@molecule/api-code-sandbox-flyio 1.0.18 → 1.2.0

package/dist/provider.js

@@ -11,7 +11,7 @@ import { gzipSync } from 'node:zlib';
 import { getLogger } from '@molecule/api-bond';
 import { t } from '@molecule/api-i18n';
 import { FlyApiClient, FlyApiError, normalizeApiUrl } from './api.js';
-import { buildEgressProbeCommand, DEFAULT_EGRESS_POLICY_NAME, DEFAULT_EGRESS_PROBE_TARGETS, extractPolicyId, parseEgressAllowedPorts, parseEgressProbeTargets, verdictForProbeExit, } from './egress.js';
+import { buildEgressProbeCommand, DEFAULT_EGRESS_POLICY_NAME, DEFAULT_EGRESS_PROBE_TARGETS, describePublicReach, extractPolicyId, extractPolicyPorts, parseEgressAllowedPorts, parseEgressProbeTargets, verdictForProbeExit, } from './egress.js';
 import { execCommand, toExecResult } from './exec.js';
 import { assertPrivateRoutesForEnv, decodePrivateRoutes, DEFAULT_PRIVATE_IP_TYPE, encodePrivateRoutes, flycastHost, mergeEgressPorts, parsePrivateServices, PRIVATE_ROUTES_METADATA_SUFFIX, } from './flycast.js';
 import { appNameForProject, mapMachineState, parseSandboxId, toSandboxId } from './ids.js';
@@ -41,6 +41,38 @@ const DEFAULT_VOLUME_GB = 10;
 const LIST_PAGE_SIZE = 200;
 /** Hard cap on pages fetched while listing, so a bad cursor cannot loop forever. */
 const LIST_MAX_PAGES = 50;
+/**
+ * Hard cap on how many per-project apps `find()` will walk in one sweep.
+ *
+ * Requests are paced account-wide (~4.5/s), so enumerating N apps costs N
+ * round-trips of wall clock. Past this the sweep is refused OUTRIGHT rather than
+ * truncated, because `find()`'s whole contract is that a short answer is never
+ * mistaken for an empty one. Raise `FLY_FIND_MAX_APPS` deliberately.
+ */
+const FIND_MAX_APPS = (() => {
+    const configured = Number(process.env.FLY_FIND_MAX_APPS);
+    return Number.isFinite(configured) && configured > 0 ? configured : 500;
+})();
+/**
+ * When a Machine was FIRST started, from its event log.
+ *
+ * Fly has no `started_at` field; the events array (newest first) is the only
+ * record, and its absence is the meaningful case — a Machine created but never
+ * started is not "stopped", it is wreckage from an interrupted create that
+ * still holds its volume.
+ *
+ * @param machine - The Machine as Fly reported it.
+ * @returns ISO 8601 timestamp of the earliest `start` event, or `null` if it has
+ *   never started (or Fly sent no events).
+ */
+const firstStartedAt = (machine) => {
+    const starts = (machine.events ?? [])
+        .filter((event) => event.type === 'start' && typeof event.timestamp === 'number')
+        .map((event) => event.timestamp);
+    if (!starts.length)
+        return null;
+    return new Date(Math.min(...starts)).toISOString();
+};
 /**
  * Chunk size for base64-encoded `writeFile` payloads. The binding limit is NOT
  * the OS `MAX_ARG_STRLEN` (128 KB) but Fly's exec API, which silently rejects a
@@ -204,6 +236,16 @@ class FlyioSandboxProvider {
             return this.config.appPerProject;
         return process.env.FLY_SANDBOX_APP_PER_PROJECT !== 'false';
     }
+    /**
+     * The per-project Fly app-name prefix. One resolution shared by app NAMING
+     * (`resolveApp`) and app DISCOVERY (`find`), so a sweep can never look for a
+     * prefix creation does not use.
+     *
+     * @returns The configured prefix.
