Marketing Feature Code

const sandbox = await Sandbox.create({
	network: {
	policy: 'allow-all',
	},
});
// Install dependencies with full network access
await sandbox.runCommand({ cmd: 'npm', args: ['install'] });
// Lock down network before running untrusted code
await sandbox.setNetworkPolicy({
	policy: 'user-defined',
	allowedDomains: ['api.openai.com', '*.vercel.app'],
	// Credentials injected on egress - never in sandbox
	transformations: [{
		domain: 'api.openai.com',
		headers: { Authorization: 'Bearer $OPENAI_API_KEY' },
	}],
});