@tangle-network/sandbox 0.0.0-develop.20260514223840.b2abd84

package/dist/index.d.ts

@@ -0,0 +1,555 @@
+import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-Dpj1oB5i.js";
+import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-CCsA3S0D.js";
+import { A as IntegrationActionKind, B as TriggerWithSecret, C as CreateEndpointInput, D as EndpointWithSecret, E as EndpointInfo, F as IntegrationVerificationKind, G as parseSSEStream, H as SandboxFleetClient, I as IntegrationsManager, L as RecipeManifest, M as IntegrationPrincipalType, N as IntegrationProvider, O as InstallRecipeInput, P as IntegrationScope, R as TriggerInfo, S as CreateAutomationInput, T as DeliveryAttempt, U as ParseSSEStreamOptions, V as SandboxFleet, W as ParsedSSEEvent, _ as Team, a as PartialFailureError, b as AutomationInfo, c as SandboxErrorJson, d as StateError, f as TimeoutError, g as SandboxClient, h as InviteTeamMemberOptions, i as NotFoundError, j as IntegrationDeliveryStatus, k as IntegrationAction, l as SandboxFailureDetail, m as CreateTeamOptions, n as CapabilityError, o as QuotaError, p as ValidationError, r as NetworkError, s as SandboxError, t as AuthError, u as ServerError, v as TeamInvitation, w as CreateTriggerInput, x as ConnectionInfo, y as TeamMember, z as TriggerRun } from "./errors-Cy5W2uYq.js";
+import { $ as FleetExecDispatchOptions, $n as StorageConfig, $t as SandboxClientConfig, An as SandboxInfo, Ar as defineInlineResource, At as ProcessLogEntry, B as DownloadProgress, Bn as ScopedToken, Bt as ProvisionStatus, C as BatchResult, Cn as SandboxFleetTraceExport, Cr as AgentProfileResourceRef, Ct as NetworkManager, D as CheckpointOptions, Dn as SandboxFleetWorkspaceReconcileResult, Dr as AgentSubagentProfile, Dt as PreviewLinkManager, E as CheckpointInfo, En as SandboxFleetWorkspace, Er as AgentProfileValidationResult, Et as PreviewLinkInfo, F as DeleteOptions, Fn as SandboxTraceBundle, Fr as SandboxMcpEndpoint, G as ExecOptions, Gn as SecretsManager, Gt as PublishPublicTemplateVersionOptions, H as DriverInfo, Hn as SearchMatch, Ht as PublicTemplateInfo, I as DirectoryPermission, In as SandboxTraceEvent, Ir as SandboxMcpServerEntry, It as PromptOptions, J as FileSystem, Jn as SessionListOptions, Jt as ReconcileSandboxFleetsOptions, K as ExecResult, Kn as SessionEventStreamOptions, Kt as ReapExpiredSandboxFleetsOptions, L as DispatchPromptOptions, Ln as SandboxTraceExport, Lr as buildSandboxMcpConfig, Lt as PromptResult, Mn as SandboxPermissionsConfig, Mr as BuildSandboxMcpConfigOptions, Mt as ProcessSignal, N as CreateSandboxFleetWithCoordinatorOptions, Nn as SandboxResources, Nr as SANDBOX_MCP_SERVER_NAME, Nt as ProcessSpawnOptions, O as CheckpointResult, On as SandboxFleetWorkspaceRestoreResult, Or as defineAgentProfile, Ot as Process, P as CreateSandboxOptions, Pn as SandboxStatus, Pr as SandboxMcpConfig, Pt as ProcessStatus, Q as FleetDispatchStreamOptions, Qn as SnapshotResult, Qt as SSHCredentials, R as DispatchedSession, Rn as SandboxTraceOptions, Rt as ProvisionEvent, S as BatchOptions, Sn as SandboxFleetTraceEvent, Sr as AgentProfilePrompt, St as NetworkConfig, T as BatchTaskResult, Tn as SandboxFleetUsage, Tr as AgentProfileValidationIssue, Tt as PermissionsManager, U as DriverType, Un as SearchOptions, Ut as PublicTemplateVersionInfo, V as DriverConfig, Vn as