@sealant/sdk 0.14.0 → 0.16.0

package/dist/facade/workspace.js

@@ -189,7 +189,7 @@ export const makeWorkspace = (ctx, init) => {
                 ...(ttl === undefined ? {} : { ttlSeconds: ttl === null ? null : parseTtlSeconds(ttl) }),
             }));
         },
-        forward: (port) => openForward(ctx, init.id, port),
+        forward: (port, options) => openForward(ctx, init.id, port, options),
     };
     return workspace;
 };
@@ -202,11 +202,17 @@ export const makeWorkspace = (ctx, init) => {
  * upgrade with a plain HTTP status when nothing listens on the port, which
  * surfaces here as the connect rejection.
  */
-const openForward = (ctx, workspaceId, port) => {
+const openForward = (ctx, workspaceId, port, options) => {
     const config = ctx.config;
     const url = new URL(`/v1/workspaces/${workspaceId}/forward`, config.baseUrl);
     url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
     url.searchParams.set("port", String(port));
+    if (options?.host !== undefined) {
+        url.searchParams.set("host", options.host);
+    }
+    if (options?.protocol === "udp") {
+        url.searchParams.set("protocol", "udp");
+    }
     if (config.apiKey === undefined) {
         url.searchParams.set("ownerUserId", config.hostLocal.ownerUserId);
     }

package/dist/types.d.ts

@@ -221,13 +221,27 @@ export interface Workspace {
         readonly in?: string | null;
     }): Promise<void>;
     /**
-     * Open a raw TCP byte pipe to `127.0.0.1:port` INSIDE the workspace — the
-     * primitive for reaching a dev server or database the workspace runs.
-     * Protocol-agnostic: nothing inspects or records the payload. One held
-     * WebSocket per forward; rejects when nothing accepts the connection. The
-     * target host is fixed at loopback by design.
+     * Open a raw TCP byte pipe (or a UDP datagram pipe) INSIDE the workspace — the primitive for
+     * reaching a dev server or database the workspace runs. Protocol-agnostic:
+     * nothing inspects or records the payload. One held WebSocket per forward;
+     * rejects when nothing accepts the connection. The target host is a CLOSED
+     * workspace-private set: the container's loopback (default), or `docker` —
+     * the workspace-scoped Docker sidecar's alias, where `docker compose`
+     * publishes its ports.
      */
-    forward(port: number): Promise<WorkspaceForward>;
+    forward(port: number, options?: WorkspaceForwardOptions): Promise<WorkspaceForward>;
+}
+/** Options for {@link Workspace.forward}. */
+export interface WorkspaceForwardOptions {
+    /** Target inside the workspace: its loopback (default) or the Docker sidecar. */
+    readonly host?: "127.0.0.1" | "localhost" | "docker";
+    /**
+     * Forward transport. TCP (default) is a byte stream; `"udp"` opens a
+     * connected UDP socket where one frame on this pipe is exactly one
+     * datagram, both directions. UDP has no connection handshake: opening
+     * succeeds even when nothing listens yet — datagrams simply drop.
+     */
+    readonly protocol?: "tcp" | "udp";
 }
 /**
  * A live port forward — one WebSocket, held until `close()` or the remote

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sealant/sdk",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "The fluent public SDK for Sealant — create a workspace, run a harness, replay the record.",
   "license": "Apache-2.0",
   "repository": {
@@ -26,7 +26,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@sealant/api-contracts": "^0.14.0"
+    "@sealant/api-contracts": "^0.16.0"
   },
   "devDependencies": {
     "@effect/vitest": "4.0.0-beta.85",