@tickernelz/wardmote-plugin-daytona 0.0.0 → 2026.1108.1

package/dist/pty-chunked-input.d.ts

@@ -0,0 +1,48 @@
+/**
+ * The provider PTY WebSocket message cap, in bytes. The provider rejects a single
+ * PTY message over this size with WebSocket close code 1009 and closes the
+ * connection.
+ */
+export declare const PTY_MESSAGE_CAP_BYTES = 65536;
+/**
+ * The maximum byte length of one host-to-sandbox chunk. It holds about 5 KiB of
+ * headroom under {@link PTY_MESSAGE_CAP_BYTES}, so a chunk never sits on the cap
+ * boundary. A later change in how the provider counts message overhead does not
+ * push one chunk over the cap and back into the close-code-1009 failure. The
+ * headroom costs about nine percent more messages for a large payload.
+ *
+ * The chunker slices bytes, not string characters, so a chunk boundary can split
+ * a multi-byte UTF-8 sequence. The read-side streaming `TextDecoder` rejoins a
+ * split sequence, so a byte slice is safe. A string-index slice could split a
+ * surrogate pair, so the chunker never slices by character.
+ */
+export declare const PTY_INPUT_CHUNK_BYTES: number;
+/**
+ * Send one host-to-sandbox payload as byte-bounded chunks under the provider
+ * message cap. The function encodes a string payload to UTF-8 bytes, slices the
+ * byte array into chunks of at most {@link PTY_INPUT_CHUNK_BYTES}, and calls
+ * `sendInput` for each chunk in order.
+ *
+ * The loop awaits each chunk before it sends the next chunk. The `await` keeps
+ * the wire order equal to the slice order, and it makes the chunk send fail-fast:
+ * after a chunk rejects, the function sends no further chunk of this payload. A
+ * synchronous loop could not fail-fast, because `sendInput` reaches `ws.send`
+ * before its first `await`, so a synchronous loop puts every chunk on the wire
+ * before the first rejection settles. The awaited loop learns the rejection
+ * before it sends the next chunk, so it stops.
+ *
+ * The function does not overlap two calls for the same channel. The caller
+ * serializes its writes (for example, through a promise chain), so the awaited
+ * loop of one payload never interleaves its chunks with the chunks of the next
+ * payload.
+ *
+ * `onError` runs at most one time. The function reports the first rejected chunk
+ * and returns. A rejected send never throws out of this function, so the caller's
+ * stream stays the single result path.
+ *
+ * @param sendInput - Sends one raw byte chunk to the pseudo-terminal.
+ * @param payload - The host-to-sandbox payload, as a string or raw bytes.
+ * @param onError - Optional. The function calls it one time on the first rejected chunk.
+ */
+export declare function sendPtyInputInChunks(sendInput: (chunk: Uint8Array) => Promise<void>, payload: string | Uint8Array, onError?: () => void): Promise<void>;
+//# sourceMappingURL=pty-chunked-input.d.ts.map

package/dist/pty-chunked-input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-chunked-input.d.ts","sourceRoot":"","sources":["../src/pty-chunked-input.ts"],"names":[],"mappings":"AAQA;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,QAAY,CAAC;AAK/C;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,EAC/C,OAAO,EAAE,MAAM,GAAG,UAAU,EAC5B,OAAO,CAAC,EAAE,MAAM,IAAI,GACnB,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/dist/pty-chunked-input.js

