@opencoredev/sandbox-sdk 0.1.0 → 0.2.0

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../src/core/types.ts"],"sourcesContent":["export const providerNames = [\"local\", \"e2b\", \"daytona\", \"vercel\", \"upstash\"] as const;\nexport type ProviderName = (typeof providerNames)[number];\n\nexport const capabilityNames = [\n  \"files.read\",\n  \"files.write\",\n  \"files.list\",\n  \"files.remove\",\n  \"process.run\",\n  \"process.stream\",\n  \"process.background\",\n  \"process.stdin\",\n  \"process.cancel\",\n  \"ports.expose\",\n  \"ports.authenticatedRequest\",\n  \"snapshot.create\",\n  \"snapshot.delete\",\n  \"snapshot.restore\",\n  \"sandbox.resume\",\n  \"filesystem.persistent\",\n  \"image.custom\",\n  \"network.policy\",\n  \"process.pty\",\n  \"compute.gpu\",\n] as const;\n\nexport type Capability = (typeof capabilityNames)[number];\nexport type CapabilityMode =\n  | \"filesystem\"\n  | \"memory\"\n  | \"template\"\n  | \"fork\"\n  | \"public\"\n  | \"authenticated\"\n  | \"combined-stream\"\n  | \"separate-streams\"\n  | \"ephemeral\"\n  | \"persistent\"\n  | \"localhost\"\n  | \"in-process\"\n  | \"full\"\n  | \"native\";\n\nexport type CapabilityMap = Readonly<Record<Capability, false | CapabilityMode>>;\n\nexport type CommandInput = string | { command: string; args?: readonly string[] };\n\nexport interface RunOptions {\n  cwd?: string;\n  env?: Readonly<Record<string, string>>;\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface CommandResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  success: boolean;\n  signal?: string;\n  durationMs?: number;\n}\n\nexport type FileValue = string | Uint8Array | ArrayBuffer | Blob | ReadableStream<Uint8Array>;\n\nexport interface SandboxDirectoryEntry {\n  name: string;\n  path: string;\n  type: \"file\" | \"directory\" | \"symlink\" | \"unknown\";\n  size?: number;\n}\n\nexport interface SandboxFiles {\n  write(path: string, value: FileValue): Promise<void>;\n  read(path: string): Promise<Uint8Array>;\n  text(path: string): Promise<string>;\n  list(path?: string): Promise<SandboxDirectoryEntry[]>;\n  mkdir(path: string): Promise<void>;\n  remove(path: string): Promise<void>;\n  exists(path: string): Promise<boolean>;\n}\n\nexport interface ProcessOutputEvent {\n  stream: \"stdout\" | \"stderr\";\n  data: string | Uint8Array;\n  timestamp?: Date;\n}\n\nexport type ProcessStatus = \"starting\" | \"running\" | \"exited\" | \"killed\" | \"unknown\";\n\nexport interface SandboxProcess {\n  readonly id: string;\n  status(): Promise<ProcessStatus>;\n  output(): AsyncIterable<ProcessOutputEvent>;\n  write(value: string | Uint8Array): Promise<void>;\n  wait(): Promise<{ exitCode: number }>;\n  kill(signal?: string): Promise<void>;\n}\n\nexport interface SandboxProcesses {\n  start(command: CommandInput, options?: RunOptions): Promise<SandboxProcess>;\n}\n\nexport interface ExposedPort {\n  readonly port: number;\n  readonly url: string;\n  readonly public: boolean;\n  readonly authenticated: boolean;\n  request?(path?: string, init?: RequestInit): Promise<Response>;\n  toJSON(): Omit<ExposedPort, \"request\" | \"toJSON\">;\n}\n\nexport interface SandboxPorts {\n  expose(port: number): Promise<ExposedPort>;\n}\n\nexport interface SandboxSnapshot {\n  readonly id: string;\n  readonly name?: string;\n  readonly mode: CapabilityMode;\n  readonly createdAt?: Date;\n}\n\nexport interface SandboxSnapshots {\n  create(options?: { name?: string }): Promise<SandboxSnapshot>;\n  delete(snapshot: SandboxSnapshot | string): Promise<void>;\n  restore(snapshot: SandboxSnapshot | string): Promise<void>;\n}\n\nexport interface Sandbox<TRaw = unknown> {\n  readonly id: string;\n  readonly provider: ProviderName;\n  readonly cwd: string;\n  readonly capabilities: CapabilityMap;\n  readonly raw: TRaw;\n  readonly files: SandboxFiles;\n  readonly processes: SandboxProcesses;\n  readonly ports: SandboxPorts;\n  readonly snapshots: SandboxSnapshots;\n  run(command: CommandInput, options?: RunOptions): Promise<CommandResult>;\n  stop(): Promise<void>;\n}\n"],"mappings":";;;;;AAAA,MAAa,gBAAgB;CAAC;CAAS;CAAO;CAAW;CAAU;CAAU;AAG7E,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/core/types.ts"],"sourcesContent":["export const providerNames = [\n  \"local\",\n  \"e2b\",\n  \"daytona\",\n  \"vercel\",\n  \"upstash\",\n  \"box\",\n  \"railway\",\n] as const;\nexport type ProviderName = (typeof providerNames)[number];\n\nexport const capabilityNames = [\n  \"files.read\",\n  \"files.write\",\n  \"files.list\",\n  \"files.remove\",\n  \"process.run\",\n  \"process.stream\",\n  \"process.background\",\n  \"process.stdin\",\n  \"process.cancel\",\n  \"ports.expose\",\n  \"ports.authenticatedRequest\",\n  \"snapshot.create\",\n  \"snapshot.delete\",\n  \"snapshot.restore\",\n  \"sandbox.resume\",\n  \"filesystem.persistent\",\n  \"image.custom\",\n  \"network.policy\",\n  \"process.pty\",\n  \"compute.gpu\",\n] as const;\n\nexport type Capability = (typeof capabilityNames)[number];\nexport type CapabilityMode =\n  | \"filesystem\"\n  | \"memory\"\n  | \"template\"\n  | \"fork\"\n  | \"public\"\n  | \"authenticated\"\n  | \"combined-stream\"\n  | \"separate-streams\"\n  | \"ephemeral\"\n  | \"persistent\"\n  | \"localhost\"\n  | \"in-process\"\n  | \"full\"\n  | \"native\";\n\nexport type CapabilityMap = Readonly<Record<Capability, false | CapabilityMode>>;\n\nexport type CommandInput = string | { command: string; args?: readonly string[] };\n\nexport interface RunOptions {\n  cwd?: string;\n  env?: Readonly<Record<string, string>>;\n  timeout?: number;\n  signal?: AbortSignal;\n}\n\nexport interface CommandResult {\n  stdout: string;\n  stderr: string;\n  exitCode: number;\n  success: boolean;\n  signal?: string;\n  durationMs?: number;\n}\n\nexport type FileValue = string | Uint8Array | ArrayBuffer | Blob | ReadableStream<Uint8Array>;\n\nexport interface SandboxDirectoryEntry {\n  name: string;\n  path: string;\n  type: \"file\" | \"directory\" | \"symlink\" | \"unknown\";\n  size?: number;\n}\n\nexport interface SandboxFiles {\n  write(path: string, value: FileValue): Promise<void>;\n  read(path: string): Promise<Uint8Array>;\n  text(path: string): Promise<string>;\n  list(path?: string): Promise<SandboxDirectoryEntry[]>;\n  mkdir(path: string): Promise<void>;\n  remove(path: string): Promise<void>;\n  exists(path: string): Promise<boolean>;\n}\n\nexport interface ProcessOutputEvent {\n  stream: \"stdout\" | \"stderr\";\n  data: string | Uint8Array;\n  timestamp?: Date;\n}\n\nexport type ProcessStatus = \"starting\" | \"running\" | \"exited\" | \"killed\" | \"unknown\";\n\nexport interface SandboxProcess {\n  readonly id: string;\n  status(): Promise<ProcessStatus>;\n  output(): AsyncIterable<ProcessOutputEvent>;\n  write(value: string | Uint8Array): Promise<void>;\n  wait(): Promise<{ exitCode: number }>;\n  kill(signal?: string): Promise<void>;\n}\n\nexport interface SandboxProcesses {\n  start(command: CommandInput, options?: RunOptions): Promise<SandboxProcess>;\n}\n\nexport interface ExposedPort {\n  readonly port: number;\n  readonly url: string;\n  readonly public: boolean;\n  readonly authenticated: boolean;\n  request?(path?: string, init?: RequestInit): Promise<Response>;\n  toJSON(): Omit<ExposedPort, \"request\" | \"toJSON\">;\n}\n\nexport interface SandboxPorts {\n  expose(port: number): Promise<ExposedPort>;\n}\n\nexport interface SandboxSnapshot {\n  readonly id: string;\n  readonly name?: string;\n  readonly mode: CapabilityMode;\n  readonly createdAt?: Date;\n}\n\nexport interface SandboxSnapshots {\n  create(options?: { name?: string }): Promise<SandboxSnapshot>;\n  delete(snapshot: SandboxSnapshot | string): Promise<void>;\n  restore(snapshot: SandboxSnapshot | string): Promise<void>;\n}\n\nexport interface Sandbox<TRaw = unknown> {\n  readonly id: string;\n  readonly provider: ProviderName;\n  readonly cwd: string;\n  readonly capabilities: CapabilityMap;\n  readonly raw: TRaw;\n  readonly files: SandboxFiles;\n  readonly processes: SandboxProcesses;\n  readonly ports: SandboxPorts;\n  readonly snapshots: SandboxSnapshots;\n  run(command: CommandInput, options?: RunOptions): Promise<CommandResult>;\n  /** Stops the provider runtime. Repeated calls share the same cleanup operation. */\n  stop(): Promise<void>;\n  /** Stops the sandbox when an `await using` scope exits. */\n  [Symbol.asyncDispose](): Promise<void>;\n}\n"],"mappings":";;;;;AAAA,MAAa,gBAAgB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAGD,MAAa,kBAAkB;CAC7B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD"}

