@kortix/sdk 0.9.98

package/dist/platform/projects-client/sandbox-shares.d.ts

@@ -0,0 +1,25 @@
+export interface PublicSandboxShare {
+    url: string;
+    port: number;
+    token: string;
+    expiresAt: string;
+    label?: string;
+}
+export interface CreateSandboxShareInput {
+    sandboxId: string;
+    port: number;
+    ttl?: string;
+    label?: string;
+}
+export interface CreateSandboxShareResponse {
+    url: string;
+    expiresAt?: string;
+    label?: string;
+}
+/** Every active public share link for a sandbox. */
+export declare function listSandboxShares(sandboxId: string): Promise<PublicSandboxShare[]>;
+/** Create a token-gated public URL for a sandbox port. */
+export declare function createSandboxShare(input: CreateSandboxShareInput): Promise<CreateSandboxShareResponse>;
+/** Revoke a public share link by its token. */
+export declare function revokeSandboxShare(sandboxId: string, token: string): Promise<void>;
+//# sourceMappingURL=sandbox-shares.d.ts.map

package/dist/platform/projects-client/sandbox-shares.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-shares.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/sandbox-shares.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,oDAAoD;AACpD,wBAAsB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAQxF;AAED,0DAA0D;AAC1D,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,0BAA0B,CAAC,CAUrC;AAED,+CAA+C;AAC/C,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxF"}

package/dist/platform/projects-client/sandbox-shares.js

@@ -0,0 +1,29 @@
+// Public sandbox share links — `/v1/p/share`. Sandbox-scoped, NOT project-
+// scoped: the route takes a `sandbox_id` (the sandbox's external id), never a
+// Kortix project id, and proxies through to the sandbox daemon's own
+// `/kortix/share` endpoints (see apps/api/src/sandbox-proxy/routes/share.ts).
+// Lives in `projects-client` for barrel/discoverability reasons even though
+// its URLs sit outside `/projects`.
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+/** Every active public share link for a sandbox. */
+export async function listSandboxShares(sandboxId) {
+    const data = unwrap(await backendApi.get(`/p/share?sandbox_id=${encodeURIComponent(sandboxId)}`), 'Failed to load public links');
+    return data.shares ?? [];
+}
+/** Create a token-gated public URL for a sandbox port. */
+export async function createSandboxShare(input) {
+    return unwrap(await backendApi.post('/p/share', {
+        sandbox_id: input.sandboxId,
+        port: input.port,
+        ttl: input.ttl,
+        label: input.label,
+    }), 'Failed to generate public URL');
+}
+/** Revoke a public share link by its token. */
+export async function revokeSandboxShare(sandboxId, token) {
+    const res = await backendApi.delete(`/p/share/${encodeURIComponent(token)}?sandbox_id=${encodeURIComponent(sandboxId)}`);
+    if (!res.success)
+        throw new Error(res.error?.message ?? 'Failed to revoke public link');
+}
+//# sourceMappingURL=sandbox-shares.js.map

package/dist/platform/projects-client/sandbox-shares.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-shares.js","sourceRoot":"","sources":["../../../src/platform/projects-client/sandbox-shares.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,8EAA8E;AAC9E,qEAAqE;AACrE,8EAA8E;AAC9E,4EAA4E;AAC5E,oCAAoC;AAEpC,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAuBlC,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAiB;IACvD,MAAM,IAAI,GAAG,MAAM,CACjB,MAAM,UAAU,CAAC,GAAG,CAClB,uBAAuB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACvD,EACD,6BAA6B,CAC9B,CAAC;IACF,OAAO,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAA8B;IAE9B,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAA6B,UAAU,EAAE;QAC5D,UAAU,EAAE,KAAK,CAAC,SAAS;QAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,EACF,+BAA+B,CAChC,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB,EAAE,KAAa;IACvE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CACjC,YAAY,kBAAkB,CAAC,KAAK,CAAC,eAAe,kBAAkB,CAAC,SAAS,CAAC,EAAE,CACpF,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,IAAI,8BAA8B,CAAC,CAAC;AAC1F,CAAC"}