@@ -0,0 +1,74 @@
+// The shared host-to-sandbox write chunker for the Daytona pseudo-terminal (PTY)
+// sessions. The provider PTY WebSocket rejects any single message over 65536
+// bytes with WebSocket close code 1009 and closes the connection. `sendInput`
+// sends a whole payload in one message, so a payload above the cap takes the
+// channel down. Real duplex frames cross the cap (single frames of 127582 and
+// 150416 bytes are observed). This module slices each payload into byte-bounded
+// chunks under the cap and sends each chunk in order.
+/**
+ * The provider PTY WebSocket message cap, in bytes. The provider rejects a single
+ * PTY message over this size with WebSocket close code 1009 and closes the
+ * connection.
+ */
+export const PTY_MESSAGE_CAP_BYTES = 65536;
+/**
+ * The maximum byte length of one host-to-sandbox chunk. It holds about 5 KiB of
+ * headroom under {@link PTY_MESSAGE_CAP_BYTES}, so a chunk never sits on the cap
+ * boundary. A later change in how the provider counts message overhead does not
+ * push one chunk over the cap and back into the close-code-1009 failure. The
+ * headroom costs about nine percent more messages for a large payload.
+ *
+ * The chunker slices bytes, not string characters, so a chunk boundary can split
+ * a multi-byte UTF-8 sequence. The read-side streaming `TextDecoder` rejoins a
+ * split sequence, so a byte slice is safe. A string-index slice could split a
+ * surrogate pair, so the chunker never slices by character.
+ */
+export const PTY_INPUT_CHUNK_BYTES = 60 * 1024;
+/** The single UTF-8 encoder the chunker reuses for every string payload. */
+const PTY_INPUT_TEXT_ENCODER = new TextEncoder();
+/**
+ * Send one host-to-sandbox payload as byte-bounded chunks under the provider
+ * message cap. The function encodes a string payload to UTF-8 bytes, slices the
+ * byte array into chunks of at most {@link PTY_INPUT_CHUNK_BYTES}, and calls
+ * `sendInput` for each chunk in order.
+ *
+ * The loop awaits each chunk before it sends the next chunk. The `await` keeps
+ * the wire order equal to the slice order, and it makes the chunk send fail-fast:
+ * after a chunk rejects, the function sends no further chunk of this payload. A
+ * synchronous loop could not fail-fast, because `sendInput` reaches `ws.send`
+ * before its first `await`, so a synchronous loop puts every chunk on the wire
+ * before the first rejection settles. The awaited loop learns the rejection
+ * before it sends the next chunk, so it stops.
+ *
+ * The function does not overlap two calls for the same channel. The caller
+ * serializes its writes (for example, through a promise chain), so the awaited
+ * loop of one payload never interleaves its chunks with the chunks of the next
+ * payload.
+ *
+ * `onError` runs at most one time. The function reports the first rejected chunk
+ * and returns. A rejected send never throws out of this function, so the caller's
+ * stream stays the single result path.
+ *
+ * @param sendInput - Sends one raw byte chunk to the pseudo-terminal.
+ * @param payload - The host-to-sandbox payload, as a string or raw bytes.
+ * @param onError - Optional. The function calls it one time on the first rejected chunk.
+ */
+export async function sendPtyInputInChunks(sendInput, payload, onError) {
+    const bytes = typeof payload === "string" ? PTY_INPUT_TEXT_ENCODER.encode(payload) : payload;
+    for (let offset = 0; offset < bytes.length; offset += PTY_INPUT_CHUNK_BYTES) {
+        const chunk = bytes.subarray(offset, offset + PTY_INPUT_CHUNK_BYTES);
+        try {
+            // Await the send before the next chunk. The await keeps the wire order and
+            // lets the loop learn a rejection before it starts a later send.
+            await sendInput(chunk);
+        }
+        catch {
+            // Report the first rejected chunk one time and stop. The function starts no
+            // later send for this payload, so the wire keeps the ordered, fail-fast
+            // behavior. The raw provider error never leaves this function.
+            onError?.();
+            return;
+        }
+    }
+}
+//# sourceMappingURL=pty-chunked-input.js.map

package/dist/pty-chunked-input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-chunked-input.js","sourceRoot":"","sources":["../src/pty-chunked-input.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,6EAA6E;AAC7E,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,gFAAgF;AAChF,sDAAsD;AAEtD;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAE3C;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,4EAA4E;AAC5E,MAAM,sBAAsB,GAAG,IAAI,WAAW,EAAE,CAAC;AAEjD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAA+C,EAC/C,OAA4B,EAC5B,OAAoB;IAEpB,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC7F,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,MAAM,IAAI,qBAAqB,EAAE,CAAC;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,qBAAqB,CAAC,CAAC;QACrE,IAAI,CAAC;YACH,2EAA2E;YAC3E,iEAAiE;YACjE,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;YAC5E,wEAAwE;YACxE,+DAA+D;YAC/D,OAAO,EAAE,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/pty-chunked-input.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pty-chunked-input.test.d.ts.map

package/dist/pty-chunked-input.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-chunked-input.test.d.ts","sourceRoot":"","sources":["../src/pty-chunked-input.test.ts"],"names":[],"mappings":""}

