self-bench 0.3.3 → 0.3.4

package/dist/vercel-setup-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-setup-probe.js","sourceRoot":"","sources":["../src/vercel-setup-probe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAEpD,OAAO,EAAE,2BAA2B,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AAEnG,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,eAAe,GAAG,CAAC,CAAC;AAyC1B,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAIC,EACD,MAA6B,qBAAqB;IAElD,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,KAAK,EAAE,8BAA8B,EAAE,GAAG,CAAC,CAAC;QAC3D,OAAO;YACL,YAAY,EAAE,8BAA8B;YAC5C,YAAY,EAAE,UAAU;YACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;YACnC,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,CAAC,KAAK,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IACD,OAAO;QACL,YAAY,EAAE,2BAA2B;QACzC,YAAY,EAAE,KAAK;QACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GAA0B;IACnD,KAAK,CAAC,MAAM,CAAC,KAAK;QAChB,OAAO,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,KAAK;QACb,OAAO,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;CACF,CAAC;AAEF,KAAK,UAAU,QAAQ,CACrB,KAIC,EACD,SAAiB,EACjB,GAA0B;IAE1B,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,mBAAmB,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IACvF,IAAI,OAAiC,CAAC;IACtC,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;YACzB,GAAG,KAAK,CAAC,WAAW;YACpB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,IAAI;YACJ,UAAU,EAAE,KAAK;YACjB,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YACvB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,IAAI,EAAE,EAAE,eAAe,EAAE,aAAa,EAAE;YACxC,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE;YAClD,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,SAAS,EAAE,wBAAwB;SACpC,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,YAAqB,CAAC;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,MAAM,oBAAoB,GACxB,OAAO,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACjG,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,cAAc,CACtB,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,EAC1E,sBAAsB,IAAI,+BAA+B,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,YAAY,CAAC;IACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,OAAiC,EACjC,oBAA6B,EAC7B,WAA8B,EAC9B,GAA0B;IAE1B,IAAI,iBAA0B,CAAC;IAC/B,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAC1E,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,iBAAiB,GAAG,KAAK,CAAC;QAC5B,CAAC;IACH,CAAC;SAAM,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACjC,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,aAAa,EAAE,CAAC;QACvB,MAAM,IAAI,cAAc,CACtB,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,aAAa,CAAC,EACtF,wCAAwC,IAAI,gBAAgB,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,WAA8B,EAC9B,GAA0B;IAE1B,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,eAAe,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QAC9D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC;gBAC9B,GAAG,WAAW;gBACd,IAAI;gBACJ,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAC;YACH,MAAM,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC9B,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,8BAA8B,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,CACL,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG;QACzB,+CAA+C,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChG,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,MAAM,SAAS,GAAG,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAChG,SAAS,CAAC,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAC1E,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/vercel-setup.d.ts

@@ -0,0 +1,42 @@
+import type { VercelCredentials } from "./config.js";
+import { type SetupPrompter } from "./terminal-prompts.js";
+import { type SetupReporter } from "./terminal-reporter.js";
+import { type VercelProject, type VercelTeam } from "./vercel-cli.js";
+import { saveVercelProfile, type VercelProfile, type VercelProfileData } from "./vercel-profile.js";
+import { type VercelRuntimeImageCli } from "./vercel-runtime-image.js";
+import { type VercelCapability } from "./vercel-setup-probe.js";
+export interface VercelSetupCli extends VercelRuntimeImageCli {
+    ensureAvailable(): Promise<void>;
+    ensureLoggedIn(): Promise<void>;
+    listTeams(): Promise<readonly VercelTeam[]>;
+    listProjects(teamSlug: string): Promise<readonly VercelProject[]>;
+    createProject(teamSlug: string, projectName: string): Promise<VercelProject>;
+}
+export interface VercelSetupServices {
+    readonly cli: VercelSetupCli;
+    readonly prompter: SetupPrompter;
+    readonly reporter: SetupReporter;
+    readonly interactive: boolean;
+    readonly loadProfiles: (directory: string) => Promise<VercelProfileData>;
+    readonly saveProfile: typeof saveVercelProfile;
+    readonly probe: (input: {
+        readonly credentials: VercelCredentials;
+        readonly image: string;
+        readonly signal?: AbortSignal;
+    }) => Promise<VercelCapability>;
+    readonly sleep: (delayMs: number) => Promise<void>;
+}
+export interface VercelSetupResult {
+    readonly profileName: string;
+    readonly profile: VercelProfile;
+    readonly configDirectory: string;
+    readonly projectCreated: boolean;
+    readonly imagePublished: boolean;
+}
+export declare function setupVercel(options?: {
+    readonly profileName?: string;
+    readonly environment?: NodeJS.ProcessEnv;
+    readonly projectRoot?: string;
+    readonly verbose?: boolean;
+}, providedServices?: VercelSetupServices): Promise<VercelSetupResult>;
+//# sourceMappingURL=vercel-setup.d.ts.map

package/dist/vercel-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-setup.d.ts","sourceRoot":"","sources":["../src/vercel-setup.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAGL,KAAK,aAAa,EAEnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,aAAa,EAAyB,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAa,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACjF,OAAO,EAEL,iBAAiB,EAEjB,KAAK,aAAa,EAClB,KAAK,iBAAiB,EAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,qBAAqB,EAE3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAKvF,MAAM,WAAW,cAAe,SAAQ,qBAAqB;IAC3D,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,SAAS,IAAI,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;IAC5C,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAC;IAClE,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzE,QAAQ,CAAC,WAAW,EAAE,OAAO,iBAAiB,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE;QACtB,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;QACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;KAC/B,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,wBAAsB,WAAW,CAC/B,OAAO,GAAE;IACP,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;CACvB,EACN,gBAAgB,CAAC,EAAE,mBAAmB,GACrC,OAAO,CAAC,iBAAiB,CAAC,CAiJ5B"}

