@vendoai/apps 0.4.0

package/dist/testing/fake-box.js

@@ -0,0 +1,166 @@
+import { BOX_CONTROL_PORT } from "../box-agent.js";
+/**
+ * execution-v2 Wave 3 test substrate — a fake sandbox that models a REAL v2
+ * box faithfully: two listeners (the app's $PORT and the harness control port
+ * 8811), an injectable in-box agent, a `vendo.json` manifest, POST /fn/<name>
+ * handlers the agent installs, env re-injection, and snapshot/resume
+ * persistence. It exists so graduation, editApp, schedule ticks, and the
+ * prompt-injection floor can be exercised without live e2b — the shared
+ * single-listener fakeSandbox stays untouched.
+ */
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+const snapshots = new Map();
+let nextId = 1;
+let nextSnap = 1;
+class FakeBoxMachine {
+    state;
+    allowedDomains;
+    agent;
+    id = `box-${nextId++}`;
+    destroyed = false;
+    stopped = false;
+    /** Task results by id (control-port task store). */
+    tasks = new Map();
+    constructor(state, allowedDomains, agent) {
+        this.state = state;
+        this.allowedDomains = allowedDomains;
+        this.agent = agent;
+    }
+    appPort() {
+        const port = Number(this.state.env.PORT ?? 8080);
+        return Number.isInteger(port) && port > 0 ? port : 8080;
+    }
+    async request(req) {
+        if (this.destroyed || this.stopped)
+            throw new Error(`box ${this.id} is not running`);
+        const bodyText = req.body === undefined ? "" : typeof req.body === "string" ? req.body : decoder.decode(req.body);
+        const port = req.port ?? this.appPort();
+        const json = (status, value) => ({
+            status,
+            headers: { "content-type": "application/json" },
+            body: encoder.encode(JSON.stringify(value)),
+        });
+        if (port === BOX_CONTROL_PORT)
+            return this.control(req.method, req.path, bodyText, json);
+        if (port === this.appPort())
+            return this.app(req.method, req.path, bodyText, json);
+        throw new Error(`box ${this.id} has no listener on port ${port}`);
+    }
+    async control(method, path, bodyText, json) {
+        const route = `${method} ${path}`;
+        if (route === "GET /agent/health")
+            return json(200, { ok: true, harness: "fake-box/1", app: { running: true } });
+        if (route === "POST /agent/env") {
+            const env = JSON.parse(bodyText).env;
+            // Model the real harness (box/harness.mjs): the boundary env file is
+            // REPLACED and the app restarts with exactly the injected set — a
+            // revoked secret is gone, never merged over.
+            this.state.env = { ...env };
+            return json(200, { ok: true });
+        }
+        if (route === "POST /agent/restart-app")
+            return json(200, { ok: true });
+        if (route === "POST /agent/task") {
+            const payload = JSON.parse(bodyText);
+            const taskId = `boxtask_${this.id}_${this.tasks.size}`;
+            this.tasks.set(taskId, { status: "running" });
+            const result = await this.agent({ prompt: payload.prompt, context: payload.context, env: this.state.env, box: this.state });
+            this.tasks.set(taskId, { status: "done", result });
+            return json(202, { taskId });
+        }
+        if (method === "GET" && path.startsWith("/agent/task/")) {
+            const entry = this.tasks.get(path.slice("/agent/task/".length));
+            if (entry === undefined)
+                return json(404, { error: "unknown task" });
+            return json(200, { status: entry.status, ...(entry.result === undefined ? {} : { result: entry.result }), log: "" });
+        }
+        return json(404, { error: `unknown control route: ${route}` });
+    }
+    app(method, path, bodyText, json) {
+        if (method === "GET" && path === "/vendo.json") {
+            if (this.state.manifest.schedules === undefined && this.state.manifest.egress === undefined) {
+                return json(404, { error: "no manifest" });
+            }
+            return json(200, this.state.manifest);
+        }
+        // Wave 4 (layer 3) — agent-installed served pages win over the default
+        // ok-stub, so tests can prove a real web app is served beside /fn.
