@enclave-run/sdk 0.0.0-dev.5 → 0.1.0

package/dist/index.d.mts

@@ -4130,6 +4130,14 @@ declare class OutcomeUnknownError extends SandboxError {
     readonly cause?: unknown;
     constructor(message: string, recovery: SandboxCreateRecovery, cause?: unknown);
 }
+/**
+ * The durable create operation reached an authoritative failed state after
+ * admission. The recovery identity remains available for audit and support.
+ */
+declare class SandboxCreateFailedError extends SandboxError {
+    readonly recovery: SandboxCreateRecovery;
+    constructor(message: string, recovery: SandboxCreateRecovery);
+}
 /**
  * The selected region explicitly rejected the request before admission.
  */
@@ -10383,4 +10391,4 @@ declare namespace Template {
     var toDockerfile: typeof TemplateBase.toDockerfile;
 }
 
-export { ALL_TRAFFIC, ApiClient, AuthenticationError, BuildError, type BuildInfo, type BuildOptions, type BuildStatusReason, type CommandConnectOpts, CommandExitError, CommandHandle, type CommandRequestOpts, type CommandResult, type CommandStartOpts, Commands, ConnectionConfig, type ConnectionOpts, type CopyItem, type CredentialAuditEvent, type DeactivateTemplateOptions, type EntryInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOptions, type GetTemplateActivationOptions, Git, type GitAddOpts, GitAuthError, type GitBranches, type GitCloneOpts, type GitCommitOpts, type GitConfigOpts, type GitConfigScope, type GitDangerouslyAuthenticateOpts, type GitDeleteBranchOpts, type GitFileStatus, GitHubApp, type GitHubAuditQuery, type GitHubCredentialGrant, type GitHubGrantScope, type GitHubInstallation, type GitHubInstallationCallback, type GitHubInstallationLink, type GitHubRepositoryBinding, type GitHubRepositoryBindingOpts, type GitHubRepositoryPermissions, type GitInitOpts, type GitPullOpts, type GitPushOpts, type GitRemoteAddOpts, type GitRequestOpts, type GitStatus, GitUpstreamError, IdempotencyMismatchError, InvalidArgumentError, LogEntry, LogEntryEnd, type LogEntryLevel, LogEntryStart, type Logger, type McpServer$1 as McpServer, type McpServerName, NotEnoughSpaceError, NotFoundError, OutcomeUnknownError, type ProcessInfo, Pty, type PtyOutput, RateLimitError, ReadyCmd, RegionCapacityError, Sandbox, type SandboxApiOpts, type SandboxConnectOpts, type SandboxCreateRecovery, SandboxCreateRejectedError, type SandboxCreateRejectionReason, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxListOpts, type SandboxMetrics, type SandboxMetricsOpts, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxRef, SandboxRegionScope, type SandboxState, type SandboxTarget, type SnapshotInfo, type SnapshotListOpts, SnapshotPaginator, type Stderr, type Stdout, Template, type TemplateActivationOptions, TemplateBase, type TemplateBuildStatus, type TemplateBuildStatusResponse, type TemplateBuilder, type TemplateClass, TemplateError, type TemplateRegionActivation, type TemplateTag, TemplateTagConflictError, type TemplateTagConflictReason, type TemplateTagHead, type TemplateTagHeadExpectation, type TemplateTagInfo, TimeoutError, type Username, WatchHandle, type WriteInfo, type components, Sandbox as default, defaultBuildLogger, getSignature, type paths, waitForFile, waitForPort, waitForProcess, waitForTimeout, waitForURL };
+export { ALL_TRAFFIC, ApiClient, AuthenticationError, BuildError, type BuildInfo, type BuildOptions, type BuildStatusReason, type CommandConnectOpts, CommandExitError, CommandHandle, type CommandRequestOpts, type CommandResult, type CommandStartOpts, Commands, ConnectionConfig, type ConnectionOpts, type CopyItem, type CredentialAuditEvent, type DeactivateTemplateOptions, type EntryInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOptions, type GetTemplateActivationOptions, Git, type GitAddOpts, GitAuthError, type GitBranches, type GitCloneOpts, type GitCommitOpts, type GitConfigOpts, type GitConfigScope, type GitDangerouslyAuthenticateOpts, type GitDeleteBranchOpts, type GitFileStatus, GitHubApp, type GitHubAuditQuery, type GitHubCredentialGrant, type GitHubGrantScope, type GitHubInstallation, type GitHubInstallationCallback, type GitHubInstallationLink, type GitHubRepositoryBinding, type GitHubRepositoryBindingOpts, type GitHubRepositoryPermissions, type GitInitOpts, type GitPullOpts, type GitPushOpts, type GitRemoteAddOpts, type GitRequestOpts, type GitStatus, GitUpstreamError, IdempotencyMismatchError, InvalidArgumentError, LogEntry, LogEntryEnd, type LogEntryLevel, LogEntryStart, type Logger, type McpServer$1 as McpServer, type McpServerName, NotEnoughSpaceError, NotFoundError, OutcomeUnknownError, type ProcessInfo, Pty, type PtyOutput, RateLimitError, ReadyCmd, RegionCapacityError, Sandbox, type SandboxApiOpts, type SandboxConnectOpts, SandboxCreateFailedError, type SandboxCreateRecovery, SandboxCreateRejectedError, type SandboxCreateRejectionReason, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxListOpts, type SandboxMetrics, type SandboxMetricsOpts, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxRef, SandboxRegionScope, type SandboxState, type SandboxTarget, type SnapshotInfo, type SnapshotListOpts, SnapshotPaginator, type Stderr, type Stdout, Template, type TemplateActivationOptions, TemplateBase, type TemplateBuildStatus, type TemplateBuildStatusResponse, type TemplateBuilder, type TemplateClass, TemplateError, type TemplateRegionActivation, type TemplateTag, TemplateTagConflictError, type TemplateTagConflictReason, type TemplateTagHead, type TemplateTagHeadExpectation, type TemplateTagInfo, TimeoutError, type Username, WatchHandle, type WriteInfo, type components, Sandbox as default, defaultBuildLogger, getSignature, type paths, waitForFile, waitForPort, waitForProcess, waitForTimeout, waitForURL };

