@kortix/sdk 0.9.98

package/dist/platform/platform-client/lifecycle.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Platform API client — sandbox lifecycle (providers, ensure/get/create/list,
+ * discovery, restart/stop, cancel/reactivate).
+ */
+import type { SandboxInfo, SandboxProviderName, ServerTypeOption, ProvidersInfo } from './types.js';
+/**
+ * Get available sandbox providers from the platform service.
+ */
+export declare function getProviders(): Promise<ProvidersInfo>;
+/**
+ * Ensure a sandbox is running. Idempotent:
+ *   - Running  → return it
+ *   - Stopped  → start it
+ *   - Missing  → create it
+ */
+export declare function ensureSandbox(opts?: {
+    provider?: SandboxProviderName;
+    serverType?: ServerTypeOption;
+}): Promise<{
+    sandbox: SandboxInfo;
+    created: boolean;
+}>;
+/**
+ * Get the user's sandbox.
+ * Returns null if no sandbox exists (call ensureSandbox first).
+ */
+export declare function getSandbox(): Promise<SandboxInfo | null>;
+/**
+ * Create a brand new remote sandbox. For local Docker this adopts an already
+ * running manual sandbox; it never starts, pulls, or creates a container.
+ *
+ * Use this when the user explicitly clicks a provider in the Instance Manager.
+ * For idempotent "make sure I have a sandbox" logic, use ensureSandbox() instead.
+ */
+export declare function createSandbox(opts?: {
+    provider?: SandboxProviderName;
+    serverType?: ServerTypeOption;
+    name?: string;
+}): Promise<{
+    sandbox: SandboxInfo;
+}>;
+/**
+ * Get a single sandbox by ID from the list.
+ * Avoids fetching the full list when only one sandbox is needed.
+ */
+export declare function getSandboxById(sandboxId: unknown): Promise<SandboxInfo | null>;
+export declare function renameSandbox(sandboxId: string, _name: string): Promise<SandboxInfo>;
+/**
+ * List all sandboxes for the user's account.
+ */
+export declare function listSandboxes(sandboxId?: unknown): Promise<SandboxInfo[]>;
+export declare function discoverLocalSandbox(): Promise<SandboxInfo | null>;
+/**
+ * Restart a sandbox workload. For JustAVPS this repairs the managed workload
+ * container/service and only starts the host if it is currently stopped.
+ */
+export declare function restartSandbox(sandboxId?: string): Promise<void>;
+/**
+ * Stop a sandbox in place — pauses the running sandbox (disk kept, resumable
+ * via restart/start) without deleting the session. Pass `sandboxId` to target
+ * a specific instance; omit to stop the user's active sandbox.
+ *
+ * Previously this called deleteProjectSession, which destroys the session
+ * instead of pausing it — fixed to use the dedicated stop endpoint.
+ */
+export declare function stopSandbox(sandboxId?: string): Promise<void>;
+/**
+ * Schedule a sandbox for cancellation at end of billing period.
+ * The instance keeps running until then; reactivate to reverse.
+ */
+export declare function cancelSandbox(sandboxId?: string): Promise<{
+    cancel_at: string | null;
+}>;
+/**
+ * Reverse a scheduled cancellation — subscription continues as normal.
+ */
+export declare function reactivateSandbox(sandboxId?: string): Promise<void>;
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/platform/platform-client/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../../../src/platform/platform-client/lifecycle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,KAAK,EACV,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACd,MAAM,SAAS,CAAC;AAYjB;;GAEG;AACH,wBAAsB,YAAY,IAAI,OAAO,CAAC,aAAa,CAAC,CAE3D;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE;IACzC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,UAAU,CAAC,EAAE,gBAAgB,CAAC;CAC/B,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAetD;AAED;;;GAGG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAG9D;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,IAAI,CAAC,EAAE;IACzC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC,CAGpC;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,SAAS,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAMpF;AAED,wBAAsB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAI1F;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAW/E;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CA+BxE;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtE;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKnE;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAE7F;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEzE"}

package/dist/platform/platform-client/lifecycle.js

@@ -0,0 +1,151 @@
+/**
+ * Platform API client — sandbox lifecycle (providers, ensure/get/create/list,
+ * discovery, restart/stop, cancel/reactivate).
+ */
+import { createProjectSession, startProjectSession, listProjects, restartProjectSession, stopProjectSession, } from '../projects-client/index.js';
+import { findProjectSessionSandbox, listProjectSessionSandboxes, projectSessionToSandboxInfo, normalizeSandboxId, getPlatformUrl, getLocalBridgeStatusUrl, LOCAL_PLATFORM_CANDIDATES, } from './shared.js';
+/**
+ * Get available sandbox providers from the platform service.