package/dist/platform/projects-client/sandbox.d.ts

@@ -0,0 +1,123 @@
+/** Lifecycle status of a single build attempt. */
+export type ProjectSnapshotStatus = 'building' | 'ready' | 'failed';
+/** Classified reason a snapshot build failed. */
+export type SnapshotErrorCategory = 'dockerfile' | 'tunnel' | 'provider' | 'timeout' | 'runtime' | 'git' | 'unknown';
+/** A sandbox template: platform default + each `[[sandbox.templates]]` / UI-created entry. */
+export interface SandboxTemplate {
+    template_id: string | null;
+    slug: string;
+    name: string;
+    is_default: boolean;
+    source: 'platform' | 'toml' | 'ui';
+    provider: string;
+    has_dockerfile: boolean;
+    has_image: boolean;
+    image: string | null;
+    dockerfile_path: string | null;
+    entrypoint: string | null;
+    cpu: number;
+    memory_gb: number;
+    disk_gb: number;
+    snapshot_name: string;
+    content_hash: string;
+    built_from_commit: string | null;
+    daytona_state: string;
+    provider_state: string;
+    ready: boolean;
+    /** Per-template warm pool config + live counts. null when the operator gate
+     *  is off (feature unavailable platform-wide). */
+    warm_pool?: {
+        enabled: boolean;
+        size: number;
+        /** Sandboxes parked and ready to claim instantly. */
+        ready: number;
+        /** Sandboxes currently booting toward ready. */
+        warming: number;
+    } | null;
+}
+export interface SandboxTemplatesResponse {
+    items: SandboxTemplate[];
+    default_slug: string | null;
+    /** Whether the warm pool feature is enabled platform-wide. */
+    warm_pool_available?: boolean;
+}
+export interface ProjectSnapshotBuild {
+    build_id: string;
+    slug: string;
+    snapshot_name: string;
+    content_hash: string;
+    status: ProjectSnapshotStatus;
+    error: string | null;
+    error_category: SnapshotErrorCategory | null;
+    source: 'session-start' | 'project-create' | 'cr-merge' | 'manual' | 'background' | 'startup' | null;
+    started_at: string;
+    finished_at: string | null;
+}
+export interface ProjectSnapshotsResponse {
+    templates: SandboxTemplate[];
+    templates_error: string | null;
+    builds: ProjectSnapshotBuild[];
+    /** Whether the warm pool feature is enabled platform-wide (gates the per-row control). */
+    warm_pool_available?: boolean;
+}
+export interface ProjectSandboxHealth {
+    primary_slug: string | null;
+    primary_template: SandboxTemplate | null;
+    ready: boolean;
+    building: boolean;
+    latest_build: ProjectSnapshotBuild | null;
+    latest_failure: ProjectSnapshotBuild | null;
+}
+export interface RebuildSnapshotResponse {
+    status: 'started';
+    slug: string;
+    deleted_existing: boolean;
+    snapshot_name: string;
+}
+/**
+ * List a project's sandbox **templates** (Dockerfile/image/warm-pool config) —
+ * NOT the legacy one-project-one-sandbox instances. The endpoint path keeps the
+ * historical `/sandboxes` name; the function is named for what it returns.
+ */
+export declare function listProjectSandboxTemplates(projectId: string): Promise<SandboxTemplatesResponse>;
+export declare function listProjectSnapshots(projectId: string): Promise<ProjectSnapshotsResponse>;
+export declare function getProjectSandboxHealth(projectId: string): Promise<ProjectSandboxHealth>;
+export declare function rebuildProjectSnapshot(projectId: string, slug?: string): Promise<RebuildSnapshotResponse>;
