@castari/sdk 0.0.5 → 0.0.7

package/dist/client.d.ts

@@ -8,13 +8,17 @@ export interface ClientOptions extends Partial<QueryConfig> {
     connectionUrl?: string;
     /** Anthropic API key (required unless present in process.env.ANTHROPIC_API_KEY) */
     anthropicApiKey?: string;
+    /** Castari client ID (required for platform mode; otherwise read from env) */
+    clientId?: string;
+    /** Castari platform API key (used for auth when contacting the platform) */
+    platformApiKey?: string;
     /** Enable debug logging */
     debug?: boolean;
     /** Snapshot name to deploy/start */
     snapshot?: string;
     /** Optional labels to apply to the sandbox (and filter by for reuse) */
     labels?: Record<string, string>;
-    /** Optional volume name to mount at /home/daytona/agent-workspace */
+    /** Optional volume name to mount at /home/castari/agent-workspace */
     volume?: string;
     /** Castari Platform API URL. Defaults to https://api.castari.com (or localhost in dev) */
     platformUrl?: string;
@@ -26,6 +30,8 @@ export declare class CastariClient {
     private options;
     private messageHandlers;
     private sandboxId?;
+    private resolvedClientId?;
+    private resolvedPlatformApiKey?;
     constructor(options?: ClientOptions);
     start(): Promise<void>;
     private setupLocalConnection;

package/dist/client.js

@@ -5,6 +5,8 @@ export class CastariClient {
     options;
     messageHandlers = [];
     sandboxId;
+    resolvedClientId;
+    resolvedPlatformApiKey;
     constructor(options = {}) {
         this.options = {
             ...options,
@@ -15,6 +17,10 @@ export class CastariClient {
         if (!anthropicApiKey) {
             throw new Error('ANTHROPIC_API_KEY is required');
         }
+        this.resolvedClientId =
+            this.options.clientId || process.env.CASTARI_CLIENT_ID || undefined;
+        this.resolvedPlatformApiKey =
+            this.options.platformApiKey || process.env.CASTARI_API_KEY || undefined;
         const connection = this.options.connectionUrl
             ? await this.setupLocalConnection()
             : await this.setupPlatformConnection();
@@ -34,12 +40,10 @@ export class CastariClient {
         }
         const configHeaders = {
             'Content-Type': 'application/json',
+            ...connection.authHeaders,
         };
-        if (connection.previewToken) {
-            configHeaders['x-daytona-preview-token'] = connection.previewToken;
-        }
         let configResponse = null;
-        const maxConfigAttempts = 10;
+        const maxConfigAttempts = 5;
         for (let attempt = 1; attempt <= maxConfigAttempts; attempt++) {
             configResponse = await fetch(connection.configUrl, {
                 method: 'POST',
@@ -74,8 +78,11 @@ export class CastariClient {
         }
         const wsUrlParams = new URLSearchParams();
         wsUrlParams.set('token', connectionToken);
-        if (connection.previewToken) {
-            wsUrlParams.set('preview_token', connection.previewToken);
+        // Add any auth params from platform (for sandbox proxy auth)
+        if (connection.authParams) {
+            for (const [key, value] of Object.entries(connection.authParams)) {
+                wsUrlParams.set(key, value);
+            }
         }
         const wsUrlJoiner = connection.wsUrl.includes('?') ? '&' : '?';
         const wsUrl = `${connection.wsUrl}${wsUrlJoiner}${wsUrlParams.toString()}`;
@@ -116,24 +123,33 @@ export class CastariClient {
         };
     }
     async setupPlatformConnection() {
+        if (!this.resolvedClientId) {
+            throw new Error('CASTARI_CLIENT_ID is required when connecting via the Castari Platform');
+        }
         const platformUrl = this.options.platformUrl || process.env.CASTARI_PLATFORM_URL || 'http://localhost:3000';
         if (this.options.debug) {
             console.log(`🚀 Requesting sandbox from ${platformUrl}...`);
         }
         const response = await fetch(`${platformUrl}/sandbox/start`, {
             method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
+            headers: {
+                'Content-Type': 'application/json',
+                ...(this.resolvedPlatformApiKey
+                    ? { Authorization: `Bearer ${this.resolvedPlatformApiKey}` }
+                    : {}),
+            },
             body: JSON.stringify({
                 snapshot: this.options.snapshot,
                 labels: this.options.labels,
-                volume: this.options.volume
+                volume: this.options.volume,
+                clientId: this.resolvedClientId
             })
         });
         if (!response.ok) {
             const errorText = await response.text();
             throw new Error(`Failed to start sandbox: ${errorText}`);
         }
-        const { id, url, token } = await response.json();
+        const { id, url, authHeaders, authParams } = await response.json();
         this.sandboxId = id;
         if (this.options.debug) {
             console.log(`✅ Sandbox started: ${id} at ${url}`);
@@ -144,7 +160,8 @@ export class CastariClient {
         return {
             configUrl,
             wsUrl: wsUrlBase,
-            previewToken: token,
+            authHeaders,
+            authParams,
             cleanup: async () => {
                 await this.stop({ delete: true });
             }
@@ -175,12 +192,18 @@ export class CastariClient {
         if (this.sandboxId) {
             const platformUrl = this.options.platformUrl || process.env.CASTARI_PLATFORM_URL || 'http://localhost:3000';
             try {
+                const clientId = this.resolvedClientId || this.options.clientId || process.env.CASTARI_CLIENT_ID;
+                const apiKey = this.resolvedPlatformApiKey || this.options.platformApiKey || process.env.CASTARI_API_KEY;
                 const response = await fetch(`${platformUrl}/sandbox/stop`, {
                     method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
+                    headers: {
+                        'Content-Type': 'application/json',
+                        ...(apiKey ? { Authorization: `Bearer ${apiKey}` } : {}),
+                    },
                     body: JSON.stringify({
                         sandboxId: this.sandboxId,
-                        delete: options.delete
+                        delete: options.delete,
+                        clientId
                     })
                 });
                 if (!response.ok) {

package/dist/const.js

@@ -6,4 +6,4 @@ export const SERVER_PORT = 3000;
 // Workspace configuration
 export const WORKSPACE_DIR_NAME = 'agent-workspace';
 // Connection token (one-time) configuration
-export const CONNECTION_TOKEN_TTL_MS = 5 * 60 * 10000; // 5 minutes
+export const CONNECTION_TOKEN_TTL_MS = 5 * 60 * 1000; // 5 minutes

package/dist/server.js

@@ -85,7 +85,7 @@ async function processMessages(initialOptions) {
             settingSources: ['local'],
             cwd: workspaceDirectory,
             // Auto-approve tool usage (including file writes) inside the sandbox.
-            // Daytona sandboxes are already isolated, so this keeps DX smooth without interactive prompts.
+            // Sandboxes are already isolated, so this keeps DX smooth without interactive prompts.
             canUseTool: async (_toolName, input) => ({
                 behavior: 'allow',
                 updatedInput: input,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@castari/sdk",
-    "version": "0.0.5",
+    "version": "0.0.7",
     "type": "module",
     "main": "./dist/index.js",
     "types": "./dist/index.d.ts",
@@ -34,4 +34,4 @@
     "devDependencies": {
         "@types/bun": "latest"
     }
-}
+}