@sailresearch/sdk 0.2.14

package/dist/sailbox.d.ts

@@ -0,0 +1,210 @@
+import type { Client } from "./client.js";
+import type { EnableSshOptions, SshEndpoint } from "./ssh.js";
+import { Image } from "./image.js";
+import type { ImageSpec } from "./types/image.js";
+import type { ExecProcess } from "./exec-process.js";
+import type { FileStream, FileWriter } from "./file-stream.js";
+import type { IngressProtocol, Listener } from "./types/listener.js";
+import type { ExecOptions, ShellOptions, WriteOptions } from "./types/exec.js";
+import type { CreateSailboxRequest, FromCheckpointRequest, ListSailboxesQuery, SailboxCheckpoint, SailboxInfoPage, SailboxStatus, UpgradeResult } from "./types/sailbox.js";
+import type { ClientOptions } from "./types/config.js";
+import type { IngressPortInput } from "./types/sailbox.js";
+import type { App } from "./app.js";
+import type { Volume } from "./volume.js";
+/**
+ * Options for {@link Sailbox.create}: the create request plus a per-attempt
+ * timeout and an optional explicit client. `image` defaults to a Debian base.
+ */
+export interface CreateSailboxOptions extends Omit<CreateSailboxRequest, "image" | "appId" | "volumeMounts" | "ingressPorts">, ClientOptions {
+    /** The owning app, or its id. */
+    app: App | string;
+    /** Image spec, or an {@link Image} builder (built and resolved at create).
+     * Defaults to a plain Debian base. */
+    image?: ImageSpec | Image;
+    /** Guest ports to expose: a bare number is HTTP shorthand. */
+    ingressPorts?: (number | IngressPortInput)[];
+    /** Shared volumes to mount, mapping an absolute guest path to a
+     * {@link Volume} or volume id. */
+    volumes?: Record<string, Volume | string>;
+    /** Bounds each create attempt (default 600s); pass `0` for no client-side
+     * timeout. Timed-out attempts are retried, reattaching to the same box, so
+     * when the overall budget is exhausted the box may still be coming up
+     * server-side: find or terminate it by `name`. */
+    timeoutSeconds?: number;
+    /** Timeout in seconds for building a custom `Image` before create (1800). */
+    imageBuildTimeoutSeconds?: number;
+    /** Enable SSH on the new sailbox after create: trust the org SSH CA, start
+     * `sshd`, and expose guest port 22 as TCP once the CA-only daemon owns it
+     * (an explicit port-22 ingress entry contributes just its allowlist).
+     * Equivalent to calling {@link Sailbox.enableSsh} after create. */
+    ssh?: boolean;
+}
+/** Options for {@link Sailbox.fromCheckpoint}. */
+export interface FromCheckpointOptions extends FromCheckpointRequest, ClientOptions {
+}
+/** Options for {@link Sailbox.checkpoint}. */
+export interface CheckpointOptions {
+    /** Display name for the checkpoint handle. */
+    name?: string;
+    /** Retention override in whole seconds (must be positive). Set it when you
+     * keep a checkpoint to reuse as a template, so the handle does not expire
+     * while you still need it; omitted uses the server default. */
+    ttlSeconds?: number;
+}
+/** One page of {@link Sailbox} instances plus the pagination envelope. */
+export interface SailboxPage extends Omit<SailboxInfoPage, "items"> {
+    items: Sailbox[];
+}
+/** Options for {@link Sailbox.waitForListener}. */
+export interface WaitForListenerOptions {
+    /** Give up waiting after this many seconds (default 60; `Infinity` waits
+     * indefinitely). */
+    timeoutSeconds?: number;
+    /** Re-check cadence in seconds (default 1). */
+    pollIntervalSeconds?: number;
+}
+/**
+ * A sandbox (sailbox): the primary object agent harnesses work with. Create one
+ * with {@link Sailbox.create}, run commands with {@link exec}, move files with
+ * {@link writeStream}/{@link readStream}, expose ports with {@link expose}, and
+ * manage its lifecycle. The statics use a default env-configured client unless
+ * you pass one.
+ *
+ * @example
+ * ```ts
+ * import { App, Sailbox } from "@sailresearch/sdk";
+ *
+ * const app = await App.find("example-app", { mintIfMissing: true });
+ * const box = await Sailbox.create({ app, name: "worker-1" });
+ * const proc = await box.exec(["bash", "-lc", "echo hello"]);
+ * console.log(await proc.stdout.text());
+ * await box.terminate();
+ * ```
+ */
+export declare class Sailbox {
+    #private;
+    private constructor();
+    private static fromInfo;
+    private static fromHandle;
+    /** Create a new sailbox. */
+    static create(options: CreateSailboxOptions): Promise<Sailbox>;
+    /** Create a new sailbox from a checkpoint. */
+    static fromCheckpoint(options: FromCheckpointOptions): Promise<Sailbox>;
+    /** Fetch an existing sailbox by id. */
+    static get(sailboxId: string, options?: ClientOptions): Promise<Sailbox>;
+    /** List one page of sailboxes as {@link Sailbox} instances. */
+    static list(params?: ListSailboxesQuery, options?: ClientOptions): Promise<Sailbox[]>;
+    /** Like {@link list} but also returns the pagination envelope
+     * (`total`/`hasMore`) for paging through large result sets. */
+    static listPage(params?: ListSailboxesQuery, options?: ClientOptions): Promise<SailboxPage>;
+    /** The sailbox's stable identifier. */
+    get sailboxId(): string;
+    /** The sailbox name. */
+    get name(): string;
+    /** The lifecycle status as of the call that produced this handle (updated
+     * by lifecycle calls on this instance). Use {@link Sailbox.get} for a fresh
+     * snapshot. */
+    get status(): SailboxStatus;
+    /** Identifier of the owning app. */
+    get appId(): string | undefined;
+    /** Name of the owning app. */
+    get appName(): string | undefined;
+    /** Identifier of the image the sailbox was created from. */
