@hasna/sandboxes 0.1.23 → 0.1.25

package/dist/lib/agent-runner.d.ts

@@ -12,4 +12,3 @@ export interface RunAgentOpts {
 }
 export declare function runAgent(sandboxId: string, opts: RunAgentOpts): Promise<SandboxSession>;
 export declare function stopAgent(sandboxId: string): Promise<void>;
-//# sourceMappingURL=agent-runner.d.ts.map

package/dist/lib/agents/claude.d.ts

@@ -7,4 +7,3 @@ export declare class ClaudeDriver implements AgentDriver {
     configure(provider: SandboxProvider, providerSandboxId: string, _envVars: Record<string, string>): Promise<void>;
     buildCommand(prompt: string): string;
 }
-//# sourceMappingURL=claude.d.ts.map

package/dist/lib/agents/codex.d.ts

@@ -7,4 +7,3 @@ export declare class CodexDriver implements AgentDriver {
     configure(provider: SandboxProvider, providerSandboxId: string, _envVars: Record<string, string>): Promise<void>;
     buildCommand(prompt: string): string;
 }
-//# sourceMappingURL=codex.d.ts.map

package/dist/lib/agents/gemini.d.ts

@@ -7,4 +7,3 @@ export declare class GeminiDriver implements AgentDriver {
     configure(provider: SandboxProvider, providerSandboxId: string, _envVars: Record<string, string>): Promise<void>;
     buildCommand(prompt: string): string;
 }
-//# sourceMappingURL=gemini.d.ts.map

package/dist/lib/agents/index.d.ts

@@ -2,4 +2,3 @@ import type { AgentDriver } from "./types.js";
 export type { AgentDriver };
 export declare function getAgentDriver(name: string): AgentDriver | undefined;
 export declare function listAgentDrivers(): AgentDriver[];
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/agents/opencode.d.ts

@@ -7,4 +7,3 @@ export declare class OpenCodeDriver implements AgentDriver {
     configure(_provider: SandboxProvider, _providerSandboxId: string, _envVars: Record<string, string>): Promise<void>;
     buildCommand(prompt: string): string;
 }
-//# sourceMappingURL=opencode.d.ts.map

package/dist/lib/agents/pi.d.ts

@@ -7,4 +7,3 @@ export declare class PiDriver implements AgentDriver {
     configure(_provider: SandboxProvider, _providerSandboxId: string, _envVars: Record<string, string>): Promise<void>;
     buildCommand(prompt: string): string;
 }
-//# sourceMappingURL=pi.d.ts.map

package/dist/lib/agents/takumi.d.ts

@@ -0,0 +1,9 @@
+import type { SandboxProvider } from "../../providers/types.js";
+import type { AgentDriver } from "./types.js";
+export declare class TakumiDriver implements AgentDriver {
+    readonly name = "takumi";
+    readonly requiredEnvVars: string[];
+    install(provider: SandboxProvider, providerSandboxId: string): Promise<void>;
+    configure(provider: SandboxProvider, providerSandboxId: string, envVars: Record<string, string>): Promise<void>;
+    buildCommand(prompt: string): string;
+}

package/dist/lib/agents/types.d.ts

@@ -20,4 +20,3 @@ export interface AgentDriver {
      */
     buildCommand(prompt: string): string;
 }
-//# sourceMappingURL=types.d.ts.map

package/dist/lib/archive.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Directories that are almost never worth shipping into a sandbox and that
+ * dominate upload size. Callers can override via `TarDirectoryOptions.exclude`.
+ */
+export declare const DEFAULT_UPLOAD_EXCLUDES: string[];
+export interface TarDirectoryOptions {
+    /**
+     * Path/glob patterns to exclude (matched by `tar --exclude`). A bare name
+     * like `node_modules` excludes that directory and its contents at any depth
+     * on both bsdtar (macOS) and GNU tar (Linux). Defaults to
+     * {@link DEFAULT_UPLOAD_EXCLUDES}; pass `[]` to include everything.
+     */
+    exclude?: string[];
+}
+/** Single-quote a value for safe POSIX shell interpolation. */
+export declare function shellQuote(value: string): string;
+/**
+ * Create a gzipped tar of a local directory's contents and return it as a Buffer.
+ *
+ * The archive is rooted at the directory contents (members are relative, e.g.
+ * `./src/index.ts`), so it extracts cleanly into any target with
+ * `tar -xzf - -C <dir>`. Uses the system `tar`, which is present on macOS
+ * (bsdtar) and Linux (GNU tar).
+ */
+export declare function tarDirectory(localDir: string, opts?: TarDirectoryOptions): Promise<Buffer>;
+/**
+ * Build the shell command that unpacks an uploaded tarball into `remoteDir`
+ * and removes the tarball afterward. Shared by providers that upload a single
+ * archive then extract it in-sandbox.
+ */
+export declare function buildUntarCommand(remoteTarPath: string, remoteDir: string): string;