package/dist/vercel-setup.js

@@ -0,0 +1,280 @@
+import { dirname, resolve } from "node:path";
+import { setTimeout as delay } from "node:timers/promises";
+import { fileURLToPath } from "node:url";
+import { isInteractiveTerminal, SetupCanceledError, TerminalPrompter, } from "./terminal-prompts.js";
+import { TerminalSetupReporter } from "./terminal-reporter.js";
+import { VercelCli } from "./vercel-cli.js";
+import { loadVercelProfileData, saveVercelProfile, selfBenchConfigDirectory, validateVercelProfileName, } from "./vercel-profile.js";
+import { DEFAULT_VCR_REPOSITORY, ensureVercelRuntimeImage, vercelRuntimeFingerprint, } from "./vercel-runtime-image.js";
+import { probeVercelCapability } from "./vercel-setup-probe.js";
+const DEFAULT_PROFILE_NAME = "default";
+const DEFAULT_PROJECT_NAME = "selfbench-sandbox";
+export async function setupVercel(options = {}, providedServices) {
+    const services = providedServices ?? defaultServices(options.verbose ?? false);
+    if (!services.interactive) {
+        throw new Error("self-bench setup vercel requires an interactive terminal; unattended environments should set VERCEL_TOKEN, VERCEL_TEAM_ID, VERCEL_PROJECT_ID, SELFBENCH_VERCEL_IMAGE, and optionally SELFBENCH_VERCEL_TIMEOUT_CAP");
+    }
+    services.reporter.intro("Configure Vercel Sandbox");
+    const profileName = validateVercelProfileName(options.profileName ?? DEFAULT_PROFILE_NAME);
+    const environment = options.environment ?? process.env;
+    const configDirectory = selfBenchConfigDirectory(environment);
+    const projectRoot = resolve(options.projectRoot ?? defaultProjectRoot());
+    const existingData = await services.loadProfiles(configDirectory);
+    const existingProfile = existingData.profiles[profileName];
+    const existingToken = existingData.tokens[profileName];
+    const action = await chooseSetupAction(services.prompter, existingProfile, existingToken);
+    await services.cli.ensureAvailable();
+    await services.cli.ensureLoggedIn();
+    const teams = await services.cli.listTeams();
+    if (teams.length === 0) {
+        throw new Error("The Vercel account has no accessible team or personal scope");
+    }
+    let selected;
+    let projectCreated = false;
+    if (action === "change-project" || !existingProfile) {
+        const team = await chooseTeam(services.prompter, teams);
+        const projectSelection = await chooseProject(services, team);
+        selected = { team, project: projectSelection.project };
+        projectCreated = projectSelection.created;
+    }
+    else {
+        selected = await resolveExistingSelection(services.cli, teams, existingProfile);
+    }
+    const fingerprint = await vercelRuntimeFingerprint(projectRoot);
+    const imageResult = await ensureVercelRuntimeImage({
+        services: {
+            cli: services.cli,
+            prompter: services.prompter,
+            reporter: services.reporter,
+            sleep: services.sleep,
+        },
+        scope: { teamSlug: selected.team.slug, projectId: selected.project.id },
+        projectRoot,
+        fingerprint,
+        preferredRepository: action === "change-project" || !existingProfile
+            ? DEFAULT_VCR_REPOSITORY
+            : existingProfile.vcrRepository,
+    });
+    const token = action === "revalidate" && existingToken
+        ? existingToken
+        : await requestProjectToken(services, selected);
+    const credentials = {
+        token,
+        teamId: selected.team.id,
+        projectId: selected.project.id,
+    };
+    const controller = new AbortController();
+    const interrupt = () => controller.abort(new SetupCanceledError());
+    process.once("SIGINT", interrupt);
+    let capability;
+    try {
+        capability = await services.reporter.task({
+            pending: "Verifying Sandbox access and detecting the timeout cap",
+            success: "Sandbox access verified",
+            failure: "Sandbox verification failed",
+        }, async () => {
+            try {
+                return await services.probe({
+                    credentials,
+                    image: imageResult.image,
+                    signal: controller.signal,
+                });
+            }
+            catch (error) {
+                if (controller.signal.aborted) {
+                    throw controller.signal.reason;
+                }
+                throw error;
+            }
+        });
+    }
+    catch (error) {
+        if (controller.signal.aborted) {
+            throw controller.signal.reason;
+        }
+        throw new Error(`Vercel Sandbox verification failed: ${errorMessage(error)}. If the access token expired or has the wrong project scope, rerun setup and paste a new project-scoped token; choose Replace the access token when revalidating an existing profile.`, { cause: error });
+    }
+    finally {
+        process.removeListener("SIGINT", interrupt);
+    }
+    if (capability.timeoutClass === "45m") {
+        services.reporter.warn("This Vercel scope enforces a 45-minute Sandbox limit. SelfBench will cap longer authoring and repair stages at 45 minutes; accepted tasks remain fully validated, but slow candidates may time out and be rejected.");
+        services.reporter.warn("Vercel Hobby usage is intended for personal, non-commercial work. Use a paid team for commercial SelfBench runs.");
+        if (!(await services.prompter.confirm("Continue with the 45-minute compatibility cap?", true))) {
+            services.reporter.cancel("Vercel setup canceled before profile activation.");
+            throw new SetupCanceledError("Vercel setup canceled before profile activation");
+        }
+    }
+    const profile = {
+        teamId: selected.team.id,
+        teamSlug: selected.team.slug,
+        teamName: selected.team.name,
+        projectId: selected.project.id,
+        projectName: selected.project.name,
+        vcrRepository: imageResult.repository,
+        image: imageResult.image,
+        runtimeFingerprint: fingerprint,
+        timeoutCapMs: capability.timeoutCapMs,
+        capabilityCheckedAt: capability.checkedAt,
+    };
+    await services.saveProfile({ directory: configDirectory, profileName, profile, token });
+    services.reporter.finish(`Saved Vercel profile "${profileName}"`, [
+        `Location: ${configDirectory}`,
+        `Project: ${profile.teamSlug}/${profile.projectName}`,
+        `Runtime image: ${imageRepository(profile.image)}`,
+        "Digest:",
+        `  ${imageDigest(profile.image)}`,
+        `Vercel tier: ${timeoutTier(capability.timeoutClass)}`,