+export declare function fixSandboxWithAgent(projectId: string): Promise<{
+    session_id: string;
+}>;
+export interface CreateSandboxTemplateInput {
+    slug: string;
+    name?: string;
+    image?: string;
+    dockerfile_path?: string;
+    entrypoint?: string;
+    cpu?: number;
+    memory_gb?: number;
+    disk_gb?: number;
+}
+export interface UpdateSandboxTemplateInput {
+    name?: string;
+    image?: string | null;
+    dockerfile_path?: string | null;
+    entrypoint?: string | null;
+    cpu?: number | null;
+    memory_gb?: number | null;
+    disk_gb?: number | null;
+}
+export declare function createSandboxTemplate(projectId: string, input: CreateSandboxTemplateInput): Promise<{
+    template_id: string;
+    slug: string;
+}>;
+export declare function updateSandboxTemplate(projectId: string, templateId: string, input: UpdateSandboxTemplateInput): Promise<{
+    template_id: string;
+    slug: string;
+}>;
+export declare function deleteSandboxTemplate(projectId: string, templateId: string): Promise<null>;
+export declare function buildSandboxTemplate(projectId: string, templateId: string): Promise<{
+    status: "started";
+    template_id: string;
+    slug: string;
+}>;
+export declare function listProjectSandboxes(projectId: string): Promise<SandboxTemplatesResponse>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/platform/projects-client/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/sandbox.ts"],"names":[],"mappings":"AAOA,kDAAkD;AAClD,MAAM,MAAM,qBAAqB,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEpE,iDAAiD;AACjD,MAAM,MAAM,qBAAqB,GAC7B,YAAY,GACZ,QAAQ,GACR,UAAU,GACV,SAAS,GACT,SAAS,GACT,KAAK,GACL,SAAS,CAAC;AAEd,8FAA8F;AAC9F,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf;sDACkD;IAClD,SAAS,CAAC,EAAE;QACV,OAAO,EAAE,OAAO,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,qDAAqD;QACrD,KAAK,EAAE,MAAM,CAAC;QACd,gDAAgD;QAChD,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,IAAI,CAAC;CACV;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,qBAAqB,CAAC;IAC9B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,cAAc,EAAE,qBAAqB,GAAG,IAAI,CAAC;IAC7C,MAAM,EAAE,eAAe,GAAG,gBAAgB,GAAG,UAAU,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,GAAG,IAAI,CAAC;IACrG,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC/B,0FAA0F;IAC1F,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,gBAAgB,EAAE,eAAe,GAAG,IAAI,CAAC;IACzC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,YAAY,EAAE,oBAAoB,GAAG,IAAI,CAAC;IAC1C,cAAc,EAAE,oBAAoB,GAAG,IAAI,CAAC;CAC7C;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,OAAO,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAAC,SAAS,EAAE,MAAM,qCAMlE;AAED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,qCAM3D;AAED,wBAAsB,uBAAuB,CAAC,SAAS,EAAE,MAAM,iCAa9D;AAED,wBAAsB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,oCAO5E;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM;gBAEnB,MAAM;GAK7C;AAID,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,0BAA0B;iBAGM,MAAM;UAAQ,MAAM;GAK5D;AAED,wBAAsB,qBAAqB,CACzC,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,0BAA0B;iBAGO,MAAM;UAAQ,MAAM;GAK7D;AAED,wBAAsB,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,iBAMhF;AAED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;YAE5C,SAAS;iBAAe,MAAM;UAAQ,MAAM;GAK/E;AAED,wBAAsB,oBAAoB,CAAC,SAAS,EAAE,MAAM,qCAI3D"}