ScopedTokenScope, Vt as ProvisionStep, W as EventStreamOptions, Wn as SecretInfo, Wt as PublishPublicTemplateOptions, X as FleetDispatchResultBuffer, Xn as SnapshotInfo, Xt as RunCodeOptions, Y as FleetDispatchCancelResult, Yn as SessionStatus, Yt as ReconcileSandboxFleetsResult, Z as FleetDispatchResultBufferOptions, Zn as SnapshotOptions, Zt as SSHCommandDescriptor, _ as BackendInfo, _n as SandboxFleetManifestMachine, _r as AgentProfileConfidential, _t as ListSandboxFleetOptions, a as TraceExportSink, an as SandboxFleetCostEstimate, ar as TeeAttestationResponse, at as ForkResult, b as BackendType, bn as SandboxFleetToken, br as AgentProfileModelHints, bt as MintScopedTokenOptions, c as otelTraceIdForTangleTrace, cn as SandboxFleetDriverCapability, cr as TokenRefreshHandler, ct as GitCommit, d as AcceleratorKind, dn as SandboxFleetIntelligenceEnvelope, dr as UploadOptions, dt as GitStatus, en as SandboxConnection, er as SubscriptionInfo, f as AccessPolicyRule, fn as SandboxFleetMachine, fr as UploadProgress, ft as GpuType, g as BackendConfig, gn as SandboxFleetManifest, gr as AgentProfileCapabilities, gt as ListOptions, h as BackendCapabilities, hn as SandboxFleetMachineSpec, hr as AgentProfile, i as TraceExportResult, in as SandboxFleetArtifactSpec, ir as TeeAttestationReport, it as ForkOptions, j as CreateSandboxFleetOptions, jn as SandboxIntelligenceEnvelope, jr as mergeAgentProfiles, jt as ProcessManager, k as CodeResult, kn as SandboxFleetWorkspaceSnapshotResult, kr as defineGitHubResource, kt as ProcessInfo, l as toOtelJson, ln as SandboxFleetDriverTimings, lr as ToolsConfig, lt as GitConfig, m as AttachSandboxFleetMachineOptions, mn as SandboxFleetMachineRecord, mr as WaitForOptions, n as SandboxInstance, nn as SandboxEvent, nr as TaskResult, nt as FleetPromptDispatchOptions, o as buildTraceExportPayload, on as SandboxFleetDispatchFailureClass, or as TeePublicKey, ot as GitAuth, p as AddUserOptions, pn as SandboxFleetMachineMeteredUsage, pr as UsageInfo, pt as InstalledTool, q as FileInfo, qn as SessionInfo, qt as ReapExpiredSandboxFleetsResult, r as TraceExportFormat, rn as SandboxFleetArtifact, rr as TeeAttestationOptions, s as exportTraceBundle, sn as SandboxFleetDispatchResponse, sr as TeePublicKeyResponse, st as GitBranch, tn as SandboxEnvironment, tr as TaskOptions, tt as FleetMachineId, u as SandboxSession, un as SandboxFleetInfo, ur as UpdateUserOptions, ut as GitDiff, v as BackendManager, vn as SandboxFleetOperationsSummary, vr as AgentProfileFileMount, vt as ListSandboxOptions, w as BatchTask, wn as SandboxFleetTraceOptions, wr as AgentProfileResources, wt as PermissionLevel, x as BatchEvent, xn as SandboxFleetTraceBundle, xr as AgentProfilePermissionValue, xt as MkdirOptions, y as BackendStatus, yn as SandboxFleetPolicy, yr as AgentProfileMcpServer, yt as McpServerConfig, z as DownloadOptions, zn as SandboxUser, zt as ProvisionResult } from "./sandbox-CTe9fN5m.js";
+import { IntegrationActor, IntegrationManifest, IntegrationRequirement } from "./platform-integrations.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-Cka6RuZB.js";
+
+//#region src/attestation-heartbeat.d.ts
+interface TeeAttestationHeartbeatSample {
+  sequence: number;
+  nonce: string;
+  response: TeeAttestationResponse;
+  checkedAt: Date;
+}
+interface TeeAttestationHeartbeatOptions {