package/dist/{provider-utils-DilOYLBO.mjs → managed-provider-BsZGVQ4I.mjs}

@@ -1,5 +1,5 @@
-import { t as SandboxError } from "./errors-Ch9PHKTd.mjs";
-import { t as createSandbox } from "./sandbox-BwyHcB_C.mjs";
+import { t as SandboxError } from "./errors-BuF9bYOQ.mjs";
+import { t as createSandbox } from "./sandbox-DgtY5hvt.mjs";
 
 //#region src/internal/managed-provider.ts
 /**
@@ -144,58 +144,5 @@ async function restoreFiles(sandbox, files) {
 }
 
 //#endregion
-//#region src/internal/provider-utils.ts
-async function toUint8Array(value) {
-	if (typeof value === "string") return new TextEncoder().encode(value);
-	if (value instanceof Uint8Array) return value;
-	if (value instanceof ArrayBuffer) return new Uint8Array(value);
-	if (value instanceof Blob) return new Uint8Array(await value.arrayBuffer());
-	const response = new Response(value);
-	return new Uint8Array(await response.arrayBuffer());
-}
-function commandString(input) {
-	if (typeof input === "string") return input;
-	return [input.command, ...input.args ?? []].map(shellQuote).join(" ");
-}
-function shellQuote(value) {
-	return `'${value.replaceAll("'", `'"'"'`)}'`;
-}
-function portResult(port, url, isPublic, authenticated, request) {
-	return {
-		port,
-		url,
-		public: isPublic,
-		authenticated,
-		request,
-		toJSON: () => ({
-			port,
-			url: authenticated ? redactUrl(url) : url,
-			public: isPublic,
-			authenticated
-		})
-	};
-}
-function redactUrl(url) {
-	const parsed = new URL(url);
-	for (const key of parsed.searchParams.keys()) parsed.searchParams.set(key, "[REDACTED]");
-	return parsed.toString();
-}
-function unsupported(provider, operation) {
-	throw new SandboxError({
-		code: "unsupported",
-		provider,
-		operation,
-		message: `${provider} does not support normalized ${operation}`
-	});
-}
-function unsupportedSnapshots(provider) {
-	return {
-		create: async () => unsupported(provider, "snapshot.create"),
-		delete: async () => unsupported(provider, "snapshot.delete"),
-		restore: async () => unsupported(provider, "snapshot.restore")
-	};
-}
-
-//#endregion
-export { unsupportedSnapshots as a, unsupported as i, portResult as n, withManagedSessions as o, toUint8Array as r, commandString as t };
-//# sourceMappingURL=provider-utils-DilOYLBO.mjs.map
+export { withManagedSessions as t };
+//# sourceMappingURL=managed-provider-BsZGVQ4I.mjs.map

