@larkup/sandbox 0.1.3 → 0.1.5

package/.turbo/turbo-build.log

@@ -1,4 +1,4 @@
 
-> @larkup/sandbox@0.1.3 build /home/runner/work/larkup/larkup/packages/sandbox
+> @larkup/sandbox@0.1.5 build /Users/abdelrahmanabounida/Desktop/my-ai-startup/larkup/larkup/packages/sandbox
 > tsc -p tsconfig.build.json --outDir dist
 

package/.turbo/turbo-test.log

@@ -0,0 +1,18 @@
+
+> @larkup/sandbox@0.1.5 test /Users/abdelrahmanabounida/Desktop/my-ai-startup/larkup/larkup/packages/sandbox
+> vitest run
+
+
+ RUN  v4.1.11 /Users/abdelrahmanabounida/Desktop/my-ai-startup/larkup/larkup/packages/sandbox
+
+ ✓ src/remote-exec.test.ts (14 tests) 116ms
+ ✓ src/providers/flyio.test.ts (6 tests) 9ms
+ ✓ src/providers/modal.test.ts (4 tests) 10ms
+ ✓ src/providers/daytona.test.ts (5 tests) 4ms
+ ✓ src/providers/vercel.test.ts (6 tests) 36ms
+ ✓ src/providers/e2b.test.ts (9 tests) 45ms
+ ✓ src/providers/northflank.test.ts (7 tests) 39ms
+ ✓ src/local-runner.test.ts (2 tests) 505ms
+     ✓ runs JavaScript without Docker and returns output artifacts  359ms
+ ✓ src/providers/cloudflare.test.ts (6 tests) 14ms
+ ELIFECYCLE  Test failed. See above for more details.

package/.turbo/turbo-type-check.log

@@ -0,0 +1,4 @@
+
+> @larkup/sandbox@0.1.5 type-check /Users/abdelrahmanabounida/Desktop/my-ai-startup/larkup/larkup/packages/sandbox
+> tsc --noEmit
+

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @larkup/sandbox
 
+## 0.1.5
+
+### Patch Changes
+
+- 848cc4c: Route spreadsheet questions through structured table queries before optional code analysis, validate local Python analysis dependencies before exposing code tools, and index every non-empty Excel worksheet as a separate dataset.
+
+## 0.1.4
+
+### Patch Changes
+
+- 847b502: Keep global installs and updates quiet and compatible by aligning Apache Arrow with LanceDB's
+  supported peer range, shipping the marketplace TypeScript runtime loader, and using the renamed
+  Daytona SDK package. Public tarballs also scrub local project state from all traced workspaces.
+
 ## 0.1.3
 
 ### Patch Changes

package/dist/local-runner.js

@@ -5,6 +5,10 @@ import path from 'node:path';
 import { spawn } from 'node:child_process';
 import { getMimeType } from './mime.js';
 let pythonCommand;
+// Keep this list in sync with the capabilities advertised by executeAnalysis
+// and analyzeCorpusWithCode. A bare Python installation is not an analysis
+// runtime, so it must not make those tools appear available.
+const ANALYSIS_PYTHON_MODULES = ['numpy', 'pandas', 'matplotlib', 'scipy', 'sklearn', 'seaborn'];
 function run(command, args, cwd, timeoutMs = 10_000) {
     return new Promise((resolve, reject) => {
         const child = spawn(command.executable, [...command.args, ...args], {
@@ -38,7 +42,7 @@ function run(command, args, cwd, timeoutMs = 10_000) {
             resolve({
                 stdout,
                 stderr: timedOut ? `${stderr}\nExecution timed out.`.trim() : stderr,
-                exitCode: timedOut ? 124 : code ?? 1,
+                exitCode: timedOut ? 124 : (code ?? 1),
             });
         });
     });
@@ -115,6 +119,28 @@ export async function checkLocalRuntime() {
             error: 'Local code execution needs Python 3. Install Python or choose Docker or a remote sandbox provider.',
         };
     }
+    try {
+        const dependencyCheck = await run(python, [
+            '-c',
+            `import importlib.util\nmodules = ${JSON.stringify(ANALYSIS_PYTHON_MODULES)}\nmissing = [name for name in modules if importlib.util.find_spec(name) is None]\nprint(','.join(missing))\nraise SystemExit(bool(missing))`,
+        ]);
+        if (dependencyCheck.exitCode !== 0) {
+            const missing = dependencyCheck.stdout.trim() || 'required analysis packages';
+            return {
+                status: 'error',
+                backend: 'local',
+                error: `Local Python is missing ${missing}. Install the Larkup analysis dependencies ` +
+                    `(for example: pip install ${ANALYSIS_PYTHON_MODULES.join(' ')}) or choose Docker or a remote sandbox provider.`,
+            };
+        }
+    }
+    catch {
+        return {
+            status: 'error',
+            backend: 'local',
+            error: 'Larkup could not verify the Python analysis dependencies. Choose Docker or a remote sandbox provider.',
+        };
+    }
     return { status: 'ready', backend: 'local' };
 }
 /** Executes trusted code in a temporary host workspace and collects its output. */

