@mastra/deployer-sandbox 0.0.0 → 0.1.0

package/dist/index.cjs

@@ -0,0 +1,381 @@
+'use strict';
+
+var chunkCSXC6CZL_cjs = require('./chunk-CSXC6CZL.cjs');
+var promises = require('fs/promises');
+var path = require('path');
+var url = require('url');
+var deployer = require('@mastra/deployer');
+var esm = require('fs-extra/esm');
+var child_process = require('child_process');
+var crypto = require('crypto');
+var fs = require('fs');
+var os = require('os');
+var util = require('util');
+var workspace = require('@mastra/core/workspace');
+
+var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
+// src/alias.ts
+async function updateEdgeConfigAlias(options) {
+  const { token, teamId } = options;
+  if (!token) {
+    throw new Error("Updating the Edge Config alias requires a Vercel API token. Pass `alias.token`.");
+  }
+  const endpoint = new URL(`https://api.vercel.com/v1/edge-config/${options.edgeConfigId}/items`);
+  if (teamId) {
+    endpoint.searchParams.set("teamId", teamId);
+  }
+  const res = await fetch(endpoint, {
+    method: "PATCH",
+    headers: {
+      Authorization: `Bearer ${token}`,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify({
+      items: [{ operation: "upsert", key: options.key, value: options.url }]
+    }),
+    // Bounded so a hung Vercel API request can't keep `mastra build` open
+    // after the sandbox itself is already deployed.
+    signal: AbortSignal.timeout(3e4)
+  });
+  if (!res.ok) {
+    const body = await res.text().catch(() => "");
+    throw new Error(`Failed to update Edge Config alias "${options.key}" (${res.status}): ${body}`);
+  }
+}
+var execFileAsync = util.promisify(child_process.execFile);
+var noopLogger = {
+  debug: () => {
+  },
+  info: () => {
+  },
+  warn: () => {
+  },
+  error: () => {
+  }
+};
+var UPLOAD_CHUNK_SIZE = 96e3;
+async function deployToSandbox(options) {
+  const {
+    sandbox,
+    dir,
+    port = chunkCSXC6CZL_cjs.DEFAULT_PORT,
+    env = {},
+    studio = false,
+    healthCheckPath = "/api",
+    healthCheckTimeoutMs = 6e4,
+    healthCheckIntervalMs = 1e3,
+    installCommand = "npm install --omit=dev",
+    logger = noopLogger
+  } = options;
+  if (!fs.existsSync(path.join(dir, "index.mjs"))) {
+    throw new Error(`No index.mjs found in "${dir}" \u2014 did the build succeed?`);
+  }
+  logger.info(`Starting ${sandbox.provider} sandbox...`);
+  await sandbox.start?.();
+  if (!workspace.supportsNetworking(sandbox)) {
+    throw new Error(
+      `Sandbox provider "${sandbox.provider}" does not support networking (public port URLs), which is required for sandbox deploys.`
+    );
+  }
+  if (!sandbox.executeCommand) {
+    throw new Error(
+      `Sandbox provider "${sandbox.provider}" does not support executeCommand, which is required for sandbox deploys.`
+    );
+  }
+  const url = await sandbox.networking.getPortUrl(port);
+  if (!url) {
+    throw new Error(
+      `Sandbox provider "${sandbox.provider}" did not expose a public URL for port ${port}. Make sure the port is declared when constructing the sandbox (e.g. \`ports: [${port}]\`).`
+    );
+  }
+  const remoteDir = await chunkCSXC6CZL_cjs.resolveRemoteDir(sandbox, options.remoteDir);
+  const mergedEnv = { ...env };
+  if (studio && mergedEnv.MASTRA_STUDIO_PATH === void 0) {
+    mergedEnv.MASTRA_STUDIO_PATH = `${remoteDir}/studio`;
+  }
+  logger.info(`Uploading build output from ${dir}...`);
+  const tarball = await createTarball(dir);
+  logger.debug(`Tarball size: ${(tarball.length / 1024 / 1024).toFixed(2)} MB`);
+  const remoteTarball = `${remoteDir}/.deploy.tgz`;
+  await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `mkdir -p ${chunkCSXC6CZL_cjs.shellQuote(remoteDir)}`);
+  await uploadFile(sandbox, remoteTarball, tarball);
+  await chunkCSXC6CZL_cjs.killPreviousServer(sandbox, remoteDir);
+  await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `cd ${chunkCSXC6CZL_cjs.shellQuote(remoteDir)} && tar -xzf .deploy.tgz && rm -f .deploy.tgz`, {
+    timeout: 12e4
+  });
+  const installHash = await hashInstallInputs(dir, installCommand);
+  const marker = `${remoteDir}/${chunkCSXC6CZL_cjs.INSTALL_MARKER}`;
+  const markerCheck = await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `cat ${chunkCSXC6CZL_cjs.shellQuote(marker)} 2>/dev/null || true`, {
+    allowFailure: true
+  });
+  if (installHash && markerCheck.stdout.trim() === installHash) {
+    logger.info("Dependencies unchanged \u2014 skipping install.");
+  } else {
+    logger.info(`Installing dependencies (${installCommand})...`);
+    await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `cd ${chunkCSXC6CZL_cjs.shellQuote(remoteDir)} && ${installCommand}`, {
+      timeout: 6e5,
+      label: `install dependencies (${installCommand})`
+    });
+    if (installHash) {
+      await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `printf '%s' ${chunkCSXC6CZL_cjs.shellQuote(installHash)} > ${chunkCSXC6CZL_cjs.shellQuote(marker)}`);
+    }
+  }
+  const launchScript = buildLaunchScript({ remoteDir, port, env: mergedEnv });
+  await uploadFile(sandbox, `${remoteDir}/${chunkCSXC6CZL_cjs.SERVER_SCRIPT}`, Buffer.from(launchScript));
+  await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `chmod 700 ${chunkCSXC6CZL_cjs.shellQuote(`${remoteDir}/${chunkCSXC6CZL_cjs.SERVER_SCRIPT}`)}`);
+  logger.info("Starting Mastra server...");
+  await chunkCSXC6CZL_cjs.launchServer(sandbox, remoteDir);
+  const healthy = await chunkCSXC6CZL_cjs.waitForHealthy(url, {
+    path: healthCheckPath,
+    timeoutMs: healthCheckTimeoutMs,
+    intervalMs: healthCheckIntervalMs
+  });
+  if (!healthy) {
+    const log = await chunkCSXC6CZL_cjs.tailServerLog(sandbox, remoteDir).catch(() => "");
+    throw new Error(
+      `Mastra server did not become healthy at ${url}${healthCheckPath} within ${healthCheckTimeoutMs}ms.` + (log ? `
+
+Server log:
+${log}` : "\n\n(no server log output captured)")
+    );
+  }
+  const info = await chunkCSXC6CZL_cjs.getInfoSafe(sandbox);
+  return {
+    url,
+    sandboxId: info?.id ?? sandbox.id,
+    expiresAt: info?.timeoutAt,
+    stop: async () => {
+      await sandbox.stop?.();
+    },
+    destroy: async () => {
+      await sandbox.destroy?.();
+    },
+    logs: (lines) => chunkCSXC6CZL_cjs.tailServerLog(sandbox, remoteDir, lines)
+  };
+}
+function buildLaunchScript(opts) {
+  const lines = ["#!/bin/sh", `cd ${chunkCSXC6CZL_cjs.shellQuote(opts.remoteDir)}`];
+  const env = {
+    MASTRA_AUTO_DETECT_URL: "true",
+    ...opts.env,
+    PORT: String(opts.port),
+    MASTRA_HOST: "0.0.0.0"
+  };
+  for (const [key, value] of Object.entries(env)) {
