@hotcell/daemon 0.1.0

package/dist/smoke-fc.js

@@ -0,0 +1,183 @@
+/**
+ * Firecracker live-boot smoke (B1–B6). Drives the real `FirecrackerDriver` —
+ * which spawns `firecracker`, configures it over its API socket, boots a microVM,
+ * and talks to the in-guest `sbx-agent` over vsock — through the core sandbox
+ * surface. **Requires a KVM host** (`/dev/kvm` + the `firecracker` binary + a
+ * vsock-capable guest kernel); run on the nested-virt box: `npm run smoke:fc`.
+ *
+ * Env: SBX_FC_KERNEL (guest vmlinux), SBX_FC_BIN (firecracker). Uses a converted
+ * OCI image (default `alpine:3.20`) so the rootfs matches the host arch.
+ */
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { createServer as createHttpServer } from "node:http";
+import { homedir, tmpdir } from "node:os";
+import { join } from "node:path";
+import { setTimeout as sleep } from "node:timers/promises";
+import { FirecrackerDriver } from "./driver/firecracker.js";
+async function main() {
+    const stateDir = mkdtempSync(join(tmpdir(), "hotcell-fc-smoke-"));
+    const image = process.env.SBX_FC_SMOKE_IMAGE ?? "alpine:3.20";
+    // Mock egress gateway: guests reach it ONLY via the vsock relay (no NIC).
+    const EGRESS_PORT = 47523;
+    const gateway = createHttpServer((_req, res) => res.end("fc-egress-pong"));
+    await new Promise((r) => gateway.listen(EGRESS_PORT, "127.0.0.1", r));
+    const driver = new FirecrackerDriver({
+        fcBin: process.env.SBX_FC_BIN ?? "firecracker",
+        kernel: process.env.SBX_FC_KERNEL ?? "helpers/hotcell-vz/guest/vmlinux-fc",
+        rootfs: "helpers/hotcell-vz/guest/rootfs.img", // prebuilt path (unused for a converted image)
+        stateDir,
+        diskGb: 2,
+        imageCacheDir: process.env.SBX_FC_IMAGE_CACHE ?? join(homedir(), ".sbx", "fc", "images"),
+        egressPort: EGRESS_PORT,
+        egressHost: "127.0.0.1",
+    });
+    const id = "fcsmoke01";
+    let passed = 0;
+    const ok = (l) => {
+        passed++;
+        console.log(`  ✓ ${l}`);
+    };
+    try {
+        await driver.ping();
+        ok("ping — /dev/kvm + firecracker present");
+        console.error(`[smoke-fc] converting ${image} + booting microVM…`);
+        await driver.create({ id, image, env: { SBX_FC_TEST: "fc-ok" }, persist: true });
+        ok("create — microVM booted and agent reachable over vsock");
+        let out = "";
+        const code = await driver.exec(id, "echo hi-from-fc && uname -sm", {}, (e) => {
+            if (e.type === "stdout")
+                out += e.data;
+        });
+        assert.equal(code, 0, "exec exit code");
+        assert.match(out, /hi-from-fc/, "exec stdout");
+        assert.match(out, /Linux x86_64/, "running inside a real x86_64 Linux microVM");
+        ok(`exec inside the microVM — ${out.trim().replace(/\n/g, " | ")}`);
+        let envOut = "";
+        await driver.exec(id, "echo $SBX_FC_TEST", {}, (e) => {
+            if (e.type === "stdout")
+                envOut += e.data;
+        });
+        assert.match(envOut, /fc-ok/, "sandbox env applied");
+        ok("sandbox env applied to exec");
+        // Egress-over-vsock: the NIC-less guest reaches the (mock) gateway through
+        // its loopback relay — its only route out of the VM.
+        let egOut = "";
+        const egCode = await driver.exec(id, `wget -qO- http://127.0.0.1:${EGRESS_PORT}/ping`, {}, (e) => {
+            if (e.type === "stdout")
+                egOut += e.data;
+        });
+        assert.equal(egCode, 0, "in-guest wget via the egress relay");
+        assert.match(egOut, /fc-egress-pong/, "egress relay reached the gateway");
+        ok("★ egress-over-vsock: guest loopback → vsock → gateway (no NIC)");
+        await driver.writeFile(id, { path: "/workspace/persist.txt", content: "fc-persist-123" });
+        assert.equal(await driver.readFile(id, { path: "/workspace/persist.txt" }), "fc-persist-123");
+        const files = await driver.listFiles(id, { path: "/workspace" });
+        assert.ok(files.some((f) => f.name === "persist.txt"), "listFiles sees the file");
+        ok("files: write / read / list in /workspace");
+        // Background process + liveness.
+        const proc = await driver.startProcess(id, "p1", "i=0; while true; do echo t-$i; i=$((i+1)); sleep 0.2; done", {});
+        await sleep(700);
+        const live = await driver.listProcesses(id, [{ procId: "p1", pid: proc.pid }]);
+        assert.ok(live[0]?.running, "process running");
+        await driver.killProcess(id, proc.pid);
+        ok("background process: start → running → kill");
+        // Stats from the guest /proc.
+        const stats = await driver.stats(id);
+        assert.ok(stats.memBytes > 0 && stats.onlineCpus >= 1, "stats reports mem + cpus");
+        ok(`stats: ${stats.onlineCpus} cpu / ${(stats.memBytes / 1e6).toFixed(0)}MB / ${stats.pids} pids`);
+        // Fast-pause → resume (B7): full snapshot to disk, restore WITHOUT a kernel
+        // boot. In-RAM state must survive: a tmpfs marker + a live background process.