package/dist/providers/daytona.js

@@ -10,7 +10,7 @@
  */
 import { DEFAULT_TIMEOUT_MS, failedResult, runScriptedExecution, safeCleanup, withTimeout, } from '../remote-exec.js';
 async function loadSdk() {
-    return (await import('@daytonaio/sdk'));
+    return (await import('@daytona/sdk'));
 }
 function requireFields(credentials) {
     const apiKey = credentials.apiKey?.trim();

package/dist/registry.js

@@ -114,7 +114,7 @@ export const SANDBOX_PROVIDERS = {
         id: 'daytona',
         label: 'Daytona',
         description: 'Elastic infrastructure for running AI-generated code in fast, isolated sandboxes.',
-        sdkPackage: '@daytonaio/sdk',
+        sdkPackage: '@daytona/sdk',
         docsUrl: 'https://www.daytona.io/docs/en/sandboxes/',
         icon: '/icons/daytonaio.png',
         executionSupport: 'full',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@larkup/sandbox",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "publishConfig": {
     "access": "public"
   },
@@ -40,8 +40,8 @@
   "optionalDependencies": {
     "e2b": "^2.39.0",
     "@vercel/sandbox": "^3.0.0",
-    "modal": "^0.9.0",
-    "@daytonaio/sdk": "^0.204.1",
+    "modal": "^0.10.0",
+    "@daytona/sdk": "^0.207.0",
     "@browserbasehq/sdk": "^2.17.0",
     "playwright-core": "^1.62.1",
     "@fly/sprites": "^0.2.0",

package/src/local-runner.test.ts

@@ -1,5 +1,5 @@
 import { describe, expect, it } from 'vitest';
-import { executeLocally } from './local-runner.js';
+import { checkLocalRuntime, executeLocally } from './local-runner.js';
 
 describe('executeLocally', () => {
   it('runs JavaScript without Docker and returns output artifacts', async () => {
@@ -19,4 +19,14 @@ describe('executeLocally', () => {
       expect.objectContaining({ name: 'result.txt', mimeType: 'text/plain' }),
     ]);
   });
+
+  it('does not mark a bare Python installation as analysis-ready', async () => {
+    const health = await checkLocalRuntime();
+    expect(health.backend).toBe('local');
+    if (health.status === 'ready') {
+      expect(health.error).toBeUndefined();
+    } else {
+      expect(health.error).toMatch(/Python|analysis dependenc/i);
+    }
+  });
 });

package/src/local-runner.ts

@@ -16,6 +16,11 @@ type Command = { executable: string; args: string[] };
 
 let pythonCommand: Command | null | undefined;
 
+// Keep this list in sync with the capabilities advertised by executeAnalysis
+// and analyzeCorpusWithCode. A bare Python installation is not an analysis
+// runtime, so it must not make those tools appear available.
+const ANALYSIS_PYTHON_MODULES = ['numpy', 'pandas', 'matplotlib', 'scipy', 'sklearn', 'seaborn'];
+
 function run(command: Command, args: string[], cwd?: string, timeoutMs = 10_000) {
   return new Promise<{ stdout: string; stderr: string; exitCode: number }>((resolve, reject) => {
     const child = spawn(command.executable, [...command.args, ...args], {
@@ -49,7 +54,7 @@ function run(command: Command, args: string[], cwd?: string, timeoutMs = 10_000)
       resolve({
         stdout,
         stderr: timedOut ? `${stderr}\nExecution timed out.`.trim() : stderr,
-        exitCode: timedOut ? 124 : code ?? 1,
+        exitCode: timedOut ? 124 : (code ?? 1),
       });
     });
   });
@@ -60,14 +65,14 @@ async function resolvePython(): Promise<Command | null> {
   const candidates: Command[] = process.env.LARKUP_PYTHON
     ? [{ executable: process.env.LARKUP_PYTHON, args: [] }]
     : process.platform === 'win32'
-    ? [
-        { executable: 'py', args: ['-3'] },
-        { executable: 'python', args: [] },
-      ]
-    : [
-        { executable: 'python3', args: [] },
-        { executable: 'python', args: [] },
-      ];
+      ? [
+          { executable: 'py', args: ['-3'] },
+          { executable: 'python', args: [] },
+        ]
+      : [
+          { executable: 'python3', args: [] },
+          { executable: 'python', args: [] },
+        ];
 
