@multiplayer-app/sandbox 7.0.1 → 7.0.3

package/dist/microvm-guest-agents.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Guest-agent source for each stack's Lambda MicroVM base image, as a set of in-memory files
+ * (zipped and uploaded by microvm-images.ts — no disk/build step needed).
+ *
+ * Kept in sync BY HAND with scripts/base-images/{node,python,static}/build.sh, which the
+ * internal build-base-images.sh pipeline still uses for QEMU/Firecracker/Docker images (those
+ * need a real build host, so unifying the two isn't in scope here) — if you change one, change
+ * the other. The agent itself: an HTTP server on :8080 that answers the Lambda MicroVM
+ * lifecycle hooks (/aws/lambda-microvms/runtime/v1/*) and {"status":"ok"} elsewhere. The /run
+ * hook payload (vmId/sessionId/stack/env from the worker executor) is kept in memory and
+ * echoed back so the control plane can identify the VM.
+ */
+export declare const MICROVM_BASE_IMAGE_STACKS: readonly ["node", "python", "static"];
+export type MicrovmBaseImageStack = (typeof MICROVM_BASE_IMAGE_STACKS)[number];
+export declare function isMicrovmBaseImageStack(stack: string): stack is MicrovmBaseImageStack;
+/** Files to zip for `stack`'s base image, relative paths -> contents. */
+export declare function guestAgentFiles(stack: MicrovmBaseImageStack): Record<string, string>;
+//# sourceMappingURL=microvm-guest-agents.d.ts.map

package/dist/microvm-guest-agents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"microvm-guest-agents.d.ts","sourceRoot":"","sources":["../src/microvm-guest-agents.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,eAAO,MAAM,yBAAyB,uCAAwC,CAAA;AAC9E,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAA;AAE9E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,qBAAqB,CAErF;AAoRD,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASpF"}

package/dist/microvm-images.d.ts

@@ -0,0 +1,37 @@
+import { type MicrovmBaseImageStack } from './microvm-guest-agents';
+export interface CreateMicrovmImagesOptions {
+    region: string;
+    /** S3 bucket the built code artifact is uploaded to (must already exist). */
+    bucket: string;
+    /** AWS-managed base OS image ARN — discover one with listBaseMicrovmImages(). */
+    baseImageArn: string;
+    /** IAM role ARN the build assumes to read the artifact from `bucket` (needs s3:GetObject). */
+    buildRoleArn: string;
+    /** Stacks to build/register (default: all of MICROVM_BASE_IMAGE_STACKS). */
+    stacks?: MicrovmBaseImageStack[];
+    /** Minimum guest memory, MiB (default: 1024). */
+    minMemoryMib?: number;
+    /** MicroVM image name prefix, "<prefix>-<stack>" (default: 'sandbox'). */
+    imageNamePrefix?: string;
+    /** Image-build poll interval, ms (default: 5000). */
+    pollIntervalMs?: number;
+    /** Image-build poll timeout, ms (default: 600000 = 10 min). */
+    pollTimeoutMs?: number;
+    /** Called after each step so callers (CLI, CI) can report progress. Optional. */
+    onProgress?: (message: string) => void;
+}
+export interface CreateMicrovmImagesResult {
+    /** stack -> the image ARN that's now active, ready to use as MICROVM_STACK_IMAGE_ARNS. */
+    stackArns: Record<string, string>;
+}
+/** AWS-managed base OS images available as a `baseImageArn` candidate in this region. */
+export declare function listBaseMicrovmImages(options: {
+    region: string;
+}): Promise<string[]>;
+/**
+ * Builds and registers/updates the guest-agent base images for `options.stacks`, in the
+ * caller's own AWS account. Returns the stack -> image ARN map once every image's new version
+ * has finished building (polled).
+ */
+export declare function createMicrovmImages(options: CreateMicrovmImagesOptions): Promise<CreateMicrovmImagesResult>;
+//# sourceMappingURL=microvm-images.d.ts.map