package/dist/managed-provider-BsZGVQ4I.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-provider-BsZGVQ4I.mjs","names":["managed: ManagedSandboxProvider","ownedTemplate: Promise<TemplateFile[]> | undefined","result: TemplateFile[]"],"sources":["../src/internal/managed-provider.ts"],"sourcesContent":["import { SandboxError } from \"../core/errors\";\nimport type {\n  ManagedSandboxProvider,\n  ManagedSandboxSession,\n  SandboxProvider,\n} from \"../core/provider\";\nimport { createSandbox } from \"../core/sandbox\";\nimport type { Sandbox } from \"../core/types\";\nimport type { SandboxNetworkPolicy } from \"../core/provider\";\n\ntype TemplateFile = { path: string; content: Uint8Array };\n\n/**\n * Shared managed lifecycle for built-in providers. Provider-native implementations\n * can replace this optional surface without changing `createSandbox()`.\n */\nexport function withManagedSessions<TRaw>(\n  provider: SandboxProvider<TRaw>,\n  configuredPorts: ReadonlyArray<number> = [],\n  lifecycle: {\n    stop?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    resume?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    destroy?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    setPorts?: (\n      sandbox: Sandbox<TRaw>,\n      ports: ReadonlyArray<number>,\n      signal?: AbortSignal,\n    ) => Promise<void>;\n    setNetworkPolicy?: (sandbox: Sandbox<TRaw>, policy: SandboxNetworkPolicy) => Promise<void>;\n  } = {},\n): SandboxProvider<TRaw> {\n  const sessions = new Map<string, ManagedSandboxSession>();\n  const templates = new Map<string, Promise<TemplateFile[]>>();\n\n  const managed: ManagedSandboxProvider = {\n    async create(options) {\n      const existing = sessions.get(options.sessionId);\n      if (existing) return existing;\n      const sandbox = await createSandbox({\n        provider,\n        cwd: options.cwd,\n        env: options.env,\n        signal: options.signal,\n      });\n      const ports = new Set([...configuredPorts, ...(options.ports ?? [])]);\n      let ownedTemplate: Promise<TemplateFile[]> | undefined;\n      try {\n        if (options.identity) {\n          let template = templates.get(options.identity);\n          if (!template) {\n            template = (async () => {\n              await options.onFirstCreate?.(sandbox);\n              return captureFiles(sandbox, sandbox.cwd);\n            })();\n            ownedTemplate = template;\n            templates.set(options.identity, template);\n            await template;\n          } else {\n            await restoreFiles(sandbox, await template);\n          }\n        } else {\n          await options.onFirstCreate?.(sandbox);\n        }\n        const session = createManagedSession(\n          options.sessionId,\n          sandbox,\n          ports,\n          sessions,\n          lifecycle,\n        );\n        sessions.set(options.sessionId, session);\n        return session;\n      } catch (error) {\n        if (\n          options.identity &&\n          ownedTemplate &&\n          templates.get(options.identity) === ownedTemplate\n        ) {\n          templates.delete(options.identity);\n        }\n        try {\n          if (lifecycle.destroy) await lifecycle.destroy(sandbox);\n          else await sandbox.stop();\n        } catch (cleanupError) {\n          if (error instanceof Error) {\n            Object.defineProperty(error, \"cleanupError\", {\n              value: cleanupError,\n              enumerable: false,\n            });\n          }\n        }\n        throw error;\n      }\n    },\n    async resume(options) {\n      const session = sessions.get(options.sessionId);\n      if (!session) {\n        throw new SandboxError({\n          code: \"not_found\",\n          provider: provider.id,\n          operation: \"managed.resume\",\n          message: `Managed sandbox session not found: ${options.sessionId}`,\n        });\n      }\n      await session.resume();\n      return session;\n    },\n  };\n  return { ...provider, managed };\n}\n\nfunction createManagedSession<TRaw>(\n  id: string,\n  sandbox: Sandbox<TRaw>,\n  initialPorts: Set<number>,\n  sessions: Map<string, ManagedSandboxSession>,\n  lifecycle: {\n    stop?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    resume?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    destroy?: (sandbox: Sandbox<TRaw>) => Promise<void>;\n    setPorts?: (\n      sandbox: Sandbox<TRaw>,\n      ports: ReadonlyArray<number>,\n      signal?: AbortSignal,\n    ) => Promise<void>;\n    setNetworkPolicy?: (sandbox: Sandbox<TRaw>, policy: SandboxNetworkPolicy) => Promise<void>;\n  },\n): ManagedSandboxSession {\n  let destroyed = false;\n  let stopped = false;\n  const assertActive = () => {\n    if (destroyed) {\n      throw new SandboxError({\n        code: \"terminated\",\n        provider: sandbox.provider,\n        operation: \"managed.session\",\n        message: `Managed sandbox session has been destroyed: ${id}`,\n      });\n    }\n  };\n  const session: ManagedSandboxSession = {\n    id,\n    sandbox,\n    defaultWorkingDirectory: sandbox.cwd,\n    get ports() {\n      return [...initialPorts];\n    },\n    async getPortUrl({ port, protocol }) {\n      assertActive();\n      if (!initialPorts.has(port)) {\n        throw new SandboxError({\n          code: \"invalid_input\",\n          provider: sandbox.provider,\n          operation: \"managed.getPortUrl\",\n          message: `Port ${port} is not exposed by this session`,\n        });\n      }\n      const exposed = await sandbox.ports.expose(port);\n      const url = new URL(exposed.url);\n      if (protocol) url.protocol = `${protocol}:`;\n      return url.toString().replace(/\\/$/, \"\");\n    },\n    async stop() {\n      assertActive();\n      if (stopped) return;\n      await lifecycle.stop?.(sandbox);\n      stopped = true;\n    },\n    async resume() {\n      assertActive();\n      if (!stopped) return;\n      await lifecycle.resume?.(sandbox);\n      stopped = false;\n    },\n    async destroy() {\n      if (destroyed) return;\n      destroyed = true;\n      sessions.delete(id);\n      if (lifecycle.destroy) await lifecycle.destroy(sandbox);\n      else await sandbox.stop();\n    },\n    ...(lifecycle.setPorts\n      ? {\n          async setPorts(ports: ReadonlyArray<number>, options?: { signal?: AbortSignal }) {\n            assertActive();\n            await lifecycle.setPorts!(sandbox, ports, options?.signal);\n            initialPorts.clear();\n            for (const port of ports) initialPorts.add(port);\n          },\n        }\n      : {}),\n    ...(lifecycle.setNetworkPolicy\n      ? {\n          setNetworkPolicy: (policy: SandboxNetworkPolicy) => {\n            assertActive();\n            return lifecycle.setNetworkPolicy!(sandbox, policy);\n          },\n        }\n      : {}),\n  };\n  return session;\n}\n\nasync function captureFiles(sandbox: Sandbox, path: string): Promise<TemplateFile[]> {\n  const result: TemplateFile[] = [];\n  for (const entry of await sandbox.files.list(path)) {\n    if (entry.type === \"directory\") result.push(...(await captureFiles(sandbox, entry.path)));\n    else if (entry.type === \"file\")\n      result.push({\n        path: entry.path,\n        content: await sandbox.files.read(entry.path),\n      });\n  }\n  return result;\n}\n\nasync function restoreFiles(sandbox: Sandbox, files: ReadonlyArray<TemplateFile>): Promise<void> {\n  await Promise.all(files.map((file) => sandbox.files.write(file.path, file.content)));\n}\n"],"mappings":";;;;;;;;AAgBA,SAAgB,oBACd,UACA,kBAAyC,EAAE,EAC3C,YAUI,EAAE,EACiB;CACvB,MAAM,2BAAW,IAAI,KAAoC;CACzD,MAAM,4BAAY,IAAI,KAAsC;CAE5D,MAAMA,UAAkC;EACtC,MAAM,OAAO,SAAS;GACpB,MAAM,WAAW,SAAS,IAAI,QAAQ,UAAU;AAChD,OAAI,SAAU,QAAO;GACrB,MAAM,UAAU,MAAM,cAAc;IAClC;IACA,KAAK,QAAQ;IACb,KAAK,QAAQ;IACb,QAAQ,QAAQ;IACjB,CAAC;GACF,MAAM,QAAQ,IAAI,IAAI,CAAC,GAAG,iBAAiB,GAAI,QAAQ,SAAS,EAAE,CAAE,CAAC;GACrE,IAAIC;AACJ,OAAI;AACF,QAAI,QAAQ,UAAU;KACpB,IAAI,WAAW,UAAU,IAAI,QAAQ,SAAS;AAC9C,SAAI,CAAC,UAAU;AACb,kBAAY,YAAY;AACtB,aAAM,QAAQ,gBAAgB,QAAQ;AACtC,cAAO,aAAa,SAAS,QAAQ,IAAI;UACvC;AACJ,sBAAgB;AAChB,gBAAU,IAAI,QAAQ,UAAU,SAAS;AACzC,YAAM;WAEN,OAAM,aAAa,SAAS,MAAM,SAAS;UAG7C,OAAM,QAAQ,gBAAgB,QAAQ;IAExC,MAAM,UAAU,qBACd,QAAQ,WACR,SACA,OACA,UACA,UACD;AACD,aAAS,IAAI,QAAQ,WAAW,QAAQ;AACxC,WAAO;YACA,OAAO;AACd,QACE,QAAQ,YACR,iBACA,UAAU,IAAI,QAAQ,SAAS,KAAK,cAEpC,WAAU,OAAO,QAAQ,SAAS;AAEpC,QAAI;AACF,SAAI,UAAU,QAAS,OAAM,UAAU,QAAQ,QAAQ;SAClD,OAAM,QAAQ,MAAM;aAClB,cAAc;AACrB,SAAI,iBAAiB,MACnB,QAAO,eAAe,OAAO,gBAAgB;MAC3C,OAAO;MACP,YAAY;MACb,CAAC;;AAGN,UAAM;;;EAGV,MAAM,OAAO,SAAS;GACpB,MAAM,UAAU,SAAS,IAAI,QAAQ,UAAU;AAC/C,OAAI,CAAC,QACH,OAAM,IAAI,aAAa;IACrB,MAAM;IACN,UAAU,SAAS;IACnB,WAAW;IACX,SAAS,sCAAsC,QAAQ;IACxD,CAAC;AAEJ,SAAM,QAAQ,QAAQ;AACtB,UAAO;;EAEV;AACD,QAAO;EAAE,GAAG;EAAU;EAAS;;AAGjC,SAAS,qBACP,IACA,SACA,cACA,UACA,WAWuB;CACvB,IAAI,YAAY;CAChB,IAAI,UAAU;CACd,MAAM,qBAAqB;AACzB,MAAI,UACF,OAAM,IAAI,aAAa;GACrB,MAAM;GACN,UAAU,QAAQ;GAClB,WAAW;GACX,SAAS,+CAA+C;GACzD,CAAC;;AA+DN,QA5DuC;EACrC;EACA;EACA,yBAAyB,QAAQ;EACjC,IAAI,QAAQ;AACV,UAAO,CAAC,GAAG,aAAa;;EAE1B,MAAM,WAAW,EAAE,MAAM,YAAY;AACnC,iBAAc;AACd,OAAI,CAAC,aAAa,IAAI,KAAK,CACzB,OAAM,IAAI,aAAa;IACrB,MAAM;IACN,UAAU,QAAQ;IAClB,WAAW;IACX,SAAS,QAAQ,KAAK;IACvB,CAAC;GAEJ,MAAM,UAAU,MAAM,QAAQ,MAAM,OAAO,KAAK;GAChD,MAAM,MAAM,IAAI,IAAI,QAAQ,IAAI;AAChC,OAAI,SAAU,KAAI,WAAW,GAAG,SAAS;AACzC,UAAO,IAAI,UAAU,CAAC,QAAQ,OAAO,GAAG;;EAE1C,MAAM,OAAO;AACX,iBAAc;AACd,OAAI,QAAS;AACb,SAAM,UAAU,OAAO,QAAQ;AAC/B,aAAU;;EAEZ,MAAM,SAAS;AACb,iBAAc;AACd,OAAI,CAAC,QAAS;AACd,SAAM,UAAU,SAAS,QAAQ;AACjC,aAAU;;EAEZ,MAAM,UAAU;AACd,OAAI,UAAW;AACf,eAAY;AACZ,YAAS,OAAO,GAAG;AACnB,OAAI,UAAU,QAAS,OAAM,UAAU,QAAQ,QAAQ;OAClD,OAAM,QAAQ,MAAM;;EAE3B,GAAI,UAAU,WACV,EACE,MAAM,SAAS,OAA8B,SAAoC;AAC/E,iBAAc;AACd,SAAM,UAAU,SAAU,SAAS,OAAO,SAAS,OAAO;AAC1D,gBAAa,OAAO;AACpB,QAAK,MAAM,QAAQ,MAAO,cAAa,IAAI,KAAK;KAEnD,GACD,EAAE;EACN,GAAI,UAAU,mBACV,EACE,mBAAmB,WAAiC;AAClD,iBAAc;AACd,UAAO,UAAU,iBAAkB,SAAS,OAAO;KAEtD,GACD,EAAE;EACP;;AAIH,eAAe,aAAa,SAAkB,MAAuC;CACnF,MAAMC,SAAyB,EAAE;AACjC,MAAK,MAAM,SAAS,MAAM,QAAQ,MAAM,KAAK,KAAK,CAChD,KAAI,MAAM,SAAS,YAAa,QAAO,KAAK,GAAI,MAAM,aAAa,SAAS,MAAM,KAAK,CAAE;UAChF,MAAM,SAAS,OACtB,QAAO,KAAK;EACV,MAAM,MAAM;EACZ,SAAS,MAAM,QAAQ,MAAM,KAAK,MAAM,KAAK;EAC9C,CAAC;AAEN,QAAO;;AAGT,eAAe,aAAa,SAAkB,OAAmD;AAC/F,OAAM,QAAQ,IAAI,MAAM,KAAK,SAAS,QAAQ,MAAM,MAAM,KAAK,MAAM,KAAK,QAAQ,CAAC,CAAC"}

