@elie-laloum/outpost 11.1.2 → 11.2.0

package/dist/providers/local.js

@@ -1,8 +1,7 @@
-import { cp, mkdir } from "node:fs/promises";
 import { homedir } from "node:os";
-import { dirname, resolve } from "node:path";
 import { invariant, OutpostError } from "../domain/errors.js";
 import { executeProcess } from "../infrastructure/process.js";
+import { localFiles } from "./local-files.js";
 export function createLocalSandboxProvider(options = {}) {
     invariant(!("egress" in options) || options.egress === undefined, "Local execution cannot enforce egress policies");
     const provider = {
@@ -14,22 +13,6 @@ export function createLocalSandboxProvider(options = {}) {
             const stop = new AbortController();
             const active = new Set();
             let disposed = false;
-            const copy = async (source, destination, options = {}) => {
-                options.signal?.throwIfAborted();
-                if (disposed)
-                    throw new OutpostError("provider", "Local sandbox is closed");
-                if (resolve(source) === resolve(destination))
-                    return;
-                await mkdir(dirname(destination), { recursive: true });
-                await cp(source, destination, {
-                    recursive: true,
-                    force: true,
-                    filter: () => {
-                        options.signal?.throwIfAborted();
-                        return true;
-                    },
-                });
-            };
             return {
                 root: context.directory,
                 home: homedir(),
@@ -50,8 +33,7 @@ export function createLocalSandboxProvider(options = {}) {
                     void pending.then(() => active.delete(pending), () => active.delete(pending));
                     return pending;
                 },
-                upload: copy,
-                download: copy,
+                ...localFiles(context.directory, () => disposed),
                 async release() {
                     if (disposed)
                         return;

