@tickernelz/paperclip-pro-plugin-daytona 2026.925.0

package/dist/login-pty.test.js

@@ -0,0 +1,319 @@
+import { describe, expect, it } from "vitest";
+import { composeLaunchLine, createDaytonaLoginHomeFs, createDaytonaLoginPtySessionOpener, encodePosixShellArg, openDaytonaLoginPtySession, } from "./login-pty.js";
+// The Enter byte the terminal login UI reads to submit the browser code.
+const ENTER = "\r";
+const HOME = "/tmp/paperclip-adapter-login/11111111-2222-4333-8444-555555555555";
+const CLAUDE = { loginCommandKey: "claude", sessionHome: HOME };
+const CODEX = { loginCommandKey: "codex", sessionHome: HOME };
+const GROK = { loginCommandKey: "grok", sessionHome: HOME };
+/**
+ * A fake login-home filesystem. It records each path the caller asks to create
+ * and never fails, matching the `mkdir -p` semantics of the real command: a
+ * repeat create for the same path succeeds the same as a fresh one.
+ */
+function createFakeHomeFs() {
+    const created = [];
+    return {
+        created,
+        async createDirectory(path) {
+            created.push(path);
+        },
+    };
+}
+/**
+ * A fake Daytona PTY handle. It records each input write, drives the output
+ * stream on demand, and records the kill and the disconnect. The tests use it in
+ * place of the real SDK `PtyHandle`, so the session runs with no sandbox.
+ */
+function createFakePtyHandle(onData, onWaitForConnection) {
+    const encoder = new TextEncoder();
+    const inputs = [];
+    let resolveWait = null;
+    const waitPromise = new Promise((resolve) => {
+        resolveWait = resolve;
+    });
+    let killed = 0;
+    let disconnected = 0;
+    return {
+        async waitForConnection() {
+            onWaitForConnection?.();
+        },
+        async sendInput(data) {
+            inputs.push(typeof data === "string" ? data : new TextDecoder().decode(data));
+        },
+        wait() {
+            return waitPromise;
+        },
+        async kill() {
+            killed += 1;
+        },
+        async disconnect() {
+            disconnected += 1;
+        },
+        emitText(text) {
+            onData(encoder.encode(text));
+        },
+        emitBytes(bytes) {
+            onData(bytes);
+        },
+        finish(exitCode) {
+            resolveWait?.({ exitCode });
+        },
+        get inputs() {
+            return inputs;
+        },
+        get killed() {
+            return killed;
+        },
+        get disconnected() {
+            return disconnected;
+        },
+    };
+}
+/**
+ * A fake Daytona process. It opens one fake PTY handle and records the create
+ * options, so a test asserts the terminal size and the launch line.
+ */
+function createFakeProcess() {
+    const state = { handle: null, createOptions: null, createCount: 0 };
+    return {
+        get handle() {
+            return state.handle;
+        },
+        get createOptions() {
+            return state.createOptions;
+        },
+        get createCount() {
+            return state.createCount;
+        },
+        async createPty(options) {
+            state.createCount += 1;
+            state.createOptions = options;
+            const handle = createFakePtyHandle(options.onData);
+            state.handle = handle;
+            return handle;
+        },
+    };
+}
+describe("encodePosixShellArg", () => {
+    it("wraps a value in single quotes and neutralizes metacharacters", () => {
+        expect(encodePosixShellArg("/tmp/x")).toBe("'/tmp/x'");
+        // A metacharacter, a space, and a semicolon stay literal inside the quotes.
+        expect(encodePosixShellArg("; rm -rf / #")).toBe("'; rm -rf / #'");
+        // An embedded single quote closes, escapes, and reopens the quote.
+        expect(encodePosixShellArg("a'b")).toBe("'a'\\''b'");
+        expect(encodePosixShellArg("$(id)")).toBe("'$(id)'");
+    });
+});
+describe("composeLaunchLine", () => {
+    it("composes the Claude line with no CODEX_HOME", () => {
+        const line = composeLaunchLine(CLAUDE);
+        expect(line).toBe("exec claude setup-token");
+        expect(line).not.toContain("CODEX_HOME");
+    });
+    it("composes the Codex line with exactly one encoded CODEX_HOME", () => {
+        const line = composeLaunchLine(CODEX);
+        expect(line).toBe(`exec env CODEX_HOME='${HOME}' codex login --device-auth`);
+        // Exactly one CODEX_HOME assignment, and the exact approved Codex command.
+        expect(line.match(/CODEX_HOME=/g)).toHaveLength(1);
+        expect(line.endsWith("codex login --device-auth")).toBe(true);
+    });
+    it("composes the Grok line with exactly one encoded GROK_HOME", () => {
+        const line = composeLaunchLine(GROK);
+        expect(line).toBe(`exec env GROK_HOME='${HOME}' grok login --device-auth`);
+        // Exactly one GROK_HOME assignment, and the exact approved Grok command.