package/dist/pty-chunked-input.test.js

@@ -0,0 +1,115 @@
+import { describe, expect, it } from "vitest";
+import { PTY_INPUT_CHUNK_BYTES, PTY_MESSAGE_CAP_BYTES, sendPtyInputInChunks, } from "./pty-chunked-input.js";
+/**
+ * A fake `sendInput`. It records each raw byte chunk, so a test asserts the chunk
+ * count, the chunk sizes, and the rejoined bytes. It copies each chunk, because
+ * the chunker passes a `subarray` view of one shared byte array.
+ */
+function createByteRecorder() {
+    const chunks = [];
+    return {
+        chunks,
+        async sendInput(chunk) {
+            chunks.push(Uint8Array.from(chunk));
+        },
+    };
+}
+/** Concatenate the recorded chunks into one byte array. */
+function concatChunks(chunks) {
+    const total = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
+    const joined = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        joined.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return joined;
+}
+describe("sendPtyInputInChunks", () => {
+    it("sends a payload below the cap as exactly one send", async () => {
+        const recorder = createByteRecorder();
+        await sendPtyInputInChunks(recorder.sendInput, "a small frame\n");
+        expect(recorder.chunks).toHaveLength(1);
+        expect(recorder.chunks[0]?.length).toBeLessThanOrEqual(PTY_MESSAGE_CAP_BYTES);
+    });
+    it("splits a payload above the cap into more than one send, each at or below the cap", async () => {
+        const recorder = createByteRecorder();
+        // A fixed payload well above the provider message cap. It stays fixed, so a
+        // raised chunk size above this size makes the payload one send and fails this
+        // test.
+        const payload = new Uint8Array(150_416).fill(65);
+        await sendPtyInputInChunks(recorder.sendInput, payload);
+        expect(recorder.chunks.length).toBeGreaterThan(1);
+        for (const chunk of recorder.chunks) {
+            expect(chunk.length).toBeLessThanOrEqual(PTY_INPUT_CHUNK_BYTES);
+            expect(chunk.length).toBeLessThanOrEqual(PTY_MESSAGE_CAP_BYTES);
+        }
+        expect(concatChunks(recorder.chunks)).toEqual(payload);
+    });
+    it("slices a multi-byte character across a boundary by bytes and rejoins it", async () => {
+        const recorder = createByteRecorder();
+        // A fixed payload: one 1-byte "x", then the 3-byte character "€" repeated. It
+        // stays fixed, so a raised chunk size above this size makes the payload one
+        // send and fails this test. The chunk size is a multiple of 3, so a pure "€"
+        // run would put every boundary on a character edge. The 1-byte prefix shifts
+        // the "€" run by one byte, so the first chunk boundary lands inside one "€"
+        // sequence.
+        const text = `x${"€".repeat(30_000)}`;
+        const inputBytes = new TextEncoder().encode(text);
+        expect(inputBytes.length).toBe(90_001);
+        await sendPtyInputInChunks(recorder.sendInput, text);
+        expect(recorder.chunks.length).toBeGreaterThan(1);
+        // The first chunk holds exactly the byte cap and ends inside a "€" sequence,
+        // because the 1-byte prefix shifts the 3-byte run off the cap boundary. A
+        // character-index slice could never end mid-sequence, so the slice is by bytes.
+        expect(recorder.chunks[0]?.length).toBe(PTY_INPUT_CHUNK_BYTES);
+        // The rejoined bytes equal the input bytes, so a split multi-byte sequence is
+        // whole again. A streaming decoder on the read side then decodes it.
+        const joined = concatChunks(recorder.chunks);
+        expect(joined).toEqual(inputBytes);
+        expect(new TextDecoder("utf-8").decode(joined)).toBe(text);
+    });
+    it("resolves each send before it starts the next send", async () => {
+        let active = 0;
+        let maxActive = 0;
+        const sendCount = { value: 0 };
+        // A `sendInput` that stays active across a microtask. The awaited loop starts
+        // the next send only after the previous send resolves, so at most one send is
+        // active at a time. A synchronous burst would start every send at once.
+        const sendInput = async () => {
+            active += 1;
+            maxActive = Math.max(maxActive, active);
+            await Promise.resolve();
+            sendCount.value += 1;
+            active -= 1;
+        };
+        // Three chunks of the byte cap plus a short tail.
+        const payload = new Uint8Array(PTY_INPUT_CHUNK_BYTES * 3 + 10).fill(65);
+        await sendPtyInputInChunks(sendInput, payload);
+        expect(sendCount.value).toBe(4);
+        expect(maxActive).toBe(1);
+    });
+    it("stops sending later chunks after a chunk rejects", async () => {
+        const chunks = [];
+        let errorCount = 0;
+        // A `sendInput` that records the chunk, then rejects on a later microtask. The
+        // rejection is asynchronous, so a synchronous burst could not stop the later
+        // sends. The awaited loop learns the rejection before the next send, so it
+        // sends one chunk only.
+        const sendInput = async (chunk) => {
+            chunks.push(chunk);
+            await Promise.resolve();
+            throw new Error("RAW-PROVIDER-BROKEN-PIPE");
+        };
+        // A payload above the cap, so the chunker would fire more than one chunk with
+        // no fail-fast. The loop stops after the first rejected chunk.
+        await sendPtyInputInChunks(sendInput, new Uint8Array(150_416).fill(65), () => {
+            errorCount += 1;
+        });
+        // The loop sent one chunk, learned the rejection, and started no later send.
+        expect(chunks).toHaveLength(1);
+        // The error handler ran one time for the whole payload.
+        expect(errorCount).toBe(1);
+    });
+});
+//# sourceMappingURL=pty-chunked-input.test.js.map

