@giselles-ai/sandkit 0.1.0

package/dist/chunk-CSOBTLWV.js

@@ -0,0 +1,202 @@
+import {
+  createId
+} from "./chunk-DLGUA3H7.js";
+
+// src/adapters/memory.ts
+var defaultWorkspaceStatus = "active";
+var defaultWorkspaceName = "default";
+var defaultRunStatus = "started";
+var getNow = () => (/* @__PURE__ */ new Date()).toISOString();
+function cloneSetupStateValue(value) {
+  if (value === void 0) {
+    return void 0;
+  }
+  if (Array.isArray(value)) {
+    return [...value];
+  }
+  if (typeof value === "object" && value !== null) {
+    return { ...value };
+  }
+  return value;
+}
+function normalizeWorkspaceRecord(workspace) {
+  return {
+    ...workspace,
+    metadata: workspace.metadata && { ...workspace.metadata }
+  };
+}
+var mergeMetadata = (existing, next) => {
+  if (typeof next === "undefined") {
+    return existing;
+  }
+  if (existing === void 0 || existing === null) {
+    return { ...next };
+  }
+  return { ...existing, ...next };
+};
+function createMemorySetupStatesAdapter() {
+  const setupStates = /* @__PURE__ */ new Map();
+  return {
+    async getSetupState(id) {
+      const state = setupStates.get(id);
+      if (!state) {
+        return null;
+      }
+      return {
+        id: state.id,
+        state: {
+          kind: state.state.kind,
+          sessionId: state.state.sessionId,
+          state: cloneSetupStateValue(state.state.state)
+        },
+        createdAt: state.createdAt,
+        updatedAt: state.updatedAt
+      };
+    },
+    async putSetupState(input) {
+      const now = getNow();
+      const existing = setupStates.get(input.id);
+      const next = existing ? {
+        ...existing,
+        state: {
+          kind: input.state.kind,
+          sessionId: input.state.sessionId,
+          state: cloneSetupStateValue(input.state.state)
+        },
+        updatedAt: now
+      } : {
+        id: input.id,
+        state: {
+          kind: input.state.kind,
+          sessionId: input.state.sessionId,
+          state: cloneSetupStateValue(input.state.state)
+        },
+        createdAt: now,
+        updatedAt: now
+      };
+      setupStates.set(input.id, next);
+      return next;
+    },
+    async deleteSetupState(id) {
+      setupStates.delete(id);
+    }
+  };
+}
+function createMemoryRunAdapter() {
+  const runs = /* @__PURE__ */ new Map();
+  return {
+    async createRun(input) {
+      const now = getNow();
+      const normalizedId = input.id?.trim() && input.id.trim().length > 0 ? input.id.trim() : createId("run");
+      const run = {
+        id: normalizedId,
+        workspaceId: input.workspaceId,
+        provider: input.provider,
+        executionTargetId: input.executionTargetId,
+        command: input.command,
+        args: input.args ?? [],
+        status: input.status ?? defaultRunStatus,
+        startedAt: input.startedAt ?? now,
+        policySnapshotId: input.policySnapshotId ?? void 0
+      };
+      runs.set(normalizedId, run);
+      return { ...run, args: run.args ? [...run.args] : run.args };
+    },
+    async finishRun(id, input) {
+      const current = runs.get(id);
+      if (!current) {
+        throw new Error(`Run with id "${id}" does not exist`);
+      }
+      const next = {
+        ...current,
+        status: input.status,
+        finishedAt: input.finishedAt,
+        exitCode: input.exitCode ?? current.exitCode,
+        stdout: input.stdout ?? current.stdout,
+        stderr: input.stderr ?? current.stderr,
+        providerCommit: input.providerCommit,
+        policySnapshotId: current.policySnapshotId
+      };
+      runs.set(id, next);
+      return { ...next, args: next.args ? [...next.args] : next.args };
+    }
+  };
+}
+function createMemoryPolicySnapshotAdapter() {
+  const policySnapshots = /* @__PURE__ */ new Map();
+  return {
+    async createPolicySnapshot(input) {
+      const now = getNow();
+      const normalizedId = input.id?.trim() && input.id.trim().length > 0 ? input.id.trim() : createId("policy-snapshot");
+      if (policySnapshots.has(normalizedId)) {
+        throw new Error(`Policy snapshot with id "${normalizedId}" already exists`);
+      }
+      const snapshot = {
+        id: normalizedId,
+        workspaceId: input.workspaceId,
+        policyId: input.policyId,
+        config: input.config,
+        createdAt: input.createdAt ?? now
+      };
+      policySnapshots.set(normalizedId, snapshot);
+      return { ...snapshot, config: snapshot.config };
+    }
+  };
+}
+function createMemoryWorkspaceAdapter() {
+  const workspaces = /* @__PURE__ */ new Map();
+  return {
+    async createWorkspace(input = {}) {
+      const now = getNow();
+      const normalizedId = input.id?.trim() && input.id.trim().length > 0 ? input.id.trim() : createId("workspace");
+      if (workspaces.has(normalizedId)) {
+        throw new Error(`Workspace with id "${normalizedId}" already exists`);
+      }
+      const workspace = {
+        id: normalizedId,
+        name: input.name ?? defaultWorkspaceName,
+        status: input.status ?? defaultWorkspaceStatus,
+        metadata: input.metadata ? { ...input.metadata } : void 0,
+        sandboxId: input.sandboxId === "" ? void 0 : input.sandboxId?.trim() || void 0,
+        lastResumedAt: input.lastResumedAt,
+        createdAt: now,
+        updatedAt: now
+      };
+      workspaces.set(normalizedId, workspace);
+      return normalizeWorkspaceRecord(workspace);
+    },
+    async getWorkspace(id) {
+      const workspace = workspaces.get(id);
+      return workspace ? normalizeWorkspaceRecord(workspace) : null;
+    },
+    async updateWorkspace(id, input) {
+      const current = workspaces.get(id);
+      if (!current) {
+        throw new Error(`Workspace with id "${id}" does not exist`);
+      }
+      const next = {
+        ...current,
+        metadata: mergeMetadata(current.metadata, input.metadata),
+        name: input.name ?? current.name,
+        status: input.status ?? current.status,
+        sandboxId: input.sandboxId === null ? void 0 : input.sandboxId ?? current.sandboxId,
+        lastResumedAt: input.lastResumedAt === null ? void 0 : input.lastResumedAt ?? current.lastResumedAt,
+        updatedAt: getNow()
+      };
+      workspaces.set(id, next);
+      return normalizeWorkspaceRecord(next);
+    }
+  };
+}
+var createMemoryAdapter = () => ({
+  id: "memory",
+  workspaces: createMemoryWorkspaceAdapter(),
+  setupStates: createMemorySetupStatesAdapter(),
+  runs: createMemoryRunAdapter(),
+  policySnapshots: createMemoryPolicySnapshotAdapter()
+});
+
+export {
+  createMemoryAdapter
+};
+//# sourceMappingURL=chunk-CSOBTLWV.js.map