+        const page = this.state.pages.get(path);
+        if (method === "GET" && page !== undefined) {
+            return {
+                status: 200,
+                headers: { "content-type": "text/html; charset=utf-8" },
+                body: encoder.encode(page),
+            };
+        }
+        const fnMatch = /^\/fn\/([A-Za-z_][A-Za-z0-9_-]*)$/.exec(path);
+        if (method === "POST" && fnMatch?.[1] !== undefined) {
+            const handler = this.state.fns.get(fnMatch[1]);
+            if (handler === undefined)
+                return json(404, { error: { code: "not-found", message: `no fn ${fnMatch[1]}` } });
+            const args = (() => { try {
+                return JSON.parse(bodyText).args;
+            }
+            catch {
+                return undefined;
+            } })();
+            try {
+                const result = handler(args, this.state.env);
+                return json(200, { result });
+            }
+            catch (error) {
+                return json(500, { error: { code: "machine", message: error instanceof Error ? error.message : "fn failed" } });
+            }
+        }
+        return json(200, { ok: true });
+    }
+    async url(port) {
+        if (this.destroyed || this.stopped)
+            throw new Error(`box ${this.id} is not running`);
+        return `https://${port ?? this.appPort()}-${this.id}.fake-box.test`;
+    }
+    async snapshot() {
+        if (this.destroyed || this.stopped)
+            throw new Error(`box ${this.id} is not running`);
+        const ref = `fakebox:snap_${nextSnap++}`;
+        snapshots.set(ref, {
+            env: { ...this.state.env },
+            manifest: structuredClone(this.state.manifest),
+            fns: new Map(this.state.fns),
+            pages: new Map(this.state.pages),
+            ...(this.allowedDomains === undefined ? {} : { allowedDomains: [...this.allowedDomains] }),
+        });
+        return ref;
+    }
+    async stop() { this.stopped = true; }
+    async destroy() { this.destroyed = true; this.stopped = true; }
+}
+export const fakeBoxSandbox = (options = {}) => {
+    const machines = [];
+    // Default agent: a no-op that reports success but changes nothing.
+    const agent = options.agent ?? (() => ({ ok: true, summary: "noop", filesChanged: [], testsRun: 0 }));
+    const make = (state, allowedDomains) => {
+        const machine = new FakeBoxMachine(state, allowedDomains, agent);
+        machines.push(machine);
+        return machine;
+    };
+    return {
+        machines,
+        async create(spec) {
+            return make({ env: { ...spec.env }, manifest: {}, fns: new Map(), pages: new Map() }, spec.allowedDomains);
+        },
+        async resume(snapshotRef, policy) {
+            const snap = snapshots.get(snapshotRef);
+            if (snap === undefined)
+                throw new Error(`unknown fake-box snapshot: ${snapshotRef}`);
+            return make({ env: { ...snap.env }, manifest: structuredClone(snap.manifest), fns: new Map(snap.fns), pages: new Map(snap.pages) }, policy === undefined ? snap.allowedDomains : policy.allowedDomains);
+        },
+        async destroy(snapshotRef) {
+            if (!snapshotRef.startsWith("fakebox:"))
+                throw new Error(`not a fake-box ref: ${snapshotRef}`);
+            snapshots.delete(snapshotRef);
+        },
+    };
+};
+//# sourceMappingURL=fake-box.js.map

package/dist/testing/fake-box.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-box.js","sourceRoot":"","sources":["../../src/testing/fake-box.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnD;;;;;;;;GAQG;AAEH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAoClC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;AACjD,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,IAAI,QAAQ,GAAG,CAAC,CAAC;AAOjB,MAAM,cAAc;IAQP;IACA;IACQ;IATV,EAAE,GAAG,OAAO,MAAM,EAAE,EAAE,CAAC;IAChC,SAAS,GAAG,KAAK,CAAC;IAClB,OAAO,GAAG,KAAK,CAAC;IAChB,oDAAoD;IACnC,KAAK,GAAG,IAAI,GAAG,EAAkE,CAAC;IAEnG,YACW,KAAmB,EACnB,cAA6C,EACrC,KAAmB;QAF3B,UAAK,GAAL,KAAK,CAAc;QACnB,mBAAc,GAAd,cAAc,CAA+B;QACrC,UAAK,GAAL,KAAK,CAAc;IACnC,CAAC;IAEI,OAAO;QACb,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAMb;QACC,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACrF,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM;YACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACzF,IAAI,IAAI,KAAK,IAAI,CAAC,OAAO,EAAE;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,4BAA4B,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,IAA+G;QAE/G,MAAM,KAAK,GAAG,