modal 0.11.1-dev.0 → 0.11.1-dev.2

package/dist/index.cjs

@@ -21272,7 +21272,8 @@ function createBaseEnvironmentListItem() {
     spendLimitReached: false,
     environmentType: 0,
     defaultMemberRole: void 0,
-    blockUnauthenticatedResources: void 0
+    blockUnauthenticatedResources: void 0,
+    effectiveRole: void 0
   };
 }
 var EnvironmentListItem = {
@@ -21328,6 +21329,9 @@ var EnvironmentListItem = {
     if (message.blockUnauthenticatedResources !== void 0) {
       writer.uint32(136).bool(message.blockUnauthenticatedResources);
     }
+    if (message.effectiveRole !== void 0) {
+      writer.uint32(144).int32(message.effectiveRole);
+    }
     return writer;
   },
   decode(input, length) {
@@ -21456,6 +21460,13 @@ var EnvironmentListItem = {
           message.blockUnauthenticatedResources = reader.bool();
           continue;
         }
+        case 18: {
+          if (tag !== 144) {
+            break;
+          }
+          message.effectiveRole = reader.int32();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -21482,7 +21493,8 @@ var EnvironmentListItem = {
       spendLimitReached: isSet5(object.spendLimitReached) ? globalThis.Boolean(object.spendLimitReached) : false,
       environmentType: isSet5(object.environmentType) ? environmentTypeFromJSON(object.environmentType) : 0,
       defaultMemberRole: isSet5(object.defaultMemberRole) ? environmentRoleFromJSON(object.defaultMemberRole) : void 0,
-      blockUnauthenticatedResources: isSet5(object.blockUnauthenticatedResources) ? globalThis.Boolean(object.blockUnauthenticatedResources) : void 0
+      blockUnauthenticatedResources: isSet5(object.blockUnauthenticatedResources) ? globalThis.Boolean(object.blockUnauthenticatedResources) : void 0,
+      effectiveRole: isSet5(object.effectiveRole) ? environmentRoleFromJSON(object.effectiveRole) : void 0
     };
   },
   toJSON(message) {
@@ -21538,6 +21550,9 @@ var EnvironmentListItem = {
     if (message.blockUnauthenticatedResources !== void 0) {
       obj.blockUnauthenticatedResources = message.blockUnauthenticatedResources;
     }
+    if (message.effectiveRole !== void 0) {
+      obj.effectiveRole = environmentRoleToJSON(message.effectiveRole);
+    }
     return obj;
   },
   create(base) {
@@ -21562,6 +21577,7 @@ var EnvironmentListItem = {
     message.environmentType = object.environmentType ?? 0;
     message.defaultMemberRole = object.defaultMemberRole ?? void 0;
     message.blockUnauthenticatedResources = object.blockUnauthenticatedResources ?? void 0;
+    message.effectiveRole = object.effectiveRole ?? void 0;
     return message;
   }
 };
@@ -43532,7 +43548,8 @@ function createBaseSandboxContainerCreateV2Request() {
     containerName: "",
     definition: void 0,
     ephemeralSecrets: void 0,
-    cloudBucketMountCredentials: {}
+    cloudBucketMountCredentials: {},
+    secretSources: []
   };
 }
 var SandboxContainerCreateV2Request = {
@@ -43555,6 +43572,9 @@ var SandboxContainerCreateV2Request = {
         writer.uint32(42).fork()
       ).join();
     });
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(50).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -43605,6 +43625,13 @@ var SandboxContainerCreateV2Request = {
           }
           continue;
         }
+        case 6: {
+          if (tag !== 50) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -43625,7 +43652,8 @@ var SandboxContainerCreateV2Request = {
           return acc;
         },
         {}
-      ) : {}
+      ) : {},
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -43651,6 +43679,9 @@ var SandboxContainerCreateV2Request = {
         });
       }
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -43668,6 +43699,7 @@ var SandboxContainerCreateV2Request = {
       }
       return acc;
     }, {});
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -44125,7 +44157,14 @@ var SandboxCreateResponse = {
   }
 };
 function createBaseSandboxCreateV2Request() {
-  return { appId: "", definition: void 0, ephemeralSecrets: void 0, tags: [], cloudBucketMountCredentials: {} };
+  return {
+    appId: "",
+    definition: void 0,
+    ephemeralSecrets: void 0,
