@evolvingmachines/daytona 0.0.52-project-sable.20260730.c2cb2d2 → 0.0.52-project-sable.20260810.ca7ed91

package/README.md

@@ -1,4 +1,12 @@
-# Evolve SDK Daytona Provider
+<br><br>
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/evolving-machines-lab/evolve/main/logo/evolving-machines-ink.png" alt="Evolving Machines" width="380">
+</p>
+
+<br><br>
+
+# Evolving Machines — Evolve Daytona Provider
 
 Daytona sandbox provider for [Evolve SDK](https://www.npmjs.com/package/@evolvingmachines/sdk).
 

package/dist/index.cjs

@@ -1,2 +1,7 @@
-'use strict';var sdk=require('@daytonaio/sdk'),promises=require('dns/promises');var z={"evolve-all":"evolvingmachines/evolve-all"},q=10,L=10,T=100,y=100,W=new Set([".xlsx",".xls",".docx",".doc",".pptx",".ppt",".pdf",".zip",".tar",".gz",".7z",".rar",".png",".jpg",".jpeg",".gif",".webp",".ico",".bmp",".mp3",".wav",".ogg",".flac",".aac",".mp4",".avi",".mov",".mkv",".webm",".woff",".woff2",".ttf",".otf",".eot",".exe",".dll",".so",".dylib",".sqlite",".db",".pickle",".pkl",".parquet"]);function X(s){let e=s.substring(s.lastIndexOf(".")).toLowerCase();return W.has(e)}function G(s){let e=s.lastIndexOf("/");return e>0?s.substring(0,e):"/"}function J(s){let e=s.lastIndexOf("/");return e>=0?s.substring(e+1):s}var f=class extends Error{reason;destination;constructor(e,t,n){super(t),this.name="DaytonaNetworkPolicyError",this.reason=e,this.destination=n;}},w=class extends Error{image;constructor(e,t){let n=t instanceof Error?t.message:String(t??"unknown error");super(`Failed to pull image "${e}" on Daytona: ${n}. Private registry images (e.g. AWS ECR) require registry credentials pre-registered in the Daytona dashboard (Registries page) before sandbox creation \u2014 Daytona has no per-call image pull secret. Register the registry at https://app.daytona.io, then retry. Also ensure the image is linux/amd64 and pinned to a tag or digest (floating tags like "latest" are rejected by Daytona's snapshot builder).`),this.name="DaytonaImagePullError",this.image=e;}},h=class extends Error{snapshot;constructor(e){super(`Daytona snapshot "${e}" already exists and pins its cpu/memory/disk sizing \u2014 create-from-snapshot cannot resize it, so the requested \`resources\` cannot be enforced. Pre-build a snapshot with the desired sizing under its own name (sizing-addressed), or omit \`resources\` to accept the snapshot's pinned sizing.`),this.name="DaytonaResourcesError",this.snapshot=e;}},S=class extends Error{constructor(){super("Daytona has no separate idle timeout: auto-stop IS its only clock and it already measures inactivity, so `timeoutMs` is what sets it (autoStopInterval). Set the inactivity bound with `timeoutMs`; a hard bound on the process itself is enforced in-box instead (see withInBoxTimeout)."),this.name="DaytonaIdleTimeoutError";}};function v(s,e){if(!e||e<=0)return s;let t=Buffer.from(s).toString("base64"),n=`/tmp/.evolve-cmd-${Date.now()}-${Math.random().toString(36).slice(2,8)}.sh`;return `sh -c '${`echo ${t} | base64 -d > ${n} && [ -s ${n} ] || { rm -f ${n}; exit 126; }; if command -v timeout >/dev/null 2>&1; then timeout -k 10 ${e} bash ${n}; else bash ${n}; fi; rc=$?; rm -f ${n}; exit $rc`}'`}function P(s,e,t,n){let r=s;return e&&(r=`cd '${e.replace(/'/g,"'\\''")}' && ${r}`),t&&Object.keys(t).length>0&&(r=`${Object.entries(t).filter(([,o])=>o!=null).map(([o,a])=>`export ${o}='${String(a).replace(/'/g,"'\\''")}'`).join("; ")}; ${r}`),n==="root"&&(r=`echo ${Buffer.from(r).toString("base64")} | base64 -d | sudo -n bash`),r}var V=s=>promises.resolve4(s);function E(s){let e=/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})(?:\/(\d{1,3}))?$/.exec(s);return !(!e||[e[1],e[2],e[3],e[4]].some(t=>Number(t)>255)||e[5]!==void 0&&Number(e[5])>32)}function Z(s){return /^\d{1,3}(\.\d{1,3}){3}(\/\d+)?$/.test(s)&&!E(s)}function Q(s){return s.startsWith("[")?true:(s.match(/:/g)?.length??0)>=2}function ee(s){return /^[^:]+:\d+$/.test(s)}async function B(s,e=V){if(!s||s.outbound==="open"){if(s?.allowedDestinations?.length)throw new Error("network.allowedDestinations is only valid when outbound is blocked");return s?{networkBlockAll:false}:{}}let t=s.allowedDestinations??[];if(t.length===0)return {networkBlockAll:true};let n=[],r=[];for(let o of t)if(E(o))n.push(o.includes("/")?o:`${o}/32`);else {if(Z(o))throw new f("invalid-ipv4",`"${o}" is not a valid IPv4 address or CIDR (octets must be 0-255, prefix 0-32). Fix the address or list a hostname instead.`,o);if(Q(o))throw new f("ipv6-unsupported",`Daytona's network allowlist supports IPv4 CIDRs only; cannot allow IPv6 destination "${o}".`,o);if(ee(o))throw new f("port-unsupported",`Daytona's network allowlist filters hosts and IPs only and cannot match a port; drop the ":<port>" from "${o}" and list just the host or IP.`,o);if(o.includes("*"))throw new f("wildcard-hostname",`Daytona cannot enforce wildcard hostname "${o}": its allowlist is kernel-level IPv4 CIDR filtering with no DNS/domain layer. List concrete hostnames or IPv4 CIDRs instead.`,o);r.push(o);}for(let o of r){let a=[];try{a=await e(o);}catch(i){throw new f("unresolvable-hostname",`Cannot pin hostname "${o}" to stable IPv4 addresses at create time (${i instanceof Error?i.message:String(i)}). Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,o)}if(a.length===0)throw new f("unresolvable-hostname",`Hostname "${o}" resolved to no IPv4 addresses. Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,o);console.warn(`[daytona] Network allowlist: pinning "${o}" to [${a.join(", ")}] (DNS resolved at create time). Daytona enforces IPv4 CIDRs only \u2014 if this host rotates DNS (CDNs and cloud APIs often do), traffic to its new IPs will be BLOCKED for the sandbox's lifetime.`);for(let i of a)n.push(`${i}/32`);}let l=[...new Set(n)];if(l.length>L)throw new f("allowlist-too-large",`Daytona allows at most ${L} entries in its network allowlist; this policy resolved to ${l.length} CIDRs (${l.join(", ")}). Aggregate destinations into broader CIDRs or reduce the list.`);return {networkBlockAll:false,networkAllowList:l.join(",")}}function O(s){let e=s.indexOf("/");if(e<0)return;let t=s.substring(0,e);return t.includes(".")||t.includes(":")||t==="localhost"?t:void 0}function k(s){return {sandboxId:s.id,image:s.snapshot??"",name:s.name,metadata:s.labels??{},startedAt:s.createdAt??""}}function _(s){if(s==="started")return "running";if(s==="stopped"||s==="archived")return "paused"}var I=class extends sdk.Daytona{constructor(t,n){super(t);this.managedToolboxUrl=n;}async getProxyToolboxUrl(){return this.managedToolboxUrl}};function te(s,e){let t=new Uint8Array(new ArrayBuffer(s.length+e.length));return t.set(s,0),t.set(e,s.length),t}function U(s,e,t){e:for(let n=t;n+e.length<=s.length;n++){for(let r=0;r<e.length;r++)if(s[n+r]!==e[r])continue e;return n}return  -1}function N(s,e){let t=new TextDecoder("utf-8"),n=new TextDecoder("utf-8"),r=new Uint8Array(0),l="stdout",o=a=>{a.length!==0&&(l==="stdout"?s(t.decode(a,{stream:true})):e(n.decode(a,{stream:true})));};return {push(a){for(r=te(r,a);;){let i=U(r,sdk.STDOUT_PREFIX_BYTES,0),d=U(r,sdk.STDERR_PREFIX_BYTES,0),c=-1,u="stdout",m=0;if(i!==-1&&(d===-1||i<d)?(c=i,u="stdout",m=sdk.STDOUT_PREFIX_BYTES.length):d!==-1&&(c=d,u="stderr",m=sdk.STDERR_PREFIX_BYTES.length),c===-1){let g=Math.max(0,r.length-(sdk.MAX_PREFIX_LEN-1));o(r.subarray(0,g)),r=r.slice(g);return}o(r.subarray(0,c)),l=u,r=r.slice(c+m);}},flush(){o(r),r=new Uint8Array(0);let a=t.decode();a&&s(a);let i=n.decode();i&&e(i);}}}async function F(s,e,t,n,r,l){let o=`${s.toolboxUrl.replace(/\/+$/,"")}/${encodeURIComponent(e)}/process/session/${encodeURIComponent(t)}/command/${encodeURIComponent(n)}/logs?follow=true`,a=await fetch(o,{headers:{Authorization:`Bearer ${s.apiKey}`,accept:"application/octet-stream"}});if(!a.ok)throw new Error(`Daytona managed log follow failed: ${a.status} ${await a.text()}`);if(!a.body)return;let i=N(r,l),d=a.body.getReader();try{for(;;){let{done:c,value:u}=await d.read();if(c)break;u&&i.push(u);}}finally{i.flush(),await d.cancel().catch(()=>{});}}function x(s){let e=s.stdout||"",t=s.stderr||"",n=s.output||"";return !e&&!t&&n?{stdout:n,stderr:""}:{stdout:e,stderr:t}}var D=class{constructor(e,t,n){this.sandbox=e;this.user=t;this.managedStream=n;}followLogs(e,t,n,r){return this.managedStream?F(this.managedStream,this.sandbox.id,e,t,n,r):this.sandbox.process.getSessionCommandLogs(e,t,n,r)}async run(e,t){let n=t?.timeoutMs?Math.floor(t.timeoutMs/1e3):void 0,r=`run-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(r);try{let l=await this.sandbox.process.executeSessionCommand(r,{command:v(P(e,t?.cwd,t?.envs,this.user),n),runAsync:!1},n),o=l.cmdId;o&&(t?.onStdout||t?.onStderr)&&await this.followLogs(r,o,t.onStdout||(()=>{}),t.onStderr||(()=>{}));let{stdout:a,stderr:i}=x(l);if(!a&&!i&&o&&!t?.onStdout)try{let d=await this.sandbox.process.getSessionCommandLogs(r,o),c=x(d);a=c.stdout,i=c.stderr||i;}catch{}return {exitCode:l.exitCode??0,stdout:a,stderr:i}}finally{try{await this.sandbox.process.deleteSession(r);}catch{}}}async spawn(e,t){let n=`evolve-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(n);let r=t?.timeoutMs?Math.floor(t.timeoutMs/1e3):void 0,l=Date.now(),o=t?.timeoutMs,i=(await this.sandbox.process.executeSessionCommand(n,{command:v(P(e,t?.cwd,t?.envs,this.user),r),runAsync:true},r)).cmdId;i&&(t?.onStdout||t?.onStderr)&&this.followLogs(n,i,t.onStdout||(()=>{}),t.onStderr||(()=>{})).catch(()=>{});let d=this.sandbox;return {processId:n,wait:async()=>{if(!i)return {exitCode:0,stdout:"",stderr:""};for(;;){if(o&&Date.now()-l>=o){try{await d.process.deleteSession(n);}catch{}return {exitCode:124,stdout:"",stderr:"operation timed out"}}try{let c=await d.process.getSessionCommand(n,i);if(c.exitCode!==void 0)try{let u=await d.process.getSessionCommandLogs(n,i);return {exitCode:c.exitCode,...x(u)}}catch{return {exitCode:c.exitCode,stdout:"",stderr:""}}}catch(c){let u=c instanceof Error?c.message.toLowerCase():String(c).toLowerCase();if(u.includes("not found")){let m=u.includes("sandbox");try{await d.refreshData(),m=!1;}catch(g){(g instanceof Error?g.message.toLowerCase():String(g).toLowerCase()).includes("not found")&&(m=true);}return {exitCode:-1,stdout:"",stderr:m?"sandbox deleted during run":"session terminated"}}throw c}await new Promise(c=>setTimeout(c,500));}},kill:async()=>{try{return await d.process.deleteSession(n),!0}catch{return  false}}}}async list(){try{return (await this.sandbox.process.listSessions()).map(t=>({processId:t.sessionId||"",cmd:"",args:[],envs:{}}))}catch{return []}}async kill(e){try{return await this.sandbox.process.deleteSession(e),!0}catch{return  false}}},A=class{constructor(e){this.sandbox=e;}async read(e){let t=await this.sandbox.fs.downloadFile(e);return X(e)?new Uint8Array(t):t.toString("utf-8")}async write(e,t){let n;if(typeof t=="string")n=Buffer.from(t,"utf-8");else if(Buffer.isBuffer(t))n=t;else if(t instanceof ArrayBuffer)n=Buffer.from(t);else if(t instanceof Uint8Array)n=Buffer.from(t);else throw new Error(`Unsupported content type: ${typeof t}`);await this.sandbox.fs.uploadFile(n,e);}async writeBatch(e){let t=e.map(n=>{let r;if(typeof n.data=="string")r=Buffer.from(n.data,"utf-8");else if(Buffer.isBuffer(n.data))r=n.data;else if(n.data instanceof ArrayBuffer)r=Buffer.from(n.data);else if(n.data instanceof Uint8Array)r=Buffer.from(n.data);else throw new Error(`Unsupported content type: ${typeof n.data}`);return {source:r,destination:n.path}});await this.sandbox.fs.uploadFiles(t);}async writeFromPath(e,t){await this.sandbox.fs.uploadFile(t,e);}async makeDir(e){await this.sandbox.fs.createFolder(e,"755");}async exists(e){try{let t=G(e),n=J(e);return (await this.sandbox.fs.listFiles(t)).some(l=>l.name===n)}catch{return  false}}async list(e){return (await this.sandbox.fs.listFiles(e)).map(n=>({name:n.name,path:e.endsWith("/")?`${e}${n.name}`:`${e}/${n.name}`,type:n.isDir?"dir":"file"}))}async remove(e){await this.sandbox.fs.deleteFile(e,true);}async rename(e,t){await this.sandbox.fs.moveFiles(e,t);}},b=class{constructor(e,t,n){this.sandbox=e;this.commands=new D(e,t,n),this.files=new A(e);}commands;files;get sandboxId(){return this.sandbox.id}async getHost(e){return (await this.sandbox.getPreviewLink(e)).url}async isRunning(){try{await this.sandbox.refreshData();}catch{return  false}return this.sandbox.state==="started"}async getInfo(){return await this.sandbox.refreshData(),k(this.sandbox)}async kill(){await this.sandbox.delete();}async pause(){await this.sandbox.stop();}},C=class{providerType="daytona";name="Daytona";client;defaultTimeoutMs;snapshotName;sandboxUsers=new Map;managedStream;constructor(e){let t={apiKey:e.apiKey,apiUrl:e.apiUrl,target:e.target};this.client=e.managedToolboxUrl?new I(t,e.managedToolboxUrl):new sdk.Daytona(t),e.managedToolboxUrl&&(this.managedStream={toolboxUrl:e.managedToolboxUrl,apiKey:e.apiKey}),this.defaultTimeoutMs=e.defaultTimeoutMs??36e5,this.snapshotName=e.snapshotName??"evolve-all";}async create(e){if(e.idleTimeoutMs!==void 0)throw new S;let t=await B(e.network),n=e.user,r=n&&n!=="root"?n:void 0,l=e.timeoutMs??this.defaultTimeoutMs,o=Math.max(1,Math.ceil(l/6e4)),a=e.image||this.snapshotName,i={envVars:e.envs,labels:e.metadata,autoStopInterval:o,autoDeleteInterval:q,...r?{user:r}:{},...t},d,c=e.resources!==void 0&&(e.resources.cpu!==void 0||e.resources.memory!==void 0||e.resources.disk!==void 0);if(this.managedStream){if(c)throw new h(a);let u=await this.client.create({snapshot:a,...i},{timeout:600});return e.workingDirectory&&await u.fs.createFolder(e.workingDirectory,"755"),n&&this.sandboxUsers.set(u.id,n),new b(u,n,this.managedStream)}try{let u=await this.client.snapshot.get(a);if(u&&u.state==="active"){if(c)throw new h(a);console.log(`[daytona] Using cached snapshot: ${a}`),d=await this.client.create({snapshot:a,...i},{timeout:600});}else throw new Error("Snapshot not active")}catch(u){if(u instanceof h)throw u;let m=z[a]??a;console.log(`[daytona] Snapshot "${a}" not found, building from image: ${m}`),console.log("[daytona] First run will take a few minutes (this only happens once)...");try{await this.client.snapshot.create({name:a,image:sdk.Image.base(m),resources:{cpu:e.resources?.cpu??4,memory:e.resources?.memory??4,disk:e.resources?.disk??10}},{onLogs:g=>console.log(`[daytona] ${g}`)}),console.log(`[daytona] Snapshot "${a}" ready.`),d=await this.client.create({snapshot:a,...i},{timeout:600});}catch(g){console.warn(`[daytona] Snapshot creation failed, falling back to direct image: ${g instanceof Error?g.message:g}`);try{d=await this.client.create({image:m,...i,resources:{cpu:e.resources?.cpu??4,memory:e.resources?.memory??4,disk:e.resources?.disk??10}},{timeout:600,onSnapshotCreateLogs:p=>console.log(`[daytona] ${p}`)});}catch(p){throw O(m)?new w(m,p):p}}}return e.workingDirectory&&await d.fs.createFolder(e.workingDirectory,"755"),n&&this.sandboxUsers.set(d.id,n),new b(d,n,this.managedStream)}async connect(e,t){let n=await this.client.get(e);return n.state!=="started"&&await n.start(),new b(n,this.sandboxUsers.get(e),this.managedStream)}async list(e){let t=await this.paginate(e);if(t.error&&!t.stoppedAtLimit)throw new Error(t.error);return t.sandboxes}async listAll(e){let{stoppedAtLimit:t,...n}=await this.paginate(e);return n}async paginate(e){return K(t=>this.listPage(e,t),e)}async listPage(e,t){let n=e?.state?ne(e.state):void 0;if(n&&n.length>0){let r=this.client.sandboxApi;if(typeof r?.listSandboxesPaginated=="function")try{let l=await r.listSandboxesPaginated(void 0,t,T,void 0,void 0,e?.metadata?JSON.stringify(e.metadata):void 0,void 0,n);return {items:l.data.items,totalPages:l.data.totalPages}}catch{}}return this.client.list(e?.metadata,t,T)}};function ne(s){let e=[];for(let t of s)t==="running"&&e.push("started"),t==="paused"&&e.push("stopped","archived");return e}async function K(s,e){let t=e?.limit,n=[],r=0,l=new Set;for(let o=1;o<=y;o+=1){let a;try{a=await s(o);}catch(d){return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:false,error:`sandbox list failed: ${d instanceof Error?d.message:String(d)}`}}r+=1;for(let d of a.items){if(e?.state){let c=_(d.state);if(c===void 0||!e.state.includes(c))continue}if(!l.has(d.id)){if(t!==void 0&&n.length>=t)return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:true,error:`stopped at the requested limit of ${t} with more sandboxes available`};l.add(d.id),n.push(k(d));}}let i=a.items.length===0||typeof a.totalPages=="number"&&o>=a.totalPages;if(t!==void 0&&n.length>=t&&!i)return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:true,error:`stopped at the requested limit of ${t} with more sandboxes available`};if(i)break;if(o===y)return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:false,error:`sandbox list exceeded ${y} pages`}}return {sandboxes:n,complete:true,pagesFetched:r,stoppedAtLimit:false}}var oe=K;function ae(s={}){let e=s.apiKey??process.env.DAYTONA_API_KEY;if(!e)throw new Error("Daytona API key required. Set DAYTONA_API_KEY environment variable or pass apiKey in config. Get your key at https://app.daytona.io/dashboard/keys");return new C({...s,apiKey:e})}var ie=P,de=v,le=B,ce=O,ue=k,me=_,ge=N,fe=F,pe=x;
-exports.DAYTONA_AUTO_DELETE_GRACE_MINUTES=q;exports.DAYTONA_LIST_PAGE_SIZE=T;exports.DAYTONA_MAX_LIST_PAGES=y;exports.DAYTONA_MAX_NETWORK_ALLOWLIST=L;exports.DaytonaCommands=D;exports.DaytonaFiles=A;exports.DaytonaIdleTimeoutError=S;exports.DaytonaImagePullError=w;exports.DaytonaNetworkPolicyError=f;exports.DaytonaProvider=C;exports.DaytonaResourcesError=h;exports._testCollectSandboxPages=oe;exports._testCreateLogDemuxer=ge;exports._testDaytonaStateToEvolveState=me;exports._testFollowManagedSessionLogs=fe;exports._testImageRegistryHost=ce;exports._testMapNetworkPolicy=le;exports._testReadCommandStreams=pe;exports._testToSandboxInfo=ue;exports._testWithInBoxTimeout=de;exports._testWrapCommand=ie;exports.createDaytonaProvider=ae;
+'use strict';var sdk=require('@daytonaio/sdk'),promises=require('dns/promises');var D="c-7bcda3467a79";var X={[`evolve-all-${D}`]:`evolvingmachines/evolve-all:${D}`,"evolve-all":"evolvingmachines/evolve-all"},ft=10,W=10,gt=18e4,pt=2e3,ht={pollMinMs:250,pollMaxMs:2e3,drainMs:1e3,killGraceMs:15e3,settleMs:6e4},v=s=>new Promise(t=>setTimeout(t,Math.max(0,s))),yt=100,I=1e4;function wt(s){let t=s.lastIndexOf("/");return t>0?s.substring(0,t):"/"}function xt(s){let t=s.lastIndexOf("/");return t>=0?s.substring(t+1):s}var h=class extends Error{reason;destination;constructor(t,e,n){super(e),this.name="DaytonaNetworkPolicyError",this.reason=t,this.destination=n;}},k=class extends Error{image;constructor(t,e){let n=e instanceof Error?e.message:String(e??"unknown error");super(`Failed to pull image "${t}" on Daytona: ${n}. Private registry images (e.g. AWS ECR) require registry credentials pre-registered in the Daytona dashboard (Registries page) before sandbox creation \u2014 Daytona has no per-call image pull secret. Register the registry at https://app.daytona.io, then retry. Also ensure the image is linux/amd64 and pinned to a tag or digest (floating tags like "latest" are rejected by Daytona's snapshot builder).`),this.name="DaytonaImagePullError",this.image=t;}},j=class extends Error{snapshot;constructor(t){super(`Daytona cannot constrain the GPU type for "${t}": the snapshot already exists and pins its resources \u2014 pre-build a snapshot with the desired GPU type under its own name.`),this.name="DaytonaGpuTypeError",this.snapshot=t;}},P=class extends Error{snapshot;constructor(t){super(`Daytona snapshot "${t}" already exists and pins its cpu/memory/disk sizing \u2014 create-from-snapshot cannot resize it, so the requested \`resources\` cannot be enforced. Pre-build a snapshot with the desired sizing under its own name (sizing-addressed), or omit \`resources\` to accept the snapshot's pinned sizing.`),this.name="DaytonaResourcesError",this.snapshot=t;}},C=class extends Error{constructor(){super("Daytona has no separate idle timeout: auto-stop IS its only clock and it already measures inactivity, so `timeoutMs` is what sets it (autoStopInterval). Set the inactivity bound with `timeoutMs`; a hard bound on the process itself is enforced in-box instead (see withInBoxTimeout)."),this.name="DaytonaIdleTimeoutError";}},y=class extends Error{snapshot;constructor(t,e){super(`Daytona snapshot "${t}" exists but could not be activated: ${e}. Daytona deactivates snapshots unused for 2 weeks; activation normally completes in seconds. Retry, or activate it manually in the Daytona dashboard (Snapshots page).`),this.name="DaytonaSnapshotActivationError",this.snapshot=t;}};async function Q(s,t,e,n){let o=n?.timeoutMs??gt,l=n?.pollMs??pt;console.log(`[daytona] Snapshot "${t}" is inactive (unused for 2+ weeks) \u2014 reactivating...`);let r;try{r=await s.snapshot.activate(e);}catch(i){throw new y(t,`the activate call failed (${i instanceof Error?i.message:String(i)})`)}let a=Date.now()+o;for(;r?.state!=="active";){if(r?.state==="error"||r?.state==="build_failed")throw new y(t,`it entered state "${r.state}"`);if(Date.now()>=a)throw new y(t,`still "${r?.state??"unknown"}" after ${o}ms`);await v(l);try{r=await s.snapshot.get(t);}catch(i){throw new y(t,`the activation poll failed (${i instanceof Error?i.message:String(i)})`)}}return console.log(`[daytona] Snapshot "${t}" reactivated.`),r}function $(s,t){if(!t||t<=0)return s;let e=Buffer.from(s).toString("base64"),n=`/tmp/.evolve-cmd-${Date.now()}-${Math.random().toString(36).slice(2,8)}.sh`;return `sh -c '${`echo ${e} | base64 -d > ${n} && [ -s ${n} ] || { rm -f ${n}; exit 126; }; if command -v timeout >/dev/null 2>&1; then timeout -k 10 ${t} bash ${n}; else bash ${n}; fi; rc=$?; rm -f ${n}; exit $rc`}'`}function V(){return `EVOLVE-EOS-${Date.now().toString(36)}-${Math.random().toString(36).slice(2,8)}`}function T(s,t){return s.trim()?`{ :
