@alchemy.run/daytona 0.0.0-stage → 2.0.0-beta.86

package/lib/AuthProvider.js

@@ -0,0 +1,280 @@
+import { credentials, DEFAULT_API_BASE_URL } from "@distilled.cloud/daytona/Credentials";
+import { listOrganizations } from "@distilled.cloud/daytona/organizations";
+import { AuthError, AuthProviderLayer, NeedsReauth, refreshHint, } from "alchemy/Auth/AuthProvider";
+import { deviceOAuth } from "alchemy/Auth/BrowserOAuth";
+import { displayRedacted } from "alchemy/Auth/Credentials";
+import { getEnv, getEnvRedacted, mapPromptCancellation } from "alchemy/Auth/Env";
+import { withProfileCredentialsLock } from "alchemy/Auth/Lock";
+import { collectFieldValues, storedSecret, storedValueText, validateFieldValues, } from "alchemy/Auth/StoredAuthProvider";
+import * as Interaction from "alchemy/Interaction";
+import * as Clock from "effect/Clock";
+import * as Duration from "effect/Duration";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import * as Match from "effect/Match";
+import * as Redacted from "effect/Redacted";
+import * as Schema from "effect/Schema";
+import * as OAuthClient from "./OAuthClient.js";
+export const DAYTONA_AUTH_PROVIDER_NAME = "Daytona";
+/**
+ * Values stored in a Daytona profile: an organization API key, or a user
+ * session from `alchemy profile login` (Daytona's device login).
+ */
+export const DaytonaAuthConfigSchema = Schema.Union([
+    Schema.Struct({
+        method: Schema.Literal("stored"),
+        apiKey: Schema.String,
+        apiBaseUrl: Schema.optional(Schema.String),
+        organizationId: Schema.optional(Schema.String),
+    }),
+    Schema.Struct({
+        method: Schema.Literal("oauth"),
+        organizationId: Schema.String,
+        apiBaseUrl: Schema.optional(Schema.String),
+        clientId: Schema.optional(Schema.String),
+        access: Schema.String,
+        refresh: Schema.String,
+        expires: Schema.Number,
+        scopes: Schema.String.pipe(Schema.Array, Schema.mutable),
+    }),
+]);
+const apiKeyFields = [
+    {
+        name: "apiKey",
+        label: "Daytona API key (https://app.daytona.io/dashboard/keys)",
+        secret: true,
+    },
+    {
+        name: "apiBaseUrl",
+        label: "Daytona API URL",
+        optional: true,
+        placeholder: DEFAULT_API_BASE_URL,
+    },
+];
+const storedConfig = (values) => ({
+    method: "stored",
+    apiKey: Redacted.value(storedSecret(values.apiKey) ?? Redacted.make("")),
+    apiBaseUrl: storedValueText(values.apiBaseUrl),
+});
+const toOAuthCredentials = (config) => ({
+    type: "oauth",
+    clientId: config.clientId,
+    access: Redacted.make(config.access),
+    refresh: Redacted.make(config.refresh),
+    expires: config.expires,
+    scopes: config.scopes,
+});
+const fromOAuthCredentials = (fresh) => ({
+    clientId: fresh.clientId,
+    access: Redacted.value(fresh.access),
+    refresh: Redacted.value(fresh.refresh),
+    expires: fresh.expires,
+    scopes: fresh.scopes,
+});
+/** List the user's organizations and pick one (prompting when there are several). */
+const selectOrganization = (accessToken) => Effect.gen(function* () {
+    const organizations = yield* listOrganizations({});
+    const [only] = organizations;
+    if (only === undefined) {
+        return yield* AuthError.make({ message: "Daytona: this user belongs to no organization." });
+    }
+    if (organizations.length === 1) {
+        yield* Interaction.info(`Daytona: using organization ${only.name} (${only.id})`);
+        return only.id;
+    }
+    return yield* Interaction.select({
+        message: "Select a Daytona organization",
+        options: organizations.map((o) => ({ value: o.id, label: o.name, description: o.id })),
+    }).pipe(mapPromptCancellation);
+}).pipe(Effect.provide(Layer.mergeAll(credentials({ apiKey: accessToken }), FetchHttpClient.layer)));
+/**
+ * Layer that registers the Daytona {@link AuthProvider} into the
+ * {@link AuthProviders} registry when built, so `alchemy profile edit` can
+ * configure it.
+ *
+ * Supported methods:
+ * - `oauth`: Daytona's device login (the same as `daytona login`); the
+ *   session refreshes itself and can manage the organization.
+ * - `stored`: an organization API key stored inline.
+ */
