modal 0.7.4 → 0.7.6

package/dist/index.d.ts

@@ -126,6 +126,32 @@ declare enum DeploymentNamespace {
     DEPLOYMENT_NAMESPACE_GLOBAL = 3,
     UNRECOGNIZED = -1
 }
+declare enum EndpointApiSurface {
+    ENDPOINT_API_SURFACE_UNSPECIFIED = 0,
+    ENDPOINT_API_SURFACE_OPENAI_CHAT_COMPLETIONS = 1,
+    ENDPOINT_API_SURFACE_OPENAI_RESPONSES = 2,
+    ENDPOINT_API_SURFACE_ANTHROPIC_MESSAGES = 3,
+    UNRECOGNIZED = -1
+}
+declare enum EndpointInputModality {
+    ENDPOINT_INPUT_MODALITY_UNSPECIFIED = 0,
+    ENDPOINT_INPUT_MODALITY_TEXT = 1,
+    ENDPOINT_INPUT_MODALITY_IMAGE = 2,
+    ENDPOINT_INPUT_MODALITY_AUDIO = 3,
+    UNRECOGNIZED = -1
+}
+declare enum EndpointStopSource {
+    ENDPOINT_STOP_SOURCE_UNSPECIFIED = 0,
+    ENDPOINT_STOP_SOURCE_CLI = 1,
+    ENDPOINT_STOP_SOURCE_WEB = 2,
+    UNRECOGNIZED = -1
+}
+declare enum EnvironmentRole {
+    ENVIRONMENT_ROLE_UNSPECIFIED = 0,
+    ENVIRONMENT_ROLE_VIEWER = 1,
+    ENVIRONMENT_ROLE_CONTRIBUTOR = 2,
+    UNRECOGNIZED = -1
+}
 declare enum ExecOutputOption {
     EXEC_OUTPUT_OPTION_UNSPECIFIED = 0,
     EXEC_OUTPUT_OPTION_DEVNULL = 1,
@@ -171,6 +197,20 @@ declare enum GPUType {
     GPU_TYPE_H200 = 12,
     UNRECOGNIZED = -1
 }
+declare enum IdentityProviderType {
+    IDENTITY_PROVIDER_TYPE_UNSPECIFIED = 0,
+    IDENTITY_PROVIDER_TYPE_GITHUB = 1,
+    IDENTITY_PROVIDER_TYPE_OKTA = 2,
+    IDENTITY_PROVIDER_TYPE_GOOGLE_OAUTH = 3,
+    UNRECOGNIZED = -1
+}
+declare enum MemberRole {
+    MEMBER_ROLE_UNSPECIFIED = 0,
+    MEMBER_ROLE_USER = 1,
+    MEMBER_ROLE_MANAGER = 2,
+    MEMBER_ROLE_OWNER = 3,
+    UNRECOGNIZED = -1
+}
 declare enum ObjectCreationType {
     /** OBJECT_CREATION_TYPE_UNSPECIFIED - just lookup */
     OBJECT_CREATION_TYPE_UNSPECIFIED = 0,
@@ -513,7 +553,14 @@ interface AppGetByDeploymentNameRequest {
 }
 declare const AppGetByDeploymentNameRequest: MessageFns$1<AppGetByDeploymentNameRequest>;
 interface AppGetByDeploymentNameResponse {
+    /** Null when App with requested name is not deployed */
     appId: string;
+    /** Populated if App with requested name was recently stopped */
+    previousAppId: string;
+    /** Populated because server may resolve default environment */
+    environmentName: string;
+    /** Lifecycle of current App or recently stopped App */
+    lifecycle: AppLifecycle | undefined;
 }
 declare const AppGetByDeploymentNameResponse: MessageFns$1<AppGetByDeploymentNameResponse>;
 interface AppGetLayoutRequest {
@@ -769,7 +816,7 @@ interface AutoscalerSettings {
     maxContainers?: number | undefined;
     /** Additional container to spin up when Function is active */
     bufferContainers?: number | undefined;
-    /** Currently unused; a placeholder in case we decide to expose scaleup control to users */
+    /** Stabilization window (in seconds) before scaling up; requires sustained demand over this period */
     scaleupWindow?: number | undefined;
     /** Maximum amount of time a container can be idle before being scaled down, in seconds; pka "container_idle_timeout" */
     scaledownWindow?: number | undefined;
@@ -1311,14 +1358,117 @@ interface DomainListResponse {
     domains: Domain[];
 }
 declare const DomainListResponse: MessageFns$1<DomainListResponse>;
+interface EndpointComputeRegionSpec {
+    auto?: Empty | undefined;
+    colocated?: Empty | undefined;
+    explicit?: EndpointComputeRegionSpec_ExplicitRegions | undefined;
+}
+declare const EndpointComputeRegionSpec: MessageFns$1<EndpointComputeRegionSpec>;
+interface EndpointComputeRegionSpec_ExplicitRegions {
+    regions: string[];
+}
+declare const EndpointComputeRegionSpec_ExplicitRegions: MessageFns$1<EndpointComputeRegionSpec_ExplicitRegions>;
+interface EndpointCreateRequest {
+    name: string;
+    description: string;
+    proxyRegions: string[];
+    computeRegion: EndpointComputeRegionSpec | undefined;
+    model: EndpointModelSource | undefined;
+    apiSurfaces: EndpointApiSurface[];
+    inputModalities: EndpointInputModality[];
+    environmentName: string;
+}
+declare const EndpointCreateRequest: MessageFns$1<EndpointCreateRequest>;
+interface EndpointCreateResponse {
+    endpointId: string;
+}
+declare const EndpointCreateResponse: MessageFns$1<EndpointCreateResponse>;
+interface EndpointCustomModelSource {
+    baseModelRepoId: string;
+    huggingface?: EndpointHuggingFaceModelSource | undefined;
+    modalVolume?: EndpointModalVolumeModelSource | undefined;
+}
+declare const EndpointCustomModelSource: MessageFns$1<EndpointCustomModelSource>;
+interface EndpointHuggingFaceModelSource {
+    repoId: string;
+    revision: string;
+    huggingfaceToken: string;
+}
+declare const EndpointHuggingFaceModelSource: MessageFns$1<EndpointHuggingFaceModelSource>;
