@archildata/api-types 0.0.56 → 0.0.58

package/index.d.ts

@@ -1721,14 +1721,14 @@ export interface components {
         SandboxState: "pending" | "running" | "pausing" | "paused" | "stopping" | "stopped" | "exited" | "failed" | "deleting" | "deleted";
         /** @enum {string} */
         SandboxNetworkAction: "allow" | "deny";
-        /** @description Deny targets take precedence when an address or domain matches both lists. When domain rules or drain selectors are present, TCP port 80 is restricted to HTTP/1.1 or HTTP/2 and plaintext HTTP authority is enforced, but requests matching a transformation rule are rejected unless the rule also forwards. Port 443 is relayed without TLS termination. With domain rules, it is evaluated by TLS SNI and connects to an address the runtime resolves for that name, never the address the guest dialed; names need a matching domain rule or default allow, and connections without a hostname SNI are denied. Only rules with header transformations or forwarding, and drain selectors, terminate TLS, which requires clients to trust the sandbox egress CA unless the region serves its sandbox port domain's certificate to egress and the name is exactly one label below that domain; for those, both TLS SNI and HTTP authority are evaluated, and the HTTP authority selects the upstream, any request transformations, and any request forwarding. DNS to the sandbox's configured resolvers is allowed and UDP port 443 is denied. */
+        /** @description Denied addresses block all traffic to them, and allowed addresses admit all traffic to them regardless of domain rules. Other connections are matched by TLS SNI, or HTTP Host on any port, against domain denies, then domain allows, then the default. When domain rules are present, TCP connections without a hostname are denied; UDP follows the address rules and the default, except that UDP port 443 is denied. Header transforms, forwarding, and drain selectors apply to plaintext HTTP on any port, and to TLS on any port whose handshake offers HTTP through ALPN (or, on port 443, offers no ALPN). */
         SandboxEgressPolicy: {
             default: components["schemas"]["SandboxNetworkAction"];
             /** @description Allowed IPv4 addresses, CIDR ranges, exact domains, wildcard domains beginning with `*.`, or target objects with optional outbound HTTPS request transformations. A wildcard matches subdomains but not the apex domain, including when applying transformations. */
             allow?: (string | components["schemas"]["SandboxEgressRule"])[];
             /** @description Denied IPv4 addresses, CIDR ranges, exact domains, or wildcard domains beginning with `*.`. A wildcard matches subdomains but not the apex domain. */
             deny?: string[];
-            /** @description Optional hosts whose HTTP(S) requests should finish before pausing, regardless of URL path. Pausing gates new matching requests and waits up to ten minutes by default for active responses, including streams, before taking a snapshot. Errors stop counting, and expiry proceeds with the snapshot. This does not limit requests during normal operation. Selectors do not grant network access. Matching uses the original request host before transformations or forwarding. Only TCP ports 80 and 443 are supported. Connections may need to be retried after resume. */
+            /** @description Optional hosts whose HTTP(S) requests should finish before pausing, regardless of URL path. Pausing gates new matching requests and waits up to ten minutes by default for active responses, including streams, before taking a snapshot. Errors stop counting, and expiry proceeds with the snapshot. This does not limit requests during normal operation. Selectors do not grant network access. Matching uses the original request host before transformations or forwarding. Policies with domain rules apply selectors on any port; policies with only selectors apply them on TCP ports 80 and 443. Connections may need to be retried after resume. */
             drain_on_pause?: string[];
         };
         SandboxEgressRule: {
@@ -1749,12 +1749,18 @@ export interface components {
             };
         };
         /**
-         * @description Sandbox network policy. New sandboxes on free plans receive deny-all
-         *     egress with no allowlist exceptions. Start/resume and forks retain the
-         *     stored policy. For paid accounts, egress is unrestricted when omitted.
+         * @description Sandbox network policy. New sandboxes on free plans are managed: their
+         *     egress denies everything except Archil's allowlist of package
+         *     registries, Git hosts, OS package mirrors, and model provider APIs.
+         *     Free plans cannot set an egress policy; a create request with one is
+         *     rejected with `sandbox_network_plan_required`, as are policy updates.
+         *     Start/resume and forks retain the stored policy. For paid accounts,
+         *     egress is unrestricted when omitted.
          */
         SandboxNetwork: {
             egress?: components["schemas"]["SandboxEgressPolicy"];
+            /** @description True when the policy is Archil's managed free-plan allowlist. Ignored in requests. */
+            readonly managed?: boolean;
         };
         SandboxTimeoutRequest: {
             /** @description Seconds from now until a running sandbox expires, capped at 24 hours after its session started, and the lifetime budget for its next powered-on session. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archildata/api-types",
-  "version": "0.0.56",
+  "version": "0.0.58",
   "description": "API types for the Archil control plane",
   "type": "module",
   "types": "index.d.ts",