microsandbox-mcp 0.5.7 → 0.6.0

package/dist/tools/metrics.js

@@ -1,11 +1,33 @@
 import { z } from "zod";
-import { Sandbox, isInstalled, install } from "microsandbox";
+import { allSandboxMetrics, Sandbox } from "microsandbox";
 import { formatError } from "../utils/errors.js";
+import { ok } from "../utils/response.js";
+import { metricsData } from "../utils/serialization.js";
 export function registerMetricsTools(server) {
-    server.registerTool("check_installed", {
-        title: "Check Installation",
-        description: "Verify that msb and libkrunfw are available on the system. " +
-            "Returns installation status. If not installed, the server can attempt to install them.",
+    server.registerTool("sandbox_metrics", {
+        title: "Get Sandbox Metrics",
+        description: "Get live resource usage metrics for a running sandbox.",
+        inputSchema: z.object({
+            name: z.string().describe("Sandbox name"),
+        }),
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+        },
+    }, async ({ name }) => {
+        try {
+            const handle = await Sandbox.get(name);
+            const sandbox = await handle.connect();
+            return ok(metricsData(await sandbox.metrics()));
+        }
+        catch (error) {
+            return formatError(error);
+        }
+    });
+    server.registerTool("sandbox_metrics_all", {
+        title: "Get All Sandbox Metrics",
+        description: "Get point-in-time metrics for all running sandboxes.",
         inputSchema: z.object({}),
         annotations: {
             readOnlyHint: true,
@@ -14,80 +36,41 @@ export function registerMetricsTools(server) {
         },
     }, async () => {
         try {
-            const installed = isInstalled();
-            if (installed) {
-                return {
-                    content: [{
-                            type: "text",
-                            text: JSON.stringify({ installed: true }, null, 2),
-                        }],
-                };
-            }
-            // Attempt automatic installation.
-            try {
-                await install();
-                return {
-                    content: [{
-                            type: "text",
-                            text: JSON.stringify({
-                                installed: true,
-                                message: "Runtime dependencies were just installed.",
-                            }, null, 2),
-                        }],
-                };
-            }
-            catch (installError) {
-                return {
-                    content: [{
-                            type: "text",
-                            text: JSON.stringify({
-                                installed: false,
-                                message: "msb and libkrunfw are not installed. " +
-                                    "Install manually: curl -fsSL https://install.microsandbox.dev | sh",
-                            }, null, 2),
-                        }],
-                    isError: true,
-                };
-            }
+            const metrics = await allSandboxMetrics();
+            return ok(Object.fromEntries(Object.entries(metrics).map(([name, value]) => [name, metricsData(value)])));
         }
         catch (error) {
             return formatError(error);
         }
     });
-    server.registerTool("sandbox_metrics", {
-        title: "Get Sandbox Metrics",
-        description: "Get live resource usage metrics (CPU, memory, disk, network) for a running sandbox.",
+    server.registerTool("sandbox_metrics_stream", {
+        title: "Sample Sandbox Metrics Stream",
+        description: "Collect a bounded number of metrics samples from a running sandbox.",
         inputSchema: z.object({
             name: z.string().describe("Sandbox name"),
+            intervalMs: z.number().int().positive().optional().describe("Sampling interval in milliseconds"),
+            samples: z.number().int().positive().max(100).optional().describe("Number of samples to collect"),
         }),
         annotations: {
             readOnlyHint: true,
             destructiveHint: false,
-            idempotentHint: true,
+            idempotentHint: false,
         },
-    }, async ({ name }) => {
-        try {
+    }, async ({ name, intervalMs, samples }) => {
+        const stream = await (async () => {
             const handle = await Sandbox.get(name);
             const sandbox = await handle.connect();
-            const m = await sandbox.metrics();
-            return {
-                content: [{
-                        type: "text",
-                        text: JSON.stringify({
-                            cpuPercent: m.cpuPercent,
-                            vcpuTimeNs: m.vcpuTimeNs,
-                            memoryBytes: m.memoryBytes,
-                            memoryAvailableBytes: m.memoryAvailableBytes,
-                            memoryHostResidentBytes: m.memoryHostResidentBytes,
-                            memoryLimitBytes: m.memoryLimitBytes,
-                            diskReadBytes: m.diskReadBytes,
-                            diskWriteBytes: m.diskWriteBytes,
-                            netRxBytes: m.netRxBytes,
-                            netTxBytes: m.netTxBytes,
-                            uptimeSecs: m.uptimeMs ? Math.round(m.uptimeMs / 1000) : undefined,
-                        }, null, 2),
-                    }],
-            };
+            return sandbox.metricsStream(intervalMs ?? 1000);
+        })();
+        try {
+            const values = [];
+            for (let i = 0; i < (samples ?? 1); i += 1) {
+                const sample = await stream.recv();
+                if (!sample)
+                    break;
+                values.push(metricsData(sample));
+            }
+            return ok({ name, intervalMs: intervalMs ?? 1000, samples: values });
         }
         catch (error) {
             return formatError(error);

