@vercel/sandbox - npm Package Compare versions

Comparing version 2.2.0-beta.0 to 2.2.0

dist/api-client/api-client.cjs

@@ -104,3 +104,2 @@ const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
 				keepLastSnapshots: params.keepLastSnapshots,
-				mounts: params.mounts,
 				...privateParams
@@ -172,2 +171,9 @@ }),
 	}
+	async openInteractive(params) {
+		return require_base_client.parseOrThrow(require_validators.InteractiveSessionResponse, await this.request(`/v2/sandboxes/sessions/${params.sessionId}/interactive`, {
+			method: "POST",
+			body: JSON.stringify({}),
+			signal: params.signal
+		}));
+	}
 	async mkDir(params) {
@@ -238,27 +244,2 @@ return require_base_client.parseOrThrow(require_validators.EmptyResponse, await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {
 	}
-	async listDrives(params) {
-		return require_base_client.parseOrThrow(require_validators.DrivesResponse, await this.request(`/v2/sandboxes/drives`, {
-			query: {
-				projectId: params.projectId,
-				limit: params.limit,
-				cursor: params.cursor ?? params.until,
-				since: params.since,
-				sortBy: params.sortBy,
-				sortOrder: params.sortOrder,
-				namePrefix: params.namePrefix
-			},
-			method: "GET",
-			signal: params.signal
-		}));
-	}
-	async getOrCreateDrive(params) {
-		return require_base_client.parseOrThrow(require_validators.DriveResponse, await this.request(`/v2/sandboxes/drives/${encodeURIComponent(params.name)}`, {
-			method: "POST",
-			body: JSON.stringify({
-				projectId: params.projectId,
-				maxSizeBytes: params.maxSizeBytes
-			}),
-			signal: params.signal
-		}));
-	}
 	async writeFiles(params) {
@@ -423,10 +404,2 @@ const { writer, response } = this.getFileWriter({
 	}
-	async deleteDrive(params) {
-		const url = `/v2/sandboxes/drives/${encodeURIComponent(params.name)}`;
-		return require_base_client.parseOrThrow(require_validators.DriveResponse, await this.request(url, {
-			method: "DELETE",
-			query: { projectId: params.projectId },
-			signal: params.signal
-		}));
-	}
 	async updateSandbox(params) {
@@ -433,0 +406,0 @@ return require_base_client.parseOrThrow(require_validators.UpdateSandboxResponse, await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {

dist/api-client/api-client.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"api-client.cjs","names":["BaseClient","VERSION","getPrivateParams","parseOrThrow","SessionAndRoutesResponse","SandboxAndSessionResponse","toAPINetworkPolicy","z","APIError","StreamError","CommandResponse","CommandFinishedResponse","command","EmptyResponse","FileWriter","consumeReadable","SessionsResponse","SnapshotsResponse","SnapshotTreeResponse","DrivesResponse","DriveResponse","normalizePath","json: unknown","Readable","LogLine","StopSessionResponse","SessionResponse","CreateSnapshotResponse","SnapshotResponse","query: Record<string, string | undefined>","SandboxesPaginationResponse","UpdateSandboxResponse"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotTreeResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  DrivesResponse,\n  DriveResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport { toAPINetworkPolicy } from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\nimport { type BaseCreateSandboxParams } from \"../sandbox.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      mounts?: BaseCreateSandboxParams[\"mounts\"];\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          mounts: params.mounts,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    timeout?: number;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n            timeout: params.timeout,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n          timeout: params.timeout,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getSnapshotTree(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     */\n    projectId: string;\n    /**\n     * The snapshot ID to use as the anchor for the tree traversal.\n     */\n    snapshotId: string;\n    /**\n     * Maximum number of nodes to return.\n     */\n    limit?: number;\n    /**\n     * Sort order: \"asc\" for descendants, \"desc\" for ancestors.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotTreeResponse,\n      await this.request(`/v2/sandboxes/snapshots/tree`, {\n        query: {\n          project: params.projectId,\n          snapshotId: params.snapshotId,\n          limit: params.limit,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listDrives(params: {\n    projectId: string;\n    limit?: number;\n    cursor?: string | number;\n    since?: number | string;\n    until?: number | string;\n    sortBy?: \"createdAt\" | \"updatedAt\" | \"name\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      DrivesResponse,\n      await this.request(`/v2/sandboxes/drives`, {\n        query: {\n          projectId: params.projectId,\n          limit: params.limit,\n          cursor: params.cursor ?? params.until,\n          since: params.since,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getOrCreateDrive(params: {\n    projectId: string;\n    name: string;\n    maxSizeBytes?: number;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      DriveResponse,\n      await this.request(\n        `/v2/sandboxes/drives/${encodeURIComponent(params.name)}`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            projectId: params.projectId,\n            maxSizeBytes: params.maxSizeBytes,\n          }),\n          signal: params.signal,\n        },\n      ),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    // The file endpoint must return the file as an octet-stream. Any other\n    // content type (e.g. application/json) indicates an error payload that\n    // would otherwise be piped verbatim into the destination file.\n    const contentType = response.headers.get(\"content-type\") ?? \"\";\n    if (!response.ok || !contentType.includes(\"application/octet-stream\")) {\n      const text = await response.text().catch(() => \"\");\n      let json: unknown;\n      try {\n        json = JSON.parse(text || \"{}\");\n      } catch {\n        json = undefined;\n      }\n      throw new APIError(response, {\n        message: `Unexpected response reading file: status ${response.status}, content-type ${contentType || \"(none)\"}`,\n        json,\n        text,\n      });\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteDrive(params: {\n    projectId: string;\n    name: string;\n    signal?: AbortSignal;\n  }) {\n    const url = `/v2/sandboxes/drives/${encodeURIComponent(params.name)}`;\n    return parseOrThrow(\n      DriveResponse,\n      await this.request(url, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+BA,+BAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,4CAAyB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkBC,wBAAQ,YAAY,QAAQ,QAAQ,IAAI,WAAG,UAAU,CAAC,GAAG,WAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgBC,+BAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAOC,iCACLC,6CACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA+BA;EACA,MAAM,gBAAgBF,+BAAiB,OAAO;AAC9C,SAAOC,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClBC,0CAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,QAAQ,OAAO;IACf,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAyBH,MAAM,WAAW,QAUd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACN,SAAS,OAAO;KACjB,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAMH,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAIC,8BACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAYC,mCAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAID,8BACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAYE,2CAAwB,MAAM,cAAc,MAAM;AACtE,YAAOC;QACL;IAEwB;;AAG9B,SAAOT,iCACLO,oCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,SAAS,OAAO;IACjB,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACVP,iCACEQ,4CACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACDR,iCACEO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,MAAM,QAKT;AACD,SAAOP,iCACLU,kCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAIC,gCAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAMC,yCAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAOZ,iCACLa,qCACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAOb,iCACLc,sCACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,gBAAgB,QAkBnB;AACD,SAAOd,iCACLe,yCACA,MAAM,KAAK,QAAQ,gCAAgC;GACjD,OAAO;IACL,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,OAAO,OAAO;IACd,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;AACD,SAAOf,iCACLgB,mCACA,MAAM,KAAK,QAAQ,wBAAwB;GACzC,OAAO;IACL,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO,UAAU,OAAO;IAChC,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACpB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,iBAAiB,QAKpB;AACD,SAAOhB,iCACLiB,kCACA,MAAM,KAAK,QACT,wBAAwB,mBAAmB,OAAO,KAAK,IACvD;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,cAAc,OAAO;IACtB,CAAC;GACF,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAMC,oCAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAMlB,iCAAaU,kCAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;EAMT,MAAM,cAAc,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC5D,MAAI,CAAC,SAAS,MAAM,CAAC,YAAY,SAAS,2BAA2B,EAAE;GACrE,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,YAAY,GAAG;GAClD,IAAIS;AACJ,OAAI;AACF,WAAO,KAAK,MAAM,QAAQ,KAAK;WACzB;AACN,WAAO;;AAET,SAAM,IAAId,2BAAS,UAAU;IAC3B,SAAS,4CAA4C,SAAS,OAAO,iBAAiB,eAAe;IACrG;IACA;IACD,CAAC;;AAGJ,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAOe,gBAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAOpB,iCACLO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAMP,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAASgB,2BAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAIf,8BACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAON,iCACLsB,wCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOtB,iCACLuB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAUpB,0CAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOH,iCACLuB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAOvB,iCACLwB,2CACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOxB,iCACLyB,qCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOzB,iCACLyB,qCACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgB1B,+BAAiB,OAAO;EAC9C,MAAM2B,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAO1B,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAOF,iCACL2B,gDACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,YAAY,QAIf;EACD,MAAM,MAAM,wBAAwB,mBAAmB,OAAO,KAAK;AACnE,SAAO3B,iCACLiB,kCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAOjB,iCACL4B,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClBzB,0CAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAOH,iCACL4B,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}
+{"version":3,"file":"api-client.cjs","names":["BaseClient","VERSION","getPrivateParams","parseOrThrow","SessionAndRoutesResponse","SandboxAndSessionResponse","toAPINetworkPolicy","z","APIError","StreamError","CommandResponse","CommandFinishedResponse","command","InteractiveSessionResponse","EmptyResponse","FileWriter","consumeReadable","SessionsResponse","SnapshotsResponse","SnapshotTreeResponse","normalizePath","json: unknown","Readable","LogLine","StopSessionResponse","SessionResponse","CreateSnapshotResponse","SnapshotResponse","query: Record<string, string | undefined>","SandboxesPaginationResponse","UpdateSandboxResponse"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  InteractiveSessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotTreeResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport {\n  toAPINetworkPolicy,\n} from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    timeout?: number;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n            timeout: params.timeout,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n          timeout: params.timeout,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async openInteractive(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof InteractiveSessionResponse>>> {\n    return parseOrThrow(\n      InteractiveSessionResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/interactive`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({}),\n          signal: params.signal,\n        },\n      ),\n    );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getSnapshotTree(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     */\n    projectId: string;\n    /**\n     * The snapshot ID to use as the anchor for the tree traversal.\n     */\n    snapshotId: string;\n    /**\n     * Maximum number of nodes to return.\n     */\n    limit?: number;\n    /**\n     * Sort order: \"asc\" for descendants, \"desc\" for ancestors.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotTreeResponse,\n      await this.request(`/v2/sandboxes/snapshots/tree`, {\n        query: {\n          project: params.projectId,\n          snapshotId: params.snapshotId,\n          limit: params.limit,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    // The file endpoint must return the file as an octet-stream. Any other\n    // content type (e.g. application/json) indicates an error payload that\n    // would otherwise be piped verbatim into the destination file.\n    const contentType = response.headers.get(\"content-type\") ?? \"\";\n    if (!response.ok || !contentType.includes(\"application/octet-stream\")) {\n      const text = await response.text().catch(() => \"\");\n      let json: unknown;\n      try {\n        json = JSON.parse(text || \"{}\");\n      } catch {\n        json = undefined;\n      }\n      throw new APIError(response, {\n        message: `Unexpected response reading file: status ${response.status}, content-type ${contentType || \"(none)\"}`,\n        json,\n        text,\n      });\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAkDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+BA,+BAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,4CAAyB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkBC,wBAAQ,YAAY,QAAQ,QAAQ,IAAI,WAAG,UAAU,CAAC,GAAG,WAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgBC,+BAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAOC,iCACLC,6CACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA8BA;EACA,MAAM,gBAAgBF,+BAAiB,OAAO;AAC9C,SAAOC,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClBC,0CAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAyBH,MAAM,WAAW,QAUd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACN,SAAS,OAAO;KACjB,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAMH,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAIC,8BACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAYC,mCAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAID,8BACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAYE,2CAAwB,MAAM,cAAc,MAAM;AACtE,YAAOC;QACL;IAEwB;;AAG9B,SAAOT,iCACLO,oCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,SAAS,OAAO;IACjB,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACVP,iCACEQ,4CACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACDR,iCACEO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,gBAAgB,QAG0C;AAC9D,SAAOP,iCACLU,+CACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,eAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,CAAC;GACxB,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,MAAM,MAAM,QAKT;AACD,SAAOV,iCACLW,kCACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAIC,gCAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAMC,yCAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAOb,iCACLc,qCACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAOd,iCACLe,sCACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,gBAAgB,QAkBnB;AACD,SAAOf,iCACLgB,yCACA,MAAM,KAAK,QAAQ,gCAAgC;GACjD,OAAO;IACL,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,OAAO,OAAO;IACd,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAMC,oCAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAMjB,iCAAaW,kCAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;EAMT,MAAM,cAAc,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC5D,MAAI,CAAC,SAAS,MAAM,CAAC,YAAY,SAAS,2BAA2B,EAAE;GACrE,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,YAAY,GAAG;GAClD,IAAIO;AACJ,OAAI;AACF,WAAO,KAAK,MAAM,QAAQ,KAAK;WACzB;AACN,WAAO;;AAET,SAAM,IAAIb,2BAAS,UAAU;IAC3B,SAAS,4CAA4C,SAAS,OAAO,iBAAiB,eAAe;IACrG;IACA;IACD,CAAC;;AAGJ,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAOc,gBAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAOnB,iCACLO,oCACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAMP,iCAAaI,MAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAIC,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAIA,2BAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,kBAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAASe,2BAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAId,8BACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAON,iCACLqB,wCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOrB,iCACLsB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAUnB,0CAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAOH,iCACLsB,oCACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAOtB,iCACLuB,2CACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOvB,iCACLwB,qCACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAOxB,iCACLwB,qCACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgBzB,+BAAiB,OAAO;EAC9C,MAAM0B,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAOzB,iCACLE,8CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAOF,iCACL0B,gDACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAO1B,iCACL2B,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClBxB,0CAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAOH,iCACL2B,0CACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}

dist/api-client/api-client.js

 import { APIError, StreamError } from "./api-error.js";
 import { BaseClient, parseOrThrow } from "./base-client.js";
-import { CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, DriveResponse, DrivesResponse, EmptyResponse, LogLine, SandboxAndSessionResponse, SandboxesPaginationResponse, SessionAndRoutesResponse, SessionResponse, SessionsResponse, SnapshotResponse, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse } from "./validators.js";
+import { CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, EmptyResponse, InteractiveSessionResponse, LogLine, SandboxAndSessionResponse, SandboxesPaginationResponse, SessionAndRoutesResponse, SessionResponse, SessionsResponse, SnapshotResponse, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse } from "./validators.js";
 import { FileWriter } from "./file-writer.js";
@@ -101,3 +101,2 @@ import { VERSION } from "../version.js";
 				keepLastSnapshots: params.keepLastSnapshots,
-				mounts: params.mounts,
 				...privateParams
@@ -169,2 +168,9 @@ }),
 	}
+	async openInteractive(params) {
+		return parseOrThrow(InteractiveSessionResponse, await this.request(`/v2/sandboxes/sessions/${params.sessionId}/interactive`, {
+			method: "POST",
+			body: JSON.stringify({}),
+			signal: params.signal
+		}));
+	}
 	async mkDir(params) {
@@ -235,27 +241,2 @@ return parseOrThrow(EmptyResponse, await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {
 	}
-	async listDrives(params) {
-		return parseOrThrow(DrivesResponse, await this.request(`/v2/sandboxes/drives`, {
-			query: {
-				projectId: params.projectId,
-				limit: params.limit,
-				cursor: params.cursor ?? params.until,
-				since: params.since,
-				sortBy: params.sortBy,
-				sortOrder: params.sortOrder,
-				namePrefix: params.namePrefix
-			},
-			method: "GET",
-			signal: params.signal
-		}));
-	}
-	async getOrCreateDrive(params) {
-		return parseOrThrow(DriveResponse, await this.request(`/v2/sandboxes/drives/${encodeURIComponent(params.name)}`, {
-			method: "POST",
-			body: JSON.stringify({
-				projectId: params.projectId,
-				maxSizeBytes: params.maxSizeBytes
-			}),
-			signal: params.signal
-		}));
-	}
 	async writeFiles(params) {
@@ -420,10 +401,2 @@ const { writer, response } = this.getFileWriter({
 	}
-	async deleteDrive(params) {
-		const url = `/v2/sandboxes/drives/${encodeURIComponent(params.name)}`;
-		return parseOrThrow(DriveResponse, await this.request(url, {
-			method: "DELETE",
-			query: { projectId: params.projectId },
-			signal: params.signal
-		}));
-	}
 	async updateSandbox(params) {
@@ -430,0 +403,0 @@ return parseOrThrow(UpdateSandboxResponse, await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {

dist/api-client/api-client.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"api-client.js","names":["command","json: unknown","query: Record<string, string | undefined>"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotTreeResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  DrivesResponse,\n  DriveResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport { toAPINetworkPolicy } from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\nimport { type BaseCreateSandboxParams } from \"../sandbox.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      mounts?: BaseCreateSandboxParams[\"mounts\"];\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          mounts: params.mounts,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    timeout?: number;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n            timeout: params.timeout,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n          timeout: params.timeout,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getSnapshotTree(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     */\n    projectId: string;\n    /**\n     * The snapshot ID to use as the anchor for the tree traversal.\n     */\n    snapshotId: string;\n    /**\n     * Maximum number of nodes to return.\n     */\n    limit?: number;\n    /**\n     * Sort order: \"asc\" for descendants, \"desc\" for ancestors.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotTreeResponse,\n      await this.request(`/v2/sandboxes/snapshots/tree`, {\n        query: {\n          project: params.projectId,\n          snapshotId: params.snapshotId,\n          limit: params.limit,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listDrives(params: {\n    projectId: string;\n    limit?: number;\n    cursor?: string | number;\n    since?: number | string;\n    until?: number | string;\n    sortBy?: \"createdAt\" | \"updatedAt\" | \"name\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      DrivesResponse,\n      await this.request(`/v2/sandboxes/drives`, {\n        query: {\n          projectId: params.projectId,\n          limit: params.limit,\n          cursor: params.cursor ?? params.until,\n          since: params.since,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getOrCreateDrive(params: {\n    projectId: string;\n    name: string;\n    maxSizeBytes?: number;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      DriveResponse,\n      await this.request(\n        `/v2/sandboxes/drives/${encodeURIComponent(params.name)}`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            projectId: params.projectId,\n            maxSizeBytes: params.maxSizeBytes,\n          }),\n          signal: params.signal,\n        },\n      ),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    // The file endpoint must return the file as an octet-stream. Any other\n    // content type (e.g. application/json) indicates an error payload that\n    // would otherwise be piped verbatim into the destination file.\n    const contentType = response.headers.get(\"content-type\") ?? \"\";\n    if (!response.ok || !contentType.includes(\"application/octet-stream\")) {\n      const text = await response.text().catch(() => \"\");\n      let json: unknown;\n      try {\n        json = JSON.parse(text || \"{}\");\n      } catch {\n        json = undefined;\n      }\n      throw new APIError(response, {\n        message: `Unexpected response reading file: status ${response.status}, content-type ${contentType || \"(none)\"}`,\n        json,\n        text,\n      });\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteDrive(params: {\n    projectId: string;\n    name: string;\n    signal?: AbortSignal;\n  }) {\n    const url = `/v2/sandboxes/drives/${encodeURIComponent(params.name)}`;\n    return parseOrThrow(\n      DriveResponse,\n      await this.request(url, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+B,WAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,MAAM,mBAAmB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkB,QAAQ,YAAY,QAAQ,QAAQ,IAAI,GAAG,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAO,aACL,0BACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA+BA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;AAC9C,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,QAAQ,OAAO;IACf,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAyBH,MAAM,WAAW,QAUd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACN,SAAS,OAAO;KACjB,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAI,YACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAY,gBAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAI,YACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAY,wBAAwB,MAAM,cAAc,MAAM;AACtE,YAAOA;QACL;IAEwB;;AAG9B,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,SAAS,OAAO;IACjB,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACV,aACE,yBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACD,aACE,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,MAAM,QAKT;AACD,SAAO,aACL,eACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAI,YAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAM,gBAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAO,aACL,mBACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,gBAAgB,QAkBnB;AACD,SAAO,aACL,sBACA,MAAM,KAAK,QAAQ,gCAAgC;GACjD,OAAO;IACL,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,OAAO,OAAO;IACd,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;AACD,SAAO,aACL,gBACA,MAAM,KAAK,QAAQ,wBAAwB;GACzC,OAAO;IACL,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO,UAAU,OAAO;IAChC,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACpB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,iBAAiB,QAKpB;AACD,SAAO,aACL,eACA,MAAM,KAAK,QACT,wBAAwB,mBAAmB,OAAO,KAAK,IACvD;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,cAAc,OAAO;IACtB,CAAC;GACF,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAM,cAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAM,aAAa,eAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;EAMT,MAAM,cAAc,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC5D,MAAI,CAAC,SAAS,MAAM,CAAC,YAAY,SAAS,2BAA2B,EAAE;GACrE,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,YAAY,GAAG;GAClD,IAAIC;AACJ,OAAI;AACF,WAAO,KAAK,MAAM,QAAQ,KAAK;WACzB;AACN,WAAO;;AAET,SAAM,IAAI,SAAS,UAAU;IAC3B,SAAS,4CAA4C,SAAS,OAAO,iBAAiB,eAAe;IACrG;IACA;IACD,CAAC;;AAGJ,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAO,SAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAO,aACL,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAAS,QAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAI,YACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,qBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,mBAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAO,aACL,wBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAMC,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAO,aACL,6BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,YAAY,QAIf;EACD,MAAM,MAAM,wBAAwB,mBAAmB,OAAO,KAAK;AACnE,SAAO,aACL,eACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}
+{"version":3,"file":"api-client.js","names":["command","json: unknown","query: Record<string, string | undefined>"],"sources":["../../src/api-client/api-client.ts"],"sourcesContent":["import {\n  BaseClient,\n  parseOrThrow,\n  type Parsed,\n  type RequestParams,\n} from \"./base-client.js\";\nimport {\n  type CommandFinishedData,\n  SessionAndRoutesResponse,\n  SessionResponse,\n  InteractiveSessionResponse,\n  StopSessionResponse,\n  SessionsResponse,\n  CommandResponse,\n  CommandFinishedResponse,\n  EmptyResponse,\n  LogLine,\n  type LogLineStdout,\n  type LogLineStderr,\n  SnapshotsResponse,\n  SnapshotTreeResponse,\n  SnapshotResponse,\n  CreateSnapshotResponse,\n  SandboxAndSessionResponse,\n  SandboxesPaginationResponse,\n  UpdateSandboxResponse,\n  type CommandData,\n} from \"./validators.js\";\nimport { APIError, StreamError } from \"./api-error.js\";\nimport { FileWriter } from \"./file-writer.js\";\nimport { VERSION } from \"../version.js\";\nimport { consumeReadable } from \"../utils/consume-readable.js\";\nimport { z } from \"zod\";\nimport jsonlines from \"jsonlines\";\nimport os from \"os\";\nimport { Readable } from \"stream\";\nimport { normalizePath } from \"../utils/normalizePath.js\";\nimport { getVercelOidcToken } from \"@vercel/oidc\";\nimport { NetworkPolicy } from \"../network-policy.js\";\nimport {\n  toAPINetworkPolicy,\n} from \"../utils/network-policy.js\";\nimport { getPrivateParams, WithPrivate } from \"../utils/types.js\";\nimport { RUNTIMES } from \"../constants.js\";\n\ninterface Claims {\n  owner_id: string;\n  project_id?: string;\n}\n\nfunction decodeUnverifiedToken(token: string): Claims | null {\n  if (token.split(\".\").length !== 3) {\n    return null;\n  }\n  try {\n    const payload = JSON.parse(\n      Buffer.from(token.split(\".\")[1], \"base64url\").toString(\"utf8\"),\n    );\n    if (payload.owner_id) {\n      return { owner_id: payload.owner_id, project_id: payload.project_id };\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\nexport interface WithFetchOptions {\n  fetch?: typeof globalThis.fetch;\n}\n\nexport class APIClient extends BaseClient {\n  private teamId: string;\n  private projectId: string | undefined;\n  private isJwtToken: boolean;\n\n  constructor(params: {\n    baseUrl?: string;\n    teamId: string;\n    token: string;\n    fetch?: typeof globalThis.fetch;\n  }) {\n    super({\n      baseUrl: params.baseUrl ?? \"https://vercel.com/api\",\n      token: params.token,\n      debug: false,\n      fetch: params.fetch,\n    });\n\n    this.teamId = params.teamId;\n    this.isJwtToken = false;\n\n    const claims = decodeUnverifiedToken(params.token);\n    if (claims) {\n      this.isJwtToken = true;\n      this.projectId = claims.project_id;\n      this.teamId = claims.owner_id;\n    }\n  }\n\n  private async ensureValidToken(): Promise<void> {\n    if (!this.isJwtToken) {\n      return;\n    }\n\n    try {\n      // Use getVercelOidcToken to refresh the token with team/project scope\n      const freshToken = await getVercelOidcToken({\n        expirationBufferMs: 5 * 60 * 1000, // 5 minutes\n        team: this.teamId,\n        project: this.projectId,\n      });\n\n      // Update token if it changed\n      if (freshToken !== this.token) {\n        this.token = freshToken;\n\n        const claims = decodeUnverifiedToken(freshToken);\n        if (claims) {\n          this.teamId = claims.owner_id;\n        }\n      }\n    } catch {\n      // Ignore refresh errors and continue with current token\n    }\n  }\n\n  protected async request(path: string, params?: RequestParams) {\n    await this.ensureValidToken();\n\n    return super.request(path, {\n      ...params,\n      query: { teamId: this.teamId, ...params?.query },\n      headers: {\n        \"content-type\": \"application/json\",\n        \"user-agent\": `vercel/sandbox/${VERSION} (Node.js/${process.version}; ${os.platform()}/${os.arch()})`,\n        ...params?.headers,\n      },\n    });\n  }\n\n  async getSession(\n    params: WithPrivate<{ sessionId: string; signal?: AbortSignal }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    let querystring = new URLSearchParams(privateParams).toString();\n    querystring = querystring ? `?${querystring}` : \"\";\n    return parseOrThrow(\n      SessionAndRoutesResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}${querystring}`, {\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSandbox(\n    params: WithPrivate<{\n      name?: string;\n      ports?: number[];\n      projectId: string;\n      source?:\n        | {\n            type: \"git\";\n            url: string;\n            depth?: number;\n            revision?: string;\n            username?: string;\n            password?: string;\n          }\n        | { type: \"tarball\"; url: string }\n        | { type: \"snapshot\"; snapshotId: string };\n      timeout?: number;\n      resources?: { vcpus: number };\n      persistent?: boolean;\n      runtime?: RUNTIMES | (string & {});\n      networkPolicy?: NetworkPolicy;\n      env?: Record<string, string>;\n      tags?: Record<string, string>;\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      };\n      signal?: AbortSignal;\n    }>,\n  ) {\n    const privateParams = getPrivateParams(params);\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(\"/v2/sandboxes\", {\n        method: \"POST\",\n        body: JSON.stringify({\n          projectId: params.projectId,\n          ports: params.ports,\n          source: params.source,\n          timeout: params.timeout,\n          resources: params.resources,\n          runtime: params.runtime,\n          name: params.name,\n          persistent: params.persistent,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          env: params.env,\n          tags: params.tags,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          ...privateParams,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait: true;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<{ command: CommandData; finished: Promise<CommandFinishedData> }>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: false;\n    timeout?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async runCommand(params: {\n    sessionId: string;\n    cwd?: string;\n    command: string;\n    args: string[];\n    env: Record<string, string>;\n    sudo: boolean;\n    wait?: boolean;\n    timeout?: number;\n    signal?: AbortSignal;\n  }) {\n    if (params.wait) {\n      const response = await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({\n            command: params.command,\n            args: params.args,\n            cwd: params.cwd,\n            env: params.env,\n            sudo: params.sudo,\n            wait: true,\n            timeout: params.timeout,\n          }),\n          signal: params.signal,\n        },\n      );\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of command data\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal: params.signal }).catch(\n        (err) => {\n          console.error(\"Error piping command stream:\", err);\n        },\n      );\n\n      const iterator = jsonlinesStream[Symbol.asyncIterator]();\n      const commandChunk = await iterator.next();\n      if (commandChunk.done) {\n        throw new StreamError(\n          \"stream_ended_early\",\n          \"Stream ended before command data was received\",\n          params.sessionId,\n        );\n      }\n      const { command } = CommandResponse.parse(commandChunk.value);\n\n      const finished = (async () => {\n        const finishedChunk = await iterator.next();\n        if (finishedChunk.done) {\n          throw new StreamError(\n            \"stream_ended_early\",\n            \"Stream ended before command finished\",\n            params.sessionId,\n          );\n        }\n        const { command } = CommandFinishedResponse.parse(finishedChunk.value);\n        return command;\n      })();\n\n      return { command, finished };\n    }\n\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/cmd`, {\n        method: \"POST\",\n        body: JSON.stringify({\n          command: params.command,\n          args: params.args,\n          cwd: params.cwd,\n          env: params.env,\n          sudo: params.sudo,\n          timeout: params.timeout,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait: true;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandFinishedResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CommandResponse>>>;\n  async getCommand(params: {\n    sessionId: string;\n    cmdId: string;\n    wait?: boolean;\n    signal?: AbortSignal;\n  }) {\n    return params.wait\n      ? parseOrThrow(\n          CommandFinishedResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal, query: { wait: \"true\" } },\n          ),\n        )\n      : parseOrThrow(\n          CommandResponse,\n          await this.request(\n            `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}`,\n            { signal: params.signal },\n          ),\n        );\n  }\n\n  async openInteractive(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof InteractiveSessionResponse>>> {\n    return parseOrThrow(\n      InteractiveSessionResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/interactive`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({}),\n          signal: params.signal,\n        },\n      ),\n    );\n  }\n\n  async mkDir(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      EmptyResponse,\n      await this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/mkdir`, {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  getFileWriter(params: {\n    sessionId: string;\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const writer = new FileWriter();\n    return {\n      response: (async () => {\n        return this.request(`/v2/sandboxes/sessions/${params.sessionId}/fs/write`, {\n          method: \"POST\",\n          headers: {\n            \"content-type\": \"application/gzip\",\n            \"x-cwd\": params.extractDir,\n          },\n          body: await consumeReadable(writer.readable),\n          signal: params.signal,\n        });\n      })(),\n      writer,\n    };\n  }\n\n  async listSessions(params: {\n    /**\n     * The ID or name of the project to which the sessions belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter sessions by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of sessions to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SessionsResponse,\n      await this.request(`/v2/sandboxes/sessions`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSnapshots(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     * @example \"my-project\"\n     */\n    projectId: string;\n    /**\n     * Filter snapshots by sandbox name.\n     */\n    name?: string;\n    /**\n     * Maximum number of snapshots to list from a request.\n     * @example 10\n     */\n    limit?: number;\n    /**\n     * Cursor for pagination.\n     */\n    cursor?: string;\n    /**\n     * Sort order for results.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotsResponse,\n      await this.request(`/v2/sandboxes/snapshots`, {\n        query: {\n          project: params.projectId,\n          name: params.name,\n          limit: params.limit,\n          cursor: params.cursor,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async getSnapshotTree(params: {\n    /**\n     * The ID or name of the project to which the snapshots belong.\n     */\n    projectId: string;\n    /**\n     * The snapshot ID to use as the anchor for the tree traversal.\n     */\n    snapshotId: string;\n    /**\n     * Maximum number of nodes to return.\n     */\n    limit?: number;\n    /**\n     * Sort order: \"asc\" for descendants, \"desc\" for ancestors.\n     */\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SnapshotTreeResponse,\n      await this.request(`/v2/sandboxes/snapshots/tree`, {\n        query: {\n          project: params.projectId,\n          snapshotId: params.snapshotId,\n          limit: params.limit,\n          sortOrder: params.sortOrder,\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async writeFiles(params: {\n    sessionId: string;\n    cwd: string;\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[];\n    extractDir: string;\n    signal?: AbortSignal;\n  }) {\n    const { writer, response } = this.getFileWriter({\n      sessionId: params.sessionId,\n      extractDir: params.extractDir,\n      signal: params.signal,\n    });\n\n    for (const file of params.files) {\n      await writer.addFile({\n        name: normalizePath({\n          filePath: file.path,\n          extractDir: params.extractDir,\n          cwd: params.cwd,\n        }),\n        content: file.content,\n        mode: file.mode,\n      });\n    }\n\n    writer.end();\n    await parseOrThrow(EmptyResponse, await response);\n  }\n\n  async readFile(params: {\n    sessionId: string;\n    path: string;\n    cwd?: string;\n    signal?: AbortSignal;\n  }): Promise<Readable | null> {\n    const response = await this.request(\n      `/v2/sandboxes/sessions/${params.sessionId}/fs/read`,\n      {\n        method: \"POST\",\n        body: JSON.stringify({ path: params.path, cwd: params.cwd }),\n        signal: params.signal,\n      },\n    );\n\n    if (response.status === 404) {\n      return null;\n    }\n\n    // The file endpoint must return the file as an octet-stream. Any other\n    // content type (e.g. application/json) indicates an error payload that\n    // would otherwise be piped verbatim into the destination file.\n    const contentType = response.headers.get(\"content-type\") ?? \"\";\n    if (!response.ok || !contentType.includes(\"application/octet-stream\")) {\n      const text = await response.text().catch(() => \"\");\n      let json: unknown;\n      try {\n        json = JSON.parse(text || \"{}\");\n      } catch {\n        json = undefined;\n      }\n      throw new APIError(response, {\n        message: `Unexpected response reading file: status ${response.status}, content-type ${contentType || \"(none)\"}`,\n        json,\n        text,\n      });\n    }\n\n    if (response.body === null) {\n      return null;\n    }\n\n    return Readable.fromWeb(response.body);\n  }\n\n  async killCommand(params: {\n    sessionId: string;\n    commandId: string;\n    signal: number;\n    abortSignal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      CommandResponse,\n      await this.request(\n        `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.commandId}/kill`,\n        {\n          method: \"POST\",\n          body: JSON.stringify({ signal: params.signal }),\n          signal: params.abortSignal,\n        },\n      ),\n    );\n  }\n\n  getLogs(params: {\n    sessionId: string;\n    cmdId: string;\n    signal?: AbortSignal;\n  }): AsyncGenerator<\n    z.infer<typeof LogLineStdout> | z.infer<typeof LogLineStderr>,\n    void,\n    void\n  > &\n    Disposable & { close(): void } {\n    const self = this;\n    const disposer = new AbortController();\n    const signal = !params.signal\n      ? disposer.signal\n      : mergeSignals(params.signal, disposer.signal);\n\n    const generator = (async function* () {\n      const url = `/v2/sandboxes/sessions/${params.sessionId}/cmd/${params.cmdId}/logs`;\n      const response = await self.request(url, {\n        method: \"GET\",\n        signal,\n      });\n\n      if (!response.ok) {\n        await parseOrThrow(z.any(), response);\n      }\n\n      if (response.headers.get(\"content-type\") !== \"application/x-ndjson\") {\n        throw new APIError(response, {\n          message: \"Expected a stream of logs\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      if (response.body === null) {\n        throw new APIError(response, {\n          message: \"No response body\",\n          sessionId: params.sessionId,\n        });\n      }\n\n      const jsonlinesStream = jsonlines.parse();\n      pipe(response.body, jsonlinesStream, { signal }).catch((err) => {\n        console.error(\"Error piping logs:\", err);\n      });\n\n      for await (const chunk of jsonlinesStream) {\n        const parsed = LogLine.parse(chunk);\n        if (parsed.stream === \"error\") {\n          throw new StreamError(\n            parsed.data.code,\n            parsed.data.message,\n            params.sessionId,\n          );\n        }\n        yield parsed;\n      }\n    })();\n\n    return Object.assign(generator, {\n      [Symbol.dispose]() {\n        disposer.abort(\"Disposed\");\n      },\n      close: () => disposer.abort(\"Disposed\"),\n    });\n  }\n\n  async stopSession(params: {\n    sessionId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof StopSessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/stop`;\n    return parseOrThrow(\n      StopSessionResponse,\n      await this.request(url, { method: \"POST\", signal: params.signal }),\n    );\n  }\n\n  async updateNetworkPolicy(params: {\n    sessionId: string;\n    networkPolicy: NetworkPolicy;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/network-policy`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify(toAPINetworkPolicy(params.networkPolicy)),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async extendTimeout(params: {\n    sessionId: string;\n    duration: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SessionResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/extend-timeout`;\n    return parseOrThrow(\n      SessionResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body: JSON.stringify({ duration: params.duration }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async createSnapshot(params: {\n    sessionId: string;\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof CreateSnapshotResponse>>> {\n    const url = `/v2/sandboxes/sessions/${params.sessionId}/snapshot`;\n    const body =\n      params.expiration === undefined\n        ? undefined\n        : JSON.stringify({ expiration: params.expiration });\n    return parseOrThrow(\n      CreateSnapshotResponse,\n      await this.request(url, {\n        method: \"POST\",\n        body,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { method: \"DELETE\", signal: params.signal }),\n    );\n  }\n\n  async getSnapshot(params: {\n    snapshotId: string;\n    signal?: AbortSignal;\n  }): Promise<Parsed<z.infer<typeof SnapshotResponse>>> {\n    const url = `/v2/sandboxes/snapshots/${params.snapshotId}`;\n    return parseOrThrow(\n      SnapshotResponse,\n      await this.request(url, { signal: params.signal }),\n    );\n  }\n\n  async getSandbox(params: WithPrivate<{\n    name: string;\n    projectId: string;\n    resume?: boolean;\n    signal?: AbortSignal;\n  }>) {\n    const privateParams = getPrivateParams(params);\n    const query: Record<string, string | undefined> = {\n      projectId: params.projectId,\n      ...privateParams,\n    };\n    if (params.resume !== undefined) {\n      query.resume = String(params.resume);\n    }\n    return parseOrThrow(\n      SandboxAndSessionResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        query,\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async listSandboxes(params: {\n    projectId: string;\n    limit?: number;\n    sortBy?: \"createdAt\" | \"name\" | \"statusUpdatedAt\";\n    sortOrder?: \"asc\" | \"desc\";\n    namePrefix?: string;\n    cursor?: string;\n    tags?: Record<string, string>;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      SandboxesPaginationResponse,\n      await this.request(`/v2/sandboxes`, {\n        query: {\n          project: params.projectId,\n          limit: params.limit,\n          sortBy: params.sortBy,\n          sortOrder: params.sortOrder,\n          namePrefix: params.namePrefix,\n          cursor: params.cursor,\n          tags: toTagsFilter(params.tags),\n        },\n        method: \"GET\",\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async updateSandbox(params: {\n    name: string;\n    projectId: string;\n    persistent?: boolean;\n    resources?: { vcpus?: number; memory?: number };\n    runtime?: RUNTIMES | (string & {});\n    timeout?: number;\n    networkPolicy?: NetworkPolicy;\n    tags?: Record<string, string>;\n    ports?: number[];\n    snapshotExpiration?: number;\n    keepLastSnapshots?: {\n      count: number;\n      expiration?: number;\n      deleteEvicted?: boolean;\n    } | null;\n    currentSnapshotId?: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"PATCH\",\n        query: {\n          projectId: params.projectId,\n        },\n        body: JSON.stringify({\n          persistent: params.persistent,\n          resources: params.resources,\n          runtime: params.runtime,\n          timeout: params.timeout,\n          networkPolicy: params.networkPolicy\n            ? toAPINetworkPolicy(params.networkPolicy)\n            : undefined,\n          tags: params.tags,\n          ports: params.ports,\n          snapshotExpiration: params.snapshotExpiration,\n          keepLastSnapshots: params.keepLastSnapshots,\n          currentSnapshotId: params.currentSnapshotId,\n        }),\n        signal: params.signal,\n      }),\n    );\n  }\n\n  async deleteSandbox(params: {\n    name: string;\n    projectId: string;\n    signal?: AbortSignal;\n  }) {\n    return parseOrThrow(\n      UpdateSandboxResponse,\n      await this.request(`/v2/sandboxes/${encodeURIComponent(params.name)}`, {\n        method: \"DELETE\",\n        query: {\n          projectId: params.projectId,\n        },\n        signal: params.signal,\n      }),\n    );\n  }\n}\n\nasync function pipe(\n  readable: ReadableStream<Uint8Array>,\n  output: NodeJS.WritableStream,\n  options?: { signal?: AbortSignal },\n) {\n  const reader = readable.getReader();\n  let aborted = false;\n\n  const signal = options?.signal;\n  const onAbort = () => {\n    aborted = true;\n    const reason =\n      signal?.reason ??\n      new DOMException(\"The operation was aborted.\", \"AbortError\");\n    void reader.cancel(reason).catch(() => {\n      // ignore cancel errors when aborting\n    });\n\n    if (\"destroy\" in output && typeof output.destroy === \"function\") {\n      output.destroy(reason as Error);\n      return;\n    }\n\n    output.emit(\"error\", reason);\n    output.end();\n  };\n\n  if (signal) {\n    if (signal.aborted) {\n      onAbort();\n    } else {\n      signal.addEventListener(\"abort\", onAbort, { once: true });\n    }\n  }\n\n  try {\n    while (true) {\n      const read = await reader.read();\n      if (read.value) {\n        output.write(Buffer.from(read.value));\n      }\n      if (read.done) {\n        break;\n      }\n    }\n  } catch (err) {\n    if (!aborted) {\n      output.emit(\"error\", err);\n    }\n  } finally {\n    signal?.removeEventListener(\"abort\", onAbort);\n    if (!aborted) {\n      output.end();\n    }\n  }\n}\n\nfunction mergeSignals(...signals: [AbortSignal, ...AbortSignal[]]) {\n  const controller = new AbortController();\n  const onAbort = () => {\n    controller.abort();\n    for (const signal of signals) {\n      signal.removeEventListener(\"abort\", onAbort);\n    }\n  };\n  for (const signal of signals) {\n    if (signal.aborted) {\n      controller.abort();\n      break;\n    }\n    signal.addEventListener(\"abort\", onAbort);\n  }\n  return controller.signal;\n}\n\nfunction toTagsFilter(\n  tags: Record<string, string> | undefined,\n): string[] | undefined {\n  if (tags === undefined) return undefined;\n  const entries = Object.entries(tags);\n  if (entries.length === 0) return undefined;\n  return entries.map(([key, value]) => `${key}:${value}`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkDA,SAAS,sBAAsB,OAA8B;AAC3D,KAAI,MAAM,MAAM,IAAI,CAAC,WAAW,EAC9B,QAAO;AAET,KAAI;EACF,MAAM,UAAU,KAAK,MACnB,OAAO,KAAK,MAAM,MAAM,IAAI,CAAC,IAAI,YAAY,CAAC,SAAS,OAAO,CAC/D;AACD,MAAI,QAAQ,SACV,QAAO;GAAE,UAAU,QAAQ;GAAU,YAAY,QAAQ;GAAY;AAEvE,SAAO;SACD;AACN,SAAO;;;AAQX,IAAa,YAAb,cAA+B,WAAW;CAKxC,YAAY,QAKT;AACD,QAAM;GACJ,SAAS,OAAO,WAAW;GAC3B,OAAO,OAAO;GACd,OAAO;GACP,OAAO,OAAO;GACf,CAAC;AAEF,OAAK,SAAS,OAAO;AACrB,OAAK,aAAa;EAElB,MAAM,SAAS,sBAAsB,OAAO,MAAM;AAClD,MAAI,QAAQ;AACV,QAAK,aAAa;AAClB,QAAK,YAAY,OAAO;AACxB,QAAK,SAAS,OAAO;;;CAIzB,MAAc,mBAAkC;AAC9C,MAAI,CAAC,KAAK,WACR;AAGF,MAAI;GAEF,MAAM,aAAa,MAAM,mBAAmB;IAC1C,oBAAoB,MAAS;IAC7B,MAAM,KAAK;IACX,SAAS,KAAK;IACf,CAAC;AAGF,OAAI,eAAe,KAAK,OAAO;AAC7B,SAAK,QAAQ;IAEb,MAAM,SAAS,sBAAsB,WAAW;AAChD,QAAI,OACF,MAAK,SAAS,OAAO;;UAGnB;;CAKV,MAAgB,QAAQ,MAAc,QAAwB;AAC5D,QAAM,KAAK,kBAAkB;AAE7B,SAAO,MAAM,QAAQ,MAAM;GACzB,GAAG;GACH,OAAO;IAAE,QAAQ,KAAK;IAAQ,GAAG,QAAQ;IAAO;GAChD,SAAS;IACP,gBAAgB;IAChB,cAAc,kBAAkB,QAAQ,YAAY,QAAQ,QAAQ,IAAI,GAAG,UAAU,CAAC,GAAG,GAAG,MAAM,CAAC;IACnG,GAAG,QAAQ;IACZ;GACF,CAAC;;CAGJ,MAAM,WACJ,QACA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,IAAI,cAAc,IAAI,gBAAgB,cAAc,CAAC,UAAU;AAC/D,gBAAc,cAAc,IAAI,gBAAgB;AAChD,SAAO,aACL,0BACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,YAAY,eAAe,EAC7E,QAAQ,OAAO,QAChB,CAAC,CACH;;CAGH,MAAM,cACJ,QA8BA;EACA,MAAM,gBAAgB,iBAAiB,OAAO;AAC9C,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,WAAW,OAAO;IAClB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,SAAS,OAAO;IAChB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,YAAY,OAAO;IACnB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,GAAG;IACJ,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAyBH,MAAM,WAAW,QAUd;AACD,MAAI,OAAO,MAAM;GACf,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,OAC3C;IACE,QAAQ;IACR,MAAM,KAAK,UAAU;KACnB,SAAS,OAAO;KAChB,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,KAAK,OAAO;KACZ,MAAM,OAAO;KACb,MAAM;KACN,SAAS,OAAO;KACjB,CAAC;IACF,QAAQ,OAAO;IAChB,CACF;AAED,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAAC,OAC7D,QAAQ;AACP,YAAQ,MAAM,gCAAgC,IAAI;KAErD;GAED,MAAM,WAAW,gBAAgB,OAAO,gBAAgB;GACxD,MAAM,eAAe,MAAM,SAAS,MAAM;AAC1C,OAAI,aAAa,KACf,OAAM,IAAI,YACR,sBACA,iDACA,OAAO,UACR;GAEH,MAAM,EAAE,YAAY,gBAAgB,MAAM,aAAa,MAAM;AAe7D,UAAO;IAAE;IAAS,WAbA,YAAY;KAC5B,MAAM,gBAAgB,MAAM,SAAS,MAAM;AAC3C,SAAI,cAAc,KAChB,OAAM,IAAI,YACR,sBACA,wCACA,OAAO,UACR;KAEH,MAAM,EAAE,uBAAY,wBAAwB,MAAM,cAAc,MAAM;AACtE,YAAOA;QACL;IAEwB;;AAG9B,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,OAAO;GACnE,QAAQ;GACR,MAAM,KAAK,UAAU;IACnB,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,KAAK,OAAO;IACZ,KAAK,OAAO;IACZ,MAAM,OAAO;IACb,SAAS,OAAO;IACjB,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAeH,MAAM,WAAW,QAKd;AACD,SAAO,OAAO,OACV,aACE,yBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD;GAAE,QAAQ,OAAO;GAAQ,OAAO,EAAE,MAAM,QAAQ;GAAE,CACnD,CACF,GACD,aACE,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,SACzD,EAAE,QAAQ,OAAO,QAAQ,CAC1B,CACF;;CAGP,MAAM,gBAAgB,QAG0C;AAC9D,SAAO,aACL,4BACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,eAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,CAAC;GACxB,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,MAAM,MAAM,QAKT;AACD,SAAO,aACL,eACA,MAAM,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;GACxE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,cAAc,QAIX;EACD,MAAM,SAAS,IAAI,YAAY;AAC/B,SAAO;GACL,WAAW,YAAY;AACrB,WAAO,KAAK,QAAQ,0BAA0B,OAAO,UAAU,YAAY;KACzE,QAAQ;KACR,SAAS;MACP,gBAAgB;MAChB,SAAS,OAAO;MACjB;KACD,MAAM,MAAM,gBAAgB,OAAO,SAAS;KAC5C,QAAQ,OAAO;KAChB,CAAC;OACA;GACJ;GACD;;CAGH,MAAM,aAAa,QAwBhB;AACD,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,0BAA0B;GAC3C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAwBjB;AACD,SAAO,aACL,mBACA,MAAM,KAAK,QAAQ,2BAA2B;GAC5C,OAAO;IACL,SAAS,OAAO;IAChB,MAAM,OAAO;IACb,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,gBAAgB,QAkBnB;AACD,SAAO,aACL,sBACA,MAAM,KAAK,QAAQ,gCAAgC;GACjD,OAAO;IACL,SAAS,OAAO;IAChB,YAAY,OAAO;IACnB,OAAO,OAAO;IACd,WAAW,OAAO;IACnB;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,WAAW,QAUd;EACD,MAAM,EAAE,QAAQ,aAAa,KAAK,cAAc;GAC9C,WAAW,OAAO;GAClB,YAAY,OAAO;GACnB,QAAQ,OAAO;GAChB,CAAC;AAEF,OAAK,MAAM,QAAQ,OAAO,MACxB,OAAM,OAAO,QAAQ;GACnB,MAAM,cAAc;IAClB,UAAU,KAAK;IACf,YAAY,OAAO;IACnB,KAAK,OAAO;IACb,CAAC;GACF,SAAS,KAAK;GACd,MAAM,KAAK;GACZ,CAAC;AAGJ,SAAO,KAAK;AACZ,QAAM,aAAa,eAAe,MAAM,SAAS;;CAGnD,MAAM,SAAS,QAKc;EAC3B,MAAM,WAAW,MAAM,KAAK,QAC1B,0BAA0B,OAAO,UAAU,WAC3C;GACE,QAAQ;GACR,MAAM,KAAK,UAAU;IAAE,MAAM,OAAO;IAAM,KAAK,OAAO;IAAK,CAAC;GAC5D,QAAQ,OAAO;GAChB,CACF;AAED,MAAI,SAAS,WAAW,IACtB,QAAO;EAMT,MAAM,cAAc,SAAS,QAAQ,IAAI,eAAe,IAAI;AAC5D,MAAI,CAAC,SAAS,MAAM,CAAC,YAAY,SAAS,2BAA2B,EAAE;GACrE,MAAM,OAAO,MAAM,SAAS,MAAM,CAAC,YAAY,GAAG;GAClD,IAAIC;AACJ,OAAI;AACF,WAAO,KAAK,MAAM,QAAQ,KAAK;WACzB;AACN,WAAO;;AAET,SAAM,IAAI,SAAS,UAAU;IAC3B,SAAS,4CAA4C,SAAS,OAAO,iBAAiB,eAAe;IACrG;IACA;IACD,CAAC;;AAGJ,MAAI,SAAS,SAAS,KACpB,QAAO;AAGT,SAAO,SAAS,QAAQ,SAAS,KAAK;;CAGxC,MAAM,YAAY,QAKf;AACD,SAAO,aACL,iBACA,MAAM,KAAK,QACT,0BAA0B,OAAO,UAAU,OAAO,OAAO,UAAU,QACnE;GACE,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,CAAC;GAC/C,QAAQ,OAAO;GAChB,CACF,CACF;;CAGH,QAAQ,QASyB;EAC/B,MAAM,OAAO;EACb,MAAM,WAAW,IAAI,iBAAiB;EACtC,MAAM,SAAS,CAAC,OAAO,SACnB,SAAS,SACT,aAAa,OAAO,QAAQ,SAAS,OAAO;EAEhD,MAAM,aAAa,mBAAmB;GACpC,MAAM,MAAM,0BAA0B,OAAO,UAAU,OAAO,OAAO,MAAM;GAC3E,MAAM,WAAW,MAAM,KAAK,QAAQ,KAAK;IACvC,QAAQ;IACR;IACD,CAAC;AAEF,OAAI,CAAC,SAAS,GACZ,OAAM,aAAa,EAAE,KAAK,EAAE,SAAS;AAGvC,OAAI,SAAS,QAAQ,IAAI,eAAe,KAAK,uBAC3C,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;AAGJ,OAAI,SAAS,SAAS,KACpB,OAAM,IAAI,SAAS,UAAU;IAC3B,SAAS;IACT,WAAW,OAAO;IACnB,CAAC;GAGJ,MAAM,kBAAkB,UAAU,OAAO;AACzC,QAAK,SAAS,MAAM,iBAAiB,EAAE,QAAQ,CAAC,CAAC,OAAO,QAAQ;AAC9D,YAAQ,MAAM,sBAAsB,IAAI;KACxC;AAEF,cAAW,MAAM,SAAS,iBAAiB;IACzC,MAAM,SAAS,QAAQ,MAAM,MAAM;AACnC,QAAI,OAAO,WAAW,QACpB,OAAM,IAAI,YACR,OAAO,KAAK,MACZ,OAAO,KAAK,SACZ,OAAO,UACR;AAEH,UAAM;;MAEN;AAEJ,SAAO,OAAO,OAAO,WAAW;GAC9B,CAAC,OAAO,WAAW;AACjB,aAAS,MAAM,WAAW;;GAE5B,aAAa,SAAS,MAAM,WAAW;GACxC,CAAC;;CAGJ,MAAM,YAAY,QAGuC;EACvD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,qBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAQ,QAAQ,OAAO;GAAQ,CAAC,CACnE;;CAGH,MAAM,oBAAoB,QAI2B;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,mBAAmB,OAAO,cAAc,CAAC;GAC9D,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIiC;EACnD,MAAM,MAAM,0BAA0B,OAAO,UAAU;AACvD,SAAO,aACL,iBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR,MAAM,KAAK,UAAU,EAAE,UAAU,OAAO,UAAU,CAAC;GACnD,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAIuC;EAC1D,MAAM,MAAM,0BAA0B,OAAO,UAAU;EACvD,MAAM,OACJ,OAAO,eAAe,SAClB,SACA,KAAK,UAAU,EAAE,YAAY,OAAO,YAAY,CAAC;AACvD,SAAO,aACL,wBACA,MAAM,KAAK,QAAQ,KAAK;GACtB,QAAQ;GACR;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,eAAe,QAGiC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK;GAAE,QAAQ;GAAU,QAAQ,OAAO;GAAQ,CAAC,CACrE;;CAGH,MAAM,YAAY,QAGoC;EACpD,MAAM,MAAM,2BAA2B,OAAO;AAC9C,SAAO,aACL,kBACA,MAAM,KAAK,QAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CACnD;;CAGH,MAAM,WAAW,QAKb;EACF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAMC,QAA4C;GAChD,WAAW,OAAO;GAClB,GAAG;GACJ;AACD,MAAI,OAAO,WAAW,OACpB,OAAM,SAAS,OAAO,OAAO,OAAO;AAEtC,SAAO,aACL,2BACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE;GACA,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QASjB;AACD,SAAO,aACL,6BACA,MAAM,KAAK,QAAQ,iBAAiB;GAClC,OAAO;IACL,SAAS,OAAO;IAChB,OAAO,OAAO;IACd,QAAQ,OAAO;IACf,WAAW,OAAO;IAClB,YAAY,OAAO;IACnB,QAAQ,OAAO;IACf,MAAM,aAAa,OAAO,KAAK;IAChC;GACD,QAAQ;GACR,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAkBjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,MAAM,KAAK,UAAU;IACnB,YAAY,OAAO;IACnB,WAAW,OAAO;IAClB,SAAS,OAAO;IAChB,SAAS,OAAO;IAChB,eAAe,OAAO,gBAClB,mBAAmB,OAAO,cAAc,GACxC;IACJ,MAAM,OAAO;IACb,OAAO,OAAO;IACd,oBAAoB,OAAO;IAC3B,mBAAmB,OAAO;IAC1B,mBAAmB,OAAO;IAC3B,CAAC;GACF,QAAQ,OAAO;GAChB,CAAC,CACH;;CAGH,MAAM,cAAc,QAIjB;AACD,SAAO,aACL,uBACA,MAAM,KAAK,QAAQ,iBAAiB,mBAAmB,OAAO,KAAK,IAAI;GACrE,QAAQ;GACR,OAAO,EACL,WAAW,OAAO,WACnB;GACD,QAAQ,OAAO;GAChB,CAAC,CACH;;;AAIL,eAAe,KACb,UACA,QACA,SACA;CACA,MAAM,SAAS,SAAS,WAAW;CACnC,IAAI,UAAU;CAEd,MAAM,SAAS,SAAS;CACxB,MAAM,gBAAgB;AACpB,YAAU;EACV,MAAM,SACJ,QAAQ,UACR,IAAI,aAAa,8BAA8B,aAAa;AAC9D,EAAK,OAAO,OAAO,OAAO,CAAC,YAAY,GAErC;AAEF,MAAI,aAAa,UAAU,OAAO,OAAO,YAAY,YAAY;AAC/D,UAAO,QAAQ,OAAgB;AAC/B;;AAGF,SAAO,KAAK,SAAS,OAAO;AAC5B,SAAO,KAAK;;AAGd,KAAI,OACF,KAAI,OAAO,QACT,UAAS;KAET,QAAO,iBAAiB,SAAS,SAAS,EAAE,MAAM,MAAM,CAAC;AAI7D,KAAI;AACF,SAAO,MAAM;GACX,MAAM,OAAO,MAAM,OAAO,MAAM;AAChC,OAAI,KAAK,MACP,QAAO,MAAM,OAAO,KAAK,KAAK,MAAM,CAAC;AAEvC,OAAI,KAAK,KACP;;UAGG,KAAK;AACZ,MAAI,CAAC,QACH,QAAO,KAAK,SAAS,IAAI;WAEnB;AACR,UAAQ,oBAAoB,SAAS,QAAQ;AAC7C,MAAI,CAAC,QACH,QAAO,KAAK;;;AAKlB,SAAS,aAAa,GAAG,SAA0C;CACjE,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,gBAAgB;AACpB,aAAW,OAAO;AAClB,OAAK,MAAM,UAAU,QACnB,QAAO,oBAAoB,SAAS,QAAQ;;AAGhD,MAAK,MAAM,UAAU,SAAS;AAC5B,MAAI,OAAO,SAAS;AAClB,cAAW,OAAO;AAClB;;AAEF,SAAO,iBAAiB,SAAS,QAAQ;;AAE3C,QAAO,WAAW;;AAGpB,SAAS,aACP,MACsB;AACtB,KAAI,SAAS,OAAW,QAAO;CAC/B,MAAM,UAAU,OAAO,QAAQ,KAAK;AACpC,KAAI,QAAQ,WAAW,EAAG,QAAO;AACjC,QAAO,QAAQ,KAAK,CAAC,KAAK,WAAW,GAAG,IAAI,GAAG,QAAQ"}