+    tags: [],
+    cloudBucketMountCredentials: {},
+    secretSources: []
+  };
 }
 var SandboxCreateV2Request = {
   encode(message, writer = new BinaryWriter()) {
@@ -44147,6 +44186,9 @@ var SandboxCreateV2Request = {
         writer.uint32(42).fork()
       ).join();
     });
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(50).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -44194,6 +44236,13 @@ var SandboxCreateV2Request = {
           }
           continue;
         }
+        case 6: {
+          if (tag !== 50) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -44214,7 +44263,8 @@ var SandboxCreateV2Request = {
           return acc;
         },
         {}
-      ) : {}
+      ) : {},
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -44240,6 +44290,9 @@ var SandboxCreateV2Request = {
         });
       }
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -44257,6 +44310,7 @@ var SandboxCreateV2Request = {
       }
       return acc;
     }, {});
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -49248,6 +49302,74 @@ var SecretMetadata = {
     return message;
   }
 };
+function createBaseSecretSource() {
+  return { secretId: void 0, env: void 0 };
+}
+var SecretSource = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.secretId !== void 0) {
+      writer.uint32(10).string(message.secretId);
+    }
+    if (message.env !== void 0) {
+      StringMap.encode(message.env, writer.uint32(18).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseSecretSource();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.secretId = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.env = StringMap.decode(reader, reader.uint32());
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      secretId: isSet5(object.secretId) ? globalThis.String(object.secretId) : void 0,
+      env: isSet5(object.env) ? StringMap.fromJSON(object.env) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.secretId !== void 0) {
+      obj.secretId = message.secretId;
+    }
+    if (message.env !== void 0) {
+      obj.env = StringMap.toJSON(message.env);
+    }
+    return obj;
+  },
+  create(base) {
+    return SecretSource.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseSecretSource();
+    message.secretId = object.secretId ?? void 0;
+    message.env = object.env !== void 0 && object.env !== null ? StringMap.fromPartial(object.env) : void 0;
+    return message;
+  }
+};
 function createBaseSecretUpdateRequest() {
   return { secretId: "", updates: [] };
 }
@@ -65839,7 +65961,8 @@ function createBaseTaskContainerCreateRequest() {
     volumeMounts: [],
     networkAccess: void 0,
     ptyInfo: void 0,
-    memoryReserveConsumeMib: void 0
+    memoryReserveConsumeMib: void 0,
+    secretSources: []
   };
 }
 var TaskContainerCreateRequest = {
@@ -65877,6 +66000,9 @@ var TaskContainerCreateRequest = {
     if (message.memoryReserveConsumeMib !== void 0) {
       writer.uint32(96).uint32(message.memoryReserveConsumeMib);
     }
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(106).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -65966,6 +66092,13 @@ var TaskContainerCreateRequest = {
           message.memoryReserveConsumeMib = reader.uint32();
           continue;
         }
+        case 13: {
+          if (tag !== 106) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -65989,7 +66122,8 @@ var TaskContainerCreateRequest = {
       volumeMounts: globalThis.Array.isArray(object?.volumeMounts) ? object.volumeMounts.map((e) => VolumeMount.fromJSON(e)) : [],
       networkAccess: isSet6(object.networkAccess) ? NetworkAccess.fromJSON(object.networkAccess) : void 0,
       ptyInfo: isSet6(object.ptyInfo) ? PTYInfo.fromJSON(object.ptyInfo) : void 0,
-      memoryReserveConsumeMib: isSet6(object.memoryReserveConsumeMib) ? globalThis.Number(object.memoryReserveConsumeMib) : void 0
+      memoryReserveConsumeMib: isSet6(object.memoryReserveConsumeMib) ? globalThis.Number(object.memoryReserveConsumeMib) : void 0,
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -66033,6 +66167,9 @@ var TaskContainerCreateRequest = {
     if (message.memoryReserveConsumeMib !== void 0) {
