self-bench 0.3.3 → 0.3.4

package/dist/vercel-profile.js

@@ -0,0 +1,244 @@
+import { randomUUID } from "node:crypto";
+import { chmod, lstat, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { homedir } from "node:os";
+import { join, resolve } from "node:path";
+import { z } from "zod";
+import { parseSandboxTimeoutCapText, STANDARD_VERCEL_TIMEOUT_CAP_MS } from "./sandbox-timeout.js";
+const CONFIG_FILE = "config.json";
+const CREDENTIALS_FILE = "credentials.json";
+const PRIVATE_DIRECTORY_MODE = 0o700;
+const PRIVATE_FILE_MODE = 0o600;
+const profileNameSchema = z
+    .string()
+    .trim()
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/, {
+    error: "Vercel profile name must use 1-64 letters, digits, dots, underscores, or hyphens",
+});
+const digestPinnedImageSchema = z
+    .string()
+    .regex(/^[^@\s]+@sha256:[0-9a-f]{64}$/i, "expected a digest-pinned VCR image");
+export const vercelProfileSchema = z
+    .object({
+    teamId: z.string().trim().min(1),
+    teamSlug: z.string().trim().min(1),
+    teamName: z.string().trim().min(1),
+    projectId: z.string().trim().min(1),
+    projectName: z.string().trim().min(1),
+    vcrRepository: z.string().trim().min(1),
+    image: digestPinnedImageSchema,
+    runtimeFingerprint: z.string().regex(/^[0-9a-f]{64}$/),
+    timeoutCapMs: z.number().int().min(100).max(STANDARD_VERCEL_TIMEOUT_CAP_MS),
+    capabilityCheckedAt: z.iso.datetime(),
+})
+    .strict();
+const configSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    activeVercelProfile: profileNameSchema.optional(),
+    vercelProfiles: z.record(profileNameSchema, vercelProfileSchema),
+})
+    .strict();
+const credentialsSchema = z
+    .object({
+    schemaVersion: z.literal(1),
+    vercelProfiles: z.record(profileNameSchema, z.object({ token: z.string().trim().min(1) }).strict()),
+})
+    .strict();
+export function selfBenchConfigDirectory(environment = process.env) {
+    const override = environment.SELFBENCH_CONFIG_DIR?.trim();
+    return resolve(override || join(homedir(), ".selfbench"));
+}
+export function validateVercelProfileName(value) {
+    return profileNameSchema.parse(value);
+}
+export async function loadVercelProfileData(directory = selfBenchConfigDirectory()) {
+    const mutable = await loadMutableProfileData(directory);
+    return {
+        ...(mutable.activeVercelProfile ? { activeVercelProfile: mutable.activeVercelProfile } : {}),
+        profiles: mutable.profiles,
+        tokens: mutable.tokens,
+    };
+}
+export async function saveVercelProfile(input) {
+    const directory = resolve(input.directory ?? selfBenchConfigDirectory());
+    const profileName = validateVercelProfileName(input.profileName);
+    const token = input.token.trim();
+    if (!token) {
+        throw new Error("Vercel access token must not be blank");
+    }
+    const profile = vercelProfileSchema.parse(input.profile);
+    await ensurePrivateDirectory(directory);
+    const existing = await loadMutableProfileData(directory);
+    const nextCredentials = credentialsSchema.parse({
+        schemaVersion: 1,
+        vercelProfiles: {
+            ...Object.fromEntries(Object.entries(existing.tokens).map(([name, existingToken]) => [
+                name,
+                { token: existingToken },
+            ])),
+            [profileName]: { token },
+        },
+    });
+    const nextConfig = configSchema.parse({
+        schemaVersion: 1,
+        activeVercelProfile: profileName,
+        vercelProfiles: { ...existing.profiles, [profileName]: profile },
+    });
+    // Credentials are written first. A crash can leave an unreferenced token, but
+    // never an active profile whose credential has not reached disk.
