@vercel/sandbox 1.9.2 → 1.10.0

package/dist/auth/project.cjs

@@ -5,24 +5,47 @@ const require_linked_project = require('./linked-project.cjs');
 let zod = require("zod");
 
 //#region src/auth/project.ts
-const TeamsSchema = zod.z.object({ teams: zod.z.array(zod.z.object({ slug: zod.z.string() })).min(1, `No teams found. Please create a team first.`) });
+const UserSchema = zod.z.object({ user: zod.z.object({
+	defaultTeamId: zod.z.string().nullable(),
+	username: zod.z.string()
+}) });
+const TeamSchema = zod.z.object({
+	id: zod.z.string(),
+	slug: zod.z.string(),
+	updatedAt: zod.z.number(),
+	membership: zod.z.object({ role: zod.z.string() }),
+	billing: zod.z.object({ plan: zod.z.string() })
+});
+const TeamsSchema = zod.z.object({
+	teams: zod.z.array(TeamSchema),
+	pagination: zod.z.object({
+		count: zod.z.number(),
+		next: zod.z.number().nullable()
+	})
+});
 const DEFAULT_PROJECT_NAME = "vercel-sandbox-default-project";
+/** Status codes that mean "this team can't be used, try the next one". */
+function isSkippableTeamError(e) {
+	return e instanceof require_error.NotOk && (e.response.statusCode === 402 || e.response.statusCode === 403);
+}
 /**
 * Resolves the team and project scope for sandbox operations.
 *
 * First checks for a locally linked project in `.vercel/project.json`.
 * If found, uses the `projectId` and `orgId` from there.
 *
-* Otherwise, if `teamId` is not provided, selects the first available team for the account.
-* Ensures a default project exists within the team, creating it if necessary.
+* Otherwise, if `teamId` is not provided, builds an ordered list of candidate
+* teams to try: the user's `defaultTeamId` first (if set), then hobby-plan
+* teams where the user has an OWNER role (preferring the personal team matching
+* the username, then the most recently updated). Tries each candidate until one
+* succeeds.
 *
 * @param opts.token - Vercel API authentication token.
-* @param opts.teamId - Optional team slug. If omitted, the first team is selected.
+* @param opts.teamId - Optional team slug. If omitted, candidate teams are resolved automatically.
 * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.
 * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.
 *
 * @throws {NotOk} If the API returns an error other than 404 when checking the project.
-* @throws {ZodError} If no teams exist for the account.
 *
 * @example
 * ```ts
@@ -32,22 +55,89 @@ const DEFAULT_PROJECT_NAME = "vercel-sandbox-default-project";
 */
 async function inferScope(opts) {
 	const linkedProject = await require_linked_project.readLinkedProject(opts.cwd ?? process.cwd());
-	if (linkedProject) return {
-		...linkedProject,
-		created: false
-	};
-	const teamId = opts.teamId ?? await selectTeam(opts.token);
+	if (linkedProject) {
+		const slugs = await resolveLinkedProjectSlugs(opts.token, linkedProject.teamId, linkedProject.projectId);
+		return {
+			...linkedProject,
+			created: false,
+			...slugs
+		};
+	}
+	if (opts.teamId) return tryTeam(opts.token, opts.teamId);
+	const { defaultTeamId, username } = (await require_api.fetchApi({
+		token: opts.token,
+		endpoint: "/v2/user"
+	}).then(UserSchema.parse)).user;
+	if (defaultTeamId) try {
+		const result = await tryTeam(opts.token, defaultTeamId);
+		try {
+			const team = await require_api.fetchApi({
+				token: opts.token,
+				endpoint: `/v2/teams/${encodeURIComponent(defaultTeamId)}`
+			}).then(zod.z.object({ slug: zod.z.string() }).parse);
+			return {
+				...result,
+				teamSlug: team.slug
+			};
+		} catch {
+			return result;
+		}
+	} catch (e) {
+		if (!isSkippableTeamError(e)) throw e;
+	}
+	let next = null;
+	do {
+		const endpoint = next === null ? "/v2/teams?limit=20" : `/v2/teams?limit=20&until=${next}`;
+		const page = await require_api.fetchApi({
+			token: opts.token,
+			endpoint
+		}).then(TeamsSchema.parse);
+		next = page.pagination.next;
+		const hobbyOwnerTeams = page.teams.filter((t) => t.membership.role === "OWNER" && t.billing.plan === "hobby");
+		if (hobbyOwnerTeams.length === 0) continue;
+		const bestHobbyTeam = hobbyOwnerTeams.find((t) => t.slug === username) ?? hobbyOwnerTeams.sort((a, b) => b.updatedAt - a.updatedAt)[0];
+		if (bestHobbyTeam && bestHobbyTeam.id !== defaultTeamId) try {
+			return {
+				...await tryTeam(opts.token, bestHobbyTeam.id),
+				teamSlug: bestHobbyTeam.slug
+			};
+		} catch (e) {
+			if (!isSkippableTeamError(e)) throw e;
+		}
+	} while (next !== null);
+	try {
+		return {
+			...await tryTeam(opts.token, username),
+			teamSlug: username
+		};
+	} catch (e) {
+		if (!isSkippableTeamError(e)) throw e;
+	}
+	throw new require_error.NotOk({
+		statusCode: 403,
+		responseText: `Authenticated as "${username}" but none of the available teams allow sandbox creation. Specify a team explicitly with --scope <team-id-or-slug>.`
+	});
+}
+/**
+* Attempts to use a specific team for sandbox operations by checking for
+* (or creating) the default project within that team.
+*
+* @returns The resolved scope if the team is usable.
+* @throws {NotOk} On authorization or other API errors.
+*/
+async function tryTeam(token, teamId) {
+	const teamParam = teamId.startsWith("team_") ? `teamId=${encodeURIComponent(teamId)}` : `slug=${encodeURIComponent(teamId)}`;
 	let created = false;
 	try {
 		await require_api.fetchApi({
-			token: opts.token,
-			endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?slug=${encodeURIComponent(teamId)}`
+			token,
+			endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?${teamParam}`
 		});
 	} catch (e) {
 		if (!(e instanceof require_error.NotOk) || e.response.statusCode !== 404) throw e;
 		await require_api.fetchApi({
-			token: opts.token,
-			endpoint: `/v11/projects?slug=${encodeURIComponent(teamId)}`,
+			token,
+			endpoint: `/v11/projects?${teamParam}`,
 			method: "POST",
 			body: JSON.stringify({ name: DEFAULT_PROJECT_NAME })
 		});
@@ -60,21 +150,29 @@ async function inferScope(opts) {
 	};
 }
 /**
-* Selects a team for the current token by querying the Teams API and
-* returning the slug of the first team in the result set.
-*
-* @param token - Authentication token used to call the Vercel API.
-* @returns A promise that resolves to the first team's slug.
+* Best-effort resolution of team slug and project name for a linked project.
+* Both IDs may be opaque (e.g. `team_xxx`, `prj_xxx`), so we fetch the
+* human-readable names from the API in parallel.
