@elie-laloum/outpost 2.0.0 → 4.0.0

package/dist/providers/vercel-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"vercel-files.js","sourceRoot":"","sources":["../../src/providers/vercel-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG5D,MAAM,UAAU,WAAW,CACzB,OAAiC;IAEjC,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YAC5C,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,UAAU,CACd,MAAM,EACN,WAAW,EACX,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAC1D,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBACrB,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;wBAC5C,IAAI;wBACJ,IAAI;wBACJ,MAAM;wBACN,IAAI;qBACL,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;wBACvB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;gBAChE,CAAC,EACD,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;oBAC9B,IAAI,SAAS;wBAAE,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;wBAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAChB,IAAI;qBACL,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;wBACvB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,uCAAuC,CACxC,CAAC;gBACN,CAAC,EACD,MAAM,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YAC9C,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;oBAC/C,IAAI;oBACJ,cAAc;oBACd,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;oBACxB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,uCAAuC,CACxC,CAAC;gBACJ,MAAM,YAAY,CAChB,MAAM,EACN,WAAW,EACX,MAAM,OAAO,CAAC,MAAM,EAAE,EACtB,KAAK,EAAE,IAAI,EAAE,EAAE;oBACb,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;oBAChD,IAAI,CAAC,MAAM;wBACT,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,2BAA2B,IAAI,EAAE,CAClC,CAAC;oBACJ,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;wBAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBACnE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC,EACD,MAAM,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { posix } from \"node:path\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\nimport { manifestScript } from \"./cloud-files.constants.ts\";\nimport { downloadTree, uploadTree } from \"./cloud-files.ts\";\nimport type { VercelRuntime } from \"./vercel.types.ts\";\n\nexport function vercelFiles(\n  sandbox: VercelRuntime[\"sandbox\"],\n): Pick<SandboxLease, \"upload\" | \"download\"> {\n  return {\n    async upload(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        await uploadTree(\n          source,\n          destination,\n          (path, content) => sandbox.writeFiles([{ path, content }]),\n          async (target, path) => {\n            await sandbox.mkDir(posix.dirname(path));\n            const result = await sandbox.runCommand(\"ln\", [\n              \"-s\",\n              \"--\",\n              target,\n              path,\n            ]);\n            if (result.exitCode !== 0)\n              throw new OutpostError(\"provider\", \"Symlink upload failed\");\n          },\n          async (path, directory, mode) => {\n            if (directory) await sandbox.mkDir(path);\n            const result = await sandbox.runCommand(\"chmod\", [\n              mode.toString(8),\n              path,\n            ]);\n            if (result.exitCode !== 0)\n              throw new OutpostError(\n                \"provider\",\n                \"Transfer permissions could not be set\",\n              );\n          },\n          signal,\n        );\n      });\n    },\n    async download(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        const listing = await sandbox.runCommand(\"node\", [\n          \"-e\",\n          manifestScript,\n          source,\n        ]);\n        if (listing.exitCode !== 0)\n          throw new OutpostError(\n            \"provider\",\n            \"Remote transfer source is unavailable\",\n          );\n        await downloadTree(\n          source,\n          destination,\n          await listing.stdout(),\n          async (path) => {\n            const stream = await sandbox.readFile({ path });\n            if (!stream)\n              throw new OutpostError(\n                \"provider\",\n                `Remote file is missing: ${path}`,\n              );\n            const chunks: Buffer[] = [];\n            for await (const chunk of stream)\n              chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n            return Buffer.concat(chunks);\n          },\n          signal,\n        );\n      });\n    },\n  };\n}\n"]}