+        console.error("[smoke-fc] snapshot → resume (fast-pause)…");
+        const markerCode = await driver.exec(id, "grep -qE '^tmpfs /tmp ' /proc/mounts && echo ram-1 > /tmp/ram-marker", {}, () => { });
+        assert.equal(markerCode, 0, "/tmp is tmpfs (marker is genuinely RAM-only)");
+        const survivor = await driver.startProcess(id, "p2", "while true; do sleep 1; done", {});
+        const tSave = Date.now();
+        await driver.snapshot(id);
+        const saveMs = Date.now() - tSave;
+        const tResume = Date.now();
+        await driver.start({ id, image, env: {}, persist: true });
+        const resumeMs = Date.now() - tResume;
+        assert.match(await driver.readFile(id, { path: "/tmp/ram-marker" }), /ram-1/, "tmpfs marker survived snapshot→resume (guest RAM restored)");
+        const alive = await driver.listProcesses(id, [{ procId: "p2", pid: survivor.pid }]);
+        assert.ok(alive[0]?.running, "background process survived snapshot→resume");
+        await driver.killProcess(id, survivor.pid);
+        // The egress relay survives the cycle: the in-guest listener lives in
+        // restored RAM; the host relay is re-installed by the fresh VMM spawn.
+        let egResume = "";
+        await driver.exec(id, `wget -qO- http://127.0.0.1:${EGRESS_PORT}/after-resume`, {}, (e) => {
+            if (e.type === "stdout")
+                egResume += e.data;
+        });
+        assert.match(egResume, /fc-egress-pong/, "egress relay must work after snapshot→resume");
+        ok(`★ snapshot fast-pause → resume, no kernel boot (save ${saveMs}ms, resume ${resumeMs}ms); egress relay survives`);
+        // Persistence across stop/start (cold path: workspace survives, RAM doesn't).
+        console.error("[smoke-fc] stop → start (workspace persistence)…");
+        await driver.stop(id);
+        const tCold = Date.now();
+        await driver.start({ id, image, env: {}, persist: true });
+        const coldMs = Date.now() - tCold;
+        assert.equal(await driver.readFile(id, { path: "/workspace/persist.txt" }), "fc-persist-123", "workspace persisted across stop/start");
+        const markerGone = await driver
+            .readFile(id, { path: "/tmp/ram-marker" })
+            .then(() => false)
+            .catch(() => true);
+        assert.ok(markerGone, "tmpfs marker cleared by a cold stop/start (RAM not persisted)");
+        ok(`★ workspace.img persists across stop/start (cold boot ${coldMs}ms vs resume ${resumeMs}ms)`);
+        await driver.destroy(id);
+        ok("destroy");
+        // Warm pool (B7): a pre-booted spare is adopted near-instantly, and a
+        // snapshot → resume of the ADOPTED VM still works — the no-move symlink
+        // adoption keeps Firecracker's recorded boot-time paths valid.
+        console.error("[smoke-fc] warm pool…");
+        const poolStateDir = mkdtempSync(join(tmpdir(), "hotcell-fc-pool-"));
+        const pooled = new FirecrackerDriver({
+            fcBin: process.env.SBX_FC_BIN ?? "firecracker",
+            kernel: process.env.SBX_FC_KERNEL ?? "helpers/hotcell-vz/guest/vmlinux-fc",
+            rootfs: "helpers/hotcell-vz/guest/rootfs.img",
+            stateDir: poolStateDir,
+            diskGb: 2,
+            imageCacheDir: process.env.SBX_FC_IMAGE_CACHE ?? join(homedir(), ".sbx", "fc", "images"),
+            warmPool: 1,
+            poolImage: image,
+        });
+        const wid = "fcwarm01";
+        try {
+            const deadline = Date.now() + 60000;
+            while (pooled.poolSize() < 1 && Date.now() < deadline)
+                await sleep(250);
+            assert.ok(pooled.poolSize() >= 1, "warm pool failed to pre-boot a spare");
+            const tAdopt = Date.now();
+            await pooled.create({ id: wid, image, env: {}, persist: true });
+            const adoptMs = Date.now() - tAdopt;
+            let wout = "";
+            await pooled.exec(wid, "echo WARM_OK", {}, (e) => {
+                if (e.type === "stdout")
+                    wout += e.data;
+            });
+            assert.match(wout, /WARM_OK/, "adopted microVM must serve exec");
+            // Cross-feature: the adopted VM must still snapshot → resume with RAM intact.