 */
-async function selectTeam(token) {
-	const { teams: [team] } = await require_api.fetchApi({
-		token,
-		endpoint: "/v2/teams?limit=1"
-	}).then(TeamsSchema.parse);
-	return team.slug;
+async function resolveLinkedProjectSlugs(token, teamId, projectId) {
+	try {
+		const teamParam = teamId.startsWith("team_") ? `teamId=${encodeURIComponent(teamId)}` : `slug=${encodeURIComponent(teamId)}`;
+		const [teamData, projectData] = await Promise.all([require_api.fetchApi({
+			token,
+			endpoint: `/v2/teams/${encodeURIComponent(teamId)}`
+		}).then(zod.z.object({ slug: zod.z.string() }).parse), require_api.fetchApi({
+			token,
+			endpoint: `/v2/projects/${encodeURIComponent(projectId)}?${teamParam}`
+		}).then(zod.z.object({ name: zod.z.string() }).parse)]);
+		return {
+			teamSlug: teamData.slug,
+			projectSlug: projectData.name
+		};
+	} catch {
+		return {};
+	}
 }
 
 //#endregion
 exports.inferScope = inferScope;
-exports.selectTeam = selectTeam;
 //# sourceMappingURL=project.cjs.map

package/dist/auth/project.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"project.cjs","names":["z","readLinkedProject","fetchApi","NotOk"],"sources":["../../src/auth/project.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { fetchApi } from \"./api.js\";\nimport { NotOk } from \"./error.js\";\nimport { readLinkedProject } from \"./linked-project.js\";\n\nconst TeamsSchema = z.object({\n  teams: z\n    .array(\n      z.object({\n        slug: z.string(),\n      }),\n    )\n    .min(1, `No teams found. Please create a team first.`),\n});\n\nconst DEFAULT_PROJECT_NAME = \"vercel-sandbox-default-project\";\n\n/**\n * Resolves the team and project scope for sandbox operations.\n *\n * First checks for a locally linked project in `.vercel/project.json`.\n * If found, uses the `projectId` and `orgId` from there.\n *\n * Otherwise, if `teamId` is not provided, selects the first available team for the account.\n * Ensures a default project exists within the team, creating it if necessary.\n *\n * @param opts.token - Vercel API authentication token.\n * @param opts.teamId - Optional team slug. If omitted, the first team is selected.\n * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.\n * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.\n *\n * @throws {NotOk} If the API returns an error other than 404 when checking the project.\n * @throws {ZodError} If no teams exist for the account.\n *\n * @example\n * ```ts\n * const scope = await inferScope({ token: \"vercel_...\" });\n * // => { projectId: \"vercel-sandbox-default-project\", teamId: \"my-team\", created: false }\n * ```\n */\nexport async function inferScope(opts: {\n  token: string;\n  teamId?: string;\n  cwd?: string;\n}): Promise<{ projectId: string; teamId: string; created: boolean }> {\n  const linkedProject = await readLinkedProject(opts.cwd ?? process.cwd());\n  if (linkedProject) {\n    return { ...linkedProject, created: false };\n  }\n\n  const teamId = opts.teamId ?? (await selectTeam(opts.token));\n\n  let created = false;\n  try {\n    await fetchApi({\n      token: opts.token,\n      endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?slug=${encodeURIComponent(teamId)}`,\n    });\n  } catch (e) {\n    if (!(e instanceof NotOk) || e.response.statusCode !== 404) {\n      throw e;\n    }\n\n    await fetchApi({\n      token: opts.token,\n      endpoint: `/v11/projects?slug=${encodeURIComponent(teamId)}`,\n      method: \"POST\",\n      body: JSON.stringify({\n        name: DEFAULT_PROJECT_NAME,\n      }),\n    });\n    created = true;\n  }\n\n  return { projectId: DEFAULT_PROJECT_NAME, teamId, created };\n}\n\n/**\n * Selects a team for the current token by querying the Teams API and\n * returning the slug of the first team in the result set.\n *\n * @param token - Authentication token used to call the Vercel API.\n * @returns A promise that resolves to the first team's slug.\n */\nexport async function selectTeam(token: string) {\n  const {\n    teams: [team],\n  } = await fetchApi({ token, endpoint: \"/v2/teams?limit=1\" }).then(\n    TeamsSchema.parse,\n  );\n  return team.slug;\n}\n"],"mappings":";;;;;;;AAKA,MAAM,cAAcA,MAAE,OAAO,EAC3B,OAAOA,MACJ,MACCA,MAAE,OAAO,EACP,MAAMA,MAAE,QAAQ,EACjB,CAAC,CACH,CACA,IAAI,GAAG,8CAA8C,EACzD,CAAC;AAEF,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;AAyB7B,eAAsB,WAAW,MAIoC;CACnE,MAAM,gBAAgB,MAAMC,yCAAkB,KAAK,OAAO,QAAQ,KAAK,CAAC;AACxE,KAAI,cACF,QAAO;EAAE,GAAG;EAAe,SAAS;EAAO;CAG7C,MAAM,SAAS,KAAK,UAAW,MAAM,WAAW,KAAK,MAAM;CAE3D,IAAI,UAAU;AACd,KAAI;AACF,QAAMC,qBAAS;GACb,OAAO,KAAK;GACZ,UAAU,gBAAgB,mBAAmB,qBAAqB,CAAC,QAAQ,mBAAmB,OAAO;GACtG,CAAC;UACK,GAAG;AACV,MAAI,EAAE,aAAaC,wBAAU,EAAE,SAAS,eAAe,IACrD,OAAM;AAGR,QAAMD,qBAAS;GACb,OAAO,KAAK;GACZ,UAAU,sBAAsB,mBAAmB,OAAO;GAC1D,QAAQ;GACR,MAAM,KAAK,UAAU,EACnB,MAAM,sBACP,CAAC;GACH,CAAC;AACF,YAAU;;AAGZ,QAAO;EAAE,WAAW;EAAsB;EAAQ;EAAS;;;;;;;;;AAU7D,eAAsB,WAAW,OAAe;CAC9C,MAAM,EACJ,OAAO,CAAC,UACN,MAAMA,qBAAS;EAAE;EAAO,UAAU;EAAqB,CAAC,CAAC,KAC3D,YAAY,MACb;AACD,QAAO,KAAK"}
