@veris-ai/daytona 0.3.0 → 0.3.1

package/README.md

@@ -243,6 +243,35 @@ for you, between `--setup` and the command; a sandbox from `provision` carries
 the same patcher as a script at `/tmp/veris-patch-bundled-cas.sh`, so whoever
 installed the dependencies can run it with no SDK in hand.
 
+### Node, and what `NODE_OPTIONS` carries
+
+Three things make a Node process in the sandbox reach the twin, and the SDK
+sets all of them at create time:
+
+| variable | why |
+|---|---|
+| `NODE_USE_ENV_PROXY=1` | Node ignores `HTTPS_PROXY` otherwise, and Daytona blocks a direct dial |
+| `NODE_OPTIONS=--require /tmp/veris-node-proxy.cjs` | `NODE_USE_ENV_PROXY` reaches only the global agents; the preload gives every `http(s).Agent` the proxy environment, which is what an SDK with its own keep-alive agent (stripe-node, the AWS SDK, Twilio) needs |
+| `NODE_OPTIONS=--use-openssl-ca` | Daytona overwrites `NODE_EXTRA_CA_CERTS`; this makes Node read the system store the Veris CA is installed into |
+
+`NODE_OPTIONS` is one variable, so an application that sets its own value for
+a command (`--experimental-vm-modules`, `--max-old-space-size`) would drop
+both flags and every vendor call would fail on DNS or on the certificate. Build
+the value with `verisNodeOptions(yourOptions)`, which appends the two flags
+once, or pass it through `exec --env NODE_OPTIONS=…`, which merges them for
+you:
+
+```ts
+import { verisNodeOptions } from '@veris-ai/daytona'
+await sbx.process.executeCommand('npx jest', cwd, {
+  ...sbx.veris.getTrustEnv(),
+  NODE_OPTIONS: verisNodeOptions('--experimental-vm-modules'),
+})
+```
+
+Clients built on undici `Pool` or `Client` hold their own dispatcher and are
+not covered by the preload.
+
 ## Options
 
 ```ts

package/dist/cli.js

@@ -480,9 +480,38 @@ function bundledCaPatchScript() {
 }
 var NODE_TRUST_FLAG = "--use-openssl-ca";
 function nodeOptionsWithTrust(existing) {
+  return appendFlag(existing, NODE_TRUST_FLAG);
+}
+var NODE_PROXY_PRELOAD = "/tmp/veris-node-proxy.cjs";
+var NODE_PROXY_FLAG = `--require ${NODE_PROXY_PRELOAD}`;
+function nodeProxyPreloadScript() {
+  return [
+    `// Preloaded by @veris-ai/daytona through NODE_OPTIONS=--require.`,
+    `// Gives every http(s).Agent the proxy environment, which Node applies only`,
+    `// to its global agents under NODE_USE_ENV_PROXY=1. An SDK that builds its own`,
+    `// Agent would otherwise dial the vendor directly, which this sandbox cannot.`,
+    `for (const mod of [require("http"), require("https")]) {`,
+    `  const Base = mod.Agent`,
+    `  mod.Agent = class Agent extends Base {`,
+    `    constructor(options) {`,
+    `      super({ proxyEnv: process.env, ...(options || {}) })`,
+    `    }`,
+    `  }`,
+    `}`,
+    ``
+  ].join("\n");
+}
+function nodeOptionsWithProxy(existing) {
+  return appendFlag(existing, NODE_PROXY_FLAG);
+}
+function verisNodeOptions(existing, opts = {}) {
+  const withProxy = nodeOptionsWithProxy(existing);
+  return opts.trust === false ? withProxy : nodeOptionsWithTrust(withProxy);
+}
+function appendFlag(existing, flag) {
   const base = (existing ?? "").trim();
-  if (base.split(/\s+/).includes(NODE_TRUST_FLAG)) return base;
-  return base ? `${base} ${NODE_TRUST_FLAG}` : NODE_TRUST_FLAG;
+  if (base === flag || base.startsWith(`${flag} `) || base.endsWith(` ${flag}`) || base.includes(` ${flag} `)) return base;
