@giselles-ai/sandkit 0.1.0

package/dist/integrations/vercel.js

@@ -0,0 +1,400 @@
+import {
+  resolveGithubDefaultApiKey
+} from "../chunk-XM4HGRXW.js";
+import {
+  resolveCodexDefaultApiKey
+} from "../chunk-FSDVHEEX.js";
+import {
+  resolveGeminiDefaultApiKey
+} from "../chunk-7DLK7LOM.js";
+import {
+  resolveAiGatewayDefaultApiKey
+} from "../chunk-REGOUXVI.js";
+import {
+  createSandboxProvider
+} from "../chunk-HVYCAAZQ.js";
+import "../chunk-VISDS5T7.js";
+
+// src/drivers/vercel-sandbox.ts
+import { Sandbox } from "@vercel/sandbox";
+
+// src/policies/default-credentials.ts
+function resolveDefaultCredentialValue(serviceId) {
+  switch (serviceId) {
+    case "codex":
+      return resolveCodexDefaultApiKey();
+    case "gemini":
+      return resolveGeminiDefaultApiKey();
+    case "github":
+      return resolveGithubDefaultApiKey();
+    case "aiGateway":
+      return resolveAiGatewayDefaultApiKey();
+    default:
+      return void 0;
+  }
+}
+function describeDefaultCredentialSource(serviceId) {
+  switch (serviceId) {
+    case "codex":
+      return "CODEX_API_KEY";
+    case "gemini":
+      return "GEMINI_API_KEY";
+    case "github":
+      return "GITHUB_TOKEN";
+    case "aiGateway":
+      return "AI_GATEWAY_API_KEY";
+    default:
+      return `default credential for service "${serviceId}"`;
+  }
+}
+
+// src/drivers/vercel-network-policy.ts
+function resolveCredentialValue(serviceId, header) {
+  if (header.credential.kind === "value") {
+    return header.credential.value;
+  }
+  if (header.credential.kind === "default") {
+    const value = resolveDefaultCredentialValue(serviceId);
+    if (!value) {
+      throw new Error(
+        `Workspace policy for service "${serviceId}" requires ${describeDefaultCredentialSource(serviceId)}.`
+      );
+    }
+    return value;
+  }
+  throw new Error(
+    `Workspace policy for service "${serviceId}" contains a redacted credential and cannot be applied.`
+  );
+}
+function compileHeaderRules(serviceId, headers) {
+  if (!headers || headers.length === 0) {
+    return [];
+  }
+  const resolvedHeaders = Object.fromEntries(
+    headers.map((header) => [
+      header.headerName,
+      `${header.valuePrefix ?? ""}${resolveCredentialValue(serviceId, header)}`
+    ])
+  );
+  return [
+    {
+      transform: [
+        {
+          headers: resolvedHeaders
+        }
+      ]
+    }
+  ];
+}
+function compileVercelNetworkPolicy(policy) {
+  switch (policy.mode) {
+    case "allow-all":
+      return "allow-all";
+    case "deny-all":
+      return "deny-all";
+    case "allow-services": {
+      const allow = {};
+      for (const service of policy.services) {
+        const rules = compileHeaderRules(service.id, service.headers);
+        for (const domain of service.domains) {
+          const existing = allow[domain] ?? [];
+          allow[domain] = [...existing, ...rules];
+        }
+      }
+      return { allow };
+    }
+  }
+}
+
+// src/drivers/vercel-sandbox.ts
+var VercelSandboxDriver = class {
+  #sandbox;
+  provider = "vercel-sandbox";
+  constructor(sandbox) {
+    this.#sandbox = sandbox;
+  }
+  get id() {
+    return this.#sandbox.sandboxId;
+  }
+  async applyPolicy(policy) {
+    await this.#sandbox.updateNetworkPolicy(compileVercelNetworkPolicy(policy));
+  }
+  async getSessionLease() {
+    const sandbox = this.#sandbox;
+    const observedAt = (/* @__PURE__ */ new Date()).toISOString();
+    const timeoutMs = typeof sandbox.timeout === "number" && Number.isFinite(sandbox.timeout) && sandbox.timeout > 0 ? sandbox.timeout : 6e4;
+    return {
+      sandboxId: sandbox.sandboxId,
+      observedAt,
+      expiresAt: new Date(Date.parse(observedAt) + timeoutMs).toISOString()
+    };
+  }
+  async runCommand(command, args) {
+    const result = await this.#sandbox.runCommand(command, args);
+    const finished = await this.#toCommandFinished(result);
+    return {
+      exitCode: finished.exitCode,
+      stdout: await finished.stdout(),
+      stderr: await finished.stderr()
+    };
+  }
+  async startProcess(input) {
+    const started = await this.#sandbox.runCommand({
+      cmd: input.command,
+      args: [...input.args],
+      detached: true
+    });
+    if (!isVercelCommandHandle(started)) {
+      throw new Error("Unexpected Vercel sandbox startProcess() response shape.");
+    }
+    const processId = started.cmdId ?? `${this.#sandbox.sandboxId}-${Date.now()}`;
+    const commandLogBroadcast = createCommandLogBroadcaster(
+      getCommandLogIterator(started),
+      input.onStdout,
+      input.onStderr
+    );
+    return {
+      processId,
+      wait: async () => {
+        const finished = await started.wait();
+        return {
+          exitCode: finished.exitCode,
+          stdout: await finished.stdout(),
+          stderr: await finished.stderr()
+        };
+      },
+      logs: commandLogBroadcast ? () => commandLogBroadcast() : void 0
+    };
+  }
+  async url(port) {
+    try {
+      return this.#sandbox.domain(port);
+    } catch (error) {
+      if (!(error instanceof Error) || !error.message.includes("No route for port")) {
+        throw error;
+      }
+      const refreshed = await Sandbox.get({ sandboxId: this.#sandbox.sandboxId });
+      return refreshed.domain(port);
+    }
+  }
+  async extendTimeout(durationMs) {
+    const extendTimeout = this.#sandbox.extendTimeout;
+    if (!extendTimeout) {
+      throw new Error("This Vercel sandbox does not support extendTimeout().");
+    }
+    await extendTimeout.call(this.#sandbox, durationMs);
+  }
+  async snapshot() {
+    const snapshot = await this.#sandbox.snapshot();
+    return {
+      kind: "vercel-sandbox-snapshot",
+      sessionId: this.#sandbox.sandboxId,
+      state: {
+        snapshotId: snapshot.snapshotId
+      }
+    };
+  }
+  async #toCommandFinished(raw) {
+    if (typeof raw !== "object" || raw === null) {
+      throw new Error("Unexpected Vercel sandbox command response");
+    }
+    const candidate = raw;
+    if (candidate.wait) {
