langsmith 0.7.10 → 0.7.12

package/dist/client.js

@@ -8,6 +8,7 @@ import { __version__ } from "./index.js";
 import { Langsmith as OpenAPILangsmith } from "./_openapi_client/index.js";
 import { assertUuid } from "./utils/_uuid.js";
 import { warnOnce } from "./utils/warn.js";
+import { _MIN_BACKEND_VERSION } from "./utils/constants.js";
 import { parseHubIdentifier } from "./utils/prompts.js";
 import { raiseForStatus, isLangSmithNotFoundError, isLangSmithConflictError, } from "./utils/error.js";
 import { promptCacheSingleton, } from "./utils/prompt_cache/index.js";
@@ -122,6 +123,25 @@ function _formatFeedbackScore(score) {
     }
     return score;
 }
+export function _checkBackendVersion(version, minVersion = _MIN_BACKEND_VERSION) {
+    const parse = (v) => v.split(".").map((s) => parseInt(s, 10));
+    const [maj, min, pat] = parse(version);
+    const [rMaj, rMin, rPat] = parse(minVersion);
+    if (isNaN(maj) ||
+        isNaN(min) ||
+        isNaN(pat) ||
+        isNaN(rMaj) ||
+        isNaN(rMin) ||
+        isNaN(rPat)) {
+        console.warn(`[LANGSMITH]: Could not parse backend version ${JSON.stringify(version)} for compatibility check.`);
+        return;
+    }
+    if (maj < rMaj ||
+        (maj === rMaj && min < rMin) ||
+        (maj === rMaj && min === rMin && pat < rPat)) {
+        console.warn(`[LANGSMITH]: Backend version ${JSON.stringify(version)} is older than the minimum version required by this SDK (${JSON.stringify(minVersion)}). Some features may not work as expected.`);
+    }
+}
 export const DEFAULT_UNCOMPRESSED_BATCH_SIZE_LIMIT_BYTES = 24 * 1024 * 1024;
 /** Default maximum memory (1GB) for queue size limits. */
 export const DEFAULT_MAX_SIZE_BYTES = 1024 * 1024 * 1024; // 1GB
@@ -909,6 +929,9 @@ export class Client {
     get onlineEvaluators() {
         return this.openAPIClient.onlineEvaluators;
     }
+    get runs() {
+        return this.openAPIClient.runs;
+    }
     async processInputs(inputs) {
         if (this.hideInputs === false) {
             return inputs;
@@ -1370,6 +1393,9 @@ export class Client {
                 if (this._serverInfo === undefined) {
                     try {
                         this._serverInfo = await this._getServerInfo();
+                        if (this._serverInfo?.version) {
+                            _checkBackendVersion(this._serverInfo.version);
+                        }
                     }
                     catch (e) {
                         console.warn(`[LANGSMITH]: Failed to fetch info on supported operations. Falling back to batch operations and default limits. Info: ${e.status ?? "Unspecified status code"} ${e.message}`);
@@ -3464,7 +3490,7 @@ export class Client {
             return res;
         });
     }
-    async createFeedback(runId, key, { score, value, correction, comment, sourceInfo, feedbackSourceType = "api", sourceRunId, feedbackId, feedbackConfig, projectId, comparativeExperimentId, sessionId, startTime, }) {
+    async createFeedback(runId, key, { score, value, correction, comment, sourceInfo, feedbackSourceType = "api", sourceRunId, feedbackId, feedbackConfig, projectId, comparativeExperimentId, sessionId, startTime, extendTraceRetention, }) {
         if (!runId && !projectId) {
             throw new Error("One of runId or projectId must be provided");
         }
@@ -3497,6 +3523,7 @@ export class Client {
             feedbackConfig,
             session_id: sessionId ?? projectId,
             start_time: startTime,
+            extend_trace_retention: extendTraceRetention,
         };
         const body = JSON.stringify(feedback);
         const url = `${this.apiUrl}/feedback`;