package/dist/platform/projects-client/sandbox.js

@@ -0,0 +1,45 @@
+// Sandbox templates + snapshot build log — template CRUD, snapshots, health.
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+/**
+ * List a project's sandbox **templates** (Dockerfile/image/warm-pool config) —
+ * NOT the legacy one-project-one-sandbox instances. The endpoint path keeps the
+ * historical `/sandboxes` name; the function is named for what it returns.
+ */
+export async function listProjectSandboxTemplates(projectId) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/sandboxes`));
+}
+export async function listProjectSnapshots(projectId) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/snapshots`));
+}
+export async function getProjectSandboxHealth(projectId) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/sandbox-health`, {
+        // Background poll used by alerts/settings. React Query owns retry/error
+        // state; the global error handler would otherwise spam console.error
+        // during transient dev boot or provider stalls.
+        showErrors: false,
+        timeout: 15_000,
+    }));
+}
+export async function rebuildProjectSnapshot(projectId, slug) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/snapshots/rebuild`, slug ? { slug } : {}));
+}
+export async function fixSandboxWithAgent(projectId) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/snapshots/fix-with-agent`, {}));
+}
+export async function createSandboxTemplate(projectId, input) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/sandbox-templates`, input));
+}
+export async function updateSandboxTemplate(projectId, templateId, input) {
+    return unwrap(await backendApi.patch(`/projects/${projectId}/sandbox-templates/${templateId}`, input));
+}
+export async function deleteSandboxTemplate(projectId, templateId) {
+    return unwrap(await backendApi.delete(`/projects/${projectId}/sandbox-templates/${templateId}`));
+}
+export async function buildSandboxTemplate(projectId, templateId) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/sandbox-templates/${templateId}/build`, {}));
+}
+export async function listProjectSandboxes(projectId) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/sandboxes`));
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/platform/projects-client/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../src/platform/projects-client/sandbox.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AA+FlC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAiB;IACjE,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,YAAY,CACnC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,YAAY,CACnC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,SAAiB;IAC7D,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,iBAAiB,EACvC;QACE,wEAAwE;QACxE,qEAAqE;QACrE,gDAAgD;QAChD,UAAU,EAAE,KAAK;QACjB,OAAO,EAAE,MAAM;KAChB,CACF,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,IAAa;IAC3E,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,oBAAoB,EAC1C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CACrB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB;IACzD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,2BAA2B,EACjD,EAAE,CACH,CACF,CAAC;AACJ,CAAC;AAyBD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,KAAiC;IAEjC,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,oBAAoB,EAC1C,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAiB,EACjB,UAAkB,EAClB,KAAiC;IAEjC,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,KAAK,CACpB,aAAa,SAAS,sBAAsB,UAAU,EAAE,EACxD,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,SAAiB,EAAE,UAAkB;IAC/E,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,MAAM,CACrB,aAAa,SAAS,sBAAsB,UAAU,EAAE,CACzD,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB,EAAE,UAAkB;IAC9E,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,sBAAsB,UAAU,QAAQ,EAC9D,EAAE,CACH,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,SAAiB;IAC1D,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAA2B,aAAa,SAAS,YAAY,CAAC,CACnF,CAAC;AACJ,CAAC"}