package/dist/pty-chunked-input.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pty-chunked-input.test.js","sourceRoot":"","sources":["../src/pty-chunked-input.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAEhC;;;;GAIG;AACH,SAAS,kBAAkB;IAIzB,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,OAAO;QACL,MAAM;QACN,KAAK,CAAC,SAAS,CAAC,KAAiB;YAC/B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,SAAS,YAAY,CAAC,MAA6B;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QAEtC,MAAM,oBAAoB,CAAC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;QAElE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,4EAA4E;QAC5E,8EAA8E;QAC9E,QAAQ;QACR,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEjD,MAAM,oBAAoB,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAExD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;YAChE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,QAAQ,GAAG,kBAAkB,EAAE,CAAC;QACtC,8EAA8E;QAC9E,4EAA4E;QAC5E,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,YAAY;QACZ,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEvC,MAAM,oBAAoB,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAErD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAClD,6EAA6E;QAC7E,0EAA0E;QAC1E,gFAAgF;QAChF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/D,8EAA8E;QAC9E,qEAAqE;QACrE,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/B,8EAA8E;QAC9E,8EAA8E;QAC9E,wEAAwE;QACxE,MAAM,SAAS,GAAG,KAAK,IAAmB,EAAE;YAC1C,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,SAAS,CAAC,KAAK,IAAI,CAAC,CAAC;YACrB,MAAM,IAAI,CAAC,CAAC;QACd,CAAC,CAAC;QACF,kDAAkD;QAClD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,qBAAqB,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAExE,MAAM,oBAAoB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,+EAA+E;QAC/E,6EAA6E;QAC7E,2EAA2E;QAC3E,wBAAwB;QACxB,MAAM,SAAS,GAAG,KAAK,EAAE,KAAiB,EAAiB,EAAE;YAC3D,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC,CAAC;QAEF,8EAA8E;QAC9E,+DAA+D;QAC/D,MAAM,oBAAoB,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE;YAC3E,UAAU,IAAI,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QAEH,6EAA6E;QAC7E,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC/B,wDAAwD;QACxD,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tar-listing.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tar-listing.test.d.ts.map

package/dist/tar-listing.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar-listing.test.d.ts","sourceRoot":"","sources":["../src/tar-listing.test.ts"],"names":[],"mappings":""}