package/dist/mastra/index.d.mts

@@ -1,5 +1,5 @@
-import { f as Sandbox } from "../types-BTagTtsp.mjs";
-import { o as SandboxProvider } from "../provider-_caCV8kk.mjs";
+import { f as Sandbox } from "../types-Bv6I2U1c.mjs";
+import { o as SandboxProvider } from "../provider-DOBErkBO.mjs";
 import { CopyOptions, FileContent, FileEntry, FilesystemInfo, InstructionsOption, ListOptions, MastraFilesystem, MastraFilesystemOptions, MastraSandbox, MastraSandboxOptions, ProcessHandle, ProcessInfo, ProviderStatus, ReadOptions, RemoveOptions, SandboxInfo, SandboxProcessManager, SpawnProcessOptions, Workspace, WorkspaceConfig, WriteOptions } from "@mastra/core/workspace";
 import { RequestContext } from "@mastra/core/di";
 

package/dist/mastra/index.mjs

@@ -1,4 +1,4 @@
-import { n as isSandboxError, t as SandboxError } from "../errors-Ch9PHKTd.mjs";
+import { n as isSandboxError, t as SandboxError } from "../errors-BuF9bYOQ.mjs";
 import { DirectoryNotEmptyError, DirectoryNotFoundError, FileExistsError, FileNotFoundError, IsDirectoryError, MastraFilesystem, MastraSandbox, NotDirectoryError, PermissionError, ProcessHandle, SandboxNotReadyError, SandboxProcessManager, StaleFileError, Workspace, WorkspaceReadOnlyError } from "@mastra/core/workspace";
 
 //#region src/mastra/index.ts

package/dist/metadata.d.mts

@@ -1,4 +1,4 @@
-import { n as CapabilityMap, u as ProviderName } from "./types-BTagTtsp.mjs";
+import { n as CapabilityMap, u as ProviderName } from "./types-Bv6I2U1c.mjs";
 