dist/api-client/index.d.ts

@@ -1,2 +0,2 @@
-import { Command, CommandData, CommandFinishedData, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, Drive, DriveMetadata, LogLineStderr, LogLineStdout, Sandbox, SandboxMetaData, SandboxRoute, SandboxRouteData, Session, SessionMetaData, SessionResponse, Snapshot, SnapshotMetadata, SnapshotResponse, SnapshotTreeNode, SnapshotTreeNodeData, StopSessionResponse } from "./validators.js";
+import { Command, CommandData, CommandFinishedData, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, InteractiveSessionResponse, LogLineStderr, LogLineStdout, Sandbox, SandboxMetaData, SandboxRoute, SandboxRouteData, Session, SessionMetaData, SessionResponse, Snapshot, SnapshotMetadata, SnapshotResponse, SnapshotTreeNode, SnapshotTreeNodeData, StopSessionResponse } from "./validators.js";
 import { APIClient } from "./api-client.js";

dist/api-client/index.js

@@ -1,4 +0,4 @@
-import { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, Drive, DriveResponse, DrivesResponse, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotTreeNode, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator } from "./validators.js";
+import { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, InteractiveSessionResponse, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotTreeNode, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator } from "./validators.js";
 import { APIClient } from "./api-client.js";
 
 export {  };

dist/api-client/validators.cjs

@@ -22,3 +22,3 @@ const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
 	domain: zod.z.string(),
-	headers: zod.z.record(zod.z.string()).optional(),
+	headers: zod.z.record(zod.z.string(), zod.z.string()).optional(),
 	headerNames: zod.z.array(zod.z.string()).optional(),
@@ -32,3 +32,3 @@ match: RuleMatchValidator.optional()
 });
-const NetworkPolicyTransformValidator = zod.z.object({ headers: zod.z.record(zod.z.string()).optional() });
+const NetworkPolicyTransformValidator = zod.z.object({ headers: zod.z.record(zod.z.string(), zod.z.string()).optional() });
 const NetworkPolicyRuleValidator = zod.z.object({
@@ -40,3 +40,3 @@ match: RuleMatchValidator.optional(),
 const V2NetworkPolicyObjectValidator = zod.z.object({
-	allow: zod.z.union([zod.z.array(zod.z.string()), zod.z.record(zod.z.array(NetworkPolicyRuleValidator))]).optional(),
+	allow: zod.z.union([zod.z.array(zod.z.string()), zod.z.record(zod.z.string(), zod.z.array(NetworkPolicyRuleValidator))]).optional(),
 	subnets: zod.z.object({
@@ -131,2 +131,6 @@ allow: zod.z.array(zod.z.string()).optional(),
 const SessionAndRoutesResponse = SessionResponse.extend({ routes: zod.z.array(SandboxRoute) });
+const InteractiveSessionResponse = zod.z.object({
+	url: zod.z.string(),
+	token: zod.z.string()
+});
 const SessionsResponse = zod.z.object({
@@ -173,16 +177,2 @@ sessions: zod.z.array(Session.passthrough()),
 const SnapshotResponse = zod.z.object({ snapshot: Snapshot });
-const Drive = zod.z.object({
-	name: zod.z.string(),
-	projectId: zod.z.string(),
-	maxSizeBytes: zod.z.number(),
-	currentSessionId: zod.z.string().optional(),
-	currentSandboxName: zod.z.string().optional(),
-	createdAt: zod.z.number(),
-	updatedAt: zod.z.number()
-});
-const DrivesResponse = zod.z.object({
-	drives: zod.z.array(Drive),
-	pagination: CursorPagination
-});
-const DriveResponse = zod.z.object({ drive: Drive });
 const Sandbox = zod.z.object({
@@ -208,7 +198,3 @@ name: zod.z.string(),
 	cwd: zod.z.string().optional(),
-	tags: zod.z.record(zod.z.string()).optional(),
-	mounts: zod.z.record(zod.z.object({
-		drive: zod.z.string(),
-		mode: zod.z.enum(["read-only", "read-write"]).optional()
-	})).optional(),
+	tags: zod.z.record(zod.z.string(), zod.z.string()).optional(),
 	snapshotExpiration: zod.z.number().optional(),
@@ -247,8 +233,6 @@ keepLastSnapshots: zod.z.object({
 exports.CursorPagination = CursorPagination;
-exports.Drive = Drive;
-exports.DriveResponse = DriveResponse;
-exports.DrivesResponse = DrivesResponse;
 exports.EmptyResponse = EmptyResponse;
 exports.ForwardRuleValidator = ForwardRuleValidator;
 exports.InjectionRuleValidator = InjectionRuleValidator;
+exports.InteractiveSessionResponse = InteractiveSessionResponse;
 exports.LogError = LogError;
@@ -255,0 +239,0 @@ exports.LogLine = LogLine;

dist/api-client/validators.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"validators.cjs","names":["z"],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  lastUsedAt: z.number().optional(),\n  creationMethod: z.string().optional(),\n  parentId: z.string().optional(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const SnapshotTreeNode = z.object({\n  snapshot: Snapshot,\n  siblings: z.array(Snapshot),\n  count: z.string(),\n});\n\nexport type SnapshotTreeNodeData = z.infer<typeof SnapshotTreeNode>;\n\nexport const SnapshotTreeResponse = z.object({\n  snapshots: z.array(SnapshotTreeNode),\n  anchor: SnapshotTreeNode.optional(),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Drive = z.object({\n  name: z.string(),\n  projectId: z.string(),\n  maxSizeBytes: z.number(),\n  currentSessionId: z.string().optional(),\n  currentSandboxName: z.string().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n});\n\nexport type DriveMetadata = z.infer<typeof Drive>;\n\nexport const DrivesResponse = z.object({\n  drives: z.array(Drive),\n  pagination: CursorPagination,\n});\n\nexport const DriveResponse = z.object({\n  drive: Drive,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string()).optional(),\n  mounts: z\n    .record(\n      z.object({\n        drive: z.string(),\n        mode: z.enum([\"read-only\", \"read-write\"]).optional(),\n      }),\n    )\n    .optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;;AAIA,MAAM,uBAAuBA,MAAE,OAAO;CACpC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,YAAYA,MAAE,QAAQ,CAAC,UAAU;CACjC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2BA,MAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqBA,MAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAaA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAASA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,QAAQA,MAAE,QAAQ;CAElB,SAASA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAExC,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuBA,MAAE,OAAO;CAC3C,QAAQA,MAAE,QAAQ;CAClB,YAAYA,MAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkCA,MAAE,OAAO,EACtD,SAASA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC;AAEF,MAAa,6BAA6BA,MAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAWA,MAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAYA,MAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiCA,MAAE,OAAO;CACrD,OAAOA,MACJ,MAAM,CACLA,MAAE,MAAMA,MAAE,QAAQ,CAAC,EACnBA,MAAE,OAAOA,MAAE,MAAM,2BAA2B,CAAC,CAC9C,CAAC,CACD,UAAU;CACb,SAASA,MACN,OAAO;EACN,OAAOA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6BA,MAAE,MAAM,CACzCA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxDA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqCA,MACxC,OAAO;CACN,MAAMA,MAAE,QAAQ,SAAS;CACzB,gBAAgBA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAcA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgBA,MAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAcA,MAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgCA,MAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiCA,MAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,QAAQA,MAAE,QAAQ;CAClB,OAAOA,MAAE,QAAQ;CACjB,QAAQA,MAAE,QAAQ;CAClB,SAASA,MAAE,QAAQ;CACnB,SAASA,MAAE,QAAQ;CACnB,QAAQA,MAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAaA,MAAE,QAAQ;CACvB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,WAAWA,MAAE,QAAQ;CACrB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqBA,MAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiBA,MAAE,OAAO;EACxB,SAASA,MAAE,QAAQ;EACnB,QAAQA,MAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAeA,MAAE,OAAO;CACnC,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,MAAMA,MAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAWA,MAAE,OAAO;CAC/B,IAAIA,MAAE,QAAQ;CACd,iBAAiBA,MAAE,QAAQ;CAC3B,QAAQA,MAAE,QAAQ;CAClB,QAAQA,MAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACrB,YAAYA,MAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,OAAOA,MAAE,QAAQ;CACjB,MAAMA,MAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,MAAMA,MAAE,QAAQ;CAChB,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC;CACzB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,WAAWA,MAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAUA,MAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQA,MAAE,MAAM,aAAa,EAC9B,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,UAAUA,MAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0BA,MAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgBA,MAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAcA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAWA,MAAE,OAAO;CAC/B,QAAQA,MAAE,QAAQ,QAAQ;CAC1B,MAAMA,MAAE,OAAO;EACb,MAAMA,MAAE,QAAQ;EAChB,SAASA,MAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAUA,MAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoBA,MAAE,OAAO;CACxC,WAAWA,MAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,UAAU;CACV,UAAUA,MAAE,MAAM,SAAS;CAC3B,OAAOA,MAAE,QAAQ;CAClB,CAAC;AAIF,MAAa,uBAAuBA,MAAE,OAAO;CAC3C,WAAWA,MAAE,MAAM,iBAAiB;CACpC,QAAQ,iBAAiB,UAAU;CACnC,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,QAAQA,MAAE,OAAO;CAC5B,MAAMA,MAAE,QAAQ;CAChB,WAAWA,MAAE,QAAQ;CACrB,cAAcA,MAAE,QAAQ;CACxB,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACtB,CAAC;AAIF,MAAa,iBAAiBA,MAAE,OAAO;CACrC,QAAQA,MAAE,MAAM,MAAM;CACtB,YAAY;CACb,CAAC;AAEF,MAAa,gBAAgBA,MAAE,OAAO,EACpC,OAAO,OACR,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,MAAMA,MAAE,QAAQ;CAChB,YAAYA,MAAE,SAAS;CACvB,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0BA,MAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACrB,kBAAkBA,MAAE,QAAQ;CAC5B,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,KAAKA,MAAE,QAAQ,CAAC,UAAU;CAC1B,MAAMA,MAAE,OAAOA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,QAAQA,MACL,OACCA,MAAE,OAAO;EACP,OAAOA,MAAE,QAAQ;EACjB,MAAMA,MAAE,KAAK,CAAC,aAAa,aAAa,CAAC,CAAC,UAAU;EACrD,CAAC,CACH,CACA,UAAU;CACb,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmBA,MAChB,OAAO;EACN,OAAOA,MAAE,QAAQ;EACjB,YAAYA,MAAE,QAAQ,CAAC,UAAU;EACjC,eAAeA,MAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsBA,MAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4BA,MAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQA,MAAE,MAAM,aAAa;CAC7B,SAASA,MAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8BA,MAAE,OAAO;CAClD,WAAWA,MAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwBA,MAAE,OAAO;CAC5C,SAAS;CACT,QAAQA,MAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}
+{"version":3,"file":"validators.cjs","names":["z"],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string(), z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string(), z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.string(), z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  lastUsedAt: z.number().optional(),\n  creationMethod: z.string().optional(),\n  parentId: z.string().optional(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport type InteractiveSessionData = z.infer<typeof InteractiveSessionResponse>;\n\nexport const InteractiveSessionResponse = z.object({\n  url: z.string(),\n  token: z.string(),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const SnapshotTreeNode = z.object({\n  snapshot: Snapshot,\n  siblings: z.array(Snapshot),\n  count: z.string(),\n});\n\nexport type SnapshotTreeNodeData = z.infer<typeof SnapshotTreeNode>;\n\nexport const SnapshotTreeResponse = z.object({\n  snapshots: z.array(SnapshotTreeNode),\n  anchor: SnapshotTreeNode.optional(),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string(), z.string()).optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;;AAIA,MAAM,uBAAuBA,MAAE,OAAO;CACpC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,YAAYA,MAAE,QAAQ,CAAC,UAAU;CACjC,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2BA,MAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqBA,MAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAaA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAASA,MAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,QAAQA,MAAE,QAAQ;CAElB,SAASA,MAAE,OAAOA,MAAE,QAAQ,EAAEA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAEpD,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuBA,MAAE,OAAO;CAC3C,QAAQA,MAAE,QAAQ;CAClB,YAAYA,MAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkCA,MAAE,OAAO,EACtD,SAASA,MAAE,OAAOA,MAAE,QAAQ,EAAEA,MAAE,QAAQ,CAAC,CAAC,UAAU,EACrD,CAAC;AAEF,MAAa,6BAA6BA,MAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAWA,MAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAYA,MAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiCA,MAAE,OAAO;CACrD,OAAOA,MACJ,MAAM,CACLA,MAAE,MAAMA,MAAE,QAAQ,CAAC,EACnBA,MAAE,OAAOA,MAAE,QAAQ,EAAEA,MAAE,MAAM,2BAA2B,CAAC,CAC1D,CAAC,CACD,UAAU;CACb,SAASA,MACN,OAAO;EACN,OAAOA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6BA,MAAE,MAAM,CACzCA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxDA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqCA,MACxC,OAAO;CACN,MAAMA,MAAE,QAAQ,SAAS;CACzB,gBAAgBA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAcA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAaA,MAAE,MAAMA,MAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgBA,MAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAcA,MAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgCA,MAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiCA,MAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,QAAQA,MAAE,QAAQ;CAClB,OAAOA,MAAE,QAAQ;CACjB,QAAQA,MAAE,QAAQ;CAClB,SAASA,MAAE,QAAQ;CACnB,SAASA,MAAE,QAAQ;CACnB,QAAQA,MAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAaA,MAAE,QAAQ;CACvB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,WAAWA,MAAE,QAAQ;CACrB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqBA,MAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiBA,MAAE,OAAO;EACxB,SAASA,MAAE,QAAQ;EACnB,QAAQA,MAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAeA,MAAE,OAAO;CACnC,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,MAAMA,MAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAWA,MAAE,OAAO;CAC/B,IAAIA,MAAE,QAAQ;CACd,iBAAiBA,MAAE,QAAQ;CAC3B,QAAQA,MAAE,QAAQ;CAClB,QAAQA,MAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACrB,YAAYA,MAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,OAAOA,MAAE,QAAQ;CACjB,MAAMA,MAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAUA,MAAE,OAAO;CAC9B,IAAIA,MAAE,QAAQ;CACd,MAAMA,MAAE,QAAQ;CAChB,MAAMA,MAAE,MAAMA,MAAE,QAAQ,CAAC;CACzB,KAAKA,MAAE,QAAQ;CACf,WAAWA,MAAE,QAAQ;CACrB,UAAUA,MAAE,QAAQ,CAAC,UAAU;CAC/B,WAAWA,MAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAUA,MAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQA,MAAE,MAAM,aAAa,EAC9B,CAAC;AAIF,MAAa,6BAA6BA,MAAE,OAAO;CACjD,KAAKA,MAAE,QAAQ;CACf,OAAOA,MAAE,QAAQ;CAClB,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,UAAUA,MAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkBA,MAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0BA,MAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgBA,MAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAcA,MAAE,OAAO,EAAE,MAAMA,MAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQA,MAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAWA,MAAE,OAAO;CAC/B,QAAQA,MAAE,QAAQ,QAAQ;CAC1B,MAAMA,MAAE,OAAO;EACb,MAAMA,MAAE,QAAQ;EAChB,SAASA,MAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAUA,MAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoBA,MAAE,OAAO;CACxC,WAAWA,MAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO;CACvC,UAAU;CACV,UAAUA,MAAE,MAAM,SAAS;CAC3B,OAAOA,MAAE,QAAQ;CAClB,CAAC;AAIF,MAAa,uBAAuBA,MAAE,OAAO;CAC3C,WAAWA,MAAE,MAAM,iBAAiB;CACpC,QAAQ,iBAAiB,UAAU;CACnC,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmBA,MAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,UAAUA,MAAE,OAAO;CAC9B,MAAMA,MAAE,QAAQ;CAChB,YAAYA,MAAE,SAAS;CACvB,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,OAAOA,MAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,SAASA,MAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkBA,MAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0BA,MAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,WAAWA,MAAE,QAAQ;CACrB,WAAWA,MAAE,QAAQ;CACrB,kBAAkBA,MAAE,QAAQ;CAC5B,mBAAmBA,MAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,KAAKA,MAAE,QAAQ,CAAC,UAAU;CAC1B,MAAMA,MAAE,OAAOA,MAAE,QAAQ,EAAEA,MAAE,QAAQ,CAAC,CAAC,UAAU;CACjD,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmBA,MAChB,OAAO;EACN,OAAOA,MAAE,QAAQ;EACjB,YAAYA,MAAE,QAAQ,CAAC,UAAU;EACjC,eAAeA,MAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsBA,MAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4BA,MAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQA,MAAE,MAAM,aAAa;CAC7B,SAASA,MAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8BA,MAAE,OAAO;CAClD,WAAWA,MAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwBA,MAAE,OAAO;CAC5C,SAAS;CACT,QAAQA,MAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}

dist/api-client/validators.js

@@ -21,3 +21,3 @@ import { z } from "zod";
 	domain: z.string(),
-	headers: z.record(z.string()).optional(),
+	headers: z.record(z.string(), z.string()).optional(),
 	headerNames: z.array(z.string()).optional(),
@@ -31,3 +31,3 @@ match: RuleMatchValidator.optional()
 });
-const NetworkPolicyTransformValidator = z.object({ headers: z.record(z.string()).optional() });
+const NetworkPolicyTransformValidator = z.object({ headers: z.record(z.string(), z.string()).optional() });
 const NetworkPolicyRuleValidator = z.object({
@@ -39,3 +39,3 @@ match: RuleMatchValidator.optional(),
 const V2NetworkPolicyObjectValidator = z.object({
-	allow: z.union([z.array(z.string()), z.record(z.array(NetworkPolicyRuleValidator))]).optional(),
+	allow: z.union([z.array(z.string()), z.record(z.string(), z.array(NetworkPolicyRuleValidator))]).optional(),
 	subnets: z.object({
@@ -130,2 +130,6 @@ allow: z.array(z.string()).optional(),
 const SessionAndRoutesResponse = SessionResponse.extend({ routes: z.array(SandboxRoute) });
+const InteractiveSessionResponse = z.object({
+	url: z.string(),
+	token: z.string()
+});
 const SessionsResponse = z.object({
@@ -172,16 +176,2 @@ sessions: z.array(Session.passthrough()),
 const SnapshotResponse = z.object({ snapshot: Snapshot });
-const Drive = z.object({
-	name: z.string(),
-	projectId: z.string(),
-	maxSizeBytes: z.number(),
-	currentSessionId: z.string().optional(),
-	currentSandboxName: z.string().optional(),
-	createdAt: z.number(),
-	updatedAt: z.number()
-});
-const DrivesResponse = z.object({
-	drives: z.array(Drive),
-	pagination: CursorPagination
-});
-const DriveResponse = z.object({ drive: Drive });
 const Sandbox = z.object({
@@ -207,7 +197,3 @@ name: z.string(),
 	cwd: z.string().optional(),
-	tags: z.record(z.string()).optional(),
-	mounts: z.record(z.object({
-		drive: z.string(),
-		mode: z.enum(["read-only", "read-write"]).optional()
-	})).optional(),
+	tags: z.record(z.string(), z.string()).optional(),
 	snapshotExpiration: z.number().optional(),
@@ -241,3 +227,3 @@ keepLastSnapshots: z.object({
 //#endregion
-export { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, Drive, DriveResponse, DrivesResponse, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotTreeNode, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator };
+export { Command, CommandFinishedResponse, CommandResponse, CreateSnapshotResponse, CursorPagination, EmptyResponse, ForwardRuleValidator, InjectionRuleValidator, InteractiveSessionResponse, LogError, LogLine, LogLineStderr, LogLineStdout, NetworkPolicyResponseValidator, NetworkPolicyRuleValidator, NetworkPolicyTransformValidator, Sandbox, SandboxAndSessionResponse, SandboxRoute, SandboxesPaginationResponse, Session, SessionAndRoutesResponse, SessionResponse, SessionsResponse, Snapshot, SnapshotResponse, SnapshotTreeNode, SnapshotTreeResponse, SnapshotsResponse, StopSessionResponse, UpdateSandboxResponse, V2NetworkPolicyObjectValidator };
 //# sourceMappingURL=validators.js.map

dist/api-client/validators.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"validators.js","names":[],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  lastUsedAt: z.number().optional(),\n  creationMethod: z.string().optional(),\n  parentId: z.string().optional(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const SnapshotTreeNode = z.object({\n  snapshot: Snapshot,\n  siblings: z.array(Snapshot),\n  count: z.string(),\n});\n\nexport type SnapshotTreeNodeData = z.infer<typeof SnapshotTreeNode>;\n\nexport const SnapshotTreeResponse = z.object({\n  snapshots: z.array(SnapshotTreeNode),\n  anchor: SnapshotTreeNode.optional(),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Drive = z.object({\n  name: z.string(),\n  projectId: z.string(),\n  maxSizeBytes: z.number(),\n  currentSessionId: z.string().optional(),\n  currentSandboxName: z.string().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n});\n\nexport type DriveMetadata = z.infer<typeof Drive>;\n\nexport const DrivesResponse = z.object({\n  drives: z.array(Drive),\n  pagination: CursorPagination,\n});\n\nexport const DriveResponse = z.object({\n  drive: Drive,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string()).optional(),\n  mounts: z\n    .record(\n      z.object({\n        drive: z.string(),\n        mode: z.enum([\"read-only\", \"read-write\"]).optional(),\n      }),\n    )\n    .optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;AAIA,MAAM,uBAAuB,EAAE,OAAO;CACpC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2B,EAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqB,EAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAAS,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,QAAQ;CAElB,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU;CAExC,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,QAAQ,EAAE,QAAQ;CAClB,YAAY,EAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkC,EAAE,OAAO,EACtD,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU,EACzC,CAAC;AAEF,MAAa,6BAA6B,EAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAW,EAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAY,EAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiC,EAAE,OAAO;CACrD,OAAO,EACJ,MAAM,CACL,EAAE,MAAM,EAAE,QAAQ,CAAC,EACnB,EAAE,OAAO,EAAE,MAAM,2BAA2B,CAAC,CAC9C,CAAC,CACD,UAAU;CACb,SAAS,EACN,OAAO;EACN,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6B,EAAE,MAAM,CACzC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqC,EACxC,OAAO;CACN,MAAM,EAAE,QAAQ,SAAS;CACzB,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgB,EAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAc,EAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgC,EAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiC,EAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,QAAQ,EAAE,QAAQ;CAClB,OAAO,EAAE,QAAQ;CACjB,QAAQ,EAAE,QAAQ;CAClB,SAAS,EAAE,QAAQ;CACnB,SAAS,EAAE,QAAQ;CACnB,QAAQ,EAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ;CACrB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiB,EAAE,OAAO;EACxB,SAAS,EAAE,QAAQ;EACnB,QAAQ,EAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAe,EAAE,OAAO;CACnC,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAW,EAAE,OAAO;CAC/B,IAAI,EAAE,QAAQ;CACd,iBAAiB,EAAE,QAAQ;CAC3B,QAAQ,EAAE,QAAQ;CAClB,QAAQ,EAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;CACzB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAU,EAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQ,EAAE,MAAM,aAAa,EAC9B,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,UAAU,EAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0B,EAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgB,EAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAW,EAAE,OAAO;CAC/B,QAAQ,EAAE,QAAQ,QAAQ;CAC1B,MAAM,EAAE,OAAO;EACb,MAAM,EAAE,QAAQ;EAChB,SAAS,EAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAU,EAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoB,EAAE,OAAO;CACxC,WAAW,EAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,UAAU;CACV,UAAU,EAAE,MAAM,SAAS;CAC3B,OAAO,EAAE,QAAQ;CAClB,CAAC;AAIF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,WAAW,EAAE,MAAM,iBAAiB;CACpC,QAAQ,iBAAiB,UAAU;CACnC,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,QAAQ,EAAE,OAAO;CAC5B,MAAM,EAAE,QAAQ;CAChB,WAAW,EAAE,QAAQ;CACrB,cAAc,EAAE,QAAQ;CACxB,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAIF,MAAa,iBAAiB,EAAE,OAAO;CACrC,QAAQ,EAAE,MAAM,MAAM;CACtB,YAAY;CACb,CAAC;AAEF,MAAa,gBAAgB,EAAE,OAAO,EACpC,OAAO,OACR,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,MAAM,EAAE,QAAQ;CAChB,YAAY,EAAE,SAAS;CACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,kBAAkB,EAAE,QAAQ;CAC5B,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,UAAU;CACrC,QAAQ,EACL,OACC,EAAE,OAAO;EACP,OAAO,EAAE,QAAQ;EACjB,MAAM,EAAE,KAAK,CAAC,aAAa,aAAa,CAAC,CAAC,UAAU;EACrD,CAAC,CACH,CACA,UAAU;CACb,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmB,EAChB,OAAO;EACN,OAAO,EAAE,QAAQ;EACjB,YAAY,EAAE,QAAQ,CAAC,UAAU;EACjC,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4B,EAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQ,EAAE,MAAM,aAAa;CAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8B,EAAE,OAAO;CAClD,WAAW,EAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwB,EAAE,OAAO;CAC5C,SAAS;CACT,QAAQ,EAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}
+{"version":3,"file":"validators.js","names":[],"sources":["../../src/api-client/validators.ts"],"sourcesContent":["import { z } from \"zod\";\n\nexport type SessionMetaData = z.infer<typeof Session>;\n\nconst RuleMatcherValidator = z.object({\n  exact: z.string().optional(),\n  startsWith: z.string().optional(),\n  regex: z.string().optional(),\n});\n\nconst KeyValueMatcherValidator = z.object({\n  key: RuleMatcherValidator.optional(),\n  value: RuleMatcherValidator.optional(),\n});\n\nconst RuleMatchValidator = z.object({\n  path: RuleMatcherValidator.optional(),\n  method: z.array(z.string()).optional(),\n  queryString: z.array(KeyValueMatcherValidator).optional(),\n  headers: z.array(KeyValueMatcherValidator).optional(),\n});\n\nexport const InjectionRuleValidator = z.object({\n  domain: z.string(),\n  // headers are only sent in requests\n  headers: z.record(z.string(), z.string()).optional(),\n  // headerNames are returned in responses\n  headerNames: z.array(z.string()).optional(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const ForwardRuleValidator = z.object({\n  domain: z.string(),\n  forwardURL: z.string(),\n  match: RuleMatchValidator.optional(),\n});\n\nexport const NetworkPolicyTransformValidator = z.object({\n  headers: z.record(z.string(), z.string()).optional(),\n});\n\nexport const NetworkPolicyRuleValidator = z.object({\n  match: RuleMatchValidator.optional(),\n  transform: z.array(NetworkPolicyTransformValidator).optional(),\n  forwardURL: z.string().optional(),\n});\n\nexport const V2NetworkPolicyObjectValidator = z.object({\n  allow: z\n    .union([\n      z.array(z.string()),\n      z.record(z.string(), z.array(NetworkPolicyRuleValidator)),\n    ])\n    .optional(),\n  subnets: z\n    .object({\n      allow: z.array(z.string()).optional(),\n      deny: z.array(z.string()).optional(),\n    })\n    .optional(),\n});\n\nconst NetworkPolicyModeValidator = z.union([\n  z.object({ mode: z.literal(\"allow-all\") }).passthrough(),\n  z.object({ mode: z.literal(\"deny-all\") }).passthrough(),\n]);\n\nconst LegacyCustomNetworkPolicyValidator = z\n  .object({\n    mode: z.literal(\"custom\"),\n    allowedDomains: z.array(z.string()).optional(),\n    allowedCIDRs: z.array(z.string()).optional(),\n    deniedCIDRs: z.array(z.string()).optional(),\n    injectionRules: z.array(InjectionRuleValidator).optional(),\n    forwardRules: z.array(ForwardRuleValidator).optional(),\n  })\n  .passthrough();\n\nexport const NetworkPolicyRequestValidator = z.union([\n  NetworkPolicyModeValidator,\n  V2NetworkPolicyObjectValidator.passthrough(),\n]);\n\nexport const NetworkPolicyResponseValidator = z.union([\n  NetworkPolicyModeValidator,\n  LegacyCustomNetworkPolicyValidator,\n]);\n\nexport const Session = z.object({\n  id: z.string(),\n  memory: z.number(),\n  vcpus: z.number(),\n  region: z.string(),\n  runtime: z.string(),\n  timeout: z.number(),\n  status: z.enum([\n    \"pending\",\n    \"running\",\n    \"stopping\",\n    \"stopped\",\n    \"failed\",\n    \"aborted\",\n    \"snapshotting\",\n  ]),\n  requestedAt: z.number(),\n  startedAt: z.number().optional(),\n  requestedStopAt: z.number().optional(),\n  stoppedAt: z.number().optional(),\n  abortedAt: z.number().optional(),\n  duration: z.number().optional(),\n  sourceSnapshotId: z.string().optional(),\n  snapshottedAt: z.number().optional(),\n  createdAt: z.number(),\n  cwd: z.string(),\n  updatedAt: z.number(),\n  interactivePort: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  activeCpuDurationMs: z.number().optional(),\n  networkTransfer: z.object({\n    ingress: z.number(),\n    egress: z.number(),\n  }).optional(),\n});\n\nexport type SandboxRouteData = z.infer<typeof SandboxRoute>;\n\nexport const SandboxRoute = z.object({\n  url: z.string(),\n  subdomain: z.string(),\n  port: z.number(),\n});\n\nexport type SnapshotMetadata = z.infer<typeof Snapshot>;\n\nexport const Snapshot = z.object({\n  id: z.string(),\n  sourceSessionId: z.string(),\n  region: z.string(),\n  status: z.enum([\"created\", \"deleted\", \"failed\"]),\n  sizeBytes: z.number(),\n  expiresAt: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  lastUsedAt: z.number().optional(),\n  creationMethod: z.string().optional(),\n  parentId: z.string().optional(),\n});\n\nexport const CursorPagination = z.object({\n  count: z.number(),\n  next: z.string().nullable(),\n});\n\nexport type CommandData = z.infer<typeof Command>;\n\nexport const Command = z.object({\n  id: z.string(),\n  name: z.string(),\n  args: z.array(z.string()),\n  cwd: z.string(),\n  sessionId: z.string(),\n  exitCode: z.number().nullable(),\n  startedAt: z.number(),\n});\n\nconst CommandFinished = Command.extend({\n  exitCode: z.number(),\n});\n\nexport const SessionResponse = z.object({\n  session: Session.passthrough(),\n});\n\nexport const SessionAndRoutesResponse = SessionResponse.extend({\n  routes: z.array(SandboxRoute),\n});\n\nexport type InteractiveSessionData = z.infer<typeof InteractiveSessionResponse>;\n\nexport const InteractiveSessionResponse = z.object({\n  url: z.string(),\n  token: z.string(),\n});\n\nexport const SessionsResponse = z.object({\n  sessions: z.array(Session.passthrough()),\n  pagination: CursorPagination,\n});\n\nexport const CommandResponse = z.object({\n  command: Command,\n});\n\nexport type CommandFinishedData = z.infer<typeof CommandFinishedResponse>[\"command\"];\n\nexport const CommandFinishedResponse = z.object({\n  command: CommandFinished,\n});\n\nexport const EmptyResponse = z.object({});\n\nconst LogLineBase = z.object({ data: z.string() });\nexport const LogLineStdout = LogLineBase.extend({\n  stream: z.literal(\"stdout\"),\n});\nexport const LogLineStderr = LogLineBase.extend({\n  stream: z.literal(\"stderr\"),\n});\n\nexport const LogError = z.object({\n  stream: z.literal(\"error\"),\n  data: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\n\nexport const LogLine = z.discriminatedUnion(\"stream\", [\n  LogLineStdout,\n  LogLineStderr,\n  LogError,\n]);\n\nexport const SnapshotsResponse = z.object({\n  snapshots: z.array(Snapshot),\n  pagination: CursorPagination,\n});\n\nexport const SnapshotTreeNode = z.object({\n  snapshot: Snapshot,\n  siblings: z.array(Snapshot),\n  count: z.string(),\n});\n\nexport type SnapshotTreeNodeData = z.infer<typeof SnapshotTreeNode>;\n\nexport const SnapshotTreeResponse = z.object({\n  snapshots: z.array(SnapshotTreeNode),\n  anchor: SnapshotTreeNode.optional(),\n  pagination: CursorPagination,\n});\n\nexport const CreateSnapshotResponse = z.object({\n  snapshot: Snapshot,\n  session: Session.passthrough(),\n});\n\nexport const SnapshotResponse = z.object({\n  snapshot: Snapshot,\n});\n\nexport const Sandbox = z.object({\n  name: z.string(),\n  persistent: z.boolean(),\n  region: z.string().optional(),\n  vcpus: z.number().optional(),\n  memory: z.number().optional(),\n  runtime: z.string().optional(),\n  timeout: z.number().optional(),\n  networkPolicy: NetworkPolicyResponseValidator.optional(),\n  totalEgressBytes: z.number().optional(),\n  totalIngressBytes: z.number().optional(),\n  totalActiveCpuDurationMs: z.number().optional(),\n  totalDurationMs: z.number().optional(),\n  createdAt: z.number(),\n  updatedAt: z.number(),\n  currentSessionId: z.string(),\n  currentSnapshotId: z.string().optional(),\n  status: Session.shape.status,\n  statusUpdatedAt: z.number().optional(),\n  cwd: z.string().optional(),\n  tags: z.record(z.string(), z.string()).optional(),\n  snapshotExpiration: z.number().optional(),\n  keepLastSnapshots: z\n    .object({\n      count: z.number(),\n      expiration: z.number().optional(),\n      deleteEvicted: z.boolean().optional(),\n    })\n    .optional(),\n});\n\nexport type SandboxMetaData = z.infer<typeof Sandbox>;\n\nexport const StopSessionResponse = z.object({\n  session: Session.passthrough(),\n  sandbox: Sandbox.optional(),\n  snapshot: Snapshot.optional(),\n});\n\nexport const SandboxAndSessionResponse = z.object({\n  sandbox: Sandbox,\n  session: Session.passthrough(),\n  routes: z.array(SandboxRoute),\n  resumed: z.boolean().optional(),\n});\n\nexport const SandboxesPaginationResponse = z.object({\n  sandboxes: z.array(Sandbox),\n  pagination: CursorPagination,\n});\n\nexport const UpdateSandboxResponse = z.object({\n  sandbox: Sandbox,\n  routes: z.array(SandboxRoute).optional(),\n});\n"],"mappings":";;;AAIA,MAAM,uBAAuB,EAAE,OAAO;CACpC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC7B,CAAC;AAEF,MAAM,2BAA2B,EAAE,OAAO;CACxC,KAAK,qBAAqB,UAAU;CACpC,OAAO,qBAAqB,UAAU;CACvC,CAAC;AAEF,MAAM,qBAAqB,EAAE,OAAO;CAClC,MAAM,qBAAqB,UAAU;CACrC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CACtC,aAAa,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACzD,SAAS,EAAE,MAAM,yBAAyB,CAAC,UAAU;CACtD,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,QAAQ,EAAE,QAAQ;CAElB,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;CAEpD,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,QAAQ,EAAE,QAAQ;CAClB,YAAY,EAAE,QAAQ;CACtB,OAAO,mBAAmB,UAAU;CACrC,CAAC;AAEF,MAAa,kCAAkC,EAAE,OAAO,EACtD,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU,EACrD,CAAC;AAEF,MAAa,6BAA6B,EAAE,OAAO;CACjD,OAAO,mBAAmB,UAAU;CACpC,WAAW,EAAE,MAAM,gCAAgC,CAAC,UAAU;CAC9D,YAAY,EAAE,QAAQ,CAAC,UAAU;CAClC,CAAC;AAEF,MAAa,iCAAiC,EAAE,OAAO;CACrD,OAAO,EACJ,MAAM,CACL,EAAE,MAAM,EAAE,QAAQ,CAAC,EACnB,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,2BAA2B,CAAC,CAC1D,CAAC,CACD,UAAU;CACb,SAAS,EACN,OAAO;EACN,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC,CACD,UAAU;CACd,CAAC;AAEF,MAAM,6BAA6B,EAAE,MAAM,CACzC,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,YAAY,EAAE,CAAC,CAAC,aAAa,EACxD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,WAAW,EAAE,CAAC,CAAC,aAAa,CACxD,CAAC;AAEF,MAAM,qCAAqC,EACxC,OAAO;CACN,MAAM,EAAE,QAAQ,SAAS;CACzB,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC9C,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC5C,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;CAC3C,gBAAgB,EAAE,MAAM,uBAAuB,CAAC,UAAU;CAC1D,cAAc,EAAE,MAAM,qBAAqB,CAAC,UAAU;CACvD,CAAC,CACD,aAAa;AAEhB,MAAa,gCAAgC,EAAE,MAAM,CACnD,4BACA,+BAA+B,aAAa,CAC7C,CAAC;AAEF,MAAa,iCAAiC,EAAE,MAAM,CACpD,4BACA,mCACD,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,QAAQ,EAAE,QAAQ;CAClB,OAAO,EAAE,QAAQ;CACjB,QAAQ,EAAE,QAAQ;CAClB,SAAS,EAAE,QAAQ;CACnB,SAAS,EAAE,QAAQ;CACnB,QAAQ,EAAE,KAAK;EACb;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CAAC;CACF,aAAa,EAAE,QAAQ;CACvB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,eAAe,EAAE,QAAQ,CAAC,UAAU;CACpC,WAAW,EAAE,QAAQ;CACrB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,eAAe,+BAA+B,UAAU;CACxD,qBAAqB,EAAE,QAAQ,CAAC,UAAU;CAC1C,iBAAiB,EAAE,OAAO;EACxB,SAAS,EAAE,QAAQ;EACnB,QAAQ,EAAE,QAAQ;EACnB,CAAC,CAAC,UAAU;CACd,CAAC;AAIF,MAAa,eAAe,EAAE,OAAO;CACnC,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,MAAM,EAAE,QAAQ;CACjB,CAAC;AAIF,MAAa,WAAW,EAAE,OAAO;CAC/B,IAAI,EAAE,QAAQ;CACd,iBAAiB,EAAE,QAAQ;CAC3B,QAAQ,EAAE,QAAQ;CAClB,QAAQ,EAAE,KAAK;EAAC;EAAW;EAAW;EAAS,CAAC;CAChD,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ,CAAC,UAAU;CAChC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,YAAY,EAAE,QAAQ,CAAC,UAAU;CACjC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;CACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,OAAO,EAAE,QAAQ;CACjB,MAAM,EAAE,QAAQ,CAAC,UAAU;CAC5B,CAAC;AAIF,MAAa,UAAU,EAAE,OAAO;CAC9B,IAAI,EAAE,QAAQ;CACd,MAAM,EAAE,QAAQ;CAChB,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;CACzB,KAAK,EAAE,QAAQ;CACf,WAAW,EAAE,QAAQ;CACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;CAC/B,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAM,kBAAkB,QAAQ,OAAO,EACrC,UAAU,EAAE,QAAQ,EACrB,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,QAAQ,aAAa,EAC/B,CAAC;AAEF,MAAa,2BAA2B,gBAAgB,OAAO,EAC7D,QAAQ,EAAE,MAAM,aAAa,EAC9B,CAAC;AAIF,MAAa,6BAA6B,EAAE,OAAO;CACjD,KAAK,EAAE,QAAQ;CACf,OAAO,EAAE,QAAQ;CAClB,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,UAAU,EAAE,MAAM,QAAQ,aAAa,CAAC;CACxC,YAAY;CACb,CAAC;AAEF,MAAa,kBAAkB,EAAE,OAAO,EACtC,SAAS,SACV,CAAC;AAIF,MAAa,0BAA0B,EAAE,OAAO,EAC9C,SAAS,iBACV,CAAC;AAEF,MAAa,gBAAgB,EAAE,OAAO,EAAE,CAAC;AAEzC,MAAM,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAClD,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AACF,MAAa,gBAAgB,YAAY,OAAO,EAC9C,QAAQ,EAAE,QAAQ,SAAS,EAC5B,CAAC;AAEF,MAAa,WAAW,EAAE,OAAO;CAC/B,QAAQ,EAAE,QAAQ,QAAQ;CAC1B,MAAM,EAAE,OAAO;EACb,MAAM,EAAE,QAAQ;EAChB,SAAS,EAAE,QAAQ;EACpB,CAAC;CACH,CAAC;AAEF,MAAa,UAAU,EAAE,mBAAmB,UAAU;CACpD;CACA;CACA;CACD,CAAC;AAEF,MAAa,oBAAoB,EAAE,OAAO;CACxC,WAAW,EAAE,MAAM,SAAS;CAC5B,YAAY;CACb,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO;CACvC,UAAU;CACV,UAAU,EAAE,MAAM,SAAS;CAC3B,OAAO,EAAE,QAAQ;CAClB,CAAC;AAIF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,WAAW,EAAE,MAAM,iBAAiB;CACpC,QAAQ,iBAAiB,UAAU;CACnC,YAAY;CACb,CAAC;AAEF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,UAAU;CACV,SAAS,QAAQ,aAAa;CAC/B,CAAC;AAEF,MAAa,mBAAmB,EAAE,OAAO,EACvC,UAAU,UACX,CAAC;AAEF,MAAa,UAAU,EAAE,OAAO;CAC9B,MAAM,EAAE,QAAQ;CAChB,YAAY,EAAE,SAAS;CACvB,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,OAAO,EAAE,QAAQ,CAAC,UAAU;CAC5B,QAAQ,EAAE,QAAQ,CAAC,UAAU;CAC7B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,SAAS,EAAE,QAAQ,CAAC,UAAU;CAC9B,eAAe,+BAA+B,UAAU;CACxD,kBAAkB,EAAE,QAAQ,CAAC,UAAU;CACvC,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,0BAA0B,EAAE,QAAQ,CAAC,UAAU;CAC/C,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACrB,kBAAkB,EAAE,QAAQ;CAC5B,mBAAmB,EAAE,QAAQ,CAAC,UAAU;CACxC,QAAQ,QAAQ,MAAM;CACtB,iBAAiB,EAAE,QAAQ,CAAC,UAAU;CACtC,KAAK,EAAE,QAAQ,CAAC,UAAU;CAC1B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;CACjD,oBAAoB,EAAE,QAAQ,CAAC,UAAU;CACzC,mBAAmB,EAChB,OAAO;EACN,OAAO,EAAE,QAAQ;EACjB,YAAY,EAAE,QAAQ,CAAC,UAAU;EACjC,eAAe,EAAE,SAAS,CAAC,UAAU;EACtC,CAAC,CACD,UAAU;CACd,CAAC;AAIF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,SAAS,QAAQ,aAAa;CAC9B,SAAS,QAAQ,UAAU;CAC3B,UAAU,SAAS,UAAU;CAC9B,CAAC;AAEF,MAAa,4BAA4B,EAAE,OAAO;CAChD,SAAS;CACT,SAAS,QAAQ,aAAa;CAC9B,QAAQ,EAAE,MAAM,aAAa;CAC7B,SAAS,EAAE,SAAS,CAAC,UAAU;CAChC,CAAC;AAEF,MAAa,8BAA8B,EAAE,OAAO;CAClD,WAAW,EAAE,MAAM,QAAQ;CAC3B,YAAY;CACb,CAAC;AAEF,MAAa,wBAAwB,EAAE,OAAO;CAC5C,SAAS;CACT,QAAQ,EAAE,MAAM,aAAa,CAAC,UAAU;CACzC,CAAC"}

dist/auth/file.d.cts

@@ -7,12 +7,4 @@ import { z } from "zod";
   refreshToken: z.ZodOptional<z.ZodString>;
-  expiresAt: z.ZodOptional<z.ZodEffects<z.ZodNumber, Date, number>>;
-}, "strip", z.ZodTypeAny, {
-  token?: string | undefined;
-  refreshToken?: string | undefined;
-  expiresAt?: Date | undefined;
-}, {
-  token?: string | undefined;
-  refreshToken?: string | undefined;
-  expiresAt?: number | undefined;
-}>;
+  expiresAt: z.ZodOptional<z.ZodPipe<z.ZodNumber, z.ZodTransform<Date, number>>>;
+}, z.core.$strip>;
 type AuthFile = z.infer<typeof AuthFile>;
@@ -19,0 +11,0 @@ declare const getAuth: () => {

dist/auth/file.d.ts

@@ -7,12 +7,4 @@ import { z } from "zod";
   refreshToken: z.ZodOptional<z.ZodString>;
-  expiresAt: z.ZodOptional<z.ZodEffects<z.ZodNumber, Date, number>>;
-}, "strip", z.ZodTypeAny, {
-  token?: string | undefined;
-  refreshToken?: string | undefined;
-  expiresAt?: Date | undefined;
-}, {
-  token?: string | undefined;
-  refreshToken?: string | undefined;
-  expiresAt?: number | undefined;
-}>;
+  expiresAt: z.ZodOptional<z.ZodPipe<z.ZodNumber, z.ZodTransform<Date, number>>>;
+}, z.core.$strip>;
 type AuthFile = z.infer<typeof AuthFile>;
@@ -19,0 +11,0 @@ declare const getAuth: () => {

dist/auth/oauth.d.cts

@@ -8,17 +8,5 @@ import { z } from "zod";
   session_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-  active: true;
-  client_id: string;
-  session_id: string;
-}, {
-  active: true;
-  client_id: string;
-  session_id: string;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
   active: z.ZodLiteral<false>;
-}, "strip", z.ZodTypeAny, {
-  active: false;
-}, {
-  active: false;
-}>]>;
+}, z.core.$strip>]>;
 declare function OAuth(): Promise<{
@@ -66,39 +54,27 @@ /**
 declare const TokenSet: z.ZodObject<{
-  /** The access token issued by the authorization server. */
   access_token: z.ZodString;
-  /** The type of the token issued */
   token_type: z.ZodLiteral<"Bearer">;
-  /** The lifetime in seconds of the access token. */
   expires_in: z.ZodNumber;
-  /** The refresh token, which can be used to obtain new access tokens. */
   refresh_token: z.ZodOptional<z.ZodString>;
-  /** The scope of the access token. */
   scope: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-  access_token: string;
-  token_type: "Bearer";
-  expires_in: number;
-  refresh_token?: string | undefined;
-  scope?: string | undefined;
-}, {
-  access_token: string;
-  token_type: "Bearer";
-  expires_in: number;
-  refresh_token?: string | undefined;
-  scope?: string | undefined;
-}>;
+}, z.core.$strip>;
 type TokenSet = z.infer<typeof TokenSet>;
 declare const OAuthErrorResponse: z.ZodObject<{
-  error: z.ZodEnum<["invalid_request", "invalid_client", "invalid_grant", "unauthorized_client", "unsupported_grant_type", "invalid_scope", "server_error", "authorization_pending", "slow_down", "access_denied", "expired_token", "unsupported_token_type"]>;
+  error: z.ZodEnum<{
+    invalid_request: "invalid_request";
+    invalid_client: "invalid_client";
+    invalid_grant: "invalid_grant";
+    unauthorized_client: "unauthorized_client";
+    unsupported_grant_type: "unsupported_grant_type";
+    invalid_scope: "invalid_scope";
+    server_error: "server_error";
+    authorization_pending: "authorization_pending";
+    slow_down: "slow_down";
+    access_denied: "access_denied";
+    expired_token: "expired_token";
+    unsupported_token_type: "unsupported_token_type";
+  }>;
   error_description: z.ZodOptional<z.ZodString>;
   error_uri: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-  error: "invalid_request" | "invalid_client" | "invalid_grant" | "unauthorized_client" | "unsupported_grant_type" | "invalid_scope" | "server_error" | "authorization_pending" | "slow_down" | "access_denied" | "expired_token" | "unsupported_token_type";
-  error_description?: string | undefined;
-  error_uri?: string | undefined;
-}, {
-  error: "invalid_request" | "invalid_client" | "invalid_grant" | "unauthorized_client" | "unsupported_grant_type" | "invalid_scope" | "server_error" | "authorization_pending" | "slow_down" | "access_denied" | "expired_token" | "unsupported_token_type";
-  error_description?: string | undefined;
-  error_uri?: string | undefined;
-}>;
+}, z.core.$strip>;
 type OAuthErrorResponse = z.infer<typeof OAuthErrorResponse>;
@@ -105,0 +81,0 @@ declare class OAuthError extends Error {

dist/auth/oauth.d.ts

@@ -8,17 +8,5 @@ import { z } from "zod";
   session_id: z.ZodString;
-}, "strip", z.ZodTypeAny, {
-  active: true;
-  client_id: string;
-  session_id: string;
-}, {
-  active: true;
-  client_id: string;
-  session_id: string;
-}>, z.ZodObject<{
+}, z.core.$strip>, z.ZodObject<{
   active: z.ZodLiteral<false>;
-}, "strip", z.ZodTypeAny, {
-  active: false;
-}, {
-  active: false;
-}>]>;
+}, z.core.$strip>]>;
 declare function OAuth(): Promise<{
@@ -66,39 +54,27 @@ /**
 declare const TokenSet: z.ZodObject<{
-  /** The access token issued by the authorization server. */
   access_token: z.ZodString;
-  /** The type of the token issued */
   token_type: z.ZodLiteral<"Bearer">;
-  /** The lifetime in seconds of the access token. */
   expires_in: z.ZodNumber;
-  /** The refresh token, which can be used to obtain new access tokens. */
   refresh_token: z.ZodOptional<z.ZodString>;
-  /** The scope of the access token. */
   scope: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-  access_token: string;
-  token_type: "Bearer";
-  expires_in: number;
-  refresh_token?: string | undefined;
-  scope?: string | undefined;
-}, {
-  access_token: string;
-  token_type: "Bearer";
-  expires_in: number;
-  refresh_token?: string | undefined;
-  scope?: string | undefined;
-}>;
+}, z.core.$strip>;
 type TokenSet = z.infer<typeof TokenSet>;
 declare const OAuthErrorResponse: z.ZodObject<{
-  error: z.ZodEnum<["invalid_request", "invalid_client", "invalid_grant", "unauthorized_client", "unsupported_grant_type", "invalid_scope", "server_error", "authorization_pending", "slow_down", "access_denied", "expired_token", "unsupported_token_type"]>;
+  error: z.ZodEnum<{
+    invalid_request: "invalid_request";
+    invalid_client: "invalid_client";
+    invalid_grant: "invalid_grant";
+    unauthorized_client: "unauthorized_client";
+    unsupported_grant_type: "unsupported_grant_type";
+    invalid_scope: "invalid_scope";
+    server_error: "server_error";
+    authorization_pending: "authorization_pending";
+    slow_down: "slow_down";
+    access_denied: "access_denied";
+    expired_token: "expired_token";
+    unsupported_token_type: "unsupported_token_type";
+  }>;
   error_description: z.ZodOptional<z.ZodString>;
   error_uri: z.ZodOptional<z.ZodString>;
-}, "strip", z.ZodTypeAny, {
-  error: "invalid_request" | "invalid_client" | "invalid_grant" | "unauthorized_client" | "unsupported_grant_type" | "invalid_scope" | "server_error" | "authorization_pending" | "slow_down" | "access_denied" | "expired_token" | "unsupported_token_type";
-  error_description?: string | undefined;
-  error_uri?: string | undefined;
-}, {
-  error: "invalid_request" | "invalid_client" | "invalid_grant" | "unauthorized_client" | "unsupported_grant_type" | "invalid_scope" | "server_error" | "authorization_pending" | "slow_down" | "access_denied" | "expired_token" | "unsupported_token_type";
-  error_description?: string | undefined;
-  error_uri?: string | undefined;
-}>;
+}, z.core.$strip>;
 type OAuthErrorResponse = z.infer<typeof OAuthErrorResponse>;
@@ -105,0 +81,0 @@ declare class OAuthError extends Error {

dist/index.cjs

@@ -7,3 +7,2 @@ const require_api_error = require('./api-client/api-error.cjs');
 const require_sandbox = require('./sandbox.cjs');
-const require_drive = require('./drive.cjs');
 const require_proxy = require('./proxy.cjs');
@@ -14,3 +13,2 @@
 exports.CommandFinished = require_command.CommandFinished;
-exports.Drive = require_drive.Drive;
 exports.FileSystem = require_filesystem.FileSystem;
@@ -17,0 +15,0 @@ exports.Sandbox = require_sandbox.Sandbox;

dist/index.d.cts

@@ -8,5 +8,4 @@ import { APIError, StreamError } from "./api-client/api-error.cjs";
 import { FileSystem } from "./filesystem.cjs";
-import { Sandbox, SandboxMountMode, SandboxMounts, SerializedSandbox } from "./sandbox.cjs";
-import { Drive, SerializedDrive } from "./drive.cjs";
+import { Sandbox, SerializedSandbox } from "./sandbox.cjs";
 import { InvalidRequestProxyHandler, ProxyHandler, ProxyMeta, defineSandboxProxy } from "./proxy.cjs";
-export { APIError, Command, CommandFinished, type CommandOutput, Drive, FileSystem, type InvalidRequestProxyHandler, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, type ProxyHandler, type ProxyMeta, Sandbox, type SandboxMountMode, type SandboxMounts, type SerializedCommand, type SerializedCommandFinished, type SerializedDrive, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, type SnapshotTreeNodeData, StreamError, defineSandboxProxy };
+export { APIError, Command, CommandFinished, type CommandOutput, FileSystem, type InvalidRequestProxyHandler, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, type ProxyHandler, type ProxyMeta, Sandbox, type SerializedCommand, type SerializedCommandFinished, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, type SnapshotTreeNodeData, StreamError, defineSandboxProxy };

dist/index.d.ts

@@ -8,5 +8,4 @@ import { APIError, StreamError } from "./api-client/api-error.js";
 import { FileSystem } from "./filesystem.js";
-import { Sandbox, SandboxMountMode, SandboxMounts, SerializedSandbox } from "./sandbox.js";
-import { Drive, SerializedDrive } from "./drive.js";
+import { Sandbox, SerializedSandbox } from "./sandbox.js";
 import { InvalidRequestProxyHandler, ProxyHandler, ProxyMeta, defineSandboxProxy } from "./proxy.js";
-export { APIError, Command, CommandFinished, type CommandOutput, Drive, FileSystem, type InvalidRequestProxyHandler, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, type ProxyHandler, type ProxyMeta, Sandbox, type SandboxMountMode, type SandboxMounts, type SerializedCommand, type SerializedCommandFinished, type SerializedDrive, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, type SnapshotTreeNodeData, StreamError, defineSandboxProxy };
+export { APIError, Command, CommandFinished, type CommandOutput, FileSystem, type InvalidRequestProxyHandler, type NetworkPolicy, type NetworkPolicyKeyValueMatcher, type NetworkPolicyMatch, type NetworkPolicyMatcher, type NetworkPolicyRule, type NetworkTransformer, type ProxyHandler, type ProxyMeta, Sandbox, type SerializedCommand, type SerializedCommandFinished, type SerializedSandbox, type SerializedSnapshot, Session, Snapshot, type SnapshotTreeNodeData, StreamError, defineSandboxProxy };

dist/index.js

@@ -7,5 +7,4 @@ import { APIError, StreamError } from "./api-client/api-error.js";
 import { Sandbox } from "./sandbox.js";
-import { Drive } from "./drive.js";
 import { defineSandboxProxy } from "./proxy.js";
 