package/dist/microvm-images.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"microvm-images.d.ts","sourceRoot":"","sources":["../src/microvm-images.ts"],"names":[],"mappings":"AAuBA,OAAO,EAIL,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAA;AAE/B,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAA;IACd,iFAAiF;IACjF,YAAY,EAAE,MAAM,CAAA;IACpB,8FAA8F;IAC9F,YAAY,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAA;IAChC,iDAAiD;IACjD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,0EAA0E;IAC1E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,qDAAqD;IACrD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,iFAAiF;IACjF,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,0FAA0F;IAC1F,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAqCD,yFAAyF;AACzF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAI1F;AAyCD;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,0BAA0B,GAClC,OAAO,CAAC,yBAAyB,CAAC,CA+EpC"}

package/dist/services/serial-relay.d.ts

@@ -6,11 +6,22 @@ export declare class SerialRelay {
     private readonly source;
     private readonly socket;
     private conn;
+    private webSocket;
+    private reconnectTimer;
+    private connecting;
+    private browserCount;
+    private pendingInput;
+    private destroyed;
     private inputHandler;
+    private attachHandler;
+    private detachHandler;
     constructor(vmId: string, source: SerialSource, socket: Socket);
     connect(): void;
     private connectTcp;
     private connectPipe;
+    private connectWebSocket;
+    private scheduleWebSocketReconnect;
+    private disconnectWebSocket;
     destroy(): void;
 }
 //# sourceMappingURL=serial-relay.d.ts.map

package/dist/services/serial-relay.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serial-relay.d.ts","sourceRoot":"","sources":["../../src/services/serial-relay.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAG9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD,oEAAoE;AACpE,qBAAa,WAAW;IAKpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IANzB,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,YAAY,CAAmD;gBAGpD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,MAAM;IAGjC,OAAO,IAAI,IAAI;IAmBf,OAAO,CAAC,UAAU;IAkBlB,OAAO,CAAC,WAAW;IAUnB,OAAO,IAAI,IAAI;CAQhB"}
+{"version":3,"file":"serial-relay.d.ts","sourceRoot":"","sources":["../../src/services/serial-relay.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAI9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAErD,oEAAoE;AACpE,qBAAa,WAAW;IAapB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAdzB,OAAO,CAAC,IAAI,CAA0B;IACtC,OAAO,CAAC,SAAS,CAAyB;IAC1C,OAAO,CAAC,cAAc,CAA8B;IACpD,OAAO,CAAC,UAAU,CAAQ;IAC1B,OAAO,CAAC,YAAY,CAAI;IACxB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,SAAS,CAAQ;IACzB,OAAO,CAAC,YAAY,CAAmD;IACvE,OAAO,CAAC,aAAa,CAA+C;IACpE,OAAO,CAAC,aAAa,CAA+C;gBAGjD,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,MAAM;IAGjC,OAAO,IAAI,IAAI;IA8Cf,OAAO,CAAC,UAAU;IAoBlB,OAAO,CAAC,WAAW;YAUL,gBAAgB;IA8C9B,OAAO,CAAC,0BAA0B;IAQlC,OAAO,CAAC,mBAAmB;IAS3B,OAAO,IAAI,IAAI;CAYhB"}

package/dist/socket-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"socket-client.d.ts","sourceRoot":"","sources":["../src/socket-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAM,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAYlD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,OAAO,KAAK,EAAE,mBAAmB,EAAU,MAAM,YAAY,CAAA;AAsH7D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CA6F5F"}
+{"version":3,"file":"socket-client.d.ts","sourceRoot":"","sources":["../src/socket-client.ts"],"names":[],"mappings":"AACA,OAAO,EAAM,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAalD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,OAAO,KAAK,EAAE,mBAAmB,EAAU,MAAM,YAAY,CAAA;AAoJ7D,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CA2J5F"}