package/dist/chunk-CSOBTLWV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/adapters/memory.ts"],"sourcesContent":["import { createId } from \"../core/ids.ts\";\nimport type {\n  WorkspaceAdapter,\n  WorkspaceCreateInput,\n  WorkspaceRecord,\n  WorkspaceUpdateInput,\n  SandkitAdapter,\n  SharedSetupState,\n  SetupStateRecord,\n  SetupStatePutInput,\n  RunAdapter,\n  RunCreateInput,\n  RunFinishInput,\n  RunRecord,\n  PolicySnapshotAdapter,\n  PolicySnapshotCreateInput,\n  PolicySnapshotRecord,\n} from \"./types\";\n\nconst defaultWorkspaceStatus = \"active\";\nconst defaultWorkspaceName = \"default\";\nconst defaultRunStatus = \"started\" as const;\n\nconst getNow = () => new Date().toISOString();\n\nfunction cloneSetupStateValue(value: SharedSetupState[\"state\"]): SharedSetupState[\"state\"] {\n  if (value === undefined) {\n    return undefined;\n  }\n\n  if (Array.isArray(value)) {\n    return [...value];\n  }\n\n  if (typeof value === \"object\" && value !== null) {\n    return { ...value } as SharedSetupState[\"state\"];\n  }\n\n  return value;\n}\n\nfunction normalizeWorkspaceRecord(workspace: WorkspaceRecord): WorkspaceRecord {\n  return {\n    ...workspace,\n    metadata: workspace.metadata && { ...workspace.metadata },\n  };\n}\n\nconst mergeMetadata = (\n  existing: WorkspaceRecord[\"metadata\"],\n  next?: WorkspaceRecord[\"metadata\"],\n) => {\n  if (typeof next === \"undefined\") {\n    return existing;\n  }\n  if (existing === undefined || existing === null) {\n    return { ...next };\n  }\n  return { ...existing, ...next };\n};\n\nfunction createMemorySetupStatesAdapter(): {\n  getSetupState: (id: string) => Promise<SetupStateRecord | null>;\n  putSetupState: (input: SetupStatePutInput) => Promise<SetupStateRecord>;\n  deleteSetupState: (id: string) => Promise<void>;\n} {\n  const setupStates = new Map<string, SetupStateRecord>();\n\n  return {\n    async getSetupState(id: string) {\n      const state = setupStates.get(id);\n      if (!state) {\n        return null;\n      }\n\n      return {\n        id: state.id,\n        state: {\n          kind: state.state.kind,\n          sessionId: state.state.sessionId,\n          state: cloneSetupStateValue(state.state.state),\n        },\n        createdAt: state.createdAt,\n        updatedAt: state.updatedAt,\n      };\n    },\n    async putSetupState(input: SetupStatePutInput) {\n      const now = getNow();\n      const existing = setupStates.get(input.id);\n      const next: SetupStateRecord = existing\n        ? {\n            ...existing,\n            state: {\n              kind: input.state.kind,\n              sessionId: input.state.sessionId,\n              state: cloneSetupStateValue(input.state.state),\n            },\n            updatedAt: now,\n          }\n        : {\n            id: input.id,\n            state: {\n              kind: input.state.kind,\n              sessionId: input.state.sessionId,\n              state: cloneSetupStateValue(input.state.state),\n            },\n            createdAt: now,\n            updatedAt: now,\n          };\n\n      setupStates.set(input.id, next);\n      return next;\n    },\n    async deleteSetupState(id: string) {\n      setupStates.delete(id);\n    },\n  };\n}\n\nfunction createMemoryRunAdapter(): RunAdapter {\n  const runs = new Map<string, RunRecord>();\n\n  return {\n    async createRun(input: RunCreateInput): Promise<RunRecord> {\n      const now = getNow();\n      const normalizedId =\n        input.id?.trim() && input.id.trim().length > 0 ? input.id.trim() : createId(\"run\");\n\n      const run: RunRecord = {\n        id: normalizedId,\n        workspaceId: input.workspaceId,\n        provider: input.provider,\n        executionTargetId: input.executionTargetId,\n        command: input.command,\n        args: input.args ?? [],\n        status: input.status ?? defaultRunStatus,\n        startedAt: input.startedAt ?? now,\n        policySnapshotId: input.policySnapshotId ?? undefined,\n      };\n\n      runs.set(normalizedId, run);\n      return { ...run, args: run.args ? [...run.args] : run.args };\n    },\n    async finishRun(id: string, input: RunFinishInput): Promise<RunRecord> {\n      const current = runs.get(id);\n      if (!current) {\n        throw new Error(`Run with id \"${id}\" does not exist`);\n      }\n\n      const next: RunRecord = {\n        ...current,\n        status: input.status,\n        finishedAt: input.finishedAt,\n        exitCode: input.exitCode ?? current.exitCode,\n        stdout: input.stdout ?? current.stdout,\n        stderr: input.stderr ?? current.stderr,\n        providerCommit: input.providerCommit,\n        policySnapshotId: current.policySnapshotId,\n      };\n\n      runs.set(id, next);\n      return { ...next, args: next.args ? [...next.args] : next.args };\n    },\n  };\n}\n\nfunction createMemoryPolicySnapshotAdapter(): PolicySnapshotAdapter {\n  const policySnapshots = new Map<string, PolicySnapshotRecord>();\n\n  return {\n    async createPolicySnapshot(input: PolicySnapshotCreateInput): Promise<PolicySnapshotRecord> {\n      const now = getNow();\n      const normalizedId =\n        input.id?.trim() && input.id.trim().length > 0\n          ? input.id.trim()\n          : createId(\"policy-snapshot\");\n\n      if (policySnapshots.has(normalizedId)) {\n        throw new Error(`Policy snapshot with id \"${normalizedId}\" already exists`);\n      }\n\n      const snapshot: PolicySnapshotRecord = {\n        id: normalizedId,\n        workspaceId: input.workspaceId,\n        policyId: input.policyId,\n        config: input.config,\n        createdAt: input.createdAt ?? now,\n      };\n\n      policySnapshots.set(normalizedId, snapshot);\n      return { ...snapshot, config: snapshot.config };\n    },\n  };\n}\n\nfunction createMemoryWorkspaceAdapter(): WorkspaceAdapter {\n  const workspaces = new Map<string, WorkspaceRecord>();\n\n  return {\n    async createWorkspace(input: WorkspaceCreateInput = {}) {\n      const now = getNow();\n      const normalizedId =\n        input.id?.trim() && input.id.trim().length > 0 ? input.id.trim() : createId(\"workspace\");\n\n      if (workspaces.has(normalizedId)) {\n        throw new Error(`Workspace with id \"${normalizedId}\" already exists`);\n      }\n\n      const workspace: WorkspaceRecord = {\n        id: normalizedId,\n        name: input.name ?? defaultWorkspaceName,\n        status: input.status ?? defaultWorkspaceStatus,\n        metadata: input.metadata ? { ...input.metadata } : undefined,\n        sandboxId: input.sandboxId === \"\" ? undefined : input.sandboxId?.trim() || undefined,\n        lastResumedAt: input.lastResumedAt,\n        createdAt: now,\n        updatedAt: now,\n      };\n      workspaces.set(normalizedId, workspace);\n      return normalizeWorkspaceRecord(workspace);\n    },\n    async getWorkspace(id: string) {\n      const workspace = workspaces.get(id);\n      return workspace ? normalizeWorkspaceRecord(workspace) : null;\n    },\n    async updateWorkspace(id: string, input: WorkspaceUpdateInput) {\n      const current = workspaces.get(id);\n      if (!current) {\n        throw new Error(`Workspace with id \"${id}\" does not exist`);\n      }\n\n      const next: WorkspaceRecord = {\n        ...current,\n        metadata: mergeMetadata(current.metadata, input.metadata),\n        name: input.name ?? current.name,\n        status: input.status ?? current.status,\n        sandboxId: input.sandboxId === null ? undefined : (input.sandboxId ?? current.sandboxId),\n        lastResumedAt:\n          input.lastResumedAt === null ? undefined : (input.lastResumedAt ?? current.lastResumedAt),\n        updatedAt: getNow(),\n      };\n\n      workspaces.set(id, next);\n      return normalizeWorkspaceRecord(next);\n    },\n  };\n}\n\nexport const createMemoryAdapter = (): SandkitAdapter => ({\n  id: \"memory\",\n  workspaces: createMemoryWorkspaceAdapter(),\n  setupStates: createMemorySetupStatesAdapter(),\n  runs: createMemoryRunAdapter(),\n  policySnapshots: createMemoryPolicySnapshotAdapter(),\n});\n"],"mappings":";;;;;AAmBA,IAAM,yBAAyB;AAC/B,IAAM,uBAAuB;AAC7B,IAAM,mBAAmB;AAEzB,IAAM,SAAS,OAAM,oBAAI,KAAK,GAAE,YAAY;AAE5C,SAAS,qBAAqB,OAA6D;AACzF,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AAEA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,CAAC,GAAG,KAAK;AAAA,EAClB;AAEA,MAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAC/C,WAAO,EAAE,GAAG,MAAM;AAAA,EACpB;AAEA,SAAO;AACT;AAEA,SAAS,yBAAyB,WAA6C;AAC7E,SAAO;AAAA,IACL,GAAG;AAAA,IACH,UAAU,UAAU,YAAY,EAAE,GAAG,UAAU,SAAS;AAAA,EAC1D;AACF;AAEA,IAAM,gBAAgB,CACpB,UACA,SACG;AACH,MAAI,OAAO,SAAS,aAAa;AAC/B,WAAO;AAAA,EACT;AACA,MAAI,aAAa,UAAa,aAAa,MAAM;AAC/C,WAAO,EAAE,GAAG,KAAK;AAAA,EACnB;AACA,SAAO,EAAE,GAAG,UAAU,GAAG,KAAK;AAChC;AAEA,SAAS,iCAIP;AACA,QAAM,cAAc,oBAAI,IAA8B;AAEtD,SAAO;AAAA,IACL,MAAM,cAAc,IAAY;AAC9B,YAAM,QAAQ,YAAY,IAAI,EAAE;AAChC,UAAI,CAAC,OAAO;AACV,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,QACL,IAAI,MAAM;AAAA,QACV,OAAO;AAAA,UACL,MAAM,MAAM,MAAM;AAAA,UAClB,WAAW,MAAM,MAAM;AAAA,UACvB,OAAO,qBAAqB,MAAM,MAAM,KAAK;AAAA,QAC/C;AAAA,QACA,WAAW,MAAM;AAAA,QACjB,WAAW,MAAM;AAAA,MACnB;AAAA,IACF;AAAA,IACA,MAAM,cAAc,OAA2B;AAC7C,YAAM,MAAM,OAAO;AACnB,YAAM,WAAW,YAAY,IAAI,MAAM,EAAE;AACzC,YAAM,OAAyB,WAC3B;AAAA,QACE,GAAG;AAAA,QACH,OAAO;AAAA,UACL,MAAM,MAAM,MAAM;AAAA,UAClB,WAAW,MAAM,MAAM;AAAA,UACvB,OAAO,qBAAqB,MAAM,MAAM,KAAK;AAAA,QAC/C;AAAA,QACA,WAAW;AAAA,MACb,IACA;AAAA,QACE,IAAI,MAAM;AAAA,QACV,OAAO;AAAA,UACL,MAAM,MAAM,MAAM;AAAA,UAClB,WAAW,MAAM,MAAM;AAAA,UACvB,OAAO,qBAAqB,MAAM,MAAM,KAAK;AAAA,QAC/C;AAAA,QACA,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AAEJ,kBAAY,IAAI,MAAM,IAAI,IAAI;AAC9B,aAAO;AAAA,IACT;AAAA,IACA,MAAM,iBAAiB,IAAY;AACjC,kBAAY,OAAO,EAAE;AAAA,IACvB;AAAA,EACF;AACF;AAEA,SAAS,yBAAqC;AAC5C,QAAM,OAAO,oBAAI,IAAuB;AAExC,SAAO;AAAA,IACL,MAAM,UAAU,OAA2C;AACzD,YAAM,MAAM,OAAO;AACnB,YAAM,eACJ,MAAM,IAAI,KAAK,KAAK,MAAM,GAAG,KAAK,EAAE,SAAS,IAAI,MAAM,GAAG,KAAK,IAAI,SAAS,KAAK;AAEnF,YAAM,MAAiB;AAAA,QACrB,IAAI;AAAA,QACJ,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,mBAAmB,MAAM;AAAA,QACzB,SAAS,MAAM;AAAA,QACf,MAAM,MAAM,QAAQ,CAAC;AAAA,QACrB,QAAQ,MAAM,UAAU;AAAA,QACxB,WAAW,MAAM,aAAa;AAAA,QAC9B,kBAAkB,MAAM,oBAAoB;AAAA,MAC9C;AAEA,WAAK,IAAI,cAAc,GAAG;AAC1B,aAAO,EAAE,GAAG,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,KAAK;AAAA,IAC7D;AAAA,IACA,MAAM,UAAU,IAAY,OAA2C;AACrE,YAAM,UAAU,KAAK,IAAI,EAAE;AAC3B,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,gBAAgB,EAAE,kBAAkB;AAAA,MACtD;AAEA,YAAM,OAAkB;AAAA,QACtB,GAAG;AAAA,QACH,QAAQ,MAAM;AAAA,QACd,YAAY,MAAM;AAAA,QAClB,UAAU,MAAM,YAAY,QAAQ;AAAA,QACpC,QAAQ,MAAM,UAAU,QAAQ;AAAA,QAChC,QAAQ,MAAM,UAAU,QAAQ;AAAA,QAChC,gBAAgB,MAAM;AAAA,QACtB,kBAAkB,QAAQ;AAAA,MAC5B;AAEA,WAAK,IAAI,IAAI,IAAI;AACjB,aAAO,EAAE,GAAG,MAAM,MAAM,KAAK,OAAO,CAAC,GAAG,KAAK,IAAI,IAAI,KAAK,KAAK;AAAA,IACjE;AAAA,EACF;AACF;AAEA,SAAS,oCAA2D;AAClE,QAAM,kBAAkB,oBAAI,IAAkC;AAE9D,SAAO;AAAA,IACL,MAAM,qBAAqB,OAAiE;AAC1F,YAAM,MAAM,OAAO;AACnB,YAAM,eACJ,MAAM,IAAI,KAAK,KAAK,MAAM,GAAG,KAAK,EAAE,SAAS,IACzC,MAAM,GAAG,KAAK,IACd,SAAS,iBAAiB;AAEhC,UAAI,gBAAgB,IAAI,YAAY,GAAG;AACrC,cAAM,IAAI,MAAM,4BAA4B,YAAY,kBAAkB;AAAA,MAC5E;AAEA,YAAM,WAAiC;AAAA,QACrC,IAAI;AAAA,QACJ,aAAa,MAAM;AAAA,QACnB,UAAU,MAAM;AAAA,QAChB,QAAQ,MAAM;AAAA,QACd,WAAW,MAAM,aAAa;AAAA,MAChC;AAEA,sBAAgB,IAAI,cAAc,QAAQ;AAC1C,aAAO,EAAE,GAAG,UAAU,QAAQ,SAAS,OAAO;AAAA,IAChD;AAAA,EACF;AACF;AAEA,SAAS,+BAAiD;AACxD,QAAM,aAAa,oBAAI,IAA6B;AAEpD,SAAO;AAAA,IACL,MAAM,gBAAgB,QAA8B,CAAC,GAAG;AACtD,YAAM,MAAM,OAAO;AACnB,YAAM,eACJ,MAAM,IAAI,KAAK,KAAK,MAAM,GAAG,KAAK,EAAE,SAAS,IAAI,MAAM,GAAG,KAAK,IAAI,SAAS,WAAW;AAEzF,UAAI,WAAW,IAAI,YAAY,GAAG;AAChC,cAAM,IAAI,MAAM,sBAAsB,YAAY,kBAAkB;AAAA,MACtE;AAEA,YAAM,YAA6B;AAAA,QACjC,IAAI;AAAA,QACJ,MAAM,MAAM,QAAQ;AAAA,QACpB,QAAQ,MAAM,UAAU;AAAA,QACxB,UAAU,MAAM,WAAW,EAAE,GAAG,MAAM,SAAS,IAAI;AAAA,QACnD,WAAW,MAAM,cAAc,KAAK,SAAY,MAAM,WAAW,KAAK,KAAK;AAAA,QAC3E,eAAe,MAAM;AAAA,QACrB,WAAW;AAAA,QACX,WAAW;AAAA,MACb;AACA,iBAAW,IAAI,cAAc,SAAS;AACtC,aAAO,yBAAyB,SAAS;AAAA,IAC3C;AAAA,IACA,MAAM,aAAa,IAAY;AAC7B,YAAM,YAAY,WAAW,IAAI,EAAE;AACnC,aAAO,YAAY,yBAAyB,SAAS,IAAI;AAAA,IAC3D;AAAA,IACA,MAAM,gBAAgB,IAAY,OAA6B;AAC7D,YAAM,UAAU,WAAW,IAAI,EAAE;AACjC,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,sBAAsB,EAAE,kBAAkB;AAAA,MAC5D;AAEA,YAAM,OAAwB;AAAA,QAC5B,GAAG;AAAA,QACH,UAAU,cAAc,QAAQ,UAAU,MAAM,QAAQ;AAAA,QACxD,MAAM,MAAM,QAAQ,QAAQ;AAAA,QAC5B,QAAQ,MAAM,UAAU,QAAQ;AAAA,QAChC,WAAW,MAAM,cAAc,OAAO,SAAa,MAAM,aAAa,QAAQ;AAAA,QAC9E,eACE,MAAM,kBAAkB,OAAO,SAAa,MAAM,iBAAiB,QAAQ;AAAA,QAC7E,WAAW,OAAO;AAAA,MACpB;AAEA,iBAAW,IAAI,IAAI,IAAI;AACvB,aAAO,yBAAyB,IAAI;AAAA,IACtC;AAAA,EACF;AACF;AAEO,IAAM,sBAAsB,OAAuB;AAAA,EACxD,IAAI;AAAA,EACJ,YAAY,6BAA6B;AAAA,EACzC,aAAa,+BAA+B;AAAA,EAC5C,MAAM,uBAAuB;AAAA,EAC7B,iBAAiB,kCAAkC;AACrD;","names":[]}

