@lizard-build/sdk 1.0.1 → 1.0.3

package/dist/index.d.mts

@@ -1766,6 +1766,8 @@ interface SandboxInfo {
     size?: 'small' | 'medium' | 'large' | null;
     /** Flat hourly price in USD for `size`, billed per second while running; may be `null` when billed by measured usage. */
     pricePerHour?: number | null;
+    /** `false` when the sandbox was created with `internetAccess: false`; absent from older servers. */
+    internetAccess?: boolean;
     cpus?: number;
     memoryMb?: number;
     metadata?: Record<string, string>;
@@ -1820,6 +1822,13 @@ interface SandboxOpts extends ConnectionOpts {
     metadata?: Record<string, string>;
     /** Environment variables set in the sandbox, visible to every command it runs. */
     envs?: Record<string, string>;
+    /**
+     * `false`: no internet for the sandbox's whole life, its resumes and forks included (no
+     * outbound TCP, UDP, DNS or ping) and no public ports (`exposePort` is refused); commands
+     * and files still work. Set at
+     * create only. Default `true`. Not available with a container volume or snapshot.
+     */
+    internetAccess?: boolean;
     timeoutMs?: number;
     /**
      * Region to run the sandbox in, e.g. `'us-east-1'`.

package/dist/index.d.ts

@@ -1766,6 +1766,8 @@ interface SandboxInfo {
     size?: 'small' | 'medium' | 'large' | null;
     /** Flat hourly price in USD for `size`, billed per second while running; may be `null` when billed by measured usage. */
     pricePerHour?: number | null;
+    /** `false` when the sandbox was created with `internetAccess: false`; absent from older servers. */
+    internetAccess?: boolean;
     cpus?: number;
     memoryMb?: number;
     metadata?: Record<string, string>;
@@ -1820,6 +1822,13 @@ interface SandboxOpts extends ConnectionOpts {
     metadata?: Record<string, string>;
     /** Environment variables set in the sandbox, visible to every command it runs. */
     envs?: Record<string, string>;
+    /**
+     * `false`: no internet for the sandbox's whole life, its resumes and forks included (no
+     * outbound TCP, UDP, DNS or ping) and no public ports (`exposePort` is refused); commands
+     * and files still work. Set at
+     * create only. Default `true`. Not available with a container volume or snapshot.
+     */
+    internetAccess?: boolean;
     timeoutMs?: number;
     /**
      * Region to run the sandbox in, e.g. `'us-east-1'`.

package/dist/index.js

@@ -1715,13 +1715,21 @@ var SandboxClient = class {
         region,
         volumeId: opts?.volumeId,
         volumeName: opts?.volumeName,
-        lizardToken: opts?.lizardToken
+        lizardToken: opts?.lizardToken,
+        // Sent only when asked: every other create stays what it was.
+        ...opts?.internetAccess === false ? { internetAccess: false } : {}
       })
     });
     let res = await post(opts?.region || (defaultRegion ? DEFAULT_SANDBOX_REGION : void 0));
     if (defaultRegion && res.status === 503 && await regionUnavailable(res)) res = await post(void 0);
     if (!res.ok) await handleApiError(res);
-    return res.json();
+    const created = await res.json();
+    if (opts?.internetAccess === false && created.internetAccess !== false) {
+      await this.killSandbox(created.sandboxId, opts).catch(() => {
+      });
+      throw new LizardError("This server does not support internetAccess: false yet; the sandbox it started had internet and was deleted");
+    }
+    return created;
   }
   static async killSandbox(sandboxId, opts) {
     const config = new ConnectionConfig(opts);

package/dist/index.mjs

@@ -1643,13 +1643,21 @@ var SandboxClient = class {
         region,
         volumeId: opts?.volumeId,
         volumeName: opts?.volumeName,
-        lizardToken: opts?.lizardToken
+        lizardToken: opts?.lizardToken,
+        // Sent only when asked: every other create stays what it was.
+        ...opts?.internetAccess === false ? { internetAccess: false } : {}
       })
     });
     let res = await post(opts?.region || (defaultRegion ? DEFAULT_SANDBOX_REGION : void 0));
     if (defaultRegion && res.status === 503 && await regionUnavailable(res)) res = await post(void 0);
     if (!res.ok) await handleApiError(res);
-    return res.json();
+    const created = await res.json();
+    if (opts?.internetAccess === false && created.internetAccess !== false) {
+      await this.killSandbox(created.sandboxId, opts).catch(() => {
+      });
+      throw new LizardError("This server does not support internetAccess: false yet; the sandbox it started had internet and was deleted");
+    }
+    return created;
   }
   static async killSandbox(sandboxId, opts) {
     const config = new ConnectionConfig(opts);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lizard-build/sdk",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "TypeScript and JavaScript SDK for Lizard (lizard.build): cloud sandboxes for AI agents and code execution.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",