package/dist/tools/metrics.js.map

@@ -1 +1 @@
-{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/tools/metrics.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IACpD,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,oBAAoB;QAC3B,WAAW,EACT,6DAA6D;YAC7D,wFAAwF;QAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,WAAW,EAAE,CAAC;YAChC,IAAI,SAAS,EAAE,CAAC;gBACd,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;yBACnD,CAAC;iBACH,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,IAAI,CAAC;gBACH,MAAM,OAAO,EAAE,CAAC;gBAChB,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,SAAS,EAAE,IAAI;gCACf,OAAO,EAAE,2CAA2C;6BACrD,EAAE,IAAI,EAAE,CAAC,CAAC;yBACZ,CAAC;iBACH,CAAC;YACJ,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,OAAO;oBACL,OAAO,EAAE,CAAC;4BACR,IAAI,EAAE,MAAM;4BACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gCACnB,SAAS,EAAE,KAAK;gCAChB,OAAO,EACL,uCAAuC;oCACvC,oEAAoE;6BACvE,EAAE,IAAI,EAAE,CAAC,CAAC;yBACZ,CAAC;oBACF,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,qFAAqF;QAClG,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SAC1C,CAAC;QACF,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAClC,OAAO;gBACL,OAAO,EAAE,CAAC;wBACR,IAAI,EAAE,MAAM;wBACZ,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;4BACnB,UAAU,EAAE,CAAC,CAAC,UAAU;4BACxB,UAAU,EAAE,CAAC,CAAC,UAAU;4BACxB,WAAW,EAAE,CAAC,CAAC,WAAW;4BAC1B,oBAAoB,EAAE,CAAC,CAAC,oBAAoB;4BAC5C,uBAAuB,EAAE,CAAC,CAAC,uBAAuB;4BAClD,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;4BACpC,aAAa,EAAE,CAAC,CAAC,aAAa;4BAC9B,cAAc,EAAE,CAAC,CAAC,cAAc;4BAChC,UAAU,EAAE,CAAC,CAAC,UAAU;4BACxB,UAAU,EAAE,CAAC,CAAC,UAAU;4BACxB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;yBACnE,EAAE,IAAI,EAAE,CAAC,CAAC;qBACZ,CAAC;aACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/tools/metrics.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IACpD,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,wDAAwD;QACrE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;SAC1C,CAAC;QACF,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,EAAE,CAAC,WAAW,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,qBAAqB,EACrB;QACE,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,sDAAsD;QACnE,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,iBAAiB,EAAE,CAAC;YAC1C,OAAO,EAAE,CAAC,MAAM,CAAC,WAAW,CAC1B,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAC3E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,wBAAwB,EACxB;QACE,KAAK,EAAE,+BAA+B;QACtC,WAAW,EAAE,qEAAqE;QAClF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;YACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;YAChG,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;SAClG,CAAC;QACF,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,KAAK;SACtB;KACF,EACD,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;YAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACvC,OAAO,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;QACnD,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,EAAE,CAAC;YAClB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,MAAM;oBAAE,MAAM;gBACnB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,IAAI,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/runtime.d.ts

@@ -0,0 +1,2 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+export declare function registerRuntimeTools(server: McpServer): void;

package/dist/tools/runtime.js

@@ -0,0 +1,61 @@
+import { install, isInstalled } from "microsandbox";
+import { getServerConfig } from "../config.js";
+import { emptySchema } from "../schemas/common.js";
+import { formatError } from "../utils/errors.js";
+import { ok } from "../utils/response.js";
+const SERVER_VERSION = "0.6.0";
+export function registerRuntimeTools(server) {
+    server.registerTool("runtime_check", {
+        title: "Check Runtime Installation",
+        description: "Check whether the microsandbox runtime dependencies are installed.",
+        inputSchema: emptySchema,
+        annotations: {
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+        },
+    }, async () => {
+        try {
+            const config = getServerConfig();
+            return ok({
+                installed: isInstalled(),
+                serverVersion: SERVER_VERSION,
+                nodeVersion: process.version,
+                platform: process.platform,
+                arch: process.arch,
+                msbPath: process.env.MSB_PATH ?? null,
+                libkrunfwPath: process.env.MSB_LIBKRUNFW_PATH ?? null,
+                hostPathPolicy: config.hostPathPolicy,
+                hostPaths: config.hostPaths,
+                dangerousEnabled: config.dangerousEnabled,
+            });
+        }
+        catch (error) {
+            return formatError(error);
+        }
+    });
+    server.registerTool("runtime_install", {
+        title: "Install Runtime Dependencies",
+        description: "Install msb and libkrunfw using the microsandbox SDK installer.",
+        inputSchema: emptySchema,
+        annotations: {
+            readOnlyHint: false,
+            destructiveHint: false,
+            idempotentHint: true,
+        },
+    }, async () => {
+        try {
+            if (!isInstalled()) {
+                await install();
+            }
+            return ok({
+                installed: isInstalled(),
+                message: "Runtime dependencies are installed.",
+            });
+        }
+        catch (error) {
+            return formatError(error);
+        }
+    });
+}
+//# sourceMappingURL=runtime.js.map