+            await pooled.exec(wid, "echo warm-ram > /tmp/warm-marker", {}, () => { });
+            await pooled.snapshot(wid);
+            await pooled.start({ id: wid, image, env: {}, persist: true });
+            assert.match(await pooled.readFile(wid, { path: "/tmp/warm-marker" }), /warm-ram/, "adopted VM lost RAM across snapshot→resume (symlink adoption broken?)");
+            ok(`★ warm pool: adopt ${adoptMs}ms; adopted VM snapshot→resume keeps RAM`);
+        }
+        finally {
+            await pooled.destroy(wid).catch(() => { });
+            await pooled.drainPool().catch(() => { });
+            rmSync(poolStateDir, { recursive: true, force: true });
+        }
+        console.log(`\nsmoke-fc: ${passed} checks passed (real Firecracker microVM)`);
+    }
+    finally {
+        await driver.stop(id).catch(() => { });
+        await new Promise((r) => gateway.close(() => r()));
+        rmSync(stateDir, { recursive: true, force: true });
+    }
+}
+main().then(() => process.exit(0), (err) => {
+    console.error("smoke-fc FAILED:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=smoke-fc.js.map

package/dist/smoke-fc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-fc.js","sourceRoot":"","sources":["../src/smoke-fc.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,aAAa,CAAC;IAC9D,0EAA0E;IAC1E,MAAM,WAAW,GAAG,KAAK,CAAC;IAC1B,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3E,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;QACnC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa;QAC9C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qCAAqC;QAC1E,MAAM,EAAE,qCAAqC,EAAE,+CAA+C;QAC9F,QAAQ;QACR,MAAM,EAAE,CAAC;QACT,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;QACxF,UAAU,EAAE,WAAW;QACvB,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IACH,MAAM,EAAE,GAAG,WAAW,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE;QACvB,MAAM,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,EAAE,CAAC,uCAAuC,CAAC,CAAC;QAE5C,OAAO,CAAC,KAAK,CAAC,yBAAyB,KAAK,qBAAqB,CAAC,CAAC;QACnE,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACjF,EAAE,CAAC,wDAAwD,CAAC,CAAC;QAE7D,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,8BAA8B,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC3E,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,EAAE,4CAA4C,CAAC,CAAC;QAChF,EAAE,CAAC,6BAA6B,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAEpE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YACnD,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC;QAC5C,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,qBAAqB,CAAC,CAAC;QACrD,EAAE,CAAC,6BAA6B,CAAC,CAAC;QAElC,2EAA2E;QAC3E,qDAAqD;QACrD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,8BAA8B,WAAW,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YAC/F,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,oCAAoC,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,gBAAgB,EAAE,kCAAkC,CAAC,CAAC;QAC1E,EAAE,CAAC,gEAAgE,CAAC,CAAC;QAErE,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC9F,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAClF,EAAE,CAAC,0CAA0C,CAAC,CAAC;QAE/C,iCAAiC;QACjC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,4DAA4D,EAAE,EAAE,CAAC,CAAC;QACnH,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,EAAE,CAAC,4CAA4C,CAAC,CAAC;QAEjD,8BAA8B;QAC9B,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,EAAE,0BAA0B,CAAC,CAAC;QACnF,EAAE,CAAC,UAAU,KAAK,CAAC,UAAU,UAAU,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC;QAEnG,4EAA4E;QAC5E,+EAA+E;QAC/E,OAAO,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC5D,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,IAAI,CAClC,EAAE,EACF,sEAAsE,EACtE,EAAE,EACF,GAAG,EAAE,GAAE,CAAC,CACT,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,8CAA8C,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,EAAE,CAAC,CAAC;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACtC,MAAM,CAAC,KAAK,CACV,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EACtD,OAAO,EACP,4DAA4D,CAC7D,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,6CAA6C,CAAC,CAAC;QAC5E,MAAM,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3C,sEAAsE;QACtE,uEAAuE;QACvE,IAAI,QAAQ,GAAG,EAAE,CAAC;QAClB,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,8BAA8B,WAAW,eAAe,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;YACxF,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC;QAC9C,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,gBAAgB,EAAE,8CAA8C,CAAC,CAAC;QACzF,EAAE,CAAC,wDAAwD,MAAM,cAAc,QAAQ,4BAA4B,CAAC,CAAC;QAErH,8EAA8E;QAC9E,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAClC,MAAM,CAAC,KAAK,CACV,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC,EAC7D,gBAAgB,EAChB,uCAAuC,CACxC,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,MAAM;aAC5B,QAAQ,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;aACzC,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;aACjB,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrB,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,+DAA+D,CAAC,CAAC;QACvF,EAAE,CAAC,yDAAyD,MAAM,gBAAgB,QAAQ,KAAK,CAAC,CAAC;QAEjG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzB,EAAE,CAAC,SAAS,CAAC,CAAC;QAEd,sEAAsE;QACtE,wEAAwE;QACxE,+DAA+D;QAC/D,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC;YACnC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa;YAC9C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,qCAAqC;YAC1E,MAAM,EAAE,qCAAqC;YAC7C,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,CAAC;YACT,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;YACxF,QAAQ,EAAE,CAAC;YACX,SAAS,EAAE,KAAK;SACjB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACpC,OAAO,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YACxE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,sCAAsC,CAAC,CAAC;YAC1E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC1B,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;YACpC,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE;gBAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;oBAAE,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC;YACjE,8EAA8E;YAC9E,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,EAAE,EAAE,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzE,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC3B,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,CAAC,KAAK,CACV,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EACxD,UAAU,EACV,uEAAuE,CACxE,CAAC;YACF,EAAE,CAAC,sBAAsB,OAAO,0CAA0C,CAAC,CAAC;QAC9E,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC1C,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,eAAe,MAAM,2CAA2C,CAAC,CAAC;IAChF,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CACT,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EACrB,CAAC,GAAG,EAAE,EAAE;IACN,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CACF,CAAC"}

package/dist/smoke-microvm.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/smoke-microvm.js

@@ -0,0 +1,187 @@
+/**
+ * MicroVM parity smoke. Boots an in-process daemon backed by a **microVM
+ * driver** — Apple VZ (default) or Firecracker via `SBX_SMOKE_DRIVER` — and
+ * drives the full sandbox surface through the daemon's HTTP/SSE stack via the
+ * public TypeScript SDK — the same flow `npm run smoke` exercises against the
+ * container driver. This is the plan's parity gate: the *same* end-to-end flow
+ * must work on every driver, proving the driver abstraction holds from
+ * REST → SSE → SDK down to a real microVM.
+ *
+ * Unlike the driver-direct checks (`applevz-check.ts`, `smoke-fc.ts`), this goes
+ * through the daemon server, the preview proxy, and the SDK — so it covers the
+ * integration those don't.