+ */
+export async function getProviders() {
+    return { providers: ['managed'], default: 'managed' };
+}
+/**
+ * Ensure a sandbox is running. Idempotent:
+ *   - Running  → return it
+ *   - Stopped  → start it
+ *   - Missing  → create it
+ */
+export async function ensureSandbox(opts) {
+    const existing = await findProjectSessionSandbox();
+    if (existing)
+        return { sandbox: existing.sandbox, created: false };
+    const projects = await listProjects();
+    const project = projects[0];
+    if (!project) {
+        throw new Error('Create a project before starting a sandbox');
+    }
+    const session = await createProjectSession(project.project_id, {
+        ...(opts?.provider ? { agent_name: opts.provider } : {}),
+    });
+    const runtime = (await startProjectSession(project.project_id, session.session_id))?.sandbox ?? null;
+    return { sandbox: projectSessionToSandboxInfo(project, session, runtime), created: true };
+}
+/**
+ * Get the user's sandbox.
+ * Returns null if no sandbox exists (call ensureSandbox first).
+ */
+export async function getSandbox() {
+    const row = await findProjectSessionSandbox().catch(() => null);
+    return row?.sandbox ?? null;
+}
+/**
+ * Create a brand new remote sandbox. For local Docker this adopts an already
+ * running manual sandbox; it never starts, pulls, or creates a container.
+ *
+ * Use this when the user explicitly clicks a provider in the Instance Manager.
+ * For idempotent "make sure I have a sandbox" logic, use ensureSandbox() instead.
+ */
+export async function createSandbox(opts) {
+    const result = await ensureSandbox(opts);
+    return { sandbox: result.sandbox };
+}
+/**
+ * Get a single sandbox by ID from the list.
+ * Avoids fetching the full list when only one sandbox is needed.
+ */
+export async function getSandboxById(sandboxId) {
+    const normalizedSandboxId = normalizeSandboxId(sandboxId);
+    if (!normalizedSandboxId)
+        return null;
+    const row = await findProjectSessionSandbox(normalizedSandboxId).catch(() => null);
+    return row?.sandbox ?? null;
+}
+export async function renameSandbox(sandboxId, _name) {
+    const row = await findProjectSessionSandbox(sandboxId);
+    if (!row)
+        throw new Error('Project session sandbox not found');
+    throw new Error('Renaming project-session sandboxes is not exposed by the current API');
+}
+/**
+ * List all sandboxes for the user's account.
+ */
+export async function listSandboxes(sandboxId) {
+    const normalizedSandboxId = normalizeSandboxId(sandboxId);
+    const rows = await listProjectSessionSandboxes().catch(() => []);
+    return rows
+        .map((row) => row.sandbox)
+        .filter((sandbox) => !normalizedSandboxId ||
+        sandbox.sandbox_id === normalizedSandboxId ||
+        sandbox.external_id === normalizedSandboxId);
+}
+export async function discoverLocalSandbox() {
+    if (typeof window === 'undefined')
+        return null;
+    const currentPlatformUrl = getPlatformUrl();
+    const candidateBases = Array.from(new Set([currentPlatformUrl, ...LOCAL_PLATFORM_CANDIDATES]));
+    for (const baseUrl of candidateBases) {
+        try {
+            const response = await fetch(getLocalBridgeStatusUrl(baseUrl), {
+                method: 'GET',
+                signal: AbortSignal.timeout(1500),
+                headers: { Accept: 'application/json' },
+            });
+            if (!response.ok) {
+                continue;
+            }
+            const bridgeStatus = await response.json();
+            if (!bridgeStatus.success || bridgeStatus.status !== 'ready' || !bridgeStatus.data?.sandbox_id) {
+                continue;
+            }
+            return bridgeStatus.data;
+        }
+        catch {
+            continue;
+        }
+    }
+    return null;
+}
+/**
+ * Restart a sandbox workload. For JustAVPS this repairs the managed workload
+ * container/service and only starts the host if it is currently stopped.
+ */
+export async function restartSandbox(sandboxId) {
+    if (!sandboxId) {
+        throw new Error('No sandbox selected for workload restart');
+    }
+    const row = await findProjectSessionSandbox(sandboxId);
+    if (!row)
+        throw new Error('Project session sandbox not found');
+    await restartProjectSession(row.project.project_id, row.session.session_id);
+}
+/**
+ * Stop a sandbox in place — pauses the running sandbox (disk kept, resumable
+ * via restart/start) without deleting the session. Pass `sandboxId` to target
+ * a specific instance; omit to stop the user's active sandbox.
