@theokit/sdk 5.15.2 → 5.16.0

package/dist/providers.js

@@ -1,6 +1,7 @@
-export { getProviderProfile, listProviders } from './chunk-AQ23NII7.js';
-import './chunk-5L7S2VOL.js';
+export { getProviderProfile, listProviders } from './chunk-UNUGF36D.js';
+import './chunk-A3T2A2WU.js';
 import './chunk-AGACYRJ2.js';
+import './chunk-Z2UVCAYS.js';
 import './chunk-UNP4NCMZ.js';
 import './chunk-L2KC2G7H.js';
 import './chunk-5IUDICRK.js';

package/dist/sandbox/e2b-sandbox.d.cts

@@ -0,0 +1,61 @@
+/**
+ * E2BSandbox — a {@link SandboxBackend} over an E2B cloud sandbox you already created.
+ *
+ * It takes the `Sandbox` instance from the `e2b` package rather than importing it, so `e2b` is not a
+ * dependency of this package: the handle only has to match {@link E2BSandboxHandle}. What it solves:
+ *
+ * - `commands.run` throws `CommandExitError` for a non-zero exit; that becomes the real `exitCode`.
+ * - `TimeoutError` becomes `exitCode` 124 with `timedOut: true`. `SandboxNotRunningError` and
+ *   `SandboxUnreachableError` extend `TimeoutError` in e2b but mean the sandbox is gone, so they throw
+ *   `SandboxNotAvailableError` instead of reporting a slow command.
+ * - Every command gets `envs` (a Dockerfile `ENV` is not applied by E2B templates) and
+ *   `NODE_EXTRA_CA_CERTS`, because Node does not trust E2B's egress proxy.
+ *
+ * Errors are recognised by `name`, so a different copy of `e2b` still matches.
+ *
+ * @public
+ */
+import { type ExecuteResult, SandboxBackend, type SandboxConfig, type SandboxNetworkPolicy } from "./types.js";
+/** System CA bundle that includes the certificate of E2B's egress proxy. */
+export declare const E2B_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+/** The slice of an `e2b` `Sandbox` that {@link E2BSandbox} uses. */
+export interface E2BSandboxHandle {
+    commands: {
+        run(cmd: string, opts?: {
+            cwd?: string;
+            envs?: Record<string, string>;
+            timeoutMs?: number;
+        }): Promise<{
+            stdout: string;
+            stderr: string;
+            exitCode: number;
+        }>;
+    };
+    files: {
+        write(path: string, data: string | ArrayBuffer | Blob): Promise<unknown>;
+    };
+    kill(): Promise<unknown>;
+}
+/** Configuration for {@link E2BSandbox}. */
+export interface E2BSandboxConfig extends SandboxConfig {
+    /** The created e2b sandbox. */
+    sandbox: E2BSandboxHandle;
+    /** Environment for every command (e.g. the template's Dockerfile `ENV` lines). */
+    envs?: Record<string, string>;
+    /** The egress policy the sandbox was created with; exposed as `networkPolicy`. */
+    networkPolicy?: SandboxNetworkPolicy;
+}
+/** Sandbox backend that runs commands in an E2B sandbox. */
+export declare class E2BSandbox extends SandboxBackend {
+    readonly networkPolicy?: SandboxNetworkPolicy;
+    private readonly sandbox;
+    private readonly envs;
+    constructor(config: E2BSandboxConfig);
+    execute(command: string, opts?: {
+        timeoutMs?: number;
+    }): Promise<ExecuteResult>;
+    private fromError;
+    uploadFile(path: string, content: string | Buffer): Promise<void>;
+    dispose(): Promise<void>;
+    private result;
+}

