@open-everywhere/adapters 0.1.0

package/dist/agent/sandbox/extend-workspace-time.d.ts

@@ -0,0 +1,31 @@
+/** Per-call cap on the extension, in minutes — the `sandbox.extendMaxMinutes` setting
+ *  (OPE-371), with `sandbox.extendMaxMinutes` as its declared ops override. */
+export declare function maxExtendMinutes(): number;
+/** Injected SDK surface, so the logic is testable without Vercel credentials. */
+export interface ExtendDeps {
+    list(sessionId: string): Promise<Array<{
+        name: string;
+        status: string;
+    }>>;
+    extend(name: string, ms: number): Promise<void>;
+}
+/**
+ * Extend every RUNNING sandbox tagged with this session by `minutes` (clamped to the
+ * cap). A stopped/absent sandbox needs no extension — its next boot gets a full fresh
+ * window — so that case reports rather than errors.
+ */
+export declare function extendSessionSandboxes(sessionId: string, minutes: number, deps?: ExtendDeps): Promise<{
+    extended: string[];
+    clampedTo: number;
+}>;
+declare const _default: import("eve/tools").ToolDefinition<{
+    minutes: number;
+    reason?: string | undefined;
+}, string> & {
+    execute(input: {
+        minutes: number;
+        reason?: string | undefined;
+    }, ctx: import("eve/tools").ToolContext): Promise<string>;
+};
+export default _default;
+//# sourceMappingURL=extend-workspace-time.d.ts.map

package/dist/agent/sandbox/extend-workspace-time.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"extend-workspace-time.d.ts","sourceRoot":"","sources":["../../../agent/sandbox/extend-workspace-time.ts"],"names":[],"mappings":"AAUA;+EAC+E;AAC/E,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC;AAED,iFAAiF;AACjF,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAWD;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE,UAAoB,GACzB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CASpD"}

package/dist/agent/sandbox/extend-workspace-time.js

@@ -0,0 +1,63 @@
+// `extend_workspace_time` — lengthen the sandbox session's FIXED fuse before a long command. It extends
+// BLIND (no remaining-time reading exists), is capped and audited, and plan ceilings still apply upstream.
+import { defineTool } from "eve/tools";
+import { z } from "zod";
+import { Sandbox } from "@vercel/sandbox";
+import { auditToolAction, getSettings } from "@open-everywhere/core/agent/adapter-api.js";
+import { shouldStop } from "./vercel-lifecycle.js";
+import { vercelStopper } from "./backend-stop.js";
+/** Per-call cap on the extension, in minutes — the `sandbox.extendMaxMinutes` setting
+ *  (OPE-371), with `sandbox.extendMaxMinutes` as its declared ops override. */
+export function maxExtendMinutes() {
+    return getSettings().sandbox.extendMaxMinutes;
+}
+// The list is `vercelStopper.list` — the same tag-index-plus-id-record lookup the stop hook uses — rather
+// than a second, independent `Sandbox.list({tags})` call.
+const sdkDeps = {
+    list: vercelStopper.list,
+    async extend(name, ms) {
+        await (await Sandbox.get({ name })).extendTimeout(ms);
+    },
+};
+/**
+ * Extend every RUNNING sandbox tagged with this session by `minutes` (clamped to the
+ * cap). A stopped/absent sandbox needs no extension — its next boot gets a full fresh
+ * window — so that case reports rather than errors.
+ */
+export async function extendSessionSandboxes(sessionId, minutes, deps = sdkDeps) {
+    const clampedTo = Math.min(Math.max(1, Math.floor(minutes)), maxExtendMinutes());
+    const extended = [];
+    for (const s of await deps.list(sessionId)) {
+        if (!shouldStop(s.status))
+            continue; // same "is the VM up" predicate as the stop hook
+        await deps.extend(s.name, clampedTo * 60_000);
+        extended.push(s.name);
+    }
+    return { extended, clampedTo };
+}
+export default defineTool({
+    description: "Extend your workspace VM's lifetime by N minutes. Call this BEFORE starting a long-running command " +
+        "(a big install, build, or a test run you expect to take more than ~10 minutes): the workspace has a " +
+        "fixed time window and a command still running when it expires is killed. There is no visible countdown, " +
+        "so extend by roughly the time the upcoming work needs. If no VM is currently running, nothing needs " +
+        "extending — your next command boots a fresh one with a full window.",
+    inputSchema: z.object({
+        minutes: z.number().int().min(1).describe("How many extra minutes the upcoming work needs."),
+        reason: z.string().optional().describe("What the time is for (goes to the audit log)."),
+    }),
+    async execute(input, ctx) {
