@lizard-build/sdk 1.0.0 → 1.0.2

package/dist/index.d.mts

@@ -1766,6 +1766,8 @@ interface SandboxInfo {
     size?: 'small' | 'medium' | 'large' | null;
     /** Flat hourly price in USD for `size`, billed per second while running; may be `null` when billed by measured usage. */
     pricePerHour?: number | null;
+    /** `false` when the sandbox was created with `internetAccess: false`; absent from older servers. */
+    internetAccess?: boolean;
     cpus?: number;
     memoryMb?: number;
     metadata?: Record<string, string>;
@@ -1820,6 +1822,12 @@ interface SandboxOpts extends ConnectionOpts {
     metadata?: Record<string, string>;
     /** Environment variables set in the sandbox, visible to every command it runs. */
     envs?: Record<string, string>;
+    /**
+     * `false`: no internet for the sandbox's whole life, its resumes and forks included (no
+     * outbound TCP, UDP, DNS or ping); commands, files and exposed ports still work. Set at
+     * create only. Default `true`. Not available with a container volume or snapshot.
+     */
+    internetAccess?: boolean;
     timeoutMs?: number;
     /**
      * Region to run the sandbox in, e.g. `'us-east-1'`.
@@ -1829,7 +1837,7 @@ interface SandboxOpts extends ConnectionOpts {
      * is not in is rejected with a 400 rather than silently moved — that combination
      * cannot be satisfied.
      *
-     * Defaults to the platform's default sandbox region.
+     * Defaults to `'us-east-1'`, or to the volume's or snapshot's region when one is given.
      */
     region?: string;
     /** Attach a persistent volume by id, mounted at `/workspace`. */

package/dist/index.d.ts

@@ -1766,6 +1766,8 @@ interface SandboxInfo {
     size?: 'small' | 'medium' | 'large' | null;
     /** Flat hourly price in USD for `size`, billed per second while running; may be `null` when billed by measured usage. */
     pricePerHour?: number | null;
+    /** `false` when the sandbox was created with `internetAccess: false`; absent from older servers. */
+    internetAccess?: boolean;
     cpus?: number;
     memoryMb?: number;
     metadata?: Record<string, string>;
@@ -1820,6 +1822,12 @@ interface SandboxOpts extends ConnectionOpts {
     metadata?: Record<string, string>;
     /** Environment variables set in the sandbox, visible to every command it runs. */
     envs?: Record<string, string>;
+    /**
+     * `false`: no internet for the sandbox's whole life, its resumes and forks included (no
+     * outbound TCP, UDP, DNS or ping); commands, files and exposed ports still work. Set at
+     * create only. Default `true`. Not available with a container volume or snapshot.
+     */
+    internetAccess?: boolean;
     timeoutMs?: number;
     /**
      * Region to run the sandbox in, e.g. `'us-east-1'`.
@@ -1829,7 +1837,7 @@ interface SandboxOpts extends ConnectionOpts {
      * is not in is rejected with a 400 rather than silently moved — that combination
      * cannot be satisfied.
      *
-     * Defaults to the platform's default sandbox region.
+     * Defaults to `'us-east-1'`, or to the volume's or snapshot's region when one is given.
      */
     region?: string;
     /** Attach a persistent volume by id, mounted at `/workspace`. */

package/dist/index.js

@@ -73,6 +73,7 @@ module.exports = __toCommonJS(index_exports);
 // src/config.ts
 var DEFAULT_API_URL = "https://lizard.build";
 var DEFAULT_SANDBOX_TIMEOUT_MS = 5 * 60 * 1e3;
+var DEFAULT_SANDBOX_REGION = "us-east-1";
 var ConnectionConfig = class {
   constructor(opts) {
     this.apiKey = opts?.apiKey ?? process.env.LIZARD_API_KEY ?? "";
@@ -1686,12 +1687,21 @@ function coord(n) {
 }
 