+      return candidate.wait();
+    }
+    return raw;
+  }
+};
+function isVercelCommandHandle(value) {
+  if (typeof value !== "object" || value === null) {
+    return false;
+  }
+  const candidate = value;
+  if (typeof candidate.wait !== "function") {
+    return false;
+  }
+  return candidate.cmdId === void 0 || typeof candidate.cmdId === "string";
+}
+function isIterable(value) {
+  return value !== null && (typeof value === "object" || typeof value === "function") && typeof value[Symbol.iterator] === "function";
+}
+function isAsyncIterable(value) {
+  return value !== null && (typeof value === "object" || typeof value === "function") && typeof value[Symbol.asyncIterator] === "function";
+}
+function getCommandLogIterator(raw) {
+  const rawLogs = raw.logs?.();
+  if (rawLogs === void 0) {
+    return void 0;
+  }
+  if (isAsyncIterable(rawLogs)) {
+    return rawLogs;
+  }
+  if (isIterable(rawLogs)) {
+    return toAsyncIterableFromSync(rawLogs);
+  }
+  return void 0;
+}
+function toAsyncIterableFromSync(iterable) {
+  return {
+    async *[Symbol.asyncIterator]() {
+      for (const value of iterable) {
+        yield value;
+      }
+    }
+  };
+}
+function createCommandLogBroadcaster(logs, onStdout, onStderr) {
+  if (!logs) {
+    return void 0;
+  }
+  const bufferedLogs = [];
+  const waiters = [];
+  let completed = false;
+  let error = null;
+  let pumpStarted = false;
+  const notifyWaiters = () => {
+    while (waiters.length > 0) {
+      waiters.pop()?.();
+    }
+  };
+  const run = async () => {
+    if (pumpStarted) {
+      return;
+    }
+    pumpStarted = true;
+    try {
+      for await (const log of logs) {
+        const normalized = normalizeCommandLog(log);
+        if (!normalized) {
+          continue;
+        }
+        bufferedLogs.push(normalized);
+        if (normalized.stream === "stderr") {
+          onStderr?.(normalized.chunk);
+        } else {
+          onStdout?.(normalized.chunk);
+        }
+        notifyWaiters();
+      }
+    } catch (cause) {
+      error = cause;
+    } finally {
+      completed = true;
+      notifyWaiters();
+    }
+  };
+  void run().catch(() => {
+  });
+  const waitForWork = () => {
+    return new Promise((resolve) => {
+      waiters.push(resolve);
+    });
+  };
+  const createLogIterable = () => {
+    return {
+      async *[Symbol.asyncIterator]() {
+        let index = 0;
+        while (true) {
+          if (index < bufferedLogs.length) {
+            yield bufferedLogs[index++];
+            continue;
+          }
+          if (error !== null) {
+            throw error instanceof Error ? error : new Error("startProcess logs failed.");
+          }
+          if (completed) {
+            return;
+          }
+          await waitForWork();
+        }
+      }
+    };
+  };
+  return createLogIterable;
+}
+function normalizeCommandLog(log) {
+  if (typeof log === "string") {
+    return { stream: "stdout", chunk: log };
+  }
+  if (typeof log !== "object" || log === null) {
+    return null;
+  }
+  const candidate = log;
+  const streamValue = candidate.stream;
+  const stream = streamValue === "stderr" || streamValue === "stdout" ? streamValue : "stdout";
+  const rawChunk = candidate.data ?? candidate.output ?? candidate.chunk ?? candidate.text ?? candidate.message ?? null;
+  if (typeof rawChunk !== "string") {
+    return null;
+  }
+  return { stream, chunk: rawChunk };
+}
+var VercelSandboxDriverFactory = class {
+  #runtime;
+  #defaultTimeout;
+  constructor(options = {}) {
+    this.#runtime = options.runtime ?? "node24";
+    this.#defaultTimeout = normalizeSandboxTimeout(
+      options.defaultTimeout ?? options.timeout,
+      "Vercel sandbox default timeout"
+    );
+  }
+  isSessionUnavailableError(error) {
+    if (!(error instanceof Error)) {
+      return false;
+    }
+    const message = error.message.toLowerCase();
+    return message.includes("not found") || message.includes("does not exist") || message.includes("sandbox_stopped") || message.includes("sandbox stopped");
+  }
+  async createSandbox(_workspace, options) {
+    const timeout = this.#defaultTimeoutForCreate(options);
+    const sandbox = await Sandbox.create({
+      runtime: this.#runtime,
+      timeout,
+      ports: options.exposedPorts,
+      networkPolicy: compileVercelNetworkPolicy(options.policy)
+    });
+    return new VercelSandboxDriver(sandbox);
+  }
+  async resumeSandbox(workspace, snapshot, options) {
+    const timeout = this.#defaultTimeoutForCreate(options);
+    const state = snapshot.state;
+    const snapshotId = state?.snapshotId;
+    const fallbackSandboxId = workspace.sandboxId ?? snapshot.sessionId;
+    const sandbox = snapshotId === void 0 || typeof snapshotId !== "string" ? await (fallbackSandboxId === void 0 ? (() => {
+      throw new Error("Persisted sandbox state is missing restore information");
+    })() : Sandbox.get({ sandboxId: fallbackSandboxId })) : await Sandbox.create({
+      source: {
+        type: "snapshot",
+        snapshotId
+      },
+      timeout,
+      ports: options.exposedPorts,
+      networkPolicy: compileVercelNetworkPolicy(options.policy)
+    });
+    return new VercelSandboxDriver(sandbox);
+  }
+  #defaultTimeoutForCreate(options) {
+    return normalizeSandboxTimeout(options.timeoutMs ?? this.#defaultTimeout, "runtime timeout");
+  }
+};
+function normalizeSandboxTimeout(value, label) {
+  if (value === void 0) {
+    return 6e4;
+  }
+  if (typeof value !== "number" || !Number.isInteger(value) || !Number.isFinite(value) || value <= 0) {
+    throw new Error(`${label} must be a positive integer in milliseconds.`);
+  }
+  return value;
+}
+function createVercelSandboxDriverFactory(options = {}) {
+  return new VercelSandboxDriverFactory(options);
+}
+
+// src/integrations/vercel.ts
+function vercelSandbox(options = {}) {
+  return createSandboxProvider("vercel", createVercelSandboxDriverFactory(options));
+}
+export {
+  vercelSandbox
+};
+//# sourceMappingURL=vercel.js.map

