@molecule/api-code-sandbox-flyio 1.2.9 → 1.3.0

package/README.md

@@ -3,15 +3,11 @@ AUTO-GENERATED — DO NOT EDIT THIS FILE.
 Generated by `mlcl sync-docs` from the package's src/index.ts JSDoc + mlcl/registry.json.
 Edits here are overwritten on the next commit (molecule's pre-commit hook regenerates).
 To change this document, edit the module-level JSDoc in src/index.ts.
-Generated: 2026-10-16T16:08:45.819Z
+Generated: 2026-10-17T03:41:21.100Z
 -->
 
 # @molecule/api-code-sandbox-flyio
 
-> **Auto-generated, AI-first package reference** for the [molecule.dev](https://molecule.dev) ecosystem.
-> It is written to be read by coding agents as much as by people, and is generated from this
-> package's source — edit `src/index.ts` JSDoc, not this file.
-
 Fly.io Machines code-sandbox provider for molecule.dev.
 
 Runs each sandbox as a Fly Machine — a Firecracker microVM — managed over the
@@ -20,6 +16,10 @@ SCALE-TO-ZERO: `sleep()` maps to Fly's `suspend`, which snapshots the microVM's
 memory to disk, and a suspended Machine bills for storage only. Waking is a
 resume from that snapshot rather than a cold boot.
 
+> **Auto-generated, AI-first package reference** for the [molecule.dev](https://molecule.dev) ecosystem.
+> It is written to be read by coding agents as much as by people, and is generated from this
+> package's source — edit `src/index.ts` JSDoc, not this file.
+
 ## Quick Start
 
 ```typescript
@@ -384,6 +384,12 @@ interface FlyioConfig {
    * `suspend` is the scale-to-zero mapping (resume from a memory snapshot on the
    * next request) and `stop` is a full stop with a cold boot on wake; opt into
    * either deliberately.
+   *
+   * This is the provider's STEADY-STATE policy, reported as
+   * `SandboxProvider.defaultIdleAction`. A caller can override it for one sandbox
+   * with `SandboxConfig.idleAction` and restore this value afterwards with
+   * `Sandbox.setIdleAction` — which is what a production deploy does so its
+   * destination cannot suspend mid-copy (m103, 2026-10-17).
    */
   autostop?: 'off' | 'stop' | 'suspend'
   /**
@@ -440,12 +446,6 @@ interface FlyioConfig {
    * Falls back to `FLY_SANDBOX_PRIVATE_SERVICES` (`<app>:<port>` pairs).
    *
    * Without this, a project with a database DOES NOT WORK on Fly: per-project
-   * 6PNs are what stop tenants reaching each other, and the same isolation stops
-   * a sandbox reaching the database it is supposed to use. Flycast is the only
-   * mechanism Fly documents that grants ONE directed edge without exposing
-   * anything publicly — see the `flycast.ts` module description.
-   *
-   * The declared PORT is load-bearing twice: it is unioned into
 // … truncated — the full declaration is in node_modules/@molecule/api-code-sandbox-flyio/dist/types.d.ts
 ```
 
@@ -1527,28 +1527,58 @@ function isFailedState(state: FlyMachineState): boolean
 
 **Returns:** `true` for `failed` and `launch_failed`.
 
-#### `isTransientExecPrecondition(error)`
+#### `isTransientExecPrecondition(error, machineState)`
 
-Whether a failed exec is Fly's TRANSIENT precondition — the request reached
-the Machine's exec agent and the connection was dropped before the command
-ran (`412 failed_precondition: exec request failed: EOF`) — rather than the
-Machine being in a state an exec cannot run in.
+Whether a failed exec is Fly's TRANSIENT precondition — one a repeat (after a
+short wait) can clear, rather than a Machine state the exec has to wait out.
 
-The distinction decides what retrying can achieve. A dropped connection is
-worth repeating: the Machine is `started` and its agent recovers in seconds.
-`failed_precondition: machine not running` is NOT — the Machine really is not
-running, and that is what {@link FlyioSandboxProvider.startMachine} waits out
-before the first exec. Repeating the exec there would only burn the caller's
-budget against a condition the wait endpoint already answers.
+Fly answers the exec endpoint with 412 in two different situations, and only
+the BODY and the Machine's own reported state separate them:
+
+1. `failed_precondition: exec request failed: EOF` — the request reached the
+   Machine's exec agent and the connection dropped before the command ran.
+   Always transient: the Machine is `started` and its agent recovers in
+   seconds.
+2. `failed_precondition: machine not running` — transient ONLY while Fly's
+   own Machines API reports the Machine `started`, `starting` or `replacing`
+   (`machineState`). The exec endpoint lags the state Fly reports: a Machine
+   whose config or image was just updated, or that is seconds past boot,
+   reads `started` in `GET /machines/{id}` while its exec endpoint still
+   refuses requests. Against a Machine Fly reports `stopped`/`suspended`/
+   `destroyed` the same body is the REAL precondition — the Machine is not
+   running, and {@link FlyioSandboxProvider.startMachine} is what answers it;
+   repeating the exec would only burn the caller's budget.
 
 ```typescript
-function isTransientExecPrecondition(error: unknown): boolean
+function isTransientExecPrecondition(error: unknown, machineState?: string | null): boolean
 ```
 
