@vercel/sandbox - npm Package Compare versions

Comparing version 2.0.0-beta.21 to 2.0.0-beta.22

dist/proxy.cjs

+const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
+let jose = require("jose");
+
+//#region src/proxy.ts
+const FORWARDED_HOST_HEADER = "vercel-forwarded-host";
+const FORWARDED_SCHEME_HEADER = "vercel-forwarded-scheme";
+const FORWARDED_PORT_HEADER = "vercel-forwarded-port";
+const FORWARDED_PATH_HEADER = "vercel-forwarded-path";
+const SANDBOX_OIDC_TOKEN_HEADER = "vercel-sandbox-oidc-token";
+const VERCEL_OIDC_HOSTNAME = "oidc.vercel.com";
+const CLOCK_TOLERANCE_SECONDS = 60;
+const jwksCache = /* @__PURE__ */ new Map();
+/**
+* Creates a Web Handler for proxied requests from Vercel Sandboxes using the network policy `forwardURL`
+* option. The provided `handler` is called for each valid proxied request, with the original request
+* alongside extracted metadata used to identify the source sandbox and request details.
+*
+* This function automatically verifies the OIDC token included in proxied requests to ensure the request
+* is legitimate: if invalid, the `invalidRequestHandler` is called (by default, a 403 response is returned).
+*
+* @example
+* ```ts
+* export default {
+*   fetch: defineSandboxProxy(async (request, meta) => {
+*     // meta contains the original host & source team/project/sandbox ids
+*     console.log(meta)
+*
+*     // return a custom response, or proxy upstream:
+*     return await fetch(request)
+*   }, (request, error) => {
+*     // optional, handle any authorization error
+*     return new Response("Forbidden", { status: 403 })
+*   })
+* }
+* ```
+*
+* @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying
+*/
+function defineSandboxProxy(handler, invalidRequestHandler = defaultInvalidRequestHandler) {
+	return async function sandboxProxy(request) {
+		const headers = new Headers(request.headers);
+		const host = headers.get(FORWARDED_HOST_HEADER);
+		const scheme = headers.get(FORWARDED_SCHEME_HEADER);
+		const port = headers.get(FORWARDED_PORT_HEADER);
+		const path = headers.get(FORWARDED_PATH_HEADER);
+		const oidcToken = headers.get(SANDBOX_OIDC_TOKEN_HEADER);
+		headers.delete(FORWARDED_HOST_HEADER);
+		headers.delete(FORWARDED_SCHEME_HEADER);
+		headers.delete(FORWARDED_PORT_HEADER);
+		headers.delete(FORWARDED_PATH_HEADER);
+		headers.delete(SANDBOX_OIDC_TOKEN_HEADER);
+		if (!host || !scheme || !port || !path || !oidcToken) return invalidRequestHandler(request, /* @__PURE__ */ new Error("Missing required proxy headers"));
+		let sanitizedRequest;
+		try {
+			sanitizedRequest = new Request(getProxiedRequestUrl(scheme, host, port, path), {
+				method: request.method,
+				body: request.body,
+				headers,
+				duplex: "half"
+			});
+		} catch {
+			return invalidRequestHandler(new Request(request, { headers }), /* @__PURE__ */ new Error("Invalid proxied request URL"));
+		}
+		sanitizedRequest.headers.set("host", host);
+		try {
+			const originalUrl = normalizeForwardUrl(new URL(request.url), path);
+			const claims = await verifyOidcToken(oidcToken, originalUrl);
+			const meta = getProxyMeta(originalUrl.host, claims);
+			return handler(sanitizedRequest, meta);
+		} catch (error) {
+			return invalidRequestHandler(sanitizedRequest, error instanceof Error ? error : /* @__PURE__ */ new Error("Invalid OIDC token"));
+		}
+	};
+}
+function defaultInvalidRequestHandler() {
+	return new Response("Forbidden", { status: 403 });
+}
+function getProxiedRequestUrl(scheme, host, port, path) {
+	const origin = `${scheme}://${host}:${port}`;
+	return path === "/" ? origin : `${origin}${path}`;
+}
+function normalizeForwardUrl(url, forwardedPath) {
+	const forwardedPathname = stripTrailingPathSlash(new URL(forwardedPath, url.origin).pathname);
+	const normalizedUrl = new URL(url);
+	normalizedUrl.pathname = stripTrailingPathSlash(normalizedUrl.pathname);
+	if (forwardedPathname !== "/" && normalizedUrl.pathname.endsWith(forwardedPathname)) normalizedUrl.pathname = stripTrailingPathSlash(normalizedUrl.pathname.slice(0, -forwardedPathname.length));
+	return normalizedUrl;
+}
+function stripTrailingPathSlash(pathname) {
+	return pathname.replace(/\/+$/, "") || "/";
+}
+function getProxyMeta(host, claims) {
+	const teamId = getClaim(claims, "team_id");
+	const projectId = getClaim(claims, "project_id");
+	const sandboxId = getClaim(claims, "sandbox_id");
+	const sandboxName = getClaim(claims, "sandbox_name") ?? sandboxId;
+	if (!teamId || !projectId || !sandboxId || !sandboxName) throw new Error("Missing required claims in OIDC token");
+	return {
+		host,
+		teamId,
+		projectId,
+		sandboxId,
+		sandboxName
+	};
+}
+async function verifyOidcToken(token, originalUrl) {
+	const issuer = getClaim((0, jose.decodeJwt)(token), "iss");
+	if (!issuer) throw new Error("Missing OIDC issuer");
+	let issuerUrl;
+	try {
+		issuerUrl = new URL(issuer);
+	} catch {
+		throw new Error("Invalid OIDC issuer");
+	}
+	if (issuerUrl.protocol !== "https:" || issuerUrl.hostname !== VERCEL_OIDC_HOSTNAME) throw new Error("Invalid OIDC issuer");
+	const { payload } = await (0, jose.jwtVerify)(token, getJwks(issuer), {
+		audience: getForwardUrlAudience(originalUrl),
+		algorithms: ["RS256"],
+		clockTolerance: CLOCK_TOLERANCE_SECONDS,
+		issuer
+	});
+	return payload;
+}
+function getForwardUrlAudience(url) {
+	const pathname = stripTrailingPathSlash(url.pathname);
+	return pathname === "/" ? url.origin : url.origin + pathname;
+}
+function getJwks(issuer) {
+	const cached = jwksCache.get(issuer);
+	if (cached) return cached;
+	const jwks = (0, jose.createRemoteJWKSet)(new URL(`${issuer.replace(/\/$/, "")}/.well-known/jwks`));
+	jwksCache.set(issuer, jwks);
+	return jwks;
+}
+function getClaim(claims, name) {
+	const value = claims[name];
+	if (typeof value === "string" && value) return value;
+}
+
+//#endregion
+exports.defineSandboxProxy = defineSandboxProxy;
+//# sourceMappingURL=proxy.cjs.map

dist/proxy.cjs.map

+{"version":3,"file":"proxy.cjs","names":["sanitizedRequest: Request","issuerUrl: URL"],"sources":["../src/proxy.ts"],"sourcesContent":["import { createRemoteJWKSet, decodeJwt, jwtVerify } from \"jose\";\n\nconst FORWARDED_HOST_HEADER = \"vercel-forwarded-host\";\nconst FORWARDED_SCHEME_HEADER = \"vercel-forwarded-scheme\";\nconst FORWARDED_PORT_HEADER = \"vercel-forwarded-port\";\nconst FORWARDED_PATH_HEADER = \"vercel-forwarded-path\";\nconst SANDBOX_OIDC_TOKEN_HEADER = \"vercel-sandbox-oidc-token\";\n\nconst VERCEL_OIDC_HOSTNAME = \"oidc.vercel.com\";\nconst CLOCK_TOLERANCE_SECONDS = 60;\n\nconst jwksCache = new Map<string, ReturnType<typeof createRemoteJWKSet>>();\n\nexport interface ProxyMeta {\n  /**\n   * The host of the request as received by this proxy.\n   */\n  host: string;\n  /**\n   * The ID of the team that owns the sandbox that proxied the request.\n   */\n  teamId: string;\n  /**\n   * The ID of the project that owns the sandbox that proxied the request.\n   */\n  projectId: string;\n  /**\n   * The ID of the sandbox that proxied the request.\n   */\n  sandboxId: string;\n  /**\n   * The name of the sandbox that proxied the request, when using persistent sandboxes.\n   */\n  sandboxName: string;\n}\n\nexport type ProxyHandler = (\n  request: Request,\n  meta: ProxyMeta,\n) => Response | Promise<Response>;\n\nexport type InvalidRequestProxyHandler = (\n  request: Request,\n  error: Error,\n) => Response | Promise<Response>;\n\n/**\n * Creates a Web Handler for proxied requests from Vercel Sandboxes using the network policy `forwardURL`\n * option. The provided `handler` is called for each valid proxied request, with the original request\n * alongside extracted metadata used to identify the source sandbox and request details.\n *\n * This function automatically verifies the OIDC token included in proxied requests to ensure the request\n * is legitimate: if invalid, the `invalidRequestHandler` is called (by default, a 403 response is returned).\n *\n * @example\n * ```ts\n * export default {\n *   fetch: defineSandboxProxy(async (request, meta) => {\n *     // meta contains the original host & source team/project/sandbox ids\n *     console.log(meta)\n *\n *     // return a custom response, or proxy upstream:\n *     return await fetch(request)\n *   }, (request, error) => {\n *     // optional, handle any authorization error\n *     return new Response(\"Forbidden\", { status: 403 })\n *   })\n * }\n * ```\n *\n * @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying\n */\nexport function defineSandboxProxy(\n  handler: ProxyHandler,\n  invalidRequestHandler: InvalidRequestProxyHandler = defaultInvalidRequestHandler,\n) {\n  return async function sandboxProxy(request: Request): Promise<Response> {\n    const headers = new Headers(request.headers);\n    const host = headers.get(FORWARDED_HOST_HEADER);\n    const scheme = headers.get(FORWARDED_SCHEME_HEADER);\n    const port = headers.get(FORWARDED_PORT_HEADER);\n    const path = headers.get(FORWARDED_PATH_HEADER);\n    const oidcToken = headers.get(SANDBOX_OIDC_TOKEN_HEADER);\n\n    headers.delete(FORWARDED_HOST_HEADER);\n    headers.delete(FORWARDED_SCHEME_HEADER);\n    headers.delete(FORWARDED_PORT_HEADER);\n    headers.delete(FORWARDED_PATH_HEADER);\n    headers.delete(SANDBOX_OIDC_TOKEN_HEADER);\n\n    if (!host || !scheme || !port || !path || !oidcToken) {\n      return invalidRequestHandler(\n        request,\n        new Error(\"Missing required proxy headers\"),\n      );\n    }\n\n    let sanitizedRequest: Request;\n\n    try {\n      sanitizedRequest = new Request(\n        getProxiedRequestUrl(scheme, host, port, path),\n        {\n          method: request.method,\n          body: request.body,\n          headers,\n          duplex: \"half\",\n        },\n      );\n    } catch {\n      return invalidRequestHandler(\n        new Request(request, { headers }),\n        new Error(\"Invalid proxied request URL\"),\n      );\n    }\n\n    sanitizedRequest.headers.set(\"host\", host);\n\n    try {\n      const originalUrl = normalizeForwardUrl(new URL(request.url), path);\n      const claims = await verifyOidcToken(oidcToken, originalUrl);\n      const meta = getProxyMeta(originalUrl.host, claims);\n\n      return handler(sanitizedRequest, meta);\n    } catch (error) {\n      return invalidRequestHandler(\n        sanitizedRequest,\n        error instanceof Error ? error : new Error(\"Invalid OIDC token\"),\n      );\n    }\n  };\n}\n\nfunction defaultInvalidRequestHandler(): Response {\n  return new Response(\"Forbidden\", { status: 403 });\n}\n\nfunction getProxiedRequestUrl(\n  scheme: string,\n  host: string,\n  port: string,\n  path: string,\n): string {\n  const origin = `${scheme}://${host}:${port}`;\n\n  return path === \"/\" ? origin : `${origin}${path}`;\n}\n\nfunction normalizeForwardUrl(url: URL, forwardedPath: string): URL {\n  const forwardedUrl = new URL(forwardedPath, url.origin);\n  const forwardedPathname = stripTrailingPathSlash(forwardedUrl.pathname);\n  const normalizedUrl = new URL(url);\n  normalizedUrl.pathname = stripTrailingPathSlash(normalizedUrl.pathname);\n\n  if (\n    forwardedPathname !== \"/\" &&\n    normalizedUrl.pathname.endsWith(forwardedPathname)\n  ) {\n    normalizedUrl.pathname = stripTrailingPathSlash(\n      normalizedUrl.pathname.slice(0, -forwardedPathname.length),\n    );\n  }\n\n  return normalizedUrl;\n}\n\nfunction stripTrailingPathSlash(pathname: string): string {\n  return pathname.replace(/\\/+$/, \"\") || \"/\";\n}\n\nfunction getProxyMeta(\n  host: string,\n  claims: Record<string, unknown>,\n): ProxyMeta {\n  const teamId = getClaim(claims, \"team_id\");\n  const projectId = getClaim(claims, \"project_id\");\n  const sandboxId = getClaim(claims, \"sandbox_id\");\n  const sandboxName = getClaim(claims, \"sandbox_name\") ?? sandboxId;\n\n  if (!teamId || !projectId || !sandboxId || !sandboxName) {\n    throw new Error(\"Missing required claims in OIDC token\");\n  }\n\n  return {\n    host,\n    teamId,\n    projectId,\n    sandboxId,\n    sandboxName,\n  };\n}\n\nasync function verifyOidcToken(\n  token: string,\n  originalUrl: URL,\n): Promise<Record<string, unknown>> {\n  const claims = decodeJwt(token);\n  const issuer = getClaim(claims, \"iss\");\n\n  if (!issuer) {\n    throw new Error(\"Missing OIDC issuer\");\n  }\n\n  let issuerUrl: URL;\n\n  try {\n    issuerUrl = new URL(issuer);\n  } catch {\n    throw new Error(\"Invalid OIDC issuer\");\n  }\n\n  if (\n    issuerUrl.protocol !== \"https:\" ||\n    issuerUrl.hostname !== VERCEL_OIDC_HOSTNAME\n  ) {\n    throw new Error(\"Invalid OIDC issuer\");\n  }\n\n  const { payload } = await jwtVerify(token, getJwks(issuer), {\n    audience: getForwardUrlAudience(originalUrl),\n    algorithms: [\"RS256\"],\n    clockTolerance: CLOCK_TOLERANCE_SECONDS,\n    issuer,\n  });\n\n  return payload;\n}\n\nfunction getForwardUrlAudience(url: URL): string {\n  const pathname = stripTrailingPathSlash(url.pathname);\n\n  return pathname === \"/\" ? url.origin : url.origin + pathname;\n}\n\nfunction getJwks(issuer: string): ReturnType<typeof createRemoteJWKSet> {\n  const cached = jwksCache.get(issuer);\n\n  if (cached) {\n    return cached;\n  }\n\n  const jwks = createRemoteJWKSet(\n    new URL(`${issuer.replace(/\\/$/, \"\")}/.well-known/jwks`),\n  );\n\n  jwksCache.set(issuer, jwks);\n\n  return jwks;\n}\n\nfunction getClaim(\n  claims: Record<string, unknown>,\n  name: string,\n): string | undefined {\n  const value = claims[name];\n\n  if (typeof value === \"string\" && value) {\n    return value;\n  }\n}\n"],"mappings":";;;;AAEA,MAAM,wBAAwB;AAC9B,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAC9B,MAAM,4BAA4B;AAElC,MAAM,uBAAuB;AAC7B,MAAM,0BAA0B;AAEhC,MAAM,4BAAY,IAAI,KAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6D1E,SAAgB,mBACd,SACA,wBAAoD,8BACpD;AACA,QAAO,eAAe,aAAa,SAAqC;EACtE,MAAM,UAAU,IAAI,QAAQ,QAAQ,QAAQ;EAC5C,MAAM,OAAO,QAAQ,IAAI,sBAAsB;EAC/C,MAAM,SAAS,QAAQ,IAAI,wBAAwB;EACnD,MAAM,OAAO,QAAQ,IAAI,sBAAsB;EAC/C,MAAM,OAAO,QAAQ,IAAI,sBAAsB;EAC/C,MAAM,YAAY,QAAQ,IAAI,0BAA0B;AAExD,UAAQ,OAAO,sBAAsB;AACrC,UAAQ,OAAO,wBAAwB;AACvC,UAAQ,OAAO,sBAAsB;AACrC,UAAQ,OAAO,sBAAsB;AACrC,UAAQ,OAAO,0BAA0B;AAEzC,MAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,UACzC,QAAO,sBACL,yBACA,IAAI,MAAM,iCAAiC,CAC5C;EAGH,IAAIA;AAEJ,MAAI;AACF,sBAAmB,IAAI,QACrB,qBAAqB,QAAQ,MAAM,MAAM,KAAK,EAC9C;IACE,QAAQ,QAAQ;IAChB,MAAM,QAAQ;IACd;IACA,QAAQ;IACT,CACF;UACK;AACN,UAAO,sBACL,IAAI,QAAQ,SAAS,EAAE,SAAS,CAAC,kBACjC,IAAI,MAAM,8BAA8B,CACzC;;AAGH,mBAAiB,QAAQ,IAAI,QAAQ,KAAK;AAE1C,MAAI;GACF,MAAM,cAAc,oBAAoB,IAAI,IAAI,QAAQ,IAAI,EAAE,KAAK;GACnE,MAAM,SAAS,MAAM,gBAAgB,WAAW,YAAY;GAC5D,MAAM,OAAO,aAAa,YAAY,MAAM,OAAO;AAEnD,UAAO,QAAQ,kBAAkB,KAAK;WAC/B,OAAO;AACd,UAAO,sBACL,kBACA,iBAAiB,QAAQ,wBAAQ,IAAI,MAAM,qBAAqB,CACjE;;;;AAKP,SAAS,+BAAyC;AAChD,QAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;;AAGnD,SAAS,qBACP,QACA,MACA,MACA,MACQ;CACR,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,GAAG;AAEtC,QAAO,SAAS,MAAM,SAAS,GAAG,SAAS;;AAG7C,SAAS,oBAAoB,KAAU,eAA4B;CAEjE,MAAM,oBAAoB,uBADL,IAAI,IAAI,eAAe,IAAI,OAAO,CACO,SAAS;CACvE,MAAM,gBAAgB,IAAI,IAAI,IAAI;AAClC,eAAc,WAAW,uBAAuB,cAAc,SAAS;AAEvE,KACE,sBAAsB,OACtB,cAAc,SAAS,SAAS,kBAAkB,CAElD,eAAc,WAAW,uBACvB,cAAc,SAAS,MAAM,GAAG,CAAC,kBAAkB,OAAO,CAC3D;AAGH,QAAO;;AAGT,SAAS,uBAAuB,UAA0B;AACxD,QAAO,SAAS,QAAQ,QAAQ,GAAG,IAAI;;AAGzC,SAAS,aACP,MACA,QACW;CACX,MAAM,SAAS,SAAS,QAAQ,UAAU;CAC1C,MAAM,YAAY,SAAS,QAAQ,aAAa;CAChD,MAAM,YAAY,SAAS,QAAQ,aAAa;CAChD,MAAM,cAAc,SAAS,QAAQ,eAAe,IAAI;AAExD,KAAI,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,YAC1C,OAAM,IAAI,MAAM,wCAAwC;AAG1D,QAAO;EACL;EACA;EACA;EACA;EACA;EACD;;AAGH,eAAe,gBACb,OACA,aACkC;CAElC,MAAM,SAAS,6BADU,MAAM,EACC,MAAM;AAEtC,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,sBAAsB;CAGxC,IAAIC;AAEJ,KAAI;AACF,cAAY,IAAI,IAAI,OAAO;SACrB;AACN,QAAM,IAAI,MAAM,sBAAsB;;AAGxC,KACE,UAAU,aAAa,YACvB,UAAU,aAAa,qBAEvB,OAAM,IAAI,MAAM,sBAAsB;CAGxC,MAAM,EAAE,YAAY,0BAAgB,OAAO,QAAQ,OAAO,EAAE;EAC1D,UAAU,sBAAsB,YAAY;EAC5C,YAAY,CAAC,QAAQ;EACrB,gBAAgB;EAChB;EACD,CAAC;AAEF,QAAO;;AAGT,SAAS,sBAAsB,KAAkB;CAC/C,MAAM,WAAW,uBAAuB,IAAI,SAAS;AAErD,QAAO,aAAa,MAAM,IAAI,SAAS,IAAI,SAAS;;AAGtD,SAAS,QAAQ,QAAuD;CACtE,MAAM,SAAS,UAAU,IAAI,OAAO;AAEpC,KAAI,OACF,QAAO;CAGT,MAAM,oCACJ,IAAI,IAAI,GAAG,OAAO,QAAQ,OAAO,GAAG,CAAC,mBAAmB,CACzD;AAED,WAAU,IAAI,QAAQ,KAAK;AAE3B,QAAO;;AAGT,SAAS,SACP,QACA,MACoB;CACpB,MAAM,QAAQ,OAAO;AAErB,KAAI,OAAO,UAAU,YAAY,MAC/B,QAAO"}