+ *  - applevz: needs a Mac with the VZ helper + guest artifacts built
+ *    (`npm run build:vz`, `build:agent`, `build-guest.sh`). `npm run smoke:vz`.
+ *  - firecracker: needs a Linux KVM host with `firecracker`, a guest kernel at
+ *    `helpers/hotcell-vz/guest/vmlinux-fc`, and the amd64 agent staged (see plan
+ *    Appendix B). `npm run smoke:fc:full`.
+ */
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir, homedir } from "node:os";
+import { join } from "node:path";
+import { BackupRegistry } from "./backups.js";
+import { Capacity } from "./capacity.js";
+import { loadConfig } from "./config.js";
+import { DriverRouter } from "./driver/router.js";
+import { MetricsHistory } from "./metrics.js";
+import { SandboxStore } from "./store.js";
+import { createApiServer } from "./api/server.js";
+import { createProxyServer } from "./proxy/server.js";
+import { HotcellClient } from "@hotcell/sdk";
+async function main() {
+    // Force the microVM driver + isolated ports/state so the run leaves nothing
+    // behind and never collides with a dev daemon on the default ports.
+    const driverName = process.env.SBX_SMOKE_DRIVER ?? "applevz";
+    process.env.SBX_DRIVER = driverName;
+    const config = loadConfig();
+    config.driver = driverName;
+    config.port = 4790;
+    config.proxyPort = 4791;
+    config.backupDir = await mkdtemp(join(tmpdir(), "hotcell-mvm-backups-"));
+    const dbDir = await mkdtemp(join(tmpdir(), "hotcell-mvm-db-"));
+    config.dbPath = join(dbDir, "state.db");
+    const stateDir = await mkdtemp(join(tmpdir(), "hotcell-mvm-state-"));
+    if (driverName === "firecracker") {
+        config.fcStateDir = stateDir; // image cache stays at the stable default
+    }
+    else {
+        config.vzStateDir = stateDir;
+        config.vzImageCacheDir = join(homedir(), ".sbx", "vz", "images"); // stable cache
+    }
+    // The prebuilt "base" rootfs sentinel is an arm64 VZ artifact; Firecracker
+    // hosts convert an OCI image for the host arch instead (cached after first use).
+    const image = process.env.SBX_SMOKE_IMAGE ?? (driverName === "firecracker" ? "alpine:3.20" : "base");
+    const store = new SandboxStore(config.dbPath);
+    const driver = new DriverRouter(config, store, config.driver);
+    const backups = new BackupRegistry(config.backupDir);
+    const history = new MetricsHistory(config.metricsHistory);
+    const capacity = new Capacity(store, config, null, history);
+    const server = createApiServer({ config, driver, store, backups, history, capacity });
+    await new Promise((r) => server.listen(config.port, config.host, r));
+    const proxy = createProxyServer({ config, driver, store });
+    await new Promise((r) => proxy.listen(config.proxyPort, config.proxyHost, r));
+    const endpoint = `http://${config.host}:${config.port}`;
+    const proxyEndpoint = `http://${config.proxyHost}:${config.proxyPort}`;
+    const client = new HotcellClient({ endpoint });
+    let passed = 0;
+    const ok = (l) => {
+        passed++;
+        console.error(`  ✓ ${l}`);
+    };
+    const assert = (cond, msg) => {
+        if (!cond)
+            throw new Error(msg);
+    };
+    let sandbox;
+    try {
+        // 1. Health + info: the daemon reports the microVM driver.
+        const health = await client.health();
+        assert(health.ok, "daemon health not ok");
+        const info = await client.info();
+        assert(info.driver === driverName, `expected driver=${driverName}, got ${info.driver}`);
+        ok(`daemon up on the ${driverName} driver (${endpoint})`);
+        // 2. Create a microVM sandbox.
+        sandbox = await client.getSandbox(undefined, { image });
+        ok(`created microVM sandbox ${sandbox.id} (${image})`);
+        // 3. exec streams stdout/exit over SSE and runs in a real Linux VM.
+        const uname = await sandbox.exec("echo hi-from-vm && uname -sm");
+        assert(uname.exitCode === 0, `exec exit ${uname.exitCode}`);
+        assert(/hi-from-vm/.test(uname.stdout), "exec stdout missing");
+        assert(/Linux (aarch64|x86_64)/.test(uname.stdout), "not a real Linux VM");
+        ok(`exec over SSE → ${uname.stdout.trim().replace(/\n/g, " | ")}`);
+        // 4. Files: write/read/mkdir/list through REST.
+        await sandbox.writeFile("/workspace/hello.txt", "vz-files");
+        assert((await sandbox.readFile("/workspace/hello.txt")) === "vz-files", "readFile mismatch");
+        await sandbox.mkdir("/workspace/sub");
+        const files = await sandbox.listFiles("/workspace");
+        assert(files.some((f) => f.name === "hello.txt"), "listFiles missing file");
+        assert(files.some((f) => f.name === "sub" && f.isDirectory), "listFiles missing dir");
+        ok("files: write / read / mkdir / list");
+        // 5. Sandbox env + session cwd persistence.
+        await sandbox.setEnvVars({ SBX_MVM_SMOKE: "env-ok" });
+        const envOut = await sandbox.exec("echo $SBX_MVM_SMOKE");
+        assert(/env-ok/.test(envOut.stdout), "sandbox env not applied");
+        const session = await sandbox.createSession({ cwd: "/workspace/sub" });
+        await session.exec("echo cwd-marker > here.txt");
+        const cwdRead = await sandbox.readFile("/workspace/sub/here.txt");
+        assert(/cwd-marker/.test(cwdRead), "session cwd not honored");
+        ok("env applied + session cwd persists");
+        // 6. Background process + port readiness + preview proxy fetch.
