@declaw/sdk 1.0.0 → 1.0.3

package/dist/index.d.cts

@@ -68,6 +68,11 @@ declare class ApiClient {
      * Does NOT parse the response body.
      */
     stream(path: string, opts?: RequestOpts): Promise<Response>;
+    /**
+     * Send a GET request and return the raw Response for SSE streaming.
+     * Does NOT parse the response body. Used by PTY stream consumers.
+     */
+    streamGet(path: string, opts?: RequestOpts): Promise<Response>;
     /**
      * Abort all in-flight requests and release resources.
      */
@@ -217,18 +222,23 @@ declare function parseNetworkPolicy(data: Record<string, any>): NetworkPolicy;
  */
 declare function networkPolicyToOpts(policy: NetworkPolicy): SandboxNetworkOpts;
 
-/** Configuration for audit logging. */
+/**
+ * Toggle for per-sandbox audit logging.
+ *
+ * Declaw records a fixed set of lifecycle + security events (vm_created,
+ * vm_killed, snapshot_*, egress_blocked, …). Set `enabled: false` to opt
+ * the sandbox out entirely; events for that sandbox are not shipped to
+ * the collector and nothing is persisted.
+ *
+ * Retention is a platform-wide setting (global 7-day default), not a
+ * per-sandbox knob. Body logging is not user-configurable today.
+ */
 interface AuditConfig {
     enabled: boolean;
-    logRequestBody: boolean;
-    logResponseBody: boolean;
-    retentionHours: number;
 }
-/**
- * Create an AuditConfig with defaults.
- */
+/** Create an AuditConfig with defaults (enabled=true). */
 declare function createAuditConfig(opts?: Partial<AuditConfig>): AuditConfig;
-/** Parse raw JSON data into AuditConfig. */
+/** Parse raw JSON data into AuditConfig. Defaults to enabled=true when the field is absent. */
 declare function parseAuditConfig(data: Record<string, any>): AuditConfig;
 /** A single audit log entry. */
 interface AuditEntry {
@@ -693,6 +703,11 @@ declare class Filesystem {
     /**
      * Write data to a file.
      *
+     * When `data` is a `Uint8Array`, the SDK streams the raw bytes to the
+     * binary-safe `PUT /files/raw` endpoint (500 MiB cap). When it's a string,
+     * the SDK uses the JSON `POST /files` endpoint. Callers do not need to
+     * pick the transport.
+     *
      * @param path - Absolute path to the file.
      * @param data - String or Uint8Array content to write.
      * @param opts - Optional user and request timeout.
@@ -705,9 +720,14 @@ declare class Filesystem {
     /**
      * Write multiple files in a single batch request.
      *
+     * The batch endpoint is JSON-only and cannot carry binary. Entries are
+     * partitioned: string entries go through `POST /files/batch` in one call,
+     * `Uint8Array` entries are streamed individually to `PUT /files/raw`.
+     * Results are merged back in input order.
+     *
      * @param files - Array of files to write.
      * @param opts - Optional user and request timeout.
-     * @returns Array of write info for each file.
+     * @returns Array of write info for each file, in input order.
      */
     writeFiles(files: WriteEntry[], opts?: {
         user?: string;
@@ -798,6 +818,19 @@ declare class Filesystem {
     }): Promise<WatchHandle>;
 }
 