package/dist/chunk-DLGUA3H7.js

@@ -0,0 +1,9 @@
+// src/core/ids.ts
+function createId(prefix) {
+  return `${prefix}_${crypto.randomUUID()}`;
+}
+
+export {
+  createId
+};
+//# sourceMappingURL=chunk-DLGUA3H7.js.map

package/dist/chunk-DLGUA3H7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/ids.ts"],"sourcesContent":["export function createId(prefix: string): string {\n  return `${prefix}_${crypto.randomUUID()}`;\n}\n"],"mappings":";AAAO,SAAS,SAAS,QAAwB;AAC/C,SAAO,GAAG,MAAM,IAAI,OAAO,WAAW,CAAC;AACzC;","names":[]}

package/dist/chunk-FSDVHEEX.js

@@ -0,0 +1,45 @@
+import {
+  allowService
+} from "./chunk-VISDS5T7.js";
+
+// src/policies/codex.ts
+var CODEX_DOMAINS = ["api.openai.com", "*.openai.com", "openrouter.ai", "*.openrouter.ai"];
+function resolveCodexCredential(options) {
+  if (options === void 0) {
+    return { kind: "default" };
+  }
+  if (typeof options.apiKey !== "string" || options.apiKey.trim().length === 0) {
+    throw new Error(
+      'codex(...) explicit override requires a non-empty "apiKey". Omit the options object to use CODEX_API_KEY.'
+    );
+  }
+  return { kind: "value", value: options.apiKey };
+}
+function resolveCodexDefaultApiKey() {
+  return process.env.CODEX_API_KEY;
+}
+function codex(options) {
+  return {
+    id: "codex",
+    name: "Codex",
+    description: "Allow outbound access commonly needed by Codex-style clients.",
+    domains: CODEX_DOMAINS,
+    headers: [
+      {
+        headerName: "authorization",
+        valuePrefix: "Bearer ",
+        credential: resolveCodexCredential(options)
+      }
+    ]
+  };
+}
+function allowCodex() {
+  return allowService(codex());
+}
+
+export {
+  resolveCodexDefaultApiKey,
+  codex,
+  allowCodex
+};
+//# sourceMappingURL=chunk-FSDVHEEX.js.map

package/dist/chunk-FSDVHEEX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/policies/codex.ts"],"sourcesContent":["import { allowService } from \"./dsl.ts\";\nimport type { PolicyServiceDescriptor, WorkspacePolicy } from \"./types.ts\";\n\nconst CODEX_DOMAINS = [\"api.openai.com\", \"*.openai.com\", \"openrouter.ai\", \"*.openrouter.ai\"];\n\nexport interface CodexOptions {\n  readonly apiKey?: string;\n}\n\nfunction resolveCodexCredential(options?: CodexOptions) {\n  if (options === undefined) {\n    return { kind: \"default\" } as const;\n  }\n\n  if (typeof options.apiKey !== \"string\" || options.apiKey.trim().length === 0) {\n    throw new Error(\n      'codex(...) explicit override requires a non-empty \"apiKey\". Omit the options object to use CODEX_API_KEY.',\n    );\n  }\n\n  return { kind: \"value\", value: options.apiKey } as const;\n}\n\nexport function resolveCodexDefaultApiKey(): string | undefined {\n  return process.env.CODEX_API_KEY;\n}\n\nexport function codex(options?: CodexOptions): PolicyServiceDescriptor {\n  return {\n    id: \"codex\",\n    name: \"Codex\",\n    description: \"Allow outbound access commonly needed by Codex-style clients.\",\n    domains: CODEX_DOMAINS,\n    headers: [\n      {\n        headerName: \"authorization\",\n        valuePrefix: \"Bearer \",\n        credential: resolveCodexCredential(options),\n      },\n    ],\n  };\n}\n\nexport function allowCodex(): WorkspacePolicy {\n  return allowService(codex());\n}\n"],"mappings":";;;;;AAGA,IAAM,gBAAgB,CAAC,kBAAkB,gBAAgB,iBAAiB,iBAAiB;AAM3F,SAAS,uBAAuB,SAAwB;AACtD,MAAI,YAAY,QAAW;AACzB,WAAO,EAAE,MAAM,UAAU;AAAA,EAC3B;AAEA,MAAI,OAAO,QAAQ,WAAW,YAAY,QAAQ,OAAO,KAAK,EAAE,WAAW,GAAG;AAC5E,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,MAAM,SAAS,OAAO,QAAQ,OAAO;AAChD;AAEO,SAAS,4BAAgD;AAC9D,SAAO,QAAQ,IAAI;AACrB;AAEO,SAAS,MAAM,SAAiD;AACrE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,SAAS;AAAA,IACT,SAAS;AAAA,MACP;AAAA,QACE,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,YAAY,uBAAuB,OAAO;AAAA,MAC5C;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,aAA8B;AAC5C,SAAO,aAAa,MAAM,CAAC;AAC7B;","names":[]}