+        const { extended, clampedTo } = await extendSessionSandboxes(ctx.session.id, input.minutes);
+        await auditToolAction(ctx, "sandbox.extend", {
+            minutes: clampedTo,
+            requested: input.minutes,
+            extended,
+            ...(input.reason ? { reason: input.reason } : {}),
+        });
+        if (extended.length === 0) {
+            return "No workspace VM is currently running — nothing to extend. Your next command boots a fresh session with a full time window, so just proceed.";
+        }
+        const clampNote = clampedTo !== input.minutes ? ` (requested ${input.minutes}, capped at ${clampedTo} by sandbox.extendMaxMinutes)` : "";
+        return `Extended the workspace lifetime by ${clampedTo} minutes${clampNote}. Start the long-running work now.`;
+    },
+});
+//# sourceMappingURL=extend-workspace-time.js.map

package/dist/agent/sandbox/extend-workspace-time.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extend-workspace-time.js","sourceRoot":"","sources":["../../../agent/sandbox/extend-workspace-time.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,2GAA2G;AAE3G,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAC1F,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD;+EAC+E;AAC/E,MAAM,UAAU,gBAAgB;IAC9B,OAAO,WAAW,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC;AAChD,CAAC;AAQD,0GAA0G;AAC1G,0DAA0D;AAC1D,MAAM,OAAO,GAAe;IAC1B,IAAI,EAAE,aAAa,CAAC,IAAI;IACxB,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;QACnB,MAAM,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB,EACjB,OAAe,EACf,IAAI,GAAe,OAAO;IAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS,CAAC,iDAAiD;QACtF,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,WAAW,EACT,qGAAqG;QACrG,sGAAsG;QACtG,0GAA0G;QAC1G,sGAAsG;QACtG,qEAAqE;IACvE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,iDAAiD,CAAC;QAC5F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,+CAA+C,CAAC;KACxF,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG;QACtB,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5F,MAAM,eAAe,CAAC,GAAG,EAAE,gBAAgB,EAAE;YAC3C,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,KAAK,CAAC,OAAO;YACxB,QAAQ;YACR,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,6IAA6I,CAAC;QACvJ,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,OAAO,eAAe,SAAS,+BAA+B,CAAC,CAAC,CAAC,EAAE,CAAC;QACzI,OAAO,sCAAsC,SAAS,WAAW,SAAS,oCAAoC,CAAC;IACjH,CAAC;CACF,CAAC,CAAC"}

package/dist/agent/sandbox/vercel-lifecycle.d.ts

@@ -0,0 +1,38 @@
+import { type HookContext } from "eve/hooks";
+import { shouldStop, type SandboxListing, type SandboxStopper } from "./backend-stop.js";
+export { shouldStop, type SandboxListing, type SandboxStopper };
+/** On by default (the `sandbox.stopAfterTurn` setting, OPE-371); declare
+ *  `sandbox: { stopAfterTurn: false }` in `agent/settings.ts`, or set the
+ *  `sandbox.stopAfterTurn` ops override, to keep sandboxes alive between turns. */
+export declare function stopAfterTurnEnabled(): boolean;
+/** One sandbox this sweep actually stopped, with its honestly-observed runtime window. */
+export interface StoppedSandbox {
+    readonly name: string;
+    readonly sandboxSeconds: number;
+}
+/**
+ * Stop every running sandbox tagged with this session. Fail-soft per sandbox — a straggler falls back to the
+ * timeout fuse. The window is measured from `createdAt`, which does NOT advance across a stop and auto-resume,
+ * so this reports the CUMULATIVE window and the billing below takes the delta.
+ */
+export declare function stopSessionSandboxes(sessionId: string, stopper?: SandboxStopper, now?: () => number): Promise<StoppedSandbox[]>;
+/**
+ * The second half of the child guard: hand the shared sandbox back to the parent, so the parent's own sweep
+ * finds it. A backend that never re-tags answers an empty result — a correct outcome, not a failure.
+ */
+export declare function restoreParentSandboxTag(ctx: HookContext, stopper: SandboxStopper): Promise<string[]>;
+/** Test seam: forget that the ownership line was already logged. */
+export declare function resetStopOwnershipLogForTest(): void;
+/**
+ * WHICH delegated background tasks this session believes still hold its sandbox. Non-empty ⇒ this turn end
+ * must not stop the VM. A read, never a write, and fail-soft to EMPTY.
+ */
+export declare function liveDelegatedTasksHoldingSandbox(): readonly string[];
+/**
+ * Record each stopped sandbox's runtime in BOTH spend stores, best-effort. ORDER IS LOAD-BEARING: the ledger
+ * row goes FIRST and the watermark only once it succeeds, so a failure re-bills instead of under-billing.