+        expect(line.match(/GROK_HOME=/g)).toHaveLength(1);
+        expect(line.endsWith("grok login --device-auth")).toBe(true);
+        // The Codex encoded variable never leaks into the Grok line.
+        expect(line).not.toContain("CODEX_HOME");
+    });
+    it("composes the launch line from the closed command map only, and ignores a command string smuggled onto the descriptor", () => {
+        // Condition 4: a command string in the request confers no command
+        // authority. The module maps the closed key to its own fixed command, so a
+        // caller cannot select or override it.
+        const tampered = {
+            ...GROK,
+            command: "rm -rf /",
+        };
+        const line = composeLaunchLine(tampered);
+        expect(line).toBe(`exec env GROK_HOME='${HOME}' grok login --device-auth`);
+        expect(line).not.toContain("rm -rf");
+    });
+});
+describe("openDaytonaLoginPtySession — session home", () => {
+    it("creates the session home directory", async () => {
+        const process = createFakeProcess();
+        const fs = createFakeHomeFs();
+        await openDaytonaLoginPtySession(process, fs, CLAUDE);
+        // The provider created the exact directory and opened the terminal.
+        expect(fs.created).toEqual([HOME]);
+        expect(process.createCount).toBe(1);
+        expect(process.handle?.inputs[0]).toBe("exec claude setup-token" + ENTER);
+    });
+    it("sends the Codex launch line with the encoded CODEX_HOME", async () => {
+        const process = createFakeProcess();
+        const fs = createFakeHomeFs();
+        await openDaytonaLoginPtySession(process, fs, CODEX);
+        expect(process.handle?.inputs[0]).toBe(`exec env CODEX_HOME='${HOME}' codex login --device-auth` + ENTER);
+        // The Claude line carries no CODEX_HOME; the Codex line carries exactly one.
+        expect((process.handle?.inputs[0]?.match(/CODEX_HOME=/g) ?? []).length).toBe(1);
+    });
+    it("opens the login session when the session home already exists", async () => {
+        const process = createFakeProcess();
+        const fs = createFakeHomeFs();
+        // A second login for the same home hits an existing directory. `mkdir -p`
+        // succeeds on an existing directory, so the second session opens the same
+        // as the first.
+        await openDaytonaLoginPtySession(process, fs, CLAUDE);
+        await openDaytonaLoginPtySession(process, fs, CLAUDE);
+        expect(fs.created).toEqual([HOME, HOME]);
+        expect(process.createCount).toBe(2);
+    });
+    it("rejects a descriptor with a command key outside the closed set", async () => {
+        const process = createFakeProcess();
+        const fs = createFakeHomeFs();
+        await expect(openDaytonaLoginPtySession(process, fs, {
+            loginCommandKey: "gemini",
+            sessionHome: HOME,
+        })).rejects.toThrow("LOGIN_PTY_DESCRIPTOR_REJECTED");
+        // The provider never touched the filesystem or the terminal.
+        expect(fs.created).toEqual([]);
+        expect(process.createCount).toBe(0);
+    });
+    it("rejects a descriptor whose session home shape is wrong", async () => {
+        const process = createFakeProcess();
+        const fs = createFakeHomeFs();
+        await expect(openDaytonaLoginPtySession(process, fs, {
+            loginCommandKey: "codex",
+            sessionHome: "/tmp/paperclip-adapter-login/../etc",
+        })).rejects.toThrow("LOGIN_PTY_DESCRIPTOR_REJECTED");
+        expect(process.createCount).toBe(0);
+    });
+});
+describe("openDaytonaLoginPtySession — session mechanics", () => {
+    it("starts the login command on a pseudo-terminal with a fixed size", async () => {
+        const process = createFakeProcess();
+        await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        expect(process.createOptions?.cols).toBe(120);
+        expect(process.createOptions?.rows).toBe(30);
+        expect(process.handle?.inputs[0]).toBe("exec claude setup-token" + ENTER);
+    });
+    it("returns incremental terminal output to the listener", async () => {
+        const process = createFakeProcess();
+        const received = [];
+        const session = await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        session.onData((chunk) => received.push(chunk));
+        process.handle?.emitText("the url below to sign in\n");
+        process.handle?.emitText("Paste code here if prompted\n");
+        expect(received).toEqual(["the url below to sign in\n", "Paste code here if prompted\n"]);
+    });
+    it("buffers early output until the listener registers", async () => {
+        const process = createFakeProcess();
+        const received = [];
+        const session = await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        process.handle?.emitText("early output ");
+        process.handle?.emitText("more output");
+        expect(received).toEqual([]);
+        session.onData((chunk) => received.push(chunk));
+        expect(received).toEqual(["early output more output"]);
+    });
+    it("delivers the browser code plus the Enter byte to the command", async () => {
+        const process = createFakeProcess();
+        const session = await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        session.write("BROWSERCODE" + ENTER);
+        // The write runs through the serialized chunk chain, so it lands on a later
+        // microtask. Flush the chain before the assertion.