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;QAClC,IAAI,KAAK,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACjH,IAAI,KAAK,KAAK,iBAAiB,EAAE,CAAC;YAChC,MAAM,GAAG,GAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAqC,CAAC,GAAG,CAAC;YAC1E,qEAAqE;YACrE,kEAAkE;YAClE,6CAA6C;YAC7C,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,KAAK,KAAK,yBAAyB;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,IAAI,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAyC,CAAC;YAC7E,MAAM,MAAM,GAAG,WAAW,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5H,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC;YAChE,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YACrE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACvH,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,0BAA0B,KAAK,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IAEO,GAAG,CACT,MAAc,EACd,IAAY,EACZ,QAAgB,EAChB,IAA+G;QAE/G,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC/C,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC5F,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YAC7C,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QACD,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,KAAK,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3C,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;gBACvD,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;aAC3B,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC9G,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;gBAAC,OAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAwB,CAAC,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,SAAS,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzH,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAClH,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAa;QACrB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACrF,OAAO,WAAW,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,IAAI,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,gBAAgB,QAAQ,EAAE,EAAE,CAAC;QACzC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE;YACjB,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;YAC1B,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAC9C,GAAG,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAC5B,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAChC,GAAG,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;SAC3F,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI,KAAoB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,OAAO,KAAoB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;CAC/E;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAA0B,EAAE,EAAkB,EAAE;IAC7E,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,mEAAmE;IACnE,MAAM,KAAK,GAAiB,OAAO,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAEpH,MAAM,IAAI,GAAG,CAAC,KAAmB,EAAE,cAA6C,EAAkB,EAAE;QAClG,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,OAAO,IAAI,CACT,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EACxE,IAAI,CAAC,cAAc,CACpB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM;YAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;YACrF,OAAO,IAAI,CACT,EAAE,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EACtH,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CACnE,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,WAAW;YACvB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,WAAW,EAAE,CAAC,CAAC;YAC/F,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/testing/fake-sandbox-v2.d.ts

@@ -0,0 +1,59 @@
+import type { SandboxAdapter, SandboxMachine } from "../sandbox.js";
+interface FakeSnapshotV2 {
+    env: Readonly<Record<string, string>>;
+    /** The create-time egress allowlist the snapshot carries (like real refs). */
+    allowedDomains?: readonly string[];
+    template?: string;
+    state: ReadonlyMap<string, string>;
+}
+/**
+ * Execution-v2 fake machine. Its only observable box state is a key-value map
+ * mutated over HTTP (`POST /state/<key>` writes the body, `GET /state/<key>`
+ * reads it back), so lifecycle tests can prove a snapshot/resume cycle
+ * preserves what ran inside the box.
+ */
+export declare class FakeMachineV2 implements SandboxMachine {
+    readonly id: string;
+    readonly allowedDomains: readonly string[] | undefined;
+    readonly template: string | undefined;
+    private readonly saveSnapshot;
+    stopped: boolean;
+    /** True after the live-machine destroy() (distinct from a snapshot-preserving stop). */
+    destroyedSelf: boolean;
+    /** True after the PROVIDER reaped the machine out from under us (TTL, sweep). */
+    reaped: boolean;
