@sysid/sandbox-runtime-improved 0.0.56-sysid.1 → 0.0.64-sysid.1

package/dist/sandbox/sandbox-config.d.ts

@@ -41,36 +41,97 @@ declare const ParentProxyConfigSchema: z.ZodObject<{
  *
  * - `deny` — the sandboxed process cannot read the file / does not see the
  *   environment variable.
- * - `mask` — reserved for credential masking; rejected until masking ships.
- *
- * Additional modes (e.g. a working `mask`) will be added in future releases.
+ * - `mask` — the sandboxed process sees a per-session sentinel value; the
+ *   host proxy substitutes sentinel→real on egress to `injectHosts`.
+ *   For files this is whole-file masking (Linux only; degrades to `deny`
+ *   on macOS — see {@link CredentialFileConfigSchema}).
  */
-declare const credentialModeSchema: z.ZodEffects<z.ZodEnum<["deny", "mask"]>, "deny", "deny" | "mask">;
+declare const credentialModeSchema: z.ZodEnum<["deny", "mask"]>;
 /**
  * Schema for a single credential file/directory entry.
+ *
+ * `mode: "mask"` without `extract` is **whole-file** masking: the entire
+ * file content is replaced inside the sandbox with one sentinel string,
+ * and the proxy substitutes that sentinel back to the real bytes on egress.
+ * This works for files whose content *is* the credential (a token file, a
+ * single-line secret).
+ *
+ * `mode: "mask"` with `extract` is **structured** masking: the regex is
+ * applied globally to the real file, capture group 1 of each match is a
+ * credential value, and only those captured spans are replaced with
+ * sentinels — the rest of the file is preserved byte-for-byte. This lets a
+ * tool that parses the file (`.netrc`, JSON/YAML configs) still succeed
+ * inside the sandbox while the credential values are protected. If the
+ * pattern matches nothing, behaviour is governed by `onExtractNoMatch`
+ * (default `"warn"` — the file is left readable as-is and a stderr
+ * warning is emitted).
+ *
+ * `maskDuplicates: true` (only meaningful with `extract`) additionally
+ * replaces every verbatim occurrence of each captured value *outside* the
+ * regex-matched spans — for a secret repeated where the regex does not
+ * reach (e.g. pasted into a comment). The scan is raw substring matching,
+ * so a short or common captured value may also hit unrelated content that
+ * happens to contain it; intended for long, high-entropy secrets.
+ *
+ * On macOS, SBPL cannot redirect reads, so `mode: "mask"` (with or without
+ * `extract`) currently degrades to `mode: "deny"` (the file is unreadable
+ * inside the sandbox).
  */
 export declare const CredentialFileConfigSchema: z.ZodObject<{
     path: z.ZodString;
-    mode: z.ZodEffects<z.ZodEnum<["deny", "mask"]>, "deny", "deny" | "mask">;
+    mode: z.ZodEnum<["deny", "mask"]>;
+    extract: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    /**
+     * What to do when `extract` matches nothing in the file at runtime.
+     *
+     * - `"warn"` (default): emit a stderr warning and leave the file
+     *   readable as-is inside the sandbox (fail-open). A non-matching
+     *   pattern is treated as a config error to surface and fix, not a
+     *   reason to break a tool that needs the file when the credential is
+     *   legitimately absent.
+     * - `"deny"`: degrade the entry to `mode: "deny"` so the file is
+     *   unreadable inside the sandbox (fail-closed). The operator declared
+     *   this file as containing a credential; if the regex cannot find it,
+     *   block access rather than expose it.
+     * - `"error"`: throw at wrap time so nothing runs until the operator
+     *   fixes the regex.
+     *
+     * Only meaningful when `mode` is `"mask"` and `extract` is set;
+     * accepted but ignored otherwise.
+     */
+    onExtractNoMatch: z.ZodOptional<z.ZodEnum<["warn", "deny", "error"]>>;
+    maskDuplicates: z.ZodOptional<z.ZodBoolean>;
+    injectHosts: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    mode: "deny";
+    mode: "deny" | "mask";
     path: string;
+    extract?: string | undefined;
+    onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+    maskDuplicates?: boolean | undefined;
+    injectHosts?: string[] | undefined;
 }, {
     mode: "deny" | "mask";
     path: string;
+    extract?: string | undefined;
+    onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+    maskDuplicates?: boolean | undefined;
+    injectHosts?: string[] | undefined;
 }>;
 /**
  * Schema for a single credential environment variable entry.