dist/proxy.d.cts

+//#region src/proxy.d.ts
+interface ProxyMeta {
+  /**
+   * The host of the request as received by this proxy.
+   */
+  host: string;
+  /**
+   * The ID of the team that owns the sandbox that proxied the request.
+   */
+  teamId: string;
+  /**
+   * The ID of the project that owns the sandbox that proxied the request.
+   */
+  projectId: string;
+  /**
+   * The ID of the sandbox that proxied the request.
+   */
+  sandboxId: string;
+  /**
+   * The name of the sandbox that proxied the request, when using persistent sandboxes.
+   */
+  sandboxName: string;
+}
+type ProxyHandler = (request: Request, meta: ProxyMeta) => Response | Promise<Response>;
+type InvalidRequestProxyHandler = (request: Request, error: Error) => Response | Promise<Response>;
+/**
+ * Creates a Web Handler for proxied requests from Vercel Sandboxes using the network policy `forwardURL`
+ * option. The provided `handler` is called for each valid proxied request, with the original request
+ * alongside extracted metadata used to identify the source sandbox and request details.
+ *
+ * This function automatically verifies the OIDC token included in proxied requests to ensure the request
+ * is legitimate: if invalid, the `invalidRequestHandler` is called (by default, a 403 response is returned).
+ *
+ * @example
+ * ```ts
+ * export default {
+ *   fetch: defineSandboxProxy(async (request, meta) => {
+ *     // meta contains the original host & source team/project/sandbox ids
+ *     console.log(meta)
+ *
+ *     // return a custom response, or proxy upstream:
+ *     return await fetch(request)
+ *   }, (request, error) => {
+ *     // optional, handle any authorization error
+ *     return new Response("Forbidden", { status: 403 })
+ *   })
+ * }
+ * ```
+ *
+ * @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying
+ */
+declare function defineSandboxProxy(handler: ProxyHandler, invalidRequestHandler?: InvalidRequestProxyHandler): (request: Request) => Promise<Response>;
+//#endregion
+export { InvalidRequestProxyHandler, ProxyHandler, ProxyMeta, defineSandboxProxy };
+//# sourceMappingURL=proxy.d.cts.map

dist/proxy.d.ts

+//#region src/proxy.d.ts
+interface ProxyMeta {
+  /**
+   * The host of the request as received by this proxy.
+   */
+  host: string;
+  /**
+   * The ID of the team that owns the sandbox that proxied the request.
+   */
+  teamId: string;
+  /**
+   * The ID of the project that owns the sandbox that proxied the request.
+   */
+  projectId: string;
+  /**
+   * The ID of the sandbox that proxied the request.
+   */
+  sandboxId: string;
+  /**
+   * The name of the sandbox that proxied the request, when using persistent sandboxes.
+   */
+  sandboxName: string;
+}
+type ProxyHandler = (request: Request, meta: ProxyMeta) => Response | Promise<Response>;
+type InvalidRequestProxyHandler = (request: Request, error: Error) => Response | Promise<Response>;
+/**
+ * Creates a Web Handler for proxied requests from Vercel Sandboxes using the network policy `forwardURL`
+ * option. The provided `handler` is called for each valid proxied request, with the original request
+ * alongside extracted metadata used to identify the source sandbox and request details.
+ *
+ * This function automatically verifies the OIDC token included in proxied requests to ensure the request
+ * is legitimate: if invalid, the `invalidRequestHandler` is called (by default, a 403 response is returned).
+ *
+ * @example
+ * ```ts
+ * export default {
+ *   fetch: defineSandboxProxy(async (request, meta) => {
+ *     // meta contains the original host & source team/project/sandbox ids
+ *     console.log(meta)
+ *
+ *     // return a custom response, or proxy upstream:
+ *     return await fetch(request)
+ *   }, (request, error) => {
+ *     // optional, handle any authorization error
+ *     return new Response("Forbidden", { status: 403 })
+ *   })
+ * }
+ * ```
+ *
+ * @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying
+ */
+declare function defineSandboxProxy(handler: ProxyHandler, invalidRequestHandler?: InvalidRequestProxyHandler): (request: Request) => Promise<Response>;
+//#endregion
+export { InvalidRequestProxyHandler, ProxyHandler, ProxyMeta, defineSandboxProxy };
+//# sourceMappingURL=proxy.d.ts.map

dist/proxy.js

+import { createRemoteJWKSet, decodeJwt, jwtVerify } from "jose";
+
+//#region src/proxy.ts
+const FORWARDED_HOST_HEADER = "vercel-forwarded-host";
+const FORWARDED_SCHEME_HEADER = "vercel-forwarded-scheme";
+const FORWARDED_PORT_HEADER = "vercel-forwarded-port";
+const FORWARDED_PATH_HEADER = "vercel-forwarded-path";
+const SANDBOX_OIDC_TOKEN_HEADER = "vercel-sandbox-oidc-token";
+const VERCEL_OIDC_HOSTNAME = "oidc.vercel.com";
+const CLOCK_TOLERANCE_SECONDS = 60;
+const jwksCache = /* @__PURE__ */ new Map();
+/**
+* Creates a Web Handler for proxied requests from Vercel Sandboxes using the network policy `forwardURL`
+* option. The provided `handler` is called for each valid proxied request, with the original request
+* alongside extracted metadata used to identify the source sandbox and request details.
+*
+* This function automatically verifies the OIDC token included in proxied requests to ensure the request
+* is legitimate: if invalid, the `invalidRequestHandler` is called (by default, a 403 response is returned).
+*
+* @example
+* ```ts
+* export default {
+*   fetch: defineSandboxProxy(async (request, meta) => {
+*     // meta contains the original host & source team/project/sandbox ids
+*     console.log(meta)
+*
+*     // return a custom response, or proxy upstream:
+*     return await fetch(request)
+*   }, (request, error) => {
+*     // optional, handle any authorization error
+*     return new Response("Forbidden", { status: 403 })
+*   })
+* }
+* ```
+*
+* @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying
+*/
+function defineSandboxProxy(handler, invalidRequestHandler = defaultInvalidRequestHandler) {
+	return async function sandboxProxy(request) {
+		const headers = new Headers(request.headers);
+		const host = headers.get(FORWARDED_HOST_HEADER);
+		const scheme = headers.get(FORWARDED_SCHEME_HEADER);
+		const port = headers.get(FORWARDED_PORT_HEADER);
+		const path = headers.get(FORWARDED_PATH_HEADER);
+		const oidcToken = headers.get(SANDBOX_OIDC_TOKEN_HEADER);
+		headers.delete(FORWARDED_HOST_HEADER);
+		headers.delete(FORWARDED_SCHEME_HEADER);
+		headers.delete(FORWARDED_PORT_HEADER);
+		headers.delete(FORWARDED_PATH_HEADER);
+		headers.delete(SANDBOX_OIDC_TOKEN_HEADER);
+		if (!host || !scheme || !port || !path || !oidcToken) return invalidRequestHandler(request, /* @__PURE__ */ new Error("Missing required proxy headers"));
+		let sanitizedRequest;
+		try {
+			sanitizedRequest = new Request(getProxiedRequestUrl(scheme, host, port, path), {
+				method: request.method,
+				body: request.body,
+				headers,
+				duplex: "half"
+			});
+		} catch {
+			return invalidRequestHandler(new Request(request, { headers }), /* @__PURE__ */ new Error("Invalid proxied request URL"));
+		}
+		sanitizedRequest.headers.set("host", host);
+		try {
+			const originalUrl = normalizeForwardUrl(new URL(request.url), path);
+			const claims = await verifyOidcToken(oidcToken, originalUrl);
+			const meta = getProxyMeta(originalUrl.host, claims);
+			return handler(sanitizedRequest, meta);
+		} catch (error) {
+			return invalidRequestHandler(sanitizedRequest, error instanceof Error ? error : /* @__PURE__ */ new Error("Invalid OIDC token"));
+		}
+	};
+}
+function defaultInvalidRequestHandler() {
+	return new Response("Forbidden", { status: 403 });
+}
+function getProxiedRequestUrl(scheme, host, port, path) {
+	const origin = `${scheme}://${host}:${port}`;
+	return path === "/" ? origin : `${origin}${path}`;
+}
+function normalizeForwardUrl(url, forwardedPath) {
+	const forwardedPathname = stripTrailingPathSlash(new URL(forwardedPath, url.origin).pathname);
+	const normalizedUrl = new URL(url);
+	normalizedUrl.pathname = stripTrailingPathSlash(normalizedUrl.pathname);
+	if (forwardedPathname !== "/" && normalizedUrl.pathname.endsWith(forwardedPathname)) normalizedUrl.pathname = stripTrailingPathSlash(normalizedUrl.pathname.slice(0, -forwardedPathname.length));
+	return normalizedUrl;
+}
+function stripTrailingPathSlash(pathname) {
+	return pathname.replace(/\/+$/, "") || "/";
+}
+function getProxyMeta(host, claims) {
+	const teamId = getClaim(claims, "team_id");
+	const projectId = getClaim(claims, "project_id");
+	const sandboxId = getClaim(claims, "sandbox_id");
+	const sandboxName = getClaim(claims, "sandbox_name") ?? sandboxId;
+	if (!teamId || !projectId || !sandboxId || !sandboxName) throw new Error("Missing required claims in OIDC token");
+	return {
+		host,
+		teamId,
+		projectId,
+		sandboxId,
+		sandboxName
+	};
+}
+async function verifyOidcToken(token, originalUrl) {
+	const issuer = getClaim(decodeJwt(token), "iss");
+	if (!issuer) throw new Error("Missing OIDC issuer");
+	let issuerUrl;
+	try {
+		issuerUrl = new URL(issuer);
+	} catch {
+		throw new Error("Invalid OIDC issuer");
+	}
+	if (issuerUrl.protocol !== "https:" || issuerUrl.hostname !== VERCEL_OIDC_HOSTNAME) throw new Error("Invalid OIDC issuer");
+	const { payload } = await jwtVerify(token, getJwks(issuer), {
+		audience: getForwardUrlAudience(originalUrl),
+		algorithms: ["RS256"],
+		clockTolerance: CLOCK_TOLERANCE_SECONDS,
+		issuer
+	});
+	return payload;
+}
+function getForwardUrlAudience(url) {
+	const pathname = stripTrailingPathSlash(url.pathname);
+	return pathname === "/" ? url.origin : url.origin + pathname;
+}
+function getJwks(issuer) {
+	const cached = jwksCache.get(issuer);
+	if (cached) return cached;
+	const jwks = createRemoteJWKSet(new URL(`${issuer.replace(/\/$/, "")}/.well-known/jwks`));
+	jwksCache.set(issuer, jwks);
+	return jwks;
+}
+function getClaim(claims, name) {
+	const value = claims[name];
+	if (typeof value === "string" && value) return value;
+}
+
+//#endregion
+export { defineSandboxProxy };
+//# sourceMappingURL=proxy.js.map