package/dist/chunk-HVYCAAZQ.js

@@ -0,0 +1,25 @@
+// src/types.ts
+var sandboxProviderContract = /* @__PURE__ */ Symbol("sandkit.sandbox.provider");
+function createSandboxProvider(provider, driverFactory) {
+  return {
+    [sandboxProviderContract]: {
+      provider,
+      driverFactory
+    }
+  };
+}
+function getSandboxDriverFactory(sandboxProvider) {
+  const driverFactory = sandboxProvider[sandboxProviderContract]?.driverFactory;
+  if (!driverFactory) {
+    throw new Error(
+      "SandkitOptions.sandbox is invalid. Pass a provider created by Sandkit integrations such as vercelSandbox(...)."
+    );
+  }
+  return driverFactory;
+}
+
+export {
+  createSandboxProvider,
+  getSandboxDriverFactory
+};
+//# sourceMappingURL=chunk-HVYCAAZQ.js.map

package/dist/chunk-HVYCAAZQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types.ts"],"sourcesContent":["import type { SandkitAdapter, WorkspaceRecord } from \"./adapters/types.ts\";\nimport type {\n  PolicySnapshotAdapter,\n  PolicySnapshotRecord,\n  PolicySnapshotCreateInput,\n  RunAdapter,\n  RunCreateInput,\n  RunFinishInput,\n  RunRecord,\n  RunStatus,\n  SetupStateAdapter,\n  SetupStateRecord,\n  SetupStatePutInput,\n  WorkspaceMetadata,\n  SharedSetup,\n  SharedSetupState,\n  WorkspaceStatus,\n} from \"./adapters/types.ts\";\nimport type { WorkspacePolicy } from \"./policies/types.ts\";\n\nexport type JsonPrimitive = boolean | number | string | null;\n\nexport type JsonValue =\n  | JsonPrimitive\n  | JsonValue[]\n  | {\n      [key: string]: JsonValue;\n    };\n\nexport type {\n  SandkitAdapter,\n  WorkspaceRecord,\n  RunAdapter,\n  RunCreateInput,\n  RunFinishInput,\n  RunRecord,\n  PolicySnapshotAdapter,\n  PolicySnapshotRecord,\n  PolicySnapshotCreateInput,\n  RunStatus,\n  SetupStateAdapter,\n  SetupStateRecord,\n  SetupStatePutInput,\n  SharedSetup,\n  SharedSetupState,\n};\nexport type { WorkspacePolicy };\n\nexport interface WorkspaceCreateOptions {\n  id?: string;\n  name?: string;\n  metadata?: WorkspaceMetadata;\n  policy?: WorkspacePolicy;\n  sandbox?: {\n    /**\n     * Durable workspace default for provider port publication. This affects\n     * create/restore behavior for live session/public URL flows, not the\n     * durable runCommand() unit-of-work model itself.\n     */\n    readonly exposedPorts?: readonly number[];\n  };\n  status?: WorkspaceStatus;\n  sandboxId?: string;\n  lastResumedAt?: string;\n}\n\nexport interface CommandResult {\n  exitCode: number;\n  stderr: string;\n  stdout: string;\n}\n\nexport interface SandboxSessionLease {\n  readonly sandboxId: string;\n  readonly observedAt: string;\n  readonly expiresAt: string;\n}\n\nexport interface WorkspaceSandboxLease {\n  readonly sandboxId: string;\n  readonly observedAt: string;\n  readonly expiresAt: string;\n  readonly remainingMs: number;\n}\n\nexport interface WorkspaceSessionProcess {\n  readonly processId: string;\n  wait(): Promise<CommandResult>;\n  /**\n   * Accesses the same normalized log stream used by onStdout/onStderr callbacks.\n   * Sandkit keeps a single internal stream, so callbacks and logs() observe\n   * the same sequence and buffered historical chunks are replayed to new readers.\n   */\n  logs?: () => AsyncIterable<WorkspaceSessionLog>;\n}\n\nexport interface WorkspaceSessionLog {\n  readonly stream: \"stdout\" | \"stderr\";\n  readonly chunk: string;\n}\n\nexport interface WorkspaceSessionProcessStartInput {\n  readonly command: string;\n  readonly args: readonly string[];\n  /**\n   * Optional per-call policy override for this session process.\n   */\n  readonly policy?: WorkspacePolicy;\n  /**\n   * Callbacks consume chunks from Sandkit's normalized process log stream.\n   */\n  readonly onStdout?: ((chunk: string) => void) | undefined;\n  /**\n   * Callbacks consume chunks from Sandkit's normalized process log stream.\n   */\n  readonly onStderr?: ((chunk: string) => void) | undefined;\n}\n\nexport interface SandboxRunCommandOptions {\n  readonly command: string;\n  readonly args?: readonly string[];\n  readonly policy?: WorkspacePolicy;\n}\n\nexport interface PersistedSandboxState {\n  readonly kind: string;\n  readonly sessionId: string;\n  readonly state?: JsonValue;\n}\n\nexport interface SandboxDriver {\n  readonly id: string;\n  readonly provider: string;\n  applyPolicy(policy: WorkspacePolicy): Promise<void>;\n  /**\n   * Returns lease timing observed from the current sandbox instance.\n   * Some providers expose this as an interpreted timeout value.\n   * Sandkit persists lease updates only from explicit session open/extend paths,\n   * so callers should not treat mere reads as lease refreshes.\n   */\n  getSessionLease(): Promise<SandboxSessionLease>;\n  runCommand(command: string, args: string[]): Promise<CommandResult>;\n  startProcess?(input: WorkspaceSessionProcessStartInput): Promise<WorkspaceSessionProcess>;\n  /** Persists and restores durability state through commit() and attach/restore APIs. */\n  snapshot(): Promise<PersistedSandboxState>;\n  url?(port: number): Promise<string>;\n  extendTimeout?(durationMs: number): Promise<void>;\n}\n\nexport interface SandboxCreateOptions {\n  readonly policy: WorkspacePolicy;\n  readonly exposedPorts?: readonly number[];\n  readonly timeoutMs?: number;\n}\n\nexport interface SandboxDriverFactory {\n  createSandbox(workspace: WorkspaceRecord, options: SandboxCreateOptions): Promise<SandboxDriver>;\n  resumeSandbox(\n    workspace: WorkspaceRecord,\n    snapshot: PersistedSandboxState,\n    options: SandboxCreateOptions,\n  ): Promise<SandboxDriver>;\n  isSessionUnavailableError?(error: unknown): boolean;\n}\n\nexport interface VercelSandboxOptions {\n  runtime?: string;\n  /**\n   * Provider default sandbox lease timeout in milliseconds. Sandkit uses this\n   * when creating or restoring a sandbox unless openSession({ timeoutMs })\n   * supplies a live-session override.\n   */\n  defaultTimeout?: number;\n  /**\n   * Legacy alias retained for compatibility with existing call sites.\n   * Prefer defaultTimeout for new code.\n   */\n  timeout?: number;\n}\n\nconst sandboxProviderContract = Symbol(\"sandkit.sandbox.provider\");\n\ntype SandboxProviderRecord = {\n  readonly provider: string;\n  readonly driverFactory: SandboxDriverFactory;\n};\n\nexport interface SandkitSandboxProvider {\n  readonly [sandboxProviderContract]: SandboxProviderRecord;\n}\n\nexport function createSandboxProvider(\n  provider: string,\n  driverFactory: SandboxDriverFactory,\n): SandkitSandboxProvider {\n  return {\n    [sandboxProviderContract]: {\n      provider,\n      driverFactory,\n    },\n  };\n}\n\nexport function getSandboxDriverFactory(\n  sandboxProvider: SandkitSandboxProvider,\n): SandboxDriverFactory {\n  const driverFactory = sandboxProvider[sandboxProviderContract]?.driverFactory;\n  if (!driverFactory) {\n    throw new Error(\n      \"SandkitOptions.sandbox is invalid. Pass a provider created by Sandkit integrations such as vercelSandbox(...).\",\n    );\n  }\n\n  return driverFactory;\n}\n\nexport interface SandkitOptions {\n  readonly database?: SandkitAdapter | undefined;\n  readonly setup?: SharedSetup | undefined;\n  readonly network?: readonly unknown[] | undefined;\n  readonly sandbox: SandkitSandboxProvider;\n}\n"],"mappings":";AAoLA,IAAM,0BAA0B,uBAAO,0BAA0B;AAW1D,SAAS,sBACd,UACA,eACwB;AACxB,SAAO;AAAA,IACL,CAAC,uBAAuB,GAAG;AAAA,MACzB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,wBACd,iBACsB;AACtB,QAAM,gBAAgB,gBAAgB,uBAAuB,GAAG;AAChE,MAAI,CAAC,eAAe;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;","names":[]}