+        `Timeout cap: ${formatDuration(profile.timeoutCapMs)}`,
+        "Resources: Project and runtime image remain reusable after self-bench down.",
+    ]);
+    return {
+        profileName,
+        profile,
+        configDirectory,
+        projectCreated,
+        imagePublished: imageResult.published,
+    };
+}
+function defaultServices(verbose) {
+    const reporter = new TerminalSetupReporter({ verbose });
+    return {
+        cli: new VercelCli(),
+        prompter: new TerminalPrompter(),
+        reporter,
+        interactive: isInteractiveTerminal(),
+        loadProfiles: loadVercelProfileData,
+        saveProfile: saveVercelProfile,
+        probe: probeVercelCapability,
+        sleep: async (delayMs) => await delay(delayMs),
+    };
+}
+async function chooseSetupAction(prompter, profile, token) {
+    if (!profile) {
+        return "change-project";
+    }
+    const choices = [
+        ...(token
+            ? [
+                {
+                    value: "revalidate",
+                    label: `Revalidate ${profile.teamSlug}/${profile.projectName}`,
+                    hint: "Recommended",
+                },
+            ]
+            : []),
+        { value: "replace-token", label: "Replace the access token" },
+        { value: "change-project", label: "Choose another team or project" },
+    ];
+    const selected = await prompter.select(`Vercel profile is already configured for ${profile.teamSlug}/${profile.projectName}`, choices, token ? "revalidate" : "replace-token");
+    if (selected !== "revalidate" && selected !== "replace-token" && selected !== "change-project") {
+        throw new Error(`Unsupported Vercel setup action: ${selected}`);
+    }
+    return selected;
+}
+async function chooseTeam(prompter, teams) {
+    const selectedId = await prompter.search("Choose a Vercel team or personal scope", teams.map((team) => ({
+        value: team.id,
+        label: team.name,
+        hint: [
+            team.slug,
+            team.id.startsWith("team_") ? undefined : "personal scope",
+            team.current ? "current" : undefined,
+        ]
+            .filter(Boolean)
+            .join(" · "),
+    })), teams.find(({ current }) => current)?.id);
+    return teams.find(({ id }) => id === selectedId) ?? fail("selected Vercel team disappeared");
+}
+async function chooseProject(services, team) {
+    let projects = await services.cli.listProjects(team.slug);
+    const modes = [
+        ...(projects.length > 0 ? [{ value: "existing", label: "Select an existing project" }] : []),
+        { value: "create", label: "Create a dedicated project", hint: "Recommended" },
+    ];
+    const mode = await services.prompter.select("Choose how to configure the Vercel project", modes, "create");
+    if (mode === "existing") {
+        const projectId = await services.prompter.search("Choose an existing project", projects.map((project) => ({
+            value: project.id,
+            label: project.name,
+            hint: project.id,
+        })));
+        return {
+            project: projects.find(({ id }) => id === projectId) ?? fail("selected Vercel project disappeared"),
+            created: false,
+        };
+    }
+    for (;;) {
+        const name = (await services.prompter.text("New project name", DEFAULT_PROJECT_NAME)).trim();
+        if (!isValidProjectName(name)) {
+            services.reporter.warn("Project names must use 1-100 lowercase letters, digits, dots, underscores, or hyphens and cannot contain three consecutive hyphens.");
+            continue;
+        }
+        if (projects.some((project) => project.name.toLowerCase() === name.toLowerCase())) {
+            services.reporter.warn(`Project name "${name}" is already in use. Choose another name.`);
+            continue;
+        }
+        try {
+            return { project: await services.cli.createProject(team.slug, name), created: true };
+        }
+        catch (error) {
+            projects = await services.cli.listProjects(team.slug);
+            if (projects.some((project) => project.name.toLowerCase() === name.toLowerCase())) {
+                services.reporter.warn(`Project name "${name}" became unavailable. Choose another name.`);
+                continue;
+            }
+            throw new Error(`Unable to create project "${name}": ${errorMessage(error)}`, {
+                cause: error,
+            });
+        }
+    }
+}
+async function resolveExistingSelection(cli, teams, profile) {
+    const team = teams.find(({ id }) => id === profile.teamId);
+    if (!team) {
+        throw new Error(`Saved Vercel team ${profile.teamSlug} is no longer accessible; rerun setup and choose another team`);
+    }
+    const project = (await cli.listProjects(team.slug)).find(({ id }) => id === profile.projectId);
+    if (!project) {
+        throw new Error(`Saved Vercel project ${profile.projectName} is no longer accessible; rerun setup and choose another project`);
+    }
+    return { team, project };
+}
+async function requestProjectToken(services, selected) {
+    services.reporter.message("");
+    services.reporter.message(`Create a Vercel access token for team ${selected.team.name} and restrict it to project ${selected.project.name}:`);
+    services.reporter.message("https://vercel.com/account/settings/tokens");
+    services.reporter.message('A descriptive token name such as "selfbench-local" is recommended.');
+    const token = (await services.prompter.secret("Paste the project-scoped access token")).trim();
+    if (!token) {
+        throw new Error("Vercel access token must not be blank");
+    }
+    return token;
+}
+function isValidProjectName(value) {
+    return /^[a-z0-9._-]{1,100}$/.test(value) && !value.includes("---");
+}
+function formatDuration(timeoutMs) {
+    return timeoutMs % (60 * 60 * 1_000) === 0
+        ? `${timeoutMs / (60 * 60 * 1_000)}h`
+        : `${timeoutMs / (60 * 1_000)}m`;
+}
+function timeoutTier(timeoutClass) {
+    return timeoutClass === "45m" ? "Hobby-compatible" : "Pro/Enterprise-compatible";
+}
+function imageRepository(image) {
+    return image.slice(0, image.lastIndexOf("@"));
+}
+function imageDigest(image) {
+    return image.slice(image.lastIndexOf("@") + 1);
+}
+function defaultProjectRoot() {
+    return resolve(dirname(fileURLToPath(import.meta.url)), "..");
+}
+function errorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function fail(message) {
+    throw new Error(message);
+}
+//# sourceMappingURL=vercel-setup.js.map