package/dist/index.cjs

@@ -20,6 +20,6 @@ Object.defineProperty(exports, "PromptCache", { enumerable: true, get: function
 Object.defineProperty(exports, "configureGlobalPromptCache", { enumerable: true, get: function () { return index_js_1.configureGlobalPromptCache; } });
 Object.defineProperty(exports, "promptCacheSingleton", { enumerable: true, get: function () { return index_js_1.promptCacheSingleton; } });
 // Update using pnpm bump-version
-exports.__version__ = "0.7.10";
+exports.__version__ = "0.7.12";
 // Metadata key to hide a traced run from LangSmith's Messages View.
 exports.LS_MESSAGE_VIEW_EXCLUDE = "ls_message_view_exclude";

package/dist/index.d.ts

@@ -6,5 +6,5 @@ export { getDefaultProjectName } from "./utils/project.js";
 export { uuid7, uuid7FromTime } from "./uuid.js";
 export { isTracingEnabled } from "./utils/guard.js";
 export { Cache, PromptCache, type CacheConfig, type CacheMetrics, configureGlobalPromptCache, promptCacheSingleton, } from "./utils/prompt_cache/index.js";
-export declare const __version__ = "0.7.10";
+export declare const __version__ = "0.7.12";
 export declare const LS_MESSAGE_VIEW_EXCLUDE: "ls_message_view_exclude";

package/dist/index.js

@@ -6,6 +6,6 @@ export { uuid7, uuid7FromTime } from "./uuid.js";
 export { isTracingEnabled } from "./utils/guard.js";
 export { Cache, PromptCache, configureGlobalPromptCache, promptCacheSingleton, } from "./utils/prompt_cache/index.js";
 // Update using pnpm bump-version
-export const __version__ = "0.7.10";
+export const __version__ = "0.7.12";
 // Metadata key to hide a traced run from LangSmith's Messages View.
 export const LS_MESSAGE_VIEW_EXCLUDE = "ls_message_view_exclude";

package/dist/sandbox/client.cjs

@@ -10,7 +10,7 @@ const async_caller_js_1 = require("../utils/async_caller.cjs");
 const sandbox_js_1 = require("./sandbox.cjs");
 const errors_js_1 = require("./errors.cjs");
 const helpers_js_1 = require("./helpers.cjs");
-const proxy_config_js_1 = require("./proxy_config.cjs");
+const mounts_js_1 = require("./mounts.cjs");
 const index_js_1 = require("../utils/uuid/src/index.cjs");
 /**
  * Sleep that can be interrupted by an AbortSignal.
@@ -372,9 +372,6 @@ class SandboxClient {
         if (snapshotId && snapshotName) {
             throw new errors_js_1.LangSmithValidationError("At most one of snapshotId or options.snapshotName may be set", "snapshotId");
         }
-        if ("mounts" in resolvedOptions) {
-            throw new errors_js_1.LangSmithValidationError("mounts is not a public createSandbox option; use mountConfig", "mounts");
-        }
         (0, helpers_js_1.validateTtl)(idleTtlSeconds, "idleTtlSeconds");
         (0, helpers_js_1.validateTtl)(deleteAfterStopSeconds, "deleteAfterStopSeconds");
         const url = `${this._baseUrl}/boxes`;
@@ -408,12 +405,12 @@ class SandboxClient {
         if (fsCapacityBytes !== undefined) {
             payload.fs_capacity_bytes = fsCapacityBytes;
         }
-        const effectiveProxyConfig = (0, proxy_config_js_1.mergeProxyConfigs)(mountConfig?.proxyConfig, proxyConfig);
         if (mountConfig !== undefined) {
-            payload.mounts = mountConfig.mounts;
+            (0, mounts_js_1.validateMountConfigProxyConfig)(mountConfig, proxyConfig);
+            payload.mount_config = mountConfig;
         }
-        if (effectiveProxyConfig !== undefined) {
-            payload.proxy_config = effectiveProxyConfig;
+        if (proxyConfig !== undefined) {
+            payload.proxy_config = proxyConfig;
         }
         const httpTimeout = waitForReady ? (timeout + 30) * 1000 : 30 * 1000;
         const response = await this._fetch(url, {