+        const proc = await sandbox.startProcess("while true; do printf 'HTTP/1.0 200 OK\\r\\n\\r\\nmvm-preview-ok' | nc -l -p 9000 2>/dev/null; done");
+        assert(Number.isFinite(proc.pid), "startProcess returned no pid");
+        const ready = await sandbox.waitForPort(9000, { timeoutMs: 8000 });
+        assert(ready, "port 9000 never became ready");
+        await sandbox.exposePort(9000);
+        const preview = await fetch(`${proxyEndpoint}/_hotcell/${sandbox.id}/9000/`);
+        const previewBody = await preview.text();
+        assert(/mvm-preview-ok/.test(previewBody), `preview proxy did not serve: ${previewBody.slice(0, 60)}`);
+        ok("background process → waitForPort → preview proxy round-trip");
+        // 7. watch: open the stream, create a file, see the event. The SDK watch is
+        //    an async generator; calling return() closes the underlying SSE stream.
+        const watchGen = sandbox.watch("/workspace", { intervalMs: 200 });
+        let sawWatch = false;
+        const watching = (async () => {
+            for await (const ev of watchGen) {
+                if (/watched\.txt/.test(ev.path)) {
+                    sawWatch = true;
+                    break;
+                }
+            }
+        })().catch(() => { });
+        await new Promise((r) => setTimeout(r, 500));
+        await sandbox.writeFile("/workspace/watched.txt", "x");
+        for (let i = 0; i < 30 && !sawWatch; i++)
+            await new Promise((r) => setTimeout(r, 100));
+        await watchGen.return(undefined); // unblock + close the stream if still pending
+        await watching;
+        assert(sawWatch, "watch never reported the new file");
+        ok("watch streamed a create event");
+        // 8. Backup → mutate → restore → rollback.
+        await sandbox.writeFile("/workspace/keep.txt", "in-backup");
+        const backup = await sandbox.createBackup();
+        await sandbox.writeFile("/workspace/keep.txt", "MUTATED");
+        await sandbox.restoreBackup(backup.backupId);
+        assert((await sandbox.readFile("/workspace/keep.txt")) === "in-backup", "restore did not roll back");
+        ok("backup → mutate → restore → rollback");
+        // 9. Metrics: the sampler/stats path reports usage through the daemon.
+        const metrics = await sandbox.metrics();
+        assert(metrics.live ? metrics.live.memBytes > 0 : true, "live metrics memBytes should be > 0");
+        ok(`metrics endpoint served (live mem ${metrics.live ? (metrics.live.memBytes / 1e6).toFixed(0) + "MB" : "n/a"})`);
+        // 10. Persistence across stop/start (cold resume; workspace survives).
+        await sandbox.stop();
+        await sandbox.start();
+        assert((await sandbox.readFile("/workspace/keep.txt")) === "in-backup", "workspace lost across stop/start");
+        ok("workspace persists across stop/start");
+        // 11. Manual pause = memory snapshot: a background process AND an exposed
+        //     server survive, and an inbound preview request transparently WAKES the
+        //     paused sandbox (what lets the reaper hibernate port-exposing sandboxes).
+        const survivor = await sandbox.startProcess("while true; do sleep 1; done");
+        await sandbox.startProcess("while true; do printf 'HTTP/1.0 200 OK\\r\\n\\r\\nwake-ok' | nc -l -p 9100 2>/dev/null; done");
+        assert(await sandbox.waitForPort(9100, { timeoutMs: 8000 }), "port 9100 never ready");
+        await sandbox.exposePort(9100);
+        await sandbox.pause();
+        const woke = await fetch(`${proxyEndpoint}/_hotcell/${sandbox.id}/9100/`);
+        assert(/wake-ok/.test(await woke.text()), "preview request did not wake the paused sandbox");
+        const back = await sandbox.exec(`kill -0 ${survivor.pid} 2>/dev/null && echo SURVIVED`);
+        assert(/SURVIVED/.test(back.stdout), "background process did not survive pause/resume");
+        ok("pause (memory snapshot) → preview request wakes the VM; processes alive");
+        console.error(`\n[smoke-microvm] passed — ${passed} checks (full surface on the ${driverName} driver)`);
+        return 0;
+    }
+    catch (err) {
+        console.error(`[smoke-microvm] FAILED: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    finally {
+        if (sandbox)
+            await sandbox.destroy().catch(() => { });
+        await new Promise((r) => proxy.close(() => r()));
+        await new Promise((r) => server.close(() => r()));
+        store.close();
+        await rm(config.backupDir, { recursive: true, force: true }).catch(() => { });
+        await rm(dbDir, { recursive: true, force: true }).catch(() => { });
+        await rm(stateDir, { recursive: true, force: true }).catch(() => { });
+    }
+}
+main().then((code) => process.exit(code));
+//# sourceMappingURL=smoke-microvm.js.map

package/dist/smoke-microvm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-microvm.js","sourceRoot":"","sources":["../src/smoke-microvm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAgB,MAAM,cAAc,CAAC;AAE3D,KAAK,UAAU,IAAI;IACjB,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,SAAS,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IACpC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC;IAC3B,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;IACxB,MAAM,CAAC,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACrE,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;QACjC,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC,0CAA0C;IAC1E,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC;QAC7B,MAAM,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,eAAe;IACnF,CAAC;IACD,2EAA2E;IAC3E,iFAAiF;IACjF,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,UAAU,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEzF,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAE5D,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACtF,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG,UAAU,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;IACxD,MAAM,aAAa,GAAG,UAAU,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;IACvE,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAE/C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE;QACvB,MAAM,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,IAAa,EAAE,GAAW,EAAE,EAAE;QAC5C,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACH,2DAA2D;QAC3D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,mBAAmB,UAAU,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxF,EAAE,CAAC,oBAAoB,UAAU,YAAY,QAAQ,GAAG,CAAC,CAAC;QAE1D,+BAA+B;QAC/B,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,2BAA2B,OAAO,CAAC,EAAE,KAAK,KAAK,GAAG,CAAC,CAAC;QAEvD,oEAAoE;QACpE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACjE,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,EAAE,aAAa,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC/D,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAAC;QAC3E,EAAE,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAEnE,gDAAgD;QAChD,MAAM,OAAO,CAAC,SAAS,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,KAAK,UAAU,EAAE,mBAAmB,CAAC,CAAC;QAC7F,MAAM,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,wBAAwB,CAAC,CAAC;QAC5E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,WAAW,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACtF,EAAE,CAAC,oCAAoC,CAAC,CAAC;QAEzC,4CAA4C;QAC5C,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAChE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACvE,MAAM,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,CAAC;QAClE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC;QAC9D,EAAE,CAAC,oCAAoC,CAAC,CAAC;QAEzC,gEAAgE;QAChE,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CACrC,qGAAqG,CACtG,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,8BAA8B,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC;QAC9C,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,aAAa,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC7E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,gCAAgC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QACvG,EAAE,CAAC,6DAA6D,CAAC,CAAC;QAElE,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QAClE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;gBAChC,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjC,QAAQ,GAAG,IAAI,CAAC;oBAChB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,OAAO,CAAC,SAAS,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACvD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE;YAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvF,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,8CAA8C;QAChF,MAAM,QAAQ,CAAC;QACf,MAAM,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;QACtD,EAAE,CAAC,+BAA+B,CAAC,CAAC;QAEpC,2CAA2C;QAC3C,MAAM,OAAO,CAAC,SAAS,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,OAAO,CAAC,SAAS,CAAC,qBAAqB,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,KAAK,WAAW,EAAE,2BAA2B,CAAC,CAAC;QACrG,EAAE,CAAC,sCAAsC,CAAC,CAAC;QAE3C,uEAAuE;QACvE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;QAC/F,EAAE,CAAC,qCAAqC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;QAEnH,uEAAuE;QACvE,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,KAAK,WAAW,EAAE,kCAAkC,CAAC,CAAC;QAC5G,EAAE,CAAC,sCAAsC,CAAC,CAAC;QAE3C,0EAA0E;QAC1E,6EAA6E;QAC7E,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,8BAA8B,CAAC,CAAC;QAC5E,MAAM,OAAO,CAAC,YAAY,CACxB,8FAA8F,CAC/F,CAAC;QACF,MAAM,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,uBAAuB,CAAC,CAAC;QACtF,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,aAAa,aAAa,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC1E,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,iDAAiD,CAAC,CAAC;QAC7F,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,WAAW,QAAQ,CAAC,GAAG,+BAA+B,CAAC,CAAC;QACxF,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,iDAAiD,CAAC,CAAC;QACxF,EAAE,CAAC,yEAAyE,CAAC,CAAC;QAE9E,OAAO,CAAC,KAAK,CAAC,8BAA8B,MAAM,gCAAgC,UAAU,UAAU,CAAC,CAAC;QACxG,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7F,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,IAAI,OAAO;YAAE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrD,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC7E,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClE,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC"}

package/dist/smoke-remote.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Remote end-to-end smoke test.
+ *
+ * Unlike `smoke.ts` (which boots an in-process daemon and drives it over raw
+ * HTTP), this script drives a *live, already-running* daemon over the network
+ * via the public TypeScript SDK — exercising the same surface an external
+ * operator would. It proves the egress policy round-trips through the live
+ * daemon, that egress env auto-wiring landed, and (optionally) that a real
+ * provider call meters cost.
+ *
+ * Required env:
+ *   SBX_ENDPOINT            daemon base URL, e.g. https://sbx.example.com:4750
+ * Optional env:
+ *   SBX_API_KEY             bearer key (when the daemon is started with one)
+ *   SBX_SMOKE_REAL_PROVIDER provider name (e.g. "openai") to enable a live LLM call
+ *   SBX_SMOKE_MODEL         model id for the real call (default "gpt-4o-mini")
+ *
+ * Usage: SBX_ENDPOINT=... [SBX_API_KEY=...] node dist/smoke-remote.js
+ */
+export {};

package/dist/smoke-remote.js

@@ -0,0 +1,155 @@
+/**
+ * Remote end-to-end smoke test.
+ *
+ * Unlike `smoke.ts` (which boots an in-process daemon and drives it over raw
+ * HTTP), this script drives a *live, already-running* daemon over the network
+ * via the public TypeScript SDK — exercising the same surface an external
+ * operator would. It proves the egress policy round-trips through the live
+ * daemon, that egress env auto-wiring landed, and (optionally) that a real
+ * provider call meters cost.