-export { APIError, Command, CommandFinished, Drive, FileSystem, Sandbox, Session, Snapshot, StreamError, defineSandboxProxy };
+export { APIError, Command, CommandFinished, FileSystem, Sandbox, Session, Snapshot, StreamError, defineSandboxProxy };

dist/sandbox.cjs

@@ -140,2 +140,9 @@ const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
 	/**
+	* The default working directory of the current session (e.g.
+	* `/vercel/sandbox`).
+	*/
+	get cwd() {
+		return this.currentSession().cwd;
+	}
+	/**
 	* The status of the current session.
@@ -159,8 +166,2 @@ */
 	/**
-	* Drives mounted on the sandbox, keyed by mount path.
-	*/
-	get mounts() {
-		return this.sandbox.mounts;
-	}
-	/**
 	* The default network policy of this sandbox.
@@ -313,3 +314,2 @@ */
 			tags: params?.tags,
-			mounts: params?.mounts,
 			snapshotExpiration: params?.snapshotExpiration,
@@ -626,2 +626,13 @@ keepLastSnapshots: params?.keepLastSnapshots,
 	/**
+	* Open an interactive shell session, resuming the sandbox if needed.
+	*
+	* @param opts - Optional parameters.
+	* @param opts.signal - An AbortSignal to cancel the operation.
+	* @returns The WebSocket URL and token used to connect to the PTY.
+	*/
+	async openInteractive(opts) {
+		"use step";
+		return this.withResume(() => this.session.openInteractive(opts), opts?.signal);
+	}
+	/**
 	* Read a file from the filesystem of this sandbox as a stream.
@@ -628,0 +639,0 @@ *

dist/sandbox.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"sandbox.cjs","names":["APIError","getCredentials","APIClient","fromAPINetworkPolicy","attachPaginator","WORKFLOW_SERIALIZE","WORKFLOW_DESERIALIZE","Session","getPrivateParams","copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\">","FileSystem","resources: { vcpus: number; memory: number } | undefined"],"sources":["../src/sandbox.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type {\n  SessionMetaData,\n  SandboxRouteData,\n  SandboxMetaData,\n  SnapshotMetadata,\n} from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { APIError } from \"./api-client/api-error.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { getPrivateParams, type WithPrivate } from \"./utils/types.js\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { RUNTIMES } from \"./constants.js\";\nimport { Session, type RunCommandParams } from \"./session.js\";\nimport type { Command, CommandFinished } from \"./command.js\";\nimport type { Snapshot } from \"./snapshot.js\";\nimport type { SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n} from \"./network-policy.js\";\nimport { fromAPINetworkPolicy } from \"./utils/network-policy.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\nimport { setTimeout } from \"node:timers/promises\";\nimport { FileSystem } from \"./filesystem.js\";\n\nexport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n};\n\n/** @inline */\nexport interface BaseCreateSandboxParams {\n  /**\n   * The name of the sandbox. If omitted, a random name will be generated.\n   */\n  name?: string;\n  /**\n   * The source of the sandbox.\n   *\n   * Omit this parameter start a sandbox without a source.\n   *\n   * For git sources:\n   * - `depth`: Creates shallow clones with limited commit history (minimum: 1)\n   * - `revision`: Clones and checks out a specific commit, branch, or tag\n   */\n  source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n      }\n    | {\n        type: \"git\";\n        url: string;\n        username: string;\n        password: string;\n        depth?: number;\n        revision?: string;\n      }\n    | { type: \"tarball\"; url: string };\n  /**\n   * Array of port numbers to expose from the sandbox. Sandboxes can\n   * expose up to 4 ports.\n   */\n  ports?: number[];\n  /**\n   * Timeout in milliseconds before the sandbox auto-terminates.\n   */\n  timeout?: number;\n  /**\n   * Resources to allocate to the sandbox.\n   *\n   * Your sandbox will get the amount of vCPUs you specify here and\n   * 2048 MB of memory per vCPU.\n   */\n  resources?: { vcpus: number };\n  /**\n   * The runtime of the sandbox, currently only `node24`, `node22`, `node26` and `python3.13` are supported.\n   * If not specified, the default runtime `node24` will be used.\n   */\n  runtime?: RUNTIMES | (string & {});\n  /**\n   * Network policy to define network restrictions for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  networkPolicy?: NetworkPolicy;\n  /**\n   * Default environment variables for the sandbox.\n   * These are inherited by all commands unless overridden with\n   * the `env` option in `runCommand`.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   env: { NODE_ENV: \"production\", API_KEY: \"secret\" },\n   * });\n   * // All commands will have NODE_ENV and API_KEY set\n   * await sandbox.runCommand(\"node\", [\"app.js\"]);\n   */\n  env?: Record<string, string>;\n  /**\n   * Key-value tags to associate with the sandbox. Maximum 5 tags.\n   * @example { env: \"staging\", team: \"infra\" }\n   */\n  tags?: Record<string, string>;\n\n  /**\n   * List of drives to attach to the sandbox, keyed by the desired mount path.\n   * The drive must be created beforehand with `Drive.getOrCreate`.\n   *\n   * The mount paths must be absolute and cannot overlap with each other.\n   *\n   * @example\n   * const drive = await Drive.getOrCreate({ name: \"my-drive\" });\n   * const sandbox = await Sandbox.create({\n   *   mounts: {\n   *     \"/data\": { drive: drive.name, mode: \"read-write\" },\n   *   },\n   * });\n   */\n  mounts?: Record<\n    string,\n    {\n      /**\n       * The drive name to mount.\n       */\n      drive: string;\n      /**\n       * Mount mode. Defaults to `read-write` if unspecified.\n       */\n      mode?: \"read-only\" | \"read-write\";\n    }\n  >;\n\n  /**\n   * An AbortSignal to cancel sandbox creation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Enable or disable automatic restore of the filesystem between sessions.\n   */\n  persistent?: boolean;\n  /**\n   * Default snapshot expiration in milliseconds.\n   * When set, snapshots created for this sandbox will expire after this duration.\n   * Use `0` for no expiration.\n   */\n  snapshotExpiration?: number;\n  /**\n   * Retention policy that keeps only the N most recent snapshots of this\n   * sandbox. Older snapshots are evicted when a new one is created.\n   */\n  keepLastSnapshots?: {\n    /**\n     * Number of snapshots to keep (1-10).\n     */\n    count: number;\n    /**\n     * Expiration in milliseconds applied to kept snapshots.\n     * Use `0` for no expiration. Falls back to `snapshotExpiration` when omitted.\n     */\n    expiration?: number;\n    /**\n     * When `true` (the default), evicted snapshots are deleted immediately;\n     * when `false`, they keep the default expiration.\n     */\n    deleteEvicted?: boolean;\n  };\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\nexport type SandboxMounts = NonNullable<BaseCreateSandboxParams[\"mounts\"]>;\nexport type SandboxMountMode = NonNullable<SandboxMounts[string][\"mode\"]>;\n\nexport type CreateSandboxParams =\n  | BaseCreateSandboxParams\n  | (Omit<BaseCreateSandboxParams, \"runtime\" | \"source\"> & {\n      source: { type: \"snapshot\"; snapshotId: string };\n    });\n\n/**\n * Parameters for {@link Sandbox.fork}.\n *\n * The fork inherits the source sandbox's current filesystem snapshot and copies\n * as many config fields from the source as the server exposes. Any field set\n * here acts as an override of the copied value.\n *\n * `env` is not copied (encrypted server-side); pass it explicitly to set\n * environment variables on the fork. `runtime` is not exposed: when the\n * source has a snapshot, it is inherited; otherwise it is copied from the\n * source sandbox.\n * @inline\n */\nexport type ForkSandboxParams = Omit<\n  BaseCreateSandboxParams,\n  \"source\" | \"runtime\"\n> & {\n  /**\n   * Name of the source sandbox to fork from.\n   */\n  sourceSandbox: string;\n};\n\n/** @inline */\ninterface GetSandboxParams {\n  /**\n   * The name of the sandbox.\n   */\n  name: string;\n  /**\n   * Whether to resume an existing session. Defaults to true.\n   */\n  resume?: boolean;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\n/**\n * Extends both {@link BaseCreateSandboxParams} and {@link GetSandboxParams}\n * (minus `name`, which is required on get but optional here) so that any\n * new parameter added to either flow is picked up automatically. The\n * structural overlap on `signal` / `onResume` is intentional — both\n * interfaces declare them with identical optional types.\n * @inline\n */\ninterface GetOrCreateSandboxParams\n  extends BaseCreateSandboxParams,\n    Omit<GetSandboxParams, \"name\"> {\n  /**\n   * Called once after a sandbox is freshly created (not when an existing\n   * sandbox is retrieved). Use this for one-time setup such as seeding\n   * files or warming caches. The returned promise is awaited before\n   * {@link Sandbox.getOrCreate} resolves.\n   */\n  onCreate?: (sandbox: Sandbox) => Promise<void>;\n}\n\nfunction isSandboxStoppedError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 410;\n}\n\nfunction isNotFoundError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 404;\n}\n\nfunction isSnapshotNotFoundError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 410 &&\n    (err.json as any)?.error?.code === \"snapshot_not_found\"\n  );\n}\n\nfunction isSandboxStoppingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_stopping\"\n  );\n}\n\nfunction isSandboxSnapshottingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_snapshotting\"\n  );\n}\n\n/**\n * Serialized representation of a Sandbox for @workflow/serde.\n * Fields `metadata` and `routes` are the original wire format from main.\n * Fields `sandboxMetadata` and `projectId` are added for named-sandboxes.\n */\nexport interface SerializedSandbox {\n  metadata: SandboxSnapshot;\n  routes: SandboxRouteData[];\n  sandboxMetadata?: SandboxMetaData;\n  projectId?: string;\n}\n\n// ============================================================================\n// Sandbox class\n// ============================================================================\n\n/**\n * A Sandbox is a persistent, isolated Linux MicroVMs to run commands in.\n * Use {@link Sandbox.create} or {@link Sandbox.get} to construct.\n * @hideconstructor\n */\nexport class Sandbox {\n  private _client: APIClient | null = null;\n  private readonly projectId: string;\n\n  /**\n   * In-flight resume promise, used to deduplicate concurrent resume calls.\n   */\n  private resumePromise: Promise<void> | null = null;\n\n  /**\n   * Internal Session instance for the current VM.\n   */\n  private session: Session | undefined;\n\n  /**\n   * Internal metadata about the sandbox.\n   */\n  private sandbox: SandboxMetaData;\n\n  /**\n   * Hook that will be executed when a new session is created during resume.\n   */\n  private readonly onResume?: (sandbox: Sandbox) => Promise<void>;\n\n  /**\n   * A `node:fs/promises`-compatible API for interacting with the sandbox filesystem.\n   *\n   * @example\n   * const content = await sandbox.fs.readFile('/etc/hostname', 'utf8');\n   * await sandbox.fs.writeFile('/tmp/hello.txt', 'Hello, world!');\n   * const files = await sandbox.fs.readdir('/tmp');\n   * const stats = await sandbox.fs.stat('/tmp/hello.txt');\n   */\n  public readonly fs: FileSystem;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * The name of this sandbox.\n   */\n  public get name(): string {\n    return this.sandbox.name;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public get routes(): SandboxRouteData[] {\n    return this.currentSession().routes;\n  }\n\n  /**\n   * Whether the sandbox persists the state.\n   */\n  public get persistent(): boolean {\n    return this.sandbox.persistent;\n  }\n\n  /**\n   * The region this sandbox runs in.\n   */\n  public get region(): string | undefined {\n    return this.sandbox.region;\n  }\n\n  /**\n   * Number of virtual CPUs allocated.\n   */\n  public get vcpus(): number | undefined {\n    return this.sandbox.vcpus;\n  }\n\n  /**\n   * Memory allocated in MB.\n   */\n  public get memory(): number | undefined {\n    return this.sandbox.memory;\n  }\n\n  /** Runtime identifier (e.g. \"node24\", \"python3.13\"). */\n  public get runtime(): string | undefined {\n    return this.sandbox.runtime;\n  }\n\n  /**\n   * Cumulative egress bytes across all sessions.\n   */\n  public get totalEgressBytes(): number | undefined {\n    return this.sandbox.totalEgressBytes;\n  }\n\n  /**\n   * Cumulative ingress bytes across all sessions.\n   */\n  public get totalIngressBytes(): number | undefined {\n    return this.sandbox.totalIngressBytes;\n  }\n\n  /**\n   * Cumulative active CPU duration in milliseconds across all sessions.\n   */\n  public get totalActiveCpuDurationMs(): number | undefined {\n    return this.sandbox.totalActiveCpuDurationMs;\n  }\n\n  /**\n   * Cumulative wall-clock duration in milliseconds across all sessions.\n   */\n  public get totalDurationMs(): number | undefined {\n    return this.sandbox.totalDurationMs;\n  }\n\n  /**\n   * When this sandbox was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.sandbox.updatedAt);\n  }\n\n  /**\n   * When the sandbox status was last updated.\n   */\n  public get statusUpdatedAt(): Date | undefined {\n    return this.sandbox.statusUpdatedAt\n      ? new Date(this.sandbox.statusUpdatedAt)\n      : undefined;\n  }\n\n  /**\n   * When this sandbox was created.\n   */\n  public get createdAt(): Date {\n    return new Date(this.sandbox.createdAt);\n  }\n\n  /**\n   * Interactive port.\n   */\n  public get interactivePort(): number | undefined {\n    return this.currentSession().interactivePort;\n  }\n\n  /**\n   * The status of the current session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.currentSession().status;\n  }\n\n  /**\n   * The default timeout of this sandbox in milliseconds.\n   */\n  public get timeout(): number | undefined {\n    return this.sandbox.timeout;\n  }\n\n  /**\n   * Key-value tags attached to the sandbox.\n   */\n  public get tags(): Record<string, string> | undefined {\n    return this.sandbox.tags;\n  }\n\n  /**\n   * Drives mounted on the sandbox, keyed by mount path.\n   */\n  public get mounts(): SandboxMounts | undefined {\n    return this.sandbox.mounts;\n  }\n\n  /**\n   * The default network policy of this sandbox.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.sandbox.networkPolicy\n      ? fromAPINetworkPolicy(this.sandbox.networkPolicy)\n      : undefined;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.currentSession().sourceSnapshotId;\n  }\n\n  /**\n   * The current snapshot ID of this sandbox, if any.\n   */\n  public get currentSnapshotId(): string | undefined {\n    return this.sandbox.currentSnapshotId;\n  }\n\n  /**\n   * The default snapshot expiration in milliseconds, if set.\n   */\n  public get snapshotExpiration(): number | undefined {\n    return this.sandbox.snapshotExpiration;\n  }\n\n  /**\n   * The snapshot retention policy (`keep-last-snapshots`) currently configured\n   * on this sandbox, if any.\n   */\n  public get keepLastSnapshots():\n    | { count: number; expiration?: number; deleteEvicted?: boolean }\n    | undefined {\n    return this.sandbox.keepLastSnapshots;\n  }\n\n  /**\n   * The amount of CPU used by the session. Only reported once the VM is stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.currentSession().activeCpuUsageMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.currentSession().networkTransfer;\n  }\n\n  /**\n   * Allow to get a list of sandboxes for a team narrowed to the given params.\n   * It returns both the sandboxes and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Sandbox.list({ namePrefix: \"ci-\" });\n   * for await (const sandbox of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSandboxes\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSandboxes({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sandboxes\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Serialize a Sandbox instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Sandbox instance to serialize\n   * @returns A plain object containing sandbox metadata and routes\n   */\n  static [WORKFLOW_SERIALIZE](instance: Sandbox): SerializedSandbox {\n    return {\n      metadata: instance.session?._sessionSnapshot!,\n      routes: instance.session?.routes ?? [],\n      sandboxMetadata: instance.sandbox,\n      projectId: instance.projectId,\n    };\n  }\n\n  /**\n   * Deserialize a Sandbox from serialized snapshot data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized sandbox data\n   * @returns The reconstructed Sandbox instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSandbox): Sandbox {\n    const sandbox = new Sandbox({\n      sandbox: data.sandboxMetadata!,\n      routes: data.routes,\n      projectId: data.projectId,\n    });\n    if (data.metadata) {\n      sandbox.session = new Session({ routes: data.routes, snapshot: data.metadata });\n    }\n    return sandbox;\n  }\n\n  /**\n   * Create a new sandbox.\n   *\n   * @param params - Creation parameters and optional credentials.\n   * @returns A promise resolving to the created {@link Sandbox}.\n   * @example\n   * <caption>Create a sandbox with default options</caption>\n   * const sandbox = await Sandbox.create();\n   *\n   * @example\n   * <caption>Create a sandbox and drop it in the end of the block</caption>\n   * async function fn() {\n   *   await using const sandbox = await Sandbox.create();\n   *   // Sandbox automatically stopped at the end of the lexical scope\n   * }\n   */\n  static async create(\n    params?: WithPrivate<\n      CreateSandboxParams | (CreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.createSandbox({\n      source: params?.source,\n      projectId: credentials.projectId,\n      ports: params?.ports ?? [],\n      timeout: params?.timeout,\n      resources: params?.resources,\n      runtime: params && \"runtime\" in params ? params?.runtime : undefined,\n      networkPolicy: params?.networkPolicy,\n      env: params?.env,\n      tags: params?.tags,\n      mounts: params?.mounts,\n      snapshotExpiration: params?.snapshotExpiration,\n      keepLastSnapshots: params?.keepLastSnapshots,\n      signal: params?.signal,\n      name: params?.name,\n      persistent: params?.persistent,\n      ...privateParams,\n    });\n\n    return new DisposableSandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params?.onResume,\n    });\n  }\n\n  /**\n   * Fork an existing sandbox into a new one. Any field passed in `params`\n   * overrides the source value.\n   *\n   * If the source sandbox has no current snapshot, falls back to creating a\n   * fresh sandbox with the same copied config plus the source's `runtime`.\n   *\n   * `env` is not copied (encrypted server-side); pass it explicitly to set\n   * environment variables on the fork.\n   *\n   * @param params - Fork parameters and optional credentials.\n   *   `sourceSandbox` is the name of the source sandbox; everything else\n   *   acts as an override.\n   * @returns A promise resolving to the new {@link Sandbox}.\n   *\n   * @example\n   * <caption>Fork with all config copied from the source</caption>\n   * const fork = await Sandbox.fork({ sourceSandbox: \"prod-agent\" });\n   *\n   * @example\n   * <caption>Fork with an explicit new name and overridden vcpus</caption>\n   * const fork = await Sandbox.fork({\n   *   sourceSandbox: \"prod-agent\",\n   *   name: \"forked-prod-agent\",\n   *   resources: { vcpus: 4 },\n   * });\n   */\n  static async fork(\n    params: WithPrivate<ForkSandboxParams | (ForkSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const { sourceSandbox: sourceName, ...overrides } = params;\n\n    // Forward only what `Sandbox.get` consumes; don't leak fork-only inputs.\n    const credentialFields = params as Partial<Credentials>;\n    const sourceSandbox = await Sandbox.get({\n      token: credentialFields.token,\n      projectId: credentialFields.projectId,\n      teamId: credentialFields.teamId,\n      fetch: params.fetch,\n      signal: params.signal,\n      ...getPrivateParams(params),\n      name: sourceName,\n      resume: false,\n    } as Parameters<typeof Sandbox.get>[0]);\n\n    const sourcePorts = sourceSandbox.routes\n      .filter((r) => r.port !== sourceSandbox.interactivePort)\n      .map((r) => r.port);\n\n    const copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\"> = {\n      ...(sourceSandbox.vcpus !== undefined && {\n        resources: { vcpus: sourceSandbox.vcpus },\n      }),\n      ...(sourceSandbox.timeout !== undefined && {\n        timeout: sourceSandbox.timeout,\n      }),\n      ...(sourceSandbox.networkPolicy !== undefined && {\n        networkPolicy: sourceSandbox.networkPolicy,\n      }),\n      ...(sourceSandbox.tags !== undefined && { tags: sourceSandbox.tags }),\n      ...(sourcePorts.length > 0 && { ports: sourcePorts }),\n      persistent: sourceSandbox.persistent,\n      ...(sourceSandbox.snapshotExpiration !== undefined && {\n        snapshotExpiration: sourceSandbox.snapshotExpiration,\n      }),\n      ...(sourceSandbox.keepLastSnapshots !== undefined && {\n        keepLastSnapshots: sourceSandbox.keepLastSnapshots,\n      }),\n    };\n\n    const snapshotId = sourceSandbox.currentSnapshotId;\n    if (snapshotId) {\n      return Sandbox.create({\n        ...copied,\n        ...overrides,\n        source: { type: \"snapshot\", snapshotId },\n      } as Parameters<typeof Sandbox.create>[0]);\n    }\n\n    // No snapshot: seed a fresh sandbox using the source's runtime.\n    return Sandbox.create({\n      ...copied,\n      ...(sourceSandbox.runtime !== undefined && {\n        runtime: sourceSandbox.runtime,\n      }),\n      ...overrides,\n    } as Parameters<typeof Sandbox.create>[0]);\n  }\n\n  /**\n   * Retrieve an existing sandbox and resume its session.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: WithPrivate<GetSandboxParams | (GetSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.getSandbox({\n      name: params.name,\n      projectId: credentials.projectId,\n      resume: params.resume,\n      signal: params.signal,\n      ...privateParams,\n    });\n\n    const sandbox = new Sandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params.onResume,\n    });\n\n    if (response.json.resumed && params.onResume) {\n      await params.onResume(sandbox);\n    }\n\n    return sandbox;\n  }\n\n  /**\n   * Retrieve an existing named sandbox, or create a new one if none exists.\n   *\n   * If `name` is omitted, this always creates a new sandbox and fires\n   * `onCreate`. If `name` is provided, it first tries {@link Sandbox.get};\n   * on `not_found` it creates a new sandbox with that name; on\n   * `snapshot_not_found` it deletes the stale named sandbox and creates\n   * a fresh one with the same name.\n   *\n   * @param params - Get/create parameters plus an optional `onCreate` hook.\n   * @returns A promise resolving to the {@link Sandbox}.\n   *\n   * @example\n   * <caption>Idempotent named sandbox with one-time setup</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   name: \"my-workspace\",\n   *   onCreate: async (sbx) => {\n   *     await sbx.writeFiles([\n   *       { path: \"README.md\", content: Buffer.from(\"# Hello\") },\n   *     ]);\n   *   },\n   * });\n   *\n   * @example\n   * <caption>Unnamed — always creates</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   onCreate: async (sbx) => {\n   *     await sbx.runCommand(\"npm\", [\"install\"]);\n   *   },\n   * });\n   */\n  static async getOrCreate(\n    params?: WithPrivate<\n      GetOrCreateSandboxParams | (GetOrCreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    // No name → always create, fire onCreate.\n    if (!params?.name) {\n      const sandbox = await Sandbox.create(params);\n      if (params?.onCreate) {\n        await params.onCreate(sandbox);\n      }\n      return sandbox;\n    }\n\n    try {\n      return await Sandbox.get(\n        params as unknown as Parameters<typeof Sandbox.get>[0],\n      );\n    } catch (err) {\n      if (isNotFoundError(err)) {\n        // Sandbox does not exist: re-create it.\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      if (isSnapshotNotFoundError(err)) {\n        // Sandbox exists but the snapshot has expired. Delete it and create\n        // a new one.\n        const credentials = await getCredentials(params);\n        const client = new APIClient({\n          teamId: credentials.teamId,\n          token: credentials.token,\n          fetch: params.fetch,\n        });\n        const privateParams = getPrivateParams(params);\n        try {\n          await client.deleteSandbox({\n            name: params.name,\n            projectId: credentials.projectId,\n            signal: params.signal,\n            ...privateParams,\n          });\n        } catch (deleteErr) {\n          // Tolerate 404 — the named sandbox was already cleaned up by a\n          // concurrent request. Propagate anything else.\n          if (!isNotFoundError(deleteErr)) {\n            throw deleteErr;\n          }\n        }\n\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      throw err;\n    }\n  }\n\n  /**\n   * Create a new Sandbox instance.\n   *\n   * @param params.client - Optional API client. If not provided, will be lazily created using global credentials.\n   * @param params.routes - Port-to-subdomain mappings for exposed ports\n   * @param params.sandbox - Sandbox snapshot metadata\n   */\n  constructor({\n    client,\n    routes,\n    session,\n    sandbox,\n    projectId,\n    onResume,\n  }: {\n    client?: APIClient;\n    routes: SandboxRouteData[];\n    session?: SessionMetaData;\n    sandbox: SandboxMetaData;\n    projectId?: string;\n    onResume?: (sandbox: Sandbox) => Promise<void>;\n  }) {\n    this._client = client ?? null;\n    if (session) {\n      this.session = new Session({ client: client!, routes, session });\n    }\n    this.sandbox = sandbox;\n    this.projectId = projectId ?? \"\";\n    this.onResume = onResume;\n    this.fs = new FileSystem(this);\n  }\n\n  /**\n   * Get the current session (the running VM) for this sandbox.\n   *\n   * @returns The {@link Session} instance.\n   */\n  currentSession(): Session {\n    if (!this.session) {\n      throw new Error(\"No active session. Run a command or call resume first.\");\n    }\n    return this.session;\n  }\n\n  /**\n   * Resume this sandbox by creating a new session via `getSandbox`.\n   */\n  private async resume(signal?: AbortSignal): Promise<void> {\n    if (!this.resumePromise) {\n      this.resumePromise = this.doResume(signal).finally(() => {\n        this.resumePromise = null;\n      });\n    }\n    return this.resumePromise;\n  }\n\n  private async doResume(signal?: AbortSignal): Promise<void> {\n    const client = await this.ensureClient();\n    const response = await client.getSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      resume: true,\n      signal,\n    });\n    this.session = new Session({\n      client,\n      routes: response.json.routes,\n      session: response.json.session,\n    });\n    if (this.onResume && response.json.resumed) {\n      await this.onResume(this);\n    }\n  }\n\n  /**\n   * Poll until the current session reaches a terminal state, then resume.\n   */\n  private async waitForStopAndResume(signal?: AbortSignal): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const pollingInterval = 500;\n    let status = this.session!.status;\n\n    while (status === \"stopping\" || status === \"snapshotting\") {\n      await setTimeout(pollingInterval, undefined, { signal });\n      const poll = await client.getSession({\n        sessionId: this.session!.sessionId,\n        signal,\n      });\n      this.session = new Session({\n        client,\n        routes: poll.json.routes,\n        session: poll.json.session,\n      });\n      status = poll.json.session.status;\n    }\n    await this.resume(signal);\n  }\n\n  /**\n   * Execute `fn`, and if the session is stopped/stopping/snapshotting, resume and retry.\n   */\n  private async withResume<T>(\n    fn: () => Promise<T>,\n    signal?: AbortSignal,\n  ): Promise<T> {\n    if (!this.session) {\n      await this.resume(signal);\n    }\n    try {\n      return await fn();\n    } catch (err) {\n      if (isSandboxStoppedError(err)) {\n        await this.resume(signal);\n        return fn();\n      }\n      if (isSandboxStoppingError(err) || isSandboxSnapshottingError(err)) {\n        await this.waitForStopAndResume(signal);\n        return fn();\n      }\n      throw err;\n    }\n  }\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const signal =\n      typeof commandOrParams === \"string\"\n        ? opts?.signal\n        : commandOrParams.signal;\n    return this.withResume(\n      () => this.session!.runCommand(commandOrParams as any, args, opts),\n      signal,\n    );\n  }\n\n  /**\n   * Internal helper to start a command in the sandbox.\n   *\n   * @param params - Command execution parameters.\n   * @returns A {@link Command} or {@link CommandFinished}, depending on `detached`.\n   * @internal\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.getCommand(cmdId, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a directory in the filesystem of this sandbox.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.mkDir(path, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFile(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFileToBuffer(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Download a file from the sandbox to the local filesystem.\n   *\n   * @param src - Source file on the sandbox, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.downloadFile(src, dst, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Write files to the filesystem of this sandbox.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path, content, and optional mode (permissions)\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   *\n   * @example\n   * // Write an executable script\n   * await sandbox.writeFiles([\n   *   { path: \"/usr/local/bin/myscript\", content: \"#!/bin/bash\\necho hello\", mode: 0o755 }\n   * ]);\n   */\n  async writeFiles(\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.writeFiles(files, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Get the public domain of a port of this sandbox.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    return this.currentSession().domain(p);\n  }\n\n  /**\n   * Stop the sandbox.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state after stopping, with optional snapshot metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<SandboxSnapshot & { snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    if (!this.session) {\n      throw new Error(\"No active session to stop.\");\n    }\n    const { session, sandbox, snapshot } = await this.session.stop(opts);\n    if (sandbox) {\n      this.sandbox = sandbox;\n    }\n    return Object.assign(session, { snapshot });\n  }\n\n  /**\n   * Update the network policy for this sandbox.\n   *\n   * @deprecated Use {@link Sandbox.update} instead.\n   *\n   * @param networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the network policy is updated.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await sandbox.updateNetworkPolicy({\n   *   allow: [\"*.npmjs.org\", \"github.com\"],\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await sandbox.updateNetworkPolicy({\n   *   allow: {\n   *     \"ai-gateway.vercel.sh\": [{\n   *       transform: [{\n   *         headers: { authorization: \"Bearer ...\" }\n   *       }]\n   *     }],\n   *     \"*\": []\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await sandbox.updateNetworkPolicy(\"deny-all\");\n   */\n  async updateNetworkPolicy(\n    networkPolicy: NetworkPolicy,\n    opts?: { signal?: AbortSignal },\n  ): Promise<NetworkPolicy> {\n    \"use step\";\n    await this.withResume(\n      () => this.session!.update({ networkPolicy: networkPolicy }, opts),\n      opts?.signal,\n    );\n\n    return this.session!.networkPolicy!;\n  }\n\n  /**\n   * Extend the timeout of the sandbox by the specified duration.\n   *\n   * This allows you to extend the lifetime of a sandbox up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await sandbox.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.extendTimeout(duration, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a snapshot from this currently running sandbox. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.createFromSnapshot}.\n   *\n   * Note: this sandbox will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.snapshot(opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Update the sandbox configuration.\n   *\n   * When `ports` is provided, it is treated as the full desired port list:\n   * any currently exposed port omitted from the array will be deregistered.\n   *\n   * @param params - Fields to update.\n   * @param opts - Optional abort signal.\n   */\n  async update(\n    params: {\n      persistent?: boolean;\n      resources?: { vcpus?: number };\n      timeout?: number;\n      networkPolicy?: NetworkPolicy;\n      tags?: Record<string, string>;\n      ports?: number[];\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      } | null;\n      currentSnapshotId?: string;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    let resources: { vcpus: number; memory: number } | undefined;\n    if (params.resources?.vcpus) {\n      resources = {\n        vcpus: params.resources.vcpus,\n        memory: params.resources.vcpus * 2048,\n      };\n    }\n\n    // Update the sandbox config. This config will be used on the next session.\n    const response = await client.updateSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      persistent: params.persistent,\n      resources,\n      timeout: params.timeout,\n      networkPolicy: params.networkPolicy,\n      tags: params.tags,\n      ports: params.ports,\n      snapshotExpiration: params.snapshotExpiration,\n      keepLastSnapshots: params.keepLastSnapshots,\n      currentSnapshotId: params.currentSnapshotId,\n      signal: opts?.signal,\n    });\n    this.sandbox = response.json.sandbox;\n    if (params.ports !== undefined && response.json.routes) {\n      this.session?.updateRoutes(response.json.routes);\n    }\n\n    // Update the current session config. This only applies to network policy.\n    if (params.networkPolicy) {\n      try {\n        return await this.session?.update(\n          { networkPolicy: params.networkPolicy },\n          opts,\n        );\n      } catch (err) {\n        if (isSandboxStoppedError(err) || isSandboxStoppingError(err)) {\n          return;\n        }\n        throw err;\n      }\n    }\n  }\n\n  /**\n   * Delete this sandbox.\n   *\n   * After deletion the instance becomes inert — all further API calls will\n   * throw immediately.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.deleteSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * List sessions (VMs) that have been created for this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of sessions and pagination metadata.\n   */\n  async listSessions(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSessions({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sessions\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * List snapshots that belong to this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of snapshots and pagination metadata.\n   */\n  async listSnapshots(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n}\n\n/**\n * A {@link Sandbox} that can automatically be disposed using a `await using` statement.\n *\n * @example\n * {\n *   await using const sandbox = await Sandbox.create();\n * }\n * // Sandbox is automatically stopped here\n */\nclass DisposableSandbox extends Sandbox implements AsyncDisposable {\n  async [Symbol.asyncDispose]() {\n    await this.stop();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA6PA,SAAS,sBAAsB,KAAuB;AACpD,QAAO,eAAeA,8BAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,gBAAgB,KAAuB;AAC9C,QAAO,eAAeA,8BAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,wBAAwB,KAAuB;AACtD,QACE,eAAeA,8BACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,uBAAuB,KAAuB;AACrD,QACE,eAAeA,8BACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,2BAA2B,KAAuB;AACzD,QACE,eAAeA,8BACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;;;;;;AAyBvC,IAAa,UAAb,MAAa,QAAQ;;;;;CAuCnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAMC,wCAAgB;AAC1C,OAAK,UAAU,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,SAA6B;AACtC,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,aAAsB;AAC/B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAA4B;AACrC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;CAItB,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,2BAA+C;AACxD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,kBAChB,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAsC;AAC/C,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,SAAoC;AAC7C,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,OAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAoC;AAC7C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ,gBAChBC,4CAAqB,KAAK,QAAQ,cAAc,GAChD;;;;;CAMN,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,qBAAyC;AAClD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,oBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,kBAEG;AACZ,SAAO,KAAK,gBAAgB,CAAC;;;;;;;;;;;;;;;;CAiB/B,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAMF,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAOE,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,QAAQC,qCAAoB,UAAsC;AAChE,SAAO;GACL,UAAU,SAAS,SAAS;GAC5B,QAAQ,SAAS,SAAS,UAAU,EAAE;GACtC,iBAAiB,SAAS;GAC1B,WAAW,SAAS;GACrB;;;;;;;;;;;CAYH,QAAQC,uCAAsB,MAAkC;EAC9D,MAAM,UAAU,IAAI,QAAQ;GAC1B,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,WAAW,KAAK;GACjB,CAAC;AACF,MAAI,KAAK,SACP,SAAQ,UAAU,IAAIC,wBAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAU,CAAC;AAEjF,SAAO;;;;;;;;;;;;;;;;;;CAmBT,aAAa,OACX,QAIoC;AACpC;EACA,MAAM,cAAc,MAAMN,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EAEF,MAAM,gBAAgBM,+BAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,QAAQ,QAAQ;GAChB,WAAW,YAAY;GACvB,OAAO,QAAQ,SAAS,EAAE;GAC1B,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,SAAS,UAAU,aAAa,SAAS,QAAQ,UAAU;GAC3D,eAAe,QAAQ;GACvB,KAAK,QAAQ;GACb,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB,oBAAoB,QAAQ;GAC5B,mBAAmB,QAAQ;GAC3B,QAAQ,QAAQ;GAChB,MAAM,QAAQ;GACd,YAAY,QAAQ;GACpB,GAAG;GACJ,CAAC;AAEF,SAAO,IAAI,kBAAkB;GAC3B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,QAAQ;GACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BJ,aAAa,KACX,QAEoC;AACpC;EACA,MAAM,EAAE,eAAe,YAAY,GAAG,cAAc;EAGpD,MAAM,mBAAmB;EACzB,MAAM,gBAAgB,MAAM,QAAQ,IAAI;GACtC,OAAO,iBAAiB;GACxB,WAAW,iBAAiB;GAC5B,QAAQ,iBAAiB;GACzB,OAAO,OAAO;GACd,QAAQ,OAAO;GACf,GAAGA,+BAAiB,OAAO;GAC3B,MAAM;GACN,QAAQ;GACT,CAAsC;EAEvC,MAAM,cAAc,cAAc,OAC/B,QAAQ,MAAM,EAAE,SAAS,cAAc,gBAAgB,CACvD,KAAK,MAAM,EAAE,KAAK;EAErB,MAAMC,SAA8D;GAClE,GAAI,cAAc,UAAU,UAAa,EACvC,WAAW,EAAE,OAAO,cAAc,OAAO,EAC1C;GACD,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAI,cAAc,kBAAkB,UAAa,EAC/C,eAAe,cAAc,eAC9B;GACD,GAAI,cAAc,SAAS,UAAa,EAAE,MAAM,cAAc,MAAM;GACpE,GAAI,YAAY,SAAS,KAAK,EAAE,OAAO,aAAa;GACpD,YAAY,cAAc;GAC1B,GAAI,cAAc,uBAAuB,UAAa,EACpD,oBAAoB,cAAc,oBACnC;GACD,GAAI,cAAc,sBAAsB,UAAa,EACnD,mBAAmB,cAAc,mBAClC;GACF;EAED,MAAM,aAAa,cAAc;AACjC,MAAI,WACF,QAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAG;GACH,QAAQ;IAAE,MAAM;IAAY;IAAY;GACzC,CAAyC;AAI5C,SAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAG;GACJ,CAAyC;;;;;;;;CAS5C,aAAa,IACX,QAEkB;AAClB;EACA,MAAM,cAAc,MAAMR,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;EAEF,MAAM,gBAAgBM,+BAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,OAAO;GACb,WAAW,YAAY;GACvB,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,GAAG;GACJ,CAAC;EAEF,MAAM,UAAU,IAAI,QAAQ;GAC1B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,OAAO;GAClB,CAAC;AAEF,MAAI,SAAS,KAAK,WAAW,OAAO,SAClC,OAAM,OAAO,SAAS,QAAQ;AAGhC,SAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCT,aAAa,YACX,QAIkB;AAClB;AAEA,MAAI,CAAC,QAAQ,MAAM;GACjB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,OAAI,QAAQ,SACV,OAAM,OAAO,SAAS,QAAQ;AAEhC,UAAO;;AAGT,MAAI;AACF,UAAO,MAAM,QAAQ,IACnB,OACD;WACM,KAAK;AACZ,OAAI,gBAAgB,IAAI,EAAE;IAExB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,OAAI,wBAAwB,IAAI,EAAE;IAGhC,MAAM,cAAc,MAAMP,uCAAe,OAAO;IAChD,MAAM,SAAS,IAAIC,6BAAU;KAC3B,QAAQ,YAAY;KACpB,OAAO,YAAY;KACnB,OAAO,OAAO;KACf,CAAC;IACF,MAAM,gBAAgBM,+BAAiB,OAAO;AAC9C,QAAI;AACF,WAAM,OAAO,cAAc;MACzB,MAAM,OAAO;MACb,WAAW,YAAY;MACvB,QAAQ,OAAO;MACf,GAAG;MACJ,CAAC;aACK,WAAW;AAGlB,SAAI,CAAC,gBAAgB,UAAU,CAC7B,OAAM;;IAIV,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,SAAM;;;;;;;;;;CAWV,YAAY,EACV,QACA,QACA,SACA,SACA,WACA,YAQC;OArnBK,UAA4B;OAM5B,gBAAsC;AAgnB5C,OAAK,UAAU,UAAU;AACzB,MAAI,QACF,MAAK,UAAU,IAAID,wBAAQ;GAAU;GAAS;GAAQ;GAAS,CAAC;AAElE,OAAK,UAAU;AACf,OAAK,YAAY,aAAa;AAC9B,OAAK,WAAW;AAChB,OAAK,KAAK,IAAIG,8BAAW,KAAK;;;;;;;CAQhC,iBAA0B;AACxB,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,yDAAyD;AAE3E,SAAO,KAAK;;;;;CAMd,MAAc,OAAO,QAAqC;AACxD,MAAI,CAAC,KAAK,cACR,MAAK,gBAAgB,KAAK,SAAS,OAAO,CAAC,cAAc;AACvD,QAAK,gBAAgB;IACrB;AAEJ,SAAO,KAAK;;CAGd,MAAc,SAAS,QAAqC;EAC1D,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ;GACR;GACD,CAAC;AACF,OAAK,UAAU,IAAIH,wBAAQ;GACzB;GACA,QAAQ,SAAS,KAAK;GACtB,SAAS,SAAS,KAAK;GACxB,CAAC;AACF,MAAI,KAAK,YAAY,SAAS,KAAK,QACjC,OAAM,KAAK,SAAS,KAAK;;;;;CAO7B,MAAc,qBAAqB,QAAqC;AACtE;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,kBAAkB;EACxB,IAAI,SAAS,KAAK,QAAS;AAE3B,SAAO,WAAW,cAAc,WAAW,gBAAgB;AACzD,8CAAiB,iBAAiB,QAAW,EAAE,QAAQ,CAAC;GACxD,MAAM,OAAO,MAAM,OAAO,WAAW;IACnC,WAAW,KAAK,QAAS;IACzB;IACD,CAAC;AACF,QAAK,UAAU,IAAIA,wBAAQ;IACzB;IACA,QAAQ,KAAK,KAAK;IAClB,SAAS,KAAK,KAAK;IACpB,CAAC;AACF,YAAS,KAAK,KAAK,QAAQ;;AAE7B,QAAM,KAAK,OAAO,OAAO;;;;;CAM3B,MAAc,WACZ,IACA,QACY;AACZ,MAAI,CAAC,KAAK,QACR,OAAM,KAAK,OAAO,OAAO;AAE3B,MAAI;AACF,UAAO,MAAM,IAAI;WACV,KAAK;AACZ,OAAI,sBAAsB,IAAI,EAAE;AAC9B,UAAM,KAAK,OAAO,OAAO;AACzB,WAAO,IAAI;;AAEb,OAAI,uBAAuB,IAAI,IAAI,2BAA2B,IAAI,EAAE;AAClE,UAAM,KAAK,qBAAqB,OAAO;AACvC,WAAO,IAAI;;AAEb,SAAM;;;CAuCV,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SACJ,OAAO,oBAAoB,WACvB,MAAM,SACN,gBAAgB;AACtB,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,iBAAwB,MAAM,KAAK,EAClE,OACD;;;;;;;;;CAUH,MAAM,WACJ,OACA,MACkB;AAClB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,MAAM,MAAM,MAAc,MAAgD;AACxE;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,MAAM,MAAM,KAAK,EACrC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,SACJ,MACA,MACuC;AACvC;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,MAAM,KAAK,EACxC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,iBACJ,MACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,iBAAiB,MAAM,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;CAaH,MAAM,aACJ,KACA,KACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,aAAa,KAAK,KAAK,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;;;;;;;CAmBH,MAAM,WACJ,OAKA,MACA;AACA;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,OAAO,GAAmB;AACxB,SAAO,KAAK,gBAAgB,CAAC,OAAO,EAAE;;;;;;;;;CAUxC,MAAM,KAAK,MAEoD;AAC7D;AACA,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,6BAA6B;EAE/C,MAAM,EAAE,SAAS,SAAS,aAAa,MAAM,KAAK,QAAQ,KAAK,KAAK;AACpE,MAAI,QACF,MAAK,UAAU;AAEjB,SAAO,OAAO,OAAO,SAAS,EAAE,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC7C,MAAM,oBACJ,eACA,MACwB;AACxB;AACA,QAAM,KAAK,iBACH,KAAK,QAAS,OAAO,EAAiB,eAAe,EAAE,KAAK,EAClE,MAAM,OACP;AAED,SAAO,KAAK,QAAS;;;;;;;;;;;;;;;;;;CAmBvB,MAAM,cACJ,UACA,MACe;AACf;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,cAAc,UAAU,KAAK,EACjD,MAAM,OACP;;;;;;;;;;;;;CAcH,MAAM,SAAS,MAGO;AACpB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,KAAK,EAClC,MAAM,OACP;;;;;;;;;;;CAYH,MAAM,OACJ,QAeA,MACe;AACf;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,IAAII;AACJ,MAAI,OAAO,WAAW,MACpB,aAAY;GACV,OAAO,OAAO,UAAU;GACxB,QAAQ,OAAO,UAAU,QAAQ;GAClC;EAIH,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB;GACA,SAAS,OAAO;GAChB,eAAe,OAAO;GACtB,MAAM,OAAO;GACb,OAAO,OAAO;GACd,oBAAoB,OAAO;GAC3B,mBAAmB,OAAO;GAC1B,mBAAmB,OAAO;GAC1B,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAU,SAAS,KAAK;AAC7B,MAAI,OAAO,UAAU,UAAa,SAAS,KAAK,OAC9C,MAAK,SAAS,aAAa,SAAS,KAAK,OAAO;AAIlD,MAAI,OAAO,cACT,KAAI;AACF,UAAO,MAAM,KAAK,SAAS,OACzB,EAAE,eAAe,OAAO,eAAe,EACvC,KACD;WACM,KAAK;AACZ,OAAI,sBAAsB,IAAI,IAAI,uBAAuB,IAAI,CAC3D;AAEF,SAAM;;;;;;;;;CAWZ,MAAM,OAAO,MAAgD;AAC3D;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,cAAc;GACzB,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ,MAAM;GACf,CAAC;;;;;;;;CASJ,MAAM,aAAa,QAKhB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,aAAa;IACzC,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAOP,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,MAAM,cAAc,QAKjB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,cAAc;IAC1C,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAOA,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;AAaN,IAAM,oBAAN,cAAgC,QAAmC;CACjE,OAAO,OAAO,gBAAgB;AAC5B,QAAM,KAAK,MAAM"}
+{"version":3,"file":"sandbox.cjs","names":["APIError","getCredentials","APIClient","fromAPINetworkPolicy","attachPaginator","WORKFLOW_SERIALIZE","WORKFLOW_DESERIALIZE","Session","getPrivateParams","copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\">","FileSystem","resources: { vcpus: number; memory: number } | undefined"],"sources":["../src/sandbox.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type {\n  SessionMetaData,\n  SandboxRouteData,\n  SandboxMetaData,\n  SnapshotMetadata,\n} from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { APIError } from \"./api-client/api-error.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { getPrivateParams, type WithPrivate } from \"./utils/types.js\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { RUNTIMES } from \"./constants.js\";\nimport { Session, type RunCommandParams } from \"./session.js\";\nimport type { Command, CommandFinished } from \"./command.js\";\nimport type { Snapshot } from \"./snapshot.js\";\nimport type { SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n} from \"./network-policy.js\";\nimport { fromAPINetworkPolicy } from \"./utils/network-policy.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\nimport { setTimeout } from \"node:timers/promises\";\nimport { FileSystem } from \"./filesystem.js\";\n\nexport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n};\n\n/** @inline */\nexport interface BaseCreateSandboxParams {\n  /**\n   * The name of the sandbox. If omitted, a random name will be generated.\n   */\n  name?: string;\n  /**\n   * The source of the sandbox.\n   *\n   * Omit this parameter start a sandbox without a source.\n   *\n   * For git sources:\n   * - `depth`: Creates shallow clones with limited commit history (minimum: 1)\n   * - `revision`: Clones and checks out a specific commit, branch, or tag\n   */\n  source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n      }\n    | {\n        type: \"git\";\n        url: string;\n        username: string;\n        password: string;\n        depth?: number;\n        revision?: string;\n      }\n    | { type: \"tarball\"; url: string };\n  /**\n   * Array of port numbers to expose from the sandbox. Sandboxes can\n   * expose up to 4 ports.\n   */\n  ports?: number[];\n  /**\n   * Timeout in milliseconds before the sandbox auto-terminates.\n   */\n  timeout?: number;\n  /**\n   * Resources to allocate to the sandbox.\n   *\n   * Your sandbox will get the amount of vCPUs you specify here and\n   * 2048 MB of memory per vCPU.\n   */\n  resources?: { vcpus: number };\n  /**\n   * The runtime of the sandbox, currently only `node24`, `node22`, `node26` and `python3.13` are supported.\n   * If not specified, the default runtime `node24` will be used.\n   */\n  runtime?: RUNTIMES | (string & {});\n  /**\n   * Network policy to define network restrictions for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  networkPolicy?: NetworkPolicy;\n  /**\n   * Default environment variables for the sandbox.\n   * These are inherited by all commands unless overridden with\n   * the `env` option in `runCommand`.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   env: { NODE_ENV: \"production\", API_KEY: \"secret\" },\n   * });\n   * // All commands will have NODE_ENV and API_KEY set\n   * await sandbox.runCommand(\"node\", [\"app.js\"]);\n   */\n  env?: Record<string, string>;\n  /**\n   * Key-value tags to associate with the sandbox. Maximum 5 tags.\n   * @example { env: \"staging\", team: \"infra\" }\n   */\n  tags?: Record<string, string>;\n\n  /**\n   * An AbortSignal to cancel sandbox creation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Enable or disable automatic restore of the filesystem between sessions.\n   */\n  persistent?: boolean;\n  /**\n   * Default snapshot expiration in milliseconds.\n   * When set, snapshots created for this sandbox will expire after this duration.\n   * Use `0` for no expiration.\n   */\n  snapshotExpiration?: number;\n  /**\n   * Retention policy that keeps only the N most recent snapshots of this\n   * sandbox. Older snapshots are evicted when a new one is created.\n   */\n  keepLastSnapshots?: {\n    /**\n     * Number of snapshots to keep (1-10).\n     */\n    count: number;\n    /**\n     * Expiration in milliseconds applied to kept snapshots.\n     * Use `0` for no expiration. Falls back to `snapshotExpiration` when omitted.\n     */\n    expiration?: number;\n    /**\n     * When `true` (the default), evicted snapshots are deleted immediately;\n     * when `false`, they keep the default expiration.\n     */\n    deleteEvicted?: boolean;\n  };\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\nexport type CreateSandboxParams =\n  | BaseCreateSandboxParams\n  | (Omit<BaseCreateSandboxParams, \"runtime\" | \"source\"> & {\n      source: { type: \"snapshot\"; snapshotId: string };\n    });\n\n/**\n * Parameters for {@link Sandbox.fork}.\n *\n * The fork inherits the source sandbox's current filesystem snapshot and copies\n * as many config fields from the source as the server exposes. Any field set\n * here acts as an override of the copied value.\n *\n * `env` is not copied (encrypted server-side); pass it explicitly to set\n * environment variables on the fork. `runtime` is not exposed: when the\n * source has a snapshot, it is inherited; otherwise it is copied from the\n * source sandbox.\n * @inline\n */\nexport type ForkSandboxParams = Omit<\n  BaseCreateSandboxParams,\n  \"source\" | \"runtime\"\n> & {\n  /**\n   * Name of the source sandbox to fork from.\n   */\n  sourceSandbox: string;\n};\n\n/** @inline */\ninterface GetSandboxParams {\n  /**\n   * The name of the sandbox.\n   */\n  name: string;\n  /**\n   * Whether to resume an existing session. Defaults to true.\n   */\n  resume?: boolean;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\n/**\n * Extends both {@link BaseCreateSandboxParams} and {@link GetSandboxParams}\n * (minus `name`, which is required on get but optional here) so that any\n * new parameter added to either flow is picked up automatically. The\n * structural overlap on `signal` / `onResume` is intentional — both\n * interfaces declare them with identical optional types.\n * @inline\n */\ninterface GetOrCreateSandboxParams\n  extends BaseCreateSandboxParams,\n    Omit<GetSandboxParams, \"name\"> {\n  /**\n   * Called once after a sandbox is freshly created (not when an existing\n   * sandbox is retrieved). Use this for one-time setup such as seeding\n   * files or warming caches. The returned promise is awaited before\n   * {@link Sandbox.getOrCreate} resolves.\n   */\n  onCreate?: (sandbox: Sandbox) => Promise<void>;\n}\n\nfunction isSandboxStoppedError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 410;\n}\n\nfunction isNotFoundError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 404;\n}\n\nfunction isSnapshotNotFoundError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 410 &&\n    (err.json as any)?.error?.code === \"snapshot_not_found\"\n  );\n}\n\nfunction isSandboxStoppingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_stopping\"\n  );\n}\n\nfunction isSandboxSnapshottingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_snapshotting\"\n  );\n}\n\n/**\n * Serialized representation of a Sandbox for @workflow/serde.\n * Fields `metadata` and `routes` are the original wire format from main.\n * Fields `sandboxMetadata` and `projectId` are added for named-sandboxes.\n */\nexport interface SerializedSandbox {\n  metadata: SandboxSnapshot;\n  routes: SandboxRouteData[];\n  sandboxMetadata?: SandboxMetaData;\n  projectId?: string;\n}\n\n// ============================================================================\n// Sandbox class\n// ============================================================================\n\n/**\n * A Sandbox is a persistent, isolated Linux MicroVMs to run commands in.\n * Use {@link Sandbox.create} or {@link Sandbox.get} to construct.\n * @hideconstructor\n */\nexport class Sandbox {\n  private _client: APIClient | null = null;\n  private readonly projectId: string;\n\n  /**\n   * In-flight resume promise, used to deduplicate concurrent resume calls.\n   */\n  private resumePromise: Promise<void> | null = null;\n\n  /**\n   * Internal Session instance for the current VM.\n   */\n  private session: Session | undefined;\n\n  /**\n   * Internal metadata about the sandbox.\n   */\n  private sandbox: SandboxMetaData;\n\n  /**\n   * Hook that will be executed when a new session is created during resume.\n   */\n  private readonly onResume?: (sandbox: Sandbox) => Promise<void>;\n\n  /**\n   * A `node:fs/promises`-compatible API for interacting with the sandbox filesystem.\n   *\n   * @example\n   * const content = await sandbox.fs.readFile('/etc/hostname', 'utf8');\n   * await sandbox.fs.writeFile('/tmp/hello.txt', 'Hello, world!');\n   * const files = await sandbox.fs.readdir('/tmp');\n   * const stats = await sandbox.fs.stat('/tmp/hello.txt');\n   */\n  public readonly fs: FileSystem;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * The name of this sandbox.\n   */\n  public get name(): string {\n    return this.sandbox.name;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public get routes(): SandboxRouteData[] {\n    return this.currentSession().routes;\n  }\n\n  /**\n   * Whether the sandbox persists the state.\n   */\n  public get persistent(): boolean {\n    return this.sandbox.persistent;\n  }\n\n  /**\n   * The region this sandbox runs in.\n   */\n  public get region(): string | undefined {\n    return this.sandbox.region;\n  }\n\n  /**\n   * Number of virtual CPUs allocated.\n   */\n  public get vcpus(): number | undefined {\n    return this.sandbox.vcpus;\n  }\n\n  /**\n   * Memory allocated in MB.\n   */\n  public get memory(): number | undefined {\n    return this.sandbox.memory;\n  }\n\n  /** Runtime identifier (e.g. \"node24\", \"python3.13\"). */\n  public get runtime(): string | undefined {\n    return this.sandbox.runtime;\n  }\n\n  /**\n   * Cumulative egress bytes across all sessions.\n   */\n  public get totalEgressBytes(): number | undefined {\n    return this.sandbox.totalEgressBytes;\n  }\n\n  /**\n   * Cumulative ingress bytes across all sessions.\n   */\n  public get totalIngressBytes(): number | undefined {\n    return this.sandbox.totalIngressBytes;\n  }\n\n  /**\n   * Cumulative active CPU duration in milliseconds across all sessions.\n   */\n  public get totalActiveCpuDurationMs(): number | undefined {\n    return this.sandbox.totalActiveCpuDurationMs;\n  }\n\n  /**\n   * Cumulative wall-clock duration in milliseconds across all sessions.\n   */\n  public get totalDurationMs(): number | undefined {\n    return this.sandbox.totalDurationMs;\n  }\n\n  /**\n   * When this sandbox was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.sandbox.updatedAt);\n  }\n\n  /**\n   * When the sandbox status was last updated.\n   */\n  public get statusUpdatedAt(): Date | undefined {\n    return this.sandbox.statusUpdatedAt\n      ? new Date(this.sandbox.statusUpdatedAt)\n      : undefined;\n  }\n\n  /**\n   * When this sandbox was created.\n   */\n  public get createdAt(): Date {\n    return new Date(this.sandbox.createdAt);\n  }\n\n  /**\n   * Interactive port.\n   */\n  public get interactivePort(): number | undefined {\n    return this.currentSession().interactivePort;\n  }\n\n  /**\n   * The default working directory of the current session (e.g.\n   * `/vercel/sandbox`).\n   */\n  public get cwd(): string {\n    return this.currentSession().cwd;\n  }\n\n  /**\n   * The status of the current session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.currentSession().status;\n  }\n\n  /**\n   * The default timeout of this sandbox in milliseconds.\n   */\n  public get timeout(): number | undefined {\n    return this.sandbox.timeout;\n  }\n\n  /**\n   * Key-value tags attached to the sandbox.\n   */\n  public get tags(): Record<string, string> | undefined {\n    return this.sandbox.tags;\n  }\n\n  /**\n   * The default network policy of this sandbox.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.sandbox.networkPolicy\n      ? fromAPINetworkPolicy(this.sandbox.networkPolicy)\n      : undefined;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.currentSession().sourceSnapshotId;\n  }\n\n  /**\n   * The current snapshot ID of this sandbox, if any.\n   */\n  public get currentSnapshotId(): string | undefined {\n    return this.sandbox.currentSnapshotId;\n  }\n\n  /**\n   * The default snapshot expiration in milliseconds, if set.\n   */\n  public get snapshotExpiration(): number | undefined {\n    return this.sandbox.snapshotExpiration;\n  }\n\n  /**\n   * The snapshot retention policy (`keep-last-snapshots`) currently configured\n   * on this sandbox, if any.\n   */\n  public get keepLastSnapshots():\n    | { count: number; expiration?: number; deleteEvicted?: boolean }\n    | undefined {\n    return this.sandbox.keepLastSnapshots;\n  }\n\n  /**\n   * The amount of CPU used by the session. Only reported once the VM is stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.currentSession().activeCpuUsageMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.currentSession().networkTransfer;\n  }\n\n  /**\n   * Allow to get a list of sandboxes for a team narrowed to the given params.\n   * It returns both the sandboxes and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Sandbox.list({ namePrefix: \"ci-\" });\n   * for await (const sandbox of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSandboxes\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSandboxes({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sandboxes\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Serialize a Sandbox instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Sandbox instance to serialize\n   * @returns A plain object containing sandbox metadata and routes\n   */\n  static [WORKFLOW_SERIALIZE](instance: Sandbox): SerializedSandbox {\n    return {\n      metadata: instance.session?._sessionSnapshot!,\n      routes: instance.session?.routes ?? [],\n      sandboxMetadata: instance.sandbox,\n      projectId: instance.projectId,\n    };\n  }\n\n  /**\n   * Deserialize a Sandbox from serialized snapshot data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized sandbox data\n   * @returns The reconstructed Sandbox instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSandbox): Sandbox {\n    const sandbox = new Sandbox({\n      sandbox: data.sandboxMetadata!,\n      routes: data.routes,\n      projectId: data.projectId,\n    });\n    if (data.metadata) {\n      sandbox.session = new Session({ routes: data.routes, snapshot: data.metadata });\n    }\n    return sandbox;\n  }\n\n  /**\n   * Create a new sandbox.\n   *\n   * @param params - Creation parameters and optional credentials.\n   * @returns A promise resolving to the created {@link Sandbox}.\n   * @example\n   * <caption>Create a sandbox with default options</caption>\n   * const sandbox = await Sandbox.create();\n   *\n   * @example\n   * <caption>Create a sandbox and drop it in the end of the block</caption>\n   * async function fn() {\n   *   await using const sandbox = await Sandbox.create();\n   *   // Sandbox automatically stopped at the end of the lexical scope\n   * }\n   */\n  static async create(\n    params?: WithPrivate<\n      CreateSandboxParams | (CreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.createSandbox({\n      source: params?.source,\n      projectId: credentials.projectId,\n      ports: params?.ports ?? [],\n      timeout: params?.timeout,\n      resources: params?.resources,\n      runtime: params && \"runtime\" in params ? params?.runtime : undefined,\n      networkPolicy: params?.networkPolicy,\n      env: params?.env,\n      tags: params?.tags,\n      snapshotExpiration: params?.snapshotExpiration,\n      keepLastSnapshots: params?.keepLastSnapshots,\n      signal: params?.signal,\n      name: params?.name,\n      persistent: params?.persistent,\n      ...privateParams,\n    });\n\n    return new DisposableSandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params?.onResume,\n    });\n  }\n\n  /**\n   * Fork an existing sandbox into a new one. Any field passed in `params`\n   * overrides the source value.\n   *\n   * If the source sandbox has no current snapshot, falls back to creating a\n   * fresh sandbox with the same copied config plus the source's `runtime`.\n   *\n   * `env` is not copied (encrypted server-side); pass it explicitly to set\n   * environment variables on the fork.\n   *\n   * @param params - Fork parameters and optional credentials.\n   *   `sourceSandbox` is the name of the source sandbox; everything else\n   *   acts as an override.\n   * @returns A promise resolving to the new {@link Sandbox}.\n   *\n   * @example\n   * <caption>Fork with all config copied from the source</caption>\n   * const fork = await Sandbox.fork({ sourceSandbox: \"prod-agent\" });\n   *\n   * @example\n   * <caption>Fork with an explicit new name and overridden vcpus</caption>\n   * const fork = await Sandbox.fork({\n   *   sourceSandbox: \"prod-agent\",\n   *   name: \"forked-prod-agent\",\n   *   resources: { vcpus: 4 },\n   * });\n   */\n  static async fork(\n    params: WithPrivate<ForkSandboxParams | (ForkSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const { sourceSandbox: sourceName, ...overrides } = params;\n\n    // Forward only what `Sandbox.get` consumes; don't leak fork-only inputs.\n    const credentialFields = params as Partial<Credentials>;\n    const sourceSandbox = await Sandbox.get({\n      token: credentialFields.token,\n      projectId: credentialFields.projectId,\n      teamId: credentialFields.teamId,\n      fetch: params.fetch,\n      signal: params.signal,\n      ...getPrivateParams(params),\n      name: sourceName,\n      resume: false,\n    } as Parameters<typeof Sandbox.get>[0]);\n\n    const sourcePorts = sourceSandbox.routes\n      .filter((r) => r.port !== sourceSandbox.interactivePort)\n      .map((r) => r.port);\n\n    const copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\"> = {\n      ...(sourceSandbox.vcpus !== undefined && {\n        resources: { vcpus: sourceSandbox.vcpus },\n      }),\n      ...(sourceSandbox.timeout !== undefined && {\n        timeout: sourceSandbox.timeout,\n      }),\n      ...(sourceSandbox.networkPolicy !== undefined && {\n        networkPolicy: sourceSandbox.networkPolicy,\n      }),\n      ...(sourceSandbox.tags !== undefined && { tags: sourceSandbox.tags }),\n      ...(sourcePorts.length > 0 && { ports: sourcePorts }),\n      persistent: sourceSandbox.persistent,\n      ...(sourceSandbox.snapshotExpiration !== undefined && {\n        snapshotExpiration: sourceSandbox.snapshotExpiration,\n      }),\n      ...(sourceSandbox.keepLastSnapshots !== undefined && {\n        keepLastSnapshots: sourceSandbox.keepLastSnapshots,\n      }),\n    };\n\n    const snapshotId = sourceSandbox.currentSnapshotId;\n    if (snapshotId) {\n      return Sandbox.create({\n        ...copied,\n        ...overrides,\n        source: { type: \"snapshot\", snapshotId },\n      } as Parameters<typeof Sandbox.create>[0]);\n    }\n\n    // No snapshot: seed a fresh sandbox using the source's runtime.\n    return Sandbox.create({\n      ...copied,\n      ...(sourceSandbox.runtime !== undefined && {\n        runtime: sourceSandbox.runtime,\n      }),\n      ...overrides,\n    } as Parameters<typeof Sandbox.create>[0]);\n  }\n\n  /**\n   * Retrieve an existing sandbox and resume its session.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: WithPrivate<GetSandboxParams | (GetSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.getSandbox({\n      name: params.name,\n      projectId: credentials.projectId,\n      resume: params.resume,\n      signal: params.signal,\n      ...privateParams,\n    });\n\n    const sandbox = new Sandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params.onResume,\n    });\n\n    if (response.json.resumed && params.onResume) {\n      await params.onResume(sandbox);\n    }\n\n    return sandbox;\n  }\n\n  /**\n   * Retrieve an existing named sandbox, or create a new one if none exists.\n   *\n   * If `name` is omitted, this always creates a new sandbox and fires\n   * `onCreate`. If `name` is provided, it first tries {@link Sandbox.get};\n   * on `not_found` it creates a new sandbox with that name; on\n   * `snapshot_not_found` it deletes the stale named sandbox and creates\n   * a fresh one with the same name.\n   *\n   * @param params - Get/create parameters plus an optional `onCreate` hook.\n   * @returns A promise resolving to the {@link Sandbox}.\n   *\n   * @example\n   * <caption>Idempotent named sandbox with one-time setup</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   name: \"my-workspace\",\n   *   onCreate: async (sbx) => {\n   *     await sbx.writeFiles([\n   *       { path: \"README.md\", content: Buffer.from(\"# Hello\") },\n   *     ]);\n   *   },\n   * });\n   *\n   * @example\n   * <caption>Unnamed — always creates</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   onCreate: async (sbx) => {\n   *     await sbx.runCommand(\"npm\", [\"install\"]);\n   *   },\n   * });\n   */\n  static async getOrCreate(\n    params?: WithPrivate<\n      GetOrCreateSandboxParams | (GetOrCreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    // No name → always create, fire onCreate.\n    if (!params?.name) {\n      const sandbox = await Sandbox.create(params);\n      if (params?.onCreate) {\n        await params.onCreate(sandbox);\n      }\n      return sandbox;\n    }\n\n    try {\n      return await Sandbox.get(\n        params as unknown as Parameters<typeof Sandbox.get>[0],\n      );\n    } catch (err) {\n      if (isNotFoundError(err)) {\n        // Sandbox does not exist: re-create it.\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      if (isSnapshotNotFoundError(err)) {\n        // Sandbox exists but the snapshot has expired. Delete it and create\n        // a new one.\n        const credentials = await getCredentials(params);\n        const client = new APIClient({\n          teamId: credentials.teamId,\n          token: credentials.token,\n          fetch: params.fetch,\n        });\n        const privateParams = getPrivateParams(params);\n        try {\n          await client.deleteSandbox({\n            name: params.name,\n            projectId: credentials.projectId,\n            signal: params.signal,\n            ...privateParams,\n          });\n        } catch (deleteErr) {\n          // Tolerate 404 — the named sandbox was already cleaned up by a\n          // concurrent request. Propagate anything else.\n          if (!isNotFoundError(deleteErr)) {\n            throw deleteErr;\n          }\n        }\n\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      throw err;\n    }\n  }\n\n  /**\n   * Create a new Sandbox instance.\n   *\n   * @param params.client - Optional API client. If not provided, will be lazily created using global credentials.\n   * @param params.routes - Port-to-subdomain mappings for exposed ports\n   * @param params.sandbox - Sandbox snapshot metadata\n   */\n  constructor({\n    client,\n    routes,\n    session,\n    sandbox,\n    projectId,\n    onResume,\n  }: {\n    client?: APIClient;\n    routes: SandboxRouteData[];\n    session?: SessionMetaData;\n    sandbox: SandboxMetaData;\n    projectId?: string;\n    onResume?: (sandbox: Sandbox) => Promise<void>;\n  }) {\n    this._client = client ?? null;\n    if (session) {\n      this.session = new Session({ client: client!, routes, session });\n    }\n    this.sandbox = sandbox;\n    this.projectId = projectId ?? \"\";\n    this.onResume = onResume;\n    this.fs = new FileSystem(this);\n  }\n\n  /**\n   * Get the current session (the running VM) for this sandbox.\n   *\n   * @returns The {@link Session} instance.\n   */\n  currentSession(): Session {\n    if (!this.session) {\n      throw new Error(\"No active session. Run a command or call resume first.\");\n    }\n    return this.session;\n  }\n\n  /**\n   * Resume this sandbox by creating a new session via `getSandbox`.\n   */\n  private async resume(signal?: AbortSignal): Promise<void> {\n    if (!this.resumePromise) {\n      this.resumePromise = this.doResume(signal).finally(() => {\n        this.resumePromise = null;\n      });\n    }\n    return this.resumePromise;\n  }\n\n  private async doResume(signal?: AbortSignal): Promise<void> {\n    const client = await this.ensureClient();\n    const response = await client.getSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      resume: true,\n      signal,\n    });\n    this.session = new Session({\n      client,\n      routes: response.json.routes,\n      session: response.json.session,\n    });\n    if (this.onResume && response.json.resumed) {\n      await this.onResume(this);\n    }\n  }\n\n  /**\n   * Poll until the current session reaches a terminal state, then resume.\n   */\n  private async waitForStopAndResume(signal?: AbortSignal): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const pollingInterval = 500;\n    let status = this.session!.status;\n\n    while (status === \"stopping\" || status === \"snapshotting\") {\n      await setTimeout(pollingInterval, undefined, { signal });\n      const poll = await client.getSession({\n        sessionId: this.session!.sessionId,\n        signal,\n      });\n      this.session = new Session({\n        client,\n        routes: poll.json.routes,\n        session: poll.json.session,\n      });\n      status = poll.json.session.status;\n    }\n    await this.resume(signal);\n  }\n\n  /**\n   * Execute `fn`, and if the session is stopped/stopping/snapshotting, resume and retry.\n   */\n  private async withResume<T>(\n    fn: () => Promise<T>,\n    signal?: AbortSignal,\n  ): Promise<T> {\n    if (!this.session) {\n      await this.resume(signal);\n    }\n    try {\n      return await fn();\n    } catch (err) {\n      if (isSandboxStoppedError(err)) {\n        await this.resume(signal);\n        return fn();\n      }\n      if (isSandboxStoppingError(err) || isSandboxSnapshottingError(err)) {\n        await this.waitForStopAndResume(signal);\n        return fn();\n      }\n      throw err;\n    }\n  }\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const signal =\n      typeof commandOrParams === \"string\"\n        ? opts?.signal\n        : commandOrParams.signal;\n    return this.withResume(\n      () => this.session!.runCommand(commandOrParams as any, args, opts),\n      signal,\n    );\n  }\n\n  /**\n   * Internal helper to start a command in the sandbox.\n   *\n   * @param params - Command execution parameters.\n   * @returns A {@link Command} or {@link CommandFinished}, depending on `detached`.\n   * @internal\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.getCommand(cmdId, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a directory in the filesystem of this sandbox.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.mkDir(path, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Open an interactive shell session, resuming the sandbox if needed.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The WebSocket URL and token used to connect to the PTY.\n   */\n  async openInteractive(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ url: string; token: string }> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.openInteractive(opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFile(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFileToBuffer(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Download a file from the sandbox to the local filesystem.\n   *\n   * @param src - Source file on the sandbox, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.downloadFile(src, dst, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Write files to the filesystem of this sandbox.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path, content, and optional mode (permissions)\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   *\n   * @example\n   * // Write an executable script\n   * await sandbox.writeFiles([\n   *   { path: \"/usr/local/bin/myscript\", content: \"#!/bin/bash\\necho hello\", mode: 0o755 }\n   * ]);\n   */\n  async writeFiles(\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.writeFiles(files, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Get the public domain of a port of this sandbox.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    return this.currentSession().domain(p);\n  }\n\n  /**\n   * Stop the sandbox.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state after stopping, with optional snapshot metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<SandboxSnapshot & { snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    if (!this.session) {\n      throw new Error(\"No active session to stop.\");\n    }\n    const { session, sandbox, snapshot } = await this.session.stop(opts);\n    if (sandbox) {\n      this.sandbox = sandbox;\n    }\n    return Object.assign(session, { snapshot });\n  }\n\n  /**\n   * Update the network policy for this sandbox.\n   *\n   * @deprecated Use {@link Sandbox.update} instead.\n   *\n   * @param networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the network policy is updated.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await sandbox.updateNetworkPolicy({\n   *   allow: [\"*.npmjs.org\", \"github.com\"],\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await sandbox.updateNetworkPolicy({\n   *   allow: {\n   *     \"ai-gateway.vercel.sh\": [{\n   *       transform: [{\n   *         headers: { authorization: \"Bearer ...\" }\n   *       }]\n   *     }],\n   *     \"*\": []\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await sandbox.updateNetworkPolicy(\"deny-all\");\n   */\n  async updateNetworkPolicy(\n    networkPolicy: NetworkPolicy,\n    opts?: { signal?: AbortSignal },\n  ): Promise<NetworkPolicy> {\n    \"use step\";\n    await this.withResume(\n      () => this.session!.update({ networkPolicy: networkPolicy }, opts),\n      opts?.signal,\n    );\n\n    return this.session!.networkPolicy!;\n  }\n\n  /**\n   * Extend the timeout of the sandbox by the specified duration.\n   *\n   * This allows you to extend the lifetime of a sandbox up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await sandbox.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.extendTimeout(duration, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a snapshot from this currently running sandbox. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.createFromSnapshot}.\n   *\n   * Note: this sandbox will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.snapshot(opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Update the sandbox configuration.\n   *\n   * When `ports` is provided, it is treated as the full desired port list:\n   * any currently exposed port omitted from the array will be deregistered.\n   *\n   * @param params - Fields to update.\n   * @param opts - Optional abort signal.\n   */\n  async update(\n    params: {\n      persistent?: boolean;\n      resources?: { vcpus?: number };\n      timeout?: number;\n      networkPolicy?: NetworkPolicy;\n      tags?: Record<string, string>;\n      ports?: number[];\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      } | null;\n      currentSnapshotId?: string;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    let resources: { vcpus: number; memory: number } | undefined;\n    if (params.resources?.vcpus) {\n      resources = {\n        vcpus: params.resources.vcpus,\n        memory: params.resources.vcpus * 2048,\n      };\n    }\n\n    // Update the sandbox config. This config will be used on the next session.\n    const response = await client.updateSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      persistent: params.persistent,\n      resources,\n      timeout: params.timeout,\n      networkPolicy: params.networkPolicy,\n      tags: params.tags,\n      ports: params.ports,\n      snapshotExpiration: params.snapshotExpiration,\n      keepLastSnapshots: params.keepLastSnapshots,\n      currentSnapshotId: params.currentSnapshotId,\n      signal: opts?.signal,\n    });\n    this.sandbox = response.json.sandbox;\n    if (params.ports !== undefined && response.json.routes) {\n      this.session?.updateRoutes(response.json.routes);\n    }\n\n    // Update the current session config. This only applies to network policy.\n    if (params.networkPolicy) {\n      try {\n        return await this.session?.update(\n          { networkPolicy: params.networkPolicy },\n          opts,\n        );\n      } catch (err) {\n        if (isSandboxStoppedError(err) || isSandboxStoppingError(err)) {\n          return;\n        }\n        throw err;\n      }\n    }\n  }\n\n  /**\n   * Delete this sandbox.\n   *\n   * After deletion the instance becomes inert — all further API calls will\n   * throw immediately.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.deleteSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * List sessions (VMs) that have been created for this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of sessions and pagination metadata.\n   */\n  async listSessions(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSessions({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sessions\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * List snapshots that belong to this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of snapshots and pagination metadata.\n   */\n  async listSnapshots(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n}\n\n/**\n * A {@link Sandbox} that can automatically be disposed using a `await using` statement.\n *\n * @example\n * {\n *   await using const sandbox = await Sandbox.create();\n * }\n * // Sandbox is automatically stopped here\n */\nclass DisposableSandbox extends Sandbox implements AsyncDisposable {\n  async [Symbol.asyncDispose]() {\n    await this.stop();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA8NA,SAAS,sBAAsB,KAAuB;AACpD,QAAO,eAAeA,8BAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,gBAAgB,KAAuB;AAC9C,QAAO,eAAeA,8BAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,wBAAwB,KAAuB;AACtD,QACE,eAAeA,8BACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,uBAAuB,KAAuB;AACrD,QACE,eAAeA,8BACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,2BAA2B,KAAuB;AACzD,QACE,eAAeA,8BACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;;;;;;AAyBvC,IAAa,UAAb,MAAa,QAAQ;;;;;CAuCnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAMC,wCAAgB;AAC1C,OAAK,UAAU,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,SAA6B;AACtC,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,aAAsB;AAC/B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAA4B;AACrC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;CAItB,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,2BAA+C;AACxD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,kBAChB,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAsC;AAC/C,SAAO,KAAK,gBAAgB,CAAC;;;;;;CAO/B,IAAW,MAAc;AACvB,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,SAAoC;AAC7C,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,OAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ,gBAChBC,4CAAqB,KAAK,QAAQ,cAAc,GAChD;;;;;CAMN,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,qBAAyC;AAClD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,oBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,kBAEG;AACZ,SAAO,KAAK,gBAAgB,CAAC;;;;;;;;;;;;;;;;CAiB/B,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAMF,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAOE,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,QAAQC,qCAAoB,UAAsC;AAChE,SAAO;GACL,UAAU,SAAS,SAAS;GAC5B,QAAQ,SAAS,SAAS,UAAU,EAAE;GACtC,iBAAiB,SAAS;GAC1B,WAAW,SAAS;GACrB;;;;;;;;;;;CAYH,QAAQC,uCAAsB,MAAkC;EAC9D,MAAM,UAAU,IAAI,QAAQ;GAC1B,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,WAAW,KAAK;GACjB,CAAC;AACF,MAAI,KAAK,SACP,SAAQ,UAAU,IAAIC,wBAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAU,CAAC;AAEjF,SAAO;;;;;;;;;;;;;;;;;;CAmBT,aAAa,OACX,QAIoC;AACpC;EACA,MAAM,cAAc,MAAMN,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EAEF,MAAM,gBAAgBM,+BAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,QAAQ,QAAQ;GAChB,WAAW,YAAY;GACvB,OAAO,QAAQ,SAAS,EAAE;GAC1B,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,SAAS,UAAU,aAAa,SAAS,QAAQ,UAAU;GAC3D,eAAe,QAAQ;GACvB,KAAK,QAAQ;GACb,MAAM,QAAQ;GACd,oBAAoB,QAAQ;GAC5B,mBAAmB,QAAQ;GAC3B,QAAQ,QAAQ;GAChB,MAAM,QAAQ;GACd,YAAY,QAAQ;GACpB,GAAG;GACJ,CAAC;AAEF,SAAO,IAAI,kBAAkB;GAC3B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,QAAQ;GACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BJ,aAAa,KACX,QAEoC;AACpC;EACA,MAAM,EAAE,eAAe,YAAY,GAAG,cAAc;EAGpD,MAAM,mBAAmB;EACzB,MAAM,gBAAgB,MAAM,QAAQ,IAAI;GACtC,OAAO,iBAAiB;GACxB,WAAW,iBAAiB;GAC5B,QAAQ,iBAAiB;GACzB,OAAO,OAAO;GACd,QAAQ,OAAO;GACf,GAAGA,+BAAiB,OAAO;GAC3B,MAAM;GACN,QAAQ;GACT,CAAsC;EAEvC,MAAM,cAAc,cAAc,OAC/B,QAAQ,MAAM,EAAE,SAAS,cAAc,gBAAgB,CACvD,KAAK,MAAM,EAAE,KAAK;EAErB,MAAMC,SAA8D;GAClE,GAAI,cAAc,UAAU,UAAa,EACvC,WAAW,EAAE,OAAO,cAAc,OAAO,EAC1C;GACD,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAI,cAAc,kBAAkB,UAAa,EAC/C,eAAe,cAAc,eAC9B;GACD,GAAI,cAAc,SAAS,UAAa,EAAE,MAAM,cAAc,MAAM;GACpE,GAAI,YAAY,SAAS,KAAK,EAAE,OAAO,aAAa;GACpD,YAAY,cAAc;GAC1B,GAAI,cAAc,uBAAuB,UAAa,EACpD,oBAAoB,cAAc,oBACnC;GACD,GAAI,cAAc,sBAAsB,UAAa,EACnD,mBAAmB,cAAc,mBAClC;GACF;EAED,MAAM,aAAa,cAAc;AACjC,MAAI,WACF,QAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAG;GACH,QAAQ;IAAE,MAAM;IAAY;IAAY;GACzC,CAAyC;AAI5C,SAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAG;GACJ,CAAyC;;;;;;;;CAS5C,aAAa,IACX,QAEkB;AAClB;EACA,MAAM,cAAc,MAAMR,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;EAEF,MAAM,gBAAgBM,+BAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,OAAO;GACb,WAAW,YAAY;GACvB,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,GAAG;GACJ,CAAC;EAEF,MAAM,UAAU,IAAI,QAAQ;GAC1B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,OAAO;GAClB,CAAC;AAEF,MAAI,SAAS,KAAK,WAAW,OAAO,SAClC,OAAM,OAAO,SAAS,QAAQ;AAGhC,SAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCT,aAAa,YACX,QAIkB;AAClB;AAEA,MAAI,CAAC,QAAQ,MAAM;GACjB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,OAAI,QAAQ,SACV,OAAM,OAAO,SAAS,QAAQ;AAEhC,UAAO;;AAGT,MAAI;AACF,UAAO,MAAM,QAAQ,IACnB,OACD;WACM,KAAK;AACZ,OAAI,gBAAgB,IAAI,EAAE;IAExB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,OAAI,wBAAwB,IAAI,EAAE;IAGhC,MAAM,cAAc,MAAMP,uCAAe,OAAO;IAChD,MAAM,SAAS,IAAIC,6BAAU;KAC3B,QAAQ,YAAY;KACpB,OAAO,YAAY;KACnB,OAAO,OAAO;KACf,CAAC;IACF,MAAM,gBAAgBM,+BAAiB,OAAO;AAC9C,QAAI;AACF,WAAM,OAAO,cAAc;MACzB,MAAM,OAAO;MACb,WAAW,YAAY;MACvB,QAAQ,OAAO;MACf,GAAG;MACJ,CAAC;aACK,WAAW;AAGlB,SAAI,CAAC,gBAAgB,UAAU,CAC7B,OAAM;;IAIV,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,SAAM;;;;;;;;;;CAWV,YAAY,EACV,QACA,QACA,SACA,SACA,WACA,YAQC;OArnBK,UAA4B;OAM5B,gBAAsC;AAgnB5C,OAAK,UAAU,UAAU;AACzB,MAAI,QACF,MAAK,UAAU,IAAID,wBAAQ;GAAU;GAAS;GAAQ;GAAS,CAAC;AAElE,OAAK,UAAU;AACf,OAAK,YAAY,aAAa;AAC9B,OAAK,WAAW;AAChB,OAAK,KAAK,IAAIG,8BAAW,KAAK;;;;;;;CAQhC,iBAA0B;AACxB,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,yDAAyD;AAE3E,SAAO,KAAK;;;;;CAMd,MAAc,OAAO,QAAqC;AACxD,MAAI,CAAC,KAAK,cACR,MAAK,gBAAgB,KAAK,SAAS,OAAO,CAAC,cAAc;AACvD,QAAK,gBAAgB;IACrB;AAEJ,SAAO,KAAK;;CAGd,MAAc,SAAS,QAAqC;EAC1D,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ;GACR;GACD,CAAC;AACF,OAAK,UAAU,IAAIH,wBAAQ;GACzB;GACA,QAAQ,SAAS,KAAK;GACtB,SAAS,SAAS,KAAK;GACxB,CAAC;AACF,MAAI,KAAK,YAAY,SAAS,KAAK,QACjC,OAAM,KAAK,SAAS,KAAK;;;;;CAO7B,MAAc,qBAAqB,QAAqC;AACtE;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,kBAAkB;EACxB,IAAI,SAAS,KAAK,QAAS;AAE3B,SAAO,WAAW,cAAc,WAAW,gBAAgB;AACzD,8CAAiB,iBAAiB,QAAW,EAAE,QAAQ,CAAC;GACxD,MAAM,OAAO,MAAM,OAAO,WAAW;IACnC,WAAW,KAAK,QAAS;IACzB;IACD,CAAC;AACF,QAAK,UAAU,IAAIA,wBAAQ;IACzB;IACA,QAAQ,KAAK,KAAK;IAClB,SAAS,KAAK,KAAK;IACpB,CAAC;AACF,YAAS,KAAK,KAAK,QAAQ;;AAE7B,QAAM,KAAK,OAAO,OAAO;;;;;CAM3B,MAAc,WACZ,IACA,QACY;AACZ,MAAI,CAAC,KAAK,QACR,OAAM,KAAK,OAAO,OAAO;AAE3B,MAAI;AACF,UAAO,MAAM,IAAI;WACV,KAAK;AACZ,OAAI,sBAAsB,IAAI,EAAE;AAC9B,UAAM,KAAK,OAAO,OAAO;AACzB,WAAO,IAAI;;AAEb,OAAI,uBAAuB,IAAI,IAAI,2BAA2B,IAAI,EAAE;AAClE,UAAM,KAAK,qBAAqB,OAAO;AACvC,WAAO,IAAI;;AAEb,SAAM;;;CAuCV,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SACJ,OAAO,oBAAoB,WACvB,MAAM,SACN,gBAAgB;AACtB,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,iBAAwB,MAAM,KAAK,EAClE,OACD;;;;;;;;;CAUH,MAAM,WACJ,OACA,MACkB;AAClB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,MAAM,MAAM,MAAc,MAAgD;AACxE;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,MAAM,MAAM,KAAK,EACrC,MAAM,OACP;;;;;;;;;CAUH,MAAM,gBAAgB,MAEsB;AAC1C;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,gBAAgB,KAAK,EACzC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,SACJ,MACA,MACuC;AACvC;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,MAAM,KAAK,EACxC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,iBACJ,MACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,iBAAiB,MAAM,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;CAaH,MAAM,aACJ,KACA,KACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,aAAa,KAAK,KAAK,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;;;;;;;CAmBH,MAAM,WACJ,OAKA,MACA;AACA;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,OAAO,GAAmB;AACxB,SAAO,KAAK,gBAAgB,CAAC,OAAO,EAAE;;;;;;;;;CAUxC,MAAM,KAAK,MAEoD;AAC7D;AACA,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,6BAA6B;EAE/C,MAAM,EAAE,SAAS,SAAS,aAAa,MAAM,KAAK,QAAQ,KAAK,KAAK;AACpE,MAAI,QACF,MAAK,UAAU;AAEjB,SAAO,OAAO,OAAO,SAAS,EAAE,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC7C,MAAM,oBACJ,eACA,MACwB;AACxB;AACA,QAAM,KAAK,iBACH,KAAK,QAAS,OAAO,EAAiB,eAAe,EAAE,KAAK,EAClE,MAAM,OACP;AAED,SAAO,KAAK,QAAS;;;;;;;;;;;;;;;;;;CAmBvB,MAAM,cACJ,UACA,MACe;AACf;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,cAAc,UAAU,KAAK,EACjD,MAAM,OACP;;;;;;;;;;;;;CAcH,MAAM,SAAS,MAGO;AACpB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,KAAK,EAClC,MAAM,OACP;;;;;;;;;;;CAYH,MAAM,OACJ,QAeA,MACe;AACf;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,IAAII;AACJ,MAAI,OAAO,WAAW,MACpB,aAAY;GACV,OAAO,OAAO,UAAU;GACxB,QAAQ,OAAO,UAAU,QAAQ;GAClC;EAIH,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB;GACA,SAAS,OAAO;GAChB,eAAe,OAAO;GACtB,MAAM,OAAO;GACb,OAAO,OAAO;GACd,oBAAoB,OAAO;GAC3B,mBAAmB,OAAO;GAC1B,mBAAmB,OAAO;GAC1B,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAU,SAAS,KAAK;AAC7B,MAAI,OAAO,UAAU,UAAa,SAAS,KAAK,OAC9C,MAAK,SAAS,aAAa,SAAS,KAAK,OAAO;AAIlD,MAAI,OAAO,cACT,KAAI;AACF,UAAO,MAAM,KAAK,SAAS,OACzB,EAAE,eAAe,OAAO,eAAe,EACvC,KACD;WACM,KAAK;AACZ,OAAI,sBAAsB,IAAI,IAAI,uBAAuB,IAAI,CAC3D;AAEF,SAAM;;;;;;;;;CAWZ,MAAM,OAAO,MAAgD;AAC3D;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,cAAc;GACzB,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ,MAAM;GACf,CAAC;;;;;;;;CASJ,MAAM,aAAa,QAKhB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,aAAa;IACzC,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAOP,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,MAAM,cAAc,QAKjB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,cAAc;IAC1C,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAOA,kCADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;AAaN,IAAM,oBAAN,cAAgC,QAAmC;CACjE,OAAO,OAAO,gBAAgB;AAC5B,QAAM,KAAK,MAAM"}

