modal 0.7.3 → 0.7.5

package/dist/index.d.cts

@@ -126,6 +126,26 @@ declare enum DeploymentNamespace {
     DEPLOYMENT_NAMESPACE_GLOBAL = 3,
     UNRECOGNIZED = -1
 }
+declare enum EndpointApiSurface {
+    ENDPOINT_API_SURFACE_UNSPECIFIED = 0,
+    ENDPOINT_API_SURFACE_OPENAI_CHAT_COMPLETIONS = 1,
+    ENDPOINT_API_SURFACE_OPENAI_RESPONSES = 2,
+    ENDPOINT_API_SURFACE_ANTHROPIC_MESSAGES = 3,
+    UNRECOGNIZED = -1
+}
+declare enum EndpointInputModality {
+    ENDPOINT_INPUT_MODALITY_UNSPECIFIED = 0,
+    ENDPOINT_INPUT_MODALITY_TEXT = 1,
+    ENDPOINT_INPUT_MODALITY_IMAGE = 2,
+    ENDPOINT_INPUT_MODALITY_AUDIO = 3,
+    UNRECOGNIZED = -1
+}
+declare enum EnvironmentRole {
+    ENVIRONMENT_ROLE_UNSPECIFIED = 0,
+    ENVIRONMENT_ROLE_VIEWER = 1,
+    ENVIRONMENT_ROLE_CONTRIBUTOR = 2,
+    UNRECOGNIZED = -1
+}
 declare enum ExecOutputOption {
     EXEC_OUTPUT_OPTION_UNSPECIFIED = 0,
     EXEC_OUTPUT_OPTION_DEVNULL = 1,
@@ -171,6 +191,20 @@ declare enum GPUType {
     GPU_TYPE_H200 = 12,
     UNRECOGNIZED = -1
 }
+declare enum IdentityProviderType {
+    IDENTITY_PROVIDER_TYPE_UNSPECIFIED = 0,
+    IDENTITY_PROVIDER_TYPE_GITHUB = 1,
+    IDENTITY_PROVIDER_TYPE_OKTA = 2,
+    IDENTITY_PROVIDER_TYPE_GOOGLE_OAUTH = 3,
+    UNRECOGNIZED = -1
+}
+declare enum MemberRole {
+    MEMBER_ROLE_UNSPECIFIED = 0,
+    MEMBER_ROLE_USER = 1,
+    MEMBER_ROLE_MANAGER = 2,
+    MEMBER_ROLE_OWNER = 3,
+    UNRECOGNIZED = -1
+}
 declare enum ObjectCreationType {
     /** OBJECT_CREATION_TYPE_UNSPECIFIED - just lookup */
     OBJECT_CREATION_TYPE_UNSPECIFIED = 0,
@@ -513,7 +547,14 @@ interface AppGetByDeploymentNameRequest {
 }
 declare const AppGetByDeploymentNameRequest: MessageFns$1<AppGetByDeploymentNameRequest>;
 interface AppGetByDeploymentNameResponse {
+    /** Null when App with requested name is not deployed */
     appId: string;
+    /** Populated if App with requested name was recently stopped */
+    previousAppId: string;
+    /** Populated because server may resolve default environment */
+    environmentName: string;
+    /** Lifecycle of current App or recently stopped App */
+    lifecycle: AppLifecycle | undefined;
 }
 declare const AppGetByDeploymentNameResponse: MessageFns$1<AppGetByDeploymentNameResponse>;
 interface AppGetLayoutRequest {
@@ -524,6 +565,14 @@ interface AppGetLayoutResponse {
     appLayout: AppLayout | undefined;
 }
 declare const AppGetLayoutResponse: MessageFns$1<AppGetLayoutResponse>;
+interface AppGetLifecycleRequest {
+    appId: string;
+}
+declare const AppGetLifecycleRequest: MessageFns$1<AppGetLifecycleRequest>;
+interface AppGetLifecycleResponse {
+    lifecycle: AppLifecycle | undefined;
+}
+declare const AppGetLifecycleResponse: MessageFns$1<AppGetLifecycleResponse>;
 interface AppGetLogsRequest {
     appId: string;
     timeout: number;
@@ -535,6 +584,7 @@ interface AppGetLogsRequest {
     functionCallId: string;
     fileDescriptor: FileDescriptor;
     sandboxId: string;
+    searchText: string;
 }
 declare const AppGetLogsRequest: MessageFns$1<AppGetLogsRequest>;
 interface AppGetObjectsItem {
@@ -589,6 +639,23 @@ interface AppLayout {
     };
 }
 declare const AppLayout: MessageFns$1<AppLayout>;
+interface AppLifecycle {
+    appState: AppState;
+    createdAt: number;
+    /** User or service user name */
+    createdBy: string;
+    /** Most recent deployment event */
+    deployedAt: number;
+    /** User or service user name */
+    deployedBy: string;
+    /** Only meaningful when App is deployed */
+    version: number;
+    /** Unset when App is still running */
+    stoppedAt: number;
+    /** User or service user name, null if running or ephemeral App that finished normally */
+    stoppedBy: string;
+}
+declare const AppLifecycle: MessageFns$1<AppLifecycle>;
 interface AppListRequest {
     environmentName: string;
 }
@@ -659,6 +726,16 @@ interface AppRollbackRequest {
     version: number;
 }
 declare const AppRollbackRequest: MessageFns$1<AppRollbackRequest>;
+interface AppRolloverRequest {
+    appId: string;
+}
+declare const AppRolloverRequest: MessageFns$1<AppRolloverRequest>;
+interface AppRolloverResponse {
+    url: string;
+    serverWarnings: Warning[];
+    deployedAt: number;
+}
+declare const AppRolloverResponse: MessageFns$1<AppRolloverResponse>;
 interface AppSetObjectsRequest {
     appId: string;
     indexedObjectIds: {
@@ -733,7 +810,7 @@ interface AutoscalerSettings {
     maxContainers?: number | undefined;
     /** Additional container to spin up when Function is active */
     bufferContainers?: number | undefined;
-    /** Currently unused; a placeholder in case we decide to expose scaleup control to users */