+ *
+ * Previously this called deleteProjectSession, which destroys the session
+ * instead of pausing it — fixed to use the dedicated stop endpoint.
+ */
+export async function stopSandbox(sandboxId) {
+    if (!sandboxId)
+        throw new Error('No sandbox selected to stop');
+    const row = await findProjectSessionSandbox(sandboxId);
+    if (!row)
+        throw new Error('Project session sandbox not found');
+    await stopProjectSession(row.project.project_id, row.session.session_id);
+}
+/**
+ * Schedule a sandbox for cancellation at end of billing period.
+ * The instance keeps running until then; reactivate to reverse.
+ */
+export async function cancelSandbox(sandboxId) {
+    throw new Error('Cancellation is not exposed for project-session sandboxes');
+}
+/**
+ * Reverse a scheduled cancellation — subscription continues as normal.
+ */
+export async function reactivateSandbox(sandboxId) {
+    throw new Error('Reactivation is not exposed for project-session sandboxes');
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/platform/platform-client/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../../../src/platform/platform-client/lifecycle.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EACL,oBAAoB,EAEpB,mBAAmB,EACnB,YAAY,EACZ,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,GAE1B,MAAM,UAAU,CAAC;AAElB;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,OAAO,EAAE,SAAS,EAAE,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAGnC;IACC,MAAM,QAAQ,GAAG,MAAM,yBAAyB,EAAE,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEnE,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE;QAC7D,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,CAAC,MAAM,mBAAmB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;IACrG,OAAO,EAAE,OAAO,EAAE,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC5F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,GAAG,GAAG,MAAM,yBAAyB,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAInC;IACC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAkB;IACrD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACnF,OAAO,GAAG,EAAE,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB,EAAE,KAAa;IAClE,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;AAC1F,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAmB;IACrD,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAE1D,MAAM,IAAI,GAAG,MAAM,2BAA2B,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC;SACzB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAClB,CAAC,mBAAmB;QACpB,OAAO,CAAC,UAAU,KAAK,mBAAmB;QAC1C,OAAO,CAAC,WAAW,KAAK,mBAAmB,CAC5C,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,kBAAkB,GAAG,cAAc,EAAE,CAAC;IAC5C,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC;IAE/F,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE;gBAC7D,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;gBACjC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAgC,CAAC;YAEzE,IAAI,CAAC,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;gBAC/F,SAAS;YACX,CAAC;YAED,OAAO,YAAY,CAAC,IAAI,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,SAAkB;IACrD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/D,MAAM,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,SAAkB;IAClD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/D,MAAM,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAkB;IACpD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;AAC/E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAkB;IACxD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;AAC/E,CAAC"}

package/dist/platform/platform-client/members.d.ts

@@ -0,0 +1,81 @@
+/**
+ * Platform API client — sandbox members, scopes, and legacy project ACL access.
+ */
+import type { SandboxInfo } from './types.js';
+export type SandboxMemberRole = 'owner' | 'admin' | 'member';
+export interface SandboxMember {
+    user_id: string;
+    email: string | null;
+    role: SandboxMemberRole | null;
+    added_by: string | null;
+    added_at: string;
+    monthly_spend_cap_cents?: number | null;
+    current_period_cents?: number;
+}
+export interface SandboxPendingInvite {
+    invite_id: string;
+    email: string;
+    role: 'admin' | 'member';
+    invited_by: string | null;
+    created_at: string;
+    expires_at: string;
+}
+export interface SandboxMembersResponse {
+    sandbox_id: string;
+    can_manage: boolean;
+    viewer_user_id: string;
+    members: SandboxMember[];
+    pending_invites: SandboxPendingInvite[];
+}
+export interface AddSandboxMemberResult {
+    status: 'added' | 'invited';
+    user_id?: string;
+    email?: string;
+    role?: 'admin' | 'member';
+}
+export declare function listSandboxMembers(sandboxId: string): Promise<SandboxMembersResponse>;
+export declare function addSandboxMember(sandboxId: string, email: string, role?: 'admin' | 'member'): Promise<AddSandboxMemberResult>;