+/** Outcome of a PTY session — produced by `PtyHandle.wait()`. */
+interface PtyResult {
+    /** Remote shell exit code. `-1` if the stream dropped before a clean exit frame. */
+    exitCode: number;
+}
+/** Options for attaching to a running PTY via `Pty.connect()`. */
+interface PtyConnectOpts {
+    /**
+     * Callback invoked with every chunk of PTY output as raw bytes.
+     * Optional — omit to drive the stream via the handle's async iterator.
+     */
+    onData?: (data: Uint8Array) => void;
+}
 /** Options for creating a PTY session. */
 interface PtyCreateOpts {
     /** Terminal size. Defaults to { cols: 80, rows: 24 }. */
@@ -808,46 +841,87 @@ interface PtyCreateOpts {
     cwd?: string;
     /** Environment variables. */
     envs?: Record<string, string>;
-    /** Command timeout in seconds. */
+    /**
+     * PTY session TTL in seconds. Defaults to 3600 (1 hour). Pass `0` to
+     * keep the session alive indefinitely — it will still die when the
+     * parent sandbox's timeout fires.
+     */
     timeout?: number;
-    /** Per-request timeout in milliseconds. */
+    /** Per-request timeout in milliseconds (applies to the initial create call only). */
     requestTimeout?: number;
+    /**
+     * Callback invoked with every chunk of PTY output as raw bytes.
+     * Setting this implicitly opens the SSE stream; the returned handle's
+     * `wait()` resolves when the remote process exits. Drop this option
+     * and call `handle.stream()` directly if you want to drive the iterator
+     * explicitly instead.
+     */
+    onData?: (data: Uint8Array) => void;
 }
 /**
- * PTY (pseudo-terminal) interface for a sandbox.
+ * Handle to a running PTY session. Returned from `Pty.create()`.
  *
- * Provides methods to create, kill, resize, and send input to PTY sessions.
+ * Exposes stdin / resize / kill plus a `wait()` that resolves with the
+ * remote exit code once the process terminates. The output stream runs
+ * over Server-Sent Events — configured via `onData` at create time or
+ * consumed manually with `stream()`.
  */
-declare class Pty {
+declare class PtyHandle {
+    readonly pid: number;
     private readonly sandboxId;
     private readonly client;
-    constructor(sandboxId: string, client: ApiClient);
+    private readonly exitPromise;
+    private resolveExit;
+    private aborter;
+    constructor(pid: number, sandboxId: string, client: ApiClient, onData?: (data: Uint8Array) => void);
+    /** Forward keystrokes to the PTY. */
+    sendInput(data: Uint8Array | string, requestTimeout?: number): Promise<void>;
+    /** Update the terminal size (TIOCSWINSZ inside the VM). */
+    resize(size: PtySize, requestTimeout?: number): Promise<void>;
+    /** SIGKILL the remote process and close any open streams. */
+    kill(requestTimeout?: number): Promise<boolean>;
     /**
-     * Create a new PTY session.
-     *
-     * Sends POST /sandboxes/:id/pty.
-     * @returns A CommandHandle for the PTY process.
+     * Stop consuming output without killing the process. The PTY keeps
+     * running server-side and a fresh `stream()` call reattaches.
      */
-    create(opts?: PtyCreateOpts): Promise<CommandHandle>;
+    disconnect(): void;
+    /** Resolves with the remote exit result when the PTY process exits. */
+    wait(): Promise<PtyResult>;
     /**
-     * Kill a PTY session.
+     * Async iterator over raw output chunks. Use when you want to drive
+     * the stream yourself:
      *
-     * Sends DELETE /sandboxes/:id/pty/:pid.
-     * @returns true if the process was killed, false if already dead.
-     */
-    kill(pid: number, requestTimeout?: number): Promise<boolean>;
-    /**
-     * Send input to a PTY session.
+     *   for await (const chunk of handle.stream()) { ... }
      *
-     * Sends POST /sandboxes/:id/pty/:pid/stdin.
-     * If data is a Uint8Array, it is decoded to a string using TextDecoder.
+     * Don't mix this with `onData` on the same handle — they both try to
+     * consume the same underlying SSE connection.
      */
-    sendStdin(pid: number, data: Uint8Array | string, requestTimeout?: number): Promise<void>;
+    stream(): AsyncGenerator<Uint8Array, void, void>;
+    private consumeStream;
+}
+/**
+ * PTY (pseudo-terminal) interface for a sandbox.
+ *
+ * Use `create()` to launch a fresh shell session. The returned
+ * `PtyHandle` exposes stdin / resize / kill plus a live output stream
+ * (callback or async iterator).
+ */
+declare class Pty {
+    private readonly sandboxId;
+    private readonly client;
+    constructor(sandboxId: string, client: ApiClient);
+    create(opts?: PtyCreateOpts): Promise<PtyHandle>;
     /**
-     * Resize a PTY session.
+     * Reattach to an already-running PTY by its pid.
      *
-     * Sends PATCH /sandboxes/:id/pty/:pid.
+     * Returns a fresh `PtyHandle` that streams the live output of the
+     * existing session. Multiple clients can subscribe to the same pid
+     * concurrently — each receives output from the moment it connects
+     * (no scrollback replay).
      */
+    connect(pid: number, opts?: PtyConnectOpts): PtyHandle;
+    kill(pid: number, requestTimeout?: number): Promise<boolean>;
+    sendStdin(pid: number, data: Uint8Array | string, requestTimeout?: number): Promise<void>;
     resize(pid: number, size: PtySize, requestTimeout?: number): Promise<void>;
 }
 