+    get imageId(): string | undefined;
+    /** Configured memory, in MiB. */
+    get memoryMib(): number | undefined;
+    /** Configured number of vCPUs. */
+    get vcpuCount(): number | undefined;
+    /** Configured state-disk size, in GiB. */
+    get stateDiskSizeGib(): number | undefined;
+    /** Requested CPU, in vCPUs. */
+    get cpuRequestedVcpu(): number | undefined;
+    /** Current CPU usage, in vCPUs, as of the snapshot. */
+    get cpuUsedVcpu(): number | undefined;
+    /** Requested memory, in bytes. */
+    get memoryRequestedBytes(): number | undefined;
+    /** Current memory usage, in bytes, as of the snapshot. */
+    get memoryUsedBytes(): number | undefined;
+    /** Requested disk, in bytes. */
+    get diskRequestedBytes(): number | undefined;
+    /** Current disk usage, in bytes, as of the snapshot. */
+    get diskUsedBytes(): number | undefined;
+    /** CPU architecture (for example `arm64`). */
+    get architecture(): string | undefined;
+    /** In-guest agent schema version the sailbox last booted with. */
+    get guestSchemaVersion(): number | undefined;
+    /** Failure detail when the status is `failed`. */
+    get errorMessage(): string | undefined;
+    /** Checkpoint generation counter as of the snapshot. */
+    get checkpointGeneration(): number | undefined;
+    /** When the current boot started (RFC 3339). */
+    get startedAt(): Date | undefined;
+    /** When the most recent checkpoint was taken. */
+    get lastCheckpointedAt(): Date | undefined;
+    /** When the sailbox was created. */
+    get createdAt(): Date | undefined;
+    /** When the sailbox last changed. */
+    get updatedAt(): Date | undefined;
+    /** The underlying {@link Client}. */
+    get client(): Client;
+    /** Run a command and return a handle to the live process. A `string` command
+     * is run via `/bin/sh -lc`; a `string[]` is exec'd directly. `options` can set
+     * a working directory or detach the command (see {@link ExecOptions}). */
+    exec(command: string | string[], options?: ExecOptions): Promise<ExecProcess>;
+    /** Open an interactive pty session on this sailbox, bridged to the local
+     * terminal. With no `command`, runs a login shell; pass a command to run
+     * that under a pty instead (e.g. a REPL or an editor). Blocks until the
+     * remote process exits and resolves with its exit code. Requires an
+     * interactive terminal (stdin and stdout TTYs). */
+    shell(command?: string, options?: ShellOptions): Promise<number>;
+    /** Open a streaming read of a guest file. */
+    readStream(path: string): Promise<FileStream>;
+    /** Open a streaming upload to a guest file. */
+    writeStream(path: string, options?: WriteOptions): Promise<FileWriter>;
+    /** Read a guest file fully into memory (convenience over {@link readStream}). */
+    read(path: string): Promise<Buffer>;
+    /** Write bytes (a `string` is encoded as UTF-8) to a guest file, creating it
+     * and any missing parent directories (convenience over {@link writeStream};
+     * pass `createParents: false` to opt out). */
+    write(path: string, data: Buffer | Uint8Array | string, options?: WriteOptions): Promise<void>;
+    /** Expose a guest port at runtime. The returned listener carries the
+     * resolved endpoint but an `"unspecified"` route status: the response
+     * confirms configuration, not reachability — {@link waitForListener}
+     * confirms the route is live. */
+    expose(guestPort: number, protocol?: IngressProtocol, allowlist?: string[]): Promise<Listener>;
+    /** Remove a runtime ingress port. */
+    unexpose(guestPort: number): Promise<void>;
+    /** List this sailbox's listeners without waking it. */
+    listeners(): Promise<Listener[]>;
+    /** Fetch one listener by guest port without waking the box. */
+    listener(guestPort: number): Promise<Listener>;
+    /** Poll until the listener on `guestPort` is reachable end to end — route
+     * status ACTIVE and its endpoint accepts (HTTP GET / raw-TCP connect) — and
+     * return it, or throw {@link TimeoutError} after `timeoutSeconds`. The wait loop
+     * and reachability probes run in the core, shared by every SDK. */
+    waitForListener(guestPort: number, options?: WaitForListenerOptions): Promise<Listener>;
+    /** Ingress-identity headers for this sailbox, as a name→value map. */
+    ingressAuthHeaders(): Promise<Record<string, string>>;
+    /** Enable SSH on this sailbox: trust the org SSH CA, start `sshd`, and
+     * expose guest port 22 as TCP once the CA-only daemon owns it. Org members
+     * connect with a short-lived certificate (fetched by the `sail box ssh`
+     * CLI). Safe to re-run. With `wait` (the default), polls until the endpoint
+     * is reachable and returns it, throwing {@link TimeoutError} if it is not
+     * within `timeoutSeconds`; with `wait: false`, skips the probe and resolves
+     * `null`. */
+    enableSsh(options?: EnableSshOptions): Promise<SshEndpoint | null>;
+    /** Terminate (delete) this sailbox (updates {@link status}). */
+    terminate(): Promise<void>;
+    /** Pause this sailbox in memory. */
+    pause(): Promise<void>;
+    /** Sleep this sailbox to disk (wakes on traffic). */
+    sleep(): Promise<void>;
+    /** Resume this sailbox (updates {@link status}). */
+    resume(): Promise<void>;
+    /** Take a checkpoint of this sailbox. The returned handle carries
+     * `expiresAt`, when it becomes eligible for garbage collection. */
+    checkpoint(options?: CheckpointOptions): Promise<SailboxCheckpoint>;
+    /** Upgrade this sailbox's in-guest agent. */
+    upgrade(): Promise<UpgradeResult>;
+}
+//# sourceMappingURL=sailbox.d.ts.map

