tensorlake 0.5.33 → 0.5.35

package/dist/index.d.cts

@@ -57,7 +57,8 @@ type SnapshotWaitCondition = "local_ready" | "completed";
 declare enum ProcessStatus {
     RUNNING = "running",
     EXITED = "exited",
-    SIGNALED = "signaled"
+    SIGNALED = "signaled",
+    OOM_KILLED = "oom_killed"
 }
 declare enum StdinMode {
     CLOSED = "closed",
@@ -96,6 +97,11 @@ interface CreateSandboxOptions {
     snapshotId?: string;
     /** Optional name for the sandbox. Named sandboxes support suspend/resume. When absent the sandbox is ephemeral. */
     name?: string;
+    /**
+     * Local cloud-init file path or HTTP(S) URL for the sandbox. Supported for
+     * fresh sandboxes and filesystem-only snapshot restores.
+     */
+    cloudInit?: string | URL;
 }
 interface UpdateSandboxOptions {
     /** New name for the sandbox. Naming an ephemeral sandbox enables suspend/resume. */
@@ -266,6 +272,44 @@ interface ProcessUserSpec {
     gid?: number;
 }
 type ProcessUser = string | ProcessUserSpec;
+type RestartPolicy = "never" | "on_failure" | "always";
+interface RestartPolicyConfig {
+    policy?: RestartPolicy;
+    maxRestarts?: number;
+    initialBackoffMs?: number;
+    maxBackoffMs?: number;
+}
+type ProcessHealthCheckType = "http" | "tcp";
+interface ProcessHealthCheck {
+    type: ProcessHealthCheckType;
+    port: number;
+    path?: string;
+    initialDelayMs?: number;
+    intervalMs?: number;
+    timeoutMs?: number;
+    failureThreshold?: number;
+}
+type ManagedProcessStatus = "starting" | "running" | "backing_off" | "stopped";
+type ManagedProcessHealthStatus = "disabled" | "starting" | "healthy" | "unhealthy";
+interface ManagedProcessExit {
+    exitCode?: number;
+    signal?: number;
+    oomKilled: boolean;
+    endedAt: Date;
+}
+interface ManagedProcessInfo {
+    id: string;
+    name?: string;
+    status: ManagedProcessStatus;
+    restartCount: number;
+    restart: RestartPolicyConfig;
+    healthCheck?: ProcessHealthCheck;
+    healthStatus: ManagedProcessHealthStatus;
+    consecutiveHealthFailures: number;
+    lastExit?: ManagedProcessExit;
+    lastError?: string;
+    nextRestartAt?: Date;
+}
 interface StartProcessOptions {
     args?: string[];
     env?: Record<string, string>;
@@ -274,8 +318,15 @@ interface StartProcessOptions {
     stdoutMode?: OutputMode;
     stderrMode?: OutputMode;
     user?: ProcessUser;
+    /** Optional managed-process name. Supplying this opts into managed process behavior. */
+    name?: string;
+    /** Optional restart behavior. Supplying this opts into managed process behavior. */
+    restart?: RestartPolicyConfig;
+    /** Optional HTTP/TCP health check. Supplying this opts into managed process behavior. */
+    healthCheck?: ProcessHealthCheck;
 }
 interface ProcessInfo {
+    handle?: number;
     pid: number;
     status: ProcessStatus;
     exitCode?: number;
@@ -285,6 +336,7 @@ interface ProcessInfo {
     args: string[];
     startedAt: Date;
     endedAt?: Date;
+    managed?: ManagedProcessInfo;
 }
 interface SendSignalResponse {
     success: boolean;
@@ -656,6 +708,8 @@ declare class Sandbox {
     getProcess(pid: number): Promise<Traced<ProcessInfo>>;
     /** Send SIGKILL to a process. */
     killProcess(pid: number): Promise<void>;
+    /** Restart a managed process by PID. */
+    restartProcess(pid: number): Promise<Traced<ProcessInfo>>;
     /** Send an arbitrary signal to a process (e.g. `15` for SIGTERM, `9` for SIGKILL). */
     sendSignal(pid: number, signal: number): Promise<Traced<SendSignalResponse>>;
     /** Write bytes to a process's stdin. The process must have been started with `stdinMode: StdinMode.PIPE`. */
@@ -1140,4 +1194,4 @@ declare class RequestExecutionError extends Error {
     constructor(message: string, functionName?: string);
 }
 