   for (const candidate of candidates) {
     try {
@@ -134,6 +139,32 @@ export async function checkLocalRuntime(): Promise<SandboxHealthCheck> {
         'Local code execution needs Python 3. Install Python or choose Docker or a remote sandbox provider.',
     };
   }
+
+  try {
+    const dependencyCheck = await run(python, [
+      '-c',
+      `import importlib.util\nmodules = ${JSON.stringify(
+        ANALYSIS_PYTHON_MODULES,
+      )}\nmissing = [name for name in modules if importlib.util.find_spec(name) is None]\nprint(','.join(missing))\nraise SystemExit(bool(missing))`,
+    ]);
+    if (dependencyCheck.exitCode !== 0) {
+      const missing = dependencyCheck.stdout.trim() || 'required analysis packages';
+      return {
+        status: 'error',
+        backend: 'local',
+        error:
+          `Local Python is missing ${missing}. Install the Larkup analysis dependencies ` +
+          `(for example: pip install ${ANALYSIS_PYTHON_MODULES.join(' ')}) or choose Docker or a remote sandbox provider.`,
+      };
+    }
+  } catch {
+    return {
+      status: 'error',
+      backend: 'local',
+      error:
+        'Larkup could not verify the Python analysis dependencies. Choose Docker or a remote sandbox provider.',
+    };
+  }
   return { status: 'ready', backend: 'local' };
 }
 

package/src/providers/daytona.test.ts

@@ -5,7 +5,7 @@ const deleteMock = vi.fn();
 const createMock = vi.fn();
 const listMock = vi.fn();
 
-vi.mock('@daytonaio/sdk', () => ({
+vi.mock('@daytona/sdk', () => ({
   Daytona: vi.fn().mockImplementation(function () {
     return { create: createMock, list: listMock };
   }),
@@ -18,12 +18,17 @@ beforeEach(() => {
   deleteMock.mockReset();
   createMock.mockReset();
   listMock.mockReset();
-  createMock.mockResolvedValue({ process: { executeCommand: executeCommandMock }, delete: deleteMock });
+  createMock.mockResolvedValue({
+    process: { executeCommand: executeCommandMock },
+    delete: deleteMock,
+  });
 });
 
 describe('daytonaAdapter.verifyCredentials', () => {
   it('requires an API key', async () => {
-    await expect(daytonaAdapter.verifyCredentials({})).rejects.toThrow('Daytona API key is required.');
+    await expect(daytonaAdapter.verifyCredentials({})).rejects.toThrow(
+      'Daytona API key is required.',
+    );
   });
 
   it('uses list() as the cheap credential check', async () => {
@@ -38,7 +43,10 @@ describe('daytonaAdapter.verifyCredentials', () => {
 describe('daytonaAdapter.execute — merged stdout/stderr', () => {
   it('puts successful output in stdout only', async () => {
     executeCommandMock.mockResolvedValue({ exitCode: 0, result: 'all good\n' });
-    const result = await daytonaAdapter.execute({ code: 'print(1)', language: 'python' }, { apiKey: 'k' });
+    const result = await daytonaAdapter.execute(
+      { code: 'print(1)', language: 'python' },
+      { apiKey: 'k' },
+    );
     expect(result.stdout).toBe('all good\n');
     expect(result.stderr).toBe('');
     expect(result.exitCode).toBe(0);
@@ -46,7 +54,10 @@ describe('daytonaAdapter.execute — merged stdout/stderr', () => {
 
   it('mirrors the combined output into stderr when the command fails', async () => {
     executeCommandMock.mockResolvedValue({ exitCode: 1, result: 'Traceback...\n' });
-    const result = await daytonaAdapter.execute({ code: 'raise ValueError()', language: 'python' }, { apiKey: 'k' });
+    const result = await daytonaAdapter.execute(
+      { code: 'raise ValueError()', language: 'python' },
+      { apiKey: 'k' },
+    );
     expect(result.stdout).toBe('Traceback...\n');
     expect(result.stderr).toBe('Traceback...\n');
     expect(result.exitCode).toBe(1);

package/src/providers/daytona.ts

@@ -48,7 +48,7 @@ interface DaytonaModule {
 }
 
 async function loadSdk(): Promise<DaytonaModule> {
-  return (await import('@daytonaio/sdk')) as unknown as DaytonaModule;
+  return (await import('@daytona/sdk')) as unknown as DaytonaModule;
 }
 
 function requireFields(credentials: Record<string, string>): { apiKey: string; apiUrl?: string } {

package/src/registry.ts

@@ -126,7 +126,7 @@ export const SANDBOX_PROVIDERS: Record<
     label: 'Daytona',
     description:
       'Elastic infrastructure for running AI-generated code in fast, isolated sandboxes.',
-    sdkPackage: '@daytonaio/sdk',
+    sdkPackage: '@daytona/sdk',
     docsUrl: 'https://www.daytona.io/docs/en/sandboxes/',
     icon: '/icons/daytonaio.png',
     executionSupport: 'full',