+    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {
+      throw new Error(`Invalid environment variable name: "${key}"`);
+    }
+    lines.push(`export ${key}=${chunkCSXC6CZL_cjs.shellQuote(value)}`);
+  }
+  lines.push(`echo $$ > ${chunkCSXC6CZL_cjs.shellQuote(chunkCSXC6CZL_cjs.SERVER_PIDFILE)}`);
+  lines.push(`exec node index.mjs >> ${chunkCSXC6CZL_cjs.shellQuote(chunkCSXC6CZL_cjs.SERVER_LOGFILE)} 2>&1`);
+  return lines.join("\n") + "\n";
+}
+async function createTarball(dir) {
+  const tmp = await promises.mkdtemp(path.join(os.tmpdir(), "mastra-sandbox-"));
+  const tarPath = path.join(tmp, "deploy.tgz");
+  try {
+    await execFileAsync("tar", ["-czf", tarPath, "--exclude=node_modules", "-C", dir, "."]);
+    return await promises.readFile(tarPath);
+  } finally {
+    await promises.rm(tmp, { recursive: true, force: true });
+  }
+}
+async function uploadFile(sandbox, remotePath, content) {
+  if (sandbox.writeFiles) {
+    await sandbox.writeFiles([{ path: remotePath, content }]);
+    return;
+  }
+  const b64 = content.toString("base64");
+  const tmpPath = `${remotePath}.b64`;
+  await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `rm -f ${chunkCSXC6CZL_cjs.shellQuote(tmpPath)}`);
+  for (let i = 0; i < b64.length; i += UPLOAD_CHUNK_SIZE) {
+    const chunk = b64.slice(i, i + UPLOAD_CHUNK_SIZE);
+    await chunkCSXC6CZL_cjs.runInSandbox(sandbox, `printf '%s' ${chunkCSXC6CZL_cjs.shellQuote(chunk)} >> ${chunkCSXC6CZL_cjs.shellQuote(tmpPath)}`, {
+      label: `upload chunk to ${remotePath}`
+    });
+  }
+  await chunkCSXC6CZL_cjs.runInSandbox(
+    sandbox,
+    `base64 -d ${chunkCSXC6CZL_cjs.shellQuote(tmpPath)} > ${chunkCSXC6CZL_cjs.shellQuote(remotePath)} && rm -f ${chunkCSXC6CZL_cjs.shellQuote(tmpPath)}`,
+    { label: `decode upload at ${remotePath}` }
+  );
+}
+var LOCKFILES = ["package-lock.json", "npm-shrinkwrap.json", "pnpm-lock.yaml", "yarn.lock", "bun.lock"];
+async function hashInstallInputs(dir, installCommand) {
+  const hash = crypto.createHash("sha256");
+  try {
+    hash.update(await promises.readFile(path.join(dir, "package.json")));
+  } catch {
+    return null;
+  }
+  for (const lockfile of LOCKFILES) {
+    let content;
+    try {
+      content = await promises.readFile(path.join(dir, lockfile));
+    } catch {
+      continue;
+    }
+    hash.update(lockfile).update(content);
+  }
+  hash.update(installCommand);
+  return hash.digest("hex");
+}
+var MANIFEST_FILENAME = "sandbox-deployment.json";
+async function writeDeploymentManifest(outputDir, manifest) {
+  await promises.writeFile(path.join(outputDir, MANIFEST_FILENAME), JSON.stringify(manifest, null, 2));
+}
+async function readDeploymentManifest(outputDir) {
+  let raw;
+  try {
+    raw = await promises.readFile(path.join(outputDir, MANIFEST_FILENAME), "utf-8");
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return null;
+    }
+    throw error;
+  }
+  return JSON.parse(raw);
+}
+
+// src/deployer.ts
+var SandboxDeployer = class extends deployer.Deployer {
+  /** Sandbox deploys are push-style: `mastra build` runs `deploy()` after bundling. */
+  deployOnBuild = true;
+  sandbox;
+  port;
+  studio;
+  /** Explicit remote dir, when configured. The engine defaults to `$HOME/mastra-app` inside the sandbox. */
+  remoteDir;
+  env;
+  alias;
+  healthCheckTimeoutMs;
+  constructor(options) {
+    super({ name: "SANDBOX" });
+    this.sandbox = options.sandbox;
+    this.port = options.port ?? chunkCSXC6CZL_cjs.DEFAULT_PORT;
+    this.studio = options.studio ?? true;
+    this.remoteDir = options.remoteDir;
+    this.env = options.env ?? {};
+    this.alias = options.alias;
+    this.healthCheckTimeoutMs = options.healthCheckTimeoutMs;
+  }
+  /**
+   * Merge all existing env files instead of only the first one (base behavior).
+   * Later files win in `loadEnvVars()`, so order least → most specific: a
+   * `.env.local` written by `vercel env pull` shouldn't shadow the `.env` that
+   * holds the app's own keys.
+   */
+  async getEnvFiles() {
+    const candidates = [".env", ".env.production", ".env.local"];
+    const existing = [];
+    for (const file of candidates) {
+      try {
+        await promises.access(file);
+        existing.push(file);
+      } catch {
+      }
+    }
+    return existing;
+  }
+  async getUserBundlerOptions(mastraEntryFile, outputDirectory) {
+    const bundlerOptions = await super.getUserBundlerOptions(mastraEntryFile, outputDirectory);
+    return {
+      ...bundlerOptions,
+      externals: true
+    };
+  }
+  getEntry() {
+    return `
+    // @ts-expect-error
+    import { scoreTracesWorkflow } from '@mastra/core/evals/scoreTraces';
+    import { mastra } from '#mastra';
+    import { createNodeServer, getToolExports } from '#server';
+    import { tools } from '#tools';
+
+    // @ts-expect-error
+    await createNodeServer(mastra, { tools: getToolExports(tools), studio: ${this.studio} });
+
+    const storage = mastra.getStorage();
+    if (storage) {
+      if (!storage.disableInit) {
+        storage.init();
+      }
+      mastra.__registerInternalWorkflow(scoreTracesWorkflow);
+    }
+    `;
+  }
+  async prepare(outputDirectory) {
+    await super.prepare(outputDirectory);
+    if (this.studio) {
+      const __filename = url.fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
+      const __dirname = path.dirname(__filename);
+      const studioSource = path.join(path.dirname(__dirname), "dist", "studio");
+      const studioServePath = path.join(outputDirectory, this.outputDir, "studio");
+      try {
+        await esm.copy(studioSource, studioServePath, { overwrite: true });
+      } catch (err) {
+        throw new Error(
+          `Failed to copy studio assets from "${studioSource}" to "${studioServePath}": ${err instanceof Error ? err.message : err}`
+        );
+      }
+    }
+  }
+  async bundle(entryFile, outputDirectory, { toolsPaths, projectRoot }) {
+    return this._bundle(this.getEntry(), entryFile, { outputDirectory, projectRoot }, toolsPaths);
+  }
+  /**
+   * Deploy the built output into the sandbox and wait for the server to come
+   * up on its public URL. Writes `sandbox-deployment.json` into the output
+   * directory and updates the Edge Config alias when configured.
+   */
+  async deploy(outputDirectory) {
+    const dir = path.join(outputDirectory, this.outputDir);
+    const envVars = await this.loadEnvVars();
+    const env = { ...Object.fromEntries(envVars), ...this.env };
+    if (envVars.size > 0) {
+      this.logger.warn(
+        "Environment variables from your .env file are injected into the remote sandbox. Anyone with access to the sandbox can read them."