       obj.memoryReserveConsumeMib = Math.round(message.memoryReserveConsumeMib);
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -66056,6 +66193,7 @@ var TaskContainerCreateRequest = {
     message.networkAccess = object.networkAccess !== void 0 && object.networkAccess !== null ? NetworkAccess.fromPartial(object.networkAccess) : void 0;
     message.ptyInfo = object.ptyInfo !== void 0 && object.ptyInfo !== null ? PTYInfo.fromPartial(object.ptyInfo) : void 0;
     message.memoryReserveConsumeMib = object.memoryReserveConsumeMib ?? void 0;
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -66936,7 +67074,8 @@ function createBaseTaskExecStartRequest() {
     ptyInfo: void 0,
     runtimeDebug: false,
     containerId: "",
-    env: {}
+    env: {},
+    secretSources: []
   };
 }
 var TaskExecStartRequest = {
@@ -66977,6 +67116,9 @@ var TaskExecStartRequest = {
     Object.entries(message.env).forEach(([key, value]) => {
       TaskExecStartRequest_EnvEntry.encode({ key, value }, writer.uint32(98).fork()).join();
     });
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(106).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -67073,6 +67215,13 @@ var TaskExecStartRequest = {
           }
           continue;
         }
+        case 13: {
+          if (tag !== 106) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -67097,7 +67246,8 @@ var TaskExecStartRequest = {
       env: isObject3(object.env) ? Object.entries(object.env).reduce((acc, [key, value]) => {
         acc[key] = String(value);
         return acc;
-      }, {}) : {}
+      }, {}) : {},
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -67144,6 +67294,9 @@ var TaskExecStartRequest = {
         });
       }
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -67168,6 +67321,7 @@ var TaskExecStartRequest = {
       }
       return acc;
     }, {});
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -74333,7 +74487,7 @@ var AuthTokenManager = class {
 };
 
 // src/version.ts
-var SDK_VERSION = "0.11.1-dev.0";
+var SDK_VERSION = "0.11.1-dev.2";
 function getSDKVersion() {
   return SDK_VERSION;
 }

package/dist/index.d.cts

@@ -1883,6 +1883,7 @@ interface EnvironmentListItem {
     environmentType: EnvironmentType;
     defaultMemberRole?: EnvironmentRole | undefined;
     blockUnauthenticatedResources?: boolean | undefined;
+    effectiveRole?: EnvironmentRole | undefined;
 }
 declare const EnvironmentListItem: MessageFns$1<EnvironmentListItem>;
 interface EnvironmentListResponse {
@@ -3758,6 +3759,8 @@ interface SandboxContainerCreateV2Request {
     cloudBucketMountCredentials: {
         [key: string]: StringMap;
     };
+    /** Applied in order. Cannot be combined with ephemeral_secrets. If definition.secret_ids is set, it must match the secret_id entries here. */
+    secretSources: SecretSource[];
 }
 declare const SandboxContainerCreateV2Request: MessageFns$1<SandboxContainerCreateV2Request>;
 interface SandboxContainerCreateV2Response {
@@ -3798,6 +3801,8 @@ interface SandboxCreateV2Request {
     cloudBucketMountCredentials: {
         [key: string]: StringMap;
     };
+    /** Applied in order. Cannot be combined with ephemeral_secrets. If definition.secret_ids is set, it must match the secret_id entries here. */
+    secretSources: SecretSource[];
 }
 declare const SandboxCreateV2Request: MessageFns$1<SandboxCreateV2Request>;
 interface SandboxCreateV2Response {
@@ -4181,6 +4186,14 @@ interface SecretMetadata {
     environmentName: string;
 }
 declare const SecretMetadata: MessageFns$1<SecretMetadata>;
+/** One source of environment variables for a Sandbox container or exec. */
+interface SecretSource {
+    /** Server-side Secret, resolved on the worker. */
+    secretId?: string | undefined;
+    /** Plaintext values sent directly to the worker. Must not be persisted. */
+    env?: StringMap | undefined;
+}
+declare const SecretSource: MessageFns$1<SecretSource>;
 interface SecretUpdateRequest {
     secretId: string;
     updates: SecretUpdateRequest_Update[];
@@ -8296,6 +8309,8 @@ interface TaskContainerCreateRequest {
      * consumes whatever is left of it. Ignored without a reserve.