+ */
+export declare function recordSandboxUsage(ctx: HookContext, stopped: StoppedSandbox[]): Promise<void>;
+declare const _default: import("eve/hooks").HookDefinition<"session.completed" | "session.failed" | "turn.completed" | "turn.failed">;
+export default _default;
+//# sourceMappingURL=vercel-lifecycle.d.ts.map

package/dist/agent/sandbox/vercel-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-lifecycle.d.ts","sourceRoot":"","sources":["../../../agent/sandbox/vercel-lifecycle.ts"],"names":[],"mappings":"AAGA,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAEzD,OAAO,EAAyB,UAAU,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAKhH,OAAO,EAAE,UAAU,EAAE,KAAK,cAAc,EAAE,KAAK,cAAc,EAAE,CAAC;AAMhE;;mFAEmF;AACnF,wBAAgB,oBAAoB,IAAI,OAAO,CAE9C;AAED,0FAA0F;AAC1F,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,cAAwC,EACjD,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,cAAc,EAAE,CAAC,CAc3B;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAc1G;AAWD,oEAAoE;AACpE,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,IAAI,SAAS,MAAM,EAAE,CAMpE;AAwCD;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAgGnG"}

package/dist/agent/sandbox/vercel-lifecycle.js

@@ -0,0 +1,244 @@
+// Stop-after-turn sandbox lifecycle — this file owns the DECISION, backend-stop.ts the mechanics. It exists
+// because a session VM is billed for its whole idle tail; every failure is fail-soft to the `timeout` fuse.
+import { defineHook } from "eve/hooks";
+import { bindFrom, domainKeyOf, resolvePartition, appendUsageEvent, usageForSession, recordSpend, periodOf, estimateSandboxCostUsd, routineIdOf, turnSurfaceMode, getSettings, isSubagentChildContext, liveTaskIds, subagentParentSessionId } from "@open-everywhere/core/agent/adapter-api.js";
+import { resolveSandboxStopper, shouldStop } from "./backend-stop.js";
+// Re-exported so the one "is this sandbox up?" predicate and the one listing shape stay
+// single-homed in backend-stop.ts while their existing import sites keep working
+// (extend-workspace-time.ts, the lifecycle tests).
+export { shouldStop };
+function log(msg) {
+    console.log(`[open-everywhere:sandbox-lifecycle] ${msg}`);
+}
+/** On by default (the `sandbox.stopAfterTurn` setting, OPE-371); declare
+ *  `sandbox: { stopAfterTurn: false }` in `agent/settings.ts`, or set the
+ *  `sandbox.stopAfterTurn` ops override, to keep sandboxes alive between turns. */
+export function stopAfterTurnEnabled() {
+    return getSettings().sandbox.stopAfterTurn;
+}
+/**
+ * Stop every running sandbox tagged with this session. Fail-soft per sandbox — a straggler falls back to the
+ * timeout fuse. The window is measured from `createdAt`, which does NOT advance across a stop and auto-resume,
+ * so this reports the CUMULATIVE window and the billing below takes the delta.
+ */
+export async function stopSessionSandboxes(sessionId, stopper = resolveSandboxStopper(), now = Date.now) {
+    const stopped = [];
+    const sandboxes = await stopper.list(sessionId);
+    for (const s of sandboxes) {
+        if (!shouldStop(s.status))
+            continue;
+        try {
+            await stopper.stop(s.name);
+            const sandboxSeconds = Math.max(0, (now() - s.createdAt) / 1000);
+            stopped.push({ name: s.name, sandboxSeconds });
+        }
+        catch (err) {
+            log(`stop of "${s.name}" failed (falls back to the timeout fuse): ${String(err)}`);
+        }
+    }
+    return stopped;
+}
+/**
+ * The second half of the child guard: hand the shared sandbox back to the parent, so the parent's own sweep
+ * finds it. A backend that never re-tags answers an empty result — a correct outcome, not a failure.
+ */
+export async function restoreParentSandboxTag(ctx, stopper) {
+    const parentSessionId = subagentParentSessionId(ctx);
+    // No typed linkage (eve does not expose `session.parent` in every child shape) ⇒ nothing to
+    // restore the tag TO. Skipping the stop is still correct and is the half that matters.
+    if (parentSessionId === undefined)
+        return [];
+    const restored = [];
+    for (const s of await stopper.list(ctx.session.id)) {
+        try {
+            if (await stopper.retag(s.name, parentSessionId))
+                restored.push(s.name);
+        }
+        catch (err) {
+            log(`re-tag of "${s.name}" back to parent session failed (the parent reclaims it on its next sandbox use): ${String(err)}`);
+        }
+    }
+    return restored;
+}
+/** Name the owning backend once per process, at the first turn end. An operator must be able to
+ *  tell from the deployment which backend stops the sandbox — or that none does. */
+let ownershipLogged = false;
+function logStopOwnershipOnce(stopper) {
+    if (ownershipLogged)
+        return;
+    ownershipLogged = true;
+    log(stopper.ownership);
+}
+/** Test seam: forget that the ownership line was already logged. */
+export function resetStopOwnershipLogForTest() {
+    ownershipLogged = false;
+}
+/**
+ * WHICH delegated background tasks this session believes still hold its sandbox. Non-empty ⇒ this turn end
+ * must not stop the VM. A read, never a write, and fail-soft to EMPTY.