dist/proxy.js.map

+{"version":3,"file":"proxy.js","names":["sanitizedRequest: Request","issuerUrl: URL"],"sources":["../src/proxy.ts"],"sourcesContent":["import { createRemoteJWKSet, decodeJwt, jwtVerify } from \"jose\";\n\nconst FORWARDED_HOST_HEADER = \"vercel-forwarded-host\";\nconst FORWARDED_SCHEME_HEADER = \"vercel-forwarded-scheme\";\nconst FORWARDED_PORT_HEADER = \"vercel-forwarded-port\";\nconst FORWARDED_PATH_HEADER = \"vercel-forwarded-path\";\nconst SANDBOX_OIDC_TOKEN_HEADER = \"vercel-sandbox-oidc-token\";\n\nconst VERCEL_OIDC_HOSTNAME = \"oidc.vercel.com\";\nconst CLOCK_TOLERANCE_SECONDS = 60;\n\nconst jwksCache = new Map<string, ReturnType<typeof createRemoteJWKSet>>();\n\nexport interface ProxyMeta {\n  /**\n   * The host of the request as received by this proxy.\n   */\n  host: string;\n  /**\n   * The ID of the team that owns the sandbox that proxied the request.\n   */\n  teamId: string;\n  /**\n   * The ID of the project that owns the sandbox that proxied the request.\n   */\n  projectId: string;\n  /**\n   * The ID of the sandbox that proxied the request.\n   */\n  sandboxId: string;\n  /**\n   * The name of the sandbox that proxied the request, when using persistent sandboxes.\n   */\n  sandboxName: string;\n}\n\nexport type ProxyHandler = (\n  request: Request,\n  meta: ProxyMeta,\n) => Response | Promise<Response>;\n\nexport type InvalidRequestProxyHandler = (\n  request: Request,\n  error: Error,\n) => Response | Promise<Response>;\n\n/**\n * Creates a Web Handler for proxied requests from Vercel Sandboxes using the network policy `forwardURL`\n * option. The provided `handler` is called for each valid proxied request, with the original request\n * alongside extracted metadata used to identify the source sandbox and request details.\n *\n * This function automatically verifies the OIDC token included in proxied requests to ensure the request\n * is legitimate: if invalid, the `invalidRequestHandler` is called (by default, a 403 response is returned).\n *\n * @example\n * ```ts\n * export default {\n *   fetch: defineSandboxProxy(async (request, meta) => {\n *     // meta contains the original host & source team/project/sandbox ids\n *     console.log(meta)\n *\n *     // return a custom response, or proxy upstream:\n *     return await fetch(request)\n *   }, (request, error) => {\n *     // optional, handle any authorization error\n *     return new Response(\"Forbidden\", { status: 403 })\n *   })\n * }\n * ```\n *\n * @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying\n */\nexport function defineSandboxProxy(\n  handler: ProxyHandler,\n  invalidRequestHandler: InvalidRequestProxyHandler = defaultInvalidRequestHandler,\n) {\n  return async function sandboxProxy(request: Request): Promise<Response> {\n    const headers = new Headers(request.headers);\n    const host = headers.get(FORWARDED_HOST_HEADER);\n    const scheme = headers.get(FORWARDED_SCHEME_HEADER);\n    const port = headers.get(FORWARDED_PORT_HEADER);\n    const path = headers.get(FORWARDED_PATH_HEADER);\n    const oidcToken = headers.get(SANDBOX_OIDC_TOKEN_HEADER);\n\n    headers.delete(FORWARDED_HOST_HEADER);\n    headers.delete(FORWARDED_SCHEME_HEADER);\n    headers.delete(FORWARDED_PORT_HEADER);\n    headers.delete(FORWARDED_PATH_HEADER);\n    headers.delete(SANDBOX_OIDC_TOKEN_HEADER);\n\n    if (!host || !scheme || !port || !path || !oidcToken) {\n      return invalidRequestHandler(\n        request,\n        new Error(\"Missing required proxy headers\"),\n      );\n    }\n\n    let sanitizedRequest: Request;\n\n    try {\n      sanitizedRequest = new Request(\n        getProxiedRequestUrl(scheme, host, port, path),\n        {\n          method: request.method,\n          body: request.body,\n          headers,\n          duplex: \"half\",\n        },\n      );\n    } catch {\n      return invalidRequestHandler(\n        new Request(request, { headers }),\n        new Error(\"Invalid proxied request URL\"),\n      );\n    }\n\n    sanitizedRequest.headers.set(\"host\", host);\n\n    try {\n      const originalUrl = normalizeForwardUrl(new URL(request.url), path);\n      const claims = await verifyOidcToken(oidcToken, originalUrl);\n      const meta = getProxyMeta(originalUrl.host, claims);\n\n      return handler(sanitizedRequest, meta);\n    } catch (error) {\n      return invalidRequestHandler(\n        sanitizedRequest,\n        error instanceof Error ? error : new Error(\"Invalid OIDC token\"),\n      );\n    }\n  };\n}\n\nfunction defaultInvalidRequestHandler(): Response {\n  return new Response(\"Forbidden\", { status: 403 });\n}\n\nfunction getProxiedRequestUrl(\n  scheme: string,\n  host: string,\n  port: string,\n  path: string,\n): string {\n  const origin = `${scheme}://${host}:${port}`;\n\n  return path === \"/\" ? origin : `${origin}${path}`;\n}\n\nfunction normalizeForwardUrl(url: URL, forwardedPath: string): URL {\n  const forwardedUrl = new URL(forwardedPath, url.origin);\n  const forwardedPathname = stripTrailingPathSlash(forwardedUrl.pathname);\n  const normalizedUrl = new URL(url);\n  normalizedUrl.pathname = stripTrailingPathSlash(normalizedUrl.pathname);\n\n  if (\n    forwardedPathname !== \"/\" &&\n    normalizedUrl.pathname.endsWith(forwardedPathname)\n  ) {\n    normalizedUrl.pathname = stripTrailingPathSlash(\n      normalizedUrl.pathname.slice(0, -forwardedPathname.length),\n    );\n  }\n\n  return normalizedUrl;\n}\n\nfunction stripTrailingPathSlash(pathname: string): string {\n  return pathname.replace(/\\/+$/, \"\") || \"/\";\n}\n\nfunction getProxyMeta(\n  host: string,\n  claims: Record<string, unknown>,\n): ProxyMeta {\n  const teamId = getClaim(claims, \"team_id\");\n  const projectId = getClaim(claims, \"project_id\");\n  const sandboxId = getClaim(claims, \"sandbox_id\");\n  const sandboxName = getClaim(claims, \"sandbox_name\") ?? sandboxId;\n\n  if (!teamId || !projectId || !sandboxId || !sandboxName) {\n    throw new Error(\"Missing required claims in OIDC token\");\n  }\n\n  return {\n    host,\n    teamId,\n    projectId,\n    sandboxId,\n    sandboxName,\n  };\n}\n\nasync function verifyOidcToken(\n  token: string,\n  originalUrl: URL,\n): Promise<Record<string, unknown>> {\n  const claims = decodeJwt(token);\n  const issuer = getClaim(claims, \"iss\");\n\n  if (!issuer) {\n    throw new Error(\"Missing OIDC issuer\");\n  }\n\n  let issuerUrl: URL;\n\n  try {\n    issuerUrl = new URL(issuer);\n  } catch {\n    throw new Error(\"Invalid OIDC issuer\");\n  }\n\n  if (\n    issuerUrl.protocol !== \"https:\" ||\n    issuerUrl.hostname !== VERCEL_OIDC_HOSTNAME\n  ) {\n    throw new Error(\"Invalid OIDC issuer\");\n  }\n\n  const { payload } = await jwtVerify(token, getJwks(issuer), {\n    audience: getForwardUrlAudience(originalUrl),\n    algorithms: [\"RS256\"],\n    clockTolerance: CLOCK_TOLERANCE_SECONDS,\n    issuer,\n  });\n\n  return payload;\n}\n\nfunction getForwardUrlAudience(url: URL): string {\n  const pathname = stripTrailingPathSlash(url.pathname);\n\n  return pathname === \"/\" ? url.origin : url.origin + pathname;\n}\n\nfunction getJwks(issuer: string): ReturnType<typeof createRemoteJWKSet> {\n  const cached = jwksCache.get(issuer);\n\n  if (cached) {\n    return cached;\n  }\n\n  const jwks = createRemoteJWKSet(\n    new URL(`${issuer.replace(/\\/$/, \"\")}/.well-known/jwks`),\n  );\n\n  jwksCache.set(issuer, jwks);\n\n  return jwks;\n}\n\nfunction getClaim(\n  claims: Record<string, unknown>,\n  name: string,\n): string | undefined {\n  const value = claims[name];\n\n  if (typeof value === \"string\" && value) {\n    return value;\n  }\n}\n"],"mappings":";;;AAEA,MAAM,wBAAwB;AAC9B,MAAM,0BAA0B;AAChC,MAAM,wBAAwB;AAC9B,MAAM,wBAAwB;AAC9B,MAAM,4BAA4B;AAElC,MAAM,uBAAuB;AAC7B,MAAM,0BAA0B;AAEhC,MAAM,4BAAY,IAAI,KAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6D1E,SAAgB,mBACd,SACA,wBAAoD,8BACpD;AACA,QAAO,eAAe,aAAa,SAAqC;EACtE,MAAM,UAAU,IAAI,QAAQ,QAAQ,QAAQ;EAC5C,MAAM,OAAO,QAAQ,IAAI,sBAAsB;EAC/C,MAAM,SAAS,QAAQ,IAAI,wBAAwB;EACnD,MAAM,OAAO,QAAQ,IAAI,sBAAsB;EAC/C,MAAM,OAAO,QAAQ,IAAI,sBAAsB;EAC/C,MAAM,YAAY,QAAQ,IAAI,0BAA0B;AAExD,UAAQ,OAAO,sBAAsB;AACrC,UAAQ,OAAO,wBAAwB;AACvC,UAAQ,OAAO,sBAAsB;AACrC,UAAQ,OAAO,sBAAsB;AACrC,UAAQ,OAAO,0BAA0B;AAEzC,MAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,UACzC,QAAO,sBACL,yBACA,IAAI,MAAM,iCAAiC,CAC5C;EAGH,IAAIA;AAEJ,MAAI;AACF,sBAAmB,IAAI,QACrB,qBAAqB,QAAQ,MAAM,MAAM,KAAK,EAC9C;IACE,QAAQ,QAAQ;IAChB,MAAM,QAAQ;IACd;IACA,QAAQ;IACT,CACF;UACK;AACN,UAAO,sBACL,IAAI,QAAQ,SAAS,EAAE,SAAS,CAAC,kBACjC,IAAI,MAAM,8BAA8B,CACzC;;AAGH,mBAAiB,QAAQ,IAAI,QAAQ,KAAK;AAE1C,MAAI;GACF,MAAM,cAAc,oBAAoB,IAAI,IAAI,QAAQ,IAAI,EAAE,KAAK;GACnE,MAAM,SAAS,MAAM,gBAAgB,WAAW,YAAY;GAC5D,MAAM,OAAO,aAAa,YAAY,MAAM,OAAO;AAEnD,UAAO,QAAQ,kBAAkB,KAAK;WAC/B,OAAO;AACd,UAAO,sBACL,kBACA,iBAAiB,QAAQ,wBAAQ,IAAI,MAAM,qBAAqB,CACjE;;;;AAKP,SAAS,+BAAyC;AAChD,QAAO,IAAI,SAAS,aAAa,EAAE,QAAQ,KAAK,CAAC;;AAGnD,SAAS,qBACP,QACA,MACA,MACA,MACQ;CACR,MAAM,SAAS,GAAG,OAAO,KAAK,KAAK,GAAG;AAEtC,QAAO,SAAS,MAAM,SAAS,GAAG,SAAS;;AAG7C,SAAS,oBAAoB,KAAU,eAA4B;CAEjE,MAAM,oBAAoB,uBADL,IAAI,IAAI,eAAe,IAAI,OAAO,CACO,SAAS;CACvE,MAAM,gBAAgB,IAAI,IAAI,IAAI;AAClC,eAAc,WAAW,uBAAuB,cAAc,SAAS;AAEvE,KACE,sBAAsB,OACtB,cAAc,SAAS,SAAS,kBAAkB,CAElD,eAAc,WAAW,uBACvB,cAAc,SAAS,MAAM,GAAG,CAAC,kBAAkB,OAAO,CAC3D;AAGH,QAAO;;AAGT,SAAS,uBAAuB,UAA0B;AACxD,QAAO,SAAS,QAAQ,QAAQ,GAAG,IAAI;;AAGzC,SAAS,aACP,MACA,QACW;CACX,MAAM,SAAS,SAAS,QAAQ,UAAU;CAC1C,MAAM,YAAY,SAAS,QAAQ,aAAa;CAChD,MAAM,YAAY,SAAS,QAAQ,aAAa;CAChD,MAAM,cAAc,SAAS,QAAQ,eAAe,IAAI;AAExD,KAAI,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,YAC1C,OAAM,IAAI,MAAM,wCAAwC;AAG1D,QAAO;EACL;EACA;EACA;EACA;EACA;EACD;;AAGH,eAAe,gBACb,OACA,aACkC;CAElC,MAAM,SAAS,SADA,UAAU,MAAM,EACC,MAAM;AAEtC,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,sBAAsB;CAGxC,IAAIC;AAEJ,KAAI;AACF,cAAY,IAAI,IAAI,OAAO;SACrB;AACN,QAAM,IAAI,MAAM,sBAAsB;;AAGxC,KACE,UAAU,aAAa,YACvB,UAAU,aAAa,qBAEvB,OAAM,IAAI,MAAM,sBAAsB;CAGxC,MAAM,EAAE,YAAY,MAAM,UAAU,OAAO,QAAQ,OAAO,EAAE;EAC1D,UAAU,sBAAsB,YAAY;EAC5C,YAAY,CAAC,QAAQ;EACrB,gBAAgB;EAChB;EACD,CAAC;AAEF,QAAO;;AAGT,SAAS,sBAAsB,KAAkB;CAC/C,MAAM,WAAW,uBAAuB,IAAI,SAAS;AAErD,QAAO,aAAa,MAAM,IAAI,SAAS,IAAI,SAAS;;AAGtD,SAAS,QAAQ,QAAuD;CACtE,MAAM,SAAS,UAAU,IAAI,OAAO;AAEpC,KAAI,OACF,QAAO;CAGT,MAAM,OAAO,mBACX,IAAI,IAAI,GAAG,OAAO,QAAQ,OAAO,GAAG,CAAC,mBAAmB,CACzD;AAED,WAAU,IAAI,QAAQ,KAAK;AAE3B,QAAO;;AAGT,SAAS,SACP,QACA,MACoB;CACpB,MAAM,QAAQ,OAAO;AAErB,KAAI,OAAO,UAAU,YAAY,MAC/B,QAAO"}