@@ -1334,4 +1408,4 @@ declare class Template {
     static getBuildStatus(buildId: string, opts?: GetBuildStatusOpts): Promise<TemplateBuildStatus>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyCreateOpts, type PtyOutput, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry };
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry };

package/dist/index.d.ts

@@ -68,6 +68,11 @@ declare class ApiClient {
      * Does NOT parse the response body.
      */
     stream(path: string, opts?: RequestOpts): Promise<Response>;
+    /**
+     * Send a GET request and return the raw Response for SSE streaming.
+     * Does NOT parse the response body. Used by PTY stream consumers.
+     */
+    streamGet(path: string, opts?: RequestOpts): Promise<Response>;
     /**
      * Abort all in-flight requests and release resources.
      */
@@ -217,18 +222,23 @@ declare function parseNetworkPolicy(data: Record<string, any>): NetworkPolicy;
  */
 declare function networkPolicyToOpts(policy: NetworkPolicy): SandboxNetworkOpts;
 
-/** Configuration for audit logging. */
+/**
+ * Toggle for per-sandbox audit logging.
+ *
+ * Declaw records a fixed set of lifecycle + security events (vm_created,
+ * vm_killed, snapshot_*, egress_blocked, …). Set `enabled: false` to opt
+ * the sandbox out entirely; events for that sandbox are not shipped to
+ * the collector and nothing is persisted.
+ *
+ * Retention is a platform-wide setting (global 7-day default), not a
+ * per-sandbox knob. Body logging is not user-configurable today.
+ */
 interface AuditConfig {
     enabled: boolean;
-    logRequestBody: boolean;
-    logResponseBody: boolean;
-    retentionHours: number;
 }
-/**
- * Create an AuditConfig with defaults.
- */
+/** Create an AuditConfig with defaults (enabled=true). */
 declare function createAuditConfig(opts?: Partial<AuditConfig>): AuditConfig;
-/** Parse raw JSON data into AuditConfig. */
+/** Parse raw JSON data into AuditConfig. Defaults to enabled=true when the field is absent. */
 declare function parseAuditConfig(data: Record<string, any>): AuditConfig;
 /** A single audit log entry. */
 interface AuditEntry {
@@ -693,6 +703,11 @@ declare class Filesystem {
     /**
      * Write data to a file.
      *
+     * When `data` is a `Uint8Array`, the SDK streams the raw bytes to the
+     * binary-safe `PUT /files/raw` endpoint (500 MiB cap). When it's a string,
+     * the SDK uses the JSON `POST /files` endpoint. Callers do not need to
+     * pick the transport.
+     *
      * @param path - Absolute path to the file.
      * @param data - String or Uint8Array content to write.
      * @param opts - Optional user and request timeout.
@@ -705,9 +720,14 @@ declare class Filesystem {
     /**
      * Write multiple files in a single batch request.
      *
+     * The batch endpoint is JSON-only and cannot carry binary. Entries are
+     * partitioned: string entries go through `POST /files/batch` in one call,
+     * `Uint8Array` entries are streamed individually to `PUT /files/raw`.
+     * Results are merged back in input order.
+     *
      * @param files - Array of files to write.
      * @param opts - Optional user and request timeout.
-     * @returns Array of write info for each file.
+     * @returns Array of write info for each file, in input order.
      */
     writeFiles(files: WriteEntry[], opts?: {
         user?: string;
@@ -798,6 +818,19 @@ declare class Filesystem {
     }): Promise<WatchHandle>;
 }
 
