@veris-ai/daytona 0.3.0 → 0.4.0

package/dist/trust.d.ts

@@ -136,6 +136,44 @@ export declare function bundledCaPatchScript(): string;
 export declare const NODE_TRUST_FLAG = "--use-openssl-ca";
 /** NODE_OPTIONS with the trust flag appended to whatever the caller set. */
 export declare function nodeOptionsWithTrust(existing?: string): string;
+/**
+ * Where the proxy preload lands in the sandbox. World-readable, like the CA
+ * bundle: anything that starts a Node process can name it.
+ */
+export declare const NODE_PROXY_PRELOAD = "/tmp/veris-node-proxy.cjs";
+/** The NODE_OPTIONS flag that loads it before the application's first line. */
+export declare const NODE_PROXY_FLAG = "--require /tmp/veris-node-proxy.cjs";
+/**
+ * NODE_USE_ENV_PROXY reaches exactly two things: Node's global agents and the
+ * global fetch dispatcher. An SDK that constructs its own http(s).Agent — the
+ * usual way to get keep-alive pooling; stripe-node, the AWS SDK's Node handler
+ * and Twilio's client all do — never sees the proxy, resolves the vendor host
+ * itself, and dies on Daytona's blocked egress with EAI_AGAIN. Measured with
+ * stripe-node 15 in a wired sandbox: the global agent 200, its own agent
+ * EAI_AGAIN, its own agent with `proxyEnv: process.env` 200.
+ *
+ * So every Agent is given the proxy environment at construction, from a
+ * preload Node loads before the application: subclass the two Agent classes
+ * and default `proxyEnv` to the process environment. `proxyEnv` is Node 24+;
+ * older Node ignores the option, which is also where NODE_USE_ENV_PROXY is
+ * inert, so nothing regresses there. A caller's own `proxyEnv` wins because
+ * the spread comes after ours. Clients built on undici Pools or Clients hold
+ * their own dispatcher and are not covered here.
+ */
+export declare function nodeProxyPreloadScript(): string;
+/** NODE_OPTIONS with the proxy preload appended to whatever the caller set. */
+export declare function nodeOptionsWithProxy(existing?: string): string;
+/**
+ * The NODE_OPTIONS a wired sandbox needs, merged into the caller's own: the
+ * proxy preload always, the trust flag when the CA is installed. Appended,
+ * never replaced, and never twice — a caller's `--max-old-space-size` or
+ * `--experimental-vm-modules` keeps working beside ours. Use it wherever a
+ * NODE_OPTIONS value is built for a command in the sandbox, so setting one
+ * for the application cannot silently drop what makes its vendor calls work.
+ */
+export declare function verisNodeOptions(existing?: string, opts?: {
+    trust?: boolean;
+}): string;
 /**
  * The store-based install, for stacks that read a trust store rather than an
  * env var — a Java client honours no CA variable at all. Rebuilds the system

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veris-ai/daytona",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Veris twin interception for Daytona: a drop-in @daytona/sdk whose sandboxes come up with a Veris twin already answering their vendor API calls. Unmodified code, real hostnames, receipts.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -13,9 +13,6 @@
       "require": "./dist/index.cjs"
     }
   },
-  "bin": {
-    "veris-daytona": "./dist/cli.js"
-  },
   "sideEffects": false,
   "files": [
     "dist",

package/dist/cli.d.ts

@@ -1 +0,0 @@
-export declare function main(argv: readonly string[]): Promise<number>;