  */
 export declare const CredentialEnvVarConfigSchema: z.ZodObject<{
     name: z.ZodString;
-    mode: z.ZodEffects<z.ZodEnum<["deny", "mask"]>, "deny", "deny" | "mask">;
+    mode: z.ZodEnum<["deny", "mask"]>;
+    injectHosts: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
 }, "strip", z.ZodTypeAny, {
-    mode: "deny";
+    mode: "deny" | "mask";
     name: string;
+    injectHosts?: string[] | undefined;
 }, {
     mode: "deny" | "mask";
     name: string;
+    injectHosts?: string[] | undefined;
 }>;
 /**
  * Credentials configuration schema for validation.
@@ -88,42 +149,88 @@ export declare const CredentialEnvVarConfigSchema: z.ZodObject<{
 export declare const CredentialsConfigSchema: z.ZodObject<{
     files: z.ZodOptional<z.ZodArray<z.ZodObject<{
         path: z.ZodString;
-        mode: z.ZodEffects<z.ZodEnum<["deny", "mask"]>, "deny", "deny" | "mask">;
+        mode: z.ZodEnum<["deny", "mask"]>;
+        extract: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        /**
+         * What to do when `extract` matches nothing in the file at runtime.
+         *
+         * - `"warn"` (default): emit a stderr warning and leave the file
+         *   readable as-is inside the sandbox (fail-open). A non-matching
+         *   pattern is treated as a config error to surface and fix, not a
+         *   reason to break a tool that needs the file when the credential is
+         *   legitimately absent.
+         * - `"deny"`: degrade the entry to `mode: "deny"` so the file is
+         *   unreadable inside the sandbox (fail-closed). The operator declared
+         *   this file as containing a credential; if the regex cannot find it,
+         *   block access rather than expose it.
+         * - `"error"`: throw at wrap time so nothing runs until the operator
+         *   fixes the regex.
+         *
+         * Only meaningful when `mode` is `"mask"` and `extract` is set;
+         * accepted but ignored otherwise.
+         */
+        onExtractNoMatch: z.ZodOptional<z.ZodEnum<["warn", "deny", "error"]>>;
+        maskDuplicates: z.ZodOptional<z.ZodBoolean>;
+        injectHosts: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        mode: "deny";
+        mode: "deny" | "mask";
         path: string;
+        extract?: string | undefined;
+        onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+        maskDuplicates?: boolean | undefined;
+        injectHosts?: string[] | undefined;
     }, {
         mode: "deny" | "mask";
         path: string;
+        extract?: string | undefined;
+        onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+        maskDuplicates?: boolean | undefined;
+        injectHosts?: string[] | undefined;
     }>, "many">>;
     envVars: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
-        mode: z.ZodEffects<z.ZodEnum<["deny", "mask"]>, "deny", "deny" | "mask">;
+        mode: z.ZodEnum<["deny", "mask"]>;
+        injectHosts: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
     }, "strip", z.ZodTypeAny, {
-        mode: "deny";
+        mode: "deny" | "mask";
         name: string;
+        injectHosts?: string[] | undefined;
     }, {
         mode: "deny" | "mask";
         name: string;
+        injectHosts?: string[] | undefined;
     }>, "many">>;
-}, "strip", z.ZodTypeAny, {
+    allowPlaintextInject: z.ZodOptional<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
     files?: {
-        mode: "deny";
+        mode: "deny" | "mask";
         path: string;
+        extract?: string | undefined;
+        onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+        maskDuplicates?: boolean | undefined;
+        injectHosts?: string[] | undefined;
     }[] | undefined;
     envVars?: {
-        mode: "deny";
+        mode: "deny" | "mask";
         name: string;
+        injectHosts?: string[] | undefined;
     }[] | undefined;
+    allowPlaintextInject?: boolean | undefined;
 }, {
     files?: {
         mode: "deny" | "mask";
         path: string;
+        extract?: string | undefined;