package/dist/integrations/vercel.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/drivers/vercel-sandbox.ts","../../src/policies/default-credentials.ts","../../src/drivers/vercel-network-policy.ts","../../src/integrations/vercel.ts"],"sourcesContent":["import { Sandbox } from \"@vercel/sandbox\";\n\nimport type { WorkspacePolicy } from \"../policies/types.ts\";\nimport type {\n  CommandResult,\n  PersistedSandboxState,\n  SandboxSessionLease,\n  SandboxDriver,\n  WorkspaceSessionLog,\n  WorkspaceSessionProcess,\n  WorkspaceSessionProcessStartInput,\n  SandboxCreateOptions,\n  SandboxDriverFactory,\n  WorkspaceRecord,\n  VercelSandboxOptions,\n} from \"../types.ts\";\nimport { compileVercelNetworkPolicy } from \"./vercel-network-policy.ts\";\n\ninterface VercelCommandFinished {\n  exitCode: number;\n  stdout(): Promise<string>;\n  stderr(): Promise<string>;\n}\n\ninterface VercelCommandHandle {\n  wait(): Promise<VercelCommandFinished>;\n  readonly cmdId?: string;\n  readonly logs?: () => unknown;\n}\n\ninterface VercelPersistedState {\n  snapshotId?: string;\n}\n\nclass VercelSandboxDriver implements SandboxDriver {\n  readonly #sandbox: Awaited<ReturnType<typeof Sandbox.get>>;\n  readonly provider = \"vercel-sandbox\";\n\n  constructor(sandbox: Awaited<ReturnType<typeof Sandbox.get>>) {\n    this.#sandbox = sandbox;\n  }\n\n  get id(): string {\n    return this.#sandbox.sandboxId;\n  }\n\n  async applyPolicy(policy: WorkspacePolicy): Promise<void> {\n    await this.#sandbox.updateNetworkPolicy(compileVercelNetworkPolicy(policy));\n  }\n\n  async getSessionLease(): Promise<SandboxSessionLease> {\n    const sandbox = this.#sandbox;\n    const observedAt = new Date().toISOString();\n    const timeoutMs =\n      typeof sandbox.timeout === \"number\" && Number.isFinite(sandbox.timeout) && sandbox.timeout > 0\n        ? sandbox.timeout\n        : 60_000;\n\n    return {\n      sandboxId: sandbox.sandboxId,\n      observedAt,\n      expiresAt: new Date(Date.parse(observedAt) + timeoutMs).toISOString(),\n    };\n  }\n\n  async runCommand(command: string, args: string[]): Promise<CommandResult> {\n    const result = await this.#sandbox.runCommand(command, args);\n    const finished = await this.#toCommandFinished(result);\n\n    return {\n      exitCode: finished.exitCode,\n      stdout: await finished.stdout(),\n      stderr: await finished.stderr(),\n    };\n  }\n\n  async startProcess(input: WorkspaceSessionProcessStartInput): Promise<WorkspaceSessionProcess> {\n    const started = await this.#sandbox.runCommand({\n      cmd: input.command,\n      args: [...input.args],\n      detached: true,\n    });\n    if (!isVercelCommandHandle(started)) {\n      throw new Error(\"Unexpected Vercel sandbox startProcess() response shape.\");\n    }\n\n    const processId = started.cmdId ?? `${this.#sandbox.sandboxId}-${Date.now()}`;\n    const commandLogBroadcast = createCommandLogBroadcaster(\n      getCommandLogIterator(started),\n      input.onStdout,\n      input.onStderr,\n    );\n\n    return {\n      processId,\n      wait: async (): Promise<CommandResult> => {\n        const finished = await started.wait();\n        return {\n          exitCode: finished.exitCode,\n          stdout: await finished.stdout(),\n          stderr: await finished.stderr(),\n        };\n      },\n      logs: commandLogBroadcast ? () => commandLogBroadcast() : undefined,\n    };\n  }\n\n  async url(port: number): Promise<string> {\n    try {\n      return this.#sandbox.domain(port);\n    } catch (error) {\n      if (!(error instanceof Error) || !error.message.includes(\"No route for port\")) {\n        throw error;\n      }\n\n      const refreshed = await Sandbox.get({ sandboxId: this.#sandbox.sandboxId });\n      return refreshed.domain(port);\n    }\n  }\n\n  async extendTimeout(durationMs: number): Promise<void> {\n    const extendTimeout = (\n      this.#sandbox as { extendTimeout?: (durationMs: number) => Promise<unknown> }\n    ).extendTimeout;\n    if (!extendTimeout) {\n      throw new Error(\"This Vercel sandbox does not support extendTimeout().\");\n    }\n\n    await extendTimeout.call(this.#sandbox, durationMs);\n  }\n\n  async snapshot(): Promise<PersistedSandboxState> {\n    // Vercel sandbox snapshot() restores through a new sandbox and implicitly stops the source sandbox.\n    // Keep this behavior as a provider detail in the driver implementation.\n    const snapshot = await this.#sandbox.snapshot();\n\n    return {\n      kind: \"vercel-sandbox-snapshot\",\n      sessionId: this.#sandbox.sandboxId,\n      state: {\n        snapshotId: snapshot.snapshotId,\n      },\n    };\n  }\n\n  async #toCommandFinished(raw: unknown): Promise<VercelCommandFinished> {\n    if (typeof raw !