package/dist/chunk-LC3IYBAL.js

@@ -0,0 +1,100 @@
+// src/schema/generate.ts
+var typeMap = {
+  sqlite: {
+    text: { type: "text" },
+    integer: { type: "integer" },
+    boolean: { type: "integer", options: "{ mode: 'boolean' }" },
+    json: { type: "text", options: "{ mode: 'json' }" },
+    timestamp: { type: "integer", options: "{ mode: 'timestamp_ms' }" }
+  },
+  postgresql: {
+    text: { type: "text" },
+    integer: { type: "integer" },
+    boolean: { type: "boolean" },
+    json: { type: "jsonb" },
+    timestamp: { type: "timestamp" }
+  },
+  mysql: {
+    text: { type: "text" },
+    integer: { type: "int" },
+    boolean: { type: "boolean" },
+    json: { type: "json" },
+    timestamp: { type: "timestamp" }
+  }
+};
+var tableFactoryByDialect = {
+  sqlite: "sqliteTable",
+  postgresql: "pgTable",
+  mysql: "mysqlTable"
+};
+function renderTextSchema(model) {
+  const exportNameByTable = new Map(
+    model.tables.map((table) => [table.name, table.exportName ?? table.name])
+  );
+  const entries = model.tables.map((table) => {
+    const builder = tableFactoryByDialect[model.dialect];
+    const tableExpr = model.dialect === "sqlite" ? `${builder}("${table.name}", {` : `${builder}("${table.name}", {
+`;
+    const row = table.columns.map((column) => {
+      const mappedDialect = typeMap[model.dialect];
+      if (!mappedDialect) {
+        throw new Error(`Unsupported dialect "${model.dialect}"`);
+      }
+      const mappedType = mappedDialect[column.type];
+      if (!mappedType) {
+        throw new Error(
+          `Unsupported column type "${column.type}" for dialect "${model.dialect}"`
+        );
+      }
+      const optionsSuffix = mappedType.options ? `, ${mappedType.options}` : "";
+      const defaultValue = column.defaultValue === null ? "default null" : "";
+      const required = column.nullable === true ? "" : ".notNull()";
+      const unique = column.unique ? ".unique()" : "";
+      const primary = column.primaryKey ? ".primaryKey()" : "";
+      const ref = column.references ? `.references(() => ${exportNameByTable.get(column.references.table) ?? column.references.table}.${column.references.field})` : "";
+      return `  ${column.name}: ${mappedType.type}("${column.name}"${optionsSuffix})${required}${defaultValue}${unique}${primary}${ref}`;
+    }).join(",\n");
+    const rows = row ? `
+${row}
+` : "\n";
+    const exportName = table.exportName ?? table.name;
+    return `export const ${exportName} = ${tableExpr}${rows}});`;
+  }).join("\n\n");
+  const imports = {
+    sqlite: 'import { integer, sqliteTable, text } from "drizzle-orm/sqlite-core";',
+    postgresql: 'import { boolean, integer, jsonb, pgTable, text, timestamp } from "drizzle-orm/pg-core";',
+    mysql: 'import { boolean, int, json, mysqlTable, text, timestamp } from "drizzle-orm/mysql-core";'
+  };
+  return `// This file is generated from Sandkit schema model.
+// Provider: ${model.dialect}
+// Version: ${model.version}
+
+${imports[model.dialect]}
+
+${entries}
+
+export const sandkitSchema = {
+${model.tables.map((table) => {
+    const exportName = table.exportName ?? table.name;
+    return `  ${exportName},`;
+  }).join("\n")}
+};
+`;
+}
+function createGeneratePayload(dialect, model) {
+  return {
+    dialect,
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    summary: {
+      tableCount: model.tables.length,
+      tableNames: model.tables.map((table) => table.name)
+    },
+    schemaText: renderTextSchema(model)
+  };
+}
+
+export {
+  renderTextSchema,
+  createGeneratePayload
+};
+//# sourceMappingURL=chunk-LC3IYBAL.js.map