package/dist/tar-listing.test.js

@@ -0,0 +1,220 @@
+import { promises as fs } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { afterEach, expect, it, vi } from "vitest";
+vi.mock("./plugin.js", () => ({ getPluginTracer: () => undefined }));
+import { environmentSyncErrorData, withEnvironmentSyncErrorCapture, withEnvironmentSyncTransferStep, readEnvironmentSyncErrorDiagnostic } from "@tickernelz/wardmote-plugin-sdk";
+import { assertTarballEntriesConfined } from "./file-sync.js";
+const temporaryDirectories = [];
+afterEach(async () => {
+    vi.unstubAllEnvs();
+    await Promise.all(temporaryDirectories.splice(0).map((dir) => fs.rm(dir, { recursive: true, force: true })));
+});
+async function temporaryDirectory() {
+    const dir = await fs.mkdtemp(path.join(os.tmpdir(), "daytona-tar-listing-"));
+    temporaryDirectories.push(dir);
+    return dir;
+}
+// Empty USTAR members are sufficient to exercise the real host tar listing.
+// Repeating a member is valid tar and avoids creating 145,000 host files just
+// to reproduce the archive metadata buffer limit.
+function tarHeader(name, prefix = "", target) {
+    const header = Buffer.alloc(512);
+    header.write(name, 0, 100);
+    header.write("0000644\0", 100);
+    header.write("0000000\0", 108);
+    header.write("0000000\0", 116);
+    header.write("00000000000\0", 124);
+    header.write("00000000000\0", 136);
+    header.fill(32, 148, 156);
+    header.write(target === undefined ? "0" : "2", 156);
+    if (target !== undefined)
+        header.write(target, 157, 100);
+    header.write("ustar\0", 257);
+    header.write("00", 263);
+    header.write(prefix, 345, 155);
+    const sum = header.reduce((total, value) => total + value, 0);
+    header.write(`${sum.toString(8).padStart(6, "0")}\0 `, 148);
+    return header;
+}
+it.each([false, true])("validates every member beyond 32 MiB of real tar names (unsafe suffix: %s)", async (unsafeSuffix) => {
+    const archive = path.join(await temporaryDirectory(), "large.tar");
+    const prefix = "nested-".repeat(21);
+    const name = "asset-".repeat(15);
+    const count = 145_000;
+    expect((prefix.length + 1 + name.length) * count).toBeGreaterThan(32 * 1024 * 1024);
+    const header = tarHeader(name, prefix);
+    const batch = Buffer.concat(Array.from({ length: 1_000 }, () => header));
+    const file = await fs.open(archive, "w");
+    try {
+        for (let written = 0; written < count; written += 1_000)
+            await file.write(batch);
+        if (unsafeSuffix)
+            await file.write(tarHeader("escape", "", "../../outside"));
+        await file.write(Buffer.alloc(1_024));
+    }
+    finally {
+        await file.close();
+    }
+    if (unsafeSuffix) {
+        await expect(assertTarballEntriesConfined(archive)).rejects.toThrow("link whose target escapes");
+    }
+    else {
+        await expect(assertTarballEntriesConfined(archive)).resolves.toBeUndefined();
+    }
+}, 30_000);
+async function fakeTar(script) {
+    const directory = await temporaryDirectory();
+    const pidFile = path.join(directory, "pid");
+    await fs.writeFile(path.join(directory, "tar"), `#!${process.execPath}\n` +
+        `require("node:fs").appendFileSync(${JSON.stringify(pidFile)}, String(process.pid) + "\\n");\n${script}\n`, { mode: 0o755 });
+    vi.stubEnv("PATH", `${directory}${path.delimiter}${process.env.PATH}`);
+    return async () => {
+        const pids = (await fs.readFile(pidFile, "utf8")).trim().split("\n").map(Number);
+        for (const pid of pids)
+            expect(() => process.kill(pid, 0)).toThrow();
+    };
+}
+const safeLine = "-rw-r--r-- 0/0 0 2026-09-27 12:00 nested/café.txt";
+// The child streams batches with pipe backpressure; quota tests do not allocate
+// a complete oversized listing in either the parent or the child.
+function listingWriter(line, count, tail = "") {
+    return `
+    const { once } = require("node:events");
+    const line = Buffer.from(${JSON.stringify(line)});
+    (async () => {
+      let left = ${count};
+      while (left > 0) {
+        const size = Math.min(left, Math.max(1, Math.floor(65536 / line.length)));
+        const batch = Buffer.concat(Array.from({ length: size }, () => line));
+        if (!process.stdout.write(batch)) await once(process.stdout, "drain");
+        left -= size;
+      }
+      process.stdout.write(${JSON.stringify(tail)});
+    })();
+  `;
+}
+it.each([false, true])("bounds aggregate listing bytes at 64 MiB (over quota: %s)", async (overQuota) => {
+    const line = "-rw-r--r-- 0/0 0 2026-09-27 12:00 ".padEnd(4095, "x") + "\n";
+    const count = 64 * 1024 * 1024 / Buffer.byteLength(line) + Number(overQuota);
+    const checkReaped = await fakeTar(listingWriter(line, count));
+    await withEnvironmentSyncErrorCapture(async () => {
+        const result = assertTarballEntriesConfined("unused.tar");
+        if (overQuota) {
+            const error = await result.catch(error => error);
+            expect(error.message).toContain("total listing byte limit");
+            expect(readEnvironmentSyncErrorDiagnostic({ data: environmentSyncErrorData(error) })?.transferFailureKind).toBe("listing_byte_limit");
+        }
+        else
+            await expect(result).resolves.toBeUndefined();
+    });
+    await checkReaped();
+}, 30_000);
+it.each([false, true])("bounds aggregate listing entries at 250,000 (over quota: %s)", async (overQuota) => {
+    // The over-quota member has no newline: EOF must pass the same admission gate.
+    const checkReaped = await fakeTar(listingWriter(safeLine + "\n", 250_000, overQuota ? safeLine : ""));
+    await withEnvironmentSyncErrorCapture(async () => {
+        const result = assertTarballEntriesConfined("unused.tar");
+        if (overQuota) {
+            const error = await result.catch(error => error);