+     */
+    appPrefix() {
+        return this.config.appPrefix ?? process.env.FLY_SANDBOX_APP_PREFIX ?? DEFAULT_APP_PREFIX;
+    }
     /**
      * Resolves the Fly app a project's Machine belongs to.
      *
@@ -218,7 +260,7 @@ class FlyioSandboxProvider {
      */
     resolveApp(projectId) {
         if (this.appPerProject()) {
-            return appNameForProject(this.config.appPrefix ?? process.env.FLY_SANDBOX_APP_PREFIX ?? DEFAULT_APP_PREFIX, projectId);
+            return appNameForProject(this.appPrefix(), projectId);
         }
         const shared = this.config.appName ?? process.env.FLY_SANDBOX_APP;
         if (process.env.NODE_ENV === 'production') {
@@ -632,7 +674,74 @@ class FlyioSandboxProvider {
             rules: [{ action: 'allow', direction: 'egress', ports }],
         };
         await this.client.request(`/apps/${app}/network_policies`, { method: 'POST', body: policy });
-        logger.info('Applied Fly egress network policy', { app, name, ports, updated: Boolean(id) });
+        logger.info('Applied Fly egress network policy', {
+            app,
+            name,
+            ports,
+            updated: Boolean(id),
+            // A Fly policy has no destination field (measured — see the egress module
+            // description), so every port here is open to every host on the internet.
+            // Logged with the apply so the residual appears where the decision is
+            // recorded, not only in a document.
+            publicReach: describePublicReach(ports),
+        });
+    }
+    /**
+     * Re-applies this provider's egress policy to an app that ALREADY exists.
+     *
+     * `ensureApp()` applies the policy on the path to creating a Machine, so a
+     * change to the configured ports reaches an existing app only when something
+     * deploys into it again. Until then Fly still holds the older, wider policy —
+     * and Fly applies whatever it holds at Machine BOOT, so a host migration or a
+     * crash-restart brings that app back up under the policy the operator thought
+     * they had replaced. That window is what this closes: a consumer that knows
+     * which apps it created (from its own records — never by enumerating a
+     * provider that cannot be enumerated) can walk them at startup and put the
+     * current policy in place before any of them next boots.
+     *
+     * Idempotent, and it updates the policy this provider owns in place rather
+     * than stacking a second one.
+     * @param app - The Fly app name.
+     * @returns The ports now allowed, or `undefined` when no policy is configured
+     *   at all — in which case nothing was written, because turning "no policy"
+     *   into one that Fly then uses to drop everything else is not something to
+     *   infer from a reconciliation sweep.
+     * @throws {Error} When the policy cannot be applied. The caller decides what a
+     *   failed reconcile means; this never reports success for a write that did
+     *   not happen.
+     */
+    async reconcileEgressPolicy(app) {
+        const ports = this.egressAllowedPorts();
+        if (!ports)
+            return undefined;
+        await this.applyEgressPolicy(app);
+        return ports;
+    }
+    /**
+     * Reads back the egress ports the policy Fly holds for an app allows.
+     *
+     * Best-effort by design: this feeds a DRIFT check, and a readback that failed
+     * proves nothing about the policy — treating "I could not look" as "there is
+     * no drift" is the same conflation the verdict mapping refuses, so the caller
+     * gets `undefined` and reports on the observation alone.
+     * @param app - The Fly app name.
+     * @returns The allowed ports, or `undefined` when nothing could be read.
+     */
+    async readAppliedPolicyPorts(app) {
+        const name = this.config.egressPolicyName ?? DEFAULT_EGRESS_POLICY_NAME;
+        try {
+            const listed = await this.client.request(`/apps/${app}/network_policies`, {
+                nullOn: [404],
+            });
+            return extractPolicyPorts(listed, name);
+        }
+        catch (error) {
+            logger.warn('Could not read the Fly egress policy back — reporting on the probe alone', {
+                app,
+                error,
+            });
+            return undefined;
+        }
     }
     /**
      * Requests a shared Anycast IPv4 for the app so `<app>.fly.dev` serves traffic.
