@opencoredev/sandbox-sdk 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -1,3 +1,7 @@
+## @opencoredev/sandbox-sdk@0.1.1
+
+- Add `Symbol.asyncDispose` to `Sandbox` so `await using` provides automatic cleanup.
+
 ## @opencoredev/sandbox-sdk@0.1.0
 
 ### Initial release

package/README.md

@@ -12,15 +12,29 @@ bun add @opencoredev/sandbox-sdk
 
 Node.js 22 or 24 is supported. Bun 1.3 or newer is also supported.
 
+## Quickstart
+
+```ts
+import { createSandbox } from "@opencoredev/sandbox-sdk";
+import { local } from "@opencoredev/sandbox-sdk/local";
+
+await using sandbox = await createSandbox({ provider: local() });
+console.log((await sandbox.run("node --version")).stdout);
+```
+
+`await using` stops the sandbox automatically when its scope exits, including when an operation throws.
+
+Node.js 24 and Bun run this syntax directly. On Node.js 22, compile TypeScript to ES2022 or use the callback-style `withSandbox()` helper.
+
 ## Providers
 
-| Provider                                                        | Runtime                 | Best for                               |
-| --------------------------------------------------------------- | ----------------------- | -------------------------------------- |
-| [Local](https://sandbox-sdk.app/docs/providers/local)           | AgentOS VM              | Development, CI, and self-hosting      |
-| [E2B](https://sandbox-sdk.app/docs/providers/e2b)               | Hosted Linux sandbox    | Coding agents and isolated jobs        |
-| [Daytona](https://sandbox-sdk.app/docs/providers/daytona)       | Cloud workspace         | Persistent projects and GPUs           |
-| [Vercel Sandbox](https://sandbox-sdk.app/docs/providers/vercel) | Hosted Linux sandbox    | Vercel workloads and previews          |
-| [Upstash Box](https://sandbox-sdk.app/docs/providers/upstash)   | Durable cloud container | Serverless agents and long-lived state |
+| Provider                                                        | Runtime                 | Best for                                |
+| --------------------------------------------------------------- | ----------------------- | --------------------------------------- |
+| [Local](https://sandbox-sdk.app/docs/providers/local)           | AgentOS VM              | Development, CI, and self-hosting       |
+| [E2B](https://sandbox-sdk.app/docs/providers/e2b)               | Hosted Linux sandbox    | Coding agents and isolated jobs         |
+| [Daytona](https://sandbox-sdk.app/docs/providers/daytona)       | Cloud workspace         | Persistent projects and GPUs            |
+| [Vercel Sandbox](https://sandbox-sdk.app/docs/providers/vercel) | Hosted Linux sandbox    | Coding agents and persistent workspaces |
+| [Upstash Box](https://sandbox-sdk.app/docs/providers/upstash)   | Durable cloud container | Serverless agents and long-lived state  |
 
 Local is included. Cloud providers use their official SDKs and credentials.
 

package/dist/{agentos-BOFA_q-a.mjs → agentos-DFJ4TFaY.mjs}

@@ -1,6 +1,6 @@
 import { t as SandboxError } from "./errors-Ch9PHKTd.mjs";
 import { i as localCapabilities } from "./capabilities-CEowrzRM.mjs";
-import { n as portResult, o as withManagedSessions, r as toUint8Array } from "./provider-utils-DilOYLBO.mjs";
+import { n as portResult, o as withManagedSessions, r as toUint8Array } from "./provider-utils-BjOSWNsh.mjs";
 import { randomUUID } from "node:crypto";
 
 //#region src/providers/agentos/index.ts
@@ -386,4 +386,4 @@ function interrupted(operation) {
 
 //#endregion
 export { agentos as t };
-//# sourceMappingURL=agentos-BOFA_q-a.mjs.map
+//# sourceMappingURL=agentos-DFJ4TFaY.mjs.map