+        onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+        maskDuplicates?: boolean | undefined;
+        injectHosts?: string[] | undefined;
     }[] | undefined;
     envVars?: {
         mode: "deny" | "mask";
         name: string;
+        injectHosts?: string[] | undefined;
     }[] | undefined;
+    allowPlaintextInject?: boolean | undefined;
 }>;
 /**
  * Network configuration schema for validation
@@ -152,18 +259,28 @@ export declare const NetworkConfigSchema: z.ZodObject<{
     tlsTerminate: z.ZodOptional<z.ZodEffects<z.ZodObject<{
         caCertPath: z.ZodOptional<z.ZodString>;
         caKeyPath: z.ZodOptional<z.ZodString>;
+        excludeDomains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+        extraCaCertPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, "strip", z.ZodTypeAny, {
         caCertPath?: string | undefined;
         caKeyPath?: string | undefined;
+        excludeDomains?: string[] | undefined;
+        extraCaCertPaths?: string[] | undefined;
     }, {
         caCertPath?: string | undefined;
         caKeyPath?: string | undefined;
+        excludeDomains?: string[] | undefined;
+        extraCaCertPaths?: string[] | undefined;
     }>, {
         caCertPath?: string | undefined;
         caKeyPath?: string | undefined;
+        excludeDomains?: string[] | undefined;
+        extraCaCertPaths?: string[] | undefined;
     }, {
         caCertPath?: string | undefined;
         caKeyPath?: string | undefined;
+        excludeDomains?: string[] | undefined;
+        extraCaCertPaths?: string[] | undefined;
     }>>;
     parentProxy: z.ZodOptional<z.ZodObject<{
         http: z.ZodOptional<z.ZodString>;
@@ -196,6 +313,8 @@ export declare const NetworkConfigSchema: z.ZodObject<{
     tlsTerminate?: {
         caCertPath?: string | undefined;
         caKeyPath?: string | undefined;
+        excludeDomains?: string[] | undefined;
+        extraCaCertPaths?: string[] | undefined;
     } | undefined;
     parentProxy?: {
         http?: string | undefined;
@@ -220,6 +339,8 @@ export declare const NetworkConfigSchema: z.ZodObject<{
     tlsTerminate?: {
         caCertPath?: string | undefined;
         caKeyPath?: string | undefined;
+        excludeDomains?: string[] | undefined;
+        extraCaCertPaths?: string[] | undefined;
     } | undefined;
     parentProxy?: {
         http?: string | undefined;
@@ -231,6 +352,7 @@ export declare const NetworkConfigSchema: z.ZodObject<{
  * Filesystem configuration schema for validation
  */
 export declare const FilesystemConfigSchema: z.ZodObject<{
+    disabled: z.ZodOptional<z.ZodBoolean>;
     denyRead: z.ZodArray<z.ZodString, "many">;
     allowRead: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     allowWrite: z.ZodArray<z.ZodString, "many">;
@@ -240,12 +362,14 @@ export declare const FilesystemConfigSchema: z.ZodObject<{
     denyRead: string[];
     allowWrite: string[];
     denyWrite: string[];
+    disabled?: boolean | undefined;
     allowRead?: string[] | undefined;
     allowGitConfig?: boolean | undefined;
 }, {
     denyRead: string[];
     allowWrite: string[];
     denyWrite: string[];
+    disabled?: boolean | undefined;
     allowRead?: string[] | undefined;
     allowGitConfig?: boolean | undefined;
 }>;
@@ -270,26 +394,63 @@ export declare const RipgrepConfigSchema: z.ZodObject<{
     args?: string[] | undefined;
     argv0?: string | undefined;
 }>;
+/**
+ * Configuration for locating/invoking the `srt-win` helper (Windows
+ * only). An embedder that links `srt-win`'s CLI into its own
+ * multicall binary points `path` at that binary; spawns then pass
+ * `--srt-win` as `argv[1]` (see `SRT_WIN_DISPATCH_ARG1` in
+ * `windows-sandbox-utils.ts` / `srt_win::SRT_WIN_DISPATCH_ARG1`) so
+ * the embedder's dispatcher can route to `srt_win::run_from_args`.
+ * Windows cannot reliably preserve a spoofed `argv[0]` across
+ * `CreateProcessWithLogonW` / `ShellExecuteExW(runas)`, so dispatch
+ * keys on `argv[1]`, not on `argv[0]` like
+ * {@link SeccompConfigSchema} does on Linux.