@@ -765,8 +874,11 @@ class FlyioSandboxProvider {
         }
         // Also resolved BEFORE anything is provisioned: a sandbox told to dial a
         // `.flycast` host nobody declared would boot healthy and then fail to
-        // connect inside the user's own application.
-        assertPrivateRoutesForEnv(config.env, this.privateServices());
+        // connect inside the user's own application. Env the caller delivers itself
+        // is checked too — the host is unroutable however the value arrives, and
+        // that env is exactly where a control plane puts the values it refuses to
+        // leave in a Machine config.
+        assertPrivateRoutesForEnv({ ...config.env, ...config.selfDeliveredEnv }, this.privateServices());
         const app = this.resolveApp(config.projectId);
         const privateRoutes = await this.ensureApp(app);
         // Clear any stale Machine from a prior failed/partial create before
@@ -809,10 +921,19 @@ class FlyioSandboxProvider {
             },
             // `no` matches the Docker provider: a sandbox whose main process exits
             // stays stopped for the caller to inspect, rather than silently looping.
-            // Fly's default when unset is `on-failure`.
-            restart: { policy: 'no' },
+            // Fly's default when unset is `on-failure`. A caller running something
+            // long-lived overrides it (`config.restartPolicy`).
+            restart: { policy: config.restartPolicy ?? 'no' },
             auto_destroy: false,
         };
+        // The caller's own main process, instead of the image's entrypoint/cmd.
+        // Fly's `init.exec` overrides BOTH ("run this instead of the entrypoint and
+        // command in your Docker container definition"), which is what a caller
+        // asking for a specific pid 1 means. Without it a Machine that Fly restarts
+        // — host migration, `fly machine restart`, an OOM kill — comes back running
+        // the image's idle command and serving nothing.
+        if (config.command?.length)
+            machineConfig.init = { exec: [...config.command] };
         if (config.volumeName) {
             metadata[`${this.metadataPrefix}.volumeName`] = config.volumeName;
             const sizeGB = config.resources?.diskMB
@@ -822,9 +943,7 @@ class FlyioSandboxProvider {
             // The caller may scope the volume to a subtree (e.g. /workspace/<appDir>)
             // so regenerable tooling (node_modules) stays on the fast image-backed
             // rootfs and only durable state pays the volume's small-file IO cost.
-            machineConfig.mounts = [
-                { volume: volumeId, path: config.volumeMountPath ?? WORKSPACE_PATH },
-            ];
+            machineConfig.mounts = [{ volume: volumeId, path: config.volumeMountPath ?? WORKSPACE_PATH }];
         }
         const service = this.previewService();
         if (service)
@@ -934,6 +1053,146 @@ class FlyioSandboxProvider {
         }
         return sandboxes;
     }
+    /**
+     * Find managed sandboxes by what the caller labelled them.
+     *
+     * The reconciliation counterpart to `list()`: a control plane that restarted
+     * asks this which of its recorded sandboxes are still alive, and which live
+     * sandboxes no record names. molecule.dev's production sweep is the reason it
+     * exists — with no `find()` the sweep returned at its capability check, so a
+     * Machine that died stayed recorded as `live` and the edge kept routing to it,
+     * while a Machine from a crashed deploy kept running and billing with nothing
+     * left to name it.
+     *
+     * **Enumeration is by APP, not by the org-wide Machines endpoint.** In
+     * per-project mode each project owns a whole Fly app, so the complete set is
+     * "every app whose name starts with this provider's prefix, and every Machine
+     * in each" — which is exactly answerable. `GET /orgs/{org}/machines` (what
+     * `list()` uses) pages with an advisory limit and a cursor Fly may still be
+     * handing out at the page cap, and a TRUNCATED answer here is worse than no
+     * answer: the caller reads a missing Machine as "gone" and stops routing to a
+     * live one.