package/dist/vendor/builder-types/events.d.ts

@@ -3,6 +3,8 @@ import type { VmAction, VmRunResult } from './vm';
 export declare const WorkerEvent: {
     readonly HEARTBEAT: "worker:heartbeat";
     readonly VM_RUN_EXITED: "vm:run-exited";
+    readonly VM_CREATE_RESULT: "vm:create-result";
+    readonly VM_EXTERNALLY_TERMINATED: "vm:externally-terminated";
     readonly ASSIGNED_ID: "worker:assigned-id";
     readonly REATTACH: "worker:reattach";
     readonly VM_CREATE: "vm:create";
@@ -20,6 +22,8 @@ export declare const WorkerEvent: {
     readonly TERMINAL_DATA: "terminal:data";
     readonly VNC_MOUSE: "vnc:mouse";
     readonly VNC_KEYBOARD: "vnc:keyboard";
+    readonly TERMINAL_ATTACH: "terminal:attach";
+    readonly TERMINAL_DETACH: "terminal:detach";
     readonly TERMINAL_INPUT: "terminal:input";
 };
 export type WorkerEventName = (typeof WorkerEvent)[keyof typeof WorkerEvent];
@@ -82,4 +86,10 @@ export interface TerminalInputPayload {
 export interface VmRunExitedPayload extends VmRunResult {
     vmId: string;
 }
+export interface VmCreateResultPayload {
+    vmId: string;
+    ok: boolean;
+    metadata?: Record<string, unknown>;
+    error?: string;
+}
 //# sourceMappingURL=events.d.ts.map

package/dist/vendor/builder-types/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,MAAM,CAAA;AAIjD,wGAAwG;AACxG,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;CA0Cd,CAAA;AAEV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAE5E,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAKrD,CAAA;AAID,sFAAsF;AACtF,eAAO,MAAM,YAAY;;;;;;;;CAaf,CAAA;AAIV,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,GAAG,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,IAAI,EAAE,MAAM,CAAA;CACb"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,MAAM,CAAA;AAIjD,wGAAwG;AACxG,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;CAsDd,CAAA;AAEV,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAA;AAE5E,uDAAuD;AACvD,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAKrD,CAAA;AAID,sFAAsF;AACtF,eAAO,MAAM,YAAY;;;;;;;;CAaf,CAAA;AAIV,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,KAAK,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,GAAG,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,CAAC,EAAE,MAAM,CAAA;IACT,CAAC,EAAE,MAAM,CAAA;IACT,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,OAAO,CAAA;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,OAAO,CAAA;IACX,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,KAAK,CAAC,EAAE,MAAM,CAAA;CACf"}

package/dist/vendor/builder-types/index.d.ts

@@ -5,6 +5,7 @@ export type HealthStatus = {
 };
 export * from './worker';
 export * from './vm';
+export * from './vm-cost';
 export * from './deployment';
 export * from './access';
 export * from './events';

package/dist/vendor/builder-types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,cAAc,UAAU,CAAA;AACxB,cAAc,MAAM,CAAA;AACpB,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAA;IACX,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;CAClB,CAAA;AAED,cAAc,UAAU,CAAA;AACxB,cAAc,MAAM,CAAA;AACpB,cAAc,WAAW,CAAA;AACzB,cAAc,cAAc,CAAA;AAC5B,cAAc,UAAU,CAAA;AACxB,cAAc,UAAU,CAAA;AACxB,cAAc,WAAW,CAAA"}