+${s}
+
+}; __evolve_eos=$?; printf '%s' '${t}'; (exit $__evolve_eos)`:s}function Z(s,t){return s.endsWith(`${t}
+`)?s.slice(0,-(t.length+1)):s.endsWith(t)?s.slice(0,-t.length):s}function x(s,t){let e=at(s);return {stdout:Z(e.stdout,t),stderr:e.stderr}}function M(s,t){let e=`${s}
+`,n="",o=l=>{for(let r=Math.min(l.length,e.length);r>0;r--)if(e.startsWith(l.slice(l.length-r)))return r;return 0};return {push(l){n+=l;let r=o(n);r!==n.length&&(t(n.slice(0,n.length-r)),n=n.slice(n.length-r));},flush(){let l=n===e||n===s?"":n;n="",l&&t(l);}}}function E(s,t,e,n){let o=s;return t&&(o=`cd '${t.replace(/'/g,"'\\''")}' && ${o}`),e&&Object.keys(e).length>0&&(o=`${Object.entries(e).filter(([,r])=>r!=null).map(([r,a])=>`export ${r}='${String(a).replace(/'/g,"'\\''")}'`).join("; ")}; ${o}`),n==="root"&&(o=`echo ${Buffer.from(o).toString("base64")} | base64 -d | sudo -n bash`),o}var bt=s=>promises.resolve4(s);function J(s){let t=/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})(?:\/(\d{1,3}))?$/.exec(s);return !(!t||[t[1],t[2],t[3],t[4]].some(e=>Number(e)>255)||t[5]!==void 0&&Number(t[5])>32)}function St(s){return /^\d{1,3}(\.\d{1,3}){3}(\/\d+)?$/.test(s)&&!J(s)}function vt(s){return s.startsWith("[")?true:(s.match(/:/g)?.length??0)>=2}function Pt(s){return /^[^:]+:\d+$/.test(s)}async function tt(s,t=bt){if(!s||s.outbound==="open"){if(s?.allowedDestinations?.length)throw new Error("network.allowedDestinations is only valid when outbound is blocked");return s?{networkBlockAll:false}:{}}let e=s.allowedDestinations??[];if(e.length===0)return {networkBlockAll:true};let n=[],o=[];for(let r of e)if(J(r))n.push(r.includes("/")?r:`${r}/32`);else {if(St(r))throw new h("invalid-ipv4",`"${r}" is not a valid IPv4 address or CIDR (octets must be 0-255, prefix 0-32). Fix the address or list a hostname instead.`,r);if(vt(r))throw new h("ipv6-unsupported",`Daytona's network allowlist supports IPv4 CIDRs only; cannot allow IPv6 destination "${r}".`,r);if(Pt(r))throw new h("port-unsupported",`Daytona's network allowlist filters hosts and IPs only and cannot match a port; drop the ":<port>" from "${r}" and list just the host or IP.`,r);if(r.includes("*"))throw new h("wildcard-hostname",`Daytona cannot enforce wildcard hostname "${r}": its allowlist is kernel-level IPv4 CIDR filtering with no DNS/domain layer. List concrete hostnames or IPv4 CIDRs instead.`,r);o.push(r);}for(let r of o){let a=[];try{a=await t(r);}catch(i){throw new h("unresolvable-hostname",`Cannot pin hostname "${r}" to stable IPv4 addresses at create time (${i instanceof Error?i.message:String(i)}). Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,r)}if(a.length===0)throw new h("unresolvable-hostname",`Hostname "${r}" resolved to no IPv4 addresses. Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,r);console.warn(`[daytona] Network allowlist: pinning "${r}" to [${a.join(", ")}] (DNS resolved at create time). Daytona enforces IPv4 CIDRs only \u2014 if this host rotates DNS (CDNs and cloud APIs often do), traffic to its new IPs will be BLOCKED for the sandbox's lifetime.`);for(let i of a)n.push(`${i}/32`);}let l=[...new Set(n)];if(l.length>W)throw new h("allowlist-too-large",`Daytona allows at most ${W} entries in its network allowlist; this policy resolved to ${l.length} CIDRs (${l.join(", ")}). Aggregate destinations into broader CIDRs or reduce the list.`);return {networkBlockAll:false,networkAllowList:l.join(",")}}function et(s){let t=s.indexOf("/");if(t<0)return;let e=s.substring(0,t);return e.includes(".")||e.includes(":")||e==="localhost"?e:void 0}function U(s){return {sandboxId:s.id,image:s.snapshot??"",name:s.name,metadata:s.labels??{},startedAt:s.createdAt??""}}function nt(s){if(s==="started")return "running";if(s==="stopped"||s==="archived"||s==="paused")return "paused"}function st(s,t){if(!s||typeof s!="object")return;let e=s;if(typeof e.toolboxProxyUrl=="string"&&(e.toolboxProxyUrl=t),Array.isArray(e.items))for(let n of e.items)st(n,t);}function At(s,t){return new Proxy(s,{get(e,n,o){if(n==="getToolboxProxyUrl")return async()=>({data:{url:t}});let l=Reflect.get(e,n,o);return typeof l!="function"?l:function(...r){let a=l.apply(e,r);return a instanceof Promise?a.then(i=>(st(i?.data,t),i)):a}}})}var _=class extends sdk.Daytona{constructor(t,e){super(t);let n=this;n.sandboxApi=At(n.sandboxApi,e);}};function Dt(s,t){let e=new Uint8Array(new ArrayBuffer(s.length+t.length));return e.set(s,0),e.set(t,s.length),e}function q(s,t,e){t:for(let n=e;n+t.length<=s.length;n++){for(let o=0;o<t.length;o++)if(s[n+o]!==t[o])continue t;return n}return  -1}function rt(s,t){let e=new TextDecoder("utf-8"),n=new TextDecoder("utf-8"),o=new Uint8Array(0),l="stdout",r=a=>{a.length!==0&&(l==="stdout"?s(e.decode(a,{stream:true})):t(n.decode(a,{stream:true})));};return {push(a){for(o=Dt(o,a);;){let i=q(o,sdk.STDOUT_PREFIX_BYTES,0),u=q(o,sdk.STDERR_PREFIX_BYTES,0),m=-1,d="stdout",c=0;if(i!==-1&&(u===-1||i<u)?(m=i,d="stdout",c=sdk.STDOUT_PREFIX_BYTES.length):u!==-1&&(m=u,d="stderr",c=sdk.STDERR_PREFIX_BYTES.length),m===-1){let f=Math.max(0,o.length-(sdk.MAX_PREFIX_LEN-1));r(o.subarray(0,f)),o=o.slice(f);return}r(o.subarray(0,m)),l=d,o=o.slice(m+c);}},flush(){r(o),o=new Uint8Array(0);let a=e.decode();a&&s(a);let i=n.decode();i&&t(i);}}}async function ot(s,t,e,n,o,l,r){let a=`${s.toolboxUrl.replace(/\/+$/,"")}/${encodeURIComponent(t)}/process/session/${encodeURIComponent(e)}/command/${encodeURIComponent(n)}/logs?follow=true`,i=await fetch(a,{headers:{Authorization:`Bearer ${s.apiKey}`,accept:"application/octet-stream"},...r?{signal:r}:{}});if(!i.ok)throw new Error(`Daytona managed log follow failed: ${i.status} ${await i.text()}`);if(!i.body)return;let u=rt(o,l),m=i.body.getReader();try{for(;;){let{done:d,value:c}=await m.read();if(d)break;c&&u.push(c);}}finally{u.flush(),await m.cancel().catch(()=>{});}}function at(s){let t=s.stdout||"",e=s.stderr||"",n=s.output||"";return !t&&!e&&n?{stdout:n,stderr:""}:{stdout:t,stderr:e}}var L=class{constructor(t,e,n){this.sandbox=t;this.user=e;this.managedStream=n;}streamTimings=ht;followLogs(t,e,n,o,l){return this.managedStream?ot(this.managedStream,this.sandbox.id,t,e,n,o,l):this.sandbox.process.getSessionCommandLogs(t,e,n,o)}async run(t,e){let n=e?.timeoutMs?Math.floor(e.timeoutMs/1e3):void 0,o=`run-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(o);try{let l=!!(e?.onStdout||e?.onStderr),r=V(),a=await this.sandbox.process.executeSessionCommand(o,{command:$(E(T(t,r),e?.cwd,e?.envs,this.user),n),runAsync:l},n),i=a.cmdId;if(l&&!i)throw new Error("Daytona returned no command id for an async command \u2014 cannot stream it or read its exit code");if(l&&i){let d="",c="",f=!0,p=Date.now(),w=M(r,g=>{d+=g,e?.onStdout?.(g);}),B=new AbortController,N=this.followLogs(o,i,g=>{f&&(p=Date.now(),w.push(g));},g=>{f&&(p=Date.now(),c+=g,e?.onStderr?.(g));},B.signal),F=!1,b,dt=N.then(()=>{},g=>{F||(b=g);}),G;try{G=await this.awaitStreamedExit(o,i,N,()=>p,e?.timeoutMs);}finally{F=!0,B.abort(),await Promise.race([dt,v(this.streamTimings.drainMs)]),f=!1,b===void 0&&w.flush();}if(b!==void 0){let g;try{let lt=await this.sandbox.process.getSessionCommandLogs(o,i);g=x(lt,r);}catch{throw b}if(!g.stdout.startsWith(d)||!g.stderr.startsWith(c))throw b;let S=g.stdout.slice(d.length),K=g.stderr.slice(c.length);d=g.stdout,c=g.stderr,S&&e?.onStdout?.(S),K&&e?.onStderr?.(K);}else if(!d&&!c)try{let g=await this.sandbox.process.getSessionCommandLogs(o,i),S=x(g,r);d=S.stdout,c=S.stderr,d&&e?.onStdout?.(d),c&&e?.onStderr?.(c);}catch{}return {exitCode:G,stdout:d,stderr:c}}let{stdout:u,stderr:m}=x(a,r);if(!u&&!m&&i)try{let d=await this.sandbox.process.getSessionCommandLogs(o,i),c=x(d,r);u=c.stdout,m=c.stderr||m;}catch{}return {exitCode:a.exitCode??0,stdout:u,stderr:m}}finally{try{await this.sandbox.process.deleteSession(o);}catch{}}}async awaitStreamedExit(t,e,n,o,l){let r=this.streamTimings,a,i,u=n.then(()=>{a=Date.now();},c=>{a=Date.now(),i=c;}),m=l!==void 0&&l>0?Date.now()+l+r.killGraceMs:void 0,d=r.pollMinMs;for(;;){let c=await this.sandbox.process.getSessionCommand(t,e);if(c.exitCode!==void 0&&c.exitCode!==null){for(;a===void 0;){let w=Date.now()-o();if(w>=r.drainMs)break;await Promise.race([u,v(r.drainMs-w)]);}return c.exitCode}let f=a!==void 0?a+r.settleMs:void 0,p=m!==void 0&&f!==void 0?Math.min(m,f):m??f;if(p!==void 0&&Date.now()>=p)throw i!==void 0?i:new Error(`Daytona reported no exit code for command ${e} after `+(a!==void 0?"its log stream closed":`${l}ms`));await v(d),d=Math.min(d*2,r.pollMaxMs);}}async spawn(t,e){let n=`evolve-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(n);let o=e?.timeoutMs?Math.floor(e.timeoutMs/1e3):void 0,l=Date.now(),r=e?.timeoutMs,a=V(),u=(await this.sandbox.process.executeSessionCommand(n,{command:$(E(T(t,a),e?.cwd,e?.envs,this.user),o),runAsync:true},o)).cmdId;if(u&&(e?.onStdout||e?.onStderr)){let d=M(a,e.onStdout||(()=>{}));this.followLogs(n,u,c=>d.push(c),e.onStderr||(()=>{})).catch(()=>{}).finally(()=>d.flush());}let m=this.sandbox;return {processId:n,wait:async()=>{if(!u)return {exitCode:0,stdout:"",stderr:""};for(;;){if(r&&Date.now()-l>=r){try{await m.process.deleteSession(n);}catch{}return {exitCode:124,stdout:"",stderr:"operation timed out"}}try{let d=await m.process.getSessionCommand(n,u);if(d.exitCode!==void 0)try{let c=await m.process.getSessionCommandLogs(n,u);return {exitCode:d.exitCode,...x(c,a)}}catch{return {exitCode:d.exitCode,stdout:"",stderr:""}}}catch(d){let c=d instanceof Error?d.message.toLowerCase():String(d).toLowerCase();if(c.includes("not found")){let f=c.includes("sandbox");try{await m.refreshData(),f=!1;}catch(p){(p instanceof Error?p.message.toLowerCase():String(p).toLowerCase()).includes("not found")&&(f=true);}return {exitCode:-1,stdout:"",stderr:f?"sandbox deleted during run":"session terminated"}}throw d}await v(500);}},kill:async()=>{try{return await m.process.deleteSession(n),!0}catch{return  false}}}}async list(){try{return (await this.sandbox.process.listSessions()).map(e=>({processId:e.sessionId||"",cmd:"",args:[],envs:{}}))}catch{return []}}async kill(t){try{return await this.sandbox.process.deleteSession(t),!0}catch{return  false}}},R=class{constructor(t){this.sandbox=t;}async read(t){let e=new Uint8Array(await this.sandbox.fs.downloadFile(t));if(!e.includes(0))try{return new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}).decode(e)}catch{}return e}async write(t,e){let n;if(typeof e=="string")n=Buffer.from(e,"utf-8");else if(Buffer.isBuffer(e))n=e;else if(e instanceof ArrayBuffer)n=Buffer.from(e);else if(e instanceof Uint8Array)n=Buffer.from(e);else throw new Error(`Unsupported content type: ${typeof e}`);await this.sandbox.fs.uploadFile(n,t);}async writeBatch(t){let e=t.map(n=>{let o;if(typeof n.data=="string")o=Buffer.from(n.data,"utf-8");else if(Buffer.isBuffer(n.data))o=n.data;else if(n.data instanceof ArrayBuffer)o=Buffer.from(n.data);else if(n.data instanceof Uint8Array)o=Buffer.from(n.data);else throw new Error(`Unsupported content type: ${typeof n.data}`);return {source:o,destination:n.path}});await this.sandbox.fs.uploadFiles(e);}async writeFromPath(t,e){await this.sandbox.fs.uploadFile(e,t);}async makeDir(t){await this.sandbox.fs.createFolder(t,"755");}async exists(t){try{let e=wt(t),n=xt(t);return (await this.sandbox.fs.listFiles(e)).some(l=>l.name===n)}catch{return  false}}async list(t){return (await this.sandbox.fs.listFiles(t)).map(n=>({name:n.name,path:t.endsWith("/")?`${t}${n.name}`:`${t}/${n.name}`,type:n.isDir?"dir":"file"}))}async remove(t){await this.sandbox.fs.deleteFile(t,true);}async rename(t,e){await this.sandbox.fs.moveFiles(t,e);}},A=class{constructor(t,e,n){this.sandbox=t;this.commands=new L(t,e,n),this.files=new R(t);}commands;files;get sandboxId(){return this.sandbox.id}async getHost(t){return (await this.sandbox.getPreviewLink(t)).url}async isRunning(){try{await this.sandbox.refreshData();}catch{return  false}return this.sandbox.state==="started"}async getInfo(){return await this.sandbox.refreshData(),U(this.sandbox)}async kill(){await this.sandbox.delete();}async pause(){await this.sandbox.stop();}},O=class{providerType="daytona";name="Daytona";client;defaultTimeoutMs;snapshotName;sandboxUsers=new Map;managedStream;constructor(t){let e={apiKey:t.apiKey,apiUrl:t.apiUrl,target:t.target,useDeprecatedPolling:true};this.client=t.managedToolboxUrl?new _(e,t.managedToolboxUrl):new sdk.Daytona(e),t.managedToolboxUrl&&(this.managedStream={toolboxUrl:t.managedToolboxUrl,apiKey:t.apiKey}),this.defaultTimeoutMs=t.defaultTimeoutMs??36e5,this.snapshotName=t.snapshotName??(t.managedToolboxUrl?"evolve-all":`evolve-all-${D}`);}async create(t){if(t.idleTimeoutMs!==void 0)throw new C;let e=await tt(t.network),n=t.user,o=n&&n!=="root"?n:void 0,l=t.timeoutMs??this.defaultTimeoutMs,r=Math.max(1,Math.ceil(l/6e4)),a=t.image||this.snapshotName,i={envVars:t.envs,labels:t.metadata,autoStopInterval:r,autoDeleteInterval:ft,...o?{user:o}:{},...e},u,m=t.resources!==void 0&&(t.resources.cpu!==void 0||t.resources.memory!==void 0||t.resources.disk!==void 0||t.resources.gpu!==void 0||t.resources.gpuTypes!==void 0);if(this.managedStream){if(m)throw new P(a);let d=await this.client.create({snapshot:a,...i},{timeout:600});return t.workingDirectory&&await d.fs.createFolder(t.workingDirectory,"755"),n&&this.sandboxUsers.set(d.id,n),new A(d,n,this.managedStream)}try{let d=await this.client.snapshot.get(a),c=d?.state;if(d&&(c==="active"||c==="inactive")&&m)throw new P(a);if(d&&c==="inactive"&&(c=(await Q(this.client,a,d)).state),d&&c==="active")console.log(`[daytona] Using cached snapshot: ${a}`),u=await this.client.create({snapshot:a,...i},{timeout:600});else throw new Error("Snapshot not active")}catch(d){if(d instanceof P||d instanceof y)throw d;let c=X[a]??a;console.log(`[daytona] Snapshot "${a}" not found, building from image: ${c}`),console.log("[daytona] First run will take a few minutes (this only happens once)...");try{await this.client.snapshot.create({name:a,image:sdk.Image.base(c),resources:{cpu:t.resources?.cpu??4,memory:t.resources?.memory??4,disk:t.resources?.disk??10,...(t.resources?.gpu??0)>0?{gpu:t.resources.gpu}:{},...t.resources?.gpuTypes?.length?{gpuType:t.resources.gpuTypes}:{}}},{onLogs:f=>console.log(`[daytona] ${f}`)}),console.log(`[daytona] Snapshot "${a}" ready.`),u=await this.client.create({snapshot:a,...i},{timeout:600});}catch(f){console.warn(`[daytona] Snapshot creation failed, falling back to direct image: ${f instanceof Error?f.message:f}`);try{u=await this.client.create({image:c,...i,resources:{cpu:t.resources?.cpu??4,memory:t.resources?.memory??4,disk:t.resources?.disk??10,...(t.resources?.gpu??0)>0?{gpu:t.resources.gpu}:{},...t.resources?.gpuTypes?.length?{gpuType:t.resources.gpuTypes}:{}}},{timeout:600,onSnapshotCreateLogs:p=>console.log(`[daytona] ${p}`)});}catch(p){throw et(c)?new k(c,p):p}}}return t.workingDirectory&&await u.fs.createFolder(t.workingDirectory,"755"),n&&this.sandboxUsers.set(u.id,n),new A(u,n,this.managedStream)}async connect(t,e){let n=await this.client.get(t);return n.state!=="started"&&await n.start(),new A(n,this.sandboxUsers.get(t),this.managedStream)}async list(t){let e=await this.paginate(t);if(e.error&&!e.stoppedAtLimit)throw new Error(e.error);return e.sandboxes}async listAll(t){let{stoppedAtLimit:e,...n}=await this.paginate(t);return n}async paginate(t){return it(this.listStream(t),t)}listStream(t){let e=t?.state?It(t.state):void 0,n={limit:yt,...t?.metadata?{labels:t.metadata}:{},...e&&e.length>0?{states:e}:{}};return this.client.list(n)}};function It(s){let t=[];for(let e of s)e==="running"&&t.push("started"),e==="paused"&&t.push("stopped","archived","paused");return t}async function it(s,t){let e=t?.limit,n=[],o=0,l=new Set;try{for await(let r of s){if(e!==void 0&&n.length>=e)return {sandboxes:n,complete:!1,pagesFetched:o,stoppedAtLimit:!0,error:`stopped at the requested limit of ${e} with more sandboxes available`};if(o+=1,o>I)return {sandboxes:n,complete:!1,pagesFetched:I,stoppedAtLimit:!1,error:`sandbox list exceeded ${I} sandboxes scanned`};if(t?.state){let a=nt(r.state);if(a===void 0||!t.state.includes(a))continue}l.has(r.id)||(l.add(r.id),n.push(U(r)));}}catch(r){return {sandboxes:n,complete:false,pagesFetched:o,stoppedAtLimit:false,error:`sandbox list failed: ${r instanceof Error?r.message:String(r)}`}}return {sandboxes:n,complete:true,pagesFetched:o,stoppedAtLimit:false}}var Mt=it;function Et(s={}){let t=s.apiKey??process.env.DAYTONA_API_KEY;if(!t)throw new Error("Daytona API key required. Set DAYTONA_API_KEY environment variable or pass apiKey in config. Get your key at https://app.daytona.io/dashboard/keys");return new O({...s,apiKey:t})}var _t=E,Lt=$,Rt=tt,Ot=et,Ut=U,Bt=nt,Nt=Q,Ft=X,Gt=T,Kt=Z,Ht=x,Yt=M,Wt=rt,jt=ot,Vt=at;
+exports.DAYTONA_AUTO_DELETE_GRACE_MINUTES=ft;exports.DAYTONA_LIST_PAGE_SIZE=yt;exports.DAYTONA_MAX_LIST_SCAN=I;exports.DAYTONA_MAX_NETWORK_ALLOWLIST=W;exports.DAYTONA_SNAPSHOT_ACTIVATE_TIMEOUT_MS=gt;exports.DAYTONA_STREAM_TIMINGS=ht;exports.DaytonaCommands=L;exports.DaytonaFiles=R;exports.DaytonaGpuTypeError=j;exports.DaytonaIdleTimeoutError=C;exports.DaytonaImagePullError=k;exports.DaytonaNetworkPolicyError=h;exports.DaytonaProvider=O;exports.DaytonaResourcesError=P;exports.DaytonaSnapshotActivationError=y;exports.EVOLVE_IMAGE_VERSION=D;exports._testActivateSnapshot=Nt;exports._testCollectSandboxStream=Mt;exports._testCreateLogDemuxer=Wt;exports._testCreateSentinelFilter=Yt;exports._testDaytonaStateToEvolveState=Bt;exports._testFollowManagedSessionLogs=jt;exports._testImageMap=Ft;exports._testImageRegistryHost=Ot;exports._testMapNetworkPolicy=Rt;exports._testReadCommandStreams=Vt;exports._testSettledStreams=Ht;exports._testStripEndOfOutputSentinel=Kt;exports._testToSandboxInfo=Ut;exports._testWithEndOfOutputSentinel=Gt;exports._testWithInBoxTimeout=Lt;exports._testWrapCommand=_t;exports.createDaytonaProvider=Et;

