tensorlake 0.5.89 → 0.5.91

package/dist/index.d.cts

@@ -422,8 +422,16 @@ interface CreatePoolOptions {
     entrypoint?: string[];
     maxContainers?: number;
     warmContainers?: number;
+    /** Network policy for each container. Can be replaced later via updatePool. */
+    network?: NetworkConfig;
 }
 interface UpdatePoolOptions {
+    /**
+     * Network policy for each container. Omit to keep the pool's current policy,
+     * set to replace it, or pass `null` to remove it (unclaimed warm containers
+     * are recycled onto the new policy).
+     */
+    network?: NetworkConfig | null;
     /** Sandbox image name, such as `tensorlake/ubuntu-minimal` or a registered Sandbox Image. */
     image: string;
     cpus?: number;
@@ -454,6 +462,8 @@ interface SandboxPoolInfo {
     entrypoint?: string[];
     maxContainers?: number;
     warmContainers?: number;
+    /** The network policy that applies to each container in the pool. */
+    networkPolicy?: NetworkConfig;
     containers?: PoolContainerInfo[];
     createdAt?: Date;
     updatedAt?: Date;
@@ -1152,7 +1162,13 @@ declare class SandboxClient {
     getPool(poolId: string): Promise<SandboxPoolInfo>;
     /** List all sandbox pools in the namespace. */
     listPools(): Promise<Traced<SandboxPoolInfo[]>>;
-    /** Replace the configuration of an existing sandbox pool. */
+    /**
+     * Replace a pool configuration. Omit `network` to keep the pool's current
+     * network policy, set it to replace the policy, or pass `null` to remove the
+     * policy entirely. On a change the service recycles the pool's unclaimed
+     * warm containers onto the new policy, while containers already claimed by
+     * sandboxes keep the policy they booted with.
+     */
     updatePool(poolId: string, options: UpdatePoolOptions): Promise<SandboxPoolInfo>;
     /** Delete a sandbox pool. Fails if the pool has active containers. */
     deletePool(poolId: string): Promise<void>;
@@ -1262,6 +1278,7 @@ declare class CloudClient {
     streamBuildLogs(buildServicePath: string, buildId: string, signal?: AbortSignal): AsyncIterable<BuildLogEntry>;
     private runMultipartRequest;
     private namespacePath;
+    private existingApplicationPublicEndpointId;
     private resolveScope;
 }
 

package/dist/index.d.ts

@@ -422,8 +422,16 @@ interface CreatePoolOptions {
     entrypoint?: string[];
     maxContainers?: number;
     warmContainers?: number;
+    /** Network policy for each container. Can be replaced later via updatePool. */
+    network?: NetworkConfig;
 }
 interface UpdatePoolOptions {
+    /**
+     * Network policy for each container. Omit to keep the pool's current policy,
+     * set to replace it, or pass `null` to remove it (unclaimed warm containers
+     * are recycled onto the new policy).
+     */
+    network?: NetworkConfig | null;
     /** Sandbox image name, such as `tensorlake/ubuntu-minimal` or a registered Sandbox Image. */
     image: string;
     cpus?: number;
@@ -454,6 +462,8 @@ interface SandboxPoolInfo {
     entrypoint?: string[];
     maxContainers?: number;
     warmContainers?: number;
+    /** The network policy that applies to each container in the pool. */
+    networkPolicy?: NetworkConfig;
     containers?: PoolContainerInfo[];
     createdAt?: Date;
     updatedAt?: Date;
@@ -1152,7 +1162,13 @@ declare class SandboxClient {
     getPool(poolId: string): Promise<SandboxPoolInfo>;
     /** List all sandbox pools in the namespace. */
     listPools(): Promise<Traced<SandboxPoolInfo[]>>;
-    /** Replace the configuration of an existing sandbox pool. */
+    /**
+     * Replace a pool configuration. Omit `network` to keep the pool's current
+     * network policy, set it to replace the policy, or pass `null` to remove the
+     * policy entirely. On a change the service recycles the pool's unclaimed
+     * warm containers onto the new policy, while containers already claimed by
+     * sandboxes keep the policy they booted with.