+        await new Promise((resolve) => setTimeout(resolve, 0));
+        expect(process.handle?.inputs[1]).toBe("BROWSERCODE" + ENTER);
+        expect(process.handle?.inputs[1]?.endsWith(ENTER)).toBe(true);
+    });
+    it("keeps a multibyte character whole across two output chunks", async () => {
+        const process = createFakeProcess();
+        const received = [];
+        const session = await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        session.onData((chunk) => received.push(chunk));
+        const euro = new TextEncoder().encode("€");
+        process.handle?.emitBytes(euro.subarray(0, 2));
+        process.handle?.emitBytes(euro.subarray(2));
+        expect(received.join("")).toBe("€");
+    });
+    it("resolves wait with the command exit code", async () => {
+        const process = createFakeProcess();
+        const session = await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        process.handle?.finish(9);
+        await expect(session.wait()).resolves.toEqual({ exitCode: 9 });
+    });
+    it("maps an absent exit code to null", async () => {
+        const process = createFakeProcess();
+        const session = await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        process.handle?.finish(undefined);
+        await expect(session.wait()).resolves.toEqual({ exitCode: null });
+    });
+    it("kills the child and closes the session", async () => {
+        const process = createFakeProcess();
+        const session = await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE);
+        session.kill();
+        expect(process.handle?.killed).toBe(1);
+        await session.close();
+        expect(process.handle?.disconnected).toBe(1);
+    });
+    it("passes the working directory to the pseudo-terminal", async () => {
+        const process = createFakeProcess();
+        await openDaytonaLoginPtySession(process, createFakeHomeFs(), CLAUDE, { cwd: "/workspace" });
+        expect(process.createOptions?.cwd).toBe("/workspace");
+    });
+});
+describe("createDaytonaLoginHomeFs — login-profile preamble", () => {
+    // A capturing exec surface. It records each command and returns a fixed result,
+    // so a test reads the exact command string the create runs.
+    function createCapturingExec(result) {
+        const commands = [];
+        return {
+            commands,
+            async executeCommand(command) {
+                commands.push(command);
+                return result;
+            },
+        };
+    }
+    it("sources the login profiles before it creates the session home directory", async () => {
+        // The command sources /etc/profile before it runs `mkdir -p`, so the create
+        // command stays consistent with the profile chain the rest of the sandbox
+        // exec commands use.
+        const exec = createCapturingExec({ exitCode: 0, result: "" });
+        const fs = createDaytonaLoginHomeFs(exec);
+        await fs.createDirectory(HOME);
+        const command = exec.commands.find((entry) => entry.includes("mkdir -p"));
+        expect(command).toBeDefined();
+        const profileIndex = command.indexOf("/etc/profile");
+        const mkdirIndex = command.indexOf("mkdir -p");
+        expect(profileIndex).toBeGreaterThanOrEqual(0);
+        expect(mkdirIndex).toBeGreaterThan(profileIndex);
+    });
+    it("rejects the session and opens no pseudo-terminal when the create command exits non-zero", async () => {
+        // The sandbox `mkdir -p` command fails (for example, a read-only mount).
+        // The session must fail closed before it opens a pseudo-terminal.