package/dist/index.d.ts

@@ -4130,6 +4130,14 @@ declare class OutcomeUnknownError extends SandboxError {
     readonly cause?: unknown;
     constructor(message: string, recovery: SandboxCreateRecovery, cause?: unknown);
 }
+/**
+ * The durable create operation reached an authoritative failed state after
+ * admission. The recovery identity remains available for audit and support.
+ */
+declare class SandboxCreateFailedError extends SandboxError {
+    readonly recovery: SandboxCreateRecovery;
+    constructor(message: string, recovery: SandboxCreateRecovery);
+}
 /**
  * The selected region explicitly rejected the request before admission.
  */
@@ -10383,4 +10391,4 @@ declare namespace Template {
     var toDockerfile: typeof TemplateBase.toDockerfile;
 }
 
-export { ALL_TRAFFIC, ApiClient, AuthenticationError, BuildError, type BuildInfo, type BuildOptions, type BuildStatusReason, type CommandConnectOpts, CommandExitError, CommandHandle, type CommandRequestOpts, type CommandResult, type CommandStartOpts, Commands, ConnectionConfig, type ConnectionOpts, type CopyItem, type CredentialAuditEvent, type DeactivateTemplateOptions, type EntryInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOptions, type GetTemplateActivationOptions, Git, type GitAddOpts, GitAuthError, type GitBranches, type GitCloneOpts, type GitCommitOpts, type GitConfigOpts, type GitConfigScope, type GitDangerouslyAuthenticateOpts, type GitDeleteBranchOpts, type GitFileStatus, GitHubApp, type GitHubAuditQuery, type GitHubCredentialGrant, type GitHubGrantScope, type GitHubInstallation, type GitHubInstallationCallback, type GitHubInstallationLink, type GitHubRepositoryBinding, type GitHubRepositoryBindingOpts, type GitHubRepositoryPermissions, type GitInitOpts, type GitPullOpts, type GitPushOpts, type GitRemoteAddOpts, type GitRequestOpts, type GitStatus, GitUpstreamError, IdempotencyMismatchError, InvalidArgumentError, LogEntry, LogEntryEnd, type LogEntryLevel, LogEntryStart, type Logger, type McpServer$1 as McpServer, type McpServerName, NotEnoughSpaceError, NotFoundError, OutcomeUnknownError, type ProcessInfo, Pty, type PtyOutput, RateLimitError, ReadyCmd, RegionCapacityError, Sandbox, type SandboxApiOpts, type SandboxConnectOpts, type SandboxCreateRecovery, SandboxCreateRejectedError, type SandboxCreateRejectionReason, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxListOpts, type SandboxMetrics, type SandboxMetricsOpts, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxRef, SandboxRegionScope, type SandboxState, type SandboxTarget, type SnapshotInfo, type SnapshotListOpts, SnapshotPaginator, type Stderr, type Stdout, Template, type TemplateActivationOptions, TemplateBase, type TemplateBuildStatus, type TemplateBuildStatusResponse, type TemplateBuilder, type TemplateClass, TemplateError, type TemplateRegionActivation, type TemplateTag, TemplateTagConflictError, type TemplateTagConflictReason, type TemplateTagHead, type TemplateTagHeadExpectation, type TemplateTagInfo, TimeoutError, type Username, WatchHandle, type WriteInfo, type components, Sandbox as default, defaultBuildLogger, getSignature, type paths, waitForFile, waitForPort, waitForProcess, waitForTimeout, waitForURL };
+export { ALL_TRAFFIC, ApiClient, AuthenticationError, BuildError, type BuildInfo, type BuildOptions, type BuildStatusReason, type CommandConnectOpts, CommandExitError, CommandHandle, type CommandRequestOpts, type CommandResult, type CommandStartOpts, Commands, ConnectionConfig, type ConnectionOpts, type CopyItem, type CredentialAuditEvent, type DeactivateTemplateOptions, type EntryInfo, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOptions, type GetTemplateActivationOptions, Git, type GitAddOpts, GitAuthError, type GitBranches, type GitCloneOpts, type GitCommitOpts, type GitConfigOpts, type GitConfigScope, type GitDangerouslyAuthenticateOpts, type GitDeleteBranchOpts, type GitFileStatus, GitHubApp, type GitHubAuditQuery, type GitHubCredentialGrant, type GitHubGrantScope, type GitHubInstallation, type GitHubInstallationCallback, type GitHubInstallationLink, type GitHubRepositoryBinding, type GitHubRepositoryBindingOpts, type GitHubRepositoryPermissions, type GitInitOpts, type GitPullOpts, type GitPushOpts, type GitRemoteAddOpts, type GitRequestOpts, type GitStatus, GitUpstreamError, IdempotencyMismatchError, InvalidArgumentError, LogEntry, LogEntryEnd, type LogEntryLevel, LogEntryStart, type Logger, type McpServer$1 as McpServer, type McpServerName, NotEnoughSpaceError, NotFoundError, OutcomeUnknownError, type ProcessInfo, Pty, type PtyOutput, RateLimitError, ReadyCmd, RegionCapacityError, Sandbox, type SandboxApiOpts, type SandboxConnectOpts, SandboxCreateFailedError, type SandboxCreateRecovery, SandboxCreateRejectedError, type SandboxCreateRejectionReason, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxListOpts, type SandboxMetrics, type SandboxMetricsOpts, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxRef, SandboxRegionScope, type SandboxState, type SandboxTarget, type SnapshotInfo, type SnapshotListOpts, SnapshotPaginator, type Stderr, type Stdout, Template, type TemplateActivationOptions, TemplateBase, type TemplateBuildStatus, type TemplateBuildStatusResponse, type TemplateBuilder, type TemplateClass, TemplateError, type TemplateRegionActivation, type TemplateTag, TemplateTagConflictError, type TemplateTagConflictReason, type TemplateTagHead, type TemplateTagHeadExpectation, type TemplateTagInfo, TimeoutError, type Username, WatchHandle, type WriteInfo, type components, Sandbox as default, defaultBuildLogger, getSignature, type paths, waitForFile, waitForPort, waitForProcess, waitForTimeout, waitForURL };