dist/api-client/api-client.cjs

@@ -221,2 +221,14 @@ const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
 	}
+	async getSnapshotTree(params) {
+		return require_base_client.parseOrThrow(require_validators.SnapshotTreeResponse, await this.request(`/v2/sandboxes/snapshots/tree`, {
+			query: {
+				project: params.projectId,
+				snapshotId: params.snapshotId,
+				limit: params.limit,
+				sortOrder: params.sortOrder
+			},
+			method: "GET",
+			signal: params.signal
+		}));
+	}
 	async writeFiles(params) {
@@ -223,0 +235,0 @@ const { writer, response } = this.getFileWriter({

dist/api-client/api-client.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"api-client.cjs","names":["BaseClient","VERSION","getPrivateParams","parseOrThrow","SessionAndRoutesResponse","SandboxAndSessionResponse","toAPINetworkPolicy","z","APIError","StreamError","CommandResponse","CommandFinishedResponse","command","EmptyResponse","FileWriter","consumeReadable","SessionsResponse","SnapshotsResponse","normalizePath","Readable","LogLine","StopSessionResponse","SessionResponse","CreateSnapshotResponse","SnapshotResponse","query: Record<string, string | undefined>","SandboxesPaginationResponse","UpdateSandboxResponse"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport {\n  toAPINetworkPolicy,\n  fromAPINetworkPolicy,\n} from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    if (!response.ok) {\n      await parseOrThrow(z.any(), response);\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAiDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+BA,+BAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,4CAAyB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkBC,wBAAQ,YAAY,QAAQ,QAAQ,IAAI,WAAG,UAAU,CAAC,GAAG,WAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgBC,+BAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAOC,iCACLC,6CACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA8BA;EACA,MAAM,gBAAgBF,+BAAiB,OAAO;AAC9C,SAAOC,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClBC,0CAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAuBH,MAAM,WAAW,QASd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACP,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAMH,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAIC,8BACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAYC,mCAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAID,8BACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAYE,2CAAwB,MAAM,cAAc,MAAM;AACtE,YAAOC;QACL;IAEwB;;AAG9B,SAAOT,iCACLO,oCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACd,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACVP,iCACEQ,4CACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACDR,iCACEO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,MAAM,QAKT;AACD,SAAOP,iCACLU,kCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAIC,gCAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAMC,yCAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAOZ,iCACLa,qCACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAOb,iCACLc,sCACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAMC,oCAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAMf,iCAAaU,kCAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;AAGT,MAAI,CAAC,SAAS,GACZ,OAAMV,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAOY,gBAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAOhB,iCACLO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAMP,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAASY,2BAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAIX,8BACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAON,iCACLkB,wCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOlB,iCACLmB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAUhB,0CAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOH,iCACLmB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAOnB,iCACLoB,2CACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOpB,iCACLqB,qCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOrB,iCACLqB,qCACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgBtB,+BAAiB,OAAO;EAC9C,MAAMuB,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAOtB,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAOF,iCACLuB,gDACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAOvB,iCACLwB,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClBrB,0CAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAOH,iCACLwB,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}
+{"version":3,"file":"api-client.cjs","names":["BaseClient","VERSION","getPrivateParams","parseOrThrow","SessionAndRoutesResponse","SandboxAndSessionResponse","toAPINetworkPolicy","z","APIError","StreamError","CommandResponse","CommandFinishedResponse","command","EmptyResponse","FileWriter","consumeReadable","SessionsResponse","SnapshotsResponse","SnapshotTreeResponse","normalizePath","Readable","LogLine","StopSessionResponse","SessionResponse","CreateSnapshotResponse","SnapshotResponse","query: Record<string, string | undefined>","SandboxesPaginationResponse","UpdateSandboxResponse"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotTreeResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport {\n  toAPINetworkPolicy,\n  fromAPINetworkPolicy,\n} from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getSnapshotTree(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     */\n    projectId: string;\n    /**\n     * The snapshot ID to use as the anchor for the tree traversal.\n     */\n    snapshotId: string;\n    /**\n     * Maximum number of nodes to return.\n     */\n    limit?: number;\n    /**\n     * Sort order: \"asc\" for descendants, \"desc\" for ancestors.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotTreeResponse,\n      await this.request(`/v2/sandboxes/snapshots/tree`, {\n        query: {\n          project: params.projectId,\n          snapshotId: params.snapshotId,\n          limit: params.limit,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    if (!response.ok) {\n      await parseOrThrow(z.any(), response);\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+BA,+BAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,4CAAyB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkBC,wBAAQ,YAAY,QAAQ,QAAQ,IAAI,WAAG,UAAU,CAAC,GAAG,WAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgBC,+BAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAOC,iCACLC,6CACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA8BA;EACA,MAAM,gBAAgBF,+BAAiB,OAAO;AAC9C,SAAOC,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClBC,0CAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAuBH,MAAM,WAAW,QASd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACP,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAMH,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAIC,8BACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAYC,mCAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAID,8BACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAYE,2CAAwB,MAAM,cAAc,MAAM;AACtE,YAAOC;QACL;IAEwB;;AAG9B,SAAOT,iCACLO,oCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACd,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACVP,iCACEQ,4CACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACDR,iCACEO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,MAAM,QAKT;AACD,SAAOP,iCACLU,kCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAIC,gCAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAMC,yCAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAOZ,iCACLa,qCACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAOb,iCACLc,sCACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,gBAAgB,QAkBnB;AACD,SAAOd,iCACLe,yCACA,MAAM,KAAK,QAAQ,gCAAgC;GACjD,OAAO;IACL,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,OAAO,OAAO;IACd,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAMC,oCAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAMhB,iCAAaU,kCAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;AAGT,MAAI,CAAC,SAAS,GACZ,OAAMV,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAOa,gBAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAOjB,iCACLO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAMP,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAASa,2BAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAIZ,8BACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAON,iCACLmB,wCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOnB,iCACLoB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAUjB,0CAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOH,iCACLoB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAOpB,iCACLqB,2CACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOrB,iCACLsB,qCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOtB,iCACLsB,qCACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgBvB,+BAAiB,OAAO;EAC9C,MAAMwB,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAOvB,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAOF,iCACLwB,gDACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAOxB,iCACLyB,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClBtB,0CAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAOH,iCACLyB,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}

dist/api-client/api-client.js

 import { APIError, StreamError } from "./api-error.js";
 import { BaseClient, parseOrThrow } from "./base-client.js";
-import { CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, EmptyResponse, LogLine, SandboxAndSessionResponse, SandboxesPaginationResponse, SessionAndRoutesResponse, SessionResponse, SessionsResponse, SnapshotResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse } from "./validators.js";
+import { CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, EmptyResponse, LogLine, SandboxAndSessionResponse, SandboxesPaginationResponse, SessionAndRoutesResponse, SessionResponse, SessionsResponse, SnapshotResponse, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse } from "./validators.js";
 import { FileWriter } from "./file-writer.js";
@@ -218,2 +218,14 @@ import { VERSION } from "../version.js";
 	}
+	async getSnapshotTree(params) {
+		return parseOrThrow(SnapshotTreeResponse, await this.request(`/v2/sandboxes/snapshots/tree`, {
+			query: {
+				project: params.projectId,
+				snapshotId: params.snapshotId,
+				limit: params.limit,
+				sortOrder: params.sortOrder
+			},
+			method: "GET",
+			signal: params.signal
+		}));
+	}
 	async writeFiles(params) {
@@ -220,0 +232,0 @@ const { writer, response } = this.getFileWriter({

dist/api-client/api-client.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"api-client.js","names":["command","query: Record<string, string | undefined>"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport {\n  toAPINetworkPolicy,\n  fromAPINetworkPolicy,\n} from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    if (!response.ok) {\n      await parseOrThrow(z.any(), response);\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAiDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+B,WAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,MAAM,mBAAmB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkB,QAAQ,YAAY,QAAQ,QAAQ,IAAI,GAAG,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAO,aACL,0BACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA8BA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;AAC9C,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAuBH,MAAM,WAAW,QASd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACP,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAI,YACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAY,gBAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAI,YACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAY,wBAAwB,MAAM,cAAc,MAAM;AACtE,YAAOA;QACL;IAEwB;;AAG9B,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACd,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACV,aACE,yBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACD,aACE,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,MAAM,QAKT;AACD,SAAO,aACL,eACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAI,YAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAM,gBAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAO,aACL,mBACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAM,cAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAM,aAAa,eAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;AAGT,MAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAO,SAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAO,aACL,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAAS,QAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAI,YACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,qBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,mBAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAO,aACL,wBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAMC,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAO,aACL,6BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}
+{"version":3,"file":"api-client.js","names":["command","query: Record<string, string | undefined>"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotTreeResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport {\n  toAPINetworkPolicy,\n  fromAPINetworkPolicy,\n} from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getSnapshotTree(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     */\n    projectId: string;\n    /**\n     * The snapshot ID to use as the anchor for the tree traversal.\n     */\n    snapshotId: string;\n    /**\n     * Maximum number of nodes to return.\n     */\n    limit?: number;\n    /**\n     * Sort order: \"asc\" for descendants, \"desc\" for ancestors.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotTreeResponse,\n      await this.request(`/v2/sandboxes/snapshots/tree`, {\n        query: {\n          project: params.projectId,\n          snapshotId: params.snapshotId,\n          limit: params.limit,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    if (!response.ok) {\n      await parseOrThrow(z.any(), response);\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+B,WAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,MAAM,mBAAmB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkB,QAAQ,YAAY,QAAQ,QAAQ,IAAI,GAAG,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAO,aACL,0BACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA8BA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;AAC9C,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAuBH,MAAM,WAAW,QASd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACP,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAI,YACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAY,gBAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAI,YACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAY,wBAAwB,MAAM,cAAc,MAAM;AACtE,YAAOA;QACL;IAEwB;;AAG9B,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACd,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACV,aACE,yBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACD,aACE,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,MAAM,QAKT;AACD,SAAO,aACL,eACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAI,YAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAM,gBAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAO,aACL,mBACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,gBAAgB,QAkBnB;AACD,SAAO,aACL,sBACA,MAAM,KAAK,QAAQ,gCAAgC;GACjD,OAAO;IACL,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,OAAO,OAAO;IACd,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAM,cAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAM,aAAa,eAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;AAGT,MAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAO,SAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAO,aACL,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAAS,QAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAI,YACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,qBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,mBAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAO,aACL,wBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAMC,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAO,aACL,6BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}

dist/api-client/index.d.ts

@@ -1,2 +0,2 @@
-import { Command, CommandData, CommandFinishedData, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, LogLineStderr, LogLineStdout, Sandbox, SandboxMetaData, SandboxRoute, SandboxRouteData, Session, SessionMetaData, SessionResponse, Snapshot, SnapshotMetadata, SnapshotResponse, StopSessionResponse } from "./validators.js";
+import { Command, CommandData, CommandFinishedData, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, LogLineStderr, LogLineStdout, Sandbox, SandboxMetaData, SandboxRoute, SandboxRouteData, Session, SessionMetaData, SessionResponse, Snapshot, SnapshotMetadata, SnapshotResponse, SnapshotTreeNode, SnapshotTreeNodeData, StopSessionResponse } from "./validators.js";
 import { APIClient } from "./api-client.js";

dist/api-client/index.js

@@ -1,4 +0,4 @@
-import { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator } from "./validators.js";
+import { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotTreeNode, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator } from "./validators.js";
 import { APIClient } from "./api-client.js";
 
 export {  };

dist/api-client/validators.cjs

@@ -107,3 +107,6 @@ const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
 	createdAt: zod.z.number(),
-	updatedAt: zod.z.number()
+	updatedAt: zod.z.number(),
+	lastUsedAt: zod.z.number().optional(),
+	creationMethod: zod.z.string().optional(),
+	parentId: zod.z.string().optional()
 });
@@ -152,2 +155,11 @@ const CursorPagination = zod.z.object({
 });
+const SnapshotTreeNode = zod.z.object({
+	snapshot: Snapshot,
+	siblings: zod.z.array(Snapshot),
+	count: zod.z.string()
+});
+const SnapshotTreeResponse = zod.z.object({
+	snapshots: zod.z.array(SnapshotTreeNode),
+	pagination: CursorPagination
+});
 const CreateSnapshotResponse = zod.z.object({
@@ -232,2 +244,4 @@ snapshot: Snapshot,
 exports.SnapshotResponse = SnapshotResponse;
+exports.SnapshotTreeNode = SnapshotTreeNode;
+exports.SnapshotTreeResponse = SnapshotTreeResponse;
 exports.SnapshotsResponse = SnapshotsResponse;
@@ -234,0 +248,0 @@ exports.StopSessionResponse = StopSessionResponse;