+      );
+    }
+    const deployment = await deployToSandbox({
+      sandbox: this.sandbox,
+      dir,
+      port: this.port,
+      env,
+      studio: this.studio,
+      remoteDir: this.remoteDir,
+      healthCheckTimeoutMs: this.healthCheckTimeoutMs,
+      logger: this.logger
+    });
+    await writeDeploymentManifest(dir, {
+      provider: this.sandbox.provider,
+      sandboxId: deployment.sandboxId,
+      url: deployment.url,
+      port: this.port,
+      deployedAt: (/* @__PURE__ */ new Date()).toISOString(),
+      expiresAt: deployment.expiresAt?.toISOString()
+    });
+    if (this.alias) {
+      await updateEdgeConfigAlias({ ...this.alias, url: deployment.url });
+      this.logger.info(`Edge Config alias "${this.alias.key}" now points at ${deployment.url}`);
+    }
+    this.logger.info(`Mastra server deployed: ${deployment.url}/api`);
+    if (this.studio) {
+      this.logger.info(`Studio: ${deployment.url}`);
+    }
+    if (deployment.expiresAt) {
+      this.logger.warn(`Sandbox expires at ${deployment.expiresAt.toISOString()} (provider runtime cap).`);
+    }
+  }
+};
+
+exports.MANIFEST_FILENAME = MANIFEST_FILENAME;
+exports.SandboxDeployer = SandboxDeployer;
+exports.buildLaunchScript = buildLaunchScript;
+exports.deployToSandbox = deployToSandbox;
+exports.readDeploymentManifest = readDeploymentManifest;
+exports.updateEdgeConfigAlias = updateEdgeConfigAlias;
+exports.writeDeploymentManifest = writeDeploymentManifest;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/alias.ts","../src/engine.ts","../src/manifest.ts","../src/deployer.ts"],"names":["promisify","execFile","DEFAULT_PORT","existsSync","join","supportsNetworking","resolveRemoteDir","runInSandbox","shellQuote","killPreviousServer","INSTALL_MARKER","SERVER_SCRIPT","launchServer","waitForHealthy","tailServerLog","getInfoSafe","SERVER_PIDFILE","SERVER_LOGFILE","mkdtemp","tmpdir","readFile","rm","createHash","writeFile","Deployer","access","fileURLToPath","dirname","copy"],"mappings":";;;;;;;;;;;;;;;;;AAOA,eAAsB,sBAAsB,OAAA,EAA+D;AACzG,EAAA,MAAM,EAAE,KAAA,EAAO,MAAA,EAAO,GAAI,OAAA;AAC1B,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,MAAM,IAAI,MAAM,iFAAiF,CAAA;AAAA,EACnG;AAEA,EAAA,MAAM,WAAW,IAAI,GAAA,CAAI,CAAA,sCAAA,EAAyC,OAAA,CAAQ,YAAY,CAAA,MAAA,CAAQ,CAAA;AAC9F,EAAA,IAAI,MAAA,EAAQ;AACV,IAAA,QAAA,CAAS,YAAA,CAAa,GAAA,CAAI,QAAA,EAAU,MAAM,CAAA;AAAA,EAC5C;AAEA,EAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,QAAA,EAAU;AAAA,IAChC,MAAA,EAAQ,OAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,aAAA,EAAe,UAAU,KAAK,CAAA,CAAA;AAAA,MAC9B,cAAA,EAAgB;AAAA,KAClB;AAAA,IACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,MACnB,KAAA,EAAO,CAAC,EAAE,SAAA,EAAW,QAAA,EAAU,GAAA,EAAK,OAAA,CAAQ,GAAA,EAAK,KAAA,EAAO,OAAA,CAAQ,GAAA,EAAK;AAAA,KACtE,CAAA;AAAA;AAAA;AAAA,IAGD,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,GAAM;AAAA,GACnC,CAAA;AAED,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,OAAA,CAAQ,GAAG,MAAM,GAAA,CAAI,MAAM,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA;AAAA,EAChG;AACF;ACVA,IAAM,aAAA,GAAgBA,eAAUC,sBAAQ,CAAA;AAExC,IAAM,UAAA,GAAkC;AAAA,EACtC,OAAO,MAAM;AAAA,EAAC,CAAA;AAAA,EACd,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,MAAM,MAAM;AAAA,EAAC,CAAA;AAAA,EACb,OAAO,MAAM;AAAA,EAAC;AAChB,CAAA;AAGA,IAAM,iBAAA,GAAoB,IAAA;AAQ1B,eAAsB,gBAAgB,OAAA,EAA6D;AACjG,EAAA,MAAM;AAAA,IACJ,OAAA;AAAA,IACA,GAAA;AAAA,IACA,IAAA,GAAOC,8BAAA;AAAA,IACP,MAAM,EAAC;AAAA,IACP,MAAA,GAAS,KAAA;AAAA,IACT,eAAA,GAAkB,MAAA;AAAA,IAClB,oBAAA,GAAuB,GAAA;AAAA,IACvB,qBAAA,GAAwB,GAAA;AAAA,IACxB,cAAA,GAAiB,wBAAA;AAAA,IACjB,MAAA,GAAS;AAAA,GACX,GAAI,OAAA;AAEJ,EAAA,IAAI,CAACC,aAAA,CAAWC,SAAA,CAAK,GAAA,EAAK,WAAW,CAAC,CAAA,EAAG;AACvC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,uBAAA,EAA0B,GAAG,CAAA,+BAAA,CAA4B,CAAA;AAAA,EAC3E;AAGA,EAAA,MAAA,CAAO,IAAA,CAAK,CAAA,SAAA,EAAY,OAAA,CAAQ,QAAQ,CAAA,WAAA,CAAa,CAAA;AACrD,EAAA,MAAM,QAAQ,KAAA,IAAQ;AAEtB,EAAA,IAAI,CAACC,4BAAA,CAAmB,OAAO,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,kBAAA,EAAqB,QAAQ,QAAQ,CAAA,wFAAA;AAAA,KAEvC;AAAA,EACF;AACA,EAAA,IAAI,CAAC,QAAQ,cAAA,EAAgB;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,kBAAA,EAAqB,QAAQ,QAAQ,CAAA,yEAAA;AAAA,KACvC;AAAA,EACF;AAEA,EAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,UAAA,CAAW,WAAW,IAAI,CAAA;AACpD,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,qBAAqB,OAAA,CAAQ,QAAQ,CAAA,uCAAA,EAA0C,IAAI,kFACD,IAAI,CAAA,KAAA;AAAA,KACxF;AAAA,EACF;AAIA,EAAA,MAAM,SAAA,GAAY,MAAMC,kCAAA,CAAiB,OAAA,EAAS,QAAQ,SAAS,CAAA;AAEnE,EAAA,MAAM,SAAA,GAAY,EAAE,GAAG,GAAA,EAAI;AAC3B,EAAA,IAAI,MAAA,IAAU,SAAA,CAAU,kBAAA,KAAuB,MAAA,EAAW;AACxD,IAAA,SAAA,CAAU,kBAAA,GAAqB,GAAG,SAAS,CAAA,OAAA,CAAA;AAAA,EAC7C;AAGA,EAAA,MAAA,CAAO,IAAA,CAAK,CAAA,4BAAA,EAA+B,GAAG,CAAA,GAAA,CAAK,CAAA;AACnD,EAAA,MAAM,OAAA,GAAU,MAAM,aAAA,CAAc,GAAG,CAAA;AACvC,EAAA,MAAA,CAAO,KAAA,CAAM,kBAAkB,OAAA,CAAQ,MAAA,GAAS,OAAO,IAAA,EAAM,OAAA,CAAQ,CAAC,CAAC,CAAA,GAAA,CAAK,CAAA;AAE5E,EAAA,MAAM,aAAA,GAAgB,GAAG,SAAS,CAAA,YAAA,CAAA;AAClC,EAAA,MAAMC,+BAAa,OAAA,EAAS,CAAA,SAAA,EAAYC,4BAAA,CAAW,SAAS,CAAC,CAAA,CAAE,CAAA;AAC/D,EAAA,MAAM,UAAA,CAAW,OAAA,EAAS,aAAA,EAAe,OAAO,CAAA;AAIhD,EAAA,MAAMC,oCAAA,CAAmB,SAAS,SAAS,CAAA;AAE3C,EAAA,MAAMF,+BAAa,OAAA,EAAS,CAAA,GAAA,EAAMC,4BAAA,CAAW,SAAS,CAAC,CAAA,6CAAA,CAAA,EAAiD;AAAA,IACtG,OAAA,EAAS;AAAA,GACV,CAAA;AAKD,EAAA,MAAM,WAAA,GAAc,MAAM,iBAAA,CAAkB,GAAA,EAAK,cAAc,CAAA;AAC/D,EAAA,MAAM,MAAA,GAAS,CAAA,EAAG,SAAS,CAAA,CAAA,EAAIE,gCAAc,CAAA,CAAA;AAC7C,EAAA,MAAM,WAAA,GAAc,MAAMH,8BAAA,CAAa,OAAA,EAAS,OAAOC,4BAAA,CAAW,MAAM,CAAC,CAAA,oBAAA,CAAA,EAAwB;AAAA,IAC/F,YAAA,EAAc;AAAA,GACf,CAAA;AAED,EAAA,IAAI,WAAA,IAAe,WAAA,CAAY,MAAA,CAAO,IAAA,OAAW,WAAA,EAAa;AAC5D,IAAA,MAAA,CAAO,KAAK,iDAA4C,CAAA;AAAA,EAC1D,CAAA,MAAO;AACL,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,yBAAA,EAA4B,cAAc,CAAA,IAAA,CAAM,CAAA;AAC5D,IAAA,MAAMD,8BAAA,CAAa,SAAS,CAAA,GAAA,EAAMC,4BAAA,CAAW,SAAS,CAAC,CAAA,IAAA,EAAO,cAAc,CAAA,CAAA,EAAI;AAAA,MAC9E,OAAA,EAAS