+interface EndpointListItem {
+    endpointId: string;
+    name: string;
+    description: string;
+    activeDeploymentId: string;
+    updatedAt: number;
+    metadata: EndpointMetadata | undefined;
+}
+declare const EndpointListItem: MessageFns$1<EndpointListItem>;
+interface EndpointListRequest {
+    environmentName: string;
+    pagination: ListPagination | undefined;
+}
+declare const EndpointListRequest: MessageFns$1<EndpointListRequest>;
+interface EndpointListResponse {
+    items: EndpointListItem[];
+    environmentName: string;
+}
+declare const EndpointListResponse: MessageFns$1<EndpointListResponse>;
+interface EndpointMetadata {
+    name: string;
+    creationInfo: CreationInfo | undefined;
+}
+declare const EndpointMetadata: MessageFns$1<EndpointMetadata>;
+interface EndpointModalVolumeModelSource {
+    volumeId: string;
+    modelPath: string;
+}
+declare const EndpointModalVolumeModelSource: MessageFns$1<EndpointModalVolumeModelSource>;
+interface EndpointModelSource {
+    baseModelRepoId?: string | undefined;
+    custom?: EndpointCustomModelSource | undefined;
+}
+declare const EndpointModelSource: MessageFns$1<EndpointModelSource>;
+interface EndpointStopRequest {
+    endpointId: string;
+    source: EndpointStopSource;
+}
+declare const EndpointStopRequest: MessageFns$1<EndpointStopRequest>;
+interface EndpointStopResponse {
+}
+declare const EndpointStopResponse: MessageFns$1<EndpointStopResponse>;
 interface EnvironmentCreateRequest {
     name: string;
+    isManaged: boolean;
 }
 declare const EnvironmentCreateRequest: MessageFns$1<EnvironmentCreateRequest>;
 interface EnvironmentDeleteRequest {
     name: string;
 }
 declare const EnvironmentDeleteRequest: MessageFns$1<EnvironmentDeleteRequest>;
+interface EnvironmentGetManagedRequest {
+    environmentId: string;
+}
+declare const EnvironmentGetManagedRequest: MessageFns$1<EnvironmentGetManagedRequest>;
+interface EnvironmentGetManagedResponse {
+    environmentId: string;
+    name: string;
+    createdAt: number;
+    principalRoles: EnvironmentGetManagedResponse_PrincipalEnvRole[];
+    additionalRoles: EnvironmentGetManagedResponse_PrincipalEnvRole[];
+}
+declare const EnvironmentGetManagedResponse: MessageFns$1<EnvironmentGetManagedResponse>;
+interface EnvironmentGetManagedResponse_PrincipalEnvRole {
+    userId: string;
+    serviceUserId: string;
+    email: string;
+    avatarUrl: string;
+    serviceUserName: string;
+    role: EnvironmentRole;
+    memberRole: MemberRole;
+    userName: string;
+}
+declare const EnvironmentGetManagedResponse_PrincipalEnvRole: MessageFns$1<EnvironmentGetManagedResponse_PrincipalEnvRole>;
 interface EnvironmentGetOrCreateRequest {
     deploymentName: string;
     objectCreationType: ObjectCreationType;
@@ -1351,6 +1501,18 @@ interface EnvironmentMetadata {
     settings: EnvironmentSettings | undefined;
 }
 declare const EnvironmentMetadata: MessageFns$1<EnvironmentMetadata>;
+interface EnvironmentRoleSetRequest {
+    environmentId: string;
+    userId: string;
+    serviceUserId: string;
+    role: EnvironmentRole;
+}
+declare const EnvironmentRoleSetRequest: MessageFns$1<EnvironmentRoleSetRequest>;
+interface EnvironmentSetManagedRequest {
+    environmentId: string;
+    managed: boolean;
+}
+declare const EnvironmentSetManagedRequest: MessageFns$1<EnvironmentSetManagedRequest>;
 /**
  * Environment-scoped settings, with workspace-level defaults.
  * Note that we use MergeFrom to combine workspace / environment settings,
@@ -1473,7 +1635,7 @@ interface FunctionMessage {
     objectDependencies: ObjectDependency[];
     blockNetwork: boolean;
     /**
-     * In the SDK, we've deprecated `max_inputs` (which only every implemented `max_inputs=1`)
+     * In the SDK, we've deprecated `max_inputs` (which only ever implemented `max_inputs=1`)
      * in favor of a boolean `single_use_containers` parameter.
      */
     maxInputs: number;
@@ -1510,6 +1672,8 @@ interface FunctionMessage {
     /**
      * _experimental_proxy_ip -> ProxyInfo
      * TODO: deprecate.
+     *
+     * @deprecated
      */
     ExperimentalProxyIp?: string | undefined;
     /** For internal debugging use only. */
@@ -1562,6 +1726,8 @@ interface FunctionMessage {
     singleUseContainers: boolean;
     /** When True, the function is a server function */
     isServer: boolean;
+    /** Where inputs to a function should be routed through. */
+    routingRegion: string;
 }
 declare const FunctionMessage: MessageFns$1<FunctionMessage>;
 interface FunctionAsyncInvokeRequest {
@@ -1712,6 +1878,8 @@ interface FunctionData {
     /**
      * _experimental_proxy_ip -> ProxyInfo
      * TODO: deprecate.