+export const DaytonaAuth = AuthProviderLayer()(DAYTONA_AUTH_PROVIDER_NAME, Effect.gen(function* () {
+    const configureOAuth = Effect.fn(function* (_profileName) {
+        const authorization = yield* OAuthClient.deviceAuthorize();
+        const session = yield* deviceOAuth({
+            provider: "Daytona",
+            authorization,
+            token: OAuthClient.deviceToken(authorization),
+        });
+        const organizationId = yield* selectOrganization(session.access);
+        yield* Interaction.success("Daytona: signed in.");
+        return {
+            method: "oauth",
+            organizationId,
+            ...fromOAuthCredentials(session),
+        };
+    });
+    const configureApiKey = (_profileName) => collectFieldValues(apiKeyFields).pipe(Effect.map(storedConfig), Effect.tap(() => Interaction.success("Daytona: credentials saved.")));
+    const configure = (profileName) => Interaction.select({
+        message: "Daytona authentication method",
+        options: [
+            {
+                value: "oauth",
+                label: "Sign in",
+                description: "recommended — device login; can also manage the organization",
+            },
+            {
+                value: "stored",
+                label: "API key",
+                description: "an organization API key stored inline",
+            },
+        ],
+    }).pipe(mapPromptCancellation, Effect.flatMap((method) => Match.value(method).pipe(Match.when("oauth", () => configureOAuth(profileName)), Match.when("stored", () => configureApiKey(profileName)), Match.exhaustive)), Effect.mapError((e) => AuthError.make({ message: "failed to configure credentials", cause: e })));
+    // Sign-in needs a browser, so only the API key has a flag-driven form.
+    const configureMethods = [
+        { method: "stored", fields: apiKeyFields },
+    ];
+    const configureWith = (_profileName, input) => input.method === "stored"
+        ? validateFieldValues(DAYTONA_AUTH_PROVIDER_NAME, apiKeyFields, input.values).pipe(Effect.map(storedConfig), Effect.tap(() => Interaction.success("Daytona: credentials saved.")))
+        : Effect.fail(AuthError.make({
+            message: `Daytona: unknown method '${input.method}'. Valid methods: stored. (Sign-in is interactive-only.)`,
+        }));
+    const read = (profileName, config, updateConfig) => Match.value(config).pipe(Match.when({ method: "stored" }, (stored) => Effect.succeed({
+        type: "apiKey",
+        token: Redacted.make(stored.apiKey),
+        apiBaseUrl: stored.apiBaseUrl ?? DEFAULT_API_BASE_URL,
+        organizationId: stored.organizationId,
+        source: { type: "stored" },
+    })), Match.when({ method: "oauth" }, (oauth) => Effect.gen(function* () {
+        const reauth = refreshHint(DAYTONA_AUTH_PROVIDER_NAME, profileName);
+        const session = toOAuthCredentials(oauth);
+        if (!OAuthClient.usesCurrentClient(session)) {
+            return yield* NeedsReauth.make({
+                provider: DAYTONA_AUTH_PROVIDER_NAME,
+                profile: profileName,
+                message: `Daytona credentials for profile '${profileName}' were issued to another OAuth client. ${reauth}`,
+            });
+        }
+        // Refresh within a minute of expiry and persist it: WorkOS
+        // refresh tokens are single-use.
+        const now = yield* Clock.currentTimeMillis;
+        const fresh = session.expires > now + 60_000
+            ? session
+            : yield* OAuthClient.refresh(session).pipe(Effect.mapError((e) => NeedsReauth.make({
+                provider: DAYTONA_AUTH_PROVIDER_NAME,
+                profile: profileName,
+                message: `Daytona session refresh failed. ${reauth}`,
+                cause: e,
+            })));
+        if (fresh !== session) {
+            yield* updateConfig?.({ ...oauth, ...fromOAuthCredentials(fresh) }) ?? Effect.void;
+        }
+        return {
+            type: "oauth",
+            token: fresh.access,
+            apiBaseUrl: oauth.apiBaseUrl ?? DEFAULT_API_BASE_URL,
+            organizationId: oauth.organizationId,
+            expires: fresh.expires,
+            source: { type: "oauth" },
+        };
+    })), Match.exhaustive);