+    await writePrivateJson(join(directory, CREDENTIALS_FILE), nextCredentials);
+    await writePrivateJson(join(directory, CONFIG_FILE), nextConfig);
+}
+export async function applyVercelProfile(environment, requestedProfile) {
+    const result = { ...environment };
+    const hasCompleteEnvironment = requiredEnvironmentKeys.every((key) => result[key]?.trim());
+    if (hasCompleteEnvironment && requestedProfile === undefined) {
+        return result;
+    }
+    const data = await loadVercelProfileData(selfBenchConfigDirectory(environment));
+    const profileName = selectProfileName(data, requestedProfile);
+    const profile = data.profiles[profileName];
+    const token = data.tokens[profileName];
+    if (!profile || !token) {
+        throw new Error(`Vercel profile "${profileName}" is incomplete; rerun self-bench setup vercel --profile ${profileName}`);
+    }
+    assertCompatibleOverride("VERCEL_TEAM_ID", result.VERCEL_TEAM_ID, profile.teamId);
+    assertCompatibleOverride("VERCEL_PROJECT_ID", result.VERCEL_PROJECT_ID, profile.projectId);
+    result.VERCEL_TOKEN = result.VERCEL_TOKEN?.trim() || token;
+    result.VERCEL_TEAM_ID = result.VERCEL_TEAM_ID?.trim() || profile.teamId;
+    result.VERCEL_PROJECT_ID = result.VERCEL_PROJECT_ID?.trim() || profile.projectId;
+    result.SELFBENCH_VERCEL_IMAGE = result.SELFBENCH_VERCEL_IMAGE?.trim() || profile.image;
+    result.SELFBENCH_VERCEL_TIMEOUT_CAP = resolveProfileTimeoutCap(result.SELFBENCH_VERCEL_TIMEOUT_CAP, profile.timeoutCapMs);
+    return result;
+}
+export function profileFilePaths(directory = selfBenchConfigDirectory()) {
+    return {
+        config: join(directory, CONFIG_FILE),
+        credentials: join(directory, CREDENTIALS_FILE),
+    };
+}
+const requiredEnvironmentKeys = [
+    "VERCEL_TOKEN",
+    "VERCEL_TEAM_ID",
+    "VERCEL_PROJECT_ID",
+    "SELFBENCH_VERCEL_IMAGE",
+];
+function selectProfileName(data, requestedProfile) {
+    if (requestedProfile !== undefined) {
+        return validateVercelProfileName(requestedProfile);
+    }
+    if (data.activeVercelProfile) {
+        return data.activeVercelProfile;
+    }
+    const names = Object.keys(data.profiles);
+    if (names.length === 1 && names[0]) {
+        return names[0];
+    }
+    throw new Error("Vercel is not configured; run self-bench setup vercel or provide VERCEL_TOKEN, VERCEL_TEAM_ID, VERCEL_PROJECT_ID, and SELFBENCH_VERCEL_IMAGE");
+}
+function resolveProfileTimeoutCap(value, verifiedCapMs) {
+    const override = value?.trim();
+    if (!override) {
+        return `${verifiedCapMs}ms`;
+    }
+    const parsed = parseSandboxTimeoutCapText(override);
+    if (parsed === undefined || !Number.isInteger(parsed) || parsed < 100 || parsed > verifiedCapMs) {
+        throw new Error(`SELFBENCH_VERCEL_TIMEOUT_CAP must be between 100ms and the selected profile's verified ${verifiedCapMs}ms ceiling`);
+    }
+    return override;
+}
+function assertCompatibleOverride(key, value, expected) {
+    const override = value?.trim();
+    if (override && override !== expected) {
+        throw new Error(`${key} does not match the selected Vercel profile; provide the complete Vercel environment instead of mixing project scopes`);
+    }
+}
+async function loadMutableProfileData(directory) {
+    await assertDirectoryIfPresent(directory);
+    const paths = profileFilePaths(directory);
+    const [rawConfig, rawCredentials] = await Promise.all([
+        readPrivateJson(paths.config),
+        readPrivateJson(paths.credentials),
+    ]);
+    const config = parseProfileDocument(paths.config, rawConfig, configSchema);
+    const credentials = parseProfileDocument(paths.credentials, rawCredentials, credentialsSchema);
+    return {
+        ...(config?.activeVercelProfile ? { activeVercelProfile: config.activeVercelProfile } : {}),
+        profiles: { ...(config?.vercelProfiles ?? {}) },
+        tokens: Object.fromEntries(Object.entries(credentials?.vercelProfiles ?? {}).map(([name, value]) => [name, value.token])),
+    };
+}
+function parseProfileDocument(path, value, schema) {
+    if (value === undefined) {
+        return undefined;
+    }
+    try {
+        return schema.parse(value);
+    }
+    catch (error) {
+        throw new Error(`SelfBench profile file has an incompatible format: ${path}. Move the file or set SELFBENCH_CONFIG_DIR to another directory.`, { cause: error });
+    }
+}
+async function assertDirectoryIfPresent(directory) {
+    let stats;
+    try {
+        stats = await lstat(directory);
+    }
+    catch (error) {