package/dist/providers/local.js.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/providers/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAK9D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAG9D,MAAM,UAAU,0BAA0B,CACxC,UAAwB,EAAE;IAE1B,SAAS,CACP,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EACtD,gDAAgD,CACjD,CAAC;IACF,MAAM,QAAQ,GAAoB;QAChC,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC3C,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,MAAM,IAAI,GAAG,KAAK,EAChB,MAAc,EACd,WAAmB,EACnB,UAA2B,EAAE,EAC7B,EAAE;gBACF,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;gBACjC,IAAI,QAAQ;oBACV,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;gBAChE,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC;oBAAE,OAAO;gBACrD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,MAAM,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE;oBAC5B,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,GAAG,EAAE;wBACX,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;wBACjC,OAAO,IAAI,CAAC;oBACd,CAAC;iBACF,CAAC,CAAC;YACL,CAAC,CAAC;YACF,OAAO;gBACL,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,IAAI,EAAE,OAAO,EAAE;gBACf,SAAS,EAAE,IAAI;gBACf,MAAM,CAAC,OAAgB;oBACrB,IAAI,QAAQ;wBACV,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CACxD,CAAC;oBACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;wBAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;wBAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChB,MAAM,OAAO,GAAG,cAAc,CAAC;wBAC7B,GAAG,OAAO;wBACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;wBACjD,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;wBACzD,MAAM;qBACP,CAAC,CAAC;oBACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACpB,KAAK,OAAO,CAAC,IAAI,CACf,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAC5B,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAC7B,CAAC;oBACF,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,IAAI;gBACd,KAAK,CAAC,OAAO;oBACX,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;oBAC5D,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO;QACL,GAAG,QAAQ;QACX,UAAU,EAAE;YACV,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;YAC/B,OAAO,CAAC,OAAO;gBACb,OAAO,QAAQ,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;oBACtC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;oBACrC,cAAc,EAAE,EAAE;oBAClB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { cp, mkdir } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, resolve } from \"node:path\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type {\n  SandboxProvider,\n  TransferOptions,\n} from \"../domain/sandbox.types.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport type { LocalOptions } from \"./local.types.ts\";\n\nexport function createLocalSandboxProvider(\n  options: LocalOptions = {},\n): SandboxProvider {\n  invariant(\n    !(\"egress\" in options) || options.egress === undefined,\n    \"Local execution cannot enforce egress policies\",\n  );\n  const provider: SandboxProvider = {\n    name: \"local\",\n    placement: \"host\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const stop = new AbortController();\n      const active = new Set<Promise<unknown>>();\n      let disposed = false;\n      const copy = async (\n        source: string,\n        destination: string,\n        options: TransferOptions = {},\n      ) => {\n        options.signal?.throwIfAborted();\n        if (disposed)\n          throw new OutpostError(\"provider\", \"Local sandbox is closed\");\n        if (resolve(source) === resolve(destination)) return;\n        await mkdir(dirname(destination), { recursive: true });\n        await cp(source, destination, {\n          recursive: true,\n          force: true,\n          filter: () => {\n            options.signal?.throwIfAborted();\n            return true;\n          },\n        });\n      };\n      return {\n        root: context.directory,\n        home: homedir(),\n        liveInput: true,\n        invoke(command: Command) {\n          if (disposed)\n            return Promise.reject(\n              new OutpostError(\"provider\", \"Local sandbox is closed\"),\n            );\n          const signal = command.signal\n            ? AbortSignal.any([command.signal, stop.signal])\n            : stop.signal;\n          const pending = executeProcess({\n            ...command,\n            directory: command.directory ?? context.directory,\n            variables: { ...context.variables, ...command.variables },\n            signal,\n          });\n          active.add(pending);\n          void pending.then(\n            () => active.delete(pending),\n            () => active.delete(pending),\n          );\n          return pending;\n        },\n        upload: copy,\n        download: copy,\n        async release() {\n          if (disposed) return;\n          disposed = true;\n          stop.abort(new OutpostError(\"aborted\", \"Sandbox disposed\"));\n          await Promise.allSettled(active);\n        },\n      };\n    },\n  };\n  return {\n    ...provider,\n    workspaces: {\n      bindings: [\"copy\", \"ephemeral\"],\n      acquire(context) {\n        return provider.acquire({\n          directory: context.workspace.directory,\n          repository: context.runtime.directory,\n          gitDirectories: [],\n          variables: context.variables,\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n      },\n    },\n  };\n}\n"]}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/providers/local.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,UAAU,0BAA0B,CACxC,UAAwB,EAAE;IAE1B,SAAS,CACP,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EACtD,gDAAgD,CACjD,CAAC;IACF,MAAM,QAAQ,GAAoB;QAChC,IAAI,EAAE,OAAO;QACb,SAAS,EAAE,MAAM;QACjB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC3C,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO;gBACL,IAAI,EAAE,OAAO,CAAC,SAAS;gBACvB,IAAI,EAAE,OAAO,EAAE;gBACf,SAAS,EAAE,IAAI;gBACf,MAAM,CAAC,OAAgB;oBACrB,IAAI,QAAQ;wBACV,OAAO,OAAO,CAAC,MAAM,CACnB,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CACxD,CAAC;oBACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;wBAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;wBAChD,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;oBAChB,MAAM,OAAO,GAAG,cAAc,CAAC;wBAC7B,GAAG,OAAO;wBACV,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS;wBACjD,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;wBACzD,MAAM;qBACP,CAAC,CAAC;oBACH,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACpB,KAAK,OAAO,CAAC,IAAI,CACf,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAC5B,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAC7B,CAAC;oBACF,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC;gBAChD,KAAK,CAAC,OAAO;oBACX,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;oBAC5D,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;IACF,OAAO;QACL,GAAG,QAAQ;QACX,UAAU,EAAE;YACV,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;YAC/B,OAAO,CAAC,OAAO;gBACb,OAAO,QAAQ,CAAC,OAAO,CAAC;oBACtB,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,SAAS;oBACtC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;oBACrC,cAAc,EAAE,EAAE;oBAClB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAC,CAAC;YACL,CAAC;SACF;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { homedir } from \"node:os\";\nimport type { Command } from \"../domain/command.types.ts\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { executeProcess } from \"../infrastructure/process.ts\";\nimport { localFiles } from \"./local-files.ts\";\nimport type { LocalOptions } from \"./local.types.ts\";\n\nexport function createLocalSandboxProvider(\n  options: LocalOptions = {},\n): SandboxProvider {\n  invariant(\n    !(\"egress\" in options) || options.egress === undefined,\n    \"Local execution cannot enforce egress policies\",\n  );\n  const provider: SandboxProvider = {\n    name: \"local\",\n    placement: \"host\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const stop = new AbortController();\n      const active = new Set<Promise<unknown>>();\n      let disposed = false;\n      return {\n        root: context.directory,\n        home: homedir(),\n        liveInput: true,\n        invoke(command: Command) {\n          if (disposed)\n            return Promise.reject(\n              new OutpostError(\"provider\", \"Local sandbox is closed\"),\n            );\n          const signal = command.signal\n            ? AbortSignal.any([command.signal, stop.signal])\n            : stop.signal;\n          const pending = executeProcess({\n            ...command,\n            directory: command.directory ?? context.directory,\n            variables: { ...context.variables, ...command.variables },\n            signal,\n          });\n          active.add(pending);\n          void pending.then(\n            () => active.delete(pending),\n            () => active.delete(pending),\n          );\n          return pending;\n        },\n        ...localFiles(context.directory, () => disposed),\n        async release() {\n          if (disposed) return;\n          disposed = true;\n          stop.abort(new OutpostError(\"aborted\", \"Sandbox disposed\"));\n          await Promise.allSettled(active);\n        },\n      };\n    },\n  };\n  return {\n    ...provider,\n    workspaces: {\n      bindings: [\"copy\", \"ephemeral\"],\n      acquire(context) {\n        return provider.acquire({\n          directory: context.workspace.directory,\n          repository: context.runtime.directory,\n          gitDirectories: [],\n          variables: context.variables,\n          ...(context.signal ? { signal: context.signal } : {}),\n        });\n      },\n    },\n  };\n}\n"]}