dist/api-client/validators.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"validators.cjs","names":["z"],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string()).optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;;AAIA,MAAM,uBAAuBA,MAAE,OAAO;CACpC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,YAAYA,MAAE,QAAQ,CAAC,UAAU;CACjC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2BA,MAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqBA,MAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAaA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAASA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,QAAQA,MAAE,QAAQ;CAElB,SAASA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAExC,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuBA,MAAE,OAAO;CAC3C,QAAQA,MAAE,QAAQ;CAClB,YAAYA,MAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkCA,MAAE,OAAO,EACtD,SAASA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC;AAEF,MAAa,6BAA6BA,MAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAWA,MAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAYA,MAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiCA,MAAE,OAAO;CACrD,OAAOA,MACJ,MAAM,CACLA,MAAE,MAAMA,MAAE,QAAQ,CAAC,EACnBA,MAAE,OAAOA,MAAE,MAAM,2BAA2B,CAAC,CAC9C,CAAC,CACD,UAAU;CACb,SAASA,MACN,OAAO;EACN,OAAOA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6BA,MAAE,MAAM,CACzCA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxDA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqCA,MACxC,OAAO;CACN,MAAMA,MAAE,QAAQ,SAAS;CACzB,gBAAgBA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAcA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgBA,MAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAcA,MAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgCA,MAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiCA,MAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,QAAQA,MAAE,QAAQ;CAClB,OAAOA,MAAE,QAAQ;CACjB,QAAQA,MAAE,QAAQ;CAClB,SAASA,MAAE,QAAQ;CACnB,SAASA,MAAE,QAAQ;CACnB,QAAQA,MAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAaA,MAAE,QAAQ;CACvB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,WAAWA,MAAE,QAAQ;CACrB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqBA,MAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiBA,MAAE,OAAO;EACxB,SAASA,MAAE,QAAQ;EACnB,QAAQA,MAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAeA,MAAE,OAAO;CACnC,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,MAAMA,MAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAWA,MAAE,OAAO;CAC/B,IAAIA,MAAE,QAAQ;CACd,iBAAiBA,MAAE,QAAQ;CAC3B,QAAQA,MAAE,QAAQ;CAClB,QAAQA,MAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACtB,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,OAAOA,MAAE,QAAQ;CACjB,MAAMA,MAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,MAAMA,MAAE,QAAQ;CAChB,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC;CACzB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,WAAWA,MAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAUA,MAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQA,MAAE,MAAM,aAAa,EAC9B,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,UAAUA,MAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0BA,MAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgBA,MAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAcA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAWA,MAAE,OAAO;CAC/B,QAAQA,MAAE,QAAQ,QAAQ;CAC1B,MAAMA,MAAE,OAAO;EACb,MAAMA,MAAE,QAAQ;EAChB,SAASA,MAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAUA,MAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoBA,MAAE,OAAO;CACxC,WAAWA,MAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,MAAMA,MAAE,QAAQ;CAChB,YAAYA,MAAE,SAAS;CACvB,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0BA,MAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACrB,kBAAkBA,MAAE,QAAQ;CAC5B,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,KAAKA,MAAE,QAAQ,CAAC,UAAU;CAC1B,MAAMA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmBA,MAChB,OAAO;EACN,OAAOA,MAAE,QAAQ;EACjB,YAAYA,MAAE,QAAQ,CAAC,UAAU;EACjC,eAAeA,MAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsBA,MAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4BA,MAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQA,MAAE,MAAM,aAAa;CAC7B,SAASA,MAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8BA,MAAE,OAAO;CAClD,WAAWA,MAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwBA,MAAE,OAAO;CAC5C,SAAS;CACT,QAAQA,MAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}
+{"version":3,"file":"validators.cjs","names":["z"],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  lastUsedAt: z.number().optional(),\n  creationMethod: z.string().optional(),\n  parentId: z.string().optional(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const SnapshotTreeNode = z.object({\n  snapshot: Snapshot,\n  siblings: z.array(Snapshot),\n  count: z.string(),\n});\n\nexport type SnapshotTreeNodeData = z.infer<typeof SnapshotTreeNode>;\n\nexport const SnapshotTreeResponse = z.object({\n  snapshots: z.array(SnapshotTreeNode),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string()).optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;;AAIA,MAAM,uBAAuBA,MAAE,OAAO;CACpC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,YAAYA,MAAE,QAAQ,CAAC,UAAU;CACjC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2BA,MAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqBA,MAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAaA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAASA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,QAAQA,MAAE,QAAQ;CAElB,SAASA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAExC,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuBA,MAAE,OAAO;CAC3C,QAAQA,MAAE,QAAQ;CAClB,YAAYA,MAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkCA,MAAE,OAAO,EACtD,SAASA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC;AAEF,MAAa,6BAA6BA,MAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAWA,MAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAYA,MAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiCA,MAAE,OAAO;CACrD,OAAOA,MACJ,MAAM,CACLA,MAAE,MAAMA,MAAE,QAAQ,CAAC,EACnBA,MAAE,OAAOA,MAAE,MAAM,2BAA2B,CAAC,CAC9C,CAAC,CACD,UAAU;CACb,SAASA,MACN,OAAO;EACN,OAAOA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6BA,MAAE,MAAM,CACzCA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxDA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqCA,MACxC,OAAO;CACN,MAAMA,MAAE,QAAQ,SAAS;CACzB,gBAAgBA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAcA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgBA,MAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAcA,MAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgCA,MAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiCA,MAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,QAAQA,MAAE,QAAQ;CAClB,OAAOA,MAAE,QAAQ;CACjB,QAAQA,MAAE,QAAQ;CAClB,SAASA,MAAE,QAAQ;CACnB,SAASA,MAAE,QAAQ;CACnB,QAAQA,MAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAaA,MAAE,QAAQ;CACvB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,WAAWA,MAAE,QAAQ;CACrB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqBA,MAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiBA,MAAE,OAAO;EACxB,SAASA,MAAE,QAAQ;EACnB,QAAQA,MAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAeA,MAAE,OAAO;CACnC,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,MAAMA,MAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAWA,MAAE,OAAO;CAC/B,IAAIA,MAAE,QAAQ;CACd,iBAAiBA,MAAE,QAAQ;CAC3B,QAAQA,MAAE,QAAQ;CAClB,QAAQA,MAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACrB,YAAYA,MAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,OAAOA,MAAE,QAAQ;CACjB,MAAMA,MAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,MAAMA,MAAE,QAAQ;CAChB,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC;CACzB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,WAAWA,MAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAUA,MAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQA,MAAE,MAAM,aAAa,EAC9B,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,UAAUA,MAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0BA,MAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgBA,MAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAcA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAWA,MAAE,OAAO;CAC/B,QAAQA,MAAE,QAAQ,QAAQ;CAC1B,MAAMA,MAAE,OAAO;EACb,MAAMA,MAAE,QAAQ;EAChB,SAASA,MAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAUA,MAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoBA,MAAE,OAAO;CACxC,WAAWA,MAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,UAAU;CACV,UAAUA,MAAE,MAAM,SAAS;CAC3B,OAAOA,MAAE,QAAQ;CAClB,CAAC;AAIF,MAAa,uBAAuBA,MAAE,OAAO;CAC3C,WAAWA,MAAE,MAAM,iBAAiB;CACpC,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,MAAMA,MAAE,QAAQ;CAChB,YAAYA,MAAE,SAAS;CACvB,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0BA,MAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACrB,kBAAkBA,MAAE,QAAQ;CAC5B,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,KAAKA,MAAE,QAAQ,CAAC,UAAU;CAC1B,MAAMA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmBA,MAChB,OAAO;EACN,OAAOA,MAAE,QAAQ;EACjB,YAAYA,MAAE,QAAQ,CAAC,UAAU;EACjC,eAAeA,MAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsBA,MAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4BA,MAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQA,MAAE,MAAM,aAAa;CAC7B,SAASA,MAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8BA,MAAE,OAAO;CAClD,WAAWA,MAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwBA,MAAE,OAAO;CAC5C,SAAS;CACT,QAAQA,MAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}

dist/api-client/validators.js

@@ -106,3 +106,6 @@ import { z } from "zod";
 	createdAt: z.number(),
-	updatedAt: z.number()
+	updatedAt: z.number(),
+	lastUsedAt: z.number().optional(),
+	creationMethod: z.string().optional(),
+	parentId: z.string().optional()
 });
@@ -151,2 +154,11 @@ const CursorPagination = z.object({
 });
+const SnapshotTreeNode = z.object({
+	snapshot: Snapshot,
+	siblings: z.array(Snapshot),
+	count: z.string()
+});
+const SnapshotTreeResponse = z.object({
+	snapshots: z.array(SnapshotTreeNode),
+	pagination: CursorPagination
+});
 const CreateSnapshotResponse = z.object({
@@ -206,3 +218,3 @@ snapshot: Snapshot,
 //#endregion
-export { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator };
+export { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotTreeNode, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator };
 //# sourceMappingURL=validators.js.map

dist/api-client/validators.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"validators.js","names":[],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string()).optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;AAIA,MAAM,uBAAuB,EAAE,OAAO;CACpC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2B,EAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqB,EAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAAS,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,QAAQ;CAElB,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU;CAExC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,QAAQ,EAAE,QAAQ;CAClB,YAAY,EAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkC,EAAE,OAAO,EACtD,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC;AAEF,MAAa,6BAA6B,EAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAW,EAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAY,EAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiC,EAAE,OAAO;CACrD,OAAO,EACJ,MAAM,CACL,EAAE,MAAM,EAAE,QAAQ,CAAC,EACnB,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC,CAC9C,CAAC,CACD,UAAU;CACb,SAAS,EACN,OAAO;EACN,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6B,EAAE,MAAM,CACzC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqC,EACxC,OAAO;CACN,MAAM,EAAE,QAAQ,SAAS;CACzB,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgB,EAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAc,EAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgC,EAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiC,EAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,QAAQ,EAAE,QAAQ;CAClB,OAAO,EAAE,QAAQ;CACjB,QAAQ,EAAE,QAAQ;CAClB,SAAS,EAAE,QAAQ;CACnB,SAAS,EAAE,QAAQ;CACnB,QAAQ,EAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ;CACrB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiB,EAAE,OAAO;EACxB,SAAS,EAAE,QAAQ;EACnB,QAAQ,EAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAe,EAAE,OAAO;CACnC,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAW,EAAE,OAAO;CAC/B,IAAI,EAAE,QAAQ;CACd,iBAAiB,EAAE,QAAQ;CAC3B,QAAQ,EAAE,QAAQ;CAClB,QAAQ,EAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;CACzB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAU,EAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQ,EAAE,MAAM,aAAa,EAC9B,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,UAAU,EAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0B,EAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgB,EAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAW,EAAE,OAAO;CAC/B,QAAQ,EAAE,QAAQ,QAAQ;CAC1B,MAAM,EAAE,OAAO;EACb,MAAM,EAAE,QAAQ;EAChB,SAAS,EAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAU,EAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoB,EAAE,OAAO;CACxC,WAAW,EAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,MAAM,EAAE,QAAQ;CAChB,YAAY,EAAE,SAAS;CACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,kBAAkB,EAAE,QAAQ;CAC5B,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmB,EAChB,OAAO;EACN,OAAO,EAAE,QAAQ;EACjB,YAAY,EAAE,QAAQ,CAAC,UAAU;EACjC,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4B,EAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQ,EAAE,MAAM,aAAa;CAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8B,EAAE,OAAO;CAClD,WAAW,EAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwB,EAAE,OAAO;CAC5C,SAAS;CACT,QAAQ,EAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}
+{"version":3,"file":"validators.js","names":[],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  lastUsedAt: z.number().optional(),\n  creationMethod: z.string().optional(),\n  parentId: z.string().optional(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const SnapshotTreeNode = z.object({\n  snapshot: Snapshot,\n  siblings: z.array(Snapshot),\n  count: z.string(),\n});\n\nexport type SnapshotTreeNodeData = z.infer<typeof SnapshotTreeNode>;\n\nexport const SnapshotTreeResponse = z.object({\n  snapshots: z.array(SnapshotTreeNode),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string()).optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;AAIA,MAAM,uBAAuB,EAAE,OAAO;CACpC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2B,EAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqB,EAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAAS,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,QAAQ;CAElB,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU;CAExC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,QAAQ,EAAE,QAAQ;CAClB,YAAY,EAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkC,EAAE,OAAO,EACtD,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC;AAEF,MAAa,6BAA6B,EAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAW,EAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAY,EAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiC,EAAE,OAAO;CACrD,OAAO,EACJ,MAAM,CACL,EAAE,MAAM,EAAE,QAAQ,CAAC,EACnB,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC,CAC9C,CAAC,CACD,UAAU;CACb,SAAS,EACN,OAAO;EACN,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6B,EAAE,MAAM,CACzC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqC,EACxC,OAAO;CACN,MAAM,EAAE,QAAQ,SAAS;CACzB,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgB,EAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAc,EAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgC,EAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiC,EAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,QAAQ,EAAE,QAAQ;CAClB,OAAO,EAAE,QAAQ;CACjB,QAAQ,EAAE,QAAQ;CAClB,SAAS,EAAE,QAAQ;CACnB,SAAS,EAAE,QAAQ;CACnB,QAAQ,EAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ;CACrB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiB,EAAE,OAAO;EACxB,SAAS,EAAE,QAAQ;EACnB,QAAQ,EAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAe,EAAE,OAAO;CACnC,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAW,EAAE,OAAO;CAC/B,IAAI,EAAE,QAAQ;CACd,iBAAiB,EAAE,QAAQ;CAC3B,QAAQ,EAAE,QAAQ;CAClB,QAAQ,EAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;CACzB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAU,EAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQ,EAAE,MAAM,aAAa,EAC9B,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,UAAU,EAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0B,EAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgB,EAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAW,EAAE,OAAO;CAC/B,QAAQ,EAAE,QAAQ,QAAQ;CAC1B,MAAM,EAAE,OAAO;EACb,MAAM,EAAE,QAAQ;EAChB,SAAS,EAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAU,EAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoB,EAAE,OAAO;CACxC,WAAW,EAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,UAAU;CACV,UAAU,EAAE,MAAM,SAAS;CAC3B,OAAO,EAAE,QAAQ;CAClB,CAAC;AAIF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,WAAW,EAAE,MAAM,iBAAiB;CACpC,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,MAAM,EAAE,QAAQ;CAChB,YAAY,EAAE,SAAS;CACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,kBAAkB,EAAE,QAAQ;CAC5B,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmB,EAChB,OAAO;EACN,OAAO,EAAE,QAAQ;EACjB,YAAY,EAAE,QAAQ,CAAC,UAAU;EACjC,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4B,EAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQ,EAAE,MAAM,aAAa;CAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8B,EAAE,OAAO;CAClD,WAAW,EAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwB,EAAE,OAAO;CAC5C,SAAS;CACT,QAAQ,EAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}

dist/index.cjs

@@ -7,2 +7,3 @@ const require_api_error = require('./api-client/api-error.cjs');
 const require_sandbox = require('./sandbox.cjs');
+const require_proxy = require('./proxy.cjs');
 