-export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };
+export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type ManagedProcessExit, type ManagedProcessHealthStatus, type ManagedProcessInfo, type ManagedProcessStatus, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessHealthCheck, type ProcessHealthCheckType, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RestartPolicy, type RestartPolicyConfig, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };

package/dist/index.d.ts

@@ -57,7 +57,8 @@ type SnapshotWaitCondition = "local_ready" | "completed";
 declare enum ProcessStatus {
     RUNNING = "running",
     EXITED = "exited",
-    SIGNALED = "signaled"
+    SIGNALED = "signaled",
+    OOM_KILLED = "oom_killed"
 }
 declare enum StdinMode {
     CLOSED = "closed",
@@ -96,6 +97,11 @@ interface CreateSandboxOptions {
     snapshotId?: string;
     /** Optional name for the sandbox. Named sandboxes support suspend/resume. When absent the sandbox is ephemeral. */
     name?: string;
+    /**
+     * Local cloud-init file path or HTTP(S) URL for the sandbox. Supported for
+     * fresh sandboxes and filesystem-only snapshot restores.
+     */
+    cloudInit?: string | URL;
 }
 interface UpdateSandboxOptions {
     /** New name for the sandbox. Naming an ephemeral sandbox enables suspend/resume. */
@@ -266,6 +272,44 @@ interface ProcessUserSpec {
     gid?: number;
 }
 type ProcessUser = string | ProcessUserSpec;
+type RestartPolicy = "never" | "on_failure" | "always";
+interface RestartPolicyConfig {
+    policy?: RestartPolicy;
+    maxRestarts?: number;
+    initialBackoffMs?: number;
+    maxBackoffMs?: number;
+}
+type ProcessHealthCheckType = "http" | "tcp";
+interface ProcessHealthCheck {
+    type: ProcessHealthCheckType;
+    port: number;
+    path?: string;
+    initialDelayMs?: number;
+    intervalMs?: number;
+    timeoutMs?: number;
+    failureThreshold?: number;
+}
+type ManagedProcessStatus = "starting" | "running" | "backing_off" | "stopped";
+type ManagedProcessHealthStatus = "disabled" | "starting" | "healthy" | "unhealthy";
+interface ManagedProcessExit {
+    exitCode?: number;
+    signal?: number;
+    oomKilled: boolean;
+    endedAt: Date;
+}
+interface ManagedProcessInfo {
+    id: string;
+    name?: string;
+    status: ManagedProcessStatus;
+    restartCount: number;
+    restart: RestartPolicyConfig;
+    healthCheck?: ProcessHealthCheck;
+    healthStatus: ManagedProcessHealthStatus;
+    consecutiveHealthFailures: number;
+    lastExit?: ManagedProcessExit;
+    lastError?: string;
+    nextRestartAt?: Date;
+}
 interface StartProcessOptions {
     args?: string[];
     env?: Record<string, string>;
@@ -274,8 +318,15 @@ interface StartProcessOptions {
     stdoutMode?: OutputMode;
     stderrMode?: OutputMode;
     user?: ProcessUser;
+    /** Optional managed-process name. Supplying this opts into managed process behavior. */
+    name?: string;
+    /** Optional restart behavior. Supplying this opts into managed process behavior. */
+    restart?: RestartPolicyConfig;
+    /** Optional HTTP/TCP health check. Supplying this opts into managed process behavior. */
+    healthCheck?: ProcessHealthCheck;
 }
 interface ProcessInfo {
+    handle?: number;
     pid: number;
     status: ProcessStatus;
     exitCode?: number;
@@ -285,6 +336,7 @@ interface ProcessInfo {
     args: string[];
     startedAt: Date;
     endedAt?: Date;
+    managed?: ManagedProcessInfo;
 }
 interface SendSignalResponse {
     success: boolean;
@@ -656,6 +708,8 @@ declare class Sandbox {
     getProcess(pid: number): Promise<Traced<ProcessInfo>>;
     /** Send SIGKILL to a process. */
     killProcess(pid: number): Promise<void>;
+    /** Restart a managed process by PID. */
+    restartProcess(pid: number): Promise<Traced<ProcessInfo>>;
     /** Send an arbitrary signal to a process (e.g. `15` for SIGTERM, `9` for SIGKILL). */
     sendSignal(pid: number, signal: number): Promise<Traced<SendSignalResponse>>;
     /** Write bytes to a process's stdin. The process must have been started with `stdinMode: StdinMode.PIPE`. */
@@ -1140,4 +1194,4 @@ declare class RequestExecutionError extends Error {
     constructor(message: string, functionName?: string);
 }
 