+     */
     updatePool(poolId: string, options: UpdatePoolOptions): Promise<SandboxPoolInfo>;
     /** Delete a sandbox pool. Fails if the pool has active containers. */
     deletePool(poolId: string): Promise<void>;
@@ -1262,6 +1278,7 @@ declare class CloudClient {
     streamBuildLogs(buildServicePath: string, buildId: string, signal?: AbortSignal): AsyncIterable<BuildLogEntry>;
     private runMultipartRequest;
     private namespacePath;
+    private existingApplicationPublicEndpointId;
     private resolveScope;
 }
 

package/dist/index.js

@@ -19,7 +19,7 @@ var SDK_VERSION, API_URL, API_KEY, NAMESPACE, SANDBOX_PROXY_URL, DEFAULT_HTTP_TI
 var init_defaults = __esm({
   "src/defaults.ts"() {
     "use strict";
-    SDK_VERSION = "0.5.89";
+    SDK_VERSION = "0.5.91";
     API_URL = process.env.TENSORLAKE_API_URL ?? "https://api.tensorlake.ai";
     API_KEY = process.env.TENSORLAKE_API_KEY ?? void 0;
     NAMESPACE = process.env.INDEXIFY_NAMESPACE ?? "default";
@@ -322,7 +322,8 @@ function parseTimestamp(v) {
   return new Date(ts * 1e3);
 }
 function fromSnakeKeys(obj, idField) {
-  if (Array.isArray(obj)) return obj.map((item) => fromSnakeKeys(item, idField));
+  if (Array.isArray(obj))
+    return obj.map((item) => fromSnakeKeys(item, idField));
   if (obj !== null && typeof obj === "object" && !(obj instanceof Date)) {
     const result = {};
     for (const [k, v] of Object.entries(obj)) {
@@ -4014,13 +4015,17 @@ function resolveRequestTimeoutMs(options) {
 }
 function secondsToMillis3(seconds) {
   if (!Number.isFinite(seconds) || seconds <= 0) {
-    throw new SandboxError("requestTimeout must be a positive number of seconds");
+    throw new SandboxError(
+      "requestTimeout must be a positive number of seconds"
+    );
   }
   return Math.ceil(seconds * 1e3);
 }
 function validateTimeoutMs(timeoutMs) {
   if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
-    throw new SandboxError("timeoutMs must be a positive number of milliseconds");
+    throw new SandboxError(
+      "timeoutMs must be a positive number of milliseconds"
+    );
   }
 }
 function sleep2(ms) {
@@ -4223,7 +4228,9 @@ var init_client = __esm({
       }
       /** List all sandboxes in the namespace. */
       async list() {
-        const { traceId, json } = await callNative(() => this.native.listSandboxes());
+        const { traceId, json } = await callNative(
+          () => this.native.listSandboxes()
+        );
         const parsed = JSON.parse(json);
         const sandboxes = (parsed.sandboxes ?? []).map(
           (s) => fromSnakeKeys(s, "sandboxId")
@@ -4301,7 +4308,9 @@ var init_client = __esm({
           body.exposed_ports = normalizeUserPorts(options.exposedPorts);
         }
         if (Object.keys(body).length === 0) {
-          throw new SandboxError("At least one sandbox update field must be provided.");
+          throw new SandboxError(
+            "At least one sandbox update field must be provided."