package/dist/index.js

@@ -101,6 +101,7 @@ __export(src_exports, {
   ReadyCmd: () => ReadyCmd,
   RegionCapacityError: () => RegionCapacityError,
   Sandbox: () => Sandbox,
+  SandboxCreateFailedError: () => SandboxCreateFailedError,
   SandboxCreateRejectedError: () => SandboxCreateRejectedError,
   SandboxError: () => SandboxError,
   SandboxRegionScope: () => SandboxRegionScope,
@@ -127,7 +128,7 @@ var import_openapi_fetch = __toESM(require("openapi-fetch"));
 var import_platform2 = __toESM(require("platform"));
 
 // package.json
-var version = "0.0.0-dev.5";
+var version = "0.1.0";
 
 // src/utils.ts
 var import_platform = __toESM(require("platform"));
@@ -169,12 +170,6 @@ async function sha256(data) {
 function timeoutToSeconds(timeout) {
   return Math.ceil(timeout / 1e3);
 }
-async function dynamicImport(module2) {
-  if (runtime === "browser") {
-    throw new Error("Browser runtime is not supported for dynamic import");
-  }
-  return await import(module2);
-}
 function ansiRegex({ onlyFirst = false } = {}) {
   const ST = "(?:\\u0007|\\u001B\\u005C|\\u009C)";
   const osc = `(?:\\u001B\\][\\s\\S]*?${ST})`;
@@ -239,6 +234,13 @@ var OutcomeUnknownError = class extends SandboxError {
     this.cause = cause;
   }
 };
+var SandboxCreateFailedError = class extends SandboxError {
+  constructor(message, recovery) {
+    super(message);
+    this.name = "SandboxCreateFailedError";
+    this.recovery = recovery;
+  }
+};
 var SandboxCreateRejectedError = class extends SandboxError {
   constructor(message, recovery, reason, spilloverAllowed = false, capacityTier = "shared") {
     super(message);
@@ -353,11 +355,11 @@ function formatLog(log) {
   return JSON.parse(JSON.stringify(log));
 }
 function createRpcLogger(logger) {
-  function logEach(stream) {
+  function logEach(stream2) {
     return __asyncGenerator(this, null, function* () {
       var _a3;
       try {
-        for (var iter = __forAwait(stream), more, temp, error; more = !(temp = yield new __await(iter.next())).done; more = false) {
+        for (var iter = __forAwait(stream2), more, temp, error; more = !(temp = yield new __await(iter.next())).done; more = false) {
           const m = temp.value;
           (_a3 = logger.debug) == null ? void 0 : _a3.call(logger, "Response stream:", formatLog(m));
           yield m;
@@ -3584,8 +3586,9 @@ var SandboxApi = class {
         return operation.sandbox;
       }
       if (operation.state === "failed") {
-        throw new SandboxError(
-          (_b = (_a3 = operation.error) == null ? void 0 : _a3.message) != null ? _b : "Sandbox create failed after admission"
+        throw new SandboxCreateFailedError(
+          (_b = (_a3 = operation.error) == null ? void 0 : _a3.message) != null ? _b : "Sandbox create failed after admission",
+          recovery
         );
       }
       await new Promise((resolve) => setTimeout(resolve, 25));
@@ -4479,6 +4482,10 @@ var SandboxRegionScope = class {
   }
 };
 