+export declare function removeSandboxMember(sandboxId: string, userId: string): Promise<void>;
+export declare function updateSandboxMemberRole(sandboxId: string, userId: string, role: SandboxMemberRole): Promise<void>;
+export declare function updateSandboxMemberSpendCap(sandboxId: string, userId: string, capCents: number | null): Promise<void>;
+export type ScopeEffect = 'grant' | 'revoke' | null;
+export interface SandboxScopeCatalogEntry {
+    scope: string;
+    label: string;
+    description: string;
+    group: string;
+}
+export interface SandboxMemberScopes {
+    sandbox_id: string;
+    user_id: string;
+    role: 'owner' | 'admin' | 'member' | null;
+    inherited: string[];
+    grants: string[];
+    revokes: string[];
+    effective: string[];
+    catalog: SandboxScopeCatalogEntry[];
+    groups: Record<string, string[]>;
+}
+export interface SandboxViewerScopes {
+    sandbox_id: string;
+    role: 'owner' | 'admin' | 'member' | null;
+    scopes: string[];
+}
+export declare function getViewerSandboxScopes(sandboxId: string): Promise<SandboxViewerScopes>;
+export declare function getSandboxMemberScopes(sandboxId: string, userId: string): Promise<SandboxMemberScopes>;
+export declare function updateSandboxMemberScope(sandboxId: string, userId: string, scope: string, effect: ScopeEffect): Promise<void>;
+export interface SandboxProjectMember {
+    user_id: string;
+    role: 'owner' | 'admin' | 'member';
+    added_by: string | null;
+    added_at: string;
+}
+export interface SandboxProjectMembersResponse {
+    project_id: string;
+    members: SandboxProjectMember[];
+}
+export declare function listSandboxProjectMembers(sandbox: SandboxInfo, projectId: string): Promise<SandboxProjectMembersResponse>;
+export declare function grantSandboxProjectAccess(sandbox: SandboxInfo, projectId: string, userId: string, role?: 'admin' | 'member'): Promise<void>;
+export declare function revokeSandboxProjectAccess(sandbox: SandboxInfo, projectId: string, userId: string): Promise<void>;
+export declare function revokeSandboxInvite(sandboxId: string, inviteId: string): Promise<void>;
+//# sourceMappingURL=members.d.ts.map

package/dist/platform/platform-client/members.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.d.ts","sourceRoot":"","sources":["../../../src/platform/platform-client/members.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAK3C,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE7D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAC/B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,eAAe,EAAE,oBAAoB,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,OAAO,GAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;CAC3B;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAE3F;AAED,wBAAsB,gBAAgB,CACpC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,IAAI,GAAE,OAAO,GAAG,QAAmB,GAClC,OAAO,CAAC,sBAAsB,CAAC,CAEjC;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1F;AAED,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,wBAAsB,2BAA2B,CAC/C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,OAAO,CAAC,IAAI,CAAC,CAEf;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEpD,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC1C,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,GAAG,IAAI,CAAC;IAC1C,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,mBAAmB,CAAC,CAE9B;AAED,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAEf;AASD,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;IACnC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAoBD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,6BAA6B,CAAC,CAMxC;AAED,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE,OAAO,GAAG,QAAmB,GAClC,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5F"}

package/dist/platform/platform-client/members.js

@@ -0,0 +1,59 @@
+/**
+ * Platform API client — sandbox members, scopes, and legacy project ACL access.
+ */
+import { authenticatedFetch } from '../auth.js';
+import { stripTrailingSlashes } from '../strings.js';
+import { getSandboxUrl } from './urls.js';
+export async function listSandboxMembers(sandboxId) {
+    throw new Error('Sandbox members moved to project access; use project members for project-session sandboxes');
+}
+export async function addSandboxMember(sandboxId, email, role = 'member') {
+    throw new Error('Sandbox members moved to project access; invite the user to the project instead');
+}
+export async function removeSandboxMember(sandboxId, userId) {
+    throw new Error('Sandbox members moved to project access; update project access instead');
+}
+export async function updateSandboxMemberRole(sandboxId, userId, role) {
+    throw new Error('Sandbox members moved to project access; update project access instead');
+}