 - `error` — The failure an exec attempt raised.
+- `machineState` — The state `GET /machines/{id}` reports for the Machine, or `null`/`undefined` when it could not be read (which classifies case 2 as NOT transient — an unknown state is never assumed recoverable).
 
 **Returns:** `true` when repeating the exec is the right recovery.
 
+#### `isMachineWarmingUp(state)`
+
+Whether a state Fly reports for a Machine means the Machine is up, or on its
+way up — the states in which an exec that was refused for `machine not
+running` is the exec endpoint lagging the state, not the truth.
+
+A deliberate allow-list rather than "anything but stopped/suspended": the
+three states here are the ones a refused exec was observed to recover from,
+and every other state — `stopped`, `suspended`, `destroyed`, `failed`,
+`created`, unreadable — keeps today's immediate throw. Widening it without
+that evidence would turn a real precondition into a retry budget spent
+against a Machine that is not coming up.
+
+```typescript
+function isMachineWarmingUp(state: string | null | undefined): boolean
+```
+
+- `state` — The Machine state from `GET /machines/{id}`, if readable.
+
+**Returns:** `true` when waiting and repeating the exec can clear the refusal.
+
 #### `createProvider(config, client, store)`
 
 Creates a Fly.io Machines sandbox provider.

package/dist/provider.d.ts

@@ -11,22 +11,49 @@ import { FlyApiClient } from './api.js';
 import { type ObjectStore } from './storage.js';
 import type { FlyioConfig } from './types.js';
 /**
- * Whether a failed exec is Fly's TRANSIENT precondition — the request reached
- * the Machine's exec agent and the connection was dropped before the command
- * ran (`412 failed_precondition: exec request failed: EOF`) — rather than the
- * Machine being in a state an exec cannot run in.
+ * Whether a failed exec is Fly's TRANSIENT precondition — one a repeat (after a
+ * short wait) can clear, rather than a Machine state the exec has to wait out.
  *
- * The distinction decides what retrying can achieve. A dropped connection is
- * worth repeating: the Machine is `started` and its agent recovers in seconds.
- * `failed_precondition: machine not running` is NOT — the Machine really is not
- * running, and that is what {@link FlyioSandboxProvider.startMachine} waits out
- * before the first exec. Repeating the exec there would only burn the caller's
- * budget against a condition the wait endpoint already answers.
+ * Fly answers the exec endpoint with 412 in two different situations, and only
+ * the BODY and the Machine's own reported state separate them:
+ *
+ * 1. `failed_precondition: exec request failed: EOF` — the request reached the
+ *    Machine's exec agent and the connection dropped before the command ran.
+ *    Always transient: the Machine is `started` and its agent recovers in
+ *    seconds.
+ * 2. `failed_precondition: machine not running` — transient ONLY while Fly's
+ *    own Machines API reports the Machine `started`, `starting` or `replacing`
+ *    (`machineState`). The exec endpoint lags the state Fly reports: a Machine
+ *    whose config or image was just updated, or that is seconds past boot,
+ *    reads `started` in `GET /machines/{id}` while its exec endpoint still
+ *    refuses requests. Against a Machine Fly reports `stopped`/`suspended`/
+ *    `destroyed` the same body is the REAL precondition — the Machine is not
+ *    running, and {@link FlyioSandboxProvider.startMachine} is what answers it;
+ *    repeating the exec would only burn the caller's budget.
  *
  * @param error - The failure an exec attempt raised.
+ * @param machineState - The state `GET /machines/{id}` reports for the Machine,
+ *   or `null`/`undefined` when it could not be read (which classifies case 2 as
+ *   NOT transient — an unknown state is never assumed recoverable).
  * @returns `true` when repeating the exec is the right recovery.
  */
-export declare function isTransientExecPrecondition(error: unknown): boolean;
+export declare function isTransientExecPrecondition(error: unknown, machineState?: string | null): boolean;
+/**
+ * Whether a state Fly reports for a Machine means the Machine is up, or on its
+ * way up — the states in which an exec that was refused for `machine not
+ * running` is the exec endpoint lagging the state, not the truth.
+ *
+ * A deliberate allow-list rather than "anything but stopped/suspended": the
+ * three states here are the ones a refused exec was observed to recover from,
+ * and every other state — `stopped`, `suspended`, `destroyed`, `failed`,
+ * `created`, unreadable — keeps today's immediate throw. Widening it without
+ * that evidence would turn a real precondition into a retry budget spent
+ * against a Machine that is not coming up.
+ *
+ * @param state - The Machine state from `GET /machines/{id}`, if readable.
+ * @returns `true` when waiting and repeating the exec can clear the refusal.
+ */
+export declare function isMachineWarmingUp(state: string | null | undefined): boolean;
 /**
  * Creates a Fly.io Machines sandbox provider.
  * @param config - Optional Fly configuration: API token/URL, org slug, app