package/dist/chunk-LC3IYBAL.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schema/generate.ts"],"sourcesContent":["import type { SandkitSchemaModel, SandkitDialect } from \"./model\";\n\ninterface TypedColumnExpr {\n  type: string;\n  options?: string;\n}\n\ntype SchemaTypeMap = Record<\n  string,\n  {\n    text: TypedColumnExpr;\n    integer: TypedColumnExpr;\n    boolean: TypedColumnExpr;\n    json: TypedColumnExpr;\n    timestamp: TypedColumnExpr;\n  }\n>;\n\nconst typeMap: SchemaTypeMap = {\n  sqlite: {\n    text: { type: \"text\" },\n    integer: { type: \"integer\" },\n    boolean: { type: \"integer\", options: \"{ mode: 'boolean' }\" },\n    json: { type: \"text\", options: \"{ mode: 'json' }\" },\n    timestamp: { type: \"integer\", options: \"{ mode: 'timestamp_ms' }\" },\n  },\n  postgresql: {\n    text: { type: \"text\" },\n    integer: { type: \"integer\" },\n    boolean: { type: \"boolean\" },\n    json: { type: \"jsonb\" },\n    timestamp: { type: \"timestamp\" },\n  },\n  mysql: {\n    text: { type: \"text\" },\n    integer: { type: \"int\" },\n    boolean: { type: \"boolean\" },\n    json: { type: \"json\" },\n    timestamp: { type: \"timestamp\" },\n  },\n} as const;\n\nconst tableFactoryByDialect = {\n  sqlite: \"sqliteTable\",\n  postgresql: \"pgTable\",\n  mysql: \"mysqlTable\",\n} as const;\n\nexport function renderTextSchema(model: SandkitSchemaModel): string {\n  const exportNameByTable = new Map(\n    model.tables.map((table) => [table.name, table.exportName ?? table.name]),\n  );\n\n  const entries = model.tables\n    .map((table) => {\n      const builder = tableFactoryByDialect[model.dialect];\n      const tableExpr =\n        model.dialect === \"sqlite\"\n          ? `${builder}(\"${table.name}\", {`\n          : `${builder}(\"${table.name}\", {\\n`;\n\n      const row = table.columns\n        .map((column) => {\n          const mappedDialect = typeMap[model.dialect];\n          if (!mappedDialect) {\n            throw new Error(`Unsupported dialect \"${model.dialect}\"`);\n          }\n\n          const mappedType = mappedDialect[column.type];\n          if (!mappedType) {\n            throw new Error(\n              `Unsupported column type \"${column.type}\" for dialect \"${model.dialect}\"`,\n            );\n          }\n\n          const optionsSuffix = mappedType.options ? `, ${mappedType.options}` : \"\";\n          const defaultValue = column.defaultValue === null ? \"default null\" : \"\";\n          const required = column.nullable === true ? \"\" : \".notNull()\";\n          const unique = column.unique ? \".unique()\" : \"\";\n          const primary = column.primaryKey ? \".primaryKey()\" : \"\";\n          const ref = column.references\n            ? `.references(() => ${\n                exportNameByTable.get(column.references.table) ?? column.references.table\n              }.${column.references.field})`\n            : \"\";\n          return `  ${column.name}: ${mappedType.type}(\"${column.name}\"${optionsSuffix})${required}${defaultValue}${unique}${primary}${ref}`;\n        })\n        .join(\",\\n\");\n\n      const rows = row ? `\\n${row}\\n` : \"\\n\";\n      const exportName = table.exportName ?? table.name;\n      return `export const ${exportName} = ${tableExpr}${rows}});`;\n    })\n    .join(\"\\n\\n\");\n\n  const imports = {\n    sqlite: 'import { integer, sqliteTable, text } from \"drizzle-orm/sqlite-core\";',\n    postgresql:\n      'import { boolean, integer, jsonb, pgTable, text, timestamp } from \"drizzle-orm/pg-core\";',\n    mysql:\n      'import { boolean, int, json, mysqlTable, text, timestamp } from \"drizzle-orm/mysql-core\";',\n  } as const;\n\n  return `// This file is generated from Sandkit schema model.\\n// Provider: ${model.dialect}\\n// Version: ${model.version}\\n\\n${imports[model.dialect]}\\n\\n${entries}\\n\\nexport const sandkitSchema = {\\n${model.tables\n    .map((table) => {\n      const exportName = table.exportName ?? table.name;\n      return `  ${exportName},`;\n    })\n    .join(\"\\n\")}\\n};\\n`;\n}\n\nexport function createGeneratePayload(dialect: SandkitDialect, model: SandkitSchemaModel) {\n  return {\n    dialect,\n    generatedAt: new Date().toISOString(),\n    summary: {\n      tableCount: model.tables.length,\n      tableNames: model.tables.map((table) => table.name),\n    },\n    schemaText: renderTextSchema(model),\n  };\n}\n"],"mappings":";AAkBA,IAAM,UAAyB;AAAA,EAC7B,QAAQ;AAAA,IACN,MAAM,EAAE,MAAM,OAAO;AAAA,IACrB,SAAS,EAAE,MAAM,UAAU;AAAA,IAC3B,SAAS,EAAE,MAAM,WAAW,SAAS,sBAAsB;AAAA,IAC3D,MAAM,EAAE,MAAM,QAAQ,SAAS,mBAAmB;AAAA,IAClD,WAAW,EAAE,MAAM,WAAW,SAAS,2BAA2B;AAAA,EACpE;AAAA,EACA,YAAY;AAAA,IACV,MAAM,EAAE,MAAM,OAAO;AAAA,IACrB,SAAS,EAAE,MAAM,UAAU;AAAA,IAC3B,SAAS,EAAE,MAAM,UAAU;AAAA,IAC3B,MAAM,EAAE,MAAM,QAAQ;AAAA,IACtB,WAAW,EAAE,MAAM,YAAY;AAAA,EACjC;AAAA,EACA,OAAO;AAAA,IACL,MAAM,EAAE,MAAM,OAAO;AAAA,IACrB,SAAS,EAAE,MAAM,MAAM;AAAA,IACvB,SAAS,EAAE,MAAM,UAAU;AAAA,IAC3B,MAAM,EAAE,MAAM,OAAO;AAAA,IACrB,WAAW,EAAE,MAAM,YAAY;AAAA,EACjC;AACF;AAEA,IAAM,wBAAwB;AAAA,EAC5B,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,OAAO;AACT;AAEO,SAAS,iBAAiB,OAAmC;AAClE,QAAM,oBAAoB,IAAI;AAAA,IAC5B,MAAM,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,MAAM,cAAc,MAAM,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,UAAU,MAAM,OACnB,IAAI,CAAC,UAAU;AACd,UAAM,UAAU,sBAAsB,MAAM,OAAO;AACnD,UAAM,YACJ,MAAM,YAAY,WACd,GAAG,OAAO,KAAK,MAAM,IAAI,SACzB,GAAG,OAAO,KAAK,MAAM,IAAI;AAAA;AAE/B,UAAM,MAAM,MAAM,QACf,IAAI,CAAC,WAAW;AACf,YAAM,gBAAgB,QAAQ,MAAM,OAAO;AAC3C,UAAI,CAAC,eAAe;AAClB,cAAM,IAAI,MAAM,wBAAwB,MAAM,OAAO,GAAG;AAAA,MAC1D;AAEA,YAAM,aAAa,cAAc,OAAO,IAAI;AAC5C,UAAI,CAAC,YAAY;AACf,cAAM,IAAI;AAAA,UACR,4BAA4B,OAAO,IAAI,kBAAkB,MAAM,OAAO;AAAA,QACxE;AAAA,MACF;AAEA,YAAM,gBAAgB,WAAW,UAAU,KAAK,WAAW,OAAO,KAAK;AACvE,YAAM,eAAe,OAAO,iBAAiB,OAAO,iBAAiB;AACrE,YAAM,WAAW,OAAO,aAAa,OAAO,KAAK;AACjD,YAAM,SAAS,OAAO,SAAS,cAAc;AAC7C,YAAM,UAAU,OAAO,aAAa,kBAAkB;AACtD,YAAM,MAAM,OAAO,aACf,qBACE,kBAAkB,IAAI,OAAO,WAAW,KAAK,KAAK,OAAO,WAAW,KACtE,IAAI,OAAO,WAAW,KAAK,MAC3B;AACJ,aAAO,KAAK,OAAO,IAAI,KAAK,WAAW,IAAI,KAAK,OAAO,IAAI,IAAI,aAAa,IAAI,QAAQ,GAAG,YAAY,GAAG,MAAM,GAAG,OAAO,GAAG,GAAG;AAAA,IAClI,CAAC,EACA,KAAK,KAAK;AAEb,UAAM,OAAO,MAAM;AAAA,EAAK,GAAG;AAAA,IAAO;AAClC,UAAM,aAAa,MAAM,cAAc,MAAM;AAC7C,WAAO,gBAAgB,UAAU,MAAM,SAAS,GAAG,IAAI;AAAA,EACzD,CAAC,EACA,KAAK,MAAM;AAEd,QAAM,UAAU;AAAA,IACd,QAAQ;AAAA,IACR,YACE;AAAA,IACF,OACE;AAAA,EACJ;AAEA,SAAO;AAAA,eAAsE,MAAM,OAAO;AAAA,cAAiB,MAAM,OAAO;AAAA;AAAA,EAAO,QAAQ,MAAM,OAAO,CAAC;AAAA;AAAA,EAAO,OAAO;AAAA;AAAA;AAAA,EAAuC,MAAM,OAC7M,IAAI,CAAC,UAAU;AACd,UAAM,aAAa,MAAM,cAAc,MAAM;AAC7C,WAAO,KAAK,UAAU;AAAA,EACxB,CAAC,EACA,KAAK,IAAI,CAAC;AAAA;AAAA;AACf;AAEO,SAAS,sBAAsB,SAAyB,OAA2B;AACxF,SAAO;AAAA,IACL;AAAA,IACA,cAAa,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpC,SAAS;AAAA,MACP,YAAY,MAAM,OAAO;AAAA,MACzB,YAAY,MAAM,OAAO,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,IACpD;AAAA,IACA,YAAY,iBAAiB,KAAK;AAAA,EACpC;AACF;","names":[]}