package/dist/index.d.cts

@@ -1,9 +1,21 @@
 import { Sandbox } from '@daytonaio/sdk';
 
+/**
+ * GENERATED — DO NOT EDIT. `npm run generate:image-version` (repo root)
+ * rewrites this file from the evolve-all image build inputs under
+ * assets/docker/ (see assets/docker/image-digest.ts for the derivation).
+ * The value is content-addressed: same inputs → same tag, any input
+ * change → a new tag. The coherence test in
+ * packages/daytona/tests/unit/daytona-image-version.test.ts fails the
+ * suite whenever this checked-in copy is stale.
+ */
+declare const EVOLVE_IMAGE_VERSION = "c-7bcda3467a79";
+
 /**
  * Daytona Sandbox Provider
  *
- * @requires @daytonaio/sdk >= 0.134.0
+ * @requires @daytonaio/sdk >= 0.203.0 (cursor-based list pagination; Daytona
+ *   retired the page-numbered endpoint on 2026-06-25)
  *
  * Design principles:
  * - Mirror E2B provider interface for SDK compatibility
@@ -47,17 +59,49 @@ import { Sandbox } from '@daytonaio/sdk';
 declare const DAYTONA_AUTO_DELETE_GRACE_MINUTES = 10;
 declare const DAYTONA_MAX_NETWORK_ALLOWLIST = 10;
 /**
- * Sandboxes requested per list page. Held at the value every provider in this
- * lineup accepts, so one number is valid everywhere a fleet is enumerated.
+ * How long a reactivated snapshot may take to come back before create() gives
+ * up. Daytona deactivates any snapshot unused for two weeks (official docs:
+ * "Snapshots automatically become inactive after 2 weeks of not being used"),
+ * so exists-but-inactive is the steady state of every image that shipped more
+ * than a fortnight before its next user — reactivation is a pull, not a build,
+ * and one that outlives this bound is a provider incident worth a loud error.
+ */
+declare const DAYTONA_SNAPSHOT_ACTIVATE_TIMEOUT_MS = 180000;
+/**
+ * Clocks of a STREAMED run (see awaitStreamedExit). The poll that reads the
+ * command's exit code backs off from pollMin to pollMax. A follow whose
+ * command has already ended is cut once it has been SILENT for drainMs —
+ * silence, never elapsed time, so a stream still delivering is never
+ * truncated. killGrace is what the caller's timeoutMs is widened by before a
+ * streamed run gives up, because withInBoxTimeout kills with `timeout -k 10`:
+ * the box may legitimately take ten seconds past the deadline to record a
+ * status. And a follow that has CLOSED means the command ended, so its record
+ * must catch up within settleMs — the only backstop a caller who passed no
+ * timeoutMs has, which is why it is generous rather than tight.
+ */
+declare const DAYTONA_STREAM_TIMINGS: {
+    pollMinMs: number;
+    pollMaxMs: number;
+    drainMs: number;
+    killGraceMs: number;
+    settleMs: number;
+};
+type DaytonaStreamTimings = typeof DAYTONA_STREAM_TIMINGS;
+/**
+ * Sandboxes requested per list fetch — the cursor API's per-page size
+ * (ListSandboxesQuery.limit bounds one fetch, never the total). Held at the
+ * value every provider in this lineup accepts, so one number is valid
+ * everywhere a fleet is enumerated.
  */
 declare const DAYTONA_LIST_PAGE_SIZE = 100;
 /**
- * Page ceiling for one enumeration — 10,000 sandboxes at the page size above.
- * A walk that reaches it stops and reports itself INCOMPLETE, because the one
- * thing a fleet enumeration may never do is return a short list that reads like
- * a whole one.
+ * Row ceiling for one enumeration — the same 10,000 sandboxes the old
+ * 100-pages-of-100 ceiling allowed, restated in rows because cursor pagination
+ * has no page numbers to count. A walk that reaches it stops and reports
+ * itself INCOMPLETE, because the one thing a fleet enumeration may never do is
+ * return a short list that reads like a whole one.
  */
-declare const DAYTONA_MAX_LIST_PAGES = 100;
+declare const DAYTONA_MAX_LIST_SCAN = 10000;
 /** Why a network policy cannot be enforced by Daytona. */
 type DaytonaNetworkPolicyReason = "wildcard-hostname" | "ipv6-unsupported" | "port-unsupported" | "invalid-ipv4" | "unresolvable-hostname" | "allowlist-too-large";
 /**
@@ -95,6 +139,19 @@ declare class DaytonaImagePullError extends Error {
  * (reject what you cannot enforce) it is refused loudly instead: pre-build a
  * snapshot with the desired sizing under its own name, or drop `resources`.
  */
+/**
+ * @deprecated No longer thrown. @daytonaio/sdk 0.203.0 grew a real
+ * `Resources.gpuType` field, so `resources.gpuTypes` is now FORWARDED on the
+ * snapshot-build path instead of refused (Daytona validates the type names
+ * server-side). Sizing against an EXISTING snapshot — GPU type included —
+ * still throws DaytonaResourcesError like every other pinned field. The class
+ * stays exported so callers with `instanceof` checks keep compiling.
+ */
+declare class DaytonaGpuTypeError extends Error {
+    /** The snapshot/image the create named. */
+    readonly snapshot: string;
+    constructor(snapshot: string);
+}
 declare class DaytonaResourcesError extends Error {
     /** The existing snapshot whose pinned sizing cannot be overridden. */
     readonly snapshot: string;
@@ -109,6 +166,45 @@ declare class DaytonaResourcesError extends Error {
 declare class DaytonaIdleTimeoutError extends Error {
     constructor();
 }
+/**
+ * Typed error for a snapshot that exists but could not be brought back to
+ * `active`. This is a final verdict, not a build trigger: the snapshot IS
+ * there, so rebuilding under the same name can only fail on the name conflict
+ * and then mask the real problem behind a slow direct image pull.
+ */
+declare class DaytonaSnapshotActivationError extends Error {
+    /** The snapshot that would not activate. */
+    readonly snapshot: string;
+    constructor(snapshot: string, detail: string);
+}
+/**
+ * The slice of the Daytona client the reactivation path touches — structural,
+ * so the unit tests can drive it with a plain mock.
+ */
+interface SnapshotActivationClient {
+    snapshot: {
+        get(name: string): Promise<{
+            state?: string;
+        }>;
+        activate(snapshot: unknown): Promise<{
+            state?: string;
+        }>;
+    };
+}
+/**
+ * Bring an exists-but-inactive snapshot back to `active`, or say loudly why
+ * not. Activation is asynchronous on Daytona's side — the activate call may
+ * answer with a transitional state (`pulling`) — so the result is polled until
+ * it lands on `active`, a terminal failure state, or the deadline.
+ */
+declare function activateSnapshot(client: SnapshotActivationClient, name: string, snapshot: {
+    state?: string;
+}, timing?: {
+    timeoutMs?: number;
+    pollMs?: number;
+}): Promise<{
+    state?: string;
+}>;
 /**
  * Wrap command with cwd and envs shell prefixes, and (for user "root") a
  * `sudo -n` elevation wrapper.
@@ -163,6 +259,79 @@ declare class DaytonaIdleTimeoutError extends Error {
  * to every caller that checks.
  */
 declare function withInBoxTimeout(wrapped: string, timeoutSec?: number): string;
+/**
+ * NOTHING IS APPENDED TO THE CALLER'S LAST LINE. The command goes inside a
+ * brace group whose closing brace opens a line of its own, so what follows is
+ * never read as a continuation of whatever the command ended with. Appending
+ * `; ...` directly broke three shapes, all measured:
+ *
+ *   a command ending in a NEWLINE (every multi-line template literal) —
+ *     `\n; __evolve_eos=$?` is a syntax error, exit 2
+ *   a command ending in `&` — `& ;` is a syntax error and the command NEVER RAN
+ *   a HEREDOC whose terminator is the command's last line — the appended text
+ *     became part of the heredoc BODY: no error, exit 0, corrupt payload. That
+ *     is the shape of the managed-secret proxy readiness probe (agent.ts), and
+ *     it turned a healthy proxy into "failed to start".
+ *
+ * The group needs two guards of its own, both measured against /bin/sh,
+ * /bin/bash and /bin/dash:
+ *
+ *   a leading `:` so the body is never EMPTY. A comment-only command
+ *     (`# nothing`) otherwise leaves `{ # nothing\n}` — "syntax error near
+ *     unexpected token `}'", exit 2, where the caller's own shell would have
+ *     done nothing and exited 0. It runs BEFORE the command, so the status the
+ *     group reports is still the command's own.
+ *   a BLANK LINE before the closing brace, to be eaten by a command that ends
+ *     in a dangling backslash. That backslash continues onto whatever line
+ *     comes next; the blank line is what it consumes instead of the `}`, and
+ *     `echo HI \` then runs as the caller's shell would run it — exit 0, "HI",
+ *     with the exit code of a failing one (`false \` -> 1) still its own.
+ *
+ * WHAT STILL FAILS, LOUDLY: an UNTERMINATED heredoc (`cat <<'EOF'` with no
+ * EOF line). Its body swallows everything that follows, including the closing
+ * brace, so the command is a syntax error — exit 2, no output, the shell's own
+ * message on stderr. No text can fix that from out here: anything added lands
+ * inside the heredoc. A shell run of the same input without a wrapper prints
+ * the body and exits 0, so this is the one shape the sentinel changes, and it
+ * changes it to a loud failure rather than a quiet wrong answer.
+ */
+declare function withEndOfOutputSentinel(command: string, token: string): string;
+/**
+ * Shed the sentinel, and the terminator the transport put after it, from a
+ * settled stream.
+ *
+ * ONLY AT THE END, because that is the only place the sentinel can be: it is
+ * the last thing the command prints. A token anywhere else in the output is
+ * the caller's own bytes — `ps` shows this very command line, and `sh -x`
+ * traces the printf that writes it — and deleting those would be corruption,
+ * silent and impossible to debug.
+ */
+declare function stripEndOfOutputSentinel(text: string, token: string): string;
+/**
+ * A settled log read with the sentinel shed — from STDOUT only, because that is
+ * the only stream the command prints one to. Shedding anything from stderr
+ * could only ever delete bytes the command itself wrote (`sh -x` traces the
+ * printf that writes the token, and that trace goes to stderr).
+ */
+declare function settledStreams(logs: unknown, token: string): {
+    stdout: string;
+    stderr: string;
+};
+/**
+ * Shed the sentinel from a stream still arriving, without holding back output
+ * that is merely on its way.
+ *
+ * Same rule as the settled read — only the end of the stream can be the
+ * sentinel — applied to bytes still coming: what could still GROW INTO it (the
+ * longest tail that is a prefix of `<token>\n`) waits for the rest, and
+ * everything else goes straight through, so a chunk that cannot be the start
+ * of a sentinel is never delayed. Nothing mid-stream is ever dropped.
+ */
+declare function createSentinelFilter(token: string, emit: (chunk: string) => void): {
+    push(chunk: string): void;
+    /** The stream is over: what was held is the sentinel, or it was output after all. */
+    flush(): void;
+};
 declare function wrapCommand(command: string, cwd?: string, envs?: Record<string, string>, user?: string): string;
 /** Daytona create() params derived from Evolve's provider-neutral network policy. */
 interface DaytonaNetworkCreateParams {
@@ -214,8 +383,10 @@ interface DaytonaSandboxLike {
 declare function toSandboxInfo(sandbox: DaytonaSandboxLike): SandboxInfo;
 /**
  * Map a Daytona sandbox state onto Evolve's list() filter states.
- * "started" → running; "stopped"/"archived" → paused (our pause() stops the
- * sandbox); transitional and terminal states match no filter.
+ * "started" → running; "stopped"/"archived"/"paused" → paused (our pause()
+ * stops the sandbox; Daytona 0.203.0 added a native "paused" state for
+ * pause-capable sandbox classes, and a box resting in it is paused by any
+ * reading); transitional and terminal states match no filter.
  */
 declare function daytonaStateToEvolveState(state?: string): "running" | "paused" | undefined;
 /** Result of a completed sandbox command */
@@ -275,6 +446,19 @@ interface SandboxResources {
     memory?: number;
     /** Disk in GB (default: 10) */
     disk?: number;
+    /**
+     * GPU reservation (count). Applied when a SNAPSHOT IS BUILT (Daytona
+     * allocates GPU at snapshot build; GPU machines are tier-gated on Daytona's
+     * side) — against an existing snapshot it throws DaytonaResourcesError like
+     * every other pinned sizing field.
+     */
+    gpu?: number;
+    /**
+     * Acceptable GPU types (Daytona's GpuType names, e.g. "H100", "H200",
+     * "RTX-PRO-6000"). Forwarded on the build path — Daytona validates the
+     * names server-side — and refused on an existing snapshot alongside `gpu`.
+     */
+    gpuTypes?: string[];
 }
 /** Options for creating a sandbox */
 interface SandboxCreateOptions {
@@ -345,6 +529,13 @@ interface SandboxListOptions {
 interface SandboxListPage {
     sandboxes: SandboxInfo[];
     complete: boolean;
+    /**
+     * Fetch units consumed: rows scanned from the cursor stream (before
+     * filtering). Cursor pagination has no page numbers to count — and the modal
+     * provider already reports item counts here — so "pages" reads as "units of
+     * enumeration work", kept under this name because the field is shared
+     * provider-neutral surface.
+     */
     pagesFetched: number;
     error?: string;
 }
@@ -402,7 +593,7 @@ interface DaytonaConfig {
     target?: string;
     /** Default timeout in ms */
     defaultTimeoutMs?: number;
-    /** Daytona snapshot name (default: 'evolve-all'). Create custom snapshots via `cd assets && ./build.sh daytona` */
+    /** Daytona snapshot name (default: 'evolve-all-<EVOLVE_IMAGE_VERSION>' direct, the platform's stable 'evolve-all' managed). Explicit names pass through untouched. Create custom snapshots via `cd assets && ./build.sh daytona` */
     snapshotName?: string;
     /**
      * Evolve-managed toolbox base URL. Setting it puts the provider in MANAGED
@@ -466,7 +657,7 @@ declare function createLogDemuxer(onStdout: (chunk: string) => void, onStderr: (
  * streaming through a plain response body, which is what the Dashboard route
  * pipes through unbuffered.
  */
-declare function followManagedSessionLogs(context: ManagedStreamContext, sandboxId: string, sessionId: string, commandId: string, onStdout: (chunk: string) => void, onStderr: (chunk: string) => void): Promise<void>;
+declare function followManagedSessionLogs(context: ManagedStreamContext, sandboxId: string, sessionId: string, commandId: string, onStdout: (chunk: string) => void, onStderr: (chunk: string) => void, signal?: AbortSignal): Promise<void>;
 /**
  * Read a command's streams out of whatever shape Daytona returned.
  *
@@ -495,15 +686,44 @@ declare class DaytonaCommands implements SandboxCommands {
     private sandbox;
     private user?;
     private managedStream?;
+    /** The streamed-run clocks, shrinkable by a subclass so a test need not wait them out. */
+    protected streamTimings: DaytonaStreamTimings;
     constructor(sandbox: Sandbox, user?: string | undefined, managedStream?: ManagedStreamContext | undefined);
     /**
      * Stream a command's output to callbacks. Direct mode uses the Daytona
      * SDK's own follow, which is a websocket; managed mode uses the HTTP
      * chunked follow, because a Dashboard route handler cannot terminate a
      * websocket upgrade (see followManagedSessionLogs).
+     *
+     * Only the managed follow takes the abandon signal — the SDK's websocket
+     * follow exposes none, so a direct-mode stall is stopped from waiting on
+     * but not closed; the ephemeral session's delete is what ends it.
      */
     private followLogs;
     run(command: string, options?: SandboxRunOptions): Promise<SandboxCommandResult>;
+    /**
+     * WHAT SAYS A STREAMED RUN IS OVER: the command's record, never the follow.
+     *
+     * A chunked follow can stall open long after its command exited — nothing
+     * acks a response body — and awaiting it first, then polling for an exit
+     * code 20 times at 500ms, gave a streaming run() two failure modes the
+     * blocking path never had: a stalled socket hung run() forever (with no
+     * timeoutMs, nothing in the box or out of it bounds the wait), and a follow
+     * that closed a moment early threw "no exit code" on a command that had
+     * already succeeded.
+     *
+     * So the poll and the follow run TOGETHER. The poll decides when the run
+     * ended; the follow then gets as long as it keeps delivering and is cut
+     * only once it has been SILENT for the drain window, so a live stream is
+     * never truncated and a dead one is never waited on. Two ceilings bound the
+     * wait: the caller's timeoutMs widened by the in-box kill grace, and — for
+     * the caller who passed none — the settle bound measured from the moment
+     * the follow closed, because a closed stream means the command ended and a
+     * record that never catches up is a provider incident, not a long run.
+     * A run with no timeoutMs whose command is genuinely still streaming is
+     * still waited on indefinitely: that is what asking for no bound means.
+     */
+    private awaitStreamedExit;
     spawn(command: string, options?: SandboxSpawnOptions): Promise<SandboxCommandHandle>;
     list(): Promise<ProcessInfo[]>;
     kill(processId: string): Promise<boolean>;
@@ -551,18 +771,21 @@ declare class DaytonaProvider implements SandboxProvider {
     create(options: SandboxCreateOptions): Promise<SandboxInstance>;
     connect(sandboxId: string, _timeoutMs?: number): Promise<SandboxInstance>;
     /**
-     * List sandboxes, walking every page.
+     * List sandboxes, walking the cursor stream to exhaustion.
      *
-     * This used to request page 1 and stop, discarding `totalPages` — an
+     * An early version requested page 1 and stopped, discarding the rest — an
      * organization with more than one page of sandboxes was silently truncated,
      * and nothing in the return value said so. For any caller that reads absence
-     * from the list as "this sandbox is gone", that is a correctness bug.
+     * from the list as "this sandbox is gone", that is a correctness bug. Cursor
+     * pagination (mandatory since Daytona retired page numbers on 2026-06-25)
+     * changes the mechanics, not the law: the walk still runs to the end or says
+     * it could not.
      *
-     * ORDER OF OPERATIONS, because it is observable: `limit` bounds the sandboxes
-     * RETURNED, and Daytona has no server-side state filter, so the state filter
-     * runs client-side on each page BEFORE the limit is counted. Asking for 10
-     * running sandboxes therefore keeps paging until ten running ones have been
-     * found, rather than filtering ten arbitrary rows down to whatever survives.
+     * ORDER OF OPERATIONS, because it is observable: `limit` bounds the
+     * sandboxes RETURNED, and the state filter runs client-side on every row
+     * BEFORE the limit is counted. Asking for 10 running sandboxes therefore
+     * keeps walking until ten running ones have been found, rather than
+     * filtering ten arbitrary rows down to whatever survives.
      */
     list(options?: SandboxListOptions): Promise<SandboxInfo[]>;
     /**
@@ -576,45 +799,45 @@ declare class DaytonaProvider implements SandboxProvider {
     listAll(options?: SandboxListOptions): Promise<SandboxListPage>;
     private paginate;
     /**
-     * One page, asking the API to do the state filtering when it can.
+     * The cursor stream, asking the API to narrow server-side where it can.
      *
-     * Daytona's REST endpoint takes a `states` array
-     * (api-client sandbox-api.d.ts listSandboxesPaginated), but the SDK wrapper
-     * this provider is built on does not expose it — `Daytona.list(labels, page,
-     * limit)` is the whole public surface, and `sandboxApi` is declared private.
-     * Without the server-side filter, `state: ['running']` on an organization
-     * full of archived boxes pages through all of them client-side looking for a
-     * handful of live ones.
-     *
-     * So the server filter is applied OPPORTUNISTICALLY, through the private
-     * field when it is shaped the way we expect, and the client-side filter in
-     * the walk stays the authority regardless. That ordering is the whole point:
-     * if a future SDK refactor renames or removes the field, this degrades to the
-     * request count it has today, and can never degrade to admitting states the
-     * caller excluded.
+     * Since 0.203.0 the SDK's public `list(query)` takes `states` and `labels`
+     * directly and pages by cursor internally (items + nextCursor,
+     * esm/Daytona.js:430-476), so the old reach-around through the private
+     * `sandboxApi.listSandboxesPaginated` field is gone along with the method
+     * itself. The client-side filter in the walk stays the authority regardless:
+     * a server filter that silently stopped applying must never be able to admit
+     * a state the caller excluded.
      */
-    private listPage;
-}
-/** One page as Daytona's `list(labels?, page?, limit?)` returns it. */
-interface DaytonaSandboxPage {
-    items: Sandbox[];
-    totalPages?: number;
+    private listStream;
 }
 /**
- * Walk every page into one answer, with an honest completeness verdict.
+ * Walk the cursor stream into one answer, with an honest completeness verdict.
  *
  * Separate from the provider because everything worth getting wrong lives here
  * and none of it needs a network: the ways a walk can fail to terminate, the
- * difference between "the caller asked for ten" and "the provider ran out", and
- * the rule that a failure mid-walk yields the sandboxes seen so far marked
+ * difference between "the caller asked for ten" and "the provider ran out",
+ * and the rule that a failure mid-walk yields the sandboxes seen so far marked
  * INCOMPLETE rather than either an exception or a short complete list.
  *
- * Exported for its test (`_testCollectSandboxPages`).
+ * WHAT CURSORS CHANGED HERE, and what they did not. The vendor's iterator ends
+ * itself when nextCursor runs out, so "exhausted" is now the stream ending
+ * rather than a totalPages comparison; a fetch failure mid-walk surfaces as
+ * the iterator throwing. The LAWS are unchanged: a walk that could not finish
+ * reports `complete: false` with what it saw, a caller's limit is reported as
+ * truncation whenever one more row provably exists (the row after the limit is
+ * that proof — the walk holds it, so no extra fetch is spent on it beyond, at
+ * worst, the one the iterator was already making), and a runaway fleet stops
+ * at the scan ceiling as a refusal, never as a short list that reads complete.
+ *
+ * Exported for its test (`_testCollectSandboxStream`).
  */
-declare function collectSandboxPages(fetchPage: (page: number) => Promise<DaytonaSandboxPage>, options?: SandboxListOptions): Promise<SandboxListPage & {
+declare function collectSandboxStream(stream: AsyncIterable<DaytonaSandboxLike & {
+    state?: string;
+}>, options?: SandboxListOptions): Promise<SandboxListPage & {
     stoppedAtLimit: boolean;
 }>;
-declare const _testCollectSandboxPages: typeof collectSandboxPages;
+declare const _testCollectSandboxStream: typeof collectSandboxStream;
 /**
  * Create Daytona sandbox provider.
  *
@@ -629,8 +852,14 @@ declare const _testMapNetworkPolicy: typeof mapNetworkPolicy;
 declare const _testImageRegistryHost: typeof imageRegistryHost;
 declare const _testToSandboxInfo: typeof toSandboxInfo;
 declare const _testDaytonaStateToEvolveState: typeof daytonaStateToEvolveState;
+declare const _testActivateSnapshot: typeof activateSnapshot;
+declare const _testImageMap: Record<string, string>;
+declare const _testWithEndOfOutputSentinel: typeof withEndOfOutputSentinel;
+declare const _testStripEndOfOutputSentinel: typeof stripEndOfOutputSentinel;
+declare const _testSettledStreams: typeof settledStreams;
+declare const _testCreateSentinelFilter: typeof createSentinelFilter;
 declare const _testCreateLogDemuxer: typeof createLogDemuxer;
 declare const _testFollowManagedSessionLogs: typeof followManagedSessionLogs;
 declare const _testReadCommandStreams: typeof readCommandStreams;
 
-export { DAYTONA_AUTO_DELETE_GRACE_MINUTES, DAYTONA_LIST_PAGE_SIZE, DAYTONA_MAX_LIST_PAGES, DAYTONA_MAX_NETWORK_ALLOWLIST, DaytonaCommands, type DaytonaConfig, DaytonaFiles, DaytonaIdleTimeoutError, DaytonaImagePullError, DaytonaNetworkPolicyError, type DaytonaNetworkPolicyReason, DaytonaProvider, DaytonaResourcesError, type DaytonaSandboxPage, type FileInfo, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxListPage, type SandboxProvider, type SandboxResources, type SandboxRunOptions, type SandboxSpawnOptions, _testCollectSandboxPages, _testCreateLogDemuxer, _testDaytonaStateToEvolveState, _testFollowManagedSessionLogs, _testImageRegistryHost, _testMapNetworkPolicy, _testReadCommandStreams, _testToSandboxInfo, _testWithInBoxTimeout, _testWrapCommand, createDaytonaProvider };
+export { DAYTONA_AUTO_DELETE_GRACE_MINUTES, DAYTONA_LIST_PAGE_SIZE, DAYTONA_MAX_LIST_SCAN, DAYTONA_MAX_NETWORK_ALLOWLIST, DAYTONA_SNAPSHOT_ACTIVATE_TIMEOUT_MS, DAYTONA_STREAM_TIMINGS, DaytonaCommands, type DaytonaConfig, DaytonaFiles, DaytonaGpuTypeError, DaytonaIdleTimeoutError, DaytonaImagePullError, DaytonaNetworkPolicyError, type DaytonaNetworkPolicyReason, DaytonaProvider, DaytonaResourcesError, DaytonaSnapshotActivationError, type DaytonaStreamTimings, EVOLVE_IMAGE_VERSION, type FileInfo, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxListPage, type SandboxProvider, type SandboxResources, type SandboxRunOptions, type SandboxSpawnOptions, _testActivateSnapshot, _testCollectSandboxStream, _testCreateLogDemuxer, _testCreateSentinelFilter, _testDaytonaStateToEvolveState, _testFollowManagedSessionLogs, _testImageMap, _testImageRegistryHost, _testMapNetworkPolicy, _testReadCommandStreams, _testSettledStreams, _testStripEndOfOutputSentinel, _testToSandboxInfo, _testWithEndOfOutputSentinel, _testWithInBoxTimeout, _testWrapCommand, createDaytonaProvider };

package/dist/index.d.ts

@@ -1,9 +1,21 @@
 import { Sandbox } from '@daytonaio/sdk';
 