package/dist/{agentos-BOFA_q-a.mjs.map → agentos-DFJ4TFaY.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"agentos-BOFA_q-a.mjs","names":["DEFAULT_PERMISSIONS: Permissions","DEFAULT_LIMITS: NonNullable<AgentOsOptions[\"limits\"]>","vm: AgentOsVm | null","suspendedRoot: RootSnapshotExport | undefined","AgentOs: (typeof import(\"@rivet-dev/agentos-core\"))[\"AgentOs\"]","snapshot: SandboxSnapshot","id","history: ProcessOutputEvent[]","state: ProcessStatus","exitCode: number | undefined","stdout: Uint8Array[]","stderr: Uint8Array[]","timeout: ReturnType<typeof setTimeout> | undefined","interruptions: Promise<never>[]"],"sources":["../src/providers/agentos/index.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type {\n  AgentOs as AgentOsVm,\n  AgentOsOptions,\n  Permissions,\n  RootSnapshotExport,\n} from \"@rivet-dev/agentos-core\";\nimport { SandboxError } from \"../../core/errors\";\nimport type { SandboxProvider, SandboxRuntime } from \"../../core/provider\";\nimport type {\n  CommandInput,\n  CommandResult,\n  ProcessOutputEvent,\n  ProcessStatus,\n  RunOptions,\n  SandboxDirectoryEntry,\n  SandboxProcess,\n  SandboxSnapshot,\n} from \"../../core/types\";\nimport { withManagedSessions } from \"../../internal/managed-provider\";\nimport { portResult, toUint8Array } from \"../../internal/provider-utils\";\nimport { localCapabilities } from \"../capabilities\";\n\nconst DEFAULT_PERMISSIONS: Permissions = {\n  fs: \"allow\",\n  childProcess: \"allow\",\n  process: \"allow\",\n  env: \"allow\",\n  network: {\n    default: \"deny\",\n    rules: [\n      { mode: \"allow\", operations: [\"listen\"], patterns: [\"**\"] },\n      {\n        mode: \"allow\",\n        operations: [\"http\"],\n        patterns: [\"tcp://127.0.0.1:*\", \"tcp://[::1]:*\", \"tcp://localhost:*\"],\n      },\n    ],\n  },\n  binding: \"deny\",\n};\n\nconst DEFAULT_LIMITS: NonNullable<AgentOsOptions[\"limits\"]> = {\n  resources: {\n    cpuCount: 1,\n    maxProcesses: 64,\n    maxOpenFds: 256,\n    maxPipes: 128,\n    maxPtys: 16,\n    maxSockets: 128,\n    maxConnections: 64,\n    maxFilesystemBytes: 512 * 1024 * 1024,\n    maxInodeCount: 100_000,\n    maxWasmMemoryBytes: 256 * 1024 * 1024,\n  },\n  http: { maxFetchResponseBytes: 16 * 1024 * 1024 },\n  jsRuntime: {\n    v8HeapLimitMb: 256,\n    wallClockLimitMs: 120_000,\n    capturedOutputLimitBytes: 8 * 1024 * 1024,\n    stdinBufferLimitBytes: 1024 * 1024,\n  },\n};\n\nexport interface AgentOsProviderOptions {\n  /**\n   * Native agentOS VM options. The provider supplies production-oriented permissions and limits\n   * unless these fields are explicitly provided.\n   */\n  agentOs?: AgentOsOptions;\n}\n\nexport interface AgentOsSandbox {\n  /** The currently running native VM. Access throws while the sandbox is suspended or stopped. */\n  readonly vm: AgentOsVm;\n  suspend(): Promise<void>;\n  resume(): Promise<void>;\n}\n\ntype StoredSnapshot = {\n  metadata: SandboxSnapshot;\n  root: RootSnapshotExport;\n};\n\nexport { agentosCapabilities } from \"../capabilities\";\n\n/**\n * Internal constructor for the AgentOS VM that powers the Local provider.\n *\n * Outbound networking is denied by default. Pass an explicit agentOS permission policy when the\n * guest needs network or host bindings.\n */\nfunction createAgentOsProvider(\n  options: AgentOsProviderOptions = {},\n): SandboxProvider<AgentOsSandbox> {\n  const provider: SandboxProvider<AgentOsSandbox> = {\n    id: \"local\",\n    capabilities: localCapabilities,\n    async create(createOptions) {\n      const id = randomUUID();\n      const snapshots = new Map<string, StoredSnapshot>();\n      const baseOptions = options.agentOs ?? {};\n      let vm: AgentOsVm | null = null;\n      let suspendedRoot: RootSnapshotExport | undefined;\n      let stopped = false;\n\n      const createVm = async (root?: RootSnapshotExport): Promise<AgentOsVm> => {\n        let AgentOs: (typeof import(\"@rivet-dev/agentos-core\"))[\"AgentOs\"];\n        try {\n          ({ AgentOs } = await import(\"@rivet-dev/agentos-core\"));\n        } catch (error) {\n          throw new SandboxError({\n            code: \"unavailable\",\n            provider: \"local\",\n            operation: \"sandbox.create\",\n            message:\n              \"The Local provider could not load its @rivet-dev/agentos-core runtime dependency.\",\n            cause: error,\n          });\n        }\n        const next = await AgentOs.create({\n          ...baseOptions,\n          permissions: baseOptions.permissions ?? DEFAULT_PERMISSIONS,\n          limits: baseOptions.limits ?? DEFAULT_LIMITS,\n          ...(root\n            ? {\n                rootFilesystem: {\n                  disableDefaultBaseLayer: true,\n                  lowers: [root],\n                },\n              }\n            : {}),\n        });\n        await next.mkdir(createOptions.cwd, { recursive: true });\n        return next;\n      };\n\n      const currentVm = (): AgentOsVm => {\n        if (stopped)\n          throw new SandboxError({\n            code: \"terminated\",\n            provider: \"local\",\n            operation: \"sandbox\",\n            message: \"Sandbox has stopped\",\n          });\n        if (!vm)\n          throw new SandboxError({\n            code: \"terminated\",\n            provider: \"local\",\n            operation: \"sandbox\",\n            message: \"Sandbox is suspended; call sandbox.raw.resume() before using it\",\n          });\n        return vm;\n      };\n\n      const suspend = async () => {\n        if (stopped || !vm) return;\n        suspendedRoot = await vm.snapshotRootFilesystem();\n        await vm.dispose();\n        vm = null;\n      };\n\n      const resume = async () => {\n        if (stopped)\n          throw new SandboxError({\n            code: \"terminated\",\n            provider: \"local\",\n            operation: \"sandbox.resume\",\n            message: \"A stopped sandbox cannot be resumed\",\n          });\n        if (vm) return;\n        vm = await createVm(suspendedRoot);\n        suspendedRoot = undefined;\n      };\n\n      vm = await createVm();\n      const raw: AgentOsSandbox = {\n        get vm() {\n          return currentVm();\n        },\n        suspend,\n        resume,\n      };\n\n      const runtime: SandboxRuntime<AgentOsSandbox> = {\n        id,\n        raw,\n        capabilities: localCapabilities,\n        files: {\n          write: async (path, value) => currentVm().writeFile(path, await toUint8Array(value)),\n          read: (path) => currentVm().readFile(path),\n          async list(path) {\n            const entries = await currentVm().readdirRecursive(path, { maxDepth: 0 });\n            return entries.map(\n              (entry): SandboxDirectoryEntry => ({\n                name: entry.path.slice(entry.path.lastIndexOf(\"/\") + 1),\n                path: entry.path,\n                type: entry.type,\n                size: entry.type === \"file\" ? entry.size : undefined,\n              }),\n            );\n          },\n          mkdir: (path) => currentVm().mkdir(path, { recursive: true }),\n          async remove(path) {\n            if (path === \"/\")\n              throw new SandboxError({\n                code: \"invalid_input\",\n                provider: \"local\",\n                operation: \"files.remove\",\n                message: \"Cannot remove the sandbox root\",\n              });\n            await currentVm().delete(path, { recursive: true });\n          },\n          exists: (path) => currentVm().exists(path),\n        },\n        run: (command, runOptions) =>\n          runCommand(currentVm(), command, withEnv(createOptions, runOptions)),\n        async start(command, runOptions) {\n          return startProcess(currentVm(), command, withEnv(createOptions, runOptions));\n        },\n        async expose(port) {\n          validatePort(port);\n          const url = `http://agentos-${id}.internal:${port}`;\n          return portResult(port, url, false, false, (path = \"/\", init) => {\n            const request = new Request(new URL(path, url), init);\n            return currentVm().fetch(port, request);\n          });\n        },\n        snapshots: {\n          async create(snapshotOptions) {\n            const snapshot: SandboxSnapshot = {\n              id: randomUUID(),\n              name: snapshotOptions?.name,\n              mode: \"filesystem\",\n              createdAt: new Date(),\n            };\n            snapshots.set(snapshot.id, {\n              metadata: snapshot,\n              root: await currentVm().snapshotRootFilesystem(),\n            });\n            return snapshot;\n          },\n          async delete(snapshot) {\n            const id = typeof snapshot === \"string\" ? snapshot : snapshot.id;\n            if (!snapshots.delete(id)) throw snapshotNotFound(id, \"snapshot.delete\");\n          },\n          async restore(snapshot) {\n            const id = typeof snapshot === \"string\" ? snapshot : snapshot.id;\n            const stored = snapshots.get(id);\n            if (!stored) throw snapshotNotFound(id, \"snapshot.restore\");\n            const previous = currentVm();\n            vm = null;\n            await previous.dispose();\n            try {\n              vm = await createVm(stored.root);\n            } catch (error) {\n              stopped = true;\n              throw error;\n            }\n          },\n        },\n        async stop() {\n          if (stopped) return;\n          stopped = true;\n          suspendedRoot = undefined;\n          snapshots.clear();\n          const active = vm;\n          vm = null;\n          await active?.dispose();\n        },\n      };\n      return runtime;\n    },\n  };\n\n  return withManagedSessions(provider, [], {\n    stop: (sandbox) => sandbox.raw.suspend(),\n    resume: (sandbox) => sandbox.raw.resume(),\n  });\n}\n\n/**\n * @deprecated AgentOS now powers `local()` under the hood. Import `local` from\n * `@opencoredev/sandbox-sdk/local` instead.\n */\nexport function agentos(options: AgentOsProviderOptions = {}): SandboxProvider<AgentOsSandbox> {\n  return createAgentOsProvider(options);\n}\n\nfunction withEnv(\n  createOptions: { env: Readonly<Record<string, string>> },\n  runOptions: RunOptions,\n): RunOptions {\n  return { ...runOptions, env: { ...createOptions.env, ...runOptions.env } };\n}\n\nfunction commandParts(command: CommandInput): [string, string[]] {\n  return typeof command === \"string\"\n    ? [\"sh\", [\"-lc\", command]]\n    : [command.command, [...(command.args ?? [])]];\n}\n\nfunction startProcess(vm: AgentOsVm, command: CommandInput, options: RunOptions): SandboxProcess {\n  if (options.signal?.aborted) throw interrupted(\"process.start\");\n  const [executable, args] = commandParts(command);\n  const history: ProcessOutputEvent[] = [];\n  const waiting = new Set<() => void>();\n  let state: ProcessStatus = \"running\";\n  let exitCode: number | undefined;\n  const push = (stream: \"stdout\" | \"stderr\", data: Uint8Array) => {\n    const output = stream === \"stderr\" ? withoutInternalAgentOsWarnings(data) : data;\n    if (output.byteLength === 0) return;\n    history.push({ stream, data: new Uint8Array(output), timestamp: new Date() });\n    for (const wake of waiting) wake();\n    waiting.clear();\n  };\n  const process = vm.spawn(executable, args, {\n    cwd: options.cwd,\n    env: options.env ? { ...options.env } : undefined,\n    streamStdin: true,\n    onStdout: (data) => push(\"stdout\", data),\n    onStderr: (data) => push(\"stderr\", data),\n  });\n  const completed = vm.waitProcess(process.pid).then((code) => {\n    exitCode = code;\n    state = code === 137 || code === 143 ? \"killed\" : \"exited\";\n    for (const wake of waiting) wake();\n    waiting.clear();\n    return { exitCode: code };\n  });\n  const abort = () => vm.stopProcess(process.pid);\n  options.signal?.addEventListener(\"abort\", abort, { once: true });\n  void completed.finally(() => options.signal?.removeEventListener(\"abort\", abort));\n\n  return {\n    id: String(process.pid),\n    async status() {\n      return state;\n    },\n    async *output() {\n      let index = 0;\n      while (state === \"running\" || index < history.length) {\n        while (index < history.length) yield history[index++]!;\n        if (state !== \"running\") break;\n        await new Promise<void>((resolve) => waiting.add(resolve));\n      }\n    },\n    write: (value) => vm.writeProcessStdin(process.pid, value),\n    wait: () => (exitCode === undefined ? completed : Promise.resolve({ exitCode })),\n    async kill(signal = \"SIGTERM\") {\n      if (state !== \"running\") return;\n      if (signal === \"SIGKILL\" || signal === \"KILL\" || signal === \"9\") vm.killProcess(process.pid);\n      else vm.stopProcess(process.pid);\n    },\n  };\n}\n\nfunction withoutInternalAgentOsWarnings(data: Uint8Array): Uint8Array {\n  const value = new TextDecoder()\n    .decode(data)\n    .replaceAll(\"\\u001b[33m WARN\\u001b[0m could not retrieve pid for child process\\n\", \"\");\n  return new TextEncoder().encode(value);\n}\n\nasync function runCommand(\n  vm: AgentOsVm,\n  command: CommandInput,\n  options: RunOptions,\n): Promise<CommandResult> {\n  const started = performance.now();\n  const process = startProcess(vm, command, options);\n  const stdout: Uint8Array[] = [];\n  const stderr: Uint8Array[] = [];\n  const collect = (async () => {\n    for await (const event of process.output()) {\n      const bytes =\n        typeof event.data === \"string\" ? new TextEncoder().encode(event.data) : event.data;\n      (event.stream === \"stdout\" ? stdout : stderr).push(bytes);\n    }\n  })();\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  let removeAbort = () => {};\n  const interruptions: Promise<never>[] = [];\n\n  if (options.timeout && options.timeout > 0) {\n    interruptions.push(\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => {\n          void process.kill(\"SIGKILL\");\n          reject(\n            new SandboxError({\n              code: \"timeout\",\n              provider: \"local\",\n              operation: \"process.run\",\n              message: `Command timed out after ${options.timeout}ms`,\n            }),\n          );\n        }, options.timeout);\n      }),\n    );\n  }\n  if (options.signal) {\n    interruptions.push(\n      new Promise<never>((_, reject) => {\n        const abort = () => {\n          void process.kill(\"SIGKILL\");\n          reject(interrupted(\"process.run\"));\n        };\n        options.signal!.addEventListener(\"abort\", abort, { once: true });\n        removeAbort = () => options.signal!.removeEventListener(\"abort\", abort);\n      }),\n    );\n  }\n\n  try {\n    const result = await Promise.race([process.wait(), ...interruptions]);\n    await collect;\n    return {\n      stdout: decodeChunks(stdout),\n      stderr: decodeChunks(stderr),\n      exitCode: result.exitCode,\n      success: result.exitCode === 0,\n      durationMs: Math.round(performance.now() - started),\n    };\n  } catch (error) {\n    await process.wait().catch(() => {});\n    await collect.catch(() => {});\n    throw error;\n  } finally {\n    if (timeout) clearTimeout(timeout);\n    removeAbort();\n  }\n}\n\nfunction decodeChunks(chunks: Uint8Array[]): string {\n  const length = chunks.reduce((total, chunk) => total + chunk.byteLength, 0);\n  const output = new Uint8Array(length);\n  let offset = 0;\n  for (const chunk of chunks) {\n    output.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(output);\n}\n\nfunction validatePort(port: number): void {\n  if (!Number.isInteger(port) || port < 1 || port > 65_535)\n    throw new SandboxError({\n      code: \"invalid_input\",\n      provider: \"local\",\n      operation: \"ports.expose\",\n      message: `Invalid port: ${port}`,\n    });\n}\n\nfunction snapshotNotFound(id: string, operation: string): SandboxError {\n  return new SandboxError({\n    code: \"not_found\",\n    provider: \"local\",\n    operation,\n    message: `Snapshot not found: ${id}`,\n  });\n}\n\nfunction interrupted(operation: string): SandboxError {\n  return new SandboxError({\n    code: \"terminated\",\n    provider: \"local\",\n    operation,\n    message: \"Operation was aborted\",\n  });\n}\n"],"mappings":";;;;;;AAuBA,MAAMA,sBAAmC;CACvC,IAAI;CACJ,cAAc;CACd,SAAS;CACT,KAAK;CACL,SAAS;EACP,SAAS;EACT,OAAO,CACL;GAAE,MAAM;GAAS,YAAY,CAAC,SAAS;GAAE,UAAU,CAAC,KAAK;GAAE,EAC3D;GACE,MAAM;GACN,YAAY,CAAC,OAAO;GACpB,UAAU;IAAC;IAAqB;IAAiB;IAAoB;GACtE,CACF;EACF;CACD,SAAS;CACV;AAED,MAAMC,iBAAwD;CAC5D,WAAW;EACT,UAAU;EACV,cAAc;EACd,YAAY;EACZ,UAAU;EACV,SAAS;EACT,YAAY;EACZ,gBAAgB;EAChB,oBAAoB,MAAM,OAAO;EACjC,eAAe;EACf,oBAAoB,MAAM,OAAO;EAClC;CACD,MAAM,EAAE,uBAAuB,KAAK,OAAO,MAAM;CACjD,WAAW;EACT,eAAe;EACf,kBAAkB;EAClB,0BAA0B,IAAI,OAAO;EACrC,uBAAuB,OAAO;EAC/B;CACF;;;;;;;AA8BD,SAAS,sBACP,UAAkC,EAAE,EACH;AAqLjC,QAAO,oBApL2C;EAChD,IAAI;EACJ,cAAc;EACd,MAAM,OAAO,eAAe;GAC1B,MAAM,KAAK,YAAY;GACvB,MAAM,4BAAY,IAAI,KAA6B;GACnD,MAAM,cAAc,QAAQ,WAAW,EAAE;GACzC,IAAIC,KAAuB;GAC3B,IAAIC;GACJ,IAAI,UAAU;GAEd,MAAM,WAAW,OAAO,SAAkD;IACxE,IAAIC;AACJ,QAAI;AACF,MAAC,CAAE,WAAY,MAAM,OAAO;aACrB,OAAO;AACd,WAAM,IAAI,aAAa;MACrB,MAAM;MACN,UAAU;MACV,WAAW;MACX,SACE;MACF,OAAO;MACR,CAAC;;IAEJ,MAAM,OAAO,MAAM,QAAQ,OAAO;KAChC,GAAG;KACH,aAAa,YAAY,eAAe;KACxC,QAAQ,YAAY,UAAU;KAC9B,GAAI,OACA,EACE,gBAAgB;MACd,yBAAyB;MACzB,QAAQ,CAAC,KAAK;MACf,EACF,GACD,EAAE;KACP,CAAC;AACF,UAAM,KAAK,MAAM,cAAc,KAAK,EAAE,WAAW,MAAM,CAAC;AACxD,WAAO;;GAGT,MAAM,kBAA6B;AACjC,QAAI,QACF,OAAM,IAAI,aAAa;KACrB,MAAM;KACN,UAAU;KACV,WAAW;KACX,SAAS;KACV,CAAC;AACJ,QAAI,CAAC,GACH,OAAM,IAAI,aAAa;KACrB,MAAM;KACN,UAAU;KACV,WAAW;KACX,SAAS;KACV,CAAC;AACJ,WAAO;;GAGT,MAAM,UAAU,YAAY;AAC1B,QAAI,WAAW,CAAC,GAAI;AACpB,oBAAgB,MAAM,GAAG,wBAAwB;AACjD,UAAM,GAAG,SAAS;AAClB,SAAK;;GAGP,MAAM,SAAS,YAAY;AACzB,QAAI,QACF,OAAM,IAAI,aAAa;KACrB,MAAM;KACN,UAAU;KACV,WAAW;KACX,SAAS;KACV,CAAC;AACJ,QAAI,GAAI;AACR,SAAK,MAAM,SAAS,cAAc;AAClC,oBAAgB;;AAGlB,QAAK,MAAM,UAAU;AAgGrB,UAvFgD;IAC9C;IACA,KAV0B;KAC1B,IAAI,KAAK;AACP,aAAO,WAAW;;KAEpB;KACA;KACD;IAKC,cAAc;IACd,OAAO;KACL,OAAO,OAAO,MAAM,UAAU,WAAW,CAAC,UAAU,MAAM,MAAM,aAAa,MAAM,CAAC;KACpF,OAAO,SAAS,WAAW,CAAC,SAAS,KAAK;KAC1C,MAAM,KAAK,MAAM;AAEf,cADgB,MAAM,WAAW,CAAC,iBAAiB,MAAM,EAAE,UAAU,GAAG,CAAC,EAC1D,KACZ,WAAkC;OACjC,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK,YAAY,IAAI,GAAG,EAAE;OACvD,MAAM,MAAM;OACZ,MAAM,MAAM;OACZ,MAAM,MAAM,SAAS,SAAS,MAAM,OAAO;OAC5C,EACF;;KAEH,QAAQ,SAAS,WAAW,CAAC,MAAM,MAAM,EAAE,WAAW,MAAM,CAAC;KAC7D,MAAM,OAAO,MAAM;AACjB,UAAI,SAAS,IACX,OAAM,IAAI,aAAa;OACrB,MAAM;OACN,UAAU;OACV,WAAW;OACX,SAAS;OACV,CAAC;AACJ,YAAM,WAAW,CAAC,OAAO,MAAM,EAAE,WAAW,MAAM,CAAC;;KAErD,SAAS,SAAS,WAAW,CAAC,OAAO,KAAK;KAC3C;IACD,MAAM,SAAS,eACb,WAAW,WAAW,EAAE,SAAS,QAAQ,eAAe,WAAW,CAAC;IACtE,MAAM,MAAM,SAAS,YAAY;AAC/B,YAAO,aAAa,WAAW,EAAE,SAAS,QAAQ,eAAe,WAAW,CAAC;;IAE/E,MAAM,OAAO,MAAM;AACjB,kBAAa,KAAK;KAClB,MAAM,MAAM,kBAAkB,GAAG,YAAY;AAC7C,YAAO,WAAW,MAAM,KAAK,OAAO,QAAQ,OAAO,KAAK,SAAS;MAC/D,MAAM,UAAU,IAAI,QAAQ,IAAI,IAAI,MAAM,IAAI,EAAE,KAAK;AACrD,aAAO,WAAW,CAAC,MAAM,MAAM,QAAQ;OACvC;;IAEJ,WAAW;KACT,MAAM,OAAO,iBAAiB;MAC5B,MAAMC,WAA4B;OAChC,IAAI,YAAY;OAChB,MAAM,iBAAiB;OACvB,MAAM;OACN,2BAAW,IAAI,MAAM;OACtB;AACD,gBAAU,IAAI,SAAS,IAAI;OACzB,UAAU;OACV,MAAM,MAAM,WAAW,CAAC,wBAAwB;OACjD,CAAC;AACF,aAAO;;KAET,MAAM,OAAO,UAAU;MACrB,MAAMC,OAAK,OAAO,aAAa,WAAW,WAAW,SAAS;AAC9D,UAAI,CAAC,UAAU,OAAOA,KAAG,CAAE,OAAM,iBAAiBA,MAAI,kBAAkB;;KAE1E,MAAM,QAAQ,UAAU;MACtB,MAAMA,OAAK,OAAO,aAAa,WAAW,WAAW,SAAS;MAC9D,MAAM,SAAS,UAAU,IAAIA,KAAG;AAChC,UAAI,CAAC,OAAQ,OAAM,iBAAiBA,MAAI,mBAAmB;MAC3D,MAAM,WAAW,WAAW;AAC5B,WAAK;AACL,YAAM,SAAS,SAAS;AACxB,UAAI;AACF,YAAK,MAAM,SAAS,OAAO,KAAK;eACzB,OAAO;AACd,iBAAU;AACV,aAAM;;;KAGX;IACD,MAAM,OAAO;AACX,SAAI,QAAS;AACb,eAAU;AACV,qBAAgB;AAChB,eAAU,OAAO;KACjB,MAAM,SAAS;AACf,UAAK;AACL,WAAM,QAAQ,SAAS;;IAE1B;;EAGJ,EAEoC,EAAE,EAAE;EACvC,OAAO,YAAY,QAAQ,IAAI,SAAS;EACxC,SAAS,YAAY,QAAQ,IAAI,QAAQ;EAC1C,CAAC;;;;;;AAOJ,SAAgB,QAAQ,UAAkC,EAAE,EAAmC;AAC7F,QAAO,sBAAsB,QAAQ;;AAGvC,SAAS,QACP,eACA,YACY;AACZ,QAAO;EAAE,GAAG;EAAY,KAAK;GAAE,GAAG,cAAc;GAAK,GAAG,WAAW;GAAK;EAAE;;AAG5E,SAAS,aAAa,SAA2C;AAC/D,QAAO,OAAO,YAAY,WACtB,CAAC,MAAM,CAAC,OAAO,QAAQ,CAAC,GACxB,CAAC,QAAQ,SAAS,CAAC,GAAI,QAAQ,QAAQ,EAAE,CAAE,CAAC;;AAGlD,SAAS,aAAa,IAAe,SAAuB,SAAqC;AAC/F,KAAI,QAAQ,QAAQ,QAAS,OAAM,YAAY,gBAAgB;CAC/D,MAAM,CAAC,YAAY,QAAQ,aAAa,QAAQ;CAChD,MAAMC,UAAgC,EAAE;CACxC,MAAM,0BAAU,IAAI,KAAiB;CACrC,IAAIC,QAAuB;CAC3B,IAAIC;CACJ,MAAM,QAAQ,QAA6B,SAAqB;EAC9D,MAAM,SAAS,WAAW,WAAW,+BAA+B,KAAK,GAAG;AAC5E,MAAI,OAAO,eAAe,EAAG;AAC7B,UAAQ,KAAK;GAAE;GAAQ,MAAM,IAAI,WAAW,OAAO;GAAE,2BAAW,IAAI,MAAM;GAAE,CAAC;AAC7E,OAAK,MAAM,QAAQ,QAAS,OAAM;AAClC,UAAQ,OAAO;;CAEjB,MAAM,UAAU,GAAG,MAAM,YAAY,MAAM;EACzC,KAAK,QAAQ;EACb,KAAK,QAAQ,MAAM,EAAE,GAAG,QAAQ,KAAK,GAAG;EACxC,aAAa;EACb,WAAW,SAAS,KAAK,UAAU,KAAK;EACxC,WAAW,SAAS,KAAK,UAAU,KAAK;EACzC,CAAC;CACF,MAAM,YAAY,GAAG,YAAY,QAAQ,IAAI,CAAC,MAAM,SAAS;AAC3D,aAAW;AACX,UAAQ,SAAS,OAAO,SAAS,MAAM,WAAW;AAClD,OAAK,MAAM,QAAQ,QAAS,OAAM;AAClC,UAAQ,OAAO;AACf,SAAO,EAAE,UAAU,MAAM;GACzB;CACF,MAAM,cAAc,GAAG,YAAY,QAAQ,IAAI;AAC/C,SAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AAChE,CAAK,UAAU,cAAc,QAAQ,QAAQ,oBAAoB,SAAS,MAAM,CAAC;AAEjF,QAAO;EACL,IAAI,OAAO,QAAQ,IAAI;EACvB,MAAM,SAAS;AACb,UAAO;;EAET,OAAO,SAAS;GACd,IAAI,QAAQ;AACZ,UAAO,UAAU,aAAa,QAAQ,QAAQ,QAAQ;AACpD,WAAO,QAAQ,QAAQ,OAAQ,OAAM,QAAQ;AAC7C,QAAI,UAAU,UAAW;AACzB,UAAM,IAAI,SAAe,YAAY,QAAQ,IAAI,QAAQ,CAAC;;;EAG9D,QAAQ,UAAU,GAAG,kBAAkB,QAAQ,KAAK,MAAM;EAC1D,YAAa,aAAa,SAAY,YAAY,QAAQ,QAAQ,EAAE,UAAU,CAAC;EAC/E,MAAM,KAAK,SAAS,WAAW;AAC7B,OAAI,UAAU,UAAW;AACzB,OAAI,WAAW,aAAa,WAAW,UAAU,WAAW,IAAK,IAAG,YAAY,QAAQ,IAAI;OACvF,IAAG,YAAY,QAAQ,IAAI;;EAEnC;;AAGH,SAAS,+BAA+B,MAA8B;CACpE,MAAM,QAAQ,IAAI,aAAa,CAC5B,OAAO,KAAK,CACZ,WAAW,mEAAuE,GAAG;AACxF,QAAO,IAAI,aAAa,CAAC,OAAO,MAAM;;AAGxC,eAAe,WACb,IACA,SACA,SACwB;CACxB,MAAM,UAAU,YAAY,KAAK;CACjC,MAAM,UAAU,aAAa,IAAI,SAAS,QAAQ;CAClD,MAAMC,SAAuB,EAAE;CAC/B,MAAMC,SAAuB,EAAE;CAC/B,MAAM,WAAW,YAAY;AAC3B,aAAW,MAAM,SAAS,QAAQ,QAAQ,EAAE;GAC1C,MAAM,QACJ,OAAO,MAAM,SAAS,WAAW,IAAI,aAAa,CAAC,OAAO,MAAM,KAAK,GAAG,MAAM;AAChF,IAAC,MAAM,WAAW,WAAW,SAAS,QAAQ,KAAK,MAAM;;KAEzD;CACJ,IAAIC;CACJ,IAAI,oBAAoB;CACxB,MAAMC,gBAAkC,EAAE;AAE1C,KAAI,QAAQ,WAAW,QAAQ,UAAU,EACvC,eAAc,KACZ,IAAI,SAAgB,GAAG,WAAW;AAChC,YAAU,iBAAiB;AACzB,GAAK,QAAQ,KAAK,UAAU;AAC5B,UACE,IAAI,aAAa;IACf,MAAM;IACN,UAAU;IACV,WAAW;IACX,SAAS,2BAA2B,QAAQ,QAAQ;IACrD,CAAC,CACH;KACA,QAAQ,QAAQ;GACnB,CACH;AAEH,KAAI,QAAQ,OACV,eAAc,KACZ,IAAI,SAAgB,GAAG,WAAW;EAChC,MAAM,cAAc;AAClB,GAAK,QAAQ,KAAK,UAAU;AAC5B,UAAO,YAAY,cAAc,CAAC;;AAEpC,UAAQ,OAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AAChE,sBAAoB,QAAQ,OAAQ,oBAAoB,SAAS,MAAM;GACvE,CACH;AAGH,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,QAAQ,MAAM,EAAE,GAAG,cAAc,CAAC;AACrE,QAAM;AACN,SAAO;GACL,QAAQ,aAAa,OAAO;GAC5B,QAAQ,aAAa,OAAO;GAC5B,UAAU,OAAO;GACjB,SAAS,OAAO,aAAa;GAC7B,YAAY,KAAK,MAAM,YAAY,KAAK,GAAG,QAAQ;GACpD;UACM,OAAO;AACd,QAAM,QAAQ,MAAM,CAAC,YAAY,GAAG;AACpC,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM;WACE;AACR,MAAI,QAAS,cAAa,QAAQ;AAClC,eAAa;;;AAIjB,SAAS,aAAa,QAA8B;CAClD,MAAM,SAAS,OAAO,QAAQ,OAAO,UAAU,QAAQ,MAAM,YAAY,EAAE;CAC3E,MAAM,SAAS,IAAI,WAAW,OAAO;CACrC,IAAI,SAAS;AACb,MAAK,MAAM,SAAS,QAAQ;AAC1B,SAAO,IAAI,OAAO,OAAO;AACzB,YAAU,MAAM;;AAElB,QAAO,IAAI,aAAa,CAAC,OAAO,OAAO;;AAGzC,SAAS,aAAa,MAAoB;AACxC,KAAI,CAAC,OAAO,UAAU,KAAK,IAAI,OAAO,KAAK,OAAO,MAChD,OAAM,IAAI,aAAa;EACrB,MAAM;EACN,UAAU;EACV,WAAW;EACX,SAAS,iBAAiB;EAC3B,CAAC;;AAGN,SAAS,iBAAiB,IAAY,WAAiC;AACrE,QAAO,IAAI,aAAa;EACtB,MAAM;EACN,UAAU;EACV;EACA,SAAS,uBAAuB;EACjC,CAAC;;AAGJ,SAAS,YAAY,WAAiC;AACpD,QAAO,IAAI,aAAa;EACtB,MAAM;EACN,UAAU;EACV;EACA,SAAS;EACV,CAAC"}
+{"version":3,"file":"agentos-DFJ4TFaY.mjs","names":["DEFAULT_PERMISSIONS: Permissions","DEFAULT_LIMITS: NonNullable<AgentOsOptions[\"limits\"]>","vm: AgentOsVm | null","suspendedRoot: RootSnapshotExport | undefined","AgentOs: (typeof import(\"@rivet-dev/agentos-core\"))[\"AgentOs\"]","snapshot: SandboxSnapshot","id","history: ProcessOutputEvent[]","state: ProcessStatus","exitCode: number | undefined","stdout: Uint8Array[]","stderr: Uint8Array[]","timeout: ReturnType<typeof setTimeout> | undefined","interruptions: Promise<never>[]"],"sources":["../src/providers/agentos/index.ts"],"sourcesContent":["import { randomUUID } from \"node:crypto\";\nimport type {\n  AgentOs as AgentOsVm,\n  AgentOsOptions,\n  Permissions,\n  RootSnapshotExport,\n} from \"@rivet-dev/agentos-core\";\nimport { SandboxError } from \"../../core/errors\";\nimport type { SandboxProvider, SandboxRuntime } from \"../../core/provider\";\nimport type {\n  CommandInput,\n  CommandResult,\n  ProcessOutputEvent,\n  ProcessStatus,\n  RunOptions,\n  SandboxDirectoryEntry,\n  SandboxProcess,\n  SandboxSnapshot,\n} from \"../../core/types\";\nimport { withManagedSessions } from \"../../internal/managed-provider\";\nimport { portResult, toUint8Array } from \"../../internal/provider-utils\";\nimport { localCapabilities } from \"../capabilities\";\n\nconst DEFAULT_PERMISSIONS: Permissions = {\n  fs: \"allow\",\n  childProcess: \"allow\",\n  process: \"allow\",\n  env: \"allow\",\n  network: {\n    default: \"deny\",\n    rules: [\n      { mode: \"allow\", operations: [\"listen\"], patterns: [\"**\"] },\n      {\n        mode: \"allow\",\n        operations: [\"http\"],\n        patterns: [\"tcp://127.0.0.1:*\", \"tcp://[::1]:*\", \"tcp://localhost:*\"],\n      },\n    ],\n  },\n  binding: \"deny\",\n};\n\nconst DEFAULT_LIMITS: NonNullable<AgentOsOptions[\"limits\"]> = {\n  resources: {\n    cpuCount: 1,\n    maxProcesses: 64,\n    maxOpenFds: 256,\n    maxPipes: 128,\n    maxPtys: 16,\n    maxSockets: 128,\n    maxConnections: 64,\n    maxFilesystemBytes: 512 * 1024 * 1024,\n    maxInodeCount: 100_000,\n    maxWasmMemoryBytes: 256 * 1024 * 1024,\n  },\n  http: { maxFetchResponseBytes: 16 * 1024 * 1024 },\n  jsRuntime: {\n    v8HeapLimitMb: 256,\n    wallClockLimitMs: 120_000,\n    capturedOutputLimitBytes: 8 * 1024 * 1024,\n    stdinBufferLimitBytes: 1024 * 1024,\n  },\n};\n\nexport interface AgentOsProviderOptions {\n  /**\n   * Native agentOS VM options. The provider supplies production-oriented permissions and limits\n   * unless these fields are explicitly provided.\n   */\n  agentOs?: AgentOsOptions;\n}\n\nexport interface AgentOsSandbox {\n  /** The currently running native VM. Access throws while the sandbox is suspended or stopped. */\n  readonly vm: AgentOsVm;\n  suspend(): Promise<void>;\n  resume(): Promise<void>;\n}\n\ntype StoredSnapshot = {\n  metadata: SandboxSnapshot;\n  root: RootSnapshotExport;\n};\n\nexport { agentosCapabilities } from \"../capabilities\";\n\n/**\n * Internal constructor for the AgentOS VM that powers the Local provider.\n *\n * Outbound networking is denied by default. Pass an explicit agentOS permission policy when the\n * guest needs network or host bindings.\n */\nfunction createAgentOsProvider(\n  options: AgentOsProviderOptions = {},\n): SandboxProvider<AgentOsSandbox> {\n  const provider: SandboxProvider<AgentOsSandbox> = {\n    id: \"local\",\n    capabilities: localCapabilities,\n    async create(createOptions) {\n      const id = randomUUID();\n      const snapshots = new Map<string, StoredSnapshot>();\n      const baseOptions = options.agentOs ?? {};\n      let vm: AgentOsVm | null = null;\n      let suspendedRoot: RootSnapshotExport | undefined;\n      let stopped = false;\n\n      const createVm = async (root?: RootSnapshotExport): Promise<AgentOsVm> => {\n        let AgentOs: (typeof import(\"@rivet-dev/agentos-core\"))[\"AgentOs\"];\n        try {\n          ({ AgentOs } = await import(\"@rivet-dev/agentos-core\"));\n        } catch (error) {\n          throw new SandboxError({\n            code: \"unavailable\",\n            provider: \"local\",\n            operation: \"sandbox.create\",\n            message:\n              \"The Local provider could not load its @rivet-dev/agentos-core runtime dependency.\",\n            cause: error,\n          });\n        }\n        const next = await AgentOs.create({\n          ...baseOptions,\n          permissions: baseOptions.permissions ?? DEFAULT_PERMISSIONS,\n          limits: baseOptions.limits ?? DEFAULT_LIMITS,\n          ...(root\n            ? {\n                rootFilesystem: {\n                  disableDefaultBaseLayer: true,\n                  lowers: [root],\n                },\n              }\n            : {}),\n        });\n        await next.mkdir(createOptions.cwd, { recursive: true });\n        return next;\n      };\n\n      const currentVm = (): AgentOsVm => {\n        if (stopped)\n          throw new SandboxError({\n            code: \"terminated\",\n            provider: \"local\",\n            operation: \"sandbox\",\n            message: \"Sandbox has stopped\",\n          });\n        if (!vm)\n          throw new SandboxError({\n            code: \"terminated\",\n            provider: \"local\",\n            operation: \"sandbox\",\n            message: \"Sandbox is suspended; call sandbox.raw.resume() before using it\",\n          });\n        return vm;\n      };\n\n      const suspend = async () => {\n        if (stopped || !vm) return;\n        suspendedRoot = await vm.snapshotRootFilesystem();\n        await vm.dispose();\n        vm = null;\n      };\n\n      const resume = async () => {\n        if (stopped)\n          throw new SandboxError({\n            code: \"terminated\",\n            provider: \"local\",\n            operation: \"sandbox.resume\",\n            message: \"A stopped sandbox cannot be resumed\",\n          });\n        if (vm) return;\n        vm = await createVm(suspendedRoot);\n        suspendedRoot = undefined;\n      };\n\n      vm = await createVm();\n      const raw: AgentOsSandbox = {\n        get vm() {\n          return currentVm();\n        },\n        suspend,\n        resume,\n      };\n\n      const runtime: SandboxRuntime<AgentOsSandbox> = {\n        id,\n        raw,\n        capabilities: localCapabilities,\n        files: {\n          write: async (path, value) => currentVm().writeFile(path, await toUint8Array(value)),\n          read: (path) => currentVm().readFile(path),\n          async list(path) {\n            const entries = await currentVm().readdirRecursive(path, { maxDepth: 0 });\n            return entries.map(\n              (entry): SandboxDirectoryEntry => ({\n                name: entry.path.slice(entry.path.lastIndexOf(\"/\") + 1),\n                path: entry.path,\n                type: entry.type,\n                size: entry.type === \"file\" ? entry.size : undefined,\n              }),\n            );\n          },\n          mkdir: (path) => currentVm().mkdir(path, { recursive: true }),\n          async remove(path) {\n            if (path === \"/\")\n              throw new SandboxError({\n                code: \"invalid_input\",\n                provider: \"local\",\n                operation: \"files.remove\",\n                message: \"Cannot remove the sandbox root\",\n              });\n            await currentVm().delete(path, { recursive: true });\n          },\n          exists: (path) => currentVm().exists(path),\n        },\n        run: (command, runOptions) =>\n          runCommand(currentVm(), command, withEnv(createOptions, runOptions)),\n        async start(command, runOptions) {\n          return startProcess(currentVm(), command, withEnv(createOptions, runOptions));\n        },\n        async expose(port) {\n          validatePort(port);\n          const url = `http://agentos-${id}.internal:${port}`;\n          return portResult(port, url, false, false, (path = \"/\", init) => {\n            const request = new Request(new URL(path, url), init);\n            return currentVm().fetch(port, request);\n          });\n        },\n        snapshots: {\n          async create(snapshotOptions) {\n            const snapshot: SandboxSnapshot = {\n              id: randomUUID(),\n              name: snapshotOptions?.name,\n              mode: \"filesystem\",\n              createdAt: new Date(),\n            };\n            snapshots.set(snapshot.id, {\n              metadata: snapshot,\n              root: await currentVm().snapshotRootFilesystem(),\n            });\n            return snapshot;\n          },\n          async delete(snapshot) {\n            const id = typeof snapshot === \"string\" ? snapshot : snapshot.id;\n            if (!snapshots.delete(id)) throw snapshotNotFound(id, \"snapshot.delete\");\n          },\n          async restore(snapshot) {\n            const id = typeof snapshot === \"string\" ? snapshot : snapshot.id;\n            const stored = snapshots.get(id);\n            if (!stored) throw snapshotNotFound(id, \"snapshot.restore\");\n            const previous = currentVm();\n            vm = null;\n            await previous.dispose();\n            try {\n              vm = await createVm(stored.root);\n            } catch (error) {\n              stopped = true;\n              throw error;\n            }\n          },\n        },\n        async stop() {\n          if (stopped) return;\n          stopped = true;\n          suspendedRoot = undefined;\n          snapshots.clear();\n          const active = vm;\n          vm = null;\n          await active?.dispose();\n        },\n      };\n      return runtime;\n    },\n  };\n\n  return withManagedSessions(provider, [], {\n    stop: (sandbox) => sandbox.raw.suspend(),\n    resume: (sandbox) => sandbox.raw.resume(),\n  });\n}\n\n/**\n * @deprecated AgentOS now powers `local()` under the hood. Import `local` from\n * `@opencoredev/sandbox-sdk/local` instead.\n */\nexport function agentos(options: AgentOsProviderOptions = {}): SandboxProvider<AgentOsSandbox> {\n  return createAgentOsProvider(options);\n}\n\nfunction withEnv(\n  createOptions: { env: Readonly<Record<string, string>> },\n  runOptions: RunOptions,\n): RunOptions {\n  return { ...runOptions, env: { ...createOptions.env, ...runOptions.env } };\n}\n\nfunction commandParts(command: CommandInput): [string, string[]] {\n  return typeof command === \"string\"\n    ? [\"sh\", [\"-lc\", command]]\n    : [command.command, [...(command.args ?? [])]];\n}\n\nfunction startProcess(vm: AgentOsVm, command: CommandInput, options: RunOptions): SandboxProcess {\n  if (options.signal?.aborted) throw interrupted(\"process.start\");\n  const [executable, args] = commandParts(command);\n  const history: ProcessOutputEvent[] = [];\n  const waiting = new Set<() => void>();\n  let state: ProcessStatus = \"running\";\n  let exitCode: number | undefined;\n  const push = (stream: \"stdout\" | \"stderr\", data: Uint8Array) => {\n    const output = stream === \"stderr\" ? withoutInternalAgentOsWarnings(data) : data;\n    if (output.byteLength === 0) return;\n    history.push({ stream, data: new Uint8Array(output), timestamp: new Date() });\n    for (const wake of waiting) wake();\n    waiting.clear();\n  };\n  const process = vm.spawn(executable, args, {\n    cwd: options.cwd,\n    env: options.env ? { ...options.env } : undefined,\n    streamStdin: true,\n    onStdout: (data) => push(\"stdout\", data),\n    onStderr: (data) => push(\"stderr\", data),\n  });\n  const completed = vm.waitProcess(process.pid).then((code) => {\n    exitCode = code;\n    state = code === 137 || code === 143 ? \"killed\" : \"exited\";\n    for (const wake of waiting) wake();\n    waiting.clear();\n    return { exitCode: code };\n  });\n  const abort = () => vm.stopProcess(process.pid);\n  options.signal?.addEventListener(\"abort\", abort, { once: true });\n  void completed.finally(() => options.signal?.removeEventListener(\"abort\", abort));\n\n  return {\n    id: String(process.pid),\n    async status() {\n      return state;\n    },\n    async *output() {\n      let index = 0;\n      while (state === \"running\" || index < history.length) {\n        while (index < history.length) yield history[index++]!;\n        if (state !== \"running\") break;\n        await new Promise<void>((resolve) => waiting.add(resolve));\n      }\n    },\n    write: (value) => vm.writeProcessStdin(process.pid, value),\n    wait: () => (exitCode === undefined ? completed : Promise.resolve({ exitCode })),\n    async kill(signal = \"SIGTERM\") {\n      if (state !== \"running\") return;\n      if (signal === \"SIGKILL\" || signal === \"KILL\" || signal === \"9\") vm.killProcess(process.pid);\n      else vm.stopProcess(process.pid);\n    },\n  };\n}\n\nfunction withoutInternalAgentOsWarnings(data: Uint8Array): Uint8Array {\n  const value = new TextDecoder()\n    .decode(data)\n    .replaceAll(\"\\u001b[33m WARN\\u001b[0m could not retrieve pid for child process\\n\", \"\");\n  return new TextEncoder().encode(value);\n}\n\nasync function runCommand(\n  vm: AgentOsVm,\n  command: CommandInput,\n  options: RunOptions,\n): Promise<CommandResult> {\n  const started = performance.now();\n  const process = startProcess(vm, command, options);\n  const stdout: Uint8Array[] = [];\n  const stderr: Uint8Array[] = [];\n  const collect = (async () => {\n    for await (const event of process.output()) {\n      const bytes =\n        typeof event.data === \"string\" ? new TextEncoder().encode(event.data) : event.data;\n      (event.stream === \"stdout\" ? stdout : stderr).push(bytes);\n    }\n  })();\n  let timeout: ReturnType<typeof setTimeout> | undefined;\n  let removeAbort = () => {};\n  const interruptions: Promise<never>[] = [];\n\n  if (options.timeout && options.timeout > 0) {\n    interruptions.push(\n      new Promise<never>((_, reject) => {\n        timeout = setTimeout(() => {\n          void process.kill(\"SIGKILL\");\n          reject(\n            new SandboxError({\n              code: \"timeout\",\n              provider: \"local\",\n              operation: \"process.run\",\n              message: `Command timed out after ${options.timeout}ms`,\n            }),\n          );\n        }, options.timeout);\n      }),\n    );\n  }\n  if (options.signal) {\n    interruptions.push(\n      new Promise<never>((_, reject) => {\n        const abort = () => {\n          void process.kill(\"SIGKILL\");\n          reject(interrupted(\"process.run\"));\n        };\n        options.signal!.addEventListener(\"abort\", abort, { once: true });\n        removeAbort = () => options.signal!.removeEventListener(\"abort\", abort);\n      }),\n    );\n  }\n\n  try {\n    const result = await Promise.race([process.wait(), ...interruptions]);\n    await collect;\n    return {\n      stdout: decodeChunks(stdout),\n      stderr: decodeChunks(stderr),\n      exitCode: result.exitCode,\n      success: result.exitCode === 0,\n      durationMs: Math.round(performance.now() - started),\n    };\n  } catch (error) {\n    await process.wait().catch(() => {});\n    await collect.catch(() => {});\n    throw error;\n  } finally {\n    if (timeout) clearTimeout(timeout);\n    removeAbort();\n  }\n}\n\nfunction decodeChunks(chunks: Uint8Array[]): string {\n  const length = chunks.reduce((total, chunk) => total + chunk.byteLength, 0);\n  const output = new Uint8Array(length);\n  let offset = 0;\n  for (const chunk of chunks) {\n    output.set(chunk, offset);\n    offset += chunk.byteLength;\n  }\n  return new TextDecoder().decode(output);\n}\n\nfunction validatePort(port: number): void {\n  if (!Number.isInteger(port) || port < 1 || port > 65_535)\n    throw new SandboxError({\n      code: \"invalid_input\",\n      provider: \"local\",\n      operation: \"ports.expose\",\n      message: `Invalid port: ${port}`,\n    });\n}\n\nfunction snapshotNotFound(id: string, operation: string): SandboxError {\n  return new SandboxError({\n    code: \"not_found\",\n    provider: \"local\",\n    operation,\n    message: `Snapshot not found: ${id}`,\n  });\n}\n\nfunction interrupted(operation: string): SandboxError {\n  return new SandboxError({\n    code: \"terminated\",\n    provider: \"local\",\n    operation,\n    message: \"Operation was aborted\",\n  });\n}\n"],"mappings":";;;;;;AAuBA,MAAMA,sBAAmC;CACvC,IAAI;CACJ,cAAc;CACd,SAAS;CACT,KAAK;CACL,SAAS;EACP,SAAS;EACT,OAAO,CACL;GAAE,MAAM;GAAS,YAAY,CAAC,SAAS;GAAE,UAAU,CAAC,KAAK;GAAE,EAC3D;GACE,MAAM;GACN,YAAY,CAAC,OAAO;GACpB,UAAU;IAAC;IAAqB;IAAiB;IAAoB;GACtE,CACF;EACF;CACD,SAAS;CACV;AAED,MAAMC,iBAAwD;CAC5D,WAAW;EACT,UAAU;EACV,cAAc;EACd,YAAY;EACZ,UAAU;EACV,SAAS;EACT,YAAY;EACZ,gBAAgB;EAChB,oBAAoB,MAAM,OAAO;EACjC,eAAe;EACf,oBAAoB,MAAM,OAAO;EAClC;CACD,MAAM,EAAE,uBAAuB,KAAK,OAAO,MAAM;CACjD,WAAW;EACT,eAAe;EACf,kBAAkB;EAClB,0BAA0B,IAAI,OAAO;EACrC,uBAAuB,OAAO;EAC/B;CACF;;;;;;;AA8BD,SAAS,sBACP,UAAkC,EAAE,EACH;AAqLjC,QAAO,oBApL2C;EAChD,IAAI;EACJ,cAAc;EACd,MAAM,OAAO,eAAe;GAC1B,MAAM,KAAK,YAAY;GACvB,MAAM,4BAAY,IAAI,KAA6B;GACnD,MAAM,cAAc,QAAQ,WAAW,EAAE;GACzC,IAAIC,KAAuB;GAC3B,IAAIC;GACJ,IAAI,UAAU;GAEd,MAAM,WAAW,OAAO,SAAkD;IACxE,IAAIC;AACJ,QAAI;AACF,MAAC,CAAE,WAAY,MAAM,OAAO;aACrB,OAAO;AACd,WAAM,IAAI,aAAa;MACrB,MAAM;MACN,UAAU;MACV,WAAW;MACX,SACE;MACF,OAAO;MACR,CAAC;;IAEJ,MAAM,OAAO,MAAM,QAAQ,OAAO;KAChC,GAAG;KACH,aAAa,YAAY,eAAe;KACxC,QAAQ,YAAY,UAAU;KAC9B,GAAI,OACA,EACE,gBAAgB;MACd,yBAAyB;MACzB,QAAQ,CAAC,KAAK;MACf,EACF,GACD,EAAE;KACP,CAAC;AACF,UAAM,KAAK,MAAM,cAAc,KAAK,EAAE,WAAW,MAAM,CAAC;AACxD,WAAO;;GAGT,MAAM,kBAA6B;AACjC,QAAI,QACF,OAAM,IAAI,aAAa;KACrB,MAAM;KACN,UAAU;KACV,WAAW;KACX,SAAS;KACV,CAAC;AACJ,QAAI,CAAC,GACH,OAAM,IAAI,aAAa;KACrB,MAAM;KACN,UAAU;KACV,WAAW;KACX,SAAS;KACV,CAAC;AACJ,WAAO;;GAGT,MAAM,UAAU,YAAY;AAC1B,QAAI,WAAW,CAAC,GAAI;AACpB,oBAAgB,MAAM,GAAG,wBAAwB;AACjD,UAAM,GAAG,SAAS;AAClB,SAAK;;GAGP,MAAM,SAAS,YAAY;AACzB,QAAI,QACF,OAAM,IAAI,aAAa;KACrB,MAAM;KACN,UAAU;KACV,WAAW;KACX,SAAS;KACV,CAAC;AACJ,QAAI,GAAI;AACR,SAAK,MAAM,SAAS,cAAc;AAClC,oBAAgB;;AAGlB,QAAK,MAAM,UAAU;AAgGrB,UAvFgD;IAC9C;IACA,KAV0B;KAC1B,IAAI,KAAK;AACP,aAAO,WAAW;;KAEpB;KACA;KACD;IAKC,cAAc;IACd,OAAO;KACL,OAAO,OAAO,MAAM,UAAU,WAAW,CAAC,UAAU,MAAM,MAAM,aAAa,MAAM,CAAC;KACpF,OAAO,SAAS,WAAW,CAAC,SAAS,KAAK;KAC1C,MAAM,KAAK,MAAM;AAEf,cADgB,MAAM,WAAW,CAAC,iBAAiB,MAAM,EAAE,UAAU,GAAG,CAAC,EAC1D,KACZ,WAAkC;OACjC,MAAM,MAAM,KAAK,MAAM,MAAM,KAAK,YAAY,IAAI,GAAG,EAAE;OACvD,MAAM,MAAM;OACZ,MAAM,MAAM;OACZ,MAAM,MAAM,SAAS,SAAS,MAAM,OAAO;OAC5C,EACF;;KAEH,QAAQ,SAAS,WAAW,CAAC,MAAM,MAAM,EAAE,WAAW,MAAM,CAAC;KAC7D,MAAM,OAAO,MAAM;AACjB,UAAI,SAAS,IACX,OAAM,IAAI,aAAa;OACrB,MAAM;OACN,UAAU;OACV,WAAW;OACX,SAAS;OACV,CAAC;AACJ,YAAM,WAAW,CAAC,OAAO,MAAM,EAAE,WAAW,MAAM,CAAC;;KAErD,SAAS,SAAS,WAAW,CAAC,OAAO,KAAK;KAC3C;IACD,MAAM,SAAS,eACb,WAAW,WAAW,EAAE,SAAS,QAAQ,eAAe,WAAW,CAAC;IACtE,MAAM,MAAM,SAAS,YAAY;AAC/B,YAAO,aAAa,WAAW,EAAE,SAAS,QAAQ,eAAe,WAAW,CAAC;;IAE/E,MAAM,OAAO,MAAM;AACjB,kBAAa,KAAK;KAClB,MAAM,MAAM,kBAAkB,GAAG,YAAY;AAC7C,YAAO,WAAW,MAAM,KAAK,OAAO,QAAQ,OAAO,KAAK,SAAS;MAC/D,MAAM,UAAU,IAAI,QAAQ,IAAI,IAAI,MAAM,IAAI,EAAE,KAAK;AACrD,aAAO,WAAW,CAAC,MAAM,MAAM,QAAQ;OACvC;;IAEJ,WAAW;KACT,MAAM,OAAO,iBAAiB;MAC5B,MAAMC,WAA4B;OAChC,IAAI,YAAY;OAChB,MAAM,iBAAiB;OACvB,MAAM;OACN,2BAAW,IAAI,MAAM;OACtB;AACD,gBAAU,IAAI,SAAS,IAAI;OACzB,UAAU;OACV,MAAM,MAAM,WAAW,CAAC,wBAAwB;OACjD,CAAC;AACF,aAAO;;KAET,MAAM,OAAO,UAAU;MACrB,MAAMC,OAAK,OAAO,aAAa,WAAW,WAAW,SAAS;AAC9D,UAAI,CAAC,UAAU,OAAOA,KAAG,CAAE,OAAM,iBAAiBA,MAAI,kBAAkB;;KAE1E,MAAM,QAAQ,UAAU;MACtB,MAAMA,OAAK,OAAO,aAAa,WAAW,WAAW,SAAS;MAC9D,MAAM,SAAS,UAAU,IAAIA,KAAG;AAChC,UAAI,CAAC,OAAQ,OAAM,iBAAiBA,MAAI,mBAAmB;MAC3D,MAAM,WAAW,WAAW;AAC5B,WAAK;AACL,YAAM,SAAS,SAAS;AACxB,UAAI;AACF,YAAK,MAAM,SAAS,OAAO,KAAK;eACzB,OAAO;AACd,iBAAU;AACV,aAAM;;;KAGX;IACD,MAAM,OAAO;AACX,SAAI,QAAS;AACb,eAAU;AACV,qBAAgB;AAChB,eAAU,OAAO;KACjB,MAAM,SAAS;AACf,UAAK;AACL,WAAM,QAAQ,SAAS;;IAE1B;;EAGJ,EAEoC,EAAE,EAAE;EACvC,OAAO,YAAY,QAAQ,IAAI,SAAS;EACxC,SAAS,YAAY,QAAQ,IAAI,QAAQ;EAC1C,CAAC;;;;;;AAOJ,SAAgB,QAAQ,UAAkC,EAAE,EAAmC;AAC7F,QAAO,sBAAsB,QAAQ;;AAGvC,SAAS,QACP,eACA,YACY;AACZ,QAAO;EAAE,GAAG;EAAY,KAAK;GAAE,GAAG,cAAc;GAAK,GAAG,WAAW;GAAK;EAAE;;AAG5E,SAAS,aAAa,SAA2C;AAC/D,QAAO,OAAO,YAAY,WACtB,CAAC,MAAM,CAAC,OAAO,QAAQ,CAAC,GACxB,CAAC,QAAQ,SAAS,CAAC,GAAI,QAAQ,QAAQ,EAAE,CAAE,CAAC;;AAGlD,SAAS,aAAa,IAAe,SAAuB,SAAqC;AAC/F,KAAI,QAAQ,QAAQ,QAAS,OAAM,YAAY,gBAAgB;CAC/D,MAAM,CAAC,YAAY,QAAQ,aAAa,QAAQ;CAChD,MAAMC,UAAgC,EAAE;CACxC,MAAM,0BAAU,IAAI,KAAiB;CACrC,IAAIC,QAAuB;CAC3B,IAAIC;CACJ,MAAM,QAAQ,QAA6B,SAAqB;EAC9D,MAAM,SAAS,WAAW,WAAW,+BAA+B,KAAK,GAAG;AAC5E,MAAI,OAAO,eAAe,EAAG;AAC7B,UAAQ,KAAK;GAAE;GAAQ,MAAM,IAAI,WAAW,OAAO;GAAE,2BAAW,IAAI,MAAM;GAAE,CAAC;AAC7E,OAAK,MAAM,QAAQ,QAAS,OAAM;AAClC,UAAQ,OAAO;;CAEjB,MAAM,UAAU,GAAG,MAAM,YAAY,MAAM;EACzC,KAAK,QAAQ;EACb,KAAK,QAAQ,MAAM,EAAE,GAAG,QAAQ,KAAK,GAAG;EACxC,aAAa;EACb,WAAW,SAAS,KAAK,UAAU,KAAK;EACxC,WAAW,SAAS,KAAK,UAAU,KAAK;EACzC,CAAC;CACF,MAAM,YAAY,GAAG,YAAY,QAAQ,IAAI,CAAC,MAAM,SAAS;AAC3D,aAAW;AACX,UAAQ,SAAS,OAAO,SAAS,MAAM,WAAW;AAClD,OAAK,MAAM,QAAQ,QAAS,OAAM;AAClC,UAAQ,OAAO;AACf,SAAO,EAAE,UAAU,MAAM;GACzB;CACF,MAAM,cAAc,GAAG,YAAY,QAAQ,IAAI;AAC/C,SAAQ,QAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AAChE,CAAK,UAAU,cAAc,QAAQ,QAAQ,oBAAoB,SAAS,MAAM,CAAC;AAEjF,QAAO;EACL,IAAI,OAAO,QAAQ,IAAI;EACvB,MAAM,SAAS;AACb,UAAO;;EAET,OAAO,SAAS;GACd,IAAI,QAAQ;AACZ,UAAO,UAAU,aAAa,QAAQ,QAAQ,QAAQ;AACpD,WAAO,QAAQ,QAAQ,OAAQ,OAAM,QAAQ;AAC7C,QAAI,UAAU,UAAW;AACzB,UAAM,IAAI,SAAe,YAAY,QAAQ,IAAI,QAAQ,CAAC;;;EAG9D,QAAQ,UAAU,GAAG,kBAAkB,QAAQ,KAAK,MAAM;EAC1D,YAAa,aAAa,SAAY,YAAY,QAAQ,QAAQ,EAAE,UAAU,CAAC;EAC/E,MAAM,KAAK,SAAS,WAAW;AAC7B,OAAI,UAAU,UAAW;AACzB,OAAI,WAAW,aAAa,WAAW,UAAU,WAAW,IAAK,IAAG,YAAY,QAAQ,IAAI;OACvF,IAAG,YAAY,QAAQ,IAAI;;EAEnC;;AAGH,SAAS,+BAA+B,MAA8B;CACpE,MAAM,QAAQ,IAAI,aAAa,CAC5B,OAAO,KAAK,CACZ,WAAW,mEAAuE,GAAG;AACxF,QAAO,IAAI,aAAa,CAAC,OAAO,MAAM;;AAGxC,eAAe,WACb,IACA,SACA,SACwB;CACxB,MAAM,UAAU,YAAY,KAAK;CACjC,MAAM,UAAU,aAAa,IAAI,SAAS,QAAQ;CAClD,MAAMC,SAAuB,EAAE;CAC/B,MAAMC,SAAuB,EAAE;CAC/B,MAAM,WAAW,YAAY;AAC3B,aAAW,MAAM,SAAS,QAAQ,QAAQ,EAAE;GAC1C,MAAM,QACJ,OAAO,MAAM,SAAS,WAAW,IAAI,aAAa,CAAC,OAAO,MAAM,KAAK,GAAG,MAAM;AAChF,IAAC,MAAM,WAAW,WAAW,SAAS,QAAQ,KAAK,MAAM;;KAEzD;CACJ,IAAIC;CACJ,IAAI,oBAAoB;CACxB,MAAMC,gBAAkC,EAAE;AAE1C,KAAI,QAAQ,WAAW,QAAQ,UAAU,EACvC,eAAc,KACZ,IAAI,SAAgB,GAAG,WAAW;AAChC,YAAU,iBAAiB;AACzB,GAAK,QAAQ,KAAK,UAAU;AAC5B,UACE,IAAI,aAAa;IACf,MAAM;IACN,UAAU;IACV,WAAW;IACX,SAAS,2BAA2B,QAAQ,QAAQ;IACrD,CAAC,CACH;KACA,QAAQ,QAAQ;GACnB,CACH;AAEH,KAAI,QAAQ,OACV,eAAc,KACZ,IAAI,SAAgB,GAAG,WAAW;EAChC,MAAM,cAAc;AAClB,GAAK,QAAQ,KAAK,UAAU;AAC5B,UAAO,YAAY,cAAc,CAAC;;AAEpC,UAAQ,OAAQ,iBAAiB,SAAS,OAAO,EAAE,MAAM,MAAM,CAAC;AAChE,sBAAoB,QAAQ,OAAQ,oBAAoB,SAAS,MAAM;GACvE,CACH;AAGH,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,QAAQ,MAAM,EAAE,GAAG,cAAc,CAAC;AACrE,QAAM;AACN,SAAO;GACL,QAAQ,aAAa,OAAO;GAC5B,QAAQ,aAAa,OAAO;GAC5B,UAAU,OAAO;GACjB,SAAS,OAAO,aAAa;GAC7B,YAAY,KAAK,MAAM,YAAY,KAAK,GAAG,QAAQ;GACpD;UACM,OAAO;AACd,QAAM,QAAQ,MAAM,CAAC,YAAY,GAAG;AACpC,QAAM,QAAQ,YAAY,GAAG;AAC7B,QAAM;WACE;AACR,MAAI,QAAS,cAAa,QAAQ;AAClC,eAAa;;;AAIjB,SAAS,aAAa,QAA8B;CAClD,MAAM,SAAS,OAAO,QAAQ,OAAO,UAAU,QAAQ,MAAM,YAAY,EAAE;CAC3E,MAAM,SAAS,IAAI,WAAW,OAAO;CACrC,IAAI,SAAS;AACb,MAAK,MAAM,SAAS,QAAQ;AAC1B,SAAO,IAAI,OAAO,OAAO;AACzB,YAAU,MAAM;;AAElB,QAAO,IAAI,aAAa,CAAC,OAAO,OAAO;;AAGzC,SAAS,aAAa,MAAoB;AACxC,KAAI,CAAC,OAAO,UAAU,KAAK,IAAI,OAAO,KAAK,OAAO,MAChD,OAAM,IAAI,aAAa;EACrB,MAAM;EACN,UAAU;EACV,WAAW;EACX,SAAS,iBAAiB;EAC3B,CAAC;;AAGN,SAAS,iBAAiB,IAAY,WAAiC;AACrE,QAAO,IAAI,aAAa;EACtB,MAAM;EACN,UAAU;EACV;EACA,SAAS,uBAAuB;EACjC,CAAC;;AAGJ,SAAS,YAAY,WAAiC;AACpD,QAAO,IAAI,aAAa;EACtB,MAAM;EACN,UAAU;EACV;EACA,SAAS;EACV,CAAC"}

