modal 0.7.4 → 0.7.5

package/dist/index.d.cts

@@ -126,6 +126,26 @@ declare enum DeploymentNamespace {
     DEPLOYMENT_NAMESPACE_GLOBAL = 3,
     UNRECOGNIZED = -1
 }
+declare enum EndpointApiSurface {
+    ENDPOINT_API_SURFACE_UNSPECIFIED = 0,
+    ENDPOINT_API_SURFACE_OPENAI_CHAT_COMPLETIONS = 1,
+    ENDPOINT_API_SURFACE_OPENAI_RESPONSES = 2,
+    ENDPOINT_API_SURFACE_ANTHROPIC_MESSAGES = 3,
+    UNRECOGNIZED = -1
+}
+declare enum EndpointInputModality {
+    ENDPOINT_INPUT_MODALITY_UNSPECIFIED = 0,
+    ENDPOINT_INPUT_MODALITY_TEXT = 1,
+    ENDPOINT_INPUT_MODALITY_IMAGE = 2,
+    ENDPOINT_INPUT_MODALITY_AUDIO = 3,
+    UNRECOGNIZED = -1
+}
+declare enum EnvironmentRole {
+    ENVIRONMENT_ROLE_UNSPECIFIED = 0,
+    ENVIRONMENT_ROLE_VIEWER = 1,
+    ENVIRONMENT_ROLE_CONTRIBUTOR = 2,
+    UNRECOGNIZED = -1
+}
 declare enum ExecOutputOption {
     EXEC_OUTPUT_OPTION_UNSPECIFIED = 0,
     EXEC_OUTPUT_OPTION_DEVNULL = 1,
@@ -171,6 +191,20 @@ declare enum GPUType {
     GPU_TYPE_H200 = 12,
     UNRECOGNIZED = -1
 }
+declare enum IdentityProviderType {
+    IDENTITY_PROVIDER_TYPE_UNSPECIFIED = 0,
+    IDENTITY_PROVIDER_TYPE_GITHUB = 1,
+    IDENTITY_PROVIDER_TYPE_OKTA = 2,
+    IDENTITY_PROVIDER_TYPE_GOOGLE_OAUTH = 3,
+    UNRECOGNIZED = -1
+}
+declare enum MemberRole {
+    MEMBER_ROLE_UNSPECIFIED = 0,
+    MEMBER_ROLE_USER = 1,
+    MEMBER_ROLE_MANAGER = 2,
+    MEMBER_ROLE_OWNER = 3,
+    UNRECOGNIZED = -1
+}
 declare enum ObjectCreationType {
     /** OBJECT_CREATION_TYPE_UNSPECIFIED - just lookup */
     OBJECT_CREATION_TYPE_UNSPECIFIED = 0,
@@ -513,7 +547,14 @@ interface AppGetByDeploymentNameRequest {
 }
 declare const AppGetByDeploymentNameRequest: MessageFns$1<AppGetByDeploymentNameRequest>;
 interface AppGetByDeploymentNameResponse {
+    /** Null when App with requested name is not deployed */
     appId: string;
+    /** Populated if App with requested name was recently stopped */
+    previousAppId: string;
+    /** Populated because server may resolve default environment */
+    environmentName: string;
+    /** Lifecycle of current App or recently stopped App */
+    lifecycle: AppLifecycle | undefined;
 }
 declare const AppGetByDeploymentNameResponse: MessageFns$1<AppGetByDeploymentNameResponse>;
 interface AppGetLayoutRequest {
@@ -769,7 +810,7 @@ interface AutoscalerSettings {
     maxContainers?: number | undefined;
     /** Additional container to spin up when Function is active */
     bufferContainers?: number | undefined;
-    /** Currently unused; a placeholder in case we decide to expose scaleup control to users */
+    /** Stabilization window (in seconds) before scaling up; requires sustained demand over this period */
     scaleupWindow?: number | undefined;
     /** Maximum amount of time a container can be idle before being scaled down, in seconds; pka "container_idle_timeout" */
     scaledownWindow?: number | undefined;
@@ -1311,14 +1352,85 @@ interface DomainListResponse {
     domains: Domain[];
 }
 declare const DomainListResponse: MessageFns$1<DomainListResponse>;
+interface EndpointComputeRegionSpec {
+    auto?: Empty | undefined;
+    colocated?: Empty | undefined;
+    explicit?: EndpointComputeRegionSpec_ExplicitRegions | undefined;
+}
+declare const EndpointComputeRegionSpec: MessageFns$1<EndpointComputeRegionSpec>;
+interface EndpointComputeRegionSpec_ExplicitRegions {
+    regions: string[];
+}
+declare const EndpointComputeRegionSpec_ExplicitRegions: MessageFns$1<EndpointComputeRegionSpec_ExplicitRegions>;