+ */
+export declare const SrtWinConfigSchema: z.ZodObject<{
+    path: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    path?: string | undefined;
+}, {
+    path?: string | undefined;
+}>;
 /**
  * Windows-specific configuration schema. See
  * `windows-sandbox-utils.ts` for the install flow these settings
  * must agree with.
+ *
+ * Canonical: `sublayerGuid`; the `wfpSublayerGuid` alias is resolved
+ * at read sites (`sublayerGuid ?? wfpSublayerGuid`) rather than via
+ * `.transform()` so this stays a plain `ZodObject` for consumers that
+ * `.extend()`/`.shape` it.
  */
 export declare const WindowsConfigSchema: z.ZodObject<{
-    groupName: z.ZodDefault<z.ZodString>;
-    groupSid: z.ZodOptional<z.ZodString>;
+    sandboxUser: z.ZodOptional<z.ZodString>;
+    sublayerGuid: z.ZodOptional<z.ZodString>;
     wfpSublayerGuid: z.ZodOptional<z.ZodString>;
     proxyPortRange: z.ZodOptional<z.ZodEffects<z.ZodTuple<[z.ZodNumber, z.ZodNumber], null>, [number, number], [number, number]>>;
+    srtWin: z.ZodOptional<z.ZodObject<{
+        path: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        path?: string | undefined;
+    }, {
+        path?: string | undefined;
+    }>>;
 }, "strip", z.ZodTypeAny, {
-    groupName: string;
-    groupSid?: string | undefined;
+    sandboxUser?: string | undefined;
+    sublayerGuid?: string | undefined;
     wfpSublayerGuid?: string | undefined;
     proxyPortRange?: [number, number] | undefined;
+    srtWin?: {
+        path?: string | undefined;
+    } | undefined;
 }, {
-    groupName?: string | undefined;
-    groupSid?: string | undefined;
+    sandboxUser?: string | undefined;
+    sublayerGuid?: string | undefined;
     wfpSublayerGuid?: string | undefined;
     proxyPortRange?: [number, number] | undefined;
+    srtWin?: {
+        path?: string | undefined;
+    } | undefined;
 }>;
 /**
  * Seccomp configuration schema (Linux only)
@@ -307,7 +468,7 @@ export declare const SeccompConfigSchema: z.ZodObject<{
 /**
  * Main configuration schema for Sandbox Runtime validation
  */
-export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
+export declare const SandboxRuntimeConfigSchema: z.ZodEffects<z.ZodObject<{
     network: z.ZodObject<{
         allowedDomains: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
         deniedDomains: z.ZodArray<z.ZodUnion<[z.ZodLiteral<"*">, z.ZodEffects<z.ZodString, string, string>]>, "many">;
@@ -332,18 +493,28 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         tlsTerminate: z.ZodOptional<z.ZodEffects<z.ZodObject<{
             caCertPath: z.ZodOptional<z.ZodString>;
             caKeyPath: z.ZodOptional<z.ZodString>;
+            excludeDomains: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+            extraCaCertPaths: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         }, "strip", z.ZodTypeAny, {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         }, {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         }>, {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         }, {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         }>>;
         parentProxy: z.ZodOptional<z.ZodObject<{
             http: z.ZodOptional<z.ZodString>;
@@ -376,6 +547,8 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         tlsTerminate?: {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;
@@ -400,6 +573,8 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         tlsTerminate?: {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;
@@ -408,6 +583,7 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         } | undefined;
     }>;
     filesystem: z.ZodObject<{
+        disabled: z.ZodOptional<z.ZodBoolean>;
         denyRead: z.ZodArray<z.ZodString, "many">;
         allowRead: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         allowWrite: z.ZodArray<z.ZodString, "many">;
@@ -417,54 +593,102 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         denyRead: string[];
         allowWrite: string[];
         denyWrite: string[];
+        disabled?: boolean | undefined;
         allowRead?: string[] | undefined;
         allowGitConfig?: boolean | undefined;
     }, {
         denyRead: string[];
         allowWrite: string[];
         denyWrite: string[];
+        disabled?: boolean | undefined;
         allowRead?: string[] | undefined;
         allowGitConfig?: boolean | undefined;
     }>;
     credentials: z.ZodOptional<z.ZodObject<{
         files: z.ZodOptional<z.ZodArray<z.ZodObject<{
             path: z.ZodString;
-            mode: z.ZodEffects<z.ZodEnum<["deny", "mask"]>, "deny", "deny" | "mask">;
+            mode: z.ZodEnum<["deny", "mask"]>;
+            extract: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+            /**
+             * What to do when `extract` matches nothing in the file at runtime.