dist/sandbox.js

@@ -139,2 +139,9 @@ import { APIError } from "./api-client/api-error.js";
 	/**
+	* The default working directory of the current session (e.g.
+	* `/vercel/sandbox`).
+	*/
+	get cwd() {
+		return this.currentSession().cwd;
+	}
+	/**
 	* The status of the current session.
@@ -158,8 +165,2 @@ */
 	/**
-	* Drives mounted on the sandbox, keyed by mount path.
-	*/
-	get mounts() {
-		return this.sandbox.mounts;
-	}
-	/**
 	* The default network policy of this sandbox.
@@ -312,3 +313,2 @@ */
 			tags: params?.tags,
-			mounts: params?.mounts,
 			snapshotExpiration: params?.snapshotExpiration,
@@ -625,2 +625,13 @@ keepLastSnapshots: params?.keepLastSnapshots,
 	/**
+	* Open an interactive shell session, resuming the sandbox if needed.
+	*
+	* @param opts - Optional parameters.
+	* @param opts.signal - An AbortSignal to cancel the operation.
+	* @returns The WebSocket URL and token used to connect to the PTY.
+	*/
+	async openInteractive(opts) {
+		"use step";
+		return this.withResume(() => this.session.openInteractive(opts), opts?.signal);
+	}
+	/**
 	* Read a file from the filesystem of this sandbox as a stream.
@@ -627,0 +638,0 @@ *

