@vercel/sandbox 1.8.1 → 1.9.1

package/dist/index.d.ts

@@ -1,5 +1,6 @@
-export { Sandbox, type NetworkPolicy, type NetworkPolicyRule, type NetworkTransformer, } from "./sandbox";
-export { Snapshot } from "./snapshot";
-export { Command, CommandFinished } from "./command";
-export { StreamError } from "./api-client/api-error";
-export { APIError } from "./api-client/api-error";
+import { APIError, StreamError } from "./api-client/api-error.js";
+import { NetworkPolicy, NetworkPolicyRule, NetworkTransformer } from "./network-policy.js";
+import { Command, CommandFinished, CommandOutput, SerializedCommand, SerializedCommandFinished } from "./command.js";
+import { Snapshot } from "./snapshot.js";
+import { Sandbox, SerializedSandbox } from "./sandbox.js";
+export { APIError, Command, CommandFinished, type CommandOutput, type NetworkPolicy, type NetworkPolicyRule, type NetworkTransformer, Sandbox, type SerializedCommand, type SerializedCommandFinished, type SerializedSandbox, Snapshot, StreamError };

package/dist/index.js

@@ -1,15 +1,6 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.APIError = exports.StreamError = exports.CommandFinished = exports.Command = exports.Snapshot = exports.Sandbox = void 0;
-var sandbox_1 = require("./sandbox");
-Object.defineProperty(exports, "Sandbox", { enumerable: true, get: function () { return sandbox_1.Sandbox; } });
-var snapshot_1 = require("./snapshot");
-Object.defineProperty(exports, "Snapshot", { enumerable: true, get: function () { return snapshot_1.Snapshot; } });
-var command_1 = require("./command");
-Object.defineProperty(exports, "Command", { enumerable: true, get: function () { return command_1.Command; } });
-Object.defineProperty(exports, "CommandFinished", { enumerable: true, get: function () { return command_1.CommandFinished; } });
-var api_error_1 = require("./api-client/api-error");
-Object.defineProperty(exports, "StreamError", { enumerable: true, get: function () { return api_error_1.StreamError; } });
-var api_error_2 = require("./api-client/api-error");
-Object.defineProperty(exports, "APIError", { enumerable: true, get: function () { return api_error_2.APIError; } });
-//# sourceMappingURL=index.js.map
+import { APIError, StreamError } from "./api-client/api-error.js";
+import { Command, CommandFinished } from "./command.js";
+import { Snapshot } from "./snapshot.js";
+import { Sandbox } from "./sandbox.js";
+
+export { APIError, Command, CommandFinished, Sandbox, Snapshot, StreamError };

package/dist/network-policy.d.cts

@@ -0,0 +1,100 @@
+//#region src/network-policy.d.ts
+/**
+ * A transform applied to network requests matching a domain rule.
+ *
+ * @example
+ * {
+ *   headers: { authorization: "Bearer sk-..." }
+ * }
+ */
+type NetworkTransformer = {
+  /** Headers to set on the outgoing request. */
+  headers?: Record<string, string>;
+};
+/**
+ * A rule applied to requests matching a domain in the network policy.
+ */
+type NetworkPolicyRule = {
+  /** Transforms to apply to matching requests. */
+  transform?: NetworkTransformer[];
+};
+/**
+ * Network policy to define network restrictions for the sandbox.
+ *
+ * - `"allow-all"`: Full internet access (default). All traffic is allowed.
+ * - `"deny-all"`: No internet access. All traffic is denied.
+ * - Object: Custom access with explicit allow/deny lists.
+ *
+ * @example
+ * // Full internet access (default)
+ * "allow-all"
+ *
+ * @example
+ * // No external access
+ * "deny-all"
+ *
+ * @example
+ * // Custom access with specific domains (simple list)
+ * // All traffic not explicitly allowed is denied.
+ * {
+ *   allow: ["*.npmjs.org", "github.com"],
+ *   subnets: {
+ *     allow: ["10.0.0.0/8"],
+ *     deny: ["10.1.0.0/16"]
+ *   }
+ * }
+ *
+ * @example
+ * // Custom access with specific domains (record form)
+ * {
+ *   allow: {
+ *     "*.npmjs.org": [],
+ *     "github.com": [],
+ *   }
+ * }
+ *
+ * @example
+ * // Custom access with request transformers
+ * {
+ *   allow: {
+ *     "ai-gateway.vercel.sh": [
+ *       {
+ *         transform: [{
+ *           headers: { authorization: "Bearer ..." }
+ *         }]
+ *       }
+ *     ],
+ *     "*": []
+ *   }
+ * }
+ */
+type NetworkPolicy = "allow-all" | "deny-all" | {
+  /**
+   * Domains to allow traffic to.
+   * Use "*" prefix for wildcard matching (e.g., "*.npmjs.org").
+   *
+   * Accepts either:
+   * - `string[]`: A simple list of domains to allow.
+   * - `Record<string, NetworkPolicyRule[]>`: A map of domains to rules.
+   *   An empty array allows traffic with no additional rules.
+   */
+  allow?: string[] | Record<string, NetworkPolicyRule[]>;
+  /**
+   * Subnet-level access control using CIDR notation.
+   */
+  subnets?: {
+    /**
+     * List of CIDRs to allow traffic to.
+     * Traffic to these addresses will bypass the domain allowlist.
+     */
+    allow?: string[];
+    /**
+     * List of CIDRs to deny traffic to.
+     * These take precedence over allowed domains and CIDRs.
+     */
+    deny?: string[];
+  };
+};
+//#endregion
+export { NetworkPolicy, NetworkPolicyRule, NetworkTransformer };
+//# sourceMappingURL=network-policy.d.cts.map