package/dist/ai/harness.d.mts

@@ -1,5 +1,5 @@
-import "../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../provider-_caCV8kk.mjs";
+import "../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../provider-BzzkIVmv.mjs";
 import { HarnessV1NetworkPolicy, HarnessV1NetworkSandboxSession, HarnessV1SandboxProvider, HarnessV1SandboxProvider as HarnessV1SandboxProvider$1 } from "@ai-sdk/harness";
 
 //#region src/ai/harness.d.ts

package/dist/ai/index.d.mts

@@ -1,4 +1,4 @@
-import { f as Sandbox } from "../types-BTagTtsp.mjs";
+import { f as Sandbox } from "../types-DEi_dfRR.mjs";
 import { Experimental_SandboxSession, Tool, ToolSet } from "ai";
 
 //#region src/ai/index.d.ts

package/dist/{capabilities-CMnszzpt.d.mts → capabilities-DftdOpIu.d.mts}

@@ -1,4 +1,4 @@
-import { r as CapabilityMode } from "./types-BTagTtsp.mjs";
+import { r as CapabilityMode } from "./types-DEi_dfRR.mjs";
 
 //#region src/providers/capabilities.d.ts
 declare const localCapabilities: Readonly<Record<"files.read" | "files.write" | "files.list" | "files.remove" | "process.run" | "process.stream" | "process.background" | "process.stdin" | "process.cancel" | "ports.expose" | "ports.authenticatedRequest" | "snapshot.create" | "snapshot.delete" | "snapshot.restore" | "sandbox.resume" | "filesystem.persistent" | "image.custom" | "network.policy" | "process.pty" | "compute.gpu", false | CapabilityMode>>;
@@ -10,4 +10,4 @@ declare const vercelCapabilities: Readonly<Record<"files.read" | "files.write" |
 declare const upstashCapabilities: Readonly<Record<"files.read" | "files.write" | "files.list" | "files.remove" | "process.run" | "process.stream" | "process.background" | "process.stdin" | "process.cancel" | "ports.expose" | "ports.authenticatedRequest" | "snapshot.create" | "snapshot.delete" | "snapshot.restore" | "sandbox.resume" | "filesystem.persistent" | "image.custom" | "network.policy" | "process.pty" | "compute.gpu", false | CapabilityMode>>;
 //#endregion
 export { upstashCapabilities as a, localCapabilities as i, daytonaCapabilities as n, vercelCapabilities as o, e2bCapabilities as r, agentosCapabilities as t };
-//# sourceMappingURL=capabilities-CMnszzpt.d.mts.map
+//# sourceMappingURL=capabilities-DftdOpIu.d.mts.map

package/dist/eve/index.d.mts

@@ -1,5 +1,5 @@
-import "../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../provider-_caCV8kk.mjs";
+import "../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../provider-BzzkIVmv.mjs";
 import { SandboxBackend, SandboxBackendHandle, SandboxNetworkPolicy, SandboxSession as EveSandboxSession } from "eve/sandbox";
 
 //#region src/eve/index.d.ts

package/dist/{index-B1YT6OQ8.d.mts → index-Bk6GmoEt.d.mts}

@@ -1,4 +1,4 @@
-import { o as SandboxProvider } from "./provider-_caCV8kk.mjs";
+import { o as SandboxProvider } from "./provider-BzzkIVmv.mjs";
 import { AgentOs, AgentOsOptions } from "@rivet-dev/agentos-core";
 
 //#region src/providers/agentos/index.d.ts
@@ -22,4 +22,4 @@ interface AgentOsSandbox {
 declare function agentos(options?: AgentOsProviderOptions): SandboxProvider<AgentOsSandbox>;
 //#endregion
 export { AgentOsSandbox as n, agentos as r, AgentOsProviderOptions as t };
-//# sourceMappingURL=index-B1YT6OQ8.d.mts.map
+//# sourceMappingURL=index-Bk6GmoEt.d.mts.map

package/dist/{index-BMFkO6Fv.d.mts → index-BufLdrbp.d.mts}

@@ -1,4 +1,4 @@
-import { f as Sandbox, r as CapabilityMode, t as Capability } from "./types-BTagTtsp.mjs";
+import { f as Sandbox, r as CapabilityMode, t as Capability } from "./types-DEi_dfRR.mjs";
 
 //#region src/core/capabilities.d.ts
 declare function supports(sandbox: Pick<Sandbox, "capabilities">, capability: Capability): boolean;
@@ -28,4 +28,4 @@ declare class SandboxError extends Error {
 declare function isSandboxError(error: unknown): error is SandboxError;
 //#endregion
 export { sandboxErrorCodes as a, supports as c, redactSensitive as i, SandboxErrorCode as n, capabilityMode as o, isSandboxError as r, requireCapability as s, SandboxError as t };
-//# sourceMappingURL=index-BMFkO6Fv.d.mts.map
+//# sourceMappingURL=index-BufLdrbp.d.mts.map

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { _ as SandboxProcesses, a as CommandResult, b as capabilityNames, c as ProcessOutputEvent, d as RunOptions, f as Sandbox, g as SandboxProcess, h as SandboxPorts, i as CommandInput, l as ProcessStatus, m as SandboxFiles, n as CapabilityMap, o as ExposedPort, p as SandboxDirectoryEntry, r as CapabilityMode, s as FileValue, t as Capability, u as ProviderName, v as SandboxSnapshot, x as providerNames, y as SandboxSnapshots } from "./types-BTagTtsp.mjs";
-import { a as SandboxNetworkPolicy, i as ManagedSandboxSession, n as ManagedSandboxProvider, r as ManagedSandboxResumeOptions, t as ManagedSandboxCreateOptions } from "./provider-_caCV8kk.mjs";
-import { a as sandboxErrorCodes, c as supports, i as redactSensitive, n as SandboxErrorCode, o as capabilityMode, r as isSandboxError, s as requireCapability, t as SandboxError } from "./index-BMFkO6Fv.mjs";
-import { n as createSandbox, r as withSandbox } from "./sandbox-BUYT-1C9.mjs";
+import { _ as SandboxProcesses, a as CommandResult, b as capabilityNames, c as ProcessOutputEvent, d as RunOptions, f as Sandbox, g as SandboxProcess, h as SandboxPorts, i as CommandInput, l as ProcessStatus, m as SandboxFiles, n as CapabilityMap, o as ExposedPort, p as SandboxDirectoryEntry, r as CapabilityMode, s as FileValue, t as Capability, u as ProviderName, v as SandboxSnapshot, x as providerNames, y as SandboxSnapshots } from "./types-DEi_dfRR.mjs";
+import { a as SandboxNetworkPolicy, i as ManagedSandboxSession, n as ManagedSandboxProvider, r as ManagedSandboxResumeOptions, t as ManagedSandboxCreateOptions } from "./provider-BzzkIVmv.mjs";
+import { a as sandboxErrorCodes, c as supports, i as redactSensitive, n as SandboxErrorCode, o as capabilityMode, r as isSandboxError, s as requireCapability, t as SandboxError } from "./index-BufLdrbp.mjs";
+import { n as createSandbox, r as withSandbox } from "./sandbox-Dco6z9aB.mjs";
 export { Capability, CapabilityMap, CapabilityMode, CommandInput, CommandResult, ExposedPort, FileValue, ManagedSandboxCreateOptions, ManagedSandboxProvider, ManagedSandboxResumeOptions, ManagedSandboxSession, ProcessOutputEvent, ProcessStatus, ProviderName, RunOptions, Sandbox, SandboxDirectoryEntry, SandboxError, SandboxErrorCode, SandboxFiles, SandboxNetworkPolicy, SandboxPorts, SandboxProcess, SandboxProcesses, SandboxSnapshot, SandboxSnapshots, capabilityMode, capabilityNames, createSandbox, isSandboxError, providerNames, redactSensitive, requireCapability, sandboxErrorCodes, supports, withSandbox };

package/dist/index.mjs

@@ -1,6 +1,6 @@
 import { a as sandboxErrorCodes, i as redactSensitive, n as isSandboxError, t as SandboxError } from "./errors-Ch9PHKTd.mjs";
 import { i as supports, r as requireCapability, t as capabilityMode } from "./capabilities-COKpwoFH.mjs";
-import { n as withSandbox, t as createSandbox } from "./sandbox-BwyHcB_C.mjs";
+import { n as withSandbox, t as createSandbox } from "./sandbox-rIOcbhtM.mjs";
 