package/dist/vendor/builder-types/release.d.ts

@@ -7,14 +7,14 @@ import type { GatewayAccessConfig } from './access';
  */
 export interface ReleaseRecord {
     releaseId: string;
-    tenantId: string;
+    accountId: string;
     name: string;
     stack: VmStack;
     /** Object key of the artifact zip inside the releases bucket. */
     artifactKey: string;
     /**
      * True once the artifact has been extracted into individual objects under
-     * releasePrefix(tenantId, releaseId) — only meaningful for stack "static", where the
+     * releasePrefix(accountId, releaseId) — only meaningful for stack "static", where the
      * gateway serves those objects directly, with no VM involved.
      */
     published: boolean;
@@ -25,7 +25,7 @@ export interface ReleaseRecord {
     updatedAt: string;
 }
 /** S3 object key for a release archive. S3 keys intentionally do not start with "/". */
-export declare function releaseArtifactKey(tenantId: string, releaseId: string): string;
+export declare function releaseArtifactKey(accountId: string, releaseId: string): string;
 export interface ReleaseCreateRequest {
     name: string;
     stack: VmStack;
@@ -41,11 +41,11 @@ export interface ReleaseCreateResponse {
     uploadUrl?: string;
 }
 /** S3 key prefix (no trailing slash) shared by a release archive and its extracted files. */
-export declare function releasePrefix(tenantId: string, releaseId: string): string;
+export declare function releasePrefix(accountId: string, releaseId: string): string;
 export declare const RELEASE_REDIS_KEY_PREFIX = "release:";
 /** Mirrored into Redis on publish so the gateway can serve static releases without touching Mongo. */
 export interface ReleaseRegistryEntry {
-    tenantId: string;
+    accountId: string;
     stack: VmStack;
     published: boolean;
     access?: GatewayAccessConfig;

package/dist/vendor/builder-types/release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../src/release.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAEnD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE9E;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAA;IACtB,+FAA+F;IAC/F,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,eAAO,MAAM,wBAAwB,aAAa,CAAA;AAElD,sGAAsG;AACtG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B"}
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../src/release.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAEnD;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE/E;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,OAAO,CAAA;IACd,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAA;IACtB,+FAA+F;IAC/F,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,6FAA6F;AAC7F,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAE1E;AAED,eAAO,MAAM,wBAAwB,aAAa,CAAA;AAElD,sGAAsG;AACtG,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,OAAO,CAAA;IAClB,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B"}