+// src/template/buildApi.ts
+var import_node_fs2 = __toESM(require("fs"));
+var import_node_stream = __toESM(require("stream"));
+
 // src/template/logger.ts
 var import_chalk = __toESM(require("chalk"));
 var LogEntry = class {
@@ -4600,16 +4607,30 @@ function defaultBuildLogger(options) {
 // src/template/utils.ts
 var import_node_crypto = __toESM(require("crypto"));
 var import_node_fs = __toESM(require("fs"));
+var import_node_os = __toESM(require("os"));
 var import_node_path = __toESM(require("path"));
 var import_node_url = __toESM(require("url"));
 
 // src/template/consts.ts
 var FINALIZE_STEP_NAME = "finalize";
+var FILE_UPLOAD_TIMEOUT_MS = 36e5;
 var BASE_STEP_NAME = "base";
 var STACK_TRACE_DEPTH = 3;
 var RESOLVE_SYMLINKS = false;
 
 // src/template/utils.ts
+async function loadGlob() {
+  if (runtime === "browser") {
+    throw new Error("Browser runtime is not supported for local file copies");
+  }
+  return await import("glob");
+}
+async function loadTar() {
+  if (runtime === "browser") {
+    throw new Error("Browser runtime is not supported for local file copies");
+  }
+  return await import("tar");
+}
 function validateRelativePath(src, stackTrace) {
   if (import_node_path.default.isAbsolute(src)) {
     const error = new TemplateError(
@@ -4640,7 +4661,7 @@ function normalizePath(path2) {
   return path2.replace(/\\/g, "/");
 }
 async function getAllFilesInPath(src, contextPath, ignorePatterns, includeDirectories = true) {
-  const { glob } = await dynamicImport("glob");
+  const { glob } = await loadGlob();
   const files = /* @__PURE__ */ new Map();
   const globFiles = await glob(src, {
     ignore: ignorePatterns,
@@ -4756,32 +4777,48 @@ function getCallerDirectory(depth) {
 function padOctal(mode) {
   return mode.toString(8).padStart(4, "0");
 }
-async function tarFileStream(fileName, fileContextPath, ignorePatterns, resolveSymlinks) {
-  const { create } = await dynamicImport("tar");
+async function getTarArchiveInputs(fileName, fileContextPath, ignorePatterns) {
+  const { create } = await loadTar();
   const allFiles = await getAllFilesInPath(
     fileName,
     fileContextPath,
     ignorePatterns,
     true
   );
-  const filePaths = allFiles.map((file) => file.relativePosix());
-  return create(
-    {
-      gzip: true,
-      cwd: fileContextPath,
-      follow: resolveSymlinks,
-      noDirRecurse: true
-    },
-    filePaths
-  );
+  return {
+    create,
+    filePaths: allFiles.map((file) => file.relativePosix())
+  };
 }
-async function tarFileStreamUpload(fileName, fileContextPath, ignorePatterns, resolveSymlinks) {
-  return tarFileStream(
+async function spoolTarArchive(fileName, fileContextPath, ignorePatterns, resolveSymlinks) {
+  const { create, filePaths } = await getTarArchiveInputs(
     fileName,
     fileContextPath,
-    ignorePatterns,
-    resolveSymlinks
+    ignorePatterns
   );
+  const tmpDir = await import_node_fs.default.promises.mkdtemp(