 //#region src/core/types.ts
 const providerNames = [

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/core/types.ts"],"sourcesContent":["export const providerNames = [\"local\", \"e2b\", \"daytona\", \"vercel\", \"upstash\"] as const;\nexport type ProviderName = (typeof providerNames)[number];\n\nexport const capabilityNames = [\n  \"files.read\",\n  \"files.write\",\n  \"files.list\",\n  \"files.remove\",\n  \"process.run\",\n  \"process.stream\",\n  \"process.background\",\n  \"process.stdin\",\n  \"process.cancel\",\n  \"ports.expose\",\n  \"ports.authenticatedRequest\",\n  \"snapshot.create\",\n  \"snapshot.delete\",\n  \"snapshot.restore\",\n  \"sandbox.resume\",\n  \"filesystem.persistent\",\n  \"image.custom\",\n  \"network.policy\",\n  \"process.pty\",\n  \"compute.gpu\",\n] as const;\n\nexport type Capability = (typeof capabilityNames)[number];\nexport type CapabilityMode =\n  | \"filesystem\"\n  | \"memory\"\n  | \"template\"\n  | \"fork\"\n  | \"public\"\n  | \"authenticated\"\n  | \"combined-stream\"\n  | \"separate-streams\"\n  | \"ephemeral\"\n  | \"persistent\"\n  | \"localhost\"\n  | \"in-process\"\n  | \"full\"\n  | \"native\";\n\nexport type CapabilityMap = Readonly<Record<Capability, false | CapabilityMode>>;\n\nexport type CommandInput = string | { command: string; args?: readonly string[] };\n\nexport interface RunOptions {\n  cwd?: string;\n  env?: Readonly<Record<string, string>>;\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface CommandResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  success: boolean;\n  signal?: string;\n  durationMs?: number;\n}\n\nexport type FileValue = string | Uint8Array | ArrayBuffer | Blob | ReadableStream<Uint8Array>;\n\nexport interface SandboxDirectoryEntry {\n  name: string;\n  path: string;\n  type: \"file\" | \"directory\" | \"symlink\" | \"unknown\";\n  size?: number;\n}\n\nexport interface SandboxFiles {\n  write(path: string, value: FileValue): Promise<void>;\n  read(path: string): Promise<Uint8Array>;\n  text(path: string): Promise<string>;\n  list(path?: string): Promise<SandboxDirectoryEntry[]>;\n  mkdir(path: string): Promise<void>;\n  remove(path: string): Promise<void>;\n  exists(path: string): Promise<boolean>;\n}\n\nexport interface ProcessOutputEvent {\n  stream: \"stdout\" | \"stderr\";\n  data: string | Uint8Array;\n  timestamp?: Date;\n}\n\nexport type ProcessStatus = \"starting\" | \"running\" | \"exited\" | \"killed\" | \"unknown\";\n\nexport interface SandboxProcess {\n  readonly id: string;\n  status(): Promise<ProcessStatus>;\n  output(): AsyncIterable<ProcessOutputEvent>;\n  write(value: string | Uint8Array): Promise<void>;\n  wait(): Promise<{ exitCode: number }>;\n  kill(signal?: string): Promise<void>;\n}\n\nexport interface SandboxProcesses {\n  start(command: CommandInput, options?: RunOptions): Promise<SandboxProcess>;\n}\n\nexport interface ExposedPort {\n  readonly port: number;\n  readonly url: string;\n  readonly public: boolean;\n  readonly authenticated: boolean;\n  request?(path?: string, init?: RequestInit): Promise<Response>;\n  toJSON(): Omit<ExposedPort, \"request\" | \"toJSON\">;\n}\n\nexport interface SandboxPorts {\n  expose(port: number): Promise<ExposedPort>;\n}\n\nexport interface SandboxSnapshot {\n  readonly id: string;\n  readonly name?: string;\n  readonly mode: CapabilityMode;\n  readonly createdAt?: Date;\n}\n\nexport interface SandboxSnapshots {\n  create(options?: { name?: string }): Promise<SandboxSnapshot>;\n  delete(snapshot: SandboxSnapshot | string): Promise<void>;\n  restore(snapshot: SandboxSnapshot | string): Promise<void>;\n}\n\nexport interface Sandbox<TRaw = unknown> {\n  readonly id: string;\n  readonly provider: ProviderName;\n  readonly cwd: string;\n  readonly capabilities: CapabilityMap;\n  readonly raw: TRaw;\n  readonly files: SandboxFiles;\n  readonly processes: SandboxProcesses;\n  readonly ports: SandboxPorts;\n  readonly snapshots: SandboxSnapshots;\n  run(command: CommandInput, options?: RunOptions): Promise<CommandResult>;\n  stop(): Promise<void>;\n}\n"],"mappings":";;;;;AAAA,MAAa,gBAAgB;CAAC;CAAS;CAAO;CAAW;CAAU;CAAU;AAG7E,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/core/types.ts"],"sourcesContent":["export const providerNames = [\"local\", \"e2b\", \"daytona\", \"vercel\", \"upstash\"] as const;\nexport type ProviderName = (typeof providerNames)[number];\n\nexport const capabilityNames = [\n  \"files.read\",\n  \"files.write\",\n  \"files.list\",\n  \"files.remove\",\n  \"process.run\",\n  \"process.stream\",\n  \"process.background\",\n  \"process.stdin\",\n  \"process.cancel\",\n  \"ports.expose\",\n  \"ports.authenticatedRequest\",\n  \"snapshot.create\",\n  \"snapshot.delete\",\n  \"snapshot.restore\",\n  \"sandbox.resume\",\n  \"filesystem.persistent\",\n  \"image.custom\",\n  \"network.policy\",\n  \"process.pty\",\n  \"compute.gpu\",\n] as const;\n\nexport type Capability = (typeof capabilityNames)[number];\nexport type CapabilityMode =\n  | \"filesystem\"\n  | \"memory\"\n  | \"template\"\n  | \"fork\"\n  | \"public\"\n  | \"authenticated\"\n  | \"combined-stream\"\n  | \"separate-streams\"\n  | \"ephemeral\"\n  | \"persistent\"\n  | \"localhost\"\n  | \"in-process\"\n  | \"full\"\n  | \"native\";\n\nexport type CapabilityMap = Readonly<Record<Capability, false | CapabilityMode>>;\n\nexport type CommandInput = string | { command: string; args?: readonly string[] };\n\nexport interface RunOptions {\n  cwd?: string;\n  env?: Readonly<Record<string, string>>;\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface CommandResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  success: boolean;\n  signal?: string;\n  durationMs?: number;\n}\n\nexport type FileValue = string | Uint8Array | ArrayBuffer | Blob | ReadableStream<Uint8Array>;\n\nexport interface SandboxDirectoryEntry {\n  name: string;\n  path: string;\n  type: \"file\" | \"directory\" | \"symlink\" | \"unknown\";\n  size?: number;\n}\n\nexport interface SandboxFiles {\n  write(path: string, value: FileValue): Promise<void>;\n  read(path: string): Promise<Uint8Array>;\n  text(path: string): Promise<string>;\n  list(path?: string): Promise<SandboxDirectoryEntry[]>;\n  mkdir(path: string): Promise<void>;\n  remove(path: string): Promise<void>;\n  exists(path: string): Promise<boolean>;\n}\n\nexport interface ProcessOutputEvent {\n  stream: \"stdout\" | \"stderr\";\n  data: string | Uint8Array;\n  timestamp?: Date;\n}\n\nexport type ProcessStatus = \"starting\" | \"running\" | \"exited\" | \"killed\" | \"unknown\";\n\nexport interface SandboxProcess {\n  readonly id: string;\n  status(): Promise<ProcessStatus>;\n  output(): AsyncIterable<ProcessOutputEvent>;\n  write(value: string | Uint8Array): Promise<void>;\n  wait(): Promise<{ exitCode: number }>;\n  kill(signal?: string): Promise<void>;\n}\n\nexport interface SandboxProcesses {\n  start(command: CommandInput, options?: RunOptions): Promise<SandboxProcess>;\n}\n\nexport interface ExposedPort {\n  readonly port: number;\n  readonly url: string;\n  readonly public: boolean;\n  readonly authenticated: boolean;\n  request?(path?: string, init?: RequestInit): Promise<Response>;\n  toJSON(): Omit<ExposedPort, \"request\" | \"toJSON\">;\n}\n\nexport interface SandboxPorts {\n  expose(port: number): Promise<ExposedPort>;\n}\n\nexport interface SandboxSnapshot {\n  readonly id: string;\n  readonly name?: string;\n  readonly mode: CapabilityMode;\n  readonly createdAt?: Date;\n}\n\nexport interface SandboxSnapshots {\n  create(options?: { name?: string }): Promise<SandboxSnapshot>;\n  delete(snapshot: SandboxSnapshot | string): Promise<void>;\n  restore(snapshot: SandboxSnapshot | string): Promise<void>;\n}\n\nexport interface Sandbox<TRaw = unknown> {\n  readonly id: string;\n  readonly provider: ProviderName;\n  readonly cwd: string;\n  readonly capabilities: CapabilityMap;\n  readonly raw: TRaw;\n  readonly files: SandboxFiles;\n  readonly processes: SandboxProcesses;\n  readonly ports: SandboxPorts;\n  readonly snapshots: SandboxSnapshots;\n  run(command: CommandInput, options?: RunOptions): Promise<CommandResult>;\n  /** Stops the provider runtime. Repeated calls share the same cleanup operation. */\n  stop(): Promise<void>;\n  /** Stops the sandbox when an `await using` scope exits. */\n  [Symbol.asyncDispose](): Promise<void>;\n}\n"],"mappings":";;;;;AAAA,MAAa,gBAAgB;CAAC;CAAS;CAAO;CAAW;CAAU;CAAU;AAG7E,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD"}

package/dist/mastra/index.d.mts

@@ -1,5 +1,5 @@
-import { f as Sandbox } from "../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../provider-_caCV8kk.mjs";
+import { f as Sandbox } from "../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../provider-BzzkIVmv.mjs";
 import { CopyOptions, FileContent, FileEntry, FilesystemInfo, InstructionsOption, ListOptions, MastraFilesystem, MastraFilesystemOptions, MastraSandbox, MastraSandboxOptions, ProcessHandle, ProcessInfo, ProviderStatus, ReadOptions, RemoveOptions, SandboxInfo, SandboxProcessManager, SpawnProcessOptions, Workspace, WorkspaceConfig, WriteOptions } from "@mastra/core/workspace";
 import { RequestContext } from "@mastra/core/di";
 

package/dist/metadata.d.mts

@@ -1,4 +1,4 @@
-import { n as CapabilityMap, u as ProviderName } from "./types-BTagTtsp.mjs";
+import { n as CapabilityMap, u as ProviderName } from "./types-DEi_dfRR.mjs";
 
 //#region src/metadata.d.ts
 interface LiveTestResult {

package/dist/metadata.mjs

@@ -23,7 +23,7 @@ const providers = [
 	{
 		id: "e2b",
 		displayName: "E2B",
-		officialUrl: "https://e2b.dev",
+		officialUrl: "https://e2b.dev/docs",
 		packageName: "e2b",
 		packageVersion: "2.32.0",
 		capabilities: e2bCapabilities,
@@ -39,7 +39,7 @@ const providers = [
 	{
 		id: "daytona",
 		displayName: "Daytona",
-		officialUrl: "https://www.daytona.io",
+		officialUrl: "https://www.daytona.io/docs/en/sandboxes/",
 		packageName: "@daytona/sdk",
 		packageVersion: "0.196.0",
 		capabilities: daytonaCapabilities,

package/dist/metadata.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"metadata.mjs","names":["providers: readonly ProviderMetadata[]"],"sources":["../src/metadata.ts"],"sourcesContent":["import {\n  daytonaCapabilities,\n  e2bCapabilities,\n  localCapabilities,\n  upstashCapabilities,\n  vercelCapabilities,\n} from \"./providers/capabilities\";\nimport type { CapabilityMap, ProviderName } from \"./core/types\";\n\nexport interface LiveTestResult {\n  provider: ProviderName;\n  testedAt: string;\n  adapterVersion: string;\n  providerSdkVersion: string;\n  passed: number;\n  failed: number;\n  skipped: number;\n  capabilities: Partial<CapabilityMap>;\n}\n\nexport interface ProviderMetadata {\n  id: ProviderName;\n  displayName: string;\n  officialUrl: string;\n  packageName: string | null;\n  packageVersion: string;\n  capabilities: CapabilityMap;\n  environmentVariables: readonly string[];\n  technicalStatus: \"supported\" | \"experimental\";\n  providerReviewed: boolean;\n  sponsor: boolean;\n  liveTest: LiveTestResult | null;\n  portBehavior: string;\n  snapshotBehavior: string;\n  runtimeLimitations: string;\n}\n\nexport const providers: readonly ProviderMetadata[] = [\n  {\n    id: \"local\",\n    displayName: \"Local\",\n    officialUrl: \"https://rivet.dev/docs/agent-os/\",\n    packageName: \"@rivet-dev/agentos-core\",\n    packageVersion: \"0.2.7\",\n    capabilities: localCapabilities,\n    environmentVariables: [],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a private in-process URL. HTTP traffic is bridged through ExposedPort.request().\",\n    snapshotBehavior:\n      \"Exports the AgentOS virtual filesystem and recreates the VM when restoring it.\",\n    runtimeLimitations:\n      \"Powered by the beta AgentOS runtime. Requires a supported Node.js host and cannot run arbitrary native Linux binaries.\",\n  },\n  {\n    id: \"e2b\",\n    displayName: \"E2B\",\n    officialUrl: \"https://e2b.dev\",\n    packageName: \"e2b\",\n    packageVersion: \"2.32.0\",\n    capabilities: e2bCapabilities,\n    environmentVariables: [\"E2B_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns an E2B host. Restricted traffic uses the native access token only inside request().\",\n    snapshotBehavior:\n      \"Creates persistent E2B snapshot templates; restore creates a new native sandbox and remains on raw.\",\n    runtimeLimitations: \"Requires Node.js 20.18.1 or newer and an E2B account.\",\n  },\n  {\n    id: \"daytona\",\n    displayName: \"Daytona\",\n    officialUrl: \"https://www.daytona.io\",\n    packageName: \"@daytona/sdk\",\n    packageVersion: \"0.196.0\",\n    capabilities: daytonaCapabilities,\n    environmentVariables: [\"DAYTONA_API_KEY\", \"DAYTONA_API_URL\", \"DAYTONA_TARGET\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns public or token-authenticated preview URLs according to the sandbox setting.\",\n    snapshotBehavior:\n      \"Daytona snapshot and fork operations have provider-specific lifecycle semantics and remain on raw.\",\n    runtimeLimitations: \"Some binary and streaming methods require a Node.js-compatible runtime.\",\n  },\n  {\n    id: \"vercel\",\n    displayName: \"Vercel Sandbox\",\n    officialUrl: \"https://vercel.com/docs/sandbox\",\n    packageName: \"@vercel/sandbox\",\n    packageVersion: \"2.5.0\",\n    capabilities: vercelCapabilities,\n    environmentVariables: [\n      \"VERCEL_OIDC_TOKEN\",\n      \"VERCEL_TOKEN\",\n      \"VERCEL_TEAM_ID\",\n      \"VERCEL_PROJECT_ID\",\n    ],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a public vercel.run route. Port registration is updated when expose() is called.\",\n    snapshotBehavior:\n      \"Creating a filesystem snapshot stops the session. Starting from it creates a new sandbox through raw.\",\n    runtimeLimitations:\n      \"Available runtimes are controlled by Vercel; node24 is the adapter default.\",\n  },\n  {\n    id: \"upstash\",\n    displayName: \"Upstash Box\",\n    officialUrl: \"https://upstash.com/docs/box\",\n    packageName: \"@upstash/box\",\n    packageVersion: \"0.5.3\",\n    capabilities: upstashCapabilities,\n    environmentVariables: [\"UPSTASH_BOX_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Creates a public URL by default, or a bearer-token URL whose credential stays inside request().\",\n    snapshotBehavior:\n      \"Captures persistent workspace state. Restoring creates a new Box and remains available through raw.\",\n    runtimeLimitations:\n      \"Durable Debian or Alpine boxes with Node.js, Python, Go, Ruby, or Rust runtimes.\",\n  },\n];\n\nexport function getProviderMetadata(id: ProviderName): ProviderMetadata {\n  return providers.find((provider) => provider.id === id)!;\n}\n"],"mappings":";;;;;AAqCA,MAAaA,YAAyC;CACpD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,EAAE;EACxB,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,cAAc;EACrC,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GAAC;GAAmB;GAAmB;GAAiB;EAC9E,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GACpB;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,sBAAsB;EAC7C,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACF;AAED,SAAgB,oBAAoB,IAAoC;AACtE,QAAO,UAAU,MAAM,aAAa,SAAS,OAAO,GAAG"}
+{"version":3,"file":"metadata.mjs","names":["providers: readonly ProviderMetadata[]"],"sources":["../src/metadata.ts"],"sourcesContent":["import {\n  daytonaCapabilities,\n  e2bCapabilities,\n  localCapabilities,\n  upstashCapabilities,\n  vercelCapabilities,\n} from \"./providers/capabilities\";\nimport type { CapabilityMap, ProviderName } from \"./core/types\";\n\nexport interface LiveTestResult {\n  provider: ProviderName;\n  testedAt: string;\n  adapterVersion: string;\n  providerSdkVersion: string;\n  passed: number;\n  failed: number;\n  skipped: number;\n  capabilities: Partial<CapabilityMap>;\n}\n\nexport interface ProviderMetadata {\n  id: ProviderName;\n  displayName: string;\n  officialUrl: string;\n  packageName: string | null;\n  packageVersion: string;\n  capabilities: CapabilityMap;\n  environmentVariables: readonly string[];\n  technicalStatus: \"supported\" | \"experimental\";\n  providerReviewed: boolean;\n  sponsor: boolean;\n  liveTest: LiveTestResult | null;\n  portBehavior: string;\n  snapshotBehavior: string;\n  runtimeLimitations: string;\n}\n\nexport const providers: readonly ProviderMetadata[] = [\n  {\n    id: \"local\",\n    displayName: \"Local\",\n    officialUrl: \"https://rivet.dev/docs/agent-os/\",\n    packageName: \"@rivet-dev/agentos-core\",\n    packageVersion: \"0.2.7\",\n    capabilities: localCapabilities,\n    environmentVariables: [],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a private in-process URL. HTTP traffic is bridged through ExposedPort.request().\",\n    snapshotBehavior:\n      \"Exports the AgentOS virtual filesystem and recreates the VM when restoring it.\",\n    runtimeLimitations:\n      \"Powered by the beta AgentOS runtime. Requires a supported Node.js host and cannot run arbitrary native Linux binaries.\",\n  },\n  {\n    id: \"e2b\",\n    displayName: \"E2B\",\n    officialUrl: \"https://e2b.dev/docs\",\n    packageName: \"e2b\",\n    packageVersion: \"2.32.0\",\n    capabilities: e2bCapabilities,\n    environmentVariables: [\"E2B_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns an E2B host. Restricted traffic uses the native access token only inside request().\",\n    snapshotBehavior:\n      \"Creates persistent E2B snapshot templates; restore creates a new native sandbox and remains on raw.\",\n    runtimeLimitations: \"Requires Node.js 20.18.1 or newer and an E2B account.\",\n  },\n  {\n    id: \"daytona\",\n    displayName: \"Daytona\",\n    officialUrl: \"https://www.daytona.io/docs/en/sandboxes/\",\n    packageName: \"@daytona/sdk\",\n    packageVersion: \"0.196.0\",\n    capabilities: daytonaCapabilities,\n    environmentVariables: [\"DAYTONA_API_KEY\", \"DAYTONA_API_URL\", \"DAYTONA_TARGET\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns public or token-authenticated preview URLs according to the sandbox setting.\",\n    snapshotBehavior:\n      \"Daytona snapshot and fork operations have provider-specific lifecycle semantics and remain on raw.\",\n    runtimeLimitations: \"Some binary and streaming methods require a Node.js-compatible runtime.\",\n  },\n  {\n    id: \"vercel\",\n    displayName: \"Vercel Sandbox\",\n    officialUrl: \"https://vercel.com/docs/sandbox\",\n    packageName: \"@vercel/sandbox\",\n    packageVersion: \"2.5.0\",\n    capabilities: vercelCapabilities,\n    environmentVariables: [\n      \"VERCEL_OIDC_TOKEN\",\n      \"VERCEL_TOKEN\",\n      \"VERCEL_TEAM_ID\",\n      \"VERCEL_PROJECT_ID\",\n    ],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a public vercel.run route. Port registration is updated when expose() is called.\",\n    snapshotBehavior:\n      \"Creating a filesystem snapshot stops the session. Starting from it creates a new sandbox through raw.\",\n    runtimeLimitations:\n      \"Available runtimes are controlled by Vercel; node24 is the adapter default.\",\n  },\n  {\n    id: \"upstash\",\n    displayName: \"Upstash Box\",\n    officialUrl: \"https://upstash.com/docs/box\",\n    packageName: \"@upstash/box\",\n    packageVersion: \"0.5.3\",\n    capabilities: upstashCapabilities,\n    environmentVariables: [\"UPSTASH_BOX_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Creates a public URL by default, or a bearer-token URL whose credential stays inside request().\",\n    snapshotBehavior:\n      \"Captures persistent workspace state. Restoring creates a new Box and remains available through raw.\",\n    runtimeLimitations:\n      \"Durable Debian or Alpine boxes with Node.js, Python, Go, Ruby, or Rust runtimes.\",\n  },\n];\n\nexport function getProviderMetadata(id: ProviderName): ProviderMetadata {\n  return providers.find((provider) => provider.id === id)!;\n}\n"],"mappings":";;;;;AAqCA,MAAaA,YAAyC;CACpD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,EAAE;EACxB,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,cAAc;EACrC,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GAAC;GAAmB;GAAmB;GAAiB;EAC9E,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GACpB;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,sBAAsB;EAC7C,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACF;AAED,SAAgB,oBAAoB,IAAoC;AACtE,QAAO,UAAU,MAAM,aAAa,SAAS,OAAO,GAAG"}

package/dist/{provider-_caCV8kk.d.mts → provider-BzzkIVmv.d.mts}

@@ -1,4 +1,4 @@
-import { a as CommandResult, d as RunOptions, f as Sandbox, g as SandboxProcess, i as CommandInput, n as CapabilityMap, o as ExposedPort, p as SandboxDirectoryEntry, s as FileValue, u as ProviderName, v as SandboxSnapshot } from "./types-BTagTtsp.mjs";
+import { a as CommandResult, d as RunOptions, f as Sandbox, g as SandboxProcess, i as CommandInput, n as CapabilityMap, o as ExposedPort, p as SandboxDirectoryEntry, s as FileValue, u as ProviderName, v as SandboxSnapshot } from "./types-DEi_dfRR.mjs";
 
 //#region src/core/provider.d.ts
 interface ProviderCreateOptions {
@@ -88,4 +88,4 @@ interface ManagedSandboxProvider {
 }
 //#endregion
 export { SandboxNetworkPolicy as a, ManagedSandboxSession as i, ManagedSandboxProvider as n, SandboxProvider as o, ManagedSandboxResumeOptions as r, ManagedSandboxCreateOptions as t };
-//# sourceMappingURL=provider-_caCV8kk.d.mts.map
+//# sourceMappingURL=provider-BzzkIVmv.d.mts.map

package/dist/{provider-utils-DilOYLBO.mjs → provider-utils-BjOSWNsh.mjs}

@@ -1,5 +1,5 @@
 import { t as SandboxError } from "./errors-Ch9PHKTd.mjs";
-import { t as createSandbox } from "./sandbox-BwyHcB_C.mjs";
+import { t as createSandbox } from "./sandbox-rIOcbhtM.mjs";
 
 //#region src/internal/managed-provider.ts
 /**
@@ -198,4 +198,4 @@ function unsupportedSnapshots(provider) {
 
