@tensorlakeai/tensorlake 0.5.158 → 0.5.160

package/dist/index.d.cts

@@ -86,6 +86,8 @@ interface NativeSandboxClient {
     deleteSandbox(sandboxId: string): Promise<string>;
     suspendSandbox(sandboxId: string): Promise<string>;
     resumeSandbox(sandboxId: string): Promise<string>;
+    suspendSandboxAndWait(sandboxId: string, waitSec: number): Promise<boolean>;
+    resumeSandboxAndWait(sandboxId: string, waitSec: number): Promise<boolean>;
     attachFileSystem(sandboxId: string, fileSystemId: string, mountPath: string, readOnly?: boolean | null, prefetch?: boolean | null, snapshotId?: string | null, owner?: string | null): Promise<TracedJson>;
     detachFileSystem(sandboxId: string, mountPath: string): Promise<TracedJson>;
     createSnapshot(sandboxId: string, snapshotType?: string | null): Promise<TracedJson>;
@@ -308,6 +310,8 @@ interface ClaimSandboxOptions {
     fileSystems?: FileSystemMount[];
 }
 interface CreateSandboxOptions {
+    /** Allow proxy traffic to wake a suspended sandbox (default true). False requires a named sandbox. */
+    autoResume?: boolean;
     /** Optional sandbox image name. GPU sandboxes require a CAS image; when omitted with a GPU request, Tensorlake uses the server's configured GPU default. */
     image?: string;
     /** CPU count. Defaults to 1 for fresh creates; snapshot restores inherit it when omitted. */
@@ -328,6 +332,10 @@ interface CreateSandboxOptions {
     allowOut?: string[];
     denyOut?: string[];
     snapshotId?: string;
+    /** Whether exposed user ports are reachable without Tensorlake auth. Defaults to false for fresh creates; snapshot restores inherit it when omitted. */
+    allowUnauthenticatedAccess?: boolean;
+    /** User ports routable through the sandbox proxy. Port 9501 is reserved. Snapshot restores inherit ports when omitted; [] clears them. Does not enable unauthenticated access. */
+    exposedPorts?: number[];
     /** Optional name for the sandbox. Named sandboxes support suspend/resume. When absent the sandbox is ephemeral. */
     name?: string;
     /** File systems to mount on fresh creation or warm-pool claim, each at its own absolute, unique guest mount path. */
@@ -377,6 +385,8 @@ interface SandboxResourceResizeInfo {
 }
 /** Wait options apply only to resource updates and are ignored for other properties. */
 interface UpdateSandboxOptions extends ResourceResizeWaitOptions {
+    /** Change wake-on-traffic policy without waking or suspending the sandbox. Omit to keep it unchanged; false requires a named sandbox. Cannot be combined with resource resizing. */
+    autoResume?: boolean;
     /** Whole live vCPU target; omitted retains the current allocation. */
     cpus?: number;
     /** Memory target in MiB, with the same units as create; never rounded by the SDK. */
@@ -472,6 +482,8 @@ interface CopySandboxResponse {
     sandboxes: CopiedSandboxResponse[];
 }
 interface SandboxInfo {
+    /** Whether proxy traffic may wake this sandbox; defaults to true on older servers. */
+    autoResume: boolean;
     /**
      * The runtime the server chose for this sandbox: `firecracker`,
      * `cloud-hypervisor` or `gvisor`. Informational only; it is never sent and
@@ -1581,6 +1593,10 @@ declare class SandboxClient {
      * cannot. By default blocks until the sandbox is fully `Suspended`. Pass
      * `{ wait: false }` to return immediately after the request is sent
      * (fire-and-return); the server processes the suspend asynchronously.
+     *
+     * The server answers as soon as the suspend completes. When its wait runs
+     * out first, or the server does not support waiting, the rest of `timeout`
+     * is spent polling every `pollInterval` seconds.
      */
     suspend(sandboxId: string, options?: SuspendResumeOptions): Promise<void>;
     /**
@@ -1589,8 +1605,18 @@ declare class SandboxClient {
      * By default blocks until the sandbox is `Running` and routable. Pass
      * `{ wait: false }` to return immediately after the request is sent
      * (fire-and-return); the server processes the resume asynchronously.
+     *
+     * The server answers as soon as the sandbox runs. When its wait runs out
+     * first, or the server does not support waiting, the rest of `timeout` is
+     * spent polling every `pollInterval` seconds.
      */
     resume(sandboxId: string, options?: SuspendResumeOptions): Promise<void>;
+    /**
+     * Send a suspend or resume. With `wait`, the server waits for `target` and
+     * answers whether it was reached; when its wait runs out first, the rest of
+     * the timeout is spent polling.