 //#region src/metadata.d.ts
 interface LiveTestResult {

package/dist/metadata.mjs

@@ -1,6 +1,6 @@
-import "./errors-Ch9PHKTd.mjs";
-import "./capabilities-COKpwoFH.mjs";
-import { a as upstashCapabilities, i as localCapabilities, n as daytonaCapabilities, o as vercelCapabilities, r as e2bCapabilities } from "./capabilities-CEowrzRM.mjs";
+import "./errors-BuF9bYOQ.mjs";
+import "./capabilities-xs9kaHrK.mjs";
+import { a as localCapabilities, c as vercelCapabilities, i as e2bCapabilities, n as boxCapabilities, o as railwayCapabilities, r as daytonaCapabilities, s as upstashCapabilities } from "./capabilities-CaSNd6J1.mjs";
 
 //#region src/metadata.ts
 const providers = [
@@ -23,7 +23,7 @@ const providers = [
 	{
 		id: "e2b",
 		displayName: "E2B",
-		officialUrl: "https://e2b.dev",
+		officialUrl: "https://e2b.dev/docs",
 		packageName: "e2b",
 		packageVersion: "2.32.0",
 		capabilities: e2bCapabilities,
@@ -39,7 +39,7 @@ const providers = [
 	{
 		id: "daytona",
 		displayName: "Daytona",
-		officialUrl: "https://www.daytona.io",
+		officialUrl: "https://www.daytona.io/docs/en/sandboxes/",
 		packageName: "@daytona/sdk",
 		packageVersion: "0.196.0",
 		capabilities: daytonaCapabilities,
@@ -92,6 +92,38 @@ const providers = [
 		portBehavior: "Creates a public URL by default, or a bearer-token URL whose credential stays inside request().",
 		snapshotBehavior: "Captures persistent workspace state. Restoring creates a new Box and remains available through raw.",
 		runtimeLimitations: "Durable Debian or Alpine boxes with Node.js, Python, Go, Ruby, or Rust runtimes."
+	},
+	{
+		id: "box",
+		displayName: "Ascii Box",
+		officialUrl: "https://docs.ascii.dev/box/quickstart",
+		packageName: "@asciidev/box-sdk",
+		packageVersion: "0.0.24",
+		capabilities: boxCapabilities,
+		environmentVariables: ["BOX_API_KEY", "BOX_BASE_URL"],
+		technicalStatus: "supported",
+		providerReviewed: false,
+		sponsor: false,
+		liveTest: null,
+		portBehavior: "Runs Box's native host command and returns a public HTTPS URL by default; protected mode can be requested explicitly.",
+		snapshotBehavior: "Stop and resume snapshots are available through the native Box client; on-demand normalized snapshots are not exposed.",
+		runtimeLimitations: "Foreground commands use the Box HTTP command endpoint, which has a 60-second maximum and no streaming or background-process handle."
+	},
+	{
+		id: "railway",
+		displayName: "Railway Sandboxes",
+		officialUrl: "https://docs.railway.com/sandboxes",
+		packageName: "railway",
+		packageVersion: "3.5.7",
+		capabilities: railwayCapabilities,
+		environmentVariables: ["RAILWAY_API_TOKEN", "RAILWAY_ENVIRONMENT_ID"],
+		technicalStatus: "experimental",
+		providerReviewed: false,
+		sponsor: false,
+		liveTest: null,
+		portBehavior: "The TypeScript SDK has no public preview URL API; use Railway CLI port forwarding outside the normalized runtime.",
+		snapshotBehavior: "Creates and deletes named Railway checkpoints. Booting from a checkpoint creates a new sandbox and remains on raw.",
+		runtimeLimitations: "Railway Sandboxes are in Priority Boarding and the provider SDK may introduce breaking changes between releases."
 	}
 ];
 function getProviderMetadata(id) {