package/dist/vendor/builder-types/vm-cost.d.ts

@@ -0,0 +1,88 @@
+import type { VmEngine, VmResources, VmState } from './vm';
+/**
+ * Per-second compute rates plus (where applicable) snapshot storage/operation rates. Only
+ * lambda-microvm and fargate have real, metered AWS pricing — everything else runs on
+ * self-hosted hardware with no per-VM AWS bill. Their rates below are a nominal, clearly
+ * NOT-billing-grade estimate (~$0.02/vCPU-hr, ~$0.005/GB-hr, a rough amortized-hardware
+ * guess) purely so every VM has some comparable cost figure, not a real invoice input.
+ */
+export interface VmCostRates {
+    vcpuPerSecond: number;
+    gbPerSecond: number;
+    /** Storage cost while suspended (state preserved). Lambda MicroVM only. */
+    snapshotGbMonth?: number;
+    /** One-time cost per resume (snapshot read). Lambda MicroVM only. */
+    snapshotReadPerGb?: number;
+    /** One-time cost per suspend (snapshot write). Lambda MicroVM only. */
+    snapshotWritePerGb?: number;
+}
+/**
+ * Sourced from AWS's published pricing (see aws.amazon.com/lambda/pricing and
+ * aws.amazon.com/fargate/pricing, checked 2026-09) for us-east-1 ARM/Graviton — matches
+ * this repo's base images (see scripts/base-images, built for aarch64).
+ */
+export declare const VM_ENGINE_COST_RATES: Record<VmEngine, VmCostRates>;
+export declare function costRatesFor(engine: VmEngine | undefined): VmCostRates;
+/** Compute cost for `seconds` spent actively running, at this engine's baseline resources. */
+export declare function estimateComputeCostUsd(engine: VmEngine | undefined, resources: {
+    vcpuCount: number;
+    memMib: number;
+}, seconds: number): number;
+/** Storage-only cost for `seconds` spent suspended (state preserved, no compute billed). */
+export declare function estimateSuspendedStorageCostUsd(engine: VmEngine | undefined, resources: {
+    memMib: number;
+}, seconds: number): number;
+/** One-time cost of a single suspend (snapshot write). $0 for engines with no snapshot billing. */
+export declare function estimateSuspendOpCostUsd(engine: VmEngine | undefined, resources: {
+    memMib: number;
+}): number;
+/** One-time cost of a single resume (snapshot read). $0 for engines with no snapshot billing. */
+export declare function estimateResumeOpCostUsd(engine: VmEngine | undefined, resources: {
+    memMib: number;
+}): number;
+/** Cumulative usage/cost tracking on a VM or deployment record, updated on every state transition. */
+export interface VmUsage {
+    /** Total seconds spent actively 'running' (billable compute) across this VM's lifetime. */
+    runningSeconds: number;
+    /** Total seconds spent 'paused'/'stopped' (suspended — near-zero cost, tracked for completeness). */
+    suspendedSeconds: number;
+    /** Number of pause/suspend transitions — lambda-microvm bills a per-GB snapshot-write fee per suspend. */
+    suspendCount: number;
+    /** Number of resume transitions — lambda-microvm bills a per-GB snapshot-read fee per resume. */
+    resumeCount: number;
+    /** Wall-clock time of the last accrual — the next one adds the interval since this. */
+    lastTransitionAt: string;
+    /**
+     * Running total in USD. Billing-accurate for lambda-microvm; a rough, clearly-labeled
+     * estimate for every other engine (see VM_ENGINE_COST_RATES).
+     */
+    estimatedCostUsd: number;
+}
+export declare function initialUsage(at?: Date): VmUsage;
+/**
+ * Closes out the interval since `record.usage.lastTransitionAt` under `record.state` (the
+ * state being LEFT), attributes its cost, then folds in any one-time suspend/resume
+ * operation cost triggered by the transition to `newState`. Call this with the record's
+ * state BEFORE persisting `newState` — it reads what's being left, not what's being entered.
+ */
+export declare function accrueUsage(record: {
+    engine?: VmEngine;
+    resources: VmResources;
+    state: VmState;
+    usage?: VmUsage;
+}, newState: VmState, now?: Date): VmUsage;
+/**
+ * Live cost as of right now — NOT persisted, compute at read/response time only (same
+ * pattern as vm.service.ts's withVmUrl: derived, never stored). The stored `usage` is only
+ * a checkpoint as of the last state transition, so a VM that's been running continuously
+ * for hours without pausing would otherwise show a frozen, understated cost until its next
+ * transition. Passing `record.state` as both the leaving and entering state accrues the
+ * elapsed interval without triggering a (spurious) one-time suspend/resume fee.
+ */
+export declare function currentUsage(record: {
+    engine?: VmEngine;
+    resources: VmResources;
+    state: VmState;
+    usage?: VmUsage;
+}, now?: Date): VmUsage;
+//# sourceMappingURL=vm-cost.d.ts.map

package/dist/vendor/builder-types/vm-cost.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vm-cost.d.ts","sourceRoot":"","sources":["../src/vm-cost.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAE1D;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,CAAA;IACnB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAQD;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAmB9D,CAAA;AAMD,wBAAgB,YAAY,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAEtE;AAED,8FAA8F;AAC9F,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,QAAQ,GAAG,SAAS,EAC5B,SAAS,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAChD,OAAO,EAAE,MAAM,GACd,MAAM,CAMR;AAED,4FAA4F;AAC5F,wBAAgB,+BAA+B,CAC7C,MAAM,EAAE,QAAQ,GAAG,SAAS,EAC5B,SAAS,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,EAC7B,OAAO,EAAE,MAAM,GACd,MAAM,CAMR;AAED,mGAAmG;AACnG,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,QAAQ,GAAG,SAAS,EAC5B,SAAS,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5B,MAAM,CAGR;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,QAAQ,GAAG,SAAS,EAC5B,SAAS,EAAE;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5B,MAAM,CAGR;AAED,sGAAsG;AACtG,MAAM,WAAW,OAAO;IACtB,2FAA2F;IAC3F,cAAc,EAAE,MAAM,CAAA;IACtB,qGAAqG;IACrG,gBAAgB,EAAE,MAAM,CAAA;IACxB,0GAA0G;IAC1G,YAAY,EAAE,MAAM,CAAA;IACpB,iGAAiG;IACjG,WAAW,EAAE,MAAM,CAAA;IACnB,uFAAuF;IACvF,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED,wBAAgB,YAAY,CAAC,EAAE,GAAE,IAAiB,GAAG,OAAO,CAS3D;AAUD;;;;;GAKG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACtF,QAAQ,EAAE,OAAO,EACjB,GAAG,GAAE,IAAiB,GACrB,OAAO,CAyCT;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE;IAAE,MAAM,CAAC,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,EACtF,GAAG,GAAE,IAAiB,GACrB,OAAO,CAET"}

