@tangle-network/sandbox 0.9.4-develop.20260629071229.145161 → 0.9.4-develop.20260701122931.9698e96

package/README.md

@@ -50,6 +50,34 @@ If sandbox creation hangs or times out, do not generate fallback code that
 pretends to have run in a sandbox. Surface the failure, keep the `sandboxId` or
 request id, and retry with the same idempotency key when available.
 
+### Temporary GPU for evals
+
+Keep the base sandbox cheap and attach a GPU only around the command that needs it.
+Omit `provider` to let the platform choose the cheapest configured GPU cloud.
+Every GPU lease needs a hard spend cap and lifetime.
+
+```typescript
+const lease = await box.gpu.attach({
+  accelerator: { kind: "nvidia-3090", count: 1, memoryMB: 24_000 },
+  maxSpendUsd: 1,
+  maxLifetimeSeconds: 900,
+  idleTimeoutSeconds: 120,
+});
+
+try {
+  const result = await box.gpu.exec(lease.id, {
+    command: "python eval.py",
+    timeoutMs: 15 * 60 * 1000,
+  });
+  console.log(result.result.stdout);
+} finally {
+  await box.gpu.detach(lease.id);
+}
+```
+
+The detached lease includes `billing.seconds`, `billing.customerCostUsd`, and provider cost basis fields once billing is finalized.
+See `examples/gpu-eval-lease.ts` for the full create, run, detach, and sandbox cleanup flow.
+
 ## Installation
 
 ```bash

package/dist/agent/index.d.ts

@@ -1,5 +1,5 @@
-import { G as CodeExecutionOptions, K as CodeExecutionResult, Y as CodeResultPart, n as SandboxInstance, q as CodeLanguage } from "../sandbox-DcOyvnIy.js";
-import { i as SandboxClient } from "../client-DUY6Pdwf.js";
+import { G as CodeExecutionResult, J as CodeResultPart, K as CodeLanguage, W as CodeExecutionOptions, n as SandboxInstance } from "../sandbox-CglV4-cN.js";
+import { i as SandboxClient } from "../client-CgYipCL0.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-BHEh7X6F.js → client-9lYm4XHo.js}

@@ -1,4 +1,4 @@
-import { f as encodePromptForWire, l as exportTraceBundle, m as parseSSEStream, s as normalizeConnection, t as SandboxInstance } from "./sandbox-BTBbZupV.js";
+import { f as encodePromptForWire, l as exportTraceBundle, m as parseSSEStream, s as normalizeConnection, t as SandboxInstance } from "./sandbox-CDKpHv6-.js";
 import { d as ValidationError, f as parseErrorResponse, i as NotFoundError, r as NetworkError, t as AuthError, u as TimeoutError } from "./errors-DZsfJUuc.js";
 //#region src/resources.ts
 /**
@@ -140,6 +140,7 @@ function mergeCreateOptions(defaults, machine) {
 		}
 	} : void 0;
 	const driver = machine.driver ?? defaults?.driver;
+	const gpuLease = mergeGpuLeaseOptions(defaults?.gpuLease, machine.gpuLease);
 	return {
 		...defaults,
 		...rest,
@@ -152,7 +153,26 @@ function mergeCreateOptions(defaults, machine) {
 			...machine.env
 		},
 		backend,
-		driver
+		driver,
+		gpuLease
+	};
+}
+function mergeGpuLeaseOptions(defaults, machine) {
+	if (!defaults && !machine) return void 0;
+	const maxSpendUsd = machine?.maxSpendUsd ?? defaults?.maxSpendUsd;
+	const maxLifetimeSeconds = machine?.maxLifetimeSeconds ?? defaults?.maxLifetimeSeconds;
+	if (maxSpendUsd === void 0 || maxLifetimeSeconds === void 0) return;
+	const env = defaults?.env || machine?.env ? {
+		...defaults?.env,
+		...machine?.env
+	} : void 0;
+	return {
+		...machine?.provider ?? defaults?.provider ? { provider: machine?.provider ?? defaults?.provider } : {},
+		...machine?.image ?? defaults?.image ? { image: machine?.image ?? defaults?.image } : {},
+		...env ? { env } : {},
+		maxSpendUsd,
+		maxLifetimeSeconds,
+		...machine?.idleTimeoutSeconds ?? defaults?.idleTimeoutSeconds ? { idleTimeoutSeconds: machine?.idleTimeoutSeconds ?? defaults?.idleTimeoutSeconds } : {}
 	};
 }
 function assertPolicy(machines, defaults, policy) {
@@ -165,17 +185,21 @@ function assertPolicy(machines, defaults, policy) {
 	let totalMemoryMb = 0;
 	let totalStorageMb = 0;
 	let totalAccelerators = 0;
+	let totalGpuLeaseMaxSpendUsd = 0;
 	for (const machine of machines) {
-		const resources = mergeCreateOptions(defaults, machine).resources;
+		const options = mergeCreateOptions(defaults, machine);