== \"object\" || raw === null) {\n      throw new Error(\"Unexpected Vercel sandbox command response\");\n    }\n\n    const candidate = raw as { wait?: () => Promise<VercelCommandFinished> };\n    if (candidate.wait) {\n      return candidate.wait();\n    }\n\n    return raw as VercelCommandFinished;\n  }\n}\n\nfunction isVercelCommandHandle(value: unknown): value is VercelCommandHandle {\n  if (typeof value !== \"object\" || value === null) {\n    return false;\n  }\n\n  const candidate = value as { wait?: unknown; cmdId?: unknown };\n  if (typeof candidate.wait !== \"function\") {\n    return false;\n  }\n\n  return candidate.cmdId === undefined || typeof candidate.cmdId === \"string\";\n}\n\nfunction isIterable<T = unknown>(value: unknown): value is Iterable<T> {\n  return (\n    value !== null &&\n    (typeof value === \"object\" || typeof value === \"function\") &&\n    typeof (value as Iterable<T>)[Symbol.iterator] === \"function\"\n  );\n}\n\nfunction isAsyncIterable<T = unknown>(value: unknown): value is AsyncIterable<T> {\n  return (\n    value !== null &&\n    (typeof value === \"object\" || typeof value === \"function\") &&\n    typeof (value as AsyncIterable<T>)[Symbol.asyncIterator] === \"function\"\n  );\n}\n\nfunction getCommandLogIterator(raw: VercelCommandHandle): AsyncIterable<unknown> | undefined {\n  const rawLogs = raw.logs?.();\n  if (rawLogs === undefined) {\n    return undefined;\n  }\n  if (isAsyncIterable<unknown>(rawLogs)) {\n    return rawLogs;\n  }\n  if (isIterable<unknown>(rawLogs)) {\n    return toAsyncIterableFromSync(rawLogs);\n  }\n  return undefined;\n}\n\nfunction toAsyncIterableFromSync<T>(iterable: Iterable<T>): AsyncIterable<T> {\n  return {\n    async *[Symbol.asyncIterator]() {\n      for (const value of iterable) {\n        yield value;\n      }\n    },\n  };\n}\n\nfunction createCommandLogBroadcaster(\n  logs: AsyncIterable<unknown> | undefined,\n  onStdout?: (chunk: string) => void,\n  onStderr?: (chunk: string) => void,\n): (() => AsyncIterable<WorkspaceSessionLog>) | undefined {\n  if (!logs) {\n    return undefined;\n  }\n\n  const bufferedLogs: WorkspaceSessionLog[] = [];\n  const waiters: Array<() => void> = [];\n  let completed = false;\n  let error: unknown = null;\n  let pumpStarted = false;\n\n  const notifyWaiters = () => {\n    while (waiters.length > 0) {\n      waiters.pop()?.();\n    }\n  };\n\n  const run = async (): Promise<void> => {\n    if (pumpStarted) {\n      return;\n    }\n    pumpStarted = true;\n\n    try {\n      for await (const log of logs) {\n        const normalized = normalizeCommandLog(log);\n        if (!normalized) {\n          continue;\n        }\n\n        bufferedLogs.push(normalized);\n        if (normalized.stream === \"stderr\") {\n          onStderr?.(normalized.chunk);\n        } else {\n          onStdout?.(normalized.chunk);\n        }\n        notifyWaiters();\n      }\n    } catch (cause) {\n      error = cause;\n    } finally {\n      completed = true;\n      notifyWaiters();\n    }\n  };\n\n  void run().catch(() => {});\n\n  const waitForWork = (): Promise<void> => {\n    return new Promise<void>((resolve) => {\n      waiters.push(resolve);\n    });\n  };\n\n  const createLogIterable = (): AsyncIterable<WorkspaceSessionLog> => {\n    return {\n      async *[Symbol.asyncIterator]() {\n        let index = 0;\n        while (true) {\n          if (index < bufferedLogs.length) {\n            yield bufferedLogs[index++]!;\n            continue;\n          }\n          if (error !== null) {\n            throw error instanceof Error ? error : new Error(\"startProcess logs failed.\");\n          }\n          if (completed) {\n            return;\n          }\n          await waitForWork();\n        }\n      },\n    };\n  };\n\n  return createLogIterable;\n}\n\nexport function normalizeCommandLog(log: unknown): WorkspaceSessionLog | null {\n  if (typeof log === \"string\") {\n    return { stream: \"stdout\", chunk: log };\n  }\n  if (typeof log !== \"object\" || log === null) {\n    return null;\n  }\n\n  const candidate = log as {\n    stream?: unknown;\n    output?: unknown;\n    chunk?: unknown;\n    text?: unknown;\n    message?: unknown;\n    data?: unknown;\n  };\n  const streamValue = candidate.stream;\n  const stream = streamValue === \"stderr\" || streamValue === \"stdout\" ? streamValue : \"stdout\";\n  const rawChunk =\n    candidate.data ??\n    candidate.output ??\n    candidate.chunk ??\n    candidate.text ??\n    candidate.message ??\n    null;\n\n  if (typeof rawChunk !== \"string\") {\n    return null;\n  }\n\n  return { stream, chunk: rawChunk };\n}\n\nclass VercelSandboxDriverFactory implements SandboxDriverFactory {\n  readonly #runtime: string;\n  readonly #defaultTimeout: number;\n\n  constructor(options: VercelSandboxOptions = {}) {\n    this.#runtime = options.runtime ?? \"node24\";\n    this.