+        const exec = createCapturingExec({ exitCode: 1, result: "" });
+        const fs = createDaytonaLoginHomeFs(exec);
+        const process = createFakeProcess();
+        await expect(openDaytonaLoginPtySession(process, fs, CLAUDE)).rejects.toThrow("LOGIN_PTY_HOME_REJECTED");
+        expect(process.createCount).toBe(0);
+    });
+});
+describe("createDaytonaLoginPtySessionOpener", () => {
+    it("opens a session for the descriptor on each call", async () => {
+        const process = createFakeProcess();
+        const opener = createDaytonaLoginPtySessionOpener(process, createFakeHomeFs(), {
+            cwd: "/workspace",
+        });
+        const session = await opener(CLAUDE);
+        expect(process.createOptions?.cwd).toBe("/workspace");
+        expect(process.handle?.inputs[0]).toBe("exec claude setup-token" + ENTER);
+        expect(typeof session.onData).toBe("function");
+        expect(typeof session.write).toBe("function");
+        expect(typeof session.wait).toBe("function");
+        expect(typeof session.kill).toBe("function");
+        expect(typeof session.close).toBe("function");
+    });
+});
+//# sourceMappingURL=login-pty.test.js.map

package/dist/login-pty.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-pty.test.js","sourceRoot":"","sources":["../src/login-pty.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,iBAAiB,EACjB,wBAAwB,EACxB,kCAAkC,EAClC,mBAAmB,EACnB,0BAA0B,GAQ3B,MAAM,gBAAgB,CAAC;AAExB,yEAAyE;AACzE,MAAM,KAAK,GAAG,IAAI,CAAC;AAEnB,MAAM,IAAI,GAAG,mEAAmE,CAAC;AAEjF,MAAM,MAAM,GAA6B,EAAE,eAAe,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC1F,MAAM,KAAK,GAA6B,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AACxF,MAAM,IAAI,GAA6B,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAEtF;;;;GAIG;AACH,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,OAAO;QACL,OAAO;QACP,KAAK,CAAC,eAAe,CAAC,IAAY;YAChC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAC1B,MAAkD,EAClD,mBAAgC;IAShC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,WAAW,GAAoE,IAAI,CAAC;IACxF,MAAM,WAAW,GAAG,IAAI,OAAO,CAAwC,CAAC,OAAO,EAAE,EAAE;QACjF,WAAW,GAAG,OAAO,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,OAAO;QACL,KAAK,CAAC,iBAAiB;YACrB,mBAAmB,EAAE,EAAE,CAAC;QAC1B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,IAAyB;YACvC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI;YACF,OAAO,WAAW,CAAC;QACrB,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;QACD,KAAK,CAAC,UAAU;YACd,YAAY,IAAI,CAAC,CAAC;QACpB,CAAC;QACD,QAAQ,CAAC,IAAY;YACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/B,CAAC;QACD,SAAS,CAAC,KAAiB;YACzB,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;QACD,MAAM,CAAC,QAA4B;YACjC,WAAW,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,MAAM;YACR,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,YAAY;YACd,OAAO,YAAY,CAAC;QACtB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB;IAKxB,MAAM,KAAK,GAIP,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;IAC1D,OAAO;QACL,IAAI,MAAM;YACR,OAAO,KAAK,CAAC,MAAM,CAAC;QACtB,CAAC;QACD,IAAI,aAAa;YACf,OAAO,KAAK,CAAC,aAAa,CAAC;QAC7B,CAAC;QACD,IAAI,WAAW;YACb,OAAO,KAAK,CAAC,WAAW,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,OAAgC;YAC9C,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC;YACvB,KAAK,CAAC,aAAa,GAAG,OAAO,CAAC;YAC9B,MAAM,MAAM,GAAG,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACnD,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;YACtB,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvD,4EAA4E;QAC5E,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACnE,mEAAmE;QACnE,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,IAAI,6BAA6B,CAAC,CAAC;QAC7E,2EAA2E;QAC3E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,uBAAuB,IAAI,4BAA4B,CAAC,CAAC;QAC3E,yEAAyE;QACzE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7D,6DAA6D;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sHAAsH,EAAE,GAAG,EAAE;QAC9H,kEAAkE;QAClE,2EAA2E;QAC3E,uCAAuC;QACvC,MAAM,QAAQ,GAAG;YACf,GAAG,IAAI;YACP,OAAO,EAAE,UAAU;SACmB,CAAC;QACzC,MAAM,IAAI,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,uBAAuB,IAAI,4BAA4B,CAAC,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAE9B,MAAM,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAEtD,oEAAoE;QACpE,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,GAAG,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAE9B,MAAM,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;QAErD,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACpC,wBAAwB,IAAI,6BAA6B,GAAG,KAAK,CAClE,CAAC;QACF,6EAA6E;QAC7E,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAE9B,0EAA0E;QAC1E,0EAA0E;QAC1E,gBAAgB;QAChB,MAAM,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;QAEtD,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAE9B,MAAM,MAAM,CACV,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE;YACtC,eAAe,EAAE,QAA+B;YAChD,WAAW,EAAE,IAAI;SAClB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QACnD,6DAA6D;QAC7D,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,gBAAgB,EAAE,CAAC;QAE9B,MAAM,MAAM,CACV,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE;YACtC,eAAe,EAAE,OAAO;YACxB,WAAW,EAAE,qCAAqC;SACnD,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QAEtE,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,GAAG,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhD,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,4BAA4B,CAAC,CAAC;QACvD,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,+BAA+B,CAAC,CAAC;QAE1D,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,4BAA4B,EAAE,+BAA+B,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC1C,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE7B,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,KAAK,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC;QACrC,4EAA4E;QAC5E,mDAAmD;QACnD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEhD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAE1B,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAElC,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEvC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