Start background preparation using this workspace’s payer-account rules, on the named
providers or on the top providers a create with the match body would pick now.
A named provider that cannot run the image reports its fit reason immediately; a
match body that no route can run is refused as that create would be. With match,
the response lists the picked providers in rank order, and each reason says how it
was ranked. A ready result means a usable copy existed when preparation completed;
it does not keep the copy awake afterward. Read progress from GET /images/preparations.
OCI and Dockerfile inputs use the same declared preparation capabilities as a create.
A Dockerfile response returns a content selector for status and unprepare. If no selected
offering declares prepared Dockerfile/context support, it is refused before reading the
context or starting provider work. Existing provider artifacts are already prepared.
The request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.
BoxRouter API key; never an upstream provider key.
Headers
Idempotency-Key
string
Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads.
Stable identifier for one logical mutation.
Required string length: 1 - 128
Body
application/json
Option 1
Option 2
Two forms; send exactly one. {image, providers, sizes?} prepares on the named
providers. {match, top?} takes the body you send to POST /sandboxes or
POST /sandboxes/match: Cloud ranks routes exactly as that create would now, under this
workspace's payer rules, and prepares match.image on the first top distinct
providers, at match.resources. Fields that do not choose a route, such as env and
labels, are ignored. Ranking can change later, for example when prices or measured
start times change, so a later create may pick a provider that was not prepared.
providers
string[]string
required
Provider names or all providers configured for this workspace.
Image to prepare. Only with providers. A string is an OCI image reference. Use
{private_oci} for an image whose registry needs a login, together with
registry_credentials; it is prepared only on routes that use your own provider keys.
A Dockerfile object uses the same source text and optional uploaded context artifact
as a sandbox create. Only offerings declaring that prepared source and context mode
are selected. The whole JSON request is limited to 64 KiB.
Minimum string length: 1
registry_credentials
object
Request-only login for a private_oci image; required with it and refused without it.
With match, send it inside the match body instead. Both strings are non-empty, at
most 64 KiB UTF-8 bytes together. It is passed to the provider to set up the copy and
is never stored, logged, traced or returned.
Show child attributes
sizes
integer[]
Optional memory sizes to prepare, expressed in GiB. Only with providers.
Minimum array length: 1
Required range: x >= 1
match
object
requirediftopis set
A sandbox create body. Its image is an OCI reference or Dockerfile build object,
optionally with context_artifact_id. A missing image, provider_default, an existing
provider artifact has nothing to prepare and is refused. Only
declared prepared source/context variants are eligible. A private_oci image is
prepared with the body's registry_credentials, only on routes that use your own
provider keys.
Show child attributes
top
integer
default:1
With match, how many of the best-ranked distinct providers to prepare on. Fewer
are prepared when fewer providers can run the create.
Required range: x >= 1
Response
Preparation started or already in progress.
image
string
required
Resolved OCI reference or the canonical sha256 content selector of a Dockerfile source and context.
providers
object[]
required
Show child attributes
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"BoxRouter","description":"Run sandboxes, coding agents, and GitHub Actions jobs on any provider through one API.","colors":{"primary":"#047857","light":"#6ee7b7","dark":"#10b981"},"logo":{"light":"https://mintcdn.com/nv-4965711d/xqQLsJs3vPQQ6w_V/brand-mark.svg?fit=max\u0026auto=format\u0026n=xqQLsJs3vPQQ6w_V\u0026q=85\u0026s=34456eec220b466fd4503f478e120e5b","dark":"https://mintcdn.com/nv-4965711d/xqQLsJs3vPQQ6w_V/brand-mark.svg?fit=max\u0026auto=format\u0026n=xqQLsJs3vPQQ6w_V\u0026q=85\u0026s=34456eec220b466fd4503f478e120e5b","href":"https://boxrouter.ai/"},"favicon":"https://mintcdn.com/nv-4965711d/QLfzpIkb_yuLLqxB/tab-icon.svg?fit=max\u0026auto=format\u0026n=QLfzpIkb_yuLLqxB\u0026q=85\u0026s=768e4d931174b769c852362ed31f7768","api":{"playground":{"display":"none"}},"appearance":{"default":"dark","strict":false},"background":{"color":{"light":"#ffffff","dark":"#03080a"}},"navbar":{"links":[{"href":"https://boxrouter.ai/benchmarks","label":"Benchmarks"},{"href":"/","label":"Docs"}],"primary":{"type":"button","label":"Sign In","href":"https://boxrouter.ai/?return_to=%2Fdashboard"}},"footer":{"links":[{"header":"Company","items":[{"label":"Terms of Service","href":"https://boxrouter.ai/terms"},{"label":"Privacy Policy","href":"https://boxrouter.ai/privacy"},{"label":"Refund Policy","href":"https://boxrouter.ai/refunds"}]},{"header":"Developer","items":[{"label":"Docs","href":"https://boxrouter.ai/docs"},{"label":"Support","href":"https://boxrouter.ai/support"},{"label":"Security","href":"https://boxrouter.ai/security"},{"label":"Service Providers","href":"https://boxrouter.ai/subprocessors"}]},{"header":"Product","items":[{"label":"Dashboard","href":"https://boxrouter.ai/dashboard"},{"label":"Benchmarks","href":"https://boxrouter.ai/benchmarks"}]},{"header":"Connect","items":[{"label":"Contact Us","href":"https://boxrouter.ai/feedback?topic=docs\u0026from=docs"},{"label":"Book a Call","href":"https://calendly.com/andre-boxrouter/boxrouter-intro-call"},{"label":"X","href":"https://x.com/boxrouter_ai"},{"label":"LinkedIn","href":"https://www.linkedin.com/company/boxrouter"},{"label":"Discord","href":"https://discord.gg/3tRbPUJ2bZ"}]}]},"styling":{"codeblocks":{"theme":"css-variables"},"latex":false},"contextual":{"options":["copy","view"],"display":"header"},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"nv-4965711d","hasAudioNarration":false,"actualSubdomain":"nv-4965711d","customDomains":["boxrouter.ai"],"gitSource":{"type":"github","owner":"boxrouter","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":"","_id":"6ae62c8bfb7ed7cff8d909d4"},"entitlements":{"AI_CHAT":{"status":"DISABLED"},"WEB_MCP":{"status":"DISABLED"},"NARRATION":{"status":"DISABLED"}},"buildId":"6af9ce26f845026aa4bf2673","clientVersion":"0.0.4143","searchFilterCounts":[{"language":"default","tag":"API Reference","count":145},{"language":"default","tag":"GitHub Actions","count":34},{"language":"default","tag":"Guides","count":28},{"language":"default","tag":"Credits and Billing","count":24},{"language":"default","tag":"Sandboxes","count":20},{"language":"default","tag":"Volumes","count":15},{"language":"default","tag":"Agents","count":12},{"language":"default","tag":"Files","count":10},{"language":"default","tag":"Provider Accounts","count":8},{"language":"default","tag":"Launch an Agent","count":7}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"/docs","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"docs-search.css","content":".bxs-dialog{--bxs-bg: #071114;--bxs-line: rgba(252, 252, 254, 0.12);--bxs-text: #eef2f3;--bxs-muted: #a3b0b4;--bxs-accent-text: #6ee7b7;--bxs-focus: rgba(252, 252, 254, 0.6);--bxs-hover: rgba(252, 252, 254, 0.08);position:fixed;inset:10vh 0 auto;width:min(640px, calc(100vw - 24px));max-width:none;max-height:80dvh;margin:0 auto;padding:0;overflow:hidden;color:var(--bxs-text);background:var(--bxs-bg);border:1px solid var(--bxs-line);border-radius:14px;box-shadow:0 24px 64px rgba(0, 0, 0, 0.6);font-family:var(--site-font, inherit)}.bxs-dialog::backdrop{background:rgba(3, 8, 10, 0.72)}.bxs-dialog[open]{display:flex;flex-direction:column}.bxs-panel{display:flex;flex-direction:column;min-height:0;max-height:80dvh}.bxs-sr{position:absolute;width:1px;height:1px;margin:-1px;padding:0;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}.bxs-head{display:flex;align-items:center;gap:10px;padding:0 12px 0 16px;border-bottom:1px solid var(--bxs-line)}.bxs-icon{flex:none;width:18px;height:18px;color:var(--bxs-muted)}.bxs-input{flex:1;min-width:0;height:56px;padding:0;color:var(--bxs-text);background:transparent;border:0;border-radius:6px;font-size:16px;outline:none}.bxs-input::placeholder{color:var(--bxs-muted)}.bxs-input:focus,.bxs-input:focus-visible{outline:none}.bxs-head:focus-within{box-shadow:inset 0 -2px 0 var(--bxs-focus)}.bxs-close{flex:none;min-width:44px;height:32px;padding:0 8px;color:var(--bxs-muted);background:transparent;border:1px solid var(--bxs-line);border-radius:6px;font-size:12px;font-weight:600;cursor:pointer}.bxs-close:hover{color:var(--bxs-text);border-color:rgba(252, 252, 254, 0.3)}.bxs-close:focus-visible,.bxs-option:focus-visible{outline:2px solid var(--bxs-focus);outline-offset:2px}.bxs-close-x{display:none;font-size:20px;line-height:1}.bxs-status{margin:0;padding:12px 16px 6px;color:var(--bxs-muted);font-size:12px;font-weight:600}.bxs-list{flex:1;min-height:0;padding:4px 8px 8px;overflow-y:auto;overscroll-behavior:contain}.bxs-list[hidden]{display:none}.bxs-option{position:relative;display:block;padding:10px 12px 10px 14px;color:inherit;border-radius:8px;text-decoration:none;scroll-margin:8px}.bxs-option[aria-selected=\"true\"],.bxs-fallback .bxs-option:hover{background:var(--bxs-hover)}.bxs-option[aria-selected=\"true\"]::before{content:\"\";position:absolute;inset:8px auto 8px 0;width:3px;background:var(--bxs-focus);border-radius:2px}.bxs-option .bxs-title{display:block;font-size:15px;font-weight:600;line-height:1.4}.bxs-crumb{display:block;margin-top:1px;color:var(--bxs-muted);font-size:12px;line-height:1.5}.bxs-crumb:empty{display:none}.bxs-snippet{margin-top:4px;color:var(--bxs-muted);font-size:13px;line-height:1.5;overflow-wrap:anywhere;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:3;overflow:hidden}.bxs-snippet:empty{display:none}.bxs-mark{color:var(--bxs-accent-text);background:transparent;font-weight:700}.bxs-foot{display:flex;margin:0;padding:8px 16px;color:var(--bxs-muted);border-top:1px solid var(--bxs-line);font-size:12px}@media (max-width: 640px){.bxs-dialog{inset:12px 0 auto;max-height:calc(100dvh - 24px)}.bxs-panel{max-height:calc(100dvh - 24px)}.bxs-close{min-width:44px;height:44px;border:0}.bxs-close-label,.bxs-foot{display:none}.bxs-close-x{display:inline}.bxs-option{padding-block:12px}}"},{"filePath":"style.css","content":"@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-basic.woff2) format(\"woff2\");unicode-range:U+0020-007E, U+00A0-00FF, U+2013-2014, U+2019, U+201C-201D, U+2022, U+2026, U+203A, U+2190-2193, U+2197, U+2212, U+2248, U+2264-2265, U+24D8, U+25B4, U+25BE, U+25CB, U+25CC, U+25CF, U+2713, U+2715}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-cyrillic-ext.woff2) format(\"woff2\");unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-vietnamese.woff2) format(\"woff2\");unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-latin-ext.woff2) format(\"woff2\");unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-latin.woff2) format(\"woff2\");unicode-range:U+0000-001F, U+007F-009F, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-2012, U+2015-2018, U+201A-201B, U+201E-201F, U+2023-2025, U+2027-2039, U+203B-206F, U+20AC, U+2122, U+2215, U+FEFF, U+FFFD}body{word-spacing:0.1em}pre,code{word-spacing:normal}:root{--heading-text: #fcfcfef2;--lead-gap: 32px;--hairline: #e2ecef1a;--hairline-width: 1px}html{font-feature-settings:normal}body.antialiased,.antialiased{-webkit-font-smoothing:auto;-moz-osx-font-smoothing:auto}:root{--site-font: \"Plus Jakarta Sans\", -apple-system, BlinkMacSystemFont, \"Plus Jakarta Sans Fallback Segoe UI\", \"Segoe UI\", \"Plus Jakarta Sans Fallback DejaVu Sans\", \"Plus Jakarta Sans Fallback Roboto\", sans-serif}body,button,input,h1,h2,h3,h4,h5,h6{font-family:var(--site-font)!important}#navbar .max-w-8xl{max-width:none}#navbar .h-16{height:56px;margin:0;padding:0}#navbar .h-16>.border-b{padding:0 24px}#navbar .nav-tabs{margin-left:4px}#navbar>div>div>div.lg\\:flex.px-12,#navbar .hidden.lg\\:flex.px-12.h-12{padding-left:28px;padding-right:28px}#navbar a:has(>.nav-logo){display:inline-flex;align-items:center;gap:4px;margin-left:4px;color:var(--bx-fg);text-decoration:none}#navbar .nav-logo{width:40px;height:40px}#navbar a:has(>.nav-logo)::after{content:\"BoxRouter\";font-family:var(--site-font);font-size:20px;font-weight:600;letter-spacing:-0.5px;line-height:1;white-space:nowrap}#navbar nav[aria-label=\"Main\"] ul{gap:4px}#navbar nav[aria-label=\"Main\"] ul>li{margin:0!important}#navbar nav[aria-label=\"Main\"] ul>li.navbar-link>a{height:32px;padding:0 8px;border-radius:6px;color:var(--bx-site-muted);font-size:14px;font-weight:500;line-height:1.625;word-spacing:0.1em;transition:color 0.15s, background-color 0.15s}#navbar nav[aria-label=\"Main\"] ul>li.navbar-link>a:hover{color:var(--bx-link);background-color:var(--bx-accent-wash)}#navbar nav[aria-label=\"Main\"] ul>li.navbar-link>a:not([href^=\"https:\"]){color:var(--bx-fg)}#navbar #topbar-cta-button{margin-left:8px!important}#navbar #topbar-cta-button a{justify-content:center;height:32px;min-width:100px;padding:0 12px;line-height:1.625;word-spacing:0.1em}#navbar #topbar-cta-button a>span.absolute{border-radius:6px;background:#10b981}#navbar #topbar-cta-button a:hover>span.absolute{opacity:1;background:#10b981e0}#navbar #topbar-cta-button a .text-white{color:#03080a;font-weight:500}#navbar #topbar-cta-button a svg{display:none}#navbar .ml-auto>div:empty{display:none}#navbar .h-16>.border-b>.ml-auto{gap:4px}#navbar .h-16>.border-b>.ml-auto>*{margin:0!important}#navbar .ml-auto>div:has(>#theme-preference-menu-trigger){order:-1}@media (max-width: 1023px){#navbar .h-16>.border-b{gap:4px;padding:0 16px}#navbar .h-16>.border-b>.ml-auto{display:flex;flex:none;order:2}#navbar .h-16>.border-b>.ml-auto nav li:not(#topbar-cta-button){display:none}#navbar #topbar-cta-button{display:flex;margin-left:0!important}#navbar .h-16>.border-b>.lg\\:hidden{display:contents}#navbar #search-bar-entry-mobile{flex:none;order:1}#navbar .h-16>.border-b>.lg\\:hidden>:last-child{flex:none;order:3}}@media (max-width: 360px){#navbar .nav-logo{width:36px;height:36px}#navbar a:has(>.nav-logo){gap:3.6px}#navbar a:has(>.nav-logo)::after{font-size:18px}#navbar #topbar-cta-button a{min-width:0;padding:0 10px}#navbar #search-bar-entry-mobile{display:none!important}#navbar #theme-preference-menu-trigger{width:28px;padding-inline:6px}}#navbar nav[aria-label=\"Main\"]{margin-right:0!important}:root{--bx-bg: #ffffff;--bx-raised: #f6f8f7;--bx-raised-2: #eef2f0;--bx-line: #0b121014;--bx-line-strong: #0b121026;--bx-fg: #0b1210;--bx-body: #0b1210c9;--bx-muted: #0b1210a6;--bx-site-muted: var(--bx-muted);--bx-faint: #0b121057;--bx-accent: #10b981;--bx-link: #046c4f;--bx-accent-ink: #062a1e;--bx-accent-wash: #10b98110;--bx-accent-line: #05966973;--bx-warn: #b45309;--bx-warn-wash: #f59e0b0f;--bx-warn-line: #d9770652;--bx-font-mono: ui-monospace, \"SF Mono\", SFMono-Regular, Menlo, Consolas, monospace;--bx-code-background: var(--bx-raised);--bx-code-foreground: #1f2725;--bx-code-token-constant: #1f2725;--bx-code-token-string: #985a12;--bx-code-token-comment: #0b1210a3;--bx-code-token-keyword: #047857;--bx-code-token-parameter: #1f2725;--bx-code-token-function: #0b1210;--bx-code-token-string-expression: #985a12;--bx-code-token-punctuation: #1f2725;--bx-code-token-link: #047857}html:not(.dark){--heading-text: #0b1210f2;--hairline: #0b12101a}html.dark{--bx-bg: #03080a;--bx-raised: #0a1013;--bx-raised-2: #0f171a;--bx-line: #fcfcfe14;--bx-line-strong: #fcfcfe26;--bx-fg: #fcfcfe;--bx-body: #fcfcfec7;--bx-muted: #fcfcfe96;--bx-site-muted: #fcfcfea0;--bx-faint: #fcfcfe52;--bx-link: #6ee7b7;--bx-accent-ink: #03080a;--bx-accent-wash: #10b98112;--bx-accent-line: #10b98166;--bx-warn: #fbbf24;--bx-warn-wash: #fbbf240a;--bx-warn-line: #fbbf2447;--bx-code-foreground: #d9dfdd;--bx-code-token-constant: #d9dfdd;--bx-code-token-string: #e8cf9f;--bx-code-token-comment: #fcfcfe8f;--bx-code-token-keyword: #6ee7b7;--bx-code-token-parameter: #d9dfdd;--bx-code-token-function: #fcfcfe;--bx-code-token-string-expression: #e8cf9f;--bx-code-token-punctuation: #d9dfdd;--bx-code-token-link: #6ee7b7}#content :is(.code-block,.code-group,.bx-output){--mint-background: var(--bx-code-background);--mint-foreground: var(--bx-code-foreground);--mint-token-constant: var(--bx-code-token-constant);--mint-token-string: var(--bx-code-token-string);--mint-token-comment: var(--bx-code-token-comment);--mint-token-keyword: var(--bx-code-token-keyword);--mint-token-parameter: var(--bx-code-token-parameter);--mint-token-function: var(--bx-code-token-function);--mint-token-string-expression: var(--bx-code-token-string-expression);--mint-token-punctuation: var(--bx-code-token-punctuation);--mint-token-link: var(--bx-code-token-link)}:focus-visible{outline:2px solid var(--bx-link);outline-offset:2px}#navbar .border-b{border-color:var(--bx-line)!important}#navbar #search-bar-entry{border-color:var(--bx-line)!important;background:var(--bx-raised)!important;border-radius:6px!important;color:var(--bx-muted)!important}#navbar #search-bar-entry:hover{border-color:var(--bx-line-strong)!important}#navbar .nav-tabs a,#navbar [data-component-part=\"nav-tabs-item\"]{font-size:14px;font-weight:500}#navbar .nav-tabs-item,#navbar .nav-tabs-item>div{color:var(--bx-muted)}#navbar .nav-tabs-item[data-active=\"true\"]>div,#navbar .nav-tabs-item:hover>div{color:var(--bx-fg)!important}#navbar .nav-tabs-item>div>div:last-child,#navbar .nav-tabs-item [class*=\"bg-primary\"]{background:var(--bx-accent)!important}#sidebar .sidebar-group-header{color:var(--heading-text)!important;font-size:13px;line-height:20px;font-weight:600}#sidebar .sidebar-group li>a{border-radius:6px!important;font-size:14px;line-height:20px;color:var(--bx-muted)!important}#sidebar .sidebar-group li>a:hover{color:var(--bx-fg)!important;background:var(--bx-raised)!important}#sidebar .sidebar-group li>a[data-active=\"true\"],#sidebar .sidebar-group li>a.font-medium,#sidebar .sidebar-group li>a[class*=\"bg-primary\"]{color:var(--bx-link)!important;background:var(--bx-accent-wash)!important;font-weight:500}#table-of-contents .toc-item a{color:var(--bx-muted)!important;font-size:13px;line-height:20px}#table-of-contents .toc-item a:hover{color:var(--bx-fg)!important}#table-of-contents .toc-item[data-active] a{color:var(--bx-fg)!important;text-shadow:none!important}#table-of-contents button{font-size:13px;font-weight:600;color:var(--bx-fg)!important}#header .eyebrow{margin-bottom:0;font-size:13px;line-height:20px;font-weight:600;color:var(--bx-link)!important}#page-title{font-size:32px!important;line-height:40px!important;font-weight:650!important;letter-spacing:-0.02em;color:var(--heading-text)!important;text-wrap:balance}#header .prose{margin-top:12px;font-size:18px;line-height:30px;color:var(--bx-muted)!important;text-wrap:pretty;position:relative}#header .prose p{margin:0}#header .prose::after{content:\"\";position:absolute;left:0;right:0;top:calc(100% + (var(--lead-gap) - var(--hairline-width)) / 2);border-top:var(--hairline-width) solid var(--hairline);pointer-events:none}#header+#content{margin-top:var(--lead-gap)!important}#page-context-menu button{border-color:var(--bx-line)!important;background:none!important;color:var(--bx-muted)!important;font-size:13px}#page-context-menu button:hover{border-color:var(--bx-line-strong)!important;color:var(--bx-fg)!important}#header{position:relative}#page-context-menu{position:absolute;top:-26px;right:0}#page-context-menu button{height:28px!important;padding-block:0!important}#page-context-menu>div{display:none}@media (min-width: 1024px){#content-area{padding-left:4.5rem!important}}#content{font-size:16px;line-height:28px;color:var(--bx-body)}#content p,#content li{text-wrap:pretty}#content :is(strong,b){color:var(--bx-fg)!important}#content :is(h2,h3,h4){color:var(--heading-text)!important}#content strong{font-weight:600}#content h2:not([data-component-part]){margin:56px 0 0!important;font-size:22px;line-height:30px;font-weight:600;letter-spacing:-0.01em;text-wrap:balance}#content h2:not([data-component-part]){margin-bottom:12px!important}#content h3:not([data-component-part]){margin:32px 0 0!important;font-size:18px;line-height:28px;font-weight:600}#content h3:not([data-component-part]){margin-bottom:8px!important}#content li::marker{color:var(--bx-faint)}@media (max-width: 600px){#page-title{font-size:28px!important;line-height:36px!important}#header .prose{font-size:17px;line-height:28px}#content h2:not([data-component-part]){margin-top:48px!important;font-size:20px;line-height:28px}#content h3{font-size:17px;line-height:24px}}#content a.link,#content a:not([class]),#header .prose a{color:var(--bx-link)!important;font-weight:inherit!important;border-bottom:0!important;text-decoration:underline;text-decoration-color:var(--bx-accent-line);text-decoration-thickness:1px;text-underline-offset:3px;transition:text-decoration-color 0.15s}#content a.link:hover,#content a:not([class]):hover{text-decoration-color:currentColor}#content :not(pre)>code,#header .prose code{padding:1px 5px;border:1px solid var(--bx-line);border-radius:4px;background:var(--bx-raised);color:var(--bx-fg)!important;font-weight:500;font-size:0.875em;font-family:var(--bx-font-mono);overflow-wrap:anywhere}#content :is(h2,h3,h4) code{padding:0;border:0;background:none;font-size:inherit;font-weight:inherit}#content a>code{color:inherit!important}#content :not(pre)>code::before,#content :not(pre)>code::after{content:none}#content .code-block,#content .code-group{margin:16px 0!important;border:1px solid var(--bx-line)!important;border-radius:8px!important;background:var(--bx-raised)!important;box-shadow:none!important;padding:0!important}#content .code-block [data-component-part=\"code-block-root\"]{border-radius:7px!important;background:transparent!important}#content :is(pre,code,.font-mono),#content .code-block :is(pre,code,span),#content .code-group :is(pre,code,span){font-family:var(--bx-font-mono)!important}#content .code-block pre,#content .code-group pre{font:400 14px/22px var(--bx-font-mono);background:transparent!important}#content .code-block [data-component-part=\"scroll-area-viewport\"]{padding:14px 16px!important}#content [data-floating-buttons]{top:6px!important;right:6px!important}#content [data-floating-buttons] button,#content .code-group-tab-bar button[aria-label*=\"Copy\"],#content .code-group [data-testid=\"copy-code-button\"]{background:transparent!important;color:var(--bx-muted)!important;border-radius:6px}#content [data-floating-buttons] button:hover,#content .code-group [data-testid=\"copy-code-button\"]:hover{background:var(--bx-raised-2)!important;color:var(--bx-fg)!important}#content [data-floating-buttons] svg,#content .code-group [data-testid=\"copy-code-button\"] svg{color:inherit!important}#content .code-group>[data-component-part=\"code-group-tab-bar\"]{min-height:40px;padding-right:6px;border-bottom:1px solid var(--bx-line)}#content .code-group [role=\"tab\"]{color:var(--bx-muted)!important;font-size:13px}#content .code-group [role=\"tab\"][aria-selected=\"true\"]{color:var(--bx-fg)!important}#content .code-group [role=\"tab\"]>div{color:inherit!important}#content .code-group [role=\"tab\"]:hover>div{background:transparent!important;color:var(--bx-fg)!important}#content .code-group [role=\"tab\"] .bg-primary,#content .code-group [role=\"tab\"] [class*=\"bg-primary\"]{background:var(--bx-accent)!important}#content .code-group .code-block{margin:0!important;border:0!important;border-radius:0!important;background:transparent!important}#content .code-block-fade-overlay{display:none}#content :is(.code-block,.code-group) [data-component-part=\"scroll-area-viewport\"][data-overflow-x-end]{-webkit-mask-image:linear-gradient(to right, #000 calc(100% - 40px), transparent);mask-image:linear-gradient(to right, #000 calc(100% - 40px), transparent)}#content :is(.code-block,.code-group):has(+.bx-output){margin-bottom:0!important;border-bottom-left-radius:0!important;border-bottom-right-radius:0!important}#content .bx-output{margin:0 0 16px;padding:10px 16px 12px;border:1px solid var(--bx-line);border-radius:8px;background:var(--bx-bg)}#content :is(.code-block,.code-group)+.bx-output{border-top:0;border-top-left-radius:0;border-top-right-radius:0}#content .bx-output-label{display:flex;align-items:center;gap:6px;margin:0;font-size:12px;line-height:20px;font-weight:600;color:var(--bx-muted);opacity:1}#content .bx-output-label svg{width:13px;height:13px;color:var(--bx-link)}#content .bx-output,#content .bx-output :is(.code-block,.code-group){--mint-background: var(--bx-bg)}#content .bx-output :is(.code-block,.code-group),#content .bx-output .code-group [data-component-part=\"code-block-root\"]{margin:0!important;padding:0!important;border:0!important;border-radius:0!important;background:transparent!important;box-shadow:none!important}#content .bx-output .code-group [data-component-part=\"code-group-tab-bar\"]{display:none}#content .bx-output :is(.code-block,.code-group) [data-component-part=\"scroll-area-viewport\"]{padding:4px 0 0!important}#content .bx-output [data-floating-buttons]{display:none}#content .bx-output pre{color:var(--bx-fg)}#content .callout{margin:16px 0;padding:14px 16px!important;gap:12px;border:1px solid var(--bx-line-strong)!important;border-radius:8px!important;background:var(--bx-raised)!important}#content .callout [data-component-part=\"callout-content\"]{font-size:15px;line-height:24px;color:var(--bx-body)!important}#content .callout [data-component-part=\"callout-content\"] :is(a,strong,code){color:var(--bx-fg)!important}#content .callout [data-component-part=\"callout-content\"] a{color:var(--bx-link)!important}#content .callout [data-component-part=\"callout-icon\"]{margin-top:3px;color:var(--bx-muted)}#content .callout [data-component-part=\"callout-icon\"] svg{color:inherit!important;fill:currentColor}#content .callout[data-callout-type=\"warning\"]{border-color:var(--bx-warn-line)!important;background:var(--bx-warn-wash)!important}#content .callout[data-callout-type=\"warning\"] [data-component-part=\"callout-icon\"]{color:var(--bx-warn)}#content .steps{margin:32px 0 16px 0}#content .steps [data-component-part=\"step-indicator\"]{border:1px solid var(--bx-line-strong);background:var(--bx-bg)!important;color:var(--bx-fg)!important;font-size:13px}#content .steps [data-component-part=\"step-line\"]{background:var(--bx-line)!important}#content .steps .step{padding-bottom:36px}#content .steps [data-component-part=\"step-content\"]>:first-child{margin-top:8px}#content .steps [data-component-part=\"step-content\"]>:last-child{margin-bottom:0}#content .steps .step:last-child{padding-bottom:0}#content .steps [data-component-part=\"step-title\"]{font-size:18px;line-height:28px;font-weight:600;color:var(--bx-fg)!important}#content .tabs [data-component-part=\"tabs-list\"]{border-color:var(--bx-line)!important;margin-bottom:16px}#content .tabs [data-component-part=\"tab-button\"]{color:var(--bx-site-muted)!important;font-size:14px;font-weight:500;border-bottom-width:2px;border-color:transparent!important}#content .tabs [data-component-part=\"tab-button\"]:hover{color:var(--bx-fg)!important}#content .tabs [data-component-part=\"tab-button\"][data-active=\"true\"]{color:var(--bx-fg)!important;border-color:var(--bx-accent)!important}#content table{font-size:14px;line-height:22px}#content th{padding:0 14px 8px 0;border-bottom:1px solid var(--bx-line-strong)!important;font-size:13px;font-weight:600;color:var(--bx-muted)!important}#content td{padding:10px 14px 10px 0;border-bottom:1px solid var(--bx-line)!important;vertical-align:top;color:var(--bx-body)}#content td:last-child,#content th:last-child{padding-right:0}#content tr{border:0!important}#content td code{overflow-wrap:anywhere}@media (min-width: 1280px){#content [data-component-part=\"scroll-area\"]:has(table){width:calc(100% + var(--page-padding) * 2 + 56px)}}#content .columns{gap:12px}#content .columns>.card:last-child:nth-child(odd){grid-column:1 / -1}#content .card{margin:0;border:1px solid var(--bx-line)!important;border-radius:8px!important;background:transparent!important;box-shadow:none!important;transition:border-color 0.15s, background-color 0.15s}html.dark #content .card{--primary-light: 40 45 47}html:not(.dark) #content .card{--primary: 214 217 216}html.dark #content .card [data-component-part=\"card-icon\"]{--primary-light: 150 152 154}html:not(.dark) #content .card [data-component-part=\"card-icon\"]{--primary: 96 101 99}html.dark #content .card:hover [data-component-part=\"card-icon\"]{--primary-light: 110 231 183}html:not(.dark) #content .card:hover [data-component-part=\"card-icon\"]{--primary: 4 120 87}#content .card:hover{border-color:var(--bx-line-strong)!important;background:var(--bx-raised)!important}#content .card [data-component-part=\"card-content-container\"]{padding:16px 18px}#content .card [data-component-part=\"card-icon\"],#content .card [data-component-part=\"card-icon\"] svg{width:18px;height:18px;color:var(--bx-muted);fill:currentColor;transition:color 0.15s}#content .card:hover [data-component-part=\"card-icon\"],#content .card:hover [data-component-part=\"card-icon\"] svg{color:var(--bx-link)}#content .card [data-component-part=\"card-title\"]{margin:8px 0 0!important;font-size:15px;line-height:22px;font-weight:600;color:var(--bx-fg)!important}#content .card [data-component-part=\"card-content\"]{margin-top:2px;font-size:14px;line-height:22px;color:var(--bx-muted)!important}#content .card:focus-visible{outline:2px solid var(--bx-link);outline-offset:2px}#content details{border:1px solid var(--bx-line)!important;border-radius:8px!important;background:transparent!important}#content details>summary{color:var(--bx-fg);font-size:15px;font-weight:500}#content details>summary:hover{background:var(--bx-raised)}#pagination{margin-top:64px;gap:12px}#pagination a{flex:1;padding:12px 16px;border:1px solid var(--bx-line);border-radius:8px;color:var(--bx-fg);transition:border-color 0.15s}#pagination a:hover{border-color:var(--bx-line-strong)}#pagination [data-component-part=\"pagination-title\"]{color:var(--bx-fg)!important}#pagination a[rel=\"next\"]{justify-content:flex-end;text-align:right}#sidebar .method-nav-pill>span{background:transparent!important;border:1px solid var(--bx-line-strong);color:var(--bx-muted)!important;font-family:var(--bx-font-mono)}#footer a[href*=\"mintlify.com\"],#footer div:has(>div>a[href*=\"mintlify.com\"]){display:none!important}#footer *{border-color:var(--bx-line)!important}#footer{display:block!important;max-width:none!important;margin:0!important;padding:32px 7% 36px!important;border-top:1px solid var(--bx-line)!important}#footer>div{display:block!important;max-width:none!important;margin:0!important;padding:0!important}#footer>div>div:has(+div>div>a[href*=\"mintlify.com\"]){display:none!important}#footer>div>div:first-child{display:grid!important;grid-template-columns:max-content minmax(0, 1fr);column-gap:24px;row-gap:24px;min-height:0!important}#footer>div>div:first-child>div:first-child{display:flex!important;min-width:0!important;margin-right:16px}#footer>div>div:first-child>div:last-child{display:grid!important;grid-template-columns:repeat(4, minmax(0, 1fr))!important;gap:24px}#footer>div>div:first-child>div:last-child>div{display:block!important;min-width:0;align-items:stretch!important}#footer>div>div:first-child>div:last-child>div>div{display:grid!important;align-content:start;gap:6px}#footer a[class~=\"select-none\"]{display:inline-flex!important;align-items:flex-start;gap:10px;text-decoration:none}#footer a[class~=\"select-none\"] img{flex:none;width:28px;height:28px}#footer a[class~=\"select-none\"]::after{content:\"BoxRouter\";color:var(--bx-fg);font-size:14px;font-weight:600;line-height:28px}#footer p{margin:0 0 4px!important;color:var(--bx-fg)!important;font-size:13px;line-height:1.3;font-weight:600}#footer a:not([class~=\"select-none\"]){max-width:none!important;overflow:visible!important;text-overflow:clip!important;white-space:normal!important;color:var(--bx-site-muted)!important;font-size:14px;line-height:1.625;font-weight:450}#footer a:not([class~=\"select-none\"]):hover{color:var(--bx-fg)!important}@media (max-width: 760px){#footer{padding:28px 20px 36px!important}#footer>div>div:first-child{grid-template-columns:minmax(0, 1fr)!important}#footer>div>div:first-child>div:first-child{margin-right:0}#footer>div>div:first-child>div:last-child{grid-template-columns:repeat(2, minmax(0, 1fr))!important;gap:20px 16px}}@media (max-width: 420px){#footer>div>div:first-child>div:last-child{display:flex!important;flex-direction:column}}#assistant-entry,[data-testid=\"feedback-toolbar\"],#feedback-toolbar,.feedback-toolbar{display:none!important}.doc-figure{margin:32px 0 0;container-type:inline-size;container-name:docfig}.doc-figure img{display:none;width:100%;height:auto;margin:0}.doc-figure .doc-figure-desktop{max-width:560px}.doc-figure .doc-figure-mobile.doc-figure-light,.doc-figure .doc-figure-mobile.doc-figure-dark{display:none}.doc-figure .doc-figure-desktop.doc-figure-light{display:block}.dark .doc-figure .doc-figure-desktop.doc-figure-light{display:none}.dark .doc-figure .doc-figure-desktop.doc-figure-dark{display:block}.doc-figure .doc-figure-caption{margin:10px 0 0;font-size:14px;line-height:22px;color:var(--bx-muted);opacity:1}@container docfig (max-width: 479px){.doc-figure .doc-figure-desktop.doc-figure-light,.dark .doc-figure .doc-figure-desktop.doc-figure-dark{display:none}.doc-figure .doc-figure-mobile.doc-figure-light{display:block;max-width:440px;margin-inline:auto}.dark .doc-figure .doc-figure-mobile.doc-figure-light{display:none}.dark .doc-figure .doc-figure-mobile.doc-figure-dark{display:block;max-width:440px;margin-inline:auto}}@supports not (container-type: inline-size){@media (max-width: 600px){.doc-figure .doc-figure-desktop.doc-figure-light,.dark .doc-figure .doc-figure-desktop.doc-figure-dark{display:none}.doc-figure .doc-figure-mobile.doc-figure-light{display:block;max-width:440px;margin-inline:auto}.dark .doc-figure .doc-figure-mobile.doc-figure-light{display:none}.dark .doc-figure .doc-figure-mobile.doc-figure-dark{display:block;max-width:440px;margin-inline:auto}}}.bx-diagram{margin:32px 0 0;container-type:inline-size;container-name:bxdiagram}.bx-diagram svg{display:block;width:100%;height:auto}.bx-diagram .bx-diagram-mobile{display:none}.bx-diagram-caption{margin-top:10px;font-size:14px;line-height:22px;color:var(--bx-muted)}@container bxdiagram (max-width: 559px){.bx-diagram .bx-diagram-desktop:not(:only-child){display:none}.bx-diagram .bx-diagram-mobile{display:block;max-width:440px;margin-inline:auto}}html{overflow-y:scroll}[class*=\"active:scale\"]:active{scale:none!important}html{overscroll-behavior-x:none}[data-component-part=\"scroll-area-viewport\"]{overscroll-behavior-x:contain}"}],"page":{"pagePath":"reference/prepare-image","slug":"/reference/prepare-image","pageMetadata":{"title":"Prepare an Image on Selected Providers","openapi":"openapi.json POST /images/prepare","description":"Start background preparation using this workspace's payer-account rules, on the named\n`providers` or on the `top` providers a create with the `match` body would pick now.