package/dist/sailbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sailbox.d.ts","sourceRoot":"","sources":["../src/sailbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAS1C,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAoC,MAAM,YAAY,CAAC;AACrE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/E,OAAO,KAAK,EACV,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,iBAAiB,EAGjB,eAAe,EACf,aAAa,EACb,aAAa,EACd,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;GAGG;AACH,MAAM,WAAW,oBACf,SACE,IAAI,CACF,oBAAoB,EACpB,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,CACpD,EACD,aAAa;IACf,iCAAiC;IACjC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC;IAClB;0CACsC;IACtC,KAAK,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC;IAC1B,8DAA8D;IAC9D,YAAY,CAAC,EAAE,CAAC,MAAM,GAAG,gBAAgB,CAAC,EAAE,CAAC;IAC7C;sCACkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,CAAC;IAC1C;;;sDAGkD;IAClD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC;;;uEAGmE;IACnE,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,kDAAkD;AAClD,MAAM,WAAW,qBACf,SAAQ,qBAAqB,EAAE,aAAa;CAAG;AAEjD,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;mEAE+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,0EAA0E;AAC1E,MAAM,WAAW,WAAY,SAAQ,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC;IACjE,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB;AAED,mDAAmD;AACnD,MAAM,WAAW,sBAAsB;IACrC;wBACoB;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,OAAO;;IAOlB,OAAO;IAcP,OAAO,CAAC,MAAM,CAAC,QAAQ;IAIvB,OAAO,CAAC,MAAM,CAAC,UAAU;IAIzB,4BAA4B;WACf,MAAM,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAwEpE,8CAA8C;WACjC,cAAc,CACzB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,OAAO,CAAC;IASnB,uCAAuC;WAC1B,GAAG,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,OAAO,CAAC;IAKnB,+DAA+D;WAClD,IAAI,CACf,MAAM,GAAE,kBAAuB,EAC/B,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,OAAO,EAAE,CAAC;IAIrB;mEAC+D;WAClD,QAAQ,CACnB,MAAM,GAAE,kBAAuB,EAC/B,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,WAAW,CAAC;IASvB,uCAAuC;IACvC,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,wBAAwB;IACxB,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED;;mBAEe;IACf,IAAI,MAAM,IAAI,aAAa,CAE1B;IAOD,oCAAoC;IACpC,IAAI,KAAK,IAAI,MAAM,GAAG,SAAS,CAE9B;IAED,8BAA8B;IAC9B,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,4DAA4D;IAC5D,IAAI,OAAO,IAAI,MAAM,GAAG,SAAS,CAEhC;IAED,iCAAiC;IACjC,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED,kCAAkC;IAClC,IAAI,SAAS,IAAI,MAAM,GAAG,SAAS,CAElC;IAED,0CAA0C;IAC1C,IAAI,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED,+BAA+B;IAC/B,IAAI,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAEzC;IAED,uDAAuD;IACvD,IAAI,WAAW,IAAI,MAAM,GAAG,SAAS,CAEpC;IAED,kCAAkC;IAClC,IAAI,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAE7C;IAED,0DAA0D;IAC1D,IAAI,eAAe,IAAI,MAAM,GAAG,SAAS,CAExC;IAED,gCAAgC;IAChC,IAAI,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAE3C;IAED,wDAAwD;IACxD,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,8CAA8C;IAC9C,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,kEAAkE;IAClE,IAAI,kBAAkB,IAAI,MAAM,GAAG,SAAS,CAE3C;IAED,kDAAkD;IAClD,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED,wDAAwD;IACxD,IAAI,oBAAoB,IAAI,MAAM,GAAG,SAAS,CAE7C;IAED,gDAAgD;IAChD,IAAI,SAAS,IAAI,IAAI,GAAG,SAAS,CAGhC;IAED,iDAAiD;IACjD,IAAI,kBAAkB,IAAI,IAAI,GAAG,SAAS,CAGzC;IAED,oCAAoC;IACpC,IAAI,SAAS,IAAI,IAAI,GAAG,SAAS,CAGhC;IAED,qCAAqC;IACrC,IAAI,SAAS,IAAI,IAAI,GAAG,SAAS,CAGhC;IAED,qCAAqC;IACrC,IAAI,MAAM,IAAI,MAAM,CAEnB;IAID;;8EAE0E;IACpE,IAAI,CACR,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAC1B,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,WAAW,CAAC;IAIvB;;;;uDAImD;IACnD,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC;IAIhE,6CAA6C;IAC7C,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAI7C,+CAA+C;IAC/C,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;IAItE,iFAAiF;IAC3E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIzC;;kDAE8C;IACxC,KAAK,CACT,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,EAClC,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,IAAI,CAAC;IAQhB;;;qCAGiC;IACjC,MAAM,CACJ,SAAS,EAAE,MAAM,EACjB,QAAQ,GAAE,eAAwB,EAClC,SAAS,GAAE,MAAM,EAAO,GACvB,OAAO,CAAC,QAAQ,CAAC;IASpB,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C,uDAAuD;IACvD,SAAS,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IAIhC,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI9C;;;uEAGmE;IAC7D,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,QAAQ,CAAC;IAWpB,sEAAsE;IACtE,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAIrD;;;;;;iBAMa;IACP,SAAS,CAAC,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAM5E,gEAAgE;IAC1D,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAKhC,oCAAoC;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,qDAAqD;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAK5B,oDAAoD;IAC9C,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAK7B;uEACmE;IAC7D,UAAU,CACd,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,iBAAiB,CAAC;IAM7B,6CAA6C;IACvC,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC;CAKxC"}