@@ -16,2 +17,3 @@ exports.APIError = require_api_error.APIError;
 exports.Snapshot = require_snapshot.Snapshot;
-exports.StreamError = require_api_error.StreamError;
+exports.StreamError = require_api_error.StreamError;
+exports.defineSandboxProxy = require_proxy.defineSandboxProxy;

dist/index.d.cts

 import { APIError, StreamError } from "./api-client/api-error.cjs";
+import { SnapshotTreeNodeData } from "./api-client/validators.cjs";
 import { NetworkPolicy, NetworkPolicyKeyValueMatcher, NetworkPolicyMatch, NetworkPolicyMatcher, NetworkPolicyRule, NetworkTransformer } from "./network-policy.cjs";
@@ -8,2 +9,3 @@ import { Command, CommandFinished, CommandOutput, SerializedCommand, SerializedCommandFinished } from "./command.cjs";
 import { Sandbox, SerializedSandbox } from "./sandbox.cjs";
-export { APIError, Command, CommandFinished, type CommandOutput, FileSystem, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, Sandbox, type SerializedCommand, type SerializedCommandFinished, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, StreamError };
+import { InvalidRequestProxyHandler, ProxyHandler, ProxyMeta, defineSandboxProxy } from "./proxy.cjs";
+export { APIError, Command, CommandFinished, type CommandOutput, FileSystem, type InvalidRequestProxyHandler, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, type ProxyHandler, type ProxyMeta, Sandbox, type SerializedCommand, type SerializedCommandFinished, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, type SnapshotTreeNodeData, StreamError, defineSandboxProxy };

dist/index.d.ts

 import { APIError, StreamError } from "./api-client/api-error.js";
+import { SnapshotTreeNodeData } from "./api-client/validators.js";
 import { NetworkPolicy, NetworkPolicyKeyValueMatcher, NetworkPolicyMatch, NetworkPolicyMatcher, NetworkPolicyRule, NetworkTransformer } from "./network-policy.js";
@@ -8,2 +9,3 @@ import { Command, CommandFinished, CommandOutput, SerializedCommand, SerializedCommandFinished } from "./command.js";
 import { Sandbox, SerializedSandbox } from "./sandbox.js";
-export { APIError, Command, CommandFinished, type CommandOutput, FileSystem, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, Sandbox, type SerializedCommand, type SerializedCommandFinished, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, StreamError };
+import { InvalidRequestProxyHandler, ProxyHandler, ProxyMeta, defineSandboxProxy } from "./proxy.js";
+export { APIError, Command, CommandFinished, type CommandOutput, FileSystem, type InvalidRequestProxyHandler, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, type ProxyHandler, type ProxyMeta, Sandbox, type SerializedCommand, type SerializedCommandFinished, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, type SnapshotTreeNodeData, StreamError, defineSandboxProxy };

dist/index.js

@@ -7,3 +7,4 @@ import { APIError, StreamError } from "./api-client/api-error.js";
 import { Sandbox } from "./sandbox.js";
+import { defineSandboxProxy } from "./proxy.js";
 
-export { APIError, Command, CommandFinished, FileSystem, Sandbox, Session, Snapshot, StreamError };
+export { APIError, Command, CommandFinished, FileSystem, Sandbox, Session, Snapshot, StreamError, defineSandboxProxy };

dist/network-policy.d.cts

@@ -67,2 +67,7 @@ //#region src/network-policy.d.ts
    * HTTPS proxy URL to forward matching requests to. Must not include query string or fragment.
+   *
+   * You can use the `defineSandboxProxy` helper from `@vercel/sandbox/proxy` to implement the proxy handler
+   * automatically, which handles authorization and extracts metadata about the request and sandbox.
+   *
+   * @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying
    */
@@ -69,0 +74,0 @@ forwardURL?: string;

dist/network-policy.d.ts

@@ -67,2 +67,7 @@ //#region src/network-policy.d.ts
    * HTTPS proxy URL to forward matching requests to. Must not include query string or fragment.
+   *
+   * You can use the `defineSandboxProxy` helper from `@vercel/sandbox/proxy` to implement the proxy handler
+   * automatically, which handles authorization and extracts metadata about the request and sandbox.
+   *
+   * @see https://vercel.com/docs/vercel-sandbox/concepts/firewall#requests-proxying
    */
@@ -69,0 +74,0 @@ forwardURL?: string;

dist/snapshot.cjs

@@ -166,2 +166,39 @@ const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
 	/**
+	* Fetch the snapshot ancestry tree anchored on a given snapshot.
+	* It returns both the tree nodes and the pagination metadata to allow
+	* walking the next page of results in the same direction.
+	*
+	* The returned object is async-iterable to auto-paginate through all pages
+	* in the direction set by `sortOrder` (`"desc"` walks ancestors, `"asc"`
+	* walks descendants):
+	*
+	* ```ts
+	* const result = await Snapshot.tree({ snapshotId: "snap_abc", sortOrder: "desc" });
+	* for await (const node of result) { ... }
+	* // or: await result.toArray();
+	* // or: for await (const page of result.pages()) { ... }
+	* ```
+	*/
+	static async tree(params) {
+		"use step";
+		const credentials = await require_get_credentials.getCredentials(params);
+		const client = new require_api_client.APIClient({
+			teamId: credentials.teamId,
+			token: credentials.token,
+			fetch: params.fetch
+		});
+		const fetchPage = async (snapshotId) => {
+			return (await client.getSnapshotTree({
+				...credentials,
+				...params,
+				snapshotId
+			})).json;
+		};
+		return require_paginator.attachPaginator(await fetchPage(params.snapshotId), {
+			itemsKey: "snapshots",
+			fetchNext: fetchPage,
+			signal: params.signal
+		});
+	}
+	/**
 	* Retrieve an existing snapshot.
@@ -168,0 +205,0 @@ *

dist/snapshot.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"snapshot.cjs","names":["getCredentials","APIClient","WORKFLOW_SERIALIZE","WORKFLOW_DESERIALIZE","attachPaginator"],"sources":["../src/snapshot.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { SnapshotMetadata } from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\n\nexport interface SerializedSnapshot {\n  snapshot: SnapshotMetadata;\n}\n\n/** @inline */\ninterface GetSnapshotParams {\n  /**\n   * Unique identifier of the snapshot.\n   */\n  snapshotId: string;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n}\n\n/**\n * A Snapshot is a saved state of a Sandbox that can be used to create new Sandboxes\n *\n * Use {@link Sandbox.snapshot} or {@link Snapshot.get} to construct.\n * @hideconstructor\n */\nexport class Snapshot {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Snapshot was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Unique ID of this snapshot.\n   */\n  public get snapshotId(): string {\n    return this.snapshot.id;\n  }\n\n  /**\n   * The ID of the session from which this snapshot was created.\n   */\n  public get sourceSessionId(): string {\n    return this.snapshot.sourceSessionId;\n  }\n\n  /**\n   * The status of the snapshot.\n   */\n  public get status(): SnapshotMetadata[\"status\"] {\n    return this.snapshot.status;\n  }\n\n  /**\n   * The size of the snapshot in bytes, or null if not available.\n   */\n  public get sizeBytes(): number {\n    return this.snapshot.sizeBytes;\n  }\n\n  /**\n   * The creation date of this snapshot.\n   */\n  public get createdAt(): Date {\n    return new Date(this.snapshot.createdAt);\n  }\n\n  /**\n   * The expiration date of this snapshot, or undefined if it does not expire.\n   */\n  public get expiresAt(): Date | undefined {\n    if (this.snapshot.expiresAt === undefined) {\n      return undefined;\n    }\n\n    return new Date(this.snapshot.expiresAt);\n  }\n\n  /**\n   * Internal metadata about this snapshot.\n   */\n  private snapshot: SnapshotMetadata;\n\n  /**\n   * Serialize a Snapshot instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Snapshot instance to serialize\n   * @returns A plain object containing snapshot metadata\n   */\n  static [WORKFLOW_SERIALIZE](instance: Snapshot): SerializedSnapshot {\n    return {\n      snapshot: instance.snapshot,\n    };\n  }\n\n  /**\n   * Deserialize a Snapshot from serialized data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized snapshot data\n   * @returns The reconstructed Snapshot instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSnapshot): Snapshot {\n    return new Snapshot({\n      snapshot: data.snapshot,\n    });\n  }\n\n  constructor({\n    client,\n    snapshot,\n  }: {\n    client?: APIClient;\n    snapshot: SnapshotMetadata;\n  }) {\n    this._client = client ?? null;\n    this.snapshot = snapshot;\n  }\n\n  /**\n   * Allow to get a list of snapshots for a team narrowed to the given params.\n   * It returns both the snapshots and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Snapshot.list({ name: \"my-sandbox\" });\n   * for await (const snapshot of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSnapshots\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Resolve the current snapshot ID of an existing sandbox by name.\n   *\n   * Useful to feed into {@link Sandbox.create} as `source.snapshotId` without\n   * having to first look up the sandbox yourself.\n   *\n   * @param name - The name of the source sandbox.\n   * @param opts - Optional credentials, fetch override, and abort signal.\n   * @returns The current snapshot ID of the named sandbox.\n   * @throws If the sandbox has no current snapshot.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   source: {\n   *     type: \"snapshot\",\n   *     snapshotId: await Snapshot.fromSandbox(\"my-sandbox\"),\n   *   },\n   * });\n   */\n  static async fromSandbox(\n    name: string,\n    opts?: Partial<Credentials> & WithFetchOptions & { signal?: AbortSignal },\n  ): Promise<string> {\n    \"use step\";\n    const credentials = await getCredentials(opts);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: opts?.fetch,\n    });\n\n    const response = await client.getSandbox({\n      name,\n      projectId: credentials.projectId,\n      resume: false,\n      signal: opts?.signal,\n    });\n\n    const snapshotId = response.json.sandbox.currentSnapshotId;\n    if (!snapshotId) {\n      throw new Error(`Sandbox \"${name}\" has no current snapshot.`);\n    }\n    return snapshotId;\n  }\n\n  /**\n   * Retrieve an existing snapshot.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: GetSnapshotParams | (GetSnapshotParams & Credentials),\n  ): Promise<Snapshot> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n\n    const sandbox = await client.getSnapshot({\n      snapshotId: params.snapshotId,\n      signal: params.signal,\n    });\n\n    return new Snapshot({\n      client,\n      snapshot: sandbox.json.snapshot,\n    });\n  }\n\n  /**\n   * Delete this snapshot.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves once the snapshot has been deleted.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.deleteSnapshot({\n      snapshotId: this.snapshot.id,\n      signal: opts?.signal,\n    });\n\n    this.snapshot = response.json.snapshot;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA6BA,IAAa,WAAb,MAAa,SAAS;;;;;;;CASpB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAMA,wCAAgB;AAC1C,OAAK,UAAU,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,aAAqB;AAC9B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,kBAA0B;AACnC,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,SAAqC;AAC9C,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAoB;AAC7B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;CAM1C,IAAW,YAA8B;AACvC,MAAI,KAAK,SAAS,cAAc,OAC9B;AAGF,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;;;;CAc1C,QAAQC,qCAAoB,UAAwC;AAClE,SAAO,EACL,UAAU,SAAS,UACpB;;;;;;;;;;;CAYH,QAAQC,uCAAsB,MAAoC;AAChE,SAAO,IAAI,SAAS,EAClB,UAAU,KAAK,UAChB,CAAC;;CAGJ,YAAY,EACV,QACA,YAIC;OAvGK,UAA4B;AAwGlC,OAAK,UAAU,UAAU;AACzB,OAAK,WAAW;;;;;;;;;;;;;;;;CAiBlB,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAMH,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAOG,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;;;;;;;;;;CAsBJ,aAAa,YACX,MACA,MACiB;AACjB;EACA,MAAM,cAAc,MAAMJ,uCAAe,KAAK;EAc9C,MAAM,cAPW,MANF,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,MAAM;GACd,CAAC,CAE4B,WAAW;GACvC;GACA,WAAW,YAAY;GACvB,QAAQ;GACR,QAAQ,MAAM;GACf,CAAC,EAE0B,KAAK,QAAQ;AACzC,MAAI,CAAC,WACH,OAAM,IAAI,MAAM,YAAY,KAAK,4BAA4B;AAE/D,SAAO;;;;;;;;CAST,aAAa,IACX,QACmB;AACnB;EACA,MAAM,cAAc,MAAMD,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AAOF,SAAO,IAAI,SAAS;GAClB;GACA,WAPc,MAAM,OAAO,YAAY;IACvC,YAAY,OAAO;IACnB,QAAQ,OAAO;IAChB,CAAC,EAIkB,KAAK;GACxB,CAAC;;;;;;;;;CAUJ,MAAM,OAAO,MAAgD;AAC3D;AAOA,OAAK,YALY,OADF,MAAM,KAAK,cAAc,EACV,eAAe;GAC3C,YAAY,KAAK,SAAS;GAC1B,QAAQ,MAAM;GACf,CAAC,EAEuB,KAAK"}
+{"version":3,"file":"snapshot.cjs","names":["getCredentials","APIClient","WORKFLOW_SERIALIZE","WORKFLOW_DESERIALIZE","attachPaginator"],"sources":["../src/snapshot.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { SnapshotMetadata } from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\n\nexport interface SerializedSnapshot {\n  snapshot: SnapshotMetadata;\n}\n\n/** @inline */\ninterface GetSnapshotParams {\n  /**\n   * Unique identifier of the snapshot.\n   */\n  snapshotId: string;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n}\n\n/**\n * A Snapshot is a saved state of a Sandbox that can be used to create new Sandboxes\n *\n * Use {@link Sandbox.snapshot} or {@link Snapshot.get} to construct.\n * @hideconstructor\n */\nexport class Snapshot {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Snapshot was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Unique ID of this snapshot.\n   */\n  public get snapshotId(): string {\n    return this.snapshot.id;\n  }\n\n  /**\n   * The ID of the session from which this snapshot was created.\n   */\n  public get sourceSessionId(): string {\n    return this.snapshot.sourceSessionId;\n  }\n\n  /**\n   * The status of the snapshot.\n   */\n  public get status(): SnapshotMetadata[\"status\"] {\n    return this.snapshot.status;\n  }\n\n  /**\n   * The size of the snapshot in bytes, or null if not available.\n   */\n  public get sizeBytes(): number {\n    return this.snapshot.sizeBytes;\n  }\n\n  /**\n   * The creation date of this snapshot.\n   */\n  public get createdAt(): Date {\n    return new Date(this.snapshot.createdAt);\n  }\n\n  /**\n   * The expiration date of this snapshot, or undefined if it does not expire.\n   */\n  public get expiresAt(): Date | undefined {\n    if (this.snapshot.expiresAt === undefined) {\n      return undefined;\n    }\n\n    return new Date(this.snapshot.expiresAt);\n  }\n\n  /**\n   * Internal metadata about this snapshot.\n   */\n  private snapshot: SnapshotMetadata;\n\n  /**\n   * Serialize a Snapshot instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Snapshot instance to serialize\n   * @returns A plain object containing snapshot metadata\n   */\n  static [WORKFLOW_SERIALIZE](instance: Snapshot): SerializedSnapshot {\n    return {\n      snapshot: instance.snapshot,\n    };\n  }\n\n  /**\n   * Deserialize a Snapshot from serialized data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized snapshot data\n   * @returns The reconstructed Snapshot instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSnapshot): Snapshot {\n    return new Snapshot({\n      snapshot: data.snapshot,\n    });\n  }\n\n  constructor({\n    client,\n    snapshot,\n  }: {\n    client?: APIClient;\n    snapshot: SnapshotMetadata;\n  }) {\n    this._client = client ?? null;\n    this.snapshot = snapshot;\n  }\n\n  /**\n   * Allow to get a list of snapshots for a team narrowed to the given params.\n   * It returns both the snapshots and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Snapshot.list({ name: \"my-sandbox\" });\n   * for await (const snapshot of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSnapshots\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Resolve the current snapshot ID of an existing sandbox by name.\n   *\n   * Useful to feed into {@link Sandbox.create} as `source.snapshotId` without\n   * having to first look up the sandbox yourself.\n   *\n   * @param name - The name of the source sandbox.\n   * @param opts - Optional credentials, fetch override, and abort signal.\n   * @returns The current snapshot ID of the named sandbox.\n   * @throws If the sandbox has no current snapshot.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   source: {\n   *     type: \"snapshot\",\n   *     snapshotId: await Snapshot.fromSandbox(\"my-sandbox\"),\n   *   },\n   * });\n   */\n  static async fromSandbox(\n    name: string,\n    opts?: Partial<Credentials> & WithFetchOptions & { signal?: AbortSignal },\n  ): Promise<string> {\n    \"use step\";\n    const credentials = await getCredentials(opts);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: opts?.fetch,\n    });\n\n    const response = await client.getSandbox({\n      name,\n      projectId: credentials.projectId,\n      resume: false,\n      signal: opts?.signal,\n    });\n\n    const snapshotId = response.json.sandbox.currentSnapshotId;\n    if (!snapshotId) {\n      throw new Error(`Sandbox \"${name}\" has no current snapshot.`);\n    }\n    return snapshotId;\n  }\n\n  /**\n   * Fetch the snapshot ancestry tree anchored on a given snapshot.\n   * It returns both the tree nodes and the pagination metadata to allow\n   * walking the next page of results in the same direction.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages\n   * in the direction set by `sortOrder` (`\"desc\"` walks ancestors, `\"asc\"`\n   * walks descendants):\n   *\n   * ```ts\n   * const result = await Snapshot.tree({ snapshotId: \"snap_abc\", sortOrder: \"desc\" });\n   * for await (const node of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async tree(\n    params: { snapshotId: string } &\n      Partial<Parameters<APIClient[\"getSnapshotTree\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n    const fetchPage = async (snapshotId: string) => {\n      const response = await client.getSnapshotTree({\n        ...credentials,\n        ...params,\n        snapshotId,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params.snapshotId);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params.signal,\n    });\n  }\n\n  /**\n   * Retrieve an existing snapshot.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: GetSnapshotParams | (GetSnapshotParams & Credentials),\n  ): Promise<Snapshot> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n\n    const sandbox = await client.getSnapshot({\n      snapshotId: params.snapshotId,\n      signal: params.signal,\n    });\n\n    return new Snapshot({\n      client,\n      snapshot: sandbox.json.snapshot,\n    });\n  }\n\n  /**\n   * Delete this snapshot.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves once the snapshot has been deleted.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.deleteSnapshot({\n      snapshotId: this.snapshot.id,\n      signal: opts?.signal,\n    });\n\n    this.snapshot = response.json.snapshot;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA6BA,IAAa,WAAb,MAAa,SAAS;;;;;;;CASpB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAMA,wCAAgB;AAC1C,OAAK,UAAU,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,aAAqB;AAC9B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,kBAA0B;AACnC,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,SAAqC;AAC9C,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAoB;AAC7B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;CAM1C,IAAW,YAA8B;AACvC,MAAI,KAAK,SAAS,cAAc,OAC9B;AAGF,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;;;;CAc1C,QAAQC,qCAAoB,UAAwC;AAClE,SAAO,EACL,UAAU,SAAS,UACpB;;;;;;;;;;;CAYH,QAAQC,uCAAsB,MAAoC;AAChE,SAAO,IAAI,SAAS,EAClB,UAAU,KAAK,UAChB,CAAC;;CAGJ,YAAY,EACV,QACA,YAIC;OAvGK,UAA4B;AAwGlC,OAAK,UAAU,UAAU;AACzB,OAAK,WAAW;;;;;;;;;;;;;;;;CAiBlB,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAMH,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAOG,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;;;;;;;;;;CAsBJ,aAAa,YACX,MACA,MACiB;AACjB;EACA,MAAM,cAAc,MAAMJ,uCAAe,KAAK;EAc9C,MAAM,cAPW,MANF,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,MAAM;GACd,CAAC,CAE4B,WAAW;GACvC;GACA,WAAW,YAAY;GACvB,QAAQ;GACR,QAAQ,MAAM;GACf,CAAC,EAE0B,KAAK,QAAQ;AACzC,MAAI,CAAC,WACH,OAAM,IAAI,MAAM,YAAY,KAAK,4BAA4B;AAE/D,SAAO;;;;;;;;;;;;;;;;;;CAmBT,aAAa,KACX,QAIA;AACA;EACA,MAAM,cAAc,MAAMD,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;EACF,MAAM,YAAY,OAAO,eAAuB;AAM9C,WALiB,MAAM,OAAO,gBAAgB;IAC5C,GAAG;IACH,GAAG;IACH;IACD,CAAC,EACc;;AAGlB,SAAOG,kCADW,MAAM,UAAU,OAAO,WAAW,EAClB;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,OAAO;GAChB,CAAC;;;;;;;;CASJ,aAAa,IACX,QACmB;AACnB;EACA,MAAM,cAAc,MAAMJ,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AAOF,SAAO,IAAI,SAAS;GAClB;GACA,WAPc,MAAM,OAAO,YAAY;IACvC,YAAY,OAAO;IACnB,QAAQ,OAAO;IAChB,CAAC,EAIkB,KAAK;GACxB,CAAC;;;;;;;;;CAUJ,MAAM,OAAO,MAAgD;AAC3D;AAOA,OAAK,YALY,OADF,MAAM,KAAK,cAAc,EACV,eAAe;GAC3C,YAAY,KAAK,SAAS;GAC1B,QAAQ,MAAM;GACf,CAAC,EAEuB,KAAK"}