+{"version":3,"file":"vercel-files.js","sourceRoot":"","sources":["../../src/providers/vercel-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,MAAM,+BAA+B,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGxD,MAAM,UAAU,WAAW,CACzB,OAAiC;IAEjC,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YAC5C,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,UAAU,CACd,MAAM,EACN,WAAW,EACX,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAC1D,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;oBACrB,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;oBACpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE;wBAC5C,IAAI;wBACJ,IAAI;wBACJ,MAAM;wBACN,IAAI;qBACL,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;wBACvB,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;gBAChE,CAAC,EACD,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;oBAC9B,IAAI,SAAS;wBAAE,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;oBACpD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,OAAO,EAAE;wBAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;wBAChB,IAAI;qBACL,CAAC,CAAC;oBACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;wBACvB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,uCAAuC,CACxC,CAAC;gBACN,CAAC,EACD,MAAM,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,GAAG,EAAE;YAC9C,OAAO,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;gBACxC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE;oBAC/C,IAAI;oBACJ,cAAc;oBACd,MAAM;iBACP,CAAC,CAAC;gBACH,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC;oBACxB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,uCAAuC,CACxC,CAAC;gBACJ,MAAM,YAAY,CAChB,MAAM,EACN,WAAW,EACX,MAAM,OAAO,CAAC,MAAM,EAAE,EACtB,KAAK,EAAE,IAAI,EAAE,EAAE;oBACb,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;oBAChD,IAAI,CAAC,MAAM;wBACT,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,2BAA2B,IAAI,EAAE,CAClC,CAAC;oBACJ,MAAM,MAAM,GAAa,EAAE,CAAC;oBAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;wBAC9B,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBACnE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC/B,CAAC,EACD,MAAM,CACP,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { posix } from \"node:path\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxLease } from \"../domain/sandbox.types.ts\";\nimport { transfer } from \"../infrastructure/transfer.ts\";\nimport { manifestScript } from \"./cloud-files.constants.ts\";\nimport { downloadTree, uploadTree } from \"./cloud-files.ts\";\nimport { vercelDirectory } from \"./vercel-directory.ts\";\nimport type { VercelRuntime } from \"./vercel.types.ts\";\n\nexport function vercelFiles(\n  sandbox: VercelRuntime[\"sandbox\"],\n): Pick<SandboxLease, \"upload\" | \"download\"> {\n  return {\n    async upload(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        await uploadTree(\n          source,\n          destination,\n          (path, content) => sandbox.writeFiles([{ path, content }]),\n          async (target, path) => {\n            await vercelDirectory(sandbox, posix.dirname(path));\n            const result = await sandbox.runCommand(\"ln\", [\n              \"-s\",\n              \"--\",\n              target,\n              path,\n            ]);\n            if (result.exitCode !== 0)\n              throw new OutpostError(\"provider\", \"Symlink upload failed\");\n          },\n          async (path, directory, mode) => {\n            if (directory) await vercelDirectory(sandbox, path);\n            const result = await sandbox.runCommand(\"chmod\", [\n              mode.toString(8),\n              path,\n            ]);\n            if (result.exitCode !== 0)\n              throw new OutpostError(\n                \"provider\",\n                \"Transfer permissions could not be set\",\n              );\n          },\n          signal,\n        );\n      });\n    },\n    async download(source, destination, options = {}) {\n      return transfer(options, async (signal) => {\n        const listing = await sandbox.runCommand(\"node\", [\n          \"-e\",\n          manifestScript,\n          source,\n        ]);\n        if (listing.exitCode !== 0)\n          throw new OutpostError(\n            \"provider\",\n            \"Remote transfer source is unavailable\",\n          );\n        await downloadTree(\n          source,\n          destination,\n          await listing.stdout(),\n          async (path) => {\n            const stream = await sandbox.readFile({ path });\n            if (!stream)\n              throw new OutpostError(\n                \"provider\",\n                `Remote file is missing: ${path}`,\n              );\n            const chunks: Buffer[] = [];\n            for await (const chunk of stream)\n              chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));\n            return Buffer.concat(chunks);\n          },\n          signal,\n        );\n      });\n    },\n  };\n}\n"]}