package/dist/metadata.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"metadata.mjs","names":["providers: readonly ProviderMetadata[]"],"sources":["../src/metadata.ts"],"sourcesContent":["import {\n  daytonaCapabilities,\n  e2bCapabilities,\n  localCapabilities,\n  upstashCapabilities,\n  vercelCapabilities,\n} from \"./providers/capabilities\";\nimport type { CapabilityMap, ProviderName } from \"./core/types\";\n\nexport interface LiveTestResult {\n  provider: ProviderName;\n  testedAt: string;\n  adapterVersion: string;\n  providerSdkVersion: string;\n  passed: number;\n  failed: number;\n  skipped: number;\n  capabilities: Partial<CapabilityMap>;\n}\n\nexport interface ProviderMetadata {\n  id: ProviderName;\n  displayName: string;\n  officialUrl: string;\n  packageName: string | null;\n  packageVersion: string;\n  capabilities: CapabilityMap;\n  environmentVariables: readonly string[];\n  technicalStatus: \"supported\" | \"experimental\";\n  providerReviewed: boolean;\n  sponsor: boolean;\n  liveTest: LiveTestResult | null;\n  portBehavior: string;\n  snapshotBehavior: string;\n  runtimeLimitations: string;\n}\n\nexport const providers: readonly ProviderMetadata[] = [\n  {\n    id: \"local\",\n    displayName: \"Local\",\n    officialUrl: \"https://rivet.dev/docs/agent-os/\",\n    packageName: \"@rivet-dev/agentos-core\",\n    packageVersion: \"0.2.7\",\n    capabilities: localCapabilities,\n    environmentVariables: [],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a private in-process URL. HTTP traffic is bridged through ExposedPort.request().\",\n    snapshotBehavior:\n      \"Exports the AgentOS virtual filesystem and recreates the VM when restoring it.\",\n    runtimeLimitations:\n      \"Powered by the beta AgentOS runtime. Requires a supported Node.js host and cannot run arbitrary native Linux binaries.\",\n  },\n  {\n    id: \"e2b\",\n    displayName: \"E2B\",\n    officialUrl: \"https://e2b.dev\",\n    packageName: \"e2b\",\n    packageVersion: \"2.32.0\",\n    capabilities: e2bCapabilities,\n    environmentVariables: [\"E2B_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns an E2B host. Restricted traffic uses the native access token only inside request().\",\n    snapshotBehavior:\n      \"Creates persistent E2B snapshot templates; restore creates a new native sandbox and remains on raw.\",\n    runtimeLimitations: \"Requires Node.js 20.18.1 or newer and an E2B account.\",\n  },\n  {\n    id: \"daytona\",\n    displayName: \"Daytona\",\n    officialUrl: \"https://www.daytona.io\",\n    packageName: \"@daytona/sdk\",\n    packageVersion: \"0.196.0\",\n    capabilities: daytonaCapabilities,\n    environmentVariables: [\"DAYTONA_API_KEY\", \"DAYTONA_API_URL\", \"DAYTONA_TARGET\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns public or token-authenticated preview URLs according to the sandbox setting.\",\n    snapshotBehavior:\n      \"Daytona snapshot and fork operations have provider-specific lifecycle semantics and remain on raw.\",\n    runtimeLimitations: \"Some binary and streaming methods require a Node.js-compatible runtime.\",\n  },\n  {\n    id: \"vercel\",\n    displayName: \"Vercel Sandbox\",\n    officialUrl: \"https://vercel.com/docs/sandbox\",\n    packageName: \"@vercel/sandbox\",\n    packageVersion: \"2.5.0\",\n    capabilities: vercelCapabilities,\n    environmentVariables: [\n      \"VERCEL_OIDC_TOKEN\",\n      \"VERCEL_TOKEN\",\n      \"VERCEL_TEAM_ID\",\n      \"VERCEL_PROJECT_ID\",\n    ],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a public vercel.run route. Port registration is updated when expose() is called.\",\n    snapshotBehavior:\n      \"Creating a filesystem snapshot stops the session. Starting from it creates a new sandbox through raw.\",\n    runtimeLimitations:\n      \"Available runtimes are controlled by Vercel; node24 is the adapter default.\",\n  },\n  {\n    id: \"upstash\",\n    displayName: \"Upstash Box\",\n    officialUrl: \"https://upstash.com/docs/box\",\n    packageName: \"@upstash/box\",\n    packageVersion: \"0.5.3\",\n    capabilities: upstashCapabilities,\n    environmentVariables: [\"UPSTASH_BOX_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Creates a public URL by default, or a bearer-token URL whose credential stays inside request().\",\n    snapshotBehavior:\n      \"Captures persistent workspace state. Restoring creates a new Box and remains available through raw.\",\n    runtimeLimitations:\n      \"Durable Debian or Alpine boxes with Node.js, Python, Go, Ruby, or Rust runtimes.\",\n  },\n];\n\nexport function getProviderMetadata(id: ProviderName): ProviderMetadata {\n  return providers.find((provider) => provider.id === id)!;\n}\n"],"mappings":";;;;;AAqCA,MAAaA,YAAyC;CACpD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,EAAE;EACxB,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,cAAc;EACrC,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GAAC;GAAmB;GAAmB;GAAiB;EAC9E,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GACpB;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,sBAAsB;EAC7C,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACF;AAED,SAAgB,oBAAoB,IAAoC;AACtE,QAAO,UAAU,MAAM,aAAa,SAAS,OAAO,GAAG"}
+{"version":3,"file":"metadata.mjs","names":["providers: readonly ProviderMetadata[]"],"sources":["../src/metadata.ts"],"sourcesContent":["import {\n  boxCapabilities,\n  daytonaCapabilities,\n  e2bCapabilities,\n  localCapabilities,\n  railwayCapabilities,\n  upstashCapabilities,\n  vercelCapabilities,\n} from \"./providers/capabilities\";\nimport type { CapabilityMap, ProviderName } from \"./core/types\";\n\nexport interface LiveTestResult {\n  provider: ProviderName;\n  testedAt: string;\n  adapterVersion: string;\n  providerSdkVersion: string;\n  passed: number;\n  failed: number;\n  skipped: number;\n  capabilities: Partial<CapabilityMap>;\n}\n\nexport interface ProviderMetadata {\n  id: ProviderName;\n  displayName: string;\n  officialUrl: string;\n  packageName: string | null;\n  packageVersion: string;\n  capabilities: CapabilityMap;\n  environmentVariables: readonly string[];\n  technicalStatus: \"supported\" | \"experimental\";\n  providerReviewed: boolean;\n  sponsor: boolean;\n  liveTest: LiveTestResult | null;\n  portBehavior: string;\n  snapshotBehavior: string;\n  runtimeLimitations: string;\n}\n\nexport const providers: readonly ProviderMetadata[] = [\n  {\n    id: \"local\",\n    displayName: \"Local\",\n    officialUrl: \"https://rivet.dev/docs/agent-os/\",\n    packageName: \"@rivet-dev/agentos-core\",\n    packageVersion: \"0.2.7\",\n    capabilities: localCapabilities,\n    environmentVariables: [],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a private in-process URL. HTTP traffic is bridged through ExposedPort.request().\",\n    snapshotBehavior:\n      \"Exports the AgentOS virtual filesystem and recreates the VM when restoring it.\",\n    runtimeLimitations:\n      \"Powered by the beta AgentOS runtime. Requires a supported Node.js host and cannot run arbitrary native Linux binaries.\",\n  },\n  {\n    id: \"e2b\",\n    displayName: \"E2B\",\n    officialUrl: \"https://e2b.dev/docs\",\n    packageName: \"e2b\",\n    packageVersion: \"2.32.0\",\n    capabilities: e2bCapabilities,\n    environmentVariables: [\"E2B_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns an E2B host. Restricted traffic uses the native access token only inside request().\",\n    snapshotBehavior:\n      \"Creates persistent E2B snapshot templates; restore creates a new native sandbox and remains on raw.\",\n    runtimeLimitations: \"Requires Node.js 20.18.1 or newer and an E2B account.\",\n  },\n  {\n    id: \"daytona\",\n    displayName: \"Daytona\",\n    officialUrl: \"https://www.daytona.io/docs/en/sandboxes/\",\n    packageName: \"@daytona/sdk\",\n    packageVersion: \"0.196.0\",\n    capabilities: daytonaCapabilities,\n    environmentVariables: [\"DAYTONA_API_KEY\", \"DAYTONA_API_URL\", \"DAYTONA_TARGET\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns public or token-authenticated preview URLs according to the sandbox setting.\",\n    snapshotBehavior:\n      \"Daytona snapshot and fork operations have provider-specific lifecycle semantics and remain on raw.\",\n    runtimeLimitations: \"Some binary and streaming methods require a Node.js-compatible runtime.\",\n  },\n  {\n    id: \"vercel\",\n    displayName: \"Vercel Sandbox\",\n    officialUrl: \"https://vercel.com/docs/sandbox\",\n    packageName: \"@vercel/sandbox\",\n    packageVersion: \"2.5.0\",\n    capabilities: vercelCapabilities,\n    environmentVariables: [\n      \"VERCEL_OIDC_TOKEN\",\n      \"VERCEL_TOKEN\",\n      \"VERCEL_TEAM_ID\",\n      \"VERCEL_PROJECT_ID\",\n    ],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Returns a public vercel.run route. Port registration is updated when expose() is called.\",\n    snapshotBehavior:\n      \"Creating a filesystem snapshot stops the session. Starting from it creates a new sandbox through raw.\",\n    runtimeLimitations:\n      \"Available runtimes are controlled by Vercel; node24 is the adapter default.\",\n  },\n  {\n    id: \"upstash\",\n    displayName: \"Upstash Box\",\n    officialUrl: \"https://upstash.com/docs/box\",\n    packageName: \"@upstash/box\",\n    packageVersion: \"0.5.3\",\n    capabilities: upstashCapabilities,\n    environmentVariables: [\"UPSTASH_BOX_API_KEY\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Creates a public URL by default, or a bearer-token URL whose credential stays inside request().\",\n    snapshotBehavior:\n      \"Captures persistent workspace state. Restoring creates a new Box and remains available through raw.\",\n    runtimeLimitations:\n      \"Durable Debian or Alpine boxes with Node.js, Python, Go, Ruby, or Rust runtimes.\",\n  },\n  {\n    id: \"box\",\n    displayName: \"Ascii Box\",\n    officialUrl: \"https://docs.ascii.dev/box/quickstart\",\n    packageName: \"@asciidev/box-sdk\",\n    packageVersion: \"0.0.24\",\n    capabilities: boxCapabilities,\n    environmentVariables: [\"BOX_API_KEY\", \"BOX_BASE_URL\"],\n    technicalStatus: \"supported\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"Runs Box's native host command and returns a public HTTPS URL by default; protected mode can be requested explicitly.\",\n    snapshotBehavior:\n      \"Stop and resume snapshots are available through the native Box client; on-demand normalized snapshots are not exposed.\",\n    runtimeLimitations:\n      \"Foreground commands use the Box HTTP command endpoint, which has a 60-second maximum and no streaming or background-process handle.\",\n  },\n  {\n    id: \"railway\",\n    displayName: \"Railway Sandboxes\",\n    officialUrl: \"https://docs.railway.com/sandboxes\",\n    packageName: \"railway\",\n    packageVersion: \"3.5.7\",\n    capabilities: railwayCapabilities,\n    environmentVariables: [\"RAILWAY_API_TOKEN\", \"RAILWAY_ENVIRONMENT_ID\"],\n    technicalStatus: \"experimental\",\n    providerReviewed: false,\n    sponsor: false,\n    liveTest: null,\n    portBehavior:\n      \"The TypeScript SDK has no public preview URL API; use Railway CLI port forwarding outside the normalized runtime.\",\n    snapshotBehavior:\n      \"Creates and deletes named Railway checkpoints. Booting from a checkpoint creates a new sandbox and remains on raw.\",\n    runtimeLimitations:\n      \"Railway Sandboxes are in Priority Boarding and the provider SDK may introduce breaking changes between releases.\",\n  },\n];\n\nexport function getProviderMetadata(id: ProviderName): ProviderMetadata {\n  return providers.find((provider) => provider.id === id)!;\n}\n"],"mappings":";;;;;AAuCA,MAAaA,YAAyC;CACpD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,EAAE;EACxB,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,cAAc;EACrC,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GAAC;GAAmB;GAAmB;GAAiB;EAC9E,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBAAoB;EACrB;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB;GACpB;GACA;GACA;GACA;GACD;EACD,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,sBAAsB;EAC7C,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,eAAe,eAAe;EACrD,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACD;EACE,IAAI;EACJ,aAAa;EACb,aAAa;EACb,aAAa;EACb,gBAAgB;EAChB,cAAc;EACd,sBAAsB,CAAC,qBAAqB,yBAAyB;EACrE,iBAAiB;EACjB,kBAAkB;EAClB,SAAS;EACT,UAAU;EACV,cACE;EACF,kBACE;EACF,oBACE;EACH;CACF;AAED,SAAgB,oBAAoB,IAAoC;AACtE,QAAO,UAAU,MAAM,aAAa,SAAS,OAAO,GAAG"}