+     *
+     * @deprecated
      */
     ExperimentalProxyIp?: string | undefined;
     /** Mapping of method names to method definitions, only non-empty for class service functions */
@@ -1754,6 +1922,8 @@ interface FunctionData {
     implementationName: string;
     /** When True, the function is a server function */
     isServer: boolean;
+    /** Where inputs to a function should be routed through. */
+    routingRegion: string;
 }
 declare const FunctionData: MessageFns$1<FunctionData>;
 interface FunctionData_RankedFunction {
@@ -1768,7 +1938,6 @@ interface FunctionFinishInputsRequest {
 }
 declare const FunctionFinishInputsRequest: MessageFns$1<FunctionFinishInputsRequest>;
 interface FunctionGetCallGraphRequest {
-    /** TODO: use input_id once we switch client submit API to return those. */
     functionCallId: string;
 }
 declare const FunctionGetCallGraphRequest: MessageFns$1<FunctionGetCallGraphRequest>;
@@ -1801,6 +1970,7 @@ interface FunctionGetInputsItem {
     /** intercepted and only used by the worker. */
     functionMapIdx?: number | undefined;
     attemptToken: string;
+    fromInputPlane: boolean;
 }
 declare const FunctionGetInputsItem: MessageFns$1<FunctionGetInputsItem>;
 interface FunctionGetInputsRequest {
@@ -2024,6 +2194,8 @@ interface FunctionPutOutputsItem {
     functionCallId: string;
     /** injected by the worker */
     functionMapIdx?: number | undefined;
+    /** injected by the worker */
+    fromInputPlane: boolean;
 }
 declare const FunctionPutOutputsItem: MessageFns$1<FunctionPutOutputsItem>;
 interface FunctionPutOutputsRequest {
@@ -2066,6 +2238,7 @@ interface FunctionStats$1 {
     backlog: number;
     numTotalTasks: number;
     numRunningInputs: number;
+    inputHeadroom: number;
 }
 declare const FunctionStats$1: MessageFns$1<FunctionStats$1>;
 interface FunctionUpdateSchedulingParamsRequest {
@@ -2811,9 +2984,9 @@ interface Sandbox$1 {
     /** Optional idle timeout in seconds. If set, the sandbox will be terminated after being idle for this duration. */
     idleTimeoutSecs?: number | undefined;
     /**
-     * If set, the sandbox will be created with direct sandbox commands enabled.
-     * Exec commands for the sandbox will be issued directly to the sandbox
-     * command router running on the Modal worker.
+     * Deprecated: direct sandbox commands are always enabled.
+     *
+     * @deprecated
      */
     directSandboxCommandsEnabled: boolean;
     /**
@@ -2832,6 +3005,12 @@ interface Sandbox$1 {
     includeOidcIdentityToken: boolean;
     /** Probe used to determine when the sandbox has become ready. */
     readinessProbe?: Probe$1 | undefined;
+    /**
+     * If set, only connections from these CIDRs will be allowed to connect to the sandbox
+     * (tunnels and auth proxy).
+     */
+    inboundCidrAllowlist: string[];
+    environmentVariables: StringMap | undefined;
 }
 declare const Sandbox$1: MessageFns$1<Sandbox$1>;
 interface SandboxCreateConnectTokenRequest {
@@ -2849,6 +3028,7 @@ interface SandboxCreateRequest {
     definition: Sandbox$1 | undefined;
     /** DEPRECATED* 7/16/2025 */
     environmentName: string;
+    tags: SandboxTag[];
 }
 declare const SandboxCreateRequest: MessageFns$1<SandboxCreateRequest>;
 interface SandboxCreateResponse {
@@ -2877,6 +3057,12 @@ declare const SandboxGetCommandRouterAccessRequest: MessageFns$1<SandboxGetComma
 interface SandboxGetCommandRouterAccessResponse {
     jwt: string;
     url: string;
+    /**
+     * Worker's public IPv4 address. When set, clients should connect directly
+     * to this IP while still using the URL's hostname for TLS SNI and the
+     * HTTP/2 :authority header.
+     */
+    workerIpv4Address: string;
 }
 declare const SandboxGetCommandRouterAccessResponse: MessageFns$1<SandboxGetCommandRouterAccessResponse>;
 interface SandboxGetFromNameRequest {
@@ -2950,6 +3136,8 @@ interface SandboxInfo {
     timeoutSecs: number;
     idleTimeoutSecs?: number | undefined;
     readyAt?: number | undefined;
+    readinessProbe?: Probe$1 | undefined;
+    tunnels: TunnelData[];
 }
 declare const SandboxInfo: MessageFns$1<SandboxInfo>;
 interface SandboxListRequest {
@@ -3171,12 +3359,26 @@ interface SecretUpdateRequest_Update {
     value?: string | undefined;
 }
 declare const SecretUpdateRequest_Update: MessageFns$1<SecretUpdateRequest_Update>;
+interface ServiceUser {
+    name: string;
+    tokenId: string;
+    createdBy: string;
+    createdAt: number;
+    lastUsedAt: number;
+    createdByAvatarUrl: string;
+    serviceUserId: string;
+}
+declare const ServiceUser: MessageFns$1<ServiceUser>;
 interface ServiceUserIdentity {
     serviceUserId: string;
     serviceUserName: string;
     createdBy: UserIdentity | undefined;
 }
 declare const ServiceUserIdentity: MessageFns$1<ServiceUserIdentity>;
+interface ServiceUserListResponse {
+    serviceUsers: ServiceUser[];
+}
+declare const ServiceUserListResponse: MessageFns$1<ServiceUserListResponse>;
 interface SharedVolumeDeleteRequest {
     sharedVolumeId: string;
 }
@@ -3259,6 +3461,12 @@ interface SharedVolumeRemoveFileRequest {
     recursive: boolean;
 }
 declare const SharedVolumeRemoveFileRequest: MessageFns$1<SharedVolumeRemoveFileRequest>;
+interface StringMap {
+    contents: {
+        [key: string]: string;
+    };
+}
+declare const StringMap: MessageFns$1<StringMap>;
 interface SystemErrorMessage {
     errorCode: SystemErrorCode;
     errorMessage: string;
@@ -3627,6 +3835,7 @@ interface VolumeMount {
     mountPath: string;
     allowBackgroundCommits: boolean;
     readOnly: boolean;
+    subPath?: string | undefined;
 }
 declare const VolumeMount: MessageFns$1<VolumeMount>;
 interface VolumePutFiles2Request {
@@ -3792,6 +4001,23 @@ interface WorkspaceDashboardUrlResponse {
     url: string;
 }
 declare const WorkspaceDashboardUrlResponse: MessageFns$1<WorkspaceDashboardUrlResponse>;
+interface WorkspaceMembersListItem {
+    memberId: string;
+    memberDisplayname: string;
+    memberRole: MemberRole;
+    joinedAt: number;
+    lastActiveAt: number;
+    deletedAt: number;
+    userId: string;
+    identityProviderType: IdentityProviderType;
+    email: string;
+    avatarUrl: string;
+}
