tensorlake 0.5.31 → 0.5.33

package/dist/index.d.cts

@@ -88,7 +88,6 @@ interface CreateSandboxOptions {
     memoryMb?: number;
     /** Root disk size in megabytes. When omitted, the server uses its default disk size. */
     diskMb?: number;
-    secretNames?: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     allowInternetAccess?: boolean;
@@ -109,12 +108,34 @@ interface UpdateSandboxOptions {
 interface CreateSandboxResponse {
     sandboxId: string;
     status: SandboxStatus;
+    reason?: string;
     routingHint?: string;
     ingressEndpoint?: string;
     name?: string | null;
     terminationReason?: string;
     errorDetails?: unknown;
 }
+interface CopySandboxOptions {
+    /** Number of running copies to create. Defaults to 1. */
+    times?: number;
+    /** Per-request timeout in seconds for the blocking live-copy request. */
+    requestTimeout?: number;
+}
+interface CopiedSandboxResponse {
+    sandboxId: string;
+    /** Raw server status. Partial copy responses can include statuses such as `"failed"`. */
+    status: string;
+    reason?: string;
+    routingHint?: string;
+    ingressEndpoint?: string;
+    name?: string | null;
+    terminationReason?: string;
+    errorDetails?: unknown;
+}
+interface CopySandboxResponse {
+    sourceSandboxId: string;
+    sandboxes: CopiedSandboxResponse[];
+}
 interface SandboxInfo {
     sandboxId: string;
     namespace: string;
@@ -122,7 +143,6 @@ interface SandboxInfo {
     /** Resolved sandbox image name. */
     image?: string;
     resources: ContainerResourcesInfo;
-    secretNames: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     network?: NetworkConfig;
@@ -200,7 +220,6 @@ interface CreatePoolOptions {
     cpus?: number;
     memoryMb?: number;
     ephemeralDiskMb?: number;
-    secretNames?: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     maxContainers?: number;
@@ -212,7 +231,6 @@ interface UpdatePoolOptions {
     cpus?: number;
     memoryMb?: number;
     ephemeralDiskMb?: number;
-    secretNames?: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     maxContainers?: number;
@@ -234,7 +252,6 @@ interface SandboxPoolInfo {
     /** Sandbox image name backing the pool. */
     image: string;
     resources: ContainerResourcesInfo;
-    secretNames: string[];
     timeoutSecs: number;
     entrypoint?: string[];
     maxContainers?: number;
@@ -599,6 +616,8 @@ declare class Sandbox {
      * `{ wait: false }` for fire-and-return.
      */
     resume(options?: SuspendResumeOptions): Promise<void>;
+    /** Live-copy this running sandbox. */
+    copy(options?: CopySandboxOptions): Promise<Traced<CopySandboxResponse>>;
     /**
      * Create a checkpoint of this sandbox and wait for it to be locally ready.
      *
@@ -788,6 +807,14 @@ declare class SandboxClient {
     resume(sandboxId: string, options?: SuspendResumeOptions): Promise<void>;
     /** Claim a warm sandbox from a pool, creating one if no warm containers are available. */
     claim(poolId: string): Promise<Traced<CreateSandboxResponse>>;
+    /**
+     * Live-copy a running sandbox.
+     *
+     * The server creates `times` running copies from the source sandbox. Partial
+     * responses can include failed copies; inspect each returned sandbox's
+     * `status` and `reason`.
+     */
+    copy(sandboxId: string, options?: CopySandboxOptions): Promise<Traced<CopySandboxResponse>>;
     /**
      * Request a snapshot of a running sandbox's filesystem.
      *
@@ -1061,9 +1088,21 @@ declare class SandboxException extends Error {
 declare class SandboxError extends SandboxException {
     constructor(message: string);
 }
-/** Raised when the client cannot connect to the API server. */
+/**
+ * Raised when the client cannot complete a request against the API server.
+ *
+ * The original transport error (typically undici's `TypeError: fetch failed`,
+ * whose real reason — `ECONNREFUSED`, `UND_ERR_CONNECT_TIMEOUT`, `EMFILE`, … —
+ * lives in `.cause`) is preserved on this error's {@link cause} for programmatic
+ * inspection, and its full chain is folded into the message so it survives
+ * wrappers that only forward `error.message`. No interpretation of the failure
+ * (client vs server) is applied — the raw inner error is surfaced as-is so the
+ * reader can judge.
+ */
 declare class SandboxConnectionError extends SandboxError {
-    constructor(message: string);
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
 }
 /** Raised when a sandbox is not found. */
 declare class SandboxNotFoundError extends SandboxError {
@@ -1101,4 +1140,4 @@ declare class RequestExecutionError extends Error {
     constructor(message: string, functionName?: string);
 }
 