+  /** Cadence for automatic re-attestation. Default: 60 seconds. */
+  intervalMs?: number;
+  /** Abort signal used to stop the heartbeat. */
+  signal?: AbortSignal;
+  /** Start the first check immediately. Default: true. */
+  immediate?: boolean;
+  /** Keep running after a failed check. Default: false. */
+  continueOnFailure?: boolean;
+  /** Optional caller verification hook, e.g. tcloud-attestation policy checks. */
+  verify?: (sample: TeeAttestationHeartbeatSample) => void | Promise<void>;
+  onSuccess?: (sample: TeeAttestationHeartbeatSample) => void;
+  onFailure?: (error: unknown) => void;
+}
+interface TeeAttestationHeartbeat {
+  stop(): void;
+  ping(): Promise<TeeAttestationHeartbeatSample>;
+  readonly stopped: boolean;
+  readonly failures: number;
+  readonly latest: TeeAttestationHeartbeatSample | undefined;
+  readonly done: Promise<void>;
+}
+/**
+ * Periodically requests nonce-bound TEE attestations for a running sandbox.
+ *
+ * This proves freshness/liveness of the attested sandbox endpoint. It does not
+ * by itself sign every computation result; callers that need result binding
+ * should include a result/session digest in the nonce preimage before asking
+ * the runtime for a quote.
+ */
+declare function startTeeAttestationHeartbeat(sandbox: Pick<SandboxInstance, "getTeeAttestation">, options?: TeeAttestationHeartbeatOptions): TeeAttestationHeartbeat;
+//#endregion
+//#region src/confidential.d.ts
+type SandboxCreator = {
+  create(options?: CreateSandboxOptions): Promise<SandboxInstance>;
+};
+type ConfidentialTeeType = NonNullable<AgentProfileConfidential["tee"]>;
+interface CreateConfidentialSandboxOptions extends Omit<CreateSandboxOptions, "confidential"> {
+  confidential: AgentProfileConfidential & {
+    tee: ConfidentialTeeType;
+  };
+  /**
+   * Deploy-time attestation challenge. Use "auto" to generate a 32-byte nonce.
+   */
+  attestationNonce?: string | "auto";
+  /**
+   * Require attestation evidence to be present before returning.
+   *
+   * Hardware-root verification is intentionally not performed here. Pass the
+   * returned attestation to a verifier such as `@tangle-network/tcloud/attestation`.
+   */
+  requireAttestation?: boolean;
+}
+interface ConfidentialSandboxResult {
+  sandbox: SandboxInstance;
+  attestation?: TeeAttestationReport;
+  attestationNonce?: string;
+}
+declare function generateAttestationNonce(bytes?: number): string;
+declare function createConfidentialSandbox(client: SandboxCreator, options: CreateConfidentialSandboxOptions): Promise<ConfidentialSandboxResult>;
+//#endregion
+//#region src/image.d.ts
+/**
+ * Image Builder for Sandbox SDK
+ *
+ * Provides a chainable API for building custom container images.
+ *
+ * @example Basic usage
+ * ```typescript
+ * import { Image, Sandbox } from "@tangle-network/sandbox";
+ *
+ * const client = new Sandbox({ apiKey: "sk_sandbox_...", baseUrl: "https://your-sandbox-api.example.com" });
+ *
+ * const image = await Image.create()
+ *   .python("3.11")
+ *   .addPackages(["numpy", "pandas"])
+ *   .addCommands(["apt-get update && apt-get install -y ffmpeg"])
+ *   .withSecrets(["HF_TOKEN"])
+ *   .build({ client });
+ *
+ * const box = await client.create({ image: image.id });
+ * ```
+ */
+/**
+ * Image specification for building a custom container image.