+     */
+    private changeLifecycle;
     /**
      * Attach a registered file system to a running sandbox at `mountPath`.
      *
@@ -2052,6 +2078,141 @@ declare class RepositoryClient {
     private tracedJson;
 }
 
+/** How far back to read instead of the current billing period. */
+type UsageLookback = "1d" | "7d" | "30d";
+interface UsageClientOptions {
+    /** Tensorlake API key. Defaults to `TENSORLAKE_API_KEY`. */
+    apiKey?: string;
+    /** Organization to read. Defaults to `TENSORLAKE_ORGANIZATION_ID`. */
+    organizationId?: string;
+    /** Cloud API URL. Defaults to `TENSORLAKE_API_URL`. */
+    apiUrl?: string;
+}
+interface UsageReadOptions {
+    /** Read the last `1d`, `7d` or `30d` instead of the current billing period. */
+    last?: UsageLookback;
+}
+/** Metered usage, excluding subscription fees and tax. */
+interface UsageCharge {
+    currency: string;
+    amountMinor: string;
+    resources: {
+        cpuAmountMinor: string;
+        memoryAmountMinor: string;
+        sandboxStorageAmountMinor: string;
+        snapshotStorageAmountMinor: string;
+    };
+}
+/** Plan allowance consumption, valued at the overage rate. */
+interface IncludedUsage {
+    currency: string;
+    includedAmountMinor: string;
+    periodUsedAmountMinor: string;
+    rangeUsageAmountMinor: string;
+    periodStart: string;
+    periodEnd: string;
+}
+/** Organization usage totals for a window. */
+interface UsageSummary {
+    windowStart: string;
+    windowEnd: string;
+    computeUnits: string;
+    /**
+     * `null` when the organization has no metered price, and on plans with
+     * included usage (Pro, Enterprise) when the window is not inside the current
+     * billing period. Use `usageValue` then.
+     */
+    usageCharge: UsageCharge | null;
+    includedUsage: IncludedUsage | null;
+    /**
+     * Usage valued at the plan's overage rate, before included usage. Set for
+     * every window on plans with included usage, `null` otherwise.
+     */
+    usageValue: UsageCharge | null;
+    runningSandboxes: number;
+    projects: Array<{
+        projectId: string;
+        projectName: string;
+        computeUnits: string;
+    }>;
+}
+interface ResourceUsage {
+    quantity: string;
+    /** `vCPU-hour`, `GiB-hour` or `GiB`. */
+    unit: string;
+    attributedAmountMinor: string | null;
+    usageValueAmountMinor: string | null;
+}
+/** Usage of one sandbox and its share of the organization's usage charge. */
+interface SandboxUsage {
+    sandboxId: string;
+    /** `null` for usage whose project no longer exists. */
+    project: {
+        projectId: string;
+        projectName: string;
+    } | null;
+    attributedAmountMinor: string | null;
+    usageValueAmountMinor: string | null;
+    resources: {
+        cpu: ResourceUsage;
+        memory: ResourceUsage;
+        sandboxStorage: ResourceUsage;
+        snapshotStorage: ResourceUsage;
+        networkEgress: ResourceUsage;
+    };
+}
+/** A share of the organization's pooled usage charge. */
+interface AttributedUsageCharge {
+    currency: string;
+    amountMinor: string;
+    /** `invoice` for a finalized invoice, `current_price_estimate` otherwise. */
+    basis: "invoice" | "current_price_estimate" | "unknown";
+}
+/** Every sandbox of a window with its usage and attributed charge. */
+interface SandboxUsageExport {
+    windowStart: string;
+    windowEnd: string;
+    /**
+     * The organization's usage charge; the sandboxes' attributed amounts add up
+     * to it exactly. `null` when the organization has no metered price, and on
+     * plans with included usage when the window is not inside the current
+     * billing period.
+     */
+    attributedUsageCharge: AttributedUsageCharge | null;
+    includedUsage: IncludedUsage | null;
+    /**
+     * The organization's usage at the plan's overage rate; the sandboxes' usage
+     * values add up to it exactly. Set for every window on plans with included
+     * usage.
+     */
+    attributedUsageValue: {
+        currency: string;
+        amountMinor: string;
+    } | null;
+    sandboxes: SandboxUsage[];
+}
+/**
+ * Read an organization's sandbox usage and cost.
+ *
+ * Every read covers the current billing period, or the last `1d`, `7d` or
+ * `30d` when `last` is set. Requests, windows and response parsing are done
+ * by the Rust SDK, the same as for Python and the CLI.