      */
     memoryReserveConsumeMib?: number | undefined;
+    /** Applied in order. Cannot be combined with secret_ids or env. */
+    secretSources: SecretSource[];
 }
 declare const TaskContainerCreateRequest: MessageFns<TaskContainerCreateRequest>;
 interface TaskContainerCreateResponse {
@@ -8396,6 +8411,8 @@ interface TaskExecStartRequest {
     env: {
         [key: string]: string;
     };
+    /** Applied in order. Cannot be combined with secret_ids or env. */
+    secretSources: SecretSource[];
 }
 declare const TaskExecStartRequest: MessageFns<TaskExecStartRequest>;
 interface TaskExecStartResponse {

package/dist/index.d.ts

@@ -1883,6 +1883,7 @@ interface EnvironmentListItem {
     environmentType: EnvironmentType;
     defaultMemberRole?: EnvironmentRole | undefined;
     blockUnauthenticatedResources?: boolean | undefined;
+    effectiveRole?: EnvironmentRole | undefined;
 }
 declare const EnvironmentListItem: MessageFns$1<EnvironmentListItem>;
 interface EnvironmentListResponse {
@@ -3758,6 +3759,8 @@ interface SandboxContainerCreateV2Request {
     cloudBucketMountCredentials: {
         [key: string]: StringMap;
     };
+    /** Applied in order. Cannot be combined with ephemeral_secrets. If definition.secret_ids is set, it must match the secret_id entries here. */
+    secretSources: SecretSource[];
 }
 declare const SandboxContainerCreateV2Request: MessageFns$1<SandboxContainerCreateV2Request>;
 interface SandboxContainerCreateV2Response {
@@ -3798,6 +3801,8 @@ interface SandboxCreateV2Request {
     cloudBucketMountCredentials: {
         [key: string]: StringMap;
     };
+    /** Applied in order. Cannot be combined with ephemeral_secrets. If definition.secret_ids is set, it must match the secret_id entries here. */
+    secretSources: SecretSource[];
 }
 declare const SandboxCreateV2Request: MessageFns$1<SandboxCreateV2Request>;
 interface SandboxCreateV2Response {
@@ -4181,6 +4186,14 @@ interface SecretMetadata {
     environmentName: string;
 }
 declare const SecretMetadata: MessageFns$1<SecretMetadata>;
+/** One source of environment variables for a Sandbox container or exec. */
+interface SecretSource {
+    /** Server-side Secret, resolved on the worker. */
+    secretId?: string | undefined;
+    /** Plaintext values sent directly to the worker. Must not be persisted. */
+    env?: StringMap | undefined;
+}
+declare const SecretSource: MessageFns$1<SecretSource>;
 interface SecretUpdateRequest {
     secretId: string;
     updates: SecretUpdateRequest_Update[];
@@ -8296,6 +8309,8 @@ interface TaskContainerCreateRequest {
      * consumes whatever is left of it. Ignored without a reserve.