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAWV,eAAe,EAGhB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAAE,YAAY,EAAgC,MAAM,UAAU,CAAA;AAwBrE,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAEhG,OAAO,KAAK,EAIV,WAAW,EAUZ,MAAM,YAAY,CAAA;AAkBnB;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGnE;AA8oFD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,CAAC,EAAE,YAAY,EACrB,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,GACzB,eAAe,CAEjB"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAYV,eAAe,EAGhB,MAAM,4BAA4B,CAAA;AAGnC,OAAO,EAAE,YAAY,EAAgC,MAAM,UAAU,CAAA;AAwBrE,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAA;AAEhG,OAAO,KAAK,EAIV,WAAW,EAUZ,MAAM,YAAY,CAAA;AAkBnB;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAIjG;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE5E;AAkyFD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,CAAC,EAAE,YAAY,EACrB,KAAK,CAAC,EAAE,WAAW,GAAG,IAAI,GACzB,eAAe,CAEjB"}

package/dist/provider.js

@@ -32,25 +32,56 @@ function describeDestroyFailure(step, id, error) {
     return `Fly sandbox destroy failed at the ${step} for ${id} (${status}): ${reason}`;
 }
 /**
- * Whether a failed exec is Fly's TRANSIENT precondition — the request reached
- * the Machine's exec agent and the connection was dropped before the command
- * ran (`412 failed_precondition: exec request failed: EOF`) — rather than the
- * Machine being in a state an exec cannot run in.
+ * Whether a failed exec is Fly's TRANSIENT precondition — one a repeat (after a
+ * short wait) can clear, rather than a Machine state the exec has to wait out.
  *
- * The distinction decides what retrying can achieve. A dropped connection is
- * worth repeating: the Machine is `started` and its agent recovers in seconds.
- * `failed_precondition: machine not running` is NOT — the Machine really is not
- * running, and that is what {@link FlyioSandboxProvider.startMachine} waits out
- * before the first exec. Repeating the exec there would only burn the caller's
- * budget against a condition the wait endpoint already answers.
+ * Fly answers the exec endpoint with 412 in two different situations, and only
+ * the BODY and the Machine's own reported state separate them:
+ *
+ * 1. `failed_precondition: exec request failed: EOF` — the request reached the
+ *    Machine's exec agent and the connection dropped before the command ran.
+ *    Always transient: the Machine is `started` and its agent recovers in
+ *    seconds.
+ * 2. `failed_precondition: machine not running` — transient ONLY while Fly's
+ *    own Machines API reports the Machine `started`, `starting` or `replacing`
+ *    (`machineState`). The exec endpoint lags the state Fly reports: a Machine
+ *    whose config or image was just updated, or that is seconds past boot,
+ *    reads `started` in `GET /machines/{id}` while its exec endpoint still
+ *    refuses requests. Against a Machine Fly reports `stopped`/`suspended`/
+ *    `destroyed` the same body is the REAL precondition — the Machine is not
+ *    running, and {@link FlyioSandboxProvider.startMachine} is what answers it;
+ *    repeating the exec would only burn the caller's budget.
  *
  * @param error - The failure an exec attempt raised.
+ * @param machineState - The state `GET /machines/{id}` reports for the Machine,
+ *   or `null`/`undefined` when it could not be read (which classifies case 2 as
+ *   NOT transient — an unknown state is never assumed recoverable).
  * @returns `true` when repeating the exec is the right recovery.
  */
-export function isTransientExecPrecondition(error) {
+export function isTransientExecPrecondition(error, machineState) {
     if (!(error instanceof FlyApiError) || error.status !== 412)
         return false;
-    return EXEC_BODY_TRANSIENT.test(error.body) && !EXEC_BODY_MACHINE_NOT_RUNNING.test(error.body);
+    if (EXEC_BODY_DROPPED_CONNECTION.test(error.body))
+        return true;
+    return EXEC_BODY_MACHINE_NOT_RUNNING.test(error.body) && isMachineWarmingUp(machineState);
+}
+/**
+ * Whether a state Fly reports for a Machine means the Machine is up, or on its
+ * way up — the states in which an exec that was refused for `machine not
+ * running` is the exec endpoint lagging the state, not the truth.
+ *
+ * A deliberate allow-list rather than "anything but stopped/suspended": the
+ * three states here are the ones a refused exec was observed to recover from,
+ * and every other state — `stopped`, `suspended`, `destroyed`, `failed`,
+ * `created`, unreadable — keeps today's immediate throw. Widening it without
+ * that evidence would turn a real precondition into a retry budget spent
+ * against a Machine that is not coming up.
+ *
+ * @param state - The Machine state from `GET /machines/{id}`, if readable.
+ * @returns `true` when waiting and repeating the exec can clear the refusal.
+ */
+export function isMachineWarmingUp(state) {
+    return state === 'started' || state === 'starting' || state === 'replacing';
 }
 /**
  * Default sandbox image. Fly pulls images itself, so this MUST be a reference
@@ -184,21 +215,25 @@ const MACHINE_CREATE_RETRY_STATUSES = [404, 412];
  * Machine's exec agent died before the command ran: `412 {"error":
  * "failed_precondition: exec request failed: EOF"}`. The Machine is `started`;
  * the agent inside it dropped the request (a Machine seconds past boot, or