\nA named provider that cannot run the image reports its fit reason immediately; a\n`match` body that no route can run is refused as that create would be. With `match`,\nthe response lists the picked providers in rank order, and each reason says how it\nwas ranked. A ready result means a usable copy existed when preparation completed;\nit does not keep the copy awake afterward. Read progress from GET /images/preparations.\nOCI and Dockerfile inputs use the same declared preparation capabilities as a create.\nA Dockerfile response returns a content selector for status and unprepare. If no selected\noffering declares prepared Dockerfile/context support, it is refused before reading the\ncontext or starting provider work. Existing provider artifacts are already prepared.\nThe request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\n","href":"/reference/prepare-image"},"description":{"compiledSource":"\"use strict\";\nconst {jsx: _jsx, jsxs: _jsxs} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n code: \"code\",\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsxs(_components.p, {\n children: [\"Start background preparation using this workspace’s payer-account rules, on the named\\n\", _jsx(_components.code, {\n children: \"providers\"\n }), \" or on the \", _jsx(_components.code, {\n children: \"top\"\n }), \" providers a create with the \", _jsx(_components.code, {\n children: \"match\"\n }), \" body would pick now.\\nA named provider that cannot run the image reports its fit reason immediately; a\\n\", _jsx(_components.code, {\n children: \"match\"\n }), \" body that no route can run is refused as that create would be. With \", _jsx(_components.code, {\n children: \"match\"\n }), \",\\nthe response lists the picked providers in rank order, and each reason says how it\\nwas ranked. A ready result means a usable copy existed when preparation completed;\\nit does not keep the copy awake afterward. Read progress from GET /images/preparations.\\nOCI and Dockerfile inputs use the same declared preparation capabilities as a create.\\nA Dockerfile response returns a content selector for status and unprepare. If no selected\\noffering declares prepared Dockerfile/context support, it is refused before reading the\\ncontext or starting provider work. Existing provider artifacts are already prepared.\\nThe request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\"]\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"codeStyling":{"theme":"css-variables"},"config":{},"pageMetadata":{"title":"Prepare an Image on Selected Providers","openapi":"openapi.json POST /images/prepare","description":"Start background preparation using this workspace's payer-account rules, on the named\n`providers` or on the `top` providers a create with the `match` body would pick now.\nA named provider that cannot run the image reports its fit reason immediately; a\n`match` body that no route can run is refused as that create would be. With `match`,\nthe response lists the picked providers in rank order, and each reason says how it\nwas ranked. A ready result means a usable copy existed when preparation completed;\nit does not keep the copy awake afterward. Read progress from GET /images/preparations.\nOCI and Dockerfile inputs use the same declared preparation capabilities as a create.\nA Dockerfile response returns a content selector for status and unprepare. If no selected\noffering declares prepared Dockerfile/context support, it is refused before reading the\ncontext or starting provider work. Existing provider artifacts are already prepared.\nThe request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\n","href":"/reference/prepare-image"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/docs/_mintlify/custom/nv-4965711d/0678d865bf98fa52/docs-search.js","/docs/_mintlify/custom/nv-4965711d/1676f8e75d3dc931/docs-header.js"],"openApiReferenceData":{"operation":{"tags":["images"],"operationId":"prepareImage","x-speakeasy-group":"images","x-speakeasy-name-override":"prepare","summary":"Prepare an image on selected providers","description":"Start background preparation using this workspace's payer-account rules, on the named\n`providers` or on the `top` providers a create with the `match` body would pick now.\nA named provider that cannot run the image reports its fit reason immediately; a\n`match` body that no route can run is refused as that create would be. With `match`,\nthe response lists the picked providers in rank order, and each reason says how it\nwas ranked. A ready result means a usable copy existed when preparation completed;\nit does not keep the copy awake afterward. Read progress from GET /images/preparations.\nOCI and Dockerfile inputs use the same declared preparation capabilities as a create.\nA Dockerfile response returns a content selector for status and unprepare. If no selected\noffering declares prepared Dockerfile/context support, it is refused before reading the\ncontext or starting provider work. Existing provider artifacts are already prepared.\nThe request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\n","parameters":["b56f0eb5-c460-465d-8754-afc32e005119"],"requestBody":"7d271015-e583-4684-bc1e-487367ac0c02","responses":{"202":"0a1eb168-5b77-409a-b64e-9362936e19f9","400":"2b5b2286-b183-4fee-8f05-dea47a376819","409":"d879b22a-e98b-493c-89c1-bc320bfce6cc","422":"0cb78a6c-6aaa-4745-b1ff-65b39e33608c","default":"c4815709-a5ae-40f1-bb19-16a8ece92f93"},"method":"post","type":"path","servers":["38340c0e-1365-48ce-8dcd-74c64a2f69dc"],"security":["dd0c83e6-beb9-482e-9a5d-60b9e86012e1","3a6c0149-9909-4d75-82ec-be6787165396"],"path":"/images/prepare","baseUrlOptions":["https://api.boxrouter.ai/api/v1"],"title":"Prepare an image on selected providers","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"b56f0eb5-c460-465d-8754-afc32e005119":{"name":"Idempotency-Key","in":"header","description":"Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads.","schema":{"type":"string","minLength":1,"maxLength":128,"description":"Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads.\nStable identifier for one logical mutation.","uniqueKey":"","typeLabel":"string"}}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"oneOf":[{"type":"object","description":"Two forms; send exactly one. `{image, providers, sizes?}` prepares on the named\nproviders. `{match, top?}` takes the body you send to POST /sandboxes or\nPOST /sandboxes/match: Cloud ranks routes exactly as that create would now, under this\nworkspace's payer rules, and prepares `match.image` on the first `top` distinct\nproviders, at `match.resources`. Fields that do not choose a route, such as env and\nlabels, are ignored. Ranking can change later, for example when prices or measured\nstart times change, so a later create may pick a provider that was not prepared.\n","required":["providers"],"conditionallyRequiredProperties":{"image":[{"when":[[{"property":"providers"}]]}],"providers":[{"when":[[{"property":"image"}]]},{"when":[[{"property":"sizes"}]]},{"when":[[{"property":"registry_credentials"}]]}],"match":[{"when":[[{"property":"top"}]]}]},"properties":{"providers":{"oneOf":[{"type":"array","items":{"type":"string","minLength":1,"uniqueKey":"oneOf.0.providers.oneOf.0.items.[INDEX]","typeLabel":"string"},"description":"Provider names or all providers configured for this workspace.","minItems":1,"uniqueItems":true,"isRequired":true,"uniqueKey":"oneOf.0.providers.oneOf.0","typeLabel":"string[]"},{"type":"string","description":"Provider names or all providers configured for this workspace.","const":"all","isRequired":true,"uniqueKey":"oneOf.0.providers.oneOf.1","typeLabel":"string"}],"isRequired":true,"uniqueKey":"oneOf.0.providers","typeLabel":"string[] | string"},"image":{"oneOf":[{"type":"string","description":"Image to prepare. Only with `providers`. A string is an OCI image reference. Use\n{private_oci} for an image whose registry needs a login, together with\n`registry_credentials`; it is prepared only on routes that use your own provider keys.\nA Dockerfile object uses the same source text and optional uploaded context artifact\nas a sandbox create. Only offerings declaring that prepared source and context mode\nare selected. The whole JSON request is limited to 64 KiB.\n","minLength":1,"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.0.image.oneOf.0","typeLabel":"string"},{"type":"object","description":"Image to prepare. Only with `providers`. A string is an OCI image reference. Use\n{private_oci} for an image whose registry needs a login, together with\n`registry_credentials`; it is prepared only on routes that use your own provider keys.\nA Dockerfile object uses the same source text and optional uploaded context artifact\nas a sandbox create. Only offerings declaring that prepared source and context mode\nare selected. The whole JSON request is limited to 64 KiB.\n","required":["private_oci"],"properties":{"private_oci":{"type":"string","minLength":1,"description":"OCI image reference in a registry that needs a login.","isRequired":true,"uniqueKey":"oneOf.0.image.oneOf.1.private_oci","typeLabel":"string"}},"additionalProperties":false,"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.0.image.oneOf.1","typeLabel":"object"},{"type":"object","description":"Image to prepare. Only with `providers`. A string is an OCI image reference. Use\n{private_oci} for an image whose registry needs a login, together with\n`registry_credentials`; it is prepared only on routes that use your own provider keys.\nA Dockerfile object uses the same source text and optional uploaded context artifact\nas a sandbox create. Only offerings declaring that prepared source and context mode\nare selected. The whole JSON request is limited to 64 KiB.\n","required":["dockerfile"],"properties":{"dockerfile":{"type":"string","minLength":1,"pattern":"^[^\\u0000]*$","description":"Dockerfile source text. No inline context files or context URLs.","isRequired":true,"uniqueKey":"oneOf.0.image.oneOf.2.dockerfile","typeLabel":"string"},"context_artifact_id":{"type":"string","minLength":1,"description":"Optional unexpired artifact owned by this workspace. Its tar context is\nleased through background preparation. Existing upload limits apply:\n10 MiB archive, 64 MiB expanded regular files and 2,048 entries.\n","uniqueKey":"oneOf.0.image.oneOf.2.context_artifact_id","typeLabel":"string"}},"additionalProperties":false,"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.0.image.oneOf.2","typeLabel":"object"}],"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.0.image","typeLabel":"string · object · object"},"registry_credentials":{"type":"object","additionalProperties":false,"required":["username","password"],"properties":{"username":{"type":"string","minLength":1,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.0.registry_credentials.username","typeLabel":"string"},"password":{"type":"string","minLength":1,"writeOnly":true,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.0.registry_credentials.password","typeLabel":"string"}},"description":"Request-only login for a private_oci `image`; required with it and refused without it.\nWith `match`, send it inside the match body instead. Both strings are non-empty, at\nmost 64 KiB UTF-8 bytes together. It is passed to the provider to set up the copy and\nis never stored, logged, traced or returned.\n","uniqueKey":"oneOf.0.registry_credentials","typeLabel":"object"},"sizes":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"integer","minimum":1,"uniqueKey":"oneOf.0.sizes.items.[INDEX]","typeLabel":"integer"},"description":"Optional memory sizes to prepare, expressed in GiB. Only with `providers`.","uniqueKey":"oneOf.0.sizes","typeLabel":"integer[]"},"match":{"type":"object","description":"A sandbox create body. Its `image` is an OCI reference or Dockerfile build object,\noptionally with context_artifact_id. A missing image, provider_default, an existing\nprovider artifact has nothing to prepare and is refused. Only\ndeclared prepared source/context variants are eligible. A private_oci image is\nprepared with the body's registry_credentials, only on routes that use your own\nprovider keys.\n","conditionallyRequiredProperties":{"requirements":[{"when":[[{"property":"secret_values"}]]}],"preferences":[{}]},"properties":{"lifetime_seconds":{"oneOf":[{"type":"integer","minimum":60,"description":"The sandbox's lifetime in seconds, starting when BoxRouter begins creation on the\nselected route. Creation time counts, so less time may remain when the sandbox is\nready. The minimum is 60 seconds. The requested value is matched against the route's\nmax_lifetime_seconds, and a credit-funded sandbox reserves credits for all of it.\n\nLeave it out for a credit-funded sandbox on a route that can extend a lifetime\n(`extendable_lifetime`) and the sandbox runs for as long as the workspace's credit\nbalance covers it: credits are reserved one hour at a time and renewed before each\nhour ends. `funded_until` on the sandbox says when the current reservation ends; the\nsandbox ends then if the balance could not cover another hour. Left out on any other\ncreate (a route that cannot extend a lifetime, or a sandbox paid with the workspace's\nown provider account), it is 300 seconds.\n\nNull asks for a sandbox with no lifetime: it runs until you destroy it. Only a provider\nthat never ends a sandbox serves it, and only on the workspace's own provider account;\nleave at_end out with it.\n","uniqueKey":"oneOf.0.match.lifetime_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":60,"description":"The sandbox's lifetime in seconds, starting when BoxRouter begins creation on the\nselected route. Creation time counts, so less time may remain when the sandbox is\nready. The minimum is 60 seconds. The requested value is matched against the route's\nmax_lifetime_seconds, and a credit-funded sandbox reserves credits for all of it.\n\nLeave it out for a credit-funded sandbox on a route that can extend a lifetime\n(`extendable_lifetime`) and the sandbox runs for as long as the workspace's credit\nbalance covers it: credits are reserved one hour at a time and renewed before each\nhour ends. `funded_until` on the sandbox says when the current reservation ends; the\nsandbox ends then if the balance could not cover another hour. Left out on any other\ncreate (a route that cannot extend a lifetime, or a sandbox paid with the workspace's\nown provider account), it is 300 seconds.\n\nNull asks for a sandbox with no lifetime: it runs until you destroy it. Only a provider\nthat never ends a sandbox serves it, and only on the workspace's own provider account;\nleave at_end out with it.\n","uniqueKey":"oneOf.0.match.lifetime_seconds.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.0.match.lifetime_seconds","typeLabel":"integer | null"},"at_end":{"type":"string","enum":["destroy","pause"],"default":"destroy","description":"What happens when the lifetime is used up. pause needs pause_resume in requirements.