+             *
+             * - `"warn"` (default): emit a stderr warning and leave the file
+             *   readable as-is inside the sandbox (fail-open). A non-matching
+             *   pattern is treated as a config error to surface and fix, not a
+             *   reason to break a tool that needs the file when the credential is
+             *   legitimately absent.
+             * - `"deny"`: degrade the entry to `mode: "deny"` so the file is
+             *   unreadable inside the sandbox (fail-closed). The operator declared
+             *   this file as containing a credential; if the regex cannot find it,
+             *   block access rather than expose it.
+             * - `"error"`: throw at wrap time so nothing runs until the operator
+             *   fixes the regex.
+             *
+             * Only meaningful when `mode` is `"mask"` and `extract` is set;
+             * accepted but ignored otherwise.
+             */
+            onExtractNoMatch: z.ZodOptional<z.ZodEnum<["warn", "deny", "error"]>>;
+            maskDuplicates: z.ZodOptional<z.ZodBoolean>;
+            injectHosts: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            mode: "deny";
+            mode: "deny" | "mask";
             path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
         }, {
             mode: "deny" | "mask";
             path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
         }>, "many">>;
         envVars: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
-            mode: z.ZodEffects<z.ZodEnum<["deny", "mask"]>, "deny", "deny" | "mask">;
+            mode: z.ZodEnum<["deny", "mask"]>;
+            injectHosts: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
         }, "strip", z.ZodTypeAny, {
-            mode: "deny";
+            mode: "deny" | "mask";
             name: string;
+            injectHosts?: string[] | undefined;
         }, {
             mode: "deny" | "mask";
             name: string;
+            injectHosts?: string[] | undefined;
         }>, "many">>;
-    }, "strip", z.ZodTypeAny, {
+        allowPlaintextInject: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
         files?: {
-            mode: "deny";
+            mode: "deny" | "mask";
             path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
         envVars?: {
-            mode: "deny";
+            mode: "deny" | "mask";
             name: string;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
+        allowPlaintextInject?: boolean | undefined;
     }, {
         files?: {
             mode: "deny" | "mask";
             path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
         envVars?: {
             mode: "deny" | "mask";
             name: string;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
+        allowPlaintextInject?: boolean | undefined;
     }>>;
     ignoreViolations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString, "many">>>;
     enableWeakerNestedSandbox: z.ZodOptional<z.ZodBoolean>;
@@ -499,20 +723,33 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
     bwrapPath: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     socatPath: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
     windows: z.ZodOptional<z.ZodObject<{
-        groupName: z.ZodDefault<z.ZodString>;
-        groupSid: z.ZodOptional<z.ZodString>;
+        sandboxUser: z.ZodOptional<z.ZodString>;
+        sublayerGuid: z.ZodOptional<z.ZodString>;
         wfpSublayerGuid: z.ZodOptional<z.ZodString>;
         proxyPortRange: z.ZodOptional<z.ZodEffects<z.ZodTuple<[z.ZodNumber, z.ZodNumber], null>, [number, number], [number, number]>>;
+        srtWin: z.ZodOptional<z.ZodObject<{
+            path: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            path?: string | undefined;
+        }, {
+            path?: string | undefined;
+        }>>;
     }, "strip", z.ZodTypeAny, {
-        groupName: string;
-        groupSid?: string | undefined;
+        sandboxUser?: string | undefined;
+        sublayerGuid?: string | undefined;
         wfpSublayerGuid?: string | undefined;
         proxyPortRange?: [number, number] | undefined;
+        srtWin?: {
+            path?: string | undefined;
+        } | undefined;
     }, {
-        groupName?: string | undefined;
-        groupSid?: string | undefined;
+        sandboxUser?: string | undefined;
+        sublayerGuid?: string | undefined;
         wfpSublayerGuid?: string | undefined;
         proxyPortRange?: [number, number] | undefined;
+        srtWin?: {
+            path?: string | undefined;