- * Fly's own exec burst). The SAME status carries the precondition this provider
- * already handles — `failed_precondition: machine not running` — which is a
- * real state, not a dropped connection, and is reconciled by `startMachine`
- * BEFORE the first exec instead of by repeating it (see {@link
- * isTransientExecPrecondition}).
+ * Fly's own exec burst).
+ */
+const EXEC_BODY_DROPPED_CONNECTION = /exec request failed/i;
+/**
+ * The OTHER 412 the exec endpoint answers — `{"error":"failed_precondition:
+ * machine not running"}`. Whether that is the real precondition or the exec
+ * endpoint lagging a Machine that is up cannot be read off the body, so it is
+ * settled by the state Fly reports for the Machine at that moment
+ * ({@link isMachineWarmingUp}).
  */
-const EXEC_BODY_TRANSIENT = /exec request failed/i;
-/** The real-precondition 412, which retrying an exec cannot fix. */
 const EXEC_BODY_MACHINE_NOT_RUNNING = /machine not running/i;
 /**
- * Attempts for one exec when Fly answers the transient 412 of
- * {@link EXEC_BODY_TRANSIENT}. Four attempts over the three backoffs below is
- * under 12 s of waiting, against the ~75 s each fresh production deploy costs
- * when this is left to a caller: X1 run flash-m85 (2026-10-16) lost three
- * consecutive deploys, and the run, to this one condition.
+ * Attempts for one exec when Fly answers a transient 412 — either body of
+ * {@link isTransientExecPrecondition}. Four attempts over the three backoffs
+ * below is under 12 s of waiting, against the ~75 s each fresh production
+ * deploy costs when this is left to a caller: X1 run flash-m85 (2026-10-16)
+ * lost three consecutive deploys, and the run, to the dropped connection;
+ * flash-m94 (2026-10-16) lost 65 s and a whole redeploy to the same budget not
+ * covering `machine not running` on a Machine Fly reported `started`.
  */
 const EXEC_PRECONDITION_ATTEMPTS = 4;
 /**
@@ -258,6 +293,15 @@ const PROBE_EXEC_HEADROOM_SECONDS = 10;
  */
 class FlyioSandboxProvider {
     name = 'flyio';
+    /**
+     * The idle policy a sandbox gets when its own create does not name one — this
+     * provider's configured `autostop` (`FLY_PRODUCTION_AUTOSTOP` for production
+     * hosting). {@link SandboxConfig.idleAction} overrides it per Machine, and
+     * {@link Sandbox.setIdleAction} puts it back, which is how a deploy keeps its
+     * destination awake through a multi-minute copy and then returns the Machine
+     * to the app's real cost policy.
+     */
+    defaultIdleAction;
     config;
     client;
     metadataPrefix;
@@ -280,6 +324,7 @@ class FlyioSandboxProvider {
      */
     constructor(config = {}, client, store) {
         this.config = config;
+        this.defaultIdleAction = config.autostop ?? 'off';
         this.metadataPrefix = config.metadataPrefix ?? DEFAULT_METADATA_PREFIX;
         if (store !== undefined)
             this.templateStoreCache = store;
@@ -375,10 +420,14 @@ class FlyioSandboxProvider {
      * instead driven by the consumer's own per-tier hibernation loop, which calls
      * `sleep()`/`hibernate()` — the same provider-agnostic mechanism the Docker
      * bond relies on. An operator who wants Fly-native scale-to-zero can still opt
-     * in with `config.autostop: 'suspend'`.
+     * in with `config.autostop: 'suspend'`, and a caller can override it for ONE
+     * Machine with {@link SandboxConfig.idleAction} (a production deploy keeps its
+     * destination `'off'` until the artifact has landed and the app is healthy).
+     * @param action - The idle action for this Machine's service; defaults to the
+     *   provider's configured policy.
      * @returns The service definition, or `undefined`.
      */
-    previewService() {
+    previewService(action = this.defaultIdleAction) {
         if (this.config.publicService === false)
             return undefined;
         return {
@@ -389,7 +438,7 @@ class FlyioSandboxProvider {
                 { port: 443, handlers: ['tls', 'http'] },
             ],
             autostart: true,
-            autostop: this.config.autostop ?? 'off',
+            autostop: action,
             min_machines_running: 0,
         };
     }
@@ -1126,7 +1175,7 @@ class FlyioSandboxProvider {
             // rootfs and only durable state pays the volume's small-file IO cost.
             machineConfig.mounts = [{ volume: volumeId, path: config.volumeMountPath ?? WORKSPACE_PATH }];
         }
-        const service = this.previewService();
+        const service = this.previewService(config.idleAction);
         if (service)
             machineConfig.services = [service];
         const machine = await this.client.request(`/apps/${app}/machines`, {
@@ -1837,6 +1886,34 @@ class FlyioSandboxProvider {
     // ---------------------------------------------------------------------------
     // Sandbox
     // ---------------------------------------------------------------------------
+    /**
+     * Reads the state Fly reports for a Machine, or `null` when it cannot be read.
+     *
+     * Best-effort on purpose: this runs both on the failure path and just before a
+     * retry, and a failed diagnostic read must not replace the failure it is
+     * describing. `null` is meaningful — it never classifies a refusal as
+     * recoverable (see {@link isTransientExecPrecondition}).
+     *