+    /** Stabilization window (in seconds) before scaling up; requires sustained demand over this period */
     scaleupWindow?: number | undefined;
     /** Maximum amount of time a container can be idle before being scaled down, in seconds; pka "container_idle_timeout" */
     scaledownWindow?: number | undefined;
@@ -1169,6 +1246,7 @@ interface DictGetOrCreateRequest {
     deploymentName: string;
     environmentName: string;
     objectCreationType: ObjectCreationType;
+    /** Unused after 1.4.0 */
     data: DictEntry[];
 }
 declare const DictGetOrCreateRequest: MessageFns$1<DictGetOrCreateRequest>;
@@ -1274,14 +1352,85 @@ interface DomainListResponse {
     domains: Domain[];
 }
 declare const DomainListResponse: MessageFns$1<DomainListResponse>;
+interface EndpointComputeRegionSpec {
+    auto?: Empty | undefined;
+    colocated?: Empty | undefined;
+    explicit?: EndpointComputeRegionSpec_ExplicitRegions | undefined;
+}
+declare const EndpointComputeRegionSpec: MessageFns$1<EndpointComputeRegionSpec>;
+interface EndpointComputeRegionSpec_ExplicitRegions {
+    regions: string[];
+}
+declare const EndpointComputeRegionSpec_ExplicitRegions: MessageFns$1<EndpointComputeRegionSpec_ExplicitRegions>;
+interface EndpointCreateRequest {
+    name: string;
+    description: string;
+    proxyRegions: string[];
+    computeRegion: EndpointComputeRegionSpec | undefined;
+    model: EndpointModelSource | undefined;
+    apiSurfaces: EndpointApiSurface[];
+    inputModalities: EndpointInputModality[];
+    environmentName: string;
+}
+declare const EndpointCreateRequest: MessageFns$1<EndpointCreateRequest>;
+interface EndpointCreateResponse {
+    endpointId: string;
+}
+declare const EndpointCreateResponse: MessageFns$1<EndpointCreateResponse>;
+interface EndpointCustomModelSource {
+    baseModelRepoId: string;
+    huggingface?: EndpointHuggingFaceModelSource | undefined;
+    modalVolume?: EndpointModalVolumeModelSource | undefined;
+}
+declare const EndpointCustomModelSource: MessageFns$1<EndpointCustomModelSource>;
+interface EndpointHuggingFaceModelSource {
+    repoId: string;
+    revision: string;
+    huggingfaceToken: string;
+}
+declare const EndpointHuggingFaceModelSource: MessageFns$1<EndpointHuggingFaceModelSource>;
+interface EndpointModalVolumeModelSource {
+    volumeId: string;
+    modelPath: string;
+}
+declare const EndpointModalVolumeModelSource: MessageFns$1<EndpointModalVolumeModelSource>;
+interface EndpointModelSource {
+    baseModelRepoId?: string | undefined;
+    custom?: EndpointCustomModelSource | undefined;
+}
+declare const EndpointModelSource: MessageFns$1<EndpointModelSource>;
 interface EnvironmentCreateRequest {
     name: string;
+    isManaged: boolean;
 }
 declare const EnvironmentCreateRequest: MessageFns$1<EnvironmentCreateRequest>;
 interface EnvironmentDeleteRequest {
     name: string;
 }
 declare const EnvironmentDeleteRequest: MessageFns$1<EnvironmentDeleteRequest>;
+interface EnvironmentGetManagedRequest {
+    environmentId: string;
+}
+declare const EnvironmentGetManagedRequest: MessageFns$1<EnvironmentGetManagedRequest>;
+interface EnvironmentGetManagedResponse {
+    environmentId: string;
+    name: string;
+    createdAt: number;
+    principalRoles: EnvironmentGetManagedResponse_PrincipalEnvRole[];
+    additionalRoles: EnvironmentGetManagedResponse_PrincipalEnvRole[];
+}
+declare const EnvironmentGetManagedResponse: MessageFns$1<EnvironmentGetManagedResponse>;
+interface EnvironmentGetManagedResponse_PrincipalEnvRole {
+    userId: string;
+    serviceUserId: string;
+    email: string;
+    avatarUrl: string;
+    serviceUserName: string;
+    role: EnvironmentRole;
+    memberRole: MemberRole;
+    userName: string;
+}
+declare const EnvironmentGetManagedResponse_PrincipalEnvRole: MessageFns$1<EnvironmentGetManagedResponse_PrincipalEnvRole>;
 interface EnvironmentGetOrCreateRequest {
     deploymentName: string;
     objectCreationType: ObjectCreationType;
@@ -1314,6 +1463,18 @@ interface EnvironmentMetadata {
     settings: EnvironmentSettings | undefined;
 }
 declare const EnvironmentMetadata: MessageFns$1<EnvironmentMetadata>;
+interface EnvironmentRoleSetRequest {
+    environmentId: string;
+    userId: string;
+    serviceUserId: string;
+    role: EnvironmentRole;
+}
+declare const EnvironmentRoleSetRequest: MessageFns$1<EnvironmentRoleSetRequest>;
+interface EnvironmentSetManagedRequest {
+    environmentId: string;
+    managed: boolean;
+}
+declare const EnvironmentSetManagedRequest: MessageFns$1<EnvironmentSetManagedRequest>;
 /**
  * Environment-scoped settings, with workspace-level defaults.