+interface EndpointCreateRequest {
+    name: string;
+    description: string;
+    proxyRegions: string[];
+    computeRegion: EndpointComputeRegionSpec | undefined;
+    model: EndpointModelSource | undefined;
+    apiSurfaces: EndpointApiSurface[];
+    inputModalities: EndpointInputModality[];
+    environmentName: string;
+}
+declare const EndpointCreateRequest: MessageFns$1<EndpointCreateRequest>;
+interface EndpointCreateResponse {
+    endpointId: string;
+}
+declare const EndpointCreateResponse: MessageFns$1<EndpointCreateResponse>;
+interface EndpointCustomModelSource {
+    baseModelRepoId: string;
+    huggingface?: EndpointHuggingFaceModelSource | undefined;
+    modalVolume?: EndpointModalVolumeModelSource | undefined;
+}
+declare const EndpointCustomModelSource: MessageFns$1<EndpointCustomModelSource>;
+interface EndpointHuggingFaceModelSource {
+    repoId: string;
+    revision: string;
+    huggingfaceToken: string;
+}
+declare const EndpointHuggingFaceModelSource: MessageFns$1<EndpointHuggingFaceModelSource>;
+interface EndpointModalVolumeModelSource {
+    volumeId: string;
+    modelPath: string;
+}
+declare const EndpointModalVolumeModelSource: MessageFns$1<EndpointModalVolumeModelSource>;
+interface EndpointModelSource {
+    baseModelRepoId?: string | undefined;
+    custom?: EndpointCustomModelSource | undefined;
+}
+declare const EndpointModelSource: MessageFns$1<EndpointModelSource>;
 interface EnvironmentCreateRequest {
     name: string;
+    isManaged: boolean;
 }
 declare const EnvironmentCreateRequest: MessageFns$1<EnvironmentCreateRequest>;
 interface EnvironmentDeleteRequest {
     name: string;
 }
 declare const EnvironmentDeleteRequest: MessageFns$1<EnvironmentDeleteRequest>;
+interface EnvironmentGetManagedRequest {
+    environmentId: string;
+}
+declare const EnvironmentGetManagedRequest: MessageFns$1<EnvironmentGetManagedRequest>;
+interface EnvironmentGetManagedResponse {
+    environmentId: string;
+    name: string;
+    createdAt: number;
+    principalRoles: EnvironmentGetManagedResponse_PrincipalEnvRole[];
+    additionalRoles: EnvironmentGetManagedResponse_PrincipalEnvRole[];
+}
+declare const EnvironmentGetManagedResponse: MessageFns$1<EnvironmentGetManagedResponse>;
+interface EnvironmentGetManagedResponse_PrincipalEnvRole {
+    userId: string;
+    serviceUserId: string;
+    email: string;
+    avatarUrl: string;
+    serviceUserName: string;
+    role: EnvironmentRole;
+    memberRole: MemberRole;
+    userName: string;
+}
+declare const EnvironmentGetManagedResponse_PrincipalEnvRole: MessageFns$1<EnvironmentGetManagedResponse_PrincipalEnvRole>;
 interface EnvironmentGetOrCreateRequest {
     deploymentName: string;
     objectCreationType: ObjectCreationType;
@@ -1351,6 +1463,18 @@ interface EnvironmentMetadata {
     settings: EnvironmentSettings | undefined;
 }
 declare const EnvironmentMetadata: MessageFns$1<EnvironmentMetadata>;
+interface EnvironmentRoleSetRequest {
+    environmentId: string;
+    userId: string;
+    serviceUserId: string;
+    role: EnvironmentRole;
+}
+declare const EnvironmentRoleSetRequest: MessageFns$1<EnvironmentRoleSetRequest>;
+interface EnvironmentSetManagedRequest {
+    environmentId: string;
+    managed: boolean;
+}
+declare const EnvironmentSetManagedRequest: MessageFns$1<EnvironmentSetManagedRequest>;
 /**
  * Environment-scoped settings, with workspace-level defaults.