+     * @param app - The Fly app name.
+     * @param machineId - The Fly Machine id.
+     * @returns The Machine's state, or `null` when the read failed or 404'd.
+     */
+    async readMachineState(app, machineId) {
+        try {
+            const machine = await this.client.request(`/apps/${app}/machines/${machineId}`, {
+                nullOn: [404],
+            });
+            return machine?.state ?? null;
+        }
+        catch (error) {
+            logger.debug('Could not read the Machine state while an exec was refused', {
+                app,
+                machineId,
+                error,
+            });
+            return null;
+        }
+    }
     /**
      * Issues one Fly exec call against a Machine.
      *
@@ -1875,28 +1952,38 @@ class FlyioSandboxProvider {
                     return response ?? {};
                 }
                 catch (error) {
-                    if (!isTransientExecPrecondition(error)) {
-                        throw await this.withMachineState(error, app, machineId);
+                    // Which 412 this is cannot be read off the body alone: `machine not
+                    // running` is transient against a Machine Fly reports `started` and the
+                    // real precondition against one it reports `stopped`. So the state is
+                    // read here, once, and the same read decides the classification, the
+                    // wait below, and the state the error finally names.
+                    const state = error instanceof FlyApiError && error.status === 412
+                        ? await this.readMachineState(app, machineId)
+                        : null;
+                    if (!isTransientExecPrecondition(error, state)) {
+                        throw await this.withMachineState(error, app, machineId, state);
                     }
                     if (attempt >= EXEC_PRECONDITION_ATTEMPTS || Date.now() >= deadline) {
-                        logger.warn('Fly kept dropping the exec connection; giving up on this exec', {
+                        logger.warn('Fly kept refusing the exec with a transient precondition', {
                             app,
                             machineId,
                             attempt,
+                            state: state ?? 'unreadable',
                         });
-                        throw await this.withMachineState(error, app, machineId);
+                        throw await this.withMachineState(error, app, machineId, state);
                     }
-                    logger.warn('Fly dropped the exec connection (412 exec request failed); retrying', {
+                    logger.warn('Fly refused the exec with a transient precondition; retrying', {
                         app,
                         machineId,
                         attempt,
                         attempts: EXEC_PRECONDITION_ATTEMPTS,
+                        state: state ?? 'unreadable',
                     });
                     // The Machine is up (that is what makes this 412 the transient one), but
                     // re-read it anyway: `stop`/`suspend` can land between attempts, and
                     // retrying an exec against a Machine that is not running would repeat a
                     // 412 that waiting — not repeating — is what answers.
-                    await this.waitForExecReady(app, machineId);
+                    await this.waitForExecReady(app, machineId, state);
                     await this.client.sleep(execPreconditionBackoffMs(attempt));
                 }
             }
@@ -1908,17 +1995,17 @@ class FlyioSandboxProvider {
      *
      * A wait that does not reach `started` is logged and the exec is retried
      * anyway: the retry is the recovery this path exists for, and turning a
-     * recoverable dropped connection into a start-timeout error would hide the
-     * condition the caller's error message is supposed to name.
+     * recoverable refusal into a start-timeout error would hide the condition the
+     * caller's error message is supposed to name.
      *
      * @param app - The Fly app name.
      * @param machineId - The Fly Machine id.
+     * @param state - The state already read for this Machine, when the caller read
+     *   one (the exec retry does); read again when omitted.
      */
-    async waitForExecReady(app, machineId) {
-        const machine = await this.client
-            .request(`/apps/${app}/machines/${machineId}`, { nullOn: [404] })
-            .catch(() => null);
-        if (machine?.state === 'started')
+    async waitForExecReady(app, machineId, state) {
+        const machineState = state === undefined ? await this.readMachineState(app, machineId) : state;
+        if (machineState === 'started')
             return;
         try {
             await this.waitForStarted(app, machineId);
@@ -1927,7 +2014,7 @@ class FlyioSandboxProvider {
             logger.warn('The Machine did not report started after a refused exec; retrying the exec', {
                 app,
                 machineId,
-                state: machine?.state ?? 'unknown',
+                state: machineState ?? 'unknown',
                 error,
             });
         }
@@ -1944,19 +2031,19 @@ class FlyioSandboxProvider {
      * @param error - The failure to annotate.