+ */
+export function liveDelegatedTasksHoldingSandbox() {
+    try {
+        return liveTaskIds();
+    }
+    catch {
+        return [];
+    }
+}
+async function onTurnEnd(ctx, outcome) {
+    if (!stopAfterTurnEnabled())
+        return;
+    try {
+        const stopper = resolveSandboxStopper();
+        logStopOwnershipOnce(stopper);
+        // 🔴 OPE-447 — a delegated child shares the PARENT's sandbox and must not stop it.
+        if (isSubagentChildContext(ctx)) {
+            const restored = await restoreParentSandboxTag(ctx, stopper);
+            log(`turn.${outcome}: SKIPPED the stop — this is an eve subagent child and the parent owns the shared sandbox` +
+                (restored.length > 0 ? `; handed ${restored.join(", ")} back to the parent session` : ""));
+            return;
+        }
+        // 🔴 OPE-595 — a live BACKGROUND child holds this session's VM after this turn ends.
+        // See the file header for the measurement and for why the skip cannot leak a VM.
+        const holding = liveDelegatedTasksHoldingSandbox();
+        if (holding.length > 0) {
+            log(`turn.${outcome}: SKIPPED the stop — ${holding.length} delegated background task(s) still hold this session's sandbox ` +
+                `[${holding.join(", ")}]; the next turn end that finds none sweeps it`);
+            return;
+        }
+        const stopped = await stopSessionSandboxes(ctx.session.id, stopper);
+        if (stopped.length > 0) {
+            log(`turn.${outcome}: stopped ${stopped.map((s) => s.name).join(", ")} (auto-snapshot; next turn auto-resumes)`);
+            // Only a backend that bills runtime by wall clock gets a spend row. Pricing a self-hosted
+            // container at Vercel's GB-hour rate would invent a charge that the USD caps then enforce.
+            if (stopper.metered)
+                await recordSandboxUsage(ctx, stopped);
+        }
+    }
+    catch (err) {
+        // Listing failed (no credentials locally, transient API error, …) — the sandbox
+        // just idles out its timeout fuse, exactly the pre-hook behaviour.
+        log(`turn.${outcome}: sandbox stop skipped: ${String(err)}`);
+    }
+}
+/**
+ * Record each stopped sandbox's runtime in BOTH spend stores, best-effort. ORDER IS LOAD-BEARING: the ledger
+ * row goes FIRST and the watermark only once it succeeds, so a failure re-bills instead of under-billing.
+ */
+export async function recordSandboxUsage(ctx, stopped) {
+    try {
+        const p = resolvePartition(ctx);
+        // ATTRIBUTION (OPE-275) — the SAME derivations core's hooks/spend.ts stamps on the session's
+        // model rows: the ATTRIBUTED principal (a routine fire binds as its attested creator, a
+        // delegated child carries its parent's) and the dispatcher's routine marker. Before this the
+        // sandbox row wrote both as '' — so a person's delegated sandbox dollars were invisible to
+        // their `perUser` budget (surface/workspace caps caught them; the person axis did not), and a
+        // routine's reported cost excluded exactly its compute. Both reads are fail-soft: an unusual
+        // ctx degrades to an unattributed row, which is what the row always was.
+        const principalId = bindFrom(ctx).principalId;
+        const routineId = routineIdOf(ctx);
+        // OPE-1862 — the conversation's own mode, stamped on both rows below exactly as core's
+        // hooks/spend.ts stamps it on a model call. Without it a sandbox row is UNCLASSIFIED, and a
+        // report then masks the surface key it names rather than publish one it cannot classify.
+        const surfaceMode = turnSurfaceMode(ctx);
+        // The DELTA watermark (finding 4): the seconds already billed for each sandbox this session
+        // are the SUM of its prior "sandbox" usage_events deltas — the durable per-session stamp that
+        // survives a fresh serverless instance per turn. Read once; a failure leaves it empty, so the
+        // full cumulative is billed (today's overestimate), never dropped — the safe direction.
+        const priorBilled = new Map();
+        try {
+            for (const e of await usageForSession(p.org, ctx.session.id)) {
+                if (e.kind !== "sandbox")
+                    continue;
+                const name = e.detail?.sandboxName;
+                if (typeof name !== "string")
+                    continue;
+                const secs = typeof e.detail?.sandboxSeconds === "number" ? e.detail.sandboxSeconds : 0;
+                priorBilled.set(name, (priorBilled.get(name) ?? 0) + secs);
+            }
+        }
+        catch (err) {
+            log(`prior sandbox usage read skipped (billing the full window): ${String(err)}`);
+        }
+        // Dedupe by name: if `stopped` ever carries the same sandbox twice in one call (a
+        // list()/stop() quirk upstream), processing both entries would read the SAME
+        // priorBilled value for each and double-bill the delta. Keep the first occurrence.
+        const seenNames = new Set();
+        const dedupedStopped = stopped.filter((s) => {
+            if (seenNames.has(s.name))
+                return false;
+            seenNames.add(s.name);
+            return true;
+        });
+        for (const s of dedupedStopped) {
+            // `s.sandboxSeconds` is the CUMULATIVE window since createdAt; bill only the increment
+            // since this sandbox's last stop (clamped ≥ 0: a sandbox recreated mid-session, finding 5,
+            // resets createdAt below the prior sum → 0 for that window, never negative).