package/dist/sailbox.js

@@ -0,0 +1,339 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sailbox = void 0;
+const default_client_js_1 = require("./default-client.js");
+const validate_js_1 = require("./validate.js");
+const errors_js_1 = require("./errors.js");
+const image_js_1 = require("./image.js");
+/**
+ * A sandbox (sailbox): the primary object agent harnesses work with. Create one
+ * with {@link Sailbox.create}, run commands with {@link exec}, move files with
+ * {@link writeStream}/{@link readStream}, expose ports with {@link expose}, and
+ * manage its lifecycle. The statics use a default env-configured client unless
+ * you pass one.
+ *
+ * @example
+ * ```ts
+ * import { App, Sailbox } from "@sailresearch/sdk";
+ *
+ * const app = await App.find("example-app", { mintIfMissing: true });
+ * const box = await Sailbox.create({ app, name: "worker-1" });
+ * const proc = await box.exec(["bash", "-lc", "echo hello"]);
+ * console.log(await proc.stdout.text());
+ * await box.terminate();
+ * ```
+ */
+class Sailbox {
+    #client;
+    #id;
+    #name;
+    #status;
+    #snapshot;
+    constructor(client, id, name, status, snapshot) {
+        this.#client = client;
+        this.#id = id;
+        this.#name = name;
+        this.#status = status;
+        this.#snapshot = snapshot;
+    }
+    static fromInfo(client, info) {
+        return new Sailbox(client, info.sailboxId, info.name, info.status, info);
+    }
+    static fromHandle(client, handle) {
+        return new Sailbox(client, handle.sailboxId, handle.name, handle.status);
+    }
+    /** Create a new sailbox. */
+    static async create(options) {
+        const { client: explicit, timeoutSeconds, image, imageBuildTimeoutSeconds, ssh, app, ingressPorts, volumes, ...rest } = options;
+        const client = explicit ?? (0, default_client_js_1.defaultClient)();
+        const request = {
+            ...rest,
+            appId: typeof app === "string" ? app : app.id,
+            // A bare number is the HTTP shorthand for a guest port.
+            ingressPorts: ingressPorts?.map((port) => typeof port === "number"
+                ? { guestPort: port, protocol: "http" }
+                : port),
+            volumeMounts: volumes === undefined
+                ? undefined
+                : Object.entries(volumes).map(([mountPath, volume]) => ({
+                    mountPath,
+                    volumeId: typeof volume === "string" ? volume : volume.id,
+                })),
+        };
+        // SSH access is org-scoped (the box trusts the org CA and members connect
+        // with signed certificates), so there is no per-key form. From untyped JS,
+        // a pasted key string or "false" is truthy and would silently enable org
+        // access, so reject any non-boolean loudly.
+        if (ssh !== undefined && typeof ssh !== "boolean") {
+            throw new errors_js_1.InvalidArgumentError("ssh must be a boolean; SSH access is org-scoped via your org's " +
+                "certificate authority, so there is no per-key argument");
+        }
+        // Preflight all options (resources, timeout, ingress ports, volume mounts)
+        // against the shared validators before the (possibly slow) image build.
+        (0, validate_js_1.validateCreateNumbers)(request);
+        (0, validate_js_1.validateCreateTimeout)(timeoutSeconds);
+        (0, validate_js_1.validateIngressPorts)(request.ingressPorts);
+        (0, validate_js_1.validateVolumeMounts)(request.volumeMounts);
+        // A custom image (Image builder or a non-builtin plain spec) is built
+        // before create, since the backend serves the content-addressed built
+        // image. A missing image and `timeoutSeconds` default in the client. The
+        // ssh orchestration (CA preflight, port-22 handling, enable after create)
+        // lives in the core.
+        if (ssh && image !== undefined && (0, image_js_1.willBuild)(image, client)) {
+            // SSH setup is org-scoped; check the CA now so an outage fails before
+            // the image build spends its timeout (the core preflights again at
+            // create, which is cheap and idempotent).
+            await client.orgSshCaPublicKey();
+        }
+        const resolvedImage = image !== undefined
+            ? await (0, image_js_1.resolveImageForCreate)(client, image, imageBuildTimeoutSeconds ?? 1800)
+            : undefined;
+        const handle = await client.createSailbox({ ...request, image: resolvedImage, ssh }, timeoutSeconds);
+        return Sailbox.fromHandle(client, handle);
+    }
+    /** Create a new sailbox from a checkpoint. */
+    static async fromCheckpoint(options) {
+        const { client: explicit, ...params } = options;
+        const client = explicit ?? (0, default_client_js_1.defaultClient)();
+        return Sailbox.fromHandle(client, await client.createFromCheckpoint(params));
+    }
+    /** Fetch an existing sailbox by id. */