package/dist/sandbox/client.js

@@ -7,7 +7,7 @@ import { AsyncCaller } from "../utils/async_caller.js";
 import { Sandbox } from "./sandbox.js";
 import { LangSmithResourceCreationError, LangSmithResourceNameConflictError, LangSmithResourceNotFoundError, LangSmithResourceTimeoutError, LangSmithSandboxAPIError, LangSmithValidationError, } from "./errors.js";
 import { handleClientHttpError, handleSandboxCreationError, validateTtl, } from "./helpers.js";
-import { mergeProxyConfigs } from "./proxy_config.js";
+import { validateMountConfigProxyConfig } from "./mounts.js";
 import { v4 as uuidv4 } from "../utils/uuid/src/index.js";
 /**
  * Sleep that can be interrupted by an AbortSignal.
@@ -369,9 +369,6 @@ export class SandboxClient {
         if (snapshotId && snapshotName) {
             throw new LangSmithValidationError("At most one of snapshotId or options.snapshotName may be set", "snapshotId");
         }
-        if ("mounts" in resolvedOptions) {
-            throw new LangSmithValidationError("mounts is not a public createSandbox option; use mountConfig", "mounts");
-        }
         validateTtl(idleTtlSeconds, "idleTtlSeconds");
         validateTtl(deleteAfterStopSeconds, "deleteAfterStopSeconds");
         const url = `${this._baseUrl}/boxes`;
@@ -405,12 +402,12 @@ export class SandboxClient {
         if (fsCapacityBytes !== undefined) {
             payload.fs_capacity_bytes = fsCapacityBytes;
         }
-        const effectiveProxyConfig = mergeProxyConfigs(mountConfig?.proxyConfig, proxyConfig);
         if (mountConfig !== undefined) {
-            payload.mounts = mountConfig.mounts;
+            validateMountConfigProxyConfig(mountConfig, proxyConfig);
+            payload.mount_config = mountConfig;
         }
-        if (effectiveProxyConfig !== undefined) {
-            payload.proxy_config = effectiveProxyConfig;
+        if (proxyConfig !== undefined) {
+            payload.proxy_config = proxyConfig;
         }
         const httpTimeout = waitForReady ? (timeout + 30) * 1000 : 30 * 1000;
         const response = await this._fetch(url, {

package/dist/sandbox/index.cjs

@@ -29,7 +29,7 @@
  * @packageDocumentation
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.LangSmithDataplaneNotConfiguredError = exports.LangSmithCommandTimeoutError = exports.LangSmithSandboxOperationError = exports.LangSmithSandboxNotReadyError = exports.LangSmithSandboxCreationError = exports.LangSmithResourceCreationError = exports.LangSmithQuotaExceededError = exports.LangSmithValidationError = exports.LangSmithResourceNameConflictError = exports.LangSmithResourceAlreadyExistsError = exports.LangSmithResourceInUseError = exports.LangSmithResourceTimeoutError = exports.LangSmithResourceNotFoundError = exports.LangSmithSandboxServerReloadError = exports.LangSmithSandboxConnectionError = exports.LangSmithSandboxAuthenticationError = exports.LangSmithSandboxAPIError = exports.LangSmithSandboxError = exports.s3Mount = exports.mountConfig = exports.gcsMount = exports.workspaceSecret = exports.proxyConfig = exports.opaqueSecret = exports.gcpAuth = exports.awsAuth = exports.CommandHandle = exports.Sandbox = exports.SandboxClient = void 0;
+exports.LangSmithDataplaneNotConfiguredError = exports.LangSmithCommandTimeoutError = exports.LangSmithSandboxOperationError = exports.LangSmithSandboxNotReadyError = exports.LangSmithSandboxCreationError = exports.LangSmithResourceCreationError = exports.LangSmithQuotaExceededError = exports.LangSmithValidationError = exports.LangSmithResourceNameConflictError = exports.LangSmithResourceAlreadyExistsError = exports.LangSmithResourceInUseError = exports.LangSmithResourceTimeoutError = exports.LangSmithResourceNotFoundError = exports.LangSmithSandboxServerReloadError = exports.LangSmithSandboxConnectionError = exports.LangSmithSandboxAuthenticationError = exports.LangSmithSandboxAPIError = exports.LangSmithSandboxError = exports.s3Mount = exports.mountConfig = exports.gitMount = exports.gcsMount = exports.workspaceSecret = exports.proxyConfig = exports.opaqueSecret = exports.gcpAuth = exports.awsAuth = exports.CommandHandle = exports.Sandbox = exports.SandboxClient = void 0;
 // Main classes
 var client_js_1 = require("./client.cjs");
 Object.defineProperty(exports, "SandboxClient", { enumerable: true, get: function () { return client_js_1.SandboxClient; } });
@@ -45,6 +45,7 @@ Object.defineProperty(exports, "proxyConfig", { enumerable: true, get: function
 Object.defineProperty(exports, "workspaceSecret", { enumerable: true, get: function () { return proxy_config_js_1.workspaceSecret; } });
 var mounts_js_1 = require("./mounts.cjs");
 Object.defineProperty(exports, "gcsMount", { enumerable: true, get: function () { return mounts_js_1.gcsMount; } });
+Object.defineProperty(exports, "gitMount", { enumerable: true, get: function () { return mounts_js_1.gitMount; } });
 Object.defineProperty(exports, "mountConfig", { enumerable: true, get: function () { return mounts_js_1.mountConfig; } });
 Object.defineProperty(exports, "s3Mount", { enumerable: true, get: function () { return mounts_js_1.s3Mount; } });
 // Errors