+		const resources = options.resources;
 		totalCpu += resources?.cpuCores ?? 0;
 		totalMemoryMb += resources?.memoryMB ?? 0;
 		totalStorageMb += resources?.diskGB ? resources.diskGB * 1024 : 0;
 		totalAccelerators += resources?.accelerator?.count ?? (resources?.accelerator ? 1 : 0);
+		if (options.gpuLease) totalGpuLeaseMaxSpendUsd += options.gpuLease.maxSpendUsd;
 	}
 	if (policy?.maxTotalCpu !== void 0 && totalCpu > policy.maxTotalCpu) throw new ValidationError(`Fleet create requested ${totalCpu} CPU cores but policy.maxTotalCpu is ${policy.maxTotalCpu}`, { "policy.maxTotalCpu": "exceeded" });
 	if (policy?.maxTotalMemoryMb !== void 0 && totalMemoryMb > policy.maxTotalMemoryMb) throw new ValidationError(`Fleet create requested ${totalMemoryMb} MB RAM but policy.maxTotalMemoryMb is ${policy.maxTotalMemoryMb}`, { "policy.maxTotalMemoryMb": "exceeded" });
 	if (policy?.maxTotalStorageMb !== void 0 && totalStorageMb > policy.maxTotalStorageMb) throw new ValidationError(`Fleet create requested ${totalStorageMb} MB storage but policy.maxTotalStorageMb is ${policy.maxTotalStorageMb}`, { "policy.maxTotalStorageMb": "exceeded" });
 	if (policy?.maxTotalAccelerators !== void 0 && totalAccelerators > policy.maxTotalAccelerators) throw new ValidationError(`Fleet create requested ${totalAccelerators} accelerator devices but policy.maxTotalAccelerators is ${policy.maxTotalAccelerators}`, { "policy.maxTotalAccelerators": "exceeded" });
+	if (policy?.maxSpendUsd !== void 0 && totalGpuLeaseMaxSpendUsd > policy.maxSpendUsd) throw new ValidationError(`Fleet GPU lease max spend $${totalGpuLeaseMaxSpendUsd} exceeds policy.maxSpendUsd $${policy.maxSpendUsd}`, { "policy.maxSpendUsd": "exceeded" });
 	const maxLifetimeSeconds = Math.max(...machines.map((machine) => mergeCreateOptions(defaults, machine).maxLifetimeSeconds ?? DEFAULT_MACHINE_LIFETIME_SECONDS));
 	if (policy?.maxLifetimeSeconds !== void 0 && maxLifetimeSeconds > policy.maxLifetimeSeconds) throw new ValidationError(`Fleet create requested ${maxLifetimeSeconds}s max lifetime but policy.maxLifetimeSeconds is ${policy.maxLifetimeSeconds}`, { "policy.maxLifetimeSeconds": "exceeded" });
 	for (const machine of machines) {
@@ -184,14 +208,20 @@ function assertPolicy(machines, defaults, policy) {
 	}
 }
 function assertMachineDescriptorPolicy(machineId, options, policy) {
-	if (!policy) return;
 	const driverType = options.driver?.type;
-	if (policy.allowedDrivers && driverType && !policy.allowedDrivers.includes(driverType)) throw new ValidationError(`Fleet machine '${machineId}' requested driver '${driverType}' outside policy.allowedDrivers`, { "policy.allowedDrivers": "exceeded" });
+	if (policy?.allowedDrivers && driverType && !policy.allowedDrivers.includes(driverType)) throw new ValidationError(`Fleet machine '${machineId}' requested driver '${driverType}' outside policy.allowedDrivers`, { "policy.allowedDrivers": "exceeded" });
 	const image = options.environment ?? options.image;
-	if (policy.allowedImages && image && !policy.allowedImages.includes(image)) throw new ValidationError(`Fleet machine '${machineId}' requested image '${image}' outside policy.allowedImages`, { "policy.allowedImages": "exceeded" });
+	if (policy?.allowedImages && image && !policy.allowedImages.includes(image)) throw new ValidationError(`Fleet machine '${machineId}' requested image '${image}' outside policy.allowedImages`, { "policy.allowedImages": "exceeded" });
 	const templateId = options.templateId ?? options.publicTemplateId;
-	if (policy.allowedTemplateIds && templateId && !policy.allowedTemplateIds.includes(templateId)) throw new ValidationError(`Fleet machine '${machineId}' requested template '${templateId}' outside policy.allowedTemplateIds`, { "policy.allowedTemplateIds": "exceeded" });
-	if (policy.allowAccelerators === false && (options.resources?.accelerator?.count ?? (options.resources?.accelerator ? 1 : 0)) > 0) throw new ValidationError(`Fleet machine '${machineId}' requested accelerators but policy.allowAccelerators is false`, { "policy.allowAccelerators": "exceeded" });