+    readonly env: Readonly<Record<string, string>>;
+    readonly state: Map<string, string>;
+    constructor(id: string, env: Record<string, string>, allowedDomains: readonly string[] | undefined, template: string | undefined, state: ReadonlyMap<string, string>, saveSnapshot: (machine: FakeMachineV2) => string);
+    request(req: {
+        method: string;
+        path: string;
+        headers?: Record<string, string>;
+        body?: Uint8Array | string;
+    }): Promise<{
+        status: number;
+        headers: Record<string, string>;
+        body: Uint8Array;
+    }>;
+    url(port?: number): Promise<string>;
+    snapshot(): Promise<string>;
+    stop(): Promise<void>;
+    /** Live-machine destroy: gone for good; previously taken snapshot refs stay valid. */
+    destroy(): Promise<void>;
+    /** Simulate the PROVIDER killing the machine (TTL expiry, idle sweep). */
+    reap(): void;
+}
+export interface FakeSandboxV2 extends SandboxAdapter {
+    /** Every machine this adapter ever booted, in boot order. */
+    readonly machines: FakeMachineV2[];
+    /** Live provider-side snapshots (destroy removes its ref from here). */
+    readonly snapshots: Map<string, FakeSnapshotV2>;
+    /** Refs passed to destroy, in call order. */
+    readonly destroyed: string[];
+    creates: number;
+    resumes: number;
+}
+/** In-process SandboxAdapter with inspectable machines, snapshots, and destroys. */
+export declare const fakeSandboxV2: () => FakeSandboxV2;
+export {};
+//# sourceMappingURL=fake-sandbox-v2.d.ts.map

package/dist/testing/fake-sandbox-v2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-sandbox-v2.d.ts","sourceRoot":"","sources":["../../src/testing/fake-sandbox-v2.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAcpE,UAAU,cAAc;IACtB,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtC,8EAA8E;IAC9E,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;;;GAKG;AACH,qBAAa,aAAc,YAAW,cAAc;IAUhD,QAAQ,CAAC,EAAE,EAAE,MAAM;IAEnB,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS;IAErC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAd/B,OAAO,UAAS;IAChB,wFAAwF;IACxF,aAAa,UAAS;IACtB,iFAAiF;IACjF,MAAM,UAAS;IACf,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAGzB,EAAE,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClB,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC7C,QAAQ,EAAE,MAAM,GAAG,SAAS,EACrC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,EACjB,YAAY,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,MAAM;IAM7D,OAAO,CAAC,GAAG,EAAE;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC;IAoB5E,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKnC,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAI3B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAI3B,sFAAsF;IAChF,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B,0EAA0E;IAC1E,IAAI,IAAI,IAAI;CAGb;AAED,MAAM,WAAW,aAAc,SAAQ,cAAc;IACnD,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IACnC,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAChD,6CAA6C;IAC7C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,oFAAoF;AACpF,eAAO,MAAM,aAAa,QAAO,aA4DhC,CAAC"}

package/dist/testing/fake-sandbox-v2.js

@@ -0,0 +1,121 @@
+import { VendoError } from "@vendoai/core";
+const textEncoder = new TextEncoder();
+const textDecoder = new TextDecoder();
+const respond = (status, body) => ({
+    status,
+    headers: { "content-type": "text/plain; charset=utf-8" },
+    body: textEncoder.encode(body),
+});
+/**
+ * Execution-v2 fake machine. Its only observable box state is a key-value map
+ * mutated over HTTP (`POST /state/<key>` writes the body, `GET /state/<key>`
+ * reads it back), so lifecycle tests can prove a snapshot/resume cycle
+ * preserves what ran inside the box.
+ */
+export class FakeMachineV2 {
+    id;
+    allowedDomains;
+    template;
+    saveSnapshot;
+    stopped = false;
+    /** True after the live-machine destroy() (distinct from a snapshot-preserving stop). */
+    destroyedSelf = false;
+    /** True after the PROVIDER reaped the machine out from under us (TTL, sweep). */
+    reaped = false;
+    env;
+    state;
+    constructor(id, env, allowedDomains, template, state, saveSnapshot) {
+        this.id = id;
+        this.allowedDomains = allowedDomains;
+        this.template = template;
+        this.saveSnapshot = saveSnapshot;
+        this.env = Object.freeze({ ...env });
+        this.state = new Map(state);
+    }
+    async request(req) {
+        // The seam's dead-machine signal (sandbox.ts): provider state gone under a
+        // live handle throws VendoError not-found, never an app-level status.