+ */
+declare class UsageClient {
+    private readonly native;
+    constructor(options?: UsageClientOptions);
+    close(): void;
+    /** Organization usage totals for the window. */
+    summary(options?: UsageReadOptions): Promise<UsageSummary>;
+    /**
+     * Usage and attributed cost of every sandbox that ran in the window.
+     *
+     * The server computes the attribution once and returns every sandbox in one
+     * response.
+     */
+    sandboxes(options?: UsageReadOptions): Promise<SandboxUsageExport>;
+}
+
 /**
  * Build operations for CAS sandbox images.
  *
@@ -2798,6 +2959,8 @@ declare class RemoteAPIError extends SandboxError {
     readonly statusCode: number;
     /** Original response body, retained for compatibility and diagnostics. */
     readonly responseMessage: string;
+    /** Machine-readable API error code, including proxy policy failures. */
+    readonly code?: string;
     readonly sandboxId?: string;
     /** Server reason, including unknown future reasons. */
     readonly reason?: string;
@@ -2819,4 +2982,4 @@ declare class RequestExecutionError extends Error {
     constructor(message: string, functionName?: string);
 }
 
-export { ApplicationBuildContext, ApplicationBuildResponse, ApplicationManifest, ApplicationSummary, type ArchivedSandboxInfo, type AttachFileSystemOptions, BinaryPayload, type Branch, BuildInfo, BuildLogEntry, type CancelImageBuildOutcome, type CancelImageBuildSelector, type CheckpointOptions, type CheckpointType, type ClaimSandboxOptions, CliNotFoundError, CloudClient, CloudClientOptions, CommandExitReason, type CommandResult, type CommitJobError, type CommitJobReadBack, type CommitJobStatus, type ConflictPath, type ConflictTerm, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type FileEntry, FileNotFoundInFilesystemError, FileSystem, type FileSystemMount, Filesystem, FilesystemAPIError, FilesystemClient, type FilesystemClientOptions, FilesystemError, type FilesystemFileRead, type FilesystemInfo, FilesystemMount, FilesystemNotFoundError, type FilesystemReadOptions, type FilesystemSnapshot, type FilesystemSnapshotInfo, type FilesystemStatus, type FilesystemVersion, type GPUResources, type GetOrCreateOptions, type GetOrCreateOutcome, type GetSandboxLogsOptions, type GitCredential, type GitRef, type GitRepository, type GpuModel, type GpuRequest, type HealthResponse, Image, ImageBuildCancellationOutcome, ImageBuildCancelledError, ImageBuildError, ImageBuildErrorCode, type ImageBuildErrorDetails, type ImageBuildEvent, ImageBuildFailedError, ImageBuildHandle, ImageBuildInProgressError, type ImageBuildInfo, ImageBuildInterruptedError, ImageBuildKind, ImageBuildNotFoundError, ImageBuildPhase, type ImageBuildResult, ImageBuildStatus, ImageBuildTimeoutError, type ImageBuildWaitOptions, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type ManagedProcessExit, type ManagedProcessHealthStatus, type ManagedProcessInfo, type ManagedProcessStatus, type MergeConflict, type MergeConflictRecord, type MergeEntry, type MergeOptions, type MergeReport, type MergeStats, MountError, type MountStatus, type MouseButton, type NetworkConfig, NewSecret, type Operation, type OperationRef, type OutputEvent, OutputMode, type OutputResponse, PendingSandbox, type PendingSandboxRecord, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessHealthCheck, type ProcessHealthCheckType, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, type PushReport, type PushWorktreeOptions, ReadOnlyMountNotSupportedError, type ReadyOptions, RemoteAPIError, RepositoryClient, type RepositoryClientOptions, type RepositoryHandle, type RepositoryInfo, RepositoryMount, type RepositoryMountOptions, type RepositoryMountStatus, type RepositoryUnmountOptions, RequestExecutionError, RequestFailedError, RequestInput, RequestMetadata, RequestNotFinishedError, RequestOutput, ResizeErrorReason, ResizeStatus, type ResourceResizeWaitOptions, type RestartPolicy, type RestartPolicyConfig, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, type SandboxLogLevel, type SandboxLogSignal, type SandboxLogsResponse, SandboxNotFoundError, type SandboxOptions, SandboxPending, SandboxPendingReason, type SandboxPoolInfo, type SandboxPortAccess, type SandboxProcessLogFilter, type SandboxProcessLogFiltersResponse, SandboxResizeError, type SandboxResourceResizeInfo, SandboxStatus, SandboxTemplate, Secret, SecretsList, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildOptions, StartImageBuildRequest, type StartImageImportOptions, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TERMINATION_REASON_CANCELLED, TERMINATION_REASON_NO_CAPACITY, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpdateSandboxOptions, UpsertSecretResponse, cancelImageBuild, createFileSystem, deleteFileSystem, getImageBuild, isSandboxPending, listFileSystems, sandboxUrlFromIngressEndpoint, startImageBuild, startImageImport, waitImageBuild };