+        } | undefined;
     }>>;
 }, "strip", z.ZodTypeAny, {
     network: {
@@ -533,6 +770,166 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         tlsTerminate?: {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
+        } | undefined;
+        parentProxy?: {
+            http?: string | undefined;
+            https?: string | undefined;
+            noProxy?: string | undefined;
+        } | undefined;
+    };
+    filesystem: {
+        denyRead: string[];
+        allowWrite: string[];
+        denyWrite: string[];
+        disabled?: boolean | undefined;
+        allowRead?: string[] | undefined;
+        allowGitConfig?: boolean | undefined;
+    };
+    credentials?: {
+        files?: {
+            mode: "deny" | "mask";
+            path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
+        }[] | undefined;
+        envVars?: {
+            mode: "deny" | "mask";
+            name: string;
+            injectHosts?: string[] | undefined;
+        }[] | undefined;
+        allowPlaintextInject?: boolean | undefined;
+    } | undefined;
+    ignoreViolations?: Record<string, string[]> | undefined;
+    enableWeakerNestedSandbox?: boolean | undefined;
+    enableWeakerNetworkIsolation?: boolean | undefined;
+    allowAppleEvents?: boolean | undefined;
+    ripgrep?: {
+        command: string;
+        args?: string[] | undefined;
+        argv0?: string | undefined;
+    } | undefined;
+    mandatoryDenySearchDepth?: number | undefined;
+    allowPty?: boolean | undefined;
+    allowBrowserProcess?: boolean | undefined;
+    seccomp?: {
+        argv0?: string | undefined;
+        applyPath?: string | undefined;
+    } | undefined;
+    bwrapPath?: string | undefined;
+    socatPath?: string | undefined;
+    windows?: {
+        sandboxUser?: string | undefined;
+        sublayerGuid?: string | undefined;
+        wfpSublayerGuid?: string | undefined;
+        proxyPortRange?: [number, number] | undefined;
+        srtWin?: {
+            path?: string | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    network: {
+        allowedDomains: string[];
+        deniedDomains: string[];
+        strictAllowlist?: boolean | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        allowLocalBinding?: boolean | undefined;
+        allowMachLookup?: string[] | undefined;
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        mitmProxy?: {
+            socketPath: string;
+            domains: string[];
+        } | undefined;
+        filterRequest?: FilterRequestCallback | undefined;
+        tlsTerminate?: {
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
+        } | undefined;
+        parentProxy?: {
+            http?: string | undefined;
+            https?: string | undefined;
+            noProxy?: string | undefined;
+        } | undefined;
+    };
+    filesystem: {
+        denyRead: string[];
+        allowWrite: string[];
+        denyWrite: string[];
+        disabled?: boolean | undefined;
+        allowRead?: string[] | undefined;
+        allowGitConfig?: boolean | undefined;
+    };
+    credentials?: {
+        files?: {
+            mode: "deny" | "mask";
+            path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
+        }[] | undefined;
+        envVars?: {
+            mode: "deny" | "mask";
+            name: string;
+            injectHosts?: string[] | undefined;
+        }[] | undefined;
+        allowPlaintextInject?: boolean | undefined;
+    } | undefined;
+    ignoreViolations?: Record<string, string[]> | undefined;
+    enableWeakerNestedSandbox?: boolean | undefined;
+    enableWeakerNetworkIsolation?: boolean | undefined;
+    allowAppleEvents?: boolean | undefined;
+    ripgrep?: {
+        command: string;
+        args?: string[] | undefined;
+        argv0?: string | undefined;
+    } | undefined;
+    mandatoryDenySearchDepth?: number | undefined;
+    allowPty?: boolean | undefined;
+    allowBrowserProcess?: boolean | undefined;
+    seccomp?: {
+        argv0?: string | undefined;
+        applyPath?: string | undefined;
+    } | undefined;
+    bwrapPath?: string | undefined;
+    socatPath?: string | undefined;
+    windows?: {
+        sandboxUser?: string | undefined;
+        sublayerGuid?: string | undefined;
+        wfpSublayerGuid?: string | undefined;
+        proxyPortRange?: [number, number] | undefined;
+        srtWin?: {
+            path?: string | undefined;
+        } | undefined;
+    } | undefined;
+}>, {
+    network: {
+        allowedDomains: string[];
+        deniedDomains: string[];