,GAAA;AAAA,MACT,KAAA,EAAO,yBAAyB,cAAc,CAAA,CAAA;AAAA,KAC/C,CAAA;AACD,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,MAAMD,8BAAA,CAAa,OAAA,EAAS,CAAA,YAAA,EAAeC,4BAAA,CAAW,WAAW,CAAC,CAAA,GAAA,EAAMA,4BAAA,CAAW,MAAM,CAAC,CAAA,CAAE,CAAA;AAAA,IAC9F;AAAA,EACF;AAIA,EAAA,MAAM,eAAe,iBAAA,CAAkB,EAAE,WAAW,IAAA,EAAM,GAAA,EAAK,WAAW,CAAA;AAC1E,EAAA,MAAM,UAAA,CAAW,OAAA,EAAS,CAAA,EAAG,SAAS,CAAA,CAAA,EAAIG,+BAAa,CAAA,CAAA,EAAI,MAAA,CAAO,IAAA,CAAK,YAAY,CAAC,CAAA;AACpF,EAAA,MAAMJ,8BAAA,CAAa,OAAA,EAAS,CAAA,UAAA,EAAaC,4BAAA,CAAW,CAAA,EAAG,SAAS,CAAA,CAAA,EAAIG,+BAAa,CAAA,CAAE,CAAC,CAAA,CAAE,CAAA;AAEtF,EAAA,MAAA,CAAO,KAAK,2BAA2B,CAAA;AACvC,EAAA,MAAMC,8BAAA,CAAa,SAAS,SAAS,CAAA;AAGrC,EAAA,MAAM,OAAA,GAAU,MAAMC,gCAAA,CAAe,GAAA,EAAK;AAAA,IACxC,IAAA,EAAM,eAAA;AAAA,IACN,SAAA,EAAW,oBAAA;AAAA,IACX,UAAA,EAAY;AAAA,GACb,CAAA;AACD,EAAA,IAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,GAAA,GAAM,MAAMC,+BAAA,CAAc,OAAA,EAAS,SAAS,CAAA,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAClE,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,2CAA2C,GAAG,CAAA,EAAG,eAAe,CAAA,QAAA,EAAW,oBAAoB,SAC5F,GAAA,GAAM;;AAAA;AAAA,EAAoB,GAAG,CAAA,CAAA,GAAK,qCAAA;AAAA,KACvC;AAAA,EACF;AAEA,EAAA,MAAM,IAAA,GAAO,MAAMC,6BAAA,CAAY,OAAO,CAAA;AAEtC,EAAA,OAAO;AAAA,IACL,GAAA;AAAA,IACA,SAAA,EAAW,IAAA,EAAM,EAAA,IAAM,OAAA,CAAQ,EAAA;AAAA,IAC/B,WAAW,IAAA,EAAM,SAAA;AAAA,IACjB,MAAM,YAAY;AAChB,MAAA,MAAM,QAAQ,IAAA,IAAO;AAAA,IACvB,CAAA;AAAA,IACA,SAAS,YAAY;AACnB,MAAA,MAAM,QAAQ,OAAA,IAAU;AAAA,IAC1B,CAAA;AAAA,IACA,MAAM,CAAC,KAAA,KAAmBD,+BAAA,CAAc,OAAA,EAAS,WAAW,KAAK;AAAA,GACnE;AACF;AAOO,SAAS,kBAAkB,IAAA,EAAgF;AAChH,EAAA,MAAM,KAAA,GAAQ,CAAC,WAAA,EAAa,CAAA,GAAA,EAAMN,6BAAW,IAAA,CAAK,SAAS,CAAC,CAAA,CAAE,CAAA;AAQ9D,EAAA,MAAM,GAAA,GAA8B;AAAA,IAClC,sBAAA,EAAwB,MAAA;AAAA,IACxB,GAAG,IAAA,CAAK,GAAA;AAAA,IACR,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA;AAAA,IACtB,WAAA,EAAa;AAAA,GACf;AACA,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA,EAAG;AAC9C,IAAA,IAAI,CAAC,0BAAA,CAA2B,IAAA,CAAK,GAAG,CAAA,EAAG;AACzC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,oCAAA,EAAuC,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,IAC/D;AACA,IAAA,KAAA,CAAM,KAAK,CAAA,OAAA,EAAU,GAAG,IAAIA,4BAAA,CAAW,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,EACjD;AAEA,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,UAAA,EAAaA,4BAAA,CAAWQ,gCAAc,CAAC,CAAA,CAAE,CAAA;AACpD,EAAA,KAAA,CAAM,IAAA,CAAK,CAAA,uBAAA,EAA0BR,4BAAA,CAAWS,gCAAc,CAAC,CAAA,KAAA,CAAO,CAAA;AACtE,EAAA,OAAO,KAAA,CAAM,IAAA,CAAK,IAAI,CAAA,GAAI,IAAA;AAC5B;AAGA,eAAe,cAAc,GAAA,EAA8B;AACzD,EAAA,MAAM,MAAM,MAAMC,gBAAA,CAAQd,UAAKe,SAAA,EAAO,EAAG,iBAAiB,CAAC,CAAA;AAC3D,EAAA,MAAM,OAAA,GAAUf,SAAA,CAAK,GAAA,EAAK,YAAY,CAAA;AACtC,EAAA,IAAI;AACF,IAAA,MAAM,aAAA,CAAc,OAAO,CAAC,MAAA,EAAQ,SAAS,wBAAA,EAA0B,IAAA,EAAM,GAAA,EAAK,GAAG,CAAC,CAAA;AACtF,IAAA,OAAO,MAAMgB,kBAAS,OAAO,CAAA;AAAA,EAC/B,CAAA,SAAE;AACA,IAAA,MAAMC,YAAG,GAAA,EAAK,EAAE,WAAW,IAAA,EAAM,KAAA,EAAO,MAAM,CAAA;AAAA,EAChD;AACF;AAOA,eAAe,UAAA,CAAW,OAAA,EAA2B,UAAA,EAAoB,OAAA,EAAgC;AACvG,EAAA,IAAI,QAAQ,UAAA,EAAY;AACtB,IAAA,MAAM,OAAA,CAAQ,WAAW,CAAC,EAAE,MAAM,UAAA,EAAY,OAAA,EAAS,CAAC,CAAA;AACxD,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,QAAA,CAAS,QAAQ,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,GAAG,UAAU,CAAA,IAAA,CAAA;AAC7B,EAAA,MAAMd,+BAAa,OAAA,EAAS,CAAA,MAAA,EAASC,4BAAA,CAAW,OAAO,CAAC,CAAA,CAAE,CAAA;AAC1D,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,KAAK,iBAAA,EAAmB;AACtD,IAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,KAAA,CAAM,CAAA,EAAG,IAAI,iBAAiB,CAAA;AAChD,IAAA,MAAMD,8BAAA,CAAa,OAAA,EAAS,CAAA,YAAA,EAAeC,4BAAA,CAAW,KAAK,CAAC,CAAA,IAAA,EAAOA,4BAAA,CAAW,OAAO,CAAC,CAAA,CAAA,EAAI;AAAA,MACxF,KAAA,EAAO,mBAAmB,UAAU,CAAA;AAAA,KACrC,CAAA;AAAA,EACH;AACA,EAAA,MAAMD,8BAAA;AAAA,IACJ,OAAA;AAAA,IACA,CAAA,UAAA,EAAaC,4BAAA,CAAW,OAAO,CAAC,CAAA,GAAA,EAAMA,4BAAA,CAAW,UAAU,CAAC,CAAA,UAAA,EAAaA,4BAAA,CAAW,OAAO,CAAC,CAAA,CAAA;AAAA,IAC5F,EAAE,KAAA,EAAO,CAAA,iBAAA,EAAoB,UAAU,CAAA,CAAA;AAAG,GAC5C;AACF;AAGA,IAAM,YAAY,CAAC,mBAAA,EAAqB,qBAAA,EAAuB,gBAAA,EAAkB,aAAa,UAAU,CAAA;AAOxG,eAAe,iBAAA,CAAkB,KAAa,cAAA,EAAgD;AAC5F,EAAA,MAAM,IAAA,GAAOc,kBAAW,QAAQ,CAAA;AAChC,EAAA,IAAI;AACF,IAAA,IAAA,CAAK,OAAO,MAAMF,iBAAA,CAAShB,UAAK,GAAA,EAAK,cAAc,CAAC,CAAC,CAAA;AAAA,EACvD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,IAAA,IAAI,OAAA;AACJ,IAAA,IAAI;AACF,MAAA,OAAA,GAAU,MAAMgB,iBAAA,CAAShB,SAAA,CAAK,GAAA,EAAK,QAAQ,CAAC,CAAA;AAAA,IAC9C,CAAA,CAAA,MAAQ;AAEN,MAAA;AAAA,IACF;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,QAAQ,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA;AAAA,EACtC;AACA,EAAA,IAAA,CAAK,OAAO,cAAc,CAAA;AAC1B,EAAA,OAAO,IAAA,CAAK,OAAO,KAAK,CAAA;AAC1B;AC3QO,IAAM,iBAAA,GAAoB;AAGjC,eAAsB,uBAAA,CAAwB,WAAmB,QAAA,EAAoD;AACnH,EAAA,MAAMmB,kBAAA,CAAUnB,SAAAA,CAAK,SAAA,EAAW,iBAAiB,CAAA,EAAG,KAAK,SAAA,CAAU,QAAA,EAAU,IAAA,EAAM,CAAC,CAAC,CAAA;AACvF;AAGA,eAAsB,uBAAuB,SAAA,EAA8D;AACzG,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAMgB,iBAAAA,CAAShB,SAAAA,CAAK,SAAA,EAAW,iBAAiB,GAAG,OAAO,CAAA;AAAA,EAClE,SAAS,KAAA,EAAO;AAGd,IAAA,IAAK,KAAA,CAAgC,SAAS,QAAA,EAAU;AACtD,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACA,EAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AACvB;;;ACOO,IAAM,eAAA,GAAN,cAA8BoB,iBAAA,CAAS;AAAA;AAAA,EAEnC,aAAA,GAAgB,IAAA;AAAA,EAChB,OAAA;AAAA,EACA,IAAA;AAAA,EACA,MAAA;AAAA;AAAA,EAEA,SAAA;AAAA,EACQ,GAAA;AAAA,EACA,KAAA;AAAA,EACA,oBAAA;AAAA,EAEjB,YAAY,OAAA,EAAiC;AAC3C,IAAA,KAAA,CAAM,EAAE,IAAA,EAAM,SAAA,EAAW,CAAA;AAEzB,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,OAAA;AACvB,IAAA,IAAA,CAAK,IAAA,GAAO,QAAQ,IAAA,IAAQtB,8BAAA;AAC5B,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,IAAA;AAChC,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AACzB,IAAA,IAAA,CAAK,GAAA,GAAM,OAAA,CAAQ,GAAA,IAAO,EAAC;AAC3B,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AACrB,IAAA,IAAA,CAAK,uBAAuB,OAAA,CAAQ,oBAAA;AAAA,EACtC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAe,WAAA,GAAiC;AAC9C,IAAA,MAAM,UAAA,GAAa,CAAC,MAAA,EAAQ,iBAAA,EAAmB,YAAY,CAAA;AAC3D,IAAA,MAAM,WAAqB,EAAC;AAC5B,IAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAC7B,MAAA,IAAI;AACF,QAAA,MAAMuB,gBAAO,IAAI,CAAA;AACjB,QAAA,QAAA,CAAS,KAAK,IAAI,CAAA;AAAA,MACpB,CAAA,CAAA,MAAQ;AAAA,MAER;AAAA,IACF;AACA,IAAA,OAAO,QAAA;AAAA,EACT;AAAA,EAEA,MAAgB,qBAAA,CACd,eAAA,EACA,eAAA,EACyC;AACzC,IAAA,MAAM,cAAA,GAAiB,MAAM,KAAA,CAAM,qBAAA,CAAsB,iBAAiB,eAAe,CAAA;AAGzF,IAAA,OAAO;AAAA,MACL,GAAG,cAAA;AAAA,MACH,SAAA,EAAW;AAAA,KACb;AAAA,EACF;AAAA,EAEU,QAAA,GAAmB;AAC3B,IAAA,OAAO;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA,2EAAA,EAQkE,KAAK,MAAM,CAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,EAUtF;AAAA,EAEA,MAAM,QAAQ,eAAA,EAAwC;AACpD,IAAA,MAAM,KAAA,CAAM,QAAQ,eAAe,CAAA;AAEnC,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,MAAM,UAAA,GAAaC,iBAAA,CAAc,2PAAe,CAAA;AAChD,MAAA,MAAM,SAAA,GAAYC,aAAQ,UAAU,CAAA;AAEpC,MAAA,MAAM,eAAevB,SAAAA,CAAKuB,YAAA,CAAQ,SAAS,CAAA,EAAG,QAAQ,QAAQ,CAAA;AAC9D,MAAA,MAAM,eAAA,GAAkBvB,SAAAA,CAAK,eAAA,EAAiB,IAAA,CAAK,WAAW,QAAQ,CAAA;AAEtE,MAAA,IAAI;AACF,QAAA,MAAMwB,SAAK,YAAA,EAAc,eAAA,EAAiB,EAAE,SAAA,EAAW,MAAM,CAAA;AAAA,MAC/D,SAAS,GAAA,EAAK;AACZ,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,mCAAA,EAAsC,YAAY,CAAA,MAAA,EAAS,eAAe,MAAM,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,GAAG,CAAA;AAAA,SAC1H;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,MAAA,CACJ,SAAA,EACA,iBACA,EAAE,UAAA,EAAY,aAAY,EACX;AACf,IAAA,OAAO,IAAA,CAAK,OAAA,CAAQ,IAAA,CAAK,QAAA,EAAS,EAAG,WAAW,EAAE,eAAA,EAAiB,WAAA,EAAY,EAAG,UAAU,CAAA;AAAA,EAC9F;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAO,eAAA,EAAwC;AACnD,IAAA,MAAM,GAAA,GAAMxB,SAAAA,CAAK,eAAA,EAAiB,IAAA,CAAK,SAAS,CAAA;AAGhD,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,WAAA,EAAY;AACvC,IAAA,MAAM,GAAA,GAA8B,EAAE,GAAG,MAAA,CAAO,YAAY,OAAO,CAAA,EAAG,GAAG,IAAA,CAAK,GAAA,EAAI;AAClF,IAAA,IAAI,OAAA,CAAQ,OAAO,CAAA,EAAG;AACpB,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA;AAAA,QACV;AAAA,OAEF;AAAA,IACF;AAEA,IAAA,MAAM,UAAA,GAAa,MAAM,eAAA,CAAgB;AAAA,MACvC,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,GAAA;AAAA,MACA,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,GAAA;AAAA,MACA,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,sBAAsB,IAAA,CAAK,oBAAA;AAAA,MAC3B,QAAQ,IAAA,CAAK;AAAA,KACd,CAAA;AAED,IAAA,MAAM,wBAAwB,GAAA,EAAK;AAAA,MACjC,QAAA,EAAU,KAAK,OAAA,CAAQ,QAAA;AAAA,MACvB,WAAW,UAAA,CAAW,SAAA;AAAA,MACtB,KAAK,UAAA,CAAW,GAAA;AAAA,MAChB,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,UAAA,EAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAAA,MACnC,SAAA,EAAW,UAAA,CAAW,SAAA,EAAW,WAAA;AAAY,KAC9C,CAAA;AAED,IAAA,IAAI,KAAK,KAAA,EAAO;AACd,MAAA,MAAM,qBAAA,CAAsB,EAAE,GAAG,IAAA,CAAK,OAAO,GAAA,EAAK,UAAA,CAAW,KAAK,CAAA;AAClE,MAAA,IAAA,CAAK,MAAA,CAAO,KAAK,CAAA,mBAAA,EAAsB,IAAA,CAAK,MAAM,GAAG,CAAA,gBAAA,EAAmB,UAAA,CAAW,GAAG,CAAA,CAAE,CAAA;AAAA,IAC1F;AAEA,IAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,CAAA,wBAAA,EAA2B,UAAA,CAAW,GAAG,CAAA,IAAA,CAAM,CAAA;AAChE,IAAA,IAAI,KAAK,MAAA,EAAQ;AACf,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,CAAA,QAAA,EAAW,UAAA,CAAW,GAAG,CAAA,CAAE,CAAA;AAAA,IAC9C;AACA,IAAA,IAAI,WAAW,SAAA,EAAW;AACxB,MAAA,IAAA,CAAK,OAAO,IAAA,CAAK,CAAA,mBAAA,EAAsB,WAAW,SAAA,CAAU,WAAA,EAAa,CAAA,wBAAA,CAA0B,CAAA;AAAA,IACrG;AAAA,EACF;AACF","file":"index.cjs","sourcesContent":["import type { SandboxAliasOptions } from './types';\n\n/**\n * Upsert a Vercel Edge Config item so a stable key always points at the\n * current sandbox URL. Used for Tier 3 routing: apps read the key from Edge\n * Config (e.g. in middleware) instead of hardcoding the rotating sandbox URL.\n */\nexport async function updateEdgeConfigAlias(options: SandboxAliasOptions & { url: string }): Promise<void> {\n  const { token, teamId } = options;\n  if (!token) {\n    throw new Error('Updating the Edge Config alias requires a Vercel API token. Pass `alias.token`.');\n  }\n\n  const endpoint = new URL(`https://api.vercel.com/v1/edge-config/${options.edgeConfigId}/items`);\n  if (teamId) {\n    endpoint.searchParams.set('teamId', teamId);\n  }\n\n  const res = await fetch(endpoint, {\n    method: 'PATCH',\n    headers: {\n      Authorization: `Bearer ${token}`,\n      'Content-Type': 'application/json',\n    },\n    body: JSON.stringify({\n      items: [{ operation: 'upsert', key: options.key, value: options.url }],\n    }),\n    // Bounded so a hung Vercel API request can't keep `mastra build` open\n    // after the sandbox itself is already deployed.\n    signal: AbortSignal.timeout(30_000),\n  });\n\n  if (!res.ok) {\n    const body = await res.text().catch(() => '');\n    throw new Error(`Failed to update Edge Config alias \"${options.key}\" (${res.status}): ${body}`);\n  }\n}\n","import { execFile } from 'node:child_process';\nimport { createHash } from 'node:crypto';\nimport { existsSync } from 'node:fs';\nimport { mkdtemp, readFile, rm } from 'node:fs/promises';\nimport { tmpdir } from 'node:os';\nimport { join } from 'node:path';\nimport { promisify } from 'node:util';\nimport { supportsNetworking } from '@mastra/core/workspace';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport {\n  DEFAULT_PORT,\n  INSTALL_MARKER,\n  SERVER_LOGFILE,\n  SERVER_PIDFILE,\n  SERVER_SCRIPT,\n  getInfoSafe,\n  killPreviousServer,\n  launchServer,\n  resolveRemoteDir,\n  runInSandbox,\n  shellQuote,\n  tailServerLog,\n  waitForHealthy,\n} from './shared';\nimport type { DeployToSandboxOptions, SandboxDeployLogger, SandboxDeployment } from './types';\n\nconst execFileAsync = promisify(execFile);\n\nconst noopLogger: SandboxDeployLogger = {\n  debug: () => {},\n  info: () => {},\n  warn: () => {},\n  error: () => {},\n};\n\n/** Max shell-command payload per chunk for the base64 upload fallback. */\nconst UPLOAD_CHUNK_SIZE = 96_000;\n\n/**\n * Deploy a prebuilt Mastra server directory into any workspace sandbox that\n * supports networking. Provider-agnostic: only uses the core WorkspaceSandbox\n * contract (`executeCommand` + `networking`, with `writeFiles` / `processes`\n * as fast paths).