package/dist/network-policy.d.ts

@@ -1,3 +1,4 @@
+//#region src/network-policy.d.ts
 /**
  * A transform applied to network requests matching a domain rule.
  *
@@ -6,16 +7,16 @@
  *   headers: { authorization: "Bearer sk-..." }
  * }
  */
-export type NetworkTransformer = {
-    /** Headers to set on the outgoing request. */
-    headers?: Record<string, string>;
+type NetworkTransformer = {
+  /** Headers to set on the outgoing request. */
+  headers?: Record<string, string>;
 };
 /**
  * A rule applied to requests matching a domain in the network policy.
  */
-export type NetworkPolicyRule = {
-    /** Transforms to apply to matching requests. */
-    transform?: NetworkTransformer[];
+type NetworkPolicyRule = {
+  /** Transforms to apply to matching requests. */
+  transform?: NetworkTransformer[];
 };
 /**
  * Network policy to define network restrictions for the sandbox.
@@ -67,30 +68,33 @@ export type NetworkPolicyRule = {
  *   }
  * }
  */
-export type NetworkPolicy = "allow-all" | "deny-all" | {
+type NetworkPolicy = "allow-all" | "deny-all" | {
+  /**
+   * Domains to allow traffic to.
+   * Use "*" prefix for wildcard matching (e.g., "*.npmjs.org").
+   *
+   * Accepts either:
+   * - `string[]`: A simple list of domains to allow.
+   * - `Record<string, NetworkPolicyRule[]>`: A map of domains to rules.
+   *   An empty array allows traffic with no additional rules.
+   */
+  allow?: string[] | Record<string, NetworkPolicyRule[]>;
+  /**
+   * Subnet-level access control using CIDR notation.
+   */
+  subnets?: {
     /**
-     * Domains to allow traffic to.
-     * Use "*" prefix for wildcard matching (e.g., "*.npmjs.org").
-     *
-     * Accepts either:
-     * - `string[]`: A simple list of domains to allow.
-     * - `Record<string, NetworkPolicyRule[]>`: A map of domains to rules.
-     *   An empty array allows traffic with no additional rules.
+     * List of CIDRs to allow traffic to.
+     * Traffic to these addresses will bypass the domain allowlist.
      */
-    allow?: string[] | Record<string, NetworkPolicyRule[]>;
+    allow?: string[];
     /**
-     * Subnet-level access control using CIDR notation.
+     * List of CIDRs to deny traffic to.
+     * These take precedence over allowed domains and CIDRs.
      */
-    subnets?: {
-        /**
-         * List of CIDRs to allow traffic to.
-         * Traffic to these addresses will bypass the domain allowlist.
-         */
-        allow?: string[];
-        /**
-         * List of CIDRs to deny traffic to.
-         * These take precedence over allowed domains and CIDRs.
-         */
-        deny?: string[];
-    };
+    deny?: string[];
+  };
 };
+//#endregion
+export { NetworkPolicy, NetworkPolicyRule, NetworkTransformer };
+//# sourceMappingURL=network-policy.d.ts.map