      */
     memoryReserveConsumeMib?: number | undefined;
+    /** Applied in order. Cannot be combined with secret_ids or env. */
+    secretSources: SecretSource[];
 }
 declare const TaskContainerCreateRequest: MessageFns<TaskContainerCreateRequest>;
 interface TaskContainerCreateResponse {
@@ -8396,6 +8411,8 @@ interface TaskExecStartRequest {
     env: {
         [key: string]: string;
     };
+    /** Applied in order. Cannot be combined with secret_ids or env. */
+    secretSources: SecretSource[];
 }
 declare const TaskExecStartRequest: MessageFns<TaskExecStartRequest>;
 interface TaskExecStartResponse {

package/dist/index.js

@@ -21177,7 +21177,8 @@ function createBaseEnvironmentListItem() {
     spendLimitReached: false,
     environmentType: 0,
     defaultMemberRole: void 0,
-    blockUnauthenticatedResources: void 0
+    blockUnauthenticatedResources: void 0,
+    effectiveRole: void 0
   };
 }
 var EnvironmentListItem = {
@@ -21233,6 +21234,9 @@ var EnvironmentListItem = {
     if (message.blockUnauthenticatedResources !== void 0) {
       writer.uint32(136).bool(message.blockUnauthenticatedResources);
     }
+    if (message.effectiveRole !== void 0) {
+      writer.uint32(144).int32(message.effectiveRole);
+    }
     return writer;
   },
   decode(input, length) {
@@ -21361,6 +21365,13 @@ var EnvironmentListItem = {
           message.blockUnauthenticatedResources = reader.bool();
           continue;
         }
+        case 18: {
+          if (tag !== 144) {
+            break;
+          }
+          message.effectiveRole = reader.int32();
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -21387,7 +21398,8 @@ var EnvironmentListItem = {
       spendLimitReached: isSet5(object.spendLimitReached) ? globalThis.Boolean(object.spendLimitReached) : false,
       environmentType: isSet5(object.environmentType) ? environmentTypeFromJSON(object.environmentType) : 0,
       defaultMemberRole: isSet5(object.defaultMemberRole) ? environmentRoleFromJSON(object.defaultMemberRole) : void 0,
-      blockUnauthenticatedResources: isSet5(object.blockUnauthenticatedResources) ? globalThis.Boolean(object.blockUnauthenticatedResources) : void 0
+      blockUnauthenticatedResources: isSet5(object.blockUnauthenticatedResources) ? globalThis.Boolean(object.blockUnauthenticatedResources) : void 0,
+      effectiveRole: isSet5(object.effectiveRole) ? environmentRoleFromJSON(object.effectiveRole) : void 0
     };
   },
   toJSON(message) {
@@ -21443,6 +21455,9 @@ var EnvironmentListItem = {
     if (message.blockUnauthenticatedResources !== void 0) {
       obj.blockUnauthenticatedResources = message.blockUnauthenticatedResources;
     }
+    if (message.effectiveRole !== void 0) {
+      obj.effectiveRole = environmentRoleToJSON(message.effectiveRole);
+    }
     return obj;
   },
   create(base) {
@@ -21467,6 +21482,7 @@ var EnvironmentListItem = {
     message.environmentType = object.environmentType ?? 0;
     message.defaultMemberRole = object.defaultMemberRole ?? void 0;
     message.blockUnauthenticatedResources = object.blockUnauthenticatedResources ?? void 0;
+    message.effectiveRole = object.effectiveRole ?? void 0;
     return message;
   }
 };
@@ -43437,7 +43453,8 @@ function createBaseSandboxContainerCreateV2Request() {
     containerName: "",
     definition: void 0,
     ephemeralSecrets: void 0,
-    cloudBucketMountCredentials: {}
+    cloudBucketMountCredentials: {},
+    secretSources: []
   };
 }
 var SandboxContainerCreateV2Request = {
@@ -43460,6 +43477,9 @@ var SandboxContainerCreateV2Request = {
         writer.uint32(42).fork()
       ).join();
     });
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(50).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -43510,6 +43530,13 @@ var SandboxContainerCreateV2Request = {
           }
           continue;
         }
+        case 6: {
+          if (tag !== 50) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -43530,7 +43557,8 @@ var SandboxContainerCreateV2Request = {
           return acc;
         },
         {}
-      ) : {}
+      ) : {},
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -43556,6 +43584,9 @@ var SandboxContainerCreateV2Request = {