dist/snapshot.d.cts

@@ -117,2 +117,5 @@ import { Paginator } from "./utils/paginator.cjs";
       expiresAt?: number | undefined;
+      lastUsedAt?: number | undefined;
+      creationMethod?: string | undefined;
+      parentId?: string | undefined;
     }[];
@@ -143,2 +146,55 @@ }, "snapshots">>;
   /**
+   * Fetch the snapshot ancestry tree anchored on a given snapshot.
+   * It returns both the tree nodes and the pagination metadata to allow
+   * walking the next page of results in the same direction.
+   *
+   * The returned object is async-iterable to auto-paginate through all pages
+   * in the direction set by `sortOrder` (`"desc"` walks ancestors, `"asc"`
+   * walks descendants):
+   *
+   * ```ts
+   * const result = await Snapshot.tree({ snapshotId: "snap_abc", sortOrder: "desc" });
+   * for await (const node of result) { ... }
+   * // or: await result.toArray();
+   * // or: for await (const page of result.pages()) { ... }
+   * ```
+   */
+  static tree(params: {
+    snapshotId: string;
+  } & Partial<Parameters<APIClient["getSnapshotTree"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
+    pagination: {
+      count: number;
+      next: string | null;
+    };
+    snapshots: {
+      count: string;
+      snapshot: {
+        status: "failed" | "created" | "deleted";
+        region: string;
+        createdAt: number;
+        updatedAt: number;
+        id: string;
+        sourceSessionId: string;
+        sizeBytes: number;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        creationMethod?: string | undefined;
+        parentId?: string | undefined;
+      };
+      siblings: {
+        status: "failed" | "created" | "deleted";
+        region: string;
+        createdAt: number;
+        updatedAt: number;
+        id: string;
+        sourceSessionId: string;
+        sizeBytes: number;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        creationMethod?: string | undefined;
+        parentId?: string | undefined;
+      }[];
+    }[];
+  }, "snapshots">>;
+  /**
    * Retrieve an existing snapshot.
@@ -145,0 +201,0 @@ *

dist/snapshot.d.ts

@@ -118,2 +118,5 @@ import { Paginator } from "./utils/paginator.js";
       expiresAt?: number | undefined;
+      lastUsedAt?: number | undefined;
+      creationMethod?: string | undefined;
+      parentId?: string | undefined;
     }[];
@@ -144,2 +147,55 @@ }, "snapshots">>;
   /**
+   * Fetch the snapshot ancestry tree anchored on a given snapshot.
+   * It returns both the tree nodes and the pagination metadata to allow
+   * walking the next page of results in the same direction.
+   *
+   * The returned object is async-iterable to auto-paginate through all pages
+   * in the direction set by `sortOrder` (`"desc"` walks ancestors, `"asc"`
+   * walks descendants):
+   *
+   * ```ts
+   * const result = await Snapshot.tree({ snapshotId: "snap_abc", sortOrder: "desc" });
+   * for await (const node of result) { ... }
+   * // or: await result.toArray();
+   * // or: for await (const page of result.pages()) { ... }
+   * ```
+   */
+  static tree(params: {
+    snapshotId: string;
+  } & Partial<Parameters<APIClient["getSnapshotTree"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
+    pagination: {
+      count: number;
+      next: string | null;
+    };
+    snapshots: {
+      count: string;
+      snapshot: {
+        status: "failed" | "created" | "deleted";
+        region: string;
+        createdAt: number;
+        updatedAt: number;
+        id: string;
+        sourceSessionId: string;
+        sizeBytes: number;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        creationMethod?: string | undefined;
+        parentId?: string | undefined;
+      };
+      siblings: {
+        status: "failed" | "created" | "deleted";
+        region: string;
+        createdAt: number;
+        updatedAt: number;
+        id: string;
+        sourceSessionId: string;
+        sizeBytes: number;
+        expiresAt?: number | undefined;
+        lastUsedAt?: number | undefined;
+        creationMethod?: string | undefined;
+        parentId?: string | undefined;
+      }[];
+    }[];
+  }, "snapshots">>;
+  /**
    * Retrieve an existing snapshot.
@@ -146,0 +202,0 @@ *

dist/snapshot.js

@@ -165,2 +165,39 @@ import { APIClient } from "./api-client/api-client.js";
 	/**
+	* Fetch the snapshot ancestry tree anchored on a given snapshot.
+	* It returns both the tree nodes and the pagination metadata to allow
+	* walking the next page of results in the same direction.
+	*
+	* The returned object is async-iterable to auto-paginate through all pages
+	* in the direction set by `sortOrder` (`"desc"` walks ancestors, `"asc"`
+	* walks descendants):
+	*
+	* ```ts
+	* const result = await Snapshot.tree({ snapshotId: "snap_abc", sortOrder: "desc" });
+	* for await (const node of result) { ... }
+	* // or: await result.toArray();
+	* // or: for await (const page of result.pages()) { ... }
+	* ```
+	*/
+	static async tree(params) {
+		"use step";
+		const credentials = await getCredentials(params);
+		const client = new APIClient({
+			teamId: credentials.teamId,
+			token: credentials.token,
+			fetch: params.fetch
+		});
+		const fetchPage = async (snapshotId) => {
+			return (await client.getSnapshotTree({
+				...credentials,
+				...params,
+				snapshotId
+			})).json;
+		};
+		return attachPaginator(await fetchPage(params.snapshotId), {
+			itemsKey: "snapshots",
+			fetchNext: fetchPage,
+			signal: params.signal
+		});
+	}
+	/**
 	* Retrieve an existing snapshot.
@@ -167,0 +204,0 @@ *