package/dist/chunk-REGOUXVI.js

@@ -0,0 +1,58 @@
+import {
+  allowService
+} from "./chunk-VISDS5T7.js";
+
+// src/policies/ai-gateway.ts
+var DEFAULT_AI_GATEWAY_BASE_URL = "https://ai-gateway.vercel.sh/v1";
+function resolveAiGatewayBaseUrl(baseUrl) {
+  const provided = (baseUrl ?? process.env.AI_GATEWAY_BASE_URL ?? DEFAULT_AI_GATEWAY_BASE_URL).trim();
+  if (!provided) {
+    throw new Error("aiGateway() requires a non-empty base URL.");
+  }
+  return provided;
+}
+function resolveAiGatewayBaseDomains(baseUrl) {
+  let parsed;
+  try {
+    parsed = new URL(baseUrl);
+  } catch {
+    throw new Error(`aiGateway() received an invalid base URL: ${baseUrl}`);
+  }
+  const hostname = parsed.hostname.trim().toLowerCase();
+  if (!hostname) {
+    throw new Error("aiGateway() requires a URL with a valid hostname.");
+  }
+  return [hostname, `*.${hostname}`];
+}
+function resolveAiGatewayCredential() {
+  return { kind: "default" };
+}
+function resolveAiGatewayDefaultApiKey() {
+  return process.env.AI_GATEWAY_API_KEY;
+}
+function aiGateway(options) {
+  const configuredBaseUrl = resolveAiGatewayBaseUrl(options?.baseUrl);
+  return {
+    id: "aiGateway",
+    name: "AI Gateway",
+    description: "Allow outbound access to the configured AI Gateway endpoint host.",
+    domains: resolveAiGatewayBaseDomains(configuredBaseUrl),
+    headers: [
+      {
+        headerName: "authorization",
+        valuePrefix: "Bearer ",
+        credential: resolveAiGatewayCredential()
+      }
+    ]
+  };
+}
+function allowAiGateway() {
+  return allowService(aiGateway());
+}
+
+export {
+  resolveAiGatewayDefaultApiKey,
+  aiGateway,
+  allowAiGateway
+};
+//# sourceMappingURL=chunk-REGOUXVI.js.map

package/dist/chunk-REGOUXVI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/policies/ai-gateway.ts"],"sourcesContent":["import { allowService } from \"./dsl.ts\";\nimport type { PolicyServiceDescriptor, WorkspacePolicy } from \"./types.ts\";\n\nconst DEFAULT_AI_GATEWAY_BASE_URL = \"https://ai-gateway.vercel.sh/v1\";\n\nexport interface AiGatewayOptions {\n  readonly baseUrl?: string;\n}\n\nfunction resolveAiGatewayBaseUrl(baseUrl?: string): string {\n  const provided = (\n    baseUrl ??\n    process.env.AI_GATEWAY_BASE_URL ??\n    DEFAULT_AI_GATEWAY_BASE_URL\n  ).trim();\n  if (!provided) {\n    throw new Error(\"aiGateway() requires a non-empty base URL.\");\n  }\n  return provided;\n}\n\nfunction resolveAiGatewayBaseDomains(baseUrl: string): string[] {\n  let parsed: URL;\n  try {\n    parsed = new URL(baseUrl);\n  } catch {\n    throw new Error(`aiGateway() received an invalid base URL: ${baseUrl}`);\n  }\n\n  const hostname = parsed.hostname.trim().toLowerCase();\n\n  if (!hostname) {\n    throw new Error(\"aiGateway() requires a URL with a valid hostname.\");\n  }\n\n  // Use hostname only for policy matching; ports are intentionally ignored so allow-lists\n  // stay compatible with Vercel Sandbox host/domain matching.\n  return [hostname, `*.${hostname}`];\n}\n\nfunction resolveAiGatewayCredential(): { kind: \"default\" } {\n  return { kind: \"default\" };\n}\n\nexport function resolveAiGatewayDefaultApiKey(): string | undefined {\n  return process.env.AI_GATEWAY_API_KEY;\n}\n\n/**\n * Allow outbound access to the currently configured AI Gateway endpoint host/domain.\n * The configured endpoint is not treated as a generic capability; it follows\n * `AI_GATEWAY_BASE_URL` and derives allowed host/domain entries from its hostname.\n */\nexport function aiGateway(options?: AiGatewayOptions): PolicyServiceDescriptor {\n  const configuredBaseUrl = resolveAiGatewayBaseUrl(options?.baseUrl);\n\n  return {\n    id: \"aiGateway\",\n    name: \"AI Gateway\",\n    description: \"Allow outbound access to the configured AI Gateway endpoint host.\",\n    domains: resolveAiGatewayBaseDomains(configuredBaseUrl),\n    headers: [\n      {\n        headerName: \"authorization\",\n        valuePrefix: \"Bearer \",\n        credential: resolveAiGatewayCredential(),\n      },\n    ],\n  };\n}\n\nexport function allowAiGateway(): WorkspacePolicy {\n  return allowService(aiGateway());\n}\n"],"mappings":";;;;;AAGA,IAAM,8BAA8B;AAMpC,SAAS,wBAAwB,SAA0B;AACzD,QAAM,YACJ,WACA,QAAQ,IAAI,uBACZ,6BACA,KAAK;AACP,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AACA,SAAO;AACT;AAEA,SAAS,4BAA4B,SAA2B;AAC9D,MAAI;AACJ,MAAI;AACF,aAAS,IAAI,IAAI,OAAO;AAAA,EAC1B,QAAQ;AACN,UAAM,IAAI,MAAM,6CAA6C,OAAO,EAAE;AAAA,EACxE;AAEA,QAAM,WAAW,OAAO,SAAS,KAAK,EAAE,YAAY;AAEpD,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAIA,SAAO,CAAC,UAAU,KAAK,QAAQ,EAAE;AACnC;AAEA,SAAS,6BAAkD;AACzD,SAAO,EAAE,MAAM,UAAU;AAC3B;AAEO,SAAS,gCAAoD;AAClE,SAAO,QAAQ,IAAI;AACrB;AAOO,SAAS,UAAU,SAAqD;AAC7E,QAAM,oBAAoB,wBAAwB,SAAS,OAAO;AAElE,SAAO;AAAA,IACL,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,aAAa;AAAA,IACb,SAAS,4BAA4B,iBAAiB;AAAA,IACtD,SAAS;AAAA,MACP;AAAA,QACE,YAAY;AAAA,QACZ,aAAa;AAAA,QACb,YAAY,2BAA2B;AAAA,MACzC;AAAA,IACF;AAAA,EACF;AACF;AAEO,SAAS,iBAAkC;AAChD,SAAO,aAAa,UAAU,CAAC;AACjC;","names":[]}