package/dist/tools/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/tools/runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAE1C,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,UAAU,oBAAoB,CAAC,MAAiB;IACpD,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,4BAA4B;QACnC,WAAW,EAAE,oEAAoE;QACjF,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE;YACX,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,EAAE,CAAC;YACjC,OAAO,EAAE,CAAC;gBACR,SAAS,EAAE,WAAW,EAAE;gBACxB,aAAa,EAAE,cAAc;gBAC7B,WAAW,EAAE,OAAO,CAAC,OAAO;gBAC5B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI;gBACrC,aAAa,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI;gBACrD,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;aAC1C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,iBAAiB,EACjB;QACE,KAAK,EAAE,8BAA8B;QACrC,WAAW,EAAE,iEAAiE;QAC9E,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE;YACX,YAAY,EAAE,KAAK;YACnB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;SACrB;KACF,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACnB,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YAED,OAAO,EAAE,CAAC;gBACR,SAAS,EAAE,WAAW,EAAE;gBACxB,OAAO,EAAE,qCAAqC;aAC/C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/sandbox.d.ts

@@ -1,2 +1,218 @@
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+export declare const sandboxCreateSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    image: z.ZodOptional<z.ZodString>;
+    rootfs: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"oci">;
+        reference: z.ZodString;
+        pullPolicy: z.ZodOptional<z.ZodEnum<{
+            never: "never";
+            always: "always";
+            "if-missing": "if-missing";
+        }>>;
+        upperSizeMib: z.ZodOptional<z.ZodNumber>;
+        registry: z.ZodOptional<z.ZodObject<{
+            insecure: z.ZodOptional<z.ZodBoolean>;
+            caCertsPath: z.ZodOptional<z.ZodString>;
+            auth: z.ZodOptional<z.ZodObject<{
+                kind: z.ZodEnum<{
+                    anonymous: "anonymous";
+                    basic: "basic";
+                }>;
+                username: z.ZodOptional<z.ZodString>;
+                password: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"bind">;
+        path: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"disk">;
+        path: z.ZodString;
+        fstype: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"snapshot">;
+        pathOrName: z.ZodString;
+    }, z.core.$strip>], "kind">>;
+    cpus: z.ZodOptional<z.ZodNumber>;
+    memoryMib: z.ZodOptional<z.ZodNumber>;
+    workdir: z.ZodOptional<z.ZodString>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    volumes: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            bind: "bind";
+            named: "named";
+            tmpfs: "tmpfs";
+            disk: "disk";
+        }>;
+        guestPath: z.ZodString;
+        hostPath: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+        readonly: z.ZodOptional<z.ZodBoolean>;
+        noexec: z.ZodOptional<z.ZodBoolean>;
+        nosuid: z.ZodOptional<z.ZodBoolean>;
+        nodev: z.ZodOptional<z.ZodBoolean>;
+        sizeMib: z.ZodOptional<z.ZodNumber>;
+        format: z.ZodOptional<z.ZodEnum<{
+            raw: "raw";
+            qcow2: "qcow2";
+            vmdk: "vmdk";
+        }>>;
+        fstype: z.ZodOptional<z.ZodString>;
+        statVirtualization: z.ZodOptional<z.ZodEnum<{
+            strict: "strict";
+            relaxed: "relaxed";
+            off: "off";
+        }>>;
+        hostPermissions: z.ZodOptional<z.ZodEnum<{
+            private: "private";
+            mirror: "mirror";
+        }>>;
+    }, z.core.$strip>>>;
+    mounts: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            bind: "bind";
+            named: "named";
+            tmpfs: "tmpfs";
+            disk: "disk";
+        }>;
+        guestPath: z.ZodString;
+        hostPath: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        source: z.ZodOptional<z.ZodString>;
+        readonly: z.ZodOptional<z.ZodBoolean>;
+        noexec: z.ZodOptional<z.ZodBoolean>;
+        nosuid: z.ZodOptional<z.ZodBoolean>;
+        nodev: z.ZodOptional<z.ZodBoolean>;
+        sizeMib: z.ZodOptional<z.ZodNumber>;
+        format: z.ZodOptional<z.ZodEnum<{
+            raw: "raw";
+            qcow2: "qcow2";
+            vmdk: "vmdk";
+        }>>;
+        fstype: z.ZodOptional<z.ZodString>;
+        statVirtualization: z.ZodOptional<z.ZodEnum<{
+            strict: "strict";
+            relaxed: "relaxed";
+            off: "off";
+        }>>;
+        hostPermissions: z.ZodOptional<z.ZodEnum<{