package/dist/providers/vercel-network.d.ts

@@ -0,0 +1,2 @@
+import type { VercelOptions } from "./vercel.types.ts";
+export declare function vercelNetworkPolicy(options: VercelOptions): NonNullable<VercelOptions["create"]>["networkPolicy"];

package/dist/providers/vercel-network.js

@@ -0,0 +1,18 @@
+import { validateEgress } from "../domain/egress.js";
+import { invariant } from "../domain/errors.js";
+export function vercelNetworkPolicy(options) {
+    const policy = validateEgress(options.egress);
+    if (!policy)
+        return options.create?.networkPolicy;
+    invariant(options.create?.networkPolicy === undefined, "Use egress or create.networkPolicy, not both");
+    if (policy.mode === "deny-all")
+        return "deny-all";
+    return {
+        allow: [...(policy.domains ?? [])],
+        subnets: {
+            allow: [...(policy.allowCidrs ?? [])],
+            deny: [...(policy.denyCidrs ?? [])],
+        },
+    };
+}
+//# sourceMappingURL=vercel-network.js.map

package/dist/providers/vercel-network.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-network.js","sourceRoot":"","sources":["../../src/providers/vercel-network.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAGhD,MAAM,UAAU,mBAAmB,CACjC,OAAsB;IAEtB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC;IAClD,SAAS,CACP,OAAO,CAAC,MAAM,EAAE,aAAa,KAAK,SAAS,EAC3C,8CAA8C,CAC/C,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,UAAU,CAAC;IAClD,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAClC,OAAO,EAAE;YACP,KAAK,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;SACpC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { validateEgress } from \"../domain/egress.ts\";\nimport { invariant } from \"../domain/errors.ts\";\nimport type { VercelOptions } from \"./vercel.types.ts\";\n\nexport function vercelNetworkPolicy(\n  options: VercelOptions,\n): NonNullable<VercelOptions[\"create\"]>[\"networkPolicy\"] {\n  const policy = validateEgress(options.egress);\n  if (!policy) return options.create?.networkPolicy;\n  invariant(\n    options.create?.networkPolicy === undefined,\n    \"Use egress or create.networkPolicy, not both\",\n  );\n  if (policy.mode === \"deny-all\") return \"deny-all\";\n  return {\n    allow: [...(policy.domains ?? [])],\n    subnets: {\n      allow: [...(policy.allowCidrs ?? [])],\n      deny: [...(policy.denyCidrs ?? [])],\n    },\n  };\n}\n"]}

package/dist/providers/vercel.d.ts

@@ -3,3 +3,4 @@ import type { SandboxProvider } from "../domain/sandbox.types.ts";
 import type { VercelOptions } from "./vercel.types.ts";
 export type { VercelOptions } from "./vercel.types.ts";
 export declare function vercel(options?: VercelOptions, connect?: (config: VercelOptions["create"]) => Promise<Sandbox>): SandboxProvider;
+export type { EgressPolicy } from "../domain/egress.types.ts";

package/dist/providers/vercel.js

@@ -1,9 +1,13 @@
 import { OutpostError } from "../domain/errors.js";
+import { fileBatches } from "./file-batches.js";
 import { registerCleanup } from "../infrastructure/shutdown.js";
 import { cloudRoots } from "./cloud.constants.js";
 import { vercelCommand } from "./vercel-command.js";
+import { vercelNetworkPolicy } from "./vercel-network.js";
+import { vercelDirectory } from "./vercel-directory.js";
 import { vercelFiles } from "./vercel-files.js";
 export function vercel(options = {}, connect = async (config) => (await import("@vercel/sandbox")).Sandbox.create(config)) {
+    const networkPolicy = vercelNetworkPolicy(options);
     return {
         name: "vercel",
         placement: "remote",
@@ -12,6 +16,7 @@ export function vercel(options = {}, connect = async (config) => (await import("
             context.signal?.throwIfAborted();
             const sandbox = await connect({
                 ...options.create,
+                ...(networkPolicy === undefined ? {} : { networkPolicy }),
                 env: { ...options.create?.env, ...context.variables },
             });
             const root = options.root ?? cloudRoots.vercel;
@@ -31,7 +36,7 @@ export function vercel(options = {}, connect = async (config) => (await import("
             unregister = registerCleanup(release);
             let home;
             try {
-                await sandbox.mkDir(root);
+                await vercelDirectory(sandbox, root);
                 home = (await (await sandbox.runCommand("printenv", ["HOME"])).stdout()).trim();
                 if (!home.startsWith("/"))
                     throw new OutpostError("provider", "Cloud sandbox returned an invalid home directory");
@@ -40,7 +45,7 @@ export function vercel(options = {}, connect = async (config) => (await import("
                 await release();
                 throw cause;
             }
-            return {
+            const lease = {
                 root,
                 home,
                 invoke: vercelCommand({
@@ -53,6 +58,7 @@ export function vercel(options = {}, connect = async (config) => (await import("
                 ...vercelFiles(sandbox),
                 release,
             };
+            return { ...lease, fileTransfers: fileBatches(lease) };
         },
     };
 }