      * @param app - The Fly app name.
      * @param machineId - The Fly Machine id.
+     * @param knownState - The state already read for this Machine, when the caller
+     *   read one (the exec retry does); read again when omitted.
      * @returns The original error, or a 412 carrying the Machine's state.
      */
-    async withMachineState(error, app, machineId) {
+    async withMachineState(error, app, machineId, knownState) {
         if (!(error instanceof Error))
             return new Error(String(error));
         if (!(error instanceof FlyApiError) || error.status !== 412)
             return error;
         if (/machine state:/i.test(error.message))
             return error;
-        const machine = await this.client
-            .request(`/apps/${app}/machines/${machineId}`, { nullOn: [404] })
-            .catch(() => null);
-        const state = machine?.state ?? 'unreadable';
+        const read = knownState === undefined ? await this.readMachineState(app, machineId) : knownState;
+        const state = read ?? 'unreadable';
         return new FlyApiError(error.method, error.path, error.status, `${error.body} (machine ${machineId} state: ${state})`, { cause: error });
     }
     /**
@@ -2054,6 +2141,65 @@ class FlyioSandboxProvider {
                 `${totalSeconds}s (last observed state: ${lastState ?? 'unknown'}).`,
         }), { cause: lastError });
     }
+    /**
+     * Applies an idle policy to a running Machine's public service, in place.
+     *
+     * Fly's update endpoint takes the ENTIRE Machine config — "we don't support
+     * partial updates" — and "If the Machine is running and the request is
+     * successful, it will reboot" (verified against
+     * https://docs.fly.io/machines/api/machines-resource, 2026-10-17). So this
+     * re-reads the Machine, changes only each service's `autostop`, and waits for
+     * the Machine to reach `started` again before resolving: the caller's next act
+     * is to run commands in it. A Machine that ALREADY has the policy is left
+     * alone — the reboot is a real cost, not a formality — and one that is not
+     * running is updated with `skip_launch` so changing a parked Machine's policy
+     * does not wake it.
+     *
+     * A Machine with no services has no proxy in front of it and therefore no
+     * idle policy; that is a supported shape (a private sandbox), not an error.
+     *
+     * @param app - The Fly app name.
+     * @param machineId - The Fly Machine id.
+     * @param action - The idle action to apply to every service.
+     * @throws {Error} When the Machine or its config cannot be read, the update is
+     *   rejected, or a rebooted Machine does not come back to `started`.
+     */
+    async applyIdleAction(app, machineId, action) {
+        const machine = await this.client.request(`/apps/${app}/machines/${machineId}`, {
+            nullOn: [404],
+        });
+        if (!machine?.config) {
+            throw new Error(t('codeSandbox.flyio.error.idlePolicyUnreadable', { machineId }, {
+                defaultValue: `Cannot change the idle policy of Fly Machine ${machineId}: its config could not be ` +
+                    'read, so the Machine is left exactly as it is.',
+            }));
+        }
+        const services = machine.config.services;
+        if (!services?.length)
+            return;
+        if (services.every((service) => (service.autostop ?? 'off') === action))
+            return;
+        const config = {
+            ...machine.config,
+            services: services.map((service) => ({ ...service, autostop: action })),
+        };
+        // A running Machine reboots to apply the config, so wait for it; a parked
+        // one is updated without being started (there is nothing to wait for).
+        const wasRunning = machine.state === 'started' || machine.state === 'starting';
+        await this.client.request(`/apps/${app}/machines/${machineId}`, {
+            method: 'POST',
+            body: {
+                config,
+                // Immutable, but the update body is a whole Machine description; send
+                // back what was read rather than letting Fly infer them.
+                ...(machine.name ? { name: machine.name } : {}),
+                ...(machine.region ? { region: machine.region } : {}),
+                ...(wasRunning ? {} : { skip_launch: true }),
+            },
+        });
+        if (wasRunning)
+            await this.waitForStarted(app, machineId);
+    }
     /**
      * Builds the `Sandbox` facade for one Machine.
      * @param app - The Fly app name.
@@ -2098,6 +2244,15 @@ class FlyioSandboxProvider {
                 await provider.startMachine(app, machineId);
                 this.status = 'running';
             },
+            /**
+             * Applies an idle policy to this Machine's public service (see
+             * {@link FlyioSandboxProvider.applyIdleAction} for the endpoint and the
+             * reboot it costs). Resolves with the Machine running again.
+             */
+            async setIdleAction(action) {
+                await provider.applyIdleAction(app, machineId, action);
+                this.status = 'running';
+            },
             async exec(command, opts) {
                 return await execCommand(exec, command, opts, WORKSPACE_PATH);
             },