package/dist/vendor/builder-types/vm.d.ts

@@ -1,4 +1,5 @@
 import type { GatewayAccessConfig } from './access';
+import type { VmUsage } from './vm-cost';
 export declare const VM_STACKS: readonly ["generic", "node", "python", "static"];
 export type VmStack = (typeof VM_STACKS)[number];
 export declare const VM_ENGINES: readonly ["mock", "qemu", "firecracker", "docker", "docker-sandbox", "remote", "lambda-microvm", "fargate"];
@@ -19,6 +20,8 @@ export interface VmResources {
 }
 export interface VmRecord {
     vmId: string;
+    /** Account that created this VM — same convention as ReleaseRecord.accountId (req.accountId, never client-supplied). */
+    accountId: string;
     /** Builder session this VM belongs to; optional for VMs not tied to a session. */
     sessionId?: string;
     workerId: string;
@@ -43,6 +46,8 @@ export interface VmRecord {
      * never interprets it — only the executor that created it knows the shape.
      */
     runtimeMetadata?: Record<string, unknown>;
+    /** Cumulative running-time/cost tracking, updated on every state transition. See vm-cost.ts. */
+    usage?: VmUsage;
     createdAt: string;
     updatedAt: string;
 }

package/dist/vendor/builder-types/vm.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"vm.d.ts","sourceRoot":"","sources":["../src/vm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAEnD,eAAO,MAAM,SAAS,kDAAmD,CAAA;AACzE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;AAEhD,eAAO,MAAM,UAAU,6GASb,CAAA;AACV,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAElD,yGAAyG;AACzG,eAAO,MAAM,YAAY,6BAA8B,CAAA;AACvD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAErD,MAAM,MAAM,OAAO,GACf,UAAU,GACV,SAAS,GACT,SAAS,GACT,QAAQ,GACR,UAAU,GACV,UAAU,GACV,SAAS,GACT,WAAW,GACX,YAAY,GACZ,OAAO;AACT,uEAAuE;GACrE,WAAW;AACb,gHAAgH;GAC9G,WAAW,CAAA;AAEf,eAAO,MAAM,UAAU,iDAAkD,CAAA;AACzE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAElD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,wFAAwF;IACxF,MAAM,CAAC,EAAE,QAAQ,CAAA;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B,SAAS,EAAE,WAAW,CAAA;IACtB,KAAK,EAAE,OAAO,CAAA;IACd,yFAAyF;IACzF,OAAO,EAAE,SAAS,CAAA;IAClB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,OAAO,CAAA;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,QAAQ,CAAA;IACjB,0GAA0G;IAC1G,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kGAAkG;IAClG,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAA;IAClB,uDAAuD;IACvD,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAChD;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,aAAa;IAC5D,MAAM,CAAC,EAAE,CAAC,CAAA;CACX;AAED,eAAO,MAAM,mBAAmB,QAAQ,CAAA;AAExC,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B"}
+{"version":3,"file":"vm.d.ts","sourceRoot":"","sources":["../src/vm.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AACnD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAExC,eAAO,MAAM,SAAS,kDAAmD,CAAA;AACzE,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,CAAC,CAAC,MAAM,CAAC,CAAA;AAEhD,eAAO,MAAM,UAAU,6GASb,CAAA;AACV,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAElD,yGAAyG;AACzG,eAAO,MAAM,YAAY,6BAA8B,CAAA;AACvD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;AAErD,MAAM,MAAM,OAAO,GACf,UAAU,GACV,SAAS,GACT,SAAS,GACT,QAAQ,GACR,UAAU,GACV,UAAU,GACV,SAAS,GACT,WAAW,GACX,YAAY,GACZ,OAAO;AACT,uEAAuE;GACrE,WAAW;AACb,gHAAgH;GAC9G,WAAW,CAAA;AAEf,eAAO,MAAM,UAAU,iDAAkD,CAAA;AACzE,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAA;AAElD,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,wHAAwH;IACxH,SAAS,EAAE,MAAM,CAAA;IACjB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,wFAAwF;IACxF,MAAM,CAAC,EAAE,QAAQ,CAAA;IACjB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4EAA4E;IAC5E,MAAM,CAAC,EAAE,mBAAmB,CAAA;IAC5B,SAAS,EAAE,WAAW,CAAA;IACtB,KAAK,EAAE,OAAO,CAAA;IACd,yFAAyF;IACzF,OAAO,EAAE,SAAS,CAAA;IAClB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,qFAAqF;IACrF,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACzC,gGAAgG;IAChG,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,OAAO,CAAA;IACd,oFAAoF;IACpF,MAAM,CAAC,EAAE,QAAQ,CAAA;IACjB,0GAA0G;IAC1G,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kGAAkG;IAClG,OAAO,CAAC,EAAE,SAAS,CAAA;IACnB,6DAA6D;IAC7D,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,SAAS,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,sDAAsD;IACtD,OAAO,EAAE,MAAM,CAAA;IACf,2DAA2D;IAC3D,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAA;IAClB,uDAAuD;IACvD,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,gEAAgE;AAChE,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,qEAAqE;IACrE,SAAS,EAAE,OAAO,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAA;IACf,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAA;CAC7B;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAChD;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAA;IACX,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO,CAAE,SAAQ,aAAa;IAC5D,MAAM,CAAC,EAAE,CAAC,CAAA;CACX;AAED,eAAO,MAAM,mBAAmB,QAAQ,CAAA;AAExC,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,OAAO,CAAA;IACd,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B"}