+/**
+ * GENERATED — DO NOT EDIT. `npm run generate:image-version` (repo root)
+ * rewrites this file from the evolve-all image build inputs under
+ * assets/docker/ (see assets/docker/image-digest.ts for the derivation).
+ * The value is content-addressed: same inputs → same tag, any input
+ * change → a new tag. The coherence test in
+ * packages/daytona/tests/unit/daytona-image-version.test.ts fails the
+ * suite whenever this checked-in copy is stale.
+ */
+declare const EVOLVE_IMAGE_VERSION = "c-7bcda3467a79";
+
 /**
  * Daytona Sandbox Provider
  *
- * @requires @daytonaio/sdk >= 0.134.0
+ * @requires @daytonaio/sdk >= 0.203.0 (cursor-based list pagination; Daytona
+ *   retired the page-numbered endpoint on 2026-06-25)
  *
  * Design principles:
  * - Mirror E2B provider interface for SDK compatibility
@@ -47,17 +59,49 @@ import { Sandbox } from '@daytonaio/sdk';
 declare const DAYTONA_AUTO_DELETE_GRACE_MINUTES = 10;
 declare const DAYTONA_MAX_NETWORK_ALLOWLIST = 10;
 /**
- * Sandboxes requested per list page. Held at the value every provider in this
- * lineup accepts, so one number is valid everywhere a fleet is enumerated.
+ * How long a reactivated snapshot may take to come back before create() gives
+ * up. Daytona deactivates any snapshot unused for two weeks (official docs:
+ * "Snapshots automatically become inactive after 2 weeks of not being used"),
+ * so exists-but-inactive is the steady state of every image that shipped more
+ * than a fortnight before its next user — reactivation is a pull, not a build,
+ * and one that outlives this bound is a provider incident worth a loud error.
+ */
+declare const DAYTONA_SNAPSHOT_ACTIVATE_TIMEOUT_MS = 180000;
+/**
+ * Clocks of a STREAMED run (see awaitStreamedExit). The poll that reads the
+ * command's exit code backs off from pollMin to pollMax. A follow whose
+ * command has already ended is cut once it has been SILENT for drainMs —
+ * silence, never elapsed time, so a stream still delivering is never
+ * truncated. killGrace is what the caller's timeoutMs is widened by before a
+ * streamed run gives up, because withInBoxTimeout kills with `timeout -k 10`:
+ * the box may legitimately take ten seconds past the deadline to record a
+ * status. And a follow that has CLOSED means the command ended, so its record
+ * must catch up within settleMs — the only backstop a caller who passed no
+ * timeoutMs has, which is why it is generous rather than tight.
+ */
+declare const DAYTONA_STREAM_TIMINGS: {
+    pollMinMs: number;
+    pollMaxMs: number;
+    drainMs: number;
+    killGraceMs: number;
+    settleMs: number;
+};
+type DaytonaStreamTimings = typeof DAYTONA_STREAM_TIMINGS;
+/**
+ * Sandboxes requested per list fetch — the cursor API's per-page size
+ * (ListSandboxesQuery.limit bounds one fetch, never the total). Held at the
+ * value every provider in this lineup accepts, so one number is valid
+ * everywhere a fleet is enumerated.
  */
 declare const DAYTONA_LIST_PAGE_SIZE = 100;
 /**
- * Page ceiling for one enumeration — 10,000 sandboxes at the page size above.
- * A walk that reaches it stops and reports itself INCOMPLETE, because the one
- * thing a fleet enumeration may never do is return a short list that reads like
- * a whole one.
+ * Row ceiling for one enumeration — the same 10,000 sandboxes the old
+ * 100-pages-of-100 ceiling allowed, restated in rows because cursor pagination
+ * has no page numbers to count. A walk that reaches it stops and reports
+ * itself INCOMPLETE, because the one thing a fleet enumeration may never do is
+ * return a short list that reads like a whole one.
  */
-declare const DAYTONA_MAX_LIST_PAGES = 100;
+declare const DAYTONA_MAX_LIST_SCAN = 10000;
 /** Why a network policy cannot be enforced by Daytona. */
 type DaytonaNetworkPolicyReason = "wildcard-hostname" | "ipv6-unsupported" | "port-unsupported" | "invalid-ipv4" | "unresolvable-hostname" | "allowlist-too-large";
 /**
@@ -95,6 +139,19 @@ declare class DaytonaImagePullError extends Error {
  * (reject what you cannot enforce) it is refused loudly instead: pre-build a
  * snapshot with the desired sizing under its own name, or drop `resources`.
  */
+/**
+ * @deprecated No longer thrown. @daytonaio/sdk 0.203.0 grew a real
+ * `Resources.gpuType` field, so `resources.gpuTypes` is now FORWARDED on the
+ * snapshot-build path instead of refused (Daytona validates the type names
+ * server-side). Sizing against an EXISTING snapshot — GPU type included —
+ * still throws DaytonaResourcesError like every other pinned field. The class
+ * stays exported so callers with `instanceof` checks keep compiling.
+ */
+declare class DaytonaGpuTypeError extends Error {
+    /** The snapshot/image the create named. */
+    readonly snapshot: string;
+    constructor(snapshot: string);
+}
 declare class DaytonaResourcesError extends Error {
     /** The existing snapshot whose pinned sizing cannot be overridden. */
     readonly snapshot: string;
@@ -109,6 +166,45 @@ declare class DaytonaResourcesError extends Error {
 declare class DaytonaIdleTimeoutError extends Error {
     constructor();
 }
+/**
+ * Typed error for a snapshot that exists but could not be brought back to
+ * `active`. This is a final verdict, not a build trigger: the snapshot IS
+ * there, so rebuilding under the same name can only fail on the name conflict
+ * and then mask the real problem behind a slow direct image pull.
+ */
+declare class DaytonaSnapshotActivationError extends Error {
+    /** The snapshot that would not activate. */
+    readonly snapshot: string;
+    constructor(snapshot: string, detail: string);
+}
+/**
+ * The slice of the Daytona client the reactivation path touches — structural,
+ * so the unit tests can drive it with a plain mock.
+ */
+interface SnapshotActivationClient {
+    snapshot: {
+        get(name: string): Promise<{
+            state?: string;
+        }>;
+        activate(snapshot: unknown): Promise<{
+            state?: string;
+        }>;
+    };
+}
+/**
+ * Bring an exists-but-inactive snapshot back to `active`, or say loudly why
+ * not. Activation is asynchronous on Daytona's side — the activate call may
+ * answer with a transitional state (`pulling`) — so the result is polled until
+ * it lands on `active`, a terminal failure state, or the deadline.
+ */
+declare function activateSnapshot(client: SnapshotActivationClient, name: string, snapshot: {
+    state?: string;
+}, timing?: {
+    timeoutMs?: number;
+    pollMs?: number;
+}): Promise<{
+    state?: string;
+}>;
 /**
  * Wrap command with cwd and envs shell prefixes, and (for user "root") a
  * `sudo -n` elevation wrapper.
@@ -163,6 +259,79 @@ declare class DaytonaIdleTimeoutError extends Error {
  * to every caller that checks.
  */
 declare function withInBoxTimeout(wrapped: string, timeoutSec?: number): string;
+/**
+ * NOTHING IS APPENDED TO THE CALLER'S LAST LINE. The command goes inside a
+ * brace group whose closing brace opens a line of its own, so what follows is
+ * never read as a continuation of whatever the command ended with. Appending
+ * `; ...` directly broke three shapes, all measured:
+ *
+ *   a command ending in a NEWLINE (every multi-line template literal) —
+ *     `\n; __evolve_eos=$?` is a syntax error, exit 2
+ *   a command ending in `&` — `& ;` is a syntax error and the command NEVER RAN
+ *   a HEREDOC whose terminator is the command's last line — the appended text
+ *     became part of the heredoc BODY: no error, exit 0, corrupt payload. That
+ *     is the shape of the managed-secret proxy readiness probe (agent.ts), and
+ *     it turned a healthy proxy into "failed to start".
+ *
+ * The group needs two guards of its own, both measured against /bin/sh,
+ * /bin/bash and /bin/dash:
+ *
+ *   a leading `:` so the body is never EMPTY. A comment-only command
+ *     (`# nothing`) otherwise leaves `{ # nothing\n}` — "syntax error near
+ *     unexpected token `}'", exit 2, where the caller's own shell would have
+ *     done nothing and exited 0. It runs BEFORE the command, so the status the
+ *     group reports is still the command's own.
+ *   a BLANK LINE before the closing brace, to be eaten by a command that ends
+ *     in a dangling backslash. That backslash continues onto whatever line
+ *     comes next; the blank line is what it consumes instead of the `}`, and
+ *     `echo HI \` then runs as the caller's shell would run it — exit 0, "HI",
+ *     with the exit code of a failing one (`false \` -> 1) still its own.
+ *
+ * WHAT STILL FAILS, LOUDLY: an UNTERMINATED heredoc (`cat <<'EOF'` with no
+ * EOF line). Its body swallows everything that follows, including the closing
+ * brace, so the command is a syntax error — exit 2, no output, the shell's own
+ * message on stderr. No text can fix that from out here: anything added lands
+ * inside the heredoc. A shell run of the same input without a wrapper prints
+ * the body and exits 0, so this is the one shape the sentinel changes, and it
+ * changes it to a loud failure rather than a quiet wrong answer.
+ */
+declare function withEndOfOutputSentinel(command: string, token: string): string;
+/**
+ * Shed the sentinel, and the terminator the transport put after it, from a
+ * settled stream.
+ *
+ * ONLY AT THE END, because that is the only place the sentinel can be: it is
+ * the last thing the command prints. A token anywhere else in the output is
+ * the caller's own bytes — `ps` shows this very command line, and `sh -x`
+ * traces the printf that writes it — and deleting those would be corruption,
+ * silent and impossible to debug.
+ */
+declare function stripEndOfOutputSentinel(text: string, token: string): string;
+/**
+ * A settled log read with the sentinel shed — from STDOUT only, because that is
+ * the only stream the command prints one to. Shedding anything from stderr
+ * could only ever delete bytes the command itself wrote (`sh -x` traces the
+ * printf that writes the token, and that trace goes to stderr).
+ */
+declare function settledStreams(logs: unknown, token: string): {
+    stdout: string;
+    stderr: string;
+};
+/**
+ * Shed the sentinel from a stream still arriving, without holding back output
+ * that is merely on its way.
+ *
+ * Same rule as the settled read — only the end of the stream can be the
+ * sentinel — applied to bytes still coming: what could still GROW INTO it (the
+ * longest tail that is a prefix of `<token>\n`) waits for the rest, and
+ * everything else goes straight through, so a chunk that cannot be the start
+ * of a sentinel is never delayed. Nothing mid-stream is ever dropped.
+ */
+declare function createSentinelFilter(token: string, emit: (chunk: string) => void): {
+    push(chunk: string): void;
+    /** The stream is over: what was held is the sentinel, or it was output after all. */
+    flush(): void;
+};
 declare function wrapCommand(command: string, cwd?: string, envs?: Record<string, string>, user?: string): string;
 /** Daytona create() params derived from Evolve's provider-neutral network policy. */
 interface DaytonaNetworkCreateParams {
@@ -214,8 +383,10 @@ interface DaytonaSandboxLike {
 declare function toSandboxInfo(sandbox: DaytonaSandboxLike): SandboxInfo;
 /**
  * Map a Daytona sandbox state onto Evolve's list() filter states.
- * "started" → running; "stopped"/"archived" → paused (our pause() stops the
- * sandbox); transitional and terminal states match no filter.
+ * "started" → running; "stopped"/"archived"/"paused" → paused (our pause()
+ * stops the sandbox; Daytona 0.203.0 added a native "paused" state for
+ * pause-capable sandbox classes, and a box resting in it is paused by any
+ * reading); transitional and terminal states match no filter.
  */
 declare function daytonaStateToEvolveState(state?: string): "running" | "paused" | undefined;
 /** Result of a completed sandbox command */
@@ -275,6 +446,19 @@ interface SandboxResources {
     memory?: number;
     /** Disk in GB (default: 10) */
     disk?: number;
+    /**
+     * GPU reservation (count). Applied when a SNAPSHOT IS BUILT (Daytona
+     * allocates GPU at snapshot build; GPU machines are tier-gated on Daytona's
+     * side) — against an existing snapshot it throws DaytonaResourcesError like
+     * every other pinned sizing field.
+     */
+    gpu?: number;
+    /**
+     * Acceptable GPU types (Daytona's GpuType names, e.g. "H100", "H200",
+     * "RTX-PRO-6000"). Forwarded on the build path — Daytona validates the
+     * names server-side — and refused on an existing snapshot alongside `gpu`.
+     */
+    gpuTypes?: string[];
 }
 /** Options for creating a sandbox */
 interface SandboxCreateOptions {
@@ -345,6 +529,13 @@ interface SandboxListOptions {
 interface SandboxListPage {
     sandboxes: SandboxInfo[];
     complete: boolean;
+    /**
+     * Fetch units consumed: rows scanned from the cursor stream (before
+     * filtering). Cursor pagination has no page numbers to count — and the modal
+     * provider already reports item counts here — so "pages" reads as "units of
+     * enumeration work", kept under this name because the field is shared
+     * provider-neutral surface.
+     */
     pagesFetched: number;
     error?: string;
 }
@@ -402,7 +593,7 @@ interface DaytonaConfig {
     target?: string;
     /** Default timeout in ms */
     defaultTimeoutMs?: number;
-    /** Daytona snapshot name (default: 'evolve-all'). Create custom snapshots via `cd assets && ./build.sh daytona` */
+    /** Daytona snapshot name (default: 'evolve-all-<EVOLVE_IMAGE_VERSION>' direct, the platform's stable 'evolve-all' managed). Explicit names pass through untouched. Create custom snapshots via `cd assets && ./build.sh daytona` */
     snapshotName?: string;
     /**
      * Evolve-managed toolbox base URL. Setting it puts the provider in MANAGED
@@ -466,7 +657,7 @@ declare function createLogDemuxer(onStdout: (chunk: string) => void, onStderr: (
  * streaming through a plain response body, which is what the Dashboard route
  * pipes through unbuffered.
  */
-declare function followManagedSessionLogs(context: ManagedStreamContext, sandboxId: string, sessionId: string, commandId: string, onStdout: (chunk: string) => void, onStderr: (chunk: string) => void): Promise<void>;
+declare function followManagedSessionLogs(context: ManagedStreamContext, sandboxId: string, sessionId: string, commandId: string, onStdout: (chunk: string) => void, onStderr: (chunk: string) => void, signal?: AbortSignal): Promise<void>;
 /**
  * Read a command's streams out of whatever shape Daytona returned.
  *
@@ -495,15 +686,44 @@ declare class DaytonaCommands implements SandboxCommands {
     private sandbox;
     private user?;
     private managedStream?;
+    /** The streamed-run clocks, shrinkable by a subclass so a test need not wait them out. */
+    protected streamTimings: DaytonaStreamTimings;
     constructor(sandbox: Sandbox, user?: string | undefined, managedStream?: ManagedStreamContext | undefined);
     /**
      * Stream a command's output to callbacks. Direct mode uses the Daytona
      * SDK's own follow, which is a websocket; managed mode uses the HTTP
      * chunked follow, because a Dashboard route handler cannot terminate a
      * websocket upgrade (see followManagedSessionLogs).
+     *
+     * Only the managed follow takes the abandon signal — the SDK's websocket
+     * follow exposes none, so a direct-mode stall is stopped from waiting on
+     * but not closed; the ephemeral session's delete is what ends it.
      */
     private followLogs;
     run(command: string, options?: SandboxRunOptions): Promise<SandboxCommandResult>;
+    /**
+     * WHAT SAYS A STREAMED RUN IS OVER: the command's record, never the follow.
+     *
+     * A chunked follow can stall open long after its command exited — nothing
+     * acks a response body — and awaiting it first, then polling for an exit
+     * code 20 times at 500ms, gave a streaming run() two failure modes the
+     * blocking path never had: a stalled socket hung run() forever (with no
+     * timeoutMs, nothing in the box or out of it bounds the wait), and a follow
+     * that closed a moment early threw "no exit code" on a command that had
+     * already succeeded.
+     *
+     * So the poll and the follow run TOGETHER. The poll decides when the run
+     * ended; the follow then gets as long as it keeps delivering and is cut
+     * only once it has been SILENT for the drain window, so a live stream is
+     * never truncated and a dead one is never waited on. Two ceilings bound the
+     * wait: the caller's timeoutMs widened by the in-box kill grace, and — for
+     * the caller who passed none — the settle bound measured from the moment
+     * the follow closed, because a closed stream means the command ended and a
+     * record that never catches up is a provider incident, not a long run.
+     * A run with no timeoutMs whose command is genuinely still streaming is
+     * still waited on indefinitely: that is what asking for no bound means.
+     */
+    private awaitStreamedExit;
     spawn(command: string, options?: SandboxSpawnOptions): Promise<SandboxCommandHandle>;
     list(): Promise<ProcessInfo[]>;
     kill(processId: string): Promise<boolean>;
@@ -551,18 +771,21 @@ declare class DaytonaProvider implements SandboxProvider {
     create(options: SandboxCreateOptions): Promise<SandboxInstance>;
     connect(sandboxId: string, _timeoutMs?: number): Promise<SandboxInstance>;
     /**
-     * List sandboxes, walking every page.
+     * List sandboxes, walking the cursor stream to exhaustion.
      *
-     * This used to request page 1 and stop, discarding `totalPages` — an
+     * An early version requested page 1 and stopped, discarding the rest — an
      * organization with more than one page of sandboxes was silently truncated,
      * and nothing in the return value said so. For any caller that reads absence
-     * from the list as "this sandbox is gone", that is a correctness bug.
+     * from the list as "this sandbox is gone", that is a correctness bug. Cursor
+     * pagination (mandatory since Daytona retired page numbers on 2026-06-25)
+     * changes the mechanics, not the law: the walk still runs to the end or says
+     * it could not.
      *
-     * ORDER OF OPERATIONS, because it is observable: `limit` bounds the sandboxes
-     * RETURNED, and Daytona has no server-side state filter, so the state filter
-     * runs client-side on each page BEFORE the limit is counted. Asking for 10
-     * running sandboxes therefore keeps paging until ten running ones have been
-     * found, rather than filtering ten arbitrary rows down to whatever survives.
+     * ORDER OF OPERATIONS, because it is observable: `limit` bounds the
+     * sandboxes RETURNED, and the state filter runs client-side on every row
+     * BEFORE the limit is counted. Asking for 10 running sandboxes therefore
+     * keeps walking until ten running ones have been found, rather than
+     * filtering ten arbitrary rows down to whatever survives.
      */
     list(options?: SandboxListOptions): Promise<SandboxInfo[]>;
     /**
@@ -576,45 +799,45 @@ declare class DaytonaProvider implements SandboxProvider {
     listAll(options?: SandboxListOptions): Promise<SandboxListPage>;
     private paginate;
     /**
-     * One page, asking the API to do the state filtering when it can.
+     * The cursor stream, asking the API to narrow server-side where it can.
      *
-     * Daytona's REST endpoint takes a `states` array
-     * (api-client sandbox-api.d.ts listSandboxesPaginated), but the SDK wrapper
-     * this provider is built on does not expose it — `Daytona.list(labels, page,
-     * limit)` is the whole public surface, and `sandboxApi` is declared private.
-     * Without the server-side filter, `state: ['running']` on an organization
-     * full of archived boxes pages through all of them client-side looking for a
-     * handful of live ones.
-     *
-     * So the server filter is applied OPPORTUNISTICALLY, through the private
-     * field when it is shaped the way we expect, and the client-side filter in
-     * the walk stays the authority regardless. That ordering is the whole point:
-     * if a future SDK refactor renames or removes the field, this degrades to the
-     * request count it has today, and can never degrade to admitting states the
-     * caller excluded.
+     * Since 0.203.0 the SDK's public `list(query)` takes `states` and `labels`
+     * directly and pages by cursor internally (items + nextCursor,
+     * esm/Daytona.js:430-476), so the old reach-around through the private
+     * `sandboxApi.listSandboxesPaginated` field is gone along with the method
+     * itself. The client-side filter in the walk stays the authority regardless:
+     * a server filter that silently stopped applying must never be able to admit
+     * a state the caller excluded.
      */
-    private listPage;
-}
-/** One page as Daytona's `list(labels?, page?, limit?)` returns it. */
-interface DaytonaSandboxPage {
-    items: Sandbox[];
-    totalPages?: number;
+    private listStream;
 }
 /**
- * Walk every page into one answer, with an honest completeness verdict.
+ * Walk the cursor stream into one answer, with an honest completeness verdict.
  *
  * Separate from the provider because everything worth getting wrong lives here
  * and none of it needs a network: the ways a walk can fail to terminate, the
- * difference between "the caller asked for ten" and "the provider ran out", and
- * the rule that a failure mid-walk yields the sandboxes seen so far marked
+ * difference between "the caller asked for ten" and "the provider ran out",
+ * and the rule that a failure mid-walk yields the sandboxes seen so far marked
  * INCOMPLETE rather than either an exception or a short complete list.
  *
- * Exported for its test (`_testCollectSandboxPages`).
+ * WHAT CURSORS CHANGED HERE, and what they did not. The vendor's iterator ends
+ * itself when nextCursor runs out, so "exhausted" is now the stream ending
+ * rather than a totalPages comparison; a fetch failure mid-walk surfaces as
+ * the iterator throwing. The LAWS are unchanged: a walk that could not finish
+ * reports `complete: false` with what it saw, a caller's limit is reported as
+ * truncation whenever one more row provably exists (the row after the limit is
+ * that proof — the walk holds it, so no extra fetch is spent on it beyond, at
+ * worst, the one the iterator was already making), and a runaway fleet stops
+ * at the scan ceiling as a refusal, never as a short list that reads complete.
+ *
+ * Exported for its test (`_testCollectSandboxStream`).
  */
-declare function collectSandboxPages(fetchPage: (page: number) => Promise<DaytonaSandboxPage>, options?: SandboxListOptions): Promise<SandboxListPage & {
+declare function collectSandboxStream(stream: AsyncIterable<DaytonaSandboxLike & {
+    state?: string;
+}>, options?: SandboxListOptions): Promise<SandboxListPage & {
     stoppedAtLimit: boolean;
 }>;
-declare const _testCollectSandboxPages: typeof collectSandboxPages;
+declare const _testCollectSandboxStream: typeof collectSandboxStream;
 /**
  * Create Daytona sandbox provider.
  *
@@ -629,8 +852,14 @@ declare const _testMapNetworkPolicy: typeof mapNetworkPolicy;
 declare const _testImageRegistryHost: typeof imageRegistryHost;
 declare const _testToSandboxInfo: typeof toSandboxInfo;
 declare const _testDaytonaStateToEvolveState: typeof daytonaStateToEvolveState;
+declare const _testActivateSnapshot: typeof activateSnapshot;
+declare const _testImageMap: Record<string, string>;
+declare const _testWithEndOfOutputSentinel: typeof withEndOfOutputSentinel;
+declare const _testStripEndOfOutputSentinel: typeof stripEndOfOutputSentinel;
+declare const _testSettledStreams: typeof settledStreams;
+declare const _testCreateSentinelFilter: typeof createSentinelFilter;
 declare const _testCreateLogDemuxer: typeof createLogDemuxer;
 declare const _testFollowManagedSessionLogs: typeof followManagedSessionLogs;
 declare const _testReadCommandStreams: typeof readCommandStreams;
 