package/dist/sandbox/index.d.ts

@@ -31,6 +31,6 @@ export { SandboxClient } from "./client.js";
 export { Sandbox } from "./sandbox.js";
 export { CommandHandle } from "./command_handle.js";
 export { awsAuth, gcpAuth, opaqueSecret, proxyConfig, workspaceSecret, } from "./proxy_config.js";
-export { gcsMount, mountConfig, s3Mount } from "./mounts.js";
-export type { ExecutionResult, OutputChunk, WsMessage, WsRunOptions, ResourceStatus, Snapshot, SandboxData, SandboxClientConfig, RunOptions, CreateSandboxOptions, SandboxAccessControl, SandboxAwsAuthRule, SandboxGcpAuthRule, SandboxMountConfig, SandboxProxyConfig, SandboxProxyRule, SandboxProxySecret, SandboxMount, MountCacheConfig, GCSMountConfig, GCSMountSpec, S3MountConfig, S3MountSpec, CreateSnapshotOptions, CreateDockerfileSnapshotOptions, CaptureSnapshotOptions, ListSnapshotsOptions, WaitForSnapshotOptions, StartSandboxOptions, UpdateSandboxOptions, WaitForSandboxOptions, } from "./types.js";
+export { gcsMount, gitMount, mountConfig, s3Mount } from "./mounts.js";
+export type { ExecutionResult, OutputChunk, WsMessage, WsRunOptions, ResourceStatus, Snapshot, SandboxData, SandboxClientConfig, RunOptions, CreateSandboxOptions, SandboxAccessControl, SandboxAwsAuthRule, SandboxAwsMountAuthConfig, SandboxGcpAuthRule, SandboxGcpMountAuthConfig, SandboxMountAuth, SandboxMountAuthConfig, SandboxMountConfig, SandboxProxyConfig, SandboxProxyRule, SandboxProxySecret, SandboxMount, MountCacheConfig, GCSMountConfig, GCSMountSpec, GitMountConfig, GitMountRefSpec, GitMountSpec, S3MountConfig, S3MountSpec, CreateSnapshotOptions, CreateDockerfileSnapshotOptions, CaptureSnapshotOptions, ListSnapshotsOptions, WaitForSnapshotOptions, StartSandboxOptions, UpdateSandboxOptions, WaitForSandboxOptions, } from "./types.js";
 export { LangSmithSandboxError, LangSmithSandboxAPIError, LangSmithSandboxAuthenticationError, LangSmithSandboxConnectionError, LangSmithSandboxServerReloadError, LangSmithResourceNotFoundError, LangSmithResourceTimeoutError, LangSmithResourceInUseError, LangSmithResourceAlreadyExistsError, LangSmithResourceNameConflictError, LangSmithValidationError, LangSmithQuotaExceededError, LangSmithResourceCreationError, LangSmithSandboxCreationError, LangSmithSandboxNotReadyError, LangSmithSandboxOperationError, LangSmithCommandTimeoutError, LangSmithDataplaneNotConfiguredError, } from "./errors.js";

