GAAwB,SAAiB;AACrD,QAAI,CAAC,KAAM;AACX,QAAI,CAAC,KAAK;AACV,KAAC,MAAM,WAAW,QAAQ,WAAW,QAAQ,YAAY,IAAI;AAAA,EAC/D;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACF,UAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,WAAW,WAAW,EAAE,QAAQ,MAAM,OAAO,CAAC;AACvF,QAAI,CAAC,KAAK,KAAM,OAAM,IAAI,MAAM,wCAAwC;AACxE,aAAS,KAAK,KAAK,UAAU;AAC7B,UAAM,MAAM,IAAI,YAAY;AAC5B,QAAI,MAAM;AACV,eAAS;AACP,YAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,aAAO,IAAI,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AACzC,UAAI;AACJ,cAAQ,KAAK,IAAI,QAAQ,IAAI,MAAM,GAAG;AACpC,cAAM,OAAO,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK;AACnC,cAAM,IAAI,MAAM,KAAK,CAAC;AACtB,YAAI,CAAC,KAAM;AACX,cAAM,KAAK,KAAK,MAAM,IAAI;AAC1B,YAAI,OAAO,GAAG,cAAc,UAAU;AACpC,qBAAW,GAAG;AAAA,QAChB,WAAW,GAAG,WAAW,YAAY,GAAG,WAAW,UAAU;AAC3D,eAAK,GAAG,QAAQ,SAAS,GAAG,MAAM,EAAE,OAAO,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,GAAG,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,QACpG;AAAA,MACF;AAAA,IACF;AAAA,EACF,SAAS,OAAO;AACd,QAAI,EAAE,YAAY,MAAM,OAAO,UAAU;AACvC,UAAI,aAAa,OAAW,OAAM,KAAK;AACvC,YAAM;AAAA,IACR;AAAA,EACF,UAAE;AACA,iBAAa,KAAK;AAClB,iBAAa,KAAK;AAClB,YAAQ,OAAO,EAAE,MAAM,MAAM;AAAA,IAAC,CAAC;AAAA,EACjC;AACA,OAAK,UAAU,SAAS,OAAO,OAAO,CAAC;AACvC,OAAK,UAAU,SAAS,OAAO,OAAO,CAAC;AAEvC,MAAI,aAAa,UAAc,YAAY,aAAa,EAAI,YAAW;AACvE,SAAO,EAAE,QAAQ,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU,YAAY,KAAK,IAAI,IAAI,UAAU;AAChG;AAKO,IAAM,aAAa,eAAqD;AAAA,EAC7E,MAAM;AAAA,EACN,SAAS;AAAA,IACP,WAAW;AAAA,MACT,QAAQ,OAAO,QAA0B,YAAoC;AAC3E,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,cAAM,IAAI,WAAW,CAAC;AAItB,cAAM,MAA+B,CAAC;AACtC,cAAM,QAAQ,EAAE,SAAS,EAAE;AAC3B,YAAI,MAAO,KAAI,QAAQ;AACvB,YAAI,EAAE,WAAY,KAAI,cAAc,EAAE;AACtC,YAAI,EAAE,KAAM,KAAI,OAAO,EAAE;AACzB,YAAI,EAAE,QAAQ,OAAO,KAAK,EAAE,IAAI,EAAE,SAAS,EAAG,KAAI,MAAM,EAAE;AAC1D,YAAI,EAAE,YAAY,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,GAAG;AACpD,cAAI,SAAS,OAAO,YAAY,OAAO,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;AAAA,QAC5F;AACA,cAAM,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG;AACxC,YAAI,SAAS,OAAW,KAAI,OAAO;AACnC,cAAM,WAAW,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM;AACjE,YAAI,aAAa,OAAW,KAAI,YAAY;AAC5C,cAAM,SAAS,KAAK,EAAE,QAAQ,EAAE,OAAO;AACvC,YAAI,WAAW,OAAW,KAAI,UAAU;AACxC,cAAM,aAAa,EAAE,WAAW,OAAO;AACvC,YAAI,WAAY,KAAI,gBAAgB,KAAK,IAAI,GAAG,KAAK,KAAK,aAAa,GAAI,CAAC;AAE5E,YAAI;AACF,gBAAM,UAAU,MAAM,OAAO,KAAiB,QAAQ,iBAAiB,GAAG;AAC1E,iBAAO,EAAE,UAAU,EAAE,QAAQ,QAAQ,GAAG,YAAY,QAAQ,GAAG;AAAA,QACjE,SAAS,OAAO;AACd,cAAI,iBAAiB,YAAY,MAAM,WAAW,KAAK;AACrD,kBAAM,IAAI,MAAM,8DAA8D;AAAA,UAChF;AACA,gBAAM,IAAI;AAAA,YACR,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,UACjG;AAAA,QACF;AAAA,MACF;AAAA,MAEA,SAAS,OAAO,QAA0B,cAAsB;AAC9D,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,YAAI;AACF,gBAAM,UAAU,MAAM,OAAO,KAAiB,OAAO,OAAO,IAAI,SAAS,CAAC;AAC1E,cAAI,QAAQ,UAAU,aAAc,QAAO;AAC3C,iBAAO,EAAE,UAAU,EAAE,QAAQ,QAAQ,GAAG,YAAY,QAAQ,GAAG;AAAA,QACjE,SAAS,OAAO;AACd,cAAI,iBAAiB,YAAY,MAAM,WAAW,IAAK,QAAO;AAC9D,gBAAM;AAAA,QACR;AAAA,MACF;AAAA,MAEA,MAAM,OAAO,WAA6B;AACxC,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,cAAM,EAAE,UAAU,IAAI,MAAM,OAAO,KAAkC,OAAO,eAAe;AAC3F,gBAAQ,aAAa,CAAC,GACnB,OAAO,CAAC,MAAM,EAAE,UAAU,YAAY,EACtC,IAAI,CAAC,aAAa,EAAE,UAAU,EAAE,QAAQ,QAAQ,GAAG,YAAY,QAAQ,GAAG,EAAE;AAAA,MACjF;AAAA,MAEA,SAAS,OAAO,QAA0B,cAAsB;AAC9D,cAAM,SAAS,IAAI,UAAU,MAAM;AACnC,YAAI;AACF,gBAAM,OAAO,KAAK,UAAU,OAAO,IAAI,SAAS,CAAC;AAAA,QACnD,SAAS,OAAO;AAEd,cAAI,iBAAiB,YAAY,MAAM,WAAW,IAAK;AACvD,gBAAM;AAAA,QACR;AAAA,MACF;AAAA,MAEA,YAAY;AAAA,MAEZ,eAAe;AAAA,MAEf,SAAS,OAAO,aAAwD;AACtE,cAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,cAAM,IAAI,MAAM,OAAO,KAAiB,OAAO,OAAO,IAAI,QAAQ,EAAE,CAAC;AACrE,eAAO;AAAA,UACL,IAAI,EAAE;AAAA,UACN,UAAU;AAAA;AAAA;AAAA,UAGV,QAAQ,EAAE,UAAU,YAAY,YAAY;AAAA,UAC5C,WAAW,IAAI,KAAK,EAAE,UAAU;AAAA,UAChC,UAAU,EAAE,iBAAiB,KAAK;AAAA,UAClC,UAAU,EAAE,OAAO,EAAE,OAAO,OAAO,EAAE,OAAO,MAAM,EAAE,MAAM,UAAU,EAAE,WAAW,MAAM,EAAE,MAAM,QAAQ,EAAE,OAAO;AAAA,QAClH;AAAA,MACF;AAAA,MAEA,QAAQ,YAA6B;AAGnC,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AAAA,MAEA,YAAY;AAAA,QACV,UAAU,OAAO,UAA8B,SAAkC;AAC/E,gBAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,gBAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,IAAI,QAAQ,EAAE,IAAI,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC/F,iBAAO,MAAM,KAAK,KAAK;AAAA,QACzB;AAAA,QAEA,WAAW,OAAO,UAA8B,MAAc,YAAmC;AAE/F,gBAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,gBAAM,OAAO,QAAQ,OAAO,OAAO,IAAI,QAAQ,EAAE,IAAI,UAAU,EAAE,OAAO,EAAE,KAAK,GAAG,MAAM,QAAQ,CAAC;AAAA,QACnG;AAAA,QAEA,OAAO,OAAO,UAA8B,SAAgC;AAC1E,gBAAM,IAAI,MAAM,IAAI,UAAU,eAAe,WAAW,IAAI,CAAC,EAAE;AAC/D,cAAI,EAAE,aAAa,EAAG,OAAM,IAAI,MAAM,8BAA8B,IAAI,KAAK,EAAE,MAAM,EAAE;AAAA,QACzF;AAAA,QAEA,SAAS,OAAO,UAA8B,SAAuC;AACnF,gBAAM,EAAE,QAAQ,QAAQ,IAAI;AAC5B,gBAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,IAAI,QAAQ,EAAE,IAAI,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC9F,gBAAM,EAAE,QAAQ,IAAK,MAAM,KAAK,KAAK;AACrC,kBAAQ,WAAW,CAAC,GAAG,IAAI,CAAC,OAAO;AAAA,YACjC,MAAM,EAAE;AAAA,YACR,MAAM,EAAE,SAAS,QAAS,cAAyB;AAAA,YACnD,MAAM,EAAE;AAAA,UACV,EAAE;AAAA,QACJ;AAAA,QAEA,QAAQ,OAAO,UAA8B,SAAmC;AAC9E,gBAAM,IAAI,MAAM,IAAI,UAAU,WAAW,WAAW,IAAI,CAAC,EAAE;AAC3D,iBAAO,EAAE,aAAa;AAAA,QACxB;AAAA,QAEA,QAAQ,OAAO,UAA8B,SAAgC;AAG3E,gBAAM,IAAI,MAAM,IAAI,UAAU,aAAa,WAAW,IAAI,CAAC,EAAE;AAC7D,cAAI,EAAE,aAAa,EAAG,OAAM,IAAI,MAAM,oBAAoB,IAAI,KAAK,EAAE,MAAM,EAAE;AAAA,QAC/E;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF,CAAC;AAGD,SAAS,WAAW,GAAmB;AACrC,SAAO,IAAI,EAAE,QAAQ,MAAM,OAAO,CAAC;AACrC;","names":[]}

package/package.json

@@ -1,6 +1,63 @@
 {
   "name": "@computesdk/sandbox-cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1",
+  "description": "sandbox-cli provider for ComputeSDK - microVM sandboxes with their own kernel, behind one API on a Mac, a self-hosted Linux machine or the cloud",
+  "author": "",
+  "license": "MIT",
+  "main": "./dist/index.js",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "computesdk": "4.1.17",
+    "@computesdk/provider": "2.1.23"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@vitest/coverage-v8": "^1.0.0",
+    "eslint": "^8.37.0",
+    "rimraf": "^5.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.0.0",
+    "vitest": "^1.0.0",
+    "@computesdk/test-utils": "2.0.6"
+  },
+  "keywords": [
+    "computesdk",
+    "sandbox-cli",
+    "sandbox",
+    "microvm",
+    "firecracker",
+    "code-execution",
+    "provider",
+    "agents"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/computesdk/computesdk.git",
+    "directory": "packages/sandbox-cli"
+  },
+  "homepage": "https://www.computesdk.com",
+  "bugs": {
+    "url": "https://github.com/computesdk/computesdk/issues"
+  },
+  "scripts": {
+    "build": "tsup",
+    "clean": "rimraf dist",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "test:watch": "vitest watch",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit",
+    "lint": "eslint"
+  }
 }