package/dist/types.d.ts

@@ -111,6 +111,12 @@ export interface FlyioConfig {
      * `suspend` is the scale-to-zero mapping (resume from a memory snapshot on the
      * next request) and `stop` is a full stop with a cold boot on wake; opt into
      * either deliberately.
+     *
+     * This is the provider's STEADY-STATE policy, reported as
+     * `SandboxProvider.defaultIdleAction`. A caller can override it for one sandbox
+     * with `SandboxConfig.idleAction` and restore this value afterwards with
+     * `Sandbox.setIdleAction` — which is what a production deploy does so its
+     * destination cannot suspend mid-copy (m103, 2026-10-17).
      */
     autostop?: 'off' | 'stop' | 'suspend';
     /**

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+FAA+F;IAC/F,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAC3C,uGAAuG;IACvG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAA;IACrC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,sHAAsH;IACtH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mHAAmH;IACnH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2HAA2H;IAC3H,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,wIAAwI;IACxI,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+DAA+D;IAC/D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,iEAAiE;IACjE,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;OAGG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,yEAAyE;IACzE,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,qGAAqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uGAAuG;IACvG,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,qGAAqG;IACrG,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qFAAqF;IACrF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,yFAAyF;IACzF,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,yFAAyF;IACzF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,sFAAsF;IACtF,iCAAiC,CAAC,EAAE,MAAM,CAAA;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAA;IACvB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,MAAM,EAAE,OAAO,CAAA;IACf,4EAA4E;IAC5E,SAAS,EAAE,SAAS,GAAG,QAAQ,CAAA;IAC/B,+BAA+B;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,wBAAwB;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,kCAAkC;IAClC,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,sCAAsC;IACtC,QAAQ,EAAE,wBAAwB,CAAA;IAClC,uBAAuB;IACvB,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,UAAU,GACV,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,GACT,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,UAAU,GACV,WAAW,GACX,UAAU,GACV,UAAU,GACV,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kGAAkG;IAClG,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAA;CAC3B;AAED,8CAA8C;AAC9C,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,MAAM;IACrB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAChE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC9B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1F,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACjF;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;;;;;OAQG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,kFAAkF;IAClF,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,6FAA6F;IAC7F,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;;;OAQG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;OAIG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+FAA+F;IAC/F,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,2EAA2E;IAC3E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B;;;;;;;;;;;;;;;;;OAiBG;IACH,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAA;IAC3C,uGAAuG;IACvG,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,eAAe,CAAC,EAAE,iBAAiB,EAAE,CAAA;IACrC;;;;;;OAMG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,sHAAsH;IACtH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;;;;;OASG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,mHAAmH;IACnH,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,2HAA2H;IAC3H,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,wIAAwI;IACxI,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,OAAO,CAAA;IAChC;;;;;;OAMG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;OAIG;IACH,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC;;;;;OAKG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