+            expect(error.message).toContain("listing entry limit");
+            expect(readEnvironmentSyncErrorDiagnostic({ data: environmentSyncErrorData(error) })?.transferFailureKind).toBe("listing_entry_limit");
+        }
+        else
+            await expect(result).resolves.toBeUndefined();
+    });
+    await checkReaped();
+}, 30_000);
+it("counts blank lines against the aggregate parsing quota", async () => {
+    const checkReaped = await fakeTar(listingWriter("\n", 250_001));
+    await expect(assertTarballEntriesConfined("unused.tar")).rejects.toThrow("listing entry limit");
+    await checkReaped();
+});
+it("enforces quotas independently on repeated and concurrent listings and reaps every child", async () => {
+    const checkReaped = await fakeTar(`
+    if (process.argv[3] === "small.tar") process.stdout.write(${JSON.stringify(safeLine + "\n")});
+    else { ${listingWriter(safeLine + "\n", 250_001)} }
+  `);
+    const results = await Promise.allSettled([
+        assertTarballEntriesConfined("large-a.tar"),
+        assertTarballEntriesConfined("small.tar"),
+        assertTarballEntriesConfined("large-b.tar"),
+    ]);
+    expect(results[0]).toMatchObject({ status: "rejected", reason: expect.objectContaining({ message: expect.stringContaining("listing entry limit") }) });
+    expect(results[1]).toMatchObject({ status: "fulfilled" });
+    expect(results[2]).toMatchObject({ status: "rejected", reason: expect.objectContaining({ message: expect.stringContaining("listing entry limit") }) });
+    await expect(assertTarballEntriesConfined("large-again.tar")).rejects.toThrow("listing entry limit");
+    await checkReaped();
+}, 30_000);
+it("preserves UTF-8 split across chunks and checks a final line without a newline", async () => {
+    const checkReaped = await fakeTar(`
+    const bytes = Buffer.from(${JSON.stringify(safeLine)});
+    const split = bytes.indexOf(Buffer.from("é")) + 1;
+    process.stdout.write(bytes.subarray(0, split));
+    setTimeout(() => process.stdout.write(bytes.subarray(split)), 30);
+  `);
+    await expect(assertTarballEntriesConfined("unused.tar")).resolves.toBeUndefined();
+    await checkReaped();
+});
+it.each([
+    "not a tar listing",
+    "-rw-r--r-- 0/0 0 2026-09-27 12:00 ../escape",
+    "lrwxrwxrwx 0/0 0 2026-09-27 12:00 link -> /outside",
+    "hrw-r--r-- 0/0 0 2026-09-27 12:00 link link to ../../outside",
+    "lrwxrwxrwx 0/0 0 2026-09-27 12:00 link -> decoy -> ../../outside",
+])("rejects an unsafe final listing and reaps the child: %s", async (line) => {
+    const checkReaped = await fakeTar(`process.stdout.write(${JSON.stringify(line)});`);
+    await expect(assertTarballEntriesConfined("unused.tar")).rejects.toThrow("Daytona syncOut refusing");
+    await checkReaped();
+});
+it("bounds an unterminated entry instead of buffering it indefinitely", async () => {
+    const checkReaped = await fakeTar(`process.stdout.write("x".repeat(65_537)); setInterval(() => {}, 1_000);`);
+    await expect(assertTarballEntriesConfined("unused.tar")).rejects.toThrow("entry listing exceeding the byte limit");
+    await checkReaped();
+});
+it("bounds stderr and reaps a noisy tar process", async () => {
+    const checkReaped = await fakeTar(`process.stderr.write("x".repeat(65_537)); setInterval(() => {}, 1_000);`);
+    await expect(assertTarballEntriesConfined("unused.tar")).rejects.toThrow("diagnostics exceed the byte limit");
+    await checkReaped();
+});
+it("rejects nonzero tar exit even after a valid listing", async () => {
+    const checkReaped = await fakeTar(`process.stdout.write(${JSON.stringify(safeLine + "\n")}); process.exitCode = 2;`);
+    await expect(assertTarballEntriesConfined("unused.tar")).rejects.toThrow("tar listing failed (2)");
+    await checkReaped();
+});
+it("times out and reaps a stalled listing process", async () => {
+    const checkReaped = await fakeTar(`setInterval(() => {}, 1_000);`);
+    // Leave enough startup time for the PID witness under parallel test load.
+    await expect(assertTarballEntriesConfined("unused.tar", 2_000)).rejects.toThrow("timed out");
+    await checkReaped();
+});
+it("rejects spawn failures without hanging", async () => {
+    vi.stubEnv("PATH", await temporaryDirectory());
+    await expect(assertTarballEntriesConfined("unused.tar")).rejects.toThrow("ENOENT");
+});
+it.each([
+    ["process.exitCode = 2;", "command_failed", 2, "unknown"],
+    ['process.stdout.write("x".repeat(65_537)); setInterval(() => {}, 1_000);', "listing_line_limit", undefined, "unknown"],
+    ['process.stderr.write("x".repeat(65_537)); setInterval(() => {}, 1_000);', "listing_stderr_limit", undefined, "unknown"],
+    ['process.stdout.write("invalid-private-listing");', "unsafe_archive", undefined, "unknown"],
+    ['setInterval(() => {}, 1_000);', "listing_timeout", undefined, "ETIMEDOUT"],
+])("records bounded listing evidence and reaps the child (%s)", async (script, kind, exitCode, errorCode) => {
+    const checkReaped = await fakeTar(script);
+    await withEnvironmentSyncErrorCapture(async () => {
+        let caught;
+        try {
+            await withEnvironmentSyncTransferStep("archive_validate", () => assertTarballEntriesConfined("private-archive.tar", 2_000));
+        }
+        catch (error) {
+            caught = error;
+        }
+        expect(caught).toBeInstanceOf(Error);
+        const diagnostic = readEnvironmentSyncErrorDiagnostic({ data: environmentSyncErrorData(caught) });
+        expect(diagnostic).toEqual({ errorCode, transferStep: "archive_validate", transferFailureKind: kind,
+            ...(exitCode !== undefined ? { exitCode } : {}),
+        });
+        expect(JSON.stringify(diagnostic)).not.toContain("private-");
+    });
+    await checkReaped();
+});
+//# sourceMappingURL=tar-listing.test.js.map