\nRefused with invalid_request when lifetime_seconds is null, because nothing ends that\nsandbox.\n","uniqueKey":"oneOf.0.match.at_end","typeLabel":"enum\u003cstring>"},"requirements":{"type":"object","additionalProperties":false,"properties":{"custom_images":{"type":"object","additionalProperties":false,"properties":{},"description":"Bring your own environment, which must contain bash and sha256sum.\n","uniqueKey":"oneOf.0.match.requirements.custom_images","typeLabel":"object"},"desktop":{"type":"object","additionalProperties":false,"properties":{},"uniqueKey":"oneOf.0.match.requirements.desktop","typeLabel":"object"},"hidden_secrets":{"type":"object","additionalProperties":false,"required":["inject_into"],"properties":{"inject_into":{"type":"array","minItems":1,"uniqueItems":true,"items":{"oneOf":[{"type":"string","pattern":"^(?=.{1,253}(?![\\s\\S]))(?![0-9.]+(?![\\s\\S]))[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)*(?![\\s\\S])","uniqueKey":"oneOf.0.match.requirements.hidden_secrets.inject_into.items.[INDEX].oneOf.0","typeLabel":"string"},{"type":"string","pattern":"^(?=.{3,255}(?![\\s\\S]))\\*\\.(?![0-9.]+(?![\\s\\S]))[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)*(?![\\s\\S])","uniqueKey":"oneOf.0.match.requirements.hidden_secrets.inject_into.items.[INDEX].oneOf.1","typeLabel":"string"}],"uniqueKey":"oneOf.0.match.requirements.hidden_secrets.inject_into.items.[INDEX]","typeLabel":"string"},"description":"Hostnames to which the credential is sent.","isRequired":true,"uniqueKey":"oneOf.0.match.requirements.hidden_secrets.inject_into","typeLabel":"string[]"},"transparent":{"type":"boolean","uniqueKey":"oneOf.0.match.requirements.hidden_secrets.transparent","typeLabel":"boolean"},"intercepts":{"oneOf":[{"type":"string","enum":["injected_hosts","all_https"],"uniqueKey":"oneOf.0.match.requirements.hidden_secrets.intercepts.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["injected_hosts","all_https"],"type":"string","uniqueKey":"oneOf.0.match.requirements.hidden_secrets.intercepts.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.0.match.requirements.hidden_secrets.intercepts.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.0.match.requirements.hidden_secrets.intercepts","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"}},"description":"Credentials the sandbox never sees: the adapter adds them to outgoing requests from\noutside it. The values travel like env and are never stored, logged or returned; the\nresponse shows their names only.\n","uniqueKey":"oneOf.0.match.requirements.hidden_secrets","typeLabel":"object"},"idle_shutdown":{"type":"object","description":"End or pause a sandbox nobody is using. No knob must be named.\n","conditionallyRequiredProperties":{"custom_idle_time":[{"when":[[{"property":"idle_seconds"}]]}]},"properties":{"custom_idle_time":{"type":"boolean","conditionalRequirements":[{"when":[[{"property":"idle_seconds"}]]}],"uniqueKey":"oneOf.0.match.requirements.idle_shutdown.custom_idle_time","typeLabel":"boolean"},"idle_seconds":{"type":"integer","minimum":1,"description":"How long the sandbox must be inactive before idle shutdown.","uniqueKey":"oneOf.0.match.requirements.idle_shutdown.idle_seconds","typeLabel":"integer"}},"additionalProperties":false,"conditionalRequirements":[{}],"uniqueKey":"oneOf.0.match.requirements.idle_shutdown","typeLabel":"object"},"network_lockdown":{"type":"object","description":"Limits what the sandbox may connect to, enforced by the provider from outside it.\nPreviews still reach the sandbox. policy must be named and is exactly one value:\nan allowlist is not what someone assuming deny-all wants.\n","required":["policy"],"conditionallyRequiredProperties":{"allow":[{"when":[[{"property":"policy","values":["allowlist"]}]]}],"deny":[{"when":[[{"property":"policy","values":["denylist"]}]]}]},"properties":{"policy":{"enum":["deny_all","allowlist","denylist","open"],"type":"string","isRequired":true,"uniqueKey":"oneOf.0.match.requirements.network_lockdown.policy","typeLabel":"enum\u003cstring>"},"allow":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"string","minLength":1,"uniqueKey":"oneOf.0.match.requirements.network_lockdown.allow.items.[INDEX]","typeLabel":"string"},"description":"Hosts or HTTP rules permitted by the selected network policy. Required for\nallowlist and forbidden with deny_all, denylist, or open.\n","conditionalRequirements":[{"when":[[{"property":"policy","values":["allowlist"]}]]}],"uniqueKey":"oneOf.0.match.requirements.network_lockdown.allow","typeLabel":"string[]"},"deny":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"string","minLength":1,"pattern":"^[^*]*$","uniqueKey":"oneOf.0.match.requirements.network_lockdown.deny.items.[INDEX]","typeLabel":"string"},"conditionalRequirements":[{"when":[[{"property":"policy","values":["denylist"]}]]}],"uniqueKey":"oneOf.0.match.requirements.network_lockdown.deny","typeLabel":"string[]"}},"additionalProperties":false,"uniqueKey":"oneOf.0.match.requirements.network_lockdown","typeLabel":"object"},"pause_resume":{"type":"object","additionalProperties":false,"properties":{"keeps":{"oneOf":[{"type":"string","description":"What a pause keeps. A list means any of these values is acceptable and the response\nsays which were granted; \"any\" is not accepted here, because keeps need not be named.\n","enum":["files_only","files_and_memory"],"uniqueKey":"oneOf.0.match.requirements.pause_resume.keeps.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["files_only","files_and_memory"],"type":"string","uniqueKey":"oneOf.0.match.requirements.pause_resume.keeps.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"What a pause keeps. A list means any of these values is acceptable and the response\nsays which were granted; \"any\" is not accepted here, because keeps need not be named.\n","minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.0.match.requirements.pause_resume.keeps.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.0.match.requirements.pause_resume.keeps","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"}},"description":"Pause a sandbox and resume it later. {} asks for the gate without naming a knob.","conditionalRequirements":[{}],"uniqueKey":"oneOf.0.match.requirements.pause_resume","typeLabel":"object"},"previews":{"type":"object","additionalProperties":false,"required":["access","ports"],"properties":{"access":{"oneOf":[{"type":"string","description":"Which kinds of link this sandbox may open. \"any\" accepts whatever the route offers,\nand then the open call may not pick a kind.\n","enum":["any","public","private"],"isRequired":true,"uniqueKey":"oneOf.0.match.requirements.previews.access.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["public","private"],"type":"string","uniqueKey":"oneOf.0.match.requirements.previews.access.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"Which kinds of link this sandbox may open. \"any\" accepts whatever the route offers,\nand then the open call may not pick a kind.\n","minItems":1,"uniqueItems":true,"isRequired":true,"uniqueKey":"oneOf.0.match.requirements.previews.access.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"isRequired":true,"uniqueKey":"oneOf.0.match.requirements.previews.access","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"ports":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"integer","minimum":1,"maximum":65535,"uniqueKey":"oneOf.0.match.requirements.previews.ports.items.[INDEX]","typeLabel":"integer"},"description":"The ports previews may be opened on; more than max_ports excludes a route.","isRequired":true,"uniqueKey":"oneOf.0.match.requirements.previews.ports","typeLabel":"integer[]"},"revocable":{"type":"boolean","uniqueKey":"oneOf.0.match.requirements.previews.revocable","typeLabel":"boolean"},"link_lifetime_seconds":{"type":"number","exclusiveMinimum":0,"uniqueKey":"oneOf.0.match.requirements.previews.link_lifetime_seconds","typeLabel":"number"},"websocket":{"type":"boolean","uniqueKey":"oneOf.0.match.requirements.previews.websocket","typeLabel":"boolean"},"loopback":{"type":"boolean","uniqueKey":"oneOf.0.match.requirements.previews.loopback","typeLabel":"boolean"},"survives_pause":{"type":"boolean","uniqueKey":"oneOf.0.match.requirements.previews.survives_pause","typeLabel":"boolean"}},"description":"A URL for a port inside the sandbox. access must be named, because some providers only\noffer public links; ports is the setting handed to the adapter and can exclude one.\n","uniqueKey":"oneOf.0.match.requirements.previews","typeLabel":"object"},"processes":{"type":"object","additionalProperties":false,"properties":{"input":{"type":"boolean","uniqueKey":"oneOf.0.match.requirements.processes.input","typeLabel":"boolean"}},"uniqueKey":"oneOf.0.match.requirements.processes","typeLabel":"object"},"tcp_ports":{"type":"object","additionalProperties":false,"required":["tls","ports"],"properties":{"tls":{"oneOf":[{"type":"string","enum":["any","none"],"isRequired":true,"uniqueKey":"oneOf.0.match.requirements.tcp_ports.tls.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["none"],"type":"string","uniqueKey":"oneOf.0.match.requirements.tcp_ports.tls.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"isRequired":true,"uniqueKey":"oneOf.0.match.requirements.tcp_ports.tls.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"isRequired":true,"uniqueKey":"oneOf.0.match.requirements.tcp_ports.tls","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"ports":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"integer","minimum":1,"maximum":65535,"uniqueKey":"oneOf.0.match.requirements.tcp_ports.ports.items.[INDEX]","typeLabel":"integer"},"isRequired":true,"uniqueKey":"oneOf.0.match.requirements.tcp_ports.ports","typeLabel":"integer[]"}},"uniqueKey":"oneOf.0.match.requirements.tcp_ports","typeLabel":"object"},"terminal":{"type":"object","additionalProperties":false,"properties":{},"uniqueKey":"oneOf.0.match.requirements.terminal","typeLabel":"object"}},"x-boxrouter-sps-profile":{"version":1,"requirements":{"custom_images":[],"desktop":[],"hidden_secrets":["inject_into","intercepts","transparent"],"idle_shutdown":["custom_idle_time","idle_seconds"],"network_lockdown":["allow","deny","policy"],"pause_resume":["keeps"],"previews":["access","link_lifetime_seconds","loopback","ports","revocable","survives_pause","websocket"],"processes":["input"],"tcp_ports":["ports","tls"],"terminal":[]},"resources":["arch","cpu_min","disk_min_mib","extendable_lifetime","kernel","memory_min_mib","paused_retention_seconds","process_seconds","region","run_seconds"]},"description":"The gates this sandbox may use, each holding its knobs and its settings side by side.\nA sandbox may use only the baseline and the gates named here: a call to any other gate\nis refused with not_named, on every adapter. Every gate the spec names is accepted\nhere, including the ones no adapter implements yet: whether one can be granted is\nmatching's answer, so a gate nothing declares, or no loaded report proves, leaves the\nrequest without a route rather than making it invalid.\n","x-boxrouter-sdk-list-shorthand":{},"conditionallyRequiredProperties":{"pause_resume":[{}],"idle_shutdown":[{}]},"conditionalRequirements":[{"when":[[{"property":"secret_values"}]]}],"uniqueKey":"oneOf.0.match.requirements","typeLabel":"object"},"resources":{"type":"object","additionalProperties":false,"properties":{"cpu_min":{"type":"number","exclusiveMinimum":0,"uniqueKey":"oneOf.0.match.resources.cpu_min","typeLabel":"number"},"memory_min_mib":{"type":"integer","minimum":1,"uniqueKey":"oneOf.0.match.resources.memory_min_mib","typeLabel":"integer"},"disk_min_mib":{"type":"integer","minimum":1,"uniqueKey":"oneOf.0.match.resources.disk_min_mib","typeLabel":"integer"},"extendable_lifetime":{"type":"boolean","const":true,"description":"Needed before POST /sandboxes/{sandbox_id}/lifetime may be called.","uniqueKey":"oneOf.0.match.resources.extendable_lifetime","typeLabel":"boolean"},"region":{"type":"string","minLength":1,"description":"One value from the region registry: a provider's region (for example `provider:eu-west`),\nan area (EU) or a country (US). Never a list.\n","uniqueKey":"oneOf.0.match.resources.region","typeLabel":"string"},"kernel":{"oneOf":[{"type":"string","enum":["shared","filtered","dedicated"],"uniqueKey":"oneOf.0.match.resources.kernel.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["shared","filtered","dedicated"],"type":"string","uniqueKey":"oneOf.0.match.resources.kernel.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.0.match.resources.kernel.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.0.match.resources.kernel","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"paused_retention_seconds":{"type":"number","exclusiveMinimum":0,"uniqueKey":"oneOf.0.match.resources.paused_retention_seconds","typeLabel":"number"},"arch":{"oneOf":[{"type":"string","enum":["amd64","arm64"],"uniqueKey":"oneOf.0.match.resources.arch.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["amd64","arm64"],"type":"string","uniqueKey":"oneOf.0.match.resources.arch.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.0.match.resources.arch.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.0.match.resources.arch","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"run_seconds":{"type":"integer","minimum":1,"uniqueKey":"oneOf.0.match.resources.run_seconds","typeLabel":"integer"},"process_seconds":{"type":"integer","minimum":1,"uniqueKey":"oneOf.0.match.resources.process_seconds","typeLabel":"integer"}},"description":"Resource constraints, execution limits, and environment facts that must hold for this\nsandbox. The matcher compares each named value with declared resources and capabilities;\nfields left out impose no requirement.\n","uniqueKey":"oneOf.0.match.resources","typeLabel":"object"},"preferences":{"type":"object","additionalProperties":false,"description":"The one provider-preference contract shared by sandbox creation, launch placement and\nActions policy settings. Every property is optional; omitted properties inherit.\nPrecedence, narrowest last: workspace restrictions are the ceiling, then a repository\ndefault or named Actions policy, then a workflow, then request controls. Hard\nrestrictions (provider allowlists, route, account, supply, region, privacy, origin and\nspend) intersect and can only narrow; request ignore unions with workspace exclusions.\nA request true never lifts a workspace allow_fallbacks false. When workspace\nprevent_overrides is on, containing order, sort or allow_fallbacks is refused with\nrouting_overrides_forbidden even if the value matches the workspace; `only` still\nnarrows as a set and cannot reorder workspace ranking. Otherwise soft preference values\nreplace inherited values without widening authority. `order: []` and `ignore: []` are valid empty soft\narrays that name no preference and no exclusion; inherited hard authority is unchanged.\nEach list must hold distinct values; null is never valid for any property.\n`order` prioritizes named providers in listed order; eligible providers omitted from\nit remain candidates afterward, ranked by the existing router order. When `only`\nis supplied, it remains the hard ordered allowlist and caps eligible providers; `order`\nmay rearrange its members, while omitted members retain `only` order. `ignore`\nexcludes providers even when named by `only` or `order`. `sort` ranks routes\nwithin a provider. `allow_fallbacks` defaults to true and controls whether\ncreation may dispatch a later eligible route after a provider definitively refuses before\ncreating a sandbox. This includes another account for the same provider. False stops after\nthe first route dispatch. Eligibility and preparation may skip a route before dispatch.\nProvider, account, supply, payer and requirements constraints remain binding.\n","properties":{"order":{"type":"array","uniqueItems":true,"description":"Softly prioritize these providers in the listed order. Eligible providers omitted\nfrom this list remain candidates afterward using the existing router order. When\n`only` is supplied, it remains the ordered hard allowlist and caps eligibility;\nthis order rearranges its members and omitted members retain their `only` order.\n","items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.0.match.preferences.order.items.[INDEX]","typeLabel":"string"},"uniqueKey":"oneOf.0.match.preferences.order","typeLabel":"string[]"},"only":{"type":"array","minItems":1,"uniqueItems":true,"description":"Used as `preferences.only`, this is the hard allowlist of eligible providers. `preferences.order`\ntakes precedence for their order; otherwise this list's order applies. `preferences.sort`\nranks eligible routes within each provider. Route, account, supply,\npayer and requirements restrictions still constrain every route, and unlisted providers\nare never considered. A one-provider list prevents cross-provider fallback while allowing\nlater eligible routes for that provider when `preferences.allow_fallbacks` is true.\nSetting it to false stops after the first route dispatch, including a later account for\nthe same provider.\n","items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.0.match.preferences.only.items.[INDEX]","typeLabel":"string"},"uniqueKey":"oneOf.0.match.preferences.only","typeLabel":"string[]"},"ignore":{"type":"array","uniqueItems":true,"description":"Providers to exclude from routing, even if also named in `only` or `order`.","items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.0.match.preferences.ignore.items.[INDEX]","typeLabel":"string"},"uniqueKey":"oneOf.0.match.preferences.ignore","typeLabel":"string[]"},"sort":{"type":"string","enum":["price","time"],"x-boxrouter-choices":{"price":{"label":"Price","line":"Lowest hourly price first.","measure":"price","better":"lower"},"time":{"label":"Time","line":"Shortest run time measured on reference workloads first.","measure":"time","better":"lower"}},"description":"How eligible routes are ranked. `price` picks the lowest hourly price. `time` picks the shortest run time, measured on reference workloads.\n","uniqueKey":"oneOf.0.match.preferences.sort","typeLabel":"enum\u003cstring>"},"allow_fallbacks":{"type":"boolean","default":true,"description":"Whether Cloud may dispatch a later eligible route after a provider definitively\nrefuses before creating a sandbox; defaults to true and continues until a route\ncreates the sandbox or no eligible route remains. If `only` is supplied, it\nlimits eligible providers; `preferences.order` takes precedence for their order, with\n`preferences.sort` ranking routes within each provider.\nFalse stops after the first route dispatch, including when a later route uses another\naccount for the same provider. Local eligibility or preparation failures may skip a\nroute before dispatch. This does not expand the provider allowlist or relax route,\naccount, supply, payer or requirements restrictions.\n","uniqueKey":"oneOf.0.match.preferences.allow_fallbacks","typeLabel":"boolean"}},"conditionalRequirements":[{}],"uniqueKey":"oneOf.0.match.preferences","typeLabel":"object"},"privacy":{"type":"object","additionalProperties":false,"description":"Optional privacy requirements for a sandbox request. Omitted values inherit the\nworkspace and customer-key floors; omission never resets them. Supplied values may\nonly tighten those floors. `data_collection: deny` requires both no model training\nand zero provider data retention; a route that retains logs does not satisfy deny,\neven when `zdr` is false. `zdr: true` independently requires zero retention and is\nnot a training-policy predicate. Neither setting consents to BoxRouter capture or\npromises that an eligible provider or end-to-end zero-retention route exists.\n`boxrouter_content_retention` separately restricts BoxRouter sandbox-content\nhandling. Transient wins over ordinary across workspace, key, request and immutable\norigin floors; an ordinary request cannot relax an inherited transient floor.\nUnsupported transient operations and unqualified routes are refused. Omission\npreserves inheritance and the legacy combined meaning of request `zdr: true`;\nexplicitly choosing ordinary separates BoxRouter retention from provider ZDR.\n","properties":{"data_collection":{"type":"string","enum":["allow","deny"],"description":"Require the route to allow or deny provider data collection.","uniqueKey":"oneOf.0.match.privacy.data_collection","typeLabel":"enum\u003cstring>"},"zdr":{"type":"boolean","description":"Require zero provider data retention when true.","uniqueKey":"oneOf.0.match.privacy.zdr","typeLabel":"boolean"},"boxrouter_content_retention":{"type":"string","enum":["ordinary","transient"],"description":"Ordinary allows normal bounded service retention; transient requires the\nsupported non-persistent sandbox-content profile. This is not provider\nqualification, permission to train, or consent to capture additional content.\n","uniqueKey":"oneOf.0.match.privacy.boxrouter_content_retention","typeLabel":"enum\u003cstring>"}},"uniqueKey":"oneOf.0.match.privacy","typeLabel":"object"},"route":{"type":"object","additionalProperties":false,"description":"The remaining route filters. Each singular value is a hard pin: `id` and `account_id` name\nexactly one route or connected account and `supply` one funding authority. Fallback never\nmoves a pin, a volume remains attached to its selected route, and these\nfilters only narrow workspace restrictions.\n","properties":{"id":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.0.match.route.id","typeLabel":"string"},"account_id":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","description":"Connected account ID. A provider disabled on this deployment returns 409 provider_not_enabled before routing.","uniqueKey":"oneOf.0.match.route.account_id","typeLabel":"string"},"supply":{"type":"string","enum":["byok","managed"],"uniqueKey":"oneOf.0.match.route.supply","typeLabel":"enum\u003cstring>"}},"uniqueKey":"oneOf.0.match.route","typeLabel":"object"},"volume":{"type":"object","additionalProperties":false,"required":["id"],"properties":{"id":{"type":"string","pattern":"^vol_[0-9a-f]{32}$","description":"BoxRouter-managed Volume ID. Provider-native volume requirements are not accepted.","isRequired":true,"uniqueKey":"oneOf.0.match.volume.id","typeLabel":"string"},"path":{"type":"string","pattern":"^/[^\\u0000]*$","default":"/workspace","description":"Absolute folder the checkpoint is restored into, replacing what the image has there. Repeated\nseparators and `.` path components are normalized; any `..` component is rejected. The path\nmust not be `/`, under /proc, /sys, /dev, /etc, /usr, /bin, /sbin, /lib or /run, or equal to\nor an ancestor of the internal `/tmp/boxrouter-volume` scratch path.\n","uniqueKey":"oneOf.0.match.volume.path","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Checkpoint to restore; omitted means the head. An empty volume restores nothing. A\ncheckpoint saved from a branch sandbox is not the head and can be selected by number with\nwrite, branch or read access; read mounts exactly that checkpoint's files, never the head.\n","uniqueKey":"oneOf.0.match.volume.checkpoint","typeLabel":"integer"},"access":{"type":"string","enum":["write","read","shared","branch"],"default":"write","description":"The access mode requested for this sandbox. Omitted means write. Launch modes are write,\nread, shared, and branch. Checkpoints and branches remain capability-gated.\n","uniqueKey":"oneOf.0.match.volume.access","typeLabel":"enum\u003cstring>"}},"uniqueKey":"oneOf.0.match.volume","typeLabel":"object"},"image":{"oneOf":[{"type":"string","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","const":"provider_default","uniqueKey":"oneOf.0.match.image.oneOf.0","typeLabel":"string"},{"type":"string","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","minLength":1,"uniqueKey":"oneOf.0.match.image.oneOf.1","typeLabel":"string"},{"type":"object","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","required":["dockerfile"],"properties":{"dockerfile":{"type":"string","minLength":1,"isRequired":true,"uniqueKey":"oneOf.0.match.image.oneOf.2.dockerfile","typeLabel":"string"},"context_artifact_id":{"type":"string","minLength":1,"description":"Unexpired workspace-owned uploaded tar context, leased while the image builds.","uniqueKey":"oneOf.0.match.image.oneOf.2.context_artifact_id","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"oneOf.0.match.image.oneOf.2","typeLabel":"object"},{"type":"object","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","required":["provider_artifact"],"properties":{"provider_artifact":{"type":"string","minLength":1,"description":"A provider-native artifact id usable on the selected provider account.","isRequired":true,"uniqueKey":"oneOf.0.match.image.oneOf.3.provider_artifact","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"oneOf.0.match.image.oneOf.3","typeLabel":"object"},{"type":"object","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","required":["private_oci"],"properties":{"private_oci":{"type":"string","minLength":1,"description":"OCI image reference in a registry that needs a login; send registry_credentials beside it.","isRequired":true,"uniqueKey":"oneOf.0.match.image.oneOf.4.private_oci","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"oneOf.0.match.image.oneOf.4","typeLabel":"object"}],"uniqueKey":"oneOf.0.match.image","typeLabel":"string · string · object · object · object"},"registry_credentials":{"type":"object","additionalProperties":false,"required":["username","password"],"properties":{"username":{"type":"string","minLength":1,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.0.match.registry_credentials.username","typeLabel":"string"},"password":{"type":"string","minLength":1,"writeOnly":true,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.0.match.registry_credentials.password","typeLabel":"string"}},"description":"Request-only login for the registry named by a private_oci image; required with it and\nrefused without it. Both strings are non-empty, at most 64 KiB UTF-8 bytes together\n(enforced outside JSON Schema). It is passed to the provider to set up a copy of the\nimage and is never stored, logged, traced, returned or included in idempotency records.\n","uniqueKey":"oneOf.0.match.registry_credentials","typeLabel":"object"},"env":{"type":"object","maxProperties":256,"additionalProperties":{"type":"string","uniqueKey":"oneOf.0.match.env.additionalProperties","typeLabel":"string"},"propertyNames":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$"},"description":"Creation-time environment, limited by the server to 64 KiB total UTF-8 bytes. This byte\nlimit is enforced outside JSON Schema validation. Never returned, logged or stored.\n","uniqueKey":"oneOf.0.match.env","typeLabel":"object"},"secret_refs":{"type":"object","propertyNames":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$"},"additionalProperties":{"type":"object","additionalProperties":false,"required":["secret_name"],"properties":{"secret_name":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","isRequired":true,"uniqueKey":"oneOf.0.match.secret_refs.additionalProperties.secret_name","typeLabel":"string"}},"uniqueKey":"oneOf.0.match.secret_refs.additionalProperties","typeLabel":"object"},"description":"Explicit saved workspace secret references by destination environment name.","uniqueKey":"oneOf.0.match.secret_refs","typeLabel":"object"},"secret_values":{"type":"object","minProperties":1,"maxProperties":256,"propertyNames":{"$ref":"#/components/schemas/SecretName"},"additionalProperties":{"type":"string","writeOnly":true,"maxLength":16384,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.0.match.secret_values.additionalProperties","typeLabel":"string"},"description":"Request-only values delivered through the hidden_secrets gate. Values are sent once\nduring sandbox creation. The server enforces a 16 KiB per-value and 64 KiB total\nUTF-8 byte limit outside JSON Schema validation. Values are never stored, logged,\ntraced, returned, or included in idempotency records. Use the matching placeholder\nfrom the response in configuration.\n","uniqueKey":"oneOf.0.match.secret_values","typeLabel":"object"},"labels":{"type":"object","maxProperties":64,"propertyNames":{"maxLength":63},"additionalProperties":{"type":"string","maxLength":255,"uniqueKey":"oneOf.0.match.labels.additionalProperties","typeLabel":"string"},"description":"BoxRouter labels, returned on the sandbox; not implicitly provider tags.","uniqueKey":"oneOf.0.match.labels","typeLabel":"object"}},"additionalProperties":false,"conditionalRequirements":[{"when":[[{"property":"top"}]]}],"uniqueKey":"oneOf.0.match","typeLabel":"object"},"top":{"type":"integer","minimum":1,"default":1,"description":"With `match`, how many of the best-ranked distinct providers to prepare on. Fewer\nare prepared when fewer providers can run the create.\n","uniqueKey":"oneOf.0.top","typeLabel":"integer"}},"additionalProperties":false,"uniqueKey":"oneOf.0","typeLabel":"object"},{"type":"object","description":"Two forms; send exactly one. `{image, providers, sizes?}` prepares on the named\nproviders. `{match, top?}` takes the body you send to POST /sandboxes or\nPOST /sandboxes/match: Cloud ranks routes exactly as that create would now, under this\nworkspace's payer rules, and prepares `match.image` on the first `top` distinct\nproviders, at `match.resources`. Fields that do not choose a route, such as env and\nlabels, are ignored. Ranking can change later, for example when prices or measured\nstart times change, so a later create may pick a provider that was not prepared.\n","required":["match"],"conditionallyRequiredProperties":{"image":[{"when":[[{"property":"providers"}]]}],"providers":[{"when":[[{"property":"image"}]]},{"when":[[{"property":"sizes"}]]},{"when":[[{"property":"registry_credentials"}]]}],"match":[{"when":[[{"property":"top"}]]}]},"properties":{"match":{"type":"object","description":"A sandbox create body. Its `image` is an OCI reference or Dockerfile build object,\noptionally with context_artifact_id. A missing image, provider_default, an existing\nprovider artifact has nothing to prepare and is refused. Only\ndeclared prepared source/context variants are eligible. A private_oci image is\nprepared with the body's registry_credentials, only on routes that use your own\nprovider keys.\n","conditionallyRequiredProperties":{"requirements":[{"when":[[{"property":"secret_values"}]]}],"preferences":[{}]},"properties":{"lifetime_seconds":{"oneOf":[{"type":"integer","minimum":60,"description":"The sandbox's lifetime in seconds, starting when BoxRouter begins creation on the\nselected route. Creation time counts, so less time may remain when the sandbox is\nready. The minimum is 60 seconds. The requested value is matched against the route's\nmax_lifetime_seconds, and a credit-funded sandbox reserves credits for all of it.\n\nLeave it out for a credit-funded sandbox on a route that can extend a lifetime\n(`extendable_lifetime`) and the sandbox runs for as long as the workspace's credit\nbalance covers it: credits are reserved one hour at a time and renewed before each\nhour ends. `funded_until` on the sandbox says when the current reservation ends; the\nsandbox ends then if the balance could not cover another hour. Left out on any other\ncreate (a route that cannot extend a lifetime, or a sandbox paid with the workspace's\nown provider account), it is 300 seconds.\n\nNull asks for a sandbox with no lifetime: it runs until you destroy it. Only a provider\nthat never ends a sandbox serves it, and only on the workspace's own provider account;\nleave at_end out with it.\n","uniqueKey":"oneOf.1.match.lifetime_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":60,"description":"The sandbox's lifetime in seconds, starting when BoxRouter begins creation on the\nselected route. Creation time counts, so less time may remain when the sandbox is\nready. The minimum is 60 seconds. The requested value is matched against the route's\nmax_lifetime_seconds, and a credit-funded sandbox reserves credits for all of it.\n\nLeave it out for a credit-funded sandbox on a route that can extend a lifetime\n(`extendable_lifetime`) and the sandbox runs for as long as the workspace's credit\nbalance covers it: credits are reserved one hour at a time and renewed before each\nhour ends. `funded_until` on the sandbox says when the current reservation ends; the\nsandbox ends then if the balance could not cover another hour. Left out on any other\ncreate (a route that cannot extend a lifetime, or a sandbox paid with the workspace's\nown provider account), it is 300 seconds.\n\nNull asks for a sandbox with no lifetime: it runs until you destroy it. Only a provider\nthat never ends a sandbox serves it, and only on the workspace's own provider account;\nleave at_end out with it.\n","uniqueKey":"oneOf.1.match.lifetime_seconds.oneOf.1","typeLabel":"null"}],"uniqueKey":"oneOf.1.match.lifetime_seconds","typeLabel":"integer | null"},"at_end":{"type":"string","enum":["destroy","pause"],"default":"destroy","description":"What happens when the lifetime is used up. pause needs pause_resume in requirements.\nRefused with invalid_request when lifetime_seconds is null, because nothing ends that\nsandbox.