+declare const WorkspaceMembersListItem: MessageFns$1<WorkspaceMembersListItem>;
+interface WorkspaceMembersListResponse {
+    members: WorkspaceMembersListItem[];
+}
+declare const WorkspaceMembersListResponse: MessageFns$1<WorkspaceMembersListResponse>;
 interface WorkspaceNameLookupResponse {
     /** @deprecated */
     workspaceName: string;
@@ -4293,6 +4519,31 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Endpoints */
+        readonly endpointCreate: {
+            readonly name: "EndpointCreate";
+            readonly requestType: MessageFns$1<EndpointCreateRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EndpointCreateResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
+        readonly endpointList: {
+            readonly name: "EndpointList";
+            readonly requestType: MessageFns$1<EndpointListRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EndpointListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
+        readonly endpointStop: {
+            readonly name: "EndpointStop";
+            readonly requestType: MessageFns$1<EndpointStopRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EndpointStopResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** Environments */
         readonly environmentCreate: {
             readonly name: "EnvironmentCreate";
@@ -4310,6 +4561,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly environmentGetManaged: {
+            readonly name: "EnvironmentGetManaged";
+            readonly requestType: MessageFns$1<EnvironmentGetManagedRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<EnvironmentGetManagedResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly environmentGetOrCreate: {
             readonly name: "EnvironmentGetOrCreate";
             readonly requestType: MessageFns$1<EnvironmentGetOrCreateRequest>;
@@ -4326,6 +4585,22 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly environmentRoleSet: {
+            readonly name: "EnvironmentRoleSet";
+            readonly requestType: MessageFns$1<EnvironmentRoleSetRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$2<Empty>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
+        readonly environmentSetManaged: {
+            readonly name: "EnvironmentSetManaged";
+            readonly requestType: MessageFns$1<EnvironmentSetManagedRequest>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$2<Empty>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly environmentUpdate: {
             readonly name: "EnvironmentUpdate";
             readonly requestType: MessageFns$1<EnvironmentUpdateRequest>;
@@ -5037,6 +5312,15 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        /** Service users */
+        readonly serviceUserList: {
+            readonly name: "ServiceUserList";
+            readonly requestType: MessageFns$2<Empty>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<ServiceUserListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         /** SharedVolumes */
         readonly sharedVolumeDelete: {
             readonly name: "SharedVolumeDelete";
@@ -5372,6 +5656,14 @@ declare const ModalClientDefinition: {
             readonly responseStream: false;
             readonly options: {};
         };
+        readonly workspaceMembersList: {
+            readonly name: "WorkspaceMembersList";
+            readonly requestType: MessageFns$2<Empty>;
+            readonly requestStream: false;
+            readonly responseType: MessageFns$1<WorkspaceMembersListResponse>;
+            readonly responseStream: false;
+            readonly options: {};
+        };
         readonly workspaceNameLookup: {
             readonly name: "WorkspaceNameLookup";
             readonly requestType: MessageFns$2<Empty>;
@@ -5583,8 +5875,8 @@ declare class Function_ {
     getCurrentStats(): Promise<FunctionStats>;
     updateAutoscaler(params: FunctionUpdateAutoscalerParams): Promise<void>;
     /**
-     * URL of a Function running as a web endpoint.
-     * @returns The web URL if this Function is a web endpoint, otherwise undefined
+     * URL for addressing the Web Function via HTTP.
+     * @returns The web URL, or undefined if this is not a Web Function
      */
     getWebUrl(): Promise<string | undefined>;
 }
@@ -5654,20 +5946,45 @@ declare class VolumeService {
      */
     delete(name: string, params?: VolumeDeleteParams): Promise<void>;
 }
+/**
+ * Resolved mount configuration stored on a Volume. `subPath: undefined` means "mount the
+ * whole volume" (no sub-path set on the resulting VolumeMount proto).
+ */
+type ResolvedMountOptions = {
+    readOnly: boolean;
+    subPath: string | undefined;
+};
 /** Volumes provide persistent storage that can be mounted in Modal {@link Function_ Function}s. */
 declare class Volume {
     #private;
     readonly volumeId: string;
     readonly name?: string;
-    private _readOnly;
+    /**
+     * @hidden
+     * @internal
+     */
+    readonly _mountOptions: ResolvedMountOptions;
     /** @ignore */
-    constructor(volumeId: string, name?: string, readOnly?: boolean, ephemeralHbManager?: EphemeralHeartbeatManager);
+    constructor(volumeId: string, name?: string, mountOptions?: ResolvedMountOptions, ephemeralHbManager?: EphemeralHeartbeatManager);
     /**
      * @deprecated Use {@link VolumeService#fromName client.volumes.fromName()} instead.
      */
     static fromName(name: string, options?: VolumeFromNameParams): Promise<Volume>;
-    /** Configure Volume to mount as read-only. */
+    /**
+     * Configure Volume to mount as read-only.
+     *
+     * @deprecated Use {@link withMountOptions} with `{ readOnly: true }` instead.
+     */
     readOnly(): Volume;
+    /**
+     * Configure options used when mounting this Volume. Fields left undefined preserve their value
+     * from any previous withMountOptions call on the same Volume (stacking).
+     */
+    withMountOptions(params?: VolumeMountOptions): Volume;
+    /**
+     * @deprecated Inspect mount configuration at the call site that configured it instead.
+     * Future versions of this SDK may remove direct mount-option accessors on Volume.
+     */
     get isReadOnly(): boolean;
     /**
      * @deprecated Use {@link VolumeService#ephemeral client.volumes.ephemeral()} instead.