dist/sandbox.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"sandbox.js","names":["copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\">","resources: { vcpus: number; memory: number } | undefined"],"sources":["../src/sandbox.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type {\n  SessionMetaData,\n  SandboxRouteData,\n  SandboxMetaData,\n  SnapshotMetadata,\n} from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { APIError } from \"./api-client/api-error.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { getPrivateParams, type WithPrivate } from \"./utils/types.js\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { RUNTIMES } from \"./constants.js\";\nimport { Session, type RunCommandParams } from \"./session.js\";\nimport type { Command, CommandFinished } from \"./command.js\";\nimport type { Snapshot } from \"./snapshot.js\";\nimport type { SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n} from \"./network-policy.js\";\nimport { fromAPINetworkPolicy } from \"./utils/network-policy.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\nimport { setTimeout } from \"node:timers/promises\";\nimport { FileSystem } from \"./filesystem.js\";\n\nexport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n};\n\n/** @inline */\nexport interface BaseCreateSandboxParams {\n  /**\n   * The name of the sandbox. If omitted, a random name will be generated.\n   */\n  name?: string;\n  /**\n   * The source of the sandbox.\n   *\n   * Omit this parameter start a sandbox without a source.\n   *\n   * For git sources:\n   * - `depth`: Creates shallow clones with limited commit history (minimum: 1)\n   * - `revision`: Clones and checks out a specific commit, branch, or tag\n   */\n  source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n      }\n    | {\n        type: \"git\";\n        url: string;\n        username: string;\n        password: string;\n        depth?: number;\n        revision?: string;\n      }\n    | { type: \"tarball\"; url: string };\n  /**\n   * Array of port numbers to expose from the sandbox. Sandboxes can\n   * expose up to 4 ports.\n   */\n  ports?: number[];\n  /**\n   * Timeout in milliseconds before the sandbox auto-terminates.\n   */\n  timeout?: number;\n  /**\n   * Resources to allocate to the sandbox.\n   *\n   * Your sandbox will get the amount of vCPUs you specify here and\n   * 2048 MB of memory per vCPU.\n   */\n  resources?: { vcpus: number };\n  /**\n   * The runtime of the sandbox, currently only `node24`, `node22`, `node26` and `python3.13` are supported.\n   * If not specified, the default runtime `node24` will be used.\n   */\n  runtime?: RUNTIMES | (string & {});\n  /**\n   * Network policy to define network restrictions for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  networkPolicy?: NetworkPolicy;\n  /**\n   * Default environment variables for the sandbox.\n   * These are inherited by all commands unless overridden with\n   * the `env` option in `runCommand`.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   env: { NODE_ENV: \"production\", API_KEY: \"secret\" },\n   * });\n   * // All commands will have NODE_ENV and API_KEY set\n   * await sandbox.runCommand(\"node\", [\"app.js\"]);\n   */\n  env?: Record<string, string>;\n  /**\n   * Key-value tags to associate with the sandbox. Maximum 5 tags.\n   * @example { env: \"staging\", team: \"infra\" }\n   */\n  tags?: Record<string, string>;\n\n  /**\n   * List of drives to attach to the sandbox, keyed by the desired mount path.\n   * The drive must be created beforehand with `Drive.getOrCreate`.\n   *\n   * The mount paths must be absolute and cannot overlap with each other.\n   *\n   * @example\n   * const drive = await Drive.getOrCreate({ name: \"my-drive\" });\n   * const sandbox = await Sandbox.create({\n   *   mounts: {\n   *     \"/data\": { drive: drive.name, mode: \"read-write\" },\n   *   },\n   * });\n   */\n  mounts?: Record<\n    string,\n    {\n      /**\n       * The drive name to mount.\n       */\n      drive: string;\n      /**\n       * Mount mode. Defaults to `read-write` if unspecified.\n       */\n      mode?: \"read-only\" | \"read-write\";\n    }\n  >;\n\n  /**\n   * An AbortSignal to cancel sandbox creation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Enable or disable automatic restore of the filesystem between sessions.\n   */\n  persistent?: boolean;\n  /**\n   * Default snapshot expiration in milliseconds.\n   * When set, snapshots created for this sandbox will expire after this duration.\n   * Use `0` for no expiration.\n   */\n  snapshotExpiration?: number;\n  /**\n   * Retention policy that keeps only the N most recent snapshots of this\n   * sandbox. Older snapshots are evicted when a new one is created.\n   */\n  keepLastSnapshots?: {\n    /**\n     * Number of snapshots to keep (1-10).\n     */\n    count: number;\n    /**\n     * Expiration in milliseconds applied to kept snapshots.\n     * Use `0` for no expiration. Falls back to `snapshotExpiration` when omitted.\n     */\n    expiration?: number;\n    /**\n     * When `true` (the default), evicted snapshots are deleted immediately;\n     * when `false`, they keep the default expiration.\n     */\n    deleteEvicted?: boolean;\n  };\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\nexport type SandboxMounts = NonNullable<BaseCreateSandboxParams[\"mounts\"]>;\nexport type SandboxMountMode = NonNullable<SandboxMounts[string][\"mode\"]>;\n\nexport type CreateSandboxParams =\n  | BaseCreateSandboxParams\n  | (Omit<BaseCreateSandboxParams, \"runtime\" | \"source\"> & {\n      source: { type: \"snapshot\"; snapshotId: string };\n    });\n\n/**\n * Parameters for {@link Sandbox.fork}.\n *\n * The fork inherits the source sandbox's current filesystem snapshot and copies\n * as many config fields from the source as the server exposes. Any field set\n * here acts as an override of the copied value.\n *\n * `env` is not copied (encrypted server-side); pass it explicitly to set\n * environment variables on the fork. `runtime` is not exposed: when the\n * source has a snapshot, it is inherited; otherwise it is copied from the\n * source sandbox.\n * @inline\n */\nexport type ForkSandboxParams = Omit<\n  BaseCreateSandboxParams,\n  \"source\" | \"runtime\"\n> & {\n  /**\n   * Name of the source sandbox to fork from.\n   */\n  sourceSandbox: string;\n};\n\n/** @inline */\ninterface GetSandboxParams {\n  /**\n   * The name of the sandbox.\n   */\n  name: string;\n  /**\n   * Whether to resume an existing session. Defaults to true.\n   */\n  resume?: boolean;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\n/**\n * Extends both {@link BaseCreateSandboxParams} and {@link GetSandboxParams}\n * (minus `name`, which is required on get but optional here) so that any\n * new parameter added to either flow is picked up automatically. The\n * structural overlap on `signal` / `onResume` is intentional — both\n * interfaces declare them with identical optional types.\n * @inline\n */\ninterface GetOrCreateSandboxParams\n  extends BaseCreateSandboxParams,\n    Omit<GetSandboxParams, \"name\"> {\n  /**\n   * Called once after a sandbox is freshly created (not when an existing\n   * sandbox is retrieved). Use this for one-time setup such as seeding\n   * files or warming caches. The returned promise is awaited before\n   * {@link Sandbox.getOrCreate} resolves.\n   */\n  onCreate?: (sandbox: Sandbox) => Promise<void>;\n}\n\nfunction isSandboxStoppedError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 410;\n}\n\nfunction isNotFoundError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 404;\n}\n\nfunction isSnapshotNotFoundError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 410 &&\n    (err.json as any)?.error?.code === \"snapshot_not_found\"\n  );\n}\n\nfunction isSandboxStoppingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_stopping\"\n  );\n}\n\nfunction isSandboxSnapshottingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_snapshotting\"\n  );\n}\n\n/**\n * Serialized representation of a Sandbox for @workflow/serde.\n * Fields `metadata` and `routes` are the original wire format from main.\n * Fields `sandboxMetadata` and `projectId` are added for named-sandboxes.\n */\nexport interface SerializedSandbox {\n  metadata: SandboxSnapshot;\n  routes: SandboxRouteData[];\n  sandboxMetadata?: SandboxMetaData;\n  projectId?: string;\n}\n\n// ============================================================================\n// Sandbox class\n// ============================================================================\n\n/**\n * A Sandbox is a persistent, isolated Linux MicroVMs to run commands in.\n * Use {@link Sandbox.create} or {@link Sandbox.get} to construct.\n * @hideconstructor\n */\nexport class Sandbox {\n  private _client: APIClient | null = null;\n  private readonly projectId: string;\n\n  /**\n   * In-flight resume promise, used to deduplicate concurrent resume calls.\n   */\n  private resumePromise: Promise<void> | null = null;\n\n  /**\n   * Internal Session instance for the current VM.\n   */\n  private session: Session | undefined;\n\n  /**\n   * Internal metadata about the sandbox.\n   */\n  private sandbox: SandboxMetaData;\n\n  /**\n   * Hook that will be executed when a new session is created during resume.\n   */\n  private readonly onResume?: (sandbox: Sandbox) => Promise<void>;\n\n  /**\n   * A `node:fs/promises`-compatible API for interacting with the sandbox filesystem.\n   *\n   * @example\n   * const content = await sandbox.fs.readFile('/etc/hostname', 'utf8');\n   * await sandbox.fs.writeFile('/tmp/hello.txt', 'Hello, world!');\n   * const files = await sandbox.fs.readdir('/tmp');\n   * const stats = await sandbox.fs.stat('/tmp/hello.txt');\n   */\n  public readonly fs: FileSystem;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * The name of this sandbox.\n   */\n  public get name(): string {\n    return this.sandbox.name;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public get routes(): SandboxRouteData[] {\n    return this.currentSession().routes;\n  }\n\n  /**\n   * Whether the sandbox persists the state.\n   */\n  public get persistent(): boolean {\n    return this.sandbox.persistent;\n  }\n\n  /**\n   * The region this sandbox runs in.\n   */\n  public get region(): string | undefined {\n    return this.sandbox.region;\n  }\n\n  /**\n   * Number of virtual CPUs allocated.\n   */\n  public get vcpus(): number | undefined {\n    return this.sandbox.vcpus;\n  }\n\n  /**\n   * Memory allocated in MB.\n   */\n  public get memory(): number | undefined {\n    return this.sandbox.memory;\n  }\n\n  /** Runtime identifier (e.g. \"node24\", \"python3.13\"). */\n  public get runtime(): string | undefined {\n    return this.sandbox.runtime;\n  }\n\n  /**\n   * Cumulative egress bytes across all sessions.\n   */\n  public get totalEgressBytes(): number | undefined {\n    return this.sandbox.totalEgressBytes;\n  }\n\n  /**\n   * Cumulative ingress bytes across all sessions.\n   */\n  public get totalIngressBytes(): number | undefined {\n    return this.sandbox.totalIngressBytes;\n  }\n\n  /**\n   * Cumulative active CPU duration in milliseconds across all sessions.\n   */\n  public get totalActiveCpuDurationMs(): number | undefined {\n    return this.sandbox.totalActiveCpuDurationMs;\n  }\n\n  /**\n   * Cumulative wall-clock duration in milliseconds across all sessions.\n   */\n  public get totalDurationMs(): number | undefined {\n    return this.sandbox.totalDurationMs;\n  }\n\n  /**\n   * When this sandbox was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.sandbox.updatedAt);\n  }\n\n  /**\n   * When the sandbox status was last updated.\n   */\n  public get statusUpdatedAt(): Date | undefined {\n    return this.sandbox.statusUpdatedAt\n      ? new Date(this.sandbox.statusUpdatedAt)\n      : undefined;\n  }\n\n  /**\n   * When this sandbox was created.\n   */\n  public get createdAt(): Date {\n    return new Date(this.sandbox.createdAt);\n  }\n\n  /**\n   * Interactive port.\n   */\n  public get interactivePort(): number | undefined {\n    return this.currentSession().interactivePort;\n  }\n\n  /**\n   * The status of the current session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.currentSession().status;\n  }\n\n  /**\n   * The default timeout of this sandbox in milliseconds.\n   */\n  public get timeout(): number | undefined {\n    return this.sandbox.timeout;\n  }\n\n  /**\n   * Key-value tags attached to the sandbox.\n   */\n  public get tags(): Record<string, string> | undefined {\n    return this.sandbox.tags;\n  }\n\n  /**\n   * Drives mounted on the sandbox, keyed by mount path.\n   */\n  public get mounts(): SandboxMounts | undefined {\n    return this.sandbox.mounts;\n  }\n\n  /**\n   * The default network policy of this sandbox.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.sandbox.networkPolicy\n      ? fromAPINetworkPolicy(this.sandbox.networkPolicy)\n      : undefined;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.currentSession().sourceSnapshotId;\n  }\n\n  /**\n   * The current snapshot ID of this sandbox, if any.\n   */\n  public get currentSnapshotId(): string | undefined {\n    return this.sandbox.currentSnapshotId;\n  }\n\n  /**\n   * The default snapshot expiration in milliseconds, if set.\n   */\n  public get snapshotExpiration(): number | undefined {\n    return this.sandbox.snapshotExpiration;\n  }\n\n  /**\n   * The snapshot retention policy (`keep-last-snapshots`) currently configured\n   * on this sandbox, if any.\n   */\n  public get keepLastSnapshots():\n    | { count: number; expiration?: number; deleteEvicted?: boolean }\n    | undefined {\n    return this.sandbox.keepLastSnapshots;\n  }\n\n  /**\n   * The amount of CPU used by the session. Only reported once the VM is stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.currentSession().activeCpuUsageMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.currentSession().networkTransfer;\n  }\n\n  /**\n   * Allow to get a list of sandboxes for a team narrowed to the given params.\n   * It returns both the sandboxes and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Sandbox.list({ namePrefix: \"ci-\" });\n   * for await (const sandbox of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSandboxes\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSandboxes({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sandboxes\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Serialize a Sandbox instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Sandbox instance to serialize\n   * @returns A plain object containing sandbox metadata and routes\n   */\n  static [WORKFLOW_SERIALIZE](instance: Sandbox): SerializedSandbox {\n    return {\n      metadata: instance.session?._sessionSnapshot!,\n      routes: instance.session?.routes ?? [],\n      sandboxMetadata: instance.sandbox,\n      projectId: instance.projectId,\n    };\n  }\n\n  /**\n   * Deserialize a Sandbox from serialized snapshot data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized sandbox data\n   * @returns The reconstructed Sandbox instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSandbox): Sandbox {\n    const sandbox = new Sandbox({\n      sandbox: data.sandboxMetadata!,\n      routes: data.routes,\n      projectId: data.projectId,\n    });\n    if (data.metadata) {\n      sandbox.session = new Session({ routes: data.routes, snapshot: data.metadata });\n    }\n    return sandbox;\n  }\n\n  /**\n   * Create a new sandbox.\n   *\n   * @param params - Creation parameters and optional credentials.\n   * @returns A promise resolving to the created {@link Sandbox}.\n   * @example\n   * <caption>Create a sandbox with default options</caption>\n   * const sandbox = await Sandbox.create();\n   *\n   * @example\n   * <caption>Create a sandbox and drop it in the end of the block</caption>\n   * async function fn() {\n   *   await using const sandbox = await Sandbox.create();\n   *   // Sandbox automatically stopped at the end of the lexical scope\n   * }\n   */\n  static async create(\n    params?: WithPrivate<\n      CreateSandboxParams | (CreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.createSandbox({\n      source: params?.source,\n      projectId: credentials.projectId,\n      ports: params?.ports ?? [],\n      timeout: params?.timeout,\n      resources: params?.resources,\n      runtime: params && \"runtime\" in params ? params?.runtime : undefined,\n      networkPolicy: params?.networkPolicy,\n      env: params?.env,\n      tags: params?.tags,\n      mounts: params?.mounts,\n      snapshotExpiration: params?.snapshotExpiration,\n      keepLastSnapshots: params?.keepLastSnapshots,\n      signal: params?.signal,\n      name: params?.name,\n      persistent: params?.persistent,\n      ...privateParams,\n    });\n\n    return new DisposableSandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params?.onResume,\n    });\n  }\n\n  /**\n   * Fork an existing sandbox into a new one. Any field passed in `params`\n   * overrides the source value.\n   *\n   * If the source sandbox has no current snapshot, falls back to creating a\n   * fresh sandbox with the same copied config plus the source's `runtime`.\n   *\n   * `env` is not copied (encrypted server-side); pass it explicitly to set\n   * environment variables on the fork.\n   *\n   * @param params - Fork parameters and optional credentials.\n   *   `sourceSandbox` is the name of the source sandbox; everything else\n   *   acts as an override.\n   * @returns A promise resolving to the new {@link Sandbox}.\n   *\n   * @example\n   * <caption>Fork with all config copied from the source</caption>\n   * const fork = await Sandbox.fork({ sourceSandbox: \"prod-agent\" });\n   *\n   * @example\n   * <caption>Fork with an explicit new name and overridden vcpus</caption>\n   * const fork = await Sandbox.fork({\n   *   sourceSandbox: \"prod-agent\",\n   *   name: \"forked-prod-agent\",\n   *   resources: { vcpus: 4 },\n   * });\n   */\n  static async fork(\n    params: WithPrivate<ForkSandboxParams | (ForkSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const { sourceSandbox: sourceName, ...overrides } = params;\n\n    // Forward only what `Sandbox.get` consumes; don't leak fork-only inputs.\n    const credentialFields = params as Partial<Credentials>;\n    const sourceSandbox = await Sandbox.get({\n      token: credentialFields.token,\n      projectId: credentialFields.projectId,\n      teamId: credentialFields.teamId,\n      fetch: params.fetch,\n      signal: params.signal,\n      ...getPrivateParams(params),\n      name: sourceName,\n      resume: false,\n    } as Parameters<typeof Sandbox.get>[0]);\n\n    const sourcePorts = sourceSandbox.routes\n      .filter((r) => r.port !== sourceSandbox.interactivePort)\n      .map((r) => r.port);\n\n    const copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\"> = {\n      ...(sourceSandbox.vcpus !== undefined && {\n        resources: { vcpus: sourceSandbox.vcpus },\n      }),\n      ...(sourceSandbox.timeout !== undefined && {\n        timeout: sourceSandbox.timeout,\n      }),\n      ...(sourceSandbox.networkPolicy !== undefined && {\n        networkPolicy: sourceSandbox.networkPolicy,\n      }),\n      ...(sourceSandbox.tags !== undefined && { tags: sourceSandbox.tags }),\n      ...(sourcePorts.length > 0 && { ports: sourcePorts }),\n      persistent: sourceSandbox.persistent,\n      ...(sourceSandbox.snapshotExpiration !== undefined && {\n        snapshotExpiration: sourceSandbox.snapshotExpiration,\n      }),\n      ...(sourceSandbox.keepLastSnapshots !== undefined && {\n        keepLastSnapshots: sourceSandbox.keepLastSnapshots,\n      }),\n    };\n\n    const snapshotId = sourceSandbox.currentSnapshotId;\n    if (snapshotId) {\n      return Sandbox.create({\n        ...copied,\n        ...overrides,\n        source: { type: \"snapshot\", snapshotId },\n      } as Parameters<typeof Sandbox.create>[0]);\n    }\n\n    // No snapshot: seed a fresh sandbox using the source's runtime.\n    return Sandbox.create({\n      ...copied,\n      ...(sourceSandbox.runtime !== undefined && {\n        runtime: sourceSandbox.runtime,\n      }),\n      ...overrides,\n    } as Parameters<typeof Sandbox.create>[0]);\n  }\n\n  /**\n   * Retrieve an existing sandbox and resume its session.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: WithPrivate<GetSandboxParams | (GetSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.getSandbox({\n      name: params.name,\n      projectId: credentials.projectId,\n      resume: params.resume,\n      signal: params.signal,\n      ...privateParams,\n    });\n\n    const sandbox = new Sandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params.onResume,\n    });\n\n    if (response.json.resumed && params.onResume) {\n      await params.onResume(sandbox);\n    }\n\n    return sandbox;\n  }\n\n  /**\n   * Retrieve an existing named sandbox, or create a new one if none exists.\n   *\n   * If `name` is omitted, this always creates a new sandbox and fires\n   * `onCreate`. If `name` is provided, it first tries {@link Sandbox.get};\n   * on `not_found` it creates a new sandbox with that name; on\n   * `snapshot_not_found` it deletes the stale named sandbox and creates\n   * a fresh one with the same name.\n   *\n   * @param params - Get/create parameters plus an optional `onCreate` hook.\n   * @returns A promise resolving to the {@link Sandbox}.\n   *\n   * @example\n   * <caption>Idempotent named sandbox with one-time setup</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   name: \"my-workspace\",\n   *   onCreate: async (sbx) => {\n   *     await sbx.writeFiles([\n   *       { path: \"README.md\", content: Buffer.from(\"# Hello\") },\n   *     ]);\n   *   },\n   * });\n   *\n   * @example\n   * <caption>Unnamed — always creates</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   onCreate: async (sbx) => {\n   *     await sbx.runCommand(\"npm\", [\"install\"]);\n   *   },\n   * });\n   */\n  static async getOrCreate(\n    params?: WithPrivate<\n      GetOrCreateSandboxParams | (GetOrCreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    // No name → always create, fire onCreate.\n    if (!params?.name) {\n      const sandbox = await Sandbox.create(params);\n      if (params?.onCreate) {\n        await params.onCreate(sandbox);\n      }\n      return sandbox;\n    }\n\n    try {\n      return await Sandbox.get(\n        params as unknown as Parameters<typeof Sandbox.get>[0],\n      );\n    } catch (err) {\n      if (isNotFoundError(err)) {\n        // Sandbox does not exist: re-create it.\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      if (isSnapshotNotFoundError(err)) {\n        // Sandbox exists but the snapshot has expired. Delete it and create\n        // a new one.\n        const credentials = await getCredentials(params);\n        const client = new APIClient({\n          teamId: credentials.teamId,\n          token: credentials.token,\n          fetch: params.fetch,\n        });\n        const privateParams = getPrivateParams(params);\n        try {\n          await client.deleteSandbox({\n            name: params.name,\n            projectId: credentials.projectId,\n            signal: params.signal,\n            ...privateParams,\n          });\n        } catch (deleteErr) {\n          // Tolerate 404 — the named sandbox was already cleaned up by a\n          // concurrent request. Propagate anything else.\n          if (!isNotFoundError(deleteErr)) {\n            throw deleteErr;\n          }\n        }\n\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      throw err;\n    }\n  }\n\n  /**\n   * Create a new Sandbox instance.\n   *\n   * @param params.client - Optional API client. If not provided, will be lazily created using global credentials.\n   * @param params.routes - Port-to-subdomain mappings for exposed ports\n   * @param params.sandbox - Sandbox snapshot metadata\n   */\n  constructor({\n    client,\n    routes,\n    session,\n    sandbox,\n    projectId,\n    onResume,\n  }: {\n    client?: APIClient;\n    routes: SandboxRouteData[];\n    session?: SessionMetaData;\n    sandbox: SandboxMetaData;\n    projectId?: string;\n    onResume?: (sandbox: Sandbox) => Promise<void>;\n  }) {\n    this._client = client ?? null;\n    if (session) {\n      this.session = new Session({ client: client!, routes, session });\n    }\n    this.sandbox = sandbox;\n    this.projectId = projectId ?? \"\";\n    this.onResume = onResume;\n    this.fs = new FileSystem(this);\n  }\n\n  /**\n   * Get the current session (the running VM) for this sandbox.\n   *\n   * @returns The {@link Session} instance.\n   */\n  currentSession(): Session {\n    if (!this.session) {\n      throw new Error(\"No active session. Run a command or call resume first.\");\n    }\n    return this.session;\n  }\n\n  /**\n   * Resume this sandbox by creating a new session via `getSandbox`.\n   */\n  private async resume(signal?: AbortSignal): Promise<void> {\n    if (!this.resumePromise) {\n      this.resumePromise = this.doResume(signal).finally(() => {\n        this.resumePromise = null;\n      });\n    }\n    return this.resumePromise;\n  }\n\n  private async doResume(signal?: AbortSignal): Promise<void> {\n    const client = await this.ensureClient();\n    const response = await client.getSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      resume: true,\n      signal,\n    });\n    this.session = new Session({\n      client,\n      routes: response.json.routes,\n      session: response.json.session,\n    });\n    if (this.onResume && response.json.resumed) {\n      await this.onResume(this);\n    }\n  }\n\n  /**\n   * Poll until the current session reaches a terminal state, then resume.\n   */\n  private async waitForStopAndResume(signal?: AbortSignal): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const pollingInterval = 500;\n    let status = this.session!.status;\n\n    while (status === \"stopping\" || status === \"snapshotting\") {\n      await setTimeout(pollingInterval, undefined, { signal });\n      const poll = await client.getSession({\n        sessionId: this.session!.sessionId,\n        signal,\n      });\n      this.session = new Session({\n        client,\n        routes: poll.json.routes,\n        session: poll.json.session,\n      });\n      status = poll.json.session.status;\n    }\n    await this.resume(signal);\n  }\n\n  /**\n   * Execute `fn`, and if the session is stopped/stopping/snapshotting, resume and retry.\n   */\n  private async withResume<T>(\n    fn: () => Promise<T>,\n    signal?: AbortSignal,\n  ): Promise<T> {\n    if (!this.session) {\n      await this.resume(signal);\n    }\n    try {\n      return await fn();\n    } catch (err) {\n      if (isSandboxStoppedError(err)) {\n        await this.resume(signal);\n        return fn();\n      }\n      if (isSandboxStoppingError(err) || isSandboxSnapshottingError(err)) {\n        await this.waitForStopAndResume(signal);\n        return fn();\n      }\n      throw err;\n    }\n  }\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const signal =\n      typeof commandOrParams === \"string\"\n        ? opts?.signal\n        : commandOrParams.signal;\n    return this.withResume(\n      () => this.session!.runCommand(commandOrParams as any, args, opts),\n      signal,\n    );\n  }\n\n  /**\n   * Internal helper to start a command in the sandbox.\n   *\n   * @param params - Command execution parameters.\n   * @returns A {@link Command} or {@link CommandFinished}, depending on `detached`.\n   * @internal\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.getCommand(cmdId, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a directory in the filesystem of this sandbox.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.mkDir(path, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFile(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFileToBuffer(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Download a file from the sandbox to the local filesystem.\n   *\n   * @param src - Source file on the sandbox, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.downloadFile(src, dst, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Write files to the filesystem of this sandbox.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path, content, and optional mode (permissions)\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   *\n   * @example\n   * // Write an executable script\n   * await sandbox.writeFiles([\n   *   { path: \"/usr/local/bin/myscript\", content: \"#!/bin/bash\\necho hello\", mode: 0o755 }\n   * ]);\n   */\n  async writeFiles(\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.writeFiles(files, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Get the public domain of a port of this sandbox.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    return this.currentSession().domain(p);\n  }\n\n  /**\n   * Stop the sandbox.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state after stopping, with optional snapshot metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<SandboxSnapshot & { snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    if (!this.session) {\n      throw new Error(\"No active session to stop.\");\n    }\n    const { session, sandbox, snapshot } = await this.session.stop(opts);\n    if (sandbox) {\n      this.sandbox = sandbox;\n    }\n    return Object.assign(session, { snapshot });\n  }\n\n  /**\n   * Update the network policy for this sandbox.\n   *\n   * @deprecated Use {@link Sandbox.update} instead.\n   *\n   * @param networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the network policy is updated.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await sandbox.updateNetworkPolicy({\n   *   allow: [\"*.npmjs.org\", \"github.com\"],\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await sandbox.updateNetworkPolicy({\n   *   allow: {\n   *     \"ai-gateway.vercel.sh\": [{\n   *       transform: [{\n   *         headers: { authorization: \"Bearer ...\" }\n   *       }]\n   *     }],\n   *     \"*\": []\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await sandbox.updateNetworkPolicy(\"deny-all\");\n   */\n  async updateNetworkPolicy(\n    networkPolicy: NetworkPolicy,\n    opts?: { signal?: AbortSignal },\n  ): Promise<NetworkPolicy> {\n    \"use step\";\n    await this.withResume(\n      () => this.session!.update({ networkPolicy: networkPolicy }, opts),\n      opts?.signal,\n    );\n\n    return this.session!.networkPolicy!;\n  }\n\n  /**\n   * Extend the timeout of the sandbox by the specified duration.\n   *\n   * This allows you to extend the lifetime of a sandbox up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await sandbox.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.extendTimeout(duration, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a snapshot from this currently running sandbox. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.createFromSnapshot}.\n   *\n   * Note: this sandbox will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.snapshot(opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Update the sandbox configuration.\n   *\n   * When `ports` is provided, it is treated as the full desired port list:\n   * any currently exposed port omitted from the array will be deregistered.\n   *\n   * @param params - Fields to update.\n   * @param opts - Optional abort signal.\n   */\n  async update(\n    params: {\n      persistent?: boolean;\n      resources?: { vcpus?: number };\n      timeout?: number;\n      networkPolicy?: NetworkPolicy;\n      tags?: Record<string, string>;\n      ports?: number[];\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      } | null;\n      currentSnapshotId?: string;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    let resources: { vcpus: number; memory: number } | undefined;\n    if (params.resources?.vcpus) {\n      resources = {\n        vcpus: params.resources.vcpus,\n        memory: params.resources.vcpus * 2048,\n      };\n    }\n\n    // Update the sandbox config. This config will be used on the next session.\n    const response = await client.updateSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      persistent: params.persistent,\n      resources,\n      timeout: params.timeout,\n      networkPolicy: params.networkPolicy,\n      tags: params.tags,\n      ports: params.ports,\n      snapshotExpiration: params.snapshotExpiration,\n      keepLastSnapshots: params.keepLastSnapshots,\n      currentSnapshotId: params.currentSnapshotId,\n      signal: opts?.signal,\n    });\n    this.sandbox = response.json.sandbox;\n    if (params.ports !== undefined && response.json.routes) {\n      this.session?.updateRoutes(response.json.routes);\n    }\n\n    // Update the current session config. This only applies to network policy.\n    if (params.networkPolicy) {\n      try {\n        return await this.session?.update(\n          { networkPolicy: params.networkPolicy },\n          opts,\n        );\n      } catch (err) {\n        if (isSandboxStoppedError(err) || isSandboxStoppingError(err)) {\n          return;\n        }\n        throw err;\n      }\n    }\n  }\n\n  /**\n   * Delete this sandbox.\n   *\n   * After deletion the instance becomes inert — all further API calls will\n   * throw immediately.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.deleteSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * List sessions (VMs) that have been created for this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of sessions and pagination metadata.\n   */\n  async listSessions(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSessions({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sessions\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * List snapshots that belong to this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of snapshots and pagination metadata.\n   */\n  async listSnapshots(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n}\n\n/**\n * A {@link Sandbox} that can automatically be disposed using a `await using` statement.\n *\n * @example\n * {\n *   await using const sandbox = await Sandbox.create();\n * }\n * // Sandbox is automatically stopped here\n */\nclass DisposableSandbox extends Sandbox implements AsyncDisposable {\n  async [Symbol.asyncDispose]() {\n    await this.stop();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AA6PA,SAAS,sBAAsB,KAAuB;AACpD,QAAO,eAAe,YAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,gBAAgB,KAAuB;AAC9C,QAAO,eAAe,YAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,wBAAwB,KAAuB;AACtD,QACE,eAAe,YACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,uBAAuB,KAAuB;AACrD,QACE,eAAe,YACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,2BAA2B,KAAuB;AACzD,QACE,eAAe,YACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;;;;;;AAyBvC,IAAa,UAAb,MAAa,QAAQ;;;;;CAuCnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAM,gBAAgB;AAC1C,OAAK,UAAU,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,SAA6B;AACtC,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,aAAsB;AAC/B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAA4B;AACrC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;CAItB,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,2BAA+C;AACxD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,kBAChB,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAsC;AAC/C,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,SAAoC;AAC7C,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,OAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAoC;AAC7C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ,gBAChB,qBAAqB,KAAK,QAAQ,cAAc,GAChD;;;;;CAMN,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,qBAAyC;AAClD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,oBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,kBAEG;AACZ,SAAO,KAAK,gBAAgB,CAAC;;;;;;;;;;;;;;;;CAiB/B,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,QAAQ,oBAAoB,UAAsC;AAChE,SAAO;GACL,UAAU,SAAS,SAAS;GAC5B,QAAQ,SAAS,SAAS,UAAU,EAAE;GACtC,iBAAiB,SAAS;GAC1B,WAAW,SAAS;GACrB;;;;;;;;;;;CAYH,QAAQ,sBAAsB,MAAkC;EAC9D,MAAM,UAAU,IAAI,QAAQ;GAC1B,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,WAAW,KAAK;GACjB,CAAC;AACF,MAAI,KAAK,SACP,SAAQ,UAAU,IAAI,QAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAU,CAAC;AAEjF,SAAO;;;;;;;;;;;;;;;;;;CAmBT,aAAa,OACX,QAIoC;AACpC;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EAEF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,QAAQ,QAAQ;GAChB,WAAW,YAAY;GACvB,OAAO,QAAQ,SAAS,EAAE;GAC1B,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,SAAS,UAAU,aAAa,SAAS,QAAQ,UAAU;GAC3D,eAAe,QAAQ;GACvB,KAAK,QAAQ;GACb,MAAM,QAAQ;GACd,QAAQ,QAAQ;GAChB,oBAAoB,QAAQ;GAC5B,mBAAmB,QAAQ;GAC3B,QAAQ,QAAQ;GAChB,MAAM,QAAQ;GACd,YAAY,QAAQ;GACpB,GAAG;GACJ,CAAC;AAEF,SAAO,IAAI,kBAAkB;GAC3B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,QAAQ;GACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BJ,aAAa,KACX,QAEoC;AACpC;EACA,MAAM,EAAE,eAAe,YAAY,GAAG,cAAc;EAGpD,MAAM,mBAAmB;EACzB,MAAM,gBAAgB,MAAM,QAAQ,IAAI;GACtC,OAAO,iBAAiB;GACxB,WAAW,iBAAiB;GAC5B,QAAQ,iBAAiB;GACzB,OAAO,OAAO;GACd,QAAQ,OAAO;GACf,GAAG,iBAAiB,OAAO;GAC3B,MAAM;GACN,QAAQ;GACT,CAAsC;EAEvC,MAAM,cAAc,cAAc,OAC/B,QAAQ,MAAM,EAAE,SAAS,cAAc,gBAAgB,CACvD,KAAK,MAAM,EAAE,KAAK;EAErB,MAAMA,SAA8D;GAClE,GAAI,cAAc,UAAU,UAAa,EACvC,WAAW,EAAE,OAAO,cAAc,OAAO,EAC1C;GACD,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAI,cAAc,kBAAkB,UAAa,EAC/C,eAAe,cAAc,eAC9B;GACD,GAAI,cAAc,SAAS,UAAa,EAAE,MAAM,cAAc,MAAM;GACpE,GAAI,YAAY,SAAS,KAAK,EAAE,OAAO,aAAa;GACpD,YAAY,cAAc;GAC1B,GAAI,cAAc,uBAAuB,UAAa,EACpD,oBAAoB,cAAc,oBACnC;GACD,GAAI,cAAc,sBAAsB,UAAa,EACnD,mBAAmB,cAAc,mBAClC;GACF;EAED,MAAM,aAAa,cAAc;AACjC,MAAI,WACF,QAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAG;GACH,QAAQ;IAAE,MAAM;IAAY;IAAY;GACzC,CAAyC;AAI5C,SAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAG;GACJ,CAAyC;;;;;;;;CAS5C,aAAa,IACX,QAEkB;AAClB;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;EAEF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,OAAO;GACb,WAAW,YAAY;GACvB,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,GAAG;GACJ,CAAC;EAEF,MAAM,UAAU,IAAI,QAAQ;GAC1B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,OAAO;GAClB,CAAC;AAEF,MAAI,SAAS,KAAK,WAAW,OAAO,SAClC,OAAM,OAAO,SAAS,QAAQ;AAGhC,SAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCT,aAAa,YACX,QAIkB;AAClB;AAEA,MAAI,CAAC,QAAQ,MAAM;GACjB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,OAAI,QAAQ,SACV,OAAM,OAAO,SAAS,QAAQ;AAEhC,UAAO;;AAGT,MAAI;AACF,UAAO,MAAM,QAAQ,IACnB,OACD;WACM,KAAK;AACZ,OAAI,gBAAgB,IAAI,EAAE;IAExB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,OAAI,wBAAwB,IAAI,EAAE;IAGhC,MAAM,cAAc,MAAM,eAAe,OAAO;IAChD,MAAM,SAAS,IAAI,UAAU;KAC3B,QAAQ,YAAY;KACpB,OAAO,YAAY;KACnB,OAAO,OAAO;KACf,CAAC;IACF,MAAM,gBAAgB,iBAAiB,OAAO;AAC9C,QAAI;AACF,WAAM,OAAO,cAAc;MACzB,MAAM,OAAO;MACb,WAAW,YAAY;MACvB,QAAQ,OAAO;MACf,GAAG;MACJ,CAAC;aACK,WAAW;AAGlB,SAAI,CAAC,gBAAgB,UAAU,CAC7B,OAAM;;IAIV,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,SAAM;;;;;;;;;;CAWV,YAAY,EACV,QACA,QACA,SACA,SACA,WACA,YAQC;OArnBK,UAA4B;OAM5B,gBAAsC;AAgnB5C,OAAK,UAAU,UAAU;AACzB,MAAI,QACF,MAAK,UAAU,IAAI,QAAQ;GAAU;GAAS;GAAQ;GAAS,CAAC;AAElE,OAAK,UAAU;AACf,OAAK,YAAY,aAAa;AAC9B,OAAK,WAAW;AAChB,OAAK,KAAK,IAAI,WAAW,KAAK;;;;;;;CAQhC,iBAA0B;AACxB,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,yDAAyD;AAE3E,SAAO,KAAK;;;;;CAMd,MAAc,OAAO,QAAqC;AACxD,MAAI,CAAC,KAAK,cACR,MAAK,gBAAgB,KAAK,SAAS,OAAO,CAAC,cAAc;AACvD,QAAK,gBAAgB;IACrB;AAEJ,SAAO,KAAK;;CAGd,MAAc,SAAS,QAAqC;EAC1D,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ;GACR;GACD,CAAC;AACF,OAAK,UAAU,IAAI,QAAQ;GACzB;GACA,QAAQ,SAAS,KAAK;GACtB,SAAS,SAAS,KAAK;GACxB,CAAC;AACF,MAAI,KAAK,YAAY,SAAS,KAAK,QACjC,OAAM,KAAK,SAAS,KAAK;;;;;CAO7B,MAAc,qBAAqB,QAAqC;AACtE;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,kBAAkB;EACxB,IAAI,SAAS,KAAK,QAAS;AAE3B,SAAO,WAAW,cAAc,WAAW,gBAAgB;AACzD,SAAM,WAAW,iBAAiB,QAAW,EAAE,QAAQ,CAAC;GACxD,MAAM,OAAO,MAAM,OAAO,WAAW;IACnC,WAAW,KAAK,QAAS;IACzB;IACD,CAAC;AACF,QAAK,UAAU,IAAI,QAAQ;IACzB;IACA,QAAQ,KAAK,KAAK;IAClB,SAAS,KAAK,KAAK;IACpB,CAAC;AACF,YAAS,KAAK,KAAK,QAAQ;;AAE7B,QAAM,KAAK,OAAO,OAAO;;;;;CAM3B,MAAc,WACZ,IACA,QACY;AACZ,MAAI,CAAC,KAAK,QACR,OAAM,KAAK,OAAO,OAAO;AAE3B,MAAI;AACF,UAAO,MAAM,IAAI;WACV,KAAK;AACZ,OAAI,sBAAsB,IAAI,EAAE;AAC9B,UAAM,KAAK,OAAO,OAAO;AACzB,WAAO,IAAI;;AAEb,OAAI,uBAAuB,IAAI,IAAI,2BAA2B,IAAI,EAAE;AAClE,UAAM,KAAK,qBAAqB,OAAO;AACvC,WAAO,IAAI;;AAEb,SAAM;;;CAuCV,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SACJ,OAAO,oBAAoB,WACvB,MAAM,SACN,gBAAgB;AACtB,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,iBAAwB,MAAM,KAAK,EAClE,OACD;;;;;;;;;CAUH,MAAM,WACJ,OACA,MACkB;AAClB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,MAAM,MAAM,MAAc,MAAgD;AACxE;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,MAAM,MAAM,KAAK,EACrC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,SACJ,MACA,MACuC;AACvC;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,MAAM,KAAK,EACxC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,iBACJ,MACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,iBAAiB,MAAM,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;CAaH,MAAM,aACJ,KACA,KACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,aAAa,KAAK,KAAK,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;;;;;;;CAmBH,MAAM,WACJ,OAKA,MACA;AACA;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,OAAO,GAAmB;AACxB,SAAO,KAAK,gBAAgB,CAAC,OAAO,EAAE;;;;;;;;;CAUxC,MAAM,KAAK,MAEoD;AAC7D;AACA,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,6BAA6B;EAE/C,MAAM,EAAE,SAAS,SAAS,aAAa,MAAM,KAAK,QAAQ,KAAK,KAAK;AACpE,MAAI,QACF,MAAK,UAAU;AAEjB,SAAO,OAAO,OAAO,SAAS,EAAE,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC7C,MAAM,oBACJ,eACA,MACwB;AACxB;AACA,QAAM,KAAK,iBACH,KAAK,QAAS,OAAO,EAAiB,eAAe,EAAE,KAAK,EAClE,MAAM,OACP;AAED,SAAO,KAAK,QAAS;;;;;;;;;;;;;;;;;;CAmBvB,MAAM,cACJ,UACA,MACe;AACf;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,cAAc,UAAU,KAAK,EACjD,MAAM,OACP;;;;;;;;;;;;;CAcH,MAAM,SAAS,MAGO;AACpB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,KAAK,EAClC,MAAM,OACP;;;;;;;;;;;CAYH,MAAM,OACJ,QAeA,MACe;AACf;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,IAAIC;AACJ,MAAI,OAAO,WAAW,MACpB,aAAY;GACV,OAAO,OAAO,UAAU;GACxB,QAAQ,OAAO,UAAU,QAAQ;GAClC;EAIH,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB;GACA,SAAS,OAAO;GAChB,eAAe,OAAO;GACtB,MAAM,OAAO;GACb,OAAO,OAAO;GACd,oBAAoB,OAAO;GAC3B,mBAAmB,OAAO;GAC1B,mBAAmB,OAAO;GAC1B,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAU,SAAS,KAAK;AAC7B,MAAI,OAAO,UAAU,UAAa,SAAS,KAAK,OAC9C,MAAK,SAAS,aAAa,SAAS,KAAK,OAAO;AAIlD,MAAI,OAAO,cACT,KAAI;AACF,UAAO,MAAM,KAAK,SAAS,OACzB,EAAE,eAAe,OAAO,eAAe,EACvC,KACD;WACM,KAAK;AACZ,OAAI,sBAAsB,IAAI,IAAI,uBAAuB,IAAI,CAC3D;AAEF,SAAM;;;;;;;;;CAWZ,MAAM,OAAO,MAAgD;AAC3D;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,cAAc;GACzB,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ,MAAM;GACf,CAAC;;;;;;;;CASJ,MAAM,aAAa,QAKhB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,aAAa;IACzC,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,MAAM,cAAc,QAKjB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,cAAc;IAC1C,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;AAaN,IAAM,oBAAN,cAAgC,QAAmC;CACjE,OAAO,OAAO,gBAAgB;AAC5B,QAAM,KAAK,MAAM"}
+{"version":3,"file":"sandbox.js","names":["copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\">","resources: { vcpus: number; memory: number } | undefined"],"sources":["../src/sandbox.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type {\n  SessionMetaData,\n  SandboxRouteData,\n  SandboxMetaData,\n  SnapshotMetadata,\n} from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { APIError } from \"./api-client/api-error.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { getPrivateParams, type WithPrivate } from \"./utils/types.js\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { RUNTIMES } from \"./constants.js\";\nimport { Session, type RunCommandParams } from \"./session.js\";\nimport type { Command, CommandFinished } from \"./command.js\";\nimport type { Snapshot } from \"./snapshot.js\";\nimport type { SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n} from \"./network-policy.js\";\nimport { fromAPINetworkPolicy } from \"./utils/network-policy.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\nimport { setTimeout } from \"node:timers/promises\";\nimport { FileSystem } from \"./filesystem.js\";\n\nexport type {\n  NetworkPolicy,\n  NetworkPolicyKeyValueMatcher,\n  NetworkPolicyMatch,\n  NetworkPolicyMatcher,\n};\n\n/** @inline */\nexport interface BaseCreateSandboxParams {\n  /**\n   * The name of the sandbox. If omitted, a random name will be generated.\n   */\n  name?: string;\n  /**\n   * The source of the sandbox.\n   *\n   * Omit this parameter start a sandbox without a source.\n   *\n   * For git sources:\n   * - `depth`: Creates shallow clones with limited commit history (minimum: 1)\n   * - `revision`: Clones and checks out a specific commit, branch, or tag\n   */\n  source?:\n    | {\n        type: \"git\";\n        url: string;\n        depth?: number;\n        revision?: string;\n      }\n    | {\n        type: \"git\";\n        url: string;\n        username: string;\n        password: string;\n        depth?: number;\n        revision?: string;\n      }\n    | { type: \"tarball\"; url: string };\n  /**\n   * Array of port numbers to expose from the sandbox. Sandboxes can\n   * expose up to 4 ports.\n   */\n  ports?: number[];\n  /**\n   * Timeout in milliseconds before the sandbox auto-terminates.\n   */\n  timeout?: number;\n  /**\n   * Resources to allocate to the sandbox.\n   *\n   * Your sandbox will get the amount of vCPUs you specify here and\n   * 2048 MB of memory per vCPU.\n   */\n  resources?: { vcpus: number };\n  /**\n   * The runtime of the sandbox, currently only `node24`, `node22`, `node26` and `python3.13` are supported.\n   * If not specified, the default runtime `node24` will be used.\n   */\n  runtime?: RUNTIMES | (string & {});\n  /**\n   * Network policy to define network restrictions for the sandbox.\n   * Defaults to full internet access if not specified.\n   */\n  networkPolicy?: NetworkPolicy;\n  /**\n   * Default environment variables for the sandbox.\n   * These are inherited by all commands unless overridden with\n   * the `env` option in `runCommand`.\n   *\n   * @example\n   * const sandbox = await Sandbox.create({\n   *   env: { NODE_ENV: \"production\", API_KEY: \"secret\" },\n   * });\n   * // All commands will have NODE_ENV and API_KEY set\n   * await sandbox.runCommand(\"node\", [\"app.js\"]);\n   */\n  env?: Record<string, string>;\n  /**\n   * Key-value tags to associate with the sandbox. Maximum 5 tags.\n   * @example { env: \"staging\", team: \"infra\" }\n   */\n  tags?: Record<string, string>;\n\n  /**\n   * An AbortSignal to cancel sandbox creation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Enable or disable automatic restore of the filesystem between sessions.\n   */\n  persistent?: boolean;\n  /**\n   * Default snapshot expiration in milliseconds.\n   * When set, snapshots created for this sandbox will expire after this duration.\n   * Use `0` for no expiration.\n   */\n  snapshotExpiration?: number;\n  /**\n   * Retention policy that keeps only the N most recent snapshots of this\n   * sandbox. Older snapshots are evicted when a new one is created.\n   */\n  keepLastSnapshots?: {\n    /**\n     * Number of snapshots to keep (1-10).\n     */\n    count: number;\n    /**\n     * Expiration in milliseconds applied to kept snapshots.\n     * Use `0` for no expiration. Falls back to `snapshotExpiration` when omitted.\n     */\n    expiration?: number;\n    /**\n     * When `true` (the default), evicted snapshots are deleted immediately;\n     * when `false`, they keep the default expiration.\n     */\n    deleteEvicted?: boolean;\n  };\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\nexport type CreateSandboxParams =\n  | BaseCreateSandboxParams\n  | (Omit<BaseCreateSandboxParams, \"runtime\" | \"source\"> & {\n      source: { type: \"snapshot\"; snapshotId: string };\n    });\n\n/**\n * Parameters for {@link Sandbox.fork}.\n *\n * The fork inherits the source sandbox's current filesystem snapshot and copies\n * as many config fields from the source as the server exposes. Any field set\n * here acts as an override of the copied value.\n *\n * `env` is not copied (encrypted server-side); pass it explicitly to set\n * environment variables on the fork. `runtime` is not exposed: when the\n * source has a snapshot, it is inherited; otherwise it is copied from the\n * source sandbox.\n * @inline\n */\nexport type ForkSandboxParams = Omit<\n  BaseCreateSandboxParams,\n  \"source\" | \"runtime\"\n> & {\n  /**\n   * Name of the source sandbox to fork from.\n   */\n  sourceSandbox: string;\n};\n\n/** @inline */\ninterface GetSandboxParams {\n  /**\n   * The name of the sandbox.\n   */\n  name: string;\n  /**\n   * Whether to resume an existing session. Defaults to true.\n   */\n  resume?: boolean;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n  /**\n   * Called when the sandbox session is resumed (e.g., after a snapshot restore).\n   * Use this to re-warm caches, restore transient state, or run other setup logic.\n   */\n  onResume?: (sandbox: Sandbox) => Promise<void>;\n}\n\n/**\n * Extends both {@link BaseCreateSandboxParams} and {@link GetSandboxParams}\n * (minus `name`, which is required on get but optional here) so that any\n * new parameter added to either flow is picked up automatically. The\n * structural overlap on `signal` / `onResume` is intentional — both\n * interfaces declare them with identical optional types.\n * @inline\n */\ninterface GetOrCreateSandboxParams\n  extends BaseCreateSandboxParams,\n    Omit<GetSandboxParams, \"name\"> {\n  /**\n   * Called once after a sandbox is freshly created (not when an existing\n   * sandbox is retrieved). Use this for one-time setup such as seeding\n   * files or warming caches. The returned promise is awaited before\n   * {@link Sandbox.getOrCreate} resolves.\n   */\n  onCreate?: (sandbox: Sandbox) => Promise<void>;\n}\n\nfunction isSandboxStoppedError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 410;\n}\n\nfunction isNotFoundError(err: unknown): boolean {\n  return err instanceof APIError && err.response.status === 404;\n}\n\nfunction isSnapshotNotFoundError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 410 &&\n    (err.json as any)?.error?.code === \"snapshot_not_found\"\n  );\n}\n\nfunction isSandboxStoppingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_stopping\"\n  );\n}\n\nfunction isSandboxSnapshottingError(err: unknown): boolean {\n  return (\n    err instanceof APIError &&\n    err.response.status === 422 &&\n    (err.json as any)?.error?.code === \"sandbox_snapshotting\"\n  );\n}\n\n/**\n * Serialized representation of a Sandbox for @workflow/serde.\n * Fields `metadata` and `routes` are the original wire format from main.\n * Fields `sandboxMetadata` and `projectId` are added for named-sandboxes.\n */\nexport interface SerializedSandbox {\n  metadata: SandboxSnapshot;\n  routes: SandboxRouteData[];\n  sandboxMetadata?: SandboxMetaData;\n  projectId?: string;\n}\n\n// ============================================================================\n// Sandbox class\n// ============================================================================\n\n/**\n * A Sandbox is a persistent, isolated Linux MicroVMs to run commands in.\n * Use {@link Sandbox.create} or {@link Sandbox.get} to construct.\n * @hideconstructor\n */\nexport class Sandbox {\n  private _client: APIClient | null = null;\n  private readonly projectId: string;\n\n  /**\n   * In-flight resume promise, used to deduplicate concurrent resume calls.\n   */\n  private resumePromise: Promise<void> | null = null;\n\n  /**\n   * Internal Session instance for the current VM.\n   */\n  private session: Session | undefined;\n\n  /**\n   * Internal metadata about the sandbox.\n   */\n  private sandbox: SandboxMetaData;\n\n  /**\n   * Hook that will be executed when a new session is created during resume.\n   */\n  private readonly onResume?: (sandbox: Sandbox) => Promise<void>;\n\n  /**\n   * A `node:fs/promises`-compatible API for interacting with the sandbox filesystem.\n   *\n   * @example\n   * const content = await sandbox.fs.readFile('/etc/hostname', 'utf8');\n   * await sandbox.fs.writeFile('/tmp/hello.txt', 'Hello, world!');\n   * const files = await sandbox.fs.readdir('/tmp');\n   * const stats = await sandbox.fs.stat('/tmp/hello.txt');\n   */\n  public readonly fs: FileSystem;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * The name of this sandbox.\n   */\n  public get name(): string {\n    return this.sandbox.name;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public get routes(): SandboxRouteData[] {\n    return this.currentSession().routes;\n  }\n\n  /**\n   * Whether the sandbox persists the state.\n   */\n  public get persistent(): boolean {\n    return this.sandbox.persistent;\n  }\n\n  /**\n   * The region this sandbox runs in.\n   */\n  public get region(): string | undefined {\n    return this.sandbox.region;\n  }\n\n  /**\n   * Number of virtual CPUs allocated.\n   */\n  public get vcpus(): number | undefined {\n    return this.sandbox.vcpus;\n  }\n\n  /**\n   * Memory allocated in MB.\n   */\n  public get memory(): number | undefined {\n    return this.sandbox.memory;\n  }\n\n  /** Runtime identifier (e.g. \"node24\", \"python3.13\"). */\n  public get runtime(): string | undefined {\n    return this.sandbox.runtime;\n  }\n\n  /**\n   * Cumulative egress bytes across all sessions.\n   */\n  public get totalEgressBytes(): number | undefined {\n    return this.sandbox.totalEgressBytes;\n  }\n\n  /**\n   * Cumulative ingress bytes across all sessions.\n   */\n  public get totalIngressBytes(): number | undefined {\n    return this.sandbox.totalIngressBytes;\n  }\n\n  /**\n   * Cumulative active CPU duration in milliseconds across all sessions.\n   */\n  public get totalActiveCpuDurationMs(): number | undefined {\n    return this.sandbox.totalActiveCpuDurationMs;\n  }\n\n  /**\n   * Cumulative wall-clock duration in milliseconds across all sessions.\n   */\n  public get totalDurationMs(): number | undefined {\n    return this.sandbox.totalDurationMs;\n  }\n\n  /**\n   * When this sandbox was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.sandbox.updatedAt);\n  }\n\n  /**\n   * When the sandbox status was last updated.\n   */\n  public get statusUpdatedAt(): Date | undefined {\n    return this.sandbox.statusUpdatedAt\n      ? new Date(this.sandbox.statusUpdatedAt)\n      : undefined;\n  }\n\n  /**\n   * When this sandbox was created.\n   */\n  public get createdAt(): Date {\n    return new Date(this.sandbox.createdAt);\n  }\n\n  /**\n   * Interactive port.\n   */\n  public get interactivePort(): number | undefined {\n    return this.currentSession().interactivePort;\n  }\n\n  /**\n   * The default working directory of the current session (e.g.\n   * `/vercel/sandbox`).\n   */\n  public get cwd(): string {\n    return this.currentSession().cwd;\n  }\n\n  /**\n   * The status of the current session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.currentSession().status;\n  }\n\n  /**\n   * The default timeout of this sandbox in milliseconds.\n   */\n  public get timeout(): number | undefined {\n    return this.sandbox.timeout;\n  }\n\n  /**\n   * Key-value tags attached to the sandbox.\n   */\n  public get tags(): Record<string, string> | undefined {\n    return this.sandbox.tags;\n  }\n\n  /**\n   * The default network policy of this sandbox.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.sandbox.networkPolicy\n      ? fromAPINetworkPolicy(this.sandbox.networkPolicy)\n      : undefined;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.currentSession().sourceSnapshotId;\n  }\n\n  /**\n   * The current snapshot ID of this sandbox, if any.\n   */\n  public get currentSnapshotId(): string | undefined {\n    return this.sandbox.currentSnapshotId;\n  }\n\n  /**\n   * The default snapshot expiration in milliseconds, if set.\n   */\n  public get snapshotExpiration(): number | undefined {\n    return this.sandbox.snapshotExpiration;\n  }\n\n  /**\n   * The snapshot retention policy (`keep-last-snapshots`) currently configured\n   * on this sandbox, if any.\n   */\n  public get keepLastSnapshots():\n    | { count: number; expiration?: number; deleteEvicted?: boolean }\n    | undefined {\n    return this.sandbox.keepLastSnapshots;\n  }\n\n  /**\n   * The amount of CPU used by the session. Only reported once the VM is stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.currentSession().activeCpuUsageMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.currentSession().networkTransfer;\n  }\n\n  /**\n   * Allow to get a list of sandboxes for a team narrowed to the given params.\n   * It returns both the sandboxes and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Sandbox.list({ namePrefix: \"ci-\" });\n   * for await (const sandbox of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listSandboxes\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSandboxes({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sandboxes\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Serialize a Sandbox instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Sandbox instance to serialize\n   * @returns A plain object containing sandbox metadata and routes\n   */\n  static [WORKFLOW_SERIALIZE](instance: Sandbox): SerializedSandbox {\n    return {\n      metadata: instance.session?._sessionSnapshot!,\n      routes: instance.session?.routes ?? [],\n      sandboxMetadata: instance.sandbox,\n      projectId: instance.projectId,\n    };\n  }\n\n  /**\n   * Deserialize a Sandbox from serialized snapshot data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized sandbox data\n   * @returns The reconstructed Sandbox instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedSandbox): Sandbox {\n    const sandbox = new Sandbox({\n      sandbox: data.sandboxMetadata!,\n      routes: data.routes,\n      projectId: data.projectId,\n    });\n    if (data.metadata) {\n      sandbox.session = new Session({ routes: data.routes, snapshot: data.metadata });\n    }\n    return sandbox;\n  }\n\n  /**\n   * Create a new sandbox.\n   *\n   * @param params - Creation parameters and optional credentials.\n   * @returns A promise resolving to the created {@link Sandbox}.\n   * @example\n   * <caption>Create a sandbox with default options</caption>\n   * const sandbox = await Sandbox.create();\n   *\n   * @example\n   * <caption>Create a sandbox and drop it in the end of the block</caption>\n   * async function fn() {\n   *   await using const sandbox = await Sandbox.create();\n   *   // Sandbox automatically stopped at the end of the lexical scope\n   * }\n   */\n  static async create(\n    params?: WithPrivate<\n      CreateSandboxParams | (CreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.createSandbox({\n      source: params?.source,\n      projectId: credentials.projectId,\n      ports: params?.ports ?? [],\n      timeout: params?.timeout,\n      resources: params?.resources,\n      runtime: params && \"runtime\" in params ? params?.runtime : undefined,\n      networkPolicy: params?.networkPolicy,\n      env: params?.env,\n      tags: params?.tags,\n      snapshotExpiration: params?.snapshotExpiration,\n      keepLastSnapshots: params?.keepLastSnapshots,\n      signal: params?.signal,\n      name: params?.name,\n      persistent: params?.persistent,\n      ...privateParams,\n    });\n\n    return new DisposableSandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params?.onResume,\n    });\n  }\n\n  /**\n   * Fork an existing sandbox into a new one. Any field passed in `params`\n   * overrides the source value.\n   *\n   * If the source sandbox has no current snapshot, falls back to creating a\n   * fresh sandbox with the same copied config plus the source's `runtime`.\n   *\n   * `env` is not copied (encrypted server-side); pass it explicitly to set\n   * environment variables on the fork.\n   *\n   * @param params - Fork parameters and optional credentials.\n   *   `sourceSandbox` is the name of the source sandbox; everything else\n   *   acts as an override.\n   * @returns A promise resolving to the new {@link Sandbox}.\n   *\n   * @example\n   * <caption>Fork with all config copied from the source</caption>\n   * const fork = await Sandbox.fork({ sourceSandbox: \"prod-agent\" });\n   *\n   * @example\n   * <caption>Fork with an explicit new name and overridden vcpus</caption>\n   * const fork = await Sandbox.fork({\n   *   sourceSandbox: \"prod-agent\",\n   *   name: \"forked-prod-agent\",\n   *   resources: { vcpus: 4 },\n   * });\n   */\n  static async fork(\n    params: WithPrivate<ForkSandboxParams | (ForkSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox & AsyncDisposable> {\n    \"use step\";\n    const { sourceSandbox: sourceName, ...overrides } = params;\n\n    // Forward only what `Sandbox.get` consumes; don't leak fork-only inputs.\n    const credentialFields = params as Partial<Credentials>;\n    const sourceSandbox = await Sandbox.get({\n      token: credentialFields.token,\n      projectId: credentialFields.projectId,\n      teamId: credentialFields.teamId,\n      fetch: params.fetch,\n      signal: params.signal,\n      ...getPrivateParams(params),\n      name: sourceName,\n      resume: false,\n    } as Parameters<typeof Sandbox.get>[0]);\n\n    const sourcePorts = sourceSandbox.routes\n      .filter((r) => r.port !== sourceSandbox.interactivePort)\n      .map((r) => r.port);\n\n    const copied: Omit<BaseCreateSandboxParams, \"source\" | \"runtime\"> = {\n      ...(sourceSandbox.vcpus !== undefined && {\n        resources: { vcpus: sourceSandbox.vcpus },\n      }),\n      ...(sourceSandbox.timeout !== undefined && {\n        timeout: sourceSandbox.timeout,\n      }),\n      ...(sourceSandbox.networkPolicy !== undefined && {\n        networkPolicy: sourceSandbox.networkPolicy,\n      }),\n      ...(sourceSandbox.tags !== undefined && { tags: sourceSandbox.tags }),\n      ...(sourcePorts.length > 0 && { ports: sourcePorts }),\n      persistent: sourceSandbox.persistent,\n      ...(sourceSandbox.snapshotExpiration !== undefined && {\n        snapshotExpiration: sourceSandbox.snapshotExpiration,\n      }),\n      ...(sourceSandbox.keepLastSnapshots !== undefined && {\n        keepLastSnapshots: sourceSandbox.keepLastSnapshots,\n      }),\n    };\n\n    const snapshotId = sourceSandbox.currentSnapshotId;\n    if (snapshotId) {\n      return Sandbox.create({\n        ...copied,\n        ...overrides,\n        source: { type: \"snapshot\", snapshotId },\n      } as Parameters<typeof Sandbox.create>[0]);\n    }\n\n    // No snapshot: seed a fresh sandbox using the source's runtime.\n    return Sandbox.create({\n      ...copied,\n      ...(sourceSandbox.runtime !== undefined && {\n        runtime: sourceSandbox.runtime,\n      }),\n      ...overrides,\n    } as Parameters<typeof Sandbox.create>[0]);\n  }\n\n  /**\n   * Retrieve an existing sandbox and resume its session.\n   *\n   * @param params - Get parameters and optional credentials.\n   * @returns A promise resolving to the {@link Sandbox}.\n   */\n  static async get(\n    params: WithPrivate<GetSandboxParams | (GetSandboxParams & Credentials)> &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n\n    const privateParams = getPrivateParams(params);\n    const response = await client.getSandbox({\n      name: params.name,\n      projectId: credentials.projectId,\n      resume: params.resume,\n      signal: params.signal,\n      ...privateParams,\n    });\n\n    const sandbox = new Sandbox({\n      client,\n      session: response.json.session,\n      sandbox: response.json.sandbox,\n      routes: response.json.routes,\n      projectId: credentials.projectId,\n      onResume: params.onResume,\n    });\n\n    if (response.json.resumed && params.onResume) {\n      await params.onResume(sandbox);\n    }\n\n    return sandbox;\n  }\n\n  /**\n   * Retrieve an existing named sandbox, or create a new one if none exists.\n   *\n   * If `name` is omitted, this always creates a new sandbox and fires\n   * `onCreate`. If `name` is provided, it first tries {@link Sandbox.get};\n   * on `not_found` it creates a new sandbox with that name; on\n   * `snapshot_not_found` it deletes the stale named sandbox and creates\n   * a fresh one with the same name.\n   *\n   * @param params - Get/create parameters plus an optional `onCreate` hook.\n   * @returns A promise resolving to the {@link Sandbox}.\n   *\n   * @example\n   * <caption>Idempotent named sandbox with one-time setup</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   name: \"my-workspace\",\n   *   onCreate: async (sbx) => {\n   *     await sbx.writeFiles([\n   *       { path: \"README.md\", content: Buffer.from(\"# Hello\") },\n   *     ]);\n   *   },\n   * });\n   *\n   * @example\n   * <caption>Unnamed — always creates</caption>\n   * const sandbox = await Sandbox.getOrCreate({\n   *   onCreate: async (sbx) => {\n   *     await sbx.runCommand(\"npm\", [\"install\"]);\n   *   },\n   * });\n   */\n  static async getOrCreate(\n    params?: WithPrivate<\n      GetOrCreateSandboxParams | (GetOrCreateSandboxParams & Credentials)\n    > &\n      WithFetchOptions,\n  ): Promise<Sandbox> {\n    \"use step\";\n    // No name → always create, fire onCreate.\n    if (!params?.name) {\n      const sandbox = await Sandbox.create(params);\n      if (params?.onCreate) {\n        await params.onCreate(sandbox);\n      }\n      return sandbox;\n    }\n\n    try {\n      return await Sandbox.get(\n        params as unknown as Parameters<typeof Sandbox.get>[0],\n      );\n    } catch (err) {\n      if (isNotFoundError(err)) {\n        // Sandbox does not exist: re-create it.\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      if (isSnapshotNotFoundError(err)) {\n        // Sandbox exists but the snapshot has expired. Delete it and create\n        // a new one.\n        const credentials = await getCredentials(params);\n        const client = new APIClient({\n          teamId: credentials.teamId,\n          token: credentials.token,\n          fetch: params.fetch,\n        });\n        const privateParams = getPrivateParams(params);\n        try {\n          await client.deleteSandbox({\n            name: params.name,\n            projectId: credentials.projectId,\n            signal: params.signal,\n            ...privateParams,\n          });\n        } catch (deleteErr) {\n          // Tolerate 404 — the named sandbox was already cleaned up by a\n          // concurrent request. Propagate anything else.\n          if (!isNotFoundError(deleteErr)) {\n            throw deleteErr;\n          }\n        }\n\n        const sandbox = await Sandbox.create(params);\n        if (params.onCreate) {\n          await params.onCreate(sandbox);\n        }\n        return sandbox;\n      }\n\n      throw err;\n    }\n  }\n\n  /**\n   * Create a new Sandbox instance.\n   *\n   * @param params.client - Optional API client. If not provided, will be lazily created using global credentials.\n   * @param params.routes - Port-to-subdomain mappings for exposed ports\n   * @param params.sandbox - Sandbox snapshot metadata\n   */\n  constructor({\n    client,\n    routes,\n    session,\n    sandbox,\n    projectId,\n    onResume,\n  }: {\n    client?: APIClient;\n    routes: SandboxRouteData[];\n    session?: SessionMetaData;\n    sandbox: SandboxMetaData;\n    projectId?: string;\n    onResume?: (sandbox: Sandbox) => Promise<void>;\n  }) {\n    this._client = client ?? null;\n    if (session) {\n      this.session = new Session({ client: client!, routes, session });\n    }\n    this.sandbox = sandbox;\n    this.projectId = projectId ?? \"\";\n    this.onResume = onResume;\n    this.fs = new FileSystem(this);\n  }\n\n  /**\n   * Get the current session (the running VM) for this sandbox.\n   *\n   * @returns The {@link Session} instance.\n   */\n  currentSession(): Session {\n    if (!this.session) {\n      throw new Error(\"No active session. Run a command or call resume first.\");\n    }\n    return this.session;\n  }\n\n  /**\n   * Resume this sandbox by creating a new session via `getSandbox`.\n   */\n  private async resume(signal?: AbortSignal): Promise<void> {\n    if (!this.resumePromise) {\n      this.resumePromise = this.doResume(signal).finally(() => {\n        this.resumePromise = null;\n      });\n    }\n    return this.resumePromise;\n  }\n\n  private async doResume(signal?: AbortSignal): Promise<void> {\n    const client = await this.ensureClient();\n    const response = await client.getSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      resume: true,\n      signal,\n    });\n    this.session = new Session({\n      client,\n      routes: response.json.routes,\n      session: response.json.session,\n    });\n    if (this.onResume && response.json.resumed) {\n      await this.onResume(this);\n    }\n  }\n\n  /**\n   * Poll until the current session reaches a terminal state, then resume.\n   */\n  private async waitForStopAndResume(signal?: AbortSignal): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const pollingInterval = 500;\n    let status = this.session!.status;\n\n    while (status === \"stopping\" || status === \"snapshotting\") {\n      await setTimeout(pollingInterval, undefined, { signal });\n      const poll = await client.getSession({\n        sessionId: this.session!.sessionId,\n        signal,\n      });\n      this.session = new Session({\n        client,\n        routes: poll.json.routes,\n        session: poll.json.session,\n      });\n      status = poll.json.session.status;\n    }\n    await this.resume(signal);\n  }\n\n  /**\n   * Execute `fn`, and if the session is stopped/stopping/snapshotting, resume and retry.\n   */\n  private async withResume<T>(\n    fn: () => Promise<T>,\n    signal?: AbortSignal,\n  ): Promise<T> {\n    if (!this.session) {\n      await this.resume(signal);\n    }\n    try {\n      return await fn();\n    } catch (err) {\n      if (isSandboxStoppedError(err)) {\n        await this.resume(signal);\n        return fn();\n      }\n      if (isSandboxStoppingError(err) || isSandboxSnapshottingError(err)) {\n        await this.waitForStopAndResume(signal);\n        return fn();\n      }\n      throw err;\n    }\n  }\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this sandbox.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const signal =\n      typeof commandOrParams === \"string\"\n        ? opts?.signal\n        : commandOrParams.signal;\n    return this.withResume(\n      () => this.session!.runCommand(commandOrParams as any, args, opts),\n      signal,\n    );\n  }\n\n  /**\n   * Internal helper to start a command in the sandbox.\n   *\n   * @param params - Command execution parameters.\n   * @returns A {@link Command} or {@link CommandFinished}, depending on `detached`.\n   * @internal\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.getCommand(cmdId, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a directory in the filesystem of this sandbox.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.mkDir(path, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Open an interactive shell session, resuming the sandbox if needed.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The WebSocket URL and token used to connect to the PTY.\n   */\n  async openInteractive(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ url: string; token: string }> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.openInteractive(opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFile(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Read a file from the filesystem of this sandbox as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.readFileToBuffer(file, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Download a file from the sandbox to the local filesystem.\n   *\n   * @param src - Source file on the sandbox, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.downloadFile(src, dst, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Write files to the filesystem of this sandbox.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path, content, and optional mode (permissions)\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   *\n   * @example\n   * // Write an executable script\n   * await sandbox.writeFiles([\n   *   { path: \"/usr/local/bin/myscript\", content: \"#!/bin/bash\\necho hello\", mode: 0o755 }\n   * ]);\n   */\n  async writeFiles(\n    files: {\n      path: string;\n      content: string | Uint8Array;\n      mode?: number;\n    }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.writeFiles(files, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Get the public domain of a port of this sandbox.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    return this.currentSession().domain(p);\n  }\n\n  /**\n   * Stop the sandbox.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state after stopping, with optional snapshot metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<SandboxSnapshot & { snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    if (!this.session) {\n      throw new Error(\"No active session to stop.\");\n    }\n    const { session, sandbox, snapshot } = await this.session.stop(opts);\n    if (sandbox) {\n      this.sandbox = sandbox;\n    }\n    return Object.assign(session, { snapshot });\n  }\n\n  /**\n   * Update the network policy for this sandbox.\n   *\n   * @deprecated Use {@link Sandbox.update} instead.\n   *\n   * @param networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the network policy is updated.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await sandbox.updateNetworkPolicy({\n   *   allow: [\"*.npmjs.org\", \"github.com\"],\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await sandbox.updateNetworkPolicy({\n   *   allow: {\n   *     \"ai-gateway.vercel.sh\": [{\n   *       transform: [{\n   *         headers: { authorization: \"Bearer ...\" }\n   *       }]\n   *     }],\n   *     \"*\": []\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await sandbox.updateNetworkPolicy(\"deny-all\");\n   */\n  async updateNetworkPolicy(\n    networkPolicy: NetworkPolicy,\n    opts?: { signal?: AbortSignal },\n  ): Promise<NetworkPolicy> {\n    \"use step\";\n    await this.withResume(\n      () => this.session!.update({ networkPolicy: networkPolicy }, opts),\n      opts?.signal,\n    );\n\n    return this.session!.networkPolicy!;\n  }\n\n  /**\n   * Extend the timeout of the sandbox by the specified duration.\n   *\n   * This allows you to extend the lifetime of a sandbox up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await sandbox.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.extendTimeout(duration, opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Create a snapshot from this currently running sandbox. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.createFromSnapshot}.\n   *\n   * Note: this sandbox will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    return this.withResume(\n      () => this.session!.snapshot(opts),\n      opts?.signal,\n    );\n  }\n\n  /**\n   * Update the sandbox configuration.\n   *\n   * When `ports` is provided, it is treated as the full desired port list:\n   * any currently exposed port omitted from the array will be deregistered.\n   *\n   * @param params - Fields to update.\n   * @param opts - Optional abort signal.\n   */\n  async update(\n    params: {\n      persistent?: boolean;\n      resources?: { vcpus?: number };\n      timeout?: number;\n      networkPolicy?: NetworkPolicy;\n      tags?: Record<string, string>;\n      ports?: number[];\n      snapshotExpiration?: number;\n      keepLastSnapshots?: {\n        count: number;\n        expiration?: number;\n        deleteEvicted?: boolean;\n      } | null;\n      currentSnapshotId?: string;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    let resources: { vcpus: number; memory: number } | undefined;\n    if (params.resources?.vcpus) {\n      resources = {\n        vcpus: params.resources.vcpus,\n        memory: params.resources.vcpus * 2048,\n      };\n    }\n\n    // Update the sandbox config. This config will be used on the next session.\n    const response = await client.updateSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      persistent: params.persistent,\n      resources,\n      timeout: params.timeout,\n      networkPolicy: params.networkPolicy,\n      tags: params.tags,\n      ports: params.ports,\n      snapshotExpiration: params.snapshotExpiration,\n      keepLastSnapshots: params.keepLastSnapshots,\n      currentSnapshotId: params.currentSnapshotId,\n      signal: opts?.signal,\n    });\n    this.sandbox = response.json.sandbox;\n    if (params.ports !== undefined && response.json.routes) {\n      this.session?.updateRoutes(response.json.routes);\n    }\n\n    // Update the current session config. This only applies to network policy.\n    if (params.networkPolicy) {\n      try {\n        return await this.session?.update(\n          { networkPolicy: params.networkPolicy },\n          opts,\n        );\n      } catch (err) {\n        if (isSandboxStoppedError(err) || isSandboxStoppingError(err)) {\n          return;\n        }\n        throw err;\n      }\n    }\n  }\n\n  /**\n   * Delete this sandbox.\n   *\n   * After deletion the instance becomes inert — all further API calls will\n   * throw immediately.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.deleteSandbox({\n      name: this.sandbox.name,\n      projectId: this.projectId,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * List sessions (VMs) that have been created for this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of sessions and pagination metadata.\n   */\n  async listSessions(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSessions({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"sessions\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * List snapshots that belong to this sandbox.\n   *\n   * @param params - Optional pagination parameters.\n   * @returns The list of snapshots and pagination metadata.\n   */\n  async listSnapshots(params?: {\n    limit?: number;\n    cursor?: string;\n    sortOrder?: \"asc\" | \"desc\";\n    signal?: AbortSignal;\n  }) {\n    \"use step\";\n    const client = await this.ensureClient();\n    const fetchPage = async (cursor?: string) => {\n      const response = await client.listSnapshots({\n        projectId: this.projectId,\n        name: this.sandbox.name,\n        limit: params?.limit,\n        cursor,\n        sortOrder: params?.sortOrder,\n        signal: params?.signal,\n      });\n      return response.json;\n    };\n    const firstPage = await fetchPage(params?.cursor);\n    return attachPaginator(firstPage, {\n      itemsKey: \"snapshots\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n}\n\n/**\n * A {@link Sandbox} that can automatically be disposed using a `await using` statement.\n *\n * @example\n * {\n *   await using const sandbox = await Sandbox.create();\n * }\n * // Sandbox is automatically stopped here\n */\nclass DisposableSandbox extends Sandbox implements AsyncDisposable {\n  async [Symbol.asyncDispose]() {\n    await this.stop();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;AA8NA,SAAS,sBAAsB,KAAuB;AACpD,QAAO,eAAe,YAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,gBAAgB,KAAuB;AAC9C,QAAO,eAAe,YAAY,IAAI,SAAS,WAAW;;AAG5D,SAAS,wBAAwB,KAAuB;AACtD,QACE,eAAe,YACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,uBAAuB,KAAuB;AACrD,QACE,eAAe,YACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;AAIvC,SAAS,2BAA2B,KAAuB;AACzD,QACE,eAAe,YACf,IAAI,SAAS,WAAW,OACvB,IAAI,MAAc,OAAO,SAAS;;;;;;;AAyBvC,IAAa,UAAb,MAAa,QAAQ;;;;;CAuCnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAM,gBAAgB;AAC1C,OAAK,UAAU,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,OAAe;AACxB,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,SAA6B;AACtC,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,aAAsB;AAC/B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAA4B;AACrC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAA6B;AACtC,SAAO,KAAK,QAAQ;;;CAItB,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,2BAA+C;AACxD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,kBAChB,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,kBAAsC;AAC/C,SAAO,KAAK,gBAAgB,CAAC;;;;;;CAO/B,IAAW,MAAc;AACvB,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,SAAoC;AAC7C,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,UAA8B;AACvC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,OAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ,gBAChB,qBAAqB,KAAK,QAAQ,cAAc,GAChD;;;;;CAMN,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,oBAAwC;AACjD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,qBAAyC;AAClD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,oBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,gBAAgB,CAAC;;;;;CAM/B,IAAW,kBAEG;AACZ,SAAO,KAAK,gBAAgB,CAAC;;;;;;;;;;;;;;;;CAiB/B,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAAoB;AAM3C,WALiB,MAAM,OAAO,cAAc;IAC1C,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,QAAQ,oBAAoB,UAAsC;AAChE,SAAO;GACL,UAAU,SAAS,SAAS;GAC5B,QAAQ,SAAS,SAAS,UAAU,EAAE;GACtC,iBAAiB,SAAS;GAC1B,WAAW,SAAS;GACrB;;;;;;;;;;;CAYH,QAAQ,sBAAsB,MAAkC;EAC9D,MAAM,UAAU,IAAI,QAAQ;GAC1B,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,WAAW,KAAK;GACjB,CAAC;AACF,MAAI,KAAK,SACP,SAAQ,UAAU,IAAI,QAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAU,CAAC;AAEjF,SAAO;;;;;;;;;;;;;;;;;;CAmBT,aAAa,OACX,QAIoC;AACpC;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EAEF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,QAAQ,QAAQ;GAChB,WAAW,YAAY;GACvB,OAAO,QAAQ,SAAS,EAAE;GAC1B,SAAS,QAAQ;GACjB,WAAW,QAAQ;GACnB,SAAS,UAAU,aAAa,SAAS,QAAQ,UAAU;GAC3D,eAAe,QAAQ;GACvB,KAAK,QAAQ;GACb,MAAM,QAAQ;GACd,oBAAoB,QAAQ;GAC5B,mBAAmB,QAAQ;GAC3B,QAAQ,QAAQ;GAChB,MAAM,QAAQ;GACd,YAAY,QAAQ;GACpB,GAAG;GACJ,CAAC;AAEF,SAAO,IAAI,kBAAkB;GAC3B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,QAAQ;GACnB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8BJ,aAAa,KACX,QAEoC;AACpC;EACA,MAAM,EAAE,eAAe,YAAY,GAAG,cAAc;EAGpD,MAAM,mBAAmB;EACzB,MAAM,gBAAgB,MAAM,QAAQ,IAAI;GACtC,OAAO,iBAAiB;GACxB,WAAW,iBAAiB;GAC5B,QAAQ,iBAAiB;GACzB,OAAO,OAAO;GACd,QAAQ,OAAO;GACf,GAAG,iBAAiB,OAAO;GAC3B,MAAM;GACN,QAAQ;GACT,CAAsC;EAEvC,MAAM,cAAc,cAAc,OAC/B,QAAQ,MAAM,EAAE,SAAS,cAAc,gBAAgB,CACvD,KAAK,MAAM,EAAE,KAAK;EAErB,MAAMA,SAA8D;GAClE,GAAI,cAAc,UAAU,UAAa,EACvC,WAAW,EAAE,OAAO,cAAc,OAAO,EAC1C;GACD,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAI,cAAc,kBAAkB,UAAa,EAC/C,eAAe,cAAc,eAC9B;GACD,GAAI,cAAc,SAAS,UAAa,EAAE,MAAM,cAAc,MAAM;GACpE,GAAI,YAAY,SAAS,KAAK,EAAE,OAAO,aAAa;GACpD,YAAY,cAAc;GAC1B,GAAI,cAAc,uBAAuB,UAAa,EACpD,oBAAoB,cAAc,oBACnC;GACD,GAAI,cAAc,sBAAsB,UAAa,EACnD,mBAAmB,cAAc,mBAClC;GACF;EAED,MAAM,aAAa,cAAc;AACjC,MAAI,WACF,QAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAG;GACH,QAAQ;IAAE,MAAM;IAAY;IAAY;GACzC,CAAyC;AAI5C,SAAO,QAAQ,OAAO;GACpB,GAAG;GACH,GAAI,cAAc,YAAY,UAAa,EACzC,SAAS,cAAc,SACxB;GACD,GAAG;GACJ,CAAyC;;;;;;;;CAS5C,aAAa,IACX,QAEkB;AAClB;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;EAEF,MAAM,gBAAgB,iBAAiB,OAAO;EAC9C,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,OAAO;GACb,WAAW,YAAY;GACvB,QAAQ,OAAO;GACf,QAAQ,OAAO;GACf,GAAG;GACJ,CAAC;EAEF,MAAM,UAAU,IAAI,QAAQ;GAC1B;GACA,SAAS,SAAS,KAAK;GACvB,SAAS,SAAS,KAAK;GACvB,QAAQ,SAAS,KAAK;GACtB,WAAW,YAAY;GACvB,UAAU,OAAO;GAClB,CAAC;AAEF,MAAI,SAAS,KAAK,WAAW,OAAO,SAClC,OAAM,OAAO,SAAS,QAAQ;AAGhC,SAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCT,aAAa,YACX,QAIkB;AAClB;AAEA,MAAI,CAAC,QAAQ,MAAM;GACjB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,OAAI,QAAQ,SACV,OAAM,OAAO,SAAS,QAAQ;AAEhC,UAAO;;AAGT,MAAI;AACF,UAAO,MAAM,QAAQ,IACnB,OACD;WACM,KAAK;AACZ,OAAI,gBAAgB,IAAI,EAAE;IAExB,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,OAAI,wBAAwB,IAAI,EAAE;IAGhC,MAAM,cAAc,MAAM,eAAe,OAAO;IAChD,MAAM,SAAS,IAAI,UAAU;KAC3B,QAAQ,YAAY;KACpB,OAAO,YAAY;KACnB,OAAO,OAAO;KACf,CAAC;IACF,MAAM,gBAAgB,iBAAiB,OAAO;AAC9C,QAAI;AACF,WAAM,OAAO,cAAc;MACzB,MAAM,OAAO;MACb,WAAW,YAAY;MACvB,QAAQ,OAAO;MACf,GAAG;MACJ,CAAC;aACK,WAAW;AAGlB,SAAI,CAAC,gBAAgB,UAAU,CAC7B,OAAM;;IAIV,MAAM,UAAU,MAAM,QAAQ,OAAO,OAAO;AAC5C,QAAI,OAAO,SACT,OAAM,OAAO,SAAS,QAAQ;AAEhC,WAAO;;AAGT,SAAM;;;;;;;;;;CAWV,YAAY,EACV,QACA,QACA,SACA,SACA,WACA,YAQC;OArnBK,UAA4B;OAM5B,gBAAsC;AAgnB5C,OAAK,UAAU,UAAU;AACzB,MAAI,QACF,MAAK,UAAU,IAAI,QAAQ;GAAU;GAAS;GAAQ;GAAS,CAAC;AAElE,OAAK,UAAU;AACf,OAAK,YAAY,aAAa;AAC9B,OAAK,WAAW;AAChB,OAAK,KAAK,IAAI,WAAW,KAAK;;;;;;;CAQhC,iBAA0B;AACxB,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,yDAAyD;AAE3E,SAAO,KAAK;;;;;CAMd,MAAc,OAAO,QAAqC;AACxD,MAAI,CAAC,KAAK,cACR,MAAK,gBAAgB,KAAK,SAAS,OAAO,CAAC,cAAc;AACvD,QAAK,gBAAgB;IACrB;AAEJ,SAAO,KAAK;;CAGd,MAAc,SAAS,QAAqC;EAC1D,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,WAAW;GACvC,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ;GACR;GACD,CAAC;AACF,OAAK,UAAU,IAAI,QAAQ;GACzB;GACA,QAAQ,SAAS,KAAK;GACtB,SAAS,SAAS,KAAK;GACxB,CAAC;AACF,MAAI,KAAK,YAAY,SAAS,KAAK,QACjC,OAAM,KAAK,SAAS,KAAK;;;;;CAO7B,MAAc,qBAAqB,QAAqC;AACtE;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,kBAAkB;EACxB,IAAI,SAAS,KAAK,QAAS;AAE3B,SAAO,WAAW,cAAc,WAAW,gBAAgB;AACzD,SAAM,WAAW,iBAAiB,QAAW,EAAE,QAAQ,CAAC;GACxD,MAAM,OAAO,MAAM,OAAO,WAAW;IACnC,WAAW,KAAK,QAAS;IACzB;IACD,CAAC;AACF,QAAK,UAAU,IAAI,QAAQ;IACzB;IACA,QAAQ,KAAK,KAAK;IAClB,SAAS,KAAK,KAAK;IACpB,CAAC;AACF,YAAS,KAAK,KAAK,QAAQ;;AAE7B,QAAM,KAAK,OAAO,OAAO;;;;;CAM3B,MAAc,WACZ,IACA,QACY;AACZ,MAAI,CAAC,KAAK,QACR,OAAM,KAAK,OAAO,OAAO;AAE3B,MAAI;AACF,UAAO,MAAM,IAAI;WACV,KAAK;AACZ,OAAI,sBAAsB,IAAI,EAAE;AAC9B,UAAM,KAAK,OAAO,OAAO;AACzB,WAAO,IAAI;;AAEb,OAAI,uBAAuB,IAAI,IAAI,2BAA2B,IAAI,EAAE;AAClE,UAAM,KAAK,qBAAqB,OAAO;AACvC,WAAO,IAAI;;AAEb,SAAM;;;CAuCV,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SACJ,OAAO,oBAAoB,WACvB,MAAM,SACN,gBAAgB;AACtB,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,iBAAwB,MAAM,KAAK,EAClE,OACD;;;;;;;;;CAUH,MAAM,WACJ,OACA,MACkB;AAClB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,MAAM,MAAM,MAAc,MAAgD;AACxE;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,MAAM,MAAM,KAAK,EACrC,MAAM,OACP;;;;;;;;;CAUH,MAAM,gBAAgB,MAEsB;AAC1C;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,gBAAgB,KAAK,EACzC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,SACJ,MACA,MACuC;AACvC;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,MAAM,KAAK,EACxC,MAAM,OACP;;;;;;;;;;CAWH,MAAM,iBACJ,MACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,iBAAiB,MAAM,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;CAaH,MAAM,aACJ,KACA,KACA,MACwB;AACxB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,aAAa,KAAK,KAAK,KAAK,EAChD,MAAM,OACP;;;;;;;;;;;;;;;;;;CAmBH,MAAM,WACJ,OAKA,MACA;AACA;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,WAAW,OAAO,KAAK,EAC3C,MAAM,OACP;;;;;;;;;CAUH,OAAO,GAAmB;AACxB,SAAO,KAAK,gBAAgB,CAAC,OAAO,EAAE;;;;;;;;;CAUxC,MAAM,KAAK,MAEoD;AAC7D;AACA,MAAI,CAAC,KAAK,QACR,OAAM,IAAI,MAAM,6BAA6B;EAE/C,MAAM,EAAE,SAAS,SAAS,aAAa,MAAM,KAAK,QAAQ,KAAK,KAAK;AACpE,MAAI,QACF,MAAK,UAAU;AAEjB,SAAO,OAAO,OAAO,SAAS,EAAE,UAAU,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoC7C,MAAM,oBACJ,eACA,MACwB;AACxB;AACA,QAAM,KAAK,iBACH,KAAK,QAAS,OAAO,EAAiB,eAAe,EAAE,KAAK,EAClE,MAAM,OACP;AAED,SAAO,KAAK,QAAS;;;;;;;;;;;;;;;;;;CAmBvB,MAAM,cACJ,UACA,MACe;AACf;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,cAAc,UAAU,KAAK,EACjD,MAAM,OACP;;;;;;;;;;;;;CAcH,MAAM,SAAS,MAGO;AACpB;AACA,SAAO,KAAK,iBACJ,KAAK,QAAS,SAAS,KAAK,EAClC,MAAM,OACP;;;;;;;;;;;CAYH,MAAM,OACJ,QAeA,MACe;AACf;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,IAAIC;AACJ,MAAI,OAAO,WAAW,MACpB,aAAY;GACV,OAAO,OAAO,UAAU;GACxB,QAAQ,OAAO,UAAU,QAAQ;GAClC;EAIH,MAAM,WAAW,MAAM,OAAO,cAAc;GAC1C,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,YAAY,OAAO;GACnB;GACA,SAAS,OAAO;GAChB,eAAe,OAAO;GACtB,MAAM,OAAO;GACb,OAAO,OAAO;GACd,oBAAoB,OAAO;GAC3B,mBAAmB,OAAO;GAC1B,mBAAmB,OAAO;GAC1B,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAU,SAAS,KAAK;AAC7B,MAAI,OAAO,UAAU,UAAa,SAAS,KAAK,OAC9C,MAAK,SAAS,aAAa,SAAS,KAAK,OAAO;AAIlD,MAAI,OAAO,cACT,KAAI;AACF,UAAO,MAAM,KAAK,SAAS,OACzB,EAAE,eAAe,OAAO,eAAe,EACvC,KACD;WACM,KAAK;AACZ,OAAI,sBAAsB,IAAI,IAAI,uBAAuB,IAAI,CAC3D;AAEF,SAAM;;;;;;;;;CAWZ,MAAM,OAAO,MAAgD;AAC3D;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,cAAc;GACzB,MAAM,KAAK,QAAQ;GACnB,WAAW,KAAK;GAChB,QAAQ,MAAM;GACf,CAAC;;;;;;;;CASJ,MAAM,aAAa,QAKhB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,aAAa;IACzC,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,MAAM,cAAc,QAKjB;AACD;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,YAAY,OAAO,WAAoB;AAS3C,WARiB,MAAM,OAAO,cAAc;IAC1C,WAAW,KAAK;IAChB,MAAM,KAAK,QAAQ;IACnB,OAAO,QAAQ;IACf;IACA,WAAW,QAAQ;IACnB,QAAQ,QAAQ;IACjB,CAAC,EACc;;AAGlB,SAAO,gBADW,MAAM,UAAU,QAAQ,OAAO,EACf;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;;;;;AAaN,IAAM,oBAAN,cAAgC,QAAmC;CACjE,OAAO,OAAO,gBAAgB;AAC5B,QAAM,KAAK,MAAM"}