package/dist/providers/vercel-command.js

@@ -1,6 +1,7 @@
 import { randomUUID } from "node:crypto";
 import { OutpostError } from "../domain/errors.js";
 import { quote } from "../infrastructure/process.js";
+import { reportInputFailure } from "../infrastructure/input-failure.js";
 import { cloudDefaults } from "./cloud.constants.js";
 import { cloudInputFeed, cloudInputFrames, cloudInputProgram, } from "./cloud-input.js";
 export function vercelCommand(runtime) {
@@ -45,8 +46,8 @@ export function vercelCommand(runtime) {
                     cmd: "sh",
                     args: ["-c", `exec ${program} < ${quote(inputPath)}`],
                 };
-        const failure = new AbortController();
-        const stopped = AbortSignal.any([signal, failure.signal]);
+        const stopped = signal;
+        let inputFailure;
         let feed;
         try {
             const running = await sandbox.runCommand({
@@ -61,13 +62,21 @@ export function vercelCommand(runtime) {
             });
             if (live)
                 feed = cloudInputFeed(live, async (line) => {
+                    await sandbox.writeFiles([
+                        { path: inputPath + ".chunk", content: Buffer.from(line) },
+                    ]);
                     const appended = await sandbox.runCommand("sh", [
                         "-c",
-                        `printf '%s' ${quote(line)} >> ${quote(inputPath)}`,
+                        `cat ${quote(inputPath + ".chunk")} >> ${quote(inputPath)}`,
                     ]);
                     if (appended.exitCode !== 0)
                         throw new OutpostError("provider", "Cloud live input could not be appended");
-                }, (cause) => failure.abort(cause));
+                }, (cause) => {
+                    if (!reportInputFailure(live, cause))
+                        inputFailure = new OutpostError("steering", "Cloud live input delivery failed", {}, cause);
+                }, () => sandbox.writeFiles([
+                    { path: inputPath + ".closed", content: Buffer.alloc(0) },
+                ]));
             try {
                 for await (const log of running.logs({ signal: stopped })) {
                     const channel = log.stream;
@@ -77,19 +86,28 @@ export function vercelCommand(runtime) {
                     command.observe?.(channel, log.data);
                 }
                 const result = await running.wait({ signal: stopped });
+                await feed?.finish();
+                if (inputFailure)
+                    throw inputFailure;
                 return { status: result.exitCode, ...output };
             }
             catch (cause) {
+                if (inputFailure && cause === inputFailure)
+                    throw cause;
                 await running.kill("SIGKILL", {
                     abortSignal: AbortSignal.timeout(cloudDefaults.cancellationMs),
                 });
                 // The input wrapper runs the agent as a child; stop its whole process group.
                 if (live)
                     await sandbox
-                        .runCommand("sh", [
-                        "-c",
-                        `kill -KILL -$(cat ${quote(pidPath)}) 2>/dev/null || true`,
-                    ])
+                        .runCommand({
+                        cmd: "sh",
+                        args: [
+                            "-c",
+                            `kill -KILL -$(cat ${quote(pidPath)}) 2>/dev/null || true`,
+                        ],
+                        sudo: command.elevated ?? false,
+                    })
                         .catch(() => undefined);
                 throw cause;
             }
@@ -98,7 +116,13 @@ export function vercelCommand(runtime) {
             await feed?.finish();
             if (staged !== undefined)
                 await sandbox
-                    .runCommand("rm", ["-f", inputPath, pidPath])
+                    .runCommand("rm", [
+                    "-f",
+                    inputPath,
+                    inputPath + ".chunk",
+                    inputPath + ".closed",
+                    pidPath,
+                ])
                     .catch(() => undefined);
         }
     };

