@mastra/daytona 0.8.1-alpha.0 → 0.9.0-alpha.1

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # @mastra/daytona
 
+## 0.9.0-alpha.1
+
+### Minor Changes
+
+- Added a `secrets` option to `DaytonaSandbox` for injecting Daytona Secrets into sandboxes. Map environment variable names to Daytona Secret names and the real value is substituted into HTTPS request headers at egress — the raw credential never enters the sandbox. ([#22322](https://github.com/mastra-ai/mastra/pull/22322))
+
+  ```typescript
+  const sandbox = new DaytonaSandbox({
+    secrets: {
+      GITHUB_TOKEN: 'github-token',
+    },
+  });
+  ```
+
+  Closes https://github.com/mastra-ai/mastra/issues/22314
+
+### Patch Changes
+
+- Fixed a leak where every command left its process handle behind, by removing Daytona's own `executeCommand` in favour of the shared one, which releases them. ([#21984](https://github.com/mastra-ai/mastra/pull/21984))
+
+  Command results now match every other provider: `command` holds the full command string, and the separate `args` array is gone.
+
+  ```typescript
+  const result = await sandbox.executeCommand('echo', ['hello']);
+  // before: result.command === 'echo',       result.args === ['hello']
+  // after:  result.command === 'echo hello', result.args === undefined
+  ```
+
+- Starting a sandbox now reports whether it created a fresh sandbox or reconnected to an existing one, so an `onStart` handler can run first-time setup only when it's actually needed: ([#21984](https://github.com/mastra-ai/mastra/pull/21984))
+
+  ```typescript
+  new E2BSandbox({
+    id: 'session-1',
+    onStart: async ({ outcome }) => {
+      if (outcome === 'created') await cloneRepo();
+    },
+  });
+  ```
+
+- Updated dependencies [[`4ff3ee2`](https://github.com/mastra-ai/mastra/commit/4ff3ee2bff7ed07528b4817f8f49639031c72a4d), [`c24754c`](https://github.com/mastra-ai/mastra/commit/c24754c1fb6fe144e5051e536e98c8a18b0214ac), [`45dd6ee`](https://github.com/mastra-ai/mastra/commit/45dd6ee089bd7df0d0c98a10098e483fd388e04a), [`32d3583`](https://github.com/mastra-ai/mastra/commit/32d358332cb8ac2306b83b73cf3536e74dbd435e), [`aca2869`](https://github.com/mastra-ai/mastra/commit/aca2869b2031982f3c4a2f52525c9be7cf123ef8)]:
+  - @mastra/core@1.62.0-alpha.11
+
 ## 0.8.1-alpha.0
 