package/dist/sandbox/index.js

@@ -32,7 +32,7 @@ export { SandboxClient } from "./client.js";
 export { Sandbox } from "./sandbox.js";
 export { CommandHandle } from "./command_handle.js";
 export { awsAuth, gcpAuth, opaqueSecret, proxyConfig, workspaceSecret, } from "./proxy_config.js";
-export { gcsMount, mountConfig, s3Mount } from "./mounts.js";
+export { gcsMount, gitMount, mountConfig, s3Mount } from "./mounts.js";
 // Errors
 export { 
 // Base and connection errors

package/dist/sandbox/mounts.cjs

@@ -1,15 +1,74 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.s3Mount = s3Mount;
+exports.gitMount = gitMount;
 exports.gcsMount = gcsMount;
 exports.mountConfig = mountConfig;
-const proxy_config_js_1 = require("./proxy_config.cjs");
+exports.validateMountConfigProxyConfig = validateMountConfigProxyConfig;
 function requireNonEmptyString(value, field) {
     if (typeof value !== "string" || value.trim() === "") {
         throw new Error(`${field} must be a non-empty string`);
     }
     return value.trim();
 }
+function copyMountSecret(secret, field) {
+    if (secret === null || typeof secret !== "object" || Array.isArray(secret)) {
+        throw new Error(`${field} must be a sandbox secret`);
+    }
+    const candidate = secret;
+    if (candidate.type !== "workspace_secret" && candidate.type !== "opaque") {
+        throw new Error(`${field} must use workspace_secret or opaque`);
+    }
+    if (typeof candidate.value !== "string" || candidate.value.trim() === "") {
+        throw new Error(`${field}.value must be a non-empty string`);
+    }
+    return {
+        type: candidate.type,
+        value: candidate.value,
+    };
+}
+function requireGitRemoteUrl(remoteUrl) {
+    if (typeof remoteUrl !== "string" || remoteUrl === "") {
+        throw new Error("remoteUrl must be a non-empty string");
+    }
+    if (remoteUrl.trim() !== remoteUrl ||
+        /\s/u.test(remoteUrl) ||
+        remoteUrl.includes(String.fromCharCode(0))) {
+        throw new Error("remoteUrl must not contain whitespace or NUL bytes");
+    }
+    let parsed;
+    try {
+        parsed = new URL(remoteUrl);
+    }
+    catch {
+        throw new Error("remoteUrl must be an absolute HTTPS URL");
+    }
+    if (parsed.protocol !== "https:" || parsed.host === "") {
+        throw new Error("remoteUrl must be an absolute HTTPS URL");
+    }
+    if (parsed.username !== "" || parsed.password !== "") {
+        throw new Error("remoteUrl must not include embedded credentials");
+    }
+    if (parsed.pathname === "" || parsed.pathname === "/") {
+        throw new Error("remoteUrl must include a repository path");
+    }
+    if (parsed.search !== "" || parsed.hash !== "") {
+        throw new Error("remoteUrl must not include query or fragment");
+    }
+    return remoteUrl;
+}
+function copyGitRef(ref) {
+    if (ref === null || typeof ref !== "object" || Array.isArray(ref)) {
+        throw new Error("ref must be an object");
+    }
+    if (ref.type !== "branch" && ref.type !== "tag") {
+        throw new Error("ref.type must be branch or tag");
+    }
+    return {
+        type: ref.type,
+        name: requireNonEmptyString(ref.name, "ref.name"),
+    };
+}
 function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, endpointUrl = "https://s3.amazonaws.com", pathStyle = false, readOnly, cache, }) {
     const mount = {
         id: requireNonEmptyString(id, "id"),
@@ -33,6 +92,26 @@ function s3Mount({ id, mountPath, bucket, region = "us-east-1", prefix, endpoint
     }
     return mount;
 }
+function gitMount({ id, mountPath, remoteUrl, ref, refreshIntervalSeconds, }) {
+    const mount = {
+        id: requireNonEmptyString(id, "id"),
+        type: "git",
+        mount_path: requireNonEmptyString(mountPath, "mountPath"),
+        git: {
+            remote_url: requireGitRemoteUrl(remoteUrl),
+        },
+    };
+    if (ref !== undefined) {
+        mount.git.ref = copyGitRef(ref);
+    }
+    if (refreshIntervalSeconds !== undefined) {
+        if (refreshIntervalSeconds < 1) {
+            throw new Error("refreshIntervalSeconds must be at least 1");
+        }
+        mount.git.refresh_interval_seconds = refreshIntervalSeconds;
+    }
+    return mount;
+}
 function gcsMount({ id, mountPath, bucket, prefix, readOnly, cache, }) {
     const mount = {
         id: requireNonEmptyString(id, "id"),
@@ -61,35 +140,80 @@ function normalizeMounts(mounts) {
         if (mount === null || typeof mount !== "object" || Array.isArray(mount)) {
             throw new Error("mounts must be a non-empty array of mount objects");
         }
-        if (mount.type !== "s3" && mount.type !== "gcs") {
-            throw new Error("mountConfig only supports s3 and gcs mounts");