+            const billedSeconds = Math.max(0, Math.round(s.sandboxSeconds) - (priorBilled.get(s.name) ?? 0));
+            // THE LEDGER WRITE FIRST (see the doc comment above for why the order flipped).
+            try {
+                await recordSpend(p, {
+                    period: periodOf(new Date().toISOString()),
+                    usage: {},
+                    principalId,
+                    routineId,
+                    model: "",
+                    ...(surfaceMode !== undefined ? { surfaceMode } : {}),
+                    // Explicit usdMicros: runtime spend has no (model, tokens) key that could
+                    // express it — this is the case that forced write-time pricing (OPE-265/266).
+                    usdMicros: Math.round(estimateSandboxCostUsd(billedSeconds) * 1_000_000),
+                });
+            }
+            catch (err) {
+                log(`sandbox spend-ledger record skipped for "${s.name}" (watermark NOT advanced — this window re-bills next stop): ${String(err)}`);
+                continue;
+            }
+            // The watermark: only reached once the ledger write above actually landed, so a
+            // future priorBilled sum never marks seconds "billed" that no ledger row backs.
+            try {
+                await appendUsageEvent({
+                    org: p.org,
+                    // SPEND grain (domainKeyOf), matching core's hooks/spend.ts: a Discord thread's
+                    // sandbox seconds bill against its PARENT channel's scope (item 22); the domain
+                    // key IS the surfaceKey everywhere else.
+                    surfaceKey: domainKeyOf(p),
+                    sessionId: ctx.session.id,
+                    kind: "sandbox",
+                    ...(surfaceMode !== undefined ? { surfaceMode } : {}),
+                    principalId,
+                    ...(routineId !== undefined ? { routineId } : {}),
+                    inputTokens: 0,
+                    outputTokens: 0,
+                    cacheReadTokens: 0,
+                    cacheWriteTokens: 0,
+                    // The DELTA (not the cumulative) — so the next stop's watermark sum telescopes to the
+                    // true lifetime, and a session_cost view that SUMS these rows is correct rather than
+                    // over-counting (which the old cumulative-per-row write silently did).
+                    detail: { sandboxSeconds: billedSeconds, sandboxName: s.name },
+                });
+            }
+            catch (err) {
+                // The ledger row above already landed — only the watermark/forensics row is missing.
+                // A future stop's priorBilled sum under-counts by this delta, so it re-bills this
+                // window too: a double-bill, but over-billing is this file's chosen safe direction.
+                log(`sandbox usage-event append skipped for "${s.name}" (watermark not advanced; a future stop may re-bill this window): ${String(err)}`);
+            }
+        }
+    }
+    catch (err) {
+        log(`sandbox usage records skipped (no resolvable partition): ${String(err)}`);
+    }
+}
+export default defineHook({
+    events: {
+        // Turn boundaries are the signal: the reply has been sent, nothing is using the VM.
+        "turn.completed": async (_event, ctx) => onTurnEnd(ctx, "completed"),
+        "turn.failed": async (_event, ctx) => onTurnEnd(ctx, "failed"),
+        // Completing sessions (routines, one-shots) end with session.* — a final sweep. If
+        // another session-end hook (memory persist) touches the sandbox after us it simply
+        // auto-resumes and the leftover falls back to the fuse: no correctness impact.
+        "session.completed": async (_event, ctx) => onTurnEnd(ctx, "session-completed"),
+        "session.failed": async (_event, ctx) => onTurnEnd(ctx, "session-failed"),
+    },
+});
+//# sourceMappingURL=vercel-lifecycle.js.map