+        if (isFileNotFound(error)) {
+            return;
+        }
+        throw error;
+    }
+    if (!stats.isDirectory() || stats.isSymbolicLink()) {
+        throw new Error(`SelfBench config path must be a directory, not a file or symlink: ${directory}`);
+    }
+}
+async function ensurePrivateDirectory(directory) {
+    await assertDirectoryIfPresent(directory);
+    await mkdir(directory, { recursive: true, mode: PRIVATE_DIRECTORY_MODE });
+    await chmod(directory, PRIVATE_DIRECTORY_MODE);
+}
+async function readPrivateJson(path) {
+    let stats;
+    try {
+        stats = await lstat(path);
+    }
+    catch (error) {
+        if (isFileNotFound(error)) {
+            return undefined;
+        }
+        throw error;
+    }
+    if (!stats.isFile() || stats.isSymbolicLink()) {
+        throw new Error(`SelfBench profile path must be a regular file: ${path}`);
+    }
+    if ((stats.mode & 0o077) !== 0) {
+        throw new Error(`SelfBench profile file must be owner-only; run chmod 600 ${path}`);
+    }
+    try {
+        return JSON.parse(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        throw new Error(`Unable to parse SelfBench profile file ${path}`, { cause: error });
+    }
+}
+async function writePrivateJson(path, value) {
+    const temporary = `${path}.${randomUUID()}.tmp`;
+    try {
+        await writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, {
+            encoding: "utf8",
+            flag: "wx",
+            mode: PRIVATE_FILE_MODE,
+        });
+        await rename(temporary, path);
+        await chmod(path, PRIVATE_FILE_MODE);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+function isFileNotFound(error) {
+    return error instanceof Error && "code" in error && error.code === "ENOENT";
+}
+//# sourceMappingURL=vercel-profile.js.map

package/dist/vercel-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-profile.js","sourceRoot":"","sources":["../src/vercel-profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAElG,MAAM,WAAW,GAAG,aAAa,CAAC;AAClC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,EAAE;KACR,IAAI,EAAE;KACN,KAAK,CAAC,mCAAmC,EAAE;IAC1C,KAAK,EAAE,kFAAkF;CAC1F,CAAC,CAAC;AAEL,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,EAAE;KACR,KAAK,CAAC,gCAAgC,EAAE,oCAAoC,CAAC,CAAC;AAEjF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,KAAK,EAAE,uBAAuB;IAC9B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC;IAC3E,mBAAmB,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,YAAY,GAAG,CAAC;KACnB,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,mBAAmB,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACjD,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,CACtB,iBAAiB,EACjB,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CACvD;CACF,CAAC;KACD,MAAM,EAAE,CAAC;AAcZ,MAAM,UAAU,wBAAwB,CAAC,cAAiC,OAAO,CAAC,GAAG;IACnF,MAAM,QAAQ,GAAG,WAAW,CAAC,oBAAoB,EAAE,IAAI,EAAE,CAAC;IAC1D,OAAO,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,SAAS,GAAG,wBAAwB,EAAE;IAEtC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAKvC;IACC,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,wBAAwB,EAAE,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,yBAAyB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,CAAC;QAC9C,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE;YACd,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,CAAC;gBAC7D,IAAI;gBACJ,EAAE,KAAK,EAAE,aAAa,EAAE;aACzB,CAAC,CACH;YACD,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE;SACzB;KACF,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC;QACpC,aAAa,EAAE,CAAC;QAChB,mBAAmB,EAAE,WAAW;QAChC,cAAc,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE;KACjE,CAAC,CAAC;IAEH,8EAA8E;IAC9E,iEAAiE;IACjE,MAAM,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,EAAE,eAAe,CAAC,CAAC;IAC3E,MAAM,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAA8B,EAC9B,gBAAyB;IAEzB,MAAM,MAAM,GAAG,EAAE,GAAG,WAAW,EAAE,CAAC;IAClC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,IAAI,sBAAsB,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC7D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,mBAAmB,WAAW,4DAA4D,WAAW,EAAE,CACxG,CAAC;IACJ,CAAC;IACD,wBAAwB,CAAC,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF,wBAAwB,CAAC,mBAAmB,EAAE,MAAM,CAAC,iBAAiB,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAE3F,MAAM,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC;IAC3D,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC;IACxE,MAAM,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,SAAS,CAAC;IACjF,MAAM,CAAC,