package/dist/vercel-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vercel-setup.js","sourceRoot":"","sources":["../src/vercel-setup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAElB,gBAAgB,GACjB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAsB,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,SAAS,EAAuC,MAAM,iBAAiB,CAAC;AACjF,OAAO,EACL,qBAAqB,EACrB,iBAAiB,EACjB,wBAAwB,EAGxB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EAExB,wBAAwB,GACzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAyB,MAAM,yBAAyB,CAAC;AAEvF,MAAM,oBAAoB,GAAG,SAAS,CAAC;AACvC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAiCjD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,UAKI,EAAE,EACN,gBAAsC;IAEtC,MAAM,QAAQ,GAAG,gBAAgB,IAAI,eAAe,CAAC,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mNAAmN,CACpN,CAAC;IACJ,CAAC;IACD,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IACvD,MAAM,eAAe,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC,CAAC;IACzE,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,YAAY,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;IAE1F,MAAM,QAAQ,CAAC,GAAG,CAAC,eAAe,EAAE,CAAC;IACrC,MAAM,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC;IAEpC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;IAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,QAAyB,CAAC;IAC9B,IAAI,cAAc,GAAG,KAAK,CAAC;IAC3B,IAAI,MAAM,KAAK,gBAAgB,IAAI,CAAC,eAAe,EAAE,CAAC;QACpD,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACxD,MAAM,gBAAgB,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7D,QAAQ,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,CAAC;QACvD,cAAc,GAAG,gBAAgB,CAAC,OAAO,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,MAAM,wBAAwB,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC;IAClF,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC;QACjD,QAAQ,EAAE;YACR,GAAG,EAAE,QAAQ,CAAC,GAAG;YACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB;QACD,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,EAAE;QACvE,WAAW;QACX,WAAW;QACX,mBAAmB,EACjB,MAAM,KAAK,gBAAgB,IAAI,CAAC,eAAe;YAC7C,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,eAAe,CAAC,aAAa;KACpC,CAAC,CAAC;IAEH,MAAM,KAAK,GACT,MAAM,KAAK,YAAY,IAAI,aAAa;QACtC,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,MAAM,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG;QAClB,KAAK;QACL,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;QACxB,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE;KAC/B,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,kBAAkB,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAClC,IAAI,UAA4B,CAAC;IACjC,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACvC;YACE,OAAO,EAAE,wDAAwD;YACjE,OAAO,EAAE,yBAAyB;YAClC,OAAO,EAAE,6BAA6B;SACvC,EACD,KAAK,IAAI,EAAE;YACT,IAAI,CAAC;gBACH,OAAO,MAAM,QAAQ,CAAC,KAAK,CAAC;oBAC1B,WAAW;oBACX,KAAK,EAAE,WAAW,CAAC,KAAK;oBACxB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;gBACjC,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;QACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,uCAAuC,YAAY,CAAC,KAAK,CAAC,wLAAwL,EAClP,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,IAAI,UAAU,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QACtC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,qNAAqN,CACtN,CAAC;QACF,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,kHAAkH,CACnH,CAAC;QACF,IACE,CAAC,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,gDAAgD,EAAE,IAAI,CAAC,CAAC,EAC1F,CAAC;YACD,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC;YAC7E,MAAM,IAAI,kBAAkB,CAAC,iDAAiD,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAkB;QAC7B,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE;QACxB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;QAC5B,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI;QAC5B,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE;QAC9B,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI;QAClC,aAAa,EAAE,WAAW,CAAC,UAAU;QACrC,KAAK,EAAE,WAAW,CAAC,KAAK;QACxB,kBAAkB,EAAE,WAAW;QAC/B,YAAY,EAAE,UAAU,CAAC,YAAY;QACrC,mBAAmB,EAAE,UAAU,CAAC,SAAS;KAC1C,CAAC;IACF,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,yBAAyB,WAAW,GAAG,EAAE;QAChE,aAAa,eAAe,EAAE;QAC9B,YAAY,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE;QACrD,kBAAkB,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QAClD,SAAS;QACT,KAAK,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;QACjC,gBAAgB,WAAW,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE;QACtD,gBAAgB,cAAc,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE;QACtD,6EAA6E;KAC9E,CAAC,CAAC;IAEH,OAAO;QACL,WAAW;QACX,OAAO;QACP,eAAe;QACf,cAAc;QACd,cAAc,EAAE,WAAW,CAAC,SAAS;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,QAAQ,GAAG,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,EAAE,IAAI,SAAS,EAAE;QACpB,QAAQ,EAAE,IAAI,gBAAgB,EAAE;QAChC,QAAQ;QACR,WAAW,EAAE,qBAAqB,EAAE;QACpC,YAAY,EAAE,qBAAqB;QACnC,WAAW,EAAE,iBAAiB;QAC9B,KAAK,EAAE,qBAAqB;QAC5B,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC;KAC/C,CAAC;AACJ,CAAC;AAID,KAAK,UAAU,iBAAiB,CAC9B,QAAuB,EACvB,OAAkC,EAClC,KAAyB;IAEzB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,KAAK;YACP,CAAC,CAAC;gBACE;oBACE,KAAK,EAAE,YAAY;oBACnB,KAAK,EAAE,cAAc,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE;oBAC9D,IAAI,EAAE,aAAa;iBACpB;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,0BAA0B,EAAE;QAC7D,EAAE,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,gCAAgC,EAAE;KACrE,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,MAAM,CACpC,4CAA4C,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,WAAW,EAAE,EACrF,OAAO,EACP,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CACvC,CAAC;IACF,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,eAAe,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAuB,EACvB,KAA4B;IAE5B,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,MAAM,CACtC,wCAAwC,EACxC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACnB,KAAK,EAAE,IAAI,CAAC,EAAE;QACd,KAAK,EAAE,IAAI,CAAC,IAAI;QAChB,IAAI,EAAE;YACJ,IAAI,CAAC,IAAI;YACT,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB;YAC1D,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;SACrC;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,KAAK,CAAC;KACf,CAAC,CAAC,EACH,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE,CACzC,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,UAAU,CAAC,IAAI,IAAI,CAAC,kCAAkC,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAA6B,EAC7B,IAAgB;IAEhB,IAAI,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG;QACZ,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,aAAa,EAAE;KAC9E,CAAC;IACF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CACzC,4CAA4C,EAC5C,KAAK,EACL,QAAQ,CACT,CAAC;IACF,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAC9C,4BAA4B,EAC5B,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACzB,KAAK,EAAE,OAAO,CAAC,EAAE;YACjB,KAAK,EAAE,OAAO,CAAC,IAAI;YACnB,IAAI,EAAE,OAAO,CAAC,EAAE;SACjB,CAAC,CAAC,CACJ,CAAC;QACF,OAAO;YACL,OAAO,EACL,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,SAAS,CAAC,IAAI,IAAI,CAAC,qCAAqC,CAAC;YAC5F,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7F,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACpB,qIAAqI,CACtI,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YAClF,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,2CAA2C,CAAC,CAAC;YACzF,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;gBAClF,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,IAAI,4CAA4C,CAAC,CAAC;gBAC1F,SAAS;YACX,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,MAAM,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE;gBAC5E,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,GAAmB,EACnB,KAA4B,EAC5B,OAAsB;IAEtB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,qBAAqB,OAAO,CAAC,QAAQ,+DAA+D,CACrG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,wBAAwB,OAAO,CAAC,WAAW,kEAAkE,CAC9G,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,QAA6B,EAC7B,QAAyB;IAEzB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,OAAO,CACvB,yCAAyC,QAAQ,CAAC,IAAI,CAAC,IAAI,+BAA+B,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CACnH,CAAC;IACF,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC;IACxE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACvC,OAAO,SAAS,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;QACxC,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG;QACrC,CAAC,CAAC,GAAG,SAAS,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC;AACrC,CAAC;AAED,SAAS,WAAW,CAAC,YAA8C;IACjE,OAAO,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,2BAA2B,CAAC;AACnF,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC"}