  * Note that we use MergeFrom to combine workspace / environment settings,
@@ -1436,7 +1597,7 @@ interface FunctionMessage {
     objectDependencies: ObjectDependency[];
     blockNetwork: boolean;
     /**
-     * In the SDK, we've deprecated `max_inputs` (which only every implemented `max_inputs=1`)
+     * In the SDK, we've deprecated `max_inputs` (which only ever implemented `max_inputs=1`)
      * in favor of a boolean `single_use_containers` parameter.
      */
     maxInputs: number;
@@ -1473,6 +1634,8 @@ interface FunctionMessage {
     /**
      * _experimental_proxy_ip -> ProxyInfo
      * TODO: deprecate.
+     *
+     * @deprecated
      */
     ExperimentalProxyIp?: string | undefined;
     /** For internal debugging use only. */
@@ -1525,6 +1688,8 @@ interface FunctionMessage {
     singleUseContainers: boolean;
     /** When True, the function is a server function */
     isServer: boolean;
+    /** Where inputs to a function should be routed through. */
+    routingRegion: string;
 }
 declare const FunctionMessage: MessageFns$1<FunctionMessage>;
 interface FunctionAsyncInvokeRequest {
@@ -1675,6 +1840,8 @@ interface FunctionData {
     /**
      * _experimental_proxy_ip -> ProxyInfo
      * TODO: deprecate.
+     *
+     * @deprecated
      */
     ExperimentalProxyIp?: string | undefined;
     /** Mapping of method names to method definitions, only non-empty for class service functions */
@@ -1717,6 +1884,8 @@ interface FunctionData {
     implementationName: string;
     /** When True, the function is a server function */
     isServer: boolean;
+    /** Where inputs to a function should be routed through. */
+    routingRegion: string;
 }
 declare const FunctionData: MessageFns$1<FunctionData>;
 interface FunctionData_RankedFunction {
@@ -1731,7 +1900,6 @@ interface FunctionFinishInputsRequest {
 }
 declare const FunctionFinishInputsRequest: MessageFns$1<FunctionFinishInputsRequest>;
 interface FunctionGetCallGraphRequest {
-    /** TODO: use input_id once we switch client submit API to return those. */
     functionCallId: string;
 }
 declare const FunctionGetCallGraphRequest: MessageFns$1<FunctionGetCallGraphRequest>;
@@ -1764,6 +1932,7 @@ interface FunctionGetInputsItem {
     /** intercepted and only used by the worker. */
     functionMapIdx?: number | undefined;
     attemptToken: string;
+    fromInputPlane: boolean;
 }
 declare const FunctionGetInputsItem: MessageFns$1<FunctionGetInputsItem>;
 interface FunctionGetInputsRequest {
@@ -1987,6 +2156,8 @@ interface FunctionPutOutputsItem {
     functionCallId: string;
     /** injected by the worker */
     functionMapIdx?: number | undefined;
+    /** injected by the worker */
+    fromInputPlane: boolean;
 }
 declare const FunctionPutOutputsItem: MessageFns$1<FunctionPutOutputsItem>;
 interface FunctionPutOutputsRequest {
@@ -2029,6 +2200,7 @@ interface FunctionStats$1 {
     backlog: number;
     numTotalTasks: number;
     numRunningInputs: number;
+    inputHeadroom: number;
 }
 declare const FunctionStats$1: MessageFns$1<FunctionStats$1>;
 interface FunctionUpdateSchedulingParamsRequest {
@@ -2460,6 +2632,17 @@ interface PortSpecs {
     ports: PortSpec[];
 }
 declare const PortSpecs: MessageFns$1<PortSpecs>;
+interface Probe$1 {
+    tcpPort?: number | undefined;
+    execCommand?: Probe_ExecCommand | undefined;
+    intervalMs?: number | undefined;
+}
+declare const Probe$1: MessageFns$1<Probe$1>;
+interface Probe_ExecCommand {
+    /** Command and args to execute directly (argv form, not shell-parsed). */
+    argv: string[];
+}
+declare const Probe_ExecCommand: MessageFns$1<Probe_ExecCommand>;
 interface Proxy$1 {
     name: string;
     createdAt: number;
@@ -2717,6 +2900,7 @@ interface Sandbox$1 {
     nfsMounts: SharedVolumeMount[];
     /** For internal debugging use only. */
     runtimeDebug: boolean;
+    /** deprecated, use network_access instead */
     blockNetwork: boolean;
     s3Mounts: S3Mount[];
     cloudBucketMounts: CloudBucketMount$1[];
@@ -2762,9 +2946,9 @@ interface Sandbox$1 {
     /** Optional idle timeout in seconds. If set, the sandbox will be terminated after being idle for this duration. */
     idleTimeoutSecs?: number | undefined;
     /**
-     * If set, the sandbox will be created with direct sandbox commands enabled.
-     * Exec commands for the sandbox will be issued directly to the sandbox
-     * command router running on the Modal worker.
+     * Deprecated: direct sandbox commands are always enabled.