package/dist/lib/config.d.ts

@@ -7,4 +7,3 @@ export declare function getDefaultImage(): string | undefined;
 export declare function getProviderApiKey(provider: SandboxProviderName): string | undefined;
 export declare function setConfigValue(key: string, value: string): void;
 export declare function getConfigValue(key: string): string | undefined;
-//# sourceMappingURL=config.d.ts.map

package/dist/lib/images.d.ts

@@ -10,4 +10,3 @@ export declare const BUILTIN_IMAGES: Record<string, {
 }>;
 export declare function resolveImage(image: string): string;
 export declare function getBuiltinImageSetupScript(image: string): string | undefined;
-//# sourceMappingURL=images.d.ts.map

package/dist/lib/keepalive.d.ts

@@ -2,4 +2,3 @@ export declare function startKeepAlive(sandboxId: string, intervalMs?: number):
 export declare function stopKeepAlive(sandboxId: string): void;
 export declare function isKeepAliveActive(sandboxId: string): boolean;
 export declare function stopAllKeepAlives(): void;
-//# sourceMappingURL=keepalive.d.ts.map

package/dist/lib/runtime-state.d.ts

@@ -2,4 +2,3 @@ export declare function getErrorMessage(error: unknown): string;
 export declare function finalizeSessionExit(sessionId: string, exitCode: number): void;
 export declare function finalizeSessionFailure(sessionId: string, _error?: unknown, exitCode?: number): void;
 export declare function finalizeSandboxProvisionFailure(sandboxId: string, error?: unknown): string;
-//# sourceMappingURL=runtime-state.d.ts.map

package/dist/lib/secrets.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Resolve credentials from the @hasna/secrets vault and inject them into agents
+ * as per-call environment variables — never persisted to the sandbox record.
+ */
+export type SecretResolver = (key: string) => Promise<string>;
+export interface SecretMapping {
+    /** Environment variable name to expose inside the sandbox (e.g. ANTHROPIC_API_KEY). */
+    env: string;
+    /** Vault key to read (e.g. hasnaxyz/anthropic/live/api_key). */
+    key: string;
+}
+/** Parse an `ENV_NAME=vault/key` spec into a {@link SecretMapping}. */
+export declare function parseSecretMapping(spec: string): SecretMapping;
+/**
+ * Default resolver: read a secret value from the @hasna/secrets vault via the
+ * globally-installed `secrets` CLI (`secrets get <key>`).
+ */
+export declare const cliSecretResolver: SecretResolver;
+/**
+ * Resolve secret mappings to an `{ ENV_NAME: value }` record using the vault.
+ * The returned record is meant to be passed as per-call env vars (callEnvVars),
+ * so resolved secret values are never written to the persisted sandbox record.
+ */
+export declare function resolveSecretEnv(mappings: SecretMapping[], resolver?: SecretResolver): Promise<Record<string, string>>;
+/** Convenience: parse `ENV=key` specs and resolve them in one step. */
+export declare function resolveSecretSpecs(specs: string[], resolver?: SecretResolver): Promise<Record<string, string>>;

package/dist/lib/stream.d.ts

@@ -10,4 +10,3 @@ export declare function createStreamCollector(sandboxId: string, sessionId?: str
     };
 };
 export declare function emitLifecycleEvent(sandboxId: string, message: string): void;
-//# sourceMappingURL=stream.d.ts.map

package/dist/lib/version.d.ts

@@ -1,2 +1 @@
 export declare function getPackageVersion(): string;
-//# sourceMappingURL=version.d.ts.map

package/dist/lib/webhook.d.ts

@@ -11,4 +11,3 @@ export declare function dispatchWebhook(event: string, data: {
     [key: string]: unknown;
 }): Promise<void>;
 export declare const WEBHOOK_EVENTS: readonly ["sandbox.created", "sandbox.started", "sandbox.stopped", "sandbox.deleted", "session.started", "session.completed", "session.output"];
-//# sourceMappingURL=webhook.d.ts.map

package/dist/mcp/http.d.ts

@@ -0,0 +1,14 @@
+import { type Server } from "node:http";
+export declare const DEFAULT_MCP_HTTP_PORT = 8831;
+export declare function isHttpMode(argv: string[]): boolean;
+export declare function resolveMcpHttpPort(argv: string[]): number;
+export declare function healthPayload(name?: string): {
+    status: string;
+    name: string;
+};
+export declare function handleMcpHttpRoutes(req: Request): Promise<Response | null>;
+export declare function startMcpHttpServer(options?: {
+    port?: number;
+    hostname?: string;
+    onListening?: (port: number) => void;
+}): Server;

package/dist/mcp/index.d.ts

@@ -1,3 +1,2 @@
 #!/usr/bin/env bun
 export {};
-//# sourceMappingURL=index.d.ts.map