+ */
+interface ImageSpec {
+  /** Base Docker image (default: "ubuntu:22.04") */
+  baseImage: string;
+  /** Python version to install */
+  pythonVersion?: string;
+  /** Python packages to install via pip */
+  packages?: string[];
+  /** Shell commands to run during build */
+  commands?: string[];
+  /** Environment variables */
+  env?: Record<string, string>;
+  /** Secret names to inject during build */
+  secrets?: string[];
+  /** Custom Dockerfile content or path */
+  dockerfile?: string;
+  /** Build context directory */
+  dockerContext?: string;
+  /** Conda environment configuration */
+  conda?: {
+    packages: string[];
+    channels?: string[];
+  };
+  /** System packages to install via apt-get */
+  aptPackages?: string[];
+  /** Working directory */
+  workdir?: string;
+  /** User to run as */
+  user?: string;
+  /** Build arguments */
+  buildArgs?: Record<string, string>;
+  /** Image labels */
+  labels?: Record<string, string>;
+}
+/**
+ * Build result for an image.
+ */
+interface ImageBuildResult {
+  /** Content-addressed image ID */
+  id: string;
+  /** Image tag */
+  tag: string;
+  /** Image size in bytes */
+  size: number;
+  /** Build time in milliseconds */
+  buildTimeMs: number;
+  /** Whether served from cache */
+  cached: boolean;
+  /** Creation timestamp */
+  createdAt: Date;
+  /** Original build spec */
+  spec: ImageSpec;
+  /** Image digest */
+  digest: string;
+}
+/**
+ * Progress event during image build.
+ */
+interface BuildProgressEvent {
+  /** Current build step */
+  step: string;
+  /** Progress percentage (0-100) */
+  progress?: number;
+  /** Human-readable message */
+  message: string;
+  /** Whether step is complete */
+  complete: boolean;
+  /** Whether step used cache */
+  cached?: boolean;
+  /** Error message if failed */
+  error?: string;
+}
+/**
+ * Options for building an image.
+ */
+interface ImageBuildOptions {
+  /** Progress callback */
+  onProgress?: (event: BuildProgressEvent) => void;
+  /** Build timeout in milliseconds */
+  timeout?: number;
+  /** Force rebuild ignoring cache */
+  noCache?: boolean;
+  /** Target platform */
+  platform?: string;
+  /** Custom tag for the image */
+  tag?: string;
+  /** Sandbox client for API access */
+  client?: {
+    baseUrl: string;
+    apiKey: string;
+  };
+}
+/**
+ * Represents a built or existing container image.
+ */
+declare class Image {
+  /** Unique image identifier (content-addressed) */
+  readonly id: string;
+  /** Full image tag */
+  readonly tag: string;
+  /** Image digest */
+  readonly digest: string;
+  /** Original build spec */
+  readonly spec?: ImageSpec | undefined;
+  private constructor();
+  /**
+   * Start building a new image.
+   *
+   * @param baseImage Base Docker image (default: "ubuntu:22.04")
+   * @returns A new ImageBuilder instance
+   *
+   * @example
+   * ```typescript
+   * const builder = Image.create("python:3.11-slim");
+   * ```
+   */
+  static create(baseImage?: string): ImageBuilder;
+  /**
+   * Reference an existing image by ID.
+   *
+   * @param imageId The image ID
+   * @returns An Image instance
+   *
+   * @example
+   * ```typescript
+   * const image = Image.fromId("sha256:abc123...");
+   * const box = await client.create({ image: image.id });
+   * ```
+   */
+  static fromId(imageId: string): Image;
+  /**
+   * Create an image builder from a Dockerfile.
+   *
+   * @param dockerfile Dockerfile path or content
+   * @param context Build context directory
+   * @returns A new ImageBuilder instance
+   *
+   * @example
+   * ```typescript
+   * const builder = Image.fromDockerfile("./Dockerfile", "./");
+   * ```
+   */
+  static fromDockerfile(dockerfile: string, context?: string): ImageBuilder;
+  /**
+   * Create an Image from a build result.