\n */\nexport async function deployToSandbox(options: DeployToSandboxOptions): Promise<SandboxDeployment> {\n  const {\n    sandbox,\n    dir,\n    port = DEFAULT_PORT,\n    env = {},\n    studio = false,\n    healthCheckPath = '/api',\n    healthCheckTimeoutMs = 60_000,\n    healthCheckIntervalMs = 1_000,\n    installCommand = 'npm install --omit=dev',\n    logger = noopLogger,\n  } = options;\n\n  if (!existsSync(join(dir, 'index.mjs'))) {\n    throw new Error(`No index.mjs found in \"${dir}\" — did the build succeed?`);\n  }\n\n  // 1. Start (providers handle create-or-resume by identity, e.g. sandbox name).\n  logger.info(`Starting ${sandbox.provider} sandbox...`);\n  await sandbox.start?.();\n\n  if (!supportsNetworking(sandbox)) {\n    throw new Error(\n      `Sandbox provider \"${sandbox.provider}\" does not support networking (public port URLs), ` +\n        `which is required for sandbox deploys.`,\n    );\n  }\n  if (!sandbox.executeCommand) {\n    throw new Error(\n      `Sandbox provider \"${sandbox.provider}\" does not support executeCommand, which is required for sandbox deploys.`,\n    );\n  }\n\n  const url = await sandbox.networking.getPortUrl(port);\n  if (!url) {\n    throw new Error(\n      `Sandbox provider \"${sandbox.provider}\" did not expose a public URL for port ${port}. ` +\n        `Make sure the port is declared when constructing the sandbox (e.g. \\`ports: [${port}]\\`).`,\n    );\n  }\n\n  // Default the remote dir to $HOME/mastra-app — home directories persist\n  // across snapshot stop/resume (unlike /tmp), so wakes find the app intact.\n  const remoteDir = await resolveRemoteDir(sandbox, options.remoteDir);\n\n  const mergedEnv = { ...env };\n  if (studio && mergedEnv.MASTRA_STUDIO_PATH === undefined) {\n    mergedEnv.MASTRA_STUDIO_PATH = `${remoteDir}/studio`;\n  }\n\n  // 2. Upload the build output as a tarball and extract it in the sandbox.\n  logger.info(`Uploading build output from ${dir}...`);\n  const tarball = await createTarball(dir);\n  logger.debug(`Tarball size: ${(tarball.length / 1024 / 1024).toFixed(2)} MB`);\n\n  const remoteTarball = `${remoteDir}/.deploy.tgz`;\n  await runInSandbox(sandbox, `mkdir -p ${shellQuote(remoteDir)}`);\n  await uploadFile(sandbox, remoteTarball, tarball);\n\n  // Stop the previous server BEFORE extracting over the live directory so it\n  // can never serve a mix of old and new files while the release lands.\n  await killPreviousServer(sandbox, remoteDir);\n\n  await runInSandbox(sandbox, `cd ${shellQuote(remoteDir)} && tar -xzf .deploy.tgz && rm -f .deploy.tgz`, {\n    timeout: 120_000,\n  });\n\n  // 3. Install dependencies, skipped when the install inputs (package.json,\n  // bundled lockfiles, and the install command itself) are unchanged since\n  // the last completed install.\n  const installHash = await hashInstallInputs(dir, installCommand);\n  const marker = `${remoteDir}/${INSTALL_MARKER}`;\n  const markerCheck = await runInSandbox(sandbox, `cat ${shellQuote(marker)} 2>/dev/null || true`, {\n    allowFailure: true,\n  });\n\n  if (installHash && markerCheck.stdout.trim() === installHash) {\n    logger.info('Dependencies unchanged — skipping install.');\n  } else {\n    logger.info(`Installing dependencies (${installCommand})...`);\n    await runInSandbox(sandbox, `cd ${shellQuote(remoteDir)} && ${installCommand}`, {\n      timeout: 600_000,\n      label: `install dependencies (${installCommand})`,\n    });\n    if (installHash) {\n      await runInSandbox(sandbox, `printf '%s' ${shellQuote(installHash)} > ${shellQuote(marker)}`);\n    }\n  }\n\n  // 4. Write the launch script and start the new server (the previous one was\n  // stopped before extraction).\n  const launchScript = buildLaunchScript({ remoteDir, port, env: mergedEnv });\n  await uploadFile(sandbox, `${remoteDir}/${SERVER_SCRIPT}`, Buffer.from(launchScript));\n  await runInSandbox(sandbox, `chmod 700 ${shellQuote(`${remoteDir}/${SERVER_SCRIPT}`)}`);\n\n  logger.info('Starting Mastra server...');\n  await launchServer(sandbox, remoteDir);\n\n  // 5. Wait for the server to answer on its public URL.\n  const healthy = await waitForHealthy(url, {\n    path: healthCheckPath,\n    timeoutMs: healthCheckTimeoutMs,\n    intervalMs: healthCheckIntervalMs,\n  });\n  if (!healthy) {\n    const log = await tailServerLog(sandbox, remoteDir).catch(() => '');\n    throw new Error(\n      `Mastra server did not become healthy at ${url}${healthCheckPath} within ${healthCheckTimeoutMs}ms.` +\n        (log ? `\\n\\nServer log:\\n${log}` : '\\n\\n(no server log output captured)'),\n    );\n  }\n\n  const info = await getInfoSafe(sandbox);\n\n  return {\n    url,\n    sandboxId: info?.id ?? sandbox.id,\n    expiresAt: info?.timeoutAt,\n    stop: async () => {\n      await sandbox.stop?.();\n    },\n    destroy: async () => {\n      await sandbox.destroy?.();\n    },\n    logs: (lines?: number) => tailServerLog(sandbox, remoteDir, lines),\n  };\n}\n\n/**\n * Build the POSIX launch script. Re-running the script restarts the server —\n * the wake path uses this after a snapshot resume (which restores the\n * filesystem but not processes).\n */\nexport function buildLaunchScript(opts: { remoteDir: string; port: number; env: Record<string, string> }): string {\n  const lines = ['#!/bin/sh', `cd ${shellQuote(opts.remoteDir)}`];\n\n  // MASTRA_AUTO_DETECT_URL so Studio connects to the sandbox's public URL\n  // (same origin) instead of localhost:4111 — overridable. PORT and\n  // MASTRA_HOST are applied AFTER custom env: networking (`getPortUrl`) and\n  // health checks target the configured port, and the server must bind\n  // 0.0.0.0 to be reachable through the public port proxy. Change the port\n  // via the deploy `port` option, not env.