+    import_node_path.default.join(import_node_os.default.tmpdir(), "enclave-template-")
+  );
+  const tarPath = import_node_path.default.join(tmpDir, "context.tar.gz");
+  const cleanup = () => import_node_fs.default.promises.rm(tmpDir, { recursive: true, force: true }).catch(() => {
+  });
+  try {
+    await create(
+      {
+        gzip: true,
+        cwd: fileContextPath,
+        follow: resolveSymlinks,
+        noDirRecurse: true,
+        file: tarPath
+      },
+      filePaths
+    );
+    const { size } = await import_node_fs.default.promises.stat(tarPath);
+    return { path: tarPath, size, cleanup };
+  } catch (error) {
+    await cleanup();
+    throw error;
+  }
 }
 function getBuildStepIndex(step, stackTracesLength) {
   if (step === BASE_STEP_NAME) {
@@ -4841,22 +4878,34 @@ async function getFileUploadLink(client, { templateID, filesHash }, stackTrace)
 }
 async function uploadFile(options, stackTrace) {
   const { fileName, url: url2, fileContextPath, ignorePatterns, resolveSymlinks } = options;
+  let cleanup;
+  let bodyStream;
   try {
-    const uploadStream = await tarFileStreamUpload(
+    const archive = await spoolTarArchive(
       fileName,
       fileContextPath,
       ignorePatterns,
       resolveSymlinks
     );
+    cleanup = archive.cleanup;
+    bodyStream = import_node_fs2.default.createReadStream(archive.path);
     const res = await fetch(url2, {
       method: "PUT",
-      // @ts-expect-error
-      body: uploadStream,
+      body: import_node_stream.default.Readable.toWeb(bodyStream),
+      headers: {
+        "Content-Length": archive.size.toString()
+      },
+      signal: AbortSignal.timeout(FILE_UPLOAD_TIMEOUT_MS),
+      // Node fetch requires duplex for a streaming request body, but the DOM
+      // RequestInit type does not expose it.
+      // @ts-expect-error Node fetch extension
       duplex: "half"
     });
     if (!res.ok) {
+      const responseDetails = (await res.text().catch(() => "")).slice(0, 4096);
+      const status = `${res.status} ${res.statusText}`.trim();
       throw new FileUploadError(
-        `Failed to upload file: ${res.statusText}`,
+        `Failed to upload file: ${status}${responseDetails ? ` - ${responseDetails}` : ""}`,
         stackTrace
       );
     }
@@ -4865,6 +4914,14 @@ async function uploadFile(options, stackTrace) {
       throw error;
     }
     throw new FileUploadError(`Failed to upload file: ${error}`, stackTrace);
+  } finally {
+    if (bodyStream && !bodyStream.closed) {
+      await new Promise((resolve) => {
+        bodyStream == null ? void 0 : bodyStream.once("close", resolve);
+        bodyStream == null ? void 0 : bodyStream.destroy();
+      });
+    }
+    await (cleanup == null ? void 0 : cleanup());
   }
 }
 async function triggerBuild(client, { templateID, buildID, template }) {
@@ -5051,7 +5108,7 @@ async function getTemplateTags(client, { templateID }) {
 