\n","uniqueKey":"oneOf.1.match.at_end","typeLabel":"enum\u003cstring>"},"requirements":{"type":"object","additionalProperties":false,"properties":{"custom_images":{"type":"object","additionalProperties":false,"properties":{},"description":"Bring your own environment, which must contain bash and sha256sum.\n","uniqueKey":"oneOf.1.match.requirements.custom_images","typeLabel":"object"},"desktop":{"type":"object","additionalProperties":false,"properties":{},"uniqueKey":"oneOf.1.match.requirements.desktop","typeLabel":"object"},"hidden_secrets":{"type":"object","additionalProperties":false,"required":["inject_into"],"properties":{"inject_into":{"type":"array","minItems":1,"uniqueItems":true,"items":{"oneOf":[{"type":"string","pattern":"^(?=.{1,253}(?![\\s\\S]))(?![0-9.]+(?![\\s\\S]))[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)*(?![\\s\\S])","uniqueKey":"oneOf.1.match.requirements.hidden_secrets.inject_into.items.[INDEX].oneOf.0","typeLabel":"string"},{"type":"string","pattern":"^(?=.{3,255}(?![\\s\\S]))\\*\\.(?![0-9.]+(?![\\s\\S]))[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?(?:\\.[A-Za-z0-9](?:[A-Za-z0-9-]{0,61}[A-Za-z0-9])?)*(?![\\s\\S])","uniqueKey":"oneOf.1.match.requirements.hidden_secrets.inject_into.items.[INDEX].oneOf.1","typeLabel":"string"}],"uniqueKey":"oneOf.1.match.requirements.hidden_secrets.inject_into.items.[INDEX]","typeLabel":"string"},"description":"Hostnames to which the credential is sent.","isRequired":true,"uniqueKey":"oneOf.1.match.requirements.hidden_secrets.inject_into","typeLabel":"string[]"},"transparent":{"type":"boolean","uniqueKey":"oneOf.1.match.requirements.hidden_secrets.transparent","typeLabel":"boolean"},"intercepts":{"oneOf":[{"type":"string","enum":["injected_hosts","all_https"],"uniqueKey":"oneOf.1.match.requirements.hidden_secrets.intercepts.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["injected_hosts","all_https"],"type":"string","uniqueKey":"oneOf.1.match.requirements.hidden_secrets.intercepts.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.1.match.requirements.hidden_secrets.intercepts.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.1.match.requirements.hidden_secrets.intercepts","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"}},"description":"Credentials the sandbox never sees: the adapter adds them to outgoing requests from\noutside it. The values travel like env and are never stored, logged or returned; the\nresponse shows their names only.\n","uniqueKey":"oneOf.1.match.requirements.hidden_secrets","typeLabel":"object"},"idle_shutdown":{"type":"object","description":"End or pause a sandbox nobody is using. No knob must be named.\n","conditionallyRequiredProperties":{"custom_idle_time":[{"when":[[{"property":"idle_seconds"}]]}]},"properties":{"custom_idle_time":{"type":"boolean","conditionalRequirements":[{"when":[[{"property":"idle_seconds"}]]}],"uniqueKey":"oneOf.1.match.requirements.idle_shutdown.custom_idle_time","typeLabel":"boolean"},"idle_seconds":{"type":"integer","minimum":1,"description":"How long the sandbox must be inactive before idle shutdown.","uniqueKey":"oneOf.1.match.requirements.idle_shutdown.idle_seconds","typeLabel":"integer"}},"additionalProperties":false,"conditionalRequirements":[{}],"uniqueKey":"oneOf.1.match.requirements.idle_shutdown","typeLabel":"object"},"network_lockdown":{"type":"object","description":"Limits what the sandbox may connect to, enforced by the provider from outside it.\nPreviews still reach the sandbox. policy must be named and is exactly one value:\nan allowlist is not what someone assuming deny-all wants.\n","required":["policy"],"conditionallyRequiredProperties":{"allow":[{"when":[[{"property":"policy","values":["allowlist"]}]]}],"deny":[{"when":[[{"property":"policy","values":["denylist"]}]]}]},"properties":{"policy":{"enum":["deny_all","allowlist","denylist","open"],"type":"string","isRequired":true,"uniqueKey":"oneOf.1.match.requirements.network_lockdown.policy","typeLabel":"enum\u003cstring>"},"allow":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"string","minLength":1,"uniqueKey":"oneOf.1.match.requirements.network_lockdown.allow.items.[INDEX]","typeLabel":"string"},"description":"Hosts or HTTP rules permitted by the selected network policy. Required for\nallowlist and forbidden with deny_all, denylist, or open.\n","conditionalRequirements":[{"when":[[{"property":"policy","values":["allowlist"]}]]}],"uniqueKey":"oneOf.1.match.requirements.network_lockdown.allow","typeLabel":"string[]"},"deny":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"string","minLength":1,"pattern":"^[^*]*$","uniqueKey":"oneOf.1.match.requirements.network_lockdown.deny.items.[INDEX]","typeLabel":"string"},"conditionalRequirements":[{"when":[[{"property":"policy","values":["denylist"]}]]}],"uniqueKey":"oneOf.1.match.requirements.network_lockdown.deny","typeLabel":"string[]"}},"additionalProperties":false,"uniqueKey":"oneOf.1.match.requirements.network_lockdown","typeLabel":"object"},"pause_resume":{"type":"object","additionalProperties":false,"properties":{"keeps":{"oneOf":[{"type":"string","description":"What a pause keeps. A list means any of these values is acceptable and the response\nsays which were granted; \"any\" is not accepted here, because keeps need not be named.\n","enum":["files_only","files_and_memory"],"uniqueKey":"oneOf.1.match.requirements.pause_resume.keeps.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["files_only","files_and_memory"],"type":"string","uniqueKey":"oneOf.1.match.requirements.pause_resume.keeps.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"What a pause keeps. A list means any of these values is acceptable and the response\nsays which were granted; \"any\" is not accepted here, because keeps need not be named.\n","minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.1.match.requirements.pause_resume.keeps.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.1.match.requirements.pause_resume.keeps","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"}},"description":"Pause a sandbox and resume it later. {} asks for the gate without naming a knob.","conditionalRequirements":[{}],"uniqueKey":"oneOf.1.match.requirements.pause_resume","typeLabel":"object"},"previews":{"type":"object","additionalProperties":false,"required":["access","ports"],"properties":{"access":{"oneOf":[{"type":"string","description":"Which kinds of link this sandbox may open. \"any\" accepts whatever the route offers,\nand then the open call may not pick a kind.\n","enum":["any","public","private"],"isRequired":true,"uniqueKey":"oneOf.1.match.requirements.previews.access.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["public","private"],"type":"string","uniqueKey":"oneOf.1.match.requirements.previews.access.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"Which kinds of link this sandbox may open. \"any\" accepts whatever the route offers,\nand then the open call may not pick a kind.\n","minItems":1,"uniqueItems":true,"isRequired":true,"uniqueKey":"oneOf.1.match.requirements.previews.access.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"isRequired":true,"uniqueKey":"oneOf.1.match.requirements.previews.access","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"ports":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"integer","minimum":1,"maximum":65535,"uniqueKey":"oneOf.1.match.requirements.previews.ports.items.[INDEX]","typeLabel":"integer"},"description":"The ports previews may be opened on; more than max_ports excludes a route.","isRequired":true,"uniqueKey":"oneOf.1.match.requirements.previews.ports","typeLabel":"integer[]"},"revocable":{"type":"boolean","uniqueKey":"oneOf.1.match.requirements.previews.revocable","typeLabel":"boolean"},"link_lifetime_seconds":{"type":"number","exclusiveMinimum":0,"uniqueKey":"oneOf.1.match.requirements.previews.link_lifetime_seconds","typeLabel":"number"},"websocket":{"type":"boolean","uniqueKey":"oneOf.1.match.requirements.previews.websocket","typeLabel":"boolean"},"loopback":{"type":"boolean","uniqueKey":"oneOf.1.match.requirements.previews.loopback","typeLabel":"boolean"},"survives_pause":{"type":"boolean","uniqueKey":"oneOf.1.match.requirements.previews.survives_pause","typeLabel":"boolean"}},"description":"A URL for a port inside the sandbox. access must be named, because some providers only\noffer public links; ports is the setting handed to the adapter and can exclude one.\n","uniqueKey":"oneOf.1.match.requirements.previews","typeLabel":"object"},"processes":{"type":"object","additionalProperties":false,"properties":{"input":{"type":"boolean","uniqueKey":"oneOf.1.match.requirements.processes.input","typeLabel":"boolean"}},"uniqueKey":"oneOf.1.match.requirements.processes","typeLabel":"object"},"tcp_ports":{"type":"object","additionalProperties":false,"required":["tls","ports"],"properties":{"tls":{"oneOf":[{"type":"string","enum":["any","none"],"isRequired":true,"uniqueKey":"oneOf.1.match.requirements.tcp_ports.tls.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["none"],"type":"string","uniqueKey":"oneOf.1.match.requirements.tcp_ports.tls.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"isRequired":true,"uniqueKey":"oneOf.1.match.requirements.tcp_ports.tls.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"isRequired":true,"uniqueKey":"oneOf.1.match.requirements.tcp_ports.tls","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"ports":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"integer","minimum":1,"maximum":65535,"uniqueKey":"oneOf.1.match.requirements.tcp_ports.ports.items.[INDEX]","typeLabel":"integer"},"isRequired":true,"uniqueKey":"oneOf.1.match.requirements.tcp_ports.ports","typeLabel":"integer[]"}},"uniqueKey":"oneOf.1.match.requirements.tcp_ports","typeLabel":"object"},"terminal":{"type":"object","additionalProperties":false,"properties":{},"uniqueKey":"oneOf.1.match.requirements.terminal","typeLabel":"object"}},"x-boxrouter-sps-profile":{"version":1,"requirements":{"custom_images":[],"desktop":[],"hidden_secrets":["inject_into","intercepts","transparent"],"idle_shutdown":["custom_idle_time","idle_seconds"],"network_lockdown":["allow","deny","policy"],"pause_resume":["keeps"],"previews":["access","link_lifetime_seconds","loopback","ports","revocable","survives_pause","websocket"],"processes":["input"],"tcp_ports":["ports","tls"],"terminal":[]},"resources":["arch","cpu_min","disk_min_mib","extendable_lifetime","kernel","memory_min_mib","paused_retention_seconds","process_seconds","region","run_seconds"]},"description":"The gates this sandbox may use, each holding its knobs and its settings side by side.\nA sandbox may use only the baseline and the gates named here: a call to any other gate\nis refused with not_named, on every adapter. Every gate the spec names is accepted\nhere, including the ones no adapter implements yet: whether one can be granted is\nmatching's answer, so a gate nothing declares, or no loaded report proves, leaves the\nrequest without a route rather than making it invalid.\n","x-boxrouter-sdk-list-shorthand":{},"conditionallyRequiredProperties":{"pause_resume":[{}],"idle_shutdown":[{}]},"conditionalRequirements":[{"when":[[{"property":"secret_values"}]]}],"uniqueKey":"oneOf.1.match.requirements","typeLabel":"object"},"resources":{"type":"object","additionalProperties":false,"properties":{"cpu_min":{"type":"number","exclusiveMinimum":0,"uniqueKey":"oneOf.1.match.resources.cpu_min","typeLabel":"number"},"memory_min_mib":{"type":"integer","minimum":1,"uniqueKey":"oneOf.1.match.resources.memory_min_mib","typeLabel":"integer"},"disk_min_mib":{"type":"integer","minimum":1,"uniqueKey":"oneOf.1.match.resources.disk_min_mib","typeLabel":"integer"},"extendable_lifetime":{"type":"boolean","const":true,"description":"Needed before POST /sandboxes/{sandbox_id}/lifetime may be called.","uniqueKey":"oneOf.1.match.resources.extendable_lifetime","typeLabel":"boolean"},"region":{"type":"string","minLength":1,"description":"One value from the region registry: a provider's region (for example `provider:eu-west`),\nan area (EU) or a country (US). Never a list.\n","uniqueKey":"oneOf.1.match.resources.region","typeLabel":"string"},"kernel":{"oneOf":[{"type":"string","enum":["shared","filtered","dedicated"],"uniqueKey":"oneOf.1.match.resources.kernel.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["shared","filtered","dedicated"],"type":"string","uniqueKey":"oneOf.1.match.resources.kernel.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.1.match.resources.kernel.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.1.match.resources.kernel","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"paused_retention_seconds":{"type":"number","exclusiveMinimum":0,"uniqueKey":"oneOf.1.match.resources.paused_retention_seconds","typeLabel":"number"},"arch":{"oneOf":[{"type":"string","enum":["amd64","arm64"],"uniqueKey":"oneOf.1.match.resources.arch.oneOf.0","typeLabel":"enum\u003cstring>"},{"type":"array","items":{"enum":["amd64","arm64"],"type":"string","uniqueKey":"oneOf.1.match.resources.arch.oneOf.1.items.[INDEX]","typeLabel":"enum\u003cstring>"},"minItems":1,"uniqueItems":true,"uniqueKey":"oneOf.1.match.resources.arch.oneOf.1","typeLabel":"enum\u003cstring>[]"}],"uniqueKey":"oneOf.1.match.resources.arch","typeLabel":"enum\u003cstring> | enum\u003cstring>[]"},"run_seconds":{"type":"integer","minimum":1,"uniqueKey":"oneOf.1.match.resources.run_seconds","typeLabel":"integer"},"process_seconds":{"type":"integer","minimum":1,"uniqueKey":"oneOf.1.match.resources.process_seconds","typeLabel":"integer"}},"description":"Resource constraints, execution limits, and environment facts that must hold for this\nsandbox. The matcher compares each named value with declared resources and capabilities;\nfields left out impose no requirement.\n","uniqueKey":"oneOf.1.match.resources","typeLabel":"object"},"preferences":{"type":"object","additionalProperties":false,"description":"The one provider-preference contract shared by sandbox creation, launch placement and\nActions policy settings. Every property is optional; omitted properties inherit.\nPrecedence, narrowest last: workspace restrictions are the ceiling, then a repository\ndefault or named Actions policy, then a workflow, then request controls. Hard\nrestrictions (provider allowlists, route, account, supply, region, privacy, origin and\nspend) intersect and can only narrow; request ignore unions with workspace exclusions.\nA request true never lifts a workspace allow_fallbacks false. When workspace\nprevent_overrides is on, containing order, sort or allow_fallbacks is refused with\nrouting_overrides_forbidden even if the value matches the workspace; `only` still\nnarrows as a set and cannot reorder workspace ranking. Otherwise soft preference values\nreplace inherited values without widening authority. `order: []` and `ignore: []` are valid empty soft\narrays that name no preference and no exclusion; inherited hard authority is unchanged.\nEach list must hold distinct values; null is never valid for any property.\n`order` prioritizes named providers in listed order; eligible providers omitted from\nit remain candidates afterward, ranked by the existing router order. When `only`\nis supplied, it remains the hard ordered allowlist and caps eligible providers; `order`\nmay rearrange its members, while omitted members retain `only` order. `ignore`\nexcludes providers even when named by `only` or `order`. `sort` ranks routes\nwithin a provider. `allow_fallbacks` defaults to true and controls whether\ncreation may dispatch a later eligible route after a provider definitively refuses before\ncreating a sandbox. This includes another account for the same provider. False stops after\nthe first route dispatch. Eligibility and preparation may skip a route before dispatch.\nProvider, account, supply, payer and requirements constraints remain binding.\n","properties":{"order":{"type":"array","uniqueItems":true,"description":"Softly prioritize these providers in the listed order. Eligible providers omitted\nfrom this list remain candidates afterward using the existing router order. When\n`only` is supplied, it remains the ordered hard allowlist and caps eligibility;\nthis order rearranges its members and omitted members retain their `only` order.\n","items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.1.match.preferences.order.items.[INDEX]","typeLabel":"string"},"uniqueKey":"oneOf.1.match.preferences.order","typeLabel":"string[]"},"only":{"type":"array","minItems":1,"uniqueItems":true,"description":"Used as `preferences.only`, this is the hard allowlist of eligible providers. `preferences.order`\ntakes precedence for their order; otherwise this list's order applies. `preferences.sort`\nranks eligible routes within each provider. Route, account, supply,\npayer and requirements restrictions still constrain every route, and unlisted providers\nare never considered. A one-provider list prevents cross-provider fallback while allowing\nlater eligible routes for that provider when `preferences.allow_fallbacks` is true.