modal 0.10.2-dev.6 → 0.10.2-dev.8

package/dist/index.cjs

@@ -42,6 +42,7 @@ __export(index_exports, {
   ConflictError: () => ConflictError,
   ContainerProcess: () => ContainerProcess2,
   ExecutionError: () => ExecutionError,
+  ExperimentalOutboundPolicy: () => ExperimentalOutboundPolicy,
   FunctionCall: () => FunctionCall,
   FunctionCallLogsManager: () => FunctionCallLogsManager,
   FunctionCallService: () => FunctionCallService,
@@ -55,7 +56,6 @@ __export(index_exports, {
   InvalidError: () => InvalidError,
   ModalClient: () => ModalClient,
   NotFoundError: () => NotFoundError,
-  OutboundPolicy: () => OutboundPolicy2,
   Probe: () => Probe2,
   Proxy: () => Proxy3,
   ProxyService: () => ProxyService,
@@ -75,6 +75,7 @@ __export(index_exports, {
   SandboxFilesystemNotFoundError: () => SandboxFilesystemNotFoundError,
   SandboxFilesystemPathAlreadyExistsError: () => SandboxFilesystemPathAlreadyExistsError,
   SandboxFilesystemPermissionError: () => SandboxFilesystemPermissionError,
+  SandboxLogsManager: () => SandboxLogsManager,
   SandboxService: () => SandboxService,
   SandboxSnapshot: () => SandboxSnapshot,
   SandboxSnapshotService: () => SandboxSnapshotService,
@@ -5584,7 +5585,7 @@ var AppGetInfoResponse = {
   }
 };
 function createBaseAppGetInfoResponse_FunctionInfoSummary() {
-  return { gpuConfig: [], schedule: void 0, webFunction: false, requiresProxyAuth: void 0 };
+  return { gpuConfig: [], schedule: void 0, webFunction: false, requiresProxyAuth: void 0, isSessioned: false };
 }
 var AppGetInfoResponse_FunctionInfoSummary = {
   encode(message, writer = new BinaryWriter()) {
@@ -5600,6 +5601,9 @@ var AppGetInfoResponse_FunctionInfoSummary = {
     if (message.requiresProxyAuth !== void 0) {
       writer.uint32(32).bool(message.requiresProxyAuth);
     }
+    if (message.isSessioned !== false) {
+      writer.uint32(40).bool(message.isSessioned);
+    }
     return writer;
   },
   decode(input, length) {
@@ -5637,6 +5641,13 @@ var AppGetInfoResponse_FunctionInfoSummary = {
           message.requiresProxyAuth = reader.bool();
           continue;
         }
+        case 5: {
+          if (tag !== 40) {
+            break;
+          }
+          message.isSessioned = reader.bool();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -5650,7 +5661,8 @@ var AppGetInfoResponse_FunctionInfoSummary = {
       gpuConfig: globalThis.Array.isArray(object?.gpuConfig) ? object.gpuConfig.map((e) => GPUConfig.fromJSON(e)) : [],
       schedule: isSet5(object.schedule) ? Schedule.fromJSON(object.schedule) : void 0,
       webFunction: isSet5(object.webFunction) ? globalThis.Boolean(object.webFunction) : false,
-      requiresProxyAuth: isSet5(object.requiresProxyAuth) ? globalThis.Boolean(object.requiresProxyAuth) : void 0
+      requiresProxyAuth: isSet5(object.requiresProxyAuth) ? globalThis.Boolean(object.requiresProxyAuth) : void 0,
+      isSessioned: isSet5(object.isSessioned) ? globalThis.Boolean(object.isSessioned) : false
     };
   },
   toJSON(message) {
@@ -5667,6 +5679,9 @@ var AppGetInfoResponse_FunctionInfoSummary = {
     if (message.requiresProxyAuth !== void 0) {
       obj.requiresProxyAuth = message.requiresProxyAuth;
     }
+    if (message.isSessioned !== false) {
+      obj.isSessioned = message.isSessioned;
+    }
     return obj;
   },
   create(base) {
@@ -5678,6 +5693,7 @@ var AppGetInfoResponse_FunctionInfoSummary = {
     message.schedule = object.schedule !== void 0 && object.schedule !== null ? Schedule.fromPartial(object.schedule) : void 0;
     message.webFunction = object.webFunction ?? false;
     message.requiresProxyAuth = object.requiresProxyAuth ?? void 0;