 // src/sandbox/client.ts
+async function regionUnavailable(res) {
+  try {
+    const body = await res.clone().json();
+    return body?.code === "region_unavailable";
+  } catch {
+    return false;
+  }
+}
 var SandboxClient = class {
   static async createSandbox(template, timeoutMs, opts) {
     const ref = requireProjectRef(opts);
     const config = new ConnectionConfig(opts);
     const projectId = ref.projectId ?? await resolveProjectId(ref.project, config);
-    const res = await fetch(`${config.apiUrl}/api/sandboxes`, {
+    const defaultRegion = !opts?.region && !opts?.volumeId && !opts?.volumeName && !opts?.snapshotId;
+    const post = (region) => fetch(`${config.apiUrl}/api/sandboxes`, {
       method: "POST",
       headers: config.headers,
       body: JSON.stringify({
@@ -1702,14 +1712,24 @@ var SandboxClient = class {
         projectId,
         metadata: opts?.metadata,
         envs: opts?.envs,
-        region: opts?.region,
+        region,
         volumeId: opts?.volumeId,
         volumeName: opts?.volumeName,
-        lizardToken: opts?.lizardToken
+        lizardToken: opts?.lizardToken,
+        // Sent only when asked: every other create stays what it was.
+        ...opts?.internetAccess === false ? { internetAccess: false } : {}
       })
     });
+    let res = await post(opts?.region || (defaultRegion ? DEFAULT_SANDBOX_REGION : void 0));
+    if (defaultRegion && res.status === 503 && await regionUnavailable(res)) res = await post(void 0);
     if (!res.ok) await handleApiError(res);
-    return res.json();
+    const created = await res.json();
+    if (opts?.internetAccess === false && created.internetAccess !== false) {
+      await this.killSandbox(created.sandboxId, opts).catch(() => {
+      });
+      throw new LizardError("This server does not support internetAccess: false yet; the sandbox it started had internet and was deleted");
+    }
+    return created;
   }
   static async killSandbox(sandboxId, opts) {
     const config = new ConnectionConfig(opts);

package/dist/index.mjs

@@ -1,6 +1,7 @@
 // src/config.ts
 var DEFAULT_API_URL = "https://lizard.build";
 var DEFAULT_SANDBOX_TIMEOUT_MS = 5 * 60 * 1e3;
+var DEFAULT_SANDBOX_REGION = "us-east-1";
 var ConnectionConfig = class {
   constructor(opts) {
     this.apiKey = opts?.apiKey ?? process.env.LIZARD_API_KEY ?? "";
@@ -1614,12 +1615,21 @@ function coord(n) {
 }
 
 // src/sandbox/client.ts
+async function regionUnavailable(res) {
+  try {
+    const body = await res.clone().json();
+    return body?.code === "region_unavailable";
+  } catch {
+    return false;
+  }
+}
 var SandboxClient = class {
   static async createSandbox(template, timeoutMs, opts) {
     const ref = requireProjectRef(opts);
     const config = new ConnectionConfig(opts);
     const projectId = ref.projectId ?? await resolveProjectId(ref.project, config);
-    const res = await fetch(`${config.apiUrl}/api/sandboxes`, {
+    const defaultRegion = !opts?.region && !opts?.volumeId && !opts?.volumeName && !opts?.snapshotId;
+    const post = (region) => fetch(`${config.apiUrl}/api/sandboxes`, {
       method: "POST",
       headers: config.headers,
       body: JSON.stringify({
@@ -1630,14 +1640,24 @@ var SandboxClient = class {
         projectId,
         metadata: opts?.metadata,
         envs: opts?.envs,
-        region: opts?.region,
+        region,
         volumeId: opts?.volumeId,
         volumeName: opts?.volumeName,
-        lizardToken: opts?.lizardToken
+        lizardToken: opts?.lizardToken,
+        // Sent only when asked: every other create stays what it was.
+        ...opts?.internetAccess === false ? { internetAccess: false } : {}
       })
     });
+    let res = await post(opts?.region || (defaultRegion ? DEFAULT_SANDBOX_REGION : void 0));
+    if (defaultRegion && res.status === 503 && await regionUnavailable(res)) res = await post(void 0);
     if (!res.ok) await handleApiError(res);
-    return res.json();
+    const created = await res.json();
+    if (opts?.internetAccess === false && created.internetAccess !== false) {
+      await this.killSandbox(created.sandboxId, opts).catch(() => {
+      });
+      throw new LizardError("This server does not support internetAccess: false yet; the sandbox it started had internet and was deleted");
+    }
+    return created;
   }
   static async killSandbox(sandboxId, opts) {
     const config = new ConnectionConfig(opts);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lizard-build/sdk",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "TypeScript and JavaScript SDK for Lizard (lizard.build): cloud sandboxes for AI agents and code execution.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",