langsmith 0.10.7 → 0.10.9

package/dist/_openapi_client/resources/sandboxes/sandboxes.d.ts

@@ -1,16 +1,28 @@
 import { APIResource } from '../../core/resource.js';
 import * as BoxesAPI from './boxes.js';
-import { BoxCreateParams, BoxCreateSnapshotParams, BoxGenerateDownloadURLParams, BoxGenerateServiceURLParams, BoxListParams, BoxUpdateParams, Boxes } from './boxes.js';
+import { BoxCreateParams, BoxCreateSnapshotParams, BoxDeleteServiceURLParams, BoxGenerateDownloadURLParams, BoxGenerateServiceURLParams, BoxListParams, BoxListServiceURLsParams, BoxListServiceURLsResponse, BoxListServiceURLsResponsesItemsCursorGetPagination, BoxUpdateParams, Boxes } from './boxes.js';
 import * as RegistriesAPI from './registries.js';
 import { Registries, RegistryCreateParams, RegistryListParams, RegistryListResponse, RegistryResponse, RegistryUpdateParams } from './registries.js';
 import * as SnapshotsAPI from './snapshots.js';
 import { SnapshotCreateParams, SnapshotListParams, SnapshotRetrieveByNameResponse, Snapshots } from './snapshots.js';
-import { ItemsCursorGetPagination } from '../../core/pagination.js';
+import { ItemsCursorGetPagination, type ItemsCursorGetPaginationParams, PagePromise } from '../../core/pagination.js';
+import { RequestOptions } from '../../internal/request-options.js';
 export declare class Sandboxes extends APIResource {
     boxes: BoxesAPI.Boxes;
     registries: RegistriesAPI.Registries;
     snapshots: SnapshotsAPI.Snapshots;
+    /**
+     * Returns priced usage per sandbox or snapshot and UTC hour in the half-open
+     * requested interval. LCU uses the recorded compute amount for sandboxes;
+     * snapshots have zero LCU. LSU allocates the recorded workspace storage amount
+     * proportionally to attributed bytes, including checkpoints on their sandbox and
+     * snapshots as separate resources. Resource filters preserve each resource's
+     * share. Rate changes do not reprice recorded amounts. An access-filtered page can
+     * have no items and a non-null next_cursor; continue until next_cursor is null.
+     */
+    listUsageCosts(query: SandboxListUsageCostsParams, options?: RequestOptions): PagePromise<SandboxListUsageCostsResponsesItemsCursorGetPagination, SandboxListUsageCostsResponse>;
 }
+export type SandboxListUsageCostsResponsesItemsCursorGetPagination = ItemsCursorGetPagination<SandboxListUsageCostsResponse>;
 export type SandboxResponsesItemsCursorGetPagination = ItemsCursorGetPagination<SandboxResponse>;
 export type SnapshotResponsesItemsCursorGetPagination = ItemsCursorGetPagination<SnapshotResponse>;
 export interface DownloadURLResponse {
@@ -43,6 +55,11 @@ export interface SandboxListResponse {
 }
 export interface SandboxResponse {
     id?: string;
+    /**
+     * AccessDelegation is the LangSmith access this sandbox was granted, absent when
+     * it has none. It is reported exactly as it was requested at create.
+     */
+    access_delegation?: SandboxResponse.AccessDelegation;
     cpu_millicores?: number;
     created_at?: string;
     created_by?: string;
@@ -58,6 +75,11 @@ export interface SandboxResponse {
     name?: string;
     preserve_memory_on_stop?: boolean;
     proxy_config?: SandboxResponse.ProxyConfig;
+    /**
+     * RunConfig is what the sandbox's commands run with: the user, working directory
+     * and base env beneath env_vars.
+     */
+    run_config?: SandboxResponse.RunConfig;
     size_class?: string;
     snapshot_id?: string;
     status?: string;
@@ -68,21 +90,41 @@ export interface SandboxResponse {
     vcpus?: number;
 }
 export declare namespace SandboxResponse {
+    /**
+     * AccessDelegation is the LangSmith access this sandbox was granted, absent when
+     * it has none. It is reported exactly as it was requested at create.
+     */
+    interface AccessDelegation {
+        mode: 'INHERIT' | 'EXPLICIT';
+        permissions?: Array<string>;
+    }
     interface MountConfig {
         auth?: MountConfig.Auth;
         mounts?: Array<MountConfig.SandboxapiS3BucketMountSpec | MountConfig.SandboxapiGcsBucketMountSpec | MountConfig.SandboxapiGitRepoMountSpec | MountConfig.SandboxapiContextHubRepoMountSpec>;
     }
     namespace MountConfig {
         interface Auth {
-            aws?: Auth.Aws;
+            aws?: Auth.SandboxesSandboxAwsMountRoleAuthConfig | Auth.SandboxesSandboxAwsMountStaticAuthConfig;
             gcp?: Auth.Gcp;
         }
         namespace Auth {
-            interface Aws {
-                access_key_id: Aws.AccessKeyID;
-                secret_access_key: Aws.SecretAccessKey;
+            interface SandboxesSandboxAwsMountRoleAuthConfig {
+                /**
+                 * IAM role to assume with permissions scoped to the configured S3 mounts. Mutually
+                 * exclusive with static credentials. Configure only at creation.
+                 */
+                role_arn: string;
+            }
+            interface SandboxesSandboxAwsMountStaticAuthConfig {
+                access_key_id: SandboxesSandboxAwsMountStaticAuthConfig.AccessKeyID;