-export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };
+export { APIClient, type ApiKeyIntrospection, type ApplicationBuildContext, type ApplicationBuildImageResult, type ApplicationBuildResponse, type ApplicationManifest, type ApplicationSummary, type ArchivedSandboxInfo, type BinaryPayload, type BuildInfo, type BuildLogEntry, type CheckpointOptions, type CheckpointType, CloudClient, type CloudClientOptions, type CommandResult, type ConnectDesktopOptions, type ConnectOptions, type ContainerResourcesInfo, ContainerState, type CopiedSandboxResponse, type CopySandboxOptions, type CopySandboxResponse, type CreateAndConnectOptions, type CreateApplicationBuildImageRequest, type CreateApplicationBuildRequest, type CreatePoolOptions, type CreatePtyOptions, type CreatePtySessionOptions, type CreateSandboxOptions, type CreateSandboxPoolResponse, type CreateSandboxResponse, type CreateSnapshotResponse, type CreateTunnelOptions, type DaemonInfo, Desktop, type DesktopDoubleClickOptions, type DesktopPointerOptions, type DirectoryEntry, type HealthResponse, type ListArchivedSandboxesOptions, type ListArchivedSandboxesResponse, type ListDirectoryResponse, type ManagedProcessExit, type ManagedProcessHealthStatus, type ManagedProcessInfo, type ManagedProcessStatus, type MouseButton, type NetworkConfig, type NewSecret, type OutputEvent, OutputMode, type OutputResponse, type PoolContainerInfo, PoolInUseError, PoolNotFoundError, type ProcessHealthCheck, type ProcessHealthCheckType, type ProcessInfo, ProcessStatus, type ProcessUser, type ProcessUserSpec, Pty, type PtyConnectionOptions, type PtyDataHandler, type PtyExitHandler, type PtySessionInfo, RemoteAPIError, type RequestErrorInfo, RequestExecutionError, RequestFailedError, type RequestInput, type RequestMetadata, RequestNotFinishedError, type RequestOutput, type RestartPolicy, type RestartPolicyConfig, type RunOptions, Sandbox, SandboxClient, type SandboxClientOptions, SandboxConnectionError, SandboxError, SandboxException, type SandboxInfo, SandboxNotFoundError, type SandboxOptions, type SandboxPoolInfo, type SandboxPortAccess, SandboxStatus, type Secret, type SecretsList, type SecretsPagination, type SendSignalResponse, type SnapshotAndWaitOptions, type SnapshotInfo, type SnapshotOptions, SnapshotStatus, type SnapshotType, type SnapshotWaitCondition, type StartImageBuildRequest, type StartProcessOptions, StdinMode, type SuspendResumeOptions, TcpTunnel, type TunnelAddress, type UpdatePoolOptions, type UpsertSecretResponse, sandboxUrlFromIngressEndpoint };

package/dist/index.js

@@ -19,7 +19,7 @@ var SDK_VERSION, API_URL, API_KEY, NAMESPACE, SANDBOX_PROXY_URL, DEFAULT_HTTP_TI
 var init_defaults = __esm({
   "src/defaults.ts"() {
     "use strict";
-    SDK_VERSION = "0.5.33";
+    SDK_VERSION = "0.5.35";
     API_URL = process.env.TENSORLAKE_API_URL ?? "https://api.tensorlake.ai";
     API_KEY = process.env.TENSORLAKE_API_KEY ?? void 0;
     NAMESPACE = process.env.INDEXIFY_NAMESPACE ?? "default";
@@ -399,9 +399,23 @@ var init_http = __esm({
 });
 