-export { DAYTONA_AUTO_DELETE_GRACE_MINUTES, DAYTONA_LIST_PAGE_SIZE, DAYTONA_MAX_LIST_PAGES, DAYTONA_MAX_NETWORK_ALLOWLIST, DaytonaCommands, type DaytonaConfig, DaytonaFiles, DaytonaIdleTimeoutError, DaytonaImagePullError, DaytonaNetworkPolicyError, type DaytonaNetworkPolicyReason, DaytonaProvider, DaytonaResourcesError, type DaytonaSandboxPage, type FileInfo, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxListPage, type SandboxProvider, type SandboxResources, type SandboxRunOptions, type SandboxSpawnOptions, _testCollectSandboxPages, _testCreateLogDemuxer, _testDaytonaStateToEvolveState, _testFollowManagedSessionLogs, _testImageRegistryHost, _testMapNetworkPolicy, _testReadCommandStreams, _testToSandboxInfo, _testWithInBoxTimeout, _testWrapCommand, createDaytonaProvider };
+export { DAYTONA_AUTO_DELETE_GRACE_MINUTES, DAYTONA_LIST_PAGE_SIZE, DAYTONA_MAX_LIST_SCAN, DAYTONA_MAX_NETWORK_ALLOWLIST, DAYTONA_SNAPSHOT_ACTIVATE_TIMEOUT_MS, DAYTONA_STREAM_TIMINGS, DaytonaCommands, type DaytonaConfig, DaytonaFiles, DaytonaGpuTypeError, DaytonaIdleTimeoutError, DaytonaImagePullError, DaytonaNetworkPolicyError, type DaytonaNetworkPolicyReason, DaytonaProvider, DaytonaResourcesError, DaytonaSnapshotActivationError, type DaytonaStreamTimings, EVOLVE_IMAGE_VERSION, type FileInfo, type ProcessInfo, type SandboxCommandHandle, type SandboxCommandResult, type SandboxCommands, type SandboxCreateOptions, type SandboxFiles, type SandboxInfo, type SandboxInstance, type SandboxListOptions, type SandboxListPage, type SandboxProvider, type SandboxResources, type SandboxRunOptions, type SandboxSpawnOptions, _testActivateSnapshot, _testCollectSandboxStream, _testCreateLogDemuxer, _testCreateSentinelFilter, _testDaytonaStateToEvolveState, _testFollowManagedSessionLogs, _testImageMap, _testImageRegistryHost, _testMapNetworkPolicy, _testReadCommandStreams, _testSettledStreams, _testStripEndOfOutputSentinel, _testToSandboxInfo, _testWithEndOfOutputSentinel, _testWithInBoxTimeout, _testWrapCommand, createDaytonaProvider };