,MAAM,0BAA0B,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;QAE7F,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,gFAAgF;IAChF,4DAA4D;IAC5D,SAAS,mBAAmB,CAAC,MAAyB;QAGpD,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,OAAO;YACL,QAAQ;YACR,KAAK,CAAC,cAAc,CAAC,OAAe;gBAClC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO,MAAM,CAAC;YAChB,CAAC;SACF,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,4EAA4E;QAC5E,0EAA0E;QAC1E,qBAAqB;QACrB,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAE1C,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,OAAQ,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,OAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,YAAY,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,IAAI,GAAG,mBAAmB,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9D,MAAM,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QAEpC,MAAM,MAAM,CAAC,0BAA0B,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC3E,yBAAyB,CAC1B,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oCAAoC,EAAE,GAAG,EAAE;IAClD,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,kCAAkC,CAAC,OAAO,EAAE,gBAAgB,EAAE,EAAE;YAC7E,GAAG,EAAE,YAAY;SAClB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;QAErC,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACtD,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,GAAG,KAAK,CAAC,CAAC;QAC1E,MAAM,CAAC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,4 @@
+import type { PaperclipPluginManifestV1 } from "@tickernelz/paperclip-pro-plugin-sdk";
+declare const manifest: PaperclipPluginManifestV1;
+export default manifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAiBtF,QAAA,MAAM,QAAQ,EAAE,yBAgLf,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/manifest.js

@@ -0,0 +1,179 @@
+const PLUGIN_ID = "paperclip.daytona-sandbox-provider";
+// The bundled-plugin boot reconcile refreshes the persisted manifest for an
+// existing install only when PLUGIN_VERSION changes. A manifest change without a
+// version bump never reaches an existing install. The reconcile also reads the
+// persisted manifest raw and does not re-run the validator, so it never
+// canonicalizes a renamed capability.
+//
+// 0.1.3 renamed the login transport flag from `supportsSetupTokenLogin` to the
+// neutral `supportsLoginPty`.
+// 0.1.4 adds the `concurrentSyncOperations` sandbox capability to the driver.
+// 0.1.5 adds the `duplexCommandStream` sandbox capability to the driver.
+// 0.1.6 adds private authenticated WebSocket ingress for paperclip_runner.
+// 0.1.7 exposes host-owned warm/cold runner lifecycle controls.
+const PLUGIN_VERSION = "0.1.7";
+const manifest = {
+    id: PLUGIN_ID,
+    apiVersion: 1,
+    version: PLUGIN_VERSION,
+    displayName: "Daytona Sandbox Provider",
+    description: "First-party sandbox provider plugin that provisions Daytona sandboxes as Paperclip execution environments.",
+    author: "Paperclip",
+    categories: ["automation"],
+    capabilities: ["environment.drivers.register"],
+    entrypoints: {
+        worker: "./dist/worker.js",
+    },
+    environmentDrivers: [
+        {
+            driverKey: "daytona",
+            kind: "sandbox_provider",
+            displayName: "Daytona Sandbox",
+            description: "Provisions Daytona sandboxes with configurable image or snapshot selection, startup timeouts, and lease reuse.",
+            supportsReusableLeases: true,
+            // Daytona keeps a persistent session and tails its callback log form, so it
+            // emits incremental session output while the command runs. Declare the
+            // opt-in capability so the host selects the session-output streaming path.
+            // A generic one-shot provider that omits this key keeps the poll path.
+            //
+            // Daytona also runs file transfers into and out of the sandbox in parallel.
+            // Each concurrent sync hook call uses separate temporary state (random
+            // scratch names and per-mapping host temporary directories), and teardown
+            // waits for all active calls. Declare the opt-in capability so the host may
+            // schedule sync operations concurrently. The host resolves it `true` only
+            // when the worker also verifies both sync verbs.
+            //
+            // Daytona carries the sandbox callback bridge on one live duplex channel
+            // over a raw pseudo-terminal. Declare the opt-in capability so the host may
+            // select the duplex transport. The host resolves it `true` only when the
+            // worker also verifies the `duplexChannelOpen` handler.
+            //
+            // Daytona is the first provider that runs the HTTP/2 transport over this
+            // channel. HTTP/2 is the preferred transport. `queue_v1` is the
+            // soft-deprecated fallback.
+            sandboxCapabilities: {
+                incrementalSessionOutput: true,
+                concurrentSyncOperations: true,
+                duplexCommandStream: true,
+                runnerWebSocketIngress: true,
+            },
+            supportsInteractiveSetup: true,
+            interactiveSetupConnectionTypes: ["ssh"],
+            supportsTemplateCapture: true,
+            templateRefKind: "snapshot",
+            templateConfigBinding: {
+                field: "snapshot",
+                unsetFields: ["image"],
+            },
+            templateIdentityPaths: ["apiUrl"],
+            supportsTemplateDelete: true,
+            // Daytona hosts an interactive login on a real pseudo-terminal. It is the
+            // only bundled provider that implements the login pseudo-terminal methods,
+            // so it advertises the capability. The session home helpers and the
+            // credential reader run on node, and the sandbox already runs node for the
+            // Paperclip bridge. So the login has no extra runtime prerequisite, and the
+            // advertised capability matches the runtime contract for every configured
+            // image or snapshot.