\nSetting it to false stops after the first route dispatch, including a later account for\nthe same provider.\n","items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.1.match.preferences.only.items.[INDEX]","typeLabel":"string"},"uniqueKey":"oneOf.1.match.preferences.only","typeLabel":"string[]"},"ignore":{"type":"array","uniqueItems":true,"description":"Providers to exclude from routing, even if also named in `only` or `order`.","items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.1.match.preferences.ignore.items.[INDEX]","typeLabel":"string"},"uniqueKey":"oneOf.1.match.preferences.ignore","typeLabel":"string[]"},"sort":{"type":"string","enum":["price","time"],"x-boxrouter-choices":{"price":{"label":"Price","line":"Lowest hourly price first.","measure":"price","better":"lower"},"time":{"label":"Time","line":"Shortest run time measured on reference workloads first.","measure":"time","better":"lower"}},"description":"How eligible routes are ranked. `price` picks the lowest hourly price. `time` picks the shortest run time, measured on reference workloads.\n","uniqueKey":"oneOf.1.match.preferences.sort","typeLabel":"enum\u003cstring>"},"allow_fallbacks":{"type":"boolean","default":true,"description":"Whether Cloud may dispatch a later eligible route after a provider definitively\nrefuses before creating a sandbox; defaults to true and continues until a route\ncreates the sandbox or no eligible route remains. If `only` is supplied, it\nlimits eligible providers; `preferences.order` takes precedence for their order, with\n`preferences.sort` ranking routes within each provider.\nFalse stops after the first route dispatch, including when a later route uses another\naccount for the same provider. Local eligibility or preparation failures may skip a\nroute before dispatch. This does not expand the provider allowlist or relax route,\naccount, supply, payer or requirements restrictions.\n","uniqueKey":"oneOf.1.match.preferences.allow_fallbacks","typeLabel":"boolean"}},"conditionalRequirements":[{}],"uniqueKey":"oneOf.1.match.preferences","typeLabel":"object"},"privacy":{"type":"object","additionalProperties":false,"description":"Optional privacy requirements for a sandbox request. Omitted values inherit the\nworkspace and customer-key floors; omission never resets them. Supplied values may\nonly tighten those floors. `data_collection: deny` requires both no model training\nand zero provider data retention; a route that retains logs does not satisfy deny,\neven when `zdr` is false. `zdr: true` independently requires zero retention and is\nnot a training-policy predicate. Neither setting consents to BoxRouter capture or\npromises that an eligible provider or end-to-end zero-retention route exists.\n`boxrouter_content_retention` separately restricts BoxRouter sandbox-content\nhandling. Transient wins over ordinary across workspace, key, request and immutable\norigin floors; an ordinary request cannot relax an inherited transient floor.\nUnsupported transient operations and unqualified routes are refused. Omission\npreserves inheritance and the legacy combined meaning of request `zdr: true`;\nexplicitly choosing ordinary separates BoxRouter retention from provider ZDR.\n","properties":{"data_collection":{"type":"string","enum":["allow","deny"],"description":"Require the route to allow or deny provider data collection.","uniqueKey":"oneOf.1.match.privacy.data_collection","typeLabel":"enum\u003cstring>"},"zdr":{"type":"boolean","description":"Require zero provider data retention when true.","uniqueKey":"oneOf.1.match.privacy.zdr","typeLabel":"boolean"},"boxrouter_content_retention":{"type":"string","enum":["ordinary","transient"],"description":"Ordinary allows normal bounded service retention; transient requires the\nsupported non-persistent sandbox-content profile. This is not provider\nqualification, permission to train, or consent to capture additional content.\n","uniqueKey":"oneOf.1.match.privacy.boxrouter_content_retention","typeLabel":"enum\u003cstring>"}},"uniqueKey":"oneOf.1.match.privacy","typeLabel":"object"},"route":{"type":"object","additionalProperties":false,"description":"The remaining route filters. Each singular value is a hard pin: `id` and `account_id` name\nexactly one route or connected account and `supply` one funding authority. Fallback never\nmoves a pin, a volume remains attached to its selected route, and these\nfilters only narrow workspace restrictions.\n","properties":{"id":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.1.match.route.id","typeLabel":"string"},"account_id":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[^\\u0000]*$","description":"Connected account ID. A provider disabled on this deployment returns 409 provider_not_enabled before routing.","uniqueKey":"oneOf.1.match.route.account_id","typeLabel":"string"},"supply":{"type":"string","enum":["byok","managed"],"uniqueKey":"oneOf.1.match.route.supply","typeLabel":"enum\u003cstring>"}},"uniqueKey":"oneOf.1.match.route","typeLabel":"object"},"volume":{"type":"object","additionalProperties":false,"required":["id"],"properties":{"id":{"type":"string","pattern":"^vol_[0-9a-f]{32}$","description":"BoxRouter-managed Volume ID. Provider-native volume requirements are not accepted.","isRequired":true,"uniqueKey":"oneOf.1.match.volume.id","typeLabel":"string"},"path":{"type":"string","pattern":"^/[^\\u0000]*$","default":"/workspace","description":"Absolute folder the checkpoint is restored into, replacing what the image has there. Repeated\nseparators and `.` path components are normalized; any `..` component is rejected. The path\nmust not be `/`, under /proc, /sys, /dev, /etc, /usr, /bin, /sbin, /lib or /run, or equal to\nor an ancestor of the internal `/tmp/boxrouter-volume` scratch path.\n","uniqueKey":"oneOf.1.match.volume.path","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Checkpoint to restore; omitted means the head. An empty volume restores nothing. A\ncheckpoint saved from a branch sandbox is not the head and can be selected by number with\nwrite, branch or read access; read mounts exactly that checkpoint's files, never the head.\n","uniqueKey":"oneOf.1.match.volume.checkpoint","typeLabel":"integer"},"access":{"type":"string","enum":["write","read","shared","branch"],"default":"write","description":"The access mode requested for this sandbox. Omitted means write. Launch modes are write,\nread, shared, and branch. Checkpoints and branches remain capability-gated.\n","uniqueKey":"oneOf.1.match.volume.access","typeLabel":"enum\u003cstring>"}},"uniqueKey":"oneOf.1.match.volume","typeLabel":"object"},"image":{"oneOf":[{"type":"string","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","const":"provider_default","uniqueKey":"oneOf.1.match.image.oneOf.0","typeLabel":"string"},{"type":"string","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","minLength":1,"uniqueKey":"oneOf.1.match.image.oneOf.1","typeLabel":"string"},{"type":"object","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","required":["dockerfile"],"properties":{"dockerfile":{"type":"string","minLength":1,"isRequired":true,"uniqueKey":"oneOf.1.match.image.oneOf.2.dockerfile","typeLabel":"string"},"context_artifact_id":{"type":"string","minLength":1,"description":"Unexpired workspace-owned uploaded tar context, leased while the image builds.","uniqueKey":"oneOf.1.match.image.oneOf.2.context_artifact_id","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"oneOf.1.match.image.oneOf.2","typeLabel":"object"},{"type":"object","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","required":["provider_artifact"],"properties":{"provider_artifact":{"type":"string","minLength":1,"description":"A provider-native artifact id usable on the selected provider account.","isRequired":true,"uniqueKey":"oneOf.1.match.image.oneOf.3.provider_artifact","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"oneOf.1.match.image.oneOf.3","typeLabel":"object"},{"type":"object","description":"Omitted selects BoxRouter's standard image. \"provider_default\" opts out and runs\nthe provider's own default. Any other string is an OCI image reference. Use a\none-key dockerfile or provider_artifact object for those artifact sources; the\nlatter requires exactly one value in preferences.only. Use {private_oci} for an image whose registry\nneeds a login, together with registry_credentials; it runs only on routes that use\nyour own provider keys. Every selected image must contain bash and\nsha256sum.\n","required":["private_oci"],"properties":{"private_oci":{"type":"string","minLength":1,"description":"OCI image reference in a registry that needs a login; send registry_credentials beside it.","isRequired":true,"uniqueKey":"oneOf.1.match.image.oneOf.4.private_oci","typeLabel":"string"}},"additionalProperties":false,"uniqueKey":"oneOf.1.match.image.oneOf.4","typeLabel":"object"}],"uniqueKey":"oneOf.1.match.image","typeLabel":"string · string · object · object · object"},"registry_credentials":{"type":"object","additionalProperties":false,"required":["username","password"],"properties":{"username":{"type":"string","minLength":1,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.1.match.registry_credentials.username","typeLabel":"string"},"password":{"type":"string","minLength":1,"writeOnly":true,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.1.match.registry_credentials.password","typeLabel":"string"}},"description":"Request-only login for the registry named by a private_oci image; required with it and\nrefused without it. Both strings are non-empty, at most 64 KiB UTF-8 bytes together\n(enforced outside JSON Schema). It is passed to the provider to set up a copy of the\nimage and is never stored, logged, traced, returned or included in idempotency records.\n","uniqueKey":"oneOf.1.match.registry_credentials","typeLabel":"object"},"env":{"type":"object","maxProperties":256,"additionalProperties":{"type":"string","uniqueKey":"oneOf.1.match.env.additionalProperties","typeLabel":"string"},"propertyNames":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$"},"description":"Creation-time environment, limited by the server to 64 KiB total UTF-8 bytes. This byte\nlimit is enforced outside JSON Schema validation. Never returned, logged or stored.\n","uniqueKey":"oneOf.1.match.env","typeLabel":"object"},"secret_refs":{"type":"object","propertyNames":{"pattern":"^[A-Za-z_][A-Za-z0-9_]*$"},"additionalProperties":{"type":"object","additionalProperties":false,"required":["secret_name"],"properties":{"secret_name":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","isRequired":true,"uniqueKey":"oneOf.1.match.secret_refs.additionalProperties.secret_name","typeLabel":"string"}},"uniqueKey":"oneOf.1.match.secret_refs.additionalProperties","typeLabel":"object"},"description":"Explicit saved workspace secret references by destination environment name.","uniqueKey":"oneOf.1.match.secret_refs","typeLabel":"object"},"secret_values":{"type":"object","minProperties":1,"maxProperties":256,"propertyNames":{"$ref":"#/components/schemas/SecretName"},"additionalProperties":{"type":"string","writeOnly":true,"maxLength":16384,"pattern":"^[^\\u0000]*$","uniqueKey":"oneOf.1.match.secret_values.additionalProperties","typeLabel":"string"},"description":"Request-only values delivered through the hidden_secrets gate. Values are sent once\nduring sandbox creation. The server enforces a 16 KiB per-value and 64 KiB total\nUTF-8 byte limit outside JSON Schema validation. Values are never stored, logged,\ntraced, returned, or included in idempotency records. Use the matching placeholder\nfrom the response in configuration.\n","uniqueKey":"oneOf.1.match.secret_values","typeLabel":"object"},"labels":{"type":"object","maxProperties":64,"propertyNames":{"maxLength":63},"additionalProperties":{"type":"string","maxLength":255,"uniqueKey":"oneOf.1.match.labels.additionalProperties","typeLabel":"string"},"description":"BoxRouter labels, returned on the sandbox; not implicitly provider tags.","uniqueKey":"oneOf.1.match.labels","typeLabel":"object"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"oneOf.1.match","typeLabel":"object"},"image":{"oneOf":[{"type":"string","description":"Image to prepare. Only with `providers`. A string is an OCI image reference. Use\n{private_oci} for an image whose registry needs a login, together with\n`registry_credentials`; it is prepared only on routes that use your own provider keys.\nA Dockerfile object uses the same source text and optional uploaded context artifact\nas a sandbox create. Only offerings declaring that prepared source and context mode\nare selected. The whole JSON request is limited to 64 KiB.\n","minLength":1,"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.1.image.oneOf.0","typeLabel":"string"},{"type":"object","description":"Image to prepare. Only with `providers`. A string is an OCI image reference. Use\n{private_oci} for an image whose registry needs a login, together with\n`registry_credentials`; it is prepared only on routes that use your own provider keys.\nA Dockerfile object uses the same source text and optional uploaded context artifact\nas a sandbox create. Only offerings declaring that prepared source and context mode\nare selected. The whole JSON request is limited to 64 KiB.\n","required":["private_oci"],"properties":{"private_oci":{"type":"string","minLength":1,"description":"OCI image reference in a registry that needs a login.","isRequired":true,"uniqueKey":"oneOf.1.image.oneOf.1.private_oci","typeLabel":"string"}},"additionalProperties":false,"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.1.image.oneOf.1","typeLabel":"object"},{"type":"object","description":"Image to prepare. Only with `providers`. A string is an OCI image reference. Use\n{private_oci} for an image whose registry needs a login, together with\n`registry_credentials`; it is prepared only on routes that use your own provider keys.\nA Dockerfile object uses the same source text and optional uploaded context artifact\nas a sandbox create. Only offerings declaring that prepared source and context mode\nare selected. The whole JSON request is limited to 64 KiB.\n","required":["dockerfile"],"properties":{"dockerfile":{"type":"string","minLength":1,"pattern":"^[^\\u0000]*$","description":"Dockerfile source text. No inline context files or context URLs.","isRequired":true,"uniqueKey":"oneOf.1.image.oneOf.2.dockerfile","typeLabel":"string"},"context_artifact_id":{"type":"string","minLength":1,"description":"Optional unexpired artifact owned by this workspace. Its tar context is\nleased through background preparation. Existing upload limits apply:\n10 MiB archive, 64 MiB expanded regular files and 2,048 entries.\n","uniqueKey":"oneOf.1.image.oneOf.2.context_artifact_id","typeLabel":"string"}},"additionalProperties":false,"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.1.image.oneOf.2","typeLabel":"object"}],"conditionalRequirements":[{"when":[[{"property":"providers"}]]}],"uniqueKey":"oneOf.1.image","typeLabel":"string · object · object"},"registry_credentials":{"type":"object","additionalProperties":false,"required":["username","password"],"properties":{"username":{"type":"string","minLength":1,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.1.registry_credentials.username","typeLabel":"string"},"password":{"type":"string","minLength":1,"writeOnly":true,"pattern":"^[^\\u0000]*$","isRequired":true,"uniqueKey":"oneOf.1.registry_credentials.password","typeLabel":"string"}},"description":"Request-only login for a private_oci `image`; required with it and refused without it.\nWith `match`, send it inside the match body instead. Both strings are non-empty, at\nmost 64 KiB UTF-8 bytes together. It is passed to the provider to set up the copy and\nis never stored, logged, traced or returned.\n","uniqueKey":"oneOf.1.registry_credentials","typeLabel":"object"},"providers":{"oneOf":[{"type":"array","items":{"type":"string","minLength":1,"uniqueKey":"oneOf.1.providers.oneOf.0.items.[INDEX]","typeLabel":"string"},"description":"Provider names or all providers configured for this workspace.","minItems":1,"uniqueItems":true,"conditionalRequirements":[{"when":[[{"property":"image"}]]},{"when":[[{"property":"sizes"}]]},{"when":[[{"property":"registry_credentials"}]]}],"uniqueKey":"oneOf.1.providers.oneOf.0","typeLabel":"string[]"},{"type":"string","description":"Provider names or all providers configured for this workspace.","const":"all","conditionalRequirements":[{"when":[[{"property":"image"}]]},{"when":[[{"property":"sizes"}]]},{"when":[[{"property":"registry_credentials"}]]}],"uniqueKey":"oneOf.1.providers.oneOf.1","typeLabel":"string"}],"conditionalRequirements":[{"when":[[{"property":"image"}]]},{"when":[[{"property":"sizes"}]]},{"when":[[{"property":"registry_credentials"}]]}],"uniqueKey":"oneOf.1.providers","typeLabel":"string[] | string"},"sizes":{"type":"array","minItems":1,"uniqueItems":true,"items":{"type":"integer","minimum":1,"uniqueKey":"oneOf.1.sizes.items.