@molecule/api-code-sandbox-flyio 1.0.2 → 1.0.4

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAUV,eAAe,EAEhB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAAE,YAAY,EAAgC,MAAM,UAAU,CAAA;AAsBrE,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAEhG,OAAO,KAAK,EAEV,WAAW,EAUZ,MAAM,YAAY,CAAA;AAqoDnB;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,CAAC,EAAE,YAAY,EACrB,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,GACzB,eAAe,CAEjB"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAKH,OAAO,KAAK,EAUV,eAAe,EAEhB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAAE,YAAY,EAAgC,MAAM,UAAU,CAAA;AAsBrE,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAEhG,OAAO,KAAK,EAEV,WAAW,EAUZ,MAAM,YAAY,CAAA;AAipDnB;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,CAAC,EAAE,YAAY,EACrB,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,GACzB,eAAe,CAEjB"}

package/dist/provider.js

@@ -6,6 +6,7 @@
  *
  * @module
  */
+import { createHash } from 'node:crypto';
 import { getLogger } from '@molecule/api-bond';
 import { t } from '@molecule/api-i18n';
 import { FlyApiClient, FlyApiError, normalizeApiUrl } from './api.js';
@@ -370,12 +371,17 @@ class FlyioSandboxProvider {
     async allocatePrivateAddress(service, network) {
         let assignment;
         try {
+            // NO org_slug here. The ip_assignments endpoint derives the org from the
+            // target app and REJECTS an explicit org_slug with 400 "organization not
+            // found" (verified against api.machines.dev for a personal org: the same
+            // slug that app creation REQUIRES is refused here; omitting it returns 200
+            // and allocates the address). app creation still sends org_slug — the two
+            // endpoints genuinely differ.
             assignment = await this.client.request(`/apps/${service.app}/ip_assignments`, {
                 method: 'POST',
                 body: {
                     type: this.config.privateIpAssignmentType ?? DEFAULT_PRIVATE_IP_TYPE,
                     network,
-                    org_slug: this.orgSlug(),
                 },
             });
         }
@@ -550,16 +556,24 @@ class FlyioSandboxProvider {
         }
     }
     /**
-     * Sanitizes a caller-supplied volume name into a conservative form.
+     * Sanitizes a caller-supplied volume name into a valid Fly volume name.
      *
-     * Fly does NOT document the character rules for volume names, so this reduces
-     * to `[A-Za-z0-9_]`, which is the form every Fly example uses. Callers pass
-     * names like `mol-<uuid>`; the hyphens become underscores.
+     * Fly requires `[a-z0-9_]` (lowercase only) and at most 30 characters — it
+     * rejects anything else with `400 "name only allows lowercase alphanumeric
+     * characters and underscores with at most 30 characters"`. Callers pass names
+     * like `mol-<uuid>` (40 chars, hyphens): lowercase, map every other character
+     * to `_`, and when the result is too long, keep a readable prefix plus a
+     * deterministic hash suffix so the name stays stable (`findVolume` re-derives
+     * the same name on the idempotent path) and unique.
      * @param name - The caller's volume name.
-     * @returns A sanitized Fly volume name.
+     * @returns A sanitized Fly volume name, `[a-z0-9_]` and <= 30 chars.
      */
     volumeName(name) {
-        return name.replace(/[^A-Za-z0-9_]/g, '_');
+        const sanitized = name.toLowerCase().replace(/[^a-z0-9_]/g, '_');
+        if (sanitized.length <= 30)
+            return sanitized;
+        const hash = createHash('sha256').update(name).digest('hex').slice(0, 12);
+        return `${sanitized.slice(0, 17)}_${hash}`;
     }
     /**
      * Idempotently ensures a volume exists in the app and returns its id.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-code-sandbox-flyio",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Fly.io Machines (Firecracker microVM) code sandbox provider",
   "type": "module",
   "main": "dist/index.js",