+    message.isSessioned = object.isSessioned ?? false;
     return message;
   }
 };
@@ -48067,6 +48083,108 @@ var SecretDeleteRequest = {
     return message;
   }
 };
+function createBaseSecretGetInfoRequest() {
+  return { secretId: "" };
+}
+var SecretGetInfoRequest = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.secretId !== "") {
+      writer.uint32(10).string(message.secretId);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseSecretGetInfoRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.secretId = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return { secretId: isSet5(object.secretId) ? globalThis.String(object.secretId) : "" };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.secretId !== "") {
+      obj.secretId = message.secretId;
+    }
+    return obj;
+  },
+  create(base) {
+    return SecretGetInfoRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseSecretGetInfoRequest();
+    message.secretId = object.secretId ?? "";
+    return message;
+  }
+};
+function createBaseSecretGetInfoResponse() {
+  return { metadata: void 0 };
+}
+var SecretGetInfoResponse = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.metadata !== void 0) {
+      SecretMetadata.encode(message.metadata, writer.uint32(10).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseSecretGetInfoResponse();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.metadata = SecretMetadata.decode(reader, reader.uint32());
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return { metadata: isSet5(object.metadata) ? SecretMetadata.fromJSON(object.metadata) : void 0 };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.metadata !== void 0) {
+      obj.metadata = SecretMetadata.toJSON(message.metadata);
+    }
+    return obj;
+  },
+  create(base) {
+    return SecretGetInfoResponse.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseSecretGetInfoResponse();
+    message.metadata = object.metadata !== void 0 && object.metadata !== null ? SecretMetadata.fromPartial(object.metadata) : void 0;
+    return message;
+  }
+};
 function createBaseSecretGetOrCreateRequest() {
   return { deploymentName: "", environmentName: "", objectCreationType: 0, envDict: {}, appId: "", requiredKeys: [] };
 }
@@ -48613,7 +48731,7 @@ var SecretListResponse = {
   }
 };
 function createBaseSecretMetadata() {
-  return { name: "", creationInfo: void 0, keys: [] };
+  return { name: "", creationInfo: void 0, keys: [], environmentName: "" };
 }
 var SecretMetadata = {
   encode(message, writer = new BinaryWriter()) {
@@ -48626,6 +48744,9 @@ var SecretMetadata = {
     for (const v of message.keys) {
       writer.uint32(26).string(v);
     }
+    if (message.environmentName !== "") {
+      writer.uint32(34).string(message.environmentName);
+    }
     return writer;
   },
   decode(input, length) {
@@ -48656,6 +48777,13 @@ var SecretMetadata = {
           message.keys.push(reader.string());
           continue;
         }
+        case 4: {
+          if (tag !== 34) {
+            break;
+          }
+          message.environmentName = reader.string();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -48668,7 +48796,8 @@ var SecretMetadata = {
     return {
       name: isSet5(object.name) ? globalThis.String(object.name) : "",
       creationInfo: isSet5(object.creationInfo) ? CreationInfo.fromJSON(object.creationInfo) : void 0,
-      keys: globalThis.Array.isArray(object?.keys) ? object.keys.map((e) => globalThis.String(e)) : []
+      keys: globalThis.Array.isArray(object?.keys) ? object.keys.map((e) => globalThis.String(e)) : [],
+      environmentName: isSet5(object.environmentName) ? globalThis.String(object.environmentName) : ""