+export async function updateSandboxMemberSpendCap(sandboxId, userId, capCents) {
+    throw new Error('Sandbox member spend caps are not exposed for project-session sandboxes');
+}
+export async function getViewerSandboxScopes(sandboxId) {
+    throw new Error('Sandbox scopes moved to project access for project-session sandboxes');
+}
+export async function getSandboxMemberScopes(sandboxId, userId) {
+    throw new Error('Sandbox scopes moved to project access for project-session sandboxes');
+}
+export async function updateSandboxMemberScope(sandboxId, userId, scope, effect) {
+    throw new Error('Sandbox scopes moved to project access for project-session sandboxes');
+}
+async function fetchKortixMaster(sandbox, path, init) {
+    const base = getSandboxUrl(sandbox);
+    const res = await authenticatedFetch(`${stripTrailingSlashes(base)}${path}`, {
+        signal: AbortSignal.timeout(8_000),
+        headers: { 'Content-Type': 'application/json' },
+        ...init,
+    });
+    if (!res.ok) {
+        const body = await res.text().catch(() => '');
+        throw new Error(body || `Request failed (${res.status})`);
+    }
+    return (await res.json());
+}
+export async function listSandboxProjectMembers(sandbox, projectId) {
+    return fetchKortixMaster(sandbox, `/kortix/projects/${encodeURIComponent(projectId)}/members`, { method: 'GET' });
+}
+export async function grantSandboxProjectAccess(sandbox, projectId, userId, role = 'member') {
+    await fetchKortixMaster(sandbox, `/kortix/projects/${encodeURIComponent(projectId)}/members`, {
+        method: 'POST',
+        body: JSON.stringify({ user_id: userId, role }),
+    });
+}
+export async function revokeSandboxProjectAccess(sandbox, projectId, userId) {
+    await fetchKortixMaster(sandbox, `/kortix/projects/${encodeURIComponent(projectId)}/members/${encodeURIComponent(userId)}`, { method: 'DELETE' });
+}
+export async function revokeSandboxInvite(sandboxId, inviteId) {
+    throw new Error('Sandbox invites moved to project access for project-session sandboxes');
+}
+//# sourceMappingURL=members.js.map

package/dist/platform/platform-client/members.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"members.js","sourceRoot":"","sources":["../../../src/platform/platform-client/members.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAwCvC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;AAChH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,SAAiB,EACjB,KAAa,EACb,OAA2B,QAAQ;IAEnC,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,MAAc;IACzE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,MAAc,EACd,IAAuB;IAEvB,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;AAC5F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,SAAiB,EACjB,MAAc,EACd,QAAuB;IAEvB,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;AAC7F,CAAC;AA6BD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB;IAEjB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,MAAc;IAEd,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,MAAc,EACd,KAAa,EACb,MAAmB;IAEnB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;AAC1F,CAAC;AAqBD,KAAK,UAAU,iBAAiB,CAC9B,OAAoB,EACpB,IAAY,EACZ,IAAkB;IAElB,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,EAAE;QAC3E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;QAClC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,GAAG,IAAI;KACR,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,mBAAmB,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAoB,EACpB,SAAiB;IAEjB,OAAO,iBAAiB,CACtB,OAAO,EACP,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAC3D,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAoB,EACpB,SAAiB,EACjB,MAAc,EACd,OAA2B,QAAQ;IAEnC,MAAM,iBAAiB,CACrB,OAAO,EACP,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,UAAU,EAC3D;QACE,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAChD,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAoB,EACpB,SAAiB,EACjB,MAAc;IAEd,MAAM,iBAAiB,CACrB,OAAO,EACP,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,EACzF,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,QAAgB;IAC3E,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;AAC3F,CAAC"}

package/dist/platform/platform-client/shared.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Platform API client — shared, non-exported helpers.
+ *
+ * These are internal to the platform-client module group. They are exported so
+ * sibling modules can use them, but they are intentionally NOT re-exported from
+ * the barrel index.ts, so the public surface stays unchanged.
+ */
+import { type KortixProject, type ProjectSession, type ProjectSessionSandbox } from '../projects-client/index.js';
+import { type SandboxInfo } from './types.js';
+/**
+ * Get the base URL for platform API calls.
+ *
+ * Uses NEXT_PUBLIC_BACKEND_URL directly (includes /v1).