+     *
+     * Which is the whole contract of this method — **it throws rather than
+     * returning a short list.** Every failure mode below (no app listing, an
+     * incomplete app listing, more apps than the bound, a machine listing that
+     * errors) is "I could not enumerate", and a recovery loop must never read that
+     * as "there is nothing there".
+     *
+     * `ports` is deliberately always empty: Fly routes to a Machine through its
+     * proxy by HOSTNAME with TLS at the edge, not by a `host:port` forward the
+     * control plane can dial. `getPreviewUrl()` is the address; a `{ host, port }`
+     * pair here would be dialled as plain http on 443.
+     *
+     * @param query - Narrowing by label, status and project. All conditions AND.
+     * @returns A descriptor per matching sandbox.
+     * @throws {Error} When the provider cannot enumerate completely.
+     */
+    async find(query) {
+        const managedKey = `${this.metadataPrefix}.managed`;
+        const projectIdKey = `${this.metadataPrefix}.projectId`;
+        const volumeNameKey = `${this.metadataPrefix}.volumeName`;
+        const templateIdKey = `${this.metadataPrefix}.templateId`;
+        const apps = await this.appsToEnumerate();
+        const descriptors = [];
+        for (const app of apps) {
+            let machines;
+            try {
+                machines = await this.client.request(`/apps/${app}/machines`, {
+                    // A 404 is the app itself being gone — a real absence (it was deleted
+                    // between the app listing and this call), not a failed query.
+                    nullOn: [404],
+                });
+            }
+            catch (error) {
+                throw new Error(t('codeSandbox.flyio.error.findFailed', { app }, {
+                    defaultValue: `Cannot enumerate Fly sandboxes: listing Machines in app "${app}" failed. ` +
+                        'Refusing to report a partial result — a caller reconciling against it would ' +
+                        'treat every unseen sandbox as gone.',
+                }), { cause: error });
+            }
+            for (const machine of machines ?? []) {
+                const metadata = machine.config?.metadata ?? {};
+                if (metadata[managedKey] !== 'true')
+                    continue;
+                const status = mapMachineState(machine.state ?? 'created');
+                const projectId = metadata[projectIdKey] ?? null;
+                if (query?.projectId && projectId !== query.projectId)
+                    continue;
+                if (query?.statuses?.length && !query.statuses.includes(status))
+                    continue;
+                if (query?.labels) {
+                    let matches = true;
+                    for (const [key, value] of Object.entries(query.labels)) {
+                        if (metadata[key] !== value) {
+                            matches = false;
+                            break;
+                        }
+                    }
+                    if (!matches)
+                        continue;
+                }
+                descriptors.push({
+                    id: toSandboxId(app, machine.id),
+                    projectId,
+                    status,
+                    // The caller's own labels are in this map verbatim — `create()` merges
+                    // them alongside the provider's `<prefix>.*` keys.
+                    labels: { ...metadata },
+                    createdAt: machine.created_at ?? null,
+                    startedAt: firstStartedAt(machine),
+                    templateRef: metadata[templateIdKey] ?? machine.config?.image ?? null,
+                    volumeName: metadata[volumeNameKey] ?? null,
+                    ports: [],
+                });
+            }
+        }
+        return descriptors;
+    }
+    /**
+     * The apps `find()` must look inside — one per project in per-project mode,
+     * the single configured app otherwise.
+     *
+     * Filtering the org's apps by this provider's own prefix is what keeps the
+     * sweep off apps it does not own (the control-plane API, the databases, the
+     * edge proxy), without needing a permission the token may not have.
+     *
+     * @returns Every app name to enumerate.
+     * @throws {Error} When the org's apps cannot be listed completely.