  * Note that we use MergeFrom to combine workspace / environment settings,
@@ -1473,7 +1597,7 @@ interface FunctionMessage {
     objectDependencies: ObjectDependency[];
     blockNetwork: boolean;
     /**
-     * In the SDK, we've deprecated `max_inputs` (which only every implemented `max_inputs=1`)
+     * In the SDK, we've deprecated `max_inputs` (which only ever implemented `max_inputs=1`)
      * in favor of a boolean `single_use_containers` parameter.
      */
     maxInputs: number;
@@ -1510,6 +1634,8 @@ interface FunctionMessage {
     /**
      * _experimental_proxy_ip -> ProxyInfo
      * TODO: deprecate.
+     *
+     * @deprecated
      */
     ExperimentalProxyIp?: string | undefined;
     /** For internal debugging use only. */
@@ -1562,6 +1688,8 @@ interface FunctionMessage {
     singleUseContainers: boolean;
     /** When True, the function is a server function */
     isServer: boolean;
+    /** Where inputs to a function should be routed through. */
+    routingRegion: string;
 }
 declare const FunctionMessage: MessageFns$1<FunctionMessage>;
 interface FunctionAsyncInvokeRequest {
@@ -1712,6 +1840,8 @@ interface FunctionData {
     /**
      * _experimental_proxy_ip -> ProxyInfo
      * TODO: deprecate.
+     *
+     * @deprecated
      */
     ExperimentalProxyIp?: string | undefined;
     /** Mapping of method names to method definitions, only non-empty for class service functions */
@@ -1754,6 +1884,8 @@ interface FunctionData {
     implementationName: string;
     /** When True, the function is a server function */
     isServer: boolean;
+    /** Where inputs to a function should be routed through. */
+    routingRegion: string;
 }
 declare const FunctionData: MessageFns$1<FunctionData>;
 interface FunctionData_RankedFunction {
@@ -1768,7 +1900,6 @@ interface FunctionFinishInputsRequest {
 }
 declare const FunctionFinishInputsRequest: MessageFns$1<FunctionFinishInputsRequest>;
 interface FunctionGetCallGraphRequest {
-    /** TODO: use input_id once we switch client submit API to return those. */
     functionCallId: string;
 }
 declare const FunctionGetCallGraphRequest: MessageFns$1<FunctionGetCallGraphRequest>;
@@ -1801,6 +1932,7 @@ interface FunctionGetInputsItem {
     /** intercepted and only used by the worker. */
     functionMapIdx?: number | undefined;
     attemptToken: string;
+    fromInputPlane: boolean;
 }
 declare const FunctionGetInputsItem: MessageFns$1<FunctionGetInputsItem>;
 interface FunctionGetInputsRequest {
@@ -2024,6 +2156,8 @@ interface FunctionPutOutputsItem {
     functionCallId: string;
     /** injected by the worker */
     functionMapIdx?: number | undefined;
+    /** injected by the worker */
+    fromInputPlane: boolean;
 }
 declare const FunctionPutOutputsItem: MessageFns$1<FunctionPutOutputsItem>;
 interface FunctionPutOutputsRequest {
@@ -2066,6 +2200,7 @@ interface FunctionStats$1 {
     backlog: number;
     numTotalTasks: number;
     numRunningInputs: number;
+    inputHeadroom: number;
 }
 declare const FunctionStats$1: MessageFns$1<FunctionStats$1>;
 interface FunctionUpdateSchedulingParamsRequest {
@@ -2811,9 +2946,9 @@ interface Sandbox$1 {
     /** Optional idle timeout in seconds. If set, the sandbox will be terminated after being idle for this duration. */
     idleTimeoutSecs?: number | undefined;
     /**
-     * If set, the sandbox will be created with direct sandbox commands enabled.