 // src/models.ts
+function camelToSnake(str) {
+  return str.replace(CAMEL_TO_SNAKE_RE, (ch) => "_" + ch.toLowerCase());
+}
 function snakeToCamel(str) {
   return str.replace(/_([a-z])/g, (_, ch) => ch.toUpperCase());
 }
+function toSnakeKeys(obj) {
+  if (Array.isArray(obj)) return obj.map(toSnakeKeys);
+  if (obj !== null && typeof obj === "object" && !(obj instanceof Date)) {
+    const result = {};
+    for (const [k, v] of Object.entries(obj)) {
+      result[camelToSnake(k)] = toSnakeKeys(v);
+    }
+    return result;
+  }
+  return obj;
+}
 function parseTimestamp(v) {
   if (v == null) return void 0;
   if (v instanceof Date) return v;
@@ -440,7 +454,7 @@ function fromSnakeKeys(obj, idField) {
   }
   return obj;
 }
-var SandboxStatus, SnapshotStatus, ProcessStatus, StdinMode, OutputMode, ContainerState;
+var SandboxStatus, SnapshotStatus, ProcessStatus, StdinMode, OutputMode, ContainerState, CAMEL_TO_SNAKE_RE;
 var init_models = __esm({
   "src/models.ts"() {
     "use strict";
@@ -465,6 +479,7 @@ var init_models = __esm({
       ProcessStatus2["RUNNING"] = "running";
       ProcessStatus2["EXITED"] = "exited";
       ProcessStatus2["SIGNALED"] = "signaled";
+      ProcessStatus2["OOM_KILLED"] = "oom_killed";
       return ProcessStatus2;
     })(ProcessStatus || {});
     StdinMode = /* @__PURE__ */ ((StdinMode2) => {
@@ -482,6 +497,7 @@ var init_models = __esm({
       ContainerState2["RUNNING"] = "Running";
       return ContainerState2;
     })(ContainerState || {});
+    CAMEL_TO_SNAKE_RE = /[A-Z]/g;
   }
 });
 