+{"version":3,"file":"project.cjs","names":["z","NotOk","readLinkedProject","fetchApi","next: number | null","endpoint: string"],"sources":["../../src/auth/project.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { fetchApi } from \"./api.js\";\nimport { NotOk } from \"./error.js\";\nimport { readLinkedProject } from \"./linked-project.js\";\n\nconst UserSchema = z.object({\n  user: z.object({\n    defaultTeamId: z.string().nullable(),\n    username: z.string(),\n  }),\n});\n\nconst TeamSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  updatedAt: z.number(),\n  membership: z.object({\n    role: z.string(),\n  }),\n  billing: z.object({\n    plan: z.string(),\n  }),\n});\n\nconst TeamsSchema = z.object({\n  teams: z.array(TeamSchema),\n  pagination: z.object({\n    count: z.number(),\n    next: z.number().nullable(),\n  }),\n});\n\nconst DEFAULT_PROJECT_NAME = \"vercel-sandbox-default-project\";\n\n/** Status codes that mean \"this team can't be used, try the next one\". */\nfunction isSkippableTeamError(e: unknown): boolean {\n  return e instanceof NotOk && (e.response.statusCode === 402 || e.response.statusCode === 403);\n}\n\n/**\n * Resolves the team and project scope for sandbox operations.\n *\n * First checks for a locally linked project in `.vercel/project.json`.\n * If found, uses the `projectId` and `orgId` from there.\n *\n * Otherwise, if `teamId` is not provided, builds an ordered list of candidate\n * teams to try: the user's `defaultTeamId` first (if set), then hobby-plan\n * teams where the user has an OWNER role (preferring the personal team matching\n * the username, then the most recently updated). Tries each candidate until one\n * succeeds.\n *\n * @param opts.token - Vercel API authentication token.\n * @param opts.teamId - Optional team slug. If omitted, candidate teams are resolved automatically.\n * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.\n * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.\n *\n * @throws {NotOk} If the API returns an error other than 404 when checking the project.\n *\n * @example\n * ```ts\n * const scope = await inferScope({ token: \"vercel_...\" });\n * // => { projectId: \"vercel-sandbox-default-project\", teamId: \"my-team\", created: false }\n * ```\n */\nexport async function inferScope(opts: {\n  token: string;\n  teamId?: string;\n  cwd?: string;\n}): Promise<{\n  projectId: string;\n  teamId: string;\n  created: boolean;\n  teamSlug?: string;\n  projectSlug?: string;\n}> {\n  const linkedProject = await readLinkedProject(opts.cwd ?? process.cwd());\n  if (linkedProject) {\n    const slugs = await resolveLinkedProjectSlugs(\n      opts.token,\n      linkedProject.teamId,\n      linkedProject.projectId,\n    );\n    return { ...linkedProject, created: false, ...slugs };\n  }\n\n  if (opts.teamId) {\n    return tryTeam(opts.token, opts.teamId);\n  }\n\n  const userData = await fetchApi({\n    token: opts.token,\n    endpoint: \"/v2/user\",\n  }).then(UserSchema.parse);\n  const { defaultTeamId, username } = userData.user;\n\n  // 1. Try defaultTeamId first\n  if (defaultTeamId) {\n    try {\n      const result = await tryTeam(opts.token, defaultTeamId);\n      // Resolve team slug (best-effort)\n      try {\n        const team = await fetchApi({\n          token: opts.token,\n          endpoint: `/v2/teams/${encodeURIComponent(defaultTeamId)}`,\n        }).then(z.object({ slug: z.string() }).parse);\n        return { ...result, teamSlug: team.slug };\n      } catch {\n        return result;\n      }\n    } catch (e) {\n      if (!isSkippableTeamError(e)) throw e;\n    }\n  }\n\n  // 2. Paginate teams in pages of 20, try best hobby team per page\n  let next: number | null = null;\n  do {\n    const endpoint: string =\n      next === null\n        ? \"/v2/teams?limit=20\"\n        : `/v2/teams?limit=20&until=${next}`;\n    const page = await fetchApi({ token: opts.token, endpoint }).then(\n      TeamsSchema.parse,\n    );\n\n    next = page.pagination.next;\n\n    const hobbyOwnerTeams = page.teams.filter(\n      (t) => t.membership.role === \"OWNER\" && t.billing.plan === \"hobby\",\n    );\n    if (hobbyOwnerTeams.length === 0) {\n      continue;\n    }\n\n    const bestHobbyTeam =\n      hobbyOwnerTeams.find((t) => t.slug === username) ??\n      hobbyOwnerTeams.sort((a, b) => b.updatedAt - a.updatedAt)[0];\n\n    if (bestHobbyTeam && bestHobbyTeam.id !== defaultTeamId) {\n      try {\n        const result = await tryTeam(opts.token, bestHobbyTeam.id);\n        return { ...result, teamSlug: bestHobbyTeam.slug };\n      } catch (e) {\n        if (!isSkippableTeamError(e)) throw e;\n      }\n    }\n  } while (next !== null);\n\n  // 3. Fall back to username as personal team\n  try {\n    const result = await tryTeam(opts.token, username);\n    return { ...result, teamSlug: username };\n  } catch (e) {\n    if (!isSkippableTeamError(e)) throw e;\n  }\n\n  throw new NotOk({\n    statusCode: 403,\n    responseText: `Authenticated as \"${username}\" but none of the available teams allow sandbox creation. Specify a team explicitly with --scope <team-id-or-slug>.`,\n  });\n}\n\n/**\n * Attempts to use a specific team for sandbox operations by checking for\n * (or creating) the default project within that team.\n *\n * @returns The resolved scope if the team is usable.\n * @throws {NotOk} On authorization or other API errors.\n */\nasync function tryTeam(\n  token: string,\n  teamId: string,\n): Promise<{ projectId: string; teamId: string; created: boolean }> {\n  const teamParam = teamId.startsWith(\"team_\")\n    ? `teamId=${encodeURIComponent(teamId)}`\n    : `slug=${encodeURIComponent(teamId)}`;\n\n  let created = false;\n  try {\n    await fetchApi({\n      token,\n      endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?${teamParam}`,\n    });\n  } catch (e) {\n    if (!(e instanceof NotOk) || e.response.statusCode !== 404) {\n      throw e;\n    }\n\n    await fetchApi({\n      token,\n      endpoint: `/v11/projects?${teamParam}`,\n      method: \"POST\",\n      body: JSON.stringify({\n        name: DEFAULT_PROJECT_NAME,\n      }),\n    });\n    created = true;\n  }\n\n  return { projectId: DEFAULT_PROJECT_NAME, teamId, created };\n}\n\n/**\n * Best-effort resolution of team slug and project name for a linked project.