@alienplatform/core 3.3.16 → 3.3.18

package/dist/index.d.ts

@@ -23737,6 +23737,7 @@ declare const SandboxCapabilitiesSchema: z$2.ZodObject<{
   reconnect: z$2.ZodBoolean;
   sessionLifetime: z$2.ZodBoolean;
   snapshot: z$2.ZodBoolean;
+  supervisorIsolation: z$2.ZodBoolean;
   supervisorPidNamespace: z$2.ZodBoolean;
   suspendResume: z$2.ZodBoolean;
 }, z$2.core.$strip>;
@@ -26872,7 +26873,6 @@ declare const WorkerSchema: z$2.ZodObject<{
     }>>;
     path: z$2.ZodOptional<z$2.ZodString>;
   }, z$2.core.$strip>, z$2.ZodNull]>>;
-  sandboxLauncher: z$2.ZodOptional<z$2.ZodBoolean>;
   timeoutSeconds: z$2.ZodOptional<z$2.ZodDefault<z$2.ZodInt>>;
   triggers: z$2.ZodArray<z$2.ZodUnion<readonly [z$2.ZodObject<{
     queue: z$2.ZodObject<{
@@ -28272,7 +28272,6 @@ declare const ResourceSchemaMapping: {
         }>>;
         path: z$1.ZodOptional<z$1.ZodString>;
       }, z$1.core.$strip>, z$1.ZodNull]>>;
-      sandboxLauncher: z$1.ZodOptional<z$1.ZodBoolean>;
       timeoutSeconds: z$1.ZodOptional<z$1.ZodDefault<z$1.ZodInt>>;
       triggers: z$1.ZodArray<z$1.ZodUnion<readonly [z$1.ZodObject<{
         queue: z$1.ZodObject<{
@@ -28790,8 +28789,11 @@ declare class Queue extends ResourceBuilder {
  *
  * Capabilities are not uniform. Call `capabilities()` on the binding and branch, or handle the
  * typed error — an unsupported capability never silently succeeds. Notably GCP cannot
- * reconnect to a session (its session id is scoped to one Cloud Run instance), Azure has no
- * file transfer, and no platform supports a hostname egress allowlist.
+ * reconnect to a session (its session id is scoped to one Cloud Run instance), only Azure
+ * restricts egress to a hostname allowlist, no platform can snapshot a session, and only AWS
+ * and Local run a command under a different identity than the process supervising it. Elsewhere the
+ * command shares the supervisor's user, so it can read the supervisor's environment and
+ * signal it, and the container is the isolation boundary.
  *
  * Limits are enforced ceilings, not scheduling hints, and are validated when the stack is
  * planned. A platform that cannot enforce them rejects the sandbox rather than ignoring them.