         });
       }
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -43573,6 +43604,7 @@ var SandboxContainerCreateV2Request = {
       }
       return acc;
     }, {});
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -44030,7 +44062,14 @@ var SandboxCreateResponse = {
   }
 };
 function createBaseSandboxCreateV2Request() {
-  return { appId: "", definition: void 0, ephemeralSecrets: void 0, tags: [], cloudBucketMountCredentials: {} };
+  return {
+    appId: "",
+    definition: void 0,
+    ephemeralSecrets: void 0,
+    tags: [],
+    cloudBucketMountCredentials: {},
+    secretSources: []
+  };
 }
 var SandboxCreateV2Request = {
   encode(message, writer = new BinaryWriter()) {
@@ -44052,6 +44091,9 @@ var SandboxCreateV2Request = {
         writer.uint32(42).fork()
       ).join();
     });
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(50).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -44099,6 +44141,13 @@ var SandboxCreateV2Request = {
           }
           continue;
         }
+        case 6: {
+          if (tag !== 50) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -44119,7 +44168,8 @@ var SandboxCreateV2Request = {
           return acc;
         },
         {}
-      ) : {}
+      ) : {},
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -44145,6 +44195,9 @@ var SandboxCreateV2Request = {
         });
       }
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -44162,6 +44215,7 @@ var SandboxCreateV2Request = {
       }
       return acc;
     }, {});
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -49153,6 +49207,74 @@ var SecretMetadata = {
     return message;
   }
 };
+function createBaseSecretSource() {
+  return { secretId: void 0, env: void 0 };
+}
+var SecretSource = {
+  encode(message, writer = new BinaryWriter()) {
+    if (message.secretId !== void 0) {
+      writer.uint32(10).string(message.secretId);
+    }
+    if (message.env !== void 0) {
+      StringMap.encode(message.env, writer.uint32(18).fork()).join();
+    }
+    return writer;
+  },
+  decode(input, length) {
+    const reader = input instanceof BinaryReader ? input : new BinaryReader(input);
+    let end = length === void 0 ? reader.len : reader.pos + length;
+    const message = createBaseSecretSource();
+    while (reader.pos < end) {
+      const tag = reader.uint32();
+      switch (tag >>> 3) {
+        case 1: {
+          if (tag !== 10) {
+            break;
+          }
+          message.secretId = reader.string();
+          continue;
+        }
+        case 2: {
+          if (tag !== 18) {
+            break;
+          }
+          message.env = StringMap.decode(reader, reader.uint32());
+          continue;
+        }
+      }
+      if ((tag & 7) === 4 || tag === 0) {
+        break;
+      }
+      reader.skip(tag & 7);
+    }
+    return message;
+  },
+  fromJSON(object) {
+    return {
+      secretId: isSet5(object.secretId) ? globalThis.String(object.secretId) : void 0,
+      env: isSet5(object.env) ? StringMap.fromJSON(object.env) : void 0
+    };
+  },
+  toJSON(message) {
+    const obj = {};
+    if (message.secretId !== void 0) {
+      obj.secretId = message.secretId;
+    }
+    if (message.env !== void 0) {
+      obj.env = StringMap.toJSON(message.env);
+    }
+    return obj;
+  },
+  create(base) {
+    return SecretSource.fromPartial(base ?? {});
+  },
+  fromPartial(object) {
+    const message = createBaseSecretSource();
+    message.secretId = object.secretId ?? void 0;
+    message.env = object.env !== void 0 && object.env !== null ? StringMap.fromPartial(object.env) : void 0;
+    return message;
+  }
+};
 function createBaseSecretUpdateRequest() {
   return { secretId: "", updates: [] };
 }
@@ -65750,7 +65872,8 @@ function createBaseTaskContainerCreateRequest() {
     volumeMounts: [],
     networkAccess: void 0,
     ptyInfo: void 0,
-    memoryReserveConsumeMib: void 0
+    memoryReserveConsumeMib: void 0,
+    secretSources: []
   };
 }
 var TaskContainerCreateRequest = {
@@ -65788,6 +65911,9 @@ var TaskContainerCreateRequest = {
     if (message.memoryReserveConsumeMib !== void 0) {