+ */
+export declare function getPlatformUrl(): string;
+export declare function normalizeSandboxId(value: unknown): string | undefined;
+export interface PlatformResponse<T> {
+    success: boolean;
+    data?: T;
+    error?: string;
+    created?: boolean;
+}
+export interface LocalBridgeSandboxResponse {
+    success: boolean;
+    status?: string;
+    data?: SandboxInfo | null;
+}
+export declare const LOCAL_PLATFORM_CANDIDATES: string[];
+export declare function getLocalBridgeStatusUrl(baseUrl: string): string;
+export declare function projectSessionToSandboxInfo(project: KortixProject, session: ProjectSession, runtime?: ProjectSessionSandbox | null): SandboxInfo;
+export declare function listProjectSessionSandboxes(): Promise<Array<{
+    project: KortixProject;
+    session: ProjectSession;
+    runtime: ProjectSessionSandbox | null;
+    sandbox: SandboxInfo;
+}>>;
+export declare function findProjectSessionSandbox(sandboxId?: string): Promise<{
+    project: KortixProject;
+    session: ProjectSession;
+    runtime: ProjectSessionSandbox | null;
+    sandbox: SandboxInfo;
+} | null>;
+export declare function platformFetch<T>(path: string, options?: RequestInit): Promise<PlatformResponse<T>>;
+//# sourceMappingURL=shared.d.ts.map

package/dist/platform/platform-client/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/platform/platform-client/shared.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAiB,KAAK,WAAW,EAA4B,MAAM,SAAS,CAAC;AAEpF;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAUvC;AAQD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAiBrE;AAED,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,CAAC,CAAC;IACT,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC;CAC3B;AAED,eAAO,MAAM,yBAAyB,UAGrC,CAAC;AAEF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAM/D;AAUD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,cAAc,EACvB,OAAO,CAAC,EAAE,qBAAqB,GAAG,IAAI,GACrC,WAAW,CAoBb;AAED,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,KAAK,CAAC;IACjE,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,WAAW,CAAC;CACtB,CAAC,CAAC,CA+BF;AAED,wBAAsB,yBAAyB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3E,OAAO,EAAE,aAAa,CAAC;IACvB,OAAO,EAAE,cAAc,CAAC;IACxB,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACtC,OAAO,EAAE,WAAW,CAAC;CACtB,GAAG,IAAI,CAAC,CASR;AAID,wBAAsB,aAAa,CAAC,CAAC,EACnC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,WAAgB,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAiD9B"}

package/dist/platform/platform-client/shared.js

@@ -0,0 +1,177 @@
+/**
+ * Platform API client — shared, non-exported helpers.
+ *
+ * These are internal to the platform-client module group. They are exported so
+ * sibling modules can use them, but they are intentionally NOT re-exported from
+ * the barrel index.ts, so the public surface stays unchanged.
+ */
+import { authenticatedFetch } from '../auth.js';
+import { platformConfig } from '../config.js';
+import { ApiError, parseBillingError } from '../api/errors.js';
+import { listProjectSessions, listProjects, } from '../projects-client/index.js';
+import { SANDBOX_PORTS } from './types.js';
+/**
+ * Get the base URL for platform API calls.
+ *
+ * Uses NEXT_PUBLIC_BACKEND_URL directly (includes /v1).
+ */
+export function getPlatformUrl() {
+    // Server-side: prefer BACKEND_URL (internal Docker hostname) over
+    // NEXT_PUBLIC_BACKEND_URL (browser-facing localhost, unreachable from container)
+    const backendUrl = process.env.BACKEND_URL || platformConfig().backendUrl;
+    if (backendUrl) {
+        return backendUrl;
+    }
+    // Fallback for local dev
+    return 'http://localhost:8008/v1';
+}
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+function isDbSandboxId(sandboxId) {
+    return !!sandboxId && UUID_RE.test(sandboxId);
+}
+export function normalizeSandboxId(value) {
+    if (typeof value === 'string') {
+        const trimmed = value.trim();
+        return trimmed.length > 0 ? trimmed : undefined;
+    }
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            const normalized = normalizeSandboxId(item);
+            if (normalized)
+                return normalized;
+        }
+        return undefined;
+    }
+    if (value && typeof value === 'object') {
+        const record = value;
+        return normalizeSandboxId(record.sandboxId ?? record.id ?? record.slug ?? Object.values(record)[0]);
+    }
+    return undefined;
+}
+export const LOCAL_PLATFORM_CANDIDATES = [
+    'http://localhost:8008/v1',
+    'http://127.0.0.1:8008/v1',
+];
+export function getLocalBridgeStatusUrl(baseUrl) {
+    // Linear trailing-slash strip — the regex form (/\/+$/) backtracks
+    // quadratically on adversarial input (CodeQL js/polynomial-redos).