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC;IACvF,MAAM,CAAC,4BAA4B,GAAG,wBAAwB,CAC5D,MAAM,CAAC,4BAA4B,EACnC,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAS,GAAG,wBAAwB,EAAE;IAIrE,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC;QACpC,WAAW,EAAE,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAG;IAC9B,cAAc;IACd,gBAAgB;IAChB,mBAAmB;IACnB,wBAAwB;CAChB,CAAC;AAEX,SAAS,iBAAiB,CAAC,IAAuB,EAAE,gBAAyB;IAC3E,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,yBAAyB,CAAC,gBAAgB,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,8IAA8I,CAC/I,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB,EAAE,aAAqB;IAChF,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,GAAG,aAAa,IAAI,CAAC;IAC9B,CAAC;IACD,MAAM,MAAM,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,aAAa,EAAE,CAAC;QAChG,MAAM,IAAI,KAAK,CACb,0FAA0F,aAAa,YAAY,CACpH,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,GAAW,EAAE,KAAyB,EAAE,QAAgB;IACxF,MAAM,QAAQ,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,QAAQ,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,uHAAuH,CAC9H,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,SAAiB;IACrD,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC;KACnC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,oBAAoB,CAAC,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC/F,OAAO;QACL,GAAG,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,QAAQ,EAAE,EAAE,GAAG,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE,CAAC,EAAE;QAC/C,MAAM,EAAE,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAC9F;KACF,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAC3B,IAAY,EACZ,KAA0B,EAC1B,MAAoB;IAEpB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,sDAAsD,IAAI,mEAAmE,EAC7H,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,SAAiB;IACvD,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,qEAAqE,SAAS,EAAE,CACjF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,SAAiB;IACrD,MAAM,wBAAwB,CAAC,SAAS,CAAC,CAAC;IAC1C,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,kDAAkD,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0CAA0C,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAc;IAC1D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE;YAChE,QAAQ,EAAE,MAAM;YAChB,IAAI,EAAE,IAAI;YACV,IAAI,EAAE,iBAAiB;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AAC9E,CAAC"}

package/dist/vercel-runtime-image.d.ts

@@ -0,0 +1,51 @@
+import type { CommandOutputHandler } from "./process.js";
+import type { SetupPrompter } from "./terminal-prompts.js";
+import type { SetupReporter } from "./terminal-reporter.js";
+import type { VcrTag } from "./vercel-cli.js";
+export declare const DEFAULT_VCR_REPOSITORY = "selfbench-runtime";
+interface VcrScope {
+    readonly teamSlug: string;
+    readonly projectId: string;
+}
+export interface VercelRuntimeImageCli {
+    repositoryExists(input: VcrScope & {
+        readonly repository: string;
+    }): Promise<boolean>;
+    createRepository(input: VcrScope & {
+        readonly repository: string;
+    }): Promise<void>;
+    listTags(input: VcrScope & {
+        readonly repository: string;
+    }): Promise<readonly VcrTag[]>;
+    inspectTag(input: VcrScope & {
+        readonly repository: string;
+        readonly tag: string;
+    }): Promise<VcrTag | undefined>;
+    buildImage(input: VcrScope & {
+        readonly repository: string;
+        readonly tag: string;
+        readonly projectRoot: string;
+        readonly onOutput?: CommandOutputHandler;
+    }): Promise<void>;
+}
+interface RuntimeImageServices {
+    readonly cli: VercelRuntimeImageCli;
+    readonly prompter: SetupPrompter;
+    readonly reporter: SetupReporter;
+    readonly sleep: (delayMs: number) => Promise<void>;
+}
+export interface VercelRuntimeImage {
+    readonly repository: string;
+    readonly image: string;
+    readonly published: boolean;
+}
+export declare function ensureVercelRuntimeImage(input: {
+    readonly services: RuntimeImageServices;
+    readonly scope: VcrScope;
+    readonly projectRoot: string;
+    readonly fingerprint: string;
+    readonly preferredRepository: string;
+}): Promise<VercelRuntimeImage>;
+export declare function vercelRuntimeFingerprint(projectRoot: string): Promise<string>;
+export {};
+//# sourceMappingURL=vercel-runtime-image.d.ts.map