package/dist/index.js

@@ -1,2 +1,7 @@
-import {STDOUT_PREFIX_BYTES,STDERR_PREFIX_BYTES,MAX_PREFIX_LEN,Daytona,Image}from'@daytonaio/sdk';import {resolve4}from'dns/promises';var z={"evolve-all":"evolvingmachines/evolve-all"},q=10,L=10,T=100,y=100,W=new Set([".xlsx",".xls",".docx",".doc",".pptx",".ppt",".pdf",".zip",".tar",".gz",".7z",".rar",".png",".jpg",".jpeg",".gif",".webp",".ico",".bmp",".mp3",".wav",".ogg",".flac",".aac",".mp4",".avi",".mov",".mkv",".webm",".woff",".woff2",".ttf",".otf",".eot",".exe",".dll",".so",".dylib",".sqlite",".db",".pickle",".pkl",".parquet"]);function X(s){let e=s.substring(s.lastIndexOf(".")).toLowerCase();return W.has(e)}function G(s){let e=s.lastIndexOf("/");return e>0?s.substring(0,e):"/"}function J(s){let e=s.lastIndexOf("/");return e>=0?s.substring(e+1):s}var f=class extends Error{reason;destination;constructor(e,t,n){super(t),this.name="DaytonaNetworkPolicyError",this.reason=e,this.destination=n;}},w=class extends Error{image;constructor(e,t){let n=t instanceof Error?t.message:String(t??"unknown error");super(`Failed to pull image "${e}" on Daytona: ${n}. Private registry images (e.g. AWS ECR) require registry credentials pre-registered in the Daytona dashboard (Registries page) before sandbox creation \u2014 Daytona has no per-call image pull secret. Register the registry at https://app.daytona.io, then retry. Also ensure the image is linux/amd64 and pinned to a tag or digest (floating tags like "latest" are rejected by Daytona's snapshot builder).`),this.name="DaytonaImagePullError",this.image=e;}},h=class extends Error{snapshot;constructor(e){super(`Daytona snapshot "${e}" already exists and pins its cpu/memory/disk sizing \u2014 create-from-snapshot cannot resize it, so the requested \`resources\` cannot be enforced. Pre-build a snapshot with the desired sizing under its own name (sizing-addressed), or omit \`resources\` to accept the snapshot's pinned sizing.`),this.name="DaytonaResourcesError",this.snapshot=e;}},S=class extends Error{constructor(){super("Daytona has no separate idle timeout: auto-stop IS its only clock and it already measures inactivity, so `timeoutMs` is what sets it (autoStopInterval). Set the inactivity bound with `timeoutMs`; a hard bound on the process itself is enforced in-box instead (see withInBoxTimeout)."),this.name="DaytonaIdleTimeoutError";}};function v(s,e){if(!e||e<=0)return s;let t=Buffer.from(s).toString("base64"),n=`/tmp/.evolve-cmd-${Date.now()}-${Math.random().toString(36).slice(2,8)}.sh`;return `sh -c '${`echo ${t} | base64 -d > ${n} && [ -s ${n} ] || { rm -f ${n}; exit 126; }; if command -v timeout >/dev/null 2>&1; then timeout -k 10 ${e} bash ${n}; else bash ${n}; fi; rc=$?; rm -f ${n}; exit $rc`}'`}function P(s,e,t,n){let r=s;return e&&(r=`cd '${e.replace(/'/g,"'\\''")}' && ${r}`),t&&Object.keys(t).length>0&&(r=`${Object.entries(t).filter(([,o])=>o!=null).map(([o,a])=>`export ${o}='${String(a).replace(/'/g,"'\\''")}'`).join("; ")}; ${r}`),n==="root"&&(r=`echo ${Buffer.from(r).toString("base64")} | base64 -d | sudo -n bash`),r}var V=s=>resolve4(s);function E(s){let e=/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})(?:\/(\d{1,3}))?$/.exec(s);return !(!e||[e[1],e[2],e[3],e[4]].some(t=>Number(t)>255)||e[5]!==void 0&&Number(e[5])>32)}function Z(s){return /^\d{1,3}(\.\d{1,3}){3}(\/\d+)?$/.test(s)&&!E(s)}function Q(s){return s.startsWith("[")?true:(s.match(/:/g)?.length??0)>=2}function ee(s){return /^[^:]+:\d+$/.test(s)}async function B(s,e=V){if(!s||s.outbound==="open"){if(s?.allowedDestinations?.length)throw new Error("network.allowedDestinations is only valid when outbound is blocked");return s?{networkBlockAll:false}:{}}let t=s.allowedDestinations??[];if(t.length===0)return {networkBlockAll:true};let n=[],r=[];for(let o of t)if(E(o))n.push(o.includes("/")?o:`${o}/32`);else {if(Z(o))throw new f("invalid-ipv4",`"${o}" is not a valid IPv4 address or CIDR (octets must be 0-255, prefix 0-32). Fix the address or list a hostname instead.`,o);if(Q(o))throw new f("ipv6-unsupported",`Daytona's network allowlist supports IPv4 CIDRs only; cannot allow IPv6 destination "${o}".`,o);if(ee(o))throw new f("port-unsupported",`Daytona's network allowlist filters hosts and IPs only and cannot match a port; drop the ":<port>" from "${o}" and list just the host or IP.`,o);if(o.includes("*"))throw new f("wildcard-hostname",`Daytona cannot enforce wildcard hostname "${o}": its allowlist is kernel-level IPv4 CIDR filtering with no DNS/domain layer. List concrete hostnames or IPv4 CIDRs instead.`,o);r.push(o);}for(let o of r){let a=[];try{a=await e(o);}catch(i){throw new f("unresolvable-hostname",`Cannot pin hostname "${o}" to stable IPv4 addresses at create time (${i instanceof Error?i.message:String(i)}). Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,o)}if(a.length===0)throw new f("unresolvable-hostname",`Hostname "${o}" resolved to no IPv4 addresses. Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,o);console.warn(`[daytona] Network allowlist: pinning "${o}" to [${a.join(", ")}] (DNS resolved at create time). Daytona enforces IPv4 CIDRs only \u2014 if this host rotates DNS (CDNs and cloud APIs often do), traffic to its new IPs will be BLOCKED for the sandbox's lifetime.`);for(let i of a)n.push(`${i}/32`);}let l=[...new Set(n)];if(l.length>L)throw new f("allowlist-too-large",`Daytona allows at most ${L} entries in its network allowlist; this policy resolved to ${l.length} CIDRs (${l.join(", ")}). Aggregate destinations into broader CIDRs or reduce the list.`);return {networkBlockAll:false,networkAllowList:l.join(",")}}function O(s){let e=s.indexOf("/");if(e<0)return;let t=s.substring(0,e);return t.includes(".")||t.includes(":")||t==="localhost"?t:void 0}function k(s){return {sandboxId:s.id,image:s.snapshot??"",name:s.name,metadata:s.labels??{},startedAt:s.createdAt??""}}function _(s){if(s==="started")return "running";if(s==="stopped"||s==="archived")return "paused"}var I=class extends Daytona{constructor(t,n){super(t);this.managedToolboxUrl=n;}async getProxyToolboxUrl(){return this.managedToolboxUrl}};function te(s,e){let t=new Uint8Array(new ArrayBuffer(s.length+e.length));return t.set(s,0),t.set(e,s.length),t}function U(s,e,t){e:for(let n=t;n+e.length<=s.length;n++){for(let r=0;r<e.length;r++)if(s[n+r]!==e[r])continue e;return n}return  -1}function N(s,e){let t=new TextDecoder("utf-8"),n=new TextDecoder("utf-8"),r=new Uint8Array(0),l="stdout",o=a=>{a.length!==0&&(l==="stdout"?s(t.decode(a,{stream:true})):e(n.decode(a,{stream:true})));};return {push(a){for(r=te(r,a);;){let i=U(r,STDOUT_PREFIX_BYTES,0),d=U(r,STDERR_PREFIX_BYTES,0),c=-1,u="stdout",m=0;if(i!==-1&&(d===-1||i<d)?(c=i,u="stdout",m=STDOUT_PREFIX_BYTES.length):d!==-1&&(c=d,u="stderr",m=STDERR_PREFIX_BYTES.length),c===-1){let g=Math.max(0,r.length-(MAX_PREFIX_LEN-1));o(r.subarray(0,g)),r=r.slice(g);return}o(r.subarray(0,c)),l=u,r=r.slice(c+m);}},flush(){o(r),r=new Uint8Array(0);let a=t.decode();a&&s(a);let i=n.decode();i&&e(i);}}}async function F(s,e,t,n,r,l){let o=`${s.toolboxUrl.replace(/\/+$/,"")}/${encodeURIComponent(e)}/process/session/${encodeURIComponent(t)}/command/${encodeURIComponent(n)}/logs?follow=true`,a=await fetch(o,{headers:{Authorization:`Bearer ${s.apiKey}`,accept:"application/octet-stream"}});if(!a.ok)throw new Error(`Daytona managed log follow failed: ${a.status} ${await a.text()}`);if(!a.body)return;let i=N(r,l),d=a.body.getReader();try{for(;;){let{done:c,value:u}=await d.read();if(c)break;u&&i.push(u);}}finally{i.flush(),await d.cancel().catch(()=>{});}}function x(s){let e=s.stdout||"",t=s.stderr||"",n=s.output||"";return !e&&!t&&n?{stdout:n,stderr:""}:{stdout:e,stderr:t}}var D=class{constructor(e,t,n){this.sandbox=e;this.user=t;this.managedStream=n;}followLogs(e,t,n,r){return this.managedStream?F(this.managedStream,this.sandbox.id,e,t,n,r):this.sandbox.process.getSessionCommandLogs(e,t,n,r)}async run(e,t){let n=t?.timeoutMs?Math.floor(t.timeoutMs/1e3):void 0,r=`run-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(r);try{let l=await this.sandbox.process.executeSessionCommand(r,{command:v(P(e,t?.cwd,t?.envs,this.user),n),runAsync:!1},n),o=l.cmdId;o&&(t?.onStdout||t?.onStderr)&&await this.followLogs(r,o,t.onStdout||(()=>{}),t.onStderr||(()=>{}));let{stdout:a,stderr:i}=x(l);if(!a&&!i&&o&&!t?.onStdout)try{let d=await this.sandbox.process.getSessionCommandLogs(r,o),c=x(d);a=c.stdout,i=c.stderr||i;}catch{}return {exitCode:l.exitCode??0,stdout:a,stderr:i}}finally{try{await this.sandbox.process.deleteSession(r);}catch{}}}async spawn(e,t){let n=`evolve-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(n);let r=t?.timeoutMs?Math.floor(t.timeoutMs/1e3):void 0,l=Date.now(),o=t?.timeoutMs,i=(await this.sandbox.process.executeSessionCommand(n,{command:v(P(e,t?.cwd,t?.envs,this.user),r),runAsync:true},r)).cmdId;i&&(t?.onStdout||t?.onStderr)&&this.followLogs(n,i,t.onStdout||(()=>{}),t.onStderr||(()=>{})).catch(()=>{});let d=this.sandbox;return {processId:n,wait:async()=>{if(!i)return {exitCode:0,stdout:"",stderr:""};for(;;){if(o&&Date.now()-l>=o){try{await d.process.deleteSession(n);}catch{}return {exitCode:124,stdout:"",stderr:"operation timed out"}}try{let c=await d.process.getSessionCommand(n,i);if(c.exitCode!==void 0)try{let u=await d.process.getSessionCommandLogs(n,i);return {exitCode:c.exitCode,...x(u)}}catch{return {exitCode:c.exitCode,stdout:"",stderr:""}}}catch(c){let u=c instanceof Error?c.message.toLowerCase():String(c).toLowerCase();if(u.includes("not found")){let m=u.includes("sandbox");try{await d.refreshData(),m=!1;}catch(g){(g instanceof Error?g.message.toLowerCase():String(g).toLowerCase()).includes("not found")&&(m=true);}return {exitCode:-1,stdout:"",stderr:m?"sandbox deleted during run":"session terminated"}}throw c}await new Promise(c=>setTimeout(c,500));}},kill:async()=>{try{return await d.process.deleteSession(n),!0}catch{return  false}}}}async list(){try{return (await this.sandbox.process.listSessions()).map(t=>({processId:t.sessionId||"",cmd:"",args:[],envs:{}}))}catch{return []}}async kill(e){try{return await this.sandbox.process.deleteSession(e),!0}catch{return  false}}},A=class{constructor(e){this.sandbox=e;}async read(e){let t=await this.sandbox.fs.downloadFile(e);return X(e)?new Uint8Array(t):t.toString("utf-8")}async write(e,t){let n;if(typeof t=="string")n=Buffer.from(t,"utf-8");else if(Buffer.isBuffer(t))n=t;else if(t instanceof ArrayBuffer)n=Buffer.from(t);else if(t instanceof Uint8Array)n=Buffer.from(t);else throw new Error(`Unsupported content type: ${typeof t}`);await this.sandbox.fs.uploadFile(n,e);}async writeBatch(e){let t=e.map(n=>{let r;if(typeof n.data=="string")r=Buffer.from(n.data,"utf-8");else if(Buffer.isBuffer(n.data))r=n.data;else if(n.data instanceof ArrayBuffer)r=Buffer.from(n.data);else if(n.data instanceof Uint8Array)r=Buffer.from(n.data);else throw new Error(`Unsupported content type: ${typeof n.data}`);return {source:r,destination:n.path}});await this.sandbox.fs.uploadFiles(t);}async writeFromPath(e,t){await this.sandbox.fs.uploadFile(t,e);}async makeDir(e){await this.sandbox.fs.createFolder(e,"755");}async exists(e){try{let t=G(e),n=J(e);return (await this.sandbox.fs.listFiles(t)).some(l=>l.name===n)}catch{return  false}}async list(e){return (await this.sandbox.fs.listFiles(e)).map(n=>({name:n.name,path:e.endsWith("/")?`${e}${n.name}`:`${e}/${n.name}`,type:n.isDir?"dir":"file"}))}async remove(e){await this.sandbox.fs.deleteFile(e,true);}async rename(e,t){await this.sandbox.fs.moveFiles(e,t);}},b=class{constructor(e,t,n){this.sandbox=e;this.commands=new D(e,t,n),this.files=new A(e);}commands;files;get sandboxId(){return this.sandbox.id}async getHost(e){return (await this.sandbox.getPreviewLink(e)).url}async isRunning(){try{await this.sandbox.refreshData();}catch{return  false}return this.sandbox.state==="started"}async getInfo(){return await this.sandbox.refreshData(),k(this.sandbox)}async kill(){await this.sandbox.delete();}async pause(){await this.sandbox.stop();}},C=class{providerType="daytona";name="Daytona";client;defaultTimeoutMs;snapshotName;sandboxUsers=new Map;managedStream;constructor(e){let t={apiKey:e.apiKey,apiUrl:e.apiUrl,target:e.target};this.client=e.managedToolboxUrl?new I(t,e.managedToolboxUrl):new Daytona(t),e.managedToolboxUrl&&(this.managedStream={toolboxUrl:e.managedToolboxUrl,apiKey:e.apiKey}),this.defaultTimeoutMs=e.defaultTimeoutMs??36e5,this.snapshotName=e.snapshotName??"evolve-all";}async create(e){if(e.idleTimeoutMs!==void 0)throw new S;let t=await B(e.network),n=e.user,r=n&&n!=="root"?n:void 0,l=e.timeoutMs??this.defaultTimeoutMs,o=Math.max(1,Math.ceil(l/6e4)),a=e.image||this.snapshotName,i={envVars:e.envs,labels:e.metadata,autoStopInterval:o,autoDeleteInterval:q,...r?{user:r}:{},...t},d,c=e.resources!==void 0&&(e.resources.cpu!==void 0||e.resources.memory!==void 0||e.resources.disk!