package/dist/providers/vercel-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"vercel-command.js","sourceRoot":"","sources":["../../src/providers/vercel-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAI1B,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,WAAW;YACrB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,2DAA2D,CAC5D,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,gBAAgB,UAAU,EAAE,QAAQ,CAAC;QACvD,MAAM,OAAO,GAAG,GAAG,SAAS,MAAM,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,IAAI,MAAM,KAAK,SAAS;YACtB,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;aAClD,CAAC,CAAC;QACL,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;aAC/D,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI;YACxB,CAAC,CAAC;gBACE,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE;oBACJ,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,aAAa,KAAK,CAAC,OAAO,CAAC,UAAU,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;iBAC7E;aACF;YACH,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,EAAE;gBACnE,CAAC,CAAC;oBACE,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,OAAO,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;iBACtD,CAAC;QACR,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1D,IAAI,IAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvC,GAAG;gBACH,IAAI;gBACJ,GAAG,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBAC9B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;gBACnD,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;gBAC/B,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU;aAC1D,CAAC,CAAC;YACH,IAAI,IAAI;gBACN,IAAI,GAAG,cAAc,CACnB,IAAI,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;oBACb,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;wBAC9C,IAAI;wBACJ,eAAe,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE;qBACpD,CAAC,CAAC;oBACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACzB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,wCAAwC,CACzC,CAAC;gBACN,CAAC,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAChC,CAAC;YACJ,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC;oBAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;wBAAE,SAAS;oBAC3D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAClD,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;oBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACvD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;oBAC5B,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC;iBAC/D,CAAC,CAAC;gBACH,6EAA6E;gBAC7E,IAAI,IAAI;oBACN,MAAM,OAAO;yBACV,UAAU,CAAC,IAAI,EAAE;wBAChB,IAAI;wBACJ,qBAAqB,KAAK,CAAC,OAAO,CAAC,uBAAuB;qBAC3D,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,MAAM,KAAK,SAAS;gBACtB,MAAM,OAAO;qBACV,UAAU,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;qBAC5C,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport {\n  cloudInputFeed,\n  cloudInputFrames,\n  cloudInputProgram,\n} from \"./cloud-input.ts\";\nimport type { CloudInputFeed } from \"./cloud-input.types.ts\";\nimport type { VercelRuntime } from \"./vercel.types.ts\";\n\nexport function vercelCommand(runtime: VercelRuntime): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    if (command.interactive)\n      throw new OutpostError(\n        \"provider\",\n        \"Interactive terminals require a mounted or local provider\",\n      );\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    const inputPath = `/tmp/outpost-${randomUUID()}.stdin`;\n    const pidPath = `${inputPath}.pid`;\n    const live = command.input;\n    const staged = live ? cloudInputFrames(command.stdin) : command.stdin;\n    if (staged !== undefined)\n      await sandbox.writeFiles([\n        { path: inputPath, content: Buffer.from(staged) },\n      ]);\n    const output = { stdout: \"\", stderr: \"\" };\n    const program = [command.executable, ...(command.arguments ?? [])]\n      .map(quote)\n      .join(\" \");\n    const { cmd, args } = live\n      ? {\n          cmd: \"setsid\",\n          args: [\n            \"--wait\",\n            \"sh\",\n            \"-c\",\n            `echo $$ > ${quote(pidPath)}; exec ${cloudInputProgram(inputPath, program)}`,\n          ],\n        }\n      : command.stdin === undefined\n        ? { cmd: command.executable, args: [...(command.arguments ?? [])] }\n        : {\n            cmd: \"sh\",\n            args: [\"-c\", `exec ${program} < ${quote(inputPath)}`],\n          };\n    const failure = new AbortController();\n    const stopped = AbortSignal.any([signal, failure.signal]);\n    let feed: CloudInputFeed | undefined;\n    try {\n      const running = await sandbox.runCommand({\n        cmd,\n        args,\n        cwd: command.directory ?? root,\n        env: { ...context.variables, ...command.variables },\n        sudo: command.elevated ?? false,\n        detached: true,\n        signal: stopped,\n        timeoutMs: command.deadlineMs ?? cloudDefaults.deadlineMs,\n      });\n      if (live)\n        feed = cloudInputFeed(\n          live,\n          async (line) => {\n            const appended = await sandbox.runCommand(\"sh\", [\n              \"-c\",\n              `printf '%s' ${quote(line)} >> ${quote(inputPath)}`,\n            ]);\n            if (appended.exitCode !== 0)\n              throw new OutpostError(\n                \"provider\",\n                \"Cloud live input could not be appended\",\n              );\n          },\n          (cause) => failure.abort(cause),\n        );\n      try {\n        for await (const log of running.logs({ signal: stopped })) {\n          const channel = log.stream;\n          if (channel !== \"stdout\" && channel !== \"stderr\") continue;\n          output[channel] = (output[channel] + log.data).slice(\n            -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n          );\n          command.observe?.(channel, log.data);\n        }\n        const result = await running.wait({ signal: stopped });\n        return { status: result.exitCode, ...output };\n      } catch (cause) {\n        await running.kill(\"SIGKILL\", {\n          abortSignal: AbortSignal.timeout(cloudDefaults.cancellationMs),\n        });\n        // The input wrapper runs the agent as a child; stop its whole process group.\n        if (live)\n          await sandbox\n            .runCommand(\"sh\", [\n              \"-c\",\n              `kill -KILL -$(cat ${quote(pidPath)}) 2>/dev/null || true`,\n            ])\n            .catch(() => undefined);\n        throw cause;\n      }\n    } finally {\n      await feed?.finish();\n      if (staged !== undefined)\n        await sandbox\n          .runCommand(\"rm\", [\"-f\", inputPath, pidPath])\n          .catch(() => undefined);\n    }\n  };\n}\n"]}
+{"version":3,"file":"vercel-command.js","sourceRoot":"","sources":["../../src/providers/vercel-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,kBAAkB,CAAC;AAI1B,MAAM,UAAU,aAAa,CAAC,OAAsB;IAClD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,QAAQ,EAAE;YACZ,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,WAAW;YACrB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,2DAA2D,CAC5D,CAAC;QACJ,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;YAC3B,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC;gBACd,OAAO,CAAC,MAAM;gBACd,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC;aACpE,CAAC;YACJ,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,CAAC,cAAc,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,gBAAgB,UAAU,EAAE,QAAQ,CAAC;QACvD,MAAM,OAAO,GAAG,GAAG,SAAS,MAAM,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,IAAI,MAAM,KAAK,SAAS;YACtB,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvB,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;aAClD,CAAC,CAAC;QACL,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;aAC/D,GAAG,CAAC,KAAK,CAAC;aACV,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI;YACxB,CAAC,CAAC;gBACE,GAAG,EAAE,QAAQ;gBACb,IAAI,EAAE;oBACJ,QAAQ;oBACR,IAAI;oBACJ,IAAI;oBACJ,aAAa,KAAK,CAAC,OAAO,CAAC,UAAU,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE;iBAC7E;aACF;YACH,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS;gBAC3B,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,EAAE;gBACnE,CAAC,CAAC;oBACE,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