\n * Both IDs may be opaque (e.g. `team_xxx`, `prj_xxx`), so we fetch the\n * human-readable names from the API in parallel.\n */\nasync function resolveLinkedProjectSlugs(\n  token: string,\n  teamId: string,\n  projectId: string,\n): Promise<{ teamSlug?: string; projectSlug?: string }> {\n  try {\n    const teamParam = teamId.startsWith(\"team_\")\n      ? `teamId=${encodeURIComponent(teamId)}`\n      : `slug=${encodeURIComponent(teamId)}`;\n    const [teamData, projectData] = await Promise.all([\n      fetchApi({\n        token,\n        endpoint: `/v2/teams/${encodeURIComponent(teamId)}`,\n      }).then(z.object({ slug: z.string() }).parse),\n      fetchApi({\n        token,\n        endpoint: `/v2/projects/${encodeURIComponent(projectId)}?${teamParam}`,\n      }).then(z.object({ name: z.string() }).parse),\n    ]);\n    return { teamSlug: teamData.slug, projectSlug: projectData.name };\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;;AAKA,MAAM,aAAaA,MAAE,OAAO,EAC1B,MAAMA,MAAE,OAAO;CACb,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,UAAUA,MAAE,QAAQ;CACrB,CAAC,EACH,CAAC;AAEF,MAAM,aAAaA,MAAE,OAAO;CAC1B,IAAIA,MAAE,QAAQ;CACd,MAAMA,MAAE,QAAQ;CAChB,WAAWA,MAAE,QAAQ;CACrB,YAAYA,MAAE,OAAO,EACnB,MAAMA,MAAE,QAAQ,EACjB,CAAC;CACF,SAASA,MAAE,OAAO,EAChB,MAAMA,MAAE,QAAQ,EACjB,CAAC;CACH,CAAC;AAEF,MAAM,cAAcA,MAAE,OAAO;CAC3B,OAAOA,MAAE,MAAM,WAAW;CAC1B,YAAYA,MAAE,OAAO;EACnB,OAAOA,MAAE,QAAQ;EACjB,MAAMA,MAAE,QAAQ,CAAC,UAAU;EAC5B,CAAC;CACH,CAAC;AAEF,MAAM,uBAAuB;;AAG7B,SAAS,qBAAqB,GAAqB;AACjD,QAAO,aAAaC,wBAAU,EAAE,SAAS,eAAe,OAAO,EAAE,SAAS,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4B3F,eAAsB,WAAW,MAU9B;CACD,MAAM,gBAAgB,MAAMC,yCAAkB,KAAK,OAAO,QAAQ,KAAK,CAAC;AACxE,KAAI,eAAe;EACjB,MAAM,QAAQ,MAAM,0BAClB,KAAK,OACL,cAAc,QACd,cAAc,UACf;AACD,SAAO;GAAE,GAAG;GAAe,SAAS;GAAO,GAAG;GAAO;;AAGvD,KAAI,KAAK,OACP,QAAO,QAAQ,KAAK,OAAO,KAAK,OAAO;CAOzC,MAAM,EAAE,eAAe,cAJN,MAAMC,qBAAS;EAC9B,OAAO,KAAK;EACZ,UAAU;EACX,CAAC,CAAC,KAAK,WAAW,MAAM,EACoB;AAG7C,KAAI,cACF,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,OAAO,cAAc;AAEvD,MAAI;GACF,MAAM,OAAO,MAAMA,qBAAS;IAC1B,OAAO,KAAK;IACZ,UAAU,aAAa,mBAAmB,cAAc;IACzD,CAAC,CAAC,KAAKH,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,EAAE,CAAC,CAAC,MAAM;AAC7C,UAAO;IAAE,GAAG;IAAQ,UAAU,KAAK;IAAM;UACnC;AACN,UAAO;;UAEF,GAAG;AACV,MAAI,CAAC,qBAAqB,EAAE,CAAE,OAAM;;CAKxC,IAAII,OAAsB;AAC1B,IAAG;EACD,MAAMC,WACJ,SAAS,OACL,uBACA,4BAA4B;EAClC,MAAM,OAAO,MAAMF,qBAAS;GAAE,OAAO,KAAK;GAAO;GAAU,CAAC,CAAC,KAC3D,YAAY,MACb;AAED,SAAO,KAAK,WAAW;EAEvB,MAAM,kBAAkB,KAAK,MAAM,QAChC,MAAM,EAAE,WAAW,SAAS,WAAW,EAAE,QAAQ,SAAS,QAC5D;AACD,MAAI,gBAAgB,WAAW,EAC7B;EAGF,MAAM,gBACJ,gBAAgB,MAAM,MAAM,EAAE,SAAS,SAAS,IAChD,gBAAgB,MAAM,GAAG,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC;AAE5D,MAAI,iBAAiB,cAAc,OAAO,cACxC,KAAI;AAEF,UAAO;IAAE,GADM,MAAM,QAAQ,KAAK,OAAO,cAAc,GAAG;IACtC,UAAU,cAAc;IAAM;WAC3C,GAAG;AACV,OAAI,CAAC,qBAAqB,EAAE,CAAE,OAAM;;UAGjC,SAAS;AAGlB,KAAI;AAEF,SAAO;GAAE,GADM,MAAM,QAAQ,KAAK,OAAO,SAAS;GAC9B,UAAU;GAAU;UACjC,GAAG;AACV,MAAI,CAAC,qBAAqB,EAAE,CAAE,OAAM;;AAGtC,OAAM,IAAIF,oBAAM;EACd,YAAY;EACZ,cAAc,qBAAqB,SAAS;EAC7C,CAAC;;;;;;;;;AAUJ,eAAe,QACb,OACA,QACkE;CAClE,MAAM,YAAY,OAAO,WAAW,QAAQ,GACxC,UAAU,mBAAmB,OAAO,KACpC,QAAQ,mBAAmB,OAAO;CAEtC,IAAI,UAAU;AACd,KAAI;AACF,QAAME,qBAAS;GACb;GACA,UAAU,gBAAgB,mBAAmB,qBAAqB,CAAC,GAAG;GACvE,CAAC;UACK,GAAG;AACV,MAAI,EAAE,aAAaF,wBAAU,EAAE,SAAS,eAAe,IACrD,OAAM;AAGR,QAAME,qBAAS;GACb;GACA,UAAU,iBAAiB;GAC3B,QAAQ;GACR,MAAM,KAAK,UAAU,EACnB,MAAM,sBACP,CAAC;GACH,CAAC;AACF,YAAU;;AAGZ,QAAO;EAAE,WAAW;EAAsB;EAAQ;EAAS;;;;;;;AAQ7D,eAAe,0BACb,OACA,QACA,WACsD;AACtD,KAAI;EACF,MAAM,YAAY,OAAO,WAAW,QAAQ,GACxC,UAAU,mBAAmB,OAAO,KACpC,QAAQ,mBAAmB,OAAO;EACtC,MAAM,CAAC,UAAU,eAAe,MAAM,QAAQ,IAAI,CAChDA,qBAAS;GACP;GACA,UAAU,aAAa,mBAAmB,OAAO;GAClD,CAAC,CAAC,KAAKH,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAC7CG,qBAAS;GACP;GACA,UAAU,gBAAgB,mBAAmB,UAAU,CAAC,GAAG;GAC5D,CAAC,CAAC,KAAKH,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC;AACF,SAAO;GAAE,UAAU,SAAS;GAAM,aAAa,YAAY;GAAM;SAC3D;AACN,SAAO,EAAE"}

package/dist/auth/project.d.cts

@@ -5,16 +5,18 @@
  * First checks for a locally linked project in `.vercel/project.json`.
  * If found, uses the `projectId` and `orgId` from there.
  *
- * Otherwise, if `teamId` is not provided, selects the first available team for the account.
- * Ensures a default project exists within the team, creating it if necessary.
+ * Otherwise, if `teamId` is not provided, builds an ordered list of candidate
+ * teams to try: the user's `defaultTeamId` first (if set), then hobby-plan
+ * teams where the user has an OWNER role (preferring the personal team matching
+ * the username, then the most recently updated). Tries each candidate until one
+ * succeeds.
  *
  * @param opts.token - Vercel API authentication token.
- * @param opts.teamId - Optional team slug. If omitted, the first team is selected.
+ * @param opts.teamId - Optional team slug. If omitted, candidate teams are resolved automatically.
  * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.
  * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.
  *
  * @throws {NotOk} If the API returns an error other than 404 when checking the project.
- * @throws {ZodError} If no teams exist for the account.
  *
  * @example
  * ```ts
@@ -30,15 +32,9 @@ declare function inferScope(opts: {
   projectId: string;
   teamId: string;
   created: boolean;
+  teamSlug?: string;
+  projectSlug?: string;
 }>;
-/**
- * Selects a team for the current token by querying the Teams API and
- * returning the slug of the first team in the result set.
- *
- * @param token - Authentication token used to call the Vercel API.
- * @returns A promise that resolves to the first team's slug.
- */
-declare function selectTeam(token: string): Promise<string>;
 //#endregion
-export { inferScope, selectTeam };
+export { inferScope };
 //# sourceMappingURL=project.d.cts.map

package/dist/auth/project.d.ts

@@ -5,16 +5,18 @@
  * First checks for a locally linked project in `.vercel/project.json`.
  * If found, uses the `projectId` and `orgId` from there.
  *
- * Otherwise, if `teamId` is not provided, selects the first available team for the account.
- * Ensures a default project exists within the team, creating it if necessary.
+ * Otherwise, if `teamId` is not provided, builds an ordered list of candidate
+ * teams to try: the user's `defaultTeamId` first (if set), then hobby-plan
+ * teams where the user has an OWNER role (preferring the personal team matching
+ * the username, then the most recently updated). Tries each candidate until one
+ * succeeds.
  *
  * @param opts.token - Vercel API authentication token.
- * @param opts.teamId - Optional team slug. If omitted, the first team is selected.
+ * @param opts.teamId - Optional team slug. If omitted, candidate teams are resolved automatically.
  * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.
  * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.
  *
  * @throws {NotOk} If the API returns an error other than 404 when checking the project.
- * @throws {ZodError} If no teams exist for the account.
  *
  * @example
  * ```ts
@@ -30,15 +32,9 @@ declare function inferScope(opts: {
   projectId: string;
   teamId: string;
   created: boolean;
+  teamSlug?: string;
+  projectSlug?: string;
 }>;
-/**
- * Selects a team for the current token by querying the Teams API and
- * returning the slug of the first team in the result set.
- *
- * @param token - Authentication token used to call the Vercel API.
- * @returns A promise that resolves to the first team's slug.
- */
-declare function selectTeam(token: string): Promise<string>;
 //#endregion
-export { inferScope, selectTeam };
+export { inferScope };
 //# sourceMappingURL=project.d.ts.map

package/dist/auth/project.js

@@ -4,24 +4,47 @@ import { readLinkedProject } from "./linked-project.js";
 import { z } from "zod";
 
 //#region src/auth/project.ts
-const TeamsSchema = z.object({ teams: z.array(z.object({ slug: z.string() })).min(1, `No teams found. Please create a team first.`) });
+const UserSchema = z.object({ user: z.object({
+	defaultTeamId: z.string().nullable(),
+	username: z.string()
+}) });
+const TeamSchema = z.object({
+	id: z.string(),
+	slug: z.string(),
+	updatedAt: z.number(),
+	membership: z.object({ role: z.string() }),
+	billing: z.object({ plan: z.string() })
+});
+const TeamsSchema = z.object({
+	teams: z.array(TeamSchema),
+	pagination: z.object({
+		count: z.number(),
+		next: z.number().nullable()
+	})
+});
 const DEFAULT_PROJECT_NAME = "vercel-sandbox-default-project";
+/** Status codes that mean "this team can't be used, try the next one". */
+function isSkippableTeamError(e) {
+	return e instanceof NotOk && (e.response.statusCode === 402 || e.response.statusCode === 403);
+}
 /**
 * Resolves the team and project scope for sandbox operations.
 *
 * First checks for a locally linked project in `.vercel/project.json`.
 * If found, uses the `projectId` and `orgId` from there.
 *
-* Otherwise, if `teamId` is not provided, selects the first available team for the account.
-* Ensures a default project exists within the team, creating it if necessary.
+* Otherwise, if `teamId` is not provided, builds an ordered list of candidate
+* teams to try: the user's `defaultTeamId` first (if set), then hobby-plan
+* teams where the user has an OWNER role (preferring the personal team matching
+* the username, then the most recently updated). Tries each candidate until one
+* succeeds.
 *
 * @param opts.token - Vercel API authentication token.
-* @param opts.teamId - Optional team slug. If omitted, the first team is selected.
+* @param opts.teamId - Optional team slug. If omitted, candidate teams are resolved automatically.
 * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.
 * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.
 *
 * @throws {NotOk} If the API returns an error other than 404 when checking the project.
-* @throws {ZodError} If no teams exist for the account.
 *
 * @example
 * ```ts
@@ -31,22 +54,89 @@ const DEFAULT_PROJECT_NAME = "vercel-sandbox-default-project";
 */
 async function inferScope(opts) {
 	const linkedProject = await readLinkedProject(opts.cwd ?? process.cwd());
-	if (linkedProject) return {
-		...linkedProject,
-		created: false
-	};
-	const teamId = opts.teamId ?? await selectTeam(opts.token);
+	if (linkedProject) {
+		const slugs = await resolveLinkedProjectSlugs(opts.token, linkedProject.teamId, linkedProject.projectId);
+		return {
+			...linkedProject,
+			created: false,
+			...slugs
+		};
+	}
+	if (opts.teamId) return tryTeam(opts.token, opts.teamId);
+	const { defaultTeamId, username } = (await fetchApi({
+		token: opts.token,
+		endpoint: "/v2/user"
+	}).then(UserSchema.parse)).user;
+	if (defaultTeamId) try {
+		const result = await tryTeam(opts.token, defaultTeamId);
+		try {
+			const team = await fetchApi({
+				token: opts.token,
+				endpoint: `/v2/teams/${encodeURIComponent(defaultTeamId)}`
+			}).then(z.object({ slug: z.string() }).parse);
+			return {
+				...result,
+				teamSlug: team.slug
+			};
+		} catch {
+			return result;
+		}
+	} catch (e) {
+		if (!isSkippableTeamError(e)) throw e;
+	}
+	let next = null;
+	do {
+		const endpoint = next === null ? "/v2/teams?limit=20" : `/v2/teams?limit=20&until=${next}`;
+		const page = await fetchApi({
+			token: opts.token,
+			endpoint
+		}).then(TeamsSchema.parse);
+		next = page.pagination.next;
+		const hobbyOwnerTeams = page.teams.filter((t) => t.membership.role === "OWNER" && t.billing.plan === "hobby");
+		if (hobbyOwnerTeams.length === 0) continue;
+		const bestHobbyTeam = hobbyOwnerTeams.find((t) => t.slug === username) ?? hobbyOwnerTeams.sort((a, b) => b.updatedAt - a.updatedAt)[0];
+		if (bestHobbyTeam && bestHobbyTeam.id !== defaultTeamId) try {
+			return {
+				...await tryTeam(opts.token, bestHobbyTeam.id),
+				teamSlug: bestHobbyTeam.slug
+			};
+		} catch (e) {
+			if (!isSkippableTeamError(e)) throw e;
+		}
+	} while (next !== null);
+	try {
+		return {
+			...await tryTeam(opts.token, username),
+			teamSlug: username
+		};
+	} catch (e) {
+		if (!isSkippableTeamError(e)) throw e;
+	}
+	throw new NotOk({
+		statusCode: 403,
+		responseText: `Authenticated as "${username}" but none of the available teams allow sandbox creation. Specify a team explicitly with --scope <team-id-or-slug>.`
+	});
+}
+/**
+* Attempts to use a specific team for sandbox operations by checking for
+* (or creating) the default project within that team.
+*
+* @returns The resolved scope if the team is usable.
+* @throws {NotOk} On authorization or other API errors.
+*/
+async function tryTeam(token, teamId) {
+	const teamParam = teamId.startsWith("team_") ? `teamId=${encodeURIComponent(teamId)}` : `slug=${encodeURIComponent(teamId)}`;
 	let created = false;
 	try {
 		await fetchApi({
-			token: opts.token,
-			endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?slug=${encodeURIComponent(teamId)}`
+			token,
+			endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?${teamParam}`
 		});
 	} catch (e) {
 		if (!(e instanceof NotOk) || e.response.statusCode !== 404) throw e;
 		await fetchApi({
-			token: opts.token,
-			endpoint: `/v11/projects?slug=${encodeURIComponent(teamId)}`,
+			token,
+			endpoint: `/v11/projects?${teamParam}`,
 			method: "POST",
 			body: JSON.stringify({ name: DEFAULT_PROJECT_NAME })
 		});
@@ -59,20 +149,29 @@ async function inferScope(opts) {
 	};
 }
 /**
-* Selects a team for the current token by querying the Teams API and
-* returning the slug of the first team in the result set.
-*
-* @param token - Authentication token used to call the Vercel API.
-* @returns A promise that resolves to the first team's slug.
+* Best-effort resolution of team slug and project name for a linked project.
+* Both IDs may be opaque (e.g. `team_xxx`, `prj_xxx`), so we fetch the
+* human-readable names from the API in parallel.
 */
-async function selectTeam(token) {
-	const { teams: [team] } = await fetchApi({
-		token,
-		endpoint: "/v2/teams?limit=1"
-	}).then(TeamsSchema.parse);
-	return team.slug;
+async function resolveLinkedProjectSlugs(token, teamId, projectId) {
+	try {
+		const teamParam = teamId.startsWith("team_") ? `teamId=${encodeURIComponent(teamId)}` : `slug=${encodeURIComponent(teamId)}`;
+		const [teamData, projectData] = await Promise.all([fetchApi({
+			token,
+			endpoint: `/v2/teams/${encodeURIComponent(teamId)}`
+		}).then(z.object({ slug: z.string() }).parse), fetchApi({
+			token,
+			endpoint: `/v2/projects/${encodeURIComponent(projectId)}?${teamParam}`
+		}).then(z.object({ name: z.string() }).parse)]);
+		return {
+			teamSlug: teamData.slug,
+			projectSlug: projectData.name
+		};
+	} catch {
+		return {};
+	}
 }
 
 //#endregion
-export { inferScope, selectTeam };
+export { inferScope };
 //# sourceMappingURL=project.js.map

package/dist/auth/project.js.map

@@ -1 +1 @@
-{"version":3,"file":"project.js","names":[],"sources":["../../src/auth/project.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { fetchApi } from \"./api.js\";\nimport { NotOk } from \"./error.js\";\nimport { readLinkedProject } from \"./linked-project.js\";\n\nconst TeamsSchema = z.object({\n  teams: z\n    .array(\n      z.object({\n        slug: z.string(),\n      }),\n    )\n    .min(1, `No teams found. Please create a team first.`),\n});\n\nconst DEFAULT_PROJECT_NAME = \"vercel-sandbox-default-project\";\n\n/**\n * Resolves the team and project scope for sandbox operations.\n *\n * First checks for a locally linked project in `.vercel/project.json`.\n * If found, uses the `projectId` and `orgId` from there.\n *\n * Otherwise, if `teamId` is not provided, selects the first available team for the account.\n * Ensures a default project exists within the team, creating it if necessary.\n *\n * @param opts.token - Vercel API authentication token.\n * @param opts.teamId - Optional team slug. If omitted, the first team is selected.\n * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.\n * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.\n *\n * @throws {NotOk} If the API returns an error other than 404 when checking the project.\n * @throws {ZodError} If no teams exist for the account.\n *\n * @example\n * ```ts\n * const scope = await inferScope({ token: \"vercel_...\" });\n * // => { projectId: \"vercel-sandbox-default-project\", teamId: \"my-team\", created: false }\n * ```\n */\nexport async function inferScope(opts: {\n  token: string;\n  teamId?: string;\n  cwd?: string;\n}): Promise<{ projectId: string; teamId: string; created: boolean }> {\n  const linkedProject = await readLinkedProject(opts.cwd ?? process.cwd());\n  if (linkedProject) {\n    return { ...linkedProject, created: false };\n  }\n\n  const teamId = opts.teamId ?? (await selectTeam(opts.token));\n\n  let created = false;\n  try {\n    await fetchApi({\n      token: opts.token,\n      endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?slug=${encodeURIComponent(teamId)}`,\n    });\n  } catch (e) {\n    if (!(e instanceof NotOk) || e.response.statusCode !== 404) {\n      throw e;\n    }\n\n    await fetchApi({\n      token: opts.token,\n      endpoint: `/v11/projects?slug=${encodeURIComponent(teamId)}`,\n      method: \"POST\",\n      body: JSON.stringify({\n        name: DEFAULT_PROJECT_NAME,\n      }),\n    });\n    created = true;\n  }\n\n  return { projectId: DEFAULT_PROJECT_NAME, teamId, created };\n}\n\n/**\n * Selects a team for the current token by querying the Teams API and\n * returning the slug of the first team in the result set.\n *\n * @param token - Authentication token used to call the Vercel API.\n * @returns A promise that resolves to the first team's slug.\n */\nexport async function selectTeam(token: string) {\n  const {\n    teams: [team],\n  } = await fetchApi({ token, endpoint: \"/v2/teams?limit=1\" }).then(\n    TeamsSchema.parse,\n  );\n  return team.slug;\n}\n"],"mappings":";;;;;;AAKA,MAAM,cAAc,EAAE,OAAO,EAC3B,OAAO,EACJ,MACC,EAAE,OAAO,EACP,MAAM,EAAE,QAAQ,EACjB,CAAC,CACH,CACA,IAAI,GAAG,8CAA8C,EACzD,CAAC;AAEF,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;AAyB7B,eAAsB,WAAW,MAIoC;CACnE,MAAM,gBAAgB,MAAM,kBAAkB,KAAK,OAAO,QAAQ,KAAK,CAAC;AACxE,KAAI,cACF,QAAO;EAAE,GAAG;EAAe,SAAS;EAAO;CAG7C,MAAM,SAAS,KAAK,UAAW,MAAM,WAAW,KAAK,MAAM;CAE3D,IAAI,UAAU;AACd,KAAI;AACF,QAAM,SAAS;GACb,OAAO,KAAK;GACZ,UAAU,gBAAgB,mBAAmB,qBAAqB,CAAC,QAAQ,mBAAmB,OAAO;GACtG,CAAC;UACK,GAAG;AACV,MAAI,EAAE,aAAa,UAAU,EAAE,SAAS,eAAe,IACrD,OAAM;AAGR,QAAM,SAAS;GACb,OAAO,KAAK;GACZ,UAAU,sBAAsB,mBAAmB,OAAO;GAC1D,QAAQ;GACR,MAAM,KAAK,UAAU,EACnB,MAAM,sBACP,CAAC;GACH,CAAC;AACF,YAAU;;AAGZ,QAAO;EAAE,WAAW;EAAsB;EAAQ;EAAS;;;;;;;;;AAU7D,eAAsB,WAAW,OAAe;CAC9C,MAAM,EACJ,OAAO,CAAC,UACN,MAAM,SAAS;EAAE;EAAO,UAAU;EAAqB,CAAC,CAAC,KAC3D,YAAY,MACb;AACD,QAAO,KAAK"}
+{"version":3,"file":"project.js","names":["next: number | null","endpoint: string"],"sources":["../../src/auth/project.ts"],"sourcesContent":["import { z } from \"zod\";\nimport { fetchApi } from \"./api.js\";\nimport { NotOk } from \"./error.js\";\nimport { readLinkedProject } from \"./linked-project.js\";\n\nconst UserSchema = z.object({\n  user: z.object({\n    defaultTeamId: z.string().nullable(),\n    username: z.string(),\n  }),\n});\n\nconst TeamSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  updatedAt: z.number(),\n  membership: z.object({\n    role: z.string(),\n  }),\n  billing: z.object({\n    plan: z.string(),\n  }),\n});\n\nconst TeamsSchema = z.object({\n  teams: z.array(TeamSchema),\n  pagination: z.object({\n    count: z.number(),\n    next: z.number().nullable(),\n  }),\n});\n\nconst DEFAULT_PROJECT_NAME = \"vercel-sandbox-default-project\";\n\n/** Status codes that mean \"this team can't be used, try the next one\". */\nfunction isSkippableTeamError(e: unknown): boolean {\n  return e instanceof NotOk && (e.response.statusCode === 402 || e.response.statusCode === 403);\n}\n\n/**\n * Resolves the team and project scope for sandbox operations.\n *\n * First checks for a locally linked project in `.vercel/project.json`.\n * If found, uses the `projectId` and `orgId` from there.\n *\n * Otherwise, if `teamId` is not provided, builds an ordered list of candidate\n * teams to try: the user's `defaultTeamId` first (if set), then hobby-plan\n * teams where the user has an OWNER role (preferring the personal team matching\n * the username, then the most recently updated). Tries each candidate until one\n * succeeds.\n *\n * @param opts.token - Vercel API authentication token.\n * @param opts.teamId - Optional team slug. If omitted, candidate teams are resolved automatically.\n * @param opts.cwd - Optional directory to search for `.vercel/project.json`. Defaults to `process.cwd()`.\n * @returns The resolved scope with `projectId`, `teamId`, and whether the project was `created`.\n *\n * @throws {NotOk} If the API returns an error other than 404 when checking the project.\n *\n * @example\n * ```ts\n * const scope = await inferScope({ token: \"vercel_...\" });\n * // => { projectId: \"vercel-sandbox-default-project\", teamId: \"my-team\", created: false }\n * ```\n */\nexport async function inferScope(opts: {\n  token: string;\n  teamId?: string;\n  cwd?: string;\n}): Promise<{\n  projectId: string;\n  teamId: string;\n  created: boolean;\n  teamSlug?: string;\n  projectSlug?: string;\n}> {\n  const linkedProject = await readLinkedProject(opts.cwd ?? process.cwd());\n  if (linkedProject) {\n    const slugs = await resolveLinkedProjectSlugs(\n      opts.token,\n      linkedProject.teamId,\n      linkedProject.projectId,\n    );\n    return { ...linkedProject, created: false, ...slugs };\n  }\n\n  if (opts.teamId) {\n    return tryTeam(opts.token, opts.teamId);\n  }\n\n  const userData = await fetchApi({\n    token: opts.token,\n    endpoint: \"/v2/user\",\n  }).then(UserSchema.parse);\n  const { defaultTeamId, username } = userData.user;\n\n  // 1. Try defaultTeamId first\n  if (defaultTeamId) {\n    try {\n      const result = await tryTeam(opts.token, defaultTeamId);\n      // Resolve team slug (best-effort)\n      try {\n        const team = await fetchApi({\n          token: opts.token,\n          endpoint: `/v2/teams/${encodeURIComponent(defaultTeamId)}`,\n        }).then(z.object({ slug: z.string() }).parse);\n        return { ...result, teamSlug: team.slug };\n      } catch {\n        return result;\n      }\n    } catch (e) {\n      if (!isSkippableTeamError(e)) throw e;\n    }\n  }\n\n  // 2. Paginate teams in pages of 20, try best hobby team per page\n  let next: number | null = null;\n  do {\n    const endpoint: string =\n      next === null\n        ? \"/v2/teams?limit=20\"\n        : `/v2/teams?limit=20&until=${next}`;\n    const page = await fetchApi({ token: opts.token, endpoint }).then(\n      TeamsSchema.parse,\n    );\n\n    next = page.pagination.next;\n\n    const hobbyOwnerTeams = page.teams.filter(\n      (t) => t.membership.role === \"OWNER\" && t.billing.plan === \"hobby\",\n    );\n    if (hobbyOwnerTeams.length === 0) {\n      continue;\n    }\n\n    const bestHobbyTeam =\n      hobbyOwnerTeams.find((t) => t.slug === username) ??\n      hobbyOwnerTeams.sort((a, b) => b.updatedAt - a.updatedAt)[0];\n\n    if (bestHobbyTeam && bestHobbyTeam.id !== defaultTeamId) {\n      try {\n        const result = await tryTeam(opts.token, bestHobbyTeam.id);\n        return { ...result, teamSlug: bestHobbyTeam.slug };\n      } catch (e) {\n        if (!isSkippableTeamError(e)) throw e;\n      }\n    }\n  } while (next !== null);\n\n  // 3. Fall back to username as personal team\n  try {\n    const result = await tryTeam(opts.token, username);\n    return { ...result, teamSlug: username };\n  } catch (e) {\n    if (!isSkippableTeamError(e)) throw e;\n  }\n\n  throw new NotOk({\n    statusCode: 403,\n    responseText: `Authenticated as \"${username}\" but none of the available teams allow sandbox creation. Specify a team explicitly with --scope <team-id-or-slug>.`,\n  });\n}\n\n/**\n * Attempts to use a specific team for sandbox operations by checking for\n * (or creating) the default project within that team.\n *\n * @returns The resolved scope if the team is usable.\n * @throws {NotOk} On authorization or other API errors.\n */\nasync function tryTeam(\n  token: string,\n  teamId: string,\n): Promise<{ projectId: string; teamId: string; created: boolean }> {\n  const teamParam = teamId.startsWith(\"team_\")\n    ? `teamId=${encodeURIComponent(teamId)}`\n    : `slug=${encodeURIComponent(teamId)}`;\n\n  let created = false;\n  try {\n    await fetchApi({\n      token,\n      endpoint: `/v2/projects/${encodeURIComponent(DEFAULT_PROJECT_NAME)}?${teamParam}`,\n    });\n  } catch (e) {\n    if (!(e instanceof NotOk) || e.response.statusCode !== 404) {\n      throw e;\n    }\n\n    await fetchApi({\n      token,\n      endpoint: `/v11/projects?${teamParam}`,\n      method: \"POST\",\n      body: JSON.stringify({\n        name: DEFAULT_PROJECT_NAME,\n      }),\n    });\n    created = true;\n  }\n\n  return { projectId: DEFAULT_PROJECT_NAME, teamId, created };\n}\n\n/**\n * Best-effort resolution of team slug and project name for a linked project.\n * Both IDs may be opaque (e.g. `team_xxx`, `prj_xxx`), so we fetch the\n * human-readable names from the API in parallel.\n */\nasync function resolveLinkedProjectSlugs(\n  token: string,\n  teamId: string,\n  projectId: string,\n): Promise<{ teamSlug?: string; projectSlug?: string }> {\n  try {\n    const teamParam = teamId.startsWith(\"team_\")\n      ? `teamId=${encodeURIComponent(teamId)}`\n      : `slug=${encodeURIComponent(teamId)}`;\n    const [teamData, projectData] = await Promise.all([\n      fetchApi({\n        token,\n        endpoint: `/v2/teams/${encodeURIComponent(teamId)}`,\n      }).then(z.object({ slug: z.string() }).parse),\n      fetchApi({\n        token,\n        endpoint: `/v2/projects/${encodeURIComponent(projectId)}?${teamParam}`,\n      }).then(z.object({ name: z.string() }).parse),\n    ]);\n    return { teamSlug: teamData.slug, projectSlug: projectData.name };\n  } catch {\n    return {};\n  }\n}\n"],"mappings":";;;;;;AAKA,MAAM,aAAa,EAAE,OAAO,EAC1B,MAAM,EAAE,OAAO;CACb,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,UAAU,EAAE,QAAQ;CACrB,CAAC,EACH,CAAC;AAEF,MAAM,aAAa,EAAE,OAAO;CAC1B,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,WAAW,EAAE,QAAQ;CACrB,YAAY,EAAE,OAAO,EACnB,MAAM,EAAE,QAAQ,EACjB,CAAC;CACF,SAAS,EAAE,OAAO,EAChB,MAAM,EAAE,QAAQ,EACjB,CAAC;CACH,CAAC;AAEF,MAAM,cAAc,EAAE,OAAO;CAC3B,OAAO,EAAE,MAAM,WAAW;CAC1B,YAAY,EAAE,OAAO;EACnB,OAAO,EAAE,QAAQ;EACjB,MAAM,EAAE,QAAQ,CAAC,UAAU;EAC5B,CAAC;CACH,CAAC;AAEF,MAAM,uBAAuB;;AAG7B,SAAS,qBAAqB,GAAqB;AACjD,QAAO,aAAa,UAAU,EAAE,SAAS,eAAe,OAAO,EAAE,SAAS,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4B3F,eAAsB,WAAW,MAU9B;CACD,MAAM,gBAAgB,MAAM,kBAAkB,KAAK,OAAO,QAAQ,KAAK,CAAC;AACxE,KAAI,eAAe;EACjB,MAAM,QAAQ,MAAM,0BAClB,KAAK,OACL,cAAc,QACd,cAAc,UACf;AACD,SAAO;GAAE,GAAG;GAAe,SAAS;GAAO,GAAG;GAAO;;AAGvD,KAAI,KAAK,OACP,QAAO,QAAQ,KAAK,OAAO,KAAK,OAAO;CAOzC,MAAM,EAAE,eAAe,cAJN,MAAM,SAAS;EAC9B,OAAO,KAAK;EACZ,UAAU;EACX,CAAC,CAAC,KAAK,WAAW,MAAM,EACoB;AAG7C,KAAI,cACF,KAAI;EACF,MAAM,SAAS,MAAM,QAAQ,KAAK,OAAO,cAAc;AAEvD,MAAI;GACF,MAAM,OAAO,MAAM,SAAS;IAC1B,OAAO,KAAK;IACZ,UAAU,aAAa,mBAAmB,cAAc;IACzD,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM;AAC7C,UAAO;IAAE,GAAG;IAAQ,UAAU,KAAK;IAAM;UACnC;AACN,UAAO;;UAEF,GAAG;AACV,MAAI,CAAC,qBAAqB,EAAE,CAAE,OAAM;;CAKxC,IAAIA,OAAsB;AAC1B,IAAG;EACD,MAAMC,WACJ,SAAS,OACL,uBACA,4BAA4B;EAClC,MAAM,OAAO,MAAM,SAAS;GAAE,OAAO,KAAK;GAAO;GAAU,CAAC,CAAC,KAC3D,YAAY,MACb;AAED,SAAO,KAAK,WAAW;EAEvB,MAAM,kBAAkB,KAAK,MAAM,QAChC,MAAM,EAAE,WAAW,SAAS,WAAW,EAAE,QAAQ,SAAS,QAC5D;AACD,MAAI,gBAAgB,WAAW,EAC7B;EAGF,MAAM,gBACJ,gBAAgB,MAAM,MAAM,EAAE,SAAS,SAAS,IAChD,gBAAgB,MAAM,GAAG,MAAM,EAAE,YAAY,EAAE,UAAU,CAAC;AAE5D,MAAI,iBAAiB,cAAc,OAAO,cACxC,KAAI;AAEF,UAAO;IAAE,GADM,MAAM,QAAQ,KAAK,OAAO,cAAc,GAAG;IACtC,UAAU,cAAc;IAAM;WAC3C,GAAG;AACV,OAAI,CAAC,qBAAqB,EAAE,CAAE,OAAM;;UAGjC,SAAS;AAGlB,KAAI;AAEF,SAAO;GAAE,GADM,MAAM,QAAQ,KAAK,OAAO,SAAS;GAC9B,UAAU;GAAU;UACjC,GAAG;AACV,MAAI,CAAC,qBAAqB,EAAE,CAAE,OAAM;;AAGtC,OAAM,IAAI,MAAM;EACd,YAAY;EACZ,cAAc,qBAAqB,SAAS;EAC7C,CAAC;;;;;;;;;AAUJ,eAAe,QACb,OACA,QACkE;CAClE,MAAM,YAAY,OAAO,WAAW,QAAQ,GACxC,UAAU,mBAAmB,OAAO,KACpC,QAAQ,mBAAmB,OAAO;CAEtC,IAAI,UAAU;AACd,KAAI;AACF,QAAM,SAAS;GACb;GACA,UAAU,gBAAgB,mBAAmB,qBAAqB,CAAC,GAAG;GACvE,CAAC;UACK,GAAG;AACV,MAAI,EAAE,aAAa,UAAU,EAAE,SAAS,eAAe,IACrD,OAAM;AAGR,QAAM,SAAS;GACb;GACA,UAAU,iBAAiB;GAC3B,QAAQ;GACR,MAAM,KAAK,UAAU,EACnB,MAAM,sBACP,CAAC;GACH,CAAC;AACF,YAAU;;AAGZ,QAAO;EAAE,WAAW;EAAsB;EAAQ;EAAS;;;;;;;AAQ7D,eAAe,0BACb,OACA,QACA,WACsD;AACtD,KAAI;EACF,MAAM,YAAY,OAAO,WAAW,QAAQ,GACxC,UAAU,mBAAmB,OAAO,KACpC,QAAQ,mBAAmB,OAAO;EACtC,MAAM,CAAC,UAAU,eAAe,MAAM,QAAQ,IAAI,CAChD,SAAS;GACP;GACA,UAAU,aAAa,mBAAmB,OAAO;GAClD,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAC7C,SAAS;GACP;GACA,UAAU,gBAAgB,mBAAmB,UAAU,CAAC,GAAG;GAC5D,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAC9C,CAAC;AACF,SAAO;GAAE,UAAU,SAAS;GAAM,aAAa,YAAY;GAAM;SAC3D;AACN,SAAO,EAAE"}