tensorlake 0.5.95 → 0.5.103

package/dist/index.d.cts

@@ -213,6 +213,14 @@ interface GPUResources {
     count: number;
     model: string;
 }
+/**
+ * Egress network access control policy for a sandbox.
+ *
+ * `denyOut` takes precedence over `allowOut`: a destination matched by both is
+ * blocked. Entries may be IPv4 addresses, CIDR ranges, or DNS hostnames;
+ * hostname rules are followed across DNS changes. The policy can be changed on
+ * a running sandbox via `Sandbox.update({ network })` (pass `null` to clear).
+ */
 interface NetworkConfig {
     allowInternetAccess: boolean;
     allowOut: string[];
@@ -258,6 +266,12 @@ interface UpdateSandboxOptions {
     allowUnauthenticatedAccess?: boolean;
     /** User ports that should be routable through the sandbox proxy. Port 9501 is reserved. */
     exposedPorts?: number[];
+    /**
+     * Egress network policy for the running sandbox, applied to the live VM's
+     * firewall in one atomic swap. Omit to keep the current policy, set to
+     * replace it, or pass `null` to clear it to unrestricted egress.
+     */
+    network?: NetworkConfig | null;
 }
 interface CreateSandboxResponse {
     sandboxId: string;
@@ -877,10 +891,12 @@ declare class Sandbox {
      */
     status(): Promise<SandboxStatus>;
     /**
-     * Update this sandbox's properties (name, exposed ports, proxy auth).
+     * Update this sandbox's properties (name, exposed ports, proxy auth, and
+     * egress network policy).
      *
      * Naming an ephemeral sandbox makes it non-ephemeral and enables
-     * suspend/resume.
+     * suspend/resume. For `network`, omit to keep the current policy, pass an
+     * object to replace it, or pass `null` to clear it to unrestricted egress.
      */
     update(options: UpdateSandboxOptions): Promise<Traced<SandboxInfo>>;
     /**

package/dist/index.d.ts

@@ -213,6 +213,14 @@ interface GPUResources {
     count: number;
     model: string;
 }
+/**
+ * Egress network access control policy for a sandbox.
+ *
+ * `denyOut` takes precedence over `allowOut`: a destination matched by both is
+ * blocked. Entries may be IPv4 addresses, CIDR ranges, or DNS hostnames;
+ * hostname rules are followed across DNS changes. The policy can be changed on
+ * a running sandbox via `Sandbox.update({ network })` (pass `null` to clear).
+ */
 interface NetworkConfig {
     allowInternetAccess: boolean;
     allowOut: string[];
@@ -258,6 +266,12 @@ interface UpdateSandboxOptions {
     allowUnauthenticatedAccess?: boolean;
     /** User ports that should be routable through the sandbox proxy. Port 9501 is reserved. */
     exposedPorts?: number[];
+    /**
+     * Egress network policy for the running sandbox, applied to the live VM's
+     * firewall in one atomic swap. Omit to keep the current policy, set to
+     * replace it, or pass `null` to clear it to unrestricted egress.
+     */
+    network?: NetworkConfig | null;
 }
 interface CreateSandboxResponse {
     sandboxId: string;
@@ -877,10 +891,12 @@ declare class Sandbox {
      */
     status(): Promise<SandboxStatus>;
     /**
-     * Update this sandbox's properties (name, exposed ports, proxy auth).
+     * Update this sandbox's properties (name, exposed ports, proxy auth, and
+     * egress network policy).
      *
      * Naming an ephemeral sandbox makes it non-ephemeral and enables
-     * suspend/resume.
+     * suspend/resume. For `network`, omit to keep the current policy, pass an
+     * object to replace it, or pass `null` to clear it to unrestricted egress.
      */
     update(options: UpdateSandboxOptions): Promise<Traced<SandboxInfo>>;
     /**

package/dist/index.js

@@ -19,7 +19,7 @@ var SDK_VERSION, API_URL, API_KEY, NAMESPACE, SANDBOX_PROXY_URL, DEFAULT_HTTP_TI
 var init_defaults = __esm({
   "src/defaults.ts"() {
     "use strict";
-    SDK_VERSION = "0.5.95";
+    SDK_VERSION = "0.5.103";
     API_URL = process.env.TENSORLAKE_API_URL ?? "https://api.tensorlake.ai";
     API_KEY = process.env.TENSORLAKE_API_KEY ?? void 0;
     NAMESPACE = process.env.INDEXIFY_NAMESPACE ?? "default";
@@ -3438,10 +3438,12 @@ var init_sandbox = __esm({
         return info.status;
       }
       /**
-       * Update this sandbox's properties (name, exposed ports, proxy auth).
+       * Update this sandbox's properties (name, exposed ports, proxy auth, and
+       * egress network policy).
        *
        * Naming an ephemeral sandbox makes it non-ephemeral and enables
-       * suspend/resume.
+       * suspend/resume. For `network`, omit to keep the current policy, pass an
+       * object to replace it, or pass `null` to clear it to unrestricted egress.
        */
       async update(options) {
         const client = this.requireLifecycleClient("update");
@@ -4307,6 +4309,9 @@ var init_client = __esm({
         if (options.exposedPorts != null) {
           body.exposed_ports = normalizeUserPorts(options.exposedPorts);
         }
+        if (options.network !== void 0) {
+          body.network = options.network === null ? null : toSnakeKeys(options.network);
+        }
         if (Object.keys(body).length === 0) {
           throw new SandboxError(
             "At least one sandbox update field must be provided."