#defaultTimeout = normalizeSandboxTimeout(\n      options.defaultTimeout ?? options.timeout,\n      \"Vercel sandbox default timeout\",\n    );\n  }\n\n  isSessionUnavailableError(error: unknown): boolean {\n    if (!(error instanceof Error)) {\n      return false;\n    }\n\n    const message = error.message.toLowerCase();\n    return (\n      message.includes(\"not found\") ||\n      message.includes(\"does not exist\") ||\n      message.includes(\"sandbox_stopped\") ||\n      message.includes(\"sandbox stopped\")\n    );\n  }\n\n  async createSandbox(\n    _workspace: WorkspaceRecord,\n    options: SandboxCreateOptions,\n  ): Promise<SandboxDriver> {\n    const timeout = this.#defaultTimeoutForCreate(options);\n\n    const sandbox = await Sandbox.create({\n      runtime: this.#runtime,\n      timeout,\n      ports: options.exposedPorts,\n      networkPolicy: compileVercelNetworkPolicy(options.policy),\n    });\n\n    return new VercelSandboxDriver(sandbox);\n  }\n\n  async resumeSandbox(\n    workspace: WorkspaceRecord,\n    snapshot: PersistedSandboxState,\n    options: SandboxCreateOptions,\n  ): Promise<SandboxDriver> {\n    const timeout = this.#defaultTimeoutForCreate(options);\n    const state = snapshot.state as VercelPersistedState | undefined;\n    const snapshotId = state?.snapshotId;\n    const fallbackSandboxId = workspace.sandboxId ?? snapshot.sessionId;\n\n    const sandbox =\n      snapshotId === undefined || typeof snapshotId !== \"string\"\n        ? await (fallbackSandboxId === undefined\n            ? (() => {\n                throw new Error(\"Persisted sandbox state is missing restore information\");\n              })()\n            : Sandbox.get({ sandboxId: fallbackSandboxId }))\n        : await Sandbox.create({\n            source: {\n              type: \"snapshot\",\n              snapshotId,\n            },\n            timeout,\n            ports: options.exposedPorts,\n            networkPolicy: compileVercelNetworkPolicy(options.policy),\n          });\n\n    // Reattaching to an existing live sandbox should not mutate provider state.\n    // Updating the network policy here races with commit/snapshot shutdown and can\n    // fail on otherwise read-only flows like getActiveLease().\n    return new VercelSandboxDriver(sandbox);\n  }\n\n  #defaultTimeoutForCreate(options: SandboxCreateOptions): number {\n    return normalizeSandboxTimeout(options.timeoutMs ?? this.#defaultTimeout, \"runtime timeout\");\n  }\n}\n\nfunction normalizeSandboxTimeout(value: unknown, label: string): number {\n  if (value === undefined) {\n    return 60_000;\n  }\n\n  if (\n    typeof value !== \"number\" ||\n    !Number.isInteger(value) ||\n    !Number.isFinite(value) ||\n    value <= 0\n  ) {\n    throw new Error(`${label} must be a positive integer in milliseconds.`);\n  }\n\n  return value;\n}\n\nexport function createVercelSandboxDriverFactory(\n  options: VercelSandboxOptions = {},\n): SandboxDriverFactory {\n  return new VercelSandboxDriverFactory(options);\n}\n","import { resolveAiGatewayDefaultApiKey } from \"./ai-gateway.ts\";\nimport { resolveCodexDefaultApiKey } from \"./codex.ts\";\nimport { resolveGeminiDefaultApiKey } from \"./gemini.ts\";\nimport { resolveGithubDefaultApiKey } from \"./github.ts\";\n\nexport function resolveDefaultCredentialValue(serviceId: string): string | undefined {\n  switch (serviceId) {\n    case \"codex\":\n      return resolveCodexDefaultApiKey();\n    case \"gemini\":\n      return resolveGeminiDefaultApiKey();\n    case \"github\":\n      return resolveGithubDefaultApiKey();\n    case \"aiGateway\":\n      return resolveAiGatewayDefaultApiKey();\n    default:\n      return undefined;\n  }\n}\n\nexport function describeDefaultCredentialSource(serviceId: string): string {\n  switch (serviceId) {\n    case \"codex\":\n      return \"CODEX_API_KEY\";\n    case \"gemini\":\n      return \"GEMINI_API_KEY\";\n    case \"github\":\n      return \"GITHUB_TOKEN\";\n    case \"aiGateway\":\n      return \"AI_GATEWAY_API_KEY\";\n    default:\n      return `default credential for service \"${serviceId}\"`;\n  }\n}\n","import type {\n  NetworkPolicy as VercelNetworkPolicy,\n  NetworkPolicyRule as VercelNetworkPolicyRule,\n} from \"@vercel/sandbox\";\n\nimport {\n  describeDefaultCredentialSource,\n  resolveDefaultCredentialValue,\n} from \"../policies/default-credentials.ts\";\nimport type { PolicyServiceHeaderTransform, WorkspacePolicy } from \"../policies/types.ts\";\n\nfunction resolveCredentialValue(serviceId: string, header: PolicyServiceHeaderTransform): string {\n  if (header.credential.kind === \"value\") {\n    return header.credential.value;\n  }\n\n  if (header.credential.kind === \"default\") {\n    const value = resolveDefaultCredentialValue(serviceId);\n    if (!value) {\n      throw new Error(\n        `Workspace policy for service \"${serviceId}\" requires ${describeDefaultCredentialSource(serviceId)}.