     };
   },
   toJSON(message) {
@@ -48682,6 +48811,9 @@ var SecretMetadata = {
     if (message.keys?.length) {
       obj.keys = message.keys;
     }
+    if (message.environmentName !== "") {
+      obj.environmentName = message.environmentName;
+    }
     return obj;
   },
   create(base) {
@@ -48692,6 +48824,7 @@ var SecretMetadata = {
     message.name = object.name ?? "";
     message.creationInfo = object.creationInfo !== void 0 && object.creationInfo !== null ? CreationInfo.fromPartial(object.creationInfo) : void 0;
     message.keys = object.keys?.map((e) => e) || [];
+    message.environmentName = object.environmentName ?? "";
     return message;
   }
 };
@@ -58546,6 +58679,74 @@ var WebhookTokenListResponse = {
     return message;
   }
 };
+function createBaseWebhookTokenUpdateRequest() {
+  return { tokenId: "", name: void 0 };
+}
+var WebhookTokenUpdateRequest = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.tokenId !== "") {
+      writer.uint32(10).string(message.tokenId);
+    }
+    if (message.name !== void 0) {
+      writer.uint32(18).string(message.name);
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseWebhookTokenUpdateRequest();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.tokenId = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.name = reader.string();
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      tokenId: isSet5(object.tokenId) ? globalThis.String(object.tokenId) : "",
+      name: isSet5(object.name) ? globalThis.String(object.name) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.tokenId !== "") {
+      obj.tokenId = message.tokenId;
+    }
+    if (message.name !== void 0) {
+      obj.name = message.name;
+    }
+    return obj;
+  },
+  create(base) {
+    return WebhookTokenUpdateRequest.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseWebhookTokenUpdateRequest();
+    message.tokenId = object.tokenId ?? "";
+    message.name = object.name ?? void 0;
+    return message;
+  }
+};
 function createBaseWorkspaceBillingRatesRequest() {
   return {};
 }
@@ -62076,6 +62277,14 @@ var ModalClientDefinition = {
       responseStream: false,
       options: {}
     },
+    secretGetInfo: {
+      name: "SecretGetInfo",
+      requestType: SecretGetInfoRequest,
+      requestStream: false,
+      responseType: SecretGetInfoResponse,
+      responseStream: false,
+      options: {}
+    },
     secretGetOrCreate: {
       name: "SecretGetOrCreate",
       requestType: SecretGetOrCreateRequest,
@@ -62510,6 +62719,14 @@ var ModalClientDefinition = {
       responseStream: false,
       options: {}
     },
+    webhookTokenUpdate: {
+      name: "WebhookTokenUpdate",
+      requestType: WebhookTokenUpdateRequest,
+      requestStream: false,
+      responseType: WebhookToken,
+      responseStream: false,
+      options: {}
+    },
     /** Workspaces */
     workspaceBillingRates: {
       name: "WorkspaceBillingRates",
@@ -71226,6 +71443,7 @@ var SandboxSnapshotService = class {
 var SB_LOGS_INITIAL_DELAY_MS = 10;
 var SB_LOGS_DELAY_FACTOR = 2;
 var SB_LOGS_MAX_RETRIES = 10;
+var SB_LOGS_TASK_ID_TIMEOUT_SECONDS = 0.5;
 var TTL_NO_EXPIRY_SENTINEL = -1;
 var CUSTOMER_SUPPLIED_ENCRYPTION_KEY_MIN_LENGTH = 16;
 var CUSTOMER_SUPPLIED_ENCRYPTION_KEY_MAX_LENGTH = 512;
@@ -71275,6 +71493,19 @@ function getSandboxVersion(sandboxId) {
   }
   return "V2" /* V2 */;
 }
+function sandboxRuntimeToProto(runtime) {
+  switch (runtime) {
+    case void 0:
+      return void 0;
+    case "gvisor":
+    case "vm":
+      return runtime;
+    default:
+      throw new Error(
+        `runtime must be "gvisor" or "vm", got ${JSON.stringify(runtime)}`
+      );