+   * @internal
+   */
+  static fromBuildResult(result: ImageBuildResult): Image;
+  /**
+   * Convert to JSON.
+   */
+  toJSON(): {
+    id: string;
+    tag: string;
+    digest: string;
+    spec?: ImageSpec;
+  };
+}
+/**
+ * Chainable builder for constructing custom container images.
+ *
+ * @example
+ * ```typescript
+ * const image = await Image.create()
+ *   .python("3.11")
+ *   .addPackages(["torch", "transformers"])
+ *   .addCommands(["apt-get install -y ffmpeg"])
+ *   .withEnv({ HF_HOME: "/models" })
+ *   .withSecrets(["HF_TOKEN"])
+ *   .build({ client });
+ * ```
+ */
+declare class ImageBuilder {
+  private spec;
+  private clientConfig?;
+  /** @internal */
+  constructor(initialSpec: Partial<ImageSpec>);
+  /**
+   * Configure Python version.
+   *
+   * @param version Python version (e.g., "3.11", "3.10")
+   */
+  python(version: string): this;
+  /**
+   * Add Python packages via pip.
+   *
+   * @param packages Package names with optional versions
+   *
+   * @example
+   * ```typescript
+   * .addPackages(["numpy>=1.21", "pandas", "scikit-learn"])
+   * ```
+   */
+  addPackages(packages: string[]): this;
+  /**
+   * Add packages from requirements file.
+   *
+   * @param requirementsPath Path to requirements.txt
+   */
+  addPackagesFromFile(requirementsPath: string): this;
+  /**
+   * Add shell commands to run during build.
+   *
+   * @param commands Commands to execute
+   *
+   * @example
+   * ```typescript
+   * .addCommands([
+   *   "apt-get update",
+   *   "apt-get install -y ffmpeg libsm6"
+   * ])
+   * ```
+   */
+  addCommands(commands: string[]): this;
+  /**
+   * Add system packages via apt-get.
+   *
+   * @param packages Package names
+   */
+  addAptPackages(packages: string[]): this;
+  /**
+   * Set environment variables.
+   *
+   * @param env Key-value pairs
+   *
+   * @example
+   * ```typescript
+   * .withEnv({ HF_HOME: "/models", PYTHONUNBUFFERED: "1" })
+   * ```
+   */
+  withEnv(env: Record<string, string>): this;
+  /**
+   * Inject secrets during build.
+   * Secrets are retrieved from the secret store.
+   *
+   * @param secretNames Names of secrets to inject
+   *
+   * @example
+   * ```typescript
+   * .withSecrets(["HF_TOKEN", "AWS_ACCESS_KEY"])
+   * ```
+   */
+  withSecrets(secretNames: string[]): this;
+  /**
+   * Configure conda environment.
+   *
+   * @param packages Conda packages
+   * @param channels Conda channels (default: ["conda-forge"])
+   *
+   * @example
+   * ```typescript
+   * .conda(["pytorch", "torchvision"], ["pytorch", "conda-forge"])
+   * ```
+   */
+  conda(packages: string[], channels?: string[]): this;
+  /**
+   * Set working directory.
+   *
+   * @param dir Working directory path
+   */
+  workdir(dir: string): this;
+  /**
+   * Set user to run as.
+   *
+   * @param user Username or UID
+   */
+  user(user: string): this;
+  /**
+   * Add build arguments.
+   *
+   * @param args Build arguments
+   */
+  buildArgs(args: Record<string, string>): this;
+  /**
+   * Add image labels.
+   *
+   * @param labels Image labels
+   */
+  labels(labels: Record<string, string>): this;
+  /**
+   * Get the image specification without building.
+   *
+   * @returns The current ImageSpec
+   */
+  toSpec(): ImageSpec;
+  /**
+   * Compute the content-addressed ID for this spec.