+	if (policy?.allowedTemplateIds && templateId && !policy.allowedTemplateIds.includes(templateId)) throw new ValidationError(`Fleet machine '${machineId}' requested template '${templateId}' outside policy.allowedTemplateIds`, { "policy.allowedTemplateIds": "exceeded" });
+	if (policy?.allowAccelerators === false && (options.resources?.accelerator?.count ?? (options.resources?.accelerator ? 1 : 0)) > 0) throw new ValidationError(`Fleet machine '${machineId}' requested accelerators but policy.allowAccelerators is false`, { "policy.allowAccelerators": "exceeded" });
+	const acceleratorCount = options.resources?.accelerator?.count ?? (options.resources?.accelerator ? 1 : 0);
+	if (acceleratorCount > 0 && !options.gpuLease) throw new ValidationError(`Fleet machine '${machineId}' requested accelerators but gpuLease is missing`, { gpuLease: "required" });
+	if (acceleratorCount === 0 && options.gpuLease) throw new ValidationError(`Fleet machine '${machineId}' set gpuLease without resources.accelerator`, { gpuLease: "unexpected" });
+	if (options.gpuLease) {
+		if (!Number.isFinite(options.gpuLease.maxSpendUsd) || options.gpuLease.maxSpendUsd <= 0) throw new ValidationError(`Fleet machine '${machineId}' gpuLease.maxSpendUsd must be positive`, { "gpuLease.maxSpendUsd": "invalid" });
+		if (!Number.isInteger(options.gpuLease.maxLifetimeSeconds) || options.gpuLease.maxLifetimeSeconds <= 0) throw new ValidationError(`Fleet machine '${machineId}' gpuLease.maxLifetimeSeconds must be a positive integer`, { "gpuLease.maxLifetimeSeconds": "invalid" });
+	}
 }
 function calculateResourceTotals(machines, defaults) {
 	let totalCpu = 0;
@@ -933,6 +963,7 @@ const DEFAULT_TIMEOUT_MS = 3e4;
 * safe server-side, but polling is cheaper and avoids duplicate work).
 */
 const DEFAULT_CREATE_TIMEOUT_MS = 12e4;
+const DEFAULT_GPU_CREATE_TIMEOUT_MS = 900 * 1e3;
 /**
 * Extra grace the SDK's client-side batch deadline gets on top of
 * the server-side `timeoutMs`. The server's clock starts when the
@@ -1194,7 +1225,7 @@ var SandboxClient = class {
 	* ```
 	*/
 	async create(options, requestOptions) {
-		const timeoutMs = requestOptions?.timeoutMs ?? DEFAULT_CREATE_TIMEOUT_MS;
+		const timeoutMs = requestOptions?.timeoutMs ?? (options?.gpuLease ? DEFAULT_GPU_CREATE_TIMEOUT_MS : DEFAULT_CREATE_TIMEOUT_MS);
 		const idempotencyKey = options?.idempotencyKey ?? generateIdempotencyKey();
 		const deadline = Date.now() + timeoutMs;
 		const git = options?.git ? {
@@ -1233,6 +1264,7 @@ var SandboxClient = class {
 					permissions: options?.permissions,
 					env: options?.env,
 					resources,
+					gpuLease: options?.gpuLease,
 					sshEnabled: options?.sshEnabled,
 					sshPublicKeys: options?.sshPublicKeys ?? (options?.sshPublicKey ? [options.sshPublicKey] : void 0),
 					sshKeyIds: options?.sshKeyIds,
@@ -1240,6 +1272,7 @@ var SandboxClient = class {
 					maxLifetimeSeconds: options?.maxLifetimeSeconds,
 					idleTimeoutSeconds: options?.idleTimeoutSeconds,
 					storage: options?.storage,
+					ephemeral: options?.ephemeral,
 					fromSnapshot: options?.fromSnapshot,
 					fromSandboxId: options?.fromSandboxId,
 					templateId: options?.templateId,
@@ -1373,6 +1406,9 @@ var SandboxClient = class {
 		const data = await response.json();
 		return {
 			computeMinutes: data.computeMinutes ?? 0,
+			gpuSeconds: data.gpuSeconds ?? 0,
+			gpuCostUsd: data.gpuCostUsd ?? 0,
+			gpuProviderCostUsd: data.gpuProviderCostUsd ?? 0,
 			activeSandboxes: data.activeSandboxes ?? 0,
 			totalSandboxes: data.totalSandboxes ?? 0,
 			periodStart: new Date(data.periodStart),
@@ -1639,7 +1675,8 @@ var SandboxClient = class {
 			startedAt: data.startedAt ? new Date(data.startedAt) : void 0,
 			lastActivityAt: data.lastActivityAt ? new Date(data.lastActivityAt) : void 0,
 			expiresAt: data.expiresAt ? new Date(data.expiresAt) : void 0,
-			error: data.error
+			error: data.error,
+			gpuLease: data.gpuLease
 		};
 	}
 	_tokenRefreshHandlers = /* @__PURE__ */ new Set();