+            supportsLoginPty: true,
+            configSchema: {
+                type: "object",
+                properties: {
+                    apiKey: {
+                        type: "string",
+                        format: "secret-ref",
+                        description: "Environment-specific Daytona API key. Paste a key or an existing Paperclip secret reference; saved environments store pasted values as company secrets. Falls back to DAYTONA_API_KEY if omitted.",
+                    },
+                    apiUrl: {
+                        type: "string",
+                        description: "Optional Daytona API base URL. If omitted, the Daytona SDK uses its configured default endpoint.",
+                    },
+                    target: {
+                        type: "string",
+                        description: "Optional Daytona target/region identifier.",
+                    },
+                    snapshot: {
+                        type: "string",
+                        description: "Optional Daytona snapshot name to start from.",
+                    },
+                    image: {
+                        type: "string",
+                        description: "Optional base image or Daytona Image reference. If set, the sandbox is created from this image instead of a snapshot.",
+                        default: "daytonaio/sandbox:0.8.0",
+                    },
+                    language: {
+                        type: "string",
+                        description: "Optional Daytona language hint for direct code execution. If omitted, Daytona uses its default runtime.",
+                    },
+                    cpu: {
+                        type: "integer",
+                        description: "Optional CPU allocation in cores.",
+                        minimum: 1,
+                        default: 4,
+                    },
+                    memory: {
+                        type: "integer",
+                        description: "Optional memory allocation in GiB. Supported sandbox sizes are 1, 2, 4, and 8 GiB.",
+                        enum: [1, 2, 4, 8],
+                        default: 4,
+                    },
+                    disk: {
+                        type: "integer",
+                        description: "Optional disk allocation in GiB.",
+                        minimum: 1,
+                        default: 10,
+                    },
+                    gpu: {
+                        type: "integer",
+                        description: "Optional GPU allocation in units.",
+                        minimum: 1,
+                    },
+                    timeoutMs: {
+                        type: "number",
+                        description: "Timeout for Daytona create/start/stop/execute operations in milliseconds.",
+                        default: 300000,
+                    },
+                    livenessTimeoutMs: {
+                        type: "number",
+                        description: "Per-call timeout in milliseconds for the sandbox liveness read (refreshData). A silently unresponsive sandbox connection surfaces as a fast error instead of stalling until the outer RPC ceiling. The start and recovery calls derive their own deadline from timeoutMs, not this bound. `0` or less disables the bound. Defaults to 30000 when unset.",
+                        default: 30000,
+                    },
+                    autoStopInterval: {
+                        type: "number",
+                        description: "Daytona auto-stop interval in minutes. `0` disables auto-stop. Defaults to 15 when unset.",
+                        default: 15,
+                    },
+                    autoArchiveInterval: {
+                        type: "number",
+                        description: "Daytona auto-archive interval in minutes. Stopped sandboxes still count against the storage quota until archived, so this defaults to 60 when unset. `0` uses Daytona's max interval.",
+                        default: 60,
+                    },
+                    autoDeleteInterval: {
+                        type: "number",
