← Back to all sparks
D

Daytona

INFRA · APIS
Velocity5.0

Secure elastic infrastructure for running AI-generated code in isolated sandboxes for AI agents and apps

Daytona ships every few days, hardening its sandbox API toward something others can build on.

ai sandboxessdk ergonomicsdeveloper platformlifecycle controlrelease cadence
Current state
Daytona is on a rapid minor cadence, moving from 0.198.0 to 0.203.0 inside the visible two weeks. The work is almost entirely SDK and CLI surface: websocket event subscriptions, sandbox time-to-live control, pre-signed file transfer URLs, typed error codes, enforced TLS, and now organization member listing plus configurable client-side HTTP timeouts. Sandbox forking and snapshot creation graduated from experimental to stable in 0.202.0.
Where it's heading
The pattern is a platform moving from working to dependable: typed errors, daemon error codes made consistent across every SDK, lifecycle-aware listing and configurable timeouts are what matter once someone else's product depends on your API. The security and lifecycle work in parallel - TLS enforcement, stricter config permissions, TTLs and auto-pause - points at multi-tenant production workloads rather than local development.
Prediction
Now that member listing has reached the CLI, organization-level controls such as roles or quotas are the natural next increment. The continued tolerance for breaking changes, including the Python 3.10 floor and paginated secrets, indicates the API surface is not yet considered frozen.

Recent moves

  1. 9d ago

    Org members command and client-side HTTP timeout

    0.203.0 adds organization member listing to the CLI and configurable client-side HTTP timeouts in the TypeScript SDK, plus consistent daemon error codes across all SDKs. The org command is the first hint of team-level administration in a release series otherwise focused on the sandbox itself.

  2. 11d ago

    Stable sandbox fork and snapshot creation

    0.202.0 graduates sandbox forking and snapshot creation from experimental to stable, with clearer client-side error signaling. Promoting these two out of experimental is the most consequential step in the window, since forking a running sandbox is what makes branch-per-agent workflows practical.

  3. 13d ago

    Pre-signed file URLs and typed SDK errors

    0.201.0 adds pre-signed upload and download URLs, typed error codes and lifecycle-aware sandbox listing. File transfer that does not proxy through the API is a prerequisite for moving large artifacts in and out of sandboxes.

  4. 19d ago

    TLS enforcement and configurable Go SDK timeout

    0.200.0 enforces TLS verification, tightens config file permissions and makes Go SDK timeouts configurable. Security hardening consistent with the move toward hosted, multi-tenant use.

  5. 23d ago

    Sandbox TTL support and Python 3.10 floor

    0.199.0 introduces sandbox TTLs and raises the Python floor to 3.10 in a breaking change. Time-to-live control is a cost lever as much as a lifecycle one, matching the auto-pause work from the preceding release.

  6. 24d ago

    Websocket sandbox event subscriptions in SDKs

    0.198.0 adds websocket event subscriptions across every SDK, making sandbox lifecycle observable in real time. Push-based lifecycle events are what let an orchestrator react without polling.