+     *
+     * @deprecated
      */
     directSandboxCommandsEnabled: boolean;
     /**
@@ -2781,6 +2965,13 @@ interface Sandbox$1 {
      * for OIDC-based authentication (e.g. to AWS, GCP).
      */
     includeOidcIdentityToken: boolean;
+    /** Probe used to determine when the sandbox has become ready. */
+    readinessProbe?: Probe$1 | undefined;
+    /**
+     * If set, only connections from these CIDRs will be allowed to connect to the sandbox
+     * (tunnels and auth proxy).
+     */
+    inboundCidrAllowlist: string[];
 }
 declare const Sandbox$1: MessageFns$1<Sandbox$1>;
 interface SandboxCreateConnectTokenRequest {
@@ -2798,6 +2989,7 @@ interface SandboxCreateRequest {
     definition: Sandbox$1 | undefined;
     /** DEPRECATED* 7/16/2025 */
     environmentName: string;
+    tags: SandboxTag[];
 }
 declare const SandboxCreateRequest: MessageFns$1<SandboxCreateRequest>;
 interface SandboxCreateResponse {
@@ -2812,8 +3004,28 @@ declare const SandboxCreateV2Request: MessageFns$1<SandboxCreateV2Request>;
 interface SandboxCreateV2Response {
     sandboxId: string;
     tunnels: TunnelData[];
+    taskId: string;
 }
 declare const SandboxCreateV2Response: MessageFns$1<SandboxCreateV2Response>;
+/**
+ * Used by the sandbox controller to get command router access for V2 sandboxes.
+ * For all other use cases, use TaskGetCommandRouterAccess instead.
+ */
+interface SandboxGetCommandRouterAccessRequest {
+    sandboxId: string;
+}
+declare const SandboxGetCommandRouterAccessRequest: MessageFns$1<SandboxGetCommandRouterAccessRequest>;
+interface SandboxGetCommandRouterAccessResponse {
+    jwt: string;
+    url: string;
+    /**
+     * Worker's public IPv4 address. When set, clients should connect directly
+     * to this IP while still using the URL's hostname for TLS SNI and the
+     * HTTP/2 :authority header.
+     */
+    workerIpv4Address: string;
+}
+declare const SandboxGetCommandRouterAccessResponse: MessageFns$1<SandboxGetCommandRouterAccessResponse>;
 interface SandboxGetFromNameRequest {
     sandboxName: string;
     environmentName: string;
@@ -2884,6 +3096,9 @@ interface SandboxInfo {
     regions: string[];
     timeoutSecs: number;
     idleTimeoutSecs?: number | undefined;
+    readyAt?: number | undefined;
+    readinessProbe?: Probe$1 | undefined;
+    tunnels: TunnelData[];
 }
 declare const SandboxInfo: MessageFns$1<SandboxInfo>;
 interface SandboxListRequest {
@@ -3004,6 +3219,15 @@ interface SandboxWaitResponse {
     result: GenericResult | undefined;
 }
 declare const SandboxWaitResponse: MessageFns$1<SandboxWaitResponse>;
+interface SandboxWaitUntilReadyRequest {
+    sandboxId: string;
+    timeout: number;
+}
+declare const SandboxWaitUntilReadyRequest: MessageFns$1<SandboxWaitUntilReadyRequest>;
+interface SandboxWaitUntilReadyResponse {
+    readyAt: number;
+}
+declare const SandboxWaitUntilReadyResponse: MessageFns$1<SandboxWaitUntilReadyResponse>;
 interface Schedule {
     cron?: Schedule_Cron | undefined;
     period?: Schedule_Period | undefined;
@@ -3096,12 +3320,26 @@ interface SecretUpdateRequest_Update {
     value?: string | undefined;
 }
 declare const SecretUpdateRequest_Update: MessageFns$1<SecretUpdateRequest_Update>;
+interface ServiceUser {
+    name: string;
+    tokenId: string;
+    createdBy: string;
+    createdAt: number;
+    lastUsedAt: number;
+    createdByAvatarUrl: string;
+    serviceUserId: string;
+}
+declare const ServiceUser: MessageFns$1<ServiceUser>;
 interface ServiceUserIdentity {
     serviceUserId: string;
     serviceUserName: string;
     createdBy: UserIdentity | undefined;
 }
 declare const ServiceUserIdentity: MessageFns$1<ServiceUserIdentity>;
+interface ServiceUserListResponse {
+    serviceUsers: ServiceUser[];
+}
+declare const ServiceUserListResponse: MessageFns$1<ServiceUserListResponse>;
 interface SharedVolumeDeleteRequest {
     sharedVolumeId: string;
 }
@@ -3220,6 +3458,15 @@ interface TaskGetCommandRouterAccessResponse {
     url: string;
 }
 declare const TaskGetCommandRouterAccessResponse: MessageFns$1<TaskGetCommandRouterAccessResponse>;
+interface TaskGetInfoRequest {
+    taskId: string;
+}
+declare const TaskGetInfoRequest: MessageFns$1<TaskGetInfoRequest>;
+interface TaskGetInfoResponse {
+    appId: string;
+    info: TaskInfo | undefined;
+}
+declare const TaskGetInfoResponse: MessageFns$1<TaskGetInfoResponse>;
 interface TaskInfo {
     id: string;
     startedAt: number;
@@ -3250,6 +3497,8 @@ interface TaskLogs {
     functionCallId: string;
     inputId: string;
     timestampNs: number;
+    containerId: string;
+    containerName: string;
 }
 declare const TaskLogs: MessageFns$1<TaskLogs>;
 interface TaskLogsBatch {
@@ -3299,6 +3548,19 @@ interface TaskTemplate {
     index: number;
 }
 declare const TaskTemplate: MessageFns$1<TaskTemplate>;
+interface TemplateListRequest {
+}
+declare const TemplateListRequest: MessageFns$1<TemplateListRequest>;
+interface TemplateListResponse {
+    items: TemplateListResponse_TemplateListItem[];
+}
+declare const TemplateListResponse: MessageFns$1<TemplateListResponse>;
+interface TemplateListResponse_TemplateListItem {
+    name: string;
+    repo: string;
+    ref: string;
+}
+declare const TemplateListResponse_TemplateListItem: MessageFns$1<TemplateListResponse_TemplateListItem>;
 interface TokenFlowCreateRequest {
     utmSource: string;
     localhostPort: number;
