@declaw/sdk 1.1.10 → 1.1.11

package/dist/index.d.cts

@@ -945,6 +945,53 @@ declare class Pty {
     resize(pid: number, size: PtySize, requestTimeout?: number): Promise<void>;
 }
 
+/** Options for starting an interactive stdio process. */
+interface StdioStartOpts {
+    envs?: Record<string, string>;
+    user?: string;
+    cwd?: string;
+    onStdout?: (data: Uint8Array) => void;
+    onStderr?: (data: Uint8Array) => void;
+    requestTimeout?: number;
+}
+/** Result returned when a stdio process exits. */
+interface StdioResult {
+    exitCode: number;
+}
+/**
+ * Handle for an interactive subprocess with stdin pipe.
+ */
+declare class StdioProcess {
+    readonly cmdId: string;
+    private readonly sandboxId;
+    private readonly client;
+    private lastEntryId;
+    private _exitCode;
+    private _bgStream;
+    constructor(cmdId: string, sandboxId: string, client: ApiClient, opts?: {
+        onStdout?: (data: Uint8Array) => void;
+        onStderr?: (data: Uint8Array) => void;
+    });
+    get exitCode(): number | null;
+    sendStdin(data: string | Uint8Array, requestTimeout?: number): Promise<void>;
+    closeStdin(requestTimeout?: number): Promise<void>;
+    kill(requestTimeout?: number): Promise<boolean>;
+    wait(): Promise<StdioResult>;
+    stream(opts?: {
+        onStdout?: (data: Uint8Array) => void;
+        onStderr?: (data: Uint8Array) => void;
+    }): Promise<StdioResult>;
+}
+/**
+ * Module for interactive stdio subprocess sessions in the sandbox.
+ */
+declare class Stdio {
+    private readonly sandboxId;
+    private readonly client;
+    constructor(sandboxId: string, client: ApiClient);
+    start(cmd: string, opts?: StdioStartOpts): Promise<StdioProcess>;
+}
+
 /** Request-side shape of a volume attachment on Sandbox.create. */
 interface VolumeAttachment {
     volumeId: string;
@@ -1016,6 +1063,7 @@ declare class Sandbox {
     private readonly _commands;
     private readonly _files;
     private readonly _pty;
+    private readonly _stdio;
     private constructor();
     /** The unique sandbox identifier. */
     get sandboxId(): string;
@@ -1033,6 +1081,8 @@ declare class Sandbox {
     get files(): Filesystem;
     /** PTY sub-module for pseudo-terminal sessions. */
     get pty(): Pty;
+    /** Stdio sub-module for interactive subprocess sessions with stdin pipe. */
+    get stdio(): Stdio;
     /**
      * Base URL for this sandbox's namespace on the Declaw API.
      *
@@ -1044,15 +1094,13 @@ declare class Sandbox {
     /**
      * Return the path-based URL that reverse-proxies to `port` inside the sandbox.
      *
-     * Note: the reverse-proxy backend is not yet deployed; calls to the returned
-     * URL will 404 until that feature ships. The URL shape is stable and safe to
-     * script against.
+     * Requires `allowPublicTraffic` to be enabled on the sandbox's network
+     * config (the default). The returned URL is authenticated via the same
+     * API key as all other sandbox operations.
      */
     getHost(port: number): string;
     /**
      * Return the URL for an MCP server listening on port 50005 inside the sandbox.
-     *
-     * Same deployment caveat as {@link getHost}.
      */
     getMcpUrl(): string;
     /**
@@ -1574,4 +1622,4 @@ declare class Volumes {
     static delete(volumeId: string, opts?: VolumeRequestOpts): Promise<void>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, Stdio, StdioProcess, type StdioResult, type StdioStartOpts, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };

package/dist/index.d.ts

@@ -945,6 +945,53 @@ declare class Pty {
     resize(pid: number, size: PtySize, requestTimeout?: number): Promise<void>;
 }
 