+  }
+}
 var Probe2 = class _Probe {
   #tcpPort;
   #execArgv;
@@ -71408,6 +71639,7 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
   if (params.workdir && !params.workdir.startsWith("/")) {
     throw new Error(`workdir must be an absolute path, got: ${params.workdir}`);
   }
+  const runtime = sandboxRuntimeToProto(params.runtime);
   const volumeMounts = params.volumes ? Object.entries(params.volumes).map(
     ([mountPath, volume]) => volumeToMountProto(mountPath, volume)
   ) : [];
@@ -71459,16 +71691,16 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       );
     }
   }
-  if (params.outboundPolicy !== void 0) {
-    params.outboundPolicy._validate();
+  if (params.experimentalOutboundPolicy !== void 0) {
+    params.experimentalOutboundPolicy._validate();
     if (params.blockNetwork) {
       throw new InvalidError(
-        "outboundPolicy cannot be used when blockNetwork is enabled"
+        "experimentalOutboundPolicy cannot be used when blockNetwork is enabled"
       );
     }
     if (params.outboundDomainAllowlist && params.outboundDomainAllowlist.length > 0) {
       throw new InvalidError(
-        "outboundPolicy cannot be used with outboundDomainAllowlist"
+        "experimentalOutboundPolicy cannot be used with outboundDomainAllowlist"
       );
     }
   }
@@ -71552,7 +71784,7 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       idleTimeoutSecs: params.idleTimeoutMs != void 0 ? params.idleTimeoutMs / 1e3 : void 0,
       workdir: params.workdir ?? void 0,
       networkAccess,
-      outboundPolicy: params.outboundPolicy?._toProto(),
+      outboundPolicy: params.experimentalOutboundPolicy?._toProto(),
       resources: Resources.create({
         milliCpu,
         milliCpuMax,
@@ -71576,7 +71808,8 @@ async function buildSandboxCreateRequestProto(appId, imageId, params = {}) {
       includeOidcIdentityToken: params.includeOidcIdentityToken ?? false,
       inboundCidrAllowlist: params.inboundCidrAllowlist ?? [],
       i6pnEnabled: params.i6pn ?? false,
-      enableSnapshot: params.experimentalEnableSnapshot ?? false
+      enableSnapshot: params.experimentalEnableSnapshot ?? false,
+      runtime
     }
   });
 }
@@ -71613,7 +71846,10 @@ var SandboxService = class {
     );
     await hydrateSandboxSecrets(
       this.#client,
-      [...mergedSecrets, ...params.outboundPolicy?._secrets() ?? []],
+      [
+        ...mergedSecrets,
+        ...params.experimentalOutboundPolicy?._secrets() ?? []
+      ],
       params.cloudBucketMounts
     );
     const mergedParams = {
@@ -71674,7 +71910,10 @@ var SandboxService = class {
     Object.assign(envDict, params.env ?? {});
     await hydrateSandboxSecrets(
       this.#client,
-      [...resolvableSecrets, ...params.outboundPolicy?._secrets() ?? []],
+      [
+        ...resolvableSecrets,
+        ...params.experimentalOutboundPolicy?._secrets() ?? []
+      ],
       params.cloudBucketMounts
     );
     const mergedParams = {
@@ -72083,6 +72322,7 @@ function buildTaskSnapshotDirectoryRequestProto(taskId, path2, snapshotId, ttlSe
 var Sandbox2 = class _Sandbox {
   #client;
   sandboxId;
+  #appId;
   #stdin;
   #stdout;
   #stderr;
@@ -72129,6 +72369,25 @@ var Sandbox2 = class _Sandbox {
     }
     return this.#stderr;
   }
+  /**
+   * Access persisted entrypoint logs emitted by this Sandbox.
+   *
+   * Use {@link SandboxLogsManager#fetch fetch()} to read logs from a UTC time
+   * range and {@link SandboxLogsManager#tail tail()} to read the most recent
+   * logs.
+   *
+   * This is separate from {@link Sandbox#stdout stdout} and
+   * {@link Sandbox#stderr stderr}, which expose the Sandbox's live output
+   * streams.