package/dist/platform/projects-client/secrets.d.ts

@@ -0,0 +1,122 @@
+import { type ConnectorSharing, type ProjectGitConnection } from './shared.js';
+/**
+ * One project secret: `{ identifier, name (the env var KEY), value }`.
+ * `identifier` is unique per project — the handle an agent's `secrets` grant
+ * references and the UI shows. `name` (the KEY) is NOT unique — multiple
+ * identifiers may share one (e.g. GMAPS-primary / GMAPS-backup, both
+ * GOOGLE_MAPS_API_KEY). Authorization is centralized on the agent grant (by
+ * identifier); every project member with read access sees every secret — there
+ * is no per-secret member/group sharing and no resource-side agent allow-list.
+ */
+export interface ProjectSecret {
+    /** Unique per project. The handle an agent's `secrets` grant references. */
+    identifier: string;
+    /** The env var KEY injected into the sandbox. Not unique. */
+    name: string;
+    project_id: string;
+    /** Shared row id; null when only a personal override (or nothing) exists. */
+    secret_id: string | null;
+    created_by: string | null;
+    created_at: string | null;
+    updated_at: string | null;
+    system?: boolean;
+    readonly?: boolean;
+    purpose?: string | null;
+    can_rotate?: boolean;
+    managed_by?: string | null;
+    /** A shared/project value is set. */
+    configured: boolean;
+    /** My own private override (value never returned), and whether it's active.
+     *  Used today only by the CODEX_AUTH_JSON per-user provider login. */
+    mine: {
+        active: boolean;
+        updated_at: string;
+    } | null;
+    /** What actually runs in my sessions for this identifier. */
+    effective_source: 'mine' | 'shared' | 'none';
+    /** I'm allowed to edit the shared row (project manager). */
+    can_manage_shared: boolean;
+}
+export interface ProjectSecretsResponse {
+    items: ProjectSecret[];
+    /** Whether the requesting member can edit shared rows (vs only their own overrides). */
+    can_manage?: boolean;
+    /** Env keys declared as required in the project's kortix.toml manifest. */
+    required: string[];
+    /** Env keys declared as optional in the project's kortix.toml manifest. */
+    optional: string[];
+    /**
+     * 'loaded'  → kortix.toml read successfully (env lists are authoritative).
+     * 'missing' → manifest file not present in the repo.
+     * 'error'   → couldn't fetch/parse the repo (private repo, network, etc.).
+     */
+    manifest_status?: 'loaded' | 'missing' | 'error';
+    /** Path the API tried (defaults to "kortix.toml" but configurable per project). */
+    manifest_path?: string;
+    /** Error string when manifest_status === 'error'. */
+    manifest_error?: string;
+}
+export declare function listProjectSecrets(projectId: string): Promise<ProjectSecretsResponse>;
+export declare function upsertProjectSecret(projectId: string, input: {
+    name: string;
+    /** Unique per project. Defaults to `name` when omitted (the simple case —
+     *  one identifier per key). Set explicitly to create a SECOND secret under
+     *  the same key (e.g. "GMAPS-backup" also GOOGLE_MAPS_API_KEY). */
+    identifier?: string;
+    /** Omit to leave an existing secret's value untouched (e.g. a no-op touch). */
+    value?: string;
+}): Promise<ProjectSecret>;
+export interface ProviderOAuthStart {
+    flow_id: string;
+    verification_url: string;
+    user_code: string | null;
+    /** Epoch ms when the device code expires. */
+    expires_at: number;
+    /** Suggested poll cadence. */
+    interval_ms: number;
+}
+export interface ProviderOAuthCredential {
+    provider_id: string;
+    expires_in_ms: number | null;
+    updated_at: string;
+}
+export type ProviderOAuthPoll = {
+    status: 'pending';
+    next_poll_ms?: number;
+} | {
+    status: 'success';
+    credential: ProviderOAuthCredential;
+} | {
+    status: 'expired';
+} | {
+    status: 'failed';
+    error: string;
+};
+export declare function startProjectProviderOAuth(projectId: string, provider: string, input?: {
+    sharing?: ConnectorSharing;
+}): Promise<ProviderOAuthStart>;
+export declare function pollProjectProviderOAuth(projectId: string, provider: string, flowId: string): Promise<ProviderOAuthPoll>;
+export declare function upsertProjectGitCredential(projectId: string, input: {
+    token: string;
+}): Promise<{
+    configured: boolean;
+    provider: string;
+    git_connection: ProjectGitConnection;
+}>;
+export declare function deleteProjectSecret(projectId: string, identifier: string): Promise<{
+    ok: boolean;
+}>;
+/**
+ * Set/update the caller's OWN per-key override ("use mine") and/or flip whether
+ * it's active. Any project member may call this; it never touches the shared
+ * value or anyone else's override.
+ */
+export declare function setPersonalProjectSecret(projectId: string, name: string, input: {
+    value?: string;
+    active?: boolean;
+}): Promise<ProjectSecret>;
+/** Remove the caller's own override for a key (falls back to the shared value). */
+export declare function deletePersonalProjectSecret(projectId: string, name: string): Promise<{
+    ok: boolean;
+}>;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/platform/projects-client/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/secrets.ts"],"names":[],"mappings":"AAGA,OAAO,EAAU,KAAK,gBAAgB,EAAE,KAAK,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAEpF;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,6EAA6E;IAC7E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qCAAqC;IACrC,UAAU,EAAE,OAAO,CAAC;IACpB;0EACsE;IACtE,IAAI,EAAE;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACrD,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC7C,4DAA4D;IAC5D,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,wFAAwF;IACxF,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;;OAIG;IACH,eAAe,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;IACjD,mFAAmF;IACnF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,mCAMzD;AAED,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IACL,IAAI,EAAE,MAAM,CAAC;IACb;;uEAEmE;IACnE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,0BAKF;AAOD,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6CAA6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,uBAAuB,CAAA;CAAE,GAC1D;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAExC,wBAAsB,yBAAyB,CAC7C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,gBAAgB,CAAA;CAAE,GACrC,OAAO,CAAC,kBAAkB,CAAC,CAO7B;AAED,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,iBAAiB,CAAC,CAO5B;AAED,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE;gBAIR,OAAO;cACT,MAAM;oBACA,oBAAoB;GAGzC;AAED,wBAAsB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM;QAE7C,OAAO;GAIxC;AAED;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,0BAQ5C;AAED,mFAAmF;AACnF,wBAAsB,2BAA2B,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM;QAE/C,OAAO;GAIxC"}