dist/session.cjs

@@ -315,2 +315,20 @@ const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
 	/**
+	* Open an interactive shell session. Returns the WebSocket URL and token the
+	* client uses to connect to the controller-hosted PTY.
+	*
+	* @param opts - Optional parameters.
+	* @param opts.signal - An AbortSignal to cancel the operation.
+	*/
+	async openInteractive(opts) {
+		"use step";
+		const { json } = await (await this.ensureClient()).openInteractive({
+			sessionId: this.session.id,
+			signal: opts?.signal
+		});
+		return {
+			url: json.url,
+			token: json.token
+		};
+	}
+	/**
 	* Read a file from the filesystem of this session as a stream.
@@ -317,0 +335,0 @@ *

dist/session.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"session.cjs","names":["getCredentials","APIClient","WORKFLOW_SERIALIZE","WORKFLOW_DESERIALIZE","toSandboxSnapshot","Command","params: RunCommandParams","command","CommandFinished","path","consumeReadable","Snapshot"],"sources":["../src/session.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport { type SessionMetaData, type SandboxRouteData, type SandboxMetaData, type SnapshotMetadata, APIClient } from \"./api-client/index.js\";\nimport type { Writable } from \"stream\";\nimport { pipeline } from \"stream/promises\";\nimport { createWriteStream } from \"fs\";\nimport { mkdir } from \"fs/promises\";\nimport { dirname, resolve } from \"path\";\nimport { Command, CommandFinished } from \"./command.js\";\nimport { Snapshot } from \"./snapshot.js\";\nimport { consumeReadable } from \"./utils/consume-readable.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyRule,\n  NetworkTransformer,\n} from \"./network-policy.js\";\nimport { toSandboxSnapshot, type SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport { getCredentials } from \"./utils/get-credentials.js\";\n\nexport type { NetworkPolicy, NetworkPolicyRule, NetworkTransformer };\n\n/**\n * Serialized representation of a Session for @workflow/serde.\n */\nexport interface SerializedSession {\n  session: SandboxSnapshot;\n  routes: SandboxRouteData[];\n}\n\n/** @inline */\nexport interface RunCommandParams {\n  /**\n   * The command to execute\n   */\n  cmd: string;\n  /**\n   * Arguments to pass to the command\n   */\n  args?: string[];\n  /**\n   * Working directory to execute the command in\n   */\n  cwd?: string;\n  /**\n   * Environment variables to set for this command\n   */\n  env?: Record<string, string>;\n  /**\n   * If true, execute this command with root privileges. Defaults to false.\n   */\n  sudo?: boolean;\n  /**\n   * If true, the command will return without waiting for `exitCode`\n   */\n  detached?: boolean;\n  /**\n   * A `Writable` stream where `stdout` from the command will be piped\n   */\n  stdout?: Writable;\n  /**\n   * A `Writable` stream where `stderr` from the command will be piped\n   */\n  stderr?: Writable;\n  /**\n   * An AbortSignal to cancel the command execution\n   */\n  signal?: AbortSignal;\n  /**\n   * Maximum time in milliseconds the command may run before it is killed with\n   * SIGKILL. The timeout is enforced by the sandbox at exec time, so it applies\n   * whether or not the command is awaited (including `detached: true`).\n   */\n  timeoutMs?: number;\n}\n\n/**\n * A Session represents a running VM instance within a {@link Sandbox}.\n *\n * Obtain a session via {@link Sandbox.currentSession}.\n */\nexport class Session {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Sandbox was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * Uses getCredentials() which resolves from OIDC or env vars.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public readonly routes: SandboxRouteData[];\n\n  /**\n   * Internal metadata about the current session.\n   */\n  private session: SandboxSnapshot;\n\n  private get client(): APIClient {\n    if (!this._client) throw new Error(\"API client not initialized\");\n    return this._client;\n  }\n\n  /** @internal */\n  get _sessionSnapshot(): SandboxSnapshot {\n    return this.session;\n  }\n\n  /**\n   * Unique ID of this session.\n   */\n  public get sessionId(): string {\n    return this.session.id;\n  }\n\n  public get interactivePort(): number | undefined {\n    return this.session.interactivePort ?? undefined;\n  }\n\n  /**\n   * The status of this session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.session.status;\n  }\n\n  /**\n   * The creation date of this session.\n   */\n  public get createdAt(): Date {\n    return new Date(this.session.createdAt);\n  }\n\n  /**\n   * The timeout of this session in milliseconds.\n   */\n  public get timeout(): number {\n    return this.session.timeout;\n  }\n\n  /**\n   * The network policy of this session.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.session.networkPolicy;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.session.sourceSnapshotId;\n  }\n\n  /**\n   * Memory allocated to this session in MB.\n   */\n  public get memory(): number {\n    return this.session.memory;\n  }\n\n  /**\n   * Number of vCPUs allocated to this session.\n   */\n  public get vcpus(): number {\n    return this.session.vcpus;\n  }\n\n  /**\n   * The region where this session is hosted.\n   */\n  public get region(): string {\n    return this.session.region;\n  }\n\n  /**\n   * Runtime identifier (e.g. \"node24\", \"python3.13\").\n   */\n  public get runtime(): string {\n    return this.session.runtime;\n  }\n\n  /**\n   * The working directory of this session.\n   */\n  public get cwd(): string {\n    return this.session.cwd;\n  }\n\n  /**\n   * When this session was requested.\n   */\n  public get requestedAt(): Date {\n    return new Date(this.session.requestedAt);\n  }\n\n  /**\n   * When this session started running.\n   */\n  public get startedAt(): Date | undefined {\n    return this.session.startedAt != null\n      ? new Date(this.session.startedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was requested to stop.\n   */\n  public get requestedStopAt(): Date | undefined {\n    return this.session.requestedStopAt != null\n      ? new Date(this.session.requestedStopAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was stopped.\n   */\n  public get stoppedAt(): Date | undefined {\n    return this.session.stoppedAt != null\n      ? new Date(this.session.stoppedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was aborted.\n   */\n  public get abortedAt(): Date | undefined {\n    return this.session.abortedAt != null\n      ? new Date(this.session.abortedAt)\n      : undefined;\n  }\n\n  /**\n   * The wall-clock duration of this session in milliseconds.\n   */\n  public get duration(): number | undefined {\n    return this.session.duration;\n  }\n\n  /**\n   * When a snapshot was requested for this session.\n   */\n  public get snapshottedAt(): Date | undefined {\n    return this.session.snapshottedAt != null\n      ? new Date(this.session.snapshottedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.session.updatedAt);\n  }\n\n  /**\n   * The amount of active CPU used by the session. Only reported once the VM is\n   * stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.session.activeCpuDurationMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM\n   * is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.session.networkTransfer;\n  }\n\n  /**\n   * Serialize a Session instance to plain data for @workflow/serde.\n   *\n   * Although Sandbox handles top-level serialization, Session needs these\n   * methods so the Workflow SWC compiler can resolve the class by name.\n   * The `new Session(...)` self-reference in WORKFLOW_DESERIALIZE forces\n   * rolldown to preserve the class name in the compiled output.\n   */\n  static [WORKFLOW_SERIALIZE](instance: Session): SerializedSession {\n    return {\n      session: instance.session,\n      routes: instance.routes,\n    };\n  }\n\n  static [WORKFLOW_DESERIALIZE](data: SerializedSession): Session {\n    return new Session({ routes: data.routes, snapshot: data.session });\n  }\n\n  constructor(params: {\n    client: APIClient;\n    routes: SandboxRouteData[];\n    session: SessionMetaData;\n  } | {\n    /** @internal – used during deserialization with an already-converted snapshot */\n    routes: SandboxRouteData[];\n    snapshot: SandboxSnapshot;\n  }) {\n    this.routes = params.routes;\n    if (\"snapshot\" in params) {\n      this.session = params.snapshot;\n    } else {\n      this._client = params.client;\n      this.session = toSandboxSnapshot(params.session);\n    }\n  }\n\n  /** @internal */\n  updateRoutes(routes: SandboxRouteData[]): void {\n    (this as { routes: SandboxRouteData[] }).routes = routes;\n  }\n\n  /**\n   * Get a previously run command by its ID.\n   *\n   * @param cmdId - ID of the command to retrieve\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A {@link Command} instance representing the command\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const command = await client.getCommand({\n      sessionId: this.session.id,\n      cmdId,\n      signal: opts?.signal,\n    });\n\n    return new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: command.json.command,\n    });\n  }\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const params: RunCommandParams =\n      typeof commandOrParams === \"string\"\n        ? {\n            cmd: commandOrParams,\n            args,\n            signal: opts?.signal,\n            timeoutMs: opts?.timeoutMs,\n          }\n        : commandOrParams;\n    const wait = params.detached ? false : true;\n    const pipeLogs = async (command: Command): Promise<void> => {\n      if (!params.stdout && !params.stderr) {\n        return;\n      }\n\n      try {\n        for await (const log of command.logs({ signal: params.signal })) {\n          if (log.stream === \"stdout\") {\n            params.stdout?.write(log.data);\n          } else if (log.stream === \"stderr\") {\n            params.stderr?.write(log.data);\n          }\n        }\n      } catch (err) {\n        if (params.signal?.aborted) {\n          return;\n        }\n        throw err;\n      }\n    };\n\n    if (wait) {\n      const commandStream = await client.runCommand({\n        sessionId: this.session.id,\n        command: params.cmd,\n        args: params.args ?? [],\n        cwd: params.cwd,\n        env: params.env ?? {},\n        sudo: params.sudo ?? false,\n        wait: true,\n        timeout: params.timeoutMs,\n        signal: params.signal,\n      });\n\n      const command = new Command({\n        client,\n        sessionId: this.session.id,\n        cmd: commandStream.command,\n      });\n\n      const [finished] = await Promise.all([\n        commandStream.finished,\n        pipeLogs(command),\n      ]);\n      return new CommandFinished({\n        client,\n        sessionId: this.session.id,\n        cmd: finished,\n        exitCode: finished.exitCode ?? 0,\n      });\n    }\n\n    const commandResponse = await client.runCommand({\n      sessionId: this.session.id,\n      command: params.cmd,\n      args: params.args ?? [],\n      cwd: params.cwd,\n      env: params.env ?? {},\n      sudo: params.sudo ?? false,\n      timeout: params.timeoutMs,\n      signal: params.signal,\n    });\n\n    const command = new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: commandResponse.json.command,\n    });\n\n    void pipeLogs(command).catch((err) => {\n      if (params.signal?.aborted) {\n        return;\n      }\n      (params.stderr ?? params.stdout)?.emit(\"error\", err);\n    });\n\n    return command;\n  }\n\n  /**\n   * Create a directory in the filesystem of this session.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.mkDir({\n      sessionId: this.session.id,\n      path: path,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    return consumeReadable(stream);\n  }\n\n  /**\n   * Download a file from the session to the local filesystem.\n   *\n   * @param src - Source file on the session, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    if (!src?.path) {\n      throw new Error(\"downloadFile: source path is required\");\n    }\n\n    if (!dst?.path) {\n      throw new Error(\"downloadFile: destination path is required\");\n    }\n\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: src.path,\n      cwd: src.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    try {\n      const dstPath = resolve(dst.cwd ?? \"\", dst.path);\n      if (opts?.mkdirRecursive) {\n        await mkdir(dirname(dstPath), { recursive: true });\n      }\n      await pipeline(stream, createWriteStream(dstPath), {\n        signal: opts?.signal,\n      });\n      return dstPath;\n    } finally {\n      stream.destroy();\n    }\n  }\n\n  /**\n   * Write files to the filesystem of this session.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path and stream/buffer contents\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   */\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array; mode?: number }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.writeFiles({\n      sessionId: this.session.id,\n      cwd: this.session.cwd,\n      extractDir: \"/\",\n      files: files,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Get the public domain of a port of this session.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    const route = this.routes.find(({ port }) => port == p);\n    if (route) {\n      return `https://${route.subdomain}.vercel.run`;\n    } else {\n      throw new Error(`No route for port ${p}`);\n    }\n  }\n\n  /**\n   * Stop this session.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state and optional sandbox metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ session: SandboxSnapshot; sandbox?: SandboxMetaData; snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.stopSession({\n      sessionId: this.session.id,\n      signal: opts?.signal,\n    });\n    this.session = toSandboxSnapshot(response.json.session);\n    return { session: this.session, sandbox: response.json.sandbox, snapshot: response.json.snapshot };\n  }\n\n  /**\n   * Update the current session's settings.\n   *\n   * @param params - Fields to update.\n   * @param params.networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: [\"*.npmjs.org\", \"github.com\"],\n   *   }\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: {\n   *       \"ai-gateway.vercel.sh\": [{\n   *         transform: [{\n   *           headers: { authorization: \"Bearer ...\" }\n   *         }]\n   *       }],\n   *       \"*\": []\n   *     }\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await session.update({ networkPolicy: \"deny-all\" });\n   */\n  async update(\n    params: {\n      networkPolicy?: NetworkPolicy;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    if (params.networkPolicy !== undefined) {\n      const client = await this.ensureClient();\n      const response = await client.updateNetworkPolicy({\n        sessionId: this.session.id,\n        networkPolicy: params.networkPolicy,\n        signal: opts?.signal,\n      });\n\n      // Update the internal session with the new network policy\n      this.session = toSandboxSnapshot(response.json.session);\n    }\n  }\n\n  /**\n   * Extend the timeout of the session by the specified duration.\n   *\n   * This allows you to extend the lifetime of a session up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * const session = sandbox.currentSession();\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await session.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.extendTimeout({\n      sessionId: this.session.id,\n      duration,\n      signal: opts?.signal,\n    });\n\n    // Update the internal sandbox metadata with the new timeout value\n    this.session = toSandboxSnapshot(response.json.session);\n  }\n\n  /**\n   * Create a snapshot from this currently running session. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.create}.\n   *\n   * Note: this session will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.createSnapshot({\n      sessionId: this.session.id,\n      expiration: opts?.expiration,\n      signal: opts?.signal,\n    });\n\n    this.session = toSandboxSnapshot(response.json.session);\n\n    return new Snapshot({\n      client,\n      snapshot: response.json.snapshot,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA+EA,IAAa,UAAb,MAAa,QAAQ;;;;;;;;CAUnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAMA,wCAAgB;AAC1C,OAAK,UAAU,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;CAcd,IAAY,SAAoB;AAC9B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAChE,SAAO,KAAK;;;CAId,IAAI,mBAAoC;AACtC,SAAO,KAAK;;;;;CAMd,IAAW,YAAoB;AAC7B,SAAO,KAAK,QAAQ;;CAGtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ,mBAAmB;;;;;CAMzC,IAAW,SAAoC;AAC7C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAAgB;AACzB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,MAAc;AACvB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,cAAoB;AAC7B,SAAO,IAAI,KAAK,KAAK,QAAQ,YAAY;;;;;CAM3C,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,mBAAmB,OACnC,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,WAA+B;AACxC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAAkC;AAC3C,SAAO,KAAK,QAAQ,iBAAiB,OACjC,IAAI,KAAK,KAAK,QAAQ,cAAc,GACpC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;;CAOzC,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,kBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;;;;;;CAWtB,QAAQC,qCAAoB,UAAsC;AAChE,SAAO;GACL,SAAS,SAAS;GAClB,QAAQ,SAAS;GAClB;;CAGH,QAAQC,uCAAsB,MAAkC;AAC9D,SAAO,IAAI,QAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAS,CAAC;;CAGrE,YAAY,QAQT;OAzOK,UAA4B;AA0OlC,OAAK,SAAS,OAAO;AACrB,MAAI,cAAc,OAChB,MAAK,UAAU,OAAO;OACjB;AACL,QAAK,UAAU,OAAO;AACtB,QAAK,UAAUC,2CAAkB,OAAO,QAAQ;;;;CAKpD,aAAa,QAAkC;AAC7C,EAAC,KAAwC,SAAS;;;;;;;;;;CAWpD,MAAM,WACJ,OACA,MACkB;AAClB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,UAAU,MAAM,OAAO,WAAW;GACtC,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,IAAIC,wBAAQ;GACjB;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,QAAQ,KAAK;GACnB,CAAC;;CAsCJ,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAMC,SACJ,OAAO,oBAAoB,WACvB;GACE,KAAK;GACL;GACA,QAAQ,MAAM;GACd,WAAW,MAAM;GAClB,GACD;EACN,MAAM,OAAO,OAAO,WAAW,QAAQ;EACvC,MAAM,WAAW,OAAO,cAAoC;AAC1D,OAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAC5B;AAGF,OAAI;AACF,eAAW,MAAM,OAAOC,UAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAC7D,KAAI,IAAI,WAAW,SACjB,QAAO,QAAQ,MAAM,IAAI,KAAK;aACrB,IAAI,WAAW,SACxB,QAAO,QAAQ,MAAM,IAAI,KAAK;YAG3B,KAAK;AACZ,QAAI,OAAO,QAAQ,QACjB;AAEF,UAAM;;;AAIV,MAAI,MAAM;GACR,MAAM,gBAAgB,MAAM,OAAO,WAAW;IAC5C,WAAW,KAAK,QAAQ;IACxB,SAAS,OAAO;IAChB,MAAM,OAAO,QAAQ,EAAE;IACvB,KAAK,OAAO;IACZ,KAAK,OAAO,OAAO,EAAE;IACrB,MAAM,OAAO,QAAQ;IACrB,MAAM;IACN,SAAS,OAAO;IAChB,QAAQ,OAAO;IAChB,CAAC;GAEF,MAAMA,YAAU,IAAIF,wBAAQ;IAC1B;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK,cAAc;IACpB,CAAC;GAEF,MAAM,CAAC,YAAY,MAAM,QAAQ,IAAI,CACnC,cAAc,UACd,SAASE,UAAQ,CAClB,CAAC;AACF,UAAO,IAAIC,gCAAgB;IACzB;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK;IACL,UAAU,SAAS,YAAY;IAChC,CAAC;;EAGJ,MAAM,kBAAkB,MAAM,OAAO,WAAW;GAC9C,WAAW,KAAK,QAAQ;GACxB,SAAS,OAAO;GAChB,MAAM,OAAO,QAAQ,EAAE;GACvB,KAAK,OAAO;GACZ,KAAK,OAAO,OAAO,EAAE;GACrB,MAAM,OAAO,QAAQ;GACrB,SAAS,OAAO;GAChB,QAAQ,OAAO;GAChB,CAAC;EAEF,MAAM,UAAU,IAAIH,wBAAQ;GAC1B;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,gBAAgB,KAAK;GAC3B,CAAC;AAEF,EAAK,SAAS,QAAQ,CAAC,OAAO,QAAQ;AACpC,OAAI,OAAO,QAAQ,QACjB;AAEF,IAAC,OAAO,UAAU,OAAO,SAAS,KAAK,SAAS,IAAI;IACpD;AAEF,SAAO;;;;;;;;;CAUT,MAAM,MAAM,QAAc,MAAgD;AACxE;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,MAAM;GACjB,WAAW,KAAK,QAAQ;GACxB,MAAMI;GACN,QAAQ,MAAM;GACf,CAAC;;;;;;;;;;CAWJ,MAAM,SACJ,MACA,MACuC;AACvC;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,SAAS;GACrB,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;;;;;;;;;;CAWJ,MAAM,iBACJ,MACA,MACwB;AACxB;EAEA,MAAM,SAAS,OADA,MAAM,KAAK,cAAc,EACZ,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,SAAOC,yCAAgB,OAAO;;;;;;;;;;;;CAahC,MAAM,aACJ,KACA,KACA,MACwB;AACxB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;AACxC,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,wCAAwC;AAG1D,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,SAAS,MAAM,OAAO,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,IAAI;GACV,KAAK,IAAI;GACT,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,MAAI;GACF,MAAM,4BAAkB,IAAI,OAAO,IAAI,IAAI,KAAK;AAChD,OAAI,MAAM,eACR,gDAAoB,QAAQ,EAAE,EAAE,WAAW,MAAM,CAAC;AAEpD,uCAAe,kCAA0B,QAAQ,EAAE,EACjD,QAAQ,MAAM,QACf,CAAC;AACF,UAAO;YACC;AACR,UAAO,SAAS;;;;;;;;;;;;;CAcpB,MAAM,WACJ,OACA,MACA;AACA;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,WAAW;GACvB,WAAW,KAAK,QAAQ;GACxB,KAAK,KAAK,QAAQ;GAClB,YAAY;GACL;GACP,QAAQ,MAAM;GACf,CAAC;;;;;;;;;CAUJ,OAAO,GAAmB;EACxB,MAAM,QAAQ,KAAK,OAAO,MAAM,EAAE,WAAW,QAAQ,EAAE;AACvD,MAAI,MACF,QAAO,WAAW,MAAM,UAAU;MAElC,OAAM,IAAI,MAAM,qBAAqB,IAAI;;;;;;;;;CAW7C,MAAM,KAAK,MAEuF;AAChG;EAEA,MAAM,WAAW,OADF,MAAM,KAAK,cAAc,EACV,YAAY;GACxC,WAAW,KAAK,QAAQ;GACxB,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAUN,2CAAkB,SAAS,KAAK,QAAQ;AACvD,SAAO;GAAE,SAAS,KAAK;GAAS,SAAS,SAAS,KAAK;GAAS,UAAU,SAAS,KAAK;GAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCpG,MAAM,OACJ,QAGA,MACe;AACf;AACA,MAAI,OAAO,kBAAkB,OAS3B,MAAK,UAAUA,4CAPE,OADF,MAAM,KAAK,cAAc,EACV,oBAAoB;GAChD,WAAW,KAAK,QAAQ;GACxB,eAAe,OAAO;GACtB,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;;;;;;;CAqB3D,MAAM,cACJ,UACA,MACe;AACf;AASA,OAAK,UAAUA,4CAPE,OADF,MAAM,KAAK,cAAc,EACV,cAAc;GAC1C,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;CAczD,MAAM,SAAS,MAGO;AACpB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,eAAe;GAC3C,WAAW,KAAK,QAAQ;GACxB,YAAY,MAAM;GAClB,QAAQ,MAAM;GACf,CAAC;AAEF,OAAK,UAAUA,2CAAkB,SAAS,KAAK,QAAQ;AAEvD,SAAO,IAAIO,0BAAS;GAClB;GACA,UAAU,SAAS,KAAK;GACzB,CAAC"}
+{"version":3,"file":"session.cjs","names":["getCredentials","APIClient","WORKFLOW_SERIALIZE","WORKFLOW_DESERIALIZE","toSandboxSnapshot","Command","params: RunCommandParams","command","CommandFinished","path","consumeReadable","Snapshot"],"sources":["../src/session.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport { type SessionMetaData, type SandboxRouteData, type SandboxMetaData, type SnapshotMetadata, APIClient } from \"./api-client/index.js\";\nimport type { Writable } from \"stream\";\nimport { pipeline } from \"stream/promises\";\nimport { createWriteStream } from \"fs\";\nimport { mkdir } from \"fs/promises\";\nimport { dirname, resolve } from \"path\";\nimport { Command, CommandFinished } from \"./command.js\";\nimport { Snapshot } from \"./snapshot.js\";\nimport { consumeReadable } from \"./utils/consume-readable.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyRule,\n  NetworkTransformer,\n} from \"./network-policy.js\";\nimport { toSandboxSnapshot, type SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport { getCredentials } from \"./utils/get-credentials.js\";\n\nexport type { NetworkPolicy, NetworkPolicyRule, NetworkTransformer };\n\n/**\n * Serialized representation of a Session for @workflow/serde.\n */\nexport interface SerializedSession {\n  session: SandboxSnapshot;\n  routes: SandboxRouteData[];\n}\n\n/** @inline */\nexport interface RunCommandParams {\n  /**\n   * The command to execute\n   */\n  cmd: string;\n  /**\n   * Arguments to pass to the command\n   */\n  args?: string[];\n  /**\n   * Working directory to execute the command in\n   */\n  cwd?: string;\n  /**\n   * Environment variables to set for this command\n   */\n  env?: Record<string, string>;\n  /**\n   * If true, execute this command with root privileges. Defaults to false.\n   */\n  sudo?: boolean;\n  /**\n   * If true, the command will return without waiting for `exitCode`\n   */\n  detached?: boolean;\n  /**\n   * A `Writable` stream where `stdout` from the command will be piped\n   */\n  stdout?: Writable;\n  /**\n   * A `Writable` stream where `stderr` from the command will be piped\n   */\n  stderr?: Writable;\n  /**\n   * An AbortSignal to cancel the command execution\n   */\n  signal?: AbortSignal;\n  /**\n   * Maximum time in milliseconds the command may run before it is killed with\n   * SIGKILL. The timeout is enforced by the sandbox at exec time, so it applies\n   * whether or not the command is awaited (including `detached: true`).\n   */\n  timeoutMs?: number;\n}\n\n/**\n * A Session represents a running VM instance within a {@link Sandbox}.\n *\n * Obtain a session via {@link Sandbox.currentSession}.\n */\nexport class Session {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Sandbox was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * Uses getCredentials() which resolves from OIDC or env vars.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public readonly routes: SandboxRouteData[];\n\n  /**\n   * Internal metadata about the current session.\n   */\n  private session: SandboxSnapshot;\n\n  private get client(): APIClient {\n    if (!this._client) throw new Error(\"API client not initialized\");\n    return this._client;\n  }\n\n  /** @internal */\n  get _sessionSnapshot(): SandboxSnapshot {\n    return this.session;\n  }\n\n  /**\n   * Unique ID of this session.\n   */\n  public get sessionId(): string {\n    return this.session.id;\n  }\n\n  public get interactivePort(): number | undefined {\n    return this.session.interactivePort ?? undefined;\n  }\n\n  /**\n   * The status of this session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.session.status;\n  }\n\n  /**\n   * The creation date of this session.\n   */\n  public get createdAt(): Date {\n    return new Date(this.session.createdAt);\n  }\n\n  /**\n   * The timeout of this session in milliseconds.\n   */\n  public get timeout(): number {\n    return this.session.timeout;\n  }\n\n  /**\n   * The network policy of this session.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.session.networkPolicy;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.session.sourceSnapshotId;\n  }\n\n  /**\n   * Memory allocated to this session in MB.\n   */\n  public get memory(): number {\n    return this.session.memory;\n  }\n\n  /**\n   * Number of vCPUs allocated to this session.\n   */\n  public get vcpus(): number {\n    return this.session.vcpus;\n  }\n\n  /**\n   * The region where this session is hosted.\n   */\n  public get region(): string {\n    return this.session.region;\n  }\n\n  /**\n   * Runtime identifier (e.g. \"node24\", \"python3.13\").\n   */\n  public get runtime(): string {\n    return this.session.runtime;\n  }\n\n  /**\n   * The working directory of this session.\n   */\n  public get cwd(): string {\n    return this.session.cwd;\n  }\n\n  /**\n   * When this session was requested.\n   */\n  public get requestedAt(): Date {\n    return new Date(this.session.requestedAt);\n  }\n\n  /**\n   * When this session started running.\n   */\n  public get startedAt(): Date | undefined {\n    return this.session.startedAt != null\n      ? new Date(this.session.startedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was requested to stop.\n   */\n  public get requestedStopAt(): Date | undefined {\n    return this.session.requestedStopAt != null\n      ? new Date(this.session.requestedStopAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was stopped.\n   */\n  public get stoppedAt(): Date | undefined {\n    return this.session.stoppedAt != null\n      ? new Date(this.session.stoppedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was aborted.\n   */\n  public get abortedAt(): Date | undefined {\n    return this.session.abortedAt != null\n      ? new Date(this.session.abortedAt)\n      : undefined;\n  }\n\n  /**\n   * The wall-clock duration of this session in milliseconds.\n   */\n  public get duration(): number | undefined {\n    return this.session.duration;\n  }\n\n  /**\n   * When a snapshot was requested for this session.\n   */\n  public get snapshottedAt(): Date | undefined {\n    return this.session.snapshottedAt != null\n      ? new Date(this.session.snapshottedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.session.updatedAt);\n  }\n\n  /**\n   * The amount of active CPU used by the session. Only reported once the VM is\n   * stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.session.activeCpuDurationMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM\n   * is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.session.networkTransfer;\n  }\n\n  /**\n   * Serialize a Session instance to plain data for @workflow/serde.\n   *\n   * Although Sandbox handles top-level serialization, Session needs these\n   * methods so the Workflow SWC compiler can resolve the class by name.\n   * The `new Session(...)` self-reference in WORKFLOW_DESERIALIZE forces\n   * rolldown to preserve the class name in the compiled output.\n   */\n  static [WORKFLOW_SERIALIZE](instance: Session): SerializedSession {\n    return {\n      session: instance.session,\n      routes: instance.routes,\n    };\n  }\n\n  static [WORKFLOW_DESERIALIZE](data: SerializedSession): Session {\n    return new Session({ routes: data.routes, snapshot: data.session });\n  }\n\n  constructor(params: {\n    client: APIClient;\n    routes: SandboxRouteData[];\n    session: SessionMetaData;\n  } | {\n    /** @internal – used during deserialization with an already-converted snapshot */\n    routes: SandboxRouteData[];\n    snapshot: SandboxSnapshot;\n  }) {\n    this.routes = params.routes;\n    if (\"snapshot\" in params) {\n      this.session = params.snapshot;\n    } else {\n      this._client = params.client;\n      this.session = toSandboxSnapshot(params.session);\n    }\n  }\n\n  /** @internal */\n  updateRoutes(routes: SandboxRouteData[]): void {\n    (this as { routes: SandboxRouteData[] }).routes = routes;\n  }\n\n  /**\n   * Get a previously run command by its ID.\n   *\n   * @param cmdId - ID of the command to retrieve\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A {@link Command} instance representing the command\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const command = await client.getCommand({\n      sessionId: this.session.id,\n      cmdId,\n      signal: opts?.signal,\n    });\n\n    return new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: command.json.command,\n    });\n  }\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const params: RunCommandParams =\n      typeof commandOrParams === \"string\"\n        ? {\n            cmd: commandOrParams,\n            args,\n            signal: opts?.signal,\n            timeoutMs: opts?.timeoutMs,\n          }\n        : commandOrParams;\n    const wait = params.detached ? false : true;\n    const pipeLogs = async (command: Command): Promise<void> => {\n      if (!params.stdout && !params.stderr) {\n        return;\n      }\n\n      try {\n        for await (const log of command.logs({ signal: params.signal })) {\n          if (log.stream === \"stdout\") {\n            params.stdout?.write(log.data);\n          } else if (log.stream === \"stderr\") {\n            params.stderr?.write(log.data);\n          }\n        }\n      } catch (err) {\n        if (params.signal?.aborted) {\n          return;\n        }\n        throw err;\n      }\n    };\n\n    if (wait) {\n      const commandStream = await client.runCommand({\n        sessionId: this.session.id,\n        command: params.cmd,\n        args: params.args ?? [],\n        cwd: params.cwd,\n        env: params.env ?? {},\n        sudo: params.sudo ?? false,\n        wait: true,\n        timeout: params.timeoutMs,\n        signal: params.signal,\n      });\n\n      const command = new Command({\n        client,\n        sessionId: this.session.id,\n        cmd: commandStream.command,\n      });\n\n      const [finished] = await Promise.all([\n        commandStream.finished,\n        pipeLogs(command),\n      ]);\n      return new CommandFinished({\n        client,\n        sessionId: this.session.id,\n        cmd: finished,\n        exitCode: finished.exitCode ?? 0,\n      });\n    }\n\n    const commandResponse = await client.runCommand({\n      sessionId: this.session.id,\n      command: params.cmd,\n      args: params.args ?? [],\n      cwd: params.cwd,\n      env: params.env ?? {},\n      sudo: params.sudo ?? false,\n      timeout: params.timeoutMs,\n      signal: params.signal,\n    });\n\n    const command = new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: commandResponse.json.command,\n    });\n\n    void pipeLogs(command).catch((err) => {\n      if (params.signal?.aborted) {\n        return;\n      }\n      (params.stderr ?? params.stdout)?.emit(\"error\", err);\n    });\n\n    return command;\n  }\n\n  /**\n   * Create a directory in the filesystem of this session.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.mkDir({\n      sessionId: this.session.id,\n      path: path,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Open an interactive shell session. Returns the WebSocket URL and token the\n   * client uses to connect to the controller-hosted PTY.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async openInteractive(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ url: string; token: string }> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const { json } = await client.openInteractive({\n      sessionId: this.session.id,\n      signal: opts?.signal,\n    });\n    return { url: json.url, token: json.token };\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    return consumeReadable(stream);\n  }\n\n  /**\n   * Download a file from the session to the local filesystem.\n   *\n   * @param src - Source file on the session, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    if (!src?.path) {\n      throw new Error(\"downloadFile: source path is required\");\n    }\n\n    if (!dst?.path) {\n      throw new Error(\"downloadFile: destination path is required\");\n    }\n\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: src.path,\n      cwd: src.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    try {\n      const dstPath = resolve(dst.cwd ?? \"\", dst.path);\n      if (opts?.mkdirRecursive) {\n        await mkdir(dirname(dstPath), { recursive: true });\n      }\n      await pipeline(stream, createWriteStream(dstPath), {\n        signal: opts?.signal,\n      });\n      return dstPath;\n    } finally {\n      stream.destroy();\n    }\n  }\n\n  /**\n   * Write files to the filesystem of this session.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path and stream/buffer contents\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   */\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array; mode?: number }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.writeFiles({\n      sessionId: this.session.id,\n      cwd: this.session.cwd,\n      extractDir: \"/\",\n      files: files,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Get the public domain of a port of this session.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    const route = this.routes.find(({ port }) => port == p);\n    if (route) {\n      return `https://${route.subdomain}.vercel.run`;\n    } else {\n      throw new Error(`No route for port ${p}`);\n    }\n  }\n\n  /**\n   * Stop this session.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state and optional sandbox metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ session: SandboxSnapshot; sandbox?: SandboxMetaData; snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.stopSession({\n      sessionId: this.session.id,\n      signal: opts?.signal,\n    });\n    this.session = toSandboxSnapshot(response.json.session);\n    return { session: this.session, sandbox: response.json.sandbox, snapshot: response.json.snapshot };\n  }\n\n  /**\n   * Update the current session's settings.\n   *\n   * @param params - Fields to update.\n   * @param params.networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: [\"*.npmjs.org\", \"github.com\"],\n   *   }\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: {\n   *       \"ai-gateway.vercel.sh\": [{\n   *         transform: [{\n   *           headers: { authorization: \"Bearer ...\" }\n   *         }]\n   *       }],\n   *       \"*\": []\n   *     }\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await session.update({ networkPolicy: \"deny-all\" });\n   */\n  async update(\n    params: {\n      networkPolicy?: NetworkPolicy;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    if (params.networkPolicy !== undefined) {\n      const client = await this.ensureClient();\n      const response = await client.updateNetworkPolicy({\n        sessionId: this.session.id,\n        networkPolicy: params.networkPolicy,\n        signal: opts?.signal,\n      });\n\n      // Update the internal session with the new network policy\n      this.session = toSandboxSnapshot(response.json.session);\n    }\n  }\n\n  /**\n   * Extend the timeout of the session by the specified duration.\n   *\n   * This allows you to extend the lifetime of a session up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * const session = sandbox.currentSession();\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await session.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.extendTimeout({\n      sessionId: this.session.id,\n      duration,\n      signal: opts?.signal,\n    });\n\n    // Update the internal sandbox metadata with the new timeout value\n    this.session = toSandboxSnapshot(response.json.session);\n  }\n\n  /**\n   * Create a snapshot from this currently running session. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.create}.\n   *\n   * Note: this session will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.createSnapshot({\n      sessionId: this.session.id,\n      expiration: opts?.expiration,\n      signal: opts?.signal,\n    });\n\n    this.session = toSandboxSnapshot(response.json.session);\n\n    return new Snapshot({\n      client,\n      snapshot: response.json.snapshot,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AA+EA,IAAa,UAAb,MAAa,QAAQ;;;;;;;;CAUnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAMA,wCAAgB;AAC1C,OAAK,UAAU,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;CAcd,IAAY,SAAoB;AAC9B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAChE,SAAO,KAAK;;;CAId,IAAI,mBAAoC;AACtC,SAAO,KAAK;;;;;CAMd,IAAW,YAAoB;AAC7B,SAAO,KAAK,QAAQ;;CAGtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ,mBAAmB;;;;;CAMzC,IAAW,SAAoC;AAC7C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAAgB;AACzB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,MAAc;AACvB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,cAAoB;AAC7B,SAAO,IAAI,KAAK,KAAK,QAAQ,YAAY;;;;;CAM3C,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,mBAAmB,OACnC,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,WAA+B;AACxC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAAkC;AAC3C,SAAO,KAAK,QAAQ,iBAAiB,OACjC,IAAI,KAAK,KAAK,QAAQ,cAAc,GACpC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;;CAOzC,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,kBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;;;;;;CAWtB,QAAQC,qCAAoB,UAAsC;AAChE,SAAO;GACL,SAAS,SAAS;GAClB,QAAQ,SAAS;GAClB;;CAGH,QAAQC,uCAAsB,MAAkC;AAC9D,SAAO,IAAI,QAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAS,CAAC;;CAGrE,YAAY,QAQT;OAzOK,UAA4B;AA0OlC,OAAK,SAAS,OAAO;AACrB,MAAI,cAAc,OAChB,MAAK,UAAU,OAAO;OACjB;AACL,QAAK,UAAU,OAAO;AACtB,QAAK,UAAUC,2CAAkB,OAAO,QAAQ;;;;CAKpD,aAAa,QAAkC;AAC7C,EAAC,KAAwC,SAAS;;;;;;;;;;CAWpD,MAAM,WACJ,OACA,MACkB;AAClB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,UAAU,MAAM,OAAO,WAAW;GACtC,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,IAAIC,wBAAQ;GACjB;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,QAAQ,KAAK;GACnB,CAAC;;CAsCJ,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAMC,SACJ,OAAO,oBAAoB,WACvB;GACE,KAAK;GACL;GACA,QAAQ,MAAM;GACd,WAAW,MAAM;GAClB,GACD;EACN,MAAM,OAAO,OAAO,WAAW,QAAQ;EACvC,MAAM,WAAW,OAAO,cAAoC;AAC1D,OAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAC5B;AAGF,OAAI;AACF,eAAW,MAAM,OAAOC,UAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAC7D,KAAI,IAAI,WAAW,SACjB,QAAO,QAAQ,MAAM,IAAI,KAAK;aACrB,IAAI,WAAW,SACxB,QAAO,QAAQ,MAAM,IAAI,KAAK;YAG3B,KAAK;AACZ,QAAI,OAAO,QAAQ,QACjB;AAEF,UAAM;;;AAIV,MAAI,MAAM;GACR,MAAM,gBAAgB,MAAM,OAAO,WAAW;IAC5C,WAAW,KAAK,QAAQ;IACxB,SAAS,OAAO;IAChB,MAAM,OAAO,QAAQ,EAAE;IACvB,KAAK,OAAO;IACZ,KAAK,OAAO,OAAO,EAAE;IACrB,MAAM,OAAO,QAAQ;IACrB,MAAM;IACN,SAAS,OAAO;IAChB,QAAQ,OAAO;IAChB,CAAC;GAEF,MAAMA,YAAU,IAAIF,wBAAQ;IAC1B;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK,cAAc;IACpB,CAAC;GAEF,MAAM,CAAC,YAAY,MAAM,QAAQ,IAAI,CACnC,cAAc,UACd,SAASE,UAAQ,CAClB,CAAC;AACF,UAAO,IAAIC,gCAAgB;IACzB;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK;IACL,UAAU,SAAS,YAAY;IAChC,CAAC;;EAGJ,MAAM,kBAAkB,MAAM,OAAO,WAAW;GAC9C,WAAW,KAAK,QAAQ;GACxB,SAAS,OAAO;GAChB,MAAM,OAAO,QAAQ,EAAE;GACvB,KAAK,OAAO;GACZ,KAAK,OAAO,OAAO,EAAE;GACrB,MAAM,OAAO,QAAQ;GACrB,SAAS,OAAO;GAChB,QAAQ,OAAO;GAChB,CAAC;EAEF,MAAM,UAAU,IAAIH,wBAAQ;GAC1B;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,gBAAgB,KAAK;GAC3B,CAAC;AAEF,EAAK,SAAS,QAAQ,CAAC,OAAO,QAAQ;AACpC,OAAI,OAAO,QAAQ,QACjB;AAEF,IAAC,OAAO,UAAU,OAAO,SAAS,KAAK,SAAS,IAAI;IACpD;AAEF,SAAO;;;;;;;;;CAUT,MAAM,MAAM,QAAc,MAAgD;AACxE;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,MAAM;GACjB,WAAW,KAAK,QAAQ;GACxB,MAAMI;GACN,QAAQ,MAAM;GACf,CAAC;;;;;;;;;CAUJ,MAAM,gBAAgB,MAEsB;AAC1C;EAEA,MAAM,EAAE,SAAS,OADF,MAAM,KAAK,cAAc,EACV,gBAAgB;GAC5C,WAAW,KAAK,QAAQ;GACxB,QAAQ,MAAM;GACf,CAAC;AACF,SAAO;GAAE,KAAK,KAAK;GAAK,OAAO,KAAK;GAAO;;;;;;;;;;CAW7C,MAAM,SACJ,MACA,MACuC;AACvC;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,SAAS;GACrB,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;;;;;;;;;;CAWJ,MAAM,iBACJ,MACA,MACwB;AACxB;EAEA,MAAM,SAAS,OADA,MAAM,KAAK,cAAc,EACZ,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,SAAOC,yCAAgB,OAAO;;;;;;;;;;;;CAahC,MAAM,aACJ,KACA,KACA,MACwB;AACxB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;AACxC,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,wCAAwC;AAG1D,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,SAAS,MAAM,OAAO,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,IAAI;GACV,KAAK,IAAI;GACT,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,MAAI;GACF,MAAM,4BAAkB,IAAI,OAAO,IAAI,IAAI,KAAK;AAChD,OAAI,MAAM,eACR,gDAAoB,QAAQ,EAAE,EAAE,WAAW,MAAM,CAAC;AAEpD,uCAAe,kCAA0B,QAAQ,EAAE,EACjD,QAAQ,MAAM,QACf,CAAC;AACF,UAAO;YACC;AACR,UAAO,SAAS;;;;;;;;;;;;;CAcpB,MAAM,WACJ,OACA,MACA;AACA;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,WAAW;GACvB,WAAW,KAAK,QAAQ;GACxB,KAAK,KAAK,QAAQ;GAClB,YAAY;GACL;GACP,QAAQ,MAAM;GACf,CAAC;;;;;;;;;CAUJ,OAAO,GAAmB;EACxB,MAAM,QAAQ,KAAK,OAAO,MAAM,EAAE,WAAW,QAAQ,EAAE;AACvD,MAAI,MACF,QAAO,WAAW,MAAM,UAAU;MAElC,OAAM,IAAI,MAAM,qBAAqB,IAAI;;;;;;;;;CAW7C,MAAM,KAAK,MAEuF;AAChG;EAEA,MAAM,WAAW,OADF,MAAM,KAAK,cAAc,EACV,YAAY;GACxC,WAAW,KAAK,QAAQ;GACxB,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAUN,2CAAkB,SAAS,KAAK,QAAQ;AACvD,SAAO;GAAE,SAAS,KAAK;GAAS,SAAS,SAAS,KAAK;GAAS,UAAU,SAAS,KAAK;GAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCpG,MAAM,OACJ,QAGA,MACe;AACf;AACA,MAAI,OAAO,kBAAkB,OAS3B,MAAK,UAAUA,4CAPE,OADF,MAAM,KAAK,cAAc,EACV,oBAAoB;GAChD,WAAW,KAAK,QAAQ;GACxB,eAAe,OAAO;GACtB,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;;;;;;;CAqB3D,MAAM,cACJ,UACA,MACe;AACf;AASA,OAAK,UAAUA,4CAPE,OADF,MAAM,KAAK,cAAc,EACV,cAAc;GAC1C,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;CAczD,MAAM,SAAS,MAGO;AACpB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,eAAe;GAC3C,WAAW,KAAK,QAAQ;GACxB,YAAY,MAAM;GAClB,QAAQ,MAAM;GACf,CAAC;AAEF,OAAK,UAAUA,2CAAkB,SAAS,KAAK,QAAQ;AAEvD,SAAO,IAAIO,0BAAS;GAClB;GACA,UAAU,SAAS,KAAK;GACzB,CAAC"}