package/dist/sandbox/e2b-sandbox.d.ts

@@ -0,0 +1,61 @@
+/**
+ * E2BSandbox — a {@link SandboxBackend} over an E2B cloud sandbox you already created.
+ *
+ * It takes the `Sandbox` instance from the `e2b` package rather than importing it, so `e2b` is not a
+ * dependency of this package: the handle only has to match {@link E2BSandboxHandle}. What it solves:
+ *
+ * - `commands.run` throws `CommandExitError` for a non-zero exit; that becomes the real `exitCode`.
+ * - `TimeoutError` becomes `exitCode` 124 with `timedOut: true`. `SandboxNotRunningError` and
+ *   `SandboxUnreachableError` extend `TimeoutError` in e2b but mean the sandbox is gone, so they throw
+ *   `SandboxNotAvailableError` instead of reporting a slow command.
+ * - Every command gets `envs` (a Dockerfile `ENV` is not applied by E2B templates) and
+ *   `NODE_EXTRA_CA_CERTS`, because Node does not trust E2B's egress proxy.
+ *
+ * Errors are recognised by `name`, so a different copy of `e2b` still matches.
+ *
+ * @public
+ */
+import { type ExecuteResult, SandboxBackend, type SandboxConfig, type SandboxNetworkPolicy } from "./types.js";
+/** System CA bundle that includes the certificate of E2B's egress proxy. */
+export declare const E2B_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+/** The slice of an `e2b` `Sandbox` that {@link E2BSandbox} uses. */
+export interface E2BSandboxHandle {
+    commands: {
+        run(cmd: string, opts?: {
+            cwd?: string;
+            envs?: Record<string, string>;
+            timeoutMs?: number;
+        }): Promise<{
+            stdout: string;
+            stderr: string;
+            exitCode: number;
+        }>;
+    };
+    files: {
+        write(path: string, data: string | ArrayBuffer | Blob): Promise<unknown>;
+    };
+    kill(): Promise<unknown>;
+}
+/** Configuration for {@link E2BSandbox}. */
+export interface E2BSandboxConfig extends SandboxConfig {
+    /** The created e2b sandbox. */
+    sandbox: E2BSandboxHandle;
+    /** Environment for every command (e.g. the template's Dockerfile `ENV` lines). */
+    envs?: Record<string, string>;
+    /** The egress policy the sandbox was created with; exposed as `networkPolicy`. */
+    networkPolicy?: SandboxNetworkPolicy;
+}
+/** Sandbox backend that runs commands in an E2B sandbox. */
+export declare class E2BSandbox extends SandboxBackend {
+    readonly networkPolicy?: SandboxNetworkPolicy;
+    private readonly sandbox;
+    private readonly envs;
+    constructor(config: E2BSandboxConfig);
+    execute(command: string, opts?: {
+        timeoutMs?: number;
+    }): Promise<ExecuteResult>;
+    private fromError;
+    uploadFile(path: string, content: string | Buffer): Promise<void>;
+    dispose(): Promise<void>;
+    private result;
+}

package/dist/sandbox/index.cjs

@@ -314,6 +314,59 @@ var DockerSandbox = class extends chunkX2XLSE2N_cjs.SandboxBackend {
     if (r.code !== 0) throw new Error(`uploadFile failed: ${r.stderr.trim() || "docker error"}`);
   }
 };
+var E2B_CA_BUNDLE = "/etc/ssl/certs/ca-certificates.crt";
+var E2BSandbox = class extends chunkX2XLSE2N_cjs.SandboxBackend {
+  sandbox;
+  envs;
+  constructor(config) {
+    super({ ...config, workDir: config.workDir ?? "/home/user" });
+    this.sandbox = config.sandbox;
+    this.envs = { NODE_EXTRA_CA_CERTS: E2B_CA_BUNDLE, ...config.envs };
+    if (config.networkPolicy) this.networkPolicy = config.networkPolicy;
+  }
+  async execute(command, opts) {
+    const timeoutMs = opts?.timeoutMs ?? this.config.timeoutMs ?? 3e4;
+    try {
+      const r = await this.sandbox.commands.run(command, {
+        cwd: this.config.workDir,
+        envs: this.envs,
+        timeoutMs
+      });
+      return this.result(r, r.exitCode, false);
+    } catch (e) {
+      return this.fromError(e);
+    }
+  }
+  fromError(e) {
+    const err = e ?? {};
+    if (err.name === "CommandExitError") {
+      return this.result(err, typeof err.exitCode === "number" ? err.exitCode : 1, false);
+    }
+    if (err.name === "TimeoutError") return this.result(err, 124, true);
+    if (err.name === "SandboxNotRunningError" || err.name === "SandboxUnreachableError") {
+      throw new chunkX2XLSE2N_cjs.SandboxNotAvailableError(
+        `e2b sandbox is not available: ${err.message ?? err.name}`
+      );
+    }
+    throw e;
+  }
+  async uploadFile(path3, content) {
+    const target = path3.startsWith("/") ? path.posix.normalize(path3) : path.posix.normalize(`${this.config.workDir ?? "/home/user"}/${path3}`);
+    const data = typeof content === "string" ? content : new Uint8Array(content).buffer;
+    await this.sandbox.files.write(target, data);
+  }
+  async dispose() {
+    await this.sandbox.kill().catch(() => void 0);
+  }
+  result(r, exitCode, timedOut) {
+    return {
+      stdout: this.truncateOutput(r.stdout ?? ""),
+      stderr: this.truncateOutput(r.stderr ?? ""),
+      exitCode,
+      timedOut
+    };
+  }
+};
 
 // src/sandbox/seccomp.ts
 var BPF_LD = 0;
@@ -751,6 +804,8 @@ Object.defineProperty(exports, "shellEscapePosix", {
   get: function () { return chunkX2XLSE2N_cjs.shellEscapePosix; }
 });
 exports.DockerSandbox = DockerSandbox;
+exports.E2BSandbox = E2BSandbox;
+exports.E2B_CA_BUNDLE = E2B_CA_BUNDLE;
 exports.LinuxSandbox = LinuxSandbox;
 exports.RepoProvisionError = RepoProvisionError;
 exports.allowlistedEnv = allowlistedEnv;