package/dist/providers/vercel.js.map

@@ -1 +1 @@
-{"version":3,"file":"vercel.js","sourceRoot":"","sources":["../../src/providers/vercel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKhD,MAAM,UAAU,MAAM,CACpB,UAAyB,EAAE,EAC3B,UAAiE,KAAK,EACpE,MAAM,EACN,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IAE7D,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;gBAC5B,GAAG,OAAO,CAAC,MAAM;gBACjB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;aACtD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;YAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,SAAoC,CAAC;YACzC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,SAAS,KAAK,OAAO;iBACnB,IAAI,EAAE;iBACN,IAAI,CAAC,GAAG,EAAE;gBACT,MAAM,GAAG,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC;YACf,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,SAAS,GAAG,SAAS,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC,CAAC;YACR,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC1B,IAAI,GAAG,CACL,MAAM,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAChE,CAAC,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBACvB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,kDAAkD,CACnD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO;gBACL,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,aAAa,CAAC;oBACpB,OAAO;oBACP,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,WAAW,CAAC,OAAO,CAAC;gBACvB,OAAO;aACR,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { Sandbox } from \"@vercel/sandbox\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cloudRoots } from \"./cloud.constants.ts\";\nimport { vercelCommand } from \"./vercel-command.ts\";\nimport { vercelFiles } from \"./vercel-files.ts\";\nimport type { VercelOptions } from \"./vercel.types.ts\";\n\nexport type { VercelOptions } from \"./vercel.types.ts\";\n\nexport function vercel(\n  options: VercelOptions = {},\n  connect: (config: VercelOptions[\"create\"]) => Promise<Sandbox> = async (\n    config,\n  ) => (await import(\"@vercel/sandbox\")).Sandbox.create(config),\n): SandboxProvider {\n  return {\n    name: \"vercel\",\n    placement: \"remote\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const sandbox = await connect({\n        ...options.create,\n        env: { ...options.create?.env, ...context.variables },\n      });\n      const root = options.root ?? cloudRoots.vercel;\n      let closed = false;\n      let releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = () =>\n        (releasing ??= sandbox\n          .stop()\n          .then(() => {\n            closed = true;\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          }));\n      unregister = registerCleanup(release);\n      let home: string;\n      try {\n        await sandbox.mkDir(root);\n        home = (\n          await (await sandbox.runCommand(\"printenv\", [\"HOME\"])).stdout()\n        ).trim();\n        if (!home.startsWith(\"/\"))\n          throw new OutpostError(\n            \"provider\",\n            \"Cloud sandbox returned an invalid home directory\",\n          );\n      } catch (cause) {\n        await release();\n        throw cause;\n      }\n      return {\n        root,\n        home,\n        invoke: vercelCommand({\n          sandbox,\n          root,\n          options,\n          context,\n          isClosed: () => closed,\n        }),\n        ...vercelFiles(sandbox),\n        release,\n      };\n    },\n  };\n}\n"]}