+/** Options for starting an interactive stdio process. */
+interface StdioStartOpts {
+    envs?: Record<string, string>;
+    user?: string;
+    cwd?: string;
+    onStdout?: (data: Uint8Array) => void;
+    onStderr?: (data: Uint8Array) => void;
+    requestTimeout?: number;
+}
+/** Result returned when a stdio process exits. */
+interface StdioResult {
+    exitCode: number;
+}
+/**
+ * Handle for an interactive subprocess with stdin pipe.
+ */
+declare class StdioProcess {
+    readonly cmdId: string;
+    private readonly sandboxId;
+    private readonly client;
+    private lastEntryId;
+    private _exitCode;
+    private _bgStream;
+    constructor(cmdId: string, sandboxId: string, client: ApiClient, opts?: {
+        onStdout?: (data: Uint8Array) => void;
+        onStderr?: (data: Uint8Array) => void;
+    });
+    get exitCode(): number | null;
+    sendStdin(data: string | Uint8Array, requestTimeout?: number): Promise<void>;
+    closeStdin(requestTimeout?: number): Promise<void>;
+    kill(requestTimeout?: number): Promise<boolean>;
+    wait(): Promise<StdioResult>;
+    stream(opts?: {
+        onStdout?: (data: Uint8Array) => void;
+        onStderr?: (data: Uint8Array) => void;
+    }): Promise<StdioResult>;
+}
+/**
+ * Module for interactive stdio subprocess sessions in the sandbox.
+ */
+declare class Stdio {
+    private readonly sandboxId;
+    private readonly client;
+    constructor(sandboxId: string, client: ApiClient);
+    start(cmd: string, opts?: StdioStartOpts): Promise<StdioProcess>;
+}
+
 /** Request-side shape of a volume attachment on Sandbox.create. */
 interface VolumeAttachment {
     volumeId: string;
@@ -1016,6 +1063,7 @@ declare class Sandbox {
     private readonly _commands;
     private readonly _files;
     private readonly _pty;
+    private readonly _stdio;
     private constructor();
     /** The unique sandbox identifier. */
     get sandboxId(): string;
@@ -1033,6 +1081,8 @@ declare class Sandbox {
     get files(): Filesystem;
     /** PTY sub-module for pseudo-terminal sessions. */
     get pty(): Pty;
+    /** Stdio sub-module for interactive subprocess sessions with stdin pipe. */
+    get stdio(): Stdio;
     /**
      * Base URL for this sandbox's namespace on the Declaw API.
      *
@@ -1044,15 +1094,13 @@ declare class Sandbox {
     /**
      * Return the path-based URL that reverse-proxies to `port` inside the sandbox.
      *
-     * Note: the reverse-proxy backend is not yet deployed; calls to the returned
-     * URL will 404 until that feature ships. The URL shape is stable and safe to
-     * script against.
+     * Requires `allowPublicTraffic` to be enabled on the sandbox's network
+     * config (the default). The returned URL is authenticated via the same
+     * API key as all other sandbox operations.
      */
     getHost(port: number): string;
     /**
      * Return the URL for an MCP server listening on port 50005 inside the sandbox.
-     *
-     * Same deployment caveat as {@link getHost}.
      */
     getMcpUrl(): string;
     /**
@@ -1574,4 +1622,4 @@ declare class Volumes {
     static delete(volumeId: string, opts?: VolumeRequestOpts): Promise<void>;
 }
 
-export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };
+export { ALL_TRAFFIC, ApiClient, type AuditConfig, type AuditEntry, AuthenticationError, BuildError, type BuildInfo, type CodeSecurityConfig, CommandExitError, CommandHandle, type CommandResult, type CommandWaitOpts, Commands, ConnectionConfig, type ConnectionConfigOptions, type CopyItem, DEFAULT_MASK_PATTERNS, type EntryInfo, type EnvSecurityConfig, FileType, FileUploadError, Filesystem, type FilesystemEvent, FilesystemEventType, type GetBuildStatusOpts, GitAuthError, GitUpstreamError, InjectionAction, type InjectionDefenseConfig, InjectionSensitivity, InvalidArgumentError, type InvisibleTextConfig, type NetworkPolicy, NotEnoughSpaceError, NotFoundError, type PIIConfig, PIIType, type ProcessInfo, Pty, type PtyConnectOpts, type PtyCreateOpts, PtyHandle, type PtyOutput, type PtyResult, type PtySize, RedactionAction, type RequestOpts, type RunOpts, type RunStreamOpts, Sandbox, SandboxError, type SandboxInfo, type SandboxLifecycle, type SandboxMetrics, type SandboxNetworkOpts, type SandboxOpts, SandboxPaginator, type SandboxQuery, SandboxState, type SecureEnvVar, type SecurityPolicy, type Snapshot, type SnapshotInfo, SnapshotPaginator, type SnapshotSource, type Stderr, Stdio, StdioProcess, type StdioResult, type StdioStartOpts, type Stdout, Template, TemplateBase, type TemplateBuildOpts, type TemplateBuildStatus, TemplateError, TimeoutError, type ToxicityConfig, TransformDirection, type TransformationRule, type VolumeAttachment, type VolumeCreateOpts, type VolumeInfo, type VolumeRequestOpts, Volumes, WatchHandle, type WriteEntry, type WriteInfo, applyTransformation, codeSecurityConfigToJSON, createAuditConfig, createCodeSecurityConfig, createEnvSecurityConfig, createInjectionDefenseConfig, createInvisibleTextConfig, createNetworkPolicy, createPIIConfig, createSecurityPolicy, createToxicityConfig, createTransformationRule, domainMatches, getSharedClient, invisibleTextConfigToJSON, isSensitive, networkPolicyToOpts, parseAuditConfig, parseAuditEntry, parseBuildInfo, parseCodeSecurityConfig, parseCommandResult, parseEntryInfo, parseEnvSecurityConfig, parseFilesystemEvent, parseInjectionDefenseConfig, parseInvisibleTextConfig, parseNetworkPolicy, parsePIIConfig, parseProcessInfo, parseSandboxInfo, parseSandboxLifecycle, parseSandboxMetrics, parseSecurityPolicy, parseSnapshot, parseSnapshotInfo, parseTemplateBuildStatus, parseToxicityConfig, parseVolumeInfo, parseWriteInfo, requiresTlsInterception, resetSharedClients, securityPolicyToJSON, toxicityConfigToJSON, validateNetworkEntry, volumeAttachmentToJSON };