-     * Exec commands for the sandbox will be issued directly to the sandbox
-     * command router running on the Modal worker.
+     * Deprecated: direct sandbox commands are always enabled.
+     *
+     * @deprecated
      */
     directSandboxCommandsEnabled: boolean;
     /**
@@ -2832,6 +2967,11 @@ interface Sandbox$1 {
     includeOidcIdentityToken: boolean;
     /** Probe used to determine when the sandbox has become ready. */
     readinessProbe?: Probe$1 | undefined;
+    /**
+     * If set, only connections from these CIDRs will be allowed to connect to the sandbox
+     * (tunnels and auth proxy).
+     */
+    inboundCidrAllowlist: string[];
 }
 declare const Sandbox$1: MessageFns$1<Sandbox$1>;
 interface SandboxCreateConnectTokenRequest {
@@ -2849,6 +2989,7 @@ interface SandboxCreateRequest {
     definition: Sandbox$1 | undefined;
     /** DEPRECATED* 7/16/2025 */
     environmentName: string;
+    tags: SandboxTag[];
 }
 declare const SandboxCreateRequest: MessageFns$1<SandboxCreateRequest>;
 interface SandboxCreateResponse {
@@ -2877,6 +3018,12 @@ declare const SandboxGetCommandRouterAccessRequest: MessageFns$1<SandboxGetComma
 interface SandboxGetCommandRouterAccessResponse {
     jwt: string;
     url: string;
+    /**
+     * Worker's public IPv4 address. When set, clients should connect directly
+     * to this IP while still using the URL's hostname for TLS SNI and the
+     * HTTP/2 :authority header.
+     */
+    workerIpv4Address: string;
 }
 declare const SandboxGetCommandRouterAccessResponse: MessageFns$1<SandboxGetCommandRouterAccessResponse>;
 interface SandboxGetFromNameRequest {
@@ -2950,6 +3097,8 @@ interface SandboxInfo {
     timeoutSecs: number;
     idleTimeoutSecs?: number | undefined;
     readyAt?: number | undefined;
+    readinessProbe?: Probe$1 | undefined;
+    tunnels: TunnelData[];
 }
 declare const SandboxInfo: MessageFns$1<SandboxInfo>;
 interface SandboxListRequest {
@@ -3171,12 +3320,26 @@ interface SecretUpdateRequest_Update {
     value?: string | undefined;
 }
 declare const SecretUpdateRequest_Update: MessageFns$1<SecretUpdateRequest_Update>;
+interface ServiceUser {
+    name: string;
+    tokenId: string;
+    createdBy: string;
+    createdAt: number;
+    lastUsedAt: number;
+    createdByAvatarUrl: string;
+    serviceUserId: string;
+}
+declare const ServiceUser: MessageFns$1<ServiceUser>;
 interface ServiceUserIdentity {
     serviceUserId: string;
     serviceUserName: string;
     createdBy: UserIdentity | undefined;
 }
 declare const ServiceUserIdentity: MessageFns$1<ServiceUserIdentity>;
+interface ServiceUserListResponse {
+    serviceUsers: ServiceUser[];
+}
+declare const ServiceUserListResponse: MessageFns$1<ServiceUserListResponse>;
 interface SharedVolumeDeleteRequest {
     sharedVolumeId: string;
 }
@@ -3627,6 +3790,7 @@ interface VolumeMount {
     mountPath: string;
     allowBackgroundCommits: boolean;
     readOnly: boolean;
+    subPath?: string | undefined;
 }
 declare const VolumeMount: MessageFns$1<VolumeMount>;
 interface VolumePutFiles2Request {
@@ -3792,6 +3956,23 @@ interface WorkspaceDashboardUrlResponse {
     url: string;
 }
 declare const WorkspaceDashboardUrlResponse: MessageFns$1<WorkspaceDashboardUrlResponse>;
+interface WorkspaceMembersListItem {
+    memberId: string;
+    memberDisplayname: string;
+    memberRole: MemberRole;
+    joinedAt: number;
+    lastActiveAt: number;
+    deletedAt: number;
+    userId: string;
+    identityProviderType: IdentityProviderType;
+    email: string;
+    avatarUrl: string;
+}
+declare const WorkspaceMembersListItem: MessageFns$1<WorkspaceMembersListItem>;
+interface WorkspaceMembersListResponse {
+    members: WorkspaceMembersListItem[];
+}
+declare const WorkspaceMembersListResponse: MessageFns$1<WorkspaceMembersListResponse>;
 interface WorkspaceNameLookupResponse {
     /** @deprecated */
     workspaceName: string;