@@ -3528,6 +3790,7 @@ interface VolumeMount {
     mountPath: string;
     allowBackgroundCommits: boolean;
     readOnly: boolean;
+    subPath?: string | undefined;
 }
 declare const VolumeMount: MessageFns$1<VolumeMount>;
 interface VolumePutFiles2Request {
@@ -3693,6 +3956,23 @@ interface WorkspaceDashboardUrlResponse {
     url: string;
 }
 declare const WorkspaceDashboardUrlResponse: MessageFns$1<WorkspaceDashboardUrlResponse>;
+interface WorkspaceMembersListItem {
+    memberId: string;
+    memberDisplayname: string;
+    memberRole: MemberRole;
+    joinedAt: number;
+    lastActiveAt: number;
+    deletedAt: number;
+    userId: string;
+    identityProviderType: IdentityProviderType;
+    email: string;
+    avatarUrl: string;
+}
+declare const WorkspaceMembersListItem: MessageFns$1<WorkspaceMembersListItem>;
+interface WorkspaceMembersListResponse {
+    members: WorkspaceMembersListItem[];
+}
+declare const WorkspaceMembersListResponse: MessageFns$1<WorkspaceMembersListResponse>;
 interface WorkspaceNameLookupResponse {
     /** @deprecated */
     workspaceName: string;
@@ -3769,6 +4049,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly appGetLifecycle: {
+            readonly name: "AppGetLifecycle";
+            readonly requestType: MessageFns$1<AppGetLifecycleRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<AppGetLifecycleResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly appGetLogs: {
             readonly name: "AppGetLogs";
             readonly requestType: MessageFns$1<AppGetLogsRequest>;
@@ -3841,6 +4129,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly appRollover: {
+            readonly name: "AppRollover";
+            readonly requestType: MessageFns$1<AppRolloverRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<AppRolloverResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly appSetObjects: {
             readonly name: "AppSetObjects";
             readonly requestType: MessageFns$1<AppSetObjectsRequest>;
@@ -4178,6 +4474,15 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Endpoints */
+        readonly endpointCreate: {
+            readonly name: "EndpointCreate";
+            readonly requestType: MessageFns$1<EndpointCreateRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EndpointCreateResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** Environments */
         readonly environmentCreate: {
             readonly name: "EnvironmentCreate";
@@ -4195,6 +4500,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly environmentGetManaged: {
+            readonly name: "EnvironmentGetManaged";
+            readonly requestType: MessageFns$1<EnvironmentGetManagedRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EnvironmentGetManagedResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly environmentGetOrCreate: {
             readonly name: "EnvironmentGetOrCreate";
             readonly requestType: MessageFns$1<EnvironmentGetOrCreateRequest>;
@@ -4211,6 +4524,22 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly environmentRoleSet: {
+            readonly name: "EnvironmentRoleSet";
+            readonly requestType: MessageFns$1<EnvironmentRoleSetRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$2<Empty>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
+        readonly environmentSetManaged: {
+            readonly name: "EnvironmentSetManaged";
+            readonly requestType: MessageFns$1<EnvironmentSetManagedRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$2<Empty>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly environmentUpdate: {
             readonly name: "EnvironmentUpdate";
             readonly requestType: MessageFns$1<EnvironmentUpdateRequest>;
@@ -4696,6 +5025,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly sandboxGetCommandRouterAccess: {
+            readonly name: "SandboxGetCommandRouterAccess";
+            readonly requestType: MessageFns$1<SandboxGetCommandRouterAccessRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<SandboxGetCommandRouterAccessResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly sandboxGetFromName: {
             readonly name: "SandboxGetFromName";
             readonly requestType: MessageFns$1<SandboxGetFromNameRequest>;
@@ -4729,6 +5066,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly sandboxGetTaskIdV2: {
+            readonly name: "SandboxGetTaskIdV2";
+            readonly requestType: MessageFns$1<SandboxGetTaskIdRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<SandboxGetTaskIdResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly sandboxGetTunnels: {
             readonly name: "SandboxGetTunnels";
             readonly requestType: MessageFns$1<SandboxGetTunnelsRequest>;
@@ -4737,6 +5082,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly sandboxGetTunnelsV2: {
+            readonly name: "SandboxGetTunnelsV2";
+            readonly requestType: MessageFns$1<SandboxGetTunnelsRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<SandboxGetTunnelsResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly sandboxList: {
             readonly name: "SandboxList";
             readonly requestType: MessageFns$1<SandboxListRequest>;
@@ -4833,6 +5186,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly sandboxTerminateV2: {
+            readonly name: "SandboxTerminateV2";