package/dist/{provider-_caCV8kk.d.mts → provider-DOBErkBO.d.mts}

@@ -1,4 +1,4 @@
-import { a as CommandResult, d as RunOptions, f as Sandbox, g as SandboxProcess, i as CommandInput, n as CapabilityMap, o as ExposedPort, p as SandboxDirectoryEntry, s as FileValue, u as ProviderName, v as SandboxSnapshot } from "./types-BTagTtsp.mjs";
+import { a as CommandResult, d as RunOptions, f as Sandbox, g as SandboxProcess, i as CommandInput, n as CapabilityMap, o as ExposedPort, p as SandboxDirectoryEntry, s as FileValue, u as ProviderName, v as SandboxSnapshot } from "./types-Bv6I2U1c.mjs";
 
 //#region src/core/provider.d.ts
 interface ProviderCreateOptions {
@@ -88,4 +88,4 @@ interface ManagedSandboxProvider {
 }
 //#endregion
 export { SandboxNetworkPolicy as a, ManagedSandboxSession as i, ManagedSandboxProvider as n, SandboxProvider as o, ManagedSandboxResumeOptions as r, ManagedSandboxCreateOptions as t };
-//# sourceMappingURL=provider-_caCV8kk.d.mts.map
+//# sourceMappingURL=provider-DOBErkBO.d.mts.map

package/dist/provider-utils-CfB9nvJx.mjs

@@ -0,0 +1,57 @@
+import { t as SandboxError } from "./errors-BuF9bYOQ.mjs";
+
+//#region src/internal/provider-utils.ts
+async function toUint8Array(value) {
+	if (typeof value === "string") return new TextEncoder().encode(value);
+	if (value instanceof Uint8Array) return value;
+	if (value instanceof ArrayBuffer) return new Uint8Array(value);
+	if (value instanceof Blob) return new Uint8Array(await value.arrayBuffer());
+	const response = new Response(value);
+	return new Uint8Array(await response.arrayBuffer());
+}
+function commandString(input) {
+	if (typeof input === "string") return input;
+	return [input.command, ...input.args ?? []].map(shellQuote).join(" ");
+}
+function shellQuote(value) {
+	return `'${value.replaceAll("'", `'"'"'`)}'`;
+}
+function portResult(port, url, isPublic, authenticated, request) {
+	return {
+		port,
+		url,
+		public: isPublic,
+		authenticated,
+		request,
+		toJSON: () => ({
+			port,
+			url: authenticated ? redactUrl(url) : url,
+			public: isPublic,
+			authenticated
+		})
+	};
+}
+function redactUrl(url) {
+	const parsed = new URL(url);
+	for (const key of parsed.searchParams.keys()) parsed.searchParams.set(key, "[REDACTED]");
+	return parsed.toString();
+}
+function unsupported(provider, operation) {
+	throw new SandboxError({
+		code: "unsupported",
+		provider,
+		operation,
+		message: `${provider} does not support normalized ${operation}`
+	});
+}
+function unsupportedSnapshots(provider) {
+	return {
+		create: async () => unsupported(provider, "snapshot.create"),
+		delete: async () => unsupported(provider, "snapshot.delete"),
+		restore: async () => unsupported(provider, "snapshot.restore")
+	};
+}
+
+//#endregion
+export { unsupportedSnapshots as a, unsupported as i, portResult as n, toUint8Array as r, commandString as t };
+//# sourceMappingURL=provider-utils-CfB9nvJx.mjs.map