+    const login = (profileName, config, updateConfig, reload) => Match.value(config).pipe(Match.when({ method: "stored" }, (stored) => Effect.succeed(stored)), Match.when({ method: "oauth" }, (oauth) => Effect.gen(function* () {
+        if (!OAuthClient.usesCurrentClient(toOAuthCredentials(oauth))) {
+            return yield* configureOAuth(profileName);
+        }
+        // Refresh with the token stored now, read under the lock.
+        const outcome = yield* withProfileCredentialsLock(profileName, Effect.gen(function* () {
+            const current = yield* reload ?? Effect.succeed(oauth);
+            if (current.method !== "oauth")
+                return { type: "signIn" };
+            const session = toOAuthCredentials(current);
+            if (!OAuthClient.usesCurrentClient(session))
+                return { type: "signIn" };
+            const fresh = yield* OAuthClient.refresh(session);
+            const config = { ...current, ...fromOAuthCredentials(fresh) };
+            if (updateConfig === undefined)
+                return { type: "refreshed", config };
+            yield* updateConfig(config);
+            return { type: "refreshed", config: undefined };
+        })).pipe(Effect.catchTag([
+            "OAuthError",
+            "OAuthNetworkError",
+            "OAuthServerUnavailable",
+            "OAuthInvalidResponse",
+        ], () => Effect.succeed({ type: "signIn" })));
+        if (outcome.type === "signIn")
+            return yield* configureOAuth(profileName);
+        yield* Interaction.success("Daytona: session refreshed.");
+        return outcome.config;
+    })), Match.exhaustive, Effect.mapError((e) => AuthError.make({ message: "login failed", cause: e })));
+    const logout = (_profileName, _config) => Effect.void;
+    const details = (profileName, config, updateConfig) => Effect.all([read(profileName, config, updateConfig), Clock.currentTimeMillis]).pipe(Effect.map(([creds, now]) => {
+        const lines = [
+            {
+                key: creds.type === "oauth" ? "accessToken" : "apiKey",
+                value: displayRedacted(creds.token),
+            },
+            { key: "apiBaseUrl", value: creds.apiBaseUrl },
+        ];
+        if (creds.organizationId !== undefined) {
+            lines.push({ key: "organizationId", value: creds.organizationId });
+        }
+        if (creds.expires !== undefined) {
+            const remaining = creds.expires - now;
+            const at = new Date(creds.expires).toISOString();
+            lines.push({
+                key: "expires",
+                value: remaining <= 0
+                    ? `expired (${at})`
+                    : `in ${Duration.format(Duration.millis(remaining))} (${at})`,
+            });
+        }
+        lines.push({ key: "source", value: creds.source.type });
+        return { lines };
+    }));
+    const readEnvironment = Effect.gen(function* () {
+        const apiKey = yield* getEnvRedacted("DAYTONA_API_KEY");
+        if (!apiKey) {
+            return yield* AuthError.make({
+                message: "Daytona CI credentials not found. Set DAYTONA_API_KEY.",
+            });
+        }
+        return {
+            type: "apiKey",
+            token: apiKey,
+            apiBaseUrl: (yield* getEnv("DAYTONA_API_URL")) ?? DEFAULT_API_BASE_URL,
+            organizationId: yield* getEnv("DAYTONA_ORGANIZATION_ID"),
+            source: { type: "env" },
+        };
+    });
+    return {
+        configSchema: DaytonaAuthConfigSchema,
+        configure,
+        configureWith,
+        configureMethods,
+        login,
+        logout,
+        details,
+        read,
+        readEnvironment,
+        environment: [
+            {
+                name: "DAYTONA_API_KEY",
+                required: true,
+                secret: true,
+                description: "Organization API key.",
+            },
+            {
+                name: "DAYTONA_API_URL",
+                required: false,
+                description: "API root for a self-hosted Daytona.",
+            },
+            {
+                name: "DAYTONA_ORGANIZATION_ID",
+                required: false,
+                description: "Organization id; only needed with a user token.",
+            },
+        ],
+    };
+}));
+//# sourceMappingURL=AuthProvider.js.map