+          );
         }
         return this.tracedJson(
           () => this.native.updateSandbox(sandboxId, JSON.stringify(body)),
@@ -4337,7 +4346,9 @@ var init_client = __esm({
         const requestedPorts = normalizeUserPorts(ports);
         const current = await this.getPortAccess(sandboxId);
         const toRemove = new Set(requestedPorts);
-        const desiredPorts = current.exposedPorts.filter((port) => !toRemove.has(port));
+        const desiredPorts = current.exposedPorts.filter(
+          (port) => !toRemove.has(port)
+        );
         return this.update(sandboxId, {
           allowUnauthenticatedAccess: desiredPorts.length ? current.allowUnauthenticatedAccess : false,
           exposedPorts: desiredPorts
@@ -4345,7 +4356,10 @@ var init_client = __esm({
       }
       /** Terminate and delete a sandbox. */
       async delete(sandboxId) {
-        await callNative(() => this.native.deleteSandbox(sandboxId), { sandboxId, notFoundKind: "sandbox" });
+        await callNative(() => this.native.deleteSandbox(sandboxId), {
+          sandboxId,
+          notFoundKind: "sandbox"
+        });
       }
       /**
        * Suspend a named sandbox, preserving its state for later resume.
@@ -4356,7 +4370,10 @@ var init_client = __esm({
        * (fire-and-return); the server processes the suspend asynchronously.
        */
       async suspend(sandboxId, options) {
-        await callNative(() => this.native.suspendSandbox(sandboxId), { sandboxId, notFoundKind: "sandbox" });
+        await callNative(() => this.native.suspendSandbox(sandboxId), {
+          sandboxId,
+          notFoundKind: "sandbox"
+        });
         if (options?.wait === false) return;
         const timeout = options?.timeout ?? 300;
         const pollInterval = options?.pollInterval ?? 1;
@@ -4365,11 +4382,15 @@ var init_client = __esm({
           const info = await this.get(sandboxId);
           if (info.status === "suspended" /* SUSPENDED */) return;
           if (info.status === "terminated" /* TERMINATED */) {
-            throw new SandboxError(`Sandbox ${sandboxId} terminated while waiting for suspend`);
+            throw new SandboxError(
+              `Sandbox ${sandboxId} terminated while waiting for suspend`
+            );
           }
           await sleep2(pollInterval * 1e3);
         }
-        throw new SandboxError(`Sandbox ${sandboxId} did not suspend within ${timeout}s`);
+        throw new SandboxError(
+          `Sandbox ${sandboxId} did not suspend within ${timeout}s`
+        );
       }
       /**
        * Resume a suspended sandbox and bring it back to `Running`.
@@ -4379,7 +4400,10 @@ var init_client = __esm({
        * (fire-and-return); the server processes the resume asynchronously.
        */
       async resume(sandboxId, options) {
-        await callNative(() => this.native.resumeSandbox(sandboxId), { sandboxId, notFoundKind: "sandbox" });
+        await callNative(() => this.native.resumeSandbox(sandboxId), {
+          sandboxId,
+          notFoundKind: "sandbox"
+        });
         if (options?.wait === false) return;
         const timeout = options?.timeout ?? 300;
         const pollInterval = options?.pollInterval ?? 1;
@@ -4388,11 +4412,15 @@ var init_client = __esm({
           const info = await this.get(sandboxId);
           if (info.status === "running" /* RUNNING */) return;
           if (info.status === "terminated" /* TERMINATED */) {
-            throw new SandboxError(`Sandbox ${sandboxId} terminated while waiting for resume`);
+            throw new SandboxError(
+              `Sandbox ${sandboxId} terminated while waiting for resume`
+            );
           }
           await sleep2(pollInterval * 1e3);
         }
-        throw new SandboxError(`Sandbox ${sandboxId} did not resume within ${timeout}s`);
+        throw new SandboxError(
+          `Sandbox ${sandboxId} did not resume within ${timeout}s`
+        );
       }
       /**
        * Attach a registered file system to a running sandbox at `mountPath`.