@@ -4293,6 +4474,15 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Endpoints */
+        readonly endpointCreate: {
+            readonly name: "EndpointCreate";
+            readonly requestType: MessageFns$1<EndpointCreateRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EndpointCreateResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** Environments */
         readonly environmentCreate: {
             readonly name: "EnvironmentCreate";
@@ -4310,6 +4500,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly environmentGetManaged: {
+            readonly name: "EnvironmentGetManaged";
+            readonly requestType: MessageFns$1<EnvironmentGetManagedRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EnvironmentGetManagedResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly environmentGetOrCreate: {
             readonly name: "EnvironmentGetOrCreate";
             readonly requestType: MessageFns$1<EnvironmentGetOrCreateRequest>;
@@ -4326,6 +4524,22 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly environmentRoleSet: {
+            readonly name: "EnvironmentRoleSet";
+            readonly requestType: MessageFns$1<EnvironmentRoleSetRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$2<Empty>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
+        readonly environmentSetManaged: {
+            readonly name: "EnvironmentSetManaged";
+            readonly requestType: MessageFns$1<EnvironmentSetManagedRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$2<Empty>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly environmentUpdate: {
             readonly name: "EnvironmentUpdate";
             readonly requestType: MessageFns$1<EnvironmentUpdateRequest>;
@@ -5037,6 +5251,15 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Service users */
+        readonly serviceUserList: {
+            readonly name: "ServiceUserList";
+            readonly requestType: MessageFns$2<Empty>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<ServiceUserListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** SharedVolumes */
         readonly sharedVolumeDelete: {
             readonly name: "SharedVolumeDelete";
@@ -5372,6 +5595,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly workspaceMembersList: {
+            readonly name: "WorkspaceMembersList";
+            readonly requestType: MessageFns$2<Empty>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<WorkspaceMembersListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly workspaceNameLookup: {
             readonly name: "WorkspaceNameLookup";
             readonly requestType: MessageFns$2<Empty>;
@@ -5583,8 +5814,8 @@ declare class Function_ {
     getCurrentStats(): Promise<FunctionStats>;
     updateAutoscaler(params: FunctionUpdateAutoscalerParams): Promise<void>;
     /**
-     * URL of a Function running as a web endpoint.
-     * @returns The web URL if this Function is a web endpoint, otherwise undefined
+     * URL for addressing the Web Function via HTTP.
+     * @returns The web URL, or undefined if this is not a Web Function
      */
     getWebUrl(): Promise<string | undefined>;
 }
@@ -6147,12 +6378,53 @@ declare const TaskMountDirectoryRequest: MessageFns<TaskMountDirectoryRequest>;
 interface TaskSnapshotDirectoryRequest {
     taskId: string;
     path: Uint8Array;
+    /** A unique ID to ensure idempotency of directory snapshot requests. */
+    snapshotId: string;
+    /**
+     * Lifetime for the resulting image, in seconds. When set, the
+     * image's expires_at is a hard cutoff: it is fixed at creation time
+     * and is not extended on use.
+     *
+     * When unset, the resulting image gets the legacy retention policy:
+     * a 30-day TTL that is bumped forward by 30 days on every use, so
+     * active images effectively never expire.
+     *
+     * Sentinel: -1 means "no expiry" (the image never expires).
+     * 0 and other negative values are invalid and rejected by the
+     * server.