package/dist/platform/projects-client/secrets.js

@@ -0,0 +1,34 @@
+// Secrets — project/shared + personal secret overrides, provider OAuth, git creds.
+import { backendApi } from '../api-client.js';
+import { unwrap } from './shared.js';
+export async function listProjectSecrets(projectId) {
+    return unwrap(await backendApi.get(`/projects/${projectId}/secrets`));
+}
+export async function upsertProjectSecret(projectId, input) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/secrets`, input));
+}
+export async function startProjectProviderOAuth(projectId, provider, input) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/oauth/${provider}/start`, { sharing: input?.sharing }));
+}
+export async function pollProjectProviderOAuth(projectId, provider, flowId) {
+    return unwrap(await backendApi.post(`/projects/${projectId}/oauth/${provider}/poll`, { flow_id: flowId }));
+}
+export async function upsertProjectGitCredential(projectId, input) {
+    return unwrap(await backendApi.put(`/projects/${projectId}/git-credential`, input));
+}
+export async function deleteProjectSecret(projectId, identifier) {
+    return unwrap(await backendApi.delete(`/projects/${projectId}/secrets/${encodeURIComponent(identifier)}`));
+}
+/**
+ * Set/update the caller's OWN per-key override ("use mine") and/or flip whether
+ * it's active. Any project member may call this; it never touches the shared
+ * value or anyone else's override.
+ */
+export async function setPersonalProjectSecret(projectId, name, input) {
+    return unwrap(await backendApi.put(`/projects/${projectId}/secrets/${encodeURIComponent(name)}/personal`, input));
+}
+/** Remove the caller's own override for a key (falls back to the shared value). */
+export async function deletePersonalProjectSecret(projectId, name) {
+    return unwrap(await backendApi.delete(`/projects/${projectId}/secrets/${encodeURIComponent(name)}/personal`));
+}
+//# sourceMappingURL=secrets.js.map

package/dist/platform/projects-client/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../../src/platform/projects-client/secrets.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAoD,MAAM,UAAU,CAAC;AA0DpF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAAiB;IACxD,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,UAAU,CACjC,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,KAQC;IAED,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CAAgB,aAAa,SAAS,UAAU,EAAE,KAAK,CAAC,CAC9E,CAAC;AACJ,CAAC;AA6BD,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,SAAiB,EACjB,QAAgB,EAChB,KAAsC;IAEtC,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,UAAU,QAAQ,QAAQ,EAChD,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAC5B,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,QAAgB,EAChB,MAAc;IAEd,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,IAAI,CACnB,aAAa,SAAS,UAAU,QAAQ,OAAO,EAC/C,EAAE,OAAO,EAAE,MAAM,EAAE,CACpB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAiB,EACjB,KAAwB;IAExB,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAIjB,aAAa,SAAS,iBAAiB,EAAE,KAAK,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,SAAiB,EAAE,UAAkB;IAC7E,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,MAAM,CACrB,aAAa,SAAS,YAAY,kBAAkB,CAAC,UAAU,CAAC,EAAE,CACnE,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,SAAiB,EACjB,IAAY,EACZ,KAA2C;IAE3C,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,GAAG,CAClB,aAAa,SAAS,YAAY,kBAAkB,CAAC,IAAI,CAAC,WAAW,EACrE,KAAK,CACN,CACF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,SAAiB,EAAE,IAAY;IAC/E,OAAO,MAAM,CACX,MAAM,UAAU,CAAC,MAAM,CACrB,aAAa,SAAS,YAAY,kBAAkB,CAAC,IAAI,CAAC,WAAW,CACtE,CACF,CAAC;AACJ,CAAC"}