package/dist/agent/sandbox/vercel-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-lifecycle.js","sourceRoot":"","sources":["../../../agent/sandbox/vercel-lifecycle.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAC5G,4GAA4G;AAE5G,OAAO,EAAE,UAAU,EAAoB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,sBAAsB,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,sBAAsB,EAAE,WAAW,EAAE,uBAAuB,EAAwB,MAAM,4CAA4C,CAAC;AACtT,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAA4C,MAAM,mBAAmB,CAAC;AAEhH,wFAAwF;AACxF,iFAAiF;AACjF,mDAAmD;AACnD,OAAO,EAAE,UAAU,EAA4C,CAAC;AAEhE,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,CAAC,GAAG,CAAC,uCAAuC,GAAG,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED;;mFAEmF;AACnF,MAAM,UAAU,oBAAoB;IAClC,OAAO,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC;AAC7C,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,OAAO,GAAmB,qBAAqB,EAAE,EACjD,GAAG,GAAiB,IAAI,CAAC,GAAG;IAE5B,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,SAAS;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,8CAA8C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAgB,EAAE,OAAuB;IACrF,MAAM,eAAe,GAAG,uBAAuB,CAAC,GAAiC,CAAC,CAAC;IACnF,4FAA4F;IAC5F,uFAAuF;IACvF,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC;YACH,IAAI,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,eAAe,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,qFAAqF,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;oFACoF;AACpF,IAAI,eAAe,GAAG,KAAK,CAAC;AAC5B,SAAS,oBAAoB,CAAC,OAAuB;IACnD,IAAI,eAAe;QAAE,OAAO;IAC5B,eAAe,GAAG,IAAI,CAAC;IACvB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AACzB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,4BAA4B;IAC1C,eAAe,GAAG,KAAK,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gCAAgC;IAC9C,IAAI,CAAC;QACH,OAAO,WAAW,EAAE,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAgB,EAAE,OAAe;IACxD,IAAI,CAAC,oBAAoB,EAAE;QAAE,OAAO;IACpC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC9B,mFAAmF;QACnF,IAAI,sBAAsB,CAAC,GAAiC,CAAC,EAAE,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7D,GAAG,CACD,QAAQ,OAAO,2FAA2F;gBACxG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5F,CAAC;YACF,OAAO;QACT,CAAC;QACD,qFAAqF;QACrF,iFAAiF;QACjF,MAAM,OAAO,GAAG,gCAAgC,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CACD,QAAQ,OAAO,wBAAwB,OAAO,CAAC,MAAM,kEAAkE;gBACrH,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,gDAAgD,CACzE,CAAC;YACF,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,QAAQ,OAAO,aAAa,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACjH,0FAA0F;YAC1F,2FAA2F;YAC3F,IAAI,OAAO,CAAC,OAAO;gBAAE,MAAM,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,gFAAgF;QAChF,mEAAmE;QACnE,GAAG,CAAC,QAAQ,OAAO,2BAA2B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAgB,EAAE,OAAyB;IAClF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAChC,6FAA6F;QAC7F,wFAAwF;QACxF,6FAA6F;QAC7F,2FAA2F;QAC3F,8FAA8F;QAC9F,6FAA6F;QAC7F,yEAAyE;QACzE,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC;QAC9C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACnC,uFAAuF;QACvF,4FAA4F;QAC5F,yFAAyF;QACzF,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACzC,4FAA4F;QAC5F,8FAA8F;QAC9F,8FAA8F;QAC9F,wFAAwF;QACxF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC9C,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,IAAI,MAAM,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC7D,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;oBAAE,SAAS;gBACnC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC;gBACnC,IAAI,OAAO,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBACvC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxF,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,+DAA+D,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,kFAAkF;QAClF,6EAA6E;QAC7E,mFAAmF;QACnF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QACpC,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC1C,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,OAAO,KAAK,CAAC;YACxC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;YAC/B,uFAAuF;YACvF,2FAA2F;YAC3F,6EAA6E;YAC7E,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjG,gFAAgF;YAChF,IAAI,CAAC;gBACH,MAAM,WAAW,CAAC,CAAC,EAAE;oBACnB,MAAM,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;oBAC1C,KAAK,EAAE,EAAE;oBACT,WAAW;oBACX,SAAS;oBACT,KAAK,EAAE,EAAE;oBACT,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,0EAA0E;oBAC1E,8EAA8E;oBAC9E,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC;iBACzE,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,4CAA4C,CAAC,CAAC,IAAI,gEAAgE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACrI,SAAS;YACX,CAAC;YACD,gFAAgF;YAChF,gFAAgF;YAChF,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC;oBACrB,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,gFAAgF;oBAChF,gFAAgF;oBAChF,yCAAyC;oBACzC,UAAU,EAAE,WAAW,CAAC,CAAC,CAAC;oBAC1B,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE;oBACzB,IAAI,EAAE,SAAS;oBACf,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACrD,WAAW;oBACX,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,WAAW,EAAE,CAAC;oBACd,YAAY,EAAE,CAAC;oBACf,eAAe,EAAE,CAAC;oBAClB,gBAAgB,EAAE,CAAC;oBACnB,sFAAsF;oBACtF,qFAAqF;oBACrF,uEAAuE;oBACvE,MAAM,EAAE,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;iBAC/D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,qFAAqF;gBACrF,kFAAkF;gBAClF,oFAAoF;gBACpF,GAAG,CAAC,2CAA2C,CAAC,CAAC,IAAI,sEAAsE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC5I,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,4DAA4D,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjF,CAAC;AACH,CAAC;AAED,eAAe,UAAU,CAAC;IACxB,MAAM,EAAE;QACN,oFAAoF;QACpF,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC;QACpE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,CAAC;QAC9D,mFAAmF;QACnF,mFAAmF;QACnF,+EAA+E;QAC/E,mBAAmB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,mBAAmB,CAAC;QAC/E,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,gBAAgB,CAAC;KAC1E;CACF,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,204 @@