+        if (this.reaped)
+            throw new VendoError("not-found", `fake v2 machine ${this.id} was reaped by the provider`);
+        if (this.stopped)
+            throw new Error(`fake v2 machine ${this.id} is stopped`);
+        const key = /^\/state\/([A-Za-z0-9_-]+)$/.exec(req.path)?.[1];
+        if (key !== undefined) {
+            if (req.method.toUpperCase() === "POST") {
+                this.state.set(key, typeof req.body === "string" ? req.body : textDecoder.decode(req.body ?? new Uint8Array()));
+                return respond(204, "");
+            }
+            const value = this.state.get(key);
+            return value === undefined ? respond(404, "") : respond(200, value);
+        }
+        return respond(200, "ok");
+    }
+    async url(port) {
+        const target = port ?? Number(this.env.PORT ?? 8080);
+        return `https://${target}-${this.id}.fake-v2.test`;
+    }
+    async snapshot() {
+        return this.saveSnapshot(this);
+    }
+    async stop() {
+        this.stopped = true;
+    }
+    /** Live-machine destroy: gone for good; previously taken snapshot refs stay valid. */
+    async destroy() {
+        this.stopped = true;
+        this.destroyedSelf = true;
+    }
+    /** Simulate the PROVIDER killing the machine (TTL expiry, idle sweep). */
+    reap() {
+        this.reaped = true;
+    }
+}
+/** In-process SandboxAdapter with inspectable machines, snapshots, and destroys. */
+export const fakeSandboxV2 = () => {
+    const machines = [];
+    const snapshots = new Map();
+    const destroyed = [];
+    let nextMachine = 1;
+    let nextSnapshot = 1;
+    const saveSnapshot = (machine) => {
+        const ref = `fake-v2:snap_${nextSnapshot++}`;
+        snapshots.set(ref, Object.freeze({
+            env: machine.env,
+            ...(machine.allowedDomains === undefined ? {} : { allowedDomains: Object.freeze([...machine.allowedDomains]) }),
+            ...(machine.template === undefined ? {} : { template: machine.template }),
+            state: new Map(machine.state),
+        }));
+        return ref;
+    };
+    const boot = (env, allowedDomains, template, state) => {
+        const machine = new FakeMachineV2(`fake-machine-${nextMachine++}`, env, allowedDomains === undefined ? undefined : Object.freeze([...allowedDomains]), template, state, saveSnapshot);
+        machines.push(machine);
+        return machine;
+    };
+    const adapter = {
+        machines,
+        snapshots,
+        destroyed,
+        creates: 0,
+        resumes: 0,
+        async create(spec) {
+            adapter.creates += 1;
+            return boot(spec.env, spec.allowedDomains, spec.template, new Map());
+        },
+        async resume(snapshotRef, policy) {
+            adapter.resumes += 1;
+            const snapshot = snapshots.get(snapshotRef);
+            if (snapshot === undefined)
+                throw new Error(`unknown fake v2 snapshot: ${snapshotRef}`);
+            // Lane E — a passed policy replaces the snapshot-time allowlist (seam rule).
+            const allowedDomains = policy === undefined ? snapshot.allowedDomains : policy.allowedDomains;
+            return boot({ ...snapshot.env }, allowedDomains, snapshot.template, snapshot.state);
+        },
+        async destroy(snapshotRef) {
+            destroyed.push(snapshotRef);
+            snapshots.delete(snapshotRef);
+        },
+    };
+    return adapter;
+};
+//# sourceMappingURL=fake-sandbox-v2.js.map

package/dist/testing/fake-sandbox-v2.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-sandbox-v2.js","sourceRoot":"","sources":["../../src/testing/fake-sandbox-v2.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG3C,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,OAAO,GAAG,CACd,MAAc,EACd,IAAY,EAC2D,EAAE,CAAC,CAAC;IAC3E,MAAM;IACN,OAAO,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE;IACxD,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;CAC/B,CAAC,CAAC;AAUH;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAUb;IAEA;IACA;IAEQ;IAdnB,OAAO,GAAG,KAAK,CAAC;IAChB,wFAAwF;IACxF,aAAa,GAAG,KAAK,CAAC;IACtB,iFAAiF;IACjF,MAAM,GAAG,KAAK,CAAC;IACN,GAAG,CAAmC;IACtC,KAAK,CAAsB;IAEpC,YACW,EAAU,EACnB,GAA2B,EAClB,cAA6C,EAC7C,QAA4B,EACrC,KAAkC,EACjB,YAAgD;QALxD,OAAE,GAAF,EAAE,CAAQ;QAEV,mBAAc,GAAd,cAAc,CAA+B;QAC7C,aAAQ,GAAR,QAAQ,CAAoB;QAEpB,iBAAY,GAAZ,YAAY,CAAoC;QAEjE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAKb;QACC,2EAA2E;QAC3E,sEAAsE;QACtE,