package/dist/{client-DUY6Pdwf.d.ts → client-CgYipCL0.d.ts}

@@ -1,4 +1,4 @@
-import { $ as CreateSandboxFleetOptions, $n as SandboxFleetTraceBundle, A as AttachSandboxFleetMachineOptions, B as BatchTask, Bn as SandboxFleetDriverCapability, Cn as PublishPublicTemplateVersionOptions, Ct as FleetDispatchStreamOptions, Dn as ReconcileSandboxFleetsResult, Dt as FleetPromptDispatchOptions, En as ReconcileSandboxFleetsOptions, Et as FleetMachineId, Fn as SandboxFleetArtifact, Gr as TokenRefreshHandler, Gt as IntelligenceReportWindow, Hn as SandboxFleetInfo, Ht as IntelligenceReportBudget, In as SandboxFleetArtifactSpec, Jn as SandboxFleetManifest, Jt as ListSandboxFleetOptions, Kn as SandboxFleetMachineRecord, L as BatchEvent, Ln as SandboxFleetCostEstimate, Lr as SubscriptionInfo, Nn as SandboxEnvironment, Nr as SshKeysManager, Ot as FleetPromptDispatchResult, Q as CreateRequestOptions, Qn as SandboxFleetToken, R as BatchOptions, Sn as PublishPublicTemplateOptions, St as FleetDispatchResultBufferOptions, Tn as ReapExpiredSandboxFleetsResult, Tt as FleetExecDispatchResult, Ut as IntelligenceReportCompareTo, Vt as IntelligenceReport, Xn as SandboxFleetOperationsSummary, Yt as ListSandboxOptions, Z as CreateIntelligenceReportOptions, Zr as UsageInfo, _t as ExecResult, a as TraceExportSink, ar as SandboxFleetWorkspaceReconcileResult, bn as PublicTemplateInfo, bt as FleetDispatchCancelResult, cr as SandboxInfo, et as CreateSandboxFleetTokenOptions, gt as ExecOptions, hn as PromptResult, i as TraceExportResult, jn as SandboxClientConfig, mn as PromptOptions, n as SandboxInstance, nr as SandboxFleetTraceOptions, nt as CreateSandboxOptions, or as SandboxFleetWorkspaceRestoreResult, pn as PromptInputPart, rr as SandboxFleetUsage, sr as SandboxFleetWorkspaceSnapshotResult, t as HttpClient, tt as CreateSandboxFleetWithCoordinatorOptions, wn as ReapExpiredSandboxFleetsOptions, wr as SecretsManager, wt as FleetExecDispatchOptions, xn as PublicTemplateVersionInfo, xt as FleetDispatchResultBuffer, z as BatchResult, zn as SandboxFleetDispatchResponse } from "./sandbox-DcOyvnIy.js";
+import { $ as CreateSandboxFleetOptions, $n as SandboxFleetMachineRecord, An as PublishPublicTemplateVersionOptions, B as BatchResult, Bn as SandboxEnvironment, Br as SshKeysManager, Ct as FleetDispatchStreamOptions, Dn as PublicTemplateInfo, Dt as FleetPromptDispatchOptions, Et as FleetMachineId, Hn as SandboxFleetArtifact, Jt as IntelligenceReport, Kn as SandboxFleetDispatchResponse, Mn as ReapExpiredSandboxFleetsResult, Nn as ReconcileSandboxFleetsOptions, On as PublicTemplateVersionInfo, Ot as FleetPromptDispatchResult, Pn as ReconcileSandboxFleetsResult, Q as CreateRequestOptions, Qr as TokenRefreshHandler, Qt as IntelligenceReportWindow, R as BatchEvent, Rn as SandboxClientConfig, Sn as PromptResult, St as FleetDispatchResultBufferOptions, Tt as FleetExecDispatchResult, Un as SandboxFleetArtifactSpec, V as BatchTask, Wn as SandboxFleetCostEstimate, Wr as SubscriptionInfo, Xt as IntelligenceReportCompareTo, Yn as SandboxFleetInfo, Yt as IntelligenceReportBudget, Z as CreateIntelligenceReportOptions, _t as ExecResult, a as TraceExportSink, ar as SandboxFleetToken, bn as PromptInputPart, bt as FleetDispatchCancelResult, et as CreateSandboxFleetTokenOptions, fr as SandboxFleetWorkspaceReconcileResult, gt as ExecOptions, hr as SandboxInfo, i as TraceExportResult, ii as UsageInfo, j as AttachSandboxFleetMachineOptions, jn as ReapExpiredSandboxFleetsOptions, jr as SecretsManager, kn as PublishPublicTemplateOptions, lr as SandboxFleetTraceOptions, mr as SandboxFleetWorkspaceSnapshotResult, n as SandboxInstance, nn as ListSandboxOptions, nt as CreateSandboxOptions, or as SandboxFleetTraceBundle, pr as SandboxFleetWorkspaceRestoreResult, qn as SandboxFleetDriverCapability, rr as SandboxFleetOperationsSummary, t as HttpClient, tn as ListSandboxFleetOptions, tr as SandboxFleetManifest, tt as CreateSandboxFleetWithCoordinatorOptions, ur as SandboxFleetUsage, wt as FleetExecDispatchOptions, xn as PromptOptions, xt as FleetDispatchResultBuffer, z as BatchOptions } from "./sandbox-CglV4-cN.js";
 