,OAAO,MAAM,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;iBACtD,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,CAAC;QACvB,IAAI,YAAsC,CAAC;QAC3C,IAAI,IAAgC,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;gBACvC,GAAG;gBACH,IAAI;gBACJ,GAAG,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;gBAC9B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;gBACnD,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;gBAC/B,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,OAAO;gBACf,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,aAAa,CAAC,UAAU;aAC1D,CAAC,CAAC;YACH,IAAI,IAAI;gBACN,IAAI,GAAG,cAAc,CACnB,IAAI,EACJ,KAAK,EAAE,IAAI,EAAE,EAAE;oBACb,MAAM,OAAO,CAAC,UAAU,CAAC;wBACvB,EAAE,IAAI,EAAE,SAAS,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;qBAC3D,CAAC,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;wBAC9C,IAAI;wBACJ,OAAO,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC,OAAO,KAAK,CAAC,SAAS,CAAC,EAAE;qBAC5D,CAAC,CAAC;oBACH,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC;wBACzB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,wCAAwC,CACzC,CAAC;gBACN,CAAC,EACD,CAAC,KAAK,EAAE,EAAE;oBACR,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC;wBAClC,YAAY,GAAG,IAAI,YAAY,CAC7B,UAAU,EACV,kCAAkC,EAClC,EAAE,EACF,KAAK,CACN,CAAC;gBACN,CAAC,EACD,GAAG,EAAE,CACH,OAAO,CAAC,UAAU,CAAC;oBACjB,EAAE,IAAI,EAAE,SAAS,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;iBAC1D,CAAC,CACL,CAAC;YACJ,IAAI,CAAC;gBACH,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;oBAC1D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC;oBAC3B,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,QAAQ;wBAAE,SAAS;oBAC3D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAClD,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,CAAC,CACjE,CAAC;oBACF,OAAO,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACvD,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;gBACrB,IAAI,YAAY;oBAAE,MAAM,YAAY,CAAC;gBACrC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,GAAG,MAAM,EAAE,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,YAAY,IAAI,KAAK,KAAK,YAAY;oBAAE,MAAM,KAAK,CAAC;gBACxD,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE;oBAC5B,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC,aAAa,CAAC,cAAc,CAAC;iBAC/D,CAAC,CAAC;gBACH,6EAA6E;gBAC7E,IAAI,IAAI;oBACN,MAAM,OAAO;yBACV,UAAU,CAAC;wBACV,GAAG,EAAE,IAAI;wBACT,IAAI,EAAE;4BACJ,IAAI;4BACJ,qBAAqB,KAAK,CAAC,OAAO,CAAC,uBAAuB;yBAC3D;wBACD,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;qBAChC,CAAC;yBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5B,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,MAAM,KAAK,SAAS;gBACtB,MAAM,OAAO;qBACV,UAAU,CAAC,IAAI,EAAE;oBAChB,IAAI;oBACJ,SAAS;oBACT,SAAS,GAAG,QAAQ;oBACpB,SAAS,GAAG,SAAS;oBACrB,OAAO;iBACR,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC","sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { quote } from \"../infrastructure/process.ts\";\nimport { reportInputFailure } from \"../infrastructure/input-failure.ts\";\nimport { cloudDefaults } from \"./cloud.constants.ts\";\nimport {\n  cloudInputFeed,\n  cloudInputFrames,\n  cloudInputProgram,\n} from \"./cloud-input.ts\";\nimport type { CloudInputFeed } from \"./cloud-input.types.ts\";\nimport type { VercelRuntime } from \"./vercel.types.ts\";\n\nexport function vercelCommand(runtime: VercelRuntime): SandboxLease[\"invoke\"] {\n  const { sandbox, root, options, context, isClosed } = runtime;\n  return async (command) => {\n    if (isClosed())\n      throw new OutpostError(\"provider\", \"Cloud sandbox is closed\");\n    if (command.interactive)\n      throw new OutpostError(\n        \"provider\",\n        \"Interactive terminals require a mounted or local provider\",\n      );\n    const signal = command.signal\n      ? AbortSignal.any([\n          command.signal,\n          AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs),\n        ])\n      : AbortSignal.timeout(command.deadlineMs ?? cloudDefaults.deadlineMs);\n    signal.throwIfAborted();\n    const inputPath = `/tmp/outpost-${randomUUID()}.stdin`;\n    const pidPath = `${inputPath}.pid`;\n    const live = command.input;\n    const staged = live ? cloudInputFrames(command.stdin) : command.stdin;\n    if (staged !== undefined)\n      await sandbox.writeFiles([\n        { path: inputPath, content: Buffer.from(staged) },\n      ]);\n    const output = { stdout: \"\", stderr: \"\" };\n    const program = [command.executable, ...(command.arguments ?? [])]\n      .map(quote)\n      .join(\" \");\n    const { cmd, args } = live\n      ? {\n          cmd: \"setsid\",\n          args: [\n            \"--wait\",\n            \"sh\",\n            \"-c\",\n            `echo $$ > ${quote(pidPath)}; exec ${cloudInputProgram(inputPath, program)}`,\n          ],\n        }\n      : command.stdin === undefined\n        ? { cmd: command.executable, args: [...(command.arguments ?? [])] }\n        : {\n            cmd: \"sh\",\n            args: [\"-c\", `exec ${program} < ${quote(inputPath)}`],\n          };\n    const stopped = signal;\n    let inputFailure: OutpostError | undefined;\n    let feed: CloudInputFeed | undefined;\n    try {\n      const running = await sandbox.runCommand({\n        cmd,\n        args,\n        cwd: command.directory ?? root,\n        env: { ...context.variables, ...command.variables },\n        sudo: command.elevated ?? false,\n        detached: true,\n        signal: stopped,\n        timeoutMs: command.deadlineMs ?? cloudDefaults.deadlineMs,\n      });\n      if (live)\n        feed = cloudInputFeed(\n          live,\n          async (line) => {\n            await sandbox.writeFiles([\n              { path: inputPath + \".chunk\", content: Buffer.from(line) },\n            ]);\n            const appended = await sandbox.runCommand(\"sh\", [\n              \"-c\",\n              `cat ${quote(inputPath + \".chunk\")} >> ${quote(inputPath)}`,\n            ]);\n            if (appended.exitCode !== 0)\n              throw new OutpostError(\n                \"provider\",\n                \"Cloud live input could not be appended\",\n              );\n          },\n          (cause) => {\n            if (!reportInputFailure(live, cause))\n              inputFailure = new OutpostError(\n                \"steering\",\n                \"Cloud live input delivery failed\",\n                {},\n                cause,\n              );\n          },\n          () =>\n            sandbox.writeFiles([\n              { path: inputPath + \".closed\", content: Buffer.alloc(0) },\n            ]),\n        );\n      try {\n        for await (const log of running.logs({ signal: stopped })) {\n          const channel = log.stream;\n          if (channel !== \"stdout\" && channel !== \"stderr\") continue;\n          output[channel] = (output[channel] + log.data).slice(\n            -(command.retain ?? options.retain ?? cloudDefaults.retainBytes),\n          );\n          command.observe?.(channel, log.data);\n        }\n        const result = await running.wait({ signal: stopped });\n        await feed?.finish();\n        if (inputFailure) throw inputFailure;\n        return { status: result.exitCode, ...output };\n      } catch (cause) {\n        if (inputFailure && cause === inputFailure) throw cause;\n        await running.kill(\"SIGKILL\", {\n          abortSignal: AbortSignal.timeout(cloudDefaults.cancellationMs),\n        });\n        // The input wrapper runs the agent as a child; stop its whole process group.\n        if (live)\n          await sandbox\n            .runCommand({\n              cmd: \"sh\",\n              args: [\n                \"-c\",\n                `kill -KILL -$(cat ${quote(pidPath)}) 2>/dev/null || true`,\n              ],\n              sudo: command.elevated ?? false,\n            })\n            .catch(() => undefined);\n        throw cause;\n      }\n    } finally {\n      await feed?.finish();\n      if (staged !== undefined)\n        await sandbox\n          .runCommand(\"rm\", [\n            \"-f\",\n            inputPath,\n            inputPath + \".chunk\",\n            inputPath + \".closed\",\n            pidPath,\n          ])\n          .catch(() => undefined);\n    }\n  };\n}\n"]}