+ *
+ * Required env:
+ *   SBX_ENDPOINT            daemon base URL, e.g. https://sbx.example.com:4750
+ * Optional env:
+ *   SBX_API_KEY             bearer key (when the daemon is started with one)
+ *   SBX_SMOKE_REAL_PROVIDER provider name (e.g. "openai") to enable a live LLM call
+ *   SBX_SMOKE_MODEL         model id for the real call (default "gpt-4o-mini")
+ *
+ * Usage: SBX_ENDPOINT=... [SBX_API_KEY=...] node dist/smoke-remote.js
+ */
+import { HotcellClient } from "@hotcell/sdk";
+async function main() {
+    const endpoint = process.env.SBX_ENDPOINT;
+    if (!endpoint) {
+        console.error("[smoke-remote] SBX_ENDPOINT is required (the live daemon base URL, e.g. http://127.0.0.1:4750)");
+        return 1;
+    }
+    const apiKey = process.env.SBX_API_KEY;
+    const client = new HotcellClient({ endpoint, apiKey });
+    // 1. Health + info: confirm the daemon is reachable and learn its driver +
+    //    which egress providers it has configured.
+    const health = await client.health();
+    if (!health.ok)
+        throw new Error(`daemon health not ok: ${JSON.stringify(health)}`);
+    const info = await client.info();
+    console.error(`[smoke-remote] daemon up at ${endpoint} — driver=${info.driver}, ` +
+        `egressProviders=[${info.egressProviders.join(", ") || "<none>"}]`);
+    let sandbox;
+    try {
+        // 2. Create a sandbox with a scoped egress policy (no id => provision new).
+        //    The ttlMs sugar should resolve to a concrete `expiresAt` on the daemon.
+        sandbox = await client.getSandbox(undefined, {
+            egress: { spendCapUsd: 1, models: ["gpt-4o"], ttlMs: 3600_000 },
+        });
+        console.error(`[smoke-remote] created sandbox ${sandbox.id} with scoped egress policy`);
+        // 3. Assert the policy round-trips through the live daemon: exactly one token
+        //    is bound to the sandbox, carrying the policy we minted it with.
+        const { tokens } = await sandbox.listEgressTokens();
+        if (tokens.length !== 1) {
+            throw new Error(`expected exactly 1 egress token, got ${tokens.length}`);
+        }
+        const policy = tokens[0].policy;
+        if (policy.spendCapUsd !== 1) {
+            throw new Error(`expected policy.spendCapUsd === 1, got ${policy.spendCapUsd}`);
+        }
+        if (!policy.models || !policy.models.includes("gpt-4o")) {
+            throw new Error(`expected policy.models to include "gpt-4o", got ${JSON.stringify(policy.models)}`);
+        }
+        if (!policy.expiresAt) {
+            throw new Error("expected ttlMs sugar to resolve to a concrete policy.expiresAt");
+        }
+        console.error(`[smoke-remote] egress policy round-trips (spendCapUsd=1, models=[gpt-4o], expiresAt=${policy.expiresAt})`);
+        // 4. Egress env auto-wiring: the provider base URL is injected into the
+        //    sandbox so an LLM SDK routes through the gateway with no real key.
+        const baseUrlRes = await sandbox.exec("printenv OPENAI_BASE_URL");
+        const baseUrl = baseUrlRes.stdout.trim();
+        if (!baseUrl.endsWith("/openai")) {
+            throw new Error(`expected OPENAI_BASE_URL to end with "/openai", got "${baseUrl}"`);
+        }
+        console.error(`[smoke-remote] OPENAI_BASE_URL auto-wired to ${baseUrl}`);
+        // HTTP_PROXY is only injected once the operator enables fail-closed egress
+        // enforcement, which may not be on yet — treat a missing value as a soft skip.
+        const proxyRes = await sandbox.exec("printenv HTTP_PROXY");
+        const httpProxy = proxyRes.stdout.trim();
+        if (httpProxy) {
+            console.error(`[smoke-remote] HTTP_PROXY set to ${httpProxy} (fail-closed networking enabled)`);
+        }
+        else {
+            console.error("[smoke-remote] HTTP_PROXY not set (fail-closed networking not enabled)");
+        }
+        // 5. Allowlisted-registry reachability: report only — allowlist behaviour
+        //    depends on the deployment's egress config, so do not hard-assert. Uses
+        //    `pip` (always present in the python image, and proxy-auth-capable so the
+        //    signal is truthful even under fail-closed enforcement, unlike curl/urllib).
+        const reach = await sandbox.exec("pip download --no-deps --progress-bar off --dest /tmp/sbx-reach six >/dev/null 2>&1 && echo OK || echo BLOCKED");
+        const reachVerdict = reach.stdout.trim() || "(no output)";
+        console.error(`[smoke-remote] allowlisted registry (pypi/pythonhosted) reachability: ${reachVerdict}`);
+        // 6. Optional real-provider LLM call, gated on SBX_SMOKE_REAL_PROVIDER. When
+        //    set, drive a minimal chat-completion from inside the sandbox through the
+        //    egress gateway (no real key in the sandbox) and assert it meters cost.
+        const realProvider = process.env.SBX_SMOKE_REAL_PROVIDER;
+        if (realProvider) {
+            const model = process.env.SBX_SMOKE_MODEL ?? "gpt-4o-mini";
+            console.error(`[smoke-remote] real-provider call enabled (provider=${realProvider}, model=${model})`);
+            // Build the request body in JSON (single-quoted in the shell so the inner
+            // double quotes survive); read the HTTP status code separately from the body.
+            const body = JSON.stringify({
+                model,
+                messages: [{ role: "user", content: "say hi" }],
+                max_tokens: 8,
+            });
+            const curl = `curl -sS -o /dev/null -w '%{http_code}' --max-time 30 ` +
+                `-X POST "$OPENAI_BASE_URL/v1/chat/completions" ` +
+                `-H "content-type: application/json" ` +
+                `-H "authorization: Bearer $OPENAI_API_KEY" ` +
+                `-d '${body}'`;
+            const callRes = await sandbox.exec(curl);
+            const httpCode = callRes.stdout.trim();
+            if (!/^2\d\d$/.test(httpCode)) {
+                throw new Error(`real-provider call did not succeed: HTTP ${httpCode || "(none)"} stderr=${callRes.stderr.trim()}`);
+            }
+            console.error(`[smoke-remote] real-provider call returned HTTP ${httpCode}`);
+            // The gateway should have metered the call + its cost.