+     */
+    async appsToEnumerate() {
+        if (!this.appPerProject())
+            return [this.resolveApp('unused')];
+        const org = this.orgSlug();
+        let listing;
+        try {
+            listing = await this.client.request(`/apps?org_slug=${encodeURIComponent(org)}`, {});
+        }
+        catch (error) {
+            throw new Error(t('codeSandbox.flyio.error.appListFailed', { org }, {
+                defaultValue: `Cannot enumerate Fly sandboxes: listing the apps of org "${org}" failed. ` +
+                    'Refusing to report a partial result.',
+            }), { cause: error });
+        }
+        const apps = listing?.apps ?? [];
+        const total = listing?.total_apps;
+        if (typeof total === 'number' && apps.length < total) {
+            throw new Error(t('codeSandbox.flyio.error.appListTruncated', { org, returned: String(apps.length), total: String(total) }, {
+                defaultValue: `Fly returned ${apps.length} of ${total} apps for org "${org}" — this listing is ` +
+                    'TRUNCATED, so some sandboxes would be missing from the result.',
+            }));
+        }
+        const prefix = `${this.appPrefix()}-`;
+        const owned = apps.map((app) => app.name).filter((name) => name?.startsWith(prefix));
+        if (owned.length > FIND_MAX_APPS) {
+            throw new Error(t('codeSandbox.flyio.error.findTooManyApps', { count: String(owned.length), max: String(FIND_MAX_APPS) }, {
+                defaultValue: `Refusing to enumerate ${owned.length} Fly sandbox apps (cap ${FIND_MAX_APPS}): ` +
+                    'requests are paced account-wide, so this sweep would take longer than the caller ' +
+                    'can wait. Raise FLY_FIND_MAX_APPS deliberately rather than reading a partial sweep.',
+            }));
+        }
+        return owned;
+    }
     /**
      * Destroys a sandbox.
      *
@@ -1204,7 +1463,17 @@ class FlyioSandboxProvider {
             await this.waitForStarted(app, machineId);
             const seconds = Math.min(MAX_WAIT_SECONDS, Math.max(1, Math.ceil(timeoutMs / 1000) + PROBE_EXEC_HEADROOM_SECONDS));
             const result = toExecResult(await this.rawExec(app, machineId)(['sh', '-c', buildEgressProbeCommand(targets, timeoutMs)], seconds));
-            return verdictForProbeExit(result.exitCode, { app, targets, policyPorts });
+            // Read the policy back from Fly rather than trusting the write: the probe
+            // can only speak for the ports it attempted, so a policy widened outside
+            // this provider is invisible to it. This is the observation that catches
+            // that, and it happens before the throwaway app is destroyed.
+            const appliedPolicyPorts = await this.readAppliedPolicyPorts(app);
+            return verdictForProbeExit(result.exitCode, {
+                app,
+                targets,
+                policyPorts,
+                appliedPolicyPorts,
+            });
         }
         catch (error) {
             // A probe that could not RUN proves nothing. Reporting `filtered` here is

package/dist/storage.d.ts

@@ -24,6 +24,14 @@
  * (https://www.tigrisdata.com/docs/api/s3/): PutObject, GetObject, HeadObject,
  * ListObjectsV2, DeleteObject and DeleteObjects.
  *
+ * Runs behind an outbound proxy when `HTTPS_PROXY` is set: the AWS SDK v3 builds
+ * its own agent and reads no proxy variable, so the client is given a
+ * CONNECT-capable one through its `requestHandler` hook
+ * (`@molecule/api-proxy-agent`, resolved against the configured endpoint so a
+ * store listed in `NO_PROXY` keeps connecting directly). Note this covers only
+ * the control plane's calls — the sandbox moves the tar bytes itself over the
+ * presigned URLs, through whatever egress path the sandbox has.