package/dist/provider-utils-CfB9nvJx.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-utils-CfB9nvJx.mjs","names":[],"sources":["../src/internal/provider-utils.ts"],"sourcesContent":["import { SandboxError } from \"../core/errors\";\nimport type { CommandInput, ExposedPort, FileValue, SandboxSnapshot } from \"../core/types\";\n\nexport async function toUint8Array(value: FileValue): Promise<Uint8Array> {\n  if (typeof value === \"string\") return new TextEncoder().encode(value);\n  if (value instanceof Uint8Array) return value;\n  if (value instanceof ArrayBuffer) return new Uint8Array(value);\n  if (value instanceof Blob) return new Uint8Array(await value.arrayBuffer());\n  const response = new Response(value);\n  return new Uint8Array(await response.arrayBuffer());\n}\n\nexport function commandString(input: CommandInput): string {\n  if (typeof input === \"string\") return input;\n  return [input.command, ...(input.args ?? [])].map(shellQuote).join(\" \");\n}\n\nfunction shellQuote(value: string): string {\n  return `'${value.replaceAll(\"'\", `'\"'\"'`)}'`;\n}\n\nexport function portResult(\n  port: number,\n  url: string,\n  isPublic: boolean,\n  authenticated: boolean,\n  request?: (path?: string, init?: RequestInit) => Promise<Response>,\n): ExposedPort {\n  return {\n    port,\n    url,\n    public: isPublic,\n    authenticated,\n    request,\n    toJSON: () => ({\n      port,\n      url: authenticated ? redactUrl(url) : url,\n      public: isPublic,\n      authenticated,\n    }),\n  };\n}\n\nfunction redactUrl(url: string): string {\n  const parsed = new URL(url);\n  for (const key of parsed.searchParams.keys()) parsed.searchParams.set(key, \"[REDACTED]\");\n  return parsed.toString();\n}\n\nexport function unsupported(provider: string, operation: string): never {\n  throw new SandboxError({\n    code: \"unsupported\",\n    provider,\n    operation,\n    message: `${provider} does not support normalized ${operation}`,\n  });\n}\n\nexport function unsupportedSnapshots(provider: string) {\n  return {\n    create: async (): Promise<SandboxSnapshot> => unsupported(provider, \"snapshot.create\"),\n    delete: async (): Promise<void> => unsupported(provider, \"snapshot.delete\"),\n    restore: async (): Promise<void> => unsupported(provider, \"snapshot.restore\"),\n  };\n}\n"],"mappings":";;;AAGA,eAAsB,aAAa,OAAuC;AACxE,KAAI,OAAO,UAAU,SAAU,QAAO,IAAI,aAAa,CAAC,OAAO,MAAM;AACrE,KAAI,iBAAiB,WAAY,QAAO;AACxC,KAAI,iBAAiB,YAAa,QAAO,IAAI,WAAW,MAAM;AAC9D,KAAI,iBAAiB,KAAM,QAAO,IAAI,WAAW,MAAM,MAAM,aAAa,CAAC;CAC3E,MAAM,WAAW,IAAI,SAAS,MAAM;AACpC,QAAO,IAAI,WAAW,MAAM,SAAS,aAAa,CAAC;;AAGrD,SAAgB,cAAc,OAA6B;AACzD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,QAAO,CAAC,MAAM,SAAS,GAAI,MAAM,QAAQ,EAAE,CAAE,CAAC,IAAI,WAAW,CAAC,KAAK,IAAI;;AAGzE,SAAS,WAAW,OAAuB;AACzC,QAAO,IAAI,MAAM,WAAW,KAAK,QAAQ,CAAC;;AAG5C,SAAgB,WACd,MACA,KACA,UACA,eACA,SACa;AACb,QAAO;EACL;EACA;EACA,QAAQ;EACR;EACA;EACA,eAAe;GACb;GACA,KAAK,gBAAgB,UAAU,IAAI,GAAG;GACtC,QAAQ;GACR;GACD;EACF;;AAGH,SAAS,UAAU,KAAqB;CACtC,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,MAAK,MAAM,OAAO,OAAO,aAAa,MAAM,CAAE,QAAO,aAAa,IAAI,KAAK,aAAa;AACxF,QAAO,OAAO,UAAU;;AAG1B,SAAgB,YAAY,UAAkB,WAA0B;AACtE,OAAM,IAAI,aAAa;EACrB,MAAM;EACN;EACA;EACA,SAAS,GAAG,SAAS,+BAA+B;EACrD,CAAC;;AAGJ,SAAgB,qBAAqB,UAAkB;AACrD,QAAO;EACL,QAAQ,YAAsC,YAAY,UAAU,kBAAkB;EACtF,QAAQ,YAA2B,YAAY,UAAU,kBAAkB;EAC3E,SAAS,YAA2B,YAAY,UAAU,mBAAmB;EAC9E"}

package/dist/providers/agentos/index.d.mts

@@ -1,7 +1,7 @@
-import "../../types-BTagTtsp.mjs";
-import "../../provider-_caCV8kk.mjs";
-import "../../index-BMFkO6Fv.mjs";
-import "../../sandbox-BUYT-1C9.mjs";
-import { t as agentosCapabilities } from "../../capabilities-CMnszzpt.mjs";
-import { n as AgentOsSandbox, r as agentos, t as AgentOsProviderOptions } from "../../index-B1YT6OQ8.mjs";
+import "../../types-Bv6I2U1c.mjs";
+import "../../provider-DOBErkBO.mjs";
+import "../../index-Dh9xob2s.mjs";
+import "../../sandbox-DdEqoXJF.mjs";
+import { t as agentosCapabilities } from "../../capabilities-BWvOVFbH.mjs";
+import { n as AgentOsSandbox, r as agentos, t as AgentOsProviderOptions } from "../../index-CkTwqD0X.mjs";
 export { AgentOsProviderOptions, AgentOsSandbox, agentos, agentosCapabilities };

package/dist/providers/agentos/index.mjs

@@ -1,8 +1,9 @@
-import "../../errors-Ch9PHKTd.mjs";
-import "../../capabilities-COKpwoFH.mjs";
-import "../../sandbox-BwyHcB_C.mjs";
-import { t as agentosCapabilities } from "../../capabilities-CEowrzRM.mjs";
-import "../../provider-utils-DilOYLBO.mjs";
-import { t as agentos } from "../../agentos-BOFA_q-a.mjs";
+import "../../errors-BuF9bYOQ.mjs";
+import "../../capabilities-xs9kaHrK.mjs";
+import "../../sandbox-DgtY5hvt.mjs";
+import { t as agentosCapabilities } from "../../capabilities-CaSNd6J1.mjs";
+import "../../managed-provider-BsZGVQ4I.mjs";
+import "../../provider-utils-CfB9nvJx.mjs";
+import { t as agentos } from "../../agentos-CbrZW7R0.mjs";
 
 export { agentos, agentosCapabilities };

package/dist/providers/box/index.d.mts

@@ -0,0 +1,34 @@
+import "../../types-Bv6I2U1c.mjs";
+import { o as SandboxProvider } from "../../provider-DOBErkBO.mjs";
+import "../../index-Dh9xob2s.mjs";
+import "../../sandbox-DdEqoXJF.mjs";
+import { n as boxCapabilities } from "../../capabilities-BWvOVFbH.mjs";
+import { Box, BoxApi } from "@asciidev/box-sdk";
+
+//#region src/providers/box/index.d.ts
+interface BoxOptions {
+  /** Box API key. Defaults to BOX_API_KEY. */
+  apiKey?: string;
+  /** Box API base URL. Defaults to BOX_BASE_URL, then the public v1 endpoint. */
+  baseUrl?: string;
+  /** Seconds before Box automatically archives. The service default is one hour. */
+  ttlSeconds?: number | null;
+  /** Withhold account-level secrets from the Box. */
+  noEnv?: boolean;
+  /** Friendly Box name applied after provisioning. */
+  name?: string;
+  /** Return ungated hosted URLs instead of protected URLs. Defaults to true. */
+  public?: boolean;
+  /** Maximum time to wait for provisioning, in milliseconds. Defaults to 10 minutes. */
+  readyTimeout?: number;
+}
+interface AsciiBoxSandbox {
+  readonly client: BoxApi;
+  box: Box;
+  readonly readyTimeoutMs: number;
+}
+declare function box(options?: BoxOptions): SandboxProvider<AsciiBoxSandbox>;
+type BoxSandbox = AsciiBoxSandbox;
+//#endregion
+export { AsciiBoxSandbox, BoxOptions, BoxSandbox, box, boxCapabilities };
+//# sourceMappingURL=index.d.mts.map