@@ -5676,6 +5993,11 @@ declare class Volume {
     /** Delete the ephemeral Volume. Only usable with emphemeral Volumes. */
     closeEphemeral(): void;
 }
+/** Options for mounting a {@link Volume}. */
+type VolumeMountOptions = {
+    readOnly?: boolean;
+    subPath?: string;
+};
 
 /** Optional parameters for {@link ClsService#fromName client.cls.fromName()}. */
 type ClsFromNameParams = {
@@ -6147,12 +6469,53 @@ declare const TaskMountDirectoryRequest: MessageFns<TaskMountDirectoryRequest>;
 interface TaskSnapshotDirectoryRequest {
     taskId: string;
     path: Uint8Array;
+    /** A unique ID to ensure idempotency of directory snapshot requests. */
+    snapshotId: string;
+    /**
+     * Lifetime for the resulting image, in seconds. When set, the
+     * image's expires_at is a hard cutoff: it is fixed at creation time
+     * and is not extended on use.
+     *
+     * When unset, the resulting image gets the legacy retention policy:
+     * a 30-day TTL that is bumped forward by 30 days on every use, so
+     * active images effectively never expire.
+     *
+     * Sentinel: -1 means "no expiry" (the image never expires).
+     * 0 and other negative values are invalid and rejected by the
+     * server.
+     */
+    ttlSeconds?: number | undefined;
 }
 declare const TaskSnapshotDirectoryRequest: MessageFns<TaskSnapshotDirectoryRequest>;
 interface TaskSnapshotDirectoryResponse {
     imageId: string;
 }
 declare const TaskSnapshotDirectoryResponse: MessageFns<TaskSnapshotDirectoryResponse>;
+interface TaskSnapshotFilesystemRequest {
+    taskId: string;
+    /** A unique ID to ensure idempotency of filesystem snapshot requests. */
+    snapshotId: string;
+    /**
+     * Lifetime for the resulting image, in seconds. Must be set. When positive,
+     * the image expiry is a hard cutoff: it is fixed at creation time and is
+     * not extended on use.
+     *
+     * Sentinel: -1 means "no expiry" (the image never expires).
+     * 0 and other negative values are invalid and rejected by the
+     * server.
+     */
+    ttlSeconds?: number | undefined;
+}
+declare const TaskSnapshotFilesystemRequest: MessageFns<TaskSnapshotFilesystemRequest>;
+interface TaskSnapshotFilesystemResponse {
+    imageId: string;
+}
+declare const TaskSnapshotFilesystemResponse: MessageFns<TaskSnapshotFilesystemResponse>;
+interface TaskUnmountDirectoryRequest {
+    taskId: string;
+    path: Uint8Array;
+}
+declare const TaskUnmountDirectoryRequest: MessageFns<TaskUnmountDirectoryRequest>;
 type Builtin = Date | Function | Uint8Array | string | number | boolean | undefined;
 type DeepPartial<T> = T extends Builtin ? T : T extends globalThis.Array<infer U> ? globalThis.Array<DeepPartial<U>> : T extends ReadonlyArray<infer U> ? ReadonlyArray<DeepPartial<U>> : T extends {} ? {
     [K in keyof T]?: DeepPartial<T[K]>;
@@ -6182,6 +6545,8 @@ interface Profile {
     environment?: string;
     imageBuilderVersion?: string;
     logLevel?: string;
+    /** Parsed from MODAL_MAX_THROTTLE_WAIT. null means unlimited. */
+    maxThrottleWaitSecs?: number;
 }
 
 /** @ignore */
@@ -6190,13 +6555,15 @@ declare class TaskCommandRouterClientImpl {
     private channel;
     private serverClient;
     private taskId;
+    private sandboxId;
+    private isV2;
     private serverUrl;
     private jwt;
     private jwtExp;
     private jwtRefreshLock;
     private logger;
     private closed;
-    static tryInit(serverClient: ModalGrpcClient, taskId: string, logger: Logger, profile: Profile): Promise<TaskCommandRouterClientImpl | null>;
+    static tryInit(serverClient: ModalGrpcClient, taskId: string, sandboxId: string, isV2: boolean, logger: Logger, profile: Profile): Promise<TaskCommandRouterClientImpl | null>;
     private constructor();
     close(): void;
     execStart(request: TaskExecStartRequest): Promise<TaskExecStartResponse>;
@@ -6206,6 +6573,8 @@ declare class TaskCommandRouterClientImpl {
     execWait(taskId: string, execId: string, deadline?: number | null): Promise<TaskExecWaitResponse>;
     mountDirectory(request: TaskMountDirectoryRequest): Promise<void>;
     snapshotDirectory(request: TaskSnapshotDirectoryRequest): Promise<TaskSnapshotDirectoryResponse>;
+    snapshotFilesystem(request: TaskSnapshotFilesystemRequest, options?: TimeoutOptions): Promise<TaskSnapshotFilesystemResponse>;
+    unmountDirectory(request: TaskUnmountDirectoryRequest): Promise<void>;
     private refreshJwt;
     private callWithAuthRetry;
     private streamStdio;
@@ -6228,7 +6597,7 @@ declare class SandboxFile {
     read(): Promise<Uint8Array>;
     /**
      * Write data to the file.
-     * @param data - Data to write (string or Uint8Array)
+     * @param data - Data to write
      */
     write(data: Uint8Array): Promise<void>;
     /**
@@ -6241,6 +6610,173 @@ declare class SandboxFile {
     close(): Promise<void>;
 }
 
+/** Type of a filesystem entry. */
+type FileType = "file" | "directory" | "symlink";
+/** Metadata for a file or directory entry in a Sandbox. */
+interface FileInfo {
+    readonly name: string;
+    readonly path: string;
+    readonly type: FileType;
+    readonly size: number;
+    readonly mode: number;
+    readonly permissions: string;
+    readonly owner: string;
+    readonly group: string;
+    /** Unix epoch seconds. */
+    readonly modifiedTime: number;
+    readonly symlinkTarget: string | null;
+}
+/** Namespace for Sandbox filesystem APIs. */
+declare class SandboxFilesystem {
+    private readonly sandbox;
+    /** @ignore */
+    constructor(sandbox: Sandbox);
+    /**
+     * Copy a local file into the Sandbox.