+   *
+   * Uses Web Crypto when available (browsers and Node 22+), falling
+   * back to a lazy `import("node:crypto")` on older server runtimes.
+   * Works in every JavaScript environment the SDK supports.
+   *
+   * @returns SHA-256 hash of the normalized spec as a hex string.
+   *
+   * **Breaking change (v0.0.3):** `computeId()` was previously
+   * synchronous. Callers must now `await` the result. A Node-only sync
+   * variant was considered and dropped: it would have either required
+   * Node 22.3+ (breaking Node 18/20 consumers) or re-introduced the
+   * top-level `node:crypto` import that blanks every browser page
+   * transitively importing the SDK root. If you genuinely need the
+   * hash synchronously in a Node-only context, compute it yourself
+   * from `builder.toSpec()` with `JSON.stringify(spec, Object.keys(spec).sort())`.
+   */
+  computeId(): Promise<string>;
+  /**
+   * Configure client for API access.
+   * @internal
+   */
+  withClient(config: {
+    baseUrl: string;
+    apiKey: string;
+  }): this;
+  /**
+   * Build the image.
+   *
+   * @param options Build options including client config
+   * @returns The built Image instance
+   *
+   * @example
+   * ```typescript
+   * const image = await Image.create()
+   *   .python("3.11")
+   *   .addPackages(["numpy"])
+   *   .build({
+   *     client: { baseUrl, apiKey },
+   *     onProgress: (e) => console.log(e.message),
+   *   });
+   *
+   * const box = await client.create({ image: image.id });
+   * ```
+   */
+  build(options?: ImageBuildOptions): Promise<Image>;
+  /**
+   * Generate Dockerfile from the current spec.
+   * Useful for debugging or manual builds.
+   *
+   * @returns Dockerfile content
+   */
+  generateDockerfile(): string;
+}
+/**
+ * Generate a Dockerfile from an ImageSpec.
+ *
+ * @param spec The image specification
+ * @returns Dockerfile content
+ */
+declare function generateDockerfile(spec: ImageSpec): string;
+//#endregion
+//#region src/manage-sandboxes.d.ts
+declare const MANAGE_SANDBOXES_TOOL_NAME = "manageSandboxes";
+type ManageSandboxesInput = {
+  action: "capabilities";
+} | {
+  action: "create";
+  options: CreateSandboxFleetOptions;
+} | {
+  action: "createWithCoordinator";
+  options: CreateSandboxFleetWithCoordinatorOptions;
+} | {
+  action: "list";
+  fleetId: string;
+} | {
+  action: "delete";
+  fleetId: string;
+} | {
+  action: "attachMachine";
+  fleetId: string;
+  machine: AttachSandboxFleetMachineOptions;
+} | {
+  action: "detachMachine";
+  fleetId: string;
+  machineId: FleetMachineId;
+} | {
+  action: "manifest";
+  fleetId: string;
+} | {
+  action: "usage";
+  fleetId: string;
+} | {
+  action: "trace";
+  fleetId: string;
+} | {
+  action: "intelligence";
+  fleetId: string;
+} | {
+  action: "cost";
+  fleetId: string;
+} | {
+  action: "createWorkspaceSnapshot";
+  fleetId: string;
+} | {
+  action: "restoreWorkspaceSnapshot";
+  fleetId: string;
+  snapshotId: string;
+} | {
+  action: "reconcileWorkspace";
+  fleetId: string;
+};
+interface ManageSandboxesTool {
+  name: typeof MANAGE_SANDBOXES_TOOL_NAME;
+  description: string;
+  parameters: Record<string, unknown>;
+  execute(input: ManageSandboxesInput | Record<string, unknown>): Promise<unknown>;
+}
+interface ManageSandboxesToolOptions {
+  /**
+   * Host-owned caps applied to every create action. The model must not be
+   * allowed to choose its own spend, driver, accelerator, or scale policy.