-export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };
+export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };

package/dist/index.d.ts

@@ -88,7 +88,6 @@ interface CreateSandboxOptions {
     memoryMb?: number;
     /** Root disk size in megabytes. When omitted, the server uses its default disk size. */
     diskMb?: number;
-    secretNames?: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     allowInternetAccess?: boolean;
@@ -109,12 +108,34 @@ interface UpdateSandboxOptions {
 interface CreateSandboxResponse {
     sandboxId: string;
     status: SandboxStatus;
+    reason?: string;
     routingHint?: string;
     ingressEndpoint?: string;
     name?: string | null;
     terminationReason?: string;
     errorDetails?: unknown;
 }
+interface CopySandboxOptions {
+    /** Number of running copies to create. Defaults to 1. */
+    times?: number;
+    /** Per-request timeout in seconds for the blocking live-copy request. */
+    requestTimeout?: number;
+}
+interface CopiedSandboxResponse {
+    sandboxId: string;
+    /** Raw server status. Partial copy responses can include statuses such as `"failed"`. */
+    status: string;
+    reason?: string;
+    routingHint?: string;
+    ingressEndpoint?: string;
+    name?: string | null;
+    terminationReason?: string;
+    errorDetails?: unknown;
+}
+interface CopySandboxResponse {
+    sourceSandboxId: string;
+    sandboxes: CopiedSandboxResponse[];
+}
 interface SandboxInfo {
     sandboxId: string;
     namespace: string;
@@ -122,7 +143,6 @@ interface SandboxInfo {
     /** Resolved sandbox image name. */
     image?: string;
     resources: ContainerResourcesInfo;
-    secretNames: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     network?: NetworkConfig;
@@ -200,7 +220,6 @@ interface CreatePoolOptions {
     cpus?: number;
     memoryMb?: number;
     ephemeralDiskMb?: number;
-    secretNames?: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     maxContainers?: number;
@@ -212,7 +231,6 @@ interface UpdatePoolOptions {
     cpus?: number;
     memoryMb?: number;
     ephemeralDiskMb?: number;
-    secretNames?: string[];
     timeoutSecs?: number;
     entrypoint?: string[];
     maxContainers?: number;
@@ -234,7 +252,6 @@ interface SandboxPoolInfo {
     /** Sandbox image name backing the pool. */
     image: string;
     resources: ContainerResourcesInfo;
-    secretNames: string[];
     timeoutSecs: number;
     entrypoint?: string[];
     maxContainers?: number;
@@ -599,6 +616,8 @@ declare class Sandbox {
      * `{ wait: false }` for fire-and-return.
      */
     resume(options?: SuspendResumeOptions): Promise<void>;
+    /** Live-copy this running sandbox. */
+    copy(options?: CopySandboxOptions): Promise<Traced<CopySandboxResponse>>;
     /**
      * Create a checkpoint of this sandbox and wait for it to be locally ready.
      *
@@ -788,6 +807,14 @@ declare class SandboxClient {
     resume(sandboxId: string, options?: SuspendResumeOptions): Promise<void>;
     /** Claim a warm sandbox from a pool, creating one if no warm containers are available. */
     claim(poolId: string): Promise<Traced<CreateSandboxResponse>>;
+    /**
+     * Live-copy a running sandbox.
+     *
+     * The server creates `times` running copies from the source sandbox. Partial
+     * responses can include failed copies; inspect each returned sandbox's
+     * `status` and `reason`.
+     */
+    copy(sandboxId: string, options?: CopySandboxOptions): Promise<Traced<CopySandboxResponse>>;
     /**
      * Request a snapshot of a running sandbox's filesystem.
      *
@@ -1061,9 +1088,21 @@ declare class SandboxException extends Error {
 declare class SandboxError extends SandboxException {
     constructor(message: string);
 }
-/** Raised when the client cannot connect to the API server. */
+/**
+ * Raised when the client cannot complete a request against the API server.
+ *
+ * The original transport error (typically undici's `TypeError: fetch failed`,
+ * whose real reason — `ECONNREFUSED`, `UND_ERR_CONNECT_TIMEOUT`, `EMFILE`, … —
+ * lives in `.cause`) is preserved on this error's {@link cause} for programmatic
+ * inspection, and its full chain is folded into the message so it survives
+ * wrappers that only forward `error.message`. No interpretation of the failure
+ * (client vs server) is applied — the raw inner error is surfaced as-is so the
+ * reader can judge.
+ */
 declare class SandboxConnectionError extends SandboxError {
-    constructor(message: string);
+    constructor(message: string, options?: {
+        cause?: unknown;
+    });
 }
 /** Raised when a sandbox is not found. */
 declare class SandboxNotFoundError extends SandboxError {
@@ -1101,4 +1140,4 @@ declare class RequestExecutionError extends Error {
     constructor(message: string, functionName?: string);
 }
 