+    let end = baseUrl.length;
+    while (end > 0 && baseUrl.charCodeAt(end - 1) === 47 /* '/' */)
+        end--;
+    return `${baseUrl.slice(0, end)}/platform/local-bridge/status`;
+}
+function normalizeSessionStatus(status) {
+    if (status === 'running' || status === 'active')
+        return 'active';
+    if (status === 'queued' || status === 'branching' || status === 'provisioning')
+        return 'provisioning';
+    if (status === 'failed' || status === 'error')
+        return 'error';
+    if (status === 'stopped' || status === 'completed' || status === 'archived')
+        return 'stopped';
+    return status || 'unknown';
+}
+export function projectSessionToSandboxInfo(project, session, runtime) {
+    const externalId = runtime?.external_id || session.sandbox_url?.match(/\/p\/([^/]+)\//)?.[1] || session.sandbox_id;
+    return {
+        sandbox_id: runtime?.sandbox_id || session.sandbox_id || session.session_id,
+        external_id: externalId,
+        name: session.name || `${project.name} session`,
+        provider: runtime?.provider || session.sandbox_provider || 'managed',
+        base_url: runtime?.base_url || session.sandbox_url || (runtime?.external_id ? `${getPlatformUrl()}/p/${runtime.external_id}/${SANDBOX_PORTS.KORTIX_MASTER}` : ''),
+        status: normalizeSessionStatus(runtime?.status || session.status),
+        metadata: {
+            ...(session.metadata ?? {}),
+            project_id: project.project_id,
+            session_id: session.session_id,
+            project_name: project.name,
+            runtime_status: runtime?.status,
+            error: session.error,
+        },
+        created_at: runtime?.created_at || session.created_at,
+        updated_at: runtime?.updated_at || session.updated_at,
+    };
+}
+export async function listProjectSessionSandboxes() {
+    const projects = await listProjects();
+    const rows = [];
+    for (const project of projects) {
+        const sessions = await listProjectSessions(project.project_id).catch(() => []);
+        for (const session of sessions) {
+            // Derive runtime info from the session row — do NOT call /start here, or
+            // listing would wake every sandbox across every project. The single-session
+            // open/create paths below use /start; a passive list must not.
+            const runtime = null;
+            rows.push({
+                project,
+                session,
+                runtime,
+                sandbox: projectSessionToSandboxInfo(project, session, runtime),
+            });
+        }
+    }
+    return rows.sort((a, b) => {
+        const priority = { active: 0, provisioning: 1, stopped: 2, error: 3 };
+        const statusDelta = (priority[a.sandbox.status] ?? 99) - (priority[b.sandbox.status] ?? 99);
+        if (statusDelta !== 0)
+            return statusDelta;
+        return Date.parse(b.sandbox.updated_at) - Date.parse(a.sandbox.updated_at);
+    });
+}
+export async function findProjectSessionSandbox(sandboxId) {
+    const rows = await listProjectSessionSandboxes();
+    if (!sandboxId)
+        return rows[0] ?? null;
+    return rows.find((row) => row.sandbox.sandbox_id === sandboxId ||
+        row.sandbox.external_id === sandboxId ||
+        row.session.session_id === sandboxId ||
+        row.runtime?.external_id === sandboxId) ?? null;
+}
+// ─── Fetch helper ────────────────────────────────────────────────────────────
+export async function platformFetch(path, options = {}) {
+    const headers = {
+        'Content-Type': 'application/json',
+        ...options.headers,
+    };
+    // Default 30s timeout for this (non-streaming, request/response JSON) call —
+    // callers that need a different budget (or none) pass their own `signal`.
+    const signal = options.signal ?? AbortSignal.timeout(30_000);
+    const res = await authenticatedFetch(`${getPlatformUrl()}${path}`, {
+        ...options,
+        headers,
+        signal,
+    });
+    // Defensively parse the body: a non-JSON error body (proxy/gateway HTML, an
+    // empty response, a truncated stream) used to throw an opaque SyntaxError
+    // out of `res.json()` here, masking the real HTTP failure. Read the body
+    // ONCE as text, then attempt to JSON-parse that string — reading text
+    // first (rather than trying `res.json()` and falling back to `res.text()`
+    // on failure) avoids a "body already used" error on the fallback read,
+    // since a `Response` body can only be consumed once.