+        if (mount.type !== "s3" && mount.type !== "gcs" && mount.type !== "git") {
+            throw new Error("mountConfig only supports s3, gcs, and git mounts");
         }
+        rejectProviderCredentialsInMount(mount);
         return mount;
     });
 }
-function normalizeAuthRules(auth) {
+const FORBIDDEN_MOUNT_CREDENTIAL_FIELDS = new Set([
+    "access_key_id",
+    "secret_access_key",
+    "session_token",
+    "service_account_json",
+    "access_token",
+    "refresh_token",
+    "credentials",
+    "credential",
+]);
+function rejectProviderCredentialsInMount(value) {
+    if (Array.isArray(value)) {
+        for (const child of value) {
+            rejectProviderCredentialsInMount(child);
+        }
+        return;
+    }
+    if (value !== null && typeof value === "object") {
+        for (const [key, child] of Object.entries(value)) {
+            if (FORBIDDEN_MOUNT_CREDENTIAL_FIELDS.has(key)) {
+                throw new Error("provider credentials must be supplied in mountConfig.auth, not individual mount specs");
+            }
+            rejectProviderCredentialsInMount(child);
+        }
+    }
+}
+function normalizeMountAuth(auth) {
     if (!Array.isArray(auth)) {
-        throw new Error("auth must be an array of provider auth rules");
+        throw new Error("auth must be an array of provider auth blocks");
     }
     const byProvider = {};
-    for (const rule of auth) {
-        if (rule === null || typeof rule !== "object" || Array.isArray(rule)) {
-            throw new Error("auth must be an array of provider auth rules");
+    for (const block of auth) {
+        if (block === null || typeof block !== "object" || Array.isArray(block)) {
+            throw new Error("auth must be an array of provider auth blocks");
         }
-        const provider = rule.type;
+        const provider = block.type;
         if (provider !== "aws" && provider !== "gcp") {
-            throw new Error("mountConfig auth only supports aws and gcp rules");
+            throw new Error("mountConfig auth only supports aws and gcp blocks");
         }
         if (byProvider[provider] !== undefined) {
             throw new Error(`duplicate ${provider} auth rule in mountConfig`);
         }
-        byProvider[provider] = rule;
+        if (provider === "aws") {
+            const aws = block.aws;
+            if (aws === undefined) {
+                throw new Error("aws mount auth must include an aws block");
+            }
+            byProvider.aws = {
+                access_key_id: copyMountSecret(aws.access_key_id, "accessKeyId"),
+                secret_access_key: copyMountSecret(aws.secret_access_key, "secretAccessKey"),
+            };
+        }
+        else {
+            const gcp = block.gcp;
+            if (gcp === undefined) {
+                throw new Error("gcp mount auth must include a gcp block");
+            }
+            byProvider.gcp = {
+                service_account_json: copyMountSecret(gcp.service_account_json, "serviceAccountJson"),
+            };
+        }
     }
     return byProvider;
 }
-function mountConfig({ auth, mounts, }) {
+function mountConfig({ auth = [], mounts, }) {
     const normalizedMounts = normalizeMounts(mounts);
-    const authByProvider = normalizeAuthRules(auth);
+    const authByProvider = normalizeMountAuth(auth);
     const mountProviders = new Set(normalizedMounts.map((mount) => mount.type));
     if (mountProviders.has("s3") && authByProvider.aws === undefined) {
         throw new Error("s3 mounts require aws auth in mountConfig");
@@ -104,11 +228,26 @@ function mountConfig({ auth, mounts, }) {
         throw new Error("gcp auth requires at least one gcs mount in mountConfig");
     }
     return {
+        auth: authByProvider,
         mounts: normalizedMounts,
-        proxyConfig: (0, proxy_config_js_1.proxyConfig)({
-            rules: ["aws", "gcp"]
-                .map((provider) => authByProvider[provider])
-                .filter((rule) => rule !== undefined),
-        }),
     };
 }
+function validateMountConfigProxyConfig(mountConfig, proxyConfig) {
+    if (proxyConfig === undefined) {
+        return;
+    }
+    const rules = proxyConfig.rules ?? [];
+    if (!Array.isArray(rules)) {
+        throw new Error("proxyConfig rules must be an array");
+    }
+    for (const rule of rules) {
+        if (rule === null || typeof rule !== "object" || Array.isArray(rule)) {
+            continue;
+        }
+        const ruleType = rule.type;
+        if ((ruleType === "aws" || ruleType === "gcp") &&
+            mountConfig.auth[ruleType] !== undefined) {
+            throw new Error(`${ruleType} auth cannot be provided in both mountConfig and proxyConfig`);
+        }
+    }
+}