+export { ApplicationBuildContext, ApplicationBuildResponse, ApplicationManifest, ApplicationSummary, type ArchivedSandboxInfo, type AttachFileSystemOptions, type AttributedUsageCharge, BinaryPayload, type Branch, BuildInfo, BuildLogEntry, type CancelImageBuildOutcome, type CancelImageBuildSelector, type CheckpointOptions, type CheckpointType, type ClaimSandboxOptions, CliNotFoundError, CloudClient, CloudClientOptions, CommandExitReason, type CommandResult, type CommitJobError, type CommitJobReadBack, type CommitJobStatus, type ConflictPath, type ConflictTerm, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type FileEntry, FileNotFoundInFilesystemError, FileSystem, type FileSystemMount, Filesystem, FilesystemAPIError, FilesystemClient, type FilesystemClientOptions, FilesystemError, type FilesystemFileRead, type FilesystemInfo, FilesystemMount, FilesystemNotFoundError, type FilesystemReadOptions, type FilesystemSnapshot, type FilesystemSnapshotInfo, type FilesystemStatus, type FilesystemVersion, type GPUResources, type GetOrCreateOptions, type GetOrCreateOutcome, type GetSandboxLogsOptions, type GitCredential, type GitRef, type GitRepository, type GpuModel, type GpuRequest, type HealthResponse, Image, ImageBuildCancellationOutcome, ImageBuildCancelledError, ImageBuildError, ImageBuildErrorCode, type ImageBuildErrorDetails, type ImageBuildEvent, ImageBuildFailedError, ImageBuildHandle, ImageBuildInProgressError, type ImageBuildInfo, ImageBuildInterruptedError, ImageBuildKind, ImageBuildNotFoundError, ImageBuildPhase, type ImageBuildResult, ImageBuildStatus, ImageBuildTimeoutError, type ImageBuildWaitOptions, type IncludedUsage, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type ManagedProcessExit, type ManagedProcessHealthStatus, type ManagedProcessInfo, type ManagedProcessStatus, type MergeConflict, type MergeConflictRecord, type MergeEntry, type MergeOptions, type MergeReport, type MergeStats, MountError, type MountStatus, type MouseButton, type NetworkConfig, NewSecret, type Operation, type OperationRef, type OutputEvent, OutputMode, type OutputResponse, PendingSandbox, type PendingSandboxRecord, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessHealthCheck, type ProcessHealthCheckType, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, type PushReport, type PushWorktreeOptions, ReadOnlyMountNotSupportedError, type ReadyOptions, RemoteAPIError, RepositoryClient, type RepositoryClientOptions, type RepositoryHandle, type RepositoryInfo, RepositoryMount, type RepositoryMountOptions, type RepositoryMountStatus, type RepositoryUnmountOptions, RequestExecutionError, RequestFailedError, RequestInput, RequestMetadata, RequestNotFinishedError, RequestOutput, ResizeErrorReason, ResizeStatus, type ResourceResizeWaitOptions, type ResourceUsage, type RestartPolicy, type RestartPolicyConfig, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, type SandboxLogLevel, type SandboxLogSignal, type SandboxLogsResponse, SandboxNotFoundError, type SandboxOptions, SandboxPending, SandboxPendingReason, type SandboxPoolInfo, type SandboxPortAccess, type SandboxProcessLogFilter, type SandboxProcessLogFiltersResponse, SandboxResizeError, type SandboxResourceResizeInfo, SandboxStatus, SandboxTemplate, type SandboxUsage, type SandboxUsageExport, Secret, SecretsList, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildOptions, StartImageBuildRequest, type StartImageImportOptions, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TERMINATION_REASON_CANCELLED, TERMINATION_REASON_NO_CAPACITY, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpdateSandboxOptions, UpsertSecretResponse, type UsageCharge, UsageClient, type UsageClientOptions, type UsageLookback, type UsageReadOptions, type UsageSummary, cancelImageBuild, createFileSystem, deleteFileSystem, getImageBuild, isSandboxPending, listFileSystems, sandboxUrlFromIngressEndpoint, startImageBuild, startImageImport, waitImageBuild };

package/dist/index.d.ts

@@ -86,6 +86,8 @@ interface NativeSandboxClient {