+ *
  * @module
  */
 import type { FlyioConfig } from './types.js';

package/dist/storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAYH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,+BAA+B,CAAA;AAEnE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,SAAS,CAAA;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAAmB,CAAA;AAE1D,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAA;IACX,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,sFAAsF;IACtF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAC7C,4FAA4F;IAC5F,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC/C,+FAA+F;IAC/F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5C,iCAAiC;IACjC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,qEAAqE;IACrE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,yDAAyD;IACzD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,2DAA2D;IAC3D,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACnE;AAED,kEAAkE;AAClE,UAAU,eAAe;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,cAAc,EAAE,OAAO,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;CACf;AAmBD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAqClF;AAmBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CA6H3E"}
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAcH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAE7C,4DAA4D;AAC5D,eAAO,MAAM,uBAAuB,+BAA+B,CAAA;AAEnE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,SAAS,CAAA;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,QAAmB,CAAA;AAE1D,+CAA+C;AAC/C,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAA;IACX,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,sFAAsF;IACtF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,qFAAqF;IACrF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAA;IAC7C,4FAA4F;IAC5F,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAA;IAC/C,+FAA+F;IAC/F,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IAC5C,iCAAiC;IACjC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,qEAAqE;IACrE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,yDAAyD;IACzD,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,2DAA2D;IAC3D,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACnE;AAED,kEAAkE;AAClE,UAAU,eAAe;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAA;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAA;IAChC,cAAc,EAAE,OAAO,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;CACf;AAmBD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAqClF;AAmBD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,IAAI,CAsI3E"}

package/dist/storage.js

@@ -24,10 +24,19 @@
  * (https://www.tigrisdata.com/docs/api/s3/): PutObject, GetObject, HeadObject,
  * ListObjectsV2, DeleteObject and DeleteObjects.
  *
+ * Runs behind an outbound proxy when `HTTPS_PROXY` is set: the AWS SDK v3 builds
+ * its own agent and reads no proxy variable, so the client is given a
+ * CONNECT-capable one through its `requestHandler` hook
+ * (`@molecule/api-proxy-agent`, resolved against the configured endpoint so a
+ * store listed in `NO_PROXY` keeps connecting directly). Note this covers only
+ * the control plane's calls — the sandbox moves the tar bytes itself over the
+ * presigned URLs, through whatever egress path the sandbox has.
+ *
  * @module
  */
 import { DeleteObjectsCommand, GetObjectCommand, HeadObjectCommand, ListObjectsV2Command, PutObjectCommand, S3Client, } from '@aws-sdk/client-s3';
 import { getSignedUrl } from '@aws-sdk/s3-request-presigner';
+import { getProxyAgents } from '@molecule/api-proxy-agent';
 /** Default key prefix for every object this bond writes. */
 export const DEFAULT_TEMPLATE_PREFIX = 'molecule-sandbox-templates';
 /**
@@ -131,9 +140,17 @@ export function createTemplateStore(config) {
     const settings = resolveTemplateStorage(config);
     if (!settings)
         return null;
+    // The AWS SDK v3 builds its own `https.Agent` and reads no proxy variable, so
+    // on a host whose only egress path is a proxy every template read/write would
+    // fail with a bare connection error. `requestHandler` takes NodeHttpHandler
+    // OPTIONS, so the agent goes in with no `@smithy/*` dependency. Resolved
+    // against the endpoint actually in use, so an internal store that NO_PROXY
+    // exempts keeps connecting directly.
+    const proxy = getProxyAgents(settings.endpoint || `https://s3.${settings.region}.amazonaws.com`);
     const client = new S3Client({
         region: settings.region,
         ...(settings.endpoint ? { endpoint: settings.endpoint } : {}),
+        ...(proxy ? { requestHandler: proxy } : {}),
         forcePathStyle: settings.forcePathStyle,
         credentials: {
             accessKeyId: settings.accessKeyId,

package/dist/types.d.ts

@@ -104,10 +104,13 @@ export interface FlyioConfig {
      */
     publicService?: boolean;
     /**
-     * Fly Proxy idle behaviour for the preview service. `suspend` (the default)
-     * is the scale-to-zero mapping this bond exists for: the proxy suspends an
-     * idle Machine and resumes it from its memory snapshot on the next request.