package/dist/platform/projects-client/session-sandbox.d.ts

@@ -0,0 +1,61 @@
+export type ProjectSessionSandboxStatus = 'provisioning' | 'active' | 'stopped' | 'error' | 'archived';
+export interface ProjectSessionSandbox {
+    sandbox_id: string;
+    session_id: string;
+    project_id: string;
+    account_id: string;
+    provider: 'managed' | 'daytona' | 'platinum' | 'local_docker' | 'justavps';
+    external_id: string | null;
+    base_url: string | null;
+    status: ProjectSessionSandboxStatus;
+    config: Record<string, unknown>;
+    metadata: Record<string, unknown>;
+    last_used_at: string | null;
+    created_at: string;
+    updated_at: string;
+}
+export type SessionStartStage = 'provisioning' | 'starting' | 'ready' | 'stopped' | 'failed';
+export interface SessionStartResult {
+    /** Coarse lifecycle stage to render + poll on. */
+    stage: SessionStartStage;
+    /** Immutable project-session agent bound at session creation. */
+    agent_name: string;
+    /** Whether polling /start again can make progress (false = terminal). */
+    retriable: boolean;
+    sandbox: ProjectSessionSandbox | null;
+    opencode_session_id: string | null;
+    /**
+     * Relative proxy path for this session's OpenCode runtime (port 8000), composed
+     * against the configured backendUrl. The server owns the proxy scheme; the SDK
+     * consumes this opaquely (never builds `/p/<id>/<port>` itself). Absent until the
+     * box has an external_id — `useSession` falls back to deriving it from
+     * `sandbox.external_id` when missing.
+     */
+    runtime_url?: string | null;
+    reason?: string;
+}
+export declare class SessionStartError extends Error {
+    status?: number;
+    code?: string;
+    terminal: boolean;
+    constructor(message: string, options: {
+        status?: number;
+        code?: string;
+        terminal: boolean;
+    });
+}
+export declare function isSessionStartError(error: unknown): error is SessionStartError;
+/**
+ * THE session-open call. Idempotently provisions/resumes the sandbox and resolves
+ * the OpenCode pin server-side, returning ONE readiness payload to poll until
+ * stage='ready'.
+ */
+export declare function startProjectSession(projectId: string, sessionId: string, waitMs?: number): Promise<SessionStartResult | null>;
+/**
+ * Stable React Query key for the session-open (`/start`) poll. Shared by the
+ * session page's useQuery AND every create→navigate site that prefetches it, so
+ * the keys can never drift — a mismatch would issue a SECOND `/start` POST
+ * instead of adopting the in-flight one.
+ */
+export declare function sessionStartKey(projectId: string, sessionId: string): readonly ["session-start", string, string];
+//# sourceMappingURL=session-sandbox.d.ts.map

package/dist/platform/projects-client/session-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-sandbox.d.ts","sourceRoot":"","sources":["../../../src/platform/projects-client/session-sandbox.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,2BAA2B,GACnC,cAAc,GACd,QAAQ,GACR,SAAS,GACT,OAAO,GACP,UAAU,CAAC;AAEf,MAAM,WAAW,qBAAqB;IACpC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,cAAc,GAAG,UAAU,CAAC;IAC3E,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,2BAA2B,CAAC;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,iBAAiB,GAAG,cAAc,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE7F,MAAM,WAAW,kBAAkB;IACjC,kDAAkD;IAClD,KAAK,EAAE,iBAAiB,CAAC;IACzB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACtC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;gBAEN,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE;CAO5F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,iBAAiB,CAE9E;AAiBD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EAIjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAkCpC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,8CAEnE"}