+                secret_access_key: SandboxesSandboxAwsMountStaticAuthConfig.SecretAccessKey;
+                /**
+                 * IAM role to assume with permissions scoped to the configured S3 mounts. Mutually
+                 * exclusive with static credentials. Configure only at creation.
+                 */
+                role_arn?: '';
             }
-            namespace Aws {
+            namespace SandboxesSandboxAwsMountStaticAuthConfig {
                 interface AccessKeyID {
                     type: 'plaintext' | 'opaque' | 'workspace_secret';
                     is_set?: boolean;
@@ -317,6 +359,11 @@ export declare namespace SandboxResponse {
     interface ProxyConfig {
         access_control?: ProxyConfig.AccessControl;
         callbacks?: Array<ProxyConfig.Callback>;
+        /**
+         * Description says what this configuration as a whole lets the sandbox reach,
+         * complementing the per-rule descriptions. At most 1024 characters.
+         */
+        description?: string;
         no_proxy?: Array<string>;
         rules?: Array<ProxyConfig.Rule>;
     }
@@ -342,7 +389,12 @@ export declare namespace SandboxResponse {
         }
         interface Rule {
             name: string;
-            aws?: Rule.Aws;
+            aws?: Rule.SandboxesProxyAwsRoleConfig | Rule.SandboxesProxyAwsStaticConfig;
+            /**
+             * Description says what this rule lets the sandbox reach, so an agent driving the
+             * sandbox can be told its capabilities. At most 1024 characters.
+             */
+            description?: string;
             enabled?: boolean;
             /**
              * EnvVars are plaintext env vars set for every command in the sandbox while this
@@ -357,6 +409,14 @@ export declare namespace SandboxResponse {
             };
             gcp?: Rule.Gcp;
             headers?: Array<Rule.Header>;
+            /**
+             * MatchHeaders restricts a header injection rule to requests carrying every listed
+             * header, each written "name: value" with a lowercase name and an exact value.
+             * Pair with headers of the same name to swap a placeholder the sandbox sends (e.g.
+             * "authorization: Bearer account-b") for a real credential, so one host can serve
+             * several accounts. Rules are evaluated in order and the first match wins.
+             */
+            match_headers?: Array<string>;
             /**
              * MatchHosts is only accepted for header injection rules. Provider auth rules use
              * built-in host matching.
@@ -366,11 +426,25 @@ export declare namespace SandboxResponse {
             type?: string;
         }
         namespace Rule {
-            interface Aws {
-                access_key_id: Aws.AccessKeyID;
-                secret_access_key: Aws.SecretAccessKey;
+            interface SandboxesProxyAwsRoleConfig {
+                /**
+                 * RoleARN selects automatically renewed IAM-role credentials instead of static
+                 * keys. Access follows the role's effective AWS permissions, not the sandbox's
+                 * mount scope. Configure at creation; the role cannot be changed afterward.
+                 */
+                role_arn: string;
             }
-            namespace Aws {
+            interface SandboxesProxyAwsStaticConfig {
+                access_key_id: SandboxesProxyAwsStaticConfig.AccessKeyID;
+                secret_access_key: SandboxesProxyAwsStaticConfig.SecretAccessKey;
+                /**
+                 * RoleARN selects automatically renewed IAM-role credentials instead of static
+                 * keys. Access follows the role's effective AWS permissions, not the sandbox's
+                 * mount scope. Configure at creation; the role cannot be changed afterward.
+                 */
+                role_arn?: '';
+            }
+            namespace SandboxesProxyAwsStaticConfig {
                 interface AccessKeyID {
                     type: 'plaintext' | 'opaque' | 'workspace_secret';
                     is_set?: boolean;
@@ -401,13 +475,32 @@ export declare namespace SandboxResponse {
             }
         }
     }
+    /**
+     * RunConfig is what the sandbox's commands run with: the user, working directory
+     * and base env beneath env_vars.
+     */
+    interface RunConfig {
+        env_vars?: {
+            [key: string]: string;
+        };
+        user?: string;
+        work_dir?: string;
+    }
 }
 export interface SandboxStatusResponse {
     status?: string;
     status_message?: string;
 }
 export interface ServiceURLResponse {
+    /**
+     * Token and ExpiresAt are empty in LangSmith login mode (no token is minted).
+     */
     token?: string;
+    /**
+     * Access echoes the enabled LangSmith login level ("restricted"/"workspace");
+     * omitted in token mode.
+     */
+    access?: 'restricted' | 'workspace';
     browser_url?: string;
     expires_at?: string;
     service_url?: string;