+{"version":3,"file":"vercel.js","sourceRoot":"","sources":["../../src/providers/vercel.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAKhD,MAAM,UAAU,MAAM,CACpB,UAAyB,EAAE,EAC3B,UAAiE,KAAK,EACpE,MAAM,EACN,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;IAE7D,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,QAAQ;QACnB,SAAS,EAAE,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;QACnC,KAAK,CAAC,OAAO,CAAC,OAAO;YACnB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC;gBAC5B,GAAG,OAAO,CAAC,MAAM;gBACjB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;gBACzD,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE;aACtD,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;YAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,IAAI,SAAoC,CAAC;YACzC,IAAI,UAAU,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,CAAC,SAAS,KAAK,OAAO;iBACnB,IAAI,EAAE;iBACN,IAAI,CAAC,GAAG,EAAE;gBACT,MAAM,GAAG,IAAI,CAAC;gBACd,UAAU,EAAE,CAAC;YACf,CAAC,CAAC;iBACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACf,SAAS,GAAG,SAAS,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC,CAAC,CAAC,CAAC;YACR,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBACrC,IAAI,GAAG,CACL,MAAM,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAChE,CAAC,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBACvB,MAAM,IAAI,YAAY,CACpB,UAAU,EACV,kDAAkD,CACnD,CAAC;YACN,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,KAAK,GAAG;gBACZ,IAAI;gBACJ,IAAI;gBACJ,MAAM,EAAE,aAAa,CAAC;oBACpB,OAAO;oBACP,IAAI;oBACJ,OAAO;oBACP,OAAO;oBACP,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM;iBACvB,CAAC;gBACF,GAAG,WAAW,CAAC,OAAO,CAAC;gBACvB,OAAO;aACR,CAAC;YACF,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import type { Sandbox } from \"@vercel/sandbox\";\nimport { OutpostError } from \"../domain/errors.ts\";\nimport type { SandboxProvider } from \"../domain/sandbox.types.ts\";\nimport { fileBatches } from \"./file-batches.ts\";\nimport { registerCleanup } from \"../infrastructure/shutdown.ts\";\nimport { cloudRoots } from \"./cloud.constants.ts\";\nimport { vercelCommand } from \"./vercel-command.ts\";\nimport { vercelNetworkPolicy } from \"./vercel-network.ts\";\nimport { vercelDirectory } from \"./vercel-directory.ts\";\nimport { vercelFiles } from \"./vercel-files.ts\";\nimport type { VercelOptions } from \"./vercel.types.ts\";\n\nexport type { VercelOptions } from \"./vercel.types.ts\";\n\nexport function vercel(\n  options: VercelOptions = {},\n  connect: (config: VercelOptions[\"create\"]) => Promise<Sandbox> = async (\n    config,\n  ) => (await import(\"@vercel/sandbox\")).Sandbox.create(config),\n): SandboxProvider {\n  const networkPolicy = vercelNetworkPolicy(options);\n  return {\n    name: \"vercel\",\n    placement: \"remote\",\n    variables: { ...options.variables },\n    async acquire(context) {\n      context.signal?.throwIfAborted();\n      const sandbox = await connect({\n        ...options.create,\n        ...(networkPolicy === undefined ? {} : { networkPolicy }),\n        env: { ...options.create?.env, ...context.variables },\n      });\n      const root = options.root ?? cloudRoots.vercel;\n      let closed = false;\n      let releasing: Promise<void> | undefined;\n      let unregister = () => {};\n      const release = () =>\n        (releasing ??= sandbox\n          .stop()\n          .then(() => {\n            closed = true;\n            unregister();\n          })\n          .catch((error) => {\n            releasing = undefined;\n            throw error;\n          }));\n      unregister = registerCleanup(release);\n      let home: string;\n      try {\n        await vercelDirectory(sandbox, root);\n        home = (\n          await (await sandbox.runCommand(\"printenv\", [\"HOME\"])).stdout()\n        ).trim();\n        if (!home.startsWith(\"/\"))\n          throw new OutpostError(\n            \"provider\",\n            \"Cloud sandbox returned an invalid home directory\",\n          );\n      } catch (cause) {\n        await release();\n        throw cause;\n      }\n      const lease = {\n        root,\n        home,\n        invoke: vercelCommand({\n          sandbox,\n          root,\n          options,\n          context,\n          isClosed: () => closed,\n        }),\n        ...vercelFiles(sandbox),\n        release,\n      };\n      return { ...lease, fileTransfers: fileBatches(lease) };\n    },\n  };\n}\n\nexport type { EgressPolicy } from \"../domain/egress.types.ts\";\n"]}