package/docs/evaluations.md

@@ -16,6 +16,8 @@ tasks/
 
 Exports include repository snapshots, held-out tests, and reference solutions. They are sensitive and unencrypted; keep them private.
 
+The provider that generated an export does not constrain where Harbor runs it. Every task has the same provider-neutral Harbor layout, and `manifest.json` records the generation backend and the Harbor environment used for self-bench's nop/oracle gates. For later coding-agent trials, independently choose `--environment docker` or `--environment modal`. Harbor does not currently provide a Vercel environment; Vercel Sandbox is used only during benchmark generation.
+
 ## Run one task
 
 Extract the export and select a task:

package/docs/operations.md

@@ -25,7 +25,22 @@ self-bench requires GitHub and model credentials:
 
 Existing deployments may continue using ChatGPT subscription authentication by providing both `SELFBENCH_PI_AUTH_JSON` and `SELFBENCH_CODEX_AUTH_JSON`. API-key authentication takes precedence when `OPENAI_API_KEY` is set.
 
-## Execution backends
+Sandbox-provider credentials are separate. Modal accepts its mounted profile or token pair. For a local Vercel worker, `self-bench setup vercel` stores a project-scoped token in an owner-only local profile. Unattended workers use the equivalent `VERCEL_TOKEN`, `VERCEL_TEAM_ID`, and `VERCEL_PROJECT_ID` environment variables. Keep provider credentials on the worker; the API does not need them.
+
+## Execution backends and Harbor
+
+SelfBench uses one provider for discovery, authoring, semantic review, and repair sandboxes. It separately invokes Harbor for nop/oracle validation. Docker and Modal default Harbor to the matching environment. Vercel has no Harbor environment, so `--harbor-environment docker|modal` is mandatory.
+
+```bash
+self-bench up --backend docker                         # Docker + Docker
+self-bench up --backend modal                          # Modal + Modal
+self-bench up --backend vercel --harbor-environment docker
+self-bench up --backend vercel --harbor-environment modal
+self-bench up --backend docker --harbor-environment modal
+self-bench up --backend modal --harbor-environment docker
+```
+
+Use `--modal-config` whenever either side uses Modal. A worker has one fixed pairing; do not run workers with different provider settings on the same Temporal task queue. Run and export metadata record both choices, plus the effective Vercel timeout cap when applicable.
 
