@blaxel/core 0.2.90-preview.182 → 0.2.90-preview.183

package/dist/cjs-browser/common/settings.js

@@ -28,8 +28,8 @@ function missingCredentialsMessage() {
     return "No Blaxel credentials found. Set the BL_API_KEY and BL_WORKSPACE environment variables, or run `bl login`.";
 }
 // Build info - these placeholders are replaced at build time by build:replace-imports
-const BUILD_VERSION = "0.2.90-preview.182";
-const BUILD_COMMIT = "78dad6b3e2d47dcf5d8464b9688b0829ddc3369c";
+const BUILD_VERSION = "0.2.90-preview.183";
+const BUILD_COMMIT = "e47f7913315215d00a881153cf552d424046a303";
 const BUILD_SENTRY_DSN = "https://fd5e60e1c9820e1eef5ccebb84a07127@o4508714045276160.ingest.us.sentry.io/4510465864564736";
 const BLAXEL_API_VERSION = "2026-04-16";
 // Cache for config.yaml tracking value

package/dist/cjs-browser/types/client/types.gen.d.ts

@@ -736,6 +736,15 @@ export type ExpirationPolicy = {
      */
     value?: string;
 };
+/**
+ * Firewall configuration specifying which network lockdown rulesets to apply. Valid rulesets are "default" (no-op), "proxy" (restrict egress to proxy), and "dedicated-ip" (restrict egress to dedicated IP gateway).
+ */
+export type FirewallConfig = {
+    /**
+     * List of firewall rulesets to apply. Valid values: "default" (no-op), "proxy" (restrict egress to proxy), "dedicated-ip" (restrict egress to dedicated IP gateway).
+     */
+    rulesets?: Array<string>;
+};
 /**
  * A type of hardware available for deployments
  */
@@ -2597,10 +2606,18 @@ export type PrivateLocation = {
  * Proxy configuration for routing sandbox HTTP traffic through the platform proxy with MITM inspection and per-destination header/body injection
  */
 export type ProxyConfig = {
+    /**
+     * List of allowed external domains (allowlist). When set, only these domains are reachable. Supports wildcards (e.g. *.s3.amazonaws.com).
+     */
+    allowedDomains?: Array<string>;
     /**
      * Domains that bypass the proxy entirely via the NO_PROXY directive. Traffic to these destinations goes direct, not through the CONNECT tunnel. Supports wildcards. Note that localhost, private ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16), 169.254.169.254, .local and .internal are always bypassed by default.
      */
     bypass?: Array<string>;
+    /**
+     * List of forbidden external domains (denylist). When set, all domains except these are reachable. Supports wildcards (e.g. *.malware.com). If both allowedDomains and forbiddenDomains are set, allowedDomains takes precedence.
+     */
+    forbiddenDomains?: Array<string>;
     /**
      * Per-destination routing rules with header/body injection and secrets. Use destinations ["*"] for global rules that apply to all destinations.
      */
@@ -3052,19 +3069,24 @@ export type SandboxLifecycle = {
     terminatedRetention?: string;
 };
 /**
- * Network configuration for a sandbox including domain filtering, egress IP binding, and proxy settings
+ * Network configuration for a sandbox including subnet, firewall rulesets, domain filtering, egress IP binding, and proxy settings
  */
 export type SandboxNetwork = {
     /**
-     * List of allowed external domains (allowlist). When set, only these domains are reachable. Supports wildcards (e.g. *.s3.amazonaws.com).
+     * Deprecated: use proxy.allowedDomains instead. List of allowed external domains (allowlist). Kept for backward compatibility.
      */
     allowedDomains?: Array<string>;
     egress?: EgressConfig;
+    firewall?: FirewallConfig;
     /**
-     * List of forbidden external domains (denylist). When set, all domains except these are reachable. Supports wildcards (e.g. *.malware.com). If both allowedDomains and forbiddenDomains are set, allowedDomains takes precedence.
+     * Deprecated: use proxy.forbiddenDomains instead. List of forbidden external domains (denylist). Kept for backward compatibility.
      */
     forbiddenDomains?: Array<string>;
     proxy?: ProxyConfig;
+    /**
+     * Subnet name for the sandbox. Takes priority over any subnet derived from egress config. Defaults to "default" when absent.
+     */
+    subnet?: string;
 };
 /**
  * Runtime configuration defining how the sandbox VM is provisioned and its resource limits