+     */
+    ttlSeconds?: number | undefined;
 }
 declare const TaskSnapshotDirectoryRequest: MessageFns<TaskSnapshotDirectoryRequest>;
 interface TaskSnapshotDirectoryResponse {
     imageId: string;
 }
 declare const TaskSnapshotDirectoryResponse: MessageFns<TaskSnapshotDirectoryResponse>;
+interface TaskSnapshotFilesystemRequest {
+    taskId: string;
+    /** A unique ID to ensure idempotency of filesystem snapshot requests. */
+    snapshotId: string;
+    /**
+     * Lifetime for the resulting image, in seconds. Must be set. When positive,
+     * the image expiry is a hard cutoff: it is fixed at creation time and is
+     * not extended on use.
+     *
+     * Sentinel: -1 means "no expiry" (the image never expires).
+     * 0 and other negative values are invalid and rejected by the
+     * server.
+     */
+    ttlSeconds?: number | undefined;
+}
+declare const TaskSnapshotFilesystemRequest: MessageFns<TaskSnapshotFilesystemRequest>;
+interface TaskSnapshotFilesystemResponse {
+    imageId: string;
+}
+declare const TaskSnapshotFilesystemResponse: MessageFns<TaskSnapshotFilesystemResponse>;
+interface TaskUnmountDirectoryRequest {
+    taskId: string;
+    path: Uint8Array;
+}
+declare const TaskUnmountDirectoryRequest: MessageFns<TaskUnmountDirectoryRequest>;
 type Builtin = Date | Function | Uint8Array | string | number | boolean | undefined;
 type DeepPartial<T> = T extends Builtin ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends {} ? {
     [K in keyof T]?: DeepPartial<T[K]>;
@@ -6182,6 +6454,8 @@ interface Profile {
     environment?: string;
     imageBuilderVersion?: string;
     logLevel?: string;
+    /** Parsed from MODAL_MAX_THROTTLE_WAIT. null means unlimited. */
+    maxThrottleWaitSecs?: number;
 }
 
 /** @ignore */
@@ -6190,13 +6464,15 @@ declare class TaskCommandRouterClientImpl {
     private channel;
     private serverClient;
     private taskId;
+    private sandboxId;
+    private isV2;
     private serverUrl;
     private jwt;
     private jwtExp;
     private jwtRefreshLock;
     private logger;
     private closed;
-    static tryInit(serverClient: ModalGrpcClient, taskId: string, logger: Logger, profile: Profile): Promise<TaskCommandRouterClientImpl | null>;
+    static tryInit(serverClient: ModalGrpcClient, taskId: string, sandboxId: string, isV2: boolean, logger: Logger, profile: Profile): Promise<TaskCommandRouterClientImpl | null>;
     private constructor();
     close(): void;
     execStart(request: TaskExecStartRequest): Promise<TaskExecStartResponse>;
@@ -6206,6 +6482,8 @@ declare class TaskCommandRouterClientImpl {
     execWait(taskId: string, execId: string, deadline?: number | null): Promise<TaskExecWaitResponse>;
     mountDirectory(request: TaskMountDirectoryRequest): Promise<void>;
     snapshotDirectory(request: TaskSnapshotDirectoryRequest): Promise<TaskSnapshotDirectoryResponse>;
+    snapshotFilesystem(request: TaskSnapshotFilesystemRequest, options?: TimeoutOptions): Promise<TaskSnapshotFilesystemResponse>;
+    unmountDirectory(request: TaskUnmountDirectoryRequest): Promise<void>;
     private refreshJwt;
     private callWithAuthRetry;
     private streamStdio;
@@ -6228,7 +6506,7 @@ declare class SandboxFile {
     read(): Promise<Uint8Array>;
     /**
      * Write data to the file.