 ### Docker
 
@@ -50,10 +65,95 @@ self-bench up --backend modal
 self-bench up --backend modal --modal-config /absolute/path/to/.modal.toml
 ```
 
-`self-bench up` selects both sandbox execution and Harbor validation for the requested backend. Modal mounts `~/.modal.toml` by default; `--modal-config` overrides that path. A secret manager may provide `MODAL_TOKEN_ID` and `MODAL_TOKEN_SECRET` instead. Empty token environment variables are removed at worker startup so they cannot override a valid mounted profile.
+When Modal is used for generation or Harbor, SelfBench mounts `~/.modal.toml` by default; `--modal-config` overrides that path. A secret manager may provide `MODAL_TOKEN_ID` and `MODAL_TOKEN_SECRET` instead. Empty token environment variables are removed at worker startup so they cannot override a valid mounted profile.
 
 Modal defaults to 20 concurrent worker activities. Discovery starts eight independently retryable shards, and candidate slots are continuously refilled. Discovery and authoring stop after eight minutes without process output; review stops after five. Discovery also has a 45-minute per-attempt deadline and up to three attempts per shard.
 
+### Vercel Sandbox
+
+Vercel is a generation backend only; choose Docker or Modal for Harbor. SelfBench supports both Vercel's 45-minute Hobby Sandbox ceiling and the longer paid-team ceiling. Discovery requests 45 minutes, review requests 15 minutes, and authoring and repair request two hours; setup detects the selected project's effective capability and caps every Vercel stage centrally when necessary. Sandbox use, VCR storage, memory, active CPU, and data transfer are metered by Vercel; configure Spend Management before unattended runs. Vercel Hobby use is intended for personal, non-commercial work.
+
+#### Interactive local setup
+
+Install the current Vercel CLI and make sure Docker is available for the runtime-image build:
+
+```bash
+npm install --global vercel@latest
+self-bench setup vercel
+```
+
+Interactive setup keeps long-running publication and capability checks compact, with a live elapsed timer that freezes when each step completes. Use `self-bench setup vercel --verbose` to stream the underlying Vercel CLI and Docker build output; compact mode reveals retained command output automatically when a step fails.
+
+Setup uses Vercel CLI browser login for control-plane selection and VCR publication. It then:
+
+1. shows a searchable team or personal-scope picker;
+2. offers a searchable existing-project picker or creation of a dedicated project;
+3. asks for a project name, defaulting to `selfbench-sandbox`, and retries rather than silently suffixing an unavailable name;
+4. publishes the pinned `Dockerfile.sandbox` runtime to the project's `selfbench-runtime` VCR repository;
+5. prints the Vercel token page and asks for a manually created access token restricted to the selected project, with terminal echo disabled;
+6. creates and immediately deletes a one-vCPU, nonpersistent probe sandbox to verify the token, image, command execution, cleanup, and effective duration ceiling;
+7. activates the profile only after every required check succeeds.
+
+The project does not need a deployment. Its metered use is billed to its owning Vercel scope. CLI login and worker configuration are deliberately separate: CLI login selects and provisions resources, while the project-scoped token plus team and project IDs configure the SelfBench worker. Although the Vercel SDK supports ambient OIDC on Vercel infrastructure, SelfBench does not use it.
+
+Profiles live in `~/.selfbench/config.json`; tokens live separately in `~/.selfbench/credentials.json`. The directory is mode `0700`, both files are mode `0600`, writes are atomic, and displayed setup output never includes the token. Override the directory with `SELFBENCH_CONFIG_DIR` when isolation is needed. To maintain more than one project profile:
+
+```bash
+self-bench setup vercel --profile secondary
+self-bench up --backend vercel --vercel-profile secondary --harbor-environment modal
+```
+
+Without `--vercel-profile`, `self-bench up` uses the active profile most recently saved by setup. Rerunning setup revalidates the existing project and token by default. It fingerprints the exact Dockerfile—including its digest-pinned base and pinned tool defaults—plus the fingerprint schema and target platform; if the matching immutable VCR image is already ready, publication is skipped. A changed runtime produces a new content-derived tag and digest. The final image reference is always digest-pinned, and existing digests are not deleted automatically. If the default VCR repository contains unrelated images, setup leaves it untouched and asks for another name.
+
+When rerunning setup for a named profile, the available actions are:
+
+- **Revalidate** keeps the saved team, project, and token. It verifies current access, reuses a compatible ready image, republishes only if the runtime fingerprint changed, reruns the temporary Sandbox capability probe, and refreshes the saved image digest and timeout cap.
+- **Replace the access token** keeps the saved team and project, requests a new project-scoped token, and activates it only after verification succeeds. It replaces only the locally stored credential; revoke the old token separately in Vercel if necessary.
+- **Choose another team or project** repoints the same local profile name after the new project, image, and token pass verification. It does not delete the previous Vercel project or images. Use a different `--profile` name instead when both configurations should remain available.
+
+If setup is interrupted after creating a project or VCR repository, it reports the failure and leaves the durable resource in place; rerun setup to continue. It never activates a partial profile. Vercel projects and VCR images are reusable across SelfBench runs and persist after `self-bench down`.