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,mBAAmB,IAAI,CAAC,EAAE,6BAA6B,CAAC,CAAC;QAC5G,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,CAAC,EAAE,aAAa,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,6BAA6B,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;gBACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CACZ,GAAG,EACH,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC,CAC3F,CAAC;gBACF,OAAO,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1B,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAClC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAa;QACrB,MAAM,MAAM,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACrD,OAAO,WAAW,MAAM,IAAI,IAAI,CAAC,EAAE,eAAe,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAED,sFAAsF;IACtF,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED,0EAA0E;IAC1E,IAAI;QACF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;CACF;AAaD,oFAAoF;AACpF,MAAM,CAAC,MAAM,aAAa,GAAG,GAAkB,EAAE;IAC/C,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,YAAY,GAAG,CAAC,OAAsB,EAAU,EAAE;QACtD,MAAM,GAAG,GAAG,gBAAgB,YAAY,EAAE,EAAE,CAAC;QAC7C,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC;YAC/B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,CAAC,OAAO,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;YAC/G,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzE,KAAK,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;SAC9B,CAAC,CAAC,CAAC;QACJ,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CACX,GAA2B,EAC3B,cAA6C,EAC7C,QAA4B,EAC5B,KAAkC,EACnB,EAAE;QACjB,MAAM,OAAO,GAAG,IAAI,aAAa,CAC/B,gBAAgB,WAAW,EAAE,EAAE,EAC/B,GAAG,EACH,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,EAC7E,QAAQ,EACR,KAAK,EACL,YAAY,CACb,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAkB;QAC7B,QAAQ;QACR,SAAS;QACT,SAAS;QACT,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,KAAK,CAAC,MAAM,CAAC,IAAI;YACf,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM;YAC9B,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACrB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,QAAQ,KAAK,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,EAAE,CAAC,CAAC;YACxF,6EAA6E;YAC7E,MAAM,cAAc,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC;YAC9F,OAAO,IAAI,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,WAAW;YACvB,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAC5B,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}

package/dist/testing/fake-sandbox.d.ts

@@ -0,0 +1,94 @@
+import type { SandboxAdapter, SandboxMachine } from "../sandbox.js";
+export interface MachineRequest {
+    method: string;
+    path: string;
+    port?: number;
+    headers?: Record<string, string>;
+    body?: Uint8Array | string;
+}
+export interface MachineResponse {
+    status: number;
+    headers: Record<string, string>;
+    body: Uint8Array | string;
+}
+/** The box's boundary as the fake's in-process app handler sees it. */
+export interface MachineAppContext {
+    env: Readonly<Record<string, string>>;
+    allowedDomains: readonly string[] | undefined;
+    port: number;
+}
+export type MachineApp = (request: MachineRequest, ctx: MachineAppContext) => MachineResponse | Promise<MachineResponse>;
+export interface FakeExecResult {
+    code: number;
+    stdout: string;
+    stderr: string;
+}
+export interface FakeExecCall {
+    cmd: string;
+    opts?: {
+        cwd?: string;
+        timeoutMs?: number;
+    };
+}
+/** The v2 create spec (the seam's SandboxAdapter.create parameter, kept local
+    for the fake's internal signatures). */
+export interface FakeCreateSpec {
+    template?: string;
+    env: Record<string, string>;
+    allowedDomains?: string[];
+}
+/** Test machine with deterministic I/O and inspectable state. */
+export declare class FakeSandboxMachine implements SandboxMachine {
+    readonly id: string;
+    readonly allowedDomains: readonly string[] | undefined;
+    readonly template: string | undefined;
+    private readonly saveSnapshot;
+    readonly requests: MachineRequest[];
+    readonly commands: FakeExecCall[];
+    readonly execResults: FakeExecResult[];
+    readonly fileContents: Map<string, Uint8Array>;
+    readonly env: Record<string, string>;
+    readonly port: number;
+    /** v2 sleep flag; also true once destroyed. Writable for test scripting. */
+    stopped: boolean;
+    /** v2 gone-for-good flag. */
+    destroyed: boolean;
+    app: MachineApp | undefined;