-     * @param data - Data to write (string or Uint8Array)
+     * @param data - Data to write
      */
     write(data: Uint8Array): Promise<void>;
     /**
@@ -6346,8 +6624,14 @@ type SandboxCreateParams = {
     unencryptedPorts?: number[];
     /** Whether to block all network access from the Sandbox. */
     blockNetwork?: boolean;
-    /** List of CIDRs the Sandbox is allowed to access. If None, all CIDRs are allowed. Cannot be used with blockNetwork. */
+    /** List of CIDRs the Sandbox is allowed to access. If not set, all CIDRs are allowed. Cannot be used with blockNetwork. */
+    outboundCidrAllowlist?: string[];
+    /**
+     * @deprecated Use {@link outboundCidrAllowlist} instead.
+     */
     cidrAllowlist?: string[];
+    /** List of CIDRs allowed to connect inbound to the Sandbox (tunnels and connection tokens). If not set, all IPs are allowed. Cannot be used with blockNetwork. */
+    inboundCidrAllowlist?: string[];
     /** Cloud provider to run the Sandbox on. */
     cloud?: string;
     /** Region(s) to run the Sandbox on. */
@@ -6360,6 +6644,8 @@ type SandboxCreateParams = {
     readinessProbe?: Probe;
     /** Optional name for the Sandbox. Unique within an App. */
     name?: string;
+    /** Tags to attach to the Sandbox. Filterable via {@link SandboxService#list Sandbox.list}. */
+    tags?: Record<string, string>;
     /** Optional experimental options. */
     experimentalOptions?: Record<string, any>;
     /** If set, connections to this Sandbox will be subdomains of this domain rather than the default.
@@ -6385,6 +6671,10 @@ declare class SandboxService {
      * Create a new {@link Sandbox} in the {@link App} with the specified {@link Image} and options.
      */
     create(app: App, image: Image, params?: SandboxCreateParams): Promise<Sandbox>;
+    /**
+     * Create a new {@link Sandbox} using the experimental V2 backend.
+     */
+    experimentalCreate(app: App, image: Image, params?: SandboxCreateParams): Promise<Sandbox>;
     /** Returns a running {@link Sandbox} object from an ID.
      *
      * @returns Sandbox with ID
@@ -6474,7 +6764,11 @@ declare class Sandbox {
     #private;
     readonly sandboxId: string;
     /** @ignore */
-    constructor(client: ModalClient, sandboxId: string);
+    constructor(client: ModalClient, sandboxId: string, params?: {
+        isV2?: boolean;
+        taskId?: string;
+        tunnels?: Record<number, Tunnel>;
+    });
     get stdin(): ModalWriteStream<string>;
     get stdout(): ModalReadStream<string>;
     get stderr(): ModalReadStream<string>;
@@ -6540,7 +6834,11 @@ declare class Sandbox {
      *
      * Returns an {@link Image} object which can be used to spawn a new Sandbox with the same filesystem.
      *
-     * @param timeoutMs - Timeout for the snapshot operation in milliseconds
+     * `timeoutMs` is propagated as the gRPC deadline. If the snapshot does
+     * not return within that window, the call is cancelled and an error is
+     * thrown.
+     *
+     * @param timeoutMs - Timeout for the snapshot operation in milliseconds.
      * @returns Promise that resolves to an {@link Image}
      */
     snapshotFilesystem(timeoutMs?: number): Promise<Image>;
@@ -6551,9 +6849,18 @@ declare class Sandbox {
      * @param image - Optional {@link Image} to mount. If undefined, mounts an empty directory.
      */
     mountImage(path: string, image?: Image): Promise<void>;
+    /**
+     * Unmounts an {@link Image} previously mounted at a path in the Sandbox filesystem.
+     *
+     * @param path - The mount path to unmount
+     */
+    unmountImage(path: string): Promise<void>;
     /**
      * Snapshots and creates a new {@link Image} from a directory in the running sandbox.
      *
+     * Directory snapshots are currently persisted for 30 days after they
+     * were created.
+     *
      * @param path - The path of the directory to snapshot
      * @returns Promise that resolves to an {@link Image}
      */
@@ -6587,6 +6894,7 @@ interface ModalClientParams {
     endpoint?: string;
     timeoutMs?: number;
     maxRetries?: number;
+    maxThrottleWaitSecs?: number;
     logger?: Logger;
     logLevel?: LogLevel;
     /**