@@ -436,6 +529,11 @@ export interface SnapshotResponse {
     id?: string;
     created_at?: string;
     created_by?: string;
+    /**
+     * Description says what this snapshot's image can do, so a caller can hand it to
+     * an agent as a capability summary.
+     */
+    description?: string;
     docker_image?: string;
     fs_capacity_bytes?: number;
     fs_used_bytes?: number;
@@ -451,6 +549,11 @@ export interface SnapshotResponse {
     memory_snapshot_size_bytes?: number;
     name?: string;
     registry_id?: string;
+    /**
+     * RunConfig is what sandboxes from this snapshot boot with. Absent on snapshots
+     * built before it was recorded, which run as root with their own env.
+     */
+    run_config?: SnapshotResponse.RunConfig;
     source_sandbox_id?: string;
     status?: string;
     status_message?: string;
@@ -461,9 +564,61 @@ export interface SnapshotResponse {
     tags?: Array<string>;
     updated_at?: string;
 }
+export declare namespace SnapshotResponse {
+    /**
+     * RunConfig is what sandboxes from this snapshot boot with. Absent on snapshots
+     * built before it was recorded, which run as root with their own env.
+     */
+    interface RunConfig {
+        env_vars?: {
+            [key: string]: string;
+        };
+        user?: string;
+        work_dir?: string;
+    }
+}
+export interface SandboxListUsageCostsResponse {
+    /**
+     * Recorded compute usage in LangSmith Compute Units (LCU), as a decimal string
+     * with up to six fractional digits and trailing zeros omitted. Snapshots return
+     * "0".
+     */
+    lcu: string;
+    /**
+     * Allocated storage usage in LangSmith Storage Units (LSU), as a decimal string
+     * with up to six fractional digits and trailing zeros omitted.
+     */
+    lsu: string;
+    period_start: string;
+    resource_id: string;
+    resource_type: 'SANDBOX' | 'SNAPSHOT';
+}
+export interface SandboxListUsageCostsParams extends ItemsCursorGetPaginationParams {
+    /**
+     * Exclusive RFC3339 end time; the range must not exceed 31 days
+     */
+    end_time: string;
+    /**
+     * Inclusive RFC3339 start time
+     */
+    start_time: string;
+    /**
+     * HOUR returns hourly buckets. RESOURCE sums each resource over the requested
+     * interval and sets period_start to start_time.
+     */
+    granularity?: 'HOUR' | 'RESOURCE';
+    /**
+     * Resource UUID filter; repeat this parameter up to 100 times
+     */
+    resource_ids?: Array<string>;
+    /**
+     * Resource type filter
+     */
+    resource_type?: 'SANDBOX' | 'SNAPSHOT';
+}
 export declare namespace Sandboxes {
-    export { type DownloadURLResponse as DownloadURLResponse, type SandboxListResponse as SandboxListResponse, type SandboxResponse as SandboxResponse, type SandboxStatusResponse as SandboxStatusResponse, type ServiceURLResponse as ServiceURLResponse, type SnapshotListResponse as SnapshotListResponse, type SnapshotResponse as SnapshotResponse, };
-    export { Boxes as Boxes, type BoxCreateParams as BoxCreateParams, type BoxUpdateParams as BoxUpdateParams, type BoxListParams as BoxListParams, type BoxCreateSnapshotParams as BoxCreateSnapshotParams, type BoxGenerateDownloadURLParams as BoxGenerateDownloadURLParams, type BoxGenerateServiceURLParams as BoxGenerateServiceURLParams, };
+    export { type DownloadURLResponse as DownloadURLResponse, type SandboxListResponse as SandboxListResponse, type SandboxResponse as SandboxResponse, type SandboxStatusResponse as SandboxStatusResponse, type ServiceURLResponse as ServiceURLResponse, type SnapshotListResponse as SnapshotListResponse, type SnapshotResponse as SnapshotResponse, type SandboxListUsageCostsResponse as SandboxListUsageCostsResponse, type SandboxListUsageCostsResponsesItemsCursorGetPagination as SandboxListUsageCostsResponsesItemsCursorGetPagination, type SandboxListUsageCostsParams as SandboxListUsageCostsParams, };
+    export { Boxes as Boxes, type BoxListServiceURLsResponse as BoxListServiceURLsResponse, type BoxListServiceURLsResponsesItemsCursorGetPagination as BoxListServiceURLsResponsesItemsCursorGetPagination, type BoxCreateParams as BoxCreateParams, type BoxUpdateParams as BoxUpdateParams, type BoxListParams as BoxListParams, type BoxCreateSnapshotParams as BoxCreateSnapshotParams, type BoxDeleteServiceURLParams as BoxDeleteServiceURLParams, type BoxGenerateDownloadURLParams as BoxGenerateDownloadURLParams, type BoxGenerateServiceURLParams as BoxGenerateServiceURLParams, type BoxListServiceURLsParams as BoxListServiceURLsParams, };
     export { Registries as Registries, type RegistryListResponse as RegistryListResponse, type RegistryResponse as RegistryResponse, type RegistryCreateParams as RegistryCreateParams, type RegistryUpdateParams as RegistryUpdateParams, type RegistryListParams as RegistryListParams, };
     export { Snapshots as Snapshots, type SnapshotRetrieveByNameResponse as SnapshotRetrieveByNameResponse, type SnapshotCreateParams as SnapshotCreateParams, type SnapshotListParams as SnapshotListParams, };
 }