package/dist/worker-identity.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Reads back the gateway-assigned runtime routing ID (WorkerEvent.ASSIGNED_ID) this
+ * process persisted on a previous boot, if any — lets a restarted worker present the same
+ * identity it had before, so REATTACH's `findByWorkerId` still finds its VMs. Missing file,
+ * unreadable, or empty all just mean "no prior identity" (first boot, fresh volume, etc.) —
+ * not an error; the worker falls back to letting the gateway mint a new one, same as today.
+ */
+export declare function loadPersistedWorkerId(filePath: string): string | undefined;
+/** Best-effort — a failed write only costs the next restart's reattach, not this session. */
+export declare function savePersistedWorkerId(filePath: string, workerId: string): void;
+//# sourceMappingURL=worker-identity.d.ts.map

package/dist/worker-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-identity.d.ts","sourceRoot":"","sources":["../src/worker-identity.ts"],"names":[],"mappings":"AAIA;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAO1E;AAED,6FAA6F;AAC7F,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAU9E"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplayer-app/sandbox",
-  "version": "7.0.1",
+  "version": "7.0.3",
   "description": "Sandbox worker library and CLI (Docker, QEMU, Firecracker, AWS Lambda MicroVM, Fargate)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -26,14 +26,18 @@
     "@aws-sdk/client-ecs": "^3.1087.0",
     "@aws-sdk/client-lambda-microvms": "^3.1079.0",
     "@aws-sdk/client-s3": "^3.1079.0",
+    "archiver": "^8.0.0",
     "bunyan": "1.8.15",
     "commander": "^14.0.0",
     "dotenv": "^17.2.3",
     "rfb2": "^0.2.2",
-    "socket.io-client": "4.8.3"
+    "socket.io-client": "4.8.3",
+    "ws": "^8.18.3"
   },
   "devDependencies": {
+    "@types/archiver": "^8.0.0",
     "@types/node": "^25.8.0",
+    "@types/ws": "^8.18.1",
     "esbuild": "^0.25.12",
     "nodemon": "3.1.14",
     "typescript": "^6.0.3",