package/dist/vercel-runtime-image.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-runtime-image.d.ts","sourceRoot":"","sources":["../src/vercel-runtime-image.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAE9C,eAAO,MAAM,sBAAsB,sBAAsB,CAAC;AAO1D,UAAU,QAAQ;IAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,GAAG;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACtF,gBAAgB,CAAC,KAAK,EAAE,QAAQ,GAAG;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnF,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACxF,UAAU,CACR,KAAK,EAAE,QAAQ,GAAG;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/B,UAAU,CACR,KAAK,EAAE,QAAQ,GAAG;QAChB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,CAAC;KAC1C,GACA,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,wBAAsB,wBAAwB,CAAC,KAAK,EAAE;IACpD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA8E9B;AAED,wBAAsB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAenF"}

package/dist/vercel-runtime-image.js

@@ -0,0 +1,123 @@
+import { readFile } from "node:fs/promises";
+import { resolve } from "node:path";
+import { sha256 } from "./hash.js";
+export const DEFAULT_VCR_REPOSITORY = "selfbench-runtime";
+const IMAGE_TAG_PREFIX = "selfbench-";
+const IMAGE_PLATFORM = "linux/amd64";
+const IMAGE_READINESS_TIMEOUT_MS = 15 * 60 * 1_000;
+const IMAGE_POLL_INTERVAL_MS = 5_000;
+export async function ensureVercelRuntimeImage(input) {
+    const { services, scope, projectRoot, fingerprint } = input;
+    const tag = `${IMAGE_TAG_PREFIX}${fingerprint}`;
+    let repository = input.preferredRepository;
+    for (;;) {
+        if (!isValidVcrRepositoryName(repository)) {
+            throw new Error(`Invalid VCR repository name in saved profile: ${repository}`);
+        }
+        const exists = await services.cli.repositoryExists({ ...scope, repository });
+        if (!exists) {
+            try {
+                await services.cli.createRepository({ ...scope, repository });
+                break;
+            }
+            catch (error) {
+                // A concurrent setup or a lost success response can leave the repository
+                // present. Re-inspect it before treating the operation as failed.
+                if (await services.cli.repositoryExists({ ...scope, repository })) {
+                    continue;
+                }
+                throw error;
+            }
+        }
+        const tags = await services.cli.listTags({ ...scope, repository });
+        const compatible = tags.every((candidate) => candidate.tag.startsWith(IMAGE_TAG_PREFIX));
+        if (!compatible) {
+            services.reporter.warn(`VCR repository "${repository}" contains unrelated images. SelfBench will not modify it.`);
+            repository = await requestVcrRepositoryName(services);
+            continue;
+        }
+        const matching = tags.find((candidate) => candidate.tag === tag);
+        if (matching) {
+            if (matching.kind !== "index" &&
+                (matching.status === null || ["ready", "preparing"].includes(matching.status))) {
+                const ready = await services.reporter.task({
+                    pending: "Checking the existing runtime image",
+                    success: "Runtime image ready",
+                    failure: "Runtime image check failed",
+                }, async () => await waitForReadyTag(services, { ...scope, repository, tag }, matching));
+                return {
+                    repository,
+                    image: `${repository}@${ready.manifestDigest}`,
+                    published: false,
+                };
+            }
+            services.reporter.warn(`Existing SelfBench image ${repository}:${tag} is ${tagState(matching)}; rebuilding it.`);
+            break;
+        }
+        break;
+    }
+    const ready = await services.reporter.task({
+        pending: `Building and publishing the ${IMAGE_PLATFORM} runtime image`,
+        success: "Runtime image published",
+        failure: "Runtime image publication failed",
+    }, async (onOutput) => {
+        await services.cli.buildImage({ ...scope, repository, tag, projectRoot, onOutput });
+        return await waitForReadyTag(services, { ...scope, repository, tag });
+    });
+    return {
+        repository,
+        image: `${repository}@${ready.manifestDigest}`,
+        published: true,
+    };
+}
+export async function vercelRuntimeFingerprint(projectRoot) {
+    const dockerfile = await readFile(resolve(projectRoot, "Dockerfile.sandbox"), "utf8");
+    if (/^\s*(?:ADD|COPY)\s/imu.test(dockerfile)) {
+        throw new Error("Dockerfile.sandbox now copies local files; update the VCR fingerprint inputs before publishing");
+    }
+    return sha256(JSON.stringify({
+        schemaVersion: 2,
+        buildProvenance: false,