,+DAA+D;IAC/D,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,iEAAiE;IACjE,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,2DAA2D;IAC3D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,sCAAsC;IACtC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;OAIG;IACH,gCAAgC,CAAC,EAAE,MAAM,CAAA;IACzC;;;;;OAKG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;OAGG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC,yEAAyE;IACzE,+BAA+B,CAAC,EAAE,MAAM,CAAA;IACxC,+EAA+E;IAC/E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,qGAAqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oFAAoF;IACpF,yBAAyB,CAAC,EAAE,MAAM,CAAA;IAClC,uGAAuG;IACvG,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,qGAAqG;IACrG,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,2FAA2F;IAC3F,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qFAAqF;IACrF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,+EAA+E;IAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,yFAAyF;IACzF,kCAAkC,CAAC,EAAE,MAAM,CAAA;IAC3C,+EAA+E;IAC/E,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B,yFAAyF;IACzF,8BAA8B,CAAC,EAAE,MAAM,CAAA;IACvC,4CAA4C;IAC5C,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,8EAA8E;IAC9E,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,sFAAsF;IACtF,iCAAiC,CAAC,EAAE,MAAM,CAAA;CAC3C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;OAIG;IACH,GAAG,EAAE,MAAM,CAAA;IACX;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,sEAAsE;IACtE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,MAAM,CAAC,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,mDAAmD;IACnD,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAA;IACvB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,MAAM,EAAE,OAAO,CAAA;IACf,4EAA4E;IAC5E,SAAS,EAAE,SAAS,GAAG,QAAQ,CAAA;IAC/B,+BAA+B;IAC/B,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,wBAAwB;IACvC,sCAAsC;IACtC,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,kCAAkC;IAClC,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChC,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAA;IACZ,sCAAsC;IACtC,QAAQ,EAAE,wBAAwB,CAAA;IAClC,uBAAuB;IACvB,KAAK,EAAE,oBAAoB,EAAE,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,UAAU,GACV,UAAU,GACV,SAAS,GACT,UAAU,GACV,SAAS,GACT,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,UAAU,GACV,WAAW,GACX,UAAU,GACV,UAAU,GACV,YAAY,GACZ,WAAW,GACX,QAAQ,GACR,eAAe,GACf,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;AAEjB,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,kGAAkG;IAClG,KAAK,CAAC,EAAE,eAAe,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,gBAAgB,CAAA;IACzB,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB;;;;OAIG;IACH,MAAM,CAAC,EAAE,eAAe,EAAE,CAAA;CAC3B;AAED,8CAA8C;AAC9C,MAAM,WAAW,eAAe;IAC9B,mCAAmC;IACnC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,0BAA0B;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,wFAAwF;AACxF,MAAM,WAAW,MAAM;IACrB,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,kDAAkD;AAClD,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAA;CAChB;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAc,SAAQ,UAAU;IAC/C,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACjC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAChE,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAChE,QAAQ,CAAC,EAAE,iBAAiB,EAAE,CAAA;IAC9B,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,IAAI,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC1F,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CACjF;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAA;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,QAAQ,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,SAAS,CAAA;IACrC,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED,iDAAiD;AACjD,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@molecule/api-code-sandbox-flyio",
-  "version": "1.2.9",
+  "version": "1.3.0",
   "description": "Fly.io Machines (Firecracker microVM) code sandbox provider",
   "type": "module",
   "main": "dist/index.js",
@@ -31,7 +31,7 @@
   "license": "Apache-2.0",
   "devDependencies": {
     "@molecule/api-bond": "1.0.2",
-    "@molecule/api-code-sandbox": "1.3.0",
+    "@molecule/api-code-sandbox": "1.4.0",
     "@types/node": "26.1.2",
     "typescript": "6.0.3",
     "vitest": "4.1.11"