+            readonly requestType: MessageFns$1<SandboxTerminateRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<SandboxTerminateResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly sandboxWait: {
             readonly name: "SandboxWait";
             readonly requestType: MessageFns$1<SandboxWaitRequest>;
@@ -4841,6 +5202,22 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly sandboxWaitUntilReady: {
+            readonly name: "SandboxWaitUntilReady";
+            readonly requestType: MessageFns$1<SandboxWaitUntilReadyRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<SandboxWaitUntilReadyResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
+        readonly sandboxWaitV2: {
+            readonly name: "SandboxWaitV2";
+            readonly requestType: MessageFns$1<SandboxWaitRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<SandboxWaitResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** Secrets */
         readonly secretDelete: {
             readonly name: "SecretDelete";
@@ -4874,6 +5251,15 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Service users */
+        readonly serviceUserList: {
+            readonly name: "ServiceUserList";
+            readonly requestType: MessageFns$2<Empty>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<ServiceUserListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** SharedVolumes */
         readonly sharedVolumeDelete: {
             readonly name: "SharedVolumeDelete";
@@ -4972,6 +5358,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly taskGetInfo: {
+            readonly name: "TaskGetInfo";
+            readonly requestType: MessageFns$1<TaskGetInfoRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<TaskGetInfoResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly taskList: {
             readonly name: "TaskList";
             readonly requestType: MessageFns$1<TaskListRequest>;
@@ -4988,6 +5382,15 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Templates */
+        readonly templateList: {
+            readonly name: "TemplateList";
+            readonly requestType: MessageFns$1<TemplateListRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<TemplateListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** Tokens (web auth flow) */
         readonly tokenFlowCreate: {
             readonly name: "TokenFlowCreate";
@@ -5192,6 +5595,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly workspaceMembersList: {
+            readonly name: "WorkspaceMembersList";
+            readonly requestType: MessageFns$2<Empty>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<WorkspaceMembersListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly workspaceNameLookup: {
             readonly name: "WorkspaceNameLookup";
             readonly requestType: MessageFns$2<Empty>;
@@ -5403,8 +5814,8 @@ declare class Function_ {
     getCurrentStats(): Promise<FunctionStats>;
     updateAutoscaler(params: FunctionUpdateAutoscalerParams): Promise<void>;
     /**
-     * URL of a Function running as a web endpoint.
-     * @returns The web URL if this Function is a web endpoint, otherwise undefined
+     * URL for addressing the Web Function via HTTP.
+     * @returns The web URL, or undefined if this is not a Web Function
      */
     getWebUrl(): Promise<string | undefined>;
 }
@@ -5932,6 +6343,12 @@ interface TaskExecStartRequest {
      * internal debugging.
      */
     runtimeDebug: boolean;
+    /** Fully qualified target container ID. Empty targets the main container. */
+    containerId: string;
+    /** Environment variables to set directly for the exec'd command. */
+    env: {
+        [key: string]: string;
+    };
 }
 declare const TaskExecStartRequest: MessageFns<TaskExecStartRequest>;
 interface TaskExecStartResponse {
@@ -5961,12 +6378,53 @@ declare const TaskMountDirectoryRequest: MessageFns<TaskMountDirectoryRequest>;
 interface TaskSnapshotDirectoryRequest {
     taskId: string;
     path: Uint8Array;
+    /** A unique ID to ensure idempotency of directory snapshot requests. */
+    snapshotId: string;
+    /**
+     * Lifetime for the resulting image, in seconds. When set, the
+     * image's expires_at is a hard cutoff: it is fixed at creation time
+     * and is not extended on use.
+     *
+     * When unset, the resulting image gets the legacy retention policy:
+     * a 30-day TTL that is bumped forward by 30 days on every use, so
+     * active images effectively never expire.
+     *
+     * Sentinel: -1 means "no expiry" (the image never expires).
+     * 0 and other negative values are invalid and rejected by the
+     * server.
+     */
+    ttlSeconds?: number | undefined;
 }
 declare const TaskSnapshotDirectoryRequest: MessageFns<TaskSnapshotDirectoryRequest>;
 interface TaskSnapshotDirectoryResponse {
     imageId: string;
 }
 declare const TaskSnapshotDirectoryResponse: MessageFns<TaskSnapshotDirectoryResponse>;
+interface TaskSnapshotFilesystemRequest {
+    taskId: string;
+    /** A unique ID to ensure idempotency of filesystem snapshot requests. */
+    snapshotId: string;
+    /**
+     * Lifetime for the resulting image, in seconds. Must be set. When positive,
+     * the image expiry is a hard cutoff: it is fixed at creation time and is
+     * not extended on use.
+     *
+     * Sentinel: -1 means "no expiry" (the image never expires).
+     * 0 and other negative values are invalid and rejected by the
+     * server.