`,\n      );\n    }\n    return value;\n  }\n\n  throw new Error(\n    `Workspace policy for service \"${serviceId}\" contains a redacted credential and cannot be applied.`,\n  );\n}\n\nfunction compileHeaderRules(\n  serviceId: string,\n  headers: readonly PolicyServiceHeaderTransform[] | undefined,\n): VercelNetworkPolicyRule[] {\n  if (!headers || headers.length === 0) {\n    return [];\n  }\n\n  const resolvedHeaders = Object.fromEntries(\n    headers.map((header) => [\n      header.headerName,\n      `${header.valuePrefix ?? \"\"}${resolveCredentialValue(serviceId, header)}`,\n    ]),\n  );\n\n  return [\n    {\n      transform: [\n        {\n          headers: resolvedHeaders,\n        },\n      ],\n    },\n  ];\n}\n\nexport function compileVercelNetworkPolicy(policy: WorkspacePolicy): VercelNetworkPolicy {\n  switch (policy.mode) {\n    case \"allow-all\":\n      return \"allow-all\";\n    case \"deny-all\":\n      return \"deny-all\";\n    case \"allow-services\": {\n      const allow: Record<string, VercelNetworkPolicyRule[]> = {};\n\n      for (const service of policy.services) {\n        const rules = compileHeaderRules(service.id, service.headers);\n        for (const domain of service.domains) {\n          const existing = allow[domain] ?? [];\n          allow[domain] = [...existing, ...rules];\n        }\n      }\n\n      return { allow };\n    }\n  }\n}\n","import { createVercelSandboxDriverFactory } from \"../drivers/vercel-sandbox.ts\";\nimport { createSandboxProvider } from \"../types.ts\";\nimport type { SandkitSandboxProvider, VercelSandboxOptions } from \"../types.ts\";\n\nexport type { SandkitSandboxProvider, VercelSandboxOptions } from \"../types.ts\";\n\nexport function vercelSandbox(options: VercelSandboxOptions = {}): SandkitSandboxProvider {\n  return createSandboxProvider(\"vercel\", createVercelSandboxDriverFactory(options));\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA,SAAS,eAAe;;;ACKjB,SAAS,8BAA8B,WAAuC;AACnF,UAAQ,WAAW;AAAA,IACjB,KAAK;AACH,aAAO,0BAA0B;AAAA,IACnC,KAAK;AACH,aAAO,2BAA2B;AAAA,IACpC,KAAK;AACH,aAAO,2BAA2B;AAAA,IACpC,KAAK;AACH,aAAO,8BAA8B;AAAA,IACvC;AACE,aAAO;AAAA,EACX;AACF;AAEO,SAAS,gCAAgC,WAA2B;AACzE,UAAQ,WAAW;AAAA,IACjB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO,mCAAmC,SAAS;AAAA,EACvD;AACF;;;ACtBA,SAAS,uBAAuB,WAAmB,QAA8C;AAC/F,MAAI,OAAO,WAAW,SAAS,SAAS;AACtC,WAAO,OAAO,WAAW;AAAA,EAC3B;AAEA,MAAI,OAAO,WAAW,SAAS,WAAW;AACxC,UAAM,QAAQ,8BAA8B,SAAS;AACrD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR,iCAAiC,SAAS,cAAc,gCAAgC,SAAS,CAAC;AAAA,MACpG;AAAA,IACF;AACA,WAAO;AAAA,EACT;AAEA,QAAM,IAAI;AAAA,IACR,iCAAiC,SAAS;AAAA,EAC5C;AACF;AAEA,SAAS,mBACP,WACA,SAC2B;AAC3B,MAAI,CAAC,WAAW,QAAQ,WAAW,GAAG;AACpC,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,kBAAkB,OAAO;AAAA,IAC7B,QAAQ,IAAI,CAAC,WAAW;AAAA,MACtB,OAAO;AAAA,MACP,GAAG,OAAO,eAAe,EAAE,GAAG,uBAAuB,WAAW,MAAM,CAAC;AAAA,IACzE,CAAC;AAAA,EACH;AAEA,SAAO;AAAA,IACL;AAAA,MACE,WAAW;AAAA,QACT;AAAA,UACE,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,2BAA2B,QAA8C;AACvF,UAAQ,OAAO,MAAM;AAAA,IACnB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK,kBAAkB;AACrB,YAAM,QAAmD,CAAC;AAE1D,iBAAW,WAAW,OAAO,UAAU;AACrC,cAAM,QAAQ,mBAAmB,QAAQ,IAAI,QAAQ,OAAO;AAC5D,mBAAW,UAAU,QAAQ,SAAS;AACpC,gBAAM,WAAW,MAAM,MAAM,KAAK,CAAC;AACnC,gBAAM,MAAM,IAAI,CAAC,GAAG,UAAU,GAAG,KAAK;AAAA,QACxC;AAAA,MACF;AAEA,aAAO,EAAE,MAAM;AAAA,IACjB;AAAA,EACF;AACF;;;AF3CA,IAAM,sBAAN,MAAmD;AAAA,EACxC;AAAA,EACA,WAAW;AAAA,EAEpB,YAAY,SAAkD;AAC5D,SAAK,WAAW;AAAA,EAClB;AAAA,EAEA,IAAI,KAAa;AACf,WAAO,KAAK,SAAS;AAAA,EACvB;AAAA,EAEA,MAAM,YAAY,QAAwC;AACxD,UAAM,KAAK,SAAS,oBAAoB,2BAA2B,MAAM,CAAC;AAAA,EAC5E;AAAA,EAEA,MAAM,kBAAgD;AACpD,UAAM,UAAU,KAAK;AACrB,UAAM,cAAa,oBAAI,KAAK,GAAE,YAAY;AAC1C,UAAM,YACJ,OAAO,QAAQ,YAAY,YAAY,OAAO,SAAS,QAAQ,OAAO,KAAK,QAAQ,UAAU,IACzF,QAAQ,UACR;AAEN,WAAO;AAAA,MACL,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,WAAW,IAAI,KAAK,KAAK,MAAM,UAAU,IAAI,SAAS,EAAE,YAAY;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,MAAM,WAAW,SAAiB,MAAwC;AACxE,UAAM,SAAS,MAAM,KAAK,SAAS,WAAW,SAAS,IAAI;AAC3D,UAAM,WAAW,MAAM,KAAK,mBAAmB,MAAM;AAErD,WAAO;AAAA,MACL,UAAU,SAAS;AAAA,MACnB,QAAQ,MAAM,SAAS,OAAO;AAAA,MAC9B,QAAQ,MAAM,SAAS,OAAO;AAAA,IAChC;AAAA,EACF;AAAA,EAEA,MAAM,aAAa,OAA4E;AAC7F,UAAM,UAAU,MAAM,KAAK,SAAS,WAAW;AAAA,MAC7C,KAAK,MAAM;AAAA,MACX,MAAM,CAAC,GAAG,MAAM,IAAI;AAAA,MACpB,UAAU;AAAA,IACZ,CAAC;AACD,QAAI,CAAC,sBAAsB,OAAO,GAAG;AACnC,YAAM,IAAI,MAAM,0DAA0D;AAAA,IAC5E;AAEA,UAAM,YAAY,QAAQ,SAAS,GAAG,KAAK,SAAS,SAAS,IAAI,KAAK,IAAI,CAAC;AAC3E,UAAM,sBAAsB;AAAA,MAC1B,sBAAsB,OAAO;AAAA,MAC7B,MAAM;AAAA,MACN,MAAM;AAAA,IACR;AAEA,WAAO;AAAA,MACL;AAAA,MACA,MAAM,YAAoC;AACxC,cAAM,WAAW,MAAM,QAAQ,KAAK;AACpC,eAAO;AAAA,UACL,UAAU,SAAS;AAAA,UACnB,QAAQ,MAAM,SAAS,OAAO;AAAA,UAC9B,QAAQ,MAAM,SAAS,OAAO;AAAA,QAChC;AAAA,MACF;AAAA,MACA,MAAM,sBAAsB,MAAM,oBAAoB,IAAI;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,MAAM,IAAI,