dist/snapshot.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"snapshot.js","names":[],"sources":["../src/snapshot.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { SnapshotMetadata } from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\n\nexport interface SerializedSnapshot {\n  snapshot: SnapshotMetadata;\n}\n\n/** @inline */\ninterface GetSnapshotParams {\n  /**\n   * Unique identifier of the snapshot.\n   */\n  snapshotId: string;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n}\n\n/**\n * A Snapshot is a saved state of a Sandbox that can be used to create new Sandboxes\n *\n * Use {@link Sandbox.snapshot} or {@link Snapshot.get} to construct.\n * @hideconstructor\n */\nexport class Snapshot {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Snapshot was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Unique ID of this snapshot.\n   */\n  public get snapshotId(): string {\n    return this.snapshot.id;\n  }\n\n  /**\n   * The ID of the session from which this snapshot was created.\n   */\n  public get sourceSessionId(): string {\n    return this.snapshot.sourceSessionId;\n  }\n\n  /**\n   * The status of the snapshot.\n   */\n  public get status(): SnapshotMetadata[\"status\"] {\n    return this.snapshot.status;\n  }\n\n  /**\n   * The size of the snapshot in bytes, or null if not available.\n   */\n  public get sizeBytes(): number {\n    return this.snapshot.sizeBytes;\n  }\n\n  /**\n   * The creation date of this snapshot.\n   */\n  public get createdAt(): Date {\n    return new Date(this.snapshot.createdAt);\n  }\n\n  /**\n   * The expiration date of this snapshot, or undefined if it does not expire.\n   */\n  public get expiresAt(): Date | undefined {\n    if (this.snapshot.expiresAt === undefined) {\n      return undefined;\n    }\n\n    return new Date(this.snapshot.expiresAt);\n  }\n\n  /**\n   * Internal metadata about this snapshot.\n   */\n  private snapshot: SnapshotMetadata;\n\n  /**\n   * Serialize a Snapshot instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Snapshot instance to serialize\n   * @returns A plain object containing snapshot metadata\n   */\n  static [WORKFLOW_SERIALIZE](instance: Snapshot): SerializedSnapshot {\n    return {\n      snapshot: instance.snapshot,\n    };\n  }\n\n  /**\n   * Deserialize a Snapshot from serialized data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized snapshot data\n   * @returns The reconstructed Snapshot instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSnapshot): Snapshot {\n    return new Snapshot({\n      snapshot: data.snapshot,\n    });\n  }\n\n  constructor({\n    client,\n    snapshot,\n  }: {\n    client?: APIClient;\n    snapshot: SnapshotMetadata;\n  }) {\n    this._client = client ?? null;\n    this.snapshot = snapshot;\n  }\n\n  /**\n   * Allow to get a list of snapshots for a team narrowed to the given params.\n   * It returns both the snapshots and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Snapshot.list({ name: \"my-sandbox\" });\n   * for await (const snapshot of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSnapshots\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Resolve the current snapshot ID of an existing sandbox by name.\n   *\n   * Useful to feed into {@link Sandbox.create} as `source.snapshotId` without\n   * having to first look up the sandbox yourself.\n   *\n   * @param name - The name of the source sandbox.\n   * @param opts - Optional credentials, fetch override, and abort signal.\n   * @returns The current snapshot ID of the named sandbox.\n   * @throws If the sandbox has no current snapshot.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   source: {\n   *     type: \"snapshot\",\n   *     snapshotId: await Snapshot.fromSandbox(\"my-sandbox\"),\n   *   },\n   * });\n   */\n  static async fromSandbox(\n    name: string,\n    opts?: Partial<Credentials> & WithFetchOptions & { signal?: AbortSignal },\n  ): Promise<string> {\n    \"use step\";\n    const credentials = await getCredentials(opts);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: opts?.fetch,\n    });\n\n    const response = await client.getSandbox({\n      name,\n      projectId: credentials.projectId,\n      resume: false,\n      signal: opts?.signal,\n    });\n\n    const snapshotId = response.json.sandbox.currentSnapshotId;\n    if (!snapshotId) {\n      throw new Error(`Sandbox \"${name}\" has no current snapshot.`);\n    }\n    return snapshotId;\n  }\n\n  /**\n   * Retrieve an existing snapshot.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: GetSnapshotParams | (GetSnapshotParams & Credentials),\n  ): Promise<Snapshot> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n\n    const sandbox = await client.getSnapshot({\n      snapshotId: params.snapshotId,\n      signal: params.signal,\n    });\n\n    return new Snapshot({\n      client,\n      snapshot: sandbox.json.snapshot,\n    });\n  }\n\n  /**\n   * Delete this snapshot.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves once the snapshot has been deleted.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.deleteSnapshot({\n      snapshotId: this.snapshot.id,\n      signal: opts?.signal,\n    });\n\n    this.snapshot = response.json.snapshot;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AA6BA,IAAa,WAAb,MAAa,SAAS;;;;;;;CASpB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAM,gBAAgB;AAC1C,OAAK,UAAU,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,aAAqB;AAC9B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,kBAA0B;AACnC,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,SAAqC;AAC9C,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAoB;AAC7B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;CAM1C,IAAW,YAA8B;AACvC,MAAI,KAAK,SAAS,cAAc,OAC9B;AAGF,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;;;;CAc1C,QAAQ,oBAAoB,UAAwC;AAClE,SAAO,EACL,UAAU,SAAS,UACpB;;;;;;;;;;;CAYH,QAAQ,sBAAsB,MAAoC;AAChE,SAAO,IAAI,SAAS,EAClB,UAAU,KAAK,UAChB,CAAC;;CAGJ,YAAY,EACV,QACA,YAIC;OAvGK,UAA4B;AAwGlC,OAAK,UAAU,UAAU;AACzB,OAAK,WAAW;;;;;;;;;;;;;;;;CAiBlB,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;;;;;;;;;;CAsBJ,aAAa,YACX,MACA,MACiB;AACjB;EACA,MAAM,cAAc,MAAM,eAAe,KAAK;EAc9C,MAAM,cAPW,MANF,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,MAAM;GACd,CAAC,CAE4B,WAAW;GACvC;GACA,WAAW,YAAY;GACvB,QAAQ;GACR,QAAQ,MAAM;GACf,CAAC,EAE0B,KAAK,QAAQ;AACzC,MAAI,CAAC,WACH,OAAM,IAAI,MAAM,YAAY,KAAK,4BAA4B;AAE/D,SAAO;;;;;;;;CAST,aAAa,IACX,QACmB;AACnB;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AAOF,SAAO,IAAI,SAAS;GAClB;GACA,WAPc,MAAM,OAAO,YAAY;IACvC,YAAY,OAAO;IACnB,QAAQ,OAAO;IAChB,CAAC,EAIkB,KAAK;GACxB,CAAC;;;;;;;;;CAUJ,MAAM,OAAO,MAAgD;AAC3D;AAOA,OAAK,YALY,OADF,MAAM,KAAK,cAAc,EACV,eAAe;GAC3C,YAAY,KAAK,SAAS;GAC1B,QAAQ,MAAM;GACf,CAAC,EAEuB,KAAK"}
+{"version":3,"file":"snapshot.js","names":[],"sources":["../src/snapshot.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { SnapshotMetadata } from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\n\nexport interface SerializedSnapshot {\n  snapshot: SnapshotMetadata;\n}\n\n/** @inline */\ninterface GetSnapshotParams {\n  /**\n   * Unique identifier of the snapshot.\n   */\n  snapshotId: string;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n}\n\n/**\n * A Snapshot is a saved state of a Sandbox that can be used to create new Sandboxes\n *\n * Use {@link Sandbox.snapshot} or {@link Snapshot.get} to construct.\n * @hideconstructor\n */\nexport class Snapshot {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Snapshot was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Unique ID of this snapshot.\n   */\n  public get snapshotId(): string {\n    return this.snapshot.id;\n  }\n\n  /**\n   * The ID of the session from which this snapshot was created.\n   */\n  public get sourceSessionId(): string {\n    return this.snapshot.sourceSessionId;\n  }\n\n  /**\n   * The status of the snapshot.\n   */\n  public get status(): SnapshotMetadata[\"status\"] {\n    return this.snapshot.status;\n  }\n\n  /**\n   * The size of the snapshot in bytes, or null if not available.\n   */\n  public get sizeBytes(): number {\n    return this.snapshot.sizeBytes;\n  }\n\n  /**\n   * The creation date of this snapshot.\n   */\n  public get createdAt(): Date {\n    return new Date(this.snapshot.createdAt);\n  }\n\n  /**\n   * The expiration date of this snapshot, or undefined if it does not expire.\n   */\n  public get expiresAt(): Date | undefined {\n    if (this.snapshot.expiresAt === undefined) {\n      return undefined;\n    }\n\n    return new Date(this.snapshot.expiresAt);\n  }\n\n  /**\n   * Internal metadata about this snapshot.\n   */\n  private snapshot: SnapshotMetadata;\n\n  /**\n   * Serialize a Snapshot instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Snapshot instance to serialize\n   * @returns A plain object containing snapshot metadata\n   */\n  static [WORKFLOW_SERIALIZE](instance: Snapshot): SerializedSnapshot {\n    return {\n      snapshot: instance.snapshot,\n    };\n  }\n\n  /**\n   * Deserialize a Snapshot from serialized data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized snapshot data\n   * @returns The reconstructed Snapshot instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSnapshot): Snapshot {\n    return new Snapshot({\n      snapshot: data.snapshot,\n    });\n  }\n\n  constructor({\n    client,\n    snapshot,\n  }: {\n    client?: APIClient;\n    snapshot: SnapshotMetadata;\n  }) {\n    this._client = client ?? null;\n    this.snapshot = snapshot;\n  }\n\n  /**\n   * Allow to get a list of snapshots for a team narrowed to the given params.\n   * It returns both the snapshots and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Snapshot.list({ name: \"my-sandbox\" });\n   * for await (const snapshot of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSnapshots\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Resolve the current snapshot ID of an existing sandbox by name.\n   *\n   * Useful to feed into {@link Sandbox.create} as `source.snapshotId` without\n   * having to first look up the sandbox yourself.\n   *\n   * @param name - The name of the source sandbox.\n   * @param opts - Optional credentials, fetch override, and abort signal.\n   * @returns The current snapshot ID of the named sandbox.\n   * @throws If the sandbox has no current snapshot.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   source: {\n   *     type: \"snapshot\",\n   *     snapshotId: await Snapshot.fromSandbox(\"my-sandbox\"),\n   *   },\n   * });\n   */\n  static async fromSandbox(\n    name: string,\n    opts?: Partial<Credentials> & WithFetchOptions & { signal?: AbortSignal },\n  ): Promise<string> {\n    \"use step\";\n    const credentials = await getCredentials(opts);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: opts?.fetch,\n    });\n\n    const response = await client.getSandbox({\n      name,\n      projectId: credentials.projectId,\n      resume: false,\n      signal: opts?.signal,\n    });\n\n    const snapshotId = response.json.sandbox.currentSnapshotId;\n    if (!snapshotId) {\n      throw new Error(`Sandbox \"${name}\" has no current snapshot.`);\n    }\n    return snapshotId;\n  }\n\n  /**\n   * Fetch the snapshot ancestry tree anchored on a given snapshot.\n   * It returns both the tree nodes and the pagination metadata to allow\n   * walking the next page of results in the same direction.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages\n   * in the direction set by `sortOrder` (`\"desc\"` walks ancestors, `\"asc\"`\n   * walks descendants):\n   *\n   * ```ts\n   * const result = await Snapshot.tree({ snapshotId: \"snap_abc\", sortOrder: \"desc\" });\n   * for await (const node of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async tree(\n    params: { snapshotId: string } &\n      Partial<Parameters<APIClient[\"getSnapshotTree\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n    const fetchPage = async (snapshotId: string) => {\n      const response = await client.getSnapshotTree({\n        ...credentials,\n        ...params,\n        snapshotId,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params.snapshotId);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params.signal,\n    });\n  }\n\n  /**\n   * Retrieve an existing snapshot.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: GetSnapshotParams | (GetSnapshotParams & Credentials),\n  ): Promise<Snapshot> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n\n    const sandbox = await client.getSnapshot({\n      snapshotId: params.snapshotId,\n      signal: params.signal,\n    });\n\n    return new Snapshot({\n      client,\n      snapshot: sandbox.json.snapshot,\n    });\n  }\n\n  /**\n   * Delete this snapshot.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves once the snapshot has been deleted.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.deleteSnapshot({\n      snapshotId: this.snapshot.id,\n      signal: opts?.signal,\n    });\n\n    this.snapshot = response.json.snapshot;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AA6BA,IAAa,WAAb,MAAa,SAAS;;;;;;;CASpB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAM,gBAAgB;AAC1C,OAAK,UAAU,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,aAAqB;AAC9B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,kBAA0B;AACnC,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,SAAqC;AAC9C,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAoB;AAC7B,SAAO,KAAK,SAAS;;;;;CAMvB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;CAM1C,IAAW,YAA8B;AACvC,MAAI,KAAK,SAAS,cAAc,OAC9B;AAGF,SAAO,IAAI,KAAK,KAAK,SAAS,UAAU;;;;;;;;CAc1C,QAAQ,oBAAoB,UAAwC;AAClE,SAAO,EACL,UAAU,SAAS,UACpB;;;;;;;;;;;CAYH,QAAQ,sBAAsB,MAAoC;AAChE,SAAO,IAAI,SAAS,EAClB,UAAU,KAAK,UAChB,CAAC;;CAGJ,YAAY,EACV,QACA,YAIC;OAvGK,UAA4B;AAwGlC,OAAK,UAAU,UAAU;AACzB,OAAK,WAAW;;;;;;;;;;;;;;;;CAiBlB,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;;;;;;;;;;CAsBJ,aAAa,YACX,MACA,MACiB;AACjB;EACA,MAAM,cAAc,MAAM,eAAe,KAAK;EAc9C,MAAM,cAPW,MANF,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,MAAM;GACd,CAAC,CAE4B,WAAW;GACvC;GACA,WAAW,YAAY;GACvB,QAAQ;GACR,QAAQ,MAAM;GACf,CAAC,EAE0B,KAAK,QAAQ;AACzC,MAAI,CAAC,WACH,OAAM,IAAI,MAAM,YAAY,KAAK,4BAA4B;AAE/D,SAAO;;;;;;;;;;;;;;;;;;CAmBT,aAAa,KACX,QAIA;AACA;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;EACF,MAAM,YAAY,OAAO,eAAuB;AAM9C,WALiB,MAAM,OAAO,gBAAgB;IAC5C,GAAG;IACH,GAAG;IACH;IACD,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,OAAO,WAAW,EAClB;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,OAAO;GAChB,CAAC;;;;;;;;CASJ,aAAa,IACX,QACmB;AACnB;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AAOF,SAAO,IAAI,SAAS;GAClB;GACA,WAPc,MAAM,OAAO,YAAY;IACvC,YAAY,OAAO;IACnB,QAAQ,OAAO;IAChB,CAAC,EAIkB,KAAK;GACxB,CAAC;;;;;;;;;CAUJ,MAAM,OAAO,MAAgD;AAC3D;AAOA,OAAK,YALY,OADF,MAAM,KAAK,cAAc,EACV,eAAe;GAC3C,YAAY,KAAK,SAAS;GAC1B,QAAQ,MAAM;GACf,CAAC,EAEuB,KAAK"}

dist/version.cjs

 
 //#region src/version.ts
-const VERSION = "2.0.0-beta.21";
+const VERSION = "2.0.0-beta.22";
 
@@ -5,0 +5,0 @@ //#endregion

dist/version.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"version.cjs","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.0.0-beta.21\";\n"],"mappings":";;AACA,MAAa,UAAU"}
+{"version":3,"file":"version.cjs","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.0.0-beta.22\";\n"],"mappings":";;AACA,MAAa,UAAU"}

dist/version.js

 //#region src/version.ts
-const VERSION = "2.0.0-beta.21";
+const VERSION = "2.0.0-beta.22";
 
@@ -4,0 +4,0 @@ //#endregion

dist/version.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"version.js","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.0.0-beta.21\";\n"],"mappings":";AACA,MAAa,UAAU"}
+{"version":3,"file":"version.js","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.0.0-beta.22\";\n"],"mappings":";AACA,MAAa,UAAU"}

package.json

 {
   "name": "@vercel/sandbox",
-  "version": "2.0.0-beta.21",
+  "version": "2.0.0-beta.22",
   "description": "Software Development Kit for Vercel Sandbox",
@@ -16,2 +16,8 @@ "type": "module",
     },
+    "./proxy": {
+      "types": "./dist/proxy.d.ts",
+      "import": "./dist/proxy.js",
+      "require": "./dist/proxy.cjs",
+      "default": "./dist/proxy.cjs"
+    },
     "./dist/auth/index.js": {
@@ -46,2 +52,3 @@ "types": "./dist/auth/index.d.ts",
     "async-retry": "1.3.3",
+    "jose": "6.2.3",
     "jsonlines": "0.1.1",
@@ -48,0 +55,0 @@ "ms": "2.1.3",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3629725

1.91%

Number of package files

195

3.17%

Lines of code

47424

1.65%

Worsened metrics

Dependency count

11

10%

Number of medium supply chain risk alerts

88

15.79%

Dependency changes

• + Added

  jose@6.2.3

• + Added

  jose@6.2.3
  (transitive)