@declaw/sdk 1.0.2 → 1.0.4

package/CHANGELOG.md

@@ -5,6 +5,41 @@ All notable changes to the Declaw TypeScript / JavaScript SDK are documented in
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.0.4]
+
+### Changed
+
+- `InjectionAction` — dropped the `"sanitize"` value. The server
+  never implemented request-body sanitization for detected injections
+  (the classifier returns a whole-request verdict, not span offsets),
+  so the value was accepted client-side but silently behaved like
+  `log_only` at the edge proxy. Valid values are now `"block"` and
+  `"log_only"`. Default action changes from `"sanitize"` to
+  `"log_only"` so existing enforcement behaviour is preserved.
+  Callers passing `action: "sanitize"` will now raise at construction
+  time; migrate to `"log_only"` (same behaviour) or `"block"`
+  (hard-reject on detection).
+
+## [1.0.3]
+
+### Added
+
+- `sandbox.pty.connect(pid, { onData })` — reattach a fresh data callback
+  to an already-running PTY session by pid. Multiple clients can
+  subscribe concurrently; each receives output from the moment it
+  connects (no scrollback replay).
+- Server-side PTY session TTL. The `timeout` option on
+  `sandbox.pty.create()` is now enforced inside the sandbox — the PTY
+  is terminated when the deadline elapses, even if no client is
+  attached. `timeout: 0` keeps it alive indefinitely.
+
+### Changed
+
+- `PtyHandle.wait()` now resolves with a `PtyResult` object (`{ exitCode }`)
+  instead of a bare number. This matches the shape of other lifecycle
+  APIs and leaves room for future fields (e.g. signal). Existing
+  numeric access becomes `(await handle.wait()).exitCode`.
+
 ## [1.0.2]
 
 ### Added

package/dist/index.cjs

@@ -506,7 +506,6 @@ var InjectionSensitivity = /* @__PURE__ */ ((InjectionSensitivity2) => {
 })(InjectionSensitivity || {});
 var InjectionAction = /* @__PURE__ */ ((InjectionAction2) => {
   InjectionAction2["Block"] = "block";
-  InjectionAction2["Sanitize"] = "sanitize";
   InjectionAction2["LogOnly"] = "log_only";
   return InjectionAction2;
 })(InjectionAction || {});
@@ -516,7 +515,7 @@ function createInjectionDefenseConfig(opts) {
   const config = {
     enabled: opts?.enabled ?? false,
     sensitivity: opts?.sensitivity ?? "medium" /* Medium */,
-    action: opts?.action ?? "sanitize" /* Sanitize */,
+    action: opts?.action ?? "log_only" /* LogOnly */,
     threshold: opts?.threshold ?? 0.8,
     domains: opts?.domains
   };
@@ -541,7 +540,7 @@ function parseInjectionDefenseConfig(data) {
   return {
     enabled: data.enabled ?? false,
     sensitivity: data.sensitivity ?? "medium" /* Medium */,
-    action: data.action ?? "sanitize" /* Sanitize */,
+    action: data.action ?? "log_only" /* LogOnly */,
     threshold: data.threshold ?? 0.8,
     domains: data.domains
   };
@@ -1641,7 +1640,7 @@ var PtyHandle = class {
   disconnect() {
     this.aborter.abort();
   }
-  /** Resolves with the remote exit code when the PTY process exits. */
+  /** Resolves with the remote exit result when the PTY process exits. */
   wait() {
     return this.exitPromise;
   }
@@ -1678,7 +1677,7 @@ var PtyHandle = class {
           const parsed = parseSSEFrame(frame);
           if (!parsed) continue;
           if (parsed.event === "exit") {
-            this.resolveExit(parsed.exitCode ?? -1);
+            this.resolveExit({ exitCode: parsed.exitCode ?? -1 });
             return;
           }
           if (parsed.bytes) {
@@ -1700,7 +1699,7 @@ var PtyHandle = class {
         throw err;
       }
     } finally {
-      this.resolveExit(-1);
+      this.resolveExit({ exitCode: -1 });
     }
   }
 };
@@ -1747,11 +1746,11 @@ var Pty = class {
     const user = opts?.user ?? "user";
     const body = {
       size: { cols: size.cols, rows: size.rows },
-      user
+      user,
+      timeout: opts?.timeout ?? 3600
     };
     if (opts?.cwd !== void 0) body.cwd = opts.cwd;
     if (opts?.envs !== void 0) body.envs = opts.envs;
-    if (opts?.timeout !== void 0) body.timeout = opts.timeout;
     const data = await this.client.post(
       `/sandboxes/${this.sandboxId}/pty`,
       { json: body, timeout: opts?.requestTimeout }
@@ -1759,7 +1758,18 @@ var Pty = class {
     const pid = data.pid;
     return new PtyHandle(pid, this.sandboxId, this.client, opts?.onData);
   }
-  // --- Legacy low-level API (kept for callers that already hold a pid). ---
+  /**
+   * Reattach to an already-running PTY by its pid.
+   *
+   * Returns a fresh `PtyHandle` that streams the live output of the
+   * existing session. Multiple clients can subscribe to the same pid
+   * concurrently — each receives output from the moment it connects
+   * (no scrollback replay).
+   */
+  connect(pid, opts) {
+    return new PtyHandle(pid, this.sandboxId, this.client, opts?.onData);
+  }
+  // --- Low-level API by pid (kept for callers that already hold one). ---
   async kill(pid, requestTimeout) {
     const data = await this.client.delete(
       `/sandboxes/${this.sandboxId}/pty/${pid}`,