+    static async get(sailboxId, options = {}) {
+        const client = options.client ?? (0, default_client_js_1.defaultClient)();
+        return Sailbox.fromInfo(client, await client.getSailbox(sailboxId));
+    }
+    /** List one page of sailboxes as {@link Sailbox} instances. */
+    static async list(params = {}, options = {}) {
+        return (await Sailbox.listPage(params, options)).items;
+    }
+    /** Like {@link list} but also returns the pagination envelope
+     * (`total`/`hasMore`) for paging through large result sets. */
+    static async listPage(params = {}, options = {}) {
+        const client = options.client ?? (0, default_client_js_1.defaultClient)();
+        const page = await client.listSailboxes(params);
+        return {
+            ...page,
+            items: page.items.map((info) => Sailbox.fromInfo(client, info)),
+        };
+    }
+    /** The sailbox's stable identifier. */
+    get sailboxId() {
+        return this.#id;
+    }
+    /** The sailbox name. */
+    get name() {
+        return this.#name;
+    }
+    /** The lifecycle status as of the call that produced this handle (updated
+     * by lifecycle calls on this instance). Use {@link Sailbox.get} for a fresh
+     * snapshot. */
+    get status() {
+        return this.#status;
+    }
+    // The monitoring snapshot from the fetch that produced this handle. All of
+    // these are `undefined` for a handle born from {@link Sailbox.create},
+    // whose response carries only the basics; use {@link Sailbox.get} for a
+    // fresh snapshot.
+    /** Identifier of the owning app. */
+    get appId() {
+        return this.#snapshot?.appId;
+    }
+    /** Name of the owning app. */
+    get appName() {
+        return this.#snapshot?.appName;
+    }
+    /** Identifier of the image the sailbox was created from. */
+    get imageId() {
+        return this.#snapshot?.imageId;
+    }
+    /** Configured memory, in MiB. */
+    get memoryMib() {
+        return this.#snapshot?.memoryMib;
+    }
+    /** Configured number of vCPUs. */
+    get vcpuCount() {
+        return this.#snapshot?.vcpuCount;
+    }
+    /** Configured state-disk size, in GiB. */
+    get stateDiskSizeGib() {
+        return this.#snapshot?.stateDiskSizeGib;
+    }
+    /** Requested CPU, in vCPUs. */
+    get cpuRequestedVcpu() {
+        return this.#snapshot?.cpuRequestedVcpu;
+    }
+    /** Current CPU usage, in vCPUs, as of the snapshot. */
+    get cpuUsedVcpu() {
+        return this.#snapshot?.cpuUsedVcpu;
+    }
+    /** Requested memory, in bytes. */
+    get memoryRequestedBytes() {
+        return this.#snapshot?.memoryRequestedBytes;
+    }
+    /** Current memory usage, in bytes, as of the snapshot. */
+    get memoryUsedBytes() {
+        return this.#snapshot?.memoryUsedBytes;
+    }
+    /** Requested disk, in bytes. */
+    get diskRequestedBytes() {
+        return this.#snapshot?.diskRequestedBytes;
+    }
+    /** Current disk usage, in bytes, as of the snapshot. */
+    get diskUsedBytes() {
+        return this.#snapshot?.diskUsedBytes;
+    }
+    /** CPU architecture (for example `arm64`). */
+    get architecture() {
+        return this.#snapshot?.architecture;
+    }
+    /** In-guest agent schema version the sailbox last booted with. */
+    get guestSchemaVersion() {
+        return this.#snapshot?.guestSchemaVersion ?? undefined;
+    }
+    /** Failure detail when the status is `failed`. */
+    get errorMessage() {
+        return this.#snapshot?.errorMessage ?? undefined;
+    }
+    /** Checkpoint generation counter as of the snapshot. */
+    get checkpointGeneration() {
+        return this.#snapshot?.checkpointGeneration;
+    }
+    /** When the current boot started (RFC 3339). */
+    get startedAt() {
+        const raw = this.#snapshot?.startedAt;
+        return raw ? new Date(raw) : undefined;
+    }
+    /** When the most recent checkpoint was taken. */
+    get lastCheckpointedAt() {
+        const raw = this.#snapshot?.lastCheckpointedAt;
+        return raw ? new Date(raw) : undefined;
+    }
+    /** When the sailbox was created. */
+    get createdAt() {
+        const raw = this.#snapshot?.createdAt;
+        return raw ? new Date(raw) : undefined;
+    }
+    /** When the sailbox last changed. */
+    get updatedAt() {
+        const raw = this.#snapshot?.updatedAt;
+        return raw ? new Date(raw) : undefined;
+    }
+    /** The underlying {@link Client}. */
+    get client() {
+        return this.#client;
+    }
+    // --- exec and files ---
+    /** Run a command and return a handle to the live process. A `string` command
+     * is run via `/bin/sh -lc`; a `string[]` is exec'd directly. `options` can set
+     * a working directory or detach the command (see {@link ExecOptions}). */
+    async exec(command, options) {
+        return this.#client.exec(this.#id, command, options);
+    }
+    /** Open an interactive pty session on this sailbox, bridged to the local