==void 0);if(this.managedStream){if(c)throw new h(a);let u=await this.client.create({snapshot:a,...i},{timeout:600});return e.workingDirectory&&await u.fs.createFolder(e.workingDirectory,"755"),n&&this.sandboxUsers.set(u.id,n),new b(u,n,this.managedStream)}try{let u=await this.client.snapshot.get(a);if(u&&u.state==="active"){if(c)throw new h(a);console.log(`[daytona] Using cached snapshot: ${a}`),d=await this.client.create({snapshot:a,...i},{timeout:600});}else throw new Error("Snapshot not active")}catch(u){if(u instanceof h)throw u;let m=z[a]??a;console.log(`[daytona] Snapshot "${a}" not found, building from image: ${m}`),console.log("[daytona] First run will take a few minutes (this only happens once)...");try{await this.client.snapshot.create({name:a,image:Image.base(m),resources:{cpu:e.resources?.cpu??4,memory:e.resources?.memory??4,disk:e.resources?.disk??10}},{onLogs:g=>console.log(`[daytona] ${g}`)}),console.log(`[daytona] Snapshot "${a}" ready.`),d=await this.client.create({snapshot:a,...i},{timeout:600});}catch(g){console.warn(`[daytona] Snapshot creation failed, falling back to direct image: ${g instanceof Error?g.message:g}`);try{d=await this.client.create({image:m,...i,resources:{cpu:e.resources?.cpu??4,memory:e.resources?.memory??4,disk:e.resources?.disk??10}},{timeout:600,onSnapshotCreateLogs:p=>console.log(`[daytona] ${p}`)});}catch(p){throw O(m)?new w(m,p):p}}}return e.workingDirectory&&await d.fs.createFolder(e.workingDirectory,"755"),n&&this.sandboxUsers.set(d.id,n),new b(d,n,this.managedStream)}async connect(e,t){let n=await this.client.get(e);return n.state!=="started"&&await n.start(),new b(n,this.sandboxUsers.get(e),this.managedStream)}async list(e){let t=await this.paginate(e);if(t.error&&!t.stoppedAtLimit)throw new Error(t.error);return t.sandboxes}async listAll(e){let{stoppedAtLimit:t,...n}=await this.paginate(e);return n}async paginate(e){return K(t=>this.listPage(e,t),e)}async listPage(e,t){let n=e?.state?ne(e.state):void 0;if(n&&n.length>0){let r=this.client.sandboxApi;if(typeof r?.listSandboxesPaginated=="function")try{let l=await r.listSandboxesPaginated(void 0,t,T,void 0,void 0,e?.metadata?JSON.stringify(e.metadata):void 0,void 0,n);return {items:l.data.items,totalPages:l.data.totalPages}}catch{}}return this.client.list(e?.metadata,t,T)}};function ne(s){let e=[];for(let t of s)t==="running"&&e.push("started"),t==="paused"&&e.push("stopped","archived");return e}async function K(s,e){let t=e?.limit,n=[],r=0,l=new Set;for(let o=1;o<=y;o+=1){let a;try{a=await s(o);}catch(d){return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:false,error:`sandbox list failed: ${d instanceof Error?d.message:String(d)}`}}r+=1;for(let d of a.items){if(e?.state){let c=_(d.state);if(c===void 0||!e.state.includes(c))continue}if(!l.has(d.id)){if(t!==void 0&&n.length>=t)return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:true,error:`stopped at the requested limit of ${t} with more sandboxes available`};l.add(d.id),n.push(k(d));}}let i=a.items.length===0||typeof a.totalPages=="number"&&o>=a.totalPages;if(t!==void 0&&n.length>=t&&!i)return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:true,error:`stopped at the requested limit of ${t} with more sandboxes available`};if(i)break;if(o===y)return {sandboxes:n,complete:false,pagesFetched:r,stoppedAtLimit:false,error:`sandbox list exceeded ${y} pages`}}return {sandboxes:n,complete:true,pagesFetched:r,stoppedAtLimit:false}}var oe=K;function ae(s={}){let e=s.apiKey??process.env.DAYTONA_API_KEY;if(!e)throw new Error("Daytona API key required. Set DAYTONA_API_KEY environment variable or pass apiKey in config. Get your key at https://app.daytona.io/dashboard/keys");return new C({...s,apiKey:e})}var ie=P,de=v,le=B,ce=O,ue=k,me=_,ge=N,fe=F,pe=x;
-export{q as DAYTONA_AUTO_DELETE_GRACE_MINUTES,T as DAYTONA_LIST_PAGE_SIZE,y as DAYTONA_MAX_LIST_PAGES,L as DAYTONA_MAX_NETWORK_ALLOWLIST,D as DaytonaCommands,A as DaytonaFiles,S as DaytonaIdleTimeoutError,w as DaytonaImagePullError,f as DaytonaNetworkPolicyError,C as DaytonaProvider,h as DaytonaResourcesError,oe as _testCollectSandboxPages,ge as _testCreateLogDemuxer,me as _testDaytonaStateToEvolveState,fe as _testFollowManagedSessionLogs,ce as _testImageRegistryHost,le as _testMapNetworkPolicy,pe as _testReadCommandStreams,ue as _testToSandboxInfo,de as _testWithInBoxTimeout,ie as _testWrapCommand,ae as createDaytonaProvider};
+import {STDOUT_PREFIX_BYTES,STDERR_PREFIX_BYTES,MAX_PREFIX_LEN,Daytona,Image}from'@daytonaio/sdk';import {resolve4}from'dns/promises';var D="c-7bcda3467a79";var X={[`evolve-all-${D}`]:`evolvingmachines/evolve-all:${D}`,"evolve-all":"evolvingmachines/evolve-all"},ft=10,W=10,gt=18e4,pt=2e3,ht={pollMinMs:250,pollMaxMs:2e3,drainMs:1e3,killGraceMs:15e3,settleMs:6e4},v=s=>new Promise(t=>setTimeout(t,Math.max(0,s))),yt=100,I=1e4;function wt(s){let t=s.lastIndexOf("/");return t>0?s.substring(0,t):"/"}function xt(s){let t=s.lastIndexOf("/");return t>=0?s.substring(t+1):s}var h=class extends Error{reason;destination;constructor(t,e,n){super(e),this.name="DaytonaNetworkPolicyError",this.reason=t,this.destination=n;}},k=class extends Error{image;constructor(t,e){let n=e instanceof Error?e.message:String(e??"unknown error");super(`Failed to pull image "${t}" on Daytona: ${n}. Private registry images (e.g. AWS ECR) require registry credentials pre-registered in the Daytona dashboard (Registries page) before sandbox creation \u2014 Daytona has no per-call image pull secret. Register the registry at https://app.daytona.io, then retry. Also ensure the image is linux/amd64 and pinned to a tag or digest (floating tags like "latest" are rejected by Daytona's snapshot builder).`),this.name="DaytonaImagePullError",this.image=t;}},j=class extends Error{snapshot;constructor(t){super(`Daytona cannot constrain the GPU type for "${t}": the snapshot already exists and pins its resources \u2014 pre-build a snapshot with the desired GPU type under its own name.`),this.name="DaytonaGpuTypeError",this.snapshot=t;}},P=class extends Error{snapshot;constructor(t){super(`Daytona snapshot "${t}" already exists and pins its cpu/memory/disk sizing \u2014 create-from-snapshot cannot resize it, so the requested \`resources\` cannot be enforced. Pre-build a snapshot with the desired sizing under its own name (sizing-addressed), or omit \`resources\` to accept the snapshot's pinned sizing.`),this.name="DaytonaResourcesError",this.snapshot=t;}},C=class extends Error{constructor(){super("Daytona has no separate idle timeout: auto-stop IS its only clock and it already measures inactivity, so `timeoutMs` is what sets it (autoStopInterval). Set the inactivity bound with `timeoutMs`; a hard bound on the process itself is enforced in-box instead (see withInBoxTimeout)."),this.name="DaytonaIdleTimeoutError";}},y=class extends Error{snapshot;constructor(t,e){super(`Daytona snapshot "${t}" exists but could not be activated: ${e}. Daytona deactivates snapshots unused for 2 weeks; activation normally completes in seconds. Retry, or activate it manually in the Daytona dashboard (Snapshots page).`),this.name="DaytonaSnapshotActivationError",this.snapshot=t;}};async function Q(s,t,e,n){let o=n?.timeoutMs??gt,l=n?.pollMs??pt;console.log(`[daytona] Snapshot "${t}" is inactive (unused for 2+ weeks) \u2014 reactivating...`);let r;try{r=await s.snapshot.activate(e);}catch(i){throw new y(t,`the activate call failed (${i instanceof Error?i.message:String(i)})`)}let a=Date.now()+o;for(;r?.state!=="active";){if(r?.state==="error"||r?.state==="build_failed")throw new y(t,`it entered state "${r.state}"`);if(Date.now()>=a)throw new y(t,`still "${r?.state??"unknown"}" after ${o}ms`);await v(l);try{r=await s.snapshot.get(t);}catch(i){throw new y(t,`the activation poll failed (${i instanceof Error?i.message:String(i)})`)}}return console.log(`[daytona] Snapshot "${t}" reactivated.`),r}function $(s,t){if(!t||t<=0)return s;let e=Buffer.from(s).toString("base64"),n=`/tmp/.evolve-cmd-${Date.now()}-${Math.random().toString(36).slice(2,8)}.sh`;return `sh -c '${`echo ${e} | base64 -d > ${n} && [ -s ${n} ] || { rm -f ${n}; exit 126; }; if command -v timeout >/dev/null 2>&1; then timeout -k 10 ${t} bash ${n}; else bash ${n}; fi; rc=$?; rm -f ${n}; exit $rc`}'`}function V(){return `EVOLVE-EOS-${Date.now().toString(36)}-${Math.random().toString(36).slice(2,8)}`}function T(s,t){return s.trim()?`{ :
+${s}
+
+}; __evolve_eos=$?; printf '%s' '${t}'; (exit $__evolve_eos)`:s}function Z(s,t){return s.endsWith(`${t}
+`)?s.slice(0,-(t.length+1)):s.endsWith(t)?s.slice(0,-t.length):s}function x(s,t){let e=at(s);return {stdout:Z(e.stdout,t),stderr:e.stderr}}function M(s,t){let e=`${s}
+`,n="",o=l=>{for(let r=Math.min(l.length,e.length);r>0;r--)if(e.startsWith(l.slice(l.length-r)))return r;return 0};return {push(l){n+=l;let r=o(n);r!==n.length&&(t(n.slice(0,n.length-r)),n=n.slice(n.length-r));},flush(){let l=n===e||n===s?"":n;n="",l&&t(l);}}}function E(s,t,e,n){let o=s;return t&&(o=`cd '${t.replace(/'/g,"'\\''")}' && ${o}`),e&&Object.keys(e).length>0&&(o=`${Object.entries(e).filter(([,r])=>r!=null).map(([r,a])=>`export ${r}='${String(a).replace(/'/g,"'\\''")}'`).join("; ")}; ${o}`),n==="root"&&(o=`echo ${Buffer.from(o).toString("base64")} | base64 -d | sudo -n bash`),o}var bt=s=>resolve4(s);function J(s){let t=/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})(?:\/(\d{1,3}))?$/.exec(s);return !(!t||[t[1],t[2],t[3],t[4]].some(e=>Number(e)>255)||t[5]!==void 0&&Number(t[5])>32)}function St(s){return /^\d{1,3}(\.\d{1,3}){3}(\/\d+)?$/.test(s)&&!J(s)}function vt(s){return s.startsWith("[")?true:(s.match(/:/g)?.length??0)>=2}function Pt(s){return /^[^:]+:\d+$/.test(s)}async function tt(s,t=bt){if(!s||s.outbound==="open"){if(s?.allowedDestinations?.length)throw new Error("network.allowedDestinations is only valid when outbound is blocked");return s?{networkBlockAll:false}:{}}let e=s.allowedDestinations??[];if(e.length===0)return {networkBlockAll:true};let n=[],o=[];for(let r of e)if(J(r))n.push(r.includes("/")?r:`${r}/32`);else {if(St(r))throw new h("invalid-ipv4",`"${r}" is not a valid IPv4 address or CIDR (octets must be 0-255, prefix 0-32). Fix the address or list a hostname instead.`,r);if(vt(r))throw new h("ipv6-unsupported",`Daytona's network allowlist supports IPv4 CIDRs only; cannot allow IPv6 destination "${r}".`,r);if(Pt(r))throw new h("port-unsupported",`Daytona's network allowlist filters hosts and IPs only and cannot match a port; drop the ":<port>" from "${r}" and list just the host or IP.`,r);if(r.includes("*"))throw new h("wildcard-hostname",`Daytona cannot enforce wildcard hostname "${r}": its allowlist is kernel-level IPv4 CIDR filtering with no DNS/domain layer. List concrete hostnames or IPv4 CIDRs instead.`,r);o.push(r);}for(let r of o){let a=[];try{a=await t(r);}catch(i){throw new h("unresolvable-hostname",`Cannot pin hostname "${r}" to stable IPv4 addresses at create time (${i instanceof Error?i.message:String(i)}). Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,r)}if(a.length===0)throw new h("unresolvable-hostname",`Hostname "${r}" resolved to no IPv4 addresses. Daytona enforces IPv4 CIDRs only; use an IPv4 CIDR for this destination instead.`,r);console.warn(`[daytona] Network allowlist: pinning "${r}" to [${a.join(", ")}] (DNS resolved at create time). Daytona enforces IPv4 CIDRs only \u2014 if this host rotates DNS (CDNs and cloud APIs often do), traffic to its new IPs will be BLOCKED for the sandbox's lifetime.`);for(let i of a)n.push(`${i}/32`);}let l=[...new Set(n)];if(l.length>W)throw new h("allowlist-too-large",`Daytona allows at most ${W} entries in its network allowlist; this policy resolved to ${l.length} CIDRs (${l.join(", ")}). Aggregate destinations into broader CIDRs or reduce the list.`);return {networkBlockAll:false,networkAllowList:l.join(",")}}function et(s){let t=s.indexOf("/");if(t<0)return;let e=s.substring(0,t);return e.includes(".")||e.includes(":")||e==="localhost"?e:void 0}function U(s){return {sandboxId:s.id,image:s.snapshot??"",name:s.name,metadata:s.labels??{},startedAt:s.createdAt??""}}function nt(s){if(s==="started")return "running";if(s==="stopped"||s==="archived"||s==="paused")return "paused"}function st(s,t){if(!s||typeof s!="object")return;let e=s;if(typeof e.toolboxProxyUrl=="string"&&(e.toolboxProxyUrl=t),Array.isArray(e.items))for(let n of e.items)st(n,t);}function At(s,t){return new Proxy(s,{get(e,n,o){if(n==="getToolboxProxyUrl")return async()=>({data:{url:t}});let l=Reflect.get(e,n,o);return typeof l!="function"?l:function(...r){let a=l.apply(e,r);return a instanceof Promise?a.then(i=>(st(i?.data,t),i)):a}}})}var _=class extends Daytona{constructor(t,e){super(t);let n=this;n.sandboxApi=At(n.sandboxApi,e);}};function Dt(s,t){let e=new Uint8Array(new ArrayBuffer(s.length+t.length));return e.set(s,0),e.set(t,s.length),e}function q(s,t,e){t:for(let n=e;n+t.length<=s.length;n++){for(let o=0;o<t.length;o++)if(s[n+o]!==t[o])continue t;return n}return  -1}function rt(s,t){let e=new TextDecoder("utf-8"),n=new TextDecoder("utf-8"),o=new Uint8Array(0),l="stdout",r=a=>{a.length!==0&&(l==="stdout"?s(e.decode(a,{stream:true})):t(n.decode(a,{stream:true})));};return {push(a){for(o=Dt(o,a);;){let i=q(o,STDOUT_PREFIX_BYTES,0),u=q(o,STDERR_PREFIX_BYTES,0),m=-1,d="stdout",c=0;if(i!==-1&&(u===-1||i<u)?(m=i,d="stdout",c=STDOUT_PREFIX_BYTES.length):u!==-1&&(m=u,d="stderr",c=STDERR_PREFIX_BYTES.length),m===-1){let f=Math.max(0,o.length-(MAX_PREFIX_LEN-1));r(o.subarray(0,f)),o=o.slice(f);return}r(o.subarray(0,m)),l=d,o=o.slice(m+c);}},flush(){r(o),o=new Uint8Array(0);let a=e.decode();a&&s(a);let i=n.decode();i&&t(i);}}}async function ot(s,t,e,n,o,l,r){let a=`${s.toolboxUrl.replace(/\/+$/,"")}/${encodeURIComponent(t)}/process/session/${encodeURIComponent(e)}/command/${encodeURIComponent(n)}/logs?follow=true`,i=await fetch(a,{headers:{Authorization:`Bearer ${s.apiKey}`,accept:"application/octet-stream"},...r?