+                        description: "Daytona auto-delete interval in minutes. Backstop reaper for sandboxes nobody resumes; defaults to 10080 (7 days) when unset. `-1` disables auto-delete and `0` deletes immediately after stop.",
+                        default: 10080,
+                    },
+                    reuseLease: {
+                        type: "boolean",
+                        description: "Whether to stop and later resume the sandbox across runs instead of deleting it on release.",
+                        default: false,
+                    },
+                    runnerLifecycleMode: {
+                        type: "string",
+                        enum: ["inherit", "per_turn", "warm"],
+                        description: "paperclip_runner lifecycle for this environment. Inherit uses the agent setting; warm keeps runnerd and the sandbox available between turns.",
+                        default: "inherit",
+                    },
+                    runnerIdleTimeoutMs: {
+                        type: "integer",
+                        description: "How long an idle warm paperclip_runner stays alive before it checkpoints and suspends.",
+                        minimum: 1000,
+                        maximum: 86400000,
+                        default: 300000,
+                    },
+                },
+            },
+        },
+    ],
+};
+export default manifest;
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAEA,MAAM,SAAS,GAAG,oCAAoC,CAAC;AACvD,4EAA4E;AAC5E,iFAAiF;AACjF,+EAA+E;AAC/E,wEAAwE;AACxE,sCAAsC;AACtC,EAAE;AACF,+EAA+E;AAC/E,8BAA8B;AAC9B,8EAA8E;AAC9E,yEAAyE;AACzE,2EAA2E;AAC3E,gEAAgE;AAChE,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,QAAQ,GAA8B;IAC1C,EAAE,EAAE,SAAS;IACb,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,cAAc;IACvB,WAAW,EAAE,0BAA0B;IACvC,WAAW,EACT,4GAA4G;IAC9G,MAAM,EAAE,WAAW;IACnB,UAAU,EAAE,CAAC,YAAY,CAAC;IAC1B,YAAY,EAAE,CAAC,8BAA8B,CAAC;IAC9C,WAAW,EAAE;QACX,MAAM,EAAE,kBAAkB;KAC3B;IACD,kBAAkB,EAAE;QAClB;YACE,SAAS,EAAE,SAAS;YACpB,IAAI,EAAE,kBAAkB;YACxB,WAAW,EAAE,iBAAiB;YAC9B,WAAW,EACT,gHAAgH;YAClH,sBAAsB,EAAE,IAAI;YAC5B,4EAA4E;YAC5E,uEAAuE;YACvE,2EAA2E;YAC3E,uEAAuE;YACvE,EAAE;YACF,4EAA4E;YAC5E,uEAAuE;YACvE,0EAA0E;YAC1E,4EAA4E;YAC5E,0EAA0E;YAC1E,iDAAiD;YACjD,EAAE;YACF,yEAAyE;YACzE,4EAA4E;YAC5E,yEAAyE;YACzE,wDAAwD;YACxD,EAAE;YACF,yEAAyE;YACzE,gEAAgE;YAChE,4BAA4B;YAC5B,mBAAmB,EAAE;gBACnB,wBAAwB,EAAE,IAAI;gBAC9B,wBAAwB,EAAE,IAAI;gBAC9B,mBAAmB,EAAE,IAAI;gBACzB,sBAAsB,EAAE,IAAI;aAC7B;YACD,wBAAwB,EAAE,IAAI;YAC9B,+BAA+B,EAAE,CAAC,KAAK,CAAC;YACxC,uBAAuB,EAAE,IAAI;YAC7B,eAAe,EAAE,UAAU;YAC3B,qBAAqB,EAAE;gBACrB,KAAK,EAAE,UAAU;gBACjB,WAAW,EAAE,CAAC,OAAO,CAAC;aACvB;YACD,qBAAqB,EAAE,CAAC,QAAQ,CAAC;YACjC,sBAAsB,EAAE,IAAI;YAC5B,0EAA0E;YAC1E,2EAA2E;YAC3E,oEAAoE;YACpE,2EAA2E;YAC3E,4EAA4E;YAC5E,0EAA0E;YAC1E,qBAAqB;YACrB,gBAAgB,EAAE,IAAI;YACtB,YAAY,EAAE;gBACZ,IAAI,EAAE,QAAQ;gBACd,UAAU,EAAE;oBACV,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,MAAM,EAAE,YAAY;wBACpB,WAAW,EACT,mMAAmM;qBACtM;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,kGAAkG;qBACrG;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,4CAA4C;qBAC1D;oBACD,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,+CAA+C;qBAC7D;oBACD,KAAK,EAAE;wBACL,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,uHAAuH;wBACzH,OAAO,EAAE,yBAAyB;qBACnC;oBACD,QAAQ,EAAE;wBACR,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,yGAAyG;qBAC5G;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,mCAAmC;wBAChD,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,CAAC;qBACX;oBACD,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,oFAAoF;wBACtF,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;wBAClB,OAAO,EAAE,CAAC;qBACX;oBACD,IAAI,EAAE;wBACJ,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,kCAAkC;wBAC/C,OAAO,EAAE,CAAC;wBACV,OAAO,EAAE,EAAE;qBACZ;oBACD,GAAG,EAAE;wBACH,IAAI,EAAE,SAAS;wBACf,WAAW,EAAE,mCAAmC;wBAChD,OAAO,EAAE,CAAC;qBACX;oBACD,SAAS,EAAE;wBACT,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,2EAA2E;wBACxF,OAAO,EAAE,MAAM;qBAChB;oBACD,iBAAiB,EAAE;wBACjB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,yVAAyV;wBAC3V,OAAO,EAAE,KAAK;qBACf;oBACD,gBAAgB,EAAE;wBAChB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,2FAA2F;wBAC7F,OAAO,EAAE,EAAE;qBACZ;oBACD,mBAAmB,EAAE;wBACnB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,uLAAuL;wBACzL,OAAO,EAAE,EAAE;qBACZ;oBACD,kBAAkB,EAAE;wBAClB,IAAI,EAAE,QAAQ;wBACd,WAAW,EACT,iMAAiM;wBACnM,OAAO,EAAE,KAAK;qBACf;oBACD,UAAU,EAAE;wBACV,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,6FAA6F;wBAC/F,OAAO,EAAE,KAAK;qBACf;oBACD,mBAAmB,EAAE;wBACnB,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC;wBACrC,WAAW,EACT,8IAA8I;wBAChJ,OAAO,EAAE,SAAS;qBACnB;oBACD,mBAAmB,EAAE;wBACnB,IAAI,EAAE,SAAS;wBACf,WAAW,EACT,wFAAwF;wBAC1F,OAAO,EAAE,IAAI;wBACb,OAAO,EAAE,QAAQ;wBACjB,OAAO,EAAE,MAAM;qBAChB;iBACF;aACF;SACF;KACF;CACF,CAAC;AAEF,eAAe,QAAQ,CAAC"}

package/dist/plugin.d.ts

@@ -0,0 +1,49 @@
+import type { PluginContext, PluginTracer } from "@tickernelz/paperclip-pro-plugin-sdk";
+export { createDaytonaLoginPtySessionOpener, openDaytonaLoginPtySession, createDaytonaLoginHomeFs, } from "./login-pty.js";
+export type { LoginPtySession, LoginPtySessionOpener, LoginPtyLaunchDescriptor, DaytonaPtyHandle, DaytonaPtyProcess, DaytonaPtyCreateOptions, DaytonaLoginPtyOptions, DaytonaLoginHomeFs, } from "./login-pty.js";
+export { createDaytonaDuplexChannelSessionOpener, openDaytonaDuplexChannelSession, buildDuplexChannelLaunchWrapper, } from "./duplex-command-stream.js";
+export type { DuplexChannelSession, DuplexChannelSessionOpener, DaytonaDuplexChannelOptions, } from "./duplex-command-stream.js";
+/**
+ * Return the plugin tracer. It is the injected `ctx.tracer` after `setup`, or a
+ * no-op before it. A provider span opened through it records only when tracing
+ * is on and an active host trace context is present.
+ */
+export declare function getPluginTracer(): PluginTracer;
+/**
+ * Test seam: set the module-level plugin context, and return a restore function.
+ * `plugin.test.ts` uses it to inject a recording tracer without running `setup`.
+ */
+export declare function __setDaytonaPluginContextForTest(ctx: PluginContext | null): () => void;
+/**
+ * Test seam: override the provider-timing clock and return a restore function.
+ * Not used in production, where the default wall clock always applies.
+ */
+export declare function setDaytonaTimingClockForTest(now: () => number): () => void;
+/**
+ * Test seam: override the handle-cache freshness clock and return a restore
+ * function. Not used in production, where the default wall clock always applies.
+ */
+export declare function setDaytonaHandleFreshnessClockForTest(now: () => number): () => void;
+/**
+ * Test seam: clear the process-scoped handle cache between tests so a handle
+ * memoized under a reused composite key in one test never leaks into the next.
+ * Not used in production.
+ */
+export declare function __resetDaytonaSandboxHandleCacheForTest(): void;
+/**
+ * Test seam: read the advisory writable directories recorded for a sync scope.
+ * The caller passes the same `onEnvironmentSyncIn` inputs, so this rebuilds the
+ * exact scope key the hook used. Not used in production.
+ */
+export declare function __getDaytonaWritableDirsForTest(input: {
+    driverKey: string;
+    companyId: string;
+    environmentId: string;
+    lease: {
+        providerLeaseId?: string | null;
+    };
+    config: Record<string, unknown>;
+}): string[];
+declare const plugin: import("@tickernelz/paperclip-pro-plugin-sdk").PaperclipPlugin;
+export default plugin;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EA8Bb,MAAM,sCAAsC,CAAC;AAS9C,OAAO,EACL,kCAAkC,EAClC,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AAgBxB,OAAO,EACL,uCAAuC,EACvC,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,oBAAoB,EACpB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,4BAA4B,CAAC;AAgBpC;;;;GAIG;AACH,wBAAgB,eAAe,IAAI,YAAY,CAE9C;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,IAAI,CAMtF;AAED;;;GAGG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,MAAM,IAAI,CAM1E;AAQD;;;GAGG;AACH,wBAAgB,qCAAqC,CAAC,GAAG,EAAE,MAAM,MAAM,GAAG,MAAM,IAAI,CAMnF;AAizCD;;;;GAIG;AACH,wBAAgB,uCAAuC,IAAI,IAAI,CAQ9D;AAED;;;;GAIG;AACH,wBAAgB,+BAA+B,CAAC,KAAK,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE;QAAE,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC,GAAG,MAAM,EAAE,CASX;AAkgBD,QAAA,MAAM,MAAM,gEA0jCV,CAAC;AAEH,eAAe,MAAM,CAAC"}