+     * terminal. With no `command`, runs a login shell; pass a command to run
+     * that under a pty instead (e.g. a REPL or an editor). Blocks until the
+     * remote process exits and resolves with its exit code. Requires an
+     * interactive terminal (stdin and stdout TTYs). */
+    shell(command, options) {
+        return this.#client.shell(this.#id, command, options);
+    }
+    /** Open a streaming read of a guest file. */
+    readStream(path) {
+        return this.#client.readStream(this.#id, path);
+    }
+    /** Open a streaming upload to a guest file. */
+    writeStream(path, options) {
+        return this.#client.writeStream(this.#id, path, options);
+    }
+    /** Read a guest file fully into memory (convenience over {@link readStream}). */
+    async read(path) {
+        return (await this.readStream(path)).bytes();
+    }
+    /** Write bytes (a `string` is encoded as UTF-8) to a guest file, creating it
+     * and any missing parent directories (convenience over {@link writeStream};
+     * pass `createParents: false` to opt out). */
+    async write(path, data, options) {
+        const writer = await this.writeStream(path, options);
+        await writer.write(data);
+        await writer.finish();
+    }
+    // --- listeners ---
+    /** Expose a guest port at runtime. The returned listener carries the
+     * resolved endpoint but an `"unspecified"` route status: the response
+     * confirms configuration, not reachability — {@link waitForListener}
+     * confirms the route is live. */
+    expose(guestPort, protocol = "http", allowlist = []) {
+        return this.#client.exposeListener(this.#id, guestPort, protocol, allowlist);
+    }
+    /** Remove a runtime ingress port. */
+    unexpose(guestPort) {
+        return this.#client.unexposeListener(this.#id, guestPort);
+    }
+    /** List this sailbox's listeners without waking it. */
+    listeners() {
+        return this.#client.listListeners(this.#id);
+    }
+    /** Fetch one listener by guest port without waking the box. */
+    listener(guestPort) {
+        return this.#client.getListener(this.#id, guestPort);
+    }
+    /** Poll until the listener on `guestPort` is reachable end to end — route
+     * status ACTIVE and its endpoint accepts (HTTP GET / raw-TCP connect) — and
+     * return it, or throw {@link TimeoutError} after `timeoutSeconds`. The wait loop
+     * and reachability probes run in the core, shared by every SDK. */
+    async waitForListener(guestPort, options = {}) {
+        const timeoutSeconds = options.timeoutSeconds ?? 60;
+        const pollIntervalSeconds = options.pollIntervalSeconds ?? 1;
+        return this.#client.waitForListener(this.#id, guestPort, timeoutSeconds, pollIntervalSeconds);
+    }
+    /** Ingress-identity headers for this sailbox, as a name→value map. */
+    ingressAuthHeaders() {
+        return this.#client.ingressAuthHeaders(this.#id);
+    }
+    /** Enable SSH on this sailbox: trust the org SSH CA, start `sshd`, and
+     * expose guest port 22 as TCP once the CA-only daemon owns it. Org members
+     * connect with a short-lived certificate (fetched by the `sail box ssh`
+     * CLI). Safe to re-run. With `wait` (the default), polls until the endpoint
+     * is reachable and returns it, throwing {@link TimeoutError} if it is not
+     * within `timeoutSeconds`; with `wait: false`, skips the probe and resolves
+     * `null`. */
+    async enableSsh(options = {}) {
+        return this.#client.enableSsh(this.#id, options);
+    }
+    // --- lifecycle ---
+    /** Terminate (delete) this sailbox (updates {@link status}). */
+    async terminate() {
+        await this.#client.terminateSailbox(this.#id);
+        this.#status = "terminated";
+    }
+    /** Pause this sailbox in memory. */
+    async pause() {
+        await this.#client.pauseSailbox(this.#id);
+        this.#status = "paused";
+    }
+    /** Sleep this sailbox to disk (wakes on traffic). */
+    async sleep() {
+        await this.#client.sleepSailbox(this.#id);
+        this.#status = "sleeping";
+    }
+    /** Resume this sailbox (updates {@link status}). */
+    async resume() {
+        const handle = await this.#client.resumeSailbox(this.#id);
+        this.#status = handle.status;
+    }
+    /** Take a checkpoint of this sailbox. The returned handle carries
+     * `expiresAt`, when it becomes eligible for garbage collection. */
+    async checkpoint(options = {}) {
+        const checkpoint = await this.#client.checkpointSailbox(this.#id, options);
+        this.#status = checkpoint.status;
+        return checkpoint;
+    }
+    /** Upgrade this sailbox's in-guest agent. */
+    async upgrade() {
+        const outcome = await this.#client.upgradeSailbox(this.#id);
+        this.#status = outcome.status;
+        return outcome;
+    }
+}
+exports.Sailbox = Sailbox;
+//# sourceMappingURL=sailbox.js.map