package/lib/AuthProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.js","sources":["../src/AuthProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAC3E,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,WAAW,EACX,WAAW,GAIZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,mBAAmB,GAEpB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,WAAW,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,WAAW,MAAM,kBAAkB,CAAC;AAEhD,MAAM,CAAC,MAAM,0BAA0B,GAAG,SAAS,CAAC;AAEpD;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,KAAK,CAAC;IAClD,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1C,cAAc,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;KAC/C,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;QAC/B,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAC1C,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QACxC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC;KACzD,CAAC;CACH,CAAC,CAAC;AAoBH,MAAM,YAAY,GAAkC;IAClD;QACE,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,yDAAyD;QAChE,MAAM,EAAE,IAAI;KACb;IACD;QACE,IAAI,EAAE,YAAY;QAClB,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,oBAAoB;KAClC;CACF,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,MAAoB,EAAqB,EAAE,CAAC,CAAC;IACjE,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,UAAU,EAAE,eAAe,CAAC,MAAM,CAAC,UAAU,CAAC;CAC/C,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CACzB,MAAuD,EACzB,EAAE,CAAC,CAAC;IAClC,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;IACzB,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC,OAAO;IACvB,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,CAAC,KAAmC,EAAE,EAAE,CAAC,CAAC;IACrE,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;IACpC,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;IACtC,OAAO,EAAE,KAAK,CAAC,OAAO;IACtB,MAAM,EAAE,KAAK,CAAC,MAAM;CACrB,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,CAAC,WAAsC,EAAE,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC;IAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,+BAA+B,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,+BAA+B;QACxC,OAAO,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;KACvF,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAC5F,CAAC;AAEJ;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,EAAiD,CAC3F,0BAA0B,EAC1B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,cAAc,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,YAAoB;QAC9D,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;YACjC,QAAQ,EAAE,SAAS;YACnB,aAAa;YACb,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC;SAC9C,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QAClD,OAAO;YACL,MAAM,EAAE,OAAgB;YACxB,cAAc;YACd,GAAG,oBAAoB,CAAC,OAAO,CAAC;SACjC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,CAAC,YAAoB,EAAE,EAAE,CAC/C,kBAAkB,CAAC,YAAY,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CACrE,CAAC;IAEJ,MAAM,SAAS,GAAG,CAAC,WAAmB,EAAE,EAAE,CACxC,WAAW,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,+BAA+B;QACxC,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,OAAgB;gBACvB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,8DAA8D;aAC5E;YACD;gBACE,KAAK,EAAE,QAAiB;gBACxB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,uCAAuC;aACrD;SACF;KACF,CAAC,CAAC,IAAI,CACL,qBAAqB,EACrB,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CACxB,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC,EACtD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,EACxD,KAAK,CAAC,UAAU,CACjB,CACF,EACD,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CACzE,CACF,CAAC;IAEJ,uEAAuE;IACvE,MAAM,gBAAgB,GAAmC;QACvD,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE;KAC3C,CAAC;IAEF,MAAM,aAAa,GAAG,CACpB,YAAoB,EACpB,KAA2E,EAC3E,EAAE,CACF,KAAK,CAAC,MAAM,KAAK,QAAQ;QACvB,CAAC,CAAC,mBAAmB,CAAC,0BAA0B,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9E,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,EACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CACrE;QACH,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,SAAS,CAAC,IAAI,CAAC;YACb,OAAO,EAAE,4BAA4B,KAAK,CAAC,MAAM,0DAA0D;SAC5G,CAAC,CACH,CAAC;IAER,MAAM,IAAI,GAAG,CACX,WAAmB,EACnB,MAAyB,EACzB,YAA4E,EAC5E,EAAE,CACF,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,OAAO,CAAC;QACb,IAAI,EAAE,QAAiB;QACvB,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,oBAAoB;QACrD,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE;KACC,CAAC,CACxC,EACD,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,WAAW,CAAC,0BAA0B,EAAE,WAAW,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC;gBAC7B,QAAQ,EAAE,0BAA0B;gBACpC,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,oCAAoC,WAAW,0CAA0C,MAAM,EAAE;aAC3G,CAAC,CAAC;QACL,CAAC;QACD,2DAA2D;QAC3D,iCAAiC;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC3C,MAAM,KAAK,GACT,OAAO,CAAC,OAAO,GAAG,GAAG,GAAG,MAAM;YAC5B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CACpB,WAAW,CAAC,IAAI,CAAC;gBACf,QAAQ,EAAE,0BAA0B;gBACpC,OAAO,EAAE,WAAW;gBACpB,OAAO,EAAE,mCAAmC,MAAM,EAAE;gBACpD,KAAK,EAAE,CAAC;aACT,CAAC,CACH,CACF,CAAC;QACR,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;YACtB,KAAK,CAAC,CAAC,YAAY,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC;QACrF,CAAC;QACD,OAAO;YACL,IAAI,EAAE,OAAgB;YACtB,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,oBAAoB;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAgB,EAAE;SACE,CAAC;IACzC,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,CACjB,CAAC;IAEJ,MAAM,KAAK,GAAG,CACZ,WAAmB,EACnB,MAAyB,EACzB,YAA4E,EAC5E,MAAoD,EACpD,EAAE,CACF,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CACtB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAoB,MAAM,CAAC,CAAC,EACvF,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YAC9D,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;QACD,0DAA0D;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,0BAA0B,CAC/C,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;YACnE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC;YAChF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,EAAE,IAAI,EAAE,WAAoB,EAAE,MAAM,EAAE,CAAC;YAC9E,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC5B,OAAO,EAAE,IAAI,EAAE,WAAoB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC3D,CAAC,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CACb;YACE,YAAY;YACZ,mBAAmB;YACnB,wBAAwB;YACxB,sBAAsB;SACvB,EACD,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,CAAC,CAClD,CACF,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACzE,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC,CAAC,CACH,EACD,KAAK,CAAC,UAAU,EAChB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAC9E,CAAC;IAEJ,MAAM,MAAM,GAAG,CAAC,YAAoB,EAAE,OAA0B,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;IAEjF,MAAM,OAAO,GAAG,CACd,WAAmB,EACnB,MAAyB,EACzB,YAA4E,EAC5E,EAAE,CACF,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CACjF,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAuC,EAAmB,EAAE;QACjF,MAAM,KAAK,GAAG;YACZ;gBACE,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ;gBACtD,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC;aACpC;YACD,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE;SAC/C,CAAC;QACF,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC;YACtC,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC;gBACT,GAAG,EAAE,SAAS;gBACd,KAAK,EACH,SAAS,IAAI,CAAC;oBACZ,CAAC,CAAC,YAAY,EAAE,GAAG;oBACnB,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG;aAClE,CAAC,CAAC;QACL,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,OAAO,EAAE,KAAK,EAAE,CAAC;IACnB,CAAC,CAAC,CACH,CAAC;IAEJ,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC1C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC3B,OAAO,EAAE,wDAAwD;aAClE,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,IAAI,EAAE,QAAiB;YACvB,KAAK,EAAE,MAAM;YACb,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,oBAAoB;YACtE,cAAc,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC;YACxD,MAAM,EAAE,EAAE,IAAI,EAAE,KAAc,EAAE;SACI,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,YAAY,EAAE,uBAAuB;QACrC,SAAS;QACT,aAAa;QACb,gBAAgB;QAChB,KAAK;QACL,MAAM;QACN,OAAO;QACP,IAAI;QACJ,eAAe;QACf,WAAW,EAAE;YACX;gBACE,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,uBAAuB;aACrC;YACD;gBACE,IAAI,EAAE,iBAAiB;gBACvB,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,qCAAqC;aACnD;YACD;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,iDAAiD;aAC/D;SACF;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC"}