package/dist/_openapi_client/resources/sandboxes/sandboxes.js

@@ -7,6 +7,7 @@ import * as RegistriesAPI from './registries.js';
 import { Registries, } from './registries.js';
 import * as SnapshotsAPI from './snapshots.js';
 import { Snapshots, } from './snapshots.js';
+import { ItemsCursorGetPagination, } from '../../core/pagination.js';
 export class Sandboxes extends APIResource {
     constructor() {
         super(...arguments);
@@ -29,6 +30,18 @@ export class Sandboxes extends APIResource {
             value: new SnapshotsAPI.Snapshots(this._client)
         });
     }
+    /**
+     * Returns priced usage per sandbox or snapshot and UTC hour in the half-open
+     * requested interval. LCU uses the recorded compute amount for sandboxes;
+     * snapshots have zero LCU. LSU allocates the recorded workspace storage amount
+     * proportionally to attributed bytes, including checkpoints on their sandbox and
+     * snapshots as separate resources. Resource filters preserve each resource's
+     * share. Rate changes do not reprice recorded amounts. An access-filtered page can
+     * have no items and a non-null next_cursor; continue until next_cursor is null.
+     */
+    listUsageCosts(query, options) {
+        return this._client.getAPIList('/api/v2/sandboxes/usage/costs', (ItemsCursorGetPagination), { query, ...options });
+    }
 }
 Sandboxes.Boxes = Boxes;
 Sandboxes.Registries = Registries;