+
+#### Start the local worker
+
+```bash
+self-bench up --backend vercel --harbor-environment modal
+# self-bench up --backend vercel --harbor-environment docker
+```
+
+Modal Harbor also needs the Modal profile or token pair. Vercel control credentials are removed from the Harbor child process for both Harbor environments. `self-bench up` resolves the profile, then validates the complete credential triple, digest-pinned image, and timeout cap before starting Compose.
+
+The setup probe records a two-hour effective SelfBench ceiling when the requested two-hour sandbox is accepted. If Vercel returns its exact 45-minute limit response, setup verifies a 45-minute sandbox, explains the impact, and asks before saving that cap. Longer authoring and repair requests then run for at most 45 minutes and return exit 124 on timeout, so only the affected candidate is rejected. Discovery and review retain their shorter requested limits. The effective cap is included in run and export metadata.
+
+#### Environment-only and unattended workers
+
+`self-bench setup vercel` is intentionally interactive. CI and long-running workers can provide the same resolved values through environment variables or a secret manager:
+
+```bash
+export VERCEL_TOKEN=...
+export VERCEL_TEAM_ID=team_...
+export VERCEL_PROJECT_ID=prj_...
+export SELFBENCH_VERCEL_IMAGE='selfbench-runtime@sha256:...'
+export SELFBENCH_VERCEL_TIMEOUT_CAP=2h  # use 45m when that is the verified ceiling
+
+self-bench up --backend vercel --harbor-environment modal
+```
+
+The image must already have been published from `Dockerfile.sandbox` to the same project's VCR as `linux/amd64`. Use the bare repository-plus-digest form shown above; tags and rolling aliases are rejected. VCR repositories are project-scoped by default, so a sandbox in another project cannot use the image unless the repository is explicitly shared. Explicit token and image values take precedence over profile values, and a lower timeout cap may be supplied; an override cannot exceed the profile's verified ceiling. Supplying a complete credential/image environment requires no local profile; partial team or project overrides are rejected rather than combined across scopes.
+
+Vercel defaults to four concurrent worker activities. A standard SelfBench sandbox requests 4 vCPUs, which Vercel pairs with 8 GB of memory, plus 32 GB of ephemeral disk. Unsupported CPU/memory combinations are rejected before allocation. Raise `SELFBENCH_ACTIVITY_CONCURRENCY` only after considering the team's allocation limits and budget. Lower it—often to `1`—when using Docker Harbor on a smaller local machine, because the Vercel-oriented default does not account for local Harbor capacity.
+
+Each sandbox run uses a fresh nonpersistent sandbox (`persistent: false`). SelfBench does not create snapshots or resume stopped sandboxes, and it attempts to delete every sandbox when the run ends. If deletion cannot be confirmed, the activity fails so the cleanup problem remains visible. If the worker crashes before cleanup, compute may continue until the provider timeout; Vercel then discards the filesystem, although the stopped sandbox record may remain for up to 14 days unless manually deleted.
+
+Cancel active workflows and let cleanup finish before stopping the stack.
+
+Common failures:
+
+- A newly changed paid plan may take time to propagate its longer timeout entitlement. Rerun `self-bench setup vercel` to repeat the short-lived capability probe and update the saved cap; if a correctly scoped paid project continues to detect 45 minutes, verify team/project ownership before contacting Vercel Support.
+- `not_found` on create usually means the image belongs to another project or is private and unshared. Prefer the same project and a bare digest reference.
+- `image_not_ready` means VCR has not finished optimizing the `linux/amd64` image.
+- Repeated HTTP 429 allocation failures indicate project/team allocation pressure. The executor honors bounded `Retry-After` retries; reduce activity concurrency if pressure continues.
+- Cleanup errors fail the activity rather than silently leaving reusable state and include the exact `selfbench-...` sandbox name for diagnosis.
+
 ## CLI behavior
 
 `self-bench run` requires an absolute or relative path to a Git checkout whose `origin` is an HTTPS or SSH GitHub URL. It pins `HEAD`; uncommitted content is excluded.
@@ -112,13 +212,20 @@ SelfBench has no remote deletion route. Delete local artifact-volume data or GCS
 | `SELFBENCH_ARTIFACT_DIR` | `.selfbench/artifacts` | Local artifact store |
 | `SELFBENCH_GCS_BUCKET` | — | GCS artifact store |
 | `SELFBENCH_GCS_PREFIX` | `selfbench` | GCS artifact store |
-| `SELFBENCH_EXECUTION_BACKEND` | `docker` | Worker; set by `self-bench up --backend` locally |
-| `SELFBENCH_HARBOR_ENVIRONMENT` | execution backend | Worker; set by `self-bench up --backend` locally |
-| `SELFBENCH_ACTIVITY_CONCURRENCY` | `1` Docker, `20` Modal | Worker |
+| `SELFBENCH_EXECUTION_BACKEND` | `docker` | Worker; `docker`, `modal`, or `vercel` |
+| `SELFBENCH_DOCKER_IMAGE` | `selfbench-sandbox:local` | Docker worker |
+| `SELFBENCH_HARBOR_ENVIRONMENT` | matching Docker/Modal backend | Worker; required as `docker` or `modal` for Vercel |
+| `SELFBENCH_ACTIVITY_CONCURRENCY` | `1` Docker, `20` Modal, `4` Vercel | Worker |
 | `SELFBENCH_MODAL_APP` | `selfbench` | Modal worker |
 | `SELFBENCH_MODAL_ENVIRONMENT` | — | Modal worker |
 | `SELFBENCH_MODAL_IMAGE` | `node:22-bookworm` | Modal worker |
 | `SELFBENCH_MODAL_CONFIG_PATH` | `/dev/null` | Compose host mount; set by `self-bench up --modal-config` locally |
+| `SELFBENCH_VERCEL_IMAGE` | profile or — | Required digest-pinned VCR image for Vercel execution |