package/dist/providers/vercel.js

@@ -33,15 +33,17 @@ export function createVercelSandboxProvider(options = {}, connect = async (confi
             let releasing;
             let saveCaches = async () => { };
             let unregister = () => { };
-            const release = () => (releasing ??= releaseCloudSandbox(() => saveCaches(), async () => {
-                await sandbox.stop();
-                closed = true;
-                unregister();
-            }).catch((error) => {
-                if (!closed)
-                    releasing = undefined;
-                throw error;
-            }));
+            const release = () => closed
+                ? Promise.resolve()
+                : (releasing ??= releaseCloudSandbox(() => saveCaches(), async () => {
+                    await sandbox.stop();
+                    closed = true;
+                    unregister();
+                }).catch((error) => {
+                    if (!closed)
+                        releasing = undefined;
+                    throw error;
+                }));
             unregister = registerCleanup(release);
             let home;
             try {

package/dist/providers/vercel.js.map

@@ -1 +1 @@
-{"version":3,"file":"vercel.js","sourceRoot":"","sources":["../../src/providers/vercel.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAMnE,MAAM,UAAU,2BAA2B,CACzC,UAAyB,EAAE,EAC3B,UAAiE,KAAK,EACpE,MAAM,EACN,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IAE7D,SAAS,CACP,OAAO,CAAC,cAAc,KAAK,SAAS;QAClC,OAAO,CAAC,cAAc,KAAK,UAAU,EACvC,wCAAwC,CACzC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAyC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3E,OAAO,yBAAyB,CAAC;QAC/B,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;gBAC5B,GAAG,MAAM;gBACT,GAAG,CAAC,aAAa,KAAK,SAAS;oBAC7B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;gBACtD,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;aAC7C,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;YAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,SAAoC,CAAC;YACzC,IAAI,UAAU,GAAwB,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;YACrD,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,SAAS,KAAK,mBAAmB,CAChC,GAAG,EAAE,CAAC,UAAU,EAAE,EAClB,KAAK,IAAI,EAAE;gBACT,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,MAAM,GAAG,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC;YACf,CAAC,CACF,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChB,IAAI,CAAC,MAAM;oBAAE,SAAS,GAAG,SAAS,CAAC;gBACnC,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC,CAAC;YACN,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACrC,IAAI,GAAG,CACL,MAAM,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAChE,CAAC,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBACvB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,kDAAkD,CACnD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG;gBACZ,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,aAAa,CAAC;oBACpB,OAAO;oBACP,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,WAAW,CAAC,OAAO,CAAC;gBACvB,OAAO;aACR,CAAC;YACF,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,kBAAkB,CACnC,KAAK,EACL,MAAM,EACN,OAAO,EACP,IAAI,CAAC,SAAS,CAAC;oBACb,QAAQ;oBACR,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,IAAI,iCAAiC;oBACnE,MAAM,CAAC,MAAM,IAAI,IAAI;iBACtB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  prepareCloudCaches,\n  validateCloudCaches,\n  releaseCloudSandbox,\n} from \"./cloud-cache.ts\";\nimport type { Sandbox } from \"@vercel/sandbox\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { fileBatches } from \"./file-batches.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cloudRoots } from \"./cloud.constants.ts\";\nimport { vercelCommand } from \"./vercel-command.ts\";\nimport { vercelNetworkPolicy } from \"./vercel-network.ts\";\nimport { vercelDirectory } from \"./vercel-directory.ts\";\nimport { vercelFiles } from \"./vercel-files.ts\";\nimport type { VercelOptions } from \"./vercel.types.ts\";\nimport { withTransferredWorkspaces } from \"./workspace-context.ts\";\n\nexport type { CloudDependencyCache } from \"./cloud-cache.types.ts\";\n\nexport type { VercelOptions } from \"./vercel.types.ts\";\n\nexport function createVercelSandboxProvider(\n  options: VercelOptions = {},\n  connect: (config: VercelOptions[\"create\"]) => Promise<Sandbox> = async (\n    config,\n  ) => (await import(\"@vercel/sandbox\")).Sandbox.create(config),\n): SandboxProvider {\n  invariant(\n    options.repositoryMode === undefined ||\n      options.repositoryMode === \"isolated\",\n    \"Vercel repositoryMode must be isolated\",\n  );\n  const caches = (options.caches ?? []).map((cache) => ({ ...cache }));\n  validateCloudCaches(caches);\n  const networkPolicy = vercelNetworkPolicy(options);\n  const create: NonNullable<VercelOptions[\"create\"]> = { ...options.create };\n  return withTransferredWorkspaces({\n    name: \"vercel\",\n    placement: \"remote\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const sandbox = await connect({\n        ...create,\n        ...(networkPolicy === undefined\n          ? {}\n          : { networkPolicy: structuredClone(networkPolicy) }),\n        env: { ...create.env, ...context.variables },\n      });\n      const root = options.root ?? cloudRoots.vercel;\n      let closed = false;\n      let releasing: Promise<void> | undefined;\n      let saveCaches: () => Promise<void> = async () => {};\n      let unregister = () => {};\n      const release = () =>\n        (releasing ??= releaseCloudSandbox(\n          () => saveCaches(),\n          async () => {\n            await sandbox.stop();\n            closed = true;\n            unregister();\n          },\n        ).catch((error) => {\n          if (!closed) releasing = undefined;\n          throw error;\n        }));\n      unregister = registerCleanup(release);\n      let home: string;\n      try {\n        await vercelDirectory(sandbox, root);\n        home = (\n          await (await sandbox.runCommand(\"printenv\", [\"HOME\"])).stdout()\n        ).trim();\n        if (!home.startsWith(\"/\"))\n          throw new OutpostError(\n            \"provider\",\n            \"Cloud sandbox returned an invalid home directory\",\n          );\n      } catch (cause) {\n        await release();\n        throw cause;\n      }\n      const lease = {\n        root,\n        home,\n        invoke: vercelCommand({\n          sandbox,\n          root,\n          options,\n          context,\n          isClosed: () => closed,\n        }),\n        ...vercelFiles(sandbox),\n        release,\n      };\n      try {\n        saveCaches = await prepareCloudCaches(\n          lease,\n          caches,\n          context,\n          JSON.stringify([\n            \"vercel\",\n            create.runtime ?? create.image ?? \"vercel/sandbox/universal:latest\",\n            create.source ?? null,\n          ]),\n        );\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Cloud cache setup and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      return { ...lease, liveInput: true, fileTransfers: fileBatches(lease) };\n    },\n  });\n}\n\nexport type { EgressPolicy } from \"../domain/egress.types.ts\";\n"]}