-     * `stop` is a full stop (cold boot on wake); `off` never idles the Machine.
+     * Fly Proxy idle behaviour for the preview service. Defaults to `'off'` —
+     * never idle the Machine — because the autostop timer counts the PROXY
+     * service's idle time, not the workload's, so a sandbox with nobody looking at
+     * its preview is suspended out from under a build that is still running.
+     * `suspend` is the scale-to-zero mapping (resume from a memory snapshot on the
+     * next request) and `stop` is a full stop with a cold boot on wake; opt into
+     * either deliberately.
      */
     autostop?: 'off' | 'stop' | 'suspend';
     /**
@@ -403,6 +406,13 @@ export interface FlyNetworkPolicyPort {
  * One rule in a Fly network policy. `allow` is the only documented action:
  * "Once you create a rule for a given direction, the default for that direction
  * becomes drop."
+ *
+ * There is no destination field, and that is measured rather than assumed
+ * (2026-08-16, live API): `ipv6_cidrs`, `ipv4_cidrs`, `cidrs`, `destinations`,
+ * `apps`, `app`, `to` and `dst` were each POSTed on a rule and each came back
+ * absent — the stored rule is `{action, direction, ports}` and nothing more. An
+ * `allow tcp/5432` rule therefore permits the Machine to reach port 5432 on
+ * every host on the internet.
  */
 export interface FlyNetworkPolicyRule {
     /** Only `allow` is supported by Fly. */
@@ -413,8 +423,16 @@ export interface FlyNetworkPolicyRule {
     ports: FlyNetworkPolicyPort[];
 }
 /**
- * Which Machines in the app a policy applies to. Documented criteria combine
- * with AND, so this provider uses `{ all: true }` alone.
+ * Which Machines in the app a policy applies to — the SOURCE side only. There is
+ * no destination selector: an `apps` array is the one candidate the API answers
+ * about, and it answers `400 {"error":"apps array not currently supported in
+ * selectors"}` (measured 2026-08-16); every other candidate field is silently
+ * dropped. Documented criteria combine with AND, so this provider uses
+ * `{ all: true }` alone.
+ *
+ * The API's LIST response returns this object under the key `netpolSelector`
+ * while accepting it as `selector` on write — which is why nothing here reads it
+ * back by name.
  */
 export interface FlyNetworkPolicySelector {
     /** Match every Machine in the app. */
@@ -457,6 +475,34 @@ export interface FlyMachine {
     region?: string;
     private_ip?: string;
     config?: FlyMachineConfig;
+    /** RFC 3339 creation time, as Fly reports it. */
+    created_at?: string;
+    /**
+     * Lifecycle events, newest first. The ONLY place Fly records when a Machine
+     * was first started — there is no `started_at` field — which is what
+     * distinguishes a stopped Machine from one that was created and never ran.