+     *
+     * `remotePath` must be an absolute path to a file in the Sandbox.
+     * Parent directories are created if needed. The remote file is overwritten
+     * if it already exists.
+     *
+     * @throws {SandboxFilesystemNotADirectoryError} a parent component of `remotePath` is not a directory.
+     * @throws {SandboxFilesystemIsADirectoryError} `remotePath` points to a directory.
+     * @throws {SandboxFilesystemPermissionError} write permission is denied in the Sandbox.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     * @throws {Error} `localPath` does not exist, is a directory, or cannot be read (`ENOENT`, `EISDIR`, `EACCES`).
+     */
+    copyFromLocal(localPath: string, remotePath: string): Promise<void>;
+    /**
+     * Copy a file from the Sandbox to a local path.
+     *
+     * `remotePath` must be an absolute path to a file in the Sandbox.
+     * Parent directories for `localPath` are created if needed. The local file
+     * is overwritten if it already exists.
+     *
+     * @throws {SandboxFilesystemNotFoundError} the remote path does not exist.
+     * @throws {SandboxFilesystemIsADirectoryError} the remote path points to a directory.
+     * @throws {SandboxFilesystemFileTooLargeError} the file exceeds the read size limit.
+     * @throws {SandboxFilesystemPermissionError} read permission is denied in the Sandbox.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     * @throws {Error} `localPath` points to a directory, or writing it is not permitted.
+     */
+    copyToLocal(remotePath: string, localPath: string): Promise<void>;
+    /**
+     * List files and directories in a Sandbox directory.
+     *
+     * `remotePath` must be an absolute path to a directory in the Sandbox.
+     * Returns an array of {@link FileInfo} objects sorted by name.
+     *
+     * @throws {SandboxFilesystemNotFoundError} the path does not exist.
+     * @throws {SandboxFilesystemNotADirectoryError} the path is not a directory.
+     * @throws {SandboxFilesystemPermissionError} read permission is denied.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    listFiles(remotePath: string): Promise<FileInfo[]>;
+    /**
+     * Create a new directory in the Sandbox.
+     *
+     * `remotePath` must be an absolute path in the Sandbox.
+     *
+     * When `createParents` is `true` (the default), any missing parent
+     * directories are created and the call is idempotent (succeeds if the
+     * directory already exists). When `createParents` is `false`, the immediate
+     * parent must already exist and the path must not already exist.
+     *
+     * @throws {SandboxFilesystemNotFoundError} the parent does not exist and `createParents` is `false`.
+     * @throws {SandboxFilesystemPathAlreadyExistsError} the path already exists and `createParents` is `false`.
+     * @throws {SandboxFilesystemNotADirectoryError} a path component is not a directory.
+     * @throws {SandboxFilesystemPermissionError} creation is not permitted.
+     * @throws {InvalidError} the operation is not supported by the mount.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    makeDirectory(remotePath: string, options?: {
+        createParents?: boolean;
+    }): Promise<void>;
+    /**
+     * Read a file from the Sandbox and return its contents as bytes.
+     *
+     * `remotePath` must be an absolute path to a file in the Sandbox.
+     *
+     * @throws {SandboxFilesystemNotFoundError} the path does not exist.
+     * @throws {SandboxFilesystemIsADirectoryError} the path points to a directory.
+     * @throws {SandboxFilesystemFileTooLargeError} the file exceeds the read size limit.
+     * @throws {SandboxFilesystemPermissionError} read permission is denied.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    readBytes(remotePath: string): Promise<Uint8Array>;
+    /**
+     * Read a file from the Sandbox and return its contents as a UTF-8 string.
+     *
+     * `remotePath` must be an absolute path to a file in the Sandbox.
+     *
+     * @throws {SandboxFilesystemNotFoundError} the path does not exist.
+     * @throws {SandboxFilesystemIsADirectoryError} the path points to a directory.
+     * @throws {SandboxFilesystemFileTooLargeError} the file exceeds the read size limit.
+     * @throws {SandboxFilesystemPermissionError} read permission is denied.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    readText(remotePath: string): Promise<string>;
+    /**
+     * Remove a file or directory in the Sandbox.
+     *
+     * `remotePath` must be an absolute path in the Sandbox. When `remotePath`
+     * is a directory and `recursive` is `false` (the default), it is removed
+     * only if empty. When `recursive` is `true`, the directory and all its
+     * contents are removed. Recursive removal is not supported on all mounts —
+     * `CloudBucketMount` does not support it.
+     *
+     * @throws {SandboxFilesystemNotFoundError} the path does not exist.
+     * @throws {SandboxFilesystemDirectoryNotEmptyError} `recursive` is `false` and the directory is not empty.
+     * @throws {SandboxFilesystemPermissionError} removal is not permitted.
+     * @throws {InvalidError} the operation is not supported by the mount.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    remove(remotePath: string, options?: {
+        recursive?: boolean;
+    }): Promise<void>;
+    /**
+     * Return metadata for a single file, directory, or symlink in the Sandbox.
+     *
+     * `remotePath` must be an absolute path in the Sandbox. If `remotePath` is
+     * a symlink, the returned {@link FileInfo} describes the symlink itself, not
+     * the target it points to.
+     *
+     * @throws {SandboxFilesystemNotFoundError} the path does not exist.
+     * @throws {SandboxFilesystemNotADirectoryError} a non-leaf component of the path is not a directory.
+     * @throws {SandboxFilesystemPermissionError} a path component is not searchable.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    stat(remotePath: string): Promise<FileInfo>;
+    /**
+     * Write binary content to a file in the Sandbox.
+     *
+     * `remotePath` must be an absolute path to a file in the Sandbox.
+     * Parent directories are created if needed. The remote file is overwritten
+     * if it already exists.
+     *
+     * @throws {TypeError} `data` is not a `Uint8Array`, `ArrayBuffer`, or `Buffer`.