+     */
+    ttlSeconds?: number | undefined;
+}
+declare const TaskSnapshotFilesystemRequest: MessageFns<TaskSnapshotFilesystemRequest>;
+interface TaskSnapshotFilesystemResponse {
+    imageId: string;
+}
+declare const TaskSnapshotFilesystemResponse: MessageFns<TaskSnapshotFilesystemResponse>;
+interface TaskUnmountDirectoryRequest {
+    taskId: string;
+    path: Uint8Array;
+}
+declare const TaskUnmountDirectoryRequest: MessageFns<TaskUnmountDirectoryRequest>;
 type Builtin = Date | Function | Uint8Array | string | number | boolean | undefined;
 type DeepPartial<T> = T extends Builtin ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends {} ? {
     [K in keyof T]?: DeepPartial<T[K]>;
@@ -5996,6 +6454,8 @@ interface Profile {
     environment?: string;
     imageBuilderVersion?: string;
     logLevel?: string;
+    /** Parsed from MODAL_MAX_THROTTLE_WAIT. null means unlimited. */
+    maxThrottleWaitSecs?: number;
 }
 
 /** @ignore */
@@ -6004,13 +6464,15 @@ declare class TaskCommandRouterClientImpl {
     private channel;
     private serverClient;
     private taskId;
+    private sandboxId;
+    private isV2;
     private serverUrl;
     private jwt;
     private jwtExp;
     private jwtRefreshLock;
     private logger;
     private closed;
-    static tryInit(serverClient: ModalGrpcClient, taskId: string, logger: Logger, profile: Profile): Promise<TaskCommandRouterClientImpl | null>;
+    static tryInit(serverClient: ModalGrpcClient, taskId: string, sandboxId: string, isV2: boolean, logger: Logger, profile: Profile): Promise<TaskCommandRouterClientImpl | null>;
     private constructor();
     close(): void;
     execStart(request: TaskExecStartRequest): Promise<TaskExecStartResponse>;
@@ -6020,6 +6482,8 @@ declare class TaskCommandRouterClientImpl {
     execWait(taskId: string, execId: string, deadline?: number | null): Promise<TaskExecWaitResponse>;
     mountDirectory(request: TaskMountDirectoryRequest): Promise<void>;
     snapshotDirectory(request: TaskSnapshotDirectoryRequest): Promise<TaskSnapshotDirectoryResponse>;
+    snapshotFilesystem(request: TaskSnapshotFilesystemRequest, options?: TimeoutOptions): Promise<TaskSnapshotFilesystemResponse>;
+    unmountDirectory(request: TaskUnmountDirectoryRequest): Promise<void>;
     private refreshJwt;
     private callWithAuthRetry;
     private streamStdio;
@@ -6042,7 +6506,7 @@ declare class SandboxFile {
     read(): Promise<Uint8Array>;
     /**
      * Write data to the file.
-     * @param data - Data to write (string or Uint8Array)
+     * @param data - Data to write
      */
     write(data: Uint8Array): Promise<void>;
     /**
@@ -6105,6 +6569,19 @@ type StdioBehavior = "pipe" | "ignore";
  * means the data will be read as raw bytes (Uint8Array).
  */
 type StreamMode = "text" | "binary";
+/** Optional parameters for {@link Probe.withTcp} and {@link Probe.withExec}. */
+type ProbeParams = {
+    intervalMs: number;
+};
+/** Probe configuration for sandbox readiness checks. */
+declare class Probe {
+    #private;
+    private constructor();
+    static withTcp(port: number, params?: ProbeParams): Probe;
+    static withExec(argv: string[], params?: ProbeParams): Probe;
+    /** @ignore */
+    toProto(): Probe$1;
+}
 /** Optional parameters for {@link SandboxService#create client.sandboxes.create()}. */
 type SandboxCreateParams = {
     /** Reservation of physical CPU cores for the Sandbox, can be fractional. */
@@ -6136,7 +6613,8 @@ type SandboxCreateParams = {
     volumes?: Record<string, Volume>;
     /** Mount points for {@link CloudBucketMount}s. */
     cloudBucketMounts?: Record<string, CloudBucketMount>;
-    /** Enable a PTY for the Sandbox. */
+    /** Enable a PTY for the Sandbox entrypoint command. When enabled, all output (stdout and
+     * stderr from the process) is multiplexed into stdout, and the stderr stream is effectively empty. */
     pty?: boolean;
     /** List of ports to tunnel into the Sandbox. Encrypted ports are tunneled with TLS. */
     encryptedPorts?: number[];
@@ -6146,8 +6624,14 @@ type SandboxCreateParams = {
     unencryptedPorts?: number[];
     /** Whether to block all network access from the Sandbox. */
     blockNetwork?: boolean;
-    /** List of CIDRs the Sandbox is allowed to access. If None, all CIDRs are allowed. Cannot be used with blockNetwork. */
+    /** List of CIDRs the Sandbox is allowed to access. If not set, all CIDRs are allowed. Cannot be used with blockNetwork. */
+    outboundCidrAllowlist?: string[];
+    /**
+     * @deprecated Use {@link outboundCidrAllowlist} instead.
+     */
     cidrAllowlist?: string[];
+    /** List of CIDRs allowed to connect inbound to the Sandbox (tunnels and connection tokens). If not set, all IPs are allowed. Cannot be used with blockNetwork. */
+    inboundCidrAllowlist?: string[];
     /** Cloud provider to run the Sandbox on. */
     cloud?: string;
     /** Region(s) to run the Sandbox on. */
@@ -6156,14 +6640,20 @@ type SandboxCreateParams = {
     verbose?: boolean;
     /** Reference to a Modal {@link Proxy} to use in front of this Sandbox. */
     proxy?: Proxy;
+    /** Probe used to determine when the Sandbox has become ready. */
+    readinessProbe?: Probe;
     /** Optional name for the Sandbox. Unique within an App. */
     name?: string;
+    /** Tags to attach to the Sandbox. Filterable via {@link SandboxService#list Sandbox.list}. */
+    tags?: Record<string, string>;
     /** Optional experimental options. */
     experimentalOptions?: Record<string, any>;
     /** If set, connections to this Sandbox will be subdomains of this domain rather than the default.