+     */
+    events?: FlyMachineEvent[];
+}
+/** One entry of {@link FlyMachine.events}. */
+export interface FlyMachineEvent {
+    /** `start`, `launch`, `exit`, … */
+    type?: string;
+    status?: string;
+    /** Epoch milliseconds. */
+    timestamp?: number;
+}
+/** An app as returned by `GET /v1/apps?org_slug=…` (the fields this provider reads). */
+export interface FlyApp {
+    id?: string;
+    name: string;
+    machine_count?: number;
+}
+/** Response body of `GET /v1/apps?org_slug=…`. */
+export interface FlyAppList {
+    /** Total apps in the org, which the returned page may not cover. */
+    total_apps?: number;
+    apps?: FlyApp[];
 }
 /** A Machine as returned by the org-wide list endpoint (`GET /orgs/{org}/machines`). */
 export interface FlyOrgMachine extends FlyMachine {

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+FAA+F;IAC/F,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAC3C,uGAAuG;IACvG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAA;IACrC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,sHAAsH;IACtH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mHAAmH;IACnH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2HAA2H;IAC3H,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,wIAAwI;IACxI,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+DAA+D;IAC/D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,iEAAiE;IACjE,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;OAGG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,yEAAyE;IACzE,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,qGAAqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uGAAuG;IACvG,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,qGAAqG;IACrG,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qFAAqF;IACrF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,yFAAyF;IACzF,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,yFAAyF;IACzF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,sFAAsF;IACtF,iCAAiC,CAAC,EAAE,MAAM,CAAA;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAA;IACvB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,MAAM,EAAE,OAAO,CAAA;IACf,4EAA4E;IAC5E,SAAS,EAAE,SAAS,GAAG,QAAQ,CAAA;IAC/B,+BAA+B;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,kCAAkC;IAClC,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,sCAAsC;IACtC,QAAQ,EAAE,wBAAwB,CAAA;IAClC,uBAAuB;IACvB,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,UAAU,GACV,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,GACT,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,UAAU,GACV,WAAW,GACX,UAAU,GACV,UAAU,GACV,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kGAAkG;IAClG,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,gBAAgB,CAAA;CAC1B;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAChE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC9B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1F,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACjF;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+FAA+F;IAC/F,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAC3C,uGAAuG;IACvG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAA;IACrC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,sHAAsH;IACtH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mHAAmH;IACnH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2HAA2H;IAC3H,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,wIAAwI;IACxI,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+DAA+D;IAC/D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,iEAAiE;IACjE,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;OAGG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,yEAAyE;IACzE,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,qGAAqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uGAAuG;IACvG,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,qGAAqG;IACrG,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qFAAqF;IACrF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,yFAAyF;IACzF,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,yFAAyF;IACzF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,sFAAsF;IACtF,iCAAiC,CAAC,EAAE,MAAM,CAAA;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAA;IACvB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,MAAM,EAAE,OAAO,CAAA;IACf,4EAA4E;IAC5E,SAAS,EAAE,SAAS,GAAG,QAAQ,CAAA;IAC/B,+BAA+B;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,wBAAwB;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,kCAAkC;IAClC,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,sCAAsC;IACtC,QAAQ,EAAE,wBAAwB,CAAA;IAClC,uBAAuB;IACvB,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,UAAU,GACV,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,GACT,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,UAAU,GACV,WAAW,GACX,UAAU,GACV,UAAU,GACV,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kGAAkG;IAClG,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAA;CAC3B;AAED,8CAA8C;AAC9C,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,MAAM;IACrB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAChE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC9B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1F,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACjF;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-code-sandbox-flyio",
-  "version": "1.0.18",
+  "version": "1.2.0",
   "description": "Fly.io Machines (Firecracker microVM) code sandbox provider",
   "type": "module",
   "main": "dist/index.js",
@@ -31,14 +31,14 @@
   "license": "Apache-2.0",
   "devDependencies": {
     "@molecule/api-bond": "1.0.1",
-    "@molecule/api-code-sandbox": "1.0.3",
+    "@molecule/api-code-sandbox": "1.2.0",
     "@types/node": "26.1.2",
     "typescript": "6.0.3",
     "vitest": "4.1.10"
   },
   "peerDependencies": {
     "@molecule/api-bond": "^1.0.1",
-    "@molecule/api-code-sandbox": "^1.0.1",
+    "@molecule/api-code-sandbox": "^1.2.0",
     "@molecule/api-i18n": "^1.0.1"
   },
   "peerDependenciesMeta": {
@@ -58,6 +58,7 @@
   },
   "dependencies": {
     "@aws-sdk/client-s3": "3.1098.0",
-    "@aws-sdk/s3-request-presigner": "3.1098.0"
+    "@aws-sdk/s3-request-presigner": "3.1098.0",
+    "@molecule/api-proxy-agent": "1.1.0"
   }
 }