@archildata/api-types 0.0.41 → 0.0.43

package/index.d.ts

@@ -664,7 +664,8 @@ export interface paths {
          *     was paused, its memory snapshot is consumed and discarded before the
          *     new VM runs; disk state remains. Starting a running sandbox or a pending
          *     cold start is idempotent. A sandbox that is stopping, pausing, or
-         *     pending a resume returns 409.
+         *     pending a resume returns 409. An optional body replaces the sandbox's
+         *     disk mounts for this and later sessions.
          */
         post: operations["startSandbox"];
         delete?: never;
@@ -754,13 +755,15 @@ export interface components {
         SandboxState: "pending" | "running" | "pausing" | "paused" | "stopping" | "stopped" | "exited" | "failed" | "deleting" | "deleted";
         /** @enum {string} */
         SandboxNetworkAction: "allow" | "deny";
-        /** @description Deny targets take precedence when an address or domain matches both lists. When domain rules are present, TCP ports 80 and 443 are restricted to HTTP/1.1 or HTTP/2. Plaintext HTTP authority is enforced on port 80, but requests matching a transformation rule are rejected unless the rule also forwards. Port 443 is TLS-terminated; both TLS SNI and HTTP authority are evaluated, and the HTTP authority selects the upstream, any request transformations, and any request forwarding. DNS to the sandbox's configured resolvers is allowed and UDP port 443 is denied. */
+        /** @description Deny targets take precedence when an address or domain matches both lists. When domain rules or drain selectors are present, TCP ports 80 and 443 are restricted to HTTP/1.1 or HTTP/2. Plaintext HTTP authority is enforced on port 80, but requests matching a transformation rule are rejected unless the rule also forwards. Port 443 is TLS-terminated; both TLS SNI and HTTP authority are evaluated, and the HTTP authority selects the upstream, any request transformations, and any request forwarding. DNS to the sandbox's configured resolvers is allowed and UDP port 443 is denied. */
         SandboxEgressPolicy: {
             default: components["schemas"]["SandboxNetworkAction"];
             /** @description Allowed IPv4 addresses, CIDR ranges, exact domains, wildcard domains beginning with `*.`, or target objects with optional outbound HTTPS request transformations. A wildcard matches subdomains but not the apex domain, including when applying transformations. */
             allow?: (string | components["schemas"]["SandboxEgressRule"])[];
             /** @description Denied IPv4 addresses, CIDR ranges, exact domains, or wildcard domains beginning with `*.`. A wildcard matches subdomains but not the apex domain. */
             deny?: string[];
+            /** @description Optional hosts whose HTTP(S) requests should finish before pausing, regardless of URL path. Pausing gates new matching requests and waits up to ten minutes by default for active responses, including streams, before taking a snapshot. Errors stop counting, and expiry proceeds with the snapshot. This does not limit requests during normal operation. Selectors do not grant network access. Matching uses the original request host before transformations or forwarding. Only TCP ports 80 and 443 are supported. Connections may need to be retried after resume. */
+            drain_on_pause?: string[];
         };
         SandboxEgressRule: {
             /** @description Target allowed by this rule. Effective transformations and forwarding require an exact or wildcard lowercase domain. */
@@ -821,6 +824,7 @@ export interface components {
              * @default false
              */
             enable_service_ingress: boolean;
+            mounts?: components["schemas"]["SandboxMount"][];
             /** Format: date-time */
             created_at: string;
             /** Format: date-time */
@@ -838,6 +842,22 @@ export interface components {
              */
             checkpoint?: string;
         };
+        SandboxMount: {
+            disk_id: string;
+            /** @description Absolute guest directory to mount at. Required when more than one disk is mounted; a sole mount defaults to /mnt/archil. Guest system directories (/usr, /etc, /var, /opt, ...) are reserved, and a disk can be mounted once per sandbox. */
+            path?: string;
+            /** @description Relative subdirectory of the disk to expose instead of its root. */
+            subdirectory?: string;
+            /** @default false */
+            read_only: boolean;
+            /**
+             * @description Send mutating operations directly to the server without a delegation checkout, allowing concurrent writers.
+             * @default false
+             */
+            conditional: boolean;
+            /** @description Milliseconds to wait for the disk's exclusive root delegation before the mount fails. Not allowed with read_only or conditional. */
+            queue_ms?: number;
+        };
         SandboxEndpoint: {
             port: number;
             hostname: string;
@@ -951,6 +971,8 @@ export interface components {
                 [key: string]: string;
             };
             network?: components["schemas"]["SandboxNetwork"];
+            /** @description Archil disks mounted inside the guest for the first session; `start` can replace them for later sessions. Inherited by forks. A sandbox with mounts must be stopped before it can be forked. */
+            mounts?: components["schemas"]["SandboxMount"][];
             /**
              * @description Lifetime budget applied independently to each powered-on session. Expiry pauses the sandbox, preserving memory and processes for resume.
              * @default 86400
@@ -961,6 +983,10 @@ export interface components {
             /** @description Maximum number of concurrently attached process sessions. Detached processes and one-shot process controls do not count. */
             max_concurrent_execs?: number;
         };
+        StartSandboxRequest: {
+            /** @description Replace the sandbox's disk mounts for this and later sessions. Omit to keep the current ones. Not accepted by resume, and 409 while the sandbox is running or pending. */
+            mounts?: components["schemas"]["SandboxMount"][];
+        };
         ForkSandboxRequest: {
             /** @description Name for the fork. A random word-list name is generated when omitted. */
             name?: string;
@@ -2513,6 +2539,7 @@ export interface operations {
             };
             400: components["responses"]["ValidationError"];
             401: components["responses"]["Unauthorized"];
+            404: components["responses"]["NotFound"];
             /** @description The requested sandbox name already exists in the account */
             409: {
                 headers: {
@@ -3102,7 +3129,11 @@ export interface operations {
             };
             cookie?: never;
         };
-        requestBody?: never;
+        requestBody?: {
+            content: {
+                "application/json": components["schemas"]["StartSandboxRequest"];
+            };
+        };
         responses: {
             /** @description The sandbox was already running */
             200: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archildata/api-types",
-  "version": "0.0.41",
+  "version": "0.0.43",
   "description": "API types for the Archil control plane",
   "type": "module",
   "types": "index.d.ts",