+        platform: IMAGE_PLATFORM,
+        dockerfile,
+    }));
+}
+async function waitForReadyTag(services, input, initial) {
+    const startedAt = Date.now();
+    let candidate = initial ?? (await services.cli.inspectTag(input));
+    for (;;) {
+        if (candidate?.kind === "index") {
+            throw new Error(`VCR image ${input.repository}:${input.tag} is an OCI index; expected one linux/amd64 manifest`);
+        }
+        if (candidate?.status === "ready") {
+            return candidate;
+        }
+        if (candidate && candidate.status !== null && candidate.status !== "preparing") {
+            throw new Error(`VCR image ${input.repository}:${input.tag} entered status ${candidate.status}`);
+        }
+        if (Date.now() - startedAt >= IMAGE_READINESS_TIMEOUT_MS) {
+            throw new Error(`VCR image ${input.repository}:${input.tag} was not ready within 15 minutes`);
+        }
+        await services.sleep(IMAGE_POLL_INTERVAL_MS);
+        candidate = await services.cli.inspectTag(input);
+    }
+}
+function tagState(tag) {
+    if (tag.kind === "index") {
+        return "an unsupported OCI index";
+    }
+    return tag.status ?? "not yet classified by VCR";
+}
+function isValidVcrRepositoryName(value) {
+    return /^[a-z0-9]+(?:(?:\.|_|__|-+)[a-z0-9]+)*$/.test(value);
+}
+async function requestVcrRepositoryName(services) {
+    for (;;) {
+        const value = (await services.prompter.text("Choose another VCR repository name")).trim();
+        if (isValidVcrRepositoryName(value)) {
+            return value;
+        }
+        services.reporter.warn("VCR repository names require lowercase letters or digits separated by dots, underscores, or hyphens.");
+    }
+}
+//# sourceMappingURL=vercel-runtime-image.js.map

package/dist/vercel-runtime-image.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-runtime-image.js","sourceRoot":"","sources":["../src/vercel-runtime-image.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAMnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAE1D,MAAM,gBAAgB,GAAG,YAAY,CAAC;AACtC,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,0BAA0B,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AACnD,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAqCrC,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAM9C;IACC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IAC5D,MAAM,GAAG,GAAG,GAAG,gBAAgB,GAAG,WAAW,EAAE,CAAC;IAChD,IAAI,UAAU,GAAG,KAAK,CAAC,mBAAmB,CAAC;IAE3C,SAAS,CAAC;QACR,IAAI,CAAC,wBAAwB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,iDAAiD,UAAU,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC9D,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,yEAAyE;gBACzE,kEAAkE;gBAClE,IAAI,MAAM,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;oBAClE,SAAS;gBACX,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,mBAAmB,UAAU,4DAA4D,CAC1F,CAAC;YACF,UAAU,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QACjE,IAAI,QAAQ,EAAE,CAAC;YACb,IACE,QAAQ,CAAC,IAAI,KAAK,OAAO;gBACzB,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAC9E,CAAC;gBACD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACxC;oBACE,OAAO,EAAE,qCAAqC;oBAC9C,OAAO,EAAE,qBAAqB;oBAC9B,OAAO,EAAE,4BAA4B;iBACtC,EACD,KAAK,IAAI,EAAE,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,QAAQ,CAAC,CACrF,CAAC;gBACF,OAAO;oBACL,UAAU;oBACV,KAAK,EAAE,GAAG,UAAU,IAAI,KAAK,CAAC,cAAc,EAAE;oBAC9C,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,4BAA4B,UAAU,IAAI,GAAG,OAAO,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CACzF,CAAC;YACF,MAAM;QACR,CAAC;QACD,MAAM;IACR,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACxC;QACE,OAAO,EAAE,+BAA+B,cAAc,gBAAgB;QACtE,OAAO,EAAE,yBAAyB;QAClC,OAAO,EAAE,kCAAkC;KAC5C,EACD,KAAK,EAAE,QAAQ,EAAE,EAAE;QACjB,MAAM,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpF,OAAO,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;IACxE,CAAC,CACF,CAAC;IACF,OAAO;QACL,UAAU;QACV,KAAK,EAAE,GAAG,UAAU,IAAI,KAAK,CAAC,cAAc,EAAE;QAC9C,SAAS,EAAE,IAAI;KAChB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,WAAmB;IAChE,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;IACtF,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CACX,IAAI,CAAC,SAAS,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,cAAc;QACxB,UAAU;KACX,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,QAA8B,EAC9B,KAAuE,EACvE,OAAgB;IAEhB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,SAAS,GAAG,OAAO,IAAI,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,SAAS,CAAC;QACR,IAAI,SAAS,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