package/lib/Bootstrap.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Resolve the bundled program (the runners registered via `host.run` /
+ * serve) and run it with a Node HTTP server bound to `PORT` on every
+ * interface, so the sandbox's preview proxy reaches the `{ fetch }`
+ * handler and `host.run` loops stay alive.
+ */
+export declare const bootstrap: (entrypoint: unknown) => Promise<void>;
+//# sourceMappingURL=Bootstrap.d.ts.map

package/lib/Bootstrap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bootstrap.d.ts","sources":["../src/Bootstrap.ts"],"names":[],"mappings":"AAsBA;;;;;GAKG;AACH,eAAO,MAAM,SAAS,eAAgB,OAAO,KAAG,OAAO,CAAC,IAAI,CA0B3D,CAAC"}

package/lib/Bootstrap.js

@@ -0,0 +1,28 @@
+/**
+ * Process bootstrap for a `Daytona.Sandbox` with `main` (a Node process in
+ * the sandbox serving the bundled program). The generated entry imports this module
+ * and the user's `main`, nothing else — see `alchemy/Runtime/Bootstrap`
+ * for why.
+ */
+import { NodeServices } from "@effect/platform-node";
+import { NodeHttpServer } from "alchemy/Http";
+import { reifyBoundConfigProvider } from "alchemy/Runtime";
+import { entrypointLayer, resolveProgram, runProcess, stackFromEnv, } from "alchemy/Runtime/Bootstrap";
+import * as ConfigProvider from "effect/ConfigProvider";
+import * as SecureRandom from "effect/crypto/SecureRandom";
+import * as Effect from "effect/Effect";
+import * as FetchHttpClient from "effect/http/FetchHttpClient";
+import * as Layer from "effect/Layer";
+import * as Logger from "effect/Logger";
+/**
+ * Resolve the bundled program (the runners registered via `host.run` /
+ * serve) and run it with a Node HTTP server bound to `PORT` on every
+ * interface, so the sandbox's preview proxy reaches the `{ fetch }`
+ * handler and `host.run` loops stay alive.
+ */
+export const bootstrap = (entrypoint) => {
+    const platform = Layer.mergeAll(NodeServices.layer, FetchHttpClient.layer, SecureRandom.layerWebCrypto, Logger.layer([Logger.consolePretty()]));
+    const program = resolveProgram("program").pipe(Effect.provide(entrypointLayer(entrypoint).pipe(Layer.provideMerge(stackFromEnv), Layer.provideMerge(NodeHttpServer({ hostname: "0.0.0.0" })), Layer.provideMerge(platform), Layer.provideMerge(Layer.succeed(ConfigProvider.ConfigProvider, reifyBoundConfigProvider(ConfigProvider.fromEnv(), process.env))))), Effect.scoped);
+    return runProcess("Daytona service", program);
+};
+//# sourceMappingURL=Bootstrap.js.map

package/lib/Bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Bootstrap.js","sources":["../src/Bootstrap.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,EACL,eAAe,EACf,cAAc,EACd,UAAU,EACV,YAAY,GACb,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,cAAc,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,YAAY,MAAM,4BAA4B,CAAC;AAC3D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,eAAe,MAAM,6BAA6B,CAAC;AAC/D,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,UAAmB,EAAiB,EAAE;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAC7B,YAAY,CAAC,KAAK,EAClB,eAAe,CAAC,KAAK,EACrB,YAAY,CAAC,cAAc,EAC3B,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CACvC,CAAC;IAEF,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAC5C,MAAM,CAAC,OAAO,CACZ,eAAe,CAAC,UAAU,CAAC,CAAC,IAAI,CAC9B,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,EAChC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,EAC3D,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,EAC5B,KAAK,CAAC,YAAY,CAChB,KAAK,CAAC,OAAO,CACX,cAAc,CAAC,cAAc,EAC7B,wBAAwB,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAChE,CACF,CACF,CACF,EACD,MAAM,CAAC,MAAM,CACd,CAAC;IAEF,OAAO,UAAU,CAAC,iBAAiB,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC,CAAC"}