MAA+B;AACvC,QAAI;AACF,aAAO,KAAK,SAAS,OAAO,IAAI;AAAA,IAClC,SAAS,OAAO;AACd,UAAI,EAAE,iBAAiB,UAAU,CAAC,MAAM,QAAQ,SAAS,mBAAmB,GAAG;AAC7E,cAAM;AAAA,MACR;AAEA,YAAM,YAAY,MAAM,QAAQ,IAAI,EAAE,WAAW,KAAK,SAAS,UAAU,CAAC;AAC1E,aAAO,UAAU,OAAO,IAAI;AAAA,IAC9B;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,YAAmC;AACrD,UAAM,gBACJ,KAAK,SACL;AACF,QAAI,CAAC,eAAe;AAClB,YAAM,IAAI,MAAM,uDAAuD;AAAA,IACzE;AAEA,UAAM,cAAc,KAAK,KAAK,UAAU,UAAU;AAAA,EACpD;AAAA,EAEA,MAAM,WAA2C;AAG/C,UAAM,WAAW,MAAM,KAAK,SAAS,SAAS;AAE9C,WAAO;AAAA,MACL,MAAM;AAAA,MACN,WAAW,KAAK,SAAS;AAAA,MACzB,OAAO;AAAA,QACL,YAAY,SAAS;AAAA,MACvB;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,mBAAmB,KAA8C;AACrE,QAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C,YAAM,IAAI,MAAM,4CAA4C;AAAA,IAC9D;AAEA,UAAM,YAAY;AAClB,QAAI,UAAU,MAAM;AAClB,aAAO,UAAU,KAAK;AAAA,IACxB;AAEA,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAAsB,OAA8C;AAC3E,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO;AAAA,EACT;AAEA,QAAM,YAAY;AAClB,MAAI,OAAO,UAAU,SAAS,YAAY;AACxC,WAAO;AAAA,EACT;AAEA,SAAO,UAAU,UAAU,UAAa,OAAO,UAAU,UAAU;AACrE;AAEA,SAAS,WAAwB,OAAsC;AACrE,SACE,UAAU,SACT,OAAO,UAAU,YAAY,OAAO,UAAU,eAC/C,OAAQ,MAAsB,OAAO,QAAQ,MAAM;AAEvD;AAEA,SAAS,gBAA6B,OAA2C;AAC/E,SACE,UAAU,SACT,OAAO,UAAU,YAAY,OAAO,UAAU,eAC/C,OAAQ,MAA2B,OAAO,aAAa,MAAM;AAEjE;AAEA,SAAS,sBAAsB,KAA8D;AAC3F,QAAM,UAAU,IAAI,OAAO;AAC3B,MAAI,YAAY,QAAW;AACzB,WAAO;AAAA,EACT;AACA,MAAI,gBAAyB,OAAO,GAAG;AACrC,WAAO;AAAA,EACT;AACA,MAAI,WAAoB,OAAO,GAAG;AAChC,WAAO,wBAAwB,OAAO;AAAA,EACxC;AACA,SAAO;AACT;AAEA,SAAS,wBAA2B,UAAyC;AAC3E,SAAO;AAAA,IACL,QAAQ,OAAO,aAAa,IAAI;AAC9B,iBAAW,SAAS,UAAU;AAC5B,cAAM;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,4BACP,MACA,UACA,UACwD;AACxD,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,QAAM,eAAsC,CAAC;AAC7C,QAAM,UAA6B,CAAC;AACpC,MAAI,YAAY;AAChB,MAAI,QAAiB;AACrB,MAAI,cAAc;AAElB,QAAM,gBAAgB,MAAM;AAC1B,WAAO,QAAQ,SAAS,GAAG;AACzB,cAAQ,IAAI,IAAI;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,MAAM,YAA2B;AACrC,QAAI,aAAa;AACf;AAAA,IACF;AACA,kBAAc;AAEd,QAAI;AACF,uBAAiB,OAAO,MAAM;AAC5B,cAAM,aAAa,oBAAoB,GAAG;AAC1C,YAAI,CAAC,YAAY;AACf;AAAA,QACF;AAEA,qBAAa,KAAK,UAAU;AAC5B,YAAI,WAAW,WAAW,UAAU;AAClC,qBAAW,WAAW,KAAK;AAAA,QAC7B,OAAO;AACL,qBAAW,WAAW,KAAK;AAAA,QAC7B;AACA,sBAAc;AAAA,MAChB;AAAA,IACF,SAAS,OAAO;AACd,cAAQ;AAAA,IACV,UAAE;AACA,kBAAY;AACZ,oBAAc;AAAA,IAChB;AAAA,EACF;AAEA,OAAK,IAAI,EAAE,MAAM,MAAM;AAAA,EAAC,CAAC;AAEzB,QAAM,cAAc,MAAqB;AACvC,WAAO,IAAI,QAAc,CAAC,YAAY;AACpC,cAAQ,KAAK,OAAO;AAAA,IACtB,CAAC;AAAA,EACH;AAEA,QAAM,oBAAoB,MAA0C;AAClE,WAAO;AAAA,MACL,QAAQ,OAAO,aAAa,IAAI;AAC9B,YAAI,QAAQ;AACZ,eAAO,MAAM;AACX,cAAI,QAAQ,aAAa,QAAQ;AAC/B,kBAAM,aAAa,OAAO;AAC1B;AAAA,UACF;AACA,cAAI,UAAU,MAAM;AAClB,kBAAM,iBAAiB,QAAQ,QAAQ,IAAI,MAAM,2BAA2B;AAAA,UAC9E;AACA,cAAI,WAAW;AACb;AAAA,UACF;AACA,gBAAM,YAAY;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,SAAS,oBAAoB,KAA0C;AAC5E,MAAI,OAAO,QAAQ,UAAU;AAC3B,WAAO,EAAE,QAAQ,UAAU,OAAO,IAAI;AAAA,EACxC;AACA,MAAI,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAC3C,WAAO;AAAA,EACT;AAEA,QAAM,YAAY;AAQlB,QAAM,cAAc,UAAU;AAC9B,QAAM,SAAS,gBAAgB,YAAY,gBAAgB,WAAW,cAAc;AACpF,QAAM,WACJ,UAAU,QACV,UAAU,UACV,UAAU,SACV,UAAU,QACV,UAAU,WACV;AAEF,MAAI,OAAO,aAAa,UAAU;AAChC,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,QAAQ,OAAO,SAAS;AACnC;AAEA,IAAM,6BAAN,MAAiE;AAAA,EACtD;AAAA,EACA;AAAA,EAET,YAAY,UAAgC,CAAC,GAAG;AAC9C,SAAK,WAAW,QAAQ,WAAW;AACnC,SAAK,kBAAkB;AAAA,MACrB,QAAQ,kBAAkB,QAAQ;AAAA,MAClC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,0BAA0B,OAAyB;AACjD,QAAI,EAAE,iBAAiB,QAAQ;AAC7B,aAAO;AAAA,IACT;AAEA,UAAM,UAAU,MAAM,QAAQ,YAAY;AAC1C,WACE,QAAQ,SAAS,WAAW,KAC5B,QAAQ,SAAS,gBAAgB,KACjC,QAAQ,SAAS,iBAAiB,KAClC,QAAQ,SAAS,iBAAiB;AAAA,EAEtC;AAAA,EAEA,MAAM,cACJ,YACA,SACwB;AACxB,UAAM,UAAU,KAAK,yBAAyB,OAAO;AAErD,UAAM,UAAU,MAAM,QAAQ,OAAO;AAAA,MACnC,SAAS,KAAK;AAAA,MACd;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,eAAe,2BAA2B,QAAQ,MAAM;AAAA,IAC1D,CAAC;AAED,WAAO,IAAI,oBAAoB,OAAO;AAAA,EACxC;AAAA,EAEA,MAAM,cACJ,WACA,UACA,SACwB;AACxB,UAAM,UAAU,KAAK,yBAAyB,OAAO;AACrD,UAAM,QAAQ,SAAS;AACvB,UAAM,aAAa,OAAO;AAC1B,UAAM,oBAAoB,UAAU,aAAa,SAAS;AAE1D,UAAM,UACJ,eAAe,UAAa,OAAO,eAAe,WAC9C,OAAO,sBAAsB,UACxB,MAAM;AACL,YAAM,IAAI,MAAM,wDAAwD;AAAA,IAC1E,GAAG,IACH,QAAQ,IAAI,EAAE,WAAW,kBAAkB,CAAC,KAChD,MAAM,QAAQ,OAAO;AAAA,MACnB,QAAQ;AAAA,QACN,MAAM;AAAA,QACN;AAAA,MACF;AAAA,MACA;AAAA,MACA,OAAO,QAAQ;AAAA,MACf,eAAe,2BAA2B,QAAQ,MAAM;AAAA,IAC1D,CAAC;AAKP,WAAO,IAAI,oBAAoB,OAAO;AAAA,EACxC;AAAA,EAEA,yBAAyB,SAAuC;AAC9D,WAAO,wBAAwB,QAAQ,aAAa,KAAK,iBAAiB,iBAAiB;AAAA,EAC7F;AACF;AAEA,SAAS,wBAAwB,OAAgB,OAAuB;AACtE,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AAEA,MACE,OAAO,UAAU,YACjB,CAAC,OAAO,UAAU,KAAK,KACvB,CAAC,OAAO,SAAS,KAAK,KACtB,SAAS,GACT;AACA,UAAM,IAAI,MAAM,GAAG,KAAK,8CAA8C;AAAA,EACxE;AAEA,SAAO;AACT;AAEO,SAAS,iCACd,UAAgC,CAAC,GACX;AACtB,SAAO,IAAI,2BAA2B,OAAO;AAC/C;;;AGtaO,SAAS,cAAc,UAAgC,CAAC,GAA2B;AACxF,SAAO,sBAAsB,UAAU,iCAAiC,OAAO,CAAC;AAClF;","names":[]}