     deleteSandbox(sandboxId: string): Promise<string>;
     suspendSandbox(sandboxId: string): Promise<string>;
     resumeSandbox(sandboxId: string): Promise<string>;
+    suspendSandboxAndWait(sandboxId: string, waitSec: number): Promise<boolean>;
+    resumeSandboxAndWait(sandboxId: string, waitSec: number): Promise<boolean>;
     attachFileSystem(sandboxId: string, fileSystemId: string, mountPath: string, readOnly?: boolean | null, prefetch?: boolean | null, snapshotId?: string | null, owner?: string | null): Promise<TracedJson>;
     detachFileSystem(sandboxId: string, mountPath: string): Promise<TracedJson>;
     createSnapshot(sandboxId: string, snapshotType?: string | null): Promise<TracedJson>;
@@ -308,6 +310,8 @@ interface ClaimSandboxOptions {
     fileSystems?: FileSystemMount[];
 }
 interface CreateSandboxOptions {
+    /** Allow proxy traffic to wake a suspended sandbox (default true). False requires a named sandbox. */
+    autoResume?: boolean;
     /** Optional sandbox image name. GPU sandboxes require a CAS image; when omitted with a GPU request, Tensorlake uses the server's configured GPU default. */
     image?: string;
     /** CPU count. Defaults to 1 for fresh creates; snapshot restores inherit it when omitted. */
@@ -328,6 +332,10 @@ interface CreateSandboxOptions {
     allowOut?: string[];
     denyOut?: string[];
     snapshotId?: string;
+    /** Whether exposed user ports are reachable without Tensorlake auth. Defaults to false for fresh creates; snapshot restores inherit it when omitted. */
+    allowUnauthenticatedAccess?: boolean;
+    /** User ports routable through the sandbox proxy. Port 9501 is reserved. Snapshot restores inherit ports when omitted; [] clears them. Does not enable unauthenticated access. */
+    exposedPorts?: number[];
     /** Optional name for the sandbox. Named sandboxes support suspend/resume. When absent the sandbox is ephemeral. */
     name?: string;
     /** File systems to mount on fresh creation or warm-pool claim, each at its own absolute, unique guest mount path. */
@@ -377,6 +385,8 @@ interface SandboxResourceResizeInfo {
 }
 /** Wait options apply only to resource updates and are ignored for other properties. */
 interface UpdateSandboxOptions extends ResourceResizeWaitOptions {
+    /** Change wake-on-traffic policy without waking or suspending the sandbox. Omit to keep it unchanged; false requires a named sandbox. Cannot be combined with resource resizing. */
+    autoResume?: boolean;
     /** Whole live vCPU target; omitted retains the current allocation. */
     cpus?: number;
     /** Memory target in MiB, with the same units as create; never rounded by the SDK. */
@@ -472,6 +482,8 @@ interface CopySandboxResponse {
     sandboxes: CopiedSandboxResponse[];
 }
 interface SandboxInfo {
+    /** Whether proxy traffic may wake this sandbox; defaults to true on older servers. */
+    autoResume: boolean;
     /**
      * The runtime the server chose for this sandbox: `firecracker`,
      * `cloud-hypervisor` or `gvisor`. Informational only; it is never sent and
@@ -1581,6 +1593,10 @@ declare class SandboxClient {
      * cannot. By default blocks until the sandbox is fully `Suspended`. Pass
      * `{ wait: false }` to return immediately after the request is sent
      * (fire-and-return); the server processes the suspend asynchronously.
+     *
+     * The server answers as soon as the suspend completes. When its wait runs
+     * out first, or the server does not support waiting, the rest of `timeout`
+     * is spent polling every `pollInterval` seconds.
      */
     suspend(sandboxId: string, options?: SuspendResumeOptions): Promise<void>;
     /**
@@ -1589,8 +1605,18 @@ declare class SandboxClient {
      * By default blocks until the sandbox is `Running` and routable. Pass
      * `{ wait: false }` to return immediately after the request is sent
      * (fire-and-return); the server processes the resume asynchronously.
+     *
+     * The server answers as soon as the sandbox runs. When its wait runs out
+     * first, or the server does not support waiting, the rest of `timeout` is
+     * spent polling every `pollInterval` seconds.
      */
     resume(sandboxId: string, options?: SuspendResumeOptions): Promise<void>;
+    /**
+     * Send a suspend or resume. With `wait`, the server waits for `target` and
+     * answers whether it was reached; when its wait runs out first, the rest of
+     * the timeout is spent polling.