+    constructor(id: string, env: Record<string, string>, allowedDomains: readonly string[] | undefined, template: string | undefined, files: ReadonlyMap<string, Uint8Array>, app: MachineApp | undefined, saveSnapshot: (machine: FakeSandboxMachine) => string);
+    private appContext;
+    private ensureRunning;
+    readonly files: {
+        read: (path: string) => Promise<Uint8Array>;
+        write: (path: string, bytes: Uint8Array | string) => Promise<void>;
+        list: (dir: string) => Promise<string[]>;
+    };
+    request(request: MachineRequest): Promise<{
+        status: number;
+        headers: Record<string, string>;
+        body: Uint8Array;
+    }>;
+    exec(cmd: string, opts?: {
+        cwd?: string;
+        timeoutMs?: number;
+    }): Promise<FakeExecResult>;
+    programExec(...results: FakeExecResult[]): void;
+    setApp(app: MachineApp): void;
+    snapshot(): Promise<string>;
+    screenshot(): Promise<Uint8Array>;
+    url(port?: number): Promise<string>;
+    stop(): Promise<void>;
+    destroy(): Promise<void>;
+}
+export interface FakeSandboxAdapter extends SandboxAdapter {
+    readonly machines: Map<string, FakeSandboxMachine>;
+    create(spec: FakeCreateSpec): Promise<FakeSandboxMachine>;
+    resume(snapshotRef: string, policy?: {
+        allowedDomains: string[] | undefined;
+    }): Promise<FakeSandboxMachine>;
+    setApp(app: MachineApp): void;
+}
+/** Create an in-process sandbox adapter whose requests dispatch to a machine app handler. */
+export declare const fakeSandbox: (options?: {
+    app?: MachineApp;
+}) => FakeSandboxAdapter;
+//# sourceMappingURL=fake-sandbox.d.ts.map

package/dist/testing/fake-sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-sandbox.d.ts","sourceRoot":"","sources":["../../src/testing/fake-sandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpE,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,UAAU,GAAG,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;CAC3B;AAED,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACtC,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC9C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,UAAU,GAAG,CACvB,OAAO,EAAE,cAAc,EACvB,GAAG,EAAE,iBAAiB,KACnB,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;AAEhD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7C;AAED;2CAC2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;CAC3B;AAmFD,iEAAiE;AACjE,qBAAa,kBAAmB,YAAW,cAAc;IAcrD,QAAQ,CAAC,EAAE,EAAE,MAAM;IAEnB,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS;IACtD,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS;IAGrC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAnB/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAM;IACzC,QAAQ,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAM;IACvC,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,CAAM;IAC5C,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,OAAO,UAAS;IAChB,6BAA6B;IAC7B,SAAS,UAAS;IAClB,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC;gBAGjB,EAAE,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAClB,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,EAC7C,QAAQ,EAAE,MAAM,GAAG,SAAS,EACrC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,EACtC,GAAG,EAAE,UAAU,GAAG,SAAS,EACV,YAAY,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,MAAM;IAQxE,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAKrB,QAAQ,CAAC,KAAK;qBAKO,MAAM,KAAG,OAAO,CAAC,UAAU,CAAC;sBAK3B,MAAM,SAAS,UAAU,GAAG,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;oBAIpD,MAAM,KAAG,OAAO,CAAC,MAAM,EAAE,CAAC;MAU5C;IAEI,OAAO,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC;IAehH,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,cAAc,CAAC;IAyB7F,WAAW,CAAC,GAAG,OAAO,EAAE,cAAc,EAAE,GAAG,IAAI;IAI/C,MAAM,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI;IAIvB,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC;IAK3B,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;IAKjC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKnC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAIrB,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAI/B;AAED,MAAM,WAAW,kBAAmB,SAAQ,cAAc;IACxD,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1D,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;QAAE,cAAc,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5G,MAAM,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;CAC/B;AAED,6FAA6F;AAC7F,eAAO,MAAM,WAAW,GAAI,UAAS;IAAE,GAAG,CAAC,EAAE,UAAU,CAAA;CAAO,KAAG,kBA6EhE,CAAC"}