+   */
+  get logs() {
+    return new SandboxLogsManager(
+      this.#client,
+      this.sandboxId,
+      () => this.#getAppId(),
+      () => this.#resolveTaskIdForLogs()
+    );
+  }
   #outputStream(fileDescriptor) {
     if (this.#isV2) {
       this.#ensureAttached();
@@ -72361,8 +72620,11 @@ var Sandbox2 = class _Sandbox {
     }
     return this.#client.cpClient.sandboxWait(req);
   }
-  #sandboxGetTaskId(signal) {
-    const req = { sandboxId: this.sandboxId };
+  #sandboxGetTaskId(signal, timeout) {
+    const req = SandboxGetTaskIdRequest.create({
+      sandboxId: this.sandboxId,
+      timeout
+    });
     if (this.#isV2) {
       return this.#client.cpClient.sandboxGetTaskIdV2(req, { signal });
     }
@@ -72392,6 +72654,42 @@ var Sandbox2 = class _Sandbox {
   }
   static #maxGetTaskIdAttempts = 600;
   // 5 minutes at 500ms intervals
+  async #getAppId() {
+    if (this.#appId !== void 0) {
+      return this.#appId;
+    }
+    const resp = await this.#sandboxWait(0);
+    const appId = resp.metadata?.appId;
+    if (!appId) {
+      throw new ExecutionError(
+        "Sandbox app ID should have been set during hydration"
+      );
+    }
+    this.#appId = appId;
+    return appId;
+  }
+  async #resolveTaskIdForLogs() {
+    if (this.#taskId !== void 0) {
+      return this.#taskId;
+    }
+    let resp;
+    try {
+      resp = await this.#sandboxGetTaskId(
+        void 0,
+        SB_LOGS_TASK_ID_TIMEOUT_SECONDS
+      );
+    } catch (error) {
+      if (error instanceof import_nice_grpc12.ClientError && error.code === import_nice_grpc12.Status.DEADLINE_EXCEEDED) {
+        throw new ExecutionError("Sandbox task ID is not available yet.");
+      }
+      throw error;
+    }
+    if (!resp.taskId) {
+      throw new ExecutionError("Sandbox task ID is not available.");
+    }
+    this.#taskId = resp.taskId;
+    return this.#taskId;
+  }
   async #getTaskId(signal) {
     if (this.#taskId !== void 0) {
       return this.#taskId;
@@ -72823,14 +73121,16 @@ var Sandbox2 = class _Sandbox {
   /**
    * Replace the outbound policy of a running Sandbox.
    *
+   * EXPERIMENTAL: the API is subject to change.
+   *
    * The new policy replaces all existing policy configuration on the
    * Sandbox; build a policy including any existing rules you want to keep.
    *
-   * Only Sandboxes created with an `outboundPolicy` can be updated this
+   * Only Sandboxes created with an `experimentalOutboundPolicy` can be updated this
    * way; for Sandboxes created without one this fails, since header
    * replacement is only set up at creation time.
    */
-  async updateOutboundPolicy(outboundPolicy) {
+  async experimentalUpdateOutboundPolicy(outboundPolicy) {
     this.#ensureAttached();
     outboundPolicy._validate();
     const [, [taskId, commandRouterClient]] = await Promise.all([
@@ -73400,7 +73700,7 @@ var AuthTokenManager = class {
 };
 
 // src/version.ts
-var SDK_VERSION = "0.10.2-dev.6";
+var SDK_VERSION = "0.10.2-dev.8";
 function getSDKVersion() {
   return SDK_VERSION;
 }
@@ -74141,6 +74441,8 @@ function contextIds(batch, item, ObjectId) {
         item.inputId || batch.inputId,
         item.containerId || batch.taskId
       ].filter((id) => id);
+    case "sb":
+      return [item.containerId || batch.taskId].filter((id) => id);
     default:
       return [];
   }
@@ -74961,6 +75263,97 @@ var FunctionCallLogsManager = class extends LogsManager {
     );
   }
 };
+var SandboxLogsManager = class {
+  /** @ignore */
+  constructor(client, sandboxId, getAppId, getTaskId) {
+    this.client = client;
+    this.sandboxId = sandboxId;
+    this.getAppId = getAppId;
+    this.getTaskId = getTaskId;
+  }
+  /**
+   * Fetch Sandbox entrypoint logs corresponding to a UTC time range and
+   * optional filters.
+   *
+   * Entries are returned in chronological order.
+   *
+   * @returns An async iterable of {@link LogEntry} objects.
+   *
+   * @example
+   * ```typescript
+   * import { ModalClient } from "modal";
+   *
+   * const modal = new ModalClient();
+   * const sandbox = await modal.sandboxes.fromId("sb-...");
+   *
+   * for await (const entry of sandbox.logs.fetch({
+   *   since: new Date(Date.now() - 60 * 60 * 1_000),
+   *   source: "stdout",
+   * })) {
+   *   process.stdout.write(entry.message);
+   * }
+   * ```
+   */
+  async *fetch(params) {
+    const [appId, taskId] = await Promise.all([
+      this.getAppId(),
+      this.getTaskId()
+    ]);
+    if (!taskId) {
+      throw new ExecutionError(
+        "Cannot resolve Sandbox metadata needed for fetching logs. Wait for the Sandbox to be scheduled."
+      );
+    }
+    yield* fetchLogs(
+      this.client,
+      {
+        appId,
+        objectId: this.sandboxId,
+        taskId,
+        source: sourceToFileDescriptor(params.source),
+        searchText: params.searchText
+      },
+      params.since,
+      params.until
+    );
+  }
+  /**
+   * Fetch the most recent Sandbox entrypoint logs.
+   *
+   * Entries are returned in chronological order.
+   *
+   * @returns An async iterable of {@link LogEntry} objects.
+   *
+   * @example
+   * ```typescript
+   * import { ModalClient } from "modal";
+   *
+   * const modal = new ModalClient();
+   * const sandbox = await modal.sandboxes.fromId("sb-...");
+   *
+   * for await (const entry of sandbox.logs.tail({ entries: 20 })) {
+   *   process.stdout.write(entry.message);
+   * }
+   * ```
+   */
+  async *tail(params = {}) {
+    const [appId, taskId] = await Promise.all([
+      this.getAppId(),
+      this.getTaskId()
+    ]);
+    if (!taskId) {
+      throw new ExecutionError(
+        "Sandbox task ID cannot be empty when fetching logs. Wait for the Sandbox to be scheduled."
+      );
+    }
+    yield* tailLogs(this.client, params.entries ?? 100, {
+      appId,
+      objectId: this.sandboxId,
+      taskId,
+      source: sourceToFileDescriptor(params.source)
+    });
+  }
+};
 
 // src/function_call.ts
 var FunctionCallService = class {
@@ -75758,7 +76151,7 @@ function templateReferencesKey(template) {
   }
   return false;
 }
-var OutboundPolicy2 = class _OutboundPolicy {
+var ExperimentalOutboundPolicy = class _ExperimentalOutboundPolicy {
   /** @internal */
   _replacements;
   /** @internal */
@@ -75766,7 +76159,7 @@ var OutboundPolicy2 = class _OutboundPolicy {
     this._replacements = _replacements;
   }
   /**
-   * Return a new {@link OutboundPolicy} with an added header replacement.
+   * Return a new {@link ExperimentalOutboundPolicy} with an added header replacement.
    *
    * @param params.domain Domain the replacements are scoped to. Supports `*.` wildcard
    *   prefixes (matching the apex domain and subdomains) and a bare `"*"`.
@@ -75777,7 +76170,7 @@ var OutboundPolicy2 = class _OutboundPolicy {
    */
   withHeaderReplacement(params) {
     const { domain, headers, secret } = params;
-    return new _OutboundPolicy([
+    return new _ExperimentalOutboundPolicy([
       ...this._replacements,
       { domain, headers: { ...headers }, secret }
     ]);
@@ -75865,6 +76258,7 @@ var OutboundPolicy2 = class _OutboundPolicy {
   ConflictError,
   ContainerProcess,
   ExecutionError,
+  ExperimentalOutboundPolicy,
   FunctionCall,
   FunctionCallLogsManager,
   FunctionCallService,
@@ -75878,7 +76272,6 @@ var OutboundPolicy2 = class _OutboundPolicy {
   InvalidError,
   ModalClient,
   NotFoundError,
-  OutboundPolicy,
   Probe,
   Proxy,
   ProxyService,
@@ -75898,6 +76291,7 @@ var OutboundPolicy2 = class _OutboundPolicy {
   SandboxFilesystemNotFoundError,
   SandboxFilesystemPathAlreadyExistsError,
   SandboxFilesystemPermissionError,
+  SandboxLogsManager,
   SandboxService,
   SandboxSnapshot,
   SandboxSnapshotService,