+    const rawText = await res.text().catch(() => undefined);
+    let body;
+    if (rawText) {
+        try {
+            body = JSON.parse(rawText);
+        }
+        catch {
+            /* not JSON — leave body undefined, rawText still available below */
+        }
+    }
+    if (!res.ok) {
+        const message = body?.error || body?.message || body?.detail || rawText || `Platform API error ${res.status}`;
+        let error = new ApiError(message, {
+            status: res.status,
+            code: body?.code || body?.error_code || String(res.status),
+            details: body ?? (rawText ? { rawText } : undefined),
+            response: res,
+            endpoint: path,
+        });
+        if (res.status === 402) {
+            error = parseBillingError(Object.assign(error, { response: res, status: res.status, data: body }));
+        }
+        throw error;
+    }
+    return body;
+}
+//# sourceMappingURL=shared.js.map

package/dist/platform/platform-client/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../../src/platform/platform-client/shared.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,mBAAmB,EACnB,YAAY,GAIb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,aAAa,EAA8C,MAAM,SAAS,CAAC;AAEpF;;;;GAIG;AACH,MAAM,UAAU,cAAc;IAC5B,kEAAkE;IAClE,iFAAiF;IACjF,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,cAAc,EAAE,CAAC,UAAU,CAAC;IAC1E,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,yBAAyB;IACzB,OAAO,0BAA0B,CAAC;AACpC,CAAC;AAED,MAAM,OAAO,GAAG,iEAAiE,CAAC;AAElF,SAAS,aAAa,CAAC,SAAoC;IACzD,OAAO,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,UAAU;gBAAE,OAAO,UAAU,CAAC;QACpC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,kBAAkB,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAeD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,0BAA0B;IAC1B,0BAA0B;CAC3B,CAAC;AAEF,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,mEAAmE;IACnE,mEAAmE;IACnE,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC;IACzB,OAAO,GAAG,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,SAAS;QAAE,GAAG,EAAE,CAAC;IACtE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,+BAA+B,CAAC;AACjE,CAAC;AAED,SAAS,sBAAsB,CAAC,MAA0B;IACxD,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IACjE,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,cAAc;QAAE,OAAO,cAAc,CAAC;IACtG,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC9F,OAAO,MAAM,IAAI,SAAS,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,OAAsB,EACtB,OAAuB,EACvB,OAAsC;IAEtC,MAAM,UAAU,GAAG,OAAO,EAAE,WAAW,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC;IACnH,OAAO;QACL,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU;QAC3E,WAAW,EAAE,UAAU;QACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,GAAG,OAAO,CAAC,IAAI,UAAU;QAC/C,QAAQ,EAAG,OAAO,EAAE,QAAuC,IAAK,OAAO,CAAC,gBAA+C,IAAI,SAAS;QACpI,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,cAAc,EAAE,MAAM,OAAO,CAAC,WAAW,IAAI,aAAa,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjK,MAAM,EAAE,sBAAsB,CAAC,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QACjE,QAAQ,EAAE;YACR,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;YAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,OAAO,CAAC,IAAI;YAC1B,cAAc,EAAE,OAAO,EAAE,MAAM;YAC/B,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB;QACD,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU;QACrD,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,OAAO,CAAC,UAAU;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B;IAM/C,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,IAAI,GAKL,EAAE,CAAC;IAER,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,yEAAyE;YACzE,4EAA4E;YAC5E,+DAA+D;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,IAAI,CAAC;gBACR,OAAO;gBACP,OAAO;gBACP,OAAO;gBACP,OAAO,EAAE,2BAA2B,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,QAAQ,GAA2B,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC9F,MAAM,WAAW,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5F,IAAI,WAAW,KAAK,CAAC;YAAE,OAAO,WAAW,CAAC;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,SAAkB;IAMhE,MAAM,IAAI,GAAG,MAAM,2BAA2B,EAAE,CAAC;IACjD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACvC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CACvB,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;QACpC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS;QACrC,GAAG,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS;QACpC,GAAG,CAAC,OAAO,EAAE,WAAW,KAAK,SAAS,CACvC,IAAI,IAAI,CAAC;AACZ,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,UAAuB,EAAE;IAEzB,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,GAAG,OAAO,CAAC,OAAiC;KAC7C,CAAC;IAEF,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,cAAc,EAAE,GAAG,IAAI,EAAE,EAAE;QACjE,GAAG,OAAO;QACV,OAAO;QACP,MAAM;KACP,CAAC,CAAC;IAEH,4EAA4E;IAC5E,0EAA0E;IAC1E,yEAAyE;IACzE,sEAAsE;IACtE,0EAA0E;IAC1E,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACxD,IAAI,IAAS,CAAC;IACd,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;QACtE,CAAC;IACH,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,OAAO,IAAI,IAAI,EAAE,MAAM,IAAI,OAAO,IAAI,sBAAsB,GAAG,CAAC,MAAM,EAAE,CAAC;QAC9G,IAAI,KAAK,GAAU,IAAI,QAAQ,CAAC,OAAO,EAAE;YACvC,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1D,OAAO,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,QAAQ,EAAE,GAAG;YACb,QAAQ,EAAE,IAAI;SACf,CAAC,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACrG,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,OAAO,IAA2B,CAAC;AACrC,CAAC"}