package/dist/sandbox/mounts.d.ts

@@ -1,4 +1,4 @@
-import type { GCSMountSpec, MountCacheConfig, S3MountSpec, SandboxMount, SandboxMountConfig, SandboxProxyRule } from "./types.js";
+import type { GCSMountSpec, GitMountRefSpec, GitMountSpec, MountCacheConfig, S3MountSpec, SandboxMount, SandboxMountAuth, SandboxMountConfig, SandboxProxyConfig } from "./types.js";
 export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpointUrl, pathStyle, readOnly, cache, }: {
     id: string;
     mountPath: string;
@@ -10,6 +10,13 @@ export declare function s3Mount({ id, mountPath, bucket, region, prefix, endpoin
     readOnly?: boolean;
     cache?: MountCacheConfig;
 }): S3MountSpec;
+export declare function gitMount({ id, mountPath, remoteUrl, ref, refreshIntervalSeconds, }: {
+    id: string;
+    mountPath: string;
+    remoteUrl: string;
+    ref?: GitMountRefSpec;
+    refreshIntervalSeconds?: number;
+}): GitMountSpec;
 export declare function gcsMount({ id, mountPath, bucket, prefix, readOnly, cache, }: {
     id: string;
     mountPath: string;
@@ -19,6 +26,7 @@ export declare function gcsMount({ id, mountPath, bucket, prefix, readOnly, cach
     cache?: MountCacheConfig;
 }): GCSMountSpec;
 export declare function mountConfig({ auth, mounts, }: {
-    auth: SandboxProxyRule[];
+    auth?: SandboxMountAuth[];
     mounts: SandboxMount[];
 }): SandboxMountConfig;
+export declare function validateMountConfigProxyConfig(mountConfig: SandboxMountConfig, proxyConfig: SandboxProxyConfig | undefined): void;