package/lib/ConnectSandbox.d.ts

@@ -0,0 +1,72 @@
+import * as Binding from "alchemy/Binding";
+import type * as Effect from "effect/Effect";
+import type { Sandbox } from "./Sandbox.ts";
+import type { ConnectedSandbox } from "./SandboxClient.ts";
+/**
+ * Work with one {@link Sandbox} declared at deploy, from any host: run
+ * commands, read and write files, use git, open previews, fork it or
+ * snapshot it. The handle has the same methods as the
+ * {@link DaytonaSandbox} that {@link CreateSandbox} returns; its
+ * `sandboxId`, `name` and `toolboxProxyUrl` are Effects, resolved at
+ * runtime.
+ *
+ * The host gets its own Daytona API key with `write:sandboxes` and
+ * `delete:sandboxes`; Daytona checks permissions per kind of object, so
+ * the key can reach other sandboxes in the organization too.
+ *
+ * ### Running Commands in a Dev Box
+ * **Example:** Pull and test on request
+ * ```typescript
+ * const devBox = yield* Daytona.ConnectSandbox(DevBox);
+ * return {
+ *   fetch: Effect.gen(function* () {
+ *     yield* devBox.startSandbox();
+ *     const test = yield* devBox.exec("git pull && pnpm test", { cwd: "/home/daytona/repo" });
+ *     return yield* HttpServerResponse.json(test);
+ *   }),
+ * };
+ * ```
+ *
+ * ### Putting a Worker in Front of a Port
+ * **Example:** Proxy every request to the dev server on port 3000
+ * ```typescript
+ * const devBox = yield* Daytona.ConnectSandbox(DevBox);
+ * return {
+ *   fetch: Effect.gen(function* () {
+ *     const port = yield* devBox.getTcpPort(3000);
+ *     return yield* port.fetch(yield* HttpServerRequest);
+ *   }),
+ * };
+ * ```
+ *
+ * ### Streaming a Terminal
+ * Terminals, code interpreter runs and followed logs stream over a
+ * WebSocket, so they work from a Worker too.
+ *
+ * **Example:** Run a script in a terminal and stream its output
+ * ```typescript
+ * const output = yield* Effect.scoped(
+ *   Effect.gen(function* () {
+ *     const pty = yield* devBox.process.createPty({ id: "build" });
+ *     yield* pty.write("pnpm build; exit\n");
+ *     return yield* pty.output.pipe(Stream.decodeText(), Stream.mkString);
+ *   }),
+ * );
+ * ```
+ *
+ * ### Forking a Dev Box
+ * Daytona forks `linux-vm` sandboxes; a container's fork fails with
+ * `ForkNotSupported`.
+ *
+ * **Example:** Fork it per pull request
+ * ```typescript
+ * const fork = yield* devBox.forkSandbox({ name: `pr-${number}` });
+ * ```
+ *
+ * @binding
+ * @product Sandbox
+ */
+export interface ConnectSandbox extends Binding.Service<ConnectSandbox, "Daytona.ConnectSandbox", (sandbox: Sandbox) => Effect.Effect<ConnectedSandbox>> {
+}
+export declare const ConnectSandbox: ConnectSandbox;
+//# sourceMappingURL=ConnectSandbox.d.ts.map

package/lib/ConnectSandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectSandbox.d.ts","sources":["../src/ConnectSandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAE3D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+DG;AACH,MAAM,WAAW,cAAe,SAAQ,OAAO,CAAC,OAAO,CACrD,cAAc,EACd,wBAAwB,EACxB,CAAC,OAAO,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CACtD;CAAG;AAEJ,eAAO,MAAM,cAAc,gBAA4D,CAAC"}

package/lib/ConnectSandbox.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const ConnectSandbox = Binding.Service("Daytona.ConnectSandbox");
+//# sourceMappingURL=ConnectSandbox.js.map

package/lib/ConnectSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectSandbox.js","sources":["../src/ConnectSandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AA2E3C,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAiB,wBAAwB,CAAC,CAAC"}

package/lib/ConnectSandboxHttp.d.ts

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+import { ConnectSandbox } from "./ConnectSandbox.ts";
+/** {@link ConnectSandbox} over Daytona's HTTP API; works on any host. */
+export declare const ConnectSandboxHttp: Layer.Layer<ConnectSandbox, never, never>;
+//# sourceMappingURL=ConnectSandboxHttp.d.ts.map

package/lib/ConnectSandboxHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectSandboxHttp.d.ts","sources":["../src/ConnectSandboxHttp.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,2CAiB9B,CAAC"}

package/lib/ConnectSandboxHttp.js

@@ -0,0 +1,22 @@
+import * as Effect from "effect/Effect";
+import * as Layer from "effect/Layer";
+import { ConnectSandbox } from "./ConnectSandbox.js";
+import { makeAccess } from "./DaytonaBindings.js";
+import { makeConnectedSandbox } from "./SandboxClient.js";
+/** {@link ConnectSandbox} over Daytona's HTTP API; works on any host. */
+export const ConnectSandboxHttp = Layer.effect(ConnectSandbox, Effect.gen(function* () {
+    const access = yield* makeAccess;
+    return Effect.fn(function* (sandbox) {
+        const { authorize, organizationId } = yield* access(`${sandbox.LogicalId}Connect`, [
+            "write:sandboxes",
+            "delete:sandboxes",
+        ]);
+        const sandboxId = yield* sandbox.sandboxId;
+        const name = yield* sandbox.name;
+        const toolboxProxyUrl = yield* sandbox.toolboxProxyUrl;
+        // The sandbox's identity resolves at runtime, on each call.
+        const identity = Effect.all({ id: sandboxId, name, toolboxProxyUrl });
+        return makeConnectedSandbox(identity, organizationId, authorize);
+    });
+}));
+//# sourceMappingURL=ConnectSandboxHttp.js.map