-export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };
+export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };

package/dist/index.js

@@ -19,7 +19,7 @@ var SDK_VERSION, API_URL, API_KEY, NAMESPACE, SANDBOX_PROXY_URL, DEFAULT_HTTP_TI
 var init_defaults = __esm({
   "src/defaults.ts"() {
     "use strict";
-    SDK_VERSION = "0.5.31";
+    SDK_VERSION = "0.5.33";
     API_URL = process.env.TENSORLAKE_API_URL ?? "https://api.tensorlake.ai";
     API_KEY = process.env.TENSORLAKE_API_KEY ?? void 0;
     NAMESPACE = process.env.INDEXIFY_NAMESPACE ?? "default";
@@ -32,6 +32,28 @@ var init_defaults = __esm({
 });
 
 // src/errors.ts
+function describeError(err) {
+  const parts = [];
+  const seen = /* @__PURE__ */ new Set();
+  let current = err;
+  for (let depth = 0; depth < 6; depth++) {
+    if (current == null || typeof current !== "object" || seen.has(current)) {
+      break;
+    }
+    seen.add(current);
+    const e = current;
+    const message = typeof e.message === "string" ? e.message.trim() : "";
+    const code = typeof e.code === "string" ? e.code : void 0;
+    let segment = message;
+    if (code && (!message || !message.includes(code))) {
+      segment = segment ? `${segment} (${code})` : code;
+    }
+    if (segment && !parts.includes(segment)) parts.push(segment);
+    current = e.cause;
+  }
+  if (parts.length > 0) return parts.join(": ");
+  return err instanceof Error ? err.message : String(err);
+}
 var SandboxException, SandboxError, SandboxConnectionError, SandboxNotFoundError, PoolNotFoundError, PoolInUseError, RemoteAPIError, RequestNotFinishedError, RequestFailedError, RequestExecutionError;
 var init_errors = __esm({
   "src/errors.ts"() {
@@ -49,9 +71,10 @@ var init_errors = __esm({
       }
     };
     SandboxConnectionError = class extends SandboxError {
-      constructor(message) {
+      constructor(message, options) {
         super(`Connection error: ${message}`);
         this.name = "SandboxConnectionError";
+        if (options?.cause !== void 0) this.cause = options.cause;
       }
     };
     SandboxNotFoundError = class extends SandboxError {
@@ -322,7 +345,11 @@ var init_http = __esm({
             await sleep(delay);
           }
           this.abortController = new AbortController();
-          const timeoutId = this.timeoutMs == null ? null : setTimeout(() => this.abortController?.abort(), this.timeoutMs);
+          let timedOut = false;
+          const timeoutId = this.timeoutMs == null ? null : setTimeout(() => {
+            timedOut = true;
+            this.abortController?.abort();
+          }, this.timeoutMs);
           const combinedSignal = signal ? anySignal([signal, this.abortController.signal]) : this.abortController.signal;
           try {
             const response = await undiciFetch(url, {
@@ -350,16 +377,22 @@ var init_http = __esm({
             if (err instanceof RemoteAPIError || err instanceof SandboxNotFoundError || err instanceof PoolNotFoundError || err instanceof PoolInUseError) {
               throw err;
             }
-            if (signal?.aborted) {
-              throw new SandboxConnectionError("Request aborted");
+            if (signal?.aborted && !timedOut) {
+              throw new SandboxConnectionError("request aborted by caller", {
+                cause: err
+              });
             }
             lastError = err instanceof Error ? err : new Error(String(err));
             if (attempt >= this.maxRetries) {
-              throw new SandboxConnectionError(lastError.message);
+              const detail = timedOut ? `request timed out after ${this.timeoutMs}ms` : describeError(err);
+              throw new SandboxConnectionError(detail, { cause: err });
             }
           }
         }
-        throw new SandboxConnectionError(lastError?.message ?? "Request failed");
+        throw new SandboxConnectionError(
+          lastError ? describeError(lastError) : "request failed",
+          { cause: lastError }
+        );
       }
     };
   }