 //#endregion
 export { unsupportedSnapshots as a, unsupported as i, portResult as n, withManagedSessions as o, toUint8Array as r, commandString as t };
-//# sourceMappingURL=provider-utils-DilOYLBO.mjs.map
+//# sourceMappingURL=provider-utils-BjOSWNsh.mjs.map

package/dist/{provider-utils-DilOYLBO.mjs.map → provider-utils-BjOSWNsh.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"provider-utils-DilOYLBO.mjs","names":["managed: ManagedSandboxProvider","ownedTemplate: Promise<TemplateFile[]> | undefined","result: TemplateFile[]"],"sources":["../src/internal/managed-provider.ts","../src/internal/provider-utils.ts"],"sourcesContent":["import { SandboxError } from \"../core/errors\";\nimport type {\n  ManagedSandboxProvider,\n  ManagedSandboxSession,\n  SandboxProvider,\n} from \"../core/provider\";\nimport { createSandbox } from \"../core/sandbox\";\nimport type { Sandbox } from \"../core/types\";\nimport type { SandboxNetworkPolicy } from \"../core/provider\";\n\ntype TemplateFile = { path: string; content: Uint8Array };\n\n/**\n * Shared managed lifecycle for built-in providers. Provider-native implementations\n * can replace this optional surface without changing `createSandbox()`.\n */\nexport function withManagedSessions<TRaw>(\n  provider: SandboxProvider<TRaw>,\n  configuredPorts: ReadonlyArray<number> = [],\n  lifecycle: {\n    stop?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    resume?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    destroy?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    setPorts?: (\n      sandbox: Sandbox<TRaw>,\n      ports: ReadonlyArray<number>,\n      signal?: AbortSignal,\n    ) => Promise<void>;\n    setNetworkPolicy?: (sandbox: Sandbox<TRaw>, policy: SandboxNetworkPolicy) => Promise<void>;\n  } = {},\n): SandboxProvider<TRaw> {\n  const sessions = new Map<string, ManagedSandboxSession>();\n  const templates = new Map<string, Promise<TemplateFile[]>>();\n\n  const managed: ManagedSandboxProvider = {\n    async create(options) {\n      const existing = sessions.get(options.sessionId);\n      if (existing) return existing;\n      const sandbox = await createSandbox({\n        provider,\n        cwd: options.cwd,\n        env: options.env,\n        signal: options.signal,\n      });\n      const ports = new Set([...configuredPorts, ...(options.ports ?? [])]);\n      let ownedTemplate: Promise<TemplateFile[]> | undefined;\n      try {\n        if (options.identity) {\n          let template = templates.get(options.identity);\n          if (!template) {\n            template = (async () => {\n              await options.onFirstCreate?.(sandbox);\n              return captureFiles(sandbox, sandbox.cwd);\n            })();\n            ownedTemplate = template;\n            templates.set(options.identity, template);\n            await template;\n          } else {\n            await restoreFiles(sandbox, await template);\n          }\n        } else {\n          await options.onFirstCreate?.(sandbox);\n        }\n        const session = createManagedSession(\n          options.sessionId,\n          sandbox,\n          ports,\n          sessions,\n          lifecycle,\n        );\n        sessions.set(options.sessionId, session);\n        return session;\n      } catch (error) {\n        if (\n          options.identity &&\n          ownedTemplate &&\n          templates.get(options.identity) === ownedTemplate\n        ) {\n          templates.delete(options.identity);\n        }\n        try {\n          if (lifecycle.destroy) await lifecycle.destroy(sandbox);\n          else await sandbox.stop();\n        } catch (cleanupError) {\n          if (error instanceof Error) {\n            Object.defineProperty(error, \"cleanupError\", {\n              value: cleanupError,\n              enumerable: false,\n            });\n          }\n        }\n        throw error;\n      }\n    },\n    async resume(options) {\n      const session = sessions.get(options.sessionId);\n      if (!session) {\n        throw new SandboxError({\n          code: \"not_found\",\n          provider: provider.id,\n          operation: \"managed.resume\",\n          message: `Managed sandbox session not found: ${options.sessionId}`,\n        });\n      }\n      await session.resume();\n      return session;\n    },\n  };\n  return { ...provider, managed };\n}\n\nfunction createManagedSession<TRaw>(\n  id: string,\n  sandbox: Sandbox<TRaw>,\n  initialPorts: Set<number>,\n  sessions: Map<string, ManagedSandboxSession>,\n  lifecycle: {\n    stop?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    resume?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    destroy?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    setPorts?: (\n      sandbox: Sandbox<TRaw>,\n      ports: ReadonlyArray<number>,\n      signal?: AbortSignal,\n    ) => Promise<void>;\n    setNetworkPolicy?: (sandbox: Sandbox<TRaw>, policy: SandboxNetworkPolicy) => Promise<void>;\n  },\n): ManagedSandboxSession {\n  let destroyed = false;\n  let stopped = false;\n  const assertActive = () => {\n    if (destroyed) {\n      throw new SandboxError({\n        code: \"terminated\",\n        provider: sandbox.provider,\n        operation: \"managed.session\",\n        message: `Managed sandbox session has been destroyed: ${id}`,\n      });\n    }\n  };\n  const session: ManagedSandboxSession = {\n    id,\n    sandbox,\n    defaultWorkingDirectory: sandbox.cwd,\n    get ports() {\n      return [...initialPorts];\n    },\n    async getPortUrl({ port, protocol }) {\n      assertActive();\n      if (!initialPorts.has(port)) {\n        throw new SandboxError({\n          code: \"invalid_input\",\n          provider: sandbox.provider,\n          operation: \"managed.getPortUrl\",\n          message: `Port ${port} is not exposed by this session`,\n        });\n      }\n      const exposed = await sandbox.ports.expose(port);\n      const url = new URL(exposed.url);\n      if (protocol) url.protocol = `${protocol}:`;\n      return url.toString().replace(/\\/$/, \"\");\n    },\n    async stop() {\n      assertActive();\n      if (stopped) return;\n      await lifecycle.stop?.(sandbox);\n      stopped = true;\n    },\n    async resume() {\n      assertActive();\n      if (!stopped) return;\n      await lifecycle.resume?.(sandbox);\n      stopped = false;\n    },\n    async destroy() {\n      if (destroyed) return;\n      destroyed = true;\n      sessions.delete(id);\n      if (lifecycle.destroy) await lifecycle.destroy(sandbox);\n      else await sandbox.stop();\n    },\n    ...(lifecycle.setPorts\n      ? {\n          async setPorts(ports: ReadonlyArray<number>, options?: { signal?: AbortSignal }) {\n            assertActive();\n            await lifecycle.setPorts!(sandbox, ports, options?.signal);\n            initialPorts.clear();\n            for (const port of ports) initialPorts.add(port);\n          },\n        }\n      : {}),\n    ...(lifecycle.setNetworkPolicy\n      ? {\n          setNetworkPolicy: (policy: SandboxNetworkPolicy) => {\n            assertActive();\n            return lifecycle.setNetworkPolicy!(sandbox, policy);\n          },\n        }\n      : {}),\n  };\n  return session;\n}\n\nasync function captureFiles(sandbox: Sandbox, path: string): Promise<TemplateFile[]> {\n  const result: TemplateFile[] = [];\n  for (const entry of await sandbox.files.list(path)) {\n    if (entry.type === \"directory\") result.push(...(await captureFiles(sandbox, entry.path)));\n    else if (entry.type === \"file\")\n      result.push({\n        path: entry.path,\n        content: await sandbox.files.read(entry.path),\n      });\n  }\n  return result;\n}\n\nasync function restoreFiles(sandbox: Sandbox, files: ReadonlyArray<TemplateFile>): Promise<void> {\n  await Promise.all(files.map((file) => sandbox.files.write(file.path, file.content)));\n}\n","import { SandboxError } from \"../core/errors\";\nimport type { CommandInput, ExposedPort, FileValue, SandboxSnapshot } from \"../core/types\";\n\nexport async function toUint8Array(value: FileValue): Promise<Uint8Array> {\n  if (typeof value === \"string\") return new TextEncoder().encode(value);\n  if (value instanceof Uint8Array) return value;\n  if (value instanceof ArrayBuffer) return new Uint8Array(value);\n  if (value instanceof Blob) return new Uint8Array(await value.arrayBuffer());\n  const response = new Response(value);\n  return new Uint8Array(await response.arrayBuffer());\n}\n\nexport function commandString(input: CommandInput): string {\n  if (typeof input === \"string\") return input;\n  return [input.command, ...(input.args ?? [])].map(shellQuote).join(\" \");\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replaceAll(\"'\", `'\"'\"'`)}'`;\n}\n\nexport function portResult(\n  port: number,\n  url: string,\n  isPublic: boolean,\n  authenticated: boolean,\n  request?: (path?: string, init?: RequestInit) => Promise<Response>,\n): ExposedPort {\n  return {\n    port,\n    url,\n    public: isPublic,\n    authenticated,\n    request,\n    toJSON: () => ({\n      port,\n      url: authenticated ? redactUrl(url) : url,\n      public: isPublic,\n      authenticated,\n    }),\n  };\n}\n\nfunction redactUrl(url: string): string {\n  const parsed = new URL(url);\n  for (const key of parsed.searchParams.keys()) parsed.searchParams.set(key, \"[REDACTED]\");\n  return parsed.toString();\n}\n\nexport function unsupported(provider: string, operation: string): never {\n  throw new SandboxError({\n    code: \"unsupported\",\n    provider,\n    operation,\n    message: `${provider} does not support normalized ${operation}`,\n  });\n}\n\nexport function unsupportedSnapshots(provider: string) {\n  return {\n    create: async (): Promise<SandboxSnapshot> => unsupported(provider, \"snapshot.create\"),\n    delete: async (): Promise<void> => unsupported(provider, \"snapshot.delete\"),\n    restore: async (): Promise<void> => unsupported(provider, \"snapshot.restore\"),\n  };\n}\n"],"mappings":";;;;;;;;AAgBA,SAAgB,oBACd,UACA,kBAAyC,EAAE,EAC3C,YAUI,EAAE,EACiB;CACvB,MAAM,2BAAW,IAAI,KAAoC;CACzD,MAAM,4BAAY,IAAI,KAAsC;CAE5D,MAAMA,UAAkC;EACtC,MAAM,OAAO,SAAS;GACpB,MAAM,WAAW,SAAS,IAAI,QAAQ,UAAU;AAChD,OAAI,SAAU,QAAO;GACrB,MAAM,UAAU,MAAM,cAAc;IAClC;IACA,KAAK,QAAQ;IACb,KAAK,QAAQ;IACb,QAAQ,QAAQ;IACjB,CAAC;GACF,MAAM,QAAQ,IAAI,IAAI,CAAC,GAAG,iBAAiB,GAAI,QAAQ,SAAS,EAAE,CAAE,CAAC;GACrE,IAAIC;AACJ,OAAI;AACF,QAAI,QAAQ,UAAU;KACpB,IAAI,WAAW,UAAU,IAAI,QAAQ,SAAS;AAC9C,SAAI,CAAC,UAAU;AACb,kBAAY,YAAY;AACtB,aAAM,QAAQ,gBAAgB,QAAQ;AACtC,cAAO,aAAa,SAAS,QAAQ,IAAI;UACvC;AACJ,sBAAgB;AAChB,gBAAU,IAAI,QAAQ,UAAU,SAAS;AACzC,YAAM;WAEN,OAAM,aAAa,SAAS,MAAM,SAAS;UAG7C,OAAM,QAAQ,gBAAgB,QAAQ;IAExC,MAAM,UAAU,qBACd,QAAQ,WACR,SACA,OACA,UACA,UACD;AACD,aAAS,IAAI,QAAQ,WAAW,QAAQ;AACxC,WAAO;YACA,OAAO;AACd,QACE,QAAQ,YACR,iBACA,UAAU,IAAI,QAAQ,SAAS,KAAK,cAEpC,WAAU,OAAO,QAAQ,SAAS;AAEpC,QAAI;AACF,SAAI,UAAU,QAAS,OAAM,UAAU,QAAQ,QAAQ;SAClD,OAAM,QAAQ,MAAM;aAClB,cAAc;AACrB,SAAI,iBAAiB,MACnB,QAAO,eAAe,OAAO,gBAAgB;MAC3C,OAAO;MACP,YAAY;MACb,CAAC;;AAGN,UAAM;;;EAGV,MAAM,OAAO,SAAS;GACpB,MAAM,UAAU,SAAS,IAAI,QAAQ,UAAU;AAC/C,OAAI,CAAC,QACH,OAAM,IAAI,aAAa;IACrB,MAAM;IACN,UAAU,SAAS;IACnB,WAAW;IACX,SAAS,sCAAsC,QAAQ;IACxD,CAAC;AAEJ,SAAM,QAAQ,QAAQ;AACtB,UAAO;;EAEV;AACD,QAAO;EAAE,GAAG;EAAU;EAAS;;AAGjC,SAAS,qBACP,IACA,SACA,cACA,UACA,WAWuB;CACvB,IAAI,YAAY;CAChB,IAAI,UAAU;CACd,MAAM,qBAAqB;AACzB,MAAI,UACF,OAAM,IAAI,aAAa;GACrB,MAAM;GACN,UAAU,QAAQ;GAClB,WAAW;GACX,SAAS,+CAA+C;GACzD,CAAC;;AA+DN,QA5DuC;EACrC;EACA;EACA,yBAAyB,QAAQ;EACjC,IAAI,QAAQ;AACV,UAAO,CAAC,GAAG,aAAa;;EAE1B,MAAM,WAAW,EAAE,MAAM,YAAY;AACnC,iBAAc;AACd,OAAI,CAAC,aAAa,IAAI,KAAK,CACzB,OAAM,IAAI,aAAa;IACrB,MAAM;IACN,UAAU,QAAQ;IAClB,WAAW;IACX,SAAS,QAAQ,KAAK;IACvB,CAAC;GAEJ,MAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,KAAK;GAChD,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;AAChC,OAAI,SAAU,KAAI,WAAW,GAAG,SAAS;AACzC,UAAO,IAAI,UAAU,CAAC,QAAQ,OAAO,GAAG;;EAE1C,MAAM,OAAO;AACX,iBAAc;AACd,OAAI,QAAS;AACb,SAAM,UAAU,OAAO,QAAQ;AAC/B,aAAU;;EAEZ,MAAM,SAAS;AACb,iBAAc;AACd,OAAI,CAAC,QAAS;AACd,SAAM,UAAU,SAAS,QAAQ;AACjC,aAAU;;EAEZ,MAAM,UAAU;AACd,OAAI,UAAW;AACf,eAAY;AACZ,YAAS,OAAO,GAAG;AACnB,OAAI,UAAU,QAAS,OAAM,UAAU,QAAQ,QAAQ;OAClD,OAAM,QAAQ,MAAM;;EAE3B,GAAI,UAAU,WACV,EACE,MAAM,SAAS,OAA8B,SAAoC;AAC/E,iBAAc;AACd,SAAM,UAAU,SAAU,SAAS,OAAO,SAAS,OAAO;AAC1D,gBAAa,OAAO;AACpB,QAAK,MAAM,QAAQ,MAAO,cAAa,IAAI,KAAK;KAEnD,GACD,EAAE;EACN,GAAI,UAAU,mBACV,EACE,mBAAmB,WAAiC;AAClD,iBAAc;AACd,UAAO,UAAU,iBAAkB,SAAS,OAAO;KAEtD,GACD,EAAE;EACP;;AAIH,eAAe,aAAa,SAAkB,MAAuC;CACnF,MAAMC,SAAyB,EAAE;AACjC,MAAK,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,KAAK,CAChD,KAAI,MAAM,SAAS,YAAa,QAAO,KAAK,GAAI,MAAM,aAAa,SAAS,MAAM,KAAK,CAAE;UAChF,MAAM,SAAS,OACtB,QAAO,KAAK;EACV,MAAM,MAAM;EACZ,SAAS,MAAM,QAAQ,MAAM,KAAK,MAAM,KAAK;EAC9C,CAAC;AAEN,QAAO;;AAGT,eAAe,aAAa,SAAkB,OAAmD;AAC/F,OAAM,QAAQ,IAAI,MAAM,KAAK,SAAS,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ,CAAC,CAAC;;;;;ACtNtF,eAAsB,aAAa,OAAuC;AACxE,KAAI,OAAO,UAAU,SAAU,QAAO,IAAI,aAAa,CAAC,OAAO,MAAM;AACrE,KAAI,iBAAiB,WAAY,QAAO;AACxC,KAAI,iBAAiB,YAAa,QAAO,IAAI,WAAW,MAAM;AAC9D,KAAI,iBAAiB,KAAM,QAAO,IAAI,WAAW,MAAM,MAAM,aAAa,CAAC;CAC3E,MAAM,WAAW,IAAI,SAAS,MAAM;AACpC,QAAO,IAAI,WAAW,MAAM,SAAS,aAAa,CAAC;;AAGrD,SAAgB,cAAc,OAA6B;AACzD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAO,CAAC,MAAM,SAAS,GAAI,MAAM,QAAQ,EAAE,CAAE,CAAC,IAAI,WAAW,CAAC,KAAK,IAAI;;AAGzE,SAAS,WAAW,OAAuB;AACzC,QAAO,IAAI,MAAM,WAAW,KAAK,QAAQ,CAAC;;AAG5C,SAAgB,WACd,MACA,KACA,UACA,eACA,SACa;AACb,QAAO;EACL;EACA;EACA,QAAQ;EACR;EACA;EACA,eAAe;GACb;GACA,KAAK,gBAAgB,UAAU,IAAI,GAAG;GACtC,QAAQ;GACR;GACD;EACF;;AAGH,SAAS,UAAU,KAAqB;CACtC,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,MAAK,MAAM,OAAO,OAAO,aAAa,MAAM,CAAE,QAAO,aAAa,IAAI,KAAK,aAAa;AACxF,QAAO,OAAO,UAAU;;AAG1B,SAAgB,YAAY,UAAkB,WAA0B;AACtE,OAAM,IAAI,aAAa;EACrB,MAAM;EACN;EACA;EACA,SAAS,GAAG,SAAS,+BAA+B;EACrD,CAAC;;AAGJ,SAAgB,qBAAqB,UAAkB;AACrD,QAAO;EACL,QAAQ,YAAsC,YAAY,UAAU,kBAAkB;EACtF,QAAQ,YAA2B,YAAY,UAAU,kBAAkB;EAC3E,SAAS,YAA2B,YAAY,UAAU,mBAAmB;EAC9E"}
+{"version":3,"file":"provider-utils-BjOSWNsh.mjs","names":["managed: ManagedSandboxProvider","ownedTemplate: Promise<TemplateFile[]> | undefined","result: TemplateFile[]"],"sources":["../src/internal/managed-provider.ts","../src/internal/provider-utils.ts"],"sourcesContent":["import { SandboxError } from \"../core/errors\";\nimport type {\n  ManagedSandboxProvider,\n  ManagedSandboxSession,\n  SandboxProvider,\n} from \"../core/provider\";\nimport { createSandbox } from \"../core/sandbox\";\nimport type { Sandbox } from \"../core/types\";\nimport type { SandboxNetworkPolicy } from \"../core/provider\";\n\ntype TemplateFile = { path: string; content: Uint8Array };\n\n/**\n * Shared managed lifecycle for built-in providers. Provider-native implementations\n * can replace this optional surface without changing `createSandbox()`.\n */\nexport function withManagedSessions<TRaw>(\n  provider: SandboxProvider<TRaw>,\n  configuredPorts: ReadonlyArray<number> = [],\n  lifecycle: {\n    stop?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    resume?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    destroy?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    setPorts?: (\n      sandbox: Sandbox<TRaw>,\n      ports: ReadonlyArray<number>,\n      signal?: AbortSignal,\n    ) => Promise<void>;\n    setNetworkPolicy?: (sandbox: Sandbox<TRaw>, policy: SandboxNetworkPolicy) => Promise<void>;\n  } = {},\n): SandboxProvider<TRaw> {\n  const sessions = new Map<string, ManagedSandboxSession>();\n  const templates = new Map<string, Promise<TemplateFile[]>>();\n\n  const managed: ManagedSandboxProvider = {\n    async create(options) {\n      const existing = sessions.get(options.sessionId);\n      if (existing) return existing;\n      const sandbox = await createSandbox({\n        provider,\n        cwd: options.cwd,\n        env: options.env,\n        signal: options.signal,\n      });\n      const ports = new Set([...configuredPorts, ...(options.ports ?? [])]);\n      let ownedTemplate: Promise<TemplateFile[]> | undefined;\n      try {\n        if (options.identity) {\n          let template = templates.get(options.identity);\n          if (!template) {\n            template = (async () => {\n              await options.onFirstCreate?.(sandbox);\n              return captureFiles(sandbox, sandbox.cwd);\n            })();\n            ownedTemplate = template;\n            templates.set(options.identity, template);\n            await template;\n          } else {\n            await restoreFiles(sandbox, await template);\n          }\n        } else {\n          await options.onFirstCreate?.(sandbox);\n        }\n        const session = createManagedSession(\n          options.sessionId,\n          sandbox,\n          ports,\n          sessions,\n          lifecycle,\n        );\n        sessions.set(options.sessionId, session);\n        return session;\n      } catch (error) {\n        if (\n          options.identity &&\n          ownedTemplate &&\n          templates.get(options.identity) === ownedTemplate\n        ) {\n          templates.delete(options.identity);\n        }\n        try {\n          if (lifecycle.destroy) await lifecycle.destroy(sandbox);\n          else await sandbox.stop();\n        } catch (cleanupError) {\n          if (error instanceof Error) {\n            Object.defineProperty(error, \"cleanupError\", {\n              value: cleanupError,\n              enumerable: false,\n            });\n          }\n        }\n        throw error;\n      }\n    },\n    async resume(options) {\n      const session = sessions.get(options.sessionId);\n      if (!session) {\n        throw new SandboxError({\n          code: \"not_found\",\n          provider: provider.id,\n          operation: \"managed.resume\",\n          message: `Managed sandbox session not found: ${options.sessionId}`,\n        });\n      }\n      await session.resume();\n      return session;\n    },\n  };\n  return { ...provider, managed };\n}\n\nfunction createManagedSession<TRaw>(\n  id: string,\n  sandbox: Sandbox<TRaw>,\n  initialPorts: Set<number>,\n  sessions: Map<string, ManagedSandboxSession>,\n  lifecycle: {\n    stop?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    resume?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    destroy?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    setPorts?: (\n      sandbox: Sandbox<TRaw>,\n      ports: ReadonlyArray<number>,\n      signal?: AbortSignal,\n    ) => Promise<void>;\n    setNetworkPolicy?: (sandbox: Sandbox<TRaw>, policy: SandboxNetworkPolicy) => Promise<void>;\n  },\n): ManagedSandboxSession {\n  let destroyed = false;\n  let stopped = false;\n  const assertActive = () => {\n    if (destroyed) {\n      throw new SandboxError({\n        code: \"terminated\",\n        provider: sandbox.provider,\n        operation: \"managed.session\",\n        message: `Managed sandbox session has been destroyed: ${id}`,\n      });\n    }\n  };\n  const session: ManagedSandboxSession = {\n    id,\n    sandbox,\n    defaultWorkingDirectory: sandbox.cwd,\n    get ports() {\n      return [...initialPorts];\n    },\n    async getPortUrl({ port, protocol }) {\n      assertActive();\n      if (!initialPorts.has(port)) {\n        throw new SandboxError({\n          code: \"invalid_input\",\n          provider: sandbox.provider,\n          operation: \"managed.getPortUrl\",\n          message: `Port ${port} is not exposed by this session`,\n        });\n      }\n      const exposed = await sandbox.ports.expose(port);\n      const url = new URL(exposed.url);\n      if (protocol) url.protocol = `${protocol}:`;\n      return url.toString().replace(/\\/$/, \"\");\n    },\n    async stop() {\n      assertActive();\n      if (stopped) return;\n      await lifecycle.stop?.(sandbox);\n      stopped = true;\n    },\n    async resume() {\n      assertActive();\n      if (!stopped) return;\n      await lifecycle.resume?.(sandbox);\n      stopped = false;\n    },\n    async destroy() {\n      if (destroyed) return;\n      destroyed = true;\n      sessions.delete(id);\n      if (lifecycle.destroy) await lifecycle.destroy(sandbox);\n      else await sandbox.stop();\n    },\n    ...(lifecycle.setPorts\n      ? {\n          async setPorts(ports: ReadonlyArray<number>, options?: { signal?: AbortSignal }) {\n            assertActive();\n            await lifecycle.setPorts!(sandbox, ports, options?.signal);\n            initialPorts.clear();\n            for (const port of ports) initialPorts.add(port);\n          },\n        }\n      : {}),\n    ...(lifecycle.setNetworkPolicy\n      ? {\n          setNetworkPolicy: (policy: SandboxNetworkPolicy) => {\n            assertActive();\n            return lifecycle.setNetworkPolicy!(sandbox, policy);\n          },\n        }\n      : {}),\n  };\n  return session;\n}\n\nasync function captureFiles(sandbox: Sandbox, path: string): Promise<TemplateFile[]> {\n  const result: TemplateFile[] = [];\n  for (const entry of await sandbox.files.list(path)) {\n    if (entry.type === \"directory\") result.push(...(await captureFiles(sandbox, entry.path)));\n    else if (entry.type === \"file\")\n      result.push({\n        path: entry.path,\n        content: await sandbox.files.read(entry.path),\n      });\n  }\n  return result;\n}\n\nasync function restoreFiles(sandbox: Sandbox, files: ReadonlyArray<TemplateFile>): Promise<void> {\n  await Promise.all(files.map((file) => sandbox.files.write(file.path, file.content)));\n}\n","import { SandboxError } from \"../core/errors\";\nimport type { CommandInput, ExposedPort, FileValue, SandboxSnapshot } from \"../core/types\";\n\nexport async function toUint8Array(value: FileValue): Promise<Uint8Array> {\n  if (typeof value === \"string\") return new TextEncoder().encode(value);\n  if (value instanceof Uint8Array) return value;\n  if (value instanceof ArrayBuffer) return new Uint8Array(value);\n  if (value instanceof Blob) return new Uint8Array(await value.arrayBuffer());\n  const response = new Response(value);\n  return new Uint8Array(await response.arrayBuffer());\n}\n\nexport function commandString(input: CommandInput): string {\n  if (typeof input === \"string\") return input;\n  return [input.command, ...(input.args ?? [])].map(shellQuote).join(\" \");\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replaceAll(\"'\", `'\"'\"'`)}'`;\n}\n\nexport function portResult(\n  port: number,\n  url: string,\n  isPublic: boolean,\n  authenticated: boolean,\n  request?: (path?: string, init?: RequestInit) => Promise<Response>,\n): ExposedPort {\n  return {\n    port,\n    url,\n    public: isPublic,\n    authenticated,\n    request,\n    toJSON: () => ({\n      port,\n      url: authenticated ? redactUrl(url) : url,\n      public: isPublic,\n      authenticated,\n    }),\n  };\n}\n\nfunction redactUrl(url: string): string {\n  const parsed = new URL(url);\n  for (const key of parsed.searchParams.keys()) parsed.searchParams.set(key, \"[REDACTED]\");\n  return parsed.toString();\n}\n\nexport function unsupported(provider: string, operation: string): never {\n  throw new SandboxError({\n    code: \"unsupported\",\n    provider,\n    operation,\n    message: `${provider} does not support normalized ${operation}`,\n  });\n}\n\nexport function unsupportedSnapshots(provider: string) {\n  return {\n    create: async (): Promise<SandboxSnapshot> => unsupported(provider, \"snapshot.create\"),\n    delete: async (): Promise<void> => unsupported(provider, \"snapshot.delete\"),\n    restore: async (): Promise<void> => unsupported(provider, \"snapshot.restore\"),\n  };\n}\n"],"mappings":";;;;;;;;AAgBA,SAAgB,oBACd,UACA,kBAAyC,EAAE,EAC3C,YAUI,EAAE,EACiB;CACvB,MAAM,2BAAW,IAAI,KAAoC;CACzD,MAAM,4BAAY,IAAI,KAAsC;CAE5D,MAAMA,UAAkC;EACtC,MAAM,OAAO,SAAS;GACpB,MAAM,WAAW,SAAS,IAAI,QAAQ,UAAU;AAChD,OAAI,SAAU,QAAO;GACrB,MAAM,UAAU,MAAM,cAAc;IAClC;IACA,KAAK,QAAQ;IACb,KAAK,QAAQ;IACb,QAAQ,QAAQ;IACjB,CAAC;GACF,MAAM,QAAQ,IAAI,IAAI,CAAC,GAAG,iBAAiB,GAAI,QAAQ,SAAS,EAAE,CAAE,CAAC;GACrE,IAAIC;AACJ,OAAI;AACF,QAAI,QAAQ,UAAU;KACpB,IAAI,WAAW,UAAU,IAAI,QAAQ,SAAS;AAC9C,SAAI,CAAC,UAAU;AACb,kBAAY,YAAY;AACtB,aAAM,QAAQ,gBAAgB,QAAQ;AACtC,cAAO,aAAa,SAAS,QAAQ,IAAI;UACvC;AACJ,sBAAgB;AAChB,gBAAU,IAAI,QAAQ,UAAU,SAAS;AACzC,YAAM;WAEN,OAAM,aAAa,SAAS,MAAM,SAAS;UAG7C,OAAM,QAAQ,gBAAgB,QAAQ;IAExC,MAAM,UAAU,qBACd,QAAQ,WACR,SACA,OACA,UACA,UACD;AACD,aAAS,IAAI,QAAQ,WAAW,QAAQ;AACxC,WAAO;YACA,OAAO;AACd,QACE,QAAQ,YACR,iBACA,UAAU,IAAI,QAAQ,SAAS,KAAK,cAEpC,WAAU,OAAO,QAAQ,SAAS;AAEpC,QAAI;AACF,SAAI,UAAU,QAAS,OAAM,UAAU,QAAQ,QAAQ;SAClD,OAAM,QAAQ,MAAM;aAClB,cAAc;AACrB,SAAI,iBAAiB,MACnB,QAAO,eAAe,OAAO,gBAAgB;MAC3C,OAAO;MACP,YAAY;MACb,CAAC;;AAGN,UAAM;;;EAGV,MAAM,OAAO,SAAS;GACpB,MAAM,UAAU,SAAS,IAAI,QAAQ,UAAU;AAC/C,OAAI,CAAC,QACH,OAAM,IAAI,aAAa;IACrB,MAAM;IACN,UAAU,SAAS;IACnB,WAAW;IACX,SAAS,sCAAsC,QAAQ;IACxD,CAAC;AAEJ,SAAM,QAAQ,QAAQ;AACtB,UAAO;;EAEV;AACD,QAAO;EAAE,GAAG;EAAU;EAAS;;AAGjC,SAAS,qBACP,IACA,SACA,cACA,UACA,WAWuB;CACvB,IAAI,YAAY;CAChB,IAAI,UAAU;CACd,MAAM,qBAAqB;AACzB,MAAI,UACF,OAAM,IAAI,aAAa;GACrB,MAAM;GACN,UAAU,QAAQ;GAClB,WAAW;GACX,SAAS,+CAA+C;GACzD,CAAC;;AA+DN,QA5DuC;EACrC;EACA;EACA,yBAAyB,QAAQ;EACjC,IAAI,QAAQ;AACV,UAAO,CAAC,GAAG,aAAa;;EAE1B,MAAM,WAAW,EAAE,MAAM,YAAY;AACnC,iBAAc;AACd,OAAI,CAAC,aAAa,IAAI,KAAK,CACzB,OAAM,IAAI,aAAa;IACrB,MAAM;IACN,UAAU,QAAQ;IAClB,WAAW;IACX,SAAS,QAAQ,KAAK;IACvB,CAAC;GAEJ,MAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,KAAK;GAChD,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;AAChC,OAAI,SAAU,KAAI,WAAW,GAAG,SAAS;AACzC,UAAO,IAAI,UAAU,CAAC,QAAQ,OAAO,GAAG;;EAE1C,MAAM,OAAO;AACX,iBAAc;AACd,OAAI,QAAS;AACb,SAAM,UAAU,OAAO,QAAQ;AAC/B,aAAU;;EAEZ,MAAM,SAAS;AACb,iBAAc;AACd,OAAI,CAAC,QAAS;AACd,SAAM,UAAU,SAAS,QAAQ;AACjC,aAAU;;EAEZ,MAAM,UAAU;AACd,OAAI,UAAW;AACf,eAAY;AACZ,YAAS,OAAO,GAAG;AACnB,OAAI,UAAU,QAAS,OAAM,UAAU,QAAQ,QAAQ;OAClD,OAAM,QAAQ,MAAM;;EAE3B,GAAI,UAAU,WACV,EACE,MAAM,SAAS,OAA8B,SAAoC;AAC/E,iBAAc;AACd,SAAM,UAAU,SAAU,SAAS,OAAO,SAAS,OAAO;AAC1D,gBAAa,OAAO;AACpB,QAAK,MAAM,QAAQ,MAAO,cAAa,IAAI,KAAK;KAEnD,GACD,EAAE;EACN,GAAI,UAAU,mBACV,EACE,mBAAmB,WAAiC;AAClD,iBAAc;AACd,UAAO,UAAU,iBAAkB,SAAS,OAAO;KAEtD,GACD,EAAE;EACP;;AAIH,eAAe,aAAa,SAAkB,MAAuC;CACnF,MAAMC,SAAyB,EAAE;AACjC,MAAK,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,KAAK,CAChD,KAAI,MAAM,SAAS,YAAa,QAAO,KAAK,GAAI,MAAM,aAAa,SAAS,MAAM,KAAK,CAAE;UAChF,MAAM,SAAS,OACtB,QAAO,KAAK;EACV,MAAM,MAAM;EACZ,SAAS,MAAM,QAAQ,MAAM,KAAK,MAAM,KAAK;EAC9C,CAAC;AAEN,QAAO;;AAGT,eAAe,aAAa,SAAkB,OAAmD;AAC/F,OAAM,QAAQ,IAAI,MAAM,KAAK,SAAS,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ,CAAC,CAAC;;;;;ACtNtF,eAAsB,aAAa,OAAuC;AACxE,KAAI,OAAO,UAAU,SAAU,QAAO,IAAI,aAAa,CAAC,OAAO,MAAM;AACrE,KAAI,iBAAiB,WAAY,QAAO;AACxC,KAAI,iBAAiB,YAAa,QAAO,IAAI,WAAW,MAAM;AAC9D,KAAI,iBAAiB,KAAM,QAAO,IAAI,WAAW,MAAM,MAAM,aAAa,CAAC;CAC3E,MAAM,WAAW,IAAI,SAAS,MAAM;AACpC,QAAO,IAAI,WAAW,MAAM,SAAS,aAAa,CAAC;;AAGrD,SAAgB,cAAc,OAA6B;AACzD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAO,CAAC,MAAM,SAAS,GAAI,MAAM,QAAQ,EAAE,CAAE,CAAC,IAAI,WAAW,CAAC,KAAK,IAAI;;AAGzE,SAAS,WAAW,OAAuB;AACzC,QAAO,IAAI,MAAM,WAAW,KAAK,QAAQ,CAAC;;AAG5C,SAAgB,WACd,MACA,KACA,UACA,eACA,SACa;AACb,QAAO;EACL;EACA;EACA,QAAQ;EACR;EACA;EACA,eAAe;GACb;GACA,KAAK,gBAAgB,UAAU,IAAI,GAAG;GACtC,QAAQ;GACR;GACD;EACF;;AAGH,SAAS,UAAU,KAAqB;CACtC,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,MAAK,MAAM,OAAO,OAAO,aAAa,MAAM,CAAE,QAAO,aAAa,IAAI,KAAK,aAAa;AACxF,QAAO,OAAO,UAAU;;AAG1B,SAAgB,YAAY,UAAkB,WAA0B;AACtE,OAAM,IAAI,aAAa;EACrB,MAAM;EACN;EACA;EACA,SAAS,GAAG,SAAS,+BAA+B;EACrD,CAAC;;AAGJ,SAAgB,qBAAqB,UAAkB;AACrD,QAAO;EACL,QAAQ,YAAsC,YAAY,UAAU,kBAAkB;EACtF,QAAQ,YAA2B,YAAY,UAAU,kBAAkB;EAC3E,SAAS,YAA2B,YAAY,UAAU,mBAAmB;EAC9E"}