+            private: "private";
+            mirror: "mirror";
+        }>>;
+    }, z.core.$strip>>>;
+    patches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            text: "text";
+            file: "file";
+            symlink: "symlink";
+            copyFile: "copyFile";
+            copyDir: "copyDir";
+            mkdir: "mkdir";
+            append: "append";
+            remove: "remove";
+        }>;
+        type: z.ZodOptional<z.ZodEnum<{
+            text: "text";
+            file: "file";
+            symlink: "symlink";
+            copyFile: "copyFile";
+            copyDir: "copyDir";
+            mkdir: "mkdir";
+            append: "append";
+            remove: "remove";
+        }>>;
+        path: z.ZodOptional<z.ZodString>;
+        guestPath: z.ZodOptional<z.ZodString>;
+        hostPath: z.ZodOptional<z.ZodString>;
+        content: z.ZodOptional<z.ZodString>;
+        contentBase64: z.ZodOptional<z.ZodString>;
+        target: z.ZodOptional<z.ZodString>;
+        linkPath: z.ZodOptional<z.ZodString>;
+        mode: z.ZodOptional<z.ZodNumber>;
+        replace: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>>;
+    entrypoint: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hostname: z.ZodOptional<z.ZodString>;
+    maxDuration: z.ZodOptional<z.ZodNumber>;
+    idleTimeout: z.ZodOptional<z.ZodNumber>;
+    resources: z.ZodOptional<z.ZodObject<{
+        cpus: z.ZodOptional<z.ZodNumber>;
+        memoryMib: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strip>>;
+    process: z.ZodOptional<z.ZodObject<{
+        workdir: z.ZodOptional<z.ZodString>;
+        shell: z.ZodOptional<z.ZodString>;
+        env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        entrypoint: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        user: z.ZodOptional<z.ZodString>;
+        scripts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        rlimits: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            resource: z.ZodString;
+            soft: z.ZodNumber;
+            hard: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>>;
+        init: z.ZodOptional<z.ZodObject<{
+            path: z.ZodString;
+            args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    lifecycle: z.ZodOptional<z.ZodObject<{
+        detached: z.ZodOptional<z.ZodBoolean>;
+        replace: z.ZodOptional<z.ZodBoolean>;
+        replaceTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        maxDurationSecs: z.ZodOptional<z.ZodNumber>;
+        idleTimeoutSecs: z.ZodOptional<z.ZodNumber>;
+        logLevel: z.ZodOptional<z.ZodEnum<{
+            error: "error";
+            warn: "warn";
+            info: "info";
+            debug: "debug";
+            trace: "trace";
+        }>>;
+        metricsSampleIntervalMs: z.ZodOptional<z.ZodNumber>;
+        disableMetricsSample: z.ZodOptional<z.ZodBoolean>;
+        quietLogs: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    network: z.ZodOptional<z.ZodObject<{
+        disabled: z.ZodOptional<z.ZodBoolean>;
+        ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            hostPort: z.ZodNumber;
+            guestPort: z.ZodNumber;
+            bindAddress: z.ZodOptional<z.ZodString>;
+            protocol: z.ZodOptional<z.ZodEnum<{
+                tcp: "tcp";
+                udp: "udp";
+            }>>;
+        }, z.core.$strip>>>;
+        maxConnections: z.ZodOptional<z.ZodNumber>;
+        trustHostCas: z.ZodOptional<z.ZodBoolean>;
+        ipv4Pool: z.ZodOptional<z.ZodString>;
+        ipv6Pool: z.ZodOptional<z.ZodString>;
+        dns: z.ZodOptional<z.ZodObject<{
+            allowRebind: z.ZodOptional<z.ZodBoolean>;
+            nameservers: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            queryTimeoutMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+        tls: z.ZodOptional<z.ZodObject<{
+            ports: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+            bypassDomains: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            blockQuic: z.ZodOptional<z.ZodBoolean>;
+            caCertPath: z.ZodOptional<z.ZodString>;
+            caKeyPath: z.ZodOptional<z.ZodString>;
+            upstreamCaCertPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            trustHostCas: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        envVar: z.ZodString;
+        value: z.ZodOptional<z.ZodString>;
+        valueEnv: z.ZodOptional<z.ZodString>;
+        allowedHost: z.ZodString;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
 export declare function registerSandboxTools(server: McpServer): void;