package/dist/_openapi_client/resources/sandboxes/snapshots.cjs

@@ -9,22 +9,26 @@ const headers_js_1 = require("../../internal/headers.cjs");
 const path_js_1 = require("../../internal/utils/path.cjs");
 class Snapshots extends resource_js_1.APIResource {
     /**
-     * Create a snapshot from a Docker image (async build).
+     * Create a snapshot from a Docker image (async build). Names use lowercase
+     * registry-style components separated by slashes, up to 255 characters. The
+     * system/ namespace is read-only.
      */
     create(body, options) {
         return this._client.post('/api/v2/sandboxes/snapshots', { body, ...options });
     }
     /**
-     * Get a sandbox snapshot by ID or by a Docker-style reference. A bare name means
-     * name:latest, falling back to the newest ready untagged snapshot of that name. To
-     * list the tags under a name, use /api/v2/sandboxes/snapshots-by-name/{name}.
+     * Get a sandbox snapshot by ID or a registry-style reference, including
+     * system/default:latest. URL-encode references containing slashes. A bare name
+     * means name:latest, falling back to the newest ready untagged snapshot of that
+     * name. To list the tags under a name, use
+     * /api/v2/sandboxes/snapshots-by-name/{name}.
      */
     retrieve(snapshotID, options) {
         return this._client.get((0, path_js_1.path) `/api/v2/sandboxes/snapshots/${snapshotID}`, options);
     }
     /**
-     * List sandbox snapshots for the authenticated tenant, with optional filtering,
-     * sorting, and pagination. Page with page_size and cursor: replay the response's
+     * List workspace and published system snapshots, with optional filtering, sorting,
+     * and pagination. Page with page_size and cursor: replay the response's
      * next_cursor until it comes back null, which is the only signal that no pages
      * remain. Cursors are opaque and only valid on this endpoint; do not parse or
      * construct one.

package/dist/_openapi_client/resources/sandboxes/snapshots.d.ts

@@ -6,18 +6,22 @@ import { type ItemsCursorGetPaginationParams, PagePromise } from '../../core/pag
 import { RequestOptions } from '../../internal/request-options.js';
 export declare class Snapshots extends APIResource {
     /**
-     * Create a snapshot from a Docker image (async build).
+     * Create a snapshot from a Docker image (async build). Names use lowercase
+     * registry-style components separated by slashes, up to 255 characters. The
+     * system/ namespace is read-only.
      */
     create(body: SnapshotCreateParams, options?: RequestOptions): APIPromise<SandboxesAPI.SnapshotResponse>;
     /**
-     * Get a sandbox snapshot by ID or by a Docker-style reference. A bare name means
-     * name:latest, falling back to the newest ready untagged snapshot of that name. To
-     * list the tags under a name, use /api/v2/sandboxes/snapshots-by-name/{name}.
+     * Get a sandbox snapshot by ID or a registry-style reference, including
+     * system/default:latest. URL-encode references containing slashes. A bare name
+     * means name:latest, falling back to the newest ready untagged snapshot of that
+     * name. To list the tags under a name, use
+     * /api/v2/sandboxes/snapshots-by-name/{name}.
      */
     retrieve(snapshotID: string, options?: RequestOptions): APIPromise<SandboxesAPI.SnapshotResponse>;
     /**
-     * List sandbox snapshots for the authenticated tenant, with optional filtering,
-     * sorting, and pagination. Page with page_size and cursor: replay the response's
+     * List workspace and published system snapshots, with optional filtering, sorting,
+     * and pagination. Page with page_size and cursor: replay the response's
      * next_cursor until it comes back null, which is the only signal that no pages
      * remain. Cursors are opaque and only valid on this endpoint; do not parse or
      * construct one.
@@ -48,6 +52,11 @@ export interface SnapshotCreateParams {
     docker_image: string;
     fs_capacity_bytes: number;
     name: string;
+    /**
+     * Description says what this snapshot's image can do, so a caller can hand it to
+     * an agent as a capability summary. At most 1024 characters.
+     */
+    description?: string;
     /**
      * Labels seed the snapshot's labels, overriding any label of the same key derived
      * from the Docker image.
@@ -56,11 +65,33 @@ export interface SnapshotCreateParams {
         [key: string]: string;
     };
     registry_id?: string;
+    /**
+     * RunConfig overrides the runtime configuration taken from the Docker image. Every
+     * sandbox created from the snapshot runs as the image's USER, in its WORKDIR, with
+     * its ENV beneath the sandbox's own env_vars; user and work_dir given here replace
+     * the image's, and env_vars merge over it.
+     */
+    run_config?: SnapshotCreateParams.RunConfig;
     /**
      * mutable Docker-style tag; defaults to "latest"
      */
     tag?: string;
 }
+export declare namespace SnapshotCreateParams {
+    /**
+     * RunConfig overrides the runtime configuration taken from the Docker image. Every
+     * sandbox created from the snapshot runs as the image's USER, in its WORKDIR, with
+     * its ENV beneath the sandbox's own env_vars; user and work_dir given here replace
+     * the image's, and env_vars merge over it.
+     */
+    interface RunConfig {
+        env_vars?: {
+            [key: string]: string;
+        };
+        user?: string;
+        work_dir?: string;
+    }
+}
 export interface SnapshotListParams extends ItemsCursorGetPaginationParams {
     /**
      * Filter by creator identity. Only 'me' is supported.