package/dist/sailbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sailbox.js","sourceRoot":"","sources":["../src/sailbox.ts"],"names":[],"mappings":";;;AACA,2DAAoD;AACpD,+CAKuB;AACvB,2CAAiE;AAEjE,yCAAqE;AAsFrE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAa,OAAO;IAClB,OAAO,CAAS;IAChB,GAAG,CAAS;IACZ,KAAK,CAAS;IACd,OAAO,CAAgB;IACvB,SAAS,CAAe;IAExB,YACE,MAAc,EACd,EAAU,EACV,IAAY,EACZ,MAAqB,EACrB,QAAsB;QAEtB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAEO,MAAM,CAAC,QAAQ,CAAC,MAAc,EAAE,IAAiB;QACvD,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;IAEO,MAAM,CAAC,UAAU,CAAC,MAAc,EAAE,MAAqB;QAC7D,OAAO,IAAI,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3E,CAAC;IAED,4BAA4B;IAC5B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAA6B;QAC/C,MAAM,EACJ,MAAM,EAAE,QAAQ,EAChB,cAAc,EACd,KAAK,EACL,wBAAwB,EACxB,GAAG,EACH,GAAG,EACH,YAAY,EACZ,OAAO,EACP,GAAG,IAAI,EACR,GAAG,OAAO,CAAC;QACZ,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAA,iCAAa,GAAE,CAAC;QAC3C,MAAM,OAAO,GAAG;YACd,GAAG,IAAI;YACP,KAAK,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE;YAC7C,wDAAwD;YACxD,YAAY,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvC,OAAO,IAAI,KAAK,QAAQ;gBACtB,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAe,EAAE;gBAChD,CAAC,CAAC,IAAI,CACT;YACD,YAAY,EACV,OAAO,KAAK,SAAS;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;oBACpD,SAAS;oBACT,QAAQ,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE;iBAC1D,CAAC,CAAC;SACV,CAAC;QACF,0EAA0E;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,4CAA4C;QAC5C,IAAI,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,SAAS,EAAE,CAAC;YAClD,MAAM,IAAI,gCAAoB,CAC5B,iEAAiE;gBAC/D,wDAAwD,CAC3D,CAAC;QACJ,CAAC;QACD,2EAA2E;QAC3E,wEAAwE;QACxE,IAAA,mCAAqB,EAAC,OAAO,CAAC,CAAC;QAC/B,IAAA,mCAAqB,EAAC,cAAc,CAAC,CAAC;QACtC,IAAA,kCAAoB,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3C,IAAA,kCAAoB,EAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3C,sEAAsE;QACtE,sEAAsE;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,qBAAqB;QACrB,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS,IAAI,IAAA,oBAAS,EAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YAC3D,sEAAsE;YACtE,mEAAmE;YACnE,0CAA0C;YAC1C,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACnC,CAAC;QACD,MAAM,aAAa,GACjB,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,MAAM,IAAA,gCAAqB,EACzB,MAAM,EACN,KAAK,EACL,wBAAwB,IAAI,IAAI,CACjC;YACH,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,aAAa,CACvC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,EACzC,cAAc,CACf,CAAC;QACF,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,8CAA8C;IAC9C,MAAM,CAAC,KAAK,CAAC,cAAc,CACzB,OAA8B;QAE9B,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC;QAChD,MAAM,MAAM,GAAG,QAAQ,IAAI,IAAA,iCAAa,GAAE,CAAC;QAC3C,OAAO,OAAO,CAAC,UAAU,CACvB,MAAM,EACN,MAAM,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,MAAM,CAAC,KAAK,CAAC,GAAG,CACd,SAAiB,EACjB,UAAyB,EAAE;QAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,iCAAa,GAAE,CAAC;QACjD,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,+DAA+D;IAC/D,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,SAA6B,EAAE,EAC/B,UAAyB,EAAE;QAE3B,OAAO,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IACzD,CAAC;IAED;mEAC+D;IAC/D,MAAM,CAAC,KAAK,CAAC,QAAQ,CACnB,SAA6B,EAAE,EAC/B,UAAyB,EAAE;QAE3B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAA,iCAAa,GAAE,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAChD,OAAO;YACL,GAAG,IAAI;YACP,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,uCAAuC;IACvC,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,GAAG,CAAC;IAClB,CAAC;IAED,wBAAwB;IACxB,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;mBAEe;IACf,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,wEAAwE;IACxE,kBAAkB;IAElB,oCAAoC;IACpC,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC;IAC/B,CAAC;IAED,8BAA8B;IAC9B,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;IACjC,CAAC;IAED,4DAA4D;IAC5D,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC;IACjC,CAAC;IAED,iCAAiC;IACjC,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;IACnC,CAAC;IAED,kCAAkC;IAClC,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;IACnC,CAAC;IAED,0CAA0C;IAC1C,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAC1C,CAAC;IAED,+BAA+B;IAC/B,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAC1C,CAAC;IAED,uDAAuD;IACvD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;IACrC,CAAC;IAED,kCAAkC;IAClC,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC;IAC9C,CAAC;IAED,0DAA0D;IAC1D,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC;IACzC,CAAC;IAED,gCAAgC;IAChC,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;IAC5C,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;IACvC,CAAC;IAED,8CAA8C;IAC9C,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;IACtC,CAAC;IAED,kEAAkE;IAClE,IAAI,kBAAkB;QACpB,OAAO,IAAI,CAAC,SAAS,EAAE,kBAAkB,IAAI,SAAS,CAAC;IACzD,CAAC;IAED,kDAAkD;IAClD,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,SAAS,EAAE,YAAY,IAAI,SAAS,CAAC;IACnD,CAAC;IAED,wDAAwD;IACxD,IAAI,oBAAoB;QACtB,OAAO,IAAI,CAAC,SAAS,EAAE,oBAAoB,CAAC;IAC9C,CAAC;IAED,gDAAgD;IAChD,IAAI,SAAS;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;QACtC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,iDAAiD;IACjD,IAAI,kBAAkB;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;QAC/C,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,oCAAoC;IACpC,IAAI,SAAS;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;QACtC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,qCAAqC;IACrC,IAAI,SAAS;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC;QACtC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzC,CAAC;IAED,qCAAqC;IACrC,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,yBAAyB;IAEzB;;8EAE0E;IAC1E,KAAK,CAAC,IAAI,CACR,OAA0B,EAC1B,OAAqB;QAErB,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED;;;;uDAImD;IACnD,KAAK,CAAC,OAAgB,EAAE,OAAsB;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,6CAA6C;IAC7C,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,+CAA+C;IAC/C,WAAW,CAAC,IAAY,EAAE,OAAsB;QAC9C,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3D,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC/C,CAAC;IAED;;kDAE8C;IAC9C,KAAK,CAAC,KAAK,CACT,IAAY,EACZ,IAAkC,EAClC,OAAsB;QAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACxB,CAAC;IAED,oBAAoB;IAEpB;;;qCAGiC;IACjC,MAAM,CACJ,SAAiB,EACjB,WAA4B,MAAM,EAClC,YAAsB,EAAE;QAExB,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAChC,IAAI,CAAC,GAAG,EACR,SAAS,EACT,QAAQ,EACR,SAAS,CACV,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,uDAAuD;IACvD,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED,+DAA+D;IAC/D,QAAQ,CAAC,SAAiB;QACxB,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAED;;;uEAGmE;IACnE,KAAK,CAAC,eAAe,CACnB,SAAiB,EACjB,UAAkC,EAAE;QAEpC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;QACpD,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAC,eAAe,CACjC,IAAI,CAAC,GAAG,EACR,SAAS,EACT,cAAc,EACd,mBAAmB,CACpB,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,kBAAkB;QAChB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnD,CAAC;IAED;;;;;;iBAMa;IACb,KAAK,CAAC,SAAS,CAAC,UAA4B,EAAE;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,CAAC;IAED,oBAAoB;IAEpB,gEAAgE;IAChE,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,YAAY,CAAC;IAC9B,CAAC;IAED,oCAAoC;IACpC,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,QAAQ,CAAC;IAC1B,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,KAAK;QACT,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;IAC5B,CAAC;IAED,oDAAoD;IACpD,KAAK,CAAC,MAAM;QACV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED;uEACmE;IACnE,KAAK,CAAC,UAAU,CACd,UAA6B,EAAE;QAE/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;QACjC,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,6CAA6C;IAC7C,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAnbD,0BAmbC"}