+        strictAllowlist?: boolean | undefined;
+        allowUnixSockets?: string[] | undefined;
+        allowAllUnixSockets?: boolean | undefined;
+        allowLocalBinding?: boolean | undefined;
+        allowMachLookup?: string[] | undefined;
+        httpProxyPort?: number | undefined;
+        socksProxyPort?: number | undefined;
+        mitmProxy?: {
+            socketPath: string;
+            domains: string[];
+        } | undefined;
+        filterRequest?: FilterRequestCallback | undefined;
+        tlsTerminate?: {
+            caCertPath?: string | undefined;
+            caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;
@@ -544,18 +941,25 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         denyRead: string[];
         allowWrite: string[];
         denyWrite: string[];
+        disabled?: boolean | undefined;
         allowRead?: string[] | undefined;
         allowGitConfig?: boolean | undefined;
     };
     credentials?: {
         files?: {
-            mode: "deny";
+            mode: "deny" | "mask";
             path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
         envVars?: {
-            mode: "deny";
+            mode: "deny" | "mask";
             name: string;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
+        allowPlaintextInject?: boolean | undefined;
     } | undefined;
     ignoreViolations?: Record<string, string[]> | undefined;
     enableWeakerNestedSandbox?: boolean | undefined;
@@ -576,10 +980,13 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
     bwrapPath?: string | undefined;
     socatPath?: string | undefined;
     windows?: {
-        groupName: string;
-        groupSid?: string | undefined;
+        sandboxUser?: string | undefined;
+        sublayerGuid?: string | undefined;
         wfpSublayerGuid?: string | undefined;
         proxyPortRange?: [number, number] | undefined;
+        srtWin?: {
+            path?: string | undefined;
+        } | undefined;
     } | undefined;
 }, {
     network: {
@@ -600,6 +1007,8 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         tlsTerminate?: {
             caCertPath?: string | undefined;
             caKeyPath?: string | undefined;
+            excludeDomains?: string[] | undefined;
+            extraCaCertPaths?: string[] | undefined;
         } | undefined;
         parentProxy?: {
             http?: string | undefined;
@@ -611,6 +1020,7 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         denyRead: string[];
         allowWrite: string[];
         denyWrite: string[];
+        disabled?: boolean | undefined;
         allowRead?: string[] | undefined;
         allowGitConfig?: boolean | undefined;
     };
@@ -618,11 +1028,17 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
         files?: {
             mode: "deny" | "mask";
             path: string;
+            extract?: string | undefined;
+            onExtractNoMatch?: "error" | "warn" | "deny" | undefined;
+            maskDuplicates?: boolean | undefined;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
         envVars?: {
             mode: "deny" | "mask";
             name: string;
+            injectHosts?: string[] | undefined;
         }[] | undefined;
+        allowPlaintextInject?: boolean | undefined;
     } | undefined;
     ignoreViolations?: Record<string, string[]> | undefined;
     enableWeakerNestedSandbox?: boolean | undefined;
@@ -643,10 +1059,13 @@ export declare const SandboxRuntimeConfigSchema: z.ZodObject<{
     bwrapPath?: string | undefined;
     socatPath?: string | undefined;
     windows?: {
-        groupName?: string | undefined;
-        groupSid?: string | undefined;
+        sandboxUser?: string | undefined;
+        sublayerGuid?: string | undefined;
         wfpSublayerGuid?: string | undefined;
         proxyPortRange?: [number, number] | undefined;
+        srtWin?: {
+            path?: string | undefined;
+        } | undefined;
     } | undefined;
 }>;
 export type MitmProxyConfig = z.infer<typeof MitmProxyConfigSchema>;
@@ -660,6 +1079,7 @@ export type CredentialsConfig = z.infer<typeof CredentialsConfigSchema>;
 export type IgnoreViolationsConfig = z.infer<typeof IgnoreViolationsConfigSchema>;
 export type RipgrepConfig = z.infer<typeof RipgrepConfigSchema>;
 export type SeccompConfig = z.infer<typeof SeccompConfigSchema>;
+export type SrtWinConfig = z.infer<typeof SrtWinConfigSchema>;
 export type WindowsConfig = z.infer<typeof WindowsConfigSchema>;
 export type SandboxRuntimeConfig = z.infer<typeof SandboxRuntimeConfigSchema>;
 export {};