dist/session.d.cts

@@ -255,2 +255,15 @@ import { SandboxMetaData, SandboxRouteData, SessionMetaData, SnapshotMetadata } from "./api-client/validators.cjs";
   /**
+   * Open an interactive shell session. Returns the WebSocket URL and token the
+   * client uses to connect to the controller-hosted PTY.
+   *
+   * @param opts - Optional parameters.
+   * @param opts.signal - An AbortSignal to cancel the operation.
+   */
+  openInteractive(opts?: {
+    signal?: AbortSignal;
+  }): Promise<{
+    url: string;
+    token: string;
+  }>;
+  /**
    * Read a file from the filesystem of this session as a stream.
@@ -257,0 +270,0 @@ *

dist/session.d.ts

@@ -255,2 +255,15 @@ import { SandboxMetaData, SandboxRouteData, SessionMetaData, SnapshotMetadata } from "./api-client/validators.js";
   /**
+   * Open an interactive shell session. Returns the WebSocket URL and token the
+   * client uses to connect to the controller-hosted PTY.
+   *
+   * @param opts - Optional parameters.
+   * @param opts.signal - An AbortSignal to cancel the operation.
+   */
+  openInteractive(opts?: {
+    signal?: AbortSignal;
+  }): Promise<{
+    url: string;
+    token: string;
+  }>;
+  /**
    * Read a file from the filesystem of this session as a stream.
@@ -257,0 +270,0 @@ *

dist/session.js

@@ -314,2 +314,20 @@ import { consumeReadable } from "./utils/consume-readable.js";
 	/**
+	* Open an interactive shell session. Returns the WebSocket URL and token the
+	* client uses to connect to the controller-hosted PTY.
+	*
+	* @param opts - Optional parameters.
+	* @param opts.signal - An AbortSignal to cancel the operation.
+	*/
+	async openInteractive(opts) {
+		"use step";
+		const { json } = await (await this.ensureClient()).openInteractive({
+			sessionId: this.session.id,
+			signal: opts?.signal
+		});
+		return {
+			url: json.url,
+			token: json.token
+		};
+	}
+	/**
 	* Read a file from the filesystem of this session as a stream.
@@ -316,0 +334,0 @@ *

dist/session.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"session.js","names":["params: RunCommandParams","command","path"],"sources":["../src/session.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport { type SessionMetaData, type SandboxRouteData, type SandboxMetaData, type SnapshotMetadata, APIClient } from \"./api-client/index.js\";\nimport type { Writable } from \"stream\";\nimport { pipeline } from \"stream/promises\";\nimport { createWriteStream } from \"fs\";\nimport { mkdir } from \"fs/promises\";\nimport { dirname, resolve } from \"path\";\nimport { Command, CommandFinished } from \"./command.js\";\nimport { Snapshot } from \"./snapshot.js\";\nimport { consumeReadable } from \"./utils/consume-readable.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyRule,\n  NetworkTransformer,\n} from \"./network-policy.js\";\nimport { toSandboxSnapshot, type SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport { getCredentials } from \"./utils/get-credentials.js\";\n\nexport type { NetworkPolicy, NetworkPolicyRule, NetworkTransformer };\n\n/**\n * Serialized representation of a Session for @workflow/serde.\n */\nexport interface SerializedSession {\n  session: SandboxSnapshot;\n  routes: SandboxRouteData[];\n}\n\n/** @inline */\nexport interface RunCommandParams {\n  /**\n   * The command to execute\n   */\n  cmd: string;\n  /**\n   * Arguments to pass to the command\n   */\n  args?: string[];\n  /**\n   * Working directory to execute the command in\n   */\n  cwd?: string;\n  /**\n   * Environment variables to set for this command\n   */\n  env?: Record<string, string>;\n  /**\n   * If true, execute this command with root privileges. Defaults to false.\n   */\n  sudo?: boolean;\n  /**\n   * If true, the command will return without waiting for `exitCode`\n   */\n  detached?: boolean;\n  /**\n   * A `Writable` stream where `stdout` from the command will be piped\n   */\n  stdout?: Writable;\n  /**\n   * A `Writable` stream where `stderr` from the command will be piped\n   */\n  stderr?: Writable;\n  /**\n   * An AbortSignal to cancel the command execution\n   */\n  signal?: AbortSignal;\n  /**\n   * Maximum time in milliseconds the command may run before it is killed with\n   * SIGKILL. The timeout is enforced by the sandbox at exec time, so it applies\n   * whether or not the command is awaited (including `detached: true`).\n   */\n  timeoutMs?: number;\n}\n\n/**\n * A Session represents a running VM instance within a {@link Sandbox}.\n *\n * Obtain a session via {@link Sandbox.currentSession}.\n */\nexport class Session {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Sandbox was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * Uses getCredentials() which resolves from OIDC or env vars.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public readonly routes: SandboxRouteData[];\n\n  /**\n   * Internal metadata about the current session.\n   */\n  private session: SandboxSnapshot;\n\n  private get client(): APIClient {\n    if (!this._client) throw new Error(\"API client not initialized\");\n    return this._client;\n  }\n\n  /** @internal */\n  get _sessionSnapshot(): SandboxSnapshot {\n    return this.session;\n  }\n\n  /**\n   * Unique ID of this session.\n   */\n  public get sessionId(): string {\n    return this.session.id;\n  }\n\n  public get interactivePort(): number | undefined {\n    return this.session.interactivePort ?? undefined;\n  }\n\n  /**\n   * The status of this session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.session.status;\n  }\n\n  /**\n   * The creation date of this session.\n   */\n  public get createdAt(): Date {\n    return new Date(this.session.createdAt);\n  }\n\n  /**\n   * The timeout of this session in milliseconds.\n   */\n  public get timeout(): number {\n    return this.session.timeout;\n  }\n\n  /**\n   * The network policy of this session.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.session.networkPolicy;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.session.sourceSnapshotId;\n  }\n\n  /**\n   * Memory allocated to this session in MB.\n   */\n  public get memory(): number {\n    return this.session.memory;\n  }\n\n  /**\n   * Number of vCPUs allocated to this session.\n   */\n  public get vcpus(): number {\n    return this.session.vcpus;\n  }\n\n  /**\n   * The region where this session is hosted.\n   */\n  public get region(): string {\n    return this.session.region;\n  }\n\n  /**\n   * Runtime identifier (e.g. \"node24\", \"python3.13\").\n   */\n  public get runtime(): string {\n    return this.session.runtime;\n  }\n\n  /**\n   * The working directory of this session.\n   */\n  public get cwd(): string {\n    return this.session.cwd;\n  }\n\n  /**\n   * When this session was requested.\n   */\n  public get requestedAt(): Date {\n    return new Date(this.session.requestedAt);\n  }\n\n  /**\n   * When this session started running.\n   */\n  public get startedAt(): Date | undefined {\n    return this.session.startedAt != null\n      ? new Date(this.session.startedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was requested to stop.\n   */\n  public get requestedStopAt(): Date | undefined {\n    return this.session.requestedStopAt != null\n      ? new Date(this.session.requestedStopAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was stopped.\n   */\n  public get stoppedAt(): Date | undefined {\n    return this.session.stoppedAt != null\n      ? new Date(this.session.stoppedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was aborted.\n   */\n  public get abortedAt(): Date | undefined {\n    return this.session.abortedAt != null\n      ? new Date(this.session.abortedAt)\n      : undefined;\n  }\n\n  /**\n   * The wall-clock duration of this session in milliseconds.\n   */\n  public get duration(): number | undefined {\n    return this.session.duration;\n  }\n\n  /**\n   * When a snapshot was requested for this session.\n   */\n  public get snapshottedAt(): Date | undefined {\n    return this.session.snapshottedAt != null\n      ? new Date(this.session.snapshottedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.session.updatedAt);\n  }\n\n  /**\n   * The amount of active CPU used by the session. Only reported once the VM is\n   * stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.session.activeCpuDurationMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM\n   * is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.session.networkTransfer;\n  }\n\n  /**\n   * Serialize a Session instance to plain data for @workflow/serde.\n   *\n   * Although Sandbox handles top-level serialization, Session needs these\n   * methods so the Workflow SWC compiler can resolve the class by name.\n   * The `new Session(...)` self-reference in WORKFLOW_DESERIALIZE forces\n   * rolldown to preserve the class name in the compiled output.\n   */\n  static [WORKFLOW_SERIALIZE](instance: Session): SerializedSession {\n    return {\n      session: instance.session,\n      routes: instance.routes,\n    };\n  }\n\n  static [WORKFLOW_DESERIALIZE](data: SerializedSession): Session {\n    return new Session({ routes: data.routes, snapshot: data.session });\n  }\n\n  constructor(params: {\n    client: APIClient;\n    routes: SandboxRouteData[];\n    session: SessionMetaData;\n  } | {\n    /** @internal – used during deserialization with an already-converted snapshot */\n    routes: SandboxRouteData[];\n    snapshot: SandboxSnapshot;\n  }) {\n    this.routes = params.routes;\n    if (\"snapshot\" in params) {\n      this.session = params.snapshot;\n    } else {\n      this._client = params.client;\n      this.session = toSandboxSnapshot(params.session);\n    }\n  }\n\n  /** @internal */\n  updateRoutes(routes: SandboxRouteData[]): void {\n    (this as { routes: SandboxRouteData[] }).routes = routes;\n  }\n\n  /**\n   * Get a previously run command by its ID.\n   *\n   * @param cmdId - ID of the command to retrieve\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A {@link Command} instance representing the command\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const command = await client.getCommand({\n      sessionId: this.session.id,\n      cmdId,\n      signal: opts?.signal,\n    });\n\n    return new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: command.json.command,\n    });\n  }\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const params: RunCommandParams =\n      typeof commandOrParams === \"string\"\n        ? {\n            cmd: commandOrParams,\n            args,\n            signal: opts?.signal,\n            timeoutMs: opts?.timeoutMs,\n          }\n        : commandOrParams;\n    const wait = params.detached ? false : true;\n    const pipeLogs = async (command: Command): Promise<void> => {\n      if (!params.stdout && !params.stderr) {\n        return;\n      }\n\n      try {\n        for await (const log of command.logs({ signal: params.signal })) {\n          if (log.stream === \"stdout\") {\n            params.stdout?.write(log.data);\n          } else if (log.stream === \"stderr\") {\n            params.stderr?.write(log.data);\n          }\n        }\n      } catch (err) {\n        if (params.signal?.aborted) {\n          return;\n        }\n        throw err;\n      }\n    };\n\n    if (wait) {\n      const commandStream = await client.runCommand({\n        sessionId: this.session.id,\n        command: params.cmd,\n        args: params.args ?? [],\n        cwd: params.cwd,\n        env: params.env ?? {},\n        sudo: params.sudo ?? false,\n        wait: true,\n        timeout: params.timeoutMs,\n        signal: params.signal,\n      });\n\n      const command = new Command({\n        client,\n        sessionId: this.session.id,\n        cmd: commandStream.command,\n      });\n\n      const [finished] = await Promise.all([\n        commandStream.finished,\n        pipeLogs(command),\n      ]);\n      return new CommandFinished({\n        client,\n        sessionId: this.session.id,\n        cmd: finished,\n        exitCode: finished.exitCode ?? 0,\n      });\n    }\n\n    const commandResponse = await client.runCommand({\n      sessionId: this.session.id,\n      command: params.cmd,\n      args: params.args ?? [],\n      cwd: params.cwd,\n      env: params.env ?? {},\n      sudo: params.sudo ?? false,\n      timeout: params.timeoutMs,\n      signal: params.signal,\n    });\n\n    const command = new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: commandResponse.json.command,\n    });\n\n    void pipeLogs(command).catch((err) => {\n      if (params.signal?.aborted) {\n        return;\n      }\n      (params.stderr ?? params.stdout)?.emit(\"error\", err);\n    });\n\n    return command;\n  }\n\n  /**\n   * Create a directory in the filesystem of this session.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.mkDir({\n      sessionId: this.session.id,\n      path: path,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    return consumeReadable(stream);\n  }\n\n  /**\n   * Download a file from the session to the local filesystem.\n   *\n   * @param src - Source file on the session, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    if (!src?.path) {\n      throw new Error(\"downloadFile: source path is required\");\n    }\n\n    if (!dst?.path) {\n      throw new Error(\"downloadFile: destination path is required\");\n    }\n\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: src.path,\n      cwd: src.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    try {\n      const dstPath = resolve(dst.cwd ?? \"\", dst.path);\n      if (opts?.mkdirRecursive) {\n        await mkdir(dirname(dstPath), { recursive: true });\n      }\n      await pipeline(stream, createWriteStream(dstPath), {\n        signal: opts?.signal,\n      });\n      return dstPath;\n    } finally {\n      stream.destroy();\n    }\n  }\n\n  /**\n   * Write files to the filesystem of this session.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path and stream/buffer contents\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   */\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array; mode?: number }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.writeFiles({\n      sessionId: this.session.id,\n      cwd: this.session.cwd,\n      extractDir: \"/\",\n      files: files,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Get the public domain of a port of this session.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    const route = this.routes.find(({ port }) => port == p);\n    if (route) {\n      return `https://${route.subdomain}.vercel.run`;\n    } else {\n      throw new Error(`No route for port ${p}`);\n    }\n  }\n\n  /**\n   * Stop this session.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state and optional sandbox metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ session: SandboxSnapshot; sandbox?: SandboxMetaData; snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.stopSession({\n      sessionId: this.session.id,\n      signal: opts?.signal,\n    });\n    this.session = toSandboxSnapshot(response.json.session);\n    return { session: this.session, sandbox: response.json.sandbox, snapshot: response.json.snapshot };\n  }\n\n  /**\n   * Update the current session's settings.\n   *\n   * @param params - Fields to update.\n   * @param params.networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: [\"*.npmjs.org\", \"github.com\"],\n   *   }\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: {\n   *       \"ai-gateway.vercel.sh\": [{\n   *         transform: [{\n   *           headers: { authorization: \"Bearer ...\" }\n   *         }]\n   *       }],\n   *       \"*\": []\n   *     }\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await session.update({ networkPolicy: \"deny-all\" });\n   */\n  async update(\n    params: {\n      networkPolicy?: NetworkPolicy;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    if (params.networkPolicy !== undefined) {\n      const client = await this.ensureClient();\n      const response = await client.updateNetworkPolicy({\n        sessionId: this.session.id,\n        networkPolicy: params.networkPolicy,\n        signal: opts?.signal,\n      });\n\n      // Update the internal session with the new network policy\n      this.session = toSandboxSnapshot(response.json.session);\n    }\n  }\n\n  /**\n   * Extend the timeout of the session by the specified duration.\n   *\n   * This allows you to extend the lifetime of a session up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * const session = sandbox.currentSession();\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await session.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.extendTimeout({\n      sessionId: this.session.id,\n      duration,\n      signal: opts?.signal,\n    });\n\n    // Update the internal sandbox metadata with the new timeout value\n    this.session = toSandboxSnapshot(response.json.session);\n  }\n\n  /**\n   * Create a snapshot from this currently running session. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.create}.\n   *\n   * Note: this session will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.createSnapshot({\n      sessionId: this.session.id,\n      expiration: opts?.expiration,\n      signal: opts?.signal,\n    });\n\n    this.session = toSandboxSnapshot(response.json.session);\n\n    return new Snapshot({\n      client,\n      snapshot: response.json.snapshot,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA+EA,IAAa,UAAb,MAAa,QAAQ;;;;;;;;CAUnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAM,gBAAgB;AAC1C,OAAK,UAAU,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;CAcd,IAAY,SAAoB;AAC9B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAChE,SAAO,KAAK;;;CAId,IAAI,mBAAoC;AACtC,SAAO,KAAK;;;;;CAMd,IAAW,YAAoB;AAC7B,SAAO,KAAK,QAAQ;;CAGtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ,mBAAmB;;;;;CAMzC,IAAW,SAAoC;AAC7C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAAgB;AACzB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,MAAc;AACvB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,cAAoB;AAC7B,SAAO,IAAI,KAAK,KAAK,QAAQ,YAAY;;;;;CAM3C,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,mBAAmB,OACnC,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,WAA+B;AACxC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAAkC;AAC3C,SAAO,KAAK,QAAQ,iBAAiB,OACjC,IAAI,KAAK,KAAK,QAAQ,cAAc,GACpC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;;CAOzC,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,kBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;;;;;;CAWtB,QAAQ,oBAAoB,UAAsC;AAChE,SAAO;GACL,SAAS,SAAS;GAClB,QAAQ,SAAS;GAClB;;CAGH,QAAQ,sBAAsB,MAAkC;AAC9D,SAAO,IAAI,QAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAS,CAAC;;CAGrE,YAAY,QAQT;OAzOK,UAA4B;AA0OlC,OAAK,SAAS,OAAO;AACrB,MAAI,cAAc,OAChB,MAAK,UAAU,OAAO;OACjB;AACL,QAAK,UAAU,OAAO;AACtB,QAAK,UAAU,kBAAkB,OAAO,QAAQ;;;;CAKpD,aAAa,QAAkC;AAC7C,EAAC,KAAwC,SAAS;;;;;;;;;;CAWpD,MAAM,WACJ,OACA,MACkB;AAClB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,UAAU,MAAM,OAAO,WAAW;GACtC,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,IAAI,QAAQ;GACjB;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,QAAQ,KAAK;GACnB,CAAC;;CAsCJ,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAMA,SACJ,OAAO,oBAAoB,WACvB;GACE,KAAK;GACL;GACA,QAAQ,MAAM;GACd,WAAW,MAAM;GAClB,GACD;EACN,MAAM,OAAO,OAAO,WAAW,QAAQ;EACvC,MAAM,WAAW,OAAO,cAAoC;AAC1D,OAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAC5B;AAGF,OAAI;AACF,eAAW,MAAM,OAAOC,UAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAC7D,KAAI,IAAI,WAAW,SACjB,QAAO,QAAQ,MAAM,IAAI,KAAK;aACrB,IAAI,WAAW,SACxB,QAAO,QAAQ,MAAM,IAAI,KAAK;YAG3B,KAAK;AACZ,QAAI,OAAO,QAAQ,QACjB;AAEF,UAAM;;;AAIV,MAAI,MAAM;GACR,MAAM,gBAAgB,MAAM,OAAO,WAAW;IAC5C,WAAW,KAAK,QAAQ;IACxB,SAAS,OAAO;IAChB,MAAM,OAAO,QAAQ,EAAE;IACvB,KAAK,OAAO;IACZ,KAAK,OAAO,OAAO,EAAE;IACrB,MAAM,OAAO,QAAQ;IACrB,MAAM;IACN,SAAS,OAAO;IAChB,QAAQ,OAAO;IAChB,CAAC;GAEF,MAAMA,YAAU,IAAI,QAAQ;IAC1B;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK,cAAc;IACpB,CAAC;GAEF,MAAM,CAAC,YAAY,MAAM,QAAQ,IAAI,CACnC,cAAc,UACd,SAASA,UAAQ,CAClB,CAAC;AACF,UAAO,IAAI,gBAAgB;IACzB;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK;IACL,UAAU,SAAS,YAAY;IAChC,CAAC;;EAGJ,MAAM,kBAAkB,MAAM,OAAO,WAAW;GAC9C,WAAW,KAAK,QAAQ;GACxB,SAAS,OAAO;GAChB,MAAM,OAAO,QAAQ,EAAE;GACvB,KAAK,OAAO;GACZ,KAAK,OAAO,OAAO,EAAE;GACrB,MAAM,OAAO,QAAQ;GACrB,SAAS,OAAO;GAChB,QAAQ,OAAO;GAChB,CAAC;EAEF,MAAM,UAAU,IAAI,QAAQ;GAC1B;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,gBAAgB,KAAK;GAC3B,CAAC;AAEF,EAAK,SAAS,QAAQ,CAAC,OAAO,QAAQ;AACpC,OAAI,OAAO,QAAQ,QACjB;AAEF,IAAC,OAAO,UAAU,OAAO,SAAS,KAAK,SAAS,IAAI;IACpD;AAEF,SAAO;;;;;;;;;CAUT,MAAM,MAAM,QAAc,MAAgD;AACxE;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,MAAM;GACjB,WAAW,KAAK,QAAQ;GACxB,MAAMC;GACN,QAAQ,MAAM;GACf,CAAC;;;;;;;;;;CAWJ,MAAM,SACJ,MACA,MACuC;AACvC;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,SAAS;GACrB,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;;;;;;;;;;CAWJ,MAAM,iBACJ,MACA,MACwB;AACxB;EAEA,MAAM,SAAS,OADA,MAAM,KAAK,cAAc,EACZ,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,SAAO,gBAAgB,OAAO;;;;;;;;;;;;CAahC,MAAM,aACJ,KACA,KACA,MACwB;AACxB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;AACxC,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,wCAAwC;AAG1D,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,SAAS,MAAM,OAAO,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,IAAI;GACV,KAAK,IAAI;GACT,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,MAAI;GACF,MAAM,UAAU,QAAQ,IAAI,OAAO,IAAI,IAAI,KAAK;AAChD,OAAI,MAAM,eACR,OAAM,MAAM,QAAQ,QAAQ,EAAE,EAAE,WAAW,MAAM,CAAC;AAEpD,SAAM,SAAS,QAAQ,kBAAkB,QAAQ,EAAE,EACjD,QAAQ,MAAM,QACf,CAAC;AACF,UAAO;YACC;AACR,UAAO,SAAS;;;;;;;;;;;;;CAcpB,MAAM,WACJ,OACA,MACA;AACA;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,WAAW;GACvB,WAAW,KAAK,QAAQ;GACxB,KAAK,KAAK,QAAQ;GAClB,YAAY;GACL;GACP,QAAQ,MAAM;GACf,CAAC;;;;;;;;;CAUJ,OAAO,GAAmB;EACxB,MAAM,QAAQ,KAAK,OAAO,MAAM,EAAE,WAAW,QAAQ,EAAE;AACvD,MAAI,MACF,QAAO,WAAW,MAAM,UAAU;MAElC,OAAM,IAAI,MAAM,qBAAqB,IAAI;;;;;;;;;CAW7C,MAAM,KAAK,MAEuF;AAChG;EAEA,MAAM,WAAW,OADF,MAAM,KAAK,cAAc,EACV,YAAY;GACxC,WAAW,KAAK,QAAQ;GACxB,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAU,kBAAkB,SAAS,KAAK,QAAQ;AACvD,SAAO;GAAE,SAAS,KAAK;GAAS,SAAS,SAAS,KAAK;GAAS,UAAU,SAAS,KAAK;GAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCpG,MAAM,OACJ,QAGA,MACe;AACf;AACA,MAAI,OAAO,kBAAkB,OAS3B,MAAK,UAAU,mBAPE,OADF,MAAM,KAAK,cAAc,EACV,oBAAoB;GAChD,WAAW,KAAK,QAAQ;GACxB,eAAe,OAAO;GACtB,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;;;;;;;CAqB3D,MAAM,cACJ,UACA,MACe;AACf;AASA,OAAK,UAAU,mBAPE,OADF,MAAM,KAAK,cAAc,EACV,cAAc;GAC1C,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;CAczD,MAAM,SAAS,MAGO;AACpB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,eAAe;GAC3C,WAAW,KAAK,QAAQ;GACxB,YAAY,MAAM;GAClB,QAAQ,MAAM;GACf,CAAC;AAEF,OAAK,UAAU,kBAAkB,SAAS,KAAK,QAAQ;AAEvD,SAAO,IAAI,SAAS;GAClB;GACA,UAAU,SAAS,KAAK;GACzB,CAAC"}
+{"version":3,"file":"session.js","names":["params: RunCommandParams","command","path"],"sources":["../src/session.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport { type SessionMetaData, type SandboxRouteData, type SandboxMetaData, type SnapshotMetadata, APIClient } from \"./api-client/index.js\";\nimport type { Writable } from \"stream\";\nimport { pipeline } from \"stream/promises\";\nimport { createWriteStream } from \"fs\";\nimport { mkdir } from \"fs/promises\";\nimport { dirname, resolve } from \"path\";\nimport { Command, CommandFinished } from \"./command.js\";\nimport { Snapshot } from \"./snapshot.js\";\nimport { consumeReadable } from \"./utils/consume-readable.js\";\nimport type {\n  NetworkPolicy,\n  NetworkPolicyRule,\n  NetworkTransformer,\n} from \"./network-policy.js\";\nimport { toSandboxSnapshot, type SandboxSnapshot } from \"./utils/sandbox-snapshot.js\";\nimport { getCredentials } from \"./utils/get-credentials.js\";\n\nexport type { NetworkPolicy, NetworkPolicyRule, NetworkTransformer };\n\n/**\n * Serialized representation of a Session for @workflow/serde.\n */\nexport interface SerializedSession {\n  session: SandboxSnapshot;\n  routes: SandboxRouteData[];\n}\n\n/** @inline */\nexport interface RunCommandParams {\n  /**\n   * The command to execute\n   */\n  cmd: string;\n  /**\n   * Arguments to pass to the command\n   */\n  args?: string[];\n  /**\n   * Working directory to execute the command in\n   */\n  cwd?: string;\n  /**\n   * Environment variables to set for this command\n   */\n  env?: Record<string, string>;\n  /**\n   * If true, execute this command with root privileges. Defaults to false.\n   */\n  sudo?: boolean;\n  /**\n   * If true, the command will return without waiting for `exitCode`\n   */\n  detached?: boolean;\n  /**\n   * A `Writable` stream where `stdout` from the command will be piped\n   */\n  stdout?: Writable;\n  /**\n   * A `Writable` stream where `stderr` from the command will be piped\n   */\n  stderr?: Writable;\n  /**\n   * An AbortSignal to cancel the command execution\n   */\n  signal?: AbortSignal;\n  /**\n   * Maximum time in milliseconds the command may run before it is killed with\n   * SIGKILL. The timeout is enforced by the sandbox at exec time, so it applies\n   * whether or not the command is awaited (including `detached: true`).\n   */\n  timeoutMs?: number;\n}\n\n/**\n * A Session represents a running VM instance within a {@link Sandbox}.\n *\n * Obtain a session via {@link Sandbox.currentSession}.\n */\nexport class Session {\n  private _client: APIClient | null = null;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * This is used in step contexts where the Sandbox was deserialized\n   * without a client (e.g. when crossing workflow/step boundaries).\n   * Uses getCredentials() which resolves from OIDC or env vars.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * Routes from ports to subdomains.\n   * @hidden\n   */\n  public readonly routes: SandboxRouteData[];\n\n  /**\n   * Internal metadata about the current session.\n   */\n  private session: SandboxSnapshot;\n\n  private get client(): APIClient {\n    if (!this._client) throw new Error(\"API client not initialized\");\n    return this._client;\n  }\n\n  /** @internal */\n  get _sessionSnapshot(): SandboxSnapshot {\n    return this.session;\n  }\n\n  /**\n   * Unique ID of this session.\n   */\n  public get sessionId(): string {\n    return this.session.id;\n  }\n\n  public get interactivePort(): number | undefined {\n    return this.session.interactivePort ?? undefined;\n  }\n\n  /**\n   * The status of this session.\n   */\n  public get status(): SessionMetaData[\"status\"] {\n    return this.session.status;\n  }\n\n  /**\n   * The creation date of this session.\n   */\n  public get createdAt(): Date {\n    return new Date(this.session.createdAt);\n  }\n\n  /**\n   * The timeout of this session in milliseconds.\n   */\n  public get timeout(): number {\n    return this.session.timeout;\n  }\n\n  /**\n   * The network policy of this session.\n   */\n  public get networkPolicy(): NetworkPolicy | undefined {\n    return this.session.networkPolicy;\n  }\n\n  /**\n   * If the session was created from a snapshot, the ID of that snapshot.\n   */\n  public get sourceSnapshotId(): string | undefined {\n    return this.session.sourceSnapshotId;\n  }\n\n  /**\n   * Memory allocated to this session in MB.\n   */\n  public get memory(): number {\n    return this.session.memory;\n  }\n\n  /**\n   * Number of vCPUs allocated to this session.\n   */\n  public get vcpus(): number {\n    return this.session.vcpus;\n  }\n\n  /**\n   * The region where this session is hosted.\n   */\n  public get region(): string {\n    return this.session.region;\n  }\n\n  /**\n   * Runtime identifier (e.g. \"node24\", \"python3.13\").\n   */\n  public get runtime(): string {\n    return this.session.runtime;\n  }\n\n  /**\n   * The working directory of this session.\n   */\n  public get cwd(): string {\n    return this.session.cwd;\n  }\n\n  /**\n   * When this session was requested.\n   */\n  public get requestedAt(): Date {\n    return new Date(this.session.requestedAt);\n  }\n\n  /**\n   * When this session started running.\n   */\n  public get startedAt(): Date | undefined {\n    return this.session.startedAt != null\n      ? new Date(this.session.startedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was requested to stop.\n   */\n  public get requestedStopAt(): Date | undefined {\n    return this.session.requestedStopAt != null\n      ? new Date(this.session.requestedStopAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was stopped.\n   */\n  public get stoppedAt(): Date | undefined {\n    return this.session.stoppedAt != null\n      ? new Date(this.session.stoppedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was aborted.\n   */\n  public get abortedAt(): Date | undefined {\n    return this.session.abortedAt != null\n      ? new Date(this.session.abortedAt)\n      : undefined;\n  }\n\n  /**\n   * The wall-clock duration of this session in milliseconds.\n   */\n  public get duration(): number | undefined {\n    return this.session.duration;\n  }\n\n  /**\n   * When a snapshot was requested for this session.\n   */\n  public get snapshottedAt(): Date | undefined {\n    return this.session.snapshottedAt != null\n      ? new Date(this.session.snapshottedAt)\n      : undefined;\n  }\n\n  /**\n   * When this session was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.session.updatedAt);\n  }\n\n  /**\n   * The amount of active CPU used by the session. Only reported once the VM is\n   * stopped.\n   */\n  public get activeCpuUsageMs(): number | undefined {\n    return this.session.activeCpuDurationMs;\n  }\n\n  /**\n   * The amount of network data used by the session. Only reported once the VM\n   * is stopped.\n   */\n  public get networkTransfer():\n    | { ingress: number; egress: number }\n    | undefined {\n    return this.session.networkTransfer;\n  }\n\n  /**\n   * Serialize a Session instance to plain data for @workflow/serde.\n   *\n   * Although Sandbox handles top-level serialization, Session needs these\n   * methods so the Workflow SWC compiler can resolve the class by name.\n   * The `new Session(...)` self-reference in WORKFLOW_DESERIALIZE forces\n   * rolldown to preserve the class name in the compiled output.\n   */\n  static [WORKFLOW_SERIALIZE](instance: Session): SerializedSession {\n    return {\n      session: instance.session,\n      routes: instance.routes,\n    };\n  }\n\n  static [WORKFLOW_DESERIALIZE](data: SerializedSession): Session {\n    return new Session({ routes: data.routes, snapshot: data.session });\n  }\n\n  constructor(params: {\n    client: APIClient;\n    routes: SandboxRouteData[];\n    session: SessionMetaData;\n  } | {\n    /** @internal – used during deserialization with an already-converted snapshot */\n    routes: SandboxRouteData[];\n    snapshot: SandboxSnapshot;\n  }) {\n    this.routes = params.routes;\n    if (\"snapshot\" in params) {\n      this.session = params.snapshot;\n    } else {\n      this._client = params.client;\n      this.session = toSandboxSnapshot(params.session);\n    }\n  }\n\n  /** @internal */\n  updateRoutes(routes: SandboxRouteData[]): void {\n    (this as { routes: SandboxRouteData[] }).routes = routes;\n  }\n\n  /**\n   * Get a previously run command by its ID.\n   *\n   * @param cmdId - ID of the command to retrieve\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A {@link Command} instance representing the command\n   */\n  async getCommand(\n    cmdId: string,\n    opts?: { signal?: AbortSignal },\n  ): Promise<Command> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const command = await client.getCommand({\n      sessionId: this.session.id,\n      cmdId,\n      signal: opts?.signal,\n    });\n\n    return new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: command.json.command,\n    });\n  }\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param command - The command to execute.\n   * @param args - Arguments to pass to the command.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the command execution.\n   * @param opts.timeoutMs - Maximum time in milliseconds to wait for the\n   * command to complete. On expiry the process is killed with SIGKILL.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(\n    command: string,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<CommandFinished>;\n\n  /**\n   * Start executing a command in detached mode.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link Command} instance for the running command.\n   */\n  async runCommand(\n    params: RunCommandParams & { detached: true },\n  ): Promise<Command>;\n\n  /**\n   * Start executing a command in this session.\n   *\n   * @param params - The command parameters.\n   * @returns A {@link CommandFinished} result once execution is done.\n   */\n  async runCommand(params: RunCommandParams): Promise<CommandFinished>;\n\n  async runCommand(\n    commandOrParams: string | RunCommandParams,\n    args?: string[],\n    opts?: { signal?: AbortSignal; timeoutMs?: number },\n  ): Promise<Command | CommandFinished> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const params: RunCommandParams =\n      typeof commandOrParams === \"string\"\n        ? {\n            cmd: commandOrParams,\n            args,\n            signal: opts?.signal,\n            timeoutMs: opts?.timeoutMs,\n          }\n        : commandOrParams;\n    const wait = params.detached ? false : true;\n    const pipeLogs = async (command: Command): Promise<void> => {\n      if (!params.stdout && !params.stderr) {\n        return;\n      }\n\n      try {\n        for await (const log of command.logs({ signal: params.signal })) {\n          if (log.stream === \"stdout\") {\n            params.stdout?.write(log.data);\n          } else if (log.stream === \"stderr\") {\n            params.stderr?.write(log.data);\n          }\n        }\n      } catch (err) {\n        if (params.signal?.aborted) {\n          return;\n        }\n        throw err;\n      }\n    };\n\n    if (wait) {\n      const commandStream = await client.runCommand({\n        sessionId: this.session.id,\n        command: params.cmd,\n        args: params.args ?? [],\n        cwd: params.cwd,\n        env: params.env ?? {},\n        sudo: params.sudo ?? false,\n        wait: true,\n        timeout: params.timeoutMs,\n        signal: params.signal,\n      });\n\n      const command = new Command({\n        client,\n        sessionId: this.session.id,\n        cmd: commandStream.command,\n      });\n\n      const [finished] = await Promise.all([\n        commandStream.finished,\n        pipeLogs(command),\n      ]);\n      return new CommandFinished({\n        client,\n        sessionId: this.session.id,\n        cmd: finished,\n        exitCode: finished.exitCode ?? 0,\n      });\n    }\n\n    const commandResponse = await client.runCommand({\n      sessionId: this.session.id,\n      command: params.cmd,\n      args: params.args ?? [],\n      cwd: params.cwd,\n      env: params.env ?? {},\n      sudo: params.sudo ?? false,\n      timeout: params.timeoutMs,\n      signal: params.signal,\n    });\n\n    const command = new Command({\n      client,\n      sessionId: this.session.id,\n      cmd: commandResponse.json.command,\n    });\n\n    void pipeLogs(command).catch((err) => {\n      if (params.signal?.aborted) {\n        return;\n      }\n      (params.stderr ?? params.stdout)?.emit(\"error\", err);\n    });\n\n    return command;\n  }\n\n  /**\n   * Create a directory in the filesystem of this session.\n   *\n   * @param path - Path of the directory to create\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async mkDir(path: string, opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    await client.mkDir({\n      sessionId: this.session.id,\n      path: path,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Open an interactive shell session. Returns the WebSocket URL and token the\n   * client uses to connect to the controller-hosted PTY.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   */\n  async openInteractive(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ url: string; token: string }> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const { json } = await client.openInteractive({\n      sessionId: this.session.id,\n      signal: opts?.signal,\n    });\n    return { url: json.url, token: json.token };\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a stream.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to a ReadableStream containing the file contents, or null if file not found\n   */\n  async readFile(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<NodeJS.ReadableStream | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Read a file from the filesystem of this session as a Buffer.\n   *\n   * @param file - File to read, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the file contents as a Buffer, or null if file not found\n   */\n  async readFileToBuffer(\n    file: { path: string; cwd?: string },\n    opts?: { signal?: AbortSignal },\n  ): Promise<Buffer | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: file.path,\n      cwd: file.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    return consumeReadable(stream);\n  }\n\n  /**\n   * Download a file from the session to the local filesystem.\n   *\n   * @param src - Source file on the session, with path and optional cwd\n   * @param dst - Destination file on the local machine, with path and optional cwd\n   * @param opts - Optional parameters.\n   * @param opts.mkdirRecursive - If true, create parent directories for the destination if they don't exist.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The absolute path to the written file, or null if the source file was not found\n   */\n  async downloadFile(\n    src: { path: string; cwd?: string },\n    dst: { path: string; cwd?: string },\n    opts?: { mkdirRecursive?: boolean; signal?: AbortSignal },\n  ): Promise<string | null> {\n    \"use step\";\n    const client = await this.ensureClient();\n    if (!src?.path) {\n      throw new Error(\"downloadFile: source path is required\");\n    }\n\n    if (!dst?.path) {\n      throw new Error(\"downloadFile: destination path is required\");\n    }\n\n    const stream = await client.readFile({\n      sessionId: this.session.id,\n      path: src.path,\n      cwd: src.cwd,\n      signal: opts?.signal,\n    });\n\n    if (stream === null) {\n      return null;\n    }\n\n    try {\n      const dstPath = resolve(dst.cwd ?? \"\", dst.path);\n      if (opts?.mkdirRecursive) {\n        await mkdir(dirname(dstPath), { recursive: true });\n      }\n      await pipeline(stream, createWriteStream(dstPath), {\n        signal: opts?.signal,\n      });\n      return dstPath;\n    } finally {\n      stream.destroy();\n    }\n  }\n\n  /**\n   * Write files to the filesystem of this session.\n   * Defaults to writing to /vercel/sandbox unless an absolute path is specified.\n   * Writes files using the `vercel-sandbox` user.\n   *\n   * @param files - Array of files with path and stream/buffer contents\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the files are written\n   */\n  async writeFiles(\n    files: { path: string; content: string | Uint8Array; mode?: number }[],\n    opts?: { signal?: AbortSignal },\n  ) {\n    \"use step\";\n    const client = await this.ensureClient();\n    return client.writeFiles({\n      sessionId: this.session.id,\n      cwd: this.session.cwd,\n      extractDir: \"/\",\n      files: files,\n      signal: opts?.signal,\n    });\n  }\n\n  /**\n   * Get the public domain of a port of this session.\n   *\n   * @param p - Port number to resolve\n   * @returns A full domain (e.g. `https://subdomain.vercel.run`)\n   * @throws If the port has no associated route\n   */\n  domain(p: number): string {\n    const route = this.routes.find(({ port }) => port == p);\n    if (route) {\n      return `https://${route.subdomain}.vercel.run`;\n    } else {\n      throw new Error(`No route for port ${p}`);\n    }\n  }\n\n  /**\n   * Stop this session.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns The final session state and optional sandbox metadata.\n   */\n  async stop(opts?: {\n    signal?: AbortSignal;\n  }): Promise<{ session: SandboxSnapshot; sandbox?: SandboxMetaData; snapshot?: SnapshotMetadata }> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.stopSession({\n      sessionId: this.session.id,\n      signal: opts?.signal,\n    });\n    this.session = toSandboxSnapshot(response.json.session);\n    return { session: this.session, sandbox: response.json.sandbox, snapshot: response.json.snapshot };\n  }\n\n  /**\n   * Update the current session's settings.\n   *\n   * @param params - Fields to update.\n   * @param params.networkPolicy - The new network policy to apply.\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   *\n   * @example\n   * // Restrict to specific domains\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: [\"*.npmjs.org\", \"github.com\"],\n   *   }\n   * });\n   *\n   * @example\n   * // Inject credentials with per-domain transformers\n   * await session.update({\n   *   networkPolicy: {\n   *     allow: {\n   *       \"ai-gateway.vercel.sh\": [{\n   *         transform: [{\n   *           headers: { authorization: \"Bearer ...\" }\n   *         }]\n   *       }],\n   *       \"*\": []\n   *     }\n   *   }\n   * });\n   *\n   * @example\n   * // Deny all network access\n   * await session.update({ networkPolicy: \"deny-all\" });\n   */\n  async update(\n    params: {\n      networkPolicy?: NetworkPolicy;\n    },\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    if (params.networkPolicy !== undefined) {\n      const client = await this.ensureClient();\n      const response = await client.updateNetworkPolicy({\n        sessionId: this.session.id,\n        networkPolicy: params.networkPolicy,\n        signal: opts?.signal,\n      });\n\n      // Update the internal session with the new network policy\n      this.session = toSandboxSnapshot(response.json.session);\n    }\n  }\n\n  /**\n   * Extend the timeout of the session by the specified duration.\n   *\n   * This allows you to extend the lifetime of a session up until the maximum\n   * execution timeout for your plan.\n   *\n   * @param duration - The duration in milliseconds to extend the timeout by\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves when the timeout is extended\n   *\n   * @example\n   * const sandbox = await Sandbox.create({ timeout: ms('10m') });\n   * const session = sandbox.currentSession();\n   * // Extends timeout by 5 minutes, to a total of 15 minutes.\n   * await session.extendTimeout(ms('5m'));\n   */\n  async extendTimeout(\n    duration: number,\n    opts?: { signal?: AbortSignal },\n  ): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.extendTimeout({\n      sessionId: this.session.id,\n      duration,\n      signal: opts?.signal,\n    });\n\n    // Update the internal sandbox metadata with the new timeout value\n    this.session = toSandboxSnapshot(response.json.session);\n  }\n\n  /**\n   * Create a snapshot from this currently running session. New sandboxes can\n   * then be created from this snapshot using {@link Sandbox.create}.\n   *\n   * Note: this session will be stopped as part of the snapshot creation process.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.expiration - Optional expiration time in milliseconds. Use 0 for no expiration at all.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves to the Snapshot instance\n   */\n  async snapshot(opts?: {\n    expiration?: number;\n    signal?: AbortSignal;\n  }): Promise<Snapshot> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.createSnapshot({\n      sessionId: this.session.id,\n      expiration: opts?.expiration,\n      signal: opts?.signal,\n    });\n\n    this.session = toSandboxSnapshot(response.json.session);\n\n    return new Snapshot({\n      client,\n      snapshot: response.json.snapshot,\n    });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA+EA,IAAa,UAAb,MAAa,QAAQ;;;;;;;;CAUnB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAM,gBAAgB;AAC1C,OAAK,UAAU,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;CAcd,IAAY,SAAoB;AAC9B,MAAI,CAAC,KAAK,QAAS,OAAM,IAAI,MAAM,6BAA6B;AAChE,SAAO,KAAK;;;CAId,IAAI,mBAAoC;AACtC,SAAO,KAAK;;;;;CAMd,IAAW,YAAoB;AAC7B,SAAO,KAAK,QAAQ;;CAGtB,IAAW,kBAAsC;AAC/C,SAAO,KAAK,QAAQ,mBAAmB;;;;;CAMzC,IAAW,SAAoC;AAC7C,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;CAMzC,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAA2C;AACpD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,QAAgB;AACzB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,SAAiB;AAC1B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,UAAkB;AAC3B,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,MAAc;AACvB,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,cAAoB;AAC7B,SAAO,IAAI,KAAK,KAAK,QAAQ,YAAY;;;;;CAM3C,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,kBAAoC;AAC7C,SAAO,KAAK,QAAQ,mBAAmB,OACnC,IAAI,KAAK,KAAK,QAAQ,gBAAgB,GACtC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,YAA8B;AACvC,SAAO,KAAK,QAAQ,aAAa,OAC7B,IAAI,KAAK,KAAK,QAAQ,UAAU,GAChC;;;;;CAMN,IAAW,WAA+B;AACxC,SAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,gBAAkC;AAC3C,SAAO,KAAK,QAAQ,iBAAiB,OACjC,IAAI,KAAK,KAAK,QAAQ,cAAc,GACpC;;;;;CAMN,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,QAAQ,UAAU;;;;;;CAOzC,IAAW,mBAAuC;AAChD,SAAO,KAAK,QAAQ;;;;;;CAOtB,IAAW,kBAEG;AACZ,SAAO,KAAK,QAAQ;;;;;;;;;;CAWtB,QAAQ,oBAAoB,UAAsC;AAChE,SAAO;GACL,SAAS,SAAS;GAClB,QAAQ,SAAS;GAClB;;CAGH,QAAQ,sBAAsB,MAAkC;AAC9D,SAAO,IAAI,QAAQ;GAAE,QAAQ,KAAK;GAAQ,UAAU,KAAK;GAAS,CAAC;;CAGrE,YAAY,QAQT;OAzOK,UAA4B;AA0OlC,OAAK,SAAS,OAAO;AACrB,MAAI,cAAc,OAChB,MAAK,UAAU,OAAO;OACjB;AACL,QAAK,UAAU,OAAO;AACtB,QAAK,UAAU,kBAAkB,OAAO,QAAQ;;;;CAKpD,aAAa,QAAkC;AAC7C,EAAC,KAAwC,SAAS;;;;;;;;;;CAWpD,MAAM,WACJ,OACA,MACkB;AAClB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,UAAU,MAAM,OAAO,WAAW;GACtC,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC;AAEF,SAAO,IAAI,QAAQ;GACjB;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,QAAQ,KAAK;GACnB,CAAC;;CAsCJ,MAAM,WACJ,iBACA,MACA,MACoC;AACpC;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAMA,SACJ,OAAO,oBAAoB,WACvB;GACE,KAAK;GACL;GACA,QAAQ,MAAM;GACd,WAAW,MAAM;GAClB,GACD;EACN,MAAM,OAAO,OAAO,WAAW,QAAQ;EACvC,MAAM,WAAW,OAAO,cAAoC;AAC1D,OAAI,CAAC,OAAO,UAAU,CAAC,OAAO,OAC5B;AAGF,OAAI;AACF,eAAW,MAAM,OAAOC,UAAQ,KAAK,EAAE,QAAQ,OAAO,QAAQ,CAAC,CAC7D,KAAI,IAAI,WAAW,SACjB,QAAO,QAAQ,MAAM,IAAI,KAAK;aACrB,IAAI,WAAW,SACxB,QAAO,QAAQ,MAAM,IAAI,KAAK;YAG3B,KAAK;AACZ,QAAI,OAAO,QAAQ,QACjB;AAEF,UAAM;;;AAIV,MAAI,MAAM;GACR,MAAM,gBAAgB,MAAM,OAAO,WAAW;IAC5C,WAAW,KAAK,QAAQ;IACxB,SAAS,OAAO;IAChB,MAAM,OAAO,QAAQ,EAAE;IACvB,KAAK,OAAO;IACZ,KAAK,OAAO,OAAO,EAAE;IACrB,MAAM,OAAO,QAAQ;IACrB,MAAM;IACN,SAAS,OAAO;IAChB,QAAQ,OAAO;IAChB,CAAC;GAEF,MAAMA,YAAU,IAAI,QAAQ;IAC1B;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK,cAAc;IACpB,CAAC;GAEF,MAAM,CAAC,YAAY,MAAM,QAAQ,IAAI,CACnC,cAAc,UACd,SAASA,UAAQ,CAClB,CAAC;AACF,UAAO,IAAI,gBAAgB;IACzB;IACA,WAAW,KAAK,QAAQ;IACxB,KAAK;IACL,UAAU,SAAS,YAAY;IAChC,CAAC;;EAGJ,MAAM,kBAAkB,MAAM,OAAO,WAAW;GAC9C,WAAW,KAAK,QAAQ;GACxB,SAAS,OAAO;GAChB,MAAM,OAAO,QAAQ,EAAE;GACvB,KAAK,OAAO;GACZ,KAAK,OAAO,OAAO,EAAE;GACrB,MAAM,OAAO,QAAQ;GACrB,SAAS,OAAO;GAChB,QAAQ,OAAO;GAChB,CAAC;EAEF,MAAM,UAAU,IAAI,QAAQ;GAC1B;GACA,WAAW,KAAK,QAAQ;GACxB,KAAK,gBAAgB,KAAK;GAC3B,CAAC;AAEF,EAAK,SAAS,QAAQ,CAAC,OAAO,QAAQ;AACpC,OAAI,OAAO,QAAQ,QACjB;AAEF,IAAC,OAAO,UAAU,OAAO,SAAS,KAAK,SAAS,IAAI;IACpD;AAEF,SAAO;;;;;;;;;CAUT,MAAM,MAAM,QAAc,MAAgD;AACxE;AAEA,SADe,MAAM,KAAK,cAAc,EAC3B,MAAM;GACjB,WAAW,KAAK,QAAQ;GACxB,MAAMC;GACN,QAAQ,MAAM;GACf,CAAC;;;;;;;;;CAUJ,MAAM,gBAAgB,MAEsB;AAC1C;EAEA,MAAM,EAAE,SAAS,OADF,MAAM,KAAK,cAAc,EACV,gBAAgB;GAC5C,WAAW,KAAK,QAAQ;GACxB,QAAQ,MAAM;GACf,CAAC;AACF,SAAO;GAAE,KAAK,KAAK;GAAK,OAAO,KAAK;GAAO;;;;;;;;;;CAW7C,MAAM,SACJ,MACA,MACuC;AACvC;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,SAAS;GACrB,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;;;;;;;;;;CAWJ,MAAM,iBACJ,MACA,MACwB;AACxB;EAEA,MAAM,SAAS,OADA,MAAM,KAAK,cAAc,EACZ,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,KAAK;GACX,KAAK,KAAK;GACV,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,SAAO,gBAAgB,OAAO;;;;;;;;;;;;CAahC,MAAM,aACJ,KACA,KACA,MACwB;AACxB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;AACxC,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,wCAAwC;AAG1D,MAAI,CAAC,KAAK,KACR,OAAM,IAAI,MAAM,6CAA6C;EAG/D,MAAM,SAAS,MAAM,OAAO,SAAS;GACnC,WAAW,KAAK,QAAQ;GACxB,MAAM,IAAI;GACV,KAAK,IAAI;GACT,QAAQ,MAAM;GACf,CAAC;AAEF,MAAI,WAAW,KACb,QAAO;AAGT,MAAI;GACF,MAAM,UAAU,QAAQ,IAAI,OAAO,IAAI,IAAI,KAAK;AAChD,OAAI,MAAM,eACR,OAAM,MAAM,QAAQ,QAAQ,EAAE,EAAE,WAAW,MAAM,CAAC;AAEpD,SAAM,SAAS,QAAQ,kBAAkB,QAAQ,EAAE,EACjD,QAAQ,MAAM,QACf,CAAC;AACF,UAAO;YACC;AACR,UAAO,SAAS;;;;;;;;;;;;;CAcpB,MAAM,WACJ,OACA,MACA;AACA;AAEA,UADe,MAAM,KAAK,cAAc,EAC1B,WAAW;GACvB,WAAW,KAAK,QAAQ;GACxB,KAAK,KAAK,QAAQ;GAClB,YAAY;GACL;GACP,QAAQ,MAAM;GACf,CAAC;;;;;;;;;CAUJ,OAAO,GAAmB;EACxB,MAAM,QAAQ,KAAK,OAAO,MAAM,EAAE,WAAW,QAAQ,EAAE;AACvD,MAAI,MACF,QAAO,WAAW,MAAM,UAAU;MAElC,OAAM,IAAI,MAAM,qBAAqB,IAAI;;;;;;;;;CAW7C,MAAM,KAAK,MAEuF;AAChG;EAEA,MAAM,WAAW,OADF,MAAM,KAAK,cAAc,EACV,YAAY;GACxC,WAAW,KAAK,QAAQ;GACxB,QAAQ,MAAM;GACf,CAAC;AACF,OAAK,UAAU,kBAAkB,SAAS,KAAK,QAAQ;AACvD,SAAO;GAAE,SAAS,KAAK;GAAS,SAAS,SAAS,KAAK;GAAS,UAAU,SAAS,KAAK;GAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsCpG,MAAM,OACJ,QAGA,MACe;AACf;AACA,MAAI,OAAO,kBAAkB,OAS3B,MAAK,UAAU,mBAPE,OADF,MAAM,KAAK,cAAc,EACV,oBAAoB;GAChD,WAAW,KAAK,QAAQ;GACxB,eAAe,OAAO;GACtB,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;;;;;;;CAqB3D,MAAM,cACJ,UACA,MACe;AACf;AASA,OAAK,UAAU,mBAPE,OADF,MAAM,KAAK,cAAc,EACV,cAAc;GAC1C,WAAW,KAAK,QAAQ;GACxB;GACA,QAAQ,MAAM;GACf,CAAC,EAGwC,KAAK,QAAQ;;;;;;;;;;;;;CAczD,MAAM,SAAS,MAGO;AACpB;EACA,MAAM,SAAS,MAAM,KAAK,cAAc;EACxC,MAAM,WAAW,MAAM,OAAO,eAAe;GAC3C,WAAW,KAAK,QAAQ;GACxB,YAAY,MAAM;GAClB,QAAQ,MAAM;GACf,CAAC;AAEF,OAAK,UAAU,kBAAkB,SAAS,KAAK,QAAQ;AAEvD,SAAO,IAAI,SAAS;GAClB;GACA,UAAU,SAAS,KAAK;GACzB,CAAC"}