+{
+  "name": "@open-everywhere/adapters",
+  "version": "0.1.0",
+  "description": "Open Everywhere adapters — the reference Vercel-hosted backends: AI Gateway models and pricing, Sandbox, Blob, Neon, OpenTelemetry, AWS and Okta.",
+  "keywords": [
+    "agent",
+    "eve",
+    "vercel",
+    "neon",
+    "postgres",
+    "opentelemetry",
+    "sandbox",
+    "blob",
+    "okta",
+    "aws"
+  ],
+  "license": "Apache-2.0",
+  "type": "module",
+  "homepage": "https://github.com/open-everywhere/open-everywhere/tree/main/packages/adapters",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/open-everywhere/open-everywhere.git",
+    "directory": "packages/adapters"
+  },
+  "bugs": {
+    "url": "https://github.com/open-everywhere/open-everywhere/issues"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "agent",
+    "dist",
+    "tsconfig.json",
+    "tsconfig.build.json",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "exports": {
+    "./package.json": "./package.json",
+    "./agent/aws/cli.js": {
+      "types": "./dist/agent/aws/cli.d.ts",
+      "default": "./dist/agent/aws/cli.js"
+    },
+    "./agent/aws/config.js": {
+      "types": "./dist/agent/aws/config.d.ts",
+      "default": "./dist/agent/aws/config.js"
+    },
+    "./agent/aws/register.js": {
+      "types": "./dist/agent/aws/register.d.ts",
+      "default": "./dist/agent/aws/register.js"
+    },
+    "./agent/aws/sso.js": {
+      "types": "./dist/agent/aws/sso.d.ts",
+      "default": "./dist/agent/aws/sso.js"
+    },
+    "./agent/aws/sts.js": {
+      "types": "./dist/agent/aws/sts.d.ts",
+      "default": "./dist/agent/aws/sts.js"
+    },
+    "./agent/blob/hosting.js": {
+      "types": "./dist/agent/blob/hosting.d.ts",
+      "default": "./dist/agent/blob/hosting.js"
+    },
+    "./agent/browser/config.js": {
+      "types": "./dist/agent/browser/config.d.ts",
+      "default": "./dist/agent/browser/config.js"
+    },
+    "./agent/browser/register.js": {
+      "types": "./dist/agent/browser/register.d.ts",
+      "default": "./dist/agent/browser/register.js"
+    },
+    "./agent/browser/sandbox.js": {
+      "types": "./dist/agent/browser/sandbox.d.ts",
+      "default": "./dist/agent/browser/sandbox.js"
+    },
+    "./agent/contributions.js": {
+      "types": "./dist/agent/contributions.d.ts",
+      "default": "./dist/agent/contributions.js"
+    },
+    "./agent/directory/config.js": {
+      "types": "./dist/agent/directory/config.d.ts",
+      "default": "./dist/agent/directory/config.js"
+    },
+    "./agent/directory/okta.js": {
+      "types": "./dist/agent/directory/okta.d.ts",
+      "default": "./dist/agent/directory/okta.js"
+    },
+    "./agent/directory/register.js": {
+      "types": "./dist/agent/directory/register.d.ts",
+      "default": "./dist/agent/directory/register.js"
+    },
+    "./agent/instrumentation.js": {
+      "types": "./dist/agent/instrumentation.d.ts",
+      "default": "./dist/agent/instrumentation.js"
+    },
+    "./agent/model/approval-judge.js": {
+      "types": "./dist/agent/model/approval-judge.d.ts",
+      "default": "./dist/agent/model/approval-judge.js"
+    },
+    "./agent/model/dream-judge.js": {
+      "types": "./dist/agent/model/dream-judge.d.ts",
+      "default": "./dist/agent/model/dream-judge.js"
+    },
+    "./agent/model/gateway-vision.js": {
+      "types": "./dist/agent/model/gateway-vision.d.ts",
+      "default": "./dist/agent/model/gateway-vision.js"
+    },
+    "./agent/model/gateway.js": {
+      "types": "./dist/agent/model/gateway.d.ts",
+      "default": "./dist/agent/model/gateway.js"
+    },
+    "./agent/oe-oauth/config.js": {
+      "types": "./dist/agent/oe-oauth/config.d.ts",
+      "default": "./dist/agent/oe-oauth/config.js"
+    },
+    "./agent/oe-oauth/errors.js": {
+      "types": "./dist/agent/oe-oauth/errors.d.ts",
+      "default": "./dist/agent/oe-oauth/errors.js"
+    },
+    "./agent/oe-oauth/oauth-client.js": {
+      "types": "./dist/agent/oe-oauth/oauth-client.d.ts",