      * This requires prior manual setup by Modal and is only available for Enterprise customers.
      */
     customDomain?: string;
+    /** If true, the sandbox will receive a MODAL_IDENTITY_TOKEN env var for OIDC-based auth (e.g. to AWS, GCP). */
+    includeOidcIdentityToken?: boolean;
 };
 /**
  * Service for managing {@link Sandbox}es.
@@ -6181,6 +6671,10 @@ declare class SandboxService {
      * Create a new {@link Sandbox} in the {@link App} with the specified {@link Image} and options.
      */
     create(app: App, image: Image, params?: SandboxCreateParams): Promise<Sandbox>;
+    /**
+     * Create a new {@link Sandbox} using the experimental V2 backend.
+     */
+    experimentalCreate(app: App, image: Image, params?: SandboxCreateParams): Promise<Sandbox>;
     /** Returns a running {@link Sandbox} object from an ID.
      *
      * @returns Sandbox with ID
@@ -6232,7 +6726,8 @@ type SandboxExecParams = {
     env?: Record<string, string>;
     /** {@link Secret}s to inject as environment variables for the commmand.*/
     secrets?: Secret[];
-    /** Enable a PTY for the command. */
+    /** Enable a PTY for the command. When enabled, all output (stdout and stderr from the
+     * process) is multiplexed into stdout, and the stderr stream is effectively empty. */
     pty?: boolean;
 };
 /** Optional parameters for {@link Sandbox#createConnectToken Sandbox.createConnectToken()}. */
@@ -6269,7 +6764,11 @@ declare class Sandbox {
     #private;
     readonly sandboxId: string;
     /** @ignore */
-    constructor(client: ModalClient, sandboxId: string);
+    constructor(client: ModalClient, sandboxId: string, params?: {
+        isV2?: boolean;
+        taskId?: string;
+        tunnels?: Record<number, Tunnel>;
+    });
     get stdin(): ModalWriteStream<string>;
     get stdout(): ModalReadStream<string>;
     get stderr(): ModalReadStream<string>;
@@ -6313,6 +6812,16 @@ declare class Sandbox {
      */
     detach(): void;
     wait(): Promise<number>;
+    /**
+     * Wait until the Sandbox readiness probe reports the Sandbox is ready.
+     *
+     * This method only works for Sandboxes configured with a readiness probe.
+     *
+     * @param timeoutMs - Maximum total time to wait, in milliseconds.
+     * @returns A promise that resolves once the Sandbox is ready.
+     * @throws {@link TimeoutError} If readiness is not reported before `timeoutMs`.
+     */
+    waitUntilReady(timeoutMs?: number): Promise<void>;
     /** Get {@link Tunnel} metadata for the Sandbox.
      *
      * Raises {@link SandboxTimeoutError} if the tunnels are not available after the timeout.
@@ -6325,7 +6834,11 @@ declare class Sandbox {
      *
      * Returns an {@link Image} object which can be used to spawn a new Sandbox with the same filesystem.
      *
-     * @param timeoutMs - Timeout for the snapshot operation in milliseconds
+     * `timeoutMs` is propagated as the gRPC deadline. If the snapshot does
+     * not return within that window, the call is cancelled and an error is
+     * thrown.
+     *
+     * @param timeoutMs - Timeout for the snapshot operation in milliseconds.
      * @returns Promise that resolves to an {@link Image}
      */
     snapshotFilesystem(timeoutMs?: number): Promise<Image>;
@@ -6336,9 +6849,18 @@ declare class Sandbox {
      * @param image - Optional {@link Image} to mount. If undefined, mounts an empty directory.
      */
     mountImage(path: string, image?: Image): Promise<void>;
+    /**
+     * Unmounts an {@link Image} previously mounted at a path in the Sandbox filesystem.
+     *
+     * @param path - The mount path to unmount
+     */
+    unmountImage(path: string): Promise<void>;
     /**
      * Snapshots and creates a new {@link Image} from a directory in the running sandbox.
      *
+     * Directory snapshots are currently persisted for 30 days after they
+     * were created.
+     *
      * @param path - The path of the directory to snapshot
      * @returns Promise that resolves to an {@link Image}
      */
@@ -6372,6 +6894,7 @@ interface ModalClientParams {
     endpoint?: string;
     timeoutMs?: number;
     maxRetries?: number;
+    maxThrottleWaitSecs?: number;
     logger?: Logger;
     logLevel?: LogLevel;
     /**
@@ -6534,6 +7057,10 @@ declare class App {
     imageFromGcpArtifactRegistry(tag: string, secret: Secret): Promise<Image>;
 }
 
+/** An operation exceeds the allowed time limit. */
+declare class TimeoutError extends Error {
+    constructor(message?: string);
+}
 /** Function execution exceeds the allowed time limit. */
 declare class FunctionTimeoutError extends Error {
     constructor(message: string);
@@ -6577,4 +7104,4 @@ declare class ClientClosedError extends Error {
 
 declare function checkForRenamedParams(params: any, renames: Record<string, string>): void;
 
-export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, type SandboxFromNameParams, type SandboxListParams, SandboxService, type SandboxTerminateParams, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, VolumeService, checkForRenamedParams, close, initializeClient };
+export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, type SandboxFromNameParams, type SandboxListParams, SandboxService, type SandboxTerminateParams, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, VolumeService, checkForRenamedParams, close, initializeClient };