+     */
+    private changeLifecycle;
     /**
      * Attach a registered file system to a running sandbox at `mountPath`.
      *
@@ -2052,6 +2078,141 @@ declare class RepositoryClient {
     private tracedJson;
 }
 
+/** How far back to read instead of the current billing period. */
+type UsageLookback = "1d" | "7d" | "30d";
+interface UsageClientOptions {
+    /** Tensorlake API key. Defaults to `TENSORLAKE_API_KEY`. */
+    apiKey?: string;
+    /** Organization to read. Defaults to `TENSORLAKE_ORGANIZATION_ID`. */
+    organizationId?: string;
+    /** Cloud API URL. Defaults to `TENSORLAKE_API_URL`. */
+    apiUrl?: string;
+}
+interface UsageReadOptions {
+    /** Read the last `1d`, `7d` or `30d` instead of the current billing period. */
+    last?: UsageLookback;
+}
+/** Metered usage, excluding subscription fees and tax. */
+interface UsageCharge {
+    currency: string;
+    amountMinor: string;
+    resources: {
+        cpuAmountMinor: string;
+        memoryAmountMinor: string;
+        sandboxStorageAmountMinor: string;
+        snapshotStorageAmountMinor: string;
+    };
+}
+/** Plan allowance consumption, valued at the overage rate. */
+interface IncludedUsage {
+    currency: string;
+    includedAmountMinor: string;
+    periodUsedAmountMinor: string;
+    rangeUsageAmountMinor: string;
+    periodStart: string;
+    periodEnd: string;
+}
+/** Organization usage totals for a window. */
+interface UsageSummary {
+    windowStart: string;
+    windowEnd: string;
+    computeUnits: string;
+    /**
+     * `null` when the organization has no metered price, and on plans with
+     * included usage (Pro, Enterprise) when the window is not inside the current
+     * billing period. Use `usageValue` then.
+     */
+    usageCharge: UsageCharge | null;
+    includedUsage: IncludedUsage | null;
+    /**
+     * Usage valued at the plan's overage rate, before included usage. Set for
+     * every window on plans with included usage, `null` otherwise.
+     */
+    usageValue: UsageCharge | null;
+    runningSandboxes: number;
+    projects: Array<{
+        projectId: string;
+        projectName: string;
+        computeUnits: string;
+    }>;
+}
+interface ResourceUsage {
+    quantity: string;
+    /** `vCPU-hour`, `GiB-hour` or `GiB`. */
+    unit: string;
+    attributedAmountMinor: string | null;
+    usageValueAmountMinor: string | null;
+}
+/** Usage of one sandbox and its share of the organization's usage charge. */
+interface SandboxUsage {
+    sandboxId: string;
+    /** `null` for usage whose project no longer exists. */
+    project: {
+        projectId: string;
+        projectName: string;
+    } | null;
+    attributedAmountMinor: string | null;
+    usageValueAmountMinor: string | null;
+    resources: {
+        cpu: ResourceUsage;
+        memory: ResourceUsage;
+        sandboxStorage: ResourceUsage;
+        snapshotStorage: ResourceUsage;
+        networkEgress: ResourceUsage;
+    };
+}
+/** A share of the organization's pooled usage charge. */
+interface AttributedUsageCharge {
+    currency: string;
+    amountMinor: string;
+    /** `invoice` for a finalized invoice, `current_price_estimate` otherwise. */
+    basis: "invoice" | "current_price_estimate" | "unknown";
+}
+/** Every sandbox of a window with its usage and attributed charge. */
+interface SandboxUsageExport {
+    windowStart: string;
+    windowEnd: string;
+    /**
+     * The organization's usage charge; the sandboxes' attributed amounts add up
+     * to it exactly. `null` when the organization has no metered price, and on
+     * plans with included usage when the window is not inside the current
+     * billing period.
+     */
+    attributedUsageCharge: AttributedUsageCharge | null;
+    includedUsage: IncludedUsage | null;
+    /**
+     * The organization's usage at the plan's overage rate; the sandboxes' usage
+     * values add up to it exactly. Set for every window on plans with included
+     * usage.
+     */
+    attributedUsageValue: {
+        currency: string;
+        amountMinor: string;
+    } | null;
+    sandboxes: SandboxUsage[];
+}
+/**
+ * Read an organization's sandbox usage and cost.
+ *
+ * Every read covers the current billing period, or the last `1d`, `7d` or
+ * `30d` when `last` is set. Requests, windows and response parsing are done
+ * by the Rust SDK, the same as for Python and the CLI.