package/dist/_openapi_client/resources/sandboxes/snapshots.js

@@ -6,22 +6,26 @@ import { buildHeaders } from '../../internal/headers.js';
 import { path } from '../../internal/utils/path.js';
 export class Snapshots extends APIResource {
     /**
-     * Create a snapshot from a Docker image (async build).
+     * Create a snapshot from a Docker image (async build). Names use lowercase
+     * registry-style components separated by slashes, up to 255 characters. The
+     * system/ namespace is read-only.
      */
     create(body, options) {
         return this._client.post('/api/v2/sandboxes/snapshots', { body, ...options });
     }
     /**
-     * Get a sandbox snapshot by ID or by a Docker-style reference. A bare name means
-     * name:latest, falling back to the newest ready untagged snapshot of that name. To
-     * list the tags under a name, use /api/v2/sandboxes/snapshots-by-name/{name}.
+     * Get a sandbox snapshot by ID or a registry-style reference, including
+     * system/default:latest. URL-encode references containing slashes. A bare name
+     * means name:latest, falling back to the newest ready untagged snapshot of that
+     * name. To list the tags under a name, use
+     * /api/v2/sandboxes/snapshots-by-name/{name}.
      */
     retrieve(snapshotID, options) {
         return this._client.get(path `/api/v2/sandboxes/snapshots/${snapshotID}`, options);
     }
     /**
-     * List sandbox snapshots for the authenticated tenant, with optional filtering,
-     * sorting, and pagination. Page with page_size and cursor: replay the response's
+     * List workspace and published system snapshots, with optional filtering, sorting,
+     * and pagination. Page with page_size and cursor: replay the response's
      * next_cursor until it comes back null, which is the only signal that no pages
      * remain. Cursors are opaque and only valid on this endpoint; do not parse or
      * construct one.

package/dist/_openapi_client/resources/sessions.cjs

@@ -0,0 +1,23 @@
+"use strict";
+// @ts-nocheck
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Sessions = void 0;
+const resource_js_1 = require("../core/resource.cjs");
+class Sessions extends resource_js_1.APIResource {
+    /**
+     * **Beta:** This endpoint is in active development and may change without notice.
+     * Returns the tracing project (session) an address names. An address is an AGENT
+     * (`id` and `environment`), an EXPERIMENT (`id`), or an EVALUATOR (no `id`:
+     * evaluator traces share one project per workspace). Send `kind` and `environment`
+     * in upper case, as listed; they are matched case-insensitively, while the Agent
+     * `id` is case-sensitive. An address that does not exist, or whose project you
+     * cannot read, is a 404. Pass the returned `session_id` to any endpoint that takes
+     * a project (session) ID. This is not supported on a BYOC data plane yet, and is a
+     * 501 there.
+     */
+    resolve(query, options) {
+        return this._client.get('/api/v1/sessions/resolutions', { query, ...options });
+    }
+}
+exports.Sessions = Sessions;