package/dist/providers/agentos/index.d.mts

@@ -1,7 +1,7 @@
-import "../../types-BTagTtsp.mjs";
-import "../../provider-_caCV8kk.mjs";
-import "../../index-BMFkO6Fv.mjs";
-import "../../sandbox-BUYT-1C9.mjs";
-import { t as agentosCapabilities } from "../../capabilities-CMnszzpt.mjs";
-import { n as AgentOsSandbox, r as agentos, t as AgentOsProviderOptions } from "../../index-B1YT6OQ8.mjs";
+import "../../types-DEi_dfRR.mjs";
+import "../../provider-BzzkIVmv.mjs";
+import "../../index-BufLdrbp.mjs";
+import "../../sandbox-Dco6z9aB.mjs";
+import { t as agentosCapabilities } from "../../capabilities-DftdOpIu.mjs";
+import { n as AgentOsSandbox, r as agentos, t as AgentOsProviderOptions } from "../../index-Bk6GmoEt.mjs";
 export { AgentOsProviderOptions, AgentOsSandbox, agentos, agentosCapabilities };

package/dist/providers/agentos/index.mjs

@@ -1,8 +1,8 @@
 import "../../errors-Ch9PHKTd.mjs";
 import "../../capabilities-COKpwoFH.mjs";
-import "../../sandbox-BwyHcB_C.mjs";
+import "../../sandbox-rIOcbhtM.mjs";
 import { t as agentosCapabilities } from "../../capabilities-CEowrzRM.mjs";
-import "../../provider-utils-DilOYLBO.mjs";
-import { t as agentos } from "../../agentos-BOFA_q-a.mjs";
+import "../../provider-utils-BjOSWNsh.mjs";
+import { t as agentos } from "../../agentos-DFJ4TFaY.mjs";
 
 export { agentos, agentosCapabilities };

package/dist/providers/daytona/index.d.mts

@@ -1,8 +1,8 @@
-import "../../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../../provider-_caCV8kk.mjs";
-import "../../index-BMFkO6Fv.mjs";
-import "../../sandbox-BUYT-1C9.mjs";
-import { n as daytonaCapabilities } from "../../capabilities-CMnszzpt.mjs";
+import "../../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../../provider-BzzkIVmv.mjs";
+import "../../index-BufLdrbp.mjs";
+import "../../sandbox-Dco6z9aB.mjs";
+import { n as daytonaCapabilities } from "../../capabilities-DftdOpIu.mjs";
 import { Sandbox as DaytonaSandbox } from "@daytona/sdk";
 
 //#region src/providers/daytona/index.d.ts

package/dist/providers/daytona/index.mjs

@@ -1,8 +1,8 @@
 import { r as normalizeError } from "../../errors-Ch9PHKTd.mjs";
 import "../../capabilities-COKpwoFH.mjs";
-import "../../sandbox-BwyHcB_C.mjs";
+import "../../sandbox-rIOcbhtM.mjs";
 import { n as daytonaCapabilities } from "../../capabilities-CEowrzRM.mjs";
-import { a as unsupportedSnapshots, n as portResult, o as withManagedSessions, r as toUint8Array, t as commandString } from "../../provider-utils-DilOYLBO.mjs";
+import { a as unsupportedSnapshots, n as portResult, o as withManagedSessions, r as toUint8Array, t as commandString } from "../../provider-utils-BjOSWNsh.mjs";
 import { randomUUID } from "node:crypto";
 import { Daytona } from "@daytona/sdk";
 

package/dist/providers/e2b/index.d.mts

@@ -1,8 +1,8 @@
-import "../../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../../provider-_caCV8kk.mjs";
-import "../../index-BMFkO6Fv.mjs";
-import "../../sandbox-BUYT-1C9.mjs";
-import { r as e2bCapabilities } from "../../capabilities-CMnszzpt.mjs";
+import "../../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../../provider-BzzkIVmv.mjs";
+import "../../index-BufLdrbp.mjs";
+import "../../sandbox-Dco6z9aB.mjs";
+import { r as e2bCapabilities } from "../../capabilities-DftdOpIu.mjs";
 import { Sandbox as E2BSandbox } from "e2b";
 
 //#region src/providers/e2b/index.d.ts

package/dist/providers/e2b/index.mjs

@@ -1,8 +1,8 @@
 import { r as normalizeError } from "../../errors-Ch9PHKTd.mjs";
 import "../../capabilities-COKpwoFH.mjs";
-import "../../sandbox-BwyHcB_C.mjs";
+import "../../sandbox-rIOcbhtM.mjs";
 import { r as e2bCapabilities } from "../../capabilities-CEowrzRM.mjs";
-import { i as unsupported, n as portResult, o as withManagedSessions, r as toUint8Array, t as commandString } from "../../provider-utils-DilOYLBO.mjs";
+import { i as unsupported, n as portResult, o as withManagedSessions, r as toUint8Array, t as commandString } from "../../provider-utils-BjOSWNsh.mjs";
 import { Sandbox } from "e2b";
 
 //#region src/providers/e2b/index.ts

package/dist/providers/local/index.d.mts

@@ -1,9 +1,9 @@
-import "../../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../../provider-_caCV8kk.mjs";
-import "../../index-BMFkO6Fv.mjs";
-import "../../sandbox-BUYT-1C9.mjs";
-import { i as localCapabilities } from "../../capabilities-CMnszzpt.mjs";
-import { n as AgentOsSandbox, t as AgentOsProviderOptions } from "../../index-B1YT6OQ8.mjs";
+import "../../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../../provider-BzzkIVmv.mjs";
+import "../../index-BufLdrbp.mjs";
+import "../../sandbox-Dco6z9aB.mjs";
+import { i as localCapabilities } from "../../capabilities-DftdOpIu.mjs";
+import { n as AgentOsSandbox, t as AgentOsProviderOptions } from "../../index-Bk6GmoEt.mjs";
 
 //#region src/providers/local/index.d.ts
 /** Options passed to the AgentOS VM that powers the Local provider. */

package/dist/providers/local/index.mjs

@@ -1,9 +1,9 @@
 import "../../errors-Ch9PHKTd.mjs";
 import "../../capabilities-COKpwoFH.mjs";
-import "../../sandbox-BwyHcB_C.mjs";
+import "../../sandbox-rIOcbhtM.mjs";
 import { i as localCapabilities } from "../../capabilities-CEowrzRM.mjs";
-import "../../provider-utils-DilOYLBO.mjs";
-import { t as agentos } from "../../agentos-BOFA_q-a.mjs";
+import "../../provider-utils-BjOSWNsh.mjs";
+import { t as agentos } from "../../agentos-DFJ4TFaY.mjs";
 
 //#region src/providers/local/index.ts
 /**

package/dist/providers/upstash/index.d.mts

@@ -1,8 +1,8 @@
-import "../../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../../provider-_caCV8kk.mjs";
-import "../../index-BMFkO6Fv.mjs";
-import "../../sandbox-BUYT-1C9.mjs";
-import { a as upstashCapabilities } from "../../capabilities-CMnszzpt.mjs";
+import "../../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../../provider-BzzkIVmv.mjs";
+import "../../index-BufLdrbp.mjs";
+import "../../sandbox-Dco6z9aB.mjs";
+import { a as upstashCapabilities } from "../../capabilities-DftdOpIu.mjs";
 import { Box, BoxConfig } from "@upstash/box";
 
 //#region src/providers/upstash/index.d.ts

package/dist/providers/upstash/index.mjs

@@ -1,8 +1,8 @@
 import { t as SandboxError } from "../../errors-Ch9PHKTd.mjs";
 import "../../capabilities-COKpwoFH.mjs";
-import "../../sandbox-BwyHcB_C.mjs";
+import "../../sandbox-rIOcbhtM.mjs";
 import { a as upstashCapabilities } from "../../capabilities-CEowrzRM.mjs";
-import { i as unsupported, n as portResult, o as withManagedSessions, r as toUint8Array, t as commandString } from "../../provider-utils-DilOYLBO.mjs";
+import { i as unsupported, n as portResult, o as withManagedSessions, r as toUint8Array, t as commandString } from "../../provider-utils-BjOSWNsh.mjs";
 import { Box } from "@upstash/box";
 
 //#region src/providers/upstash/index.ts

package/dist/providers/vercel/index.d.mts

@@ -1,8 +1,8 @@
-import "../../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../../provider-_caCV8kk.mjs";
-import "../../index-BMFkO6Fv.mjs";
-import "../../sandbox-BUYT-1C9.mjs";
-import { o as vercelCapabilities } from "../../capabilities-CMnszzpt.mjs";
+import "../../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../../provider-BzzkIVmv.mjs";
+import "../../index-BufLdrbp.mjs";
+import "../../sandbox-Dco6z9aB.mjs";
+import { o as vercelCapabilities } from "../../capabilities-DftdOpIu.mjs";
 import { Sandbox as VercelSandbox } from "@vercel/sandbox";
 
 //#region src/providers/vercel/index.d.ts
@@ -10,6 +10,7 @@ interface VercelBaseOptions {
   runtime?: "node24" | "node22" | "node26" | "python3.13" | (string & {});
   name?: string;
   ports?: number[];
+  /** Whether the sandbox persists across sessions. Defaults to true. */
   persistent?: boolean;
 }
 type VercelOptions = VercelBaseOptions & ({

package/dist/providers/vercel/index.mjs

@@ -1,8 +1,8 @@
 import { r as normalizeError, t as SandboxError } from "../../errors-Ch9PHKTd.mjs";
 import "../../capabilities-COKpwoFH.mjs";
-import "../../sandbox-BwyHcB_C.mjs";
+import "../../sandbox-rIOcbhtM.mjs";
 import { o as vercelCapabilities } from "../../capabilities-CEowrzRM.mjs";
-import { i as unsupported, n as portResult, o as withManagedSessions, r as toUint8Array } from "../../provider-utils-DilOYLBO.mjs";
+import { i as unsupported, n as portResult, o as withManagedSessions, r as toUint8Array } from "../../provider-utils-BjOSWNsh.mjs";
 import { Sandbox, Snapshot } from "@vercel/sandbox";
 
