@vendoai/vendo 0.4.4 → 0.4.5

package/dist/cli/doctor-codes.d.ts

@@ -32,6 +32,7 @@ export declare const DOCTOR_ERROR_CODES: {
     readonly "E-LIVE-004": "no execution venue is configured";
     readonly "E-LIVE-005": "the host /status does not report an execution venue (version skew)";
     readonly "E-LIVE-006": "the app's root page returns a server error while the wire answers";
+    readonly "E-LIVE-007": "the selected e2b execution venue is unusable (E2B_API_KEY or the e2b package is missing)";
     readonly "E-AUTH-001": "present credentials did not reach the host API";
     readonly "E-AUTH-002": "the present credential probe is unreachable";
     readonly "E-AUTH-003": "the present credential probe cannot run while the dev server is down";

package/dist/cli/doctor-codes.js

@@ -33,6 +33,7 @@ export const DOCTOR_ERROR_CODES = {
     "E-LIVE-004": "no execution venue is configured",
     "E-LIVE-005": "the host /status does not report an execution venue (version skew)",
     "E-LIVE-006": "the app's root page returns a server error while the wire answers",
+    "E-LIVE-007": "the selected e2b execution venue is unusable (E2B_API_KEY or the e2b package is missing)",
     "E-AUTH-001": "present credentials did not reach the host API",
     "E-AUTH-002": "the present credential probe is unreachable",
     "E-AUTH-003": "the present credential probe cannot run while the dev server is down",

package/dist/cli/doctor.d.ts

@@ -34,6 +34,7 @@ export interface DoctorOptions {
         ok: boolean;
         stop: () => void;
     }>;
+    e2bResolvable?: (root: string) => boolean;
 }
 /** Doctor runs standalone, so unlike the dev server it gets no framework
  *  dotenv loading — without this, `VENDO_API_KEY` sitting in `.env.local`

package/dist/cli/doctor.js

@@ -1,4 +1,5 @@
 import { readFile } from "node:fs/promises";
+import { createRequire } from "node:module";
 import { join, resolve } from "node:path";
 import { stdin, stdout } from "node:process";
 import { cloudDoctor, liveModelTurn, startDevServerForProbe, } from "./doctor-live.js";
@@ -10,6 +11,20 @@ import { detectFramework, detectVendoWiring } from "./framework.js";
 import { walk } from "./theme/walk.js";
 import { remoteUrls, sameUrl, validateRegistryServer } from "./mcp/registry.js";
 import { askYesNo, CLI_VERSION, consoleOutput, exists, normalizeDotEnvValue, readOptional, toolingTelemetry } from "./shared.js";
+/** Whether the optional `e2b` SDK resolves from the target project — the same
+ *  node_modules walk the running wire's dynamic `import("e2b")` performs, so
+ *  doctor certifies the venue against the resolution that will actually be
+ *  asked to load it (0.4.4 defect C: /status said e2b on a host without the
+ *  SDK, and the first build died in an unusable venue). */
+function e2bResolvableFrom(root) {
+    try {
+        createRequire(join(root, "__vendo-doctor-probe__.js")).resolve("e2b");
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
 async function hasDependency(root) {
     try {
         const manifest = JSON.parse(await readFile(join(root, "package.json"), "utf8"));
@@ -330,7 +345,25 @@ export async function runDoctor(options) {
             // 10-mcp §1 — the door flag lives under blocks.mcp.
             mcpEnabled = body.blocks.mcp === true;
             sandboxVenue = body.blocks.sandbox;
-            if (sandboxVenue === "e2b" || sandboxVenue === "cloud" || sandboxVenue === "custom") {
+            if (sandboxVenue === "e2b") {
+                // 0.4.4 defect C — "ok: execution venue: e2b" on a host that cannot
+                // actually run e2b is a false blessing: the venue must be USABLE
+                // (key set and SDK resolvable from this project), or every server-app
+                // build dies in it instead of riding the Cloud sandbox.
+                const keyPresent = typeof env.E2B_API_KEY === "string" && env.E2B_API_KEY.trim() !== "";
+                const installed = (options.e2bResolvable ?? e2bResolvableFrom)(root);
+                if (keyPresent && installed) {
+                    pass("live/venue", "execution venue: e2b");
+                }
+                else {
+                    const missing = [
+                        ...(keyPresent ? [] : ["E2B_API_KEY is not set"]),
+                        ...(installed ? [] : ["the e2b package does not resolve from this project"]),
+                    ].join(" and ");
+                    fail("live/venue", "E-LIVE-007", `the running wire selected the e2b execution venue but ${missing}; server-app builds will fail in an unusable sandbox. Fix: install the e2b package and set E2B_API_KEY, or remove E2B_API_KEY from the server env (with VENDO_API_KEY set, the managed Cloud sandbox takes over), then restart the dev server and re-run doctor`);
+                }
+            }
+            else if (sandboxVenue === "cloud" || sandboxVenue === "custom") {
                 pass("live/venue", `execution venue: ${sandboxVenue}`);
             }
             else if (sandboxVenue === false) {