 // src/template/dockerfileParser.ts
 var import_dockerfile_ast = require("dockerfile-ast");
-var import_node_fs2 = __toESM(require("fs"));
+var import_node_fs3 = __toESM(require("fs"));
 
 // src/template/readycmd.ts
 var ReadyCmd = class {
@@ -5088,8 +5145,8 @@ function waitForTimeout(timeout) {
 function parseDockerfile(dockerfileContentOrPath, templateBuilder) {
   let dockerfileContent;
   try {
-    if (import_node_fs2.default.existsSync(dockerfileContentOrPath) && import_node_fs2.default.statSync(dockerfileContentOrPath).isFile()) {
-      dockerfileContent = import_node_fs2.default.readFileSync(dockerfileContentOrPath, "utf-8");
+    if (import_node_fs3.default.existsSync(dockerfileContentOrPath) && import_node_fs3.default.statSync(dockerfileContentOrPath).isFile()) {
+      dockerfileContent = import_node_fs3.default.readFileSync(dockerfileContentOrPath, "utf-8");
     } else {
       dockerfileContent = dockerfileContentOrPath;
     }
@@ -6456,6 +6513,7 @@ var src_default = Sandbox;
   ReadyCmd,
   RegionCapacityError,
   Sandbox,
+  SandboxCreateFailedError,
   SandboxCreateRejectedError,
   SandboxError,
   SandboxRegionScope,