 //#region src/lib/sse-parser.d.ts
 /**

package/dist/core.d.ts

@@ -1,4 +1,4 @@
-import { $t as NetworkConfig, _t as ExecResult, an as PreviewLinkManager, cr as SandboxInfo, gt as ExecOptions, in as PreviewLinkInfo, jn as SandboxClientConfig, n as SandboxInstance, nt as CreateSandboxOptions, pr as SandboxStatus } from "./sandbox-DcOyvnIy.js";
-import { i as SandboxClient } from "./client-DUY6Pdwf.js";
+import { Rn as SandboxClientConfig, _t as ExecResult, br as SandboxStatus, dn as PreviewLinkInfo, fn as PreviewLinkManager, gt as ExecOptions, hr as SandboxInfo, n as SandboxInstance, nt as CreateSandboxOptions, on as NetworkConfig } from "./sandbox-CglV4-cN.js";
+import { i as SandboxClient } from "./client-CgYipCL0.js";
 import { a as PartialFailureError, c as SandboxErrorJson, d as StateError, f as TimeoutError, i as NotFoundError, l as SandboxFailureDetail, n as CapabilityError, o as QuotaError, p as ValidationError, r as NetworkError, s as SandboxError, t as AuthError, u as ServerError } from "./errors-1Se5ATyZ.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, QuotaError, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { t as SandboxInstance } from "./sandbox-BTBbZupV.js";
+import { t as SandboxInstance } from "./sandbox-CDKpHv6-.js";
 import { a as PartialFailureError, c as ServerError, d as ValidationError, i as NotFoundError, l as StateError, n as CapabilityError, o as QuotaError, r as NetworkError, s as SandboxError, t as AuthError, u as TimeoutError } from "./errors-DZsfJUuc.js";
-import { n as SandboxClient } from "./client-BHEh7X6F.js";
+import { n as SandboxClient } from "./client-9lYm4XHo.js";
 export { AuthError, CapabilityError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxClient as Sandbox, SandboxClient, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError };

package/dist/{index-CAay0NFR.d.ts → index-ugDiHZbM.d.ts}

@@ -1,4 +1,4 @@
-import { n as SandboxInstance, nt as CreateSandboxOptions, t as HttpClient } from "./sandbox-DcOyvnIy.js";
+import { n as SandboxInstance, nt as CreateSandboxOptions, t as HttpClient } from "./sandbox-CglV4-cN.js";
 
 //#region src/tangle/abi.d.ts
 /**