+  return base ? `${base} ${flag}` : flag;
 }
 var CA_INSTALL_CMD = [
   "update-ca-certificates",
@@ -555,6 +584,7 @@ function assertProxyUrl(raw) {
 async function installCa(sandbox, caPem) {
   await sandbox.fs.uploadFile(Buffer.from(caPem, "utf8"), VERIS_CA_FILE);
   await sandbox.fs.uploadFile(Buffer.from(bundledCaPatchScript(), "utf8"), BUNDLED_CA_PATCH_SCRIPT);
+  await installNodeProxyPreload(sandbox);
   const script = [
     `chmod 0644 ${VERIS_CA_FILE}`,
     // Public roots first so they keep working; ours appended. `cat` of a
@@ -580,6 +610,9 @@ async function installCa(sandbox, caPem) {
     );
   }
 }
+async function installNodeProxyPreload(sandbox) {
+  await sandbox.fs.uploadFile(Buffer.from(nodeProxyPreloadScript(), "utf8"), NODE_PROXY_PRELOAD);
+}
 async function patchBundledCas(sandbox) {
   const r = await sh(sandbox, `sh ${BUNDLED_CA_PATCH_SCRIPT}`, 180).catch((e) => ({ exitCode: 1, result: String(e) }));
   return (r.result ?? "").split("\n").filter((line) => line.startsWith(BUNDLED_CA_PATCHED_MARKER)).map((line) => line.slice(BUNDLED_CA_PATCHED_MARKER.length).trim()).filter(Boolean);
@@ -872,7 +905,7 @@ function requireVerisCredentials(opts = {}) {
 }
 
 // src/version.ts
-var SDK_VERSION = true ? "0.3.0" : "0.0.0-dev";
+var SDK_VERSION = true ? "0.3.1" : "0.0.0-dev";
 
 // src/daytona.ts
 var LABEL = {
@@ -950,9 +983,12 @@ var Daytona = class extends BaseDaytona {
       const verisManaged = {
         ...v.installCa !== false ? sanitizeTrustEnv(void 0) : {},
         // Node reads none of the variables above once Daytona has overwritten
-        // them; the flag makes it read OpenSSL's store, which the CA install
-        // fills. Appended, not replaced: a caller's own NODE_OPTIONS keep working.
-        ...v.installCa !== false ? { NODE_OPTIONS: nodeOptionsWithTrust(rest.envVars?.NODE_OPTIONS) } : {},
+        // them; the trust flag makes it read OpenSSL's store, which the CA
+        // install fills. The preload gives every http(s).Agent the proxy
+        // environment, which NODE_USE_ENV_PROXY below reaches only for the
+        // global ones. Appended, not replaced: a caller's own NODE_OPTIONS keep
+        // working.
+        NODE_OPTIONS: verisNodeOptions(rest.envVars?.NODE_OPTIONS, { trust: v.installCa !== false }),
         // Node ignores HTTPS_PROXY unless told to, and Daytona blocks anything
         // that dials out directly — so without this every plain `https.get`
         // and `fetch` in Node 24+ dies with ECONNRESET instead of reaching
@@ -995,7 +1031,8 @@ var Daytona = class extends BaseDaytona {
       });
     }
     try {
-      await installCa(sandbox, credential.ca_pem);
+      if (v.installCa !== false) await installCa(sandbox, credential.ca_pem);
+      else await installNodeProxyPreload(sandbox);
       await probeCanary(sandbox, credential.canary_host, twin.id);
     } catch (err) {
       await sandbox.delete().catch(() => {
@@ -1344,7 +1381,9 @@ function shellQuote2(s) {
   return `'${s.replace(/'/g, `'\\''`)}'`;
 }
 function commandEnv(trust, user) {
-  return { ...trust, ...user };
+  const env = { ...trust, ...user };
+  if (typeof user.NODE_OPTIONS === "string") env.NODE_OPTIONS = verisNodeOptions(user.NODE_OPTIONS);
+  return env;
 }
 
 // src/push.ts