package/lib/ConnectSandboxHttp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConnectSandboxHttp.js","sources":["../src/ConnectSandboxHttp.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE1D,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC,MAAM,CAC5C,cAAc,EACd,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IACjC,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,OAAgB;QAC1C,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,SAAS,EAAE;YACjF,iBAAiB;YACjB,kBAAkB;SACnB,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,MAAM,eAAe,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACvD,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;QACtE,OAAO,oBAAoB,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CACH,CAAC"}

package/lib/Contributions.d.ts

@@ -0,0 +1,7 @@
+import * as Contributions from "alchemy/Contributions";
+declare const _default: {
+    readonly name: "daytona";
+    readonly auth: Contributions.Lazy<import("effect/Layer").Layer<never, never, import("alchemy/Auth/Registry").AuthProviders | import("effect/process/ChildProcessSpawner").ChildProcessSpawner | import("effect/FileSystem").FileSystem | import("effect/Path").Path | import("effect/crypto/SecureRandom").SecureRandom>>;
+};
+export default _default;
+//# sourceMappingURL=Contributions.d.ts.map

package/lib/Contributions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Contributions.d.ts","sources":["../src/Contributions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,uBAAuB,CAAC;;;;;AAEvD,wBAMG"}

package/lib/Contributions.js

@@ -0,0 +1,6 @@
+import * as Contributions from "alchemy/Contributions";
+export default Contributions.make({
+    name: "daytona",
+    auth: Contributions.lazy(() => import("./AuthProvider.js"), (module) => module.DaytonaAuth),
+});
+//# sourceMappingURL=Contributions.js.map

package/lib/Contributions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Contributions.js","sources":["../src/Contributions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,aAAa,MAAM,uBAAuB,CAAC;AAEvD,eAAe,aAAa,CAAC,IAAI,CAAC;IAChC,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,aAAa,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,EACjC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAC/B;CACF,CAAC,CAAC"}

package/lib/CreateSandbox.d.ts

@@ -0,0 +1,86 @@
+import type * as sandboxes from "@distilled.cloud/daytona/sandbox";
+import * as Binding from "alchemy/Binding";
+import type { RuntimeContext } from "alchemy/RuntimeContext";
+import type * as Effect from "effect/Effect";
+import type { StateFailed, StateTimeout } from "./internal/Wait.ts";
+import type { VolumeMount } from "./MountVolume.ts";
+import type { SandboxInfo } from "./Sandbox.ts";
+import type { DaytonaSandbox } from "./SandboxClient.ts";
+import type { Snapshot } from "./Snapshot.ts";
+/**
+ * `create` input: Daytona's own create request, with volumes as `mounts`.
+ * `snapshot` defaults to the binding's base; labels are merged with the
+ * binding's owner label.
+ */
+export type CreateSandboxInput = Omit<sandboxes.CreateSandboxRequest, "xDaytonaOrganizationID" | "volumes"> & {
+    /**
+     * Volumes to mount: `MountVolume` references, or entries naming a
+     * `CreateVolume` handle (`{ volume: home, path: "/home/daytona/work" }`).
+     */
+    readonly mounts?: ReadonlyArray<VolumeMount>;
+};
+/** `list` filters: Daytona's own, with `labels` as an object. */
+export type ListSandboxesInput = Omit<sandboxes.ListSandboxesRequest, "xDaytonaOrganizationID" | "labels" | "cursor"> & {
+    labels?: Record<string, string>;
+};
+export interface CreateSandboxClient {
+    /**
+     * Create a sandbox and wait until it has started. Returns its handle.
+     */
+    create(input?: CreateSandboxInput): Effect.Effect<DaytonaSandbox, sandboxes.CreateSandboxError | sandboxes.GetSandboxError | StateTimeout | StateFailed, RuntimeContext>;
+    /** The sandbox with this id or name, or `undefined`. */
+    get(idOrName: string): Effect.Effect<DaytonaSandbox | undefined, sandboxes.GetSandboxError, RuntimeContext>;
+    /** Sandboxes matching the filters (by default, the ones from the binding's base). */
+    list(input?: ListSandboxesInput): Effect.Effect<SandboxInfo[], sandboxes.ListSandboxesError, RuntimeContext>;
+    /** Delete a sandbox. Deleting a missing one succeeds. */
+    delete(idOrName: string): Effect.Effect<void, sandboxes.DeleteSandboxError, RuntimeContext>;
+}
+/**
+ * Create, find and delete Daytona sandboxes at runtime, from a Worker,
+ * Lambda or any other host: a sandbox per request, per user or per task.
+ * Pass a {@link Snapshot} to create every sandbox from it (a warm base),
+ * or nothing to pick the snapshot per call.
+ *
+ * The host gets its own Daytona API key, with only `write:sandboxes` and
+ * `delete:sandboxes`. Every sandbox it creates is labeled with the
+ * stack, stage and host as Daytona labels (`alchemy.stack`,
+ * `alchemy.stage`, `alchemy.id`; Daytona doesn't allow `::` in a label
+ * key), on top of your own labels. They are not deleted when the stack is
+ * destroyed: list them by those labels to clean them up, e.g.
+ * `sandboxes.list({ labels: { "alchemy.id": "Api" } })`.
+ * Each sandbox comes back as a {@link DaytonaSandbox} handle with the whole
+ * toolbox: processes, files, git, LSP, previews, forks and snapshots.
+ *
+ * ### Sandbox per Request
+ * **Example:** Run a command in a fresh sandbox and delete it
+ * ```typescript
+ * const sandboxes = yield* Daytona.CreateSandbox(Base);
+ * return {
+ *   fetch: Effect.gen(function* () {
+ *     const sandbox = yield* Effect.acquireRelease(
+ *       sandboxes.create({ autoDeleteInterval: 0 }),
+ *       (s) => sandboxes.delete(s.sandboxId).pipe(Effect.ignore),
+ *     );
+ *     const ls = yield* sandbox.exec("ls -la");
+ *     return yield* HttpServerResponse.json(ls);
+ *   }),
+ * };
+ * ```
+ *
+ * ### Sandbox per User
+ * **Example:** Find the user's sandbox by name, or create it
+ * ```typescript
+ * const sandbox =
+ *   (yield* sandboxes.get(`dev-${user}`)) ??
+ *   (yield* sandboxes.create({ name: `dev-${user}`, labels: { user } }));
+ * yield* sandbox.startSandbox();
+ * yield* sandbox.git.cloneRepository({ url: repoUrl, path: "/home/daytona/repo" });
+ * ```
+ *
+ * @binding
+ * @product Sandbox
+ */
+export interface CreateSandbox extends Binding.Service<CreateSandbox, "Daytona.CreateSandbox", (base?: Snapshot) => Effect.Effect<CreateSandboxClient>> {
+}
+export declare const CreateSandbox: CreateSandbox;
+//# sourceMappingURL=CreateSandbox.d.ts.map