dist/snapshot.d.cts

@@ -108,14 +108,10 @@ import { Paginator } from "./utils/paginator.cjs";
   static list(params?: Partial<Parameters<APIClient["listSnapshots"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
-    pagination: {
-      count: number;
-      next: string | null;
-    };
     snapshots: {
-      status: "failed" | "created" | "deleted";
       id: string;
+      sourceSessionId: string;
       region: string;
+      status: "failed" | "created" | "deleted";
+      sizeBytes: number;
       createdAt: number;
       updatedAt: number;
-      sourceSessionId: string;
-      sizeBytes: number;
       expiresAt?: number | undefined;
@@ -126,2 +122,6 @@ lastUsedAt?: number | undefined;
     }[];
+    pagination: {
+      count: number;
+      next: string | null;
+    };
   }, "snapshots">>;
@@ -147,16 +147,11 @@ /**
   } & Partial<Parameters<APIClient["getSnapshotTree"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
-    pagination: {
-      count: number;
-      next: string | null;
-    };
     snapshots: {
-      count: string;
       snapshot: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -168,9 +163,9 @@ lastUsedAt?: number | undefined;
       siblings: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -181,13 +176,17 @@ lastUsedAt?: number | undefined;
       }[];
+      count: string;
     }[];
+    pagination: {
+      count: number;
+      next: string | null;
+    };
     anchor?: {
-      count: string;
       snapshot: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -199,9 +198,9 @@ lastUsedAt?: number | undefined;
       siblings: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -212,2 +211,3 @@ lastUsedAt?: number | undefined;
       }[];
+      count: string;
     } | undefined;
@@ -214,0 +214,0 @@ }, "snapshots">>;

dist/snapshot.d.ts

@@ -109,14 +109,10 @@ import { Paginator } from "./utils/paginator.js";
   static list(params?: Partial<Parameters<APIClient["listSnapshots"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
-    pagination: {
-      count: number;
-      next: string | null;
-    };
     snapshots: {
-      status: "failed" | "created" | "deleted";
       id: string;
+      sourceSessionId: string;
       region: string;
+      status: "failed" | "created" | "deleted";
+      sizeBytes: number;
       createdAt: number;
       updatedAt: number;
-      sourceSessionId: string;
-      sizeBytes: number;
       expiresAt?: number | undefined;
@@ -127,2 +123,6 @@ lastUsedAt?: number | undefined;
     }[];
+    pagination: {
+      count: number;
+      next: string | null;
+    };
   }, "snapshots">>;
@@ -148,16 +148,11 @@ /**
   } & Partial<Parameters<APIClient["getSnapshotTree"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
-    pagination: {
-      count: number;
-      next: string | null;
-    };
     snapshots: {
-      count: string;
       snapshot: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -169,9 +164,9 @@ lastUsedAt?: number | undefined;
       siblings: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -182,13 +177,17 @@ lastUsedAt?: number | undefined;
       }[];
+      count: string;
     }[];
+    pagination: {
+      count: number;
+      next: string | null;
+    };
     anchor?: {
-      count: string;
       snapshot: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -200,9 +199,9 @@ lastUsedAt?: number | undefined;
       siblings: {
-        status: "failed" | "created" | "deleted";
         id: string;
+        sourceSessionId: string;
         region: string;
+        status: "failed" | "created" | "deleted";
+        sizeBytes: number;
         createdAt: number;
         updatedAt: number;
-        sourceSessionId: string;
-        sizeBytes: number;
         expiresAt?: number | undefined;
@@ -213,2 +212,3 @@ lastUsedAt?: number | undefined;
       }[];
+      count: string;
     } | undefined;
@@ -215,0 +215,0 @@ }, "snapshots">>;

dist/version.cjs

 
 //#region src/version.ts
-const VERSION = "2.2.0-beta.0";
+const VERSION = "2.2.0";
 
@@ -5,0 +5,0 @@ //#endregion

dist/version.cjs.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"version.cjs","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.2.0-beta.0\";\n"],"mappings":";;AACA,MAAa,UAAU"}
+{"version":3,"file":"version.cjs","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.2.0\";\n"],"mappings":";;AACA,MAAa,UAAU"}

dist/version.js

 //#region src/version.ts
-const VERSION = "2.2.0-beta.0";
+const VERSION = "2.2.0";
 
@@ -4,0 +4,0 @@ //#endregion

dist/version.js.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"version.js","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.2.0-beta.0\";\n"],"mappings":";AACA,MAAa,UAAU"}
+{"version":3,"file":"version.js","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Autogenerated by inject-version.ts\nexport const VERSION = \"2.2.0\";\n"],"mappings":";AACA,MAAa,UAAU"}

package.json

 {
   "name": "@vercel/sandbox",
-  "version": "2.2.0-beta.0",
+  "version": "2.2.0",
   "description": "Software Development Kit for Vercel Sandbox",
@@ -58,3 +58,3 @@ "type": "module",
     "xdg-app-paths": "5.1.0",
-    "zod": "3.24.4"
+    "zod": "^4.1.1"
   },
@@ -61,0 +61,0 @@ "devDependencies": {

dist/drive.cjs

-const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
-const require_api_client = require('./api-client/api-client.cjs');
-require('./api-client/index.cjs');
-const require_get_credentials = require('./utils/get-credentials.cjs');
-const require_paginator = require('./utils/paginator.cjs');
-let __workflow_serde = require("@workflow/serde");
-
-//#region src/drive.ts
-/**
-* A Drive is a persistent, bottomless storage that can be attached and detached to Sandboxes.
-* Drives can be mounted as read-write or read-only, at a configurable path with `Sandbox.create()`.
-*
-* Use {@link Drive.getOrCreate} to construct.
-* @hideconstructor
-*/
-var Drive = class Drive {
-	/**
-	* Lazily resolve credentials and construct an API client.
-	* @internal
-	*/
-	async ensureClient() {
-		"use step";
-		if (this._client) return this._client;
-		const credentials = await require_get_credentials.getCredentials();
-		this._client = new require_api_client.APIClient({
-			teamId: credentials.teamId,
-			token: credentials.token
-		});
-		return this._client;
-	}
-	/**
-	* The name of the drive.
-	*/
-	get name() {
-		return this.drive.name;
-	}
-	/**
-	* The project ID that owns the drive.
-	*/
-	get projectId() {
-		return this._projectId;
-	}
-	/**
-	* The maximum drive size in bytes.
-	*/
-	get maxSize() {
-		return this.drive.maxSizeBytes;
-	}
-	/**
-	* Current session ID the drive is attached to, if any.
-	*/
-	get currentSessionId() {
-		return this.drive.currentSessionId;
-	}
-	/**
-	* Current sandbox name the drive is attached to, if any.
-	*/
-	get currentSandboxName() {
-		return this.drive.currentSandboxName;
-	}
-	/**
-	* Timestamp when the drive was created.
-	*/
-	get createdAt() {
-		return new Date(this.drive.createdAt);
-	}
-	/**
-	* Timestamp when the drive was last updated.
-	*/
-	get updatedAt() {
-		return new Date(this.drive.updatedAt);
-	}
-	/**
-	* Serialize a Drive instance to plain data for @workflow/serde.
-	*
-	* @param instance - The Drive instance to serialize
-	* @returns A plain object containing drive metadata
-	*/
-	static [__workflow_serde.WORKFLOW_SERIALIZE](instance) {
-		return {
-			drive: instance.drive,
-			projectId: instance._projectId
-		};
-	}
-	/**
-	* Deserialize a Drive from serialized data.
-	*
-	* The deserialized instance uses the serialized metadata synchronously and
-	* lazily creates an API client only when methods perform API requests.
-	*
-	* @param data - The serialized drive data
-	* @returns The reconstructed Drive instance
-	*/
-	static [__workflow_serde.WORKFLOW_DESERIALIZE](data) {
-		return new Drive({
-			drive: data.drive,
-			projectId: data.projectId
-		});
-	}
-	constructor({ client, drive, projectId }) {
-		this._client = null;
-		this._client = client ?? null;
-		this.drive = drive;
-		this._projectId = projectId ?? drive.projectId;
-	}
-	/**
-	* Allow to get a list of drives for a team narrowed to the given params.
-	* It returns both the drives and the pagination metadata to allow getting
-	* the next page of results.
-	*
-	* The returned object is async-iterable to auto-paginate through all pages:
-	*
-	* ```ts
-	* const result = await Drive.list({ limit: 10 });
-	* for await (const drive of result) { ... }
-	* // or: await result.toArray();
-	* // or: for await (const page of result.pages()) { ... }
-	* ```
-	*/
-	static async list(params) {
-		"use step";
-		const credentials = await require_get_credentials.getCredentials(params);
-		const client = new require_api_client.APIClient({
-			teamId: credentials.teamId,
-			token: credentials.token,
-			fetch: params?.fetch
-		});
-		const fetchPage = async (cursor) => {
-			const response = await client.listDrives({
-				...credentials,
-				...params,
-				...cursor !== void 0 && { cursor }
-			});
-			return {
-				...response.json,
-				drives: response.json.drives.map((drive) => new Drive({
-					client,
-					drive,
-					projectId: credentials.projectId
-				}))
-			};
-		};
-		return require_paginator.attachPaginator(await fetchPage(params?.cursor ?? params?.until), {
-			itemsKey: "drives",
-			fetchNext: fetchPage,
-			signal: params?.signal
-		});
-	}
-	/**
-	* Retrieve an existing drive, or create a new one if it doesn't exists.
-	*
-	* @param params - Get/create parameters and optional credentials.
-	* @returns A promise resolving to the {@link Drive}.
-	*/
-	static async getOrCreate(params) {
-		"use step";
-		const credentials = await require_get_credentials.getCredentials(params);
-		const client = new require_api_client.APIClient({
-			teamId: credentials.teamId,
-			token: credentials.token,
-			fetch: params.fetch
-		});
-		return new Drive({
-			client,
-			drive: (await client.getOrCreateDrive({
-				projectId: credentials.projectId,
-				name: params.name,
-				maxSizeBytes: params.maxSize,
-				signal: params.signal
-			})).json.drive,
-			projectId: credentials.projectId
-		});
-	}
-	/**
-	* Delete this drive. The drive must not be attached to any sandbox.
-	* This operation is irreversible and will delete all data stored in the drive.
-	*
-	* @param opts - Optional parameters.
-	* @param opts.signal - An AbortSignal to cancel the operation.
-	* @returns A promise that resolves once the drive has been deleted.
-	*/
-	async delete(opts) {
-		"use step";
-		this.drive = (await (await this.ensureClient()).deleteDrive({
-			projectId: this._projectId,
-			name: this.drive.name,
-			signal: opts?.signal
-		})).json.drive;
-	}
-};
-
-//#endregion
-exports.Drive = Drive;
-//# sourceMappingURL=drive.cjs.map

dist/drive.cjs.map

-{"version":3,"file":"drive.cjs","names":["getCredentials","APIClient","WORKFLOW_SERIALIZE","WORKFLOW_DESERIALIZE","attachPaginator"],"sources":["../src/drive.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { DriveMetadata } from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\n\nexport interface SerializedDrive {\n  drive: DriveMetadata;\n  projectId?: string;\n}\n\n/** @inline */\ninterface GetOrCreateDriveParams {\n  /**\n   * The name of the drive to get or create. Must be unique within the project.\n   */\n  name: string;\n  /**\n   * Maximum drive size in bytes. If omitted, a default of 100 GiB is used.\n   */\n  maxSize?: number;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n}\n\n/**\n * A Drive is a persistent, bottomless storage that can be attached and detached to Sandboxes.\n * Drives can be mounted as read-write or read-only, at a configurable path with `Sandbox.create()`.\n *\n * Use {@link Drive.getOrCreate} to construct.\n * @hideconstructor\n */\nexport class Drive {\n  private _client: APIClient | null = null;\n  private drive: DriveMetadata;\n  private readonly _projectId: string;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * The name of the drive.\n   */\n  public get name(): string {\n    return this.drive.name;\n  }\n\n  /**\n   * The project ID that owns the drive.\n   */\n  public get projectId(): string {\n    return this._projectId;\n  }\n\n  /**\n   * The maximum drive size in bytes.\n   */\n  public get maxSize(): number {\n    return this.drive.maxSizeBytes;\n  }\n\n  /**\n   * Current session ID the drive is attached to, if any.\n   */\n  public get currentSessionId(): string | undefined {\n    return this.drive.currentSessionId;\n  }\n\n  /**\n   * Current sandbox name the drive is attached to, if any.\n   */\n  public get currentSandboxName(): string | undefined {\n    return this.drive.currentSandboxName;\n  }\n\n  /**\n   * Timestamp when the drive was created.\n   */\n  public get createdAt(): Date {\n    return new Date(this.drive.createdAt);\n  }\n\n  /**\n   * Timestamp when the drive was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.drive.updatedAt);\n  }\n\n  /**\n   * Serialize a Drive instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Drive instance to serialize\n   * @returns A plain object containing drive metadata\n   */\n  static [WORKFLOW_SERIALIZE](instance: Drive): SerializedDrive {\n    return {\n      drive: instance.drive,\n      projectId: instance._projectId,\n    };\n  }\n\n  /**\n   * Deserialize a Drive from serialized data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized drive data\n   * @returns The reconstructed Drive instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedDrive): Drive {\n    return new Drive({\n      drive: data.drive,\n      projectId: data.projectId,\n    });\n  }\n\n  constructor({\n    client,\n    drive,\n    projectId,\n  }: {\n    client?: APIClient;\n    drive: DriveMetadata;\n    projectId?: string;\n  }) {\n    this._client = client ?? null;\n    this.drive = drive;\n    this._projectId = projectId ?? drive.projectId;\n  }\n\n  /**\n   * Allow to get a list of drives for a team narrowed to the given params.\n   * It returns both the drives and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Drive.list({ limit: 10 });\n   * for await (const drive of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listDrives\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string | number) => {\n      const response = await client.listDrives({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return {\n        ...response.json,\n        drives: response.json.drives.map(\n          (drive) =>\n            new Drive({\n              client,\n              drive,\n              projectId: credentials.projectId,\n            }),\n        ),\n      };\n    };\n    const firstPage = await fetchPage(params?.cursor ?? params?.until);\n    return attachPaginator(firstPage, {\n      itemsKey: \"drives\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Retrieve an existing drive, or create a new one if it doesn't exists.\n   *\n   * @param params - Get/create parameters and optional credentials.\n   * @returns A promise resolving to the {@link Drive}.\n   */\n  static async getOrCreate(\n    params: (\n      | GetOrCreateDriveParams\n      | (GetOrCreateDriveParams & Credentials)\n    ) &\n      WithFetchOptions,\n  ): Promise<Drive> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n\n    const response = await client.getOrCreateDrive({\n      projectId: credentials.projectId,\n      name: params.name,\n      maxSizeBytes: params.maxSize,\n      signal: params.signal,\n    });\n\n    return new Drive({\n      client,\n      drive: response.json.drive,\n      projectId: credentials.projectId,\n    });\n  }\n\n  /**\n   * Delete this drive. The drive must not be attached to any sandbox.\n   * This operation is irreversible and will delete all data stored in the drive.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves once the drive has been deleted.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.deleteDrive({\n      projectId: this._projectId,\n      name: this.drive.name,\n      signal: opts?.signal,\n    });\n\n    this.drive = response.json.drive;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAmCA,IAAa,QAAb,MAAa,MAAM;;;;;CASjB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAMA,wCAAgB;AAC1C,OAAK,UAAU,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,OAAe;AACxB,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,YAAoB;AAC7B,SAAO,KAAK;;;;;CAMd,IAAW,UAAkB;AAC3B,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,mBAAuC;AAChD,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,qBAAyC;AAClD,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,MAAM,UAAU;;;;;CAMvC,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,MAAM,UAAU;;;;;;;;CASvC,QAAQC,qCAAoB,UAAkC;AAC5D,SAAO;GACL,OAAO,SAAS;GAChB,WAAW,SAAS;GACrB;;;;;;;;;;;CAYH,QAAQC,uCAAsB,MAA8B;AAC1D,SAAO,IAAI,MAAM;GACf,OAAO,KAAK;GACZ,WAAW,KAAK;GACjB,CAAC;;CAGJ,YAAY,EACV,QACA,OACA,aAKC;OAzGK,UAA4B;AA0GlC,OAAK,UAAU,UAAU;AACzB,OAAK,QAAQ;AACb,OAAK,aAAa,aAAa,MAAM;;;;;;;;;;;;;;;;CAiBvC,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAMH,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAA6B;GACpD,MAAM,WAAW,MAAM,OAAO,WAAW;IACvC,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC;AACF,UAAO;IACL,GAAG,SAAS;IACZ,QAAQ,SAAS,KAAK,OAAO,KAC1B,UACC,IAAI,MAAM;KACR;KACA;KACA,WAAW,YAAY;KACxB,CAAC,CACL;IACF;;AAGH,SAAOG,kCADW,MAAM,UAAU,QAAQ,UAAU,QAAQ,MAAM,EAChC;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,aAAa,YACX,QAKgB;AAChB;EACA,MAAM,cAAc,MAAMJ,uCAAe,OAAO;EAChD,MAAM,SAAS,IAAIC,6BAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;AASF,SAAO,IAAI,MAAM;GACf;GACA,QATe,MAAM,OAAO,iBAAiB;IAC7C,WAAW,YAAY;IACvB,MAAM,OAAO;IACb,cAAc,OAAO;IACrB,QAAQ,OAAO;IAChB,CAAC,EAIgB,KAAK;GACrB,WAAW,YAAY;GACxB,CAAC;;;;;;;;;;CAWJ,MAAM,OAAO,MAAgD;AAC3D;AAQA,OAAK,SANY,OADF,MAAM,KAAK,cAAc,EACV,YAAY;GACxC,WAAW,KAAK;GAChB,MAAM,KAAK,MAAM;GACjB,QAAQ,MAAM;GACf,CAAC,EAEoB,KAAK"}

dist/drive.d.cts

-import { Paginator } from "./utils/paginator.cjs";
-import { DriveMetadata } from "./api-client/validators.cjs";
-import { APIClient, WithFetchOptions } from "./api-client/api-client.cjs";
-import { Credentials } from "./utils/get-credentials.cjs";
-import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from "@workflow/serde";
-
-//#region src/drive.d.ts
-interface SerializedDrive {
-  drive: DriveMetadata;
-  projectId?: string;
-}
-/** @inline */
-interface GetOrCreateDriveParams {
-  /**
-   * The name of the drive to get or create. Must be unique within the project.
-   */
-  name: string;
-  /**
-   * Maximum drive size in bytes. If omitted, a default of 100 GiB is used.
-   */
-  maxSize?: number;
-  /**
-   * An AbortSignal to cancel the operation.
-   */
-  signal?: AbortSignal;
-}
-/**
- * A Drive is a persistent, bottomless storage that can be attached and detached to Sandboxes.
- * Drives can be mounted as read-write or read-only, at a configurable path with `Sandbox.create()`.
- *
- * Use {@link Drive.getOrCreate} to construct.
- * @hideconstructor
- */
-declare class Drive {
-  private _client;
-  private drive;
-  private readonly _projectId;
-  /**
-   * Lazily resolve credentials and construct an API client.
-   * @internal
-   */
-  private ensureClient;
-  /**
-   * The name of the drive.
-   */
-  get name(): string;
-  /**
-   * The project ID that owns the drive.
-   */
-  get projectId(): string;
-  /**
-   * The maximum drive size in bytes.
-   */
-  get maxSize(): number;
-  /**
-   * Current session ID the drive is attached to, if any.
-   */
-  get currentSessionId(): string | undefined;
-  /**
-   * Current sandbox name the drive is attached to, if any.
-   */
-  get currentSandboxName(): string | undefined;
-  /**
-   * Timestamp when the drive was created.
-   */
-  get createdAt(): Date;
-  /**
-   * Timestamp when the drive was last updated.
-   */
-  get updatedAt(): Date;
-  /**
-   * Serialize a Drive instance to plain data for @workflow/serde.
-   *
-   * @param instance - The Drive instance to serialize
-   * @returns A plain object containing drive metadata
-   */
-  static [WORKFLOW_SERIALIZE](instance: Drive): SerializedDrive;
-  /**
-   * Deserialize a Drive from serialized data.
-   *
-   * The deserialized instance uses the serialized metadata synchronously and
-   * lazily creates an API client only when methods perform API requests.
-   *
-   * @param data - The serialized drive data
-   * @returns The reconstructed Drive instance
-   */
-  static [WORKFLOW_DESERIALIZE](data: SerializedDrive): Drive;
-  constructor({
-    client,
-    drive,
-    projectId
-  }: {
-    client?: APIClient;
-    drive: DriveMetadata;
-    projectId?: string;
-  });
-  /**
-   * Allow to get a list of drives for a team narrowed to the given params.
-   * It returns both the drives and the pagination metadata to allow getting
-   * the next page of results.
-   *
-   * The returned object is async-iterable to auto-paginate through all pages:
-   *
-   * ```ts
-   * const result = await Drive.list({ limit: 10 });
-   * for await (const drive of result) { ... }
-   * // or: await result.toArray();
-   * // or: for await (const page of result.pages()) { ... }
-   * ```
-   */
-  static list(params?: Partial<Parameters<APIClient["listDrives"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
-    drives: Drive[];
-    pagination: {
-      count: number;
-      next: string | null;
-    };
-  }, "drives">>;
-  /**
-   * Retrieve an existing drive, or create a new one if it doesn't exists.
-   *
-   * @param params - Get/create parameters and optional credentials.
-   * @returns A promise resolving to the {@link Drive}.
-   */
-  static getOrCreate(params: (GetOrCreateDriveParams | (GetOrCreateDriveParams & Credentials)) & WithFetchOptions): Promise<Drive>;
-  /**
-   * Delete this drive. The drive must not be attached to any sandbox.
-   * This operation is irreversible and will delete all data stored in the drive.
-   *
-   * @param opts - Optional parameters.
-   * @param opts.signal - An AbortSignal to cancel the operation.
-   * @returns A promise that resolves once the drive has been deleted.
-   */
-  delete(opts?: {
-    signal?: AbortSignal;
-  }): Promise<void>;
-}
-//#endregion
-export { Drive, SerializedDrive };
-//# sourceMappingURL=drive.d.cts.map

dist/drive.d.ts

-import { Paginator } from "./utils/paginator.js";
-import { DriveMetadata } from "./api-client/validators.js";
-import { APIClient, WithFetchOptions } from "./api-client/api-client.js";
-import "./api-client/index.js";
-import { Credentials } from "./utils/get-credentials.js";
-import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from "@workflow/serde";
-
-//#region src/drive.d.ts
-interface SerializedDrive {
-  drive: DriveMetadata;
-  projectId?: string;
-}
-/** @inline */
-interface GetOrCreateDriveParams {
-  /**
-   * The name of the drive to get or create. Must be unique within the project.
-   */
-  name: string;
-  /**
-   * Maximum drive size in bytes. If omitted, a default of 100 GiB is used.
-   */
-  maxSize?: number;
-  /**
-   * An AbortSignal to cancel the operation.
-   */
-  signal?: AbortSignal;
-}
-/**
- * A Drive is a persistent, bottomless storage that can be attached and detached to Sandboxes.
- * Drives can be mounted as read-write or read-only, at a configurable path with `Sandbox.create()`.
- *
- * Use {@link Drive.getOrCreate} to construct.
- * @hideconstructor
- */
-declare class Drive {
-  private _client;
-  private drive;
-  private readonly _projectId;
-  /**
-   * Lazily resolve credentials and construct an API client.
-   * @internal
-   */
-  private ensureClient;
-  /**
-   * The name of the drive.
-   */
-  get name(): string;
-  /**
-   * The project ID that owns the drive.
-   */
-  get projectId(): string;
-  /**
-   * The maximum drive size in bytes.
-   */
-  get maxSize(): number;
-  /**
-   * Current session ID the drive is attached to, if any.
-   */
-  get currentSessionId(): string | undefined;
-  /**
-   * Current sandbox name the drive is attached to, if any.
-   */
-  get currentSandboxName(): string | undefined;
-  /**
-   * Timestamp when the drive was created.
-   */
-  get createdAt(): Date;
-  /**
-   * Timestamp when the drive was last updated.
-   */
-  get updatedAt(): Date;
-  /**
-   * Serialize a Drive instance to plain data for @workflow/serde.
-   *
-   * @param instance - The Drive instance to serialize
-   * @returns A plain object containing drive metadata
-   */
-  static [WORKFLOW_SERIALIZE](instance: Drive): SerializedDrive;
-  /**
-   * Deserialize a Drive from serialized data.
-   *
-   * The deserialized instance uses the serialized metadata synchronously and
-   * lazily creates an API client only when methods perform API requests.
-   *
-   * @param data - The serialized drive data
-   * @returns The reconstructed Drive instance
-   */
-  static [WORKFLOW_DESERIALIZE](data: SerializedDrive): Drive;
-  constructor({
-    client,
-    drive,
-    projectId
-  }: {
-    client?: APIClient;
-    drive: DriveMetadata;
-    projectId?: string;
-  });
-  /**
-   * Allow to get a list of drives for a team narrowed to the given params.
-   * It returns both the drives and the pagination metadata to allow getting
-   * the next page of results.
-   *
-   * The returned object is async-iterable to auto-paginate through all pages:
-   *
-   * ```ts
-   * const result = await Drive.list({ limit: 10 });
-   * for await (const drive of result) { ... }
-   * // or: await result.toArray();
-   * // or: for await (const page of result.pages()) { ... }
-   * ```
-   */
-  static list(params?: Partial<Parameters<APIClient["listDrives"]>[0]> & Partial<Credentials> & WithFetchOptions): Promise<Paginator<{
-    drives: Drive[];
-    pagination: {
-      count: number;
-      next: string | null;
-    };
-  }, "drives">>;
-  /**
-   * Retrieve an existing drive, or create a new one if it doesn't exists.
-   *
-   * @param params - Get/create parameters and optional credentials.
-   * @returns A promise resolving to the {@link Drive}.
-   */
-  static getOrCreate(params: (GetOrCreateDriveParams | (GetOrCreateDriveParams & Credentials)) & WithFetchOptions): Promise<Drive>;
-  /**
-   * Delete this drive. The drive must not be attached to any sandbox.
-   * This operation is irreversible and will delete all data stored in the drive.
-   *
-   * @param opts - Optional parameters.
-   * @param opts.signal - An AbortSignal to cancel the operation.
-   * @returns A promise that resolves once the drive has been deleted.
-   */
-  delete(opts?: {
-    signal?: AbortSignal;
-  }): Promise<void>;
-}
-//#endregion
-export { Drive, SerializedDrive };
-//# sourceMappingURL=drive.d.ts.map

dist/drive.js

-import { APIClient } from "./api-client/api-client.js";
-import "./api-client/index.js";
-import { getCredentials } from "./utils/get-credentials.js";
-import { attachPaginator } from "./utils/paginator.js";
-import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from "@workflow/serde";
-
-//#region src/drive.ts
-/**
-* A Drive is a persistent, bottomless storage that can be attached and detached to Sandboxes.
-* Drives can be mounted as read-write or read-only, at a configurable path with `Sandbox.create()`.
-*
-* Use {@link Drive.getOrCreate} to construct.
-* @hideconstructor
-*/
-var Drive = class Drive {
-	/**
-	* Lazily resolve credentials and construct an API client.
-	* @internal
-	*/
-	async ensureClient() {
-		"use step";
-		if (this._client) return this._client;
-		const credentials = await getCredentials();
-		this._client = new APIClient({
-			teamId: credentials.teamId,
-			token: credentials.token
-		});
-		return this._client;
-	}
-	/**
-	* The name of the drive.
-	*/
-	get name() {
-		return this.drive.name;
-	}
-	/**
-	* The project ID that owns the drive.
-	*/
-	get projectId() {
-		return this._projectId;
-	}
-	/**
-	* The maximum drive size in bytes.
-	*/
-	get maxSize() {
-		return this.drive.maxSizeBytes;
-	}
-	/**
-	* Current session ID the drive is attached to, if any.
-	*/
-	get currentSessionId() {
-		return this.drive.currentSessionId;
-	}
-	/**
-	* Current sandbox name the drive is attached to, if any.
-	*/
-	get currentSandboxName() {
-		return this.drive.currentSandboxName;
-	}
-	/**
-	* Timestamp when the drive was created.
-	*/
-	get createdAt() {
-		return new Date(this.drive.createdAt);
-	}
-	/**
-	* Timestamp when the drive was last updated.
-	*/
-	get updatedAt() {
-		return new Date(this.drive.updatedAt);
-	}
-	/**
-	* Serialize a Drive instance to plain data for @workflow/serde.
-	*
-	* @param instance - The Drive instance to serialize
-	* @returns A plain object containing drive metadata
-	*/
-	static [WORKFLOW_SERIALIZE](instance) {
-		return {
-			drive: instance.drive,
-			projectId: instance._projectId
-		};
-	}
-	/**
-	* Deserialize a Drive from serialized data.
-	*
-	* The deserialized instance uses the serialized metadata synchronously and
-	* lazily creates an API client only when methods perform API requests.
-	*
-	* @param data - The serialized drive data
-	* @returns The reconstructed Drive instance
-	*/
-	static [WORKFLOW_DESERIALIZE](data) {
-		return new Drive({
-			drive: data.drive,
-			projectId: data.projectId
-		});
-	}
-	constructor({ client, drive, projectId }) {
-		this._client = null;
-		this._client = client ?? null;
-		this.drive = drive;
-		this._projectId = projectId ?? drive.projectId;
-	}
-	/**
-	* Allow to get a list of drives for a team narrowed to the given params.
-	* It returns both the drives and the pagination metadata to allow getting
-	* the next page of results.
-	*
-	* The returned object is async-iterable to auto-paginate through all pages:
-	*
-	* ```ts
-	* const result = await Drive.list({ limit: 10 });
-	* for await (const drive of result) { ... }
-	* // or: await result.toArray();
-	* // or: for await (const page of result.pages()) { ... }
-	* ```
-	*/
-	static async list(params) {
-		"use step";
-		const credentials = await getCredentials(params);
-		const client = new APIClient({
-			teamId: credentials.teamId,
-			token: credentials.token,
-			fetch: params?.fetch
-		});
-		const fetchPage = async (cursor) => {
-			const response = await client.listDrives({
-				...credentials,
-				...params,
-				...cursor !== void 0 && { cursor }
-			});
-			return {
-				...response.json,
-				drives: response.json.drives.map((drive) => new Drive({
-					client,
-					drive,
-					projectId: credentials.projectId
-				}))
-			};
-		};
-		return attachPaginator(await fetchPage(params?.cursor ?? params?.until), {
-			itemsKey: "drives",
-			fetchNext: fetchPage,
-			signal: params?.signal
-		});
-	}
-	/**
-	* Retrieve an existing drive, or create a new one if it doesn't exists.
-	*
-	* @param params - Get/create parameters and optional credentials.
-	* @returns A promise resolving to the {@link Drive}.
-	*/
-	static async getOrCreate(params) {
-		"use step";
-		const credentials = await getCredentials(params);
-		const client = new APIClient({
-			teamId: credentials.teamId,
-			token: credentials.token,
-			fetch: params.fetch
-		});
-		return new Drive({
-			client,
-			drive: (await client.getOrCreateDrive({
-				projectId: credentials.projectId,
-				name: params.name,
-				maxSizeBytes: params.maxSize,
-				signal: params.signal
-			})).json.drive,
-			projectId: credentials.projectId
-		});
-	}
-	/**
-	* Delete this drive. The drive must not be attached to any sandbox.
-	* This operation is irreversible and will delete all data stored in the drive.
-	*
-	* @param opts - Optional parameters.
-	* @param opts.signal - An AbortSignal to cancel the operation.
-	* @returns A promise that resolves once the drive has been deleted.
-	*/
-	async delete(opts) {
-		"use step";
-		this.drive = (await (await this.ensureClient()).deleteDrive({
-			projectId: this._projectId,
-			name: this.drive.name,
-			signal: opts?.signal
-		})).json.drive;
-	}
-};
-
-//#endregion
-export { Drive };
-//# sourceMappingURL=drive.js.map

dist/drive.js.map

-{"version":3,"file":"drive.js","names":[],"sources":["../src/drive.ts"],"sourcesContent":["import { WORKFLOW_DESERIALIZE, WORKFLOW_SERIALIZE } from \"@workflow/serde\";\nimport type { WithFetchOptions } from \"./api-client/api-client.js\";\nimport type { DriveMetadata } from \"./api-client/index.js\";\nimport { APIClient } from \"./api-client/index.js\";\nimport { type Credentials, getCredentials } from \"./utils/get-credentials.js\";\nimport { attachPaginator } from \"./utils/paginator.js\";\n\nexport interface SerializedDrive {\n  drive: DriveMetadata;\n  projectId?: string;\n}\n\n/** @inline */\ninterface GetOrCreateDriveParams {\n  /**\n   * The name of the drive to get or create. Must be unique within the project.\n   */\n  name: string;\n  /**\n   * Maximum drive size in bytes. If omitted, a default of 100 GiB is used.\n   */\n  maxSize?: number;\n  /**\n   * An AbortSignal to cancel the operation.\n   */\n  signal?: AbortSignal;\n}\n\n/**\n * A Drive is a persistent, bottomless storage that can be attached and detached to Sandboxes.\n * Drives can be mounted as read-write or read-only, at a configurable path with `Sandbox.create()`.\n *\n * Use {@link Drive.getOrCreate} to construct.\n * @hideconstructor\n */\nexport class Drive {\n  private _client: APIClient | null = null;\n  private drive: DriveMetadata;\n  private readonly _projectId: string;\n\n  /**\n   * Lazily resolve credentials and construct an API client.\n   * @internal\n   */\n  private async ensureClient(): Promise<APIClient> {\n    \"use step\";\n    if (this._client) return this._client;\n    const credentials = await getCredentials();\n    this._client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n    });\n    return this._client;\n  }\n\n  /**\n   * The name of the drive.\n   */\n  public get name(): string {\n    return this.drive.name;\n  }\n\n  /**\n   * The project ID that owns the drive.\n   */\n  public get projectId(): string {\n    return this._projectId;\n  }\n\n  /**\n   * The maximum drive size in bytes.\n   */\n  public get maxSize(): number {\n    return this.drive.maxSizeBytes;\n  }\n\n  /**\n   * Current session ID the drive is attached to, if any.\n   */\n  public get currentSessionId(): string | undefined {\n    return this.drive.currentSessionId;\n  }\n\n  /**\n   * Current sandbox name the drive is attached to, if any.\n   */\n  public get currentSandboxName(): string | undefined {\n    return this.drive.currentSandboxName;\n  }\n\n  /**\n   * Timestamp when the drive was created.\n   */\n  public get createdAt(): Date {\n    return new Date(this.drive.createdAt);\n  }\n\n  /**\n   * Timestamp when the drive was last updated.\n   */\n  public get updatedAt(): Date {\n    return new Date(this.drive.updatedAt);\n  }\n\n  /**\n   * Serialize a Drive instance to plain data for @workflow/serde.\n   *\n   * @param instance - The Drive instance to serialize\n   * @returns A plain object containing drive metadata\n   */\n  static [WORKFLOW_SERIALIZE](instance: Drive): SerializedDrive {\n    return {\n      drive: instance.drive,\n      projectId: instance._projectId,\n    };\n  }\n\n  /**\n   * Deserialize a Drive from serialized data.\n   *\n   * The deserialized instance uses the serialized metadata synchronously and\n   * lazily creates an API client only when methods perform API requests.\n   *\n   * @param data - The serialized drive data\n   * @returns The reconstructed Drive instance\n   */\n  static [WORKFLOW_DESERIALIZE](data: SerializedDrive): Drive {\n    return new Drive({\n      drive: data.drive,\n      projectId: data.projectId,\n    });\n  }\n\n  constructor({\n    client,\n    drive,\n    projectId,\n  }: {\n    client?: APIClient;\n    drive: DriveMetadata;\n    projectId?: string;\n  }) {\n    this._client = client ?? null;\n    this.drive = drive;\n    this._projectId = projectId ?? drive.projectId;\n  }\n\n  /**\n   * Allow to get a list of drives for a team narrowed to the given params.\n   * It returns both the drives and the pagination metadata to allow getting\n   * the next page of results.\n   *\n   * The returned object is async-iterable to auto-paginate through all pages:\n   *\n   * ```ts\n   * const result = await Drive.list({ limit: 10 });\n   * for await (const drive of result) { ... }\n   * // or: await result.toArray();\n   * // or: for await (const page of result.pages()) { ... }\n   * ```\n   */\n  static async list(\n    params?: Partial<Parameters<APIClient[\"listDrives\"]>[0]> &\n      Partial<Credentials> &\n      WithFetchOptions,\n  ) {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params?.fetch,\n    });\n    const fetchPage = async (cursor?: string | number) => {\n      const response = await client.listDrives({\n        ...credentials,\n        ...params,\n        ...(cursor !== undefined && { cursor }),\n      });\n      return {\n        ...response.json,\n        drives: response.json.drives.map(\n          (drive) =>\n            new Drive({\n              client,\n              drive,\n              projectId: credentials.projectId,\n            }),\n        ),\n      };\n    };\n    const firstPage = await fetchPage(params?.cursor ?? params?.until);\n    return attachPaginator(firstPage, {\n      itemsKey: \"drives\",\n      fetchNext: fetchPage,\n      signal: params?.signal,\n    });\n  }\n\n  /**\n   * Retrieve an existing drive, or create a new one if it doesn't exists.\n   *\n   * @param params - Get/create parameters and optional credentials.\n   * @returns A promise resolving to the {@link Drive}.\n   */\n  static async getOrCreate(\n    params: (\n      | GetOrCreateDriveParams\n      | (GetOrCreateDriveParams & Credentials)\n    ) &\n      WithFetchOptions,\n  ): Promise<Drive> {\n    \"use step\";\n    const credentials = await getCredentials(params);\n    const client = new APIClient({\n      teamId: credentials.teamId,\n      token: credentials.token,\n      fetch: params.fetch,\n    });\n\n    const response = await client.getOrCreateDrive({\n      projectId: credentials.projectId,\n      name: params.name,\n      maxSizeBytes: params.maxSize,\n      signal: params.signal,\n    });\n\n    return new Drive({\n      client,\n      drive: response.json.drive,\n      projectId: credentials.projectId,\n    });\n  }\n\n  /**\n   * Delete this drive. The drive must not be attached to any sandbox.\n   * This operation is irreversible and will delete all data stored in the drive.\n   *\n   * @param opts - Optional parameters.\n   * @param opts.signal - An AbortSignal to cancel the operation.\n   * @returns A promise that resolves once the drive has been deleted.\n   */\n  async delete(opts?: { signal?: AbortSignal }): Promise<void> {\n    \"use step\";\n    const client = await this.ensureClient();\n    const response = await client.deleteDrive({\n      projectId: this._projectId,\n      name: this.drive.name,\n      signal: opts?.signal,\n    });\n\n    this.drive = response.json.drive;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAmCA,IAAa,QAAb,MAAa,MAAM;;;;;CASjB,MAAc,eAAmC;AAC/C;AACA,MAAI,KAAK,QAAS,QAAO,KAAK;EAC9B,MAAM,cAAc,MAAM,gBAAgB;AAC1C,OAAK,UAAU,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACpB,CAAC;AACF,SAAO,KAAK;;;;;CAMd,IAAW,OAAe;AACxB,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,YAAoB;AAC7B,SAAO,KAAK;;;;;CAMd,IAAW,UAAkB;AAC3B,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,mBAAuC;AAChD,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,qBAAyC;AAClD,SAAO,KAAK,MAAM;;;;;CAMpB,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,MAAM,UAAU;;;;;CAMvC,IAAW,YAAkB;AAC3B,SAAO,IAAI,KAAK,KAAK,MAAM,UAAU;;;;;;;;CASvC,QAAQ,oBAAoB,UAAkC;AAC5D,SAAO;GACL,OAAO,SAAS;GAChB,WAAW,SAAS;GACrB;;;;;;;;;;;CAYH,QAAQ,sBAAsB,MAA8B;AAC1D,SAAO,IAAI,MAAM;GACf,OAAO,KAAK;GACZ,WAAW,KAAK;GACjB,CAAC;;CAGJ,YAAY,EACV,QACA,OACA,aAKC;OAzGK,UAA4B;AA0GlC,OAAK,UAAU,UAAU;AACzB,OAAK,QAAQ;AACb,OAAK,aAAa,aAAa,MAAM;;;;;;;;;;;;;;;;CAiBvC,aAAa,KACX,QAGA;AACA;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,QAAQ;GAChB,CAAC;EACF,MAAM,YAAY,OAAO,WAA6B;GACpD,MAAM,WAAW,MAAM,OAAO,WAAW;IACvC,GAAG;IACH,GAAG;IACH,GAAI,WAAW,UAAa,EAAE,QAAQ;IACvC,CAAC;AACF,UAAO;IACL,GAAG,SAAS;IACZ,QAAQ,SAAS,KAAK,OAAO,KAC1B,UACC,IAAI,MAAM;KACR;KACA;KACA,WAAW,YAAY;KACxB,CAAC,CACL;IACF;;AAGH,SAAO,gBADW,MAAM,UAAU,QAAQ,UAAU,QAAQ,MAAM,EAChC;GAChC,UAAU;GACV,WAAW;GACX,QAAQ,QAAQ;GACjB,CAAC;;;;;;;;CASJ,aAAa,YACX,QAKgB;AAChB;EACA,MAAM,cAAc,MAAM,eAAe,OAAO;EAChD,MAAM,SAAS,IAAI,UAAU;GAC3B,QAAQ,YAAY;GACpB,OAAO,YAAY;GACnB,OAAO,OAAO;GACf,CAAC;AASF,SAAO,IAAI,MAAM;GACf;GACA,QATe,MAAM,OAAO,iBAAiB;IAC7C,WAAW,YAAY;IACvB,MAAM,OAAO;IACb,cAAc,OAAO;IACrB,QAAQ,OAAO;IAChB,CAAC,EAIgB,KAAK;GACrB,WAAW,YAAY;GACxB,CAAC;;;;;;;;;;CAWJ,MAAM,OAAO,MAAgD;AAC3D;AAQA,OAAK,SANY,OADF,MAAM,KAAK,cAAc,EACV,YAAY;GACxC,WAAW,KAAK;GAChB,MAAM,KAAK,MAAM;GACjB,QAAQ,MAAM;GACf,CAAC,EAEoB,KAAK"}

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

0

-100%

Number of medium supply chain risk alerts

69

-9.21%

Worsened metrics

Total package byte prevSize

1258108

-66.13%

Number of package files

195

-2.99%

Lines of code

14669

-69.73%

Dependency changes

• + Added

  zod@4.4.3
  (transitive)

• - Removed

  zod@3.24.4
  (transitive)

• Updated

  zod@^4.1.1