+/** Outcome of a PTY session — produced by `PtyHandle.wait()`. */
+interface PtyResult {
+    /** Remote shell exit code. `-1` if the stream dropped before a clean exit frame. */
+    exitCode: number;
+}
+/** Options for attaching to a running PTY via `Pty.connect()`. */
+interface PtyConnectOpts {
+    /**
+     * Callback invoked with every chunk of PTY output as raw bytes.
+     * Optional — omit to drive the stream via the handle's async iterator.
+     */
+    onData?: (data: Uint8Array) => void;
+}
 /** Options for creating a PTY session. */
 interface PtyCreateOpts {
     /** Terminal size. Defaults to { cols: 80, rows: 24 }. */
@@ -808,46 +841,87 @@ interface PtyCreateOpts {
     cwd?: string;
     /** Environment variables. */
     envs?: Record<string, string>;
-    /** Command timeout in seconds. */
+    /**
+     * PTY session TTL in seconds. Defaults to 3600 (1 hour). Pass `0` to
+     * keep the session alive indefinitely — it will still die when the
+     * parent sandbox's timeout fires.
+     */
     timeout?: number;
-    /** Per-request timeout in milliseconds. */
+    /** Per-request timeout in milliseconds (applies to the initial create call only). */
     requestTimeout?: number;
+    /**
+     * Callback invoked with every chunk of PTY output as raw bytes.
+     * Setting this implicitly opens the SSE stream; the returned handle's
+     * `wait()` resolves when the remote process exits. Drop this option
+     * and call `handle.stream()` directly if you want to drive the iterator
+     * explicitly instead.
+     */
+    onData?: (data: Uint8Array) => void;
 }
 /**
- * PTY (pseudo-terminal) interface for a sandbox.
+ * Handle to a running PTY session. Returned from `Pty.create()`.
  *
- * Provides methods to create, kill, resize, and send input to PTY sessions.
+ * Exposes stdin / resize / kill plus a `wait()` that resolves with the
+ * remote exit code once the process terminates. The output stream runs
+ * over Server-Sent Events — configured via `onData` at create time or
+ * consumed manually with `stream()`.
  */
-declare class Pty {
+declare class PtyHandle {
+    readonly pid: number;
     private readonly sandboxId;
     private readonly client;
-    constructor(sandboxId: string, client: ApiClient);
+    private readonly exitPromise;
+    private resolveExit;
+    private aborter;
+    constructor(pid: number, sandboxId: string, client: ApiClient, onData?: (data: Uint8Array) => void);
+    /** Forward keystrokes to the PTY. */
+    sendInput(data: Uint8Array | string, requestTimeout?: number): Promise<void>;
+    /** Update the terminal size (TIOCSWINSZ inside the VM). */
+    resize(size: PtySize, requestTimeout?: number): Promise<void>;
+    /** SIGKILL the remote process and close any open streams. */
+    kill(requestTimeout?: number): Promise<boolean>;
     /**
-     * Create a new PTY session.
-     *
-     * Sends POST /sandboxes/:id/pty.
-     * @returns A CommandHandle for the PTY process.
+     * Stop consuming output without killing the process. The PTY keeps
+     * running server-side and a fresh `stream()` call reattaches.
      */
-    create(opts?: PtyCreateOpts): Promise<CommandHandle>;
+    disconnect(): void;
+    /** Resolves with the remote exit result when the PTY process exits. */
+    wait(): Promise<PtyResult>;
     /**
-     * Kill a PTY session.
+     * Async iterator over raw output chunks. Use when you want to drive
+     * the stream yourself:
      *
-     * Sends DELETE /sandboxes/:id/pty/:pid.
-     * @returns true if the process was killed, false if already dead.
-     */
-    kill(pid: number, requestTimeout?: number): Promise<boolean>;
-    /**
-     * Send input to a PTY session.
+     *   for await (const chunk of handle.stream()) { ... }
      *
-     * Sends POST /sandboxes/:id/pty/:pid/stdin.
-     * If data is a Uint8Array, it is decoded to a string using TextDecoder.
+     * Don't mix this with `onData` on the same handle — they both try to
+     * consume the same underlying SSE connection.
      */
-    sendStdin(pid: number, data: Uint8Array | string, requestTimeout?: number): Promise<void>;
+    stream(): AsyncGenerator<Uint8Array, void, void>;
+    private consumeStream;
+}
+/**
+ * PTY (pseudo-terminal) interface for a sandbox.
+ *
+ * Use `create()` to launch a fresh shell session. The returned
+ * `PtyHandle` exposes stdin / resize / kill plus a live output stream
+ * (callback or async iterator).
+ */
+declare class Pty {
+    private readonly sandboxId;
+    private readonly client;
+    constructor(sandboxId: string, client: ApiClient);
+    create(opts?: PtyCreateOpts): Promise<PtyHandle>;
     /**
-     * Resize a PTY session.
+     * Reattach to an already-running PTY by its pid.
      *
-     * Sends PATCH /sandboxes/:id/pty/:pid.
+     * Returns a fresh `PtyHandle` that streams the live output of the
+     * existing session. Multiple clients can subscribe to the same pid
+     * concurrently — each receives output from the moment it connects
+     * (no scrollback replay).
      */
+    connect(pid: number, opts?: PtyConnectOpts): PtyHandle;
+    kill(pid: number, requestTimeout?: number): Promise<boolean>;
+    sendStdin(pid: number, data: Uint8Array | string, requestTimeout?: number): Promise<void>;
     resize(pid: number, size: PtySize, requestTimeout?: number): Promise<void>;
 }
 
@@ -1334,4 +1408,4 @@ declare class Template {
     static getBuildStatus(buildId: string, opts?: GetBuildStatusOpts): Promise<TemplateBuildStatus>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyCreateOpts, type PtyOutput, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry };
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseWriteInfo, requiresTlsInterception, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry };