modal 0.10.2-dev.1 → 0.10.2-dev.2

package/dist/index.d.cts

@@ -1599,6 +1599,7 @@ interface EndpointCreateRequest {
     environmentName: string;
     unauthenticated: boolean;
     servingMode: EndpointServingMode;
+    sharedEndpointNoticeAcknowledged: boolean;
 }
 declare const EndpointCreateRequest: MessageFns$1<EndpointCreateRequest>;
 interface EndpointCreateResponse {
@@ -2000,10 +2001,6 @@ interface FunctionMessage {
     schedulerPlacement?: SchedulerPlacement | undefined;
     /** if "Function" is actually a class grouping multiple methods */
     isClass: boolean;
-    /** for class methods use this function id instead for invocations - the *referenced* function should have is_class=True */
-    useFunctionId: string;
-    /** for class methods - this method name needs to be included in the FunctionInput */
-    useMethodName: string;
     classParameterInfo: ClassParameterInfo | undefined;
     /** Maximum number of inputs to fetch at once */
     batchMaxSize: number;
@@ -2271,10 +2268,6 @@ interface FunctionData {
     isClass: boolean;
     classParameterInfo: ClassParameterInfo | undefined;
     isMethod: boolean;
-    /** used for methods */
-    useFunctionId: string;
-    /** used for methods */
-    useMethodName: string;
     rankedFunctions: FunctionData_RankedFunction[];
     schedule: Schedule | undefined;
     /** If set, the function will be run in an untrusted environment. */
@@ -2523,8 +2516,6 @@ interface FunctionHandleMetadata {
     webUrl: string;
     isMethod: boolean;
     /** used for methods */
-    useFunctionId: string;
-    /** used for methods */
     useMethodName: string;
     definitionId: string;
     classParameterInfo: ClassParameterInfo | undefined;
@@ -2609,10 +2600,6 @@ interface FunctionPrecreateRequest {
     existingFunctionId: string;
     functionType: Function_FunctionType;
     webhookConfig: WebhookConfig | undefined;
-    /** for class methods - use this function id instead for invocations - the *referenced* function should have is_class=True */
-    useFunctionId: string;
-    /** for class methods - this method name needs to be included in the FunctionInput */
-    useMethodName: string;
     /** Mapping of method names to method definitions, only non-empty for class service functions */
     methodDefinitions: {
         [key: string]: MethodDefinition;
@@ -2763,6 +2750,7 @@ interface HTTPConfig {
     h2Enabled: boolean;
     targetConcurrency: number;
     unauthenticated: boolean;
+    liftAndShiftConfig?: LiftAndShiftConfig | undefined;
 }
 declare const HTTPConfig: MessageFns$1<HTTPConfig>;
 interface Image$1 {
@@ -3016,6 +3004,9 @@ interface InputInfo {
     taskFirstInput: boolean;
 }
 declare const InputInfo: MessageFns$1<InputInfo>;
+interface LiftAndShiftConfig {
+}
+declare const LiftAndShiftConfig: MessageFns$1<LiftAndShiftConfig>;
 interface ListPagination {
     maxObjects: number;
     createdBefore: number;
@@ -3242,11 +3233,11 @@ interface ObjectDependency {
 }
 declare const ObjectDependency: MessageFns$1<ObjectDependency>;
 /** Policy for outbound traffic from a sandbox. */
-interface OutboundPolicy {
+interface OutboundPolicy$1 {
     /** Replace headers in outbound HTTPS requests, potentially with secret values. */
     headerReplacements: OutboundPolicy_HeaderReplacement[];
 }
-declare const OutboundPolicy: MessageFns$1<OutboundPolicy>;
+declare const OutboundPolicy$1: MessageFns$1<OutboundPolicy$1>;
 interface OutboundPolicy_HeaderReplacement {
     /**
      * Domain that the header replacements are scoped to. Supports wildcards in
@@ -3641,7 +3632,7 @@ interface Sandbox$1 {
      */
     inboundCidrAllowlist: string[];
     environmentVariables: StringMap | undefined;
-    outboundPolicy?: OutboundPolicy | undefined;
+    outboundPolicy?: OutboundPolicy$1 | undefined;
     /**
      * If set, the sandbox's main container is served an X.509-SVID over a
      * SPIFFE Workload API socket, addressed by SPIFFE_ENDPOINT_SOCKET. The
@@ -4376,6 +4367,7 @@ interface TaskLogsBatch {
     ptyExecId: string;
     rootFunctionId: string;
     ttlDays: number;
+    sandboxId: string;
 }
 declare const TaskLogsBatch: MessageFns$1<TaskLogsBatch>;
 interface TaskProgress {
@@ -8191,6 +8183,12 @@ interface TaskSetNetworkAccessRequest {
     networkAccess: NetworkAccess | undefined;
 }
 declare const TaskSetNetworkAccessRequest: MessageFns<TaskSetNetworkAccessRequest>;
+interface TaskSetOutboundPolicyRequest {
+    taskId: string;
+    /** Replaces the task's outbound policy. */
+    outboundPolicy: OutboundPolicy$1 | undefined;
+}
+declare const TaskSetOutboundPolicyRequest: MessageFns<TaskSetOutboundPolicyRequest>;
 interface TaskSnapshotDirectoryRequest {
     taskId: string;
     path: Uint8Array;
@@ -8444,6 +8442,7 @@ declare class TaskCommandRouterClientImpl {
     snapshotMemory(request: TaskSnapshotMemoryRequest, options?: TimeoutOptions): Promise<TaskSnapshotMemoryResponse>;
     unmountDirectory(request: TaskUnmountDirectoryRequest): Promise<void>;
     setNetworkAccess(request: TaskSetNetworkAccessRequest): Promise<void>;
+    setOutboundPolicy(request: TaskSetOutboundPolicyRequest): Promise<void>;
     /**
      * Reload all Volumes mounted in the task to reflect their latest committed state.
      *
@@ -8467,6 +8466,80 @@ declare class TaskCommandRouterClientImpl {
     private streamSandboxStdio;
 }
 
+/**
+ * Immutable configuration for replacing headers in outbound HTTPS traffic.
+ */
+
+/** @internal */
+type HeaderReplacement = {
+    domain: string;
+    headers: Record<string, string>;
+    secret?: Secret;
+};
+/**
+ * Immutable configuration for replacing headers in outbound HTTPS requests
+ * from a Sandbox.
+ *
+ * Header values support templating with keys in a replacement's secret: a
+ * `$`-prefixed key name in the secret is replaced with the secret value.
+ * Literal `$` characters are written `$$`.
+ *
+ * Secret values never enter the Sandbox: they are resolved and injected into
+ * matching requests outside the container.
+ *
+ * ```ts
+ * const secret = await modal.secrets.fromName("api-token");
+ *
+ * const outboundPolicy = new modal.OutboundPolicy()
+ *   // Inject a secret-backed Authorization header.
+ *   .withHeaderReplacement({
+ *     domain: "example.com",
+ *     secret,
+ *     headers: { Authorization: "Bearer $API_TOKEN" },
+ *   })
+ *   // Inject a static header into requests to another domain.
+ *   .withHeaderReplacement({
+ *     domain: "modal.com",
+ *     headers: { "X-Trace-Token": "trace_abcd" },
+ *   });
+ *
+ * const sb = await modal.sandboxes.create(app, image, { outboundPolicy });
+ * ```
+ */
+declare class OutboundPolicy {
+    /** @internal */
+    readonly _replacements: readonly HeaderReplacement[];
+    /** @internal */
+    constructor(_replacements?: readonly HeaderReplacement[]);
+    /**
+     * Return a new {@link OutboundPolicy} with an added header replacement.
+     *
+     * @param params.domain Domain the replacements are scoped to. Supports `*.` wildcard
+     *   prefixes (matching the apex domain and subdomains) and a bare `"*"`.
+     * @param params.headers Header name -> header value. Values support `$KEY` templates
+     *   referencing keys in the replacement's `secret`.
+     * @param params.secret Named {@link Secret} (e.g. from `client.secrets.fromName`) whose
+     *   keys may be referenced in the header value templates. Static replacements pass no secret.
+     */
+    withHeaderReplacement(params: {
+        domain: string;
+        headers: Record<string, string>;
+        secret?: Secret;
+    }): OutboundPolicy;
+    /** Check all replacements, throwing `InvalidError` on the first violation found.
+     * @internal
+     */
+    _validate(): void;
+    /** Deduplicated list of secrets referenced by the policy's replacements.
+     * @internal
+     */
+    _secrets(): Secret[];
+    /** Convert to the wire format. Referenced secrets must be hydrated first.
+     * @internal
+     */
+    _toProto(): OutboundPolicy$1;
+}
+
 /** Type of a filesystem entry. */
 type FileType = "file" | "directory" | "symlink";
 /** Metadata for a file or directory entry in a Sandbox. */
@@ -8996,6 +9069,10 @@ type SandboxCreateParams = {
     outboundCidrAllowlist?: string[];
     /** List of domain names the Sandbox is allowed to access. Supports wildcard prefixes (`*.example.com`). Cannot be used with blockNetwork. */
     outboundDomainAllowlist?: string[];
+    /** Configuration for replacing headers in outbound HTTPS requests from the Sandbox.
+     * Secrets referenced by the policy are resolved outside the Sandbox and are never
+     * visible to the workload. See {@link OutboundPolicy}. */
+    outboundPolicy?: OutboundPolicy;
     /** List of CIDRs allowed to connect inbound to the Sandbox (tunnels and connection tokens). If not set, all IPs are allowed. Cannot be used with blockNetwork. */
     inboundCidrAllowlist?: string[];
     /** Enable private IPv6 networking (i6pn) so Sandboxes in the same workspace can address each
@@ -9462,6 +9539,17 @@ declare class Sandbox {
      * @param params - Both `outboundCidrAllowlist` and `outboundDomainAllowlist` must be provided.
      */
     updateNetworkPolicy(params: SandboxUpdateNetworkPolicyParams): Promise<void>;
+    /**
+     * Replace the outbound policy of a running Sandbox.
+     *
+     * The new policy replaces all existing policy configuration on the
+     * Sandbox; build a policy including any existing rules you want to keep.
+     *
+     * Only Sandboxes created with an `outboundPolicy` can be updated this
+     * way; for Sandboxes created without one this fails, since header
+     * replacement is only set up at creation time.
+     */
+    updateOutboundPolicy(outboundPolicy: OutboundPolicy): Promise<void>;
     /**
      * Reload all Volumes mounted in the Sandbox.
      *
@@ -9761,4 +9849,4 @@ declare class ClientClosedError extends Error {
 
 declare function checkForRenamedParams(params: any, renames: Record<string, string>): void;
 
-export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ConflictError, ContainerProcess, ExecutionError, type FileInfo, type FileType, type FileWatchEvent, type FileWatchEventType, type FunctionAutoscalerSettings, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, type FunctionCallLogFetchParams, type FunctionCallLogStreamParams, type FunctionCallLogTailParams, FunctionCallLogsManager, FunctionCallService, type FunctionFromNameParams, type FunctionLogFetchParams, type FunctionLogStreamParams, type FunctionLogTailParams, FunctionLogsManager, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, type FunctionWithBatchingParams, type FunctionWithConcurrencyParams, type FunctionWithOptionsParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, type ImageFromNameParams, type ImagePublishParams, ImageService, InternalFailure, InvalidError, type LogEntry, type FunctionLogFetchParams as LogFetchParams, type LogLevel, type LogSource, type Logger, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, type SandboxExperimentalFromNameParams, type SandboxExperimentalFromSnapshotParams, type SandboxExperimentalGetExitSnapshotParams, type SandboxExperimentalListParams, SandboxFilesystem, SandboxFilesystemDirectoryNotEmptyError, SandboxFilesystemError, SandboxFilesystemFileTooLargeError, SandboxFilesystemIsADirectoryError, SandboxFilesystemNotADirectoryError, SandboxFilesystemNotFoundError, SandboxFilesystemPathAlreadyExistsError, SandboxFilesystemPermissionError, type SandboxFromNameParams, type SandboxListParams, type SandboxMountImageParams, type SandboxReloadVolumesParams, SandboxService, SandboxSnapshot, type SandboxSnapshotDirectoryParams, type SandboxSnapshotFilesystemParams, SandboxSnapshotService, type SandboxTerminateParams, SandboxTimeoutError, type SandboxUpdateNetworkPolicyParams, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, SidecarContainer, type SidecarCreateParams, type SidecarExecParams, type SidecarGetParams, type SidecarListParams, type SidecarMountImageParams, SidecarService, type SidecarSnapshotDirectoryParams, type SidecarSnapshotFilesystemParams, type SidecarTerminateParams, type SidecarUnmountImageParams, SnapshotCreationError, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, type VolumeMountOptionsParams, VolumeService, checkForRenamedParams };
+export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ConflictError, ContainerProcess, ExecutionError, type FileInfo, type FileType, type FileWatchEvent, type FileWatchEventType, type FunctionAutoscalerSettings, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, type FunctionCallLogFetchParams, type FunctionCallLogStreamParams, type FunctionCallLogTailParams, FunctionCallLogsManager, FunctionCallService, type FunctionFromNameParams, type FunctionLogFetchParams, type FunctionLogStreamParams, type FunctionLogTailParams, FunctionLogsManager, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, type FunctionWithBatchingParams, type FunctionWithConcurrencyParams, type FunctionWithOptionsParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, type ImageFromNameParams, type ImagePublishParams, ImageService, InternalFailure, InvalidError, type LogEntry, type FunctionLogFetchParams as LogFetchParams, type LogLevel, type LogSource, type Logger, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, OutboundPolicy, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, type SandboxExperimentalFromNameParams, type SandboxExperimentalFromSnapshotParams, type SandboxExperimentalGetExitSnapshotParams, type SandboxExperimentalListParams, SandboxFilesystem, SandboxFilesystemDirectoryNotEmptyError, SandboxFilesystemError, SandboxFilesystemFileTooLargeError, SandboxFilesystemIsADirectoryError, SandboxFilesystemNotADirectoryError, SandboxFilesystemNotFoundError, SandboxFilesystemPathAlreadyExistsError, SandboxFilesystemPermissionError, type SandboxFromNameParams, type SandboxListParams, type SandboxMountImageParams, type SandboxReloadVolumesParams, SandboxService, SandboxSnapshot, type SandboxSnapshotDirectoryParams, type SandboxSnapshotFilesystemParams, SandboxSnapshotService, type SandboxTerminateParams, SandboxTimeoutError, type SandboxUpdateNetworkPolicyParams, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, SidecarContainer, type SidecarCreateParams, type SidecarExecParams, type SidecarGetParams, type SidecarListParams, type SidecarMountImageParams, SidecarService, type SidecarSnapshotDirectoryParams, type SidecarSnapshotFilesystemParams, type SidecarTerminateParams, type SidecarUnmountImageParams, SnapshotCreationError, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, type VolumeMountOptionsParams, VolumeService, checkForRenamedParams };

package/dist/index.d.ts

@@ -1599,6 +1599,7 @@ interface EndpointCreateRequest {
     environmentName: string;
     unauthenticated: boolean;
     servingMode: EndpointServingMode;
+    sharedEndpointNoticeAcknowledged: boolean;
 }
 declare const EndpointCreateRequest: MessageFns$1<EndpointCreateRequest>;
 interface EndpointCreateResponse {
@@ -2000,10 +2001,6 @@ interface FunctionMessage {
     schedulerPlacement?: SchedulerPlacement | undefined;
     /** if "Function" is actually a class grouping multiple methods */
     isClass: boolean;
-    /** for class methods use this function id instead for invocations - the *referenced* function should have is_class=True */
-    useFunctionId: string;
-    /** for class methods - this method name needs to be included in the FunctionInput */
-    useMethodName: string;
     classParameterInfo: ClassParameterInfo | undefined;
     /** Maximum number of inputs to fetch at once */
     batchMaxSize: number;
@@ -2271,10 +2268,6 @@ interface FunctionData {
     isClass: boolean;
     classParameterInfo: ClassParameterInfo | undefined;
     isMethod: boolean;
-    /** used for methods */
-    useFunctionId: string;
-    /** used for methods */
-    useMethodName: string;
     rankedFunctions: FunctionData_RankedFunction[];
     schedule: Schedule | undefined;
     /** If set, the function will be run in an untrusted environment. */
@@ -2523,8 +2516,6 @@ interface FunctionHandleMetadata {
     webUrl: string;
     isMethod: boolean;
     /** used for methods */
-    useFunctionId: string;
-    /** used for methods */
     useMethodName: string;
     definitionId: string;
     classParameterInfo: ClassParameterInfo | undefined;
@@ -2609,10 +2600,6 @@ interface FunctionPrecreateRequest {
     existingFunctionId: string;
     functionType: Function_FunctionType;
     webhookConfig: WebhookConfig | undefined;
-    /** for class methods - use this function id instead for invocations - the *referenced* function should have is_class=True */
-    useFunctionId: string;
-    /** for class methods - this method name needs to be included in the FunctionInput */
-    useMethodName: string;
     /** Mapping of method names to method definitions, only non-empty for class service functions */
     methodDefinitions: {
         [key: string]: MethodDefinition;
@@ -2763,6 +2750,7 @@ interface HTTPConfig {
     h2Enabled: boolean;
     targetConcurrency: number;
     unauthenticated: boolean;
+    liftAndShiftConfig?: LiftAndShiftConfig | undefined;
 }
 declare const HTTPConfig: MessageFns$1<HTTPConfig>;
 interface Image$1 {
@@ -3016,6 +3004,9 @@ interface InputInfo {
     taskFirstInput: boolean;
 }
 declare const InputInfo: MessageFns$1<InputInfo>;
+interface LiftAndShiftConfig {
+}
+declare const LiftAndShiftConfig: MessageFns$1<LiftAndShiftConfig>;
 interface ListPagination {
     maxObjects: number;
     createdBefore: number;
@@ -3242,11 +3233,11 @@ interface ObjectDependency {
 }
 declare const ObjectDependency: MessageFns$1<ObjectDependency>;
 /** Policy for outbound traffic from a sandbox. */
-interface OutboundPolicy {
+interface OutboundPolicy$1 {
     /** Replace headers in outbound HTTPS requests, potentially with secret values. */
     headerReplacements: OutboundPolicy_HeaderReplacement[];
 }
-declare const OutboundPolicy: MessageFns$1<OutboundPolicy>;
+declare const OutboundPolicy$1: MessageFns$1<OutboundPolicy$1>;
 interface OutboundPolicy_HeaderReplacement {
     /**
      * Domain that the header replacements are scoped to. Supports wildcards in
@@ -3641,7 +3632,7 @@ interface Sandbox$1 {
      */
     inboundCidrAllowlist: string[];
     environmentVariables: StringMap | undefined;
-    outboundPolicy?: OutboundPolicy | undefined;
+    outboundPolicy?: OutboundPolicy$1 | undefined;
     /**
      * If set, the sandbox's main container is served an X.509-SVID over a
      * SPIFFE Workload API socket, addressed by SPIFFE_ENDPOINT_SOCKET. The
@@ -4376,6 +4367,7 @@ interface TaskLogsBatch {
     ptyExecId: string;
     rootFunctionId: string;
     ttlDays: number;
+    sandboxId: string;
 }
 declare const TaskLogsBatch: MessageFns$1<TaskLogsBatch>;
 interface TaskProgress {
@@ -8191,6 +8183,12 @@ interface TaskSetNetworkAccessRequest {
     networkAccess: NetworkAccess | undefined;
 }
 declare const TaskSetNetworkAccessRequest: MessageFns<TaskSetNetworkAccessRequest>;
+interface TaskSetOutboundPolicyRequest {
+    taskId: string;
+    /** Replaces the task's outbound policy. */
+    outboundPolicy: OutboundPolicy$1 | undefined;
+}
+declare const TaskSetOutboundPolicyRequest: MessageFns<TaskSetOutboundPolicyRequest>;
 interface TaskSnapshotDirectoryRequest {
     taskId: string;
     path: Uint8Array;
@@ -8444,6 +8442,7 @@ declare class TaskCommandRouterClientImpl {
     snapshotMemory(request: TaskSnapshotMemoryRequest, options?: TimeoutOptions): Promise<TaskSnapshotMemoryResponse>;
     unmountDirectory(request: TaskUnmountDirectoryRequest): Promise<void>;
     setNetworkAccess(request: TaskSetNetworkAccessRequest): Promise<void>;
+    setOutboundPolicy(request: TaskSetOutboundPolicyRequest): Promise<void>;
     /**
      * Reload all Volumes mounted in the task to reflect their latest committed state.
      *
@@ -8467,6 +8466,80 @@ declare class TaskCommandRouterClientImpl {
     private streamSandboxStdio;
 }
 
+/**
+ * Immutable configuration for replacing headers in outbound HTTPS traffic.
+ */
+
+/** @internal */
+type HeaderReplacement = {
+    domain: string;
+    headers: Record<string, string>;
+    secret?: Secret;
+};
+/**
+ * Immutable configuration for replacing headers in outbound HTTPS requests
+ * from a Sandbox.
+ *
+ * Header values support templating with keys in a replacement's secret: a
+ * `$`-prefixed key name in the secret is replaced with the secret value.
+ * Literal `$` characters are written `$$`.
+ *
+ * Secret values never enter the Sandbox: they are resolved and injected into
+ * matching requests outside the container.
+ *
+ * ```ts
+ * const secret = await modal.secrets.fromName("api-token");
+ *
+ * const outboundPolicy = new modal.OutboundPolicy()
+ *   // Inject a secret-backed Authorization header.
+ *   .withHeaderReplacement({
+ *     domain: "example.com",
+ *     secret,
+ *     headers: { Authorization: "Bearer $API_TOKEN" },
+ *   })
+ *   // Inject a static header into requests to another domain.
+ *   .withHeaderReplacement({
+ *     domain: "modal.com",
+ *     headers: { "X-Trace-Token": "trace_abcd" },
+ *   });
+ *
+ * const sb = await modal.sandboxes.create(app, image, { outboundPolicy });
+ * ```
+ */
+declare class OutboundPolicy {
+    /** @internal */
+    readonly _replacements: readonly HeaderReplacement[];
+    /** @internal */
+    constructor(_replacements?: readonly HeaderReplacement[]);
+    /**
+     * Return a new {@link OutboundPolicy} with an added header replacement.
+     *
+     * @param params.domain Domain the replacements are scoped to. Supports `*.` wildcard
+     *   prefixes (matching the apex domain and subdomains) and a bare `"*"`.
+     * @param params.headers Header name -> header value. Values support `$KEY` templates
+     *   referencing keys in the replacement's `secret`.
+     * @param params.secret Named {@link Secret} (e.g. from `client.secrets.fromName`) whose
+     *   keys may be referenced in the header value templates. Static replacements pass no secret.
+     */
+    withHeaderReplacement(params: {
+        domain: string;
+        headers: Record<string, string>;
+        secret?: Secret;
+    }): OutboundPolicy;
+    /** Check all replacements, throwing `InvalidError` on the first violation found.
+     * @internal
+     */
+    _validate(): void;
+    /** Deduplicated list of secrets referenced by the policy's replacements.
+     * @internal
+     */
+    _secrets(): Secret[];
+    /** Convert to the wire format. Referenced secrets must be hydrated first.
+     * @internal
+     */
+    _toProto(): OutboundPolicy$1;
+}
+
 /** Type of a filesystem entry. */
 type FileType = "file" | "directory" | "symlink";
 /** Metadata for a file or directory entry in a Sandbox. */
@@ -8996,6 +9069,10 @@ type SandboxCreateParams = {
     outboundCidrAllowlist?: string[];
     /** List of domain names the Sandbox is allowed to access. Supports wildcard prefixes (`*.example.com`). Cannot be used with blockNetwork. */
     outboundDomainAllowlist?: string[];
+    /** Configuration for replacing headers in outbound HTTPS requests from the Sandbox.
+     * Secrets referenced by the policy are resolved outside the Sandbox and are never
+     * visible to the workload. See {@link OutboundPolicy}. */
+    outboundPolicy?: OutboundPolicy;
     /** List of CIDRs allowed to connect inbound to the Sandbox (tunnels and connection tokens). If not set, all IPs are allowed. Cannot be used with blockNetwork. */
     inboundCidrAllowlist?: string[];
     /** Enable private IPv6 networking (i6pn) so Sandboxes in the same workspace can address each
@@ -9462,6 +9539,17 @@ declare class Sandbox {
      * @param params - Both `outboundCidrAllowlist` and `outboundDomainAllowlist` must be provided.
      */
     updateNetworkPolicy(params: SandboxUpdateNetworkPolicyParams): Promise<void>;
+    /**
+     * Replace the outbound policy of a running Sandbox.
+     *
+     * The new policy replaces all existing policy configuration on the
+     * Sandbox; build a policy including any existing rules you want to keep.
+     *
+     * Only Sandboxes created with an `outboundPolicy` can be updated this
+     * way; for Sandboxes created without one this fails, since header
+     * replacement is only set up at creation time.
+     */
+    updateOutboundPolicy(outboundPolicy: OutboundPolicy): Promise<void>;
     /**
      * Reload all Volumes mounted in the Sandbox.
      *
@@ -9761,4 +9849,4 @@ declare class ClientClosedError extends Error {
 
 declare function checkForRenamedParams(params: any, renames: Record<string, string>): void;
 
-export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ConflictError, ContainerProcess, ExecutionError, type FileInfo, type FileType, type FileWatchEvent, type FileWatchEventType, type FunctionAutoscalerSettings, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, type FunctionCallLogFetchParams, type FunctionCallLogStreamParams, type FunctionCallLogTailParams, FunctionCallLogsManager, FunctionCallService, type FunctionFromNameParams, type FunctionLogFetchParams, type FunctionLogStreamParams, type FunctionLogTailParams, FunctionLogsManager, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, type FunctionWithBatchingParams, type FunctionWithConcurrencyParams, type FunctionWithOptionsParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, type ImageFromNameParams, type ImagePublishParams, ImageService, InternalFailure, InvalidError, type LogEntry, type FunctionLogFetchParams as LogFetchParams, type LogLevel, type LogSource, type Logger, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, type SandboxExperimentalFromNameParams, type SandboxExperimentalFromSnapshotParams, type SandboxExperimentalGetExitSnapshotParams, type SandboxExperimentalListParams, SandboxFilesystem, SandboxFilesystemDirectoryNotEmptyError, SandboxFilesystemError, SandboxFilesystemFileTooLargeError, SandboxFilesystemIsADirectoryError, SandboxFilesystemNotADirectoryError, SandboxFilesystemNotFoundError, SandboxFilesystemPathAlreadyExistsError, SandboxFilesystemPermissionError, type SandboxFromNameParams, type SandboxListParams, type SandboxMountImageParams, type SandboxReloadVolumesParams, SandboxService, SandboxSnapshot, type SandboxSnapshotDirectoryParams, type SandboxSnapshotFilesystemParams, SandboxSnapshotService, type SandboxTerminateParams, SandboxTimeoutError, type SandboxUpdateNetworkPolicyParams, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, SidecarContainer, type SidecarCreateParams, type SidecarExecParams, type SidecarGetParams, type SidecarListParams, type SidecarMountImageParams, SidecarService, type SidecarSnapshotDirectoryParams, type SidecarSnapshotFilesystemParams, type SidecarTerminateParams, type SidecarUnmountImageParams, SnapshotCreationError, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, type VolumeMountOptionsParams, VolumeService, checkForRenamedParams };
+export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ConflictError, ContainerProcess, ExecutionError, type FileInfo, type FileType, type FileWatchEvent, type FileWatchEventType, type FunctionAutoscalerSettings, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, type FunctionCallLogFetchParams, type FunctionCallLogStreamParams, type FunctionCallLogTailParams, FunctionCallLogsManager, FunctionCallService, type FunctionFromNameParams, type FunctionLogFetchParams, type FunctionLogStreamParams, type FunctionLogTailParams, FunctionLogsManager, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, type FunctionWithBatchingParams, type FunctionWithConcurrencyParams, type FunctionWithOptionsParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, type ImageFromNameParams, type ImagePublishParams, ImageService, InternalFailure, InvalidError, type LogEntry, type FunctionLogFetchParams as LogFetchParams, type LogLevel, type LogSource, type Logger, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, OutboundPolicy, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, type SandboxExperimentalFromNameParams, type SandboxExperimentalFromSnapshotParams, type SandboxExperimentalGetExitSnapshotParams, type SandboxExperimentalListParams, SandboxFilesystem, SandboxFilesystemDirectoryNotEmptyError, SandboxFilesystemError, SandboxFilesystemFileTooLargeError, SandboxFilesystemIsADirectoryError, SandboxFilesystemNotADirectoryError, SandboxFilesystemNotFoundError, SandboxFilesystemPathAlreadyExistsError, SandboxFilesystemPermissionError, type SandboxFromNameParams, type SandboxListParams, type SandboxMountImageParams, type SandboxReloadVolumesParams, SandboxService, SandboxSnapshot, type SandboxSnapshotDirectoryParams, type SandboxSnapshotFilesystemParams, SandboxSnapshotService, type SandboxTerminateParams, SandboxTimeoutError, type SandboxUpdateNetworkPolicyParams, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, SidecarContainer, type SidecarCreateParams, type SidecarExecParams, type SidecarGetParams, type SidecarListParams, type SidecarMountImageParams, SidecarService, type SidecarSnapshotDirectoryParams, type SidecarSnapshotFilesystemParams, type SidecarTerminateParams, type SidecarUnmountImageParams, SnapshotCreationError, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, type VolumeMountOptionsParams, VolumeService, checkForRenamedParams };