       writer.uint32(96).uint32(message.memoryReserveConsumeMib);
     }
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(106).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -65877,6 +66003,13 @@ var TaskContainerCreateRequest = {
           message.memoryReserveConsumeMib = reader.uint32();
           continue;
         }
+        case 13: {
+          if (tag !== 106) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -65900,7 +66033,8 @@ var TaskContainerCreateRequest = {
       volumeMounts: globalThis.Array.isArray(object?.volumeMounts) ? object.volumeMounts.map((e) => VolumeMount.fromJSON(e)) : [],
       networkAccess: isSet6(object.networkAccess) ? NetworkAccess.fromJSON(object.networkAccess) : void 0,
       ptyInfo: isSet6(object.ptyInfo) ? PTYInfo.fromJSON(object.ptyInfo) : void 0,
-      memoryReserveConsumeMib: isSet6(object.memoryReserveConsumeMib) ? globalThis.Number(object.memoryReserveConsumeMib) : void 0
+      memoryReserveConsumeMib: isSet6(object.memoryReserveConsumeMib) ? globalThis.Number(object.memoryReserveConsumeMib) : void 0,
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -65944,6 +66078,9 @@ var TaskContainerCreateRequest = {
     if (message.memoryReserveConsumeMib !== void 0) {
       obj.memoryReserveConsumeMib = Math.round(message.memoryReserveConsumeMib);
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -65967,6 +66104,7 @@ var TaskContainerCreateRequest = {
     message.networkAccess = object.networkAccess !== void 0 && object.networkAccess !== null ? NetworkAccess.fromPartial(object.networkAccess) : void 0;
     message.ptyInfo = object.ptyInfo !== void 0 && object.ptyInfo !== null ? PTYInfo.fromPartial(object.ptyInfo) : void 0;
     message.memoryReserveConsumeMib = object.memoryReserveConsumeMib ?? void 0;
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -66847,7 +66985,8 @@ function createBaseTaskExecStartRequest() {
     ptyInfo: void 0,
     runtimeDebug: false,
     containerId: "",
-    env: {}
+    env: {},
+    secretSources: []
   };
 }
 var TaskExecStartRequest = {
@@ -66888,6 +67027,9 @@ var TaskExecStartRequest = {
     Object.entries(message.env).forEach(([key, value]) => {
       TaskExecStartRequest_EnvEntry.encode({ key, value }, writer.uint32(98).fork()).join();
     });
+    for (const v of message.secretSources) {
+      SecretSource.encode(v, writer.uint32(106).fork()).join();
+    }
     return writer;
   },
   decode(input, length) {
@@ -66984,6 +67126,13 @@ var TaskExecStartRequest = {
           }
           continue;
         }
+        case 13: {
+          if (tag !== 106) {
+            break;
+          }
+          message.secretSources.push(SecretSource.decode(reader, reader.uint32()));
+          continue;
+        }
       }
       if ((tag & 7) === 4 || tag === 0) {
         break;
@@ -67008,7 +67157,8 @@ var TaskExecStartRequest = {
       env: isObject3(object.env) ? Object.entries(object.env).reduce((acc, [key, value]) => {
         acc[key] = String(value);
         return acc;
-      }, {}) : {}
+      }, {}) : {},
+      secretSources: globalThis.Array.isArray(object?.secretSources) ? object.secretSources.map((e) => SecretSource.fromJSON(e)) : []
     };
   },
   toJSON(message) {
@@ -67055,6 +67205,9 @@ var TaskExecStartRequest = {
         });
       }
     }
+    if (message.secretSources?.length) {
+      obj.secretSources = message.secretSources.map((e) => SecretSource.toJSON(e));
+    }
     return obj;
   },
   create(base) {
@@ -67079,6 +67232,7 @@ var TaskExecStartRequest = {
       }
       return acc;
     }, {});
+    message.secretSources = object.secretSources?.map((e) => SecretSource.fromPartial(e)) || [];
     return message;
   }
 };
@@ -74251,7 +74405,7 @@ var AuthTokenManager = class {
 };
 
 // src/version.ts
-var SDK_VERSION = "0.11.1-dev.0";
+var SDK_VERSION = "0.11.1-dev.2";
 function getSDKVersion() {
   return SDK_VERSION;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "modal",
-  "version": "0.11.1-dev.0",
+  "version": "0.11.1-dev.2",
   "description": "Modal SDK for JavaScript/TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://modal.com/docs/guide/sdk-javascript-go",