package/dist/policies/ai-gateway.d.ts

@@ -0,0 +1,15 @@
+import { P as PolicyServiceDescriptor, W as WorkspacePolicy } from '../types-BCgprbo8.js';
+
+interface AiGatewayOptions {
+    readonly baseUrl?: string;
+}
+declare function resolveAiGatewayDefaultApiKey(): string | undefined;
+/**
+ * Allow outbound access to the currently configured AI Gateway endpoint host/domain.
+ * The configured endpoint is not treated as a generic capability; it follows
+ * `AI_GATEWAY_BASE_URL` and derives allowed host/domain entries from its hostname.
+ */
+declare function aiGateway(options?: AiGatewayOptions): PolicyServiceDescriptor;
+declare function allowAiGateway(): WorkspacePolicy;
+
+export { type AiGatewayOptions, aiGateway, allowAiGateway, resolveAiGatewayDefaultApiKey };

package/dist/policies/ai-gateway.js

@@ -0,0 +1,12 @@
+import {
+  aiGateway,
+  allowAiGateway,
+  resolveAiGatewayDefaultApiKey
+} from "../chunk-REGOUXVI.js";
+import "../chunk-VISDS5T7.js";
+export {
+  aiGateway,
+  allowAiGateway,
+  resolveAiGatewayDefaultApiKey
+};
+//# sourceMappingURL=ai-gateway.js.map

package/dist/policies/ai-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/policies/codex.d.ts

@@ -0,0 +1,10 @@
+import { P as PolicyServiceDescriptor, W as WorkspacePolicy } from '../types-BCgprbo8.js';
+
+interface CodexOptions {
+    readonly apiKey?: string;
+}
+declare function resolveCodexDefaultApiKey(): string | undefined;
+declare function codex(options?: CodexOptions): PolicyServiceDescriptor;
+declare function allowCodex(): WorkspacePolicy;
+
+export { type CodexOptions, allowCodex, codex, resolveCodexDefaultApiKey };

package/dist/policies/codex.js

@@ -0,0 +1,12 @@
+import {
+  allowCodex,
+  codex,
+  resolveCodexDefaultApiKey
+} from "../chunk-FSDVHEEX.js";
+import "../chunk-VISDS5T7.js";
+export {
+  allowCodex,
+  codex,
+  resolveCodexDefaultApiKey
+};
+//# sourceMappingURL=codex.js.map

package/dist/policies/codex.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/policies/gemini.d.ts

@@ -0,0 +1,10 @@
+import { P as PolicyServiceDescriptor, W as WorkspacePolicy } from '../types-BCgprbo8.js';
+
+interface GeminiOptions {
+    readonly apiKey?: string;
+}
+declare function resolveGeminiDefaultApiKey(): string | undefined;
+declare function gemini(options?: GeminiOptions): PolicyServiceDescriptor;
+declare function allowGemini(): WorkspacePolicy;
+
+export { type GeminiOptions, allowGemini, gemini, resolveGeminiDefaultApiKey };

package/dist/policies/gemini.js

@@ -0,0 +1,12 @@
+import {
+  allowGemini,
+  gemini,
+  resolveGeminiDefaultApiKey
+} from "../chunk-7DLK7LOM.js";
+import "../chunk-VISDS5T7.js";
+export {
+  allowGemini,
+  gemini,
+  resolveGeminiDefaultApiKey
+};
+//# sourceMappingURL=gemini.js.map

package/dist/policies/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/schema/index.d.ts

@@ -0,0 +1,60 @@
+type SandkitDialect = "sqlite" | "postgresql" | "mysql";
+type SandkitColumnType = "text" | "integer" | "boolean" | "json" | "timestamp";
+interface SandkitColumn {
+    name: string;
+    type: SandkitColumnType;
+    nullable?: boolean;
+    primaryKey?: boolean;
+    unique?: boolean;
+    defaultValue?: string | number | boolean | null;
+    comment?: string;
+    references?: {
+        table: string;
+        field: string;
+    };
+}
+interface SandkitIndex {
+    name: string;
+    columns: string[];
+    unique?: boolean;
+}
+interface SandkitTable {
+    name: string;
+    schema?: string;
+    comment?: string;
+    exportName?: string;
+    columns: SandkitColumn[];
+    indexes?: SandkitIndex[];
+}
+interface SandkitSchemaModel {
+    name: string;
+    version: number;
+    dialect: SandkitDialect;
+    tables: SandkitTable[];
+}
+declare const sandkitWorkspaceExport = "sandkitWorkspaces";
+declare const sandkitRunExport = "sandkitRuns";
+declare const sandkitPolicyExport = "sandkitPolicies";
+declare const sandkitSetupStateExport = "sandkitSetupStates";
+declare const sandkitWorkspaceTable: SandkitTable;
+declare const sandkitRunTable: SandkitTable;
+declare const sandkitPolicyTable: SandkitTable;
+declare const sandkitSetupStateTable: SandkitTable;
+declare function createSandkitSchemaModel(dialect?: SandkitDialect): SandkitSchemaModel;
+declare function createModelSnapshot(dialect?: SandkitDialect): {
+    model: SandkitSchemaModel;
+    generatedAt: string;
+};
+
+declare function renderTextSchema(model: SandkitSchemaModel): string;
+declare function createGeneratePayload(dialect: SandkitDialect, model: SandkitSchemaModel): {
+    dialect: SandkitDialect;
+    generatedAt: string;
+    summary: {
+        tableCount: number;
+        tableNames: string[];
+    };
+    schemaText: string;
+};
+
+export { type SandkitColumn, type SandkitColumnType, type SandkitDialect, type SandkitIndex, type SandkitSchemaModel, type SandkitTable, createGeneratePayload, createModelSnapshot, createSandkitSchemaModel, renderTextSchema, sandkitPolicyExport, sandkitPolicyTable, sandkitRunExport, sandkitRunTable, sandkitSetupStateExport, sandkitSetupStateTable, sandkitWorkspaceExport, sandkitWorkspaceTable };

package/dist/schema/index.js

@@ -0,0 +1,31 @@
+import {
+  createGeneratePayload,
+  renderTextSchema
+} from "../chunk-LC3IYBAL.js";
+import {
+  createModelSnapshot,
+  createSandkitSchemaModel,
+  sandkitPolicyExport,
+  sandkitPolicyTable,
+  sandkitRunExport,
+  sandkitRunTable,
+  sandkitSetupStateExport,
+  sandkitSetupStateTable,
+  sandkitWorkspaceExport,
+  sandkitWorkspaceTable
+} from "../chunk-RMMOQD5Y.js";
+export {
+  createGeneratePayload,
+  createModelSnapshot,
+  createSandkitSchemaModel,
+  renderTextSchema,
+  sandkitPolicyExport,
+  sandkitPolicyTable,
+  sandkitRunExport,
+  sandkitRunTable,
+  sandkitSetupStateExport,
+  sandkitSetupStateTable,
+  sandkitWorkspaceExport,
+  sandkitWorkspaceTable
+};
+//# sourceMappingURL=index.js.map

package/dist/schema/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}