package/dist/providers/vercel.types.d.ts

@@ -1,7 +1,9 @@
+import type { EgressPolicy } from "../domain/egress.types.ts";
 import type { Sandbox, Sandbox as VercelSandbox } from "@vercel/sandbox";
 import type { Variables } from "../domain/command.types.ts";
 import type { SandboxContext } from "../domain/sandbox.types.ts";
 export interface VercelOptions {
+    readonly egress?: EgressPolicy;
     readonly create?: NonNullable<Parameters<typeof Sandbox.create>[0]>;
     readonly variables?: Variables;
     readonly root?: string;

package/dist/providers/vercel.types.js.map

@@ -1 +1 @@
-{"version":3,"file":"vercel.types.js","sourceRoot":"","sources":["../../src/providers/vercel.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Sandbox, Sandbox as VercelSandbox } from \"@vercel/sandbox\";\nimport type { Variables } from \"../domain/command.types.ts\";\nimport type { SandboxContext } from \"../domain/sandbox.types.ts\";\n\nexport interface VercelOptions {\n  readonly create?: NonNullable<Parameters<typeof Sandbox.create>[0]>;\n  readonly variables?: Variables;\n  readonly root?: string;\n  readonly retain?: number;\n}\n\nexport interface VercelRuntime {\n  readonly sandbox: VercelSandbox;\n  readonly root: string;\n  readonly options: VercelOptions;\n  readonly context: SandboxContext;\n  readonly isClosed: () => boolean;\n}\n"]}
+{"version":3,"file":"vercel.types.js","sourceRoot":"","sources":["../../src/providers/vercel.types.ts"],"names":[],"mappings":"","sourcesContent":["import type { EgressPolicy } from \"../domain/egress.types.ts\";\nimport type { Sandbox, Sandbox as VercelSandbox } from \"@vercel/sandbox\";\nimport type { Variables } from \"../domain/command.types.ts\";\nimport type { SandboxContext } from \"../domain/sandbox.types.ts\";\n\nexport interface VercelOptions {\n  readonly egress?: EgressPolicy;\n  readonly create?: NonNullable<Parameters<typeof Sandbox.create>[0]>;\n  readonly variables?: Variables;\n  readonly root?: string;\n  readonly retain?: number;\n}\n\nexport interface VercelRuntime {\n  readonly sandbox: VercelSandbox;\n  readonly root: string;\n  readonly options: VercelOptions;\n  readonly context: SandboxContext;\n  readonly isClosed: () => boolean;\n}\n"]}

package/dist/providers/versions.constants.d.ts

@@ -1,4 +1,5 @@
 export declare const agentVersions: Readonly<{
+    gemini: "0.61.0";
     codex: "0.156.1";
     claude: "2.1.280";
 }>;

package/dist/providers/versions.constants.js

@@ -1,4 +1,5 @@
 export const agentVersions = Object.freeze({
+    gemini: "0.61.0",
     codex: "0.156.1",
     claude: "2.1.280",
 });

package/dist/providers/versions.constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"versions.constants.js","sourceRoot":"","sources":["../../src/providers/versions.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;CAClB,CAAC,CAAC","sourcesContent":["export const agentVersions = Object.freeze({\n  codex: \"0.156.1\",\n  claude: \"2.1.280\",\n});\n"]}
+{"version":3,"file":"versions.constants.js","sourceRoot":"","sources":["../../src/providers/versions.constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;CAClB,CAAC,CAAC","sourcesContent":["export const agentVersions = Object.freeze({\n  gemini: \"0.61.0\",\n  codex: \"0.156.1\",\n  claude: \"2.1.280\",\n});\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elie-laloum/outpost",
-  "version": "2.0.0",
+  "version": "4.0.0",
   "description": "Programmable sandboxes, coding agents and typed workflows.",
   "type": "module",
   "license": "MIT",
@@ -35,6 +35,14 @@
     "./providers/daytona": {
       "types": "./dist/providers/daytona.d.ts",
       "import": "./dist/providers/daytona.js"
+    },
+    "./opentelemetry": {
+      "types": "./dist/infrastructure/opentelemetry.d.ts",
+      "import": "./dist/infrastructure/opentelemetry.js"
+    },
+    "./providers/firecracker": {
+      "types": "./dist/providers/firecracker.d.ts",
+      "import": "./dist/providers/firecracker.js"
     }
   },
   "files": [
@@ -77,6 +85,7 @@
   },
   "peerDependencies": {
     "@daytona/sdk": "^0.216.0",
+    "@opentelemetry/api": "^1.9.0",
     "@vercel/sandbox": "^3.3.0"
   },
   "peerDependenciesMeta": {
@@ -85,10 +94,16 @@
     },
     "@vercel/sandbox": {
       "optional": true
+    },
+    "@opentelemetry/api": {
+      "optional": true
     }
   },
   "devDependencies": {
     "@daytona/sdk": "^0.216.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/sdk-metrics": "^2.0.0",
+    "@opentelemetry/sdk-trace-base": "^2.0.0",
     "@types/node": "^24.0.0",
     "@vercel/sandbox": "^3.3.0",
     "c8": "^10.1.3",