@@ -3489,6 +3522,11 @@ var init_sandbox = __esm({
         const client = this.requireLifecycleClient("resume");
         await client.resume(this.lifecycleIdentifier, options);
       }
+      /** Live-copy this running sandbox. */
+      async copy(options) {
+        const client = this.requireLifecycleClient("copy");
+        return client.copy(this.lifecycleIdentifier, options);
+      }
       /**
        * Create a checkpoint of this sandbox and wait for it to be locally ready.
        *
@@ -3982,7 +4020,7 @@ function validateUserPort(port) {
 function dedupeAndSortPorts(ports) {
   return [...new Set(ports)].sort((a, b) => a - b);
 }
-var CREATE_SANDBOX_RETRYABLE_STATUS_CODES, CREATE_SANDBOX_ALLOWED_ERROR_STATUS_CODES, SandboxClient, RESERVED_SANDBOX_MANAGEMENT_PORT;
+var CREATE_SANDBOX_RETRYABLE_STATUS_CODES, CREATE_SANDBOX_ALLOWED_ERROR_STATUS_CODES, COPY_SANDBOX_ALLOWED_ERROR_STATUS_CODES, SandboxClient, RESERVED_SANDBOX_MANAGEMENT_PORT;
 var init_client = __esm({
   "src/client.ts"() {
     "use strict";
@@ -3994,6 +4032,7 @@ var init_client = __esm({
     init_url();
     CREATE_SANDBOX_RETRYABLE_STATUS_CODES = /* @__PURE__ */ new Set([502, 503]);
     CREATE_SANDBOX_ALLOWED_ERROR_STATUS_CODES = /* @__PURE__ */ new Set([504]);
+    COPY_SANDBOX_ALLOWED_ERROR_STATUS_CODES = /* @__PURE__ */ new Set([422, 504]);
     SandboxClient = class _SandboxClient {
       http;
       apiUrl;
@@ -4092,7 +4131,6 @@ var init_client = __esm({
           }
         };
         if (options?.image != null) body.image = options.image;
-        if (options?.secretNames != null) body.secret_names = options.secretNames;
         if (options?.timeoutSecs != null) body.timeout_secs = options.timeoutSecs;
         if (options?.entrypoint != null) body.entrypoint = options.entrypoint;
         if (options?.snapshotId != null) body.snapshot_id = options.snapshotId;
@@ -4314,6 +4352,27 @@ var init_client = __esm({
         const result = fromSnakeKeys(raw, "sandboxId");
         return Object.assign(result, { traceId: raw.traceId });
       }
+      /**
+       * Live-copy a running sandbox.
+       *
+       * The server creates `times` running copies from the source sandbox. Partial
+       * responses can include failed copies; inspect each returned sandbox's
+       * `status` and `reason`.
+       */
+      async copy(sandboxId, options) {
+        const times = options?.times ?? 1;
+        if (!Number.isInteger(times) || times < 1) {
+          throw new SandboxError("times must be a positive integer");
+        }
+        const client = this.withRequestTimeout(options?.requestTimeout);
+        const raw = await client.http.requestJson(
+          "POST",
+          client.path(`sandbox/${sandboxId}/copy?times=${encodeURIComponent(String(times))}`),
+          { allowedErrorStatusCodes: COPY_SANDBOX_ALLOWED_ERROR_STATUS_CODES }
+        );
+        const result = fromSnakeKeys(raw, "sandboxId");
+        return Object.assign(result, { traceId: raw.traceId });
+      }
       // --- Snapshots ---
       /**
        * Request a snapshot of a running sandbox's filesystem.
@@ -4410,7 +4469,6 @@ var init_client = __esm({
           },
           timeout_secs: options.timeoutSecs ?? 0
         };
-        if (options.secretNames != null) body.secret_names = options.secretNames;
         if (options.entrypoint != null) body.entrypoint = options.entrypoint;
         if (options.maxContainers != null) body.max_containers = options.maxContainers;
         if (options.warmContainers != null) body.warm_containers = options.warmContainers;
@@ -4451,7 +4509,6 @@ var init_client = __esm({
           },
           timeout_secs: options.timeoutSecs ?? 0
         };
-        if (options.secretNames != null) body.secret_names = options.secretNames;
         if (options.entrypoint != null) body.entrypoint = options.entrypoint;
         if (options.maxContainers != null) body.max_containers = options.maxContainers;
         if (options.warmContainers != null) body.warm_containers = options.warmContainers;