@claxedo/sandbox-manager 0.9.0 → 0.10.0

package/dist/drivers/daytona.d.ts

@@ -1,163 +0,0 @@
-import type { SandboxDriver, SandboxDriverEnsureInput } from "..";
-import { type WorkspaceRuntimeControlEnv } from "../runtime-env";
-export type DaytonaSandboxLike = {
-    id: string;
-    state?: string;
-    labels?: Record<string, string>;
-    process: {
-        executeCommand: (command: string, cwd?: string, env?: Record<string, string>, timeout?: number) => Promise<unknown>;
-    };
-    getPreviewLink: (port: number) => Promise<{
-        url?: string;
-        token?: string;
-    }>;
-    getSignedPreviewUrl: (port: number, expiresInSeconds?: number) => Promise<{
-        url?: string;
-        token?: string;
-    }>;
-    refreshActivity: () => Promise<void>;
-    start: (timeout?: number) => Promise<void>;
-    stop: (timeout?: number) => Promise<void>;
-    delete: (timeout?: number) => Promise<void>;
-    updateSecrets: (secrets: Record<string, string>) => Promise<void>;
-    /**
-     * Replace the sandbox's outbound egress policy in place, without stopping it
-     * — the Daytona SDK's `Sandbox.updateNetworkSettings`, which drives the same
-     * runner-side iptables mechanism as `create`'s `networkBlockAll` /
-     * `networkAllowList` / `domainAllowList`. This is what makes the create-time
-     * policy reappliable on reuse and resume; see `applyNetworkPolicy` below.
-     *
-     * Optional because a client injected by an embedder may predate it. When it
-     * is absent and a restricted policy was requested, reuse is REFUSED rather
-     * than silently served on the creation-time policy.
-     */
-    updateNetworkSettings?: (settings: {
-        networkBlockAll?: boolean;
-        networkAllowList?: string;
-        domainAllowList?: string;
-    }) => Promise<void>;
-    _experimental_createSnapshot?: (name: string, timeout?: number) => Promise<void>;
-};
-export type DaytonaClientLike = {
-    findByLabels?: (labels: Record<string, string>) => Promise<DaytonaSandboxLike | undefined>;
-    /**
-     * One page of sandboxes matching `labels`. Pages are 1-based; a page that
-     * returns fewer than `limit` items (or none) is the last one — that is the
-     * termination rule `list()` below relies on, and any implementation must
-     * honor it or the sweep loops forever.
-     *
-     * `createDefaultClient` satisfies it by returning every match on page 1 and
-     * nothing after: the Daytona SDK's `list()` is an `AsyncIterableIterator`
-     * that paginates internally, so `limit` is its per-page fetch size and NOT a
-     * cap on the total (see @daytona/sdk `ListSandboxesQuery.limit`). There is no
-     * cursor to hand back, so re-slicing per page would re-walk the whole account
-     * on every call.
-     */
-    list?: (labels?: Record<string, string>, page?: number, limit?: number) => Promise<{
-        items?: DaytonaSandboxLike[];
-    }>;
-    create: (params: {
-        name?: string;
-        image?: string;
-        snapshot?: string;
-        envVars?: Record<string, string>;
-        /** Env-var-name → Daytona secret-name references (brokered secrets). */
-        secrets?: Record<string, string>;
-        labels?: Record<string, string>;
-        public?: boolean;
-        autoStopInterval?: number;
-        autoDeleteInterval?: number;
-        networkBlockAll?: boolean;
-        /** Comma-separated allowed CIDR network addresses. */
-        networkAllowList?: string;
-        /** Comma-separated allowed domains — the name-based egress allowlist. */
-        domainAllowList?: string;
-    }, options?: {
-        timeout?: number;
-    }) => Promise<DaytonaSandboxLike>;
-    get: (sandboxIdOrName: string) => Promise<DaytonaSandboxLike>;
-    /**
-     * The org-secret service, in the SDK's own shape so `createDefaultClient`
-     * hands `sdk.secret` straight through. Upsert and withdrawal POLICY lives in
-     * this driver (`reconcileBrokeredSecrets`) rather than behind a
-     * `upsertSecret` client method: `create` is a conflict on an existing name,
-     * so a client-level "upsert" is a second implementation of the lookup every
-     * embedder would have to get right.
-     */
-    secret?: DaytonaSecretServiceLike;
-};
-/** Identity of an org secret. The plaintext value is write-only and never returned. */
-export type DaytonaSecretLike = {
-    id: string;
-    name: string;
-};
-export type DaytonaSecretServiceLike = {
-    /**
-     * `name` is a PARTIAL match, and pages are cursor-based; callers filter the
-     * page themselves and follow `nextCursor` until it is null.
-     */
-    list: (query?: {
-        name?: string;
-        cursor?: string;
-        limit?: number;
-    }) => Promise<{
-        items: DaytonaSecretLike[];
-        nextCursor?: string | null;
-    }>;
-    /** Throws `DaytonaConflictError` when a secret of that name already exists. */
-    create: (params: {
-        name: string;
-        value: string;
-        hosts?: string[];
-    }) => Promise<DaytonaSecretLike>;
-    update: (secretId: string, params: {
-        value?: string;
-        hosts?: string[];
-    }) => Promise<unknown>;
-    delete: (secretId: string) => Promise<void>;
-};
-export type DaytonaSandboxDriverOptions = {
-    /** Daytona API base URL. Defaults to the SDK default. */
-    apiUrl?: string;
-    /** Daytona API key. */
-    apiKey: string;
-    /** Optional Daytona organization id. */
-    organizationId?: string;
-    /** Optional Daytona target/region. */
-    target?: string;
-    /** Snapshot the sandbox boots from. */
-    baseSnapshot: string;
-    /** Port the workspace-runtime listens on inside the sandbox. */
-    runtimePort?: number;
-    /** Path to the workspace-runtime binary inside the image. */
-    runtimeCommand?: string;
-    /** Workspace directory inside the sandbox. */
-    workspaceDir?: string;
-    /** Default runner injected as WORKSPACE_RUNTIME_RUNNER. */
-    runner?: string;
-    /** Static control-plane config injected so the runtime verifies relay-proxied requests. */
-    controlEnv?: WorkspaceRuntimeControlEnv;
-    /** Dynamic runtime env that needs the acquired sandbox id or current lease. */
-    env?: (input: SandboxDriverEnsureInput, sandbox: DaytonaSandboxLike) => Record<string, string> | Promise<Record<string, string>>;
-    /** Auto-stop / auto-delete policy, in minutes. */
-    autoStopMinutes?: number;
-    autoDeleteMinutes?: number;
-    /** Signed preview URL expiry, in seconds. */
-    previewExpirySeconds?: number;
-    /** Daytona SDK operation timeout, in seconds. */
-    operationTimeoutSeconds?: number;
-    /** Injected for tests. */
-    client?: DaytonaClientLike;
-    /**
-     * Sink for the two operator-visible events this driver has no other way to
-     * report: a restart it had to force on a live sandbox, and an org secret
-     * under this workspace's prefix that it did not mint and therefore emptied
-     * without mounting.
-     *
-     * Defaults to `console.warn`, deliberately unconditional — the same
-     * reasoning as `onEgressUnenforced` in index.ts. Pass your own to route them
-     * into a logger; pass `() => {}` only if you have another way to see them.
-     */
-    warn?: (message: string) => void;
-};
-export declare function createDaytonaSandboxDriver(options: DaytonaSandboxDriverOptions): SandboxDriver;