package/dist/tar-listing.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar-listing.test.js","sourceRoot":"","sources":["../src/tar-listing.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEnD,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;AACrE,OAAO,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AACjL,OAAO,EAAE,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAE9D,MAAM,oBAAoB,GAAa,EAAE,CAAC;AAC1C,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,EAAE,CAAC,aAAa,EAAE,CAAC;IACnB,MAAM,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAC/G,CAAC,CAAC,CAAC;AAEH,KAAK,UAAU,kBAAkB;IAC/B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC7E,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,8EAA8E;AAC9E,kDAAkD;AAClD,SAAS,SAAS,CAAC,IAAY,EAAE,MAAM,GAAG,EAAE,EAAE,MAAe;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC1B,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACpD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxB,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,4EAA4E,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;IAC1H,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,kBAAkB,EAAE,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC;IACtB,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IACpF,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjF,IAAI,YAAY;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC;QAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC/E,CAAC;AACH,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,KAAK,UAAU,OAAO,CAAC,MAAc;IACnC,MAAM,SAAS,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ,IAAI;QACvE,qCAAqC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,oCAAoC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/H,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,OAAO,KAAK,IAAI,EAAE;QAChB,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjF,KAAK,MAAM,GAAG,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACvE,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,mDAAmD,CAAC;AAErE,gFAAgF;AAChF,kEAAkE;AAClE,SAAS,aAAa,CAAC,IAAY,EAAE,KAAa,EAAE,IAAI,GAAG,EAAE;IAC3D,OAAO;;+BAEsB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;;mBAEhC,KAAK;;;;;;;6BAOK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;;GAE9C,CAAC;AACJ,CAAC;AAED,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,2DAA2D,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;IACtG,MAAM,IAAI,GAAG,oCAAoC,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,IAAI,CAAC;IAC3E,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAC9D,MAAM,+BAA+B,CAAC,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YAC5D,MAAM,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxI,CAAC;;YAAM,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,8DAA8D,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;IACzG,+EAA+E;IAC/E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,QAAQ,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtG,MAAM,+BAA+B,CAAC,KAAK,IAAI,EAAE;QAC/C,MAAM,MAAM,GAAG,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;YACjD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;YACvD,MAAM,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACzI,CAAC;;YAAM,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,EAAE,MAAM,CAAC,CAAC;AAEX,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;IACtE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAChG,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;IACvG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC;gEAC4B,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC;aAClF,aAAa,CAAC,QAAQ,GAAG,IAAI,EAAE,OAAO,CAAC;GACjD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;QACvC,4BAA4B,CAAC,aAAa,CAAC;QAC3C,4BAA4B,CAAC,WAAW,CAAC;QACzC,4BAA4B,CAAC,aAAa,CAAC;KAC5C,CAAC,CAAC;IACH,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvJ,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACvJ,MAAM,MAAM,CAAC,4BAA4B,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACrG,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,EAAE,MAAM,CAAC,CAAC;AACX,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC;gCACJ,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;GAIrD,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;IAClF,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC;IACN,mBAAmB;IACnB,6CAA6C;IAC7C,oDAAoD;IACpD,8DAA8D;IAC9D,kEAAkE;CACnE,CAAC,CAAC,yDAAyD,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;IAC3E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpF,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IACrG,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;IACjF,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,yEAAyE,CAAC,CAAC;IAC7G,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACnH,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;IAC3D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,yEAAyE,CAAC,CAAC;IAC7G,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAC9G,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;IACnE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,wBAAwB,IAAI,CAAC,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACrH,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACnG,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;IAC7D,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACnE,0EAA0E;IAC1E,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7F,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;IACtD,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,kBAAkB,EAAE,CAAC,CAAC;IAC/C,MAAM,MAAM,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AACrF,CAAC,CAAC,CAAC;AAGH,EAAE,CAAC,IAAI,CAAC;IACN,CAAC,uBAAuB,EAAE,gBAAgB,EAAE,CAAC,EAAE,SAAS,CAAC;IACzD,CAAC,yEAAyE,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,CAAC;IACvH,CAAC,yEAAyE,EAAE,sBAAsB,EAAE,SAAS,EAAE,SAAS,CAAC;IACzH,CAAC,kDAAkD,EAAE,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC;IAC5F,CAAC,+BAA+B,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,CAAC;CACpE,CAAC,CAAC,2DAA2D,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;IACnH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,+BAA+B,CAAC,KAAK,IAAI,EAAE;QAC/C,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,+BAA+B,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC;QACpI,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,KAAK,CAAC;QAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,kCAAkC,CAAC,EAAE,IAAI,EAAE,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClG,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,IAAI;YACjG,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,MAAM,WAAW,EAAE,CAAC;AACtB,CAAC,CAAC,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,3 @@
+import plugin from "./plugin.js";
+export default plugin;
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AACA,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,eAAe,MAAM,CAAC"}