+ */
+declare class UsageClient {
+    private readonly native;
+    constructor(options?: UsageClientOptions);
+    close(): void;
+    /** Organization usage totals for the window. */
+    summary(options?: UsageReadOptions): Promise<UsageSummary>;
+    /**
+     * Usage and attributed cost of every sandbox that ran in the window.
+     *
+     * The server computes the attribution once and returns every sandbox in one
+     * response.
+     */
+    sandboxes(options?: UsageReadOptions): Promise<SandboxUsageExport>;
+}
+
 /**
  * Build operations for CAS sandbox images.
  *
@@ -2798,6 +2959,8 @@ declare class RemoteAPIError extends SandboxError {
     readonly statusCode: number;
     /** Original response body, retained for compatibility and diagnostics. */
     readonly responseMessage: string;
+    /** Machine-readable API error code, including proxy policy failures. */
+    readonly code?: string;
     readonly sandboxId?: string;
     /** Server reason, including unknown future reasons. */
     readonly reason?: string;
@@ -2819,4 +2982,4 @@ declare class RequestExecutionError extends Error {
     constructor(message: string, functionName?: string);
 }
 
-export { ApplicationBuildContext, ApplicationBuildResponse, ApplicationManifest, ApplicationSummary, type ArchivedSandboxInfo, type AttachFileSystemOptions, BinaryPayload, type Branch, BuildInfo, BuildLogEntry, type CancelImageBuildOutcome, type CancelImageBuildSelector, type CheckpointOptions, type CheckpointType, type ClaimSandboxOptions, CliNotFoundError, CloudClient, CloudClientOptions, CommandExitReason, type CommandResult, type CommitJobError, type CommitJobReadBack, type CommitJobStatus, type ConflictPath, type ConflictTerm, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type FileEntry, FileNotFoundInFilesystemError, FileSystem, type FileSystemMount, Filesystem, FilesystemAPIError, FilesystemClient, type FilesystemClientOptions, FilesystemError, type FilesystemFileRead, type FilesystemInfo, FilesystemMount, FilesystemNotFoundError, type FilesystemReadOptions, type FilesystemSnapshot, type FilesystemSnapshotInfo, type FilesystemStatus, type FilesystemVersion, type GPUResources, type GetOrCreateOptions, type GetOrCreateOutcome, type GetSandboxLogsOptions, type GitCredential, type GitRef, type GitRepository, type GpuModel, type GpuRequest, type HealthResponse, Image, ImageBuildCancellationOutcome, ImageBuildCancelledError, ImageBuildError, ImageBuildErrorCode, type ImageBuildErrorDetails, type ImageBuildEvent, ImageBuildFailedError, ImageBuildHandle, ImageBuildInProgressError, type ImageBuildInfo, ImageBuildInterruptedError, ImageBuildKind, ImageBuildNotFoundError, ImageBuildPhase, type ImageBuildResult, ImageBuildStatus, ImageBuildTimeoutError, type ImageBuildWaitOptions, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type ManagedProcessExit, type ManagedProcessHealthStatus, type ManagedProcessInfo, type ManagedProcessStatus, type MergeConflict, type MergeConflictRecord, type MergeEntry, type MergeOptions, type MergeReport, type MergeStats, MountError, type MountStatus, type MouseButton, type NetworkConfig, NewSecret, type Operation, type OperationRef, type OutputEvent, OutputMode, type OutputResponse, PendingSandbox, type PendingSandboxRecord, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessHealthCheck, type ProcessHealthCheckType, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, type PushReport, type PushWorktreeOptions, ReadOnlyMountNotSupportedError, type ReadyOptions, RemoteAPIError, RepositoryClient, type RepositoryClientOptions, type RepositoryHandle, type RepositoryInfo, RepositoryMount, type RepositoryMountOptions, type RepositoryMountStatus, type RepositoryUnmountOptions, RequestExecutionError, RequestFailedError, RequestInput, RequestMetadata, RequestNotFinishedError, RequestOutput, ResizeErrorReason, ResizeStatus, type ResourceResizeWaitOptions, type RestartPolicy, type RestartPolicyConfig, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, type SandboxLogLevel, type SandboxLogSignal, type SandboxLogsResponse, SandboxNotFoundError, type SandboxOptions, SandboxPending, SandboxPendingReason, type SandboxPoolInfo, type SandboxPortAccess, type SandboxProcessLogFilter, type SandboxProcessLogFiltersResponse, SandboxResizeError, type SandboxResourceResizeInfo, SandboxStatus, SandboxTemplate, Secret, SecretsList, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildOptions, StartImageBuildRequest, type StartImageImportOptions, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TERMINATION_REASON_CANCELLED, TERMINATION_REASON_NO_CAPACITY, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpdateSandboxOptions, UpsertSecretResponse, cancelImageBuild, createFileSystem, deleteFileSystem, getImageBuild, isSandboxPending, listFileSystems, sandboxUrlFromIngressEndpoint, startImageBuild, startImageImport, waitImageBuild };