 ### Patch Changes

package/dist/index.cjs

@@ -708,6 +708,7 @@ var DaytonaSandbox = class DaytonaSandbox extends _mastra_core_workspace.MastraS
 	networkBlockAll;
 	networkAllowList;
 	domainAllowList;
+	secrets;
 	connectionOpts;
 	_constructorOptions;
 	constructor(options = {}) {
@@ -734,6 +735,7 @@ var DaytonaSandbox = class DaytonaSandbox extends _mastra_core_workspace.MastraS
 		this.networkBlockAll = options.networkBlockAll;
 		this.networkAllowList = options.networkAllowList;
 		this.domainAllowList = options.domainAllowList;
+		this.secrets = options.secrets;
 		this.connectionOpts = {
 			...options.apiKey !== void 0 && { apiKey: options.apiKey },
 			...options.apiUrl !== void 0 && { apiUrl: options.apiUrl },
@@ -791,26 +793,35 @@ var DaytonaSandbox = class DaytonaSandbox extends _mastra_core_workspace.MastraS
 		return this.daytona;
 	}
 	/**
-	* Start the Daytona sandbox.
-	* Reconnects to an existing sandbox with the same logical ID if one exists,
-	* otherwise creates a new sandbox instance.
+	* Acquisition primitives (base-orchestrated start): the base derives
+	* `created` structurally from whether an existing sandbox was found, so
+	* reconnecting to one with the same logical ID reports `connected`.
+	* Lookup errors other than not-found propagate deliberately — creating a
+	* duplicate sandbox on a transient/auth error would be worse than failing.
 	*/
-	async start() {
-		if (this._sandbox) return;
+	async find() {
+		if (this._sandbox) return this._sandbox;
 		if (!this._daytona) this._daytona = new _daytonaio_sdk.Daytona(this.connectionOpts);
-		const existing = await this.findExistingSandbox();
-		if (existing) {
-			this._sandbox = existing;
-			this._daytonaSandboxId = existing.id;
-			this._createdAt = existing.createdAt ? new Date(existing.createdAt) : /* @__PURE__ */ new Date();
-			this.logger.debug(`${LOG_PREFIX} Reconnected to existing sandbox ${existing.id} for: ${this.id}`);
-			const expectedPaths = Array.from(this.mounts.entries.keys());
-			this.logger.debug(`${LOG_PREFIX} Running mount reconciliation...`);
-			await this.reconcileMounts(expectedPaths);
-			this.logger.debug(`${LOG_PREFIX} Mount reconciliation complete`);
-			await this.detectWorkingDir();
-			return;
+		return await this.findExistingSandbox() ?? void 0;
+	}
+	async connect(existing) {
+		if (existing === this._sandbox) return;
+		if (existing.state !== _daytonaio_sdk.SandboxState.STARTED) {
+			this.logger.debug(`${LOG_PREFIX} Restarting sandbox ${existing.id} (state: ${existing.state})`);
+			await this.waitForStableStateAndStart(existing);
 		}
+		this._sandbox = existing;
+		this._daytonaSandboxId = existing.id;
+		this._createdAt = existing.createdAt ? new Date(existing.createdAt) : /* @__PURE__ */ new Date();
+		this.logger.debug(`${LOG_PREFIX} Reconnected to existing sandbox ${existing.id} for: ${this.id}`);
+		const expectedPaths = Array.from(this.mounts.entries.keys());
+		this.logger.debug(`${LOG_PREFIX} Running mount reconciliation...`);
+		await this.reconcileMounts(expectedPaths);
+		this.logger.debug(`${LOG_PREFIX} Mount reconciliation complete`);
+		await this.detectWorkingDir();
+	}
+	async create() {
+		if (!this._daytona) this._daytona = new _daytonaio_sdk.Daytona(this.connectionOpts);
 		this.logger.debug(`${LOG_PREFIX} Creating sandbox for: ${this.id}`);
 		const baseParams = compact({
 			language: this.language,
@@ -828,7 +839,8 @@ var DaytonaSandbox = class DaytonaSandbox extends _mastra_core_workspace.MastraS
 			public: this.sandboxPublic,
 			networkBlockAll: this.networkBlockAll,
 			networkAllowList: this.networkAllowList,
-			domainAllowList: this.domainAllowList
+			domainAllowList: this.domainAllowList,
+			secrets: this.secrets
 		});
 		if (this.resources && !this.image) this.logger.warn(`${LOG_PREFIX} 'resources' option requires 'image' to take effect — falling back to snapshot-based creation without custom resources`);
 		const createParams = this.image && !this.snapshotId ? compact({
@@ -933,18 +945,6 @@ var DaytonaSandbox = class DaytonaSandbox extends _mastra_core_workspace.MastraS
 		return parts.join(" ");
 	}
 	/**
-	* Execute a command in the sandbox and return the result.
-	*/
-	async executeCommand(command, args = [], options = {}) {
-		await this.ensureRunning();
-		const fullCommand = args.length > 0 ? `${command} ${args.map(shellQuote).join(" ")}` : command;
-		return {
-			...await (await this.processes.spawn(fullCommand, options)).wait(),
-			command,
-			args
-		};
-	}
-	/**
 	* Bulk-write files into the sandbox filesystem via the SDK's native upload.
 	*/
 	async writeFiles(files) {
@@ -1315,10 +1315,6 @@ var DaytonaSandbox = class DaytonaSandbox extends _mastra_core_workspace.MastraS
 			} catch {}
 			return null;
 		}
-		if (state !== _daytonaio_sdk.SandboxState.STARTED) {
-			this.logger.debug(`${LOG_PREFIX} Restarting sandbox ${sandbox.id} (state: ${state})`);
-			await this.waitForStableStateAndStart(sandbox);
-		}
 		return sandbox;
 	}
 	/**