@@ -4472,7 +4500,9 @@ var init_client = __esm({
       }
       /** List all snapshots in the namespace. */
       async listSnapshots() {
-        const { traceId, json } = await callNative(() => this.native.listSnapshots());
+        const { traceId, json } = await callNative(
+          () => this.native.listSnapshots()
+        );
         const parsed = JSON.parse(json);
         const snapshots = (parsed.snapshots ?? []).map(
           (s) => fromSnakeKeys(s, "snapshotId")
@@ -4500,7 +4530,8 @@ var init_client = __esm({
         const deadline = Date.now() + timeout * 1e3;
         while (Date.now() < deadline) {
           const info = await this.getSnapshot(result.snapshotId);
-          if (snapshotStatusSatisfiesWaitCondition(info.status, waitUntil)) return info;
+          if (snapshotStatusSatisfiesWaitCondition(info.status, waitUntil))
+            return info;
           if (info.status === "failed" /* FAILED */) {
             throw new SandboxError(
               `Snapshot ${result.snapshotId} failed: ${info.error}`
@@ -4525,8 +4556,11 @@ var init_client = __esm({
           timeout_secs: options.timeoutSecs ?? 0
         };
         if (options.entrypoint != null) body.entrypoint = options.entrypoint;
-        if (options.maxContainers != null) body.max_containers = options.maxContainers;
-        if (options.warmContainers != null) body.warm_containers = options.warmContainers;
+        if (options.maxContainers != null)
+          body.max_containers = options.maxContainers;
+        if (options.warmContainers != null)
+          body.warm_containers = options.warmContainers;
+        if (options.network != null) body.network = toSnakeKeys(options.network);
         return this.plainJson(
           () => this.native.createPool(JSON.stringify(body)),
           "poolId"
@@ -4549,7 +4583,13 @@ var init_client = __esm({
         );
         return Object.assign(pools, { traceId });
       }
-      /** Replace the configuration of an existing sandbox pool. */
+      /**
+       * Replace a pool configuration. Omit `network` to keep the pool's current
+       * network policy, set it to replace the policy, or pass `null` to remove the
+       * policy entirely. On a change the service recycles the pool's unclaimed
+       * warm containers onto the new policy, while containers already claimed by
+       * sandboxes keep the policy they booted with.
+       */
       async updatePool(poolId, options) {
         const body = {
           image: options.image,
@@ -4561,8 +4601,13 @@ var init_client = __esm({
           timeout_secs: options.timeoutSecs ?? 0
         };
         if (options.entrypoint != null) body.entrypoint = options.entrypoint;
-        if (options.maxContainers != null) body.max_containers = options.maxContainers;
-        if (options.warmContainers != null) body.warm_containers = options.warmContainers;
+        if (options.maxContainers != null)
+          body.max_containers = options.maxContainers;
+        if (options.warmContainers != null)
+          body.warm_containers = options.warmContainers;
+        if (options.network !== void 0) {
+          body.network = options.network === null ? null : toSnakeKeys(options.network);
+        }
         return this.plainJson(
           () => this.native.updatePool(poolId, JSON.stringify(body)),
           "poolId",
@@ -4571,7 +4616,10 @@ var init_client = __esm({
       }
       /** Delete a sandbox pool. Fails if the pool has active containers. */
       async deletePool(poolId) {
-        await callNative(() => this.native.deletePool(poolId), { poolId, notFoundKind: "pool" });
+        await callNative(() => this.native.deletePool(poolId), {
+          poolId,
+          notFoundKind: "pool"
+        });
       }
       // --- Connect ---
       /** Return a `Sandbox` handle for an existing running sandbox without verifying it exists. */
@@ -4608,11 +4656,16 @@ var init_client = __esm({
         });
         const createStart = nowMs();
         const result = options?.poolId != null ? await requestClient.claim(options.poolId) : await requestClient.create(options);
-        logSdkTiming("sandbox.create", options?.poolId != null ? "claim_response" : "create_response", createStart, {