@@ -3639,6 +3655,11 @@ var init_sandbox = __esm({
         if (options?.stderrMode != null && options.stderrMode !== "capture" /* CAPTURE */) {
           payload.stderr_mode = options.stderrMode;
         }
+        if (options?.name != null) payload.name = options.name;
+        if (options?.restart != null) payload.restart = toSnakeKeys(options.restart);
+        if (options?.healthCheck != null) {
+          payload.health_check = toSnakeKeys(options.healthCheck);
+        }
         const raw = await this.http.requestJson(
           "POST",
           "/api/v1/processes",
@@ -3667,6 +3688,14 @@ var init_sandbox = __esm({
       async killProcess(pid) {
         await this.http.requestJson("DELETE", `/api/v1/processes/${pid}`);
       }
+      /** Restart a managed process by PID. */
+      async restartProcess(pid) {
+        const raw = await this.http.requestJson(
+          "POST",
+          `/api/v1/processes/${pid}/restart`
+        );
+        return Object.assign(fromSnakeKeys(raw), { traceId: raw.traceId });
+      }
       /** Send an arbitrary signal to a process (e.g. `15` for SIGTERM, `9` for SIGKILL). */
       async sendSignal(pid, signal) {
         const raw = await this.http.requestJson(
@@ -3943,6 +3972,50 @@ var client_exports = {};
 __export(client_exports, {
   SandboxClient: () => SandboxClient
 });
+import { readFile } from "fs/promises";
+function cloudInitIncludeData(source) {
+  const isWindowsPath = /^[A-Za-z]:[\\/]/.test(source);
+  try {
+    const url = new URL(source);
+    if ((url.protocol === "http:" || url.protocol === "https:") && url.hostname.length > 0) {
+      return Buffer.from(`#include
+${url.toString()}
+`, "utf8");
+    }
+    if (!isWindowsPath) {
+      throw new SandboxError(
+        "cloud-init URL must be an absolute HTTP(S) URL with a host"
+      );
+    }
+  } catch (error) {
+    if (error instanceof SandboxError) throw error;
+    if (!isWindowsPath && /^[A-Za-z][A-Za-z0-9+.-]*:/.test(source)) {
+      throw new SandboxError(
+        "cloud-init URL must be an absolute HTTP(S) URL with a host"
+      );
+    }
+  }
+  return void 0;
+}
+async function readCloudInitBase64(cloudInit) {
+  if (cloudInit == null) return void 0;
+  const sourceText = cloudInit instanceof URL ? cloudInit.toString() : cloudInit;
+  const includeData = cloudInitIncludeData(sourceText);
+  const data = includeData ?? await readFile(sourceText).catch((error) => {
+    throw new SandboxError(
+      `failed to read cloud-init file ${JSON.stringify(sourceText)}: ${error}`
+    );
+  });
+  if (data.length === 0) {
+    throw new SandboxError("cloud-init user data must not be empty");
+  }
+  if (data.length > MAX_CLOUD_INIT_USER_DATA_BYTES) {
+    throw new SandboxError(
+      `cloud-init user data exceeds ${MAX_CLOUD_INIT_USER_DATA_BYTES} byte limit`
+    );
+  }
+  return data.toString("base64");
+}
 function resolveRequestTimeoutMs(options) {
   if (options?.requestTimeout != null) {
     return secondsToMillis4(options.requestTimeout);
@@ -4020,7 +4093,7 @@ function validateUserPort(port) {
 function dedupeAndSortPorts(ports) {
   return [...new Set(ports)].sort((a, b) => a - b);
 }
-var CREATE_SANDBOX_RETRYABLE_STATUS_CODES, CREATE_SANDBOX_ALLOWED_ERROR_STATUS_CODES, COPY_SANDBOX_ALLOWED_ERROR_STATUS_CODES, SandboxClient, RESERVED_SANDBOX_MANAGEMENT_PORT;
+var CREATE_SANDBOX_RETRYABLE_STATUS_CODES, CREATE_SANDBOX_ALLOWED_ERROR_STATUS_CODES, COPY_SANDBOX_ALLOWED_ERROR_STATUS_CODES, MAX_CLOUD_INIT_USER_DATA_BYTES, SandboxClient, RESERVED_SANDBOX_MANAGEMENT_PORT;
 var init_client = __esm({
   "src/client.ts"() {
     "use strict";
@@ -4033,6 +4106,7 @@ var init_client = __esm({
     CREATE_SANDBOX_RETRYABLE_STATUS_CODES = /* @__PURE__ */ new Set([502, 503]);
     CREATE_SANDBOX_ALLOWED_ERROR_STATUS_CODES = /* @__PURE__ */ new Set([504]);
     COPY_SANDBOX_ALLOWED_ERROR_STATUS_CODES = /* @__PURE__ */ new Set([422, 504]);
+    MAX_CLOUD_INIT_USER_DATA_BYTES = 16 * 1024;
     SandboxClient = class _SandboxClient {
       http;
       apiUrl;
@@ -4123,6 +4197,7 @@ var init_client = __esm({
       // --- Sandbox CRUD ---
       /** Create a new sandbox. Returns immediately; the sandbox may still be starting. Use `createAndConnect()` for a blocking, ready-to-use handle. */
       async create(options) {
+        const cloudInitBase64 = await readCloudInitBase64(options?.cloudInit);
         const body = {
           resources: {
             cpus: options?.cpus ?? 1,
@@ -4135,6 +4210,7 @@ var init_client = __esm({
         if (options?.entrypoint != null) body.entrypoint = options.entrypoint;
         if (options?.snapshotId != null) body.snapshot_id = options.snapshotId;
         if (options?.name != null) body.name = options.name;
+        if (cloudInitBase64 != null) body.cloud_init_base64 = cloudInitBase64;
         if (options?.allowInternetAccess === false || options?.allowOut != null || options?.denyOut != null) {
           body.network = {
             allow_internet_access: options?.allowInternetAccess ?? true,
@@ -4367,7 +4443,7 @@ var init_client = __esm({
         const client = this.withRequestTimeout(options?.requestTimeout);
         const raw = await client.http.requestJson(
           "POST",
-          client.path(`sandbox/${sandboxId}/copy?times=${encodeURIComponent(String(times))}`),
+          client.path(`sandboxes/${sandboxId}/copy?times=${encodeURIComponent(String(times))}`),
           { allowedErrorStatusCodes: COPY_SANDBOX_ALLOWED_ERROR_STATUS_CODES }
         );
         const result = fromSnakeKeys(raw, "sandboxId");
@@ -4552,6 +4628,9 @@ var init_client = __esm({
        * @throws {SandboxError} If the sandbox terminates during startup or the timeout elapses.
        */
       async createAndConnect(options) {
+        if (options?.poolId != null && options?.cloudInit != null) {
+          throw new SandboxError("cloud-init cannot be used with poolId");
+        }
         const requestTimeout = options?.requestTimeout ?? options?.startupTimeout ?? this.requestTimeoutMs / 1e3;
         const requestClient = this.withRequestTimeout(requestTimeout);
         const result = options?.poolId != null ? await requestClient.claim(options.poolId) : await requestClient.create(options);