+     * @throws {SandboxFilesystemNotADirectoryError} a parent component of `remotePath` is not a directory.
+     * @throws {SandboxFilesystemIsADirectoryError} `remotePath` points to a directory.
+     * @throws {SandboxFilesystemPermissionError} write permission is denied.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    writeBytes(data: Uint8Array | ArrayBuffer | Buffer, remotePath: string): Promise<void>;
+    /**
+     * Write UTF-8 text to a file in the Sandbox.
+     *
+     * `remotePath` must be an absolute path to a file in the Sandbox.
+     * Parent directories are created if needed. The remote file is overwritten
+     * if it already exists.
+     *
+     * @throws {TypeError} `data` is not a string.
+     * @throws {SandboxFilesystemNotADirectoryError} a parent component of `remotePath` is not a directory.
+     * @throws {SandboxFilesystemIsADirectoryError} `remotePath` points to a directory.
+     * @throws {SandboxFilesystemPermissionError} write permission is denied.
+     * @throws {SandboxFilesystemError} the command fails for any other reason.
+     */
+    writeText(data: string, remotePath: string): Promise<void>;
+}
+
 /**
  * Wrapper around `ReadableStream` with convenience functions.
  *
@@ -6346,8 +6882,14 @@ type SandboxCreateParams = {
     unencryptedPorts?: number[];
     /** Whether to block all network access from the Sandbox. */
     blockNetwork?: boolean;
-    /** List of CIDRs the Sandbox is allowed to access. If None, all CIDRs are allowed. Cannot be used with blockNetwork. */
+    /** List of CIDRs the Sandbox is allowed to access. If not set, all CIDRs are allowed. Cannot be used with blockNetwork. */
+    outboundCidrAllowlist?: string[];
+    /**
+     * @deprecated Use {@link outboundCidrAllowlist} instead.
+     */
     cidrAllowlist?: string[];
+    /** List of CIDRs allowed to connect inbound to the Sandbox (tunnels and connection tokens). If not set, all IPs are allowed. Cannot be used with blockNetwork. */
+    inboundCidrAllowlist?: string[];
     /** Cloud provider to run the Sandbox on. */
     cloud?: string;
     /** Region(s) to run the Sandbox on. */
@@ -6360,6 +6902,8 @@ type SandboxCreateParams = {
     readinessProbe?: Probe;
     /** Optional name for the Sandbox. Unique within an App. */
     name?: string;
+    /** Tags to attach to the Sandbox. Filterable via {@link SandboxService#list Sandbox.list}. */
+    tags?: Record<string, string>;
     /** Optional experimental options. */
     experimentalOptions?: Record<string, any>;
     /** If set, connections to this Sandbox will be subdomains of this domain rather than the default.
@@ -6385,6 +6929,24 @@ declare class SandboxService {
      * Create a new {@link Sandbox} in the {@link App} with the specified {@link Image} and options.
      */
     create(app: App, image: Image, params?: SandboxCreateParams): Promise<Sandbox>;
+    /**
+     * Create a new {@link Sandbox} using the experimental V2 backend.
+     *
+     * Supported features include exec, encrypted tunnels, wait/poll/terminate,
+     * CPU and memory configuration, and region placement.
+     *
+     * Features like tags, filesystem snapshots, memory snapshots, volumes, cloud
+     * bucket mounts, GPUs, custom domains, OIDC identity tokens, proxies, and
+     * readiness probes are not supported.
+     *
+     * V2 sandboxes created with this method are not currently returned by
+     * {@link SandboxService#list client.sandboxes.list()} and cannot be looked up
+     * with {@link SandboxService#fromName client.sandboxes.fromName()}. Store
+     * {@link Sandbox#sandboxId sandbox.sandboxId} if you need to retrieve the
+     * sandbox later, and use {@link SandboxService#fromId client.sandboxes.fromId()}
+     * to reattach.
+     */
+    experimentalCreate(app: App, image: Image, params?: SandboxCreateParams): Promise<Sandbox>;
     /** Returns a running {@link Sandbox} object from an ID.
      *
      * @returns Sandbox with ID
@@ -6474,10 +7036,15 @@ declare class Sandbox {
     #private;
     readonly sandboxId: string;
     /** @ignore */
-    constructor(client: ModalClient, sandboxId: string);
+    constructor(client: ModalClient, sandboxId: string, params?: {
+        isV2?: boolean;
+        taskId?: string;
+        tunnels?: Record<number, Tunnel>;
+    });
     get stdin(): ModalWriteStream<string>;
     get stdout(): ModalReadStream<string>;
     get stderr(): ModalReadStream<string>;
+    get filesystem(): SandboxFilesystem;
     /** Set tags (key-value pairs) on the Sandbox. Tags can be used to filter results in {@link SandboxService#list Sandbox.list}. */
     setTags(tags: Record<string, string>): Promise<void>;
     /** Get tags (key-value pairs) currently attached to this Sandbox from the server. */
@@ -6492,6 +7059,10 @@ declare class Sandbox {
     static fromName(appName: string, name: string, environment?: string): Promise<Sandbox>;
     /**
      * Open a file in the Sandbox filesystem.
+     *
+     * @deprecated Use {@link SandboxFilesystem} methods: `sandbox.filesystem.readBytes()`,
+     * `writeBytes()`, or `copyToLocal()` instead for improved reliability.
+     *
      * @param path - Path to the file to open
      * @param mode - File open mode (r, w, a, r+, w+, a+)
      * @returns Promise that resolves to a {@link SandboxFile}
@@ -6540,7 +7111,11 @@ declare class Sandbox {
      *
      * Returns an {@link Image} object which can be used to spawn a new Sandbox with the same filesystem.
      *
-     * @param timeoutMs - Timeout for the snapshot operation in milliseconds
+     * `timeoutMs` is propagated as the gRPC deadline. If the snapshot does
+     * not return within that window, the call is cancelled and an error is
+     * thrown.
+     *
+     * @param timeoutMs - Timeout for the snapshot operation in milliseconds.