\n  const env: Record<string, string> = {\n    MASTRA_AUTO_DETECT_URL: 'true',\n    ...opts.env,\n    PORT: String(opts.port),\n    MASTRA_HOST: '0.0.0.0',\n  };\n  for (const [key, value] of Object.entries(env)) {\n    if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key)) {\n      throw new Error(`Invalid environment variable name: \"${key}\"`);\n    }\n    lines.push(`export ${key}=${shellQuote(value)}`);\n  }\n\n  lines.push(`echo $$ > ${shellQuote(SERVER_PIDFILE)}`);\n  lines.push(`exec node index.mjs >> ${shellQuote(SERVER_LOGFILE)} 2>&1`);\n  return lines.join('\\n') + '\\n';\n}\n\n/** Create a gzipped tarball of the directory contents (excluding node_modules). */\nasync function createTarball(dir: string): Promise<Buffer> {\n  const tmp = await mkdtemp(join(tmpdir(), 'mastra-sandbox-'));\n  const tarPath = join(tmp, 'deploy.tgz');\n  try {\n    await execFileAsync('tar', ['-czf', tarPath, '--exclude=node_modules', '-C', dir, '.']);\n    return await readFile(tarPath);\n  } finally {\n    await rm(tmp, { recursive: true, force: true });\n  }\n}\n\n/**\n * Upload a file into the sandbox. Uses the provider's native `writeFiles` fast\n * path when available, otherwise falls back to base64 chunks over\n * `executeCommand` — so `executeCommand` + `networking` is the minimum contract.\n */\nasync function uploadFile(sandbox: WorkspaceSandbox, remotePath: string, content: Buffer): Promise<void> {\n  if (sandbox.writeFiles) {\n    await sandbox.writeFiles([{ path: remotePath, content }]);\n    return;\n  }\n\n  const b64 = content.toString('base64');\n  const tmpPath = `${remotePath}.b64`;\n  await runInSandbox(sandbox, `rm -f ${shellQuote(tmpPath)}`);\n  for (let i = 0; i < b64.length; i += UPLOAD_CHUNK_SIZE) {\n    const chunk = b64.slice(i, i + UPLOAD_CHUNK_SIZE);\n    await runInSandbox(sandbox, `printf '%s' ${shellQuote(chunk)} >> ${shellQuote(tmpPath)}`, {\n      label: `upload chunk to ${remotePath}`,\n    });\n  }\n  await runInSandbox(\n    sandbox,\n    `base64 -d ${shellQuote(tmpPath)} > ${shellQuote(remotePath)} && rm -f ${shellQuote(tmpPath)}`,\n    { label: `decode upload at ${remotePath}` },\n  );\n}\n\n/** Lockfiles that, when present in the build output, participate in the install-skip hash. */\nconst LOCKFILES = ['package-lock.json', 'npm-shrinkwrap.json', 'pnpm-lock.yaml', 'yarn.lock', 'bun.lock'];\n\n/**\n * Hash everything that determines the outcome of a dependency install:\n * package.json, any bundled lockfile, and the install command itself. A\n * matching hash means the previous `node_modules` can be reused.\n */\nasync function hashInstallInputs(dir: string, installCommand: string): Promise<string | null> {\n  const hash = createHash('sha256');\n  try {\n    hash.update(await readFile(join(dir, 'package.json')));\n  } catch {\n    return null;\n  }\n  for (const lockfile of LOCKFILES) {\n    let content: Buffer;\n    try {\n      content = await readFile(join(dir, lockfile));\n    } catch {\n      // Lockfile not part of the build output.\n      continue;\n    }\n    hash.update(lockfile).update(content);\n  }\n  hash.update(installCommand);\n  return hash.digest('hex');\n}\n","import { readFile, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { SandboxDeploymentManifest } from './types';\n\nexport const MANIFEST_FILENAME = 'sandbox-deployment.json';\n\n/** Write `sandbox-deployment.json` into the build output directory. */\nexport async function writeDeploymentManifest(outputDir: string, manifest: SandboxDeploymentManifest): Promise<void> {\n  await writeFile(join(outputDir, MANIFEST_FILENAME), JSON.stringify(manifest, null, 2));\n}\n\n/** Read `sandbox-deployment.json` from the build output directory, or null when absent. */\nexport async function readDeploymentManifest(outputDir: string): Promise<SandboxDeploymentManifest | null> {\n  let raw: string;\n  try {\n    raw = await readFile(join(outputDir, MANIFEST_FILENAME), 'utf-8');\n  } catch (error) {\n    // Only \"no manifest\" maps to null — anything else (permissions, a\n    // corrupted file, malformed JSON below) should surface, not be hidden.\n    if ((error as NodeJS.ErrnoException).code === 'ENOENT') {\n      return null;\n    }\n    throw error;\n  }\n  return JSON.parse(raw) as SandboxDeploymentManifest;\n}\n","import { access } from 'node:fs/promises';\nimport { dirname, join } from 'node:path';\nimport { fileURLToPath } from 'node:url';\nimport type { Config } from '@mastra/core/mastra';\nimport type { WorkspaceSandbox } from '@mastra/core/workspace';\nimport { Deployer } from '@mastra/deployer';\nimport { copy } from 'fs-extra/esm';\nimport { updateEdgeConfigAlias } from './alias';\nimport { deployToSandbox } from './engine';\nimport { writeDeploymentManifest } from './manifest';\nimport { DEFAULT_PORT } from './shared';\nimport type { SandboxDeployerOptions } from './types';\n\n/**\n * Deploy a full Mastra server into any workspace sandbox that supports\n * networking (Vercel Sandbox, E2B, ...) and get a live public URL.\n *\n * Positioning: ephemeral environments — instant previews, PR/CI smoke deploys,\n * agent-built-app verification. Not production hosting.