+| `SELFBENCH_VERCEL_TIMEOUT_CAP` | `2h` | Vercel worker and API; accepts integer milliseconds or `ms`, `s`, `m`, `h` units |
+| `SELFBENCH_CONFIG_DIR` | `~/.selfbench` | Local CLI profile directory; not needed with a complete Vercel environment |
+| `VERCEL_TOKEN` | profile or unset | Vercel worker; explicit project-scoped access token |
+| `VERCEL_TEAM_ID` | profile or unset | Vercel worker |
+| `VERCEL_PROJECT_ID` | profile or unset | Vercel worker; must be able to resolve the configured image |
 | `SELFBENCH_TEMPORAL_ADDRESS` | `127.0.0.1:7233` | API and worker |
 | `SELFBENCH_TEMPORAL_NAMESPACE` | `default` | API and worker |
 | `SELFBENCH_TASK_QUEUE` | `selfbench-dev` | API and worker |
@@ -157,6 +264,20 @@ OPENAI_API_KEY=...
 
 The worker owns model, GitHub, Modal, and Harbor credentials. Use separate least-privilege service accounts and a secret manager. Grant GCS object access only to the configured prefix, use a TLS-enabled Temporal namespace, and keep API/worker image digests and `SELFBENCH_TASK_QUEUE` identical.
 
+For Vercel generation, replace the execution settings above with:
+
+```text
+SELFBENCH_EXECUTION_BACKEND=vercel
+SELFBENCH_HARBOR_ENVIRONMENT=modal  # or docker
+SELFBENCH_VERCEL_IMAGE=selfbench-runtime@sha256:...
+SELFBENCH_VERCEL_TIMEOUT_CAP=2h     # or the verified 45m ceiling
+VERCEL_TOKEN=...
+VERCEL_TEAM_ID=team_...
+VERCEL_PROJECT_ID=prj_...
+```
+
+Keep the Vercel credential triple on the worker only. A project-scoped token is sufficient when the runtime image belongs to that project. The API must also receive `SELFBENCH_EXECUTION_BACKEND`, `SELFBENCH_HARBOR_ENVIRONMENT`, `SELFBENCH_VERCEL_IMAGE`, and `SELFBENCH_VERCEL_TIMEOUT_CAP` because it stamps the generation backend, Harbor environment, image, and effective timeout cap into each run manifest; it never needs the credential triple.
+
 This repository defines the application boundary, not turnkey cloud infrastructure. Project, region, ingress, IAM, GCS, and Temporal provisioning remain deployment-specific.
 
 ## Security boundary
@@ -166,4 +287,5 @@ This repository defines the application boundary, not turnkey cloud infrastructu
 - Local artifact paths and GCS object names are confined to their configured roots. GCS IAM should enforce the same prefix independently.
 - Sandboxes receive only the selected model credential: `OPENAI_API_KEY` by default, or a stage-specific subscription credential for compatibility deployments.
 - Sandboxes contain both a source checkout and a short-lived model credential. Use SelfBench only with repositories you trust to execute; it is not a malware-analysis service.
-- Docker uses disposable containers and volumes and removes them after normal completion. A host crash can leave resources for an operator to inspect and remove. Modal uses disposable Sandboxes.
+- Docker uses disposable containers and volumes and removes them after normal completion. A host crash can leave resources for an operator to inspect and remove. Modal uses disposable Sandboxes. Vercel uses nonpersistent named sandboxes, attempts permanent deletion after each run, and fails the activity when deletion cannot be confirmed; inspect the project after worker crashes or cleanup failures.
+- Vercel control credentials authenticate only the worker's Sandbox control plane and are stripped before Harbor starts. They are never workload command secrets.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "self-bench",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "Turn completed repository changes into durable, private Harbor evaluations",
   "license": "MIT",
   "repository": {
@@ -59,12 +59,14 @@
     "validate": "bun run check && bun run test && bun run build && bun run verify:package"
   },
   "dependencies": {
+    "@clack/prompts": "1.7.0",
     "@google-cloud/storage": "^7.17.0",
     "@temporalio/activity": "^1.13.2",
     "@temporalio/client": "^1.13.2",
     "@temporalio/common": "^1.13.2",
     "@temporalio/worker": "^1.13.2",
     "@temporalio/workflow": "^1.13.2",
+    "@vercel/sandbox": "3.0.0",
     "modal": "^0.9.0",
     "zod": "^4.1.12"
   },

package/src/agent-smoke-main.ts

@@ -2,6 +2,7 @@
 
 import { parseArgs } from "node:util";
 import { smokeAllAdapters } from "./agent-smoke.js";
+import { isHarborEnvironment } from "./providers.js";
 
 const parsed = parseArgs({
   options: {
@@ -27,8 +28,8 @@ Options:
   -h, --help                 Show this help`);
   process.exit(0);
 }
-const environment = parsed.values.environment;
-if (environment !== "docker" && environment !== "modal") {
+const environment = parsed.values.environment ?? "modal";
+if (!isHarborEnvironment(environment)) {
   throw new Error("--environment must be docker or modal");
 }
 const results = await smokeAllAdapters({

package/src/agent-smoke.ts

@@ -1,7 +1,9 @@
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
+import { harborChildEnvironment } from "./harbor-environment.js";
 import { parallelMap } from "./parallel.js";
 import { runCommand } from "./process.js";
+import type { HarborEnvironment } from "./providers.js";
 
 export const HARBOR_AGENT_ADAPTERS = [
   "oracle",
@@ -48,7 +50,7 @@ export interface AdapterSmokeOptions {
   readonly taskDirectory: string;
   readonly jobsDirectory: string;
   readonly harborPath?: string;
-  readonly environment?: "docker" | "modal";
+  readonly environment?: HarborEnvironment;
   readonly concurrency?: number;
 }
 
@@ -99,7 +101,11 @@ export async function smokeAllAdapters(
           "--yes",
           "--quiet",
         ],
-        { allowFailure: true, timeoutMs: 60 * 60 * 1000 },
+        {
+          allowFailure: true,
+          env: harborChildEnvironment(),
+          timeoutMs: 60 * 60 * 1000,
+        },
       );
       const summary: AdapterSmokeResult = {
         agent,