+   */
+  policy?: SandboxFleetPolicy;
+}
+declare function createManageSandboxesTool(client: SandboxClient, options?: ManageSandboxesToolOptions): ManageSandboxesTool;
+declare const MANAGE_SANDBOXES_PARAMETERS: {
+  readonly type: "object";
+  readonly additionalProperties: false;
+  readonly required: readonly ["action"];
+  readonly properties: {
+    readonly action: {
+      readonly type: "string";
+      readonly enum: readonly ["capabilities", "create", "createWithCoordinator", "list", "delete", "attachMachine", "detachMachine", "manifest", "usage", "trace", "intelligence", "cost", "createWorkspaceSnapshot", "restoreWorkspaceSnapshot", "reconcileWorkspace"];
+    };
+    readonly fleetId: {
+      type: string;
+      pattern: string;
+    };
+    readonly machineId: {
+      type: string;
+      pattern: string;
+    };
+    readonly snapshotId: {
+      readonly type: "string";
+      readonly minLength: 1;
+    };
+    readonly options: {
+      readonly type: "object";
+    };
+    readonly machine: {
+      readonly type: "object";
+      readonly required: readonly ["machineId", "sandboxId"];
+      readonly additionalProperties: true;
+      readonly properties: {
+        readonly machineId: {
+          type: string;
+          pattern: string;
+        };
+        readonly sandboxId: {
+          readonly type: "string";
+          readonly minLength: 1;
+          readonly maxLength: 128;
+        };
+      };
+    };
+  };
+};
+//#endregion
+export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentSubagentProfile, type AnyTokenPayload, type AttachSandboxFleetMachineOptions, AuthError, type AutomationInfo, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendStatus, type BackendType, type BatchEvent, type BatchOptions, type BatchResult, type BatchTask, type BatchTaskResult, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CapabilityError, type CheckpointInfo, type CheckpointOptions, type CheckpointResult, type CodeResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type ConfidentialSandboxResult, type ConfidentialTeeType, type ConnectionInfo, type CreateAutomationInput, type CreateConfidentialSandboxOptions, type CreateEndpointInput, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateTeamOptions, type CreateTriggerInput, type DeleteOptions, type DeliveryAttempt, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriverConfig, type DriverInfo, type DriverType, type EndpointInfo, type EndpointWithSecret, type EventStreamOptions, type ExecOptions, type ExecResult, type FileInfo, type FileSystem, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, type ForkOptions, type ForkResult, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuType, Image, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstallRecipeInput, type InstalledTool, type IntegrationAction, type IntegrationActionKind, type IntegrationActor, type IntegrationDeliveryStatus, type IntegrationManifest, type IntegrationPrincipalType, type IntegrationProvider, type IntegrationRequirement, type IntegrationScope, type IntegrationVerificationKind, IntegrationsManager, type RecipeManifest as IntegrationsRecipeManifest, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type Process, type ProcessInfo, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RunCodeOptions, SANDBOX_MCP_SERVER_NAME, type SSHCommandDescriptor, type SSHCredentials, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, type SandboxConnection, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPermissionsConfig, type SandboxResources, SandboxSession, type SandboxStatus, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, ServerError, type SessionEventStreamOptions, type SessionInfo, type SessionListOptions, type SessionStatus, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, StateError, type StorageConfig, type SubscriptionInfo, TangleSandboxClient, type TangleSandboxClientConfig, type TaskOptions, type TaskResult, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, TimeoutError, type TokenRefreshHandler, type ToolsConfig, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TriggerInfo, type TriggerRun, type TriggerWithSecret, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, buildCollaborationDocumentId, buildSandboxMcpConfig, buildTraceExportPayload, createConfidentialSandbox, createManageSandboxesTool, defineAgentProfile, defineGitHubResource, defineInlineResource, exportTraceBundle, generateAttestationNonce, generateDockerfile, mergeAgentProfiles, normalizeCollaborationPath, otelTraceIdForTangleTrace, parseCollaborationDocumentId, parseSSEStream, startTeeAttestationHeartbeat, toOtelJson };