package/dist/platform/projects-client/session-sandbox.js

@@ -0,0 +1,82 @@
+// Session sandbox — runtime sandbox row + the session-open (/start) flow.
+import { backendApi } from '../api-client.js';
+import { isSessionFresh } from '../fresh-sessions.js';
+import { setSessionRuntime } from '../../state/session-runtime-registry.js';
+import { getSandboxUrlForExternalId } from '../../state/server-store/url-helpers.js';
+export class SessionStartError extends Error {
+    status;
+    code;
+    terminal;
+    constructor(message, options) {
+        super(message);
+        this.name = 'SessionStartError';
+        this.status = options.status;
+        this.code = options.code;
+        this.terminal = options.terminal;
+    }
+}
+export function isSessionStartError(error) {
+    return error instanceof Error && error.name === 'SessionStartError';
+}
+function classifySessionStartFailure(error) {
+    const apiError = error;
+    const status = apiError?.status;
+    const code = apiError?.code ?? apiError?.details?.code ?? apiError?.details?.error;
+    const message = apiError?.message || 'Unable to start this session';
+    if (status && status >= 400 && status < 500 && status !== 408 && status !== 429) {
+        return new SessionStartError(message, { status, code, terminal: true });
+    }
+    return null;
+}
+/**
+ * THE session-open call. Idempotently provisions/resumes the sandbox and resolves
+ * the OpenCode pin server-side, returning ONE readiness payload to poll until
+ * stage='ready'.
+ */
+export async function startProjectSession(projectId, sessionId, 
+// Optional server-side long-poll budget (ms): the server holds the request
+// until readiness flips (or its bounded deadline), so we learn `ready` the
+// instant it happens instead of on a fixed poll tick. Omit = one-shot.
+waitMs) {
+    const qs = waitMs && waitMs > 0 ? `?wait_ms=${Math.floor(waitMs)}` : '';
+    const response = await backendApi.post(`/projects/${projectId}/sessions/${sessionId}/start${qs}`, {}, 
+    // Keep toasts quiet here. Terminal client errors are rendered by the host;
+    // transient transport/server failures still yield null so polling can recover.
+    { showErrors: false });
+    if (!response.success || !response.data) {
+        const terminal = classifySessionStartFailure(response.error);
+        // A 404 for a session minted in THIS tab is the optimistic create-vs-start
+        // race: `useNewProjectSession` fires this /start before its background
+        // create POST has landed, so the row doesn't exist yet. Yield null so the
+        // poll keeps going; a 404 for any other session stays terminal.
+        if (terminal && !(terminal.status === 404 && isSessionFresh(sessionId)))
+            throw terminal;
+        return null;
+    }
+    const result = response.data;
+    // Populate the shared session-runtime registry the instant a session goes
+    // ready, regardless of WHICH caller drove this /start (the facade's
+    // `ensureReady()` or the React `useSession` hook — both call this one
+    // function). Every other handle for the same session id — a fresh
+    // `kortix.session(pid, sid)` created for a one-off poll, e.g. — can then
+    // adopt this entry instead of throwing SessionNotReadyError or re-POSTing.
+    const externalId = result.sandbox?.external_id;
+    if (result.stage === 'ready' && externalId && result.opencode_session_id) {
+        setSessionRuntime(projectId, sessionId, {
+            opencodeSessionId: result.opencode_session_id,
+            runtimeUrl: getSandboxUrlForExternalId(externalId),
+            sandboxId: externalId,
+        });
+    }
+    return result;
+}
+/**
+ * Stable React Query key for the session-open (`/start`) poll. Shared by the
+ * session page's useQuery AND every create→navigate site that prefetches it, so
+ * the keys can never drift — a mismatch would issue a SECOND `/start` POST
+ * instead of adopting the in-flight one.
+ */
+export function sessionStartKey(projectId, sessionId) {
+    return ['session-start', projectId, sessionId];
+}
+//# sourceMappingURL=session-sandbox.js.map

package/dist/platform/projects-client/session-sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-sandbox.js","sourceRoot":"","sources":["../../../src/platform/projects-client/session-sandbox.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAE1E,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,sCAAsC,CAAC;AAqDlF,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,MAAM,CAAU;IAChB,IAAI,CAAU;IACd,QAAQ,CAAU;IAElB,YAAY,OAAe,EAAE,OAA8D;QACzF,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACnC,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC;AACtE,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,MAAM,QAAQ,GAAG,KAEJ,CAAC;IACd,MAAM,MAAM,GAAG,QAAQ,EAAE,MAAM,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ,EAAE,IAAI,IAAI,QAAQ,EAAE,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC;IACnF,MAAM,OAAO,GAAG,QAAQ,EAAE,OAAO,IAAI,8BAA8B,CAAC;IAEpE,IAAI,MAAM,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAChF,OAAO,IAAI,iBAAiB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,SAAiB,EACjB,SAAiB;AACjB,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,MAAe;IAEf,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CACpC,aAAa,SAAS,aAAa,SAAS,SAAS,EAAE,EAAE,EACzD,EAAE;IACF,2EAA2E;IAC3E,+EAA+E;IAC/E,EAAE,UAAU,EAAE,KAAK,EAAE,CACtB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7D,2EAA2E;QAC3E,uEAAuE;QACvE,0EAA0E;QAC1E,gEAAgE;QAChE,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,cAAc,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,QAAQ,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC7B,0EAA0E;IAC1E,oEAAoE;IACpE,sEAAsE;IACtE,kEAAkE;IAClE,yEAAyE;IACzE,2EAA2E;IAC3E,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC;IAC/C,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,IAAI,UAAU,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACzE,iBAAiB,CAAC,SAAS,EAAE,SAAS,EAAE;YACtC,iBAAiB,EAAE,MAAM,CAAC,mBAAmB;YAC7C,UAAU,EAAE,0BAA0B,CAAC,UAAU,CAAC;YAClD,SAAS,EAAE,UAAU;SACtB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB,EAAE,SAAiB;IAClE,OAAO,CAAC,eAAe,EAAE,SAAS,EAAE,SAAS,CAAU,CAAC;AAC1D,CAAC"}