+{"version":3,"file":"vercel.js","sourceRoot":"","sources":["../../src/providers/vercel.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAC;AAMnE,MAAM,UAAU,2BAA2B,CACzC,UAAyB,EAAE,EAC3B,UAAiE,KAAK,EACpE,MAAM,EACN,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IAE7D,SAAS,CACP,OAAO,CAAC,cAAc,KAAK,SAAS;QAClC,OAAO,CAAC,cAAc,KAAK,UAAU,EACvC,wCAAwC,CACzC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAyC,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAC3E,OAAO,yBAAyB,CAAC;QAC/B,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;gBAC5B,GAAG,MAAM;gBACT,GAAG,CAAC,aAAa,KAAK,SAAS;oBAC7B,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;gBACtD,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;aAC7C,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;YAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,SAAoC,CAAC;YACzC,IAAI,UAAU,GAAwB,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;YACrD,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM;gBACJ,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE;gBACnB,CAAC,CAAC,CAAC,SAAS,KAAK,mBAAmB,CAChC,GAAG,EAAE,CAAC,UAAU,EAAE,EAClB,KAAK,IAAI,EAAE;oBACT,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;oBACrB,MAAM,GAAG,IAAI,CAAC;oBACd,UAAU,EAAE,CAAC;gBACf,CAAC,CACF,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;oBAChB,IAAI,CAAC,MAAM;wBAAE,SAAS,GAAG,SAAS,CAAC;oBACnC,MAAM,KAAK,CAAC;gBACd,CAAC,CAAC,CAAC,CAAC;YACV,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACrC,IAAI,GAAG,CACL,MAAM,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAChE,CAAC,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBACvB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,kDAAkD,CACnD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG;gBACZ,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,aAAa,CAAC;oBACpB,OAAO;oBACP,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,WAAW,CAAC,OAAO,CAAC;gBACvB,OAAO;aACR,CAAC;YACF,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,kBAAkB,CACnC,KAAK,EACL,MAAM,EACN,OAAO,EACP,IAAI,CAAC,SAAS,CAAC;oBACb,QAAQ;oBACR,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,IAAI,iCAAiC;oBACnE,MAAM,CAAC,MAAM,IAAI,IAAI;iBACtB,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC;oBACH,MAAM,OAAO,EAAE,CAAC;gBAClB,CAAC;gBAAC,OAAO,OAAO,EAAE,CAAC;oBACjB,MAAM,IAAI,cAAc,CACtB,CAAC,KAAK,EAAE,OAAO,CAAC,EAChB,sCAAsC,CACvC,CAAC;gBACJ,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1E,CAAC;KACF,CAAC,CAAC;AACL,CAAC","sourcesContent":["import {\n  prepareCloudCaches,\n  validateCloudCaches,\n  releaseCloudSandbox,\n} from \"./cloud-cache.ts\";\nimport type { Sandbox } from \"@vercel/sandbox\";\nimport { invariant, OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { fileBatches } from \"./file-batches.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cloudRoots } from \"./cloud.constants.ts\";\nimport { vercelCommand } from \"./vercel-command.ts\";\nimport { vercelNetworkPolicy } from \"./vercel-network.ts\";\nimport { vercelDirectory } from \"./vercel-directory.ts\";\nimport { vercelFiles } from \"./vercel-files.ts\";\nimport type { VercelOptions } from \"./vercel.types.ts\";\nimport { withTransferredWorkspaces } from \"./workspace-context.ts\";\n\nexport type { CloudDependencyCache } from \"./cloud-cache.types.ts\";\n\nexport type { VercelOptions } from \"./vercel.types.ts\";\n\nexport function createVercelSandboxProvider(\n  options: VercelOptions = {},\n  connect: (config: VercelOptions[\"create\"]) => Promise<Sandbox> = async (\n    config,\n  ) => (await import(\"@vercel/sandbox\")).Sandbox.create(config),\n): SandboxProvider {\n  invariant(\n    options.repositoryMode === undefined ||\n      options.repositoryMode === \"isolated\",\n    \"Vercel repositoryMode must be isolated\",\n  );\n  const caches = (options.caches ?? []).map((cache) => ({ ...cache }));\n  validateCloudCaches(caches);\n  const networkPolicy = vercelNetworkPolicy(options);\n  const create: NonNullable<VercelOptions[\"create\"]> = { ...options.create };\n  return withTransferredWorkspaces({\n    name: \"vercel\",\n    placement: \"remote\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const sandbox = await connect({\n        ...create,\n        ...(networkPolicy === undefined\n          ? {}\n          : { networkPolicy: structuredClone(networkPolicy) }),\n        env: { ...create.env, ...context.variables },\n      });\n      const root = options.root ?? cloudRoots.vercel;\n      let closed = false;\n      let releasing: Promise<void> | undefined;\n      let saveCaches: () => Promise<void> = async () => {};\n      let unregister = () => {};\n      const release = () =>\n        closed\n          ? Promise.resolve()\n          : (releasing ??= releaseCloudSandbox(\n              () => saveCaches(),\n              async () => {\n                await sandbox.stop();\n                closed = true;\n                unregister();\n              },\n            ).catch((error) => {\n              if (!closed) releasing = undefined;\n              throw error;\n            }));\n      unregister = registerCleanup(release);\n      let home: string;\n      try {\n        await vercelDirectory(sandbox, root);\n        home = (\n          await (await sandbox.runCommand(\"printenv\", [\"HOME\"])).stdout()\n        ).trim();\n        if (!home.startsWith(\"/\"))\n          throw new OutpostError(\n            \"provider\",\n            \"Cloud sandbox returned an invalid home directory\",\n          );\n      } catch (cause) {\n        await release();\n        throw cause;\n      }\n      const lease = {\n        root,\n        home,\n        invoke: vercelCommand({\n          sandbox,\n          root,\n          options,\n          context,\n          isClosed: () => closed,\n        }),\n        ...vercelFiles(sandbox),\n        release,\n      };\n      try {\n        saveCaches = await prepareCloudCaches(\n          lease,\n          caches,\n          context,\n          JSON.stringify([\n            \"vercel\",\n            create.runtime ?? create.image ?? \"vercel/sandbox/universal:latest\",\n            create.source ?? null,\n          ]),\n        );\n      } catch (cause) {\n        try {\n          await release();\n        } catch (cleanup) {\n          throw new AggregateError(\n            [cause, cleanup],\n            \"Cloud cache setup and cleanup failed\",\n          );\n        }\n        throw cause;\n      }\n      return { ...lease, liveInput: true, fileTransfers: fileBatches(lease) };\n    },\n  });\n}\n\nexport type { EgressPolicy } from \"../domain/egress.types.ts\";\n"]}