-          sandbox_id: result.sandboxId,
-          status: result.status,
-          server_trace_id: result.traceId
-        });
+        logSdkTiming(
+          "sandbox.create",
+          options?.poolId != null ? "claim_response" : "create_response",
+          createStart,
+          {
+            sandbox_id: result.sandboxId,
+            status: result.status,
+            server_trace_id: result.traceId
+          }
+        );
         const requestedName = options?.poolId != null ? null : options?.name ?? null;
         const finishConnect = (sandboxId, routingHint, name, ingressEndpoint, sandboxUrl) => {
           const explicitProxyUrl = options?.proxyUrl ?? explicitProxyUrlOverride() ?? void 0;
@@ -5080,6 +5133,22 @@ var init_sse = __esm({
 });
 
 // src/cloud-client.ts
+import { nanoid } from "nanoid";
+function applicationAllowsUnauthenticatedRequests(manifest) {
+  return Array.isArray(manifest.allow) && manifest.allow.includes(UNAUTHENTICATED_REQUESTS);
+}
+function publicEndpointIdFromManifest(manifest) {
+  for (const key of ["public_endpoint_id", "publicEndpointId"]) {
+    const value = manifest[key];
+    if (typeof value === "string" && value.length > 0) {
+      return value;
+    }
+  }
+  return void 0;
+}
+function generatePublicEndpointId() {
+  return `endpoint_${nanoid()}`;
+}
 function createApplicationBuildForm(request, imageContexts) {
   const contextsByPartName = /* @__PURE__ */ new Map();
   for (const context of imageContexts) {
@@ -5149,7 +5218,7 @@ async function parseJsonResponse(response) {
   }
   return JSON.parse(text);
 }
-var CloudClient;
+var CloudClient, UNAUTHENTICATED_REQUESTS;
 var init_cloud_client = __esm({
   "src/cloud-client.ts"() {
     "use strict";
@@ -5182,6 +5251,19 @@ var init_cloud_client = __esm({
         this.http.close();
       }
       async upsertApplication(manifest, codeZip, upgradeRunningRequests = false) {
+        const applicationManifest = { ...manifest };
+        let publicEndpointId = publicEndpointIdFromManifest(applicationManifest);
+        if (applicationAllowsUnauthenticatedRequests(applicationManifest) && publicEndpointId === void 0) {
+          const applicationName = applicationManifest.name;
+          if (typeof applicationName === "string" && applicationName.length > 0) {
+            publicEndpointId = await this.existingApplicationPublicEndpointId(applicationName);
+          }
+          publicEndpointId ??= generatePublicEndpointId();
+        }
+        if (publicEndpointId !== void 0) {
+          applicationManifest.public_endpoint_id = publicEndpointId;
+          delete applicationManifest.publicEndpointId;
+        }
         const form = new FormData();
         form.append(
           "code",
@@ -5189,7 +5271,7 @@ var init_cloud_client = __esm({
           "code.zip"
         );
         form.append("code_content_type", "application/zip");
-        form.append("application", JSON.stringify(manifest));
+        form.append("application", JSON.stringify(applicationManifest));
         form.append(
           "upgrade_requests_to_latest_code",
           String(upgradeRunningRequests)
@@ -5502,6 +5584,18 @@ var init_cloud_client = __esm({
       namespacePath(subpath) {
         return `/v1/namespaces/${encodeURIComponent(this.namespace)}/${subpath.replace(/^\/+/, "")}`;
       }
+      async existingApplicationPublicEndpointId(applicationName) {
+        const response = await this.http.requestResponse(
+          "GET",
+          this.namespacePath(`applications/${encodeURIComponent(applicationName)}`),
+          { allowedErrorStatusCodes: /* @__PURE__ */ new Set([404]) }
+        );
+        if (response.status === 404) {
+          return void 0;
+        }
+        const application = await parseJsonResponse(response);
+        return publicEndpointIdFromManifest(application);
+      }
       resolveScope(organizationId, projectId) {
         const resolvedOrganizationId = organizationId ?? this.organizationId;
         const resolvedProjectId = projectId ?? this.projectId;
@@ -5516,6 +5610,7 @@ var init_cloud_client = __esm({
         };
       }
     };
+    UNAUTHENTICATED_REQUESTS = "unauthenticated_requests";
   }
 });