package/dist/ssh.d.ts

@@ -0,0 +1,16 @@
+import type * as native from "./native.js";
+/** The public TCP endpoint a sailbox's SSH listener is reachable at. */
+export type SshEndpoint = native.SshEndpoint;
+/** Options for enabling SSH on a sailbox. */
+export interface EnableSshOptions {
+    /** Source CIDRs allowed to reach port 22, replacing any existing
+     * restriction. Left empty, a first enable opens the port to any source, and
+     * a re-enable leaves an existing restriction unchanged. */
+    allowlist?: string[];
+    /** Poll until the SSH route is ready (default true). */
+    wait?: boolean;
+    /** Give up waiting after this many seconds (default 60; `Infinity` waits
+     * indefinitely). */
+    timeoutSeconds?: number;
+}
+//# sourceMappingURL=ssh.d.ts.map

package/dist/ssh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.d.ts","sourceRoot":"","sources":["../src/ssh.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,MAAM,aAAa,CAAC;AAE3C,wEAAwE;AACxE,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;AAE7C,6CAA6C;AAC7C,MAAM,WAAW,gBAAgB;IAC/B;;+DAE2D;IAC3D,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,wDAAwD;IACxD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;wBACoB;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB"}

package/dist/ssh.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=ssh.js.map

package/dist/ssh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssh.js","sourceRoot":"","sources":["../src/ssh.ts"],"names":[],"mappings":""}

package/dist/types/config.d.ts

@@ -0,0 +1,21 @@
+/** Client configuration types, generated from the native core. */
+import type * as native from "../native.js";
+/** Deployment target for endpoint defaults. */
+export type SailMode = "prod" | "dev" | "staging" | "local" | (string & {});
+/** Explicit client configuration (an alternative to environment resolution). */
+export interface ClientConfig extends Omit<native.ClientConfig, "mode"> {
+    /** Named environment selecting endpoint defaults. */
+    mode?: SailMode;
+}
+/** How a listener's URL is addressed under `ingressBase`. */
+export type IngressScheme = "path" | "subdomain";
+/** The config resolved from the environment and `~/.sail`. */
+export interface ResolvedConfig extends Omit<native.ResolvedConfig, "ingressScheme"> {
+    ingressScheme: IngressScheme;
+}
+/** Options for statics that select which {@link Client} to use. */
+export interface ClientOptions {
+    /** Use a specific client instead of the default (env) one. */
+    client?: import("../client.js").Client;
+}
+//# sourceMappingURL=config.d.ts.map

package/dist/types/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAElE,OAAO,KAAK,KAAK,MAAM,MAAM,cAAc,CAAC;AAE5C,+CAA+C;AAC/C,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAE5E,gFAAgF;AAChF,MAAM,WAAW,YAAa,SAAQ,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC;IACrE,qDAAqD;IACrD,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,WAAW,CAAC;AAEjD,8DAA8D;AAC9D,MAAM,WAAW,cAAe,SAAQ,IAAI,CAC1C,MAAM,CAAC,cAAc,EACrB,eAAe,CAChB;IACC,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,8DAA8D;IAC9D,MAAM,CAAC,EAAE,OAAO,cAAc,EAAE,MAAM,CAAC;CACxC"}

package/dist/types/config.js

@@ -0,0 +1,4 @@
+"use strict";
+/** Client configuration types, generated from the native core. */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=config.js.map

package/dist/types/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/types/config.ts"],"names":[],"mappings":";AAAA,kEAAkE"}