package/dist/worker.js

@@ -0,0 +1,5 @@
+import { runWorker } from "@tickernelz/wardmote-plugin-sdk";
+import plugin from "./plugin.js";
+export default plugin;
+runWorker(plugin, import.meta.url);
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,eAAe,MAAM,CAAC;AACtB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC"}

package/package.json

@@ -1,18 +1,44 @@
 {
   "name": "@tickernelz/wardmote-plugin-daytona",
-  "version": "0.0.0",
-  "description": "Placeholder publish reserving this name for Paperclip's release pipeline. Do not install this version.",
+  "version": "2026.1108.1",
+  "description": "Daytona sandbox provider plugin for Paperclip environments",
   "license": "MIT",
-  "main": "index.js",
-  "files": [
-    "index.js"
-  ],
+  "homepage": "https://github.com/tickernelz/wardmote",
+  "bugs": {
+    "url": "https://github.com/tickernelz/wardmote/issues"
+  },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/tickernelz/wardmote.git"
+    "url": "https://github.com/tickernelz/wardmote",
+    "directory": "packages/plugins/sandbox-providers/daytona"
   },
-  "homepage": "https://github.com/tickernelz/wardmote",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "publishConfig": {
     "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "paperclipPlugin": {
+    "manifest": "./dist/manifest.js",
+    "worker": "./dist/worker.js"
+  },
+  "keywords": [
+    "paperclip",
+    "plugin",
+    "sandbox",
+    "daytona"
+  ],
+  "dependencies": {
+    "@daytonaio/sdk": "0.203.0",
+    "@tickernelz/wardmote-plugin-sdk": "2026.1108.1"
   }
-}
+}

package/index.js

@@ -1 +0,0 @@
-throw new Error("@tickernelz/wardmote-plugin-daytona@0.0.0 is a placeholder that reserves the package name for Paperclip's release pipeline. It contains no functionality; the first real release supersedes it. See https://github.com/tickernelz/wardmote");