package/dist/index.js

@@ -129,9 +129,16 @@ function getDispatcher() {
       }
       const undici = await import("undici");
       const connOverride = parseInt(process.env.DECLAW_SDK_CONNECTIONS || "", 10);
-      const connections = Number.isFinite(connOverride) && connOverride > 0 ? connOverride : 64;
+      const connections = Number.isFinite(connOverride) && connOverride > 0 ? connOverride : 256;
+      const streamsOverride = parseInt(process.env.DECLAW_SDK_MAX_CONCURRENT_STREAMS || "", 10);
+      const maxConcurrentStreams = Number.isFinite(streamsOverride) && streamsOverride > 0 ? streamsOverride : 1e3;
       return new undici.Agent({
         connections,
+        // maxConcurrentStreams only matters on H2 connections. undici negotiates
+        // down to whatever the server advertises in SETTINGS_MAX_CONCURRENT_STREAMS,
+        // so setting a high value here is safe — it caps the client-side intent,
+        // server still wins.
+        maxConcurrentStreams,
         keepAliveTimeout: 3e4,
         keepAliveMaxTimeout: 6e4,
         pipelining: 1,
@@ -1761,6 +1768,136 @@ var Pty = class {
   }
 };
 
+// src/sandbox/stdio/stdio.ts
+import { EventSourceParserStream as EventSourceParserStream2 } from "eventsource-parser/stream";
+var StdioProcess = class {
+  cmdId;
+  sandboxId;
+  client;
+  lastEntryId = 0;
+  _exitCode = null;
+  _bgStream = null;
+  constructor(cmdId, sandboxId, client, opts) {
+    this.cmdId = cmdId;
+    this.sandboxId = sandboxId;
+    this.client = client;
+    if (opts?.onStdout || opts?.onStderr) {
+      this._bgStream = this.stream({
+        onStdout: opts.onStdout,
+        onStderr: opts.onStderr
+      });
+    }
+  }
+  get exitCode() {
+    return this._exitCode;
+  }
+  async sendStdin(data, requestTimeout) {
+    const raw = typeof data === "string" ? new TextEncoder().encode(data) : data;
+    let binary = "";
+    for (let i = 0; i < raw.length; i++) {
+      binary += String.fromCharCode(raw[i]);
+    }
+    const encoded = btoa(binary);
+    await this.client.post(
+      `/sandboxes/${this.sandboxId}/stdio/${this.cmdId}/stdin`,
+      {
+        json: { data: encoded },
+        timeout: requestTimeout
+      }
+    );
+  }
+  async closeStdin(requestTimeout) {
+    await this.client.post(
+      `/sandboxes/${this.sandboxId}/stdio/${this.cmdId}/stdin/close`,
+      { timeout: requestTimeout }
+    );
+  }
+  async kill(requestTimeout) {
+    const resp = await this.client.delete(
+      `/sandboxes/${this.sandboxId}/stdio/${this.cmdId}`,
+      { timeout: requestTimeout }
+    );
+    return Boolean(resp.killed);
+  }
+  async wait() {
+    if (this._bgStream) {
+      return this._bgStream;
+    }
+    return this.stream();
+  }
+  async stream(opts) {
+    if (this._bgStream && !opts) {
+      return this._bgStream;
+    }
+    let url = `/sandboxes/${this.sandboxId}/stdio/${this.cmdId}/stream`;
+    if (this.lastEntryId > 0) {
+      url += `?last_entry_id=${this.lastEntryId}`;
+    }
+    const response = await this.client.streamGet(url);
+    const stream = response.body;
+    if (!stream) {
+      throw new SandboxError("No response body for stdio stream");
+    }
+    const eventStream = stream.pipeThrough(new TextDecoderStream()).pipeThrough(new EventSourceParserStream2());
+    for await (const event of eventStream) {
+      if (event.event === "exit") {
+        try {
+          const parsed = JSON.parse(event.data);
+          this._exitCode = parsed.exit_code ?? -1;