 //#region src/providers/vercel/index.ts

package/dist/providers/vercel/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":["VercelSandbox","events: ProcessOutputEvent[]","VercelSnapshot"],"sources":["../../../src/providers/vercel/index.ts"],"sourcesContent":["import { Sandbox as VercelSandbox, Snapshot as VercelSnapshot } from \"@vercel/sandbox\";\nimport { normalizeError, SandboxError } from \"../../core/errors\";\nimport type { SandboxProvider } from \"../../core/provider\";\nimport type {\n  CommandInput,\n  ProcessOutputEvent,\n  SandboxProcess,\n  SandboxSnapshot,\n} from \"../../core/types\";\nimport { portResult, toUint8Array, unsupported } from \"../../internal/provider-utils\";\nimport { vercelCapabilities } from \"../capabilities\";\nimport { withManagedSessions } from \"../../internal/managed-provider\";\n\ninterface VercelBaseOptions {\n  runtime?: \"node24\" | \"node22\" | \"node26\" | \"python3.13\" | (string & {});\n  name?: string;\n  ports?: number[];\n  persistent?: boolean;\n}\n\nexport type VercelOptions = VercelBaseOptions &\n  (\n    | { token: string; teamId: string; projectId: string }\n    | { token?: never; teamId?: never; projectId?: never }\n  );\n\nexport { vercelCapabilities } from \"../capabilities\";\n\nexport function vercel(options: VercelOptions = {}): SandboxProvider<VercelSandbox> {\n  return withManagedSessions(\n    {\n      id: \"vercel\",\n      capabilities: vercelCapabilities,\n      async create(createOptions) {\n        const credentials =\n          options.token && options.teamId && options.projectId\n            ? {\n                token: options.token,\n                teamId: options.teamId,\n                projectId: options.projectId,\n              }\n            : {};\n        const exposed = new Set(options.ports ?? []);\n        const raw = await VercelSandbox.create({\n          ...credentials,\n          runtime: options.runtime ?? \"node24\",\n          name: options.name,\n          ports: [...exposed],\n          persistent: options.persistent,\n          timeout: createOptions.timeout,\n          env: { ...createOptions.env },\n          signal: createOptions.signal,\n        });\n        const snapshots = new Map<string, VercelSnapshot>();\n        await raw.fs.mkdir(createOptions.cwd, { recursive: true });\n        return {\n          id: raw.name,\n          raw,\n          capabilities: vercelCapabilities,\n          files: {\n            async write(path, value) {\n              await raw.fs.writeFile(path, await toUint8Array(value));\n            },\n            async read(path) {\n              return new Uint8Array(await raw.fs.readFile(path));\n            },\n            async list(path) {\n              const entries = await raw.fs.readdir(path, {\n                withFileTypes: true,\n              });\n              return Promise.all(\n                entries.map(async (entry) => {\n                  const entryPath = `${path.replace(/\\/$/, \"\")}/${entry.name}`;\n                  const info = await raw.fs.lstat(entryPath);\n                  return {\n                    name: entry.name,\n                    path: entryPath,\n                    type: entry.isFile()\n                      ? (\"file\" as const)\n                      : entry.isDirectory()\n                        ? (\"directory\" as const)\n                        : entry.isSymbolicLink()\n                          ? (\"symlink\" as const)\n                          : (\"unknown\" as const),\n                    size: entry.isFile() ? info.size : undefined,\n                  };\n                }),\n              );\n            },\n            async mkdir(path) {\n              await raw.fs.mkdir(path, { recursive: true });\n            },\n            async remove(path) {\n              await raw.fs.rm(path, { recursive: true, force: true });\n            },\n            exists: (path) => raw.fs.exists(path),\n          },\n          async run(command, runOptions) {\n            try {\n              const result = await runCommand(raw, command, runOptions, false);\n              const [stdout, stderr] = await Promise.all([\n                result.stdout({ signal: runOptions.signal }),\n                result.stderr({ signal: runOptions.signal }),\n              ]);\n              if (\n                runOptions.timeout !== undefined &&\n                result.exitCode === 137 &&\n                result.durationMs !== undefined &&\n                result.durationMs >= runOptions.timeout\n              ) {\n                throw new SandboxError({\n                  code: \"timeout\",\n                  provider: \"vercel\",\n                  operation: \"process.run\",\n                  message: `Command timed out after ${runOptions.timeout}ms`,\n                });\n              }\n              return {\n                stdout,\n                stderr,\n                exitCode: result.exitCode,\n                success: result.exitCode === 0,\n                durationMs: result.durationMs,\n              };\n            } catch (error) {\n              throw normalizeError(\"vercel\", \"process.run\", error);\n            }\n          },\n          async start(command, runOptions) {\n            const handle = await runCommand(raw, command, runOptions, true);\n            const events: ProcessOutputEvent[] = [];\n            let running = true;\n            const stream = handle.logs({ signal: runOptions.signal });\n            const completed = handle.wait().then((result) => ({ exitCode: result.exitCode }));\n            const process: SandboxProcess = {\n              id: handle.cmdId,\n              async status() {\n                return running ? \"running\" : \"exited\";\n              },\n              async *output() {\n                try {\n                  for await (const event of stream) {\n                    const normalized = {\n                      stream: event.stream,\n                      data: event.data,\n                      timestamp: new Date(),\n                    } satisfies ProcessOutputEvent;\n                    events.push(normalized);\n                    yield normalized;\n                  }\n                } finally {\n                  running = false;\n                }\n              },\n              async write() {\n                unsupported(\"vercel\", \"process.stdin\");\n              },\n              wait: () => completed,\n              async kill(signal = \"SIGTERM\") {\n                await handle.kill(signal as Parameters<typeof handle.kill>[0]);\n                running = false;\n              },\n            };\n            return process;\n          },\n          async expose(port) {\n            if (!exposed.has(port)) {\n              exposed.add(port);\n              await raw.update({ ports: [...exposed] });\n            }\n            const url = raw.domain(port);\n            return portResult(port, url, true, false);\n          },\n          snapshots: {\n            async create() {\n              const snapshot = await raw.snapshot();\n              snapshots.set(snapshot.snapshotId, snapshot);\n              return {\n                id: snapshot.snapshotId,\n                mode: \"filesystem\",\n                createdAt: snapshot.createdAt,\n              } satisfies SandboxSnapshot;\n            },\n            async delete(snapshot) {\n              const id = typeof snapshot === \"string\" ? snapshot : snapshot.id;\n              const native =\n                snapshots.get(id) ?? (await VercelSnapshot.get({ snapshotId: id, ...credentials }));\n              await native.delete();\n              snapshots.delete(id);\n            },\n            async restore() {\n              unsupported(\"vercel\", \"snapshot.restore\");\n            },\n          },\n          async stop() {\n            if (raw.status !== \"stopped\") await raw.stop();\n          },\n        };\n      },\n    },\n    options.ports,\n    {\n      stop: async (sandbox) => {\n        await sandbox.raw.stop();\n      },\n      destroy: (sandbox) => sandbox.raw.delete(),\n      setPorts: (sandbox, ports, signal) => sandbox.raw.update({ ports: [...ports] }, { signal }),\n      setNetworkPolicy: (sandbox, policy) =>\n        sandbox.raw.update({\n          networkPolicy:\n            policy.mode === \"allow-all\" || policy.mode === \"deny-all\"\n              ? policy.mode\n              : policy.mode === \"native\"\n                ? (policy.value as import(\"@vercel/sandbox\").NetworkPolicy)\n                : { allow: [...(policy.allowedHosts ?? [])] },\n        }),\n    },\n  );\n}\n\nasync function runCommand(\n  raw: VercelSandbox,\n  input: CommandInput,\n  options: import(\"../../core/types\").RunOptions,\n  detached: false,\n): Promise<import(\"@vercel/sandbox\").CommandFinished>;\nasync function runCommand(\n  raw: VercelSandbox,\n  input: CommandInput,\n  options: import(\"../../core/types\").RunOptions,\n  detached: true,\n): Promise<import(\"@vercel/sandbox\").Command>;\nasync function runCommand(\n  raw: VercelSandbox,\n  input: CommandInput,\n  options: import(\"../../core/types\").RunOptions,\n  detached: boolean,\n) {\n  const command = typeof input === \"string\" ? { command: \"/bin/sh\", args: [\"-lc\", input] } : input;\n  return raw.runCommand({\n    cmd: command.command,\n    args: [...(command.args ?? [])],\n    cwd: options.cwd,\n    env: { ...options.env },\n    signal: options.signal,\n    timeoutMs: options.timeout,\n    detached,\n  });\n}\n\nexport type { VercelSandbox };\n"],"mappings":";;;;;;;;AA4BA,SAAgB,OAAO,UAAyB,EAAE,EAAkC;AAClF,QAAO,oBACL;EACE,IAAI;EACJ,cAAc;EACd,MAAM,OAAO,eAAe;GAC1B,MAAM,cACJ,QAAQ,SAAS,QAAQ,UAAU,QAAQ,YACvC;IACE,OAAO,QAAQ;IACf,QAAQ,QAAQ;IAChB,WAAW,QAAQ;IACpB,GACD,EAAE;GACR,MAAM,UAAU,IAAI,IAAI,QAAQ,SAAS,EAAE,CAAC;GAC5C,MAAM,MAAM,MAAMA,QAAc,OAAO;IACrC,GAAG;IACH,SAAS,QAAQ,WAAW;IAC5B,MAAM,QAAQ;IACd,OAAO,CAAC,GAAG,QAAQ;IACnB,YAAY,QAAQ;IACpB,SAAS,cAAc;IACvB,KAAK,EAAE,GAAG,cAAc,KAAK;IAC7B,QAAQ,cAAc;IACvB,CAAC;GACF,MAAM,4BAAY,IAAI,KAA6B;AACnD,SAAM,IAAI,GAAG,MAAM,cAAc,KAAK,EAAE,WAAW,MAAM,CAAC;AAC1D,UAAO;IACL,IAAI,IAAI;IACR;IACA,cAAc;IACd,OAAO;KACL,MAAM,MAAM,MAAM,OAAO;AACvB,YAAM,IAAI,GAAG,UAAU,MAAM,MAAM,aAAa,MAAM,CAAC;;KAEzD,MAAM,KAAK,MAAM;AACf,aAAO,IAAI,WAAW,MAAM,IAAI,GAAG,SAAS,KAAK,CAAC;;KAEpD,MAAM,KAAK,MAAM;MACf,MAAM,UAAU,MAAM,IAAI,GAAG,QAAQ,MAAM,EACzC,eAAe,MAChB,CAAC;AACF,aAAO,QAAQ,IACb,QAAQ,IAAI,OAAO,UAAU;OAC3B,MAAM,YAAY,GAAG,KAAK,QAAQ,OAAO,GAAG,CAAC,GAAG,MAAM;OACtD,MAAM,OAAO,MAAM,IAAI,GAAG,MAAM,UAAU;AAC1C,cAAO;QACL,MAAM,MAAM;QACZ,MAAM;QACN,MAAM,MAAM,QAAQ,GACf,SACD,MAAM,aAAa,GAChB,cACD,MAAM,gBAAgB,GACnB,YACA;QACT,MAAM,MAAM,QAAQ,GAAG,KAAK,OAAO;QACpC;QACD,CACH;;KAEH,MAAM,MAAM,MAAM;AAChB,YAAM,IAAI,GAAG,MAAM,MAAM,EAAE,WAAW,MAAM,CAAC;;KAE/C,MAAM,OAAO,MAAM;AACjB,YAAM,IAAI,GAAG,GAAG,MAAM;OAAE,WAAW;OAAM,OAAO;OAAM,CAAC;;KAEzD,SAAS,SAAS,IAAI,GAAG,OAAO,KAAK;KACtC;IACD,MAAM,IAAI,SAAS,YAAY;AAC7B,SAAI;MACF,MAAM,SAAS,MAAM,WAAW,KAAK,SAAS,YAAY,MAAM;MAChE,MAAM,CAAC,QAAQ,UAAU,MAAM,QAAQ,IAAI,CACzC,OAAO,OAAO,EAAE,QAAQ,WAAW,QAAQ,CAAC,EAC5C,OAAO,OAAO,EAAE,QAAQ,WAAW,QAAQ,CAAC,CAC7C,CAAC;AACF,UACE,WAAW,YAAY,UACvB,OAAO,aAAa,OACpB,OAAO,eAAe,UACtB,OAAO,cAAc,WAAW,QAEhC,OAAM,IAAI,aAAa;OACrB,MAAM;OACN,UAAU;OACV,WAAW;OACX,SAAS,2BAA2B,WAAW,QAAQ;OACxD,CAAC;AAEJ,aAAO;OACL;OACA;OACA,UAAU,OAAO;OACjB,SAAS,OAAO,aAAa;OAC7B,YAAY,OAAO;OACpB;cACM,OAAO;AACd,YAAM,eAAe,UAAU,eAAe,MAAM;;;IAGxD,MAAM,MAAM,SAAS,YAAY;KAC/B,MAAM,SAAS,MAAM,WAAW,KAAK,SAAS,YAAY,KAAK;KAC/D,MAAMC,SAA+B,EAAE;KACvC,IAAI,UAAU;KACd,MAAM,SAAS,OAAO,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;KACzD,MAAM,YAAY,OAAO,MAAM,CAAC,MAAM,YAAY,EAAE,UAAU,OAAO,UAAU,EAAE;AA8BjF,YA7BgC;MAC9B,IAAI,OAAO;MACX,MAAM,SAAS;AACb,cAAO,UAAU,YAAY;;MAE/B,OAAO,SAAS;AACd,WAAI;AACF,mBAAW,MAAM,SAAS,QAAQ;SAChC,MAAM,aAAa;UACjB,QAAQ,MAAM;UACd,MAAM,MAAM;UACZ,2BAAW,IAAI,MAAM;UACtB;AACD,gBAAO,KAAK,WAAW;AACvB,eAAM;;iBAEA;AACR,kBAAU;;;MAGd,MAAM,QAAQ;AACZ,mBAAY,UAAU,gBAAgB;;MAExC,YAAY;MACZ,MAAM,KAAK,SAAS,WAAW;AAC7B,aAAM,OAAO,KAAK,OAA4C;AAC9D,iBAAU;;MAEb;;IAGH,MAAM,OAAO,MAAM;AACjB,SAAI,CAAC,QAAQ,IAAI,KAAK,EAAE;AACtB,cAAQ,IAAI,KAAK;AACjB,YAAM,IAAI,OAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC;;AAG3C,YAAO,WAAW,MADN,IAAI,OAAO,KAAK,EACC,MAAM,MAAM;;IAE3C,WAAW;KACT,MAAM,SAAS;MACb,MAAM,WAAW,MAAM,IAAI,UAAU;AACrC,gBAAU,IAAI,SAAS,YAAY,SAAS;AAC5C,aAAO;OACL,IAAI,SAAS;OACb,MAAM;OACN,WAAW,SAAS;OACrB;;KAEH,MAAM,OAAO,UAAU;MACrB,MAAM,KAAK,OAAO,aAAa,WAAW,WAAW,SAAS;AAG9D,aADE,UAAU,IAAI,GAAG,IAAK,MAAMC,SAAe,IAAI;OAAE,YAAY;OAAI,GAAG;OAAa,CAAC,EACvE,QAAQ;AACrB,gBAAU,OAAO,GAAG;;KAEtB,MAAM,UAAU;AACd,kBAAY,UAAU,mBAAmB;;KAE5C;IACD,MAAM,OAAO;AACX,SAAI,IAAI,WAAW,UAAW,OAAM,IAAI,MAAM;;IAEjD;;EAEJ,EACD,QAAQ,OACR;EACE,MAAM,OAAO,YAAY;AACvB,SAAM,QAAQ,IAAI,MAAM;;EAE1B,UAAU,YAAY,QAAQ,IAAI,QAAQ;EAC1C,WAAW,SAAS,OAAO,WAAW,QAAQ,IAAI,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC;EAC3F,mBAAmB,SAAS,WAC1B,QAAQ,IAAI,OAAO,EACjB,eACE,OAAO,SAAS,eAAe,OAAO,SAAS,aAC3C,OAAO,OACP,OAAO,SAAS,WACb,OAAO,QACR,EAAE,OAAO,CAAC,GAAI,OAAO,gBAAgB,EAAE,CAAE,EAAE,EACpD,CAAC;EACL,CACF;;AAeH,eAAe,WACb,KACA,OACA,SACA,UACA;CACA,MAAM,UAAU,OAAO,UAAU,WAAW;EAAE,SAAS;EAAW,MAAM,CAAC,OAAO,MAAM;EAAE,GAAG;AAC3F,QAAO,IAAI,WAAW;EACpB,KAAK,QAAQ;EACb,MAAM,CAAC,GAAI,QAAQ,QAAQ,EAAE,CAAE;EAC/B,KAAK,QAAQ;EACb,KAAK,EAAE,GAAG,QAAQ,KAAK;EACvB,QAAQ,QAAQ;EAChB,WAAW,QAAQ;EACnB;EACD,CAAC"}
+{"version":3,"file":"index.mjs","names":["VercelSandbox","events: ProcessOutputEvent[]","VercelSnapshot"],"sources":["../../../src/providers/vercel/index.ts"],"sourcesContent":["import { Sandbox as VercelSandbox, Snapshot as VercelSnapshot } from \"@vercel/sandbox\";\nimport { normalizeError, SandboxError } from \"../../core/errors\";\nimport type { SandboxProvider } from \"../../core/provider\";\nimport type {\n  CommandInput,\n  ProcessOutputEvent,\n  SandboxProcess,\n  SandboxSnapshot,\n} from \"../../core/types\";\nimport { portResult, toUint8Array, unsupported } from \"../../internal/provider-utils\";\nimport { vercelCapabilities } from \"../capabilities\";\nimport { withManagedSessions } from \"../../internal/managed-provider\";\n\ninterface VercelBaseOptions {\n  runtime?: \"node24\" | \"node22\" | \"node26\" | \"python3.13\" | (string & {});\n  name?: string;\n  ports?: number[];\n  /** Whether the sandbox persists across sessions. Defaults to true. */\n  persistent?: boolean;\n}\n\nexport type VercelOptions = VercelBaseOptions &\n  (\n    | { token: string; teamId: string; projectId: string }\n    | { token?: never; teamId?: never; projectId?: never }\n  );\n\nexport { vercelCapabilities } from \"../capabilities\";\n\nexport function vercel(options: VercelOptions = {}): SandboxProvider<VercelSandbox> {\n  return withManagedSessions(\n    {\n      id: \"vercel\",\n      capabilities: vercelCapabilities,\n      async create(createOptions) {\n        const credentials =\n          options.token && options.teamId && options.projectId\n            ? {\n                token: options.token,\n                teamId: options.teamId,\n                projectId: options.projectId,\n              }\n            : {};\n        const exposed = new Set(options.ports ?? []);\n        const raw = await VercelSandbox.create({\n          ...credentials,\n          runtime: options.runtime ?? \"node24\",\n          name: options.name,\n          ports: [...exposed],\n          persistent: options.persistent,\n          timeout: createOptions.timeout,\n          env: { ...createOptions.env },\n          signal: createOptions.signal,\n        });\n        const snapshots = new Map<string, VercelSnapshot>();\n        await raw.fs.mkdir(createOptions.cwd, { recursive: true });\n        return {\n          id: raw.name,\n          raw,\n          capabilities: vercelCapabilities,\n          files: {\n            async write(path, value) {\n              await raw.fs.writeFile(path, await toUint8Array(value));\n            },\n            async read(path) {\n              return new Uint8Array(await raw.fs.readFile(path));\n            },\n            async list(path) {\n              const entries = await raw.fs.readdir(path, {\n                withFileTypes: true,\n              });\n              return Promise.all(\n                entries.map(async (entry) => {\n                  const entryPath = `${path.replace(/\\/$/, \"\")}/${entry.name}`;\n                  const info = await raw.fs.lstat(entryPath);\n                  return {\n                    name: entry.name,\n                    path: entryPath,\n                    type: entry.isFile()\n                      ? (\"file\" as const)\n                      : entry.isDirectory()\n                        ? (\"directory\" as const)\n                        : entry.isSymbolicLink()\n                          ? (\"symlink\" as const)\n                          : (\"unknown\" as const),\n                    size: entry.isFile() ? info.size : undefined,\n                  };\n                }),\n              );\n            },\n            async mkdir(path) {\n              await raw.fs.mkdir(path, { recursive: true });\n            },\n            async remove(path) {\n              await raw.fs.rm(path, { recursive: true, force: true });\n            },\n            exists: (path) => raw.fs.exists(path),\n          },\n          async run(command, runOptions) {\n            try {\n              const result = await runCommand(raw, command, runOptions, false);\n              const [stdout, stderr] = await Promise.all([\n                result.stdout({ signal: runOptions.signal }),\n                result.stderr({ signal: runOptions.signal }),\n              ]);\n              if (\n                runOptions.timeout !== undefined &&\n                result.exitCode === 137 &&\n                result.durationMs !== undefined &&\n                result.durationMs >= runOptions.timeout\n              ) {\n                throw new SandboxError({\n                  code: \"timeout\",\n                  provider: \"vercel\",\n                  operation: \"process.run\",\n                  message: `Command timed out after ${runOptions.timeout}ms`,\n                });\n              }\n              return {\n                stdout,\n                stderr,\n                exitCode: result.exitCode,\n                success: result.exitCode === 0,\n                durationMs: result.durationMs,\n              };\n            } catch (error) {\n              throw normalizeError(\"vercel\", \"process.run\", error);\n            }\n          },\n          async start(command, runOptions) {\n            const handle = await runCommand(raw, command, runOptions, true);\n            const events: ProcessOutputEvent[] = [];\n            let running = true;\n            const stream = handle.logs({ signal: runOptions.signal });\n            const completed = handle.wait().then((result) => ({ exitCode: result.exitCode }));\n            const process: SandboxProcess = {\n              id: handle.cmdId,\n              async status() {\n                return running ? \"running\" : \"exited\";\n              },\n              async *output() {\n                try {\n                  for await (const event of stream) {\n                    const normalized = {\n                      stream: event.stream,\n                      data: event.data,\n                      timestamp: new Date(),\n                    } satisfies ProcessOutputEvent;\n                    events.push(normalized);\n                    yield normalized;\n                  }\n                } finally {\n                  running = false;\n                }\n              },\n              async write() {\n                unsupported(\"vercel\", \"process.stdin\");\n              },\n              wait: () => completed,\n              async kill(signal = \"SIGTERM\") {\n                await handle.kill(signal as Parameters<typeof handle.kill>[0]);\n                running = false;\n              },\n            };\n            return process;\n          },\n          async expose(port) {\n            if (!exposed.has(port)) {\n              exposed.add(port);\n              await raw.update({ ports: [...exposed] });\n            }\n            const url = raw.domain(port);\n            return portResult(port, url, true, false);\n          },\n          snapshots: {\n            async create() {\n              const snapshot = await raw.snapshot();\n              snapshots.set(snapshot.snapshotId, snapshot);\n              return {\n                id: snapshot.snapshotId,\n                mode: \"filesystem\",\n                createdAt: snapshot.createdAt,\n              } satisfies SandboxSnapshot;\n            },\n            async delete(snapshot) {\n              const id = typeof snapshot === \"string\" ? snapshot : snapshot.id;\n              const native =\n                snapshots.get(id) ?? (await VercelSnapshot.get({ snapshotId: id, ...credentials }));\n              await native.delete();\n              snapshots.delete(id);\n            },\n            async restore() {\n              unsupported(\"vercel\", \"snapshot.restore\");\n            },\n          },\n          async stop() {\n            if (raw.status !== \"stopped\") await raw.stop();\n          },\n        };\n      },\n    },\n    options.ports,\n    {\n      stop: async (sandbox) => {\n        await sandbox.raw.stop();\n      },\n      destroy: (sandbox) => sandbox.raw.delete(),\n      setPorts: (sandbox, ports, signal) => sandbox.raw.update({ ports: [...ports] }, { signal }),\n      setNetworkPolicy: (sandbox, policy) =>\n        sandbox.raw.update({\n          networkPolicy:\n            policy.mode === \"allow-all\" || policy.mode === \"deny-all\"\n              ? policy.mode\n              : policy.mode === \"native\"\n                ? (policy.value as import(\"@vercel/sandbox\").NetworkPolicy)\n                : { allow: [...(policy.allowedHosts ?? [])] },\n        }),\n    },\n  );\n}\n\nasync function runCommand(\n  raw: VercelSandbox,\n  input: CommandInput,\n  options: import(\"../../core/types\").RunOptions,\n  detached: false,\n): Promise<import(\"@vercel/sandbox\").CommandFinished>;\nasync function runCommand(\n  raw: VercelSandbox,\n  input: CommandInput,\n  options: import(\"../../core/types\").RunOptions,\n  detached: true,\n): Promise<import(\"@vercel/sandbox\").Command>;\nasync function runCommand(\n  raw: VercelSandbox,\n  input: CommandInput,\n  options: import(\"../../core/types\").RunOptions,\n  detached: boolean,\n) {\n  const command = typeof input === \"string\" ? { command: \"/bin/sh\", args: [\"-lc\", input] } : input;\n  return raw.runCommand({\n    cmd: command.command,\n    args: [...(command.args ?? [])],\n    cwd: options.cwd,\n    env: { ...options.env },\n    signal: options.signal,\n    timeoutMs: options.timeout,\n    detached,\n  });\n}\n\nexport type { VercelSandbox };\n"],"mappings":";;;;;;;;AA6BA,SAAgB,OAAO,UAAyB,EAAE,EAAkC;AAClF,QAAO,oBACL;EACE,IAAI;EACJ,cAAc;EACd,MAAM,OAAO,eAAe;GAC1B,MAAM,cACJ,QAAQ,SAAS,QAAQ,UAAU,QAAQ,YACvC;IACE,OAAO,QAAQ;IACf,QAAQ,QAAQ;IAChB,WAAW,QAAQ;IACpB,GACD,EAAE;GACR,MAAM,UAAU,IAAI,IAAI,QAAQ,SAAS,EAAE,CAAC;GAC5C,MAAM,MAAM,MAAMA,QAAc,OAAO;IACrC,GAAG;IACH,SAAS,QAAQ,WAAW;IAC5B,MAAM,QAAQ;IACd,OAAO,CAAC,GAAG,QAAQ;IACnB,YAAY,QAAQ;IACpB,SAAS,cAAc;IACvB,KAAK,EAAE,GAAG,cAAc,KAAK;IAC7B,QAAQ,cAAc;IACvB,CAAC;GACF,MAAM,4BAAY,IAAI,KAA6B;AACnD,SAAM,IAAI,GAAG,MAAM,cAAc,KAAK,EAAE,WAAW,MAAM,CAAC;AAC1D,UAAO;IACL,IAAI,IAAI;IACR;IACA,cAAc;IACd,OAAO;KACL,MAAM,MAAM,MAAM,OAAO;AACvB,YAAM,IAAI,GAAG,UAAU,MAAM,MAAM,aAAa,MAAM,CAAC;;KAEzD,MAAM,KAAK,MAAM;AACf,aAAO,IAAI,WAAW,MAAM,IAAI,GAAG,SAAS,KAAK,CAAC;;KAEpD,MAAM,KAAK,MAAM;MACf,MAAM,UAAU,MAAM,IAAI,GAAG,QAAQ,MAAM,EACzC,eAAe,MAChB,CAAC;AACF,aAAO,QAAQ,IACb,QAAQ,IAAI,OAAO,UAAU;OAC3B,MAAM,YAAY,GAAG,KAAK,QAAQ,OAAO,GAAG,CAAC,GAAG,MAAM;OACtD,MAAM,OAAO,MAAM,IAAI,GAAG,MAAM,UAAU;AAC1C,cAAO;QACL,MAAM,MAAM;QACZ,MAAM;QACN,MAAM,MAAM,QAAQ,GACf,SACD,MAAM,aAAa,GAChB,cACD,MAAM,gBAAgB,GACnB,YACA;QACT,MAAM,MAAM,QAAQ,GAAG,KAAK,OAAO;QACpC;QACD,CACH;;KAEH,MAAM,MAAM,MAAM;AAChB,YAAM,IAAI,GAAG,MAAM,MAAM,EAAE,WAAW,MAAM,CAAC;;KAE/C,MAAM,OAAO,MAAM;AACjB,YAAM,IAAI,GAAG,GAAG,MAAM;OAAE,WAAW;OAAM,OAAO;OAAM,CAAC;;KAEzD,SAAS,SAAS,IAAI,GAAG,OAAO,KAAK;KACtC;IACD,MAAM,IAAI,SAAS,YAAY;AAC7B,SAAI;MACF,MAAM,SAAS,MAAM,WAAW,KAAK,SAAS,YAAY,MAAM;MAChE,MAAM,CAAC,QAAQ,UAAU,MAAM,QAAQ,IAAI,CACzC,OAAO,OAAO,EAAE,QAAQ,WAAW,QAAQ,CAAC,EAC5C,OAAO,OAAO,EAAE,QAAQ,WAAW,QAAQ,CAAC,CAC7C,CAAC;AACF,UACE,WAAW,YAAY,UACvB,OAAO,aAAa,OACpB,OAAO,eAAe,UACtB,OAAO,cAAc,WAAW,QAEhC,OAAM,IAAI,aAAa;OACrB,MAAM;OACN,UAAU;OACV,WAAW;OACX,SAAS,2BAA2B,WAAW,QAAQ;OACxD,CAAC;AAEJ,aAAO;OACL;OACA;OACA,UAAU,OAAO;OACjB,SAAS,OAAO,aAAa;OAC7B,YAAY,OAAO;OACpB;cACM,OAAO;AACd,YAAM,eAAe,UAAU,eAAe,MAAM;;;IAGxD,MAAM,MAAM,SAAS,YAAY;KAC/B,MAAM,SAAS,MAAM,WAAW,KAAK,SAAS,YAAY,KAAK;KAC/D,MAAMC,SAA+B,EAAE;KACvC,IAAI,UAAU;KACd,MAAM,SAAS,OAAO,KAAK,EAAE,QAAQ,WAAW,QAAQ,CAAC;KACzD,MAAM,YAAY,OAAO,MAAM,CAAC,MAAM,YAAY,EAAE,UAAU,OAAO,UAAU,EAAE;AA8BjF,YA7BgC;MAC9B,IAAI,OAAO;MACX,MAAM,SAAS;AACb,cAAO,UAAU,YAAY;;MAE/B,OAAO,SAAS;AACd,WAAI;AACF,mBAAW,MAAM,SAAS,QAAQ;SAChC,MAAM,aAAa;UACjB,QAAQ,MAAM;UACd,MAAM,MAAM;UACZ,2BAAW,IAAI,MAAM;UACtB;AACD,gBAAO,KAAK,WAAW;AACvB,eAAM;;iBAEA;AACR,kBAAU;;;MAGd,MAAM,QAAQ;AACZ,mBAAY,UAAU,gBAAgB;;MAExC,YAAY;MACZ,MAAM,KAAK,SAAS,WAAW;AAC7B,aAAM,OAAO,KAAK,OAA4C;AAC9D,iBAAU;;MAEb;;IAGH,MAAM,OAAO,MAAM;AACjB,SAAI,CAAC,QAAQ,IAAI,KAAK,EAAE;AACtB,cAAQ,IAAI,KAAK;AACjB,YAAM,IAAI,OAAO,EAAE,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC;;AAG3C,YAAO,WAAW,MADN,IAAI,OAAO,KAAK,EACC,MAAM,MAAM;;IAE3C,WAAW;KACT,MAAM,SAAS;MACb,MAAM,WAAW,MAAM,IAAI,UAAU;AACrC,gBAAU,IAAI,SAAS,YAAY,SAAS;AAC5C,aAAO;OACL,IAAI,SAAS;OACb,MAAM;OACN,WAAW,SAAS;OACrB;;KAEH,MAAM,OAAO,UAAU;MACrB,MAAM,KAAK,OAAO,aAAa,WAAW,WAAW,SAAS;AAG9D,aADE,UAAU,IAAI,GAAG,IAAK,MAAMC,SAAe,IAAI;OAAE,YAAY;OAAI,GAAG;OAAa,CAAC,EACvE,QAAQ;AACrB,gBAAU,OAAO,GAAG;;KAEtB,MAAM,UAAU;AACd,kBAAY,UAAU,mBAAmB;;KAE5C;IACD,MAAM,OAAO;AACX,SAAI,IAAI,WAAW,UAAW,OAAM,IAAI,MAAM;;IAEjD;;EAEJ,EACD,QAAQ,OACR;EACE,MAAM,OAAO,YAAY;AACvB,SAAM,QAAQ,IAAI,MAAM;;EAE1B,UAAU,YAAY,QAAQ,IAAI,QAAQ;EAC1C,WAAW,SAAS,OAAO,WAAW,QAAQ,IAAI,OAAO,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC;EAC3F,mBAAmB,SAAS,WAC1B,QAAQ,IAAI,OAAO,EACjB,eACE,OAAO,SAAS,eAAe,OAAO,SAAS,aAC3C,OAAO,OACP,OAAO,SAAS,WACb,OAAO,QACR,EAAE,OAAO,CAAC,GAAI,OAAO,gBAAgB,EAAE,CAAE,EAAE,EACpD,CAAC;EACL,CACF;;AAeH,eAAe,WACb,KACA,OACA,SACA,UACA;CACA,MAAM,UAAU,OAAO,UAAU,WAAW;EAAE,SAAS;EAAW,MAAM,CAAC,OAAO,MAAM;EAAE,GAAG;AAC3F,QAAO,IAAI,WAAW;EACpB,KAAK,QAAQ;EACb,MAAM,CAAC,GAAI,QAAQ,QAAQ,EAAE,CAAE;EAC/B,KAAK,QAAQ;EACb,KAAK,EAAE,GAAG,QAAQ,KAAK;EACvB,QAAQ,QAAQ;EAChB,WAAW,QAAQ;EACnB;EACD,CAAC"}

package/dist/{sandbox-BUYT-1C9.d.mts → sandbox-Dco6z9aB.d.mts}

@@ -1,5 +1,5 @@
-import { f as Sandbox } from "./types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "./provider-_caCV8kk.mjs";
+import { f as Sandbox } from "./types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "./provider-BzzkIVmv.mjs";
 
 //#region src/core/sandbox.d.ts
 interface CreateSandboxOptions<TProvider extends SandboxProvider<unknown>> {
@@ -10,8 +10,17 @@ interface CreateSandboxOptions<TProvider extends SandboxProvider<unknown>> {
   signal?: AbortSignal;
 }
 type RawOf<TProvider> = TProvider extends SandboxProvider<infer TRaw> ? TRaw : never;
+/**
+ * Creates a normalized sandbox. Prefer `await using` so cleanup runs when the scope exits.
+ */
 declare function createSandbox<TProvider extends SandboxProvider<unknown>>(options: CreateSandboxOptions<TProvider>): Promise<Sandbox<RawOf<TProvider>>>;
+/**
+ * Runs a callback with a sandbox and stops it afterward.
+ *
+ * Prefer `await using` with `createSandbox()` in new code. This helper remains useful for
+ * callback-style code and runtimes that do not parse explicit resource management syntax.
+ */
 declare function withSandbox<TProvider extends SandboxProvider<unknown>, TResult>(options: CreateSandboxOptions<TProvider>, callback: (sandbox: Sandbox<RawOf<TProvider>>) => TResult | Promise<TResult>): Promise<TResult>;
 //#endregion
 export { createSandbox as n, withSandbox as r, CreateSandboxOptions as t };
-//# sourceMappingURL=sandbox-BUYT-1C9.d.mts.map
+//# sourceMappingURL=sandbox-Dco6z9aB.d.mts.map

package/dist/{sandbox-BwyHcB_C.mjs → sandbox-rIOcbhtM.mjs}

@@ -20,6 +20,9 @@ function validatePath(cwd, value) {
 	if (value.startsWith("/")) return value.replace(/\/{2,}/g, "/");
 	return `${cwd}/${value}`.replace(/\/{2,}/g, "/");
 }
+/**
+* Creates a normalized sandbox. Prefer `await using` so cleanup runs when the scope exits.
+*/
 async function createSandbox(options) {
 	const cwd = validateCwd(options.cwd ?? "/workspace");
 	const env = options.env ?? {};
@@ -69,7 +72,8 @@ async function createSandbox(options) {
 			restore: (snapshot) => call("snapshot.restore", () => runtime.snapshots.restore(snapshot))
 		},
 		run: (command, runOptions = {}) => call("process.run", () => runtime.run(command, normalizeRunOptions(cwd, runOptions))),
-		stop
+		stop,
+		[Symbol.asyncDispose]: stop
 	};
 }
 function normalizeRunOptions(cwd, options) {
@@ -78,6 +82,12 @@ function normalizeRunOptions(cwd, options) {
 		cwd: options.cwd ? validatePath(cwd, options.cwd) : cwd
 	};
 }
+/**
+* Runs a callback with a sandbox and stops it afterward.
+*
+* Prefer `await using` with `createSandbox()` in new code. This helper remains useful for
+* callback-style code and runtimes that do not parse explicit resource management syntax.
+*/
 async function withSandbox(options, callback) {
 	const sandbox = await createSandbox(options);
 	try {
@@ -99,4 +109,4 @@ async function withSandbox(options, callback) {
 
 //#endregion
 export { withSandbox as n, createSandbox as t };
-//# sourceMappingURL=sandbox-BwyHcB_C.mjs.map
+//# sourceMappingURL=sandbox-rIOcbhtM.mjs.map

package/dist/sandbox-rIOcbhtM.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-rIOcbhtM.mjs","names":["stopPromise: Promise<void> | undefined"],"sources":["../src/core/sandbox.ts"],"sourcesContent":["import { normalizeError, SandboxError } from \"./errors\";\nimport type { SandboxProvider } from \"./provider\";\nimport type { FileValue, RunOptions, Sandbox } from \"./types\";\n\nexport interface CreateSandboxOptions<TProvider extends SandboxProvider<unknown>> {\n  provider: TProvider;\n  cwd?: string;\n  env?: Readonly<Record<string, string>>;\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\ntype RawOf<TProvider> = TProvider extends SandboxProvider<infer TRaw> ? TRaw : never;\n\nfunction validateCwd(cwd: string): string {\n  if (!cwd.startsWith(\"/\") || cwd.includes(\"\\0\")) {\n    throw new SandboxError({\n      code: \"invalid_input\",\n      provider: \"core\",\n      operation: \"create\",\n      message: \"cwd must be an absolute path\",\n    });\n  }\n  return cwd.replace(/\\/$/, \"\") || \"/\";\n}\n\nfunction validatePath(cwd: string, value: string): string {\n  if (!value || value.includes(\"\\0\") || value.split(\"/\").includes(\"..\")) {\n    throw new SandboxError({\n      code: \"invalid_input\",\n      provider: \"core\",\n      operation: \"path\",\n      message: `Invalid sandbox path: ${value}`,\n    });\n  }\n  if (value.startsWith(\"/\")) return value.replace(/\\/{2,}/g, \"/\");\n  return `${cwd}/${value}`.replace(/\\/{2,}/g, \"/\");\n}\n\n/**\n * Creates a normalized sandbox. Prefer `await using` so cleanup runs when the scope exits.\n */\nexport async function createSandbox<TProvider extends SandboxProvider<unknown>>(\n  options: CreateSandboxOptions<TProvider>,\n): Promise<Sandbox<RawOf<TProvider>>> {\n  const cwd = validateCwd(options.cwd ?? \"/workspace\");\n  const env = options.env ?? {};\n  let runtime;\n  try {\n    runtime = await options.provider.create({\n      cwd,\n      env,\n      timeout: options.timeout,\n      signal: options.signal,\n    });\n  } catch (error) {\n    throw normalizeError(options.provider.id, \"sandbox.create\", error);\n  }\n  let stopPromise: Promise<void> | undefined;\n  const stop = async () => {\n    stopPromise ??= call(\"sandbox.stop\", () => runtime.stop());\n    return stopPromise;\n  };\n  const call = async <T>(operation: string, fn: () => Promise<T>): Promise<T> => {\n    try {\n      return await fn();\n    } catch (error) {\n      throw normalizeError(options.provider.id, operation, error);\n    }\n  };\n  return {\n    id: runtime.id,\n    provider: options.provider.id,\n    cwd,\n    capabilities: runtime.capabilities,\n    raw: runtime.raw as RawOf<TProvider>,\n    files: {\n      write: async (path: string, value: FileValue) =>\n        call(\"files.write\", () => runtime.files.write(validatePath(cwd, path), value)),\n      read: async (path: string) =>\n        call(\"files.read\", () => runtime.files.read(validatePath(cwd, path))),\n      text: async (path: string) =>\n        new TextDecoder().decode(\n          await call(\"files.read\", () => runtime.files.read(validatePath(cwd, path))),\n        ),\n      list: async (path = \".\") =>\n        call(\"files.list\", () => runtime.files.list(path === \".\" ? cwd : validatePath(cwd, path))),\n      mkdir: async (path: string) =>\n        call(\"files.mkdir\", () => runtime.files.mkdir(validatePath(cwd, path))),\n      remove: async (path: string) =>\n        call(\"files.remove\", () => runtime.files.remove(validatePath(cwd, path))),\n      exists: async (path: string) =>\n        call(\"files.exists\", () => runtime.files.exists(validatePath(cwd, path))),\n    },\n    processes: {\n      start: (command, runOptions = {}) =>\n        call(\"process.start\", () => runtime.start(command, normalizeRunOptions(cwd, runOptions))),\n    },\n    ports: { expose: (port) => call(\"ports.expose\", () => runtime.expose(port)) },\n    snapshots: {\n      create: (snapshotOptions) =>\n        call(\"snapshot.create\", () => runtime.snapshots.create(snapshotOptions)),\n      delete: (snapshot) => call(\"snapshot.delete\", () => runtime.snapshots.delete(snapshot)),\n      restore: (snapshot) => call(\"snapshot.restore\", () => runtime.snapshots.restore(snapshot)),\n    },\n    run: (command, runOptions = {}) =>\n      call(\"process.run\", () => runtime.run(command, normalizeRunOptions(cwd, runOptions))),\n    stop,\n    [Symbol.asyncDispose]: stop,\n  };\n}\n\nfunction normalizeRunOptions(cwd: string, options: RunOptions): RunOptions {\n  return { ...options, cwd: options.cwd ? validatePath(cwd, options.cwd) : cwd };\n}\n\n/**\n * Runs a callback with a sandbox and stops it afterward.\n *\n * Prefer `await using` with `createSandbox()` in new code. This helper remains useful for\n * callback-style code and runtimes that do not parse explicit resource management syntax.\n */\nexport async function withSandbox<TProvider extends SandboxProvider<unknown>, TResult>(\n  options: CreateSandboxOptions<TProvider>,\n  callback: (sandbox: Sandbox<RawOf<TProvider>>) => TResult | Promise<TResult>,\n): Promise<TResult> {\n  const sandbox = await createSandbox(options);\n  try {\n    const result = await callback(sandbox);\n    await sandbox.stop();\n    return result;\n  } catch (error) {\n    try {\n      await sandbox.stop();\n    } catch (cleanupError) {\n      if (error instanceof Error) {\n        Object.defineProperty(error, \"cleanupError\", { value: cleanupError, enumerable: false });\n      }\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;AAcA,SAAS,YAAY,KAAqB;AACxC,KAAI,CAAC,IAAI,WAAW,IAAI,IAAI,IAAI,SAAS,KAAK,CAC5C,OAAM,IAAI,aAAa;EACrB,MAAM;EACN,UAAU;EACV,WAAW;EACX,SAAS;EACV,CAAC;AAEJ,QAAO,IAAI,QAAQ,OAAO,GAAG,IAAI;;AAGnC,SAAS,aAAa,KAAa,OAAuB;AACxD,KAAI,CAAC,SAAS,MAAM,SAAS,KAAK,IAAI,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,CACnE,OAAM,IAAI,aAAa;EACrB,MAAM;EACN,UAAU;EACV,WAAW;EACX,SAAS,yBAAyB;EACnC,CAAC;AAEJ,KAAI,MAAM,WAAW,IAAI,CAAE,QAAO,MAAM,QAAQ,WAAW,IAAI;AAC/D,QAAO,GAAG,IAAI,GAAG,QAAQ,QAAQ,WAAW,IAAI;;;;;AAMlD,eAAsB,cACpB,SACoC;CACpC,MAAM,MAAM,YAAY,QAAQ,OAAO,aAAa;CACpD,MAAM,MAAM,QAAQ,OAAO,EAAE;CAC7B,IAAI;AACJ,KAAI;AACF,YAAU,MAAM,QAAQ,SAAS,OAAO;GACtC;GACA;GACA,SAAS,QAAQ;GACjB,QAAQ,QAAQ;GACjB,CAAC;UACK,OAAO;AACd,QAAM,eAAe,QAAQ,SAAS,IAAI,kBAAkB,MAAM;;CAEpE,IAAIA;CACJ,MAAM,OAAO,YAAY;AACvB,kBAAgB,KAAK,sBAAsB,QAAQ,MAAM,CAAC;AAC1D,SAAO;;CAET,MAAM,OAAO,OAAU,WAAmB,OAAqC;AAC7E,MAAI;AACF,UAAO,MAAM,IAAI;WACV,OAAO;AACd,SAAM,eAAe,QAAQ,SAAS,IAAI,WAAW,MAAM;;;AAG/D,QAAO;EACL,IAAI,QAAQ;EACZ,UAAU,QAAQ,SAAS;EAC3B;EACA,cAAc,QAAQ;EACtB,KAAK,QAAQ;EACb,OAAO;GACL,OAAO,OAAO,MAAc,UAC1B,KAAK,qBAAqB,QAAQ,MAAM,MAAM,aAAa,KAAK,KAAK,EAAE,MAAM,CAAC;GAChF,MAAM,OAAO,SACX,KAAK,oBAAoB,QAAQ,MAAM,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC;GACvE,MAAM,OAAO,SACX,IAAI,aAAa,CAAC,OAChB,MAAM,KAAK,oBAAoB,QAAQ,MAAM,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC,CAC5E;GACH,MAAM,OAAO,OAAO,QAClB,KAAK,oBAAoB,QAAQ,MAAM,KAAK,SAAS,MAAM,MAAM,aAAa,KAAK,KAAK,CAAC,CAAC;GAC5F,OAAO,OAAO,SACZ,KAAK,qBAAqB,QAAQ,MAAM,MAAM,aAAa,KAAK,KAAK,CAAC,CAAC;GACzE,QAAQ,OAAO,SACb,KAAK,sBAAsB,QAAQ,MAAM,OAAO,aAAa,KAAK,KAAK,CAAC,CAAC;GAC3E,QAAQ,OAAO,SACb,KAAK,sBAAsB,QAAQ,MAAM,OAAO,aAAa,KAAK,KAAK,CAAC,CAAC;GAC5E;EACD,WAAW,EACT,QAAQ,SAAS,aAAa,EAAE,KAC9B,KAAK,uBAAuB,QAAQ,MAAM,SAAS,oBAAoB,KAAK,WAAW,CAAC,CAAC,EAC5F;EACD,OAAO,EAAE,SAAS,SAAS,KAAK,sBAAsB,QAAQ,OAAO,KAAK,CAAC,EAAE;EAC7E,WAAW;GACT,SAAS,oBACP,KAAK,yBAAyB,QAAQ,UAAU,OAAO,gBAAgB,CAAC;GAC1E,SAAS,aAAa,KAAK,yBAAyB,QAAQ,UAAU,OAAO,SAAS,CAAC;GACvF,UAAU,aAAa,KAAK,0BAA0B,QAAQ,UAAU,QAAQ,SAAS,CAAC;GAC3F;EACD,MAAM,SAAS,aAAa,EAAE,KAC5B,KAAK,qBAAqB,QAAQ,IAAI,SAAS,oBAAoB,KAAK,WAAW,CAAC,CAAC;EACvF;GACC,OAAO,eAAe;EACxB;;AAGH,SAAS,oBAAoB,KAAa,SAAiC;AACzE,QAAO;EAAE,GAAG;EAAS,KAAK,QAAQ,MAAM,aAAa,KAAK,QAAQ,IAAI,GAAG;EAAK;;;;;;;;AAShF,eAAsB,YACpB,SACA,UACkB;CAClB,MAAM,UAAU,MAAM,cAAc,QAAQ;AAC5C,KAAI;EACF,MAAM,SAAS,MAAM,SAAS,QAAQ;AACtC,QAAM,QAAQ,MAAM;AACpB,SAAO;UACA,OAAO;AACd,MAAI;AACF,SAAM,QAAQ,MAAM;WACb,cAAc;AACrB,OAAI,iBAAiB,MACnB,QAAO,eAAe,OAAO,gBAAgB;IAAE,OAAO;IAAc,YAAY;IAAO,CAAC;;AAG5F,QAAM"}

package/dist/testing/index.d.mts

@@ -1,6 +1,6 @@
-import "../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../provider-_caCV8kk.mjs";
-import { t as CreateSandboxOptions } from "../sandbox-BUYT-1C9.mjs";
+import "../types-DEi_dfRR.mjs";
+import { o as SandboxProvider } from "../provider-BzzkIVmv.mjs";
+import { t as CreateSandboxOptions } from "../sandbox-Dco6z9aB.mjs";
 
 //#region src/testing/conformance.d.ts
 declare const conformanceCases: readonly ["create and stop", "idempotent stop", "text files", "binary files", "directories", "relative paths", "invalid paths", "successful command", "stdout", "stderr", "nonzero exit", "timeout", "background process", "stdin", "ports", "snapshot create", "snapshot delete", "snapshot restore", "cleanup after failure"];

package/dist/testing/index.mjs

@@ -1,6 +1,6 @@
 import "../errors-Ch9PHKTd.mjs";
 import { i as supports } from "../capabilities-COKpwoFH.mjs";
-import { t as createSandbox } from "../sandbox-BwyHcB_C.mjs";
+import { t as createSandbox } from "../sandbox-rIOcbhtM.mjs";
 
 //#region src/testing/conformance.ts
 const conformanceCases = [

package/dist/{types-BTagTtsp.d.mts → types-DEi_dfRR.d.mts}

@@ -93,8 +93,11 @@ interface Sandbox<TRaw = unknown> {
   readonly ports: SandboxPorts;
   readonly snapshots: SandboxSnapshots;
   run(command: CommandInput, options?: RunOptions): Promise<CommandResult>;
+  /** Stops the provider runtime. Repeated calls share the same cleanup operation. */
   stop(): Promise<void>;
+  /** Stops the sandbox when an `await using` scope exits. */
+  [Symbol.asyncDispose](): Promise<void>;
 }
 //#endregion
 export { SandboxProcesses as _, CommandResult as a, capabilityNames as b, ProcessOutputEvent as c, RunOptions as d, Sandbox as f, SandboxProcess as g, SandboxPorts as h, CommandInput as i, ProcessStatus as l, SandboxFiles as m, CapabilityMap as n, ExposedPort as o, SandboxDirectoryEntry as p, CapabilityMode as r, FileValue as s, Capability as t, ProviderName as u, SandboxSnapshot as v, providerNames as x, SandboxSnapshots as y };
-//# sourceMappingURL=types-BTagTtsp.d.mts.map
+//# sourceMappingURL=types-DEi_dfRR.d.mts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opencoredev/sandbox-sdk",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "One TypeScript SDK for every sandbox provider.",
   "homepage": "https://sandbox-sdk.app",
   "license": "MIT",

package/dist/sandbox-BwyHcB_C.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"sandbox-BwyHcB_C.mjs","names":["stopPromise: Promise<void> | undefined"],"sources":["../src/core/sandbox.ts"],"sourcesContent":["import { normalizeError, SandboxError } from \"./errors\";\nimport type { SandboxProvider } from \"./provider\";\nimport type { FileValue, RunOptions, Sandbox } from \"./types\";\n\nexport interface CreateSandboxOptions<TProvider extends SandboxProvider<unknown>> {\n  provider: TProvider;\n  cwd?: string;\n  env?: Readonly<Record<string, string>>;\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\ntype RawOf<TProvider> = TProvider extends SandboxProvider<infer TRaw> ? TRaw : never;\n\nfunction validateCwd(cwd: string): string {\n  if (!cwd.startsWith(\"/\") || cwd.includes(\"\\0\")) {\n    throw new SandboxError({\n      code: \"invalid_input\",\n      provider: \"core\",\n      operation: \"create\",\n      message: \"cwd must be an absolute path\",\n    });\n  }\n  return cwd.replace(/\\/$/, \"\") || \"/\";\n}\n\nfunction validatePath(cwd: string, value: string): string {\n  if (!value || value.includes(\"\\0\") || value.split(\"/\").includes(\"..\")) {\n    throw new SandboxError({\n      code: \"invalid_input\",\n      provider: \"core\",\n      operation: \"path\",\n      message: `Invalid sandbox path: ${value}`,\n    });\n  }\n  if (value.startsWith(\"/\")) return value.replace(/\\/{2,}/g, \"/\");\n  return `${cwd}/${value}`.replace(/\\/{2,}/g, \"/\");\n}\n\nexport async function createSandbox<TProvider extends SandboxProvider<unknown>>(\n  options: CreateSandboxOptions<TProvider>,\n): Promise<Sandbox<RawOf<TProvider>>> {\n  const cwd = validateCwd(options.cwd ?? \"/workspace\");\n  const env = options.env ?? {};\n  let runtime;\n  try {\n    runtime = await options.provider.create({\n      cwd,\n      env,\n      timeout: options.timeout,\n      signal: options.signal,\n    });\n  } catch (error) {\n    throw normalizeError(options.provider.id, \"sandbox.create\", error);\n  }\n  let stopPromise: Promise<void> | undefined;\n  const stop = async () => {\n    stopPromise ??= call(\"sandbox.stop\", () => runtime.stop());\n    return stopPromise;\n  };\n  const call = async <T>(operation: string, fn: () => Promise<T>): Promise<T> => {\n    try {\n      return await fn();\n    } catch (error) {\n      throw normalizeError(options.provider.id, operation, error);\n    }\n  };\n  return {\n    id: runtime.id,\n    provider: options.provider.id,\n    cwd,\n    capabilities: runtime.capabilities,\n    raw: runtime.raw as RawOf<TProvider>,\n    files: {\n      write: async (path: string, value: FileValue) =>\n        call(\"files.write\", () => runtime.files.write(validatePath(cwd, path), value)),\n      read: async (path: string) =>\n        call(\"files.read\", () => runtime.files.read(validatePath(cwd, path))),\n      text: async (path: string) =>\n        new TextDecoder().decode(\n          await call(\"files.read\", () => runtime.files.read(validatePath(cwd, path))),\n        ),\n      list: async (path = \".\") =>\n        call(\"files.list\", () => runtime.files.list(path === \".\" ? cwd : validatePath(cwd, path))),\n      mkdir: async (path: string) =>\n        call(\"files.mkdir\", () => runtime.files.mkdir(validatePath(cwd, path))),\n      remove: async (path: string) =>\n        call(\"files.remove\", () => runtime.files.remove(validatePath(cwd, path))),\n      exists: async (path: string) =>\n        call(\"files.exists\", () => runtime.files.exists(validatePath(cwd, path))),\n    },\n    processes: {\n      start: (command, runOptions = {}) =>\n        call(\"process.start\", () => runtime.start(command, normalizeRunOptions(cwd, runOptions))),\n    },\n    ports: { expose: (port) => call(\"ports.expose\", () => runtime.expose(port)) },\n    snapshots: {\n      create: (snapshotOptions) =>\n        call(\"snapshot.create\", () => runtime.snapshots.create(snapshotOptions)),\n      delete: (snapshot) => call(\"snapshot.delete\", () => runtime.snapshots.delete(snapshot)),\n      restore: (snapshot) => call(\"snapshot.restore\", () => runtime.snapshots.restore(snapshot)),\n    },\n    run: (command, runOptions = {}) =>\n      call(\"process.run\", () => runtime.run(command, normalizeRunOptions(cwd, runOptions))),\n    stop,\n  };\n}\n\nfunction normalizeRunOptions(cwd: string, options: RunOptions): RunOptions {\n  return { ...options, cwd: options.cwd ? validatePath(cwd, options.cwd) : cwd };\n}\n\nexport async function withSandbox<TProvider extends SandboxProvider<unknown>, TResult>(\n  options: CreateSandboxOptions<TProvider>,\n  callback: (sandbox: Sandbox<RawOf<TProvider>>) => TResult | Promise<TResult>,\n): Promise<TResult> {\n  const sandbox = await createSandbox(options);\n  try {\n    const result = await callback(sandbox);\n    await sandbox.stop();\n    return result;\n  } catch (error) {\n    try {\n      await sandbox.stop();\n    } catch (cleanupError) {\n      if (error instanceof Error) {\n        Object.defineProperty(error, \"cleanupError\", { value: cleanupError, enumerable: false });\n      }\n    }\n    throw error;\n  }\n}\n"],"mappings":";;;AAcA,SAAS,YAAY,KAAqB;AACxC,KAAI,CAAC,IAAI,WAAW,IAAI,IAAI,IAAI,SAAS,KAAK,CAC5C,OAAM,IAAI,aAAa;EACrB,MAAM;EACN,UAAU;EACV,WAAW;EACX,SAAS;EACV,CAAC;AAEJ,QAAO,IAAI,QAAQ,OAAO,GAAG,IAAI;;AAGnC,SAAS,aAAa,KAAa,OAAuB;AACxD,KAAI,CAAC,SAAS,MAAM,SAAS,KAAK,IAAI,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,CACnE,OAAM,IAAI,aAAa;EACrB,MAAM;EACN,UAAU;EACV,WAAW;EACX,SAAS,yBAAyB;EACnC,CAAC;AAEJ,KAAI,MAAM,WAAW,IAAI,CAAE,QAAO,MAAM,QAAQ,WAAW,IAAI;AAC/D,QAAO,GAAG,IAAI,GAAG,QAAQ,QAAQ,WAAW,IAAI;;AAGlD,eAAsB,cACpB,SACoC;CACpC,MAAM,MAAM,YAAY,QAAQ,OAAO,aAAa;CACpD,MAAM,MAAM,QAAQ,OAAO,EAAE;CAC7B,IAAI;AACJ,KAAI;AACF,YAAU,MAAM,QAAQ,SAAS,OAAO;GACtC;GACA;GACA,SAAS,QAAQ;GACjB,QAAQ,QAAQ;GACjB,CAAC;UACK,OAAO;AACd,QAAM,eAAe,QAAQ,SAAS,IAAI,kBAAkB,MAAM;;CAEpE,IAAIA;CACJ,MAAM,OAAO,YAAY;AACvB,kBAAgB,KAAK,sBAAsB,QAAQ,MAAM,CAAC;AAC1D,SAAO;;CAET,MAAM,OAAO,OAAU,WAAmB,OAAqC;AAC7E,MAAI;AACF,UAAO,MAAM,IAAI;WACV,OAAO;AACd,SAAM,eAAe,QAAQ,SAAS,IAAI,WAAW,MAAM;;;AAG/D,QAAO;EACL,IAAI,QAAQ;EACZ,UAAU,QAAQ,SAAS;EAC3B;EACA,cAAc,QAAQ;EACtB,KAAK,QAAQ;EACb,OAAO;GACL,OAAO,OAAO,MAAc,UAC1B,KAAK,qBAAqB,QAAQ,MAAM,MAAM,aAAa,KAAK,KAAK,EAAE,MAAM,CAAC;GAChF,MAAM,OAAO,SACX,KAAK,oBAAoB,QAAQ,MAAM,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC;GACvE,MAAM,OAAO,SACX,IAAI,aAAa,CAAC,OAChB,MAAM,KAAK,oBAAoB,QAAQ,MAAM,KAAK,aAAa,KAAK,KAAK,CAAC,CAAC,CAC5E;GACH,MAAM,OAAO,OAAO,QAClB,KAAK,oBAAoB,QAAQ,MAAM,KAAK,SAAS,MAAM,MAAM,aAAa,KAAK,KAAK,CAAC,CAAC;GAC5F,OAAO,OAAO,SACZ,KAAK,qBAAqB,QAAQ,MAAM,MAAM,aAAa,KAAK,KAAK,CAAC,CAAC;GACzE,QAAQ,OAAO,SACb,KAAK,sBAAsB,QAAQ,MAAM,OAAO,aAAa,KAAK,KAAK,CAAC,CAAC;GAC3E,QAAQ,OAAO,SACb,KAAK,sBAAsB,QAAQ,MAAM,OAAO,aAAa,KAAK,KAAK,CAAC,CAAC;GAC5E;EACD,WAAW,EACT,QAAQ,SAAS,aAAa,EAAE,KAC9B,KAAK,uBAAuB,QAAQ,MAAM,SAAS,oBAAoB,KAAK,WAAW,CAAC,CAAC,EAC5F;EACD,OAAO,EAAE,SAAS,SAAS,KAAK,sBAAsB,QAAQ,OAAO,KAAK,CAAC,EAAE;EAC7E,WAAW;GACT,SAAS,oBACP,KAAK,yBAAyB,QAAQ,UAAU,OAAO,gBAAgB,CAAC;GAC1E,SAAS,aAAa,KAAK,yBAAyB,QAAQ,UAAU,OAAO,SAAS,CAAC;GACvF,UAAU,aAAa,KAAK,0BAA0B,QAAQ,UAAU,QAAQ,SAAS,CAAC;GAC3F;EACD,MAAM,SAAS,aAAa,EAAE,KAC5B,KAAK,qBAAqB,QAAQ,IAAI,SAAS,oBAAoB,KAAK,WAAW,CAAC,CAAC;EACvF;EACD;;AAGH,SAAS,oBAAoB,KAAa,SAAiC;AACzE,QAAO;EAAE,GAAG;EAAS,KAAK,QAAQ,MAAM,aAAa,KAAK,QAAQ,IAAI,GAAG;EAAK;;AAGhF,eAAsB,YACpB,SACA,UACkB;CAClB,MAAM,UAAU,MAAM,cAAc,QAAQ;AAC5C,KAAI;EACF,MAAM,SAAS,MAAM,SAAS,QAAQ;AACtC,QAAM,QAAQ,MAAM;AACpB,SAAO;UACA,OAAO;AACd,MAAI;AACF,SAAM,QAAQ,MAAM;WACb,cAAc;AACrB,OAAI,iBAAiB,MACnB,QAAO,eAAe,OAAO,gBAAgB;IAAE,OAAO;IAAc,YAAY;IAAO,CAAC;;AAG5F,QAAM"}