\n *\n * @example\n * ```typescript\n * import { SandboxDeployer } from '@mastra/deployer-sandbox';\n * import { VercelSandbox } from '@mastra/vercel';\n *\n * export const mastra = new Mastra({\n *   deployer: new SandboxDeployer({\n *     sandbox: new VercelSandbox({ sandboxName: 'my-preview', timeout: 3_600_000, ports: [4111] }),\n *   }),\n * });\n * ```\n */\nexport class SandboxDeployer extends Deployer {\n  /** Sandbox deploys are push-style: `mastra build` runs `deploy()` after bundling. */\n  readonly deployOnBuild = true;\n  readonly sandbox: WorkspaceSandbox;\n  readonly port: number;\n  readonly studio: boolean;\n  /** Explicit remote dir, when configured. The engine defaults to `$HOME/mastra-app` inside the sandbox. */\n  readonly remoteDir?: string;\n  private readonly env: Record<string, string>;\n  private readonly alias?: SandboxDeployerOptions['alias'];\n  private readonly healthCheckTimeoutMs?: number;\n\n  constructor(options: SandboxDeployerOptions) {\n    super({ name: 'SANDBOX' });\n\n    this.sandbox = options.sandbox;\n    this.port = options.port ?? DEFAULT_PORT;\n    this.studio = options.studio ?? true;\n    this.remoteDir = options.remoteDir;\n    this.env = options.env ?? {};\n    this.alias = options.alias;\n    this.healthCheckTimeoutMs = options.healthCheckTimeoutMs;\n  }\n\n  /**\n   * Merge all existing env files instead of only the first one (base behavior).\n   * Later files win in `loadEnvVars()`, so order least → most specific: a\n   * `.env.local` written by `vercel env pull` shouldn't shadow the `.env` that\n   * holds the app's own keys.\n   */\n  override async getEnvFiles(): Promise<string[]> {\n    const candidates = ['.env', '.env.production', '.env.local'];\n    const existing: string[] = [];\n    for (const file of candidates) {\n      try {\n        await access(file);\n        existing.push(file);\n      } catch {\n        // skip missing files\n      }\n    }\n    return existing;\n  }\n\n  protected async getUserBundlerOptions(\n    mastraEntryFile: string,\n    outputDirectory: string,\n  ): Promise<NonNullable<Config['bundler']>> {\n    const bundlerOptions = await super.getUserBundlerOptions(mastraEntryFile, outputDirectory);\n\n    // Dependencies are installed inside the sandbox, so keep them external.\n    return {\n      ...bundlerOptions,\n      externals: true,\n    };\n  }\n\n  protected getEntry(): string {\n    return `\n    // @ts-expect-error\n    import { scoreTracesWorkflow } from '@mastra/core/evals/scoreTraces';\n    import { mastra } from '#mastra';\n    import { createNodeServer, getToolExports } from '#server';\n    import { tools } from '#tools';\n\n    // @ts-expect-error\n    await createNodeServer(mastra, { tools: getToolExports(tools), studio: ${this.studio} });\n\n    const storage = mastra.getStorage();\n    if (storage) {\n      if (!storage.disableInit) {\n        storage.init();\n      }\n      mastra.__registerInternalWorkflow(scoreTracesWorkflow);\n    }\n    `;\n  }\n\n  async prepare(outputDirectory: string): Promise<void> {\n    await super.prepare(outputDirectory);\n\n    if (this.studio) {\n      const __filename = fileURLToPath(import.meta.url);\n      const __dirname = dirname(__filename);\n\n      const studioSource = join(dirname(__dirname), 'dist', 'studio');\n      const studioServePath = join(outputDirectory, this.outputDir, 'studio');\n\n      try {\n        await copy(studioSource, studioServePath, { overwrite: true });\n      } catch (err) {\n        throw new Error(\n          `Failed to copy studio assets from \"${studioSource}\" to \"${studioServePath}\": ${err instanceof Error ? err.message : err}`,\n        );\n      }\n    }\n  }\n\n  async bundle(\n    entryFile: string,\n    outputDirectory: string,\n    { toolsPaths, projectRoot }: { toolsPaths: (string | string[])[]; projectRoot: string },\n  ): Promise<void> {\n    return this._bundle(this.getEntry(), entryFile, { outputDirectory, projectRoot }, toolsPaths);\n  }\n\n  /**\n   * Deploy the built output into the sandbox and wait for the server to come\n   * up on its public URL. Writes `sandbox-deployment.json` into the output\n   * directory and updates the Edge Config alias when configured.\n   */\n  async deploy(outputDirectory: string): Promise<void> {\n    const dir = join(outputDirectory, this.outputDir);\n\n    // Merge .env file vars under explicitly configured env.\n    const envVars = await this.loadEnvVars();\n    const env: Record<string, string> = { ...Object.fromEntries(envVars), ...this.env };\n    if (envVars.size > 0) {\n      this.logger.warn(\n        'Environment variables from your .env file are injected into the remote sandbox. ' +\n          'Anyone with access to the sandbox can read them.',\n      );\n    }\n\n    const deployment = await deployToSandbox({\n      sandbox: this.sandbox,\n      dir,\n      port: this.port,\n      env,\n      studio: this.studio,\n      remoteDir: this.remoteDir,\n      healthCheckTimeoutMs: this.healthCheckTimeoutMs,\n      logger: this.logger,\n    });\n\n    await writeDeploymentManifest(dir, {\n      provider: this.sandbox.provider,\n      sandboxId: deployment.sandboxId,\n      url: deployment.url,\n      port: this.port,\n      deployedAt: new Date().toISOString(),\n      expiresAt: deployment.expiresAt?.toISOString(),\n    });\n\n    if (this.alias) {\n      await updateEdgeConfigAlias({ ...this.alias, url: deployment.url });\n      this.logger.info(`Edge Config alias \"${this.alias.key}\" now points at ${deployment.url}`);\n    }\n\n    this.logger.info(`Mastra server deployed: ${deployment.url}/api`);\n    if (this.studio) {\n      this.logger.info(`Studio: ${deployment.url}`);\n    }\n    if (deployment.expiresAt) {\n      this.logger.warn(`Sandbox expires at ${deployment.expiresAt.toISOString()} (provider runtime cap).`);\n    }\n  }\n}\n"]}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export { SandboxDeployer } from './deployer.js';
+export { deployToSandbox, buildLaunchScript } from './engine.js';
+export { updateEdgeConfigAlias } from './alias.js';
+export { readDeploymentManifest, writeDeploymentManifest, MANIFEST_FILENAME } from './manifest.js';
+export type { SandboxAliasOptions, SandboxDeployerOptions, SandboxDeployLogger, SandboxDeployment, SandboxDeploymentManifest, DeployToSandboxOptions, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAChG,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,mBAAmB,EACnB,iBAAiB,EACjB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,SAAS,CAAC"}