      * @returns Promise that resolves to an {@link Image}
      */
     snapshotFilesystem(timeoutMs?: number): Promise<Image>;
@@ -6551,9 +7126,18 @@ declare class Sandbox {
      * @param image - Optional {@link Image} to mount. If undefined, mounts an empty directory.
      */
     mountImage(path: string, image?: Image): Promise<void>;
+    /**
+     * Unmounts an {@link Image} previously mounted at a path in the Sandbox filesystem.
+     *
+     * @param path - The mount path to unmount
+     */
+    unmountImage(path: string): Promise<void>;
     /**
      * Snapshots and creates a new {@link Image} from a directory in the running sandbox.
      *
+     * Directory snapshots are currently persisted for 30 days after they
+     * were created.
+     *
      * @param path - The path of the directory to snapshot
      * @returns Promise that resolves to an {@link Image}
      */
@@ -6576,6 +7160,13 @@ declare class ContainerProcess<R extends string | Uint8Array = any> {
     stderr: ModalReadStream<R>;
     /** @ignore */
     constructor(taskId: string, execId: string, commandRouterClient: TaskCommandRouterClientImpl, params?: SandboxExecParams, deadline?: number | null);
+    /**
+     * @ignore
+     * Send stdin EOF directly, bypassing the WritableStream state machine.
+     *
+     * Useful for when an stdin write has failed.
+     */
+    closeStdin(): Promise<void>;
     /** Wait for process completion and return the exit code. */
     wait(): Promise<number>;
 }
@@ -6587,6 +7178,7 @@ interface ModalClientParams {
     endpoint?: string;
     timeoutMs?: number;
     maxRetries?: number;
+    maxThrottleWaitSecs?: number;
     logger?: Logger;
     logLevel?: LogLevel;
     /**
@@ -6785,6 +7377,38 @@ declare class QueueEmptyError extends Error {
 declare class QueueFullError extends Error {
     constructor(message: string);
 }
+/** Errors from invalid Sandbox FileSystem operations. */
+declare class SandboxFilesystemError extends Error {
+    constructor(message: string);
+}
+/** A directory was expected to be empty but is not. */
+declare class SandboxFilesystemDirectoryNotEmptyError extends SandboxFilesystemError {
+    constructor(message: string);
+}
+/** A file exceeds the maximum allowed size for a read operation. */
+declare class SandboxFilesystemFileTooLargeError extends SandboxFilesystemError {
+    constructor(message: string);
+}
+/** A file operation was attempted on a path that resolves to a directory. */
+declare class SandboxFilesystemIsADirectoryError extends SandboxFilesystemError {
+    constructor(message: string);
+}
+/** A directory operation encountered a path component that is not a directory. */
+declare class SandboxFilesystemNotADirectoryError extends SandboxFilesystemError {
+    constructor(message: string);
+}
+/** A file or directory is not found. */
+declare class SandboxFilesystemNotFoundError extends SandboxFilesystemError {
+    constructor(message: string);
+}
+/** A path already exists and the operation requires it to be absent. */
+declare class SandboxFilesystemPathAlreadyExistsError extends SandboxFilesystemError {
+    constructor(message: string);
+}
+/** Permission is denied for a file operation. */
+declare class SandboxFilesystemPermissionError extends SandboxFilesystemError {
+    constructor(message: string);
+}
 /** Sandbox operations that exceed the allowed time limit. */
 declare class SandboxTimeoutError extends Error {
     constructor(message?: string);
@@ -6796,4 +7420,4 @@ declare class ClientClosedError extends Error {
 
 declare function checkForRenamedParams(params: any, renames: Record<string, string>): void;
 
-export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, type SandboxFromNameParams, type SandboxListParams, SandboxService, type SandboxTerminateParams, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, VolumeService, checkForRenamedParams, close, initializeClient };
+export { AlreadyExistsError, App, type AppFromNameParams, AppService, ClientClosedError, type ClientOptions, CloudBucketMount, CloudBucketMountService, Cls, type ClsFromNameParams, ClsInstance, ClsService, type ClsWithBatchingParams, type ClsWithConcurrencyParams, type ClsWithOptionsParams, ContainerProcess, type DeleteOptions, type EphemeralOptions, type FileInfo, type FileType, FunctionCall, type FunctionCallCancelParams, type FunctionCallGetParams, FunctionCallService, type FunctionFromNameParams, FunctionService, type FunctionStats, FunctionTimeoutError, type FunctionUpdateAutoscalerParams, Function_, Image, type ImageDeleteParams, type ImageDockerfileCommandsParams, ImageService, InternalFailure, InvalidError, type LogLevel, type Logger, type LookupOptions, ModalClient, type ModalClientParams, type ModalReadStream, type ModalWriteStream, NotFoundError, Probe, type ProbeParams, type Profile, Proxy, type ProxyFromNameParams, ProxyService, Queue, type QueueClearParams, type QueueDeleteParams, QueueEmptyError, type QueueEphemeralParams, type QueueFromNameParams, QueueFullError, type QueueGetParams, type QueueIterateParams, type QueueLenParams, type QueuePutParams, QueueService, RemoteError, Retries, Sandbox, type SandboxCreateConnectCredentials, type SandboxCreateConnectTokenParams, type SandboxCreateParams, type SandboxExecParams, SandboxFile, type SandboxFileMode, SandboxFilesystem, SandboxFilesystemDirectoryNotEmptyError, SandboxFilesystemError, SandboxFilesystemFileTooLargeError, SandboxFilesystemIsADirectoryError, SandboxFilesystemNotADirectoryError, SandboxFilesystemNotFoundError, SandboxFilesystemPathAlreadyExistsError, SandboxFilesystemPermissionError, type SandboxFromNameParams, type SandboxListParams, SandboxService, type SandboxTerminateParams, SandboxTimeoutError, Secret, type SecretDeleteParams, type SecretFromNameParams, type SecretFromObjectParams, SecretService, type StdioBehavior, type StreamMode, TimeoutError, Tunnel, Volume, type VolumeDeleteParams, type VolumeEphemeralParams, type VolumeFromNameParams, type VolumeMountOptions, VolumeService, checkForRenamedParams, close, initializeClient };