+            const metrics = await sandbox.metrics();
+            if (!(metrics.usage.providerCalls >= 1)) {
+                throw new Error(`expected usage.providerCalls >= 1, got ${metrics.usage.providerCalls}`);
+            }
+            if (!(metrics.cost.provider > 0)) {
+                throw new Error(`expected cost.provider > 0, got ${metrics.cost.provider}`);
+            }
+            console.error(`[smoke-remote] metering: providerCalls=${metrics.usage.providerCalls}, ` +
+                `cost.provider=${metrics.cost.provider}`);
+        }
+        else {
+            console.error("[smoke-remote] real-provider call skipped (set SBX_SMOKE_REAL_PROVIDER=openai to enable)");
+        }
+        // 7. Revoke the egress token, then verify it's gone.
+        const tokenToRevoke = tokens[0].token;
+        await sandbox.revokeEgressToken(tokenToRevoke);
+        const after = await sandbox.listEgressTokens();
+        if (after.tokens.some((t) => t.token === tokenToRevoke)) {
+            throw new Error("egress token still present after revoke");
+        }
+        console.error("[smoke-remote] revoked egress token");
+        console.error("[smoke-remote] passed");
+        return 0;
+    }
+    catch (err) {
+        console.error(`[smoke-remote] failed: ${err instanceof Error ? err.message : String(err)}`);
+        return 1;
+    }
+    finally {
+        // Always tear the sandbox down, even on assertion failure.
+        if (sandbox) {
+            try {
+                await sandbox.destroy();
+                console.error(`[smoke-remote] destroyed sandbox ${sandbox.id}`);
+            }
+            catch (err) {
+                console.error(`[smoke-remote] cleanup: destroy failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+    }
+}
+main().then((code) => process.exit(code));
+//# sourceMappingURL=smoke-remote.js.map

package/dist/smoke-remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"smoke-remote.js","sourceRoot":"","sources":["../src/smoke-remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,aAAa,EAAgB,MAAM,cAAc,CAAC;AAE3D,KAAK,UAAU,IAAI;IACjB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CACX,gGAAgG,CACjG,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAEvD,2EAA2E;IAC3E,+CAA+C;IAC/C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,OAAO,CAAC,KAAK,CACX,+BAA+B,QAAQ,aAAa,IAAI,CAAC,MAAM,IAAI;QACjE,oBAAoB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,GAAG,CACrE,CAAC;IAEF,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACH,4EAA4E;QAC5E,6EAA6E;QAC7E,OAAO,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE;YAC3C,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE;SAChE,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,kCAAkC,OAAO,CAAC,EAAE,4BAA4B,CAAC,CAAC;QAExF,8EAA8E;QAC9E,qEAAqE;QACrE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;QACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC;QACjC,IAAI,MAAM,CAAC,WAAW,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CACb,mDAAmD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,CAAC,KAAK,CACX,uFAAuF,MAAM,CAAC,SAAS,GAAG,CAC3G,CAAC;QAEF,wEAAwE;QACxE,wEAAwE;QACxE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,wDAAwD,OAAO,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,gDAAgD,OAAO,EAAE,CAAC,CAAC;QAEzE,2EAA2E;QAC3E,+EAA+E;QAC/E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,KAAK,CAAC,oCAAoC,SAAS,mCAAmC,CAAC,CAAC;QAClG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QAC1F,CAAC;QAED,0EAA0E;QAC1E,4EAA4E;QAC5E,8EAA8E;QAC9E,iFAAiF;QACjF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAC9B,gHAAgH,CACjH,CAAC;QACF,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,aAAa,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,yEAAyE,YAAY,EAAE,CAAC,CAAC;QAEvG,6EAA6E;QAC7E,8EAA8E;QAC9E,4EAA4E;QAC5E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;QACzD,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,aAAa,CAAC;YAC3D,OAAO,CAAC,KAAK,CACX,uDAAuD,YAAY,WAAW,KAAK,GAAG,CACvF,CAAC;YACF,0EAA0E;YAC1E,8EAA8E;YAC9E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC1B,KAAK;gBACL,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;gBAC/C,UAAU,EAAE,CAAC;aACd,CAAC,CAAC;YACH,MAAM,IAAI,GACR,wDAAwD;gBACxD,iDAAiD;gBACjD,sCAAsC;gBACtC,6CAA6C;gBAC7C,OAAO,IAAI,GAAG,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,KAAK,CACb,4CAA4C,QAAQ,IAAI,QAAQ,WAAW,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CACnG,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,KAAK,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAC;YAE7E,uDAAuD;YACvD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,KAAK,CACb,0CAA0C,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,CACxE,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,OAAO,CAAC,KAAK,CACX,0CAA0C,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI;gBACvE,iBAAiB,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAC3C,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;QACvC,MAAM,OAAO,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,gBAAgB,EAAE,CAAC;QAC/C,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,aAAa,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAErD,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACvC,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CACX,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;YAAS,CAAC;QACT,2DAA2D;QAC3D,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;gBACxB,OAAO,CAAC,KAAK,CAAC,oCAAoC,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CACX,2CAA2C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC"}

package/dist/smoke-vz.d.ts

@@ -0,0 +1 @@
+export {};