package/dist/testing.d.ts

@@ -1,4 +1,4 @@
-export { scriptedAgent } from "./adapters/testing/scripted-agent.ts";
+export { createScriptedAgent, scriptedAgent, } from "./adapters/testing/scripted-agent.ts";
 export type { ScriptedAgentOptions, ScriptedTurn, ScriptedCommit, } from "./adapters/testing/scripted-agent.types.ts";
 export { createMemorySandboxProvider } from "./providers/memory.ts";
 export type { MemorySandboxOptions, MemoryCommand, } from "./providers/memory.types.ts";

package/dist/testing.js

@@ -1,3 +1,3 @@
-export { scriptedAgent } from "./adapters/testing/scripted-agent.js";
+export { createScriptedAgent, scriptedAgent, } from "./adapters/testing/scripted-agent.js";
 export { createMemorySandboxProvider } from "./providers/memory.js";
 //# sourceMappingURL=testing.js.map

package/dist/testing.js.map

@@ -1 +1 @@
-{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAMrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC","sourcesContent":["export { scriptedAgent } from \"./adapters/testing/scripted-agent.ts\";\nexport type {\n  ScriptedAgentOptions,\n  ScriptedTurn,\n  ScriptedCommit,\n} from \"./adapters/testing/scripted-agent.types.ts\";\nexport { createMemorySandboxProvider } from \"./providers/memory.ts\";\nexport type {\n  MemorySandboxOptions,\n  MemoryCommand,\n} from \"./providers/memory.types.ts\";\n"]}
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../src/testing.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,aAAa,GACd,MAAM,sCAAsC,CAAC;AAM9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC","sourcesContent":["export {\n  createScriptedAgent,\n  scriptedAgent,\n} from \"./adapters/testing/scripted-agent.ts\";\nexport type {\n  ScriptedAgentOptions,\n  ScriptedTurn,\n  ScriptedCommit,\n} from \"./adapters/testing/scripted-agent.types.ts\";\nexport { createMemorySandboxProvider } from \"./providers/memory.ts\";\nexport type {\n  MemorySandboxOptions,\n  MemoryCommand,\n} from \"./providers/memory.types.ts\";\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elie-laloum/outpost",
-  "version": "11.1.2",
+  "version": "11.2.0",
   "description": "Programmable sandboxes, coding agents and typed workflows.",
   "type": "module",
   "license": "MIT",
@@ -111,7 +111,7 @@
     "format:check": "prettier --check .",
     "prepack": "bun run build",
     "test:package": "node scripts/package-smoke.mjs",
-    "test:container": "node --test test/container.test.ts",
+    "test:container": "node --test test/container.test.ts test/session-bundles-container.test.ts",
     "architecture": "node scripts/check-architecture.mjs",
     "docs:sync": "bun run build && node scripts/recipe-component-docs.mjs --write && node docs/scripts/sync-reference.mjs",
     "docs:check": "node scripts/recipe-component-docs.mjs && node docs/scripts/sync-reference.mjs --check && bun run --cwd docs check",