+      "default": "./dist/agent/oe-oauth/oauth-client.js"
+    },
+    "./agent/oe-oauth/pkce.js": {
+      "types": "./dist/agent/oe-oauth/pkce.d.ts",
+      "default": "./dist/agent/oe-oauth/pkce.js"
+    },
+    "./agent/oe-oauth/register.js": {
+      "types": "./dist/agent/oe-oauth/register.d.ts",
+      "default": "./dist/agent/oe-oauth/register.js"
+    },
+    "./agent/oe-oauth/token-vault.js": {
+      "types": "./dist/agent/oe-oauth/token-vault.d.ts",
+      "default": "./dist/agent/oe-oauth/token-vault.js"
+    },
+    "./agent/oe-oauth/user-auth-flow.js": {
+      "types": "./dist/agent/oe-oauth/user-auth-flow.d.ts",
+      "default": "./dist/agent/oe-oauth/user-auth-flow.js"
+    },
+    "./agent/postgres/neon.js": {
+      "types": "./dist/agent/postgres/neon.d.ts",
+      "default": "./dist/agent/postgres/neon.js"
+    },
+    "./agent/sandbox/backend-stop.js": {
+      "types": "./dist/agent/sandbox/backend-stop.d.ts",
+      "default": "./dist/agent/sandbox/backend-stop.js"
+    },
+    "./agent/sandbox/created-sandbox-registry.js": {
+      "types": "./dist/agent/sandbox/created-sandbox-registry.d.ts",
+      "default": "./dist/agent/sandbox/created-sandbox-registry.js"
+    },
+    "./agent/sandbox/extend-workspace-time.js": {
+      "types": "./dist/agent/sandbox/extend-workspace-time.d.ts",
+      "default": "./dist/agent/sandbox/extend-workspace-time.js"
+    },
+    "./agent/sandbox/vercel-lifecycle.js": {
+      "types": "./dist/agent/sandbox/vercel-lifecycle.d.ts",
+      "default": "./dist/agent/sandbox/vercel-lifecycle.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "npm run test:chain",
+    "test:chain": "npm run test:instrumentation && npm run test:sandbox-lifecycle && npm run test:sandbox-guard && npm run test:sandbox-extend && npm run test:model-gateway && npm run test:dream-judge-gateway && npm run test:approval-judge-gateway && npm run test:gateway-vision && npm run test:oe-oauth && npm run test:oe-oauth-static && npm run test:agent-browser && npm run test:neon-pool-error && npm run test:aws-adapter && npm run test:aws-sso && npm run test:okta-directory",
+    "test:aws-adapter": "tsx scripts/aws-adapter-test.ts",
+    "test:okta-directory": "tsx scripts/okta-directory-test.ts",
+    "test:aws-sso": "tsx scripts/aws-sso-test.ts",
+    "test:neon-pool-error": "tsx scripts/neon-pool-error-test.ts",
+    "test:agent-browser": "tsx scripts/agent-browser-test.ts",
+    "test:oe-oauth": "tsx scripts/oe-oauth-test.ts",
+    "test:oe-oauth-static": "tsx scripts/oe-oauth-static-client-test.ts",
+    "test:instrumentation": "tsx scripts/instrumentation-test.ts",
+    "test:sandbox-lifecycle": "tsx scripts/sandbox-lifecycle-test.ts",
+    "test:sandbox-guard": "tsx scripts/sandbox-live-guard-test.ts",
+    "test:sandbox-live": "tsx scripts/sandbox-live-test.ts",
+    "test:sandbox-extend": "tsx scripts/sandbox-extend-test.ts",
+    "test:model-gateway": "tsx scripts/model-gateway-test.ts",
+    "test:dream-judge-gateway": "tsx scripts/dream-judge-gateway-test.ts",
+    "test:approval-judge-gateway": "tsx scripts/approval-judge-gateway-test.ts",
+    "test:gateway-vision": "tsx scripts/gateway-vision-test.ts"
+  },
+  "dependencies": {
+    "@neondatabase/serverless": "^1.1.0",
+    "@open-everywhere/core": "0.1.0",
+    "@vercel/blob": "^2.6.1",
+    "@vercel/otel": "^2.1.3",
+    "@vercel/sandbox": "^3.2.1",
+    "ai": "^7.0.11"
+  },
+  "peerDependencies": {
+    "@agent-browser/eve": "0.32.4",
+    "eve": "0.54.3"
+  },
+  "devDependencies": {
+    "@types/node": "latest",
+    "tsx": "latest",
+    "typescript": "latest"
+  }
+}

package/tsconfig.build.json

@@ -0,0 +1,22 @@
+{
+  // PUBLISH BUILD (OPE-406). See packages/core/tsconfig.build.json for the full rationale: the
+  // sibling tsconfig.json stays noEmit (it is the typecheck gate and covers scripts/** too); this
+  // config emits ONLY the published surface (agent/**) into dist/, because a registry install
+  // cannot execute raw TypeScript and "eve build" evaluates the authored agent modules.
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": false,
+    // Incremental: these run from every pre-hook (pretypecheck/pretest/prebuild), so a no-op
+    // rebuild has to be near-free or the gate chain pays a full tsc on every invocation.
+    "incremental": true,
+    // OUTSIDE outDir on purpose: a tsbuildinfo left in dist/ gets swept up by the files
+    // allowlist and PUBLISHED (caught by the tarball listing, 2026-08-12).
+    "tsBuildInfoFile": "./.tsbuildinfo",
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "outDir": "dist",
+    "rootDir": "."
+  },
+  "include": ["agent/**/*.ts"]
+}