package/lib/CreateSandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandbox.d.ts","sources":["../src/CreateSandbox.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,SAAS,MAAM,kCAAkC,CAAC;AACnE,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,CAAC,oBAAoB,EAC9B,wBAAwB,GAAG,SAAS,CACrC,GAAG;IACF;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;CAC9C,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,SAAS,CAAC,oBAAoB,EAC9B,wBAAwB,GAAG,QAAQ,GAAG,QAAQ,CAC/C,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAExC,MAAM,WAAW,mBAAmB;IAClC;;OAEG;IACH,MAAM,CACJ,KAAK,CAAC,EAAE,kBAAkB,GACzB,MAAM,CAAC,MAAM,CACd,cAAc,EACd,SAAS,CAAC,kBAAkB,GAAG,SAAS,CAAC,eAAe,GAAG,YAAY,GAAG,WAAW,EACrF,cAAc,CACf,CAAC;IACF,wDAAwD;IACxD,GAAG,CACD,QAAQ,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,CAAC,cAAc,GAAG,SAAS,EAAE,SAAS,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IACxF,qFAAqF;IACrF,IAAI,CACF,KAAK,CAAC,EAAE,kBAAkB,GACzB,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;IAC9E,yDAAyD;IACzD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;CAC7F;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,MAAM,WAAW,aAAc,SAAQ,OAAO,CAAC,OAAO,CACpD,aAAa,EACb,uBAAuB,EACvB,CAAC,IAAI,CAAC,EAAE,QAAQ,KAAK,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CACxD;CAAG;AAEJ,eAAO,MAAM,aAAa,eAA0D,CAAC"}

package/lib/CreateSandbox.js

@@ -0,0 +1,3 @@
+import * as Binding from "alchemy/Binding";
+export const CreateSandbox = Binding.Service("Daytona.CreateSandbox");
+//# sourceMappingURL=CreateSandbox.js.map

package/lib/CreateSandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandbox.js","sources":["../src/CreateSandbox.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAyG3C,MAAM,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAgB,uBAAuB,CAAC,CAAC"}

package/lib/CreateSandboxHttp.d.ts

@@ -0,0 +1,5 @@
+import * as Layer from "effect/Layer";
+import { CreateSandbox } from "./CreateSandbox.ts";
+/** {@link CreateSandbox} over Daytona's HTTP API; works on any host. */
+export declare const CreateSandboxHttp: Layer.Layer<CreateSandbox, never, never>;
+//# sourceMappingURL=CreateSandboxHttp.d.ts.map

package/lib/CreateSandboxHttp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CreateSandboxHttp.d.ts","sources":["../src/CreateSandboxHttp.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,aAAa,EAA4B,MAAM,oBAAoB,CAAC;AAQ7E,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,0CAoF7B,CAAC"}