+        } catch {
+          this._exitCode = -1;
+        }
+        break;
+      }
+      if (event.event === "stdout" || event.event === "stderr") {
+        try {
+          const parsed = JSON.parse(event.data);
+          const entryId = parsed.entry_id ?? 0;
+          if (entryId > this.lastEntryId) {
+            this.lastEntryId = entryId;
+          }
+          const raw = atob(parsed.data ?? "");
+          const bytes = new Uint8Array(raw.length);
+          for (let i = 0; i < raw.length; i++) {
+            bytes[i] = raw.charCodeAt(i);
+          }
+          if (event.event === "stdout" && opts?.onStdout) {
+            opts.onStdout(bytes);
+          } else if (event.event === "stderr" && opts?.onStderr) {
+            opts.onStderr(bytes);
+          }
+        } catch {
+          continue;
+        }
+      }
+    }
+    return { exitCode: this._exitCode ?? -1 };
+  }
+};
+var Stdio = class {
+  sandboxId;
+  client;
+  constructor(sandboxId, client) {
+    this.sandboxId = sandboxId;
+    this.client = client;
+  }
+  async start(cmd, opts) {
+    const user = opts?.user ?? "user";
+    const body = { cmd, user };
+    if (opts?.envs) body.envs = opts.envs;
+    if (opts?.cwd) body.cwd = opts.cwd;
+    const data = await this.client.post(
+      `/sandboxes/${this.sandboxId}/stdio`,
+      { json: body, timeout: opts?.requestTimeout }
+    );
+    const cmdId = data.cmd_id;
+    return new StdioProcess(cmdId, this.sandboxId, this.client, {
+      onStdout: opts?.onStdout,
+      onStderr: opts?.onStderr
+    });
+  }
+};
+
 // src/volumes/models.ts
 function parseVolumeInfo(data) {
   return {
@@ -1800,6 +1937,7 @@ var Sandbox = class _Sandbox {
   _commands;
   _files;
   _pty;
+  _stdio;
   constructor(sandboxId, config, client, envdAccessToken, sandboxDomain, trafficAccessToken) {
     this._sandboxId = sandboxId;
     this._config = config;
@@ -1810,6 +1948,7 @@ var Sandbox = class _Sandbox {
     this._commands = new Commands(sandboxId, client);
     this._files = new Filesystem(sandboxId, client);
     this._pty = new Pty(sandboxId, client);
+    this._stdio = new Stdio(sandboxId, client);
   }
   /** The unique sandbox identifier. */
   get sandboxId() {
@@ -1843,6 +1982,10 @@ var Sandbox = class _Sandbox {
   get pty() {
     return this._pty;
   }
+  /** Stdio sub-module for interactive subprocess sessions with stdin pipe. */
+  get stdio() {
+    return this._stdio;
+  }
   /**
    * Base URL for this sandbox's namespace on the Declaw API.
    *
@@ -1856,17 +1999,15 @@ var Sandbox = class _Sandbox {
   /**
    * Return the path-based URL that reverse-proxies to `port` inside the sandbox.
    *
-   * Note: the reverse-proxy backend is not yet deployed; calls to the returned
-   * URL will 404 until that feature ships. The URL shape is stable and safe to
-   * script against.
+   * Requires `allowPublicTraffic` to be enabled on the sandbox's network
+   * config (the default). The returned URL is authenticated via the same
+   * API key as all other sandbox operations.
    */
   getHost(port) {
     return `${this.envdApiUrl}/ports/${port}`;
   }
   /**
    * Return the URL for an MCP server listening on port 50005 inside the sandbox.
-   *
-   * Same deployment caveat as {@link getHost}.
    */
   getMcpUrl() {
     return `${this.getHost(MCP_PORT)}/mcp`;
@@ -2701,6 +2842,8 @@ export {
   SandboxPaginator,
   SandboxState,
   SnapshotPaginator,
+  Stdio,
+  StdioProcess,
   Template,
   TemplateBase,
   TemplateError,