,qDAAqD,CAChG,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;YAClC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CACb,aAAa,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,mBAAmB,SAAS,CAAC,MAAM,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,0BAA0B,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,GAAG,kCAAkC,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,QAAQ,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC7C,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,IAAI,2BAA2B,CAAC;AACnD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,QAA8B;IACpE,SAAS,CAAC;QACR,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1F,IAAI,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,sGAAsG,CACvG,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/vercel-setup-probe.d.ts

@@ -0,0 +1,49 @@
+import type { VercelCredentials } from "./config.js";
+export interface VercelCapability {
+    readonly timeoutCapMs: number;
+    readonly timeoutClass: "45m" | "standard";
+    readonly checkedAt: string;
+}
+interface ProbeSandbox {
+    readonly name: string;
+    runCommand(command: string, args: string[], options: {
+        readonly signal?: AbortSignal;
+        readonly timeoutMs?: number;
+    }): Promise<{
+        readonly exitCode: number;
+    }>;
+    delete(options: {
+        readonly signal?: AbortSignal;
+    }): Promise<void>;
+}
+export interface VercelSandboxProbeApi {
+    create(input: {
+        readonly token: string;
+        readonly teamId: string;
+        readonly projectId: string;
+        readonly image: string;
+        readonly name: string;
+        readonly persistent: false;
+        readonly resources: {
+            readonly vcpus: 1;
+        };
+        readonly signal?: AbortSignal;
+        readonly tags: Readonly<Record<string, string>>;
+        readonly timeout: number;
+    }): Promise<ProbeSandbox>;
+    get(input: {
+        readonly token: string;
+        readonly teamId: string;
+        readonly projectId: string;
+        readonly name: string;
+        readonly resume: false;
+        readonly signal?: AbortSignal;
+    }): Promise<ProbeSandbox>;
+}
+export declare function probeVercelCapability(input: {
+    readonly credentials: VercelCredentials;
+    readonly image: string;
+    readonly signal?: AbortSignal;
+}, api?: VercelSandboxProbeApi): Promise<VercelCapability>;
+export {};
+//# sourceMappingURL=vercel-setup-probe.d.ts.map

package/dist/vercel-setup-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-setup-probe.d.ts","sourceRoot":"","sources":["../src/vercel-setup-probe.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAOrD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,KAAK,GAAG,UAAU,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,UAAU,YAAY;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,UAAU,CACR,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACtE,OAAO,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1C,MAAM,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,KAAK,EAAE;QACZ,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;SAAE,CAAC;QAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;QAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAChD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC1B,GAAG,CAAC,KAAK,EAAE;QACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;QACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3B;AAED,wBAAsB,qBAAqB,CACzC,KAAK,EAAE;IACL,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,EACD,GAAG,GAAE,qBAA6C,GACjD,OAAO,CAAC,gBAAgB,CAAC,CAwB3B"}

package/dist/vercel-setup-probe.js

@@ -0,0 +1,151 @@
+import { setTimeout as delay } from "node:timers/promises";
+import { APIError, Sandbox } from "@vercel/sandbox";
+import { HOBBY_VERCEL_TIMEOUT_CAP_MS, STANDARD_VERCEL_TIMEOUT_CAP_MS } from "./sandbox-timeout.js";
+const PROBE_COMMAND_TIMEOUT_MS = 15_000;
+const CLEANUP_TIMEOUT_MS = 60_000;
+const ABSENCE_RETRIES = 3;
+export async function probeVercelCapability(input, api = vercelSandboxProbeApi) {
+    try {
+        await runProbe(input, STANDARD_VERCEL_TIMEOUT_CAP_MS, api);
+        return {
+            timeoutCapMs: STANDARD_VERCEL_TIMEOUT_CAP_MS,
+            timeoutClass: "standard",
+            checkedAt: new Date().toISOString(),
+        };
+    }
+    catch (error) {
+        if (!isFortyFiveMinuteLimit(error)) {
+            throw sanitizeError(error, input.credentials.token);
+        }
+    }
+    try {
+        await runProbe(input, HOBBY_VERCEL_TIMEOUT_CAP_MS, api);
+    }
+    catch (error) {