{signal:r}:{}});if(!i.ok)throw new Error(`Daytona managed log follow failed: ${i.status} ${await i.text()}`);if(!i.body)return;let u=rt(o,l),m=i.body.getReader();try{for(;;){let{done:d,value:c}=await m.read();if(d)break;c&&u.push(c);}}finally{u.flush(),await m.cancel().catch(()=>{});}}function at(s){let t=s.stdout||"",e=s.stderr||"",n=s.output||"";return !t&&!e&&n?{stdout:n,stderr:""}:{stdout:t,stderr:e}}var L=class{constructor(t,e,n){this.sandbox=t;this.user=e;this.managedStream=n;}streamTimings=ht;followLogs(t,e,n,o,l){return this.managedStream?ot(this.managedStream,this.sandbox.id,t,e,n,o,l):this.sandbox.process.getSessionCommandLogs(t,e,n,o)}async run(t,e){let n=e?.timeoutMs?Math.floor(e.timeoutMs/1e3):void 0,o=`run-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(o);try{let l=!!(e?.onStdout||e?.onStderr),r=V(),a=await this.sandbox.process.executeSessionCommand(o,{command:$(E(T(t,r),e?.cwd,e?.envs,this.user),n),runAsync:l},n),i=a.cmdId;if(l&&!i)throw new Error("Daytona returned no command id for an async command \u2014 cannot stream it or read its exit code");if(l&&i){let d="",c="",f=!0,p=Date.now(),w=M(r,g=>{d+=g,e?.onStdout?.(g);}),B=new AbortController,N=this.followLogs(o,i,g=>{f&&(p=Date.now(),w.push(g));},g=>{f&&(p=Date.now(),c+=g,e?.onStderr?.(g));},B.signal),F=!1,b,dt=N.then(()=>{},g=>{F||(b=g);}),G;try{G=await this.awaitStreamedExit(o,i,N,()=>p,e?.timeoutMs);}finally{F=!0,B.abort(),await Promise.race([dt,v(this.streamTimings.drainMs)]),f=!1,b===void 0&&w.flush();}if(b!==void 0){let g;try{let lt=await this.sandbox.process.getSessionCommandLogs(o,i);g=x(lt,r);}catch{throw b}if(!g.stdout.startsWith(d)||!g.stderr.startsWith(c))throw b;let S=g.stdout.slice(d.length),K=g.stderr.slice(c.length);d=g.stdout,c=g.stderr,S&&e?.onStdout?.(S),K&&e?.onStderr?.(K);}else if(!d&&!c)try{let g=await this.sandbox.process.getSessionCommandLogs(o,i),S=x(g,r);d=S.stdout,c=S.stderr,d&&e?.onStdout?.(d),c&&e?.onStderr?.(c);}catch{}return {exitCode:G,stdout:d,stderr:c}}let{stdout:u,stderr:m}=x(a,r);if(!u&&!m&&i)try{let d=await this.sandbox.process.getSessionCommandLogs(o,i),c=x(d,r);u=c.stdout,m=c.stderr||m;}catch{}return {exitCode:a.exitCode??0,stdout:u,stderr:m}}finally{try{await this.sandbox.process.deleteSession(o);}catch{}}}async awaitStreamedExit(t,e,n,o,l){let r=this.streamTimings,a,i,u=n.then(()=>{a=Date.now();},c=>{a=Date.now(),i=c;}),m=l!==void 0&&l>0?Date.now()+l+r.killGraceMs:void 0,d=r.pollMinMs;for(;;){let c=await this.sandbox.process.getSessionCommand(t,e);if(c.exitCode!==void 0&&c.exitCode!==null){for(;a===void 0;){let w=Date.now()-o();if(w>=r.drainMs)break;await Promise.race([u,v(r.drainMs-w)]);}return c.exitCode}let f=a!==void 0?a+r.settleMs:void 0,p=m!==void 0&&f!==void 0?Math.min(m,f):m??f;if(p!==void 0&&Date.now()>=p)throw i!==void 0?i:new Error(`Daytona reported no exit code for command ${e} after `+(a!==void 0?"its log stream closed":`${l}ms`));await v(d),d=Math.min(d*2,r.pollMaxMs);}}async spawn(t,e){let n=`evolve-${Date.now()}-${Math.random().toString(36).slice(2,8)}`;await this.sandbox.process.createSession(n);let o=e?.timeoutMs?Math.floor(e.timeoutMs/1e3):void 0,l=Date.now(),r=e?.timeoutMs,a=V(),u=(await this.sandbox.process.executeSessionCommand(n,{command:$(E(T(t,a),e?.cwd,e?.envs,this.user),o),runAsync:true},o)).cmdId;if(u&&(e?.onStdout||e?.onStderr)){let d=M(a,e.onStdout||(()=>{}));this.followLogs(n,u,c=>d.push(c),e.onStderr||(()=>{})).catch(()=>{}).finally(()=>d.flush());}let m=this.sandbox;return {processId:n,wait:async()=>{if(!u)return {exitCode:0,stdout:"",stderr:""};for(;;){if(r&&Date.now()-l>=r){try{await m.process.deleteSession(n);}catch{}return {exitCode:124,stdout:"",stderr:"operation timed out"}}try{let d=await m.process.getSessionCommand(n,u);if(d.exitCode!==void 0)try{let c=await m.process.getSessionCommandLogs(n,u);return {exitCode:d.exitCode,...x(c,a)}}catch{return {exitCode:d.exitCode,stdout:"",stderr:""}}}catch(d){let c=d instanceof Error?d.message.toLowerCase():String(d).toLowerCase();if(c.includes("not found")){let f=c.includes("sandbox");try{await m.refreshData(),f=!1;}catch(p){(p instanceof Error?p.message.toLowerCase():String(p).toLowerCase()).includes("not found")&&(f=true);}return {exitCode:-1,stdout:"",stderr:f?"sandbox deleted during run":"session terminated"}}throw d}await v(500);}},kill:async()=>{try{return await m.process.deleteSession(n),!0}catch{return  false}}}}async list(){try{return (await this.sandbox.process.listSessions()).map(e=>({processId:e.sessionId||"",cmd:"",args:[],envs:{}}))}catch{return []}}async kill(t){try{return await this.sandbox.process.deleteSession(t),!0}catch{return  false}}},R=class{constructor(t){this.sandbox=t;}async read(t){let e=new Uint8Array(await this.sandbox.fs.downloadFile(t));if(!e.includes(0))try{return new TextDecoder("utf-8",{fatal:!0,ignoreBOM:!0}).decode(e)}catch{}return e}async write(t,e){let n;if(typeof e=="string")n=Buffer.from(e,"utf-8");else if(Buffer.isBuffer(e))n=e;else if(e instanceof ArrayBuffer)n=Buffer.from(e);else if(e instanceof Uint8Array)n=Buffer.from(e);else throw new Error(`Unsupported content type: ${typeof e}`);await this.sandbox.fs.uploadFile(n,t);}async writeBatch(t){let e=t.map(n=>{let o;if(typeof n.data=="string")o=Buffer.from(n.data,"utf-8");else if(Buffer.isBuffer(n.data))o=n.data;else if(n.data instanceof ArrayBuffer)o=Buffer.from(n.data);else if(n.data instanceof Uint8Array)o=Buffer.from(n.data);else throw new Error(`Unsupported content type: ${typeof n.data}`);return {source:o,destination:n.path}});await this.sandbox.fs.uploadFiles(e);}async writeFromPath(t,e){await this.sandbox.fs.uploadFile(e,t);}async makeDir(t){await this.sandbox.fs.createFolder(t,"755");}async exists(t){try{let e=wt(t),n=xt(t);return (await this.sandbox.fs.listFiles(e)).some(l=>l.name===n)}catch{return  false}}async list(t){return (await this.sandbox.fs.listFiles(t)).map(n=>({name:n.name,path:t.endsWith("/")?`${t}${n.name}`:`${t}/${n.name}`,type:n.isDir?"dir":"file"}))}async remove(t){await this.sandbox.fs.deleteFile(t,true);}async rename(t,e){await this.sandbox.fs.moveFiles(t,e);}},A=class{constructor(t,e,n){this.sandbox=t;this.commands=new L(t,e,n),this.files=new R(t);}commands;files;get sandboxId(){return this.sandbox.id}async getHost(t){return (await this.sandbox.getPreviewLink(t)).url}async isRunning(){try{await this.sandbox.refreshData();}catch{return  false}return this.sandbox.state==="started"}async getInfo(){return await this.sandbox.refreshData(),U(this.sandbox)}async kill(){await this.sandbox.delete();}async pause(){await this.sandbox.stop();}},O=class{providerType="daytona";name="Daytona";client;defaultTimeoutMs;snapshotName;sandboxUsers=new Map;managedStream;constructor(t){let e={apiKey:t.apiKey,apiUrl:t.apiUrl,target:t.target,useDeprecatedPolling:true};this.client=t.managedToolboxUrl?new _(e,t.managedToolboxUrl):new Daytona(e),t.managedToolboxUrl&&(this.managedStream={toolboxUrl:t.managedToolboxUrl,apiKey:t.apiKey}),this.defaultTimeoutMs=t.defaultTimeoutMs??36e5,this.snapshotName=t.snapshotName??(t.managedToolboxUrl?"evolve-all":`evolve-all-${D}`);}async create(t){if(t.idleTimeoutMs!==void 0)throw new C;let e=await tt(t.network),n=t.user,o=n&&n!=="root"?n:void 0,l=t.timeoutMs??this.defaultTimeoutMs,r=Math.max(1,Math.ceil(l/6e4)),a=t.image||this.snapshotName,i={envVars:t.envs,labels:t.metadata,autoStopInterval:r,autoDeleteInterval:ft,...o?{user:o}:{},...e},u,m=t.resources!==void 0&&(t.resources.cpu!==void 0||t.resources.memory!==void 0||t.resources.disk!==void 0||t.resources.gpu!==void 0||t.resources.gpuTypes!==void 0);if(this.managedStream){if(m)throw new P(a);let d=await this.client.create({snapshot:a,...i},{timeout:600});return t.workingDirectory&&await d.fs.createFolder(t.workingDirectory,"755"),n&&this.sandboxUsers.set(d.id,n),new A(d,n,this.managedStream)}try{let d=await this.client.snapshot.get(a),c=d?.state;if(d&&(c==="active"||c==="inactive")&&m)throw new P(a);if(d&&c==="inactive"&&(c=(await Q(this.client,a,d)).state),d&&c==="active")console.log(`[daytona] Using cached snapshot: ${a}`),u=await this.client.create({snapshot:a,...i},{timeout:600});else throw new Error("Snapshot not active")}catch(d){if(d instanceof P||d instanceof y)throw d;let c=X[a]??a;console.log(`[daytona] Snapshot "${a}" not found, building from image: ${c}`),console.log("[daytona] First run will take a few minutes (this only happens once)...");try{await this.client.snapshot.create({name:a,image:Image.base(c),resources:{cpu:t.resources?.cpu??4,memory:t.resources?.memory??4,disk:t.resources?.disk??10,...(t.resources?.gpu??0)>0?{gpu:t.resources.gpu}:{},...t.resources?.gpuTypes?.length?{gpuType:t.resources.gpuTypes}:{}}},{onLogs:f=>console.log(`[daytona] ${f}`)}),console.log(`[daytona] Snapshot "${a}" ready.`),u=await this.client.create({snapshot:a,...i},{timeout:600});}catch(f){console.warn(`[daytona] Snapshot creation failed, falling back to direct image: ${f instanceof Error?f.message:f}`);try{u=await this.client.create({image:c,...i,resources:{cpu:t.resources?.cpu??4,memory:t.resources?.memory??4,disk:t.resources?.disk??10,...(t.resources?.gpu??0)>0?{gpu:t.resources.gpu}:{},...t.resources?.gpuTypes?.length?{gpuType:t.resources.gpuTypes}:{}}},{timeout:600,onSnapshotCreateLogs:p=>console.log(`[daytona] ${p}`)});}catch(p){throw et(c)?new k(c,p):p}}}return t.workingDirectory&&await u.fs.createFolder(t.workingDirectory,"755"),n&&this.sandboxUsers.set(u.id,n),new A(u,n,this.managedStream)}async connect(t,e){let n=await this.client.get(t);return n.state!=="started"&&await n.start(),new A(n,this.sandboxUsers.get(t),this.managedStream)}async list(t){let e=await this.paginate(t);if(e.error&&!e.stoppedAtLimit)throw new Error(e.error);return e.sandboxes}async listAll(t){let{stoppedAtLimit:e,...n}=await this.paginate(t);return n}async paginate(t){return it(this.listStream(t),t)}listStream(t){let e=t?.state?It(t.state):void 0,n={limit:yt,...t?.metadata?{labels:t.metadata}:{},...e&&e.length>0?{states:e}:{}};return this.client.list(n)}};function It(s){let t=[];for(let e of s)e==="running"&&t.push("started"),e==="paused"&&t.push("stopped","archived","paused");return t}async function it(s,t){let e=t?.limit,n=[],o=0,l=new Set;try{for await(let r of s){if(e!==void 0&&n.length>=e)return {sandboxes:n,complete:!1,pagesFetched:o,stoppedAtLimit:!0,error:`stopped at the requested limit of ${e} with more sandboxes available`};if(o+=1,o>I)return {sandboxes:n,complete:!1,pagesFetched:I,stoppedAtLimit:!1,error:`sandbox list exceeded ${I} sandboxes scanned`};if(t?.state){let a=nt(r.state);if(a===void 0||!t.state.includes(a))continue}l.has(r.id)||(l.add(r.id),n.push(U(r)));}}catch(r){return {sandboxes:n,complete:false,pagesFetched:o,stoppedAtLimit:false,error:`sandbox list failed: ${r instanceof Error?r.message:String(r)}`}}return {sandboxes:n,complete:true,pagesFetched:o,stoppedAtLimit:false}}var Mt=it;function Et(s={}){let t=s.apiKey??process.env.DAYTONA_API_KEY;if(!t)throw new Error("Daytona API key required. Set DAYTONA_API_KEY environment variable or pass apiKey in config. Get your key at https://app.daytona.io/dashboard/keys");return new O({...s,apiKey:t})}var _t=E,Lt=$,Rt=tt,Ot=et,Ut=U,Bt=nt,Nt=Q,Ft=X,Gt=T,Kt=Z,Ht=x,Yt=M,Wt=rt,jt=ot,Vt=at;
+export{ft as DAYTONA_AUTO_DELETE_GRACE_MINUTES,yt as DAYTONA_LIST_PAGE_SIZE,I as DAYTONA_MAX_LIST_SCAN,W as DAYTONA_MAX_NETWORK_ALLOWLIST,gt as DAYTONA_SNAPSHOT_ACTIVATE_TIMEOUT_MS,ht as DAYTONA_STREAM_TIMINGS,L as DaytonaCommands,R as DaytonaFiles,j as DaytonaGpuTypeError,C as DaytonaIdleTimeoutError,k as DaytonaImagePullError,h as DaytonaNetworkPolicyError,O as DaytonaProvider,P as DaytonaResourcesError,y as DaytonaSnapshotActivationError,D as EVOLVE_IMAGE_VERSION,Nt as _testActivateSnapshot,Mt as _testCollectSandboxStream,Wt as _testCreateLogDemuxer,Yt as _testCreateSentinelFilter,Bt as _testDaytonaStateToEvolveState,jt as _testFollowManagedSessionLogs,Ft as _testImageMap,Ot as _testImageRegistryHost,Rt as _testMapNetworkPolicy,Vt as _testReadCommandStreams,Ht as _testSettledStreams,Kt as _testStripEndOfOutputSentinel,Ut as _testToSandboxInfo,Gt as _testWithEndOfOutputSentinel,Lt as _testWithInBoxTimeout,_t as _testWrapCommand,Et as createDaytonaProvider};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evolvingmachines/daytona",
-  "version": "0.0.52-project-sable.20260730.c2cb2d2",
+  "version": "0.0.52-project-sable.20260810.ca7ed91",
   "keywords": [
     "ai",
     "agents",
@@ -33,10 +33,10 @@
     "build": "tsup --minify",
     "dev": "tsup --watch",
     "type-check": "tsc --noEmit",
-    "test:unit": "tsx tests/unit/daytona-commands.test.ts && tsx tests/unit/daytona-provider.test.ts && tsx tests/unit/daytona-managed.test.ts && tsx tests/unit/daytona-list-pagination.test.ts"
+    "test:unit": "tsx tests/unit/daytona-commands.test.ts && tsx tests/unit/daytona-provider.test.ts && tsx tests/unit/daytona-managed.test.ts && tsx tests/unit/daytona-list-pagination.test.ts && tsx tests/unit/daytona-image-version.test.ts && tsx tests/unit/daytona-files-read.test.ts"
   },
   "dependencies": {
-    "@daytonaio/sdk": "^0.134.0"
+    "@daytonaio/sdk": "^0.203.0"
   },
   "devDependencies": {
     "@types/node": "^22.15.18",