+export { ApplicationBuildContext, ApplicationBuildResponse, ApplicationManifest, ApplicationSummary, type ArchivedSandboxInfo, type AttachFileSystemOptions, type AttributedUsageCharge, BinaryPayload, type Branch, BuildInfo, BuildLogEntry, type CancelImageBuildOutcome, type CancelImageBuildSelector, type CheckpointOptions, type CheckpointType, type ClaimSandboxOptions, CliNotFoundError, CloudClient, CloudClientOptions, CommandExitReason, type CommandResult, type CommitJobError, type CommitJobReadBack, type CommitJobStatus, type ConflictPath, type ConflictTerm, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type FileEntry, FileNotFoundInFilesystemError, FileSystem, type FileSystemMount, Filesystem, FilesystemAPIError, FilesystemClient, type FilesystemClientOptions, FilesystemError, type FilesystemFileRead, type FilesystemInfo, FilesystemMount, FilesystemNotFoundError, type FilesystemReadOptions, type FilesystemSnapshot, type FilesystemSnapshotInfo, type FilesystemStatus, type FilesystemVersion, type GPUResources, type GetOrCreateOptions, type GetOrCreateOutcome, type GetSandboxLogsOptions, type GitCredential, type GitRef, type GitRepository, type GpuModel, type GpuRequest, type HealthResponse, Image, ImageBuildCancellationOutcome, ImageBuildCancelledError, ImageBuildError, ImageBuildErrorCode, type ImageBuildErrorDetails, type ImageBuildEvent, ImageBuildFailedError, ImageBuildHandle, ImageBuildInProgressError, type ImageBuildInfo, ImageBuildInterruptedError, ImageBuildKind, ImageBuildNotFoundError, ImageBuildPhase, type ImageBuildResult, ImageBuildStatus, ImageBuildTimeoutError, type ImageBuildWaitOptions, type IncludedUsage, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type ManagedProcessExit, type ManagedProcessHealthStatus, type ManagedProcessInfo, type ManagedProcessStatus, type MergeConflict, type MergeConflictRecord, type MergeEntry, type MergeOptions, type MergeReport, type MergeStats, MountError, type MountStatus, type MouseButton, type NetworkConfig, NewSecret, type Operation, type OperationRef, type OutputEvent, OutputMode, type OutputResponse, PendingSandbox, type PendingSandboxRecord, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessHealthCheck, type ProcessHealthCheckType, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, type PushReport, type PushWorktreeOptions, ReadOnlyMountNotSupportedError, type ReadyOptions, RemoteAPIError, RepositoryClient, type RepositoryClientOptions, type RepositoryHandle, type RepositoryInfo, RepositoryMount, type RepositoryMountOptions, type RepositoryMountStatus, type RepositoryUnmountOptions, RequestExecutionError, RequestFailedError, RequestInput, RequestMetadata, RequestNotFinishedError, RequestOutput, ResizeErrorReason, ResizeStatus, type ResourceResizeWaitOptions, type ResourceUsage, type RestartPolicy, type RestartPolicyConfig, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, type SandboxLogLevel, type SandboxLogSignal, type SandboxLogsResponse, SandboxNotFoundError, type SandboxOptions, SandboxPending, SandboxPendingReason, type SandboxPoolInfo, type SandboxPortAccess, type SandboxProcessLogFilter, type SandboxProcessLogFiltersResponse, SandboxResizeError, type SandboxResourceResizeInfo, SandboxStatus, SandboxTemplate, type SandboxUsage, type SandboxUsageExport, Secret, SecretsList, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildOptions, StartImageBuildRequest, type StartImageImportOptions, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TERMINATION_REASON_CANCELLED, TERMINATION_REASON_NO_CAPACITY, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpdateSandboxOptions, UpsertSecretResponse, type UsageCharge, UsageClient, type UsageClientOptions, type UsageLookback, type UsageReadOptions, type UsageSummary, cancelImageBuild, createFileSystem, deleteFileSystem, getImageBuild, isSandboxPending, listFileSystems, sandboxUrlFromIngressEndpoint, startImageBuild, startImageImport, waitImageBuild };