+        throw sanitizeError(error, input.credentials.token);
+    }
+    return {
+        timeoutCapMs: HOBBY_VERCEL_TIMEOUT_CAP_MS,
+        timeoutClass: "45m",
+        checkedAt: new Date().toISOString(),
+    };
+}
+const vercelSandboxProbeApi = {
+    async create(input) {
+        return await Sandbox.create(input);
+    },
+    async get(input) {
+        return await Sandbox.get(input);
+    },
+};
+async function runProbe(input, timeoutMs, api) {
+    input.signal?.throwIfAborted();
+    const name = `selfbench-setup-${crypto.randomUUID().replaceAll("-", "").slice(0, 20)}`;
+    let sandbox;
+    let primaryError;
+    try {
+        sandbox = await api.create({
+            ...input.credentials,
+            image: input.image,
+            name,
+            persistent: false,
+            resources: { vcpus: 1 },
+            ...(input.signal ? { signal: input.signal } : {}),
+            tags: { selfbench_stage: "setup-probe" },
+            timeout: timeoutMs,
+        });
+        const result = await sandbox.runCommand("true", [], {
+            ...(input.signal ? { signal: input.signal } : {}),
+            timeoutMs: PROBE_COMMAND_TIMEOUT_MS,
+        });
+        if (result.exitCode !== 0) {
+            throw new Error(`Vercel setup probe exited ${result.exitCode}`);
+        }
+    }
+    catch (error) {
+        primaryError = error;
+    }
+    let cleanupError;
+    const status = httpStatus(primaryError);
+    const recoverMissingHandle = sandbox === undefined && primaryError !== undefined && (status === undefined || status >= 500);
+    try {
+        await cleanupProbe(name, sandbox, recoverMissingHandle, input.credentials, api);
+    }
+    catch (error) {
+        cleanupError = error;
+    }
+    if (cleanupError !== undefined) {
+        throw new AggregateError(primaryError === undefined ? [cleanupError] : [primaryError, cleanupError], `Vercel setup probe ${name} could not be deleted cleanly`);
+    }
+    if (primaryError !== undefined) {
+        throw primaryError;
+    }
+}
+async function cleanupProbe(name, sandbox, recoverMissingHandle, credentials, api) {
+    let directDeleteError;
+    if (sandbox) {
+        try {
+            await sandbox.delete({ signal: AbortSignal.timeout(CLEANUP_TIMEOUT_MS) });
+            await confirmAbsent(name, credentials, api);
+            return;
+        }
+        catch (error) {
+            directDeleteError = error;
+        }
+    }
+    else if (!recoverMissingHandle) {
+        return;
+    }
+    try {
+        await confirmAbsent(name, credentials, api);
+    }
+    catch (recoveryError) {
+        throw new AggregateError(directDeleteError === undefined ? [recoveryError] : [directDeleteError, recoveryError], `failed to recover Vercel setup probe ${name} by exact name`);
+    }
+}
+async function confirmAbsent(name, credentials, api) {
+    for (let attempt = 0; attempt < ABSENCE_RETRIES; attempt += 1) {
+        try {
+            const recovered = await api.get({
+                ...credentials,
+                name,
+                resume: false,
+                signal: AbortSignal.timeout(CLEANUP_TIMEOUT_MS),
+            });
+            await recovered.delete({ signal: AbortSignal.timeout(CLEANUP_TIMEOUT_MS) });
+        }
+        catch (error) {
+            if (httpStatus(error) === 404) {
+                return;
+            }
+            throw error;
+        }
+        await delay(250 * (attempt + 1));
+    }
+    throw new Error(`Vercel setup probe ${name} still exists after deletion`);
+}
+function isFortyFiveMinuteLimit(error) {
+    return (httpStatus(error) === 400 &&
+        /`?timeout`?.*(?:should be|must be).*<=\s*45m/i.test(errorDetail(error)));
+}
+function httpStatus(error) {
+    if (error instanceof APIError) {
+        return error.response.status;
+    }
+    if (error && typeof error === "object" && "status" in error && typeof error.status === "number") {
+        return error.status;
+    }
+    return undefined;
+}
+function errorDetail(error) {
+    if (error instanceof APIError) {
+        return [error.message, error.text, JSON.stringify(error.json)].filter(Boolean).join(" ");
+    }
+    return error instanceof Error ? error.message : String(error);
+}
+function sanitizeError(error, token) {
+    const sanitized = new Error(errorDetail(error).replaceAll(token, "[redacted]").slice(0, 2_000));
+    sanitized.name = error instanceof Error ? error.name : "VercelSetupError";
+    return sanitized;
+}
+//# sourceMappingURL=vercel-setup-probe.js.map