[INDEX]","typeLabel":"integer"},"description":"Optional memory sizes to prepare, expressed in GiB. Only with `providers`.","uniqueKey":"oneOf.1.sizes","typeLabel":"integer[]"},"top":{"type":"integer","minimum":1,"default":1,"description":"With `match`, how many of the best-ranked distinct providers to prepare on. Fewer\nare prepared when fewer providers can run the create.\n","uniqueKey":"oneOf.1.top","typeLabel":"integer"}},"additionalProperties":false,"uniqueKey":"oneOf.1","typeLabel":"object"}],"uniqueKey":"","typeLabel":"object"},"example":{"match":{"image":"python:3.13-slim"},"top":2},"examples":{"Example":{"title":"Example","value":{"match":{"image":"python:3.13-slim"},"top":2}}},"exampleType":"examples"}},"exampleType":"examples"},"responses":{"0a1eb168-5b77-409a-b64e-9362936e19f9":{"headers":{"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}}},"description":"Preparation started or already in progress.","content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["image","providers"],"properties":{"image":{"type":"string","description":"Resolved OCI reference or the canonical sha256 content selector of a Dockerfile source and context.","isRequired":true,"uniqueKey":"image","typeLabel":"string"},"providers":{"type":"array","items":{"type":"object","additionalProperties":false,"required":["provider","size","state","reason"],"properties":{"provider":{"type":"string","minLength":1,"description":"Installed provider selected through this workspace's authorized offerings.","isRequired":true,"uniqueKey":"providers.items.[INDEX].provider","typeLabel":"string"},"state":{"type":"string","enum":["queued","preparing","ready","inactive","deleting","failed","unsupported","absent"],"x-boxrouter-open-enum":true,"isRequired":true,"uniqueKey":"providers.items.[INDEX].state","typeLabel":"enum\u003cstring>"},"size":{"oneOf":[{"type":"integer","minimum":1,"description":"Requested memory size in GiB, or null when the copy is not size-specific.","isRequired":true,"uniqueKey":"providers.items.[INDEX].size.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":1,"description":"Requested memory size in GiB, or null when the copy is not size-specific.","isRequired":true,"uniqueKey":"providers.items.[INDEX].size.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"providers.items.[INDEX].size","typeLabel":"integer | null"},"reason":{"oneOf":[{"type":"string","description":"Eligibility or preparation outcome for this provider.","isRequired":true,"uniqueKey":"providers.items.[INDEX].reason.oneOf.0","typeLabel":"string"},{"type":"null","description":"Eligibility or preparation outcome for this provider.","isRequired":true,"uniqueKey":"providers.items.[INDEX].reason.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"providers.items.[INDEX].reason","typeLabel":"string | null"}},"uniqueKey":"providers.items.[INDEX]","typeLabel":"object"},"isRequired":true,"uniqueKey":"providers","typeLabel":"object[]"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"image":"\u003cstring>","providers":[{"provider":"\u003cstring>","state":"queued","size":2,"reason":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"},"2b5b2286-b183-4fee-8f05-dea47a376819":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"},"d879b22a-e98b-493c-89c1-bc320bfce6cc":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"},"0cb78a6c-6aaa-4745-b1ff-65b39e33608c":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"},"c4815709-a5ae-40f1-bb19-16a8ece92f93":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"dd0c83e6-beb9-482e-9a5d-60b9e86012e1":{"BoxRouterKey":{"type":"http","scheme":"bearer","description":"BoxRouter API key; never an upstream provider key.","scopes":[],"schemeName":"BoxRouterKey"}},"3a6c0149-9909-4d75-82ec-be6787165396":{"BrowserSession":{"type":"apiKey","in":"cookie","name":"__Host-boxrouter_session","description":"HttpOnly server-side session. Local HTTP uses boxrouter_session. Browser mutations require the session CSRF token and the configured Origin; execution API keys cannot administer sessions or customer keys.","scopes":[],"schemeName":"BrowserSession"}}},"servers":{"38340c0e-1365-48ce-8dcd-74c64a2f69dc":{"url":"https://api.boxrouter.ai/api/v1"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"http","scheme":"bearer","description":"BoxRouter API key; never an upstream provider key.","scopes":[],"schemeName":"BoxRouterKey"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"BoxRouter API key; never an upstream provider key.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"BoxRouterKey","name":"Authorization"}],"title":"BoxRouterKey"},{"schemes":[{"scheme":{"type":"apiKey","in":"cookie","name":"__Host-boxrouter_session","description":"HttpOnly server-side session. Local HTTP uses boxrouter_session. Browser mutations require the session CSRF token and the configured Origin; execution API keys cannot administer sessions or customer keys.","scopes":[],"schemeName":"BrowserSession"},"schema":{"title":"__Host-boxrouter_session","type":"string","description":"HttpOnly server-side session. Local HTTP uses boxrouter_session. Browser mutations require the session CSRF token and the configured Origin; execution API keys cannot administer sessions or customer keys.","isRequired":true,"typeLabel":"string","deprecated":false},"schemeName":"BrowserSession","name":"__Host-boxrouter_session"}],"title":"BrowserSession"}]},"originalFileLocation":"openapi.json"},"subdomain":"nv-4965711d","siteName":"BoxRouter","title":"Prepare an Image on Selected Providers - BoxRouter","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-11-01T01:33:11.721Z","originalFileLocation":"reference/prepare-image.md"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"dark\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Start background preparation using this workspace\u0026#x27;s payer-account rules, on the named providers or on the top providers a create with the match body would pick now. A named provider that cannot run the image reports its fit reason immediately; a match body that no route can run is refused as that create would be. With match, the response lists the picked providers in rank order, and each reason says how it was ranked. A ready result means a usable copy existed when preparation completed; it does not keep the copy awake afterward. Read progress from GET /images/preparations. OCI and Dockerfile inputs use the same declared preparation capabilities as a create. A Dockerfile response returns a content selector for status and unprepare. If no selected offering declares prepared Dockerfile/context support, it is refused before reading the context or starting provider work. Existing provider artifacts are already prepared. The request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\">\u003cmeta data-mint-head name=\"application-name\" content=\"BoxRouter\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Prepare an Image on Selected Providers - BoxRouter\">\u003cmeta data-mint-head property=\"og:description\" content=\"Start background preparation using this workspace\u0026#x27;s payer-account rules, on the named providers or on the top providers a create with the match body would pick now. A named provider that cannot run the image reports its fit reason immediately; a match body that no route can run is refused as that create would be. With match, the response lists the picked providers in rank order, and each reason says how it was ranked. A ready result means a usable copy existed when preparation completed; it does not keep the copy awake afterward. Read progress from GET /images/preparations. OCI and Dockerfile inputs use the same declared preparation capabilities as a create. A Dockerfile response returns a content selector for status and unprepare. If no selected offering declares prepared Dockerfile/context support, it is refused before reading the context or starting provider work. Existing provider artifacts are already prepared. The request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"BoxRouter\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://boxrouter.ai/docs/reference/prepare-image\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://nv-4965711d.mintlify.site/docs/_mintlify/api/og/v2?division=Images\u0026amp;title=Prepare+an+Image+on+Selected+Providers\u0026amp;description=Start+background+preparation+using+this+workspace%27s+payer-account+rules%2C+on+the+named%0A%60providers%60+or+on+the+%60top%60+providers+a+create+with+the+%60match%60+body+would\u0026amp;theme=231fc68973f7c9fcdf02f0c3\u0026amp;signature=373c5ac84390aecc77b12404e1c6ceb23049de0517617e496f84c4c283492596\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Prepare an Image on Selected Providers - BoxRouter\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Start background preparation using this workspace\u0026#x27;s payer-account rules, on the named providers or on the top providers a create with the match body would pick now. A named provider that cannot run the image reports its fit reason immediately; a match body that no route can run is refused as that create would be. With match, the response lists the picked providers in rank order, and each reason says how it was ranked. A ready result means a usable copy existed when preparation completed; it does not keep the copy awake afterward. Read progress from GET /images/preparations. OCI and Dockerfile inputs use the same declared preparation capabilities as a create. A Dockerfile response returns a content selector for status and unprepare. If no selected offering declares prepared Dockerfile/context support, it is refused before reading the context or starting provider work. Existing provider artifacts are already prepared. The request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://nv-4965711d.mintlify.site/docs/_mintlify/api/og/v2?division=Images\u0026amp;title=Prepare+an+Image+on+Selected+Providers\u0026amp;description=Start+background+preparation+using+this+workspace%27s+payer-account+rules%2C+on+the+named%0A%60providers%60+or+on+the+%60top%60+providers+a+create+with+the+%60match%60+body+would\u0026amp;theme=231fc68973f7c9fcdf02f0c3\u0026amp;signature=373c5ac84390aecc77b12404e1c6ceb23049de0517617e496f84c4c283492596\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"BoxRouter\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#047857\">\u003clink data-mint-head rel=\"canonical\" href=\"https://boxrouter.ai/docs/reference/prepare-image\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/docs/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/docs/reference/prepare-image.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://boxrouter.ai/#organization\",\"name\":\"BoxRouter\",\"url\":\"https://boxrouter.ai\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/nv-4965711d/xqQLsJs3vPQQ6w_V/brand-mark.svg?fit=max\u0026auto=format\u0026n=xqQLsJs3vPQQ6w_V\u0026q=85\u0026s=34456eec220b466fd4503f478e120e5b\"}},{\"@type\":\"WebSite\",\"@id\":\"https://boxrouter.ai/docs#website\",\"name\":\"BoxRouter\",\"url\":\"https://boxrouter.ai/docs\",\"publisher\":{\"@id\":\"https://boxrouter.ai/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://boxrouter.ai/docs/reference/prepare-image#webpage\",\"url\":\"https://boxrouter.ai/docs/reference/prepare-image\",\"name\":\"Prepare an Image on Selected Providers\",\"description\":\"Start background preparation using this workspace's payer-account rules, on the named providers or on the top providers a create with the match body would pick now. A named provider that cannot run the image reports its fit reason immediately; a match body that no route can run is refused as that create would be. With match, the response lists the picked providers in rank order, and each reason says how it was ranked. A ready result means a usable copy existed when preparation completed; it does not keep the copy awake afterward. Read progress from GET /images/preparations. OCI and Dockerfile inputs use the same declared preparation capabilities as a create. A Dockerfile response returns a content selector for status and unprepare. If no selected offering declares prepared Dockerfile/context support, it is refused before reading the context or starting provider work. Existing provider artifacts are already prepared. The request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\",\"dateModified\":\"2026-11-01T01:33:11.721Z\",\"isPartOf\":{\"@id\":\"https://boxrouter.ai/docs#website\"},\"breadcrumb\":{\"@id\":\"https://boxrouter.ai/docs/reference/prepare-image#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://boxrouter.ai/docs/reference/prepare-image#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"BoxRouter\",\"item\":\"https://boxrouter.ai/docs\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Prepare an Image on Selected Providers\",\"item\":\"https://boxrouter.ai/docs/reference/prepare-image\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://boxrouter.ai/docs/reference/prepare-image#apireference\",\"headline\":\"Prepare an Image on Selected Providers\",\"name\":\"Prepare an Image on Selected Providers\",\"description\":\"Start background preparation using this workspace's payer-account rules, on the named providers or on the top providers a create with the match body would pick now. A named provider that cannot run the image reports its fit reason immediately; a match body that no route can run is refused as that create would be. With match, the response lists the picked providers in rank order, and each reason says how it was ranked. A ready result means a usable copy existed when preparation completed; it does not keep the copy awake afterward. Read progress from GET /images/preparations. OCI and Dockerfile inputs use the same declared preparation capabilities as a create. A Dockerfile response returns a content selector for status and unprepare. If no selected offering declares prepared Dockerfile/context support, it is refused before reading the context or starting provider work. Existing provider artifacts are already prepared. The request JSON is limited to 64 KiB; uploaded contexts retain the artifacts API limits.\",\"url\":\"https://boxrouter.ai/docs/reference/prepare-image\",\"mainEntityOfPage\":{\"@id\":\"https://boxrouter.ai/docs/reference/prepare-image#webpage\"},\"dateModified\":\"2026-11-01T01:33:11.721Z\",\"publisher\":{\"@id\":\"https://boxrouter.ai/#organization\"},\"isPartOf\":{\"@id\":\"https://boxrouter.ai/docs#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"BoxRouter\",\"publisher\":{\"@type\":\"Organization\",\"name\":\"BoxRouter\"},\"provider\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","agentPointerHref":"/docs/reference/prepare-image.md","siteName":"BoxRouter","nav":{"global":null,"tabs":[{"tab":"Guides","pages":[{"title":"Guides","href":""}]},{"tab":"Agents","pages":[{"title":"Agents","href":"/launch/quickstart"}]},{"tab":"GitHub Actions","pages":[{"title":"GitHub Actions","href":"/actions/quickstart"}]},{"tab":"API Reference","groups":[{"group":"Overview","pages":[{"title":"Call the BoxRouter API","sidebarTitle":"Overview","href":"/api-overview"},{"title":"Error Codes","href":"/error-codes"}]},{"group":"Sandboxes","pages":[{"title":"Create a Sandbox","openapi":"openapi.json POST /sandboxes","href":"/reference/create"},{"title":"List Workspace Sandboxes","openapi":"openapi.json GET /sandboxes","href":"/reference/list-sandboxes"},{"title":"Get a Sandbox","openapi":"openapi.json GET /sandboxes/{sandbox_id}","href":"/reference/get"},{"title":"Destroy a Sandbox","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}","href":"/reference/destroy"},{"title":"Explain Routing without Creating","openapi":"openapi.json POST /sandboxes/match","href":"/reference/match"},{"title":"Prove a Headless Chromium in the Sandbox","openapi":"openapi.json POST /sandboxes/{sandbox_id}/browser","href":"/reference/ensure-browser"},{"title":"Pause a Sandbox and Keep It","openapi":"openapi.json POST /sandboxes/{sandbox_id}/pause","href":"/reference/pause-sandbox"},{"title":"Resume the Same Paused Sandbox","openapi":"openapi.json POST /sandboxes/{sandbox_id}/resume","href":"/reference/resume-sandbox"},{"title":"Extend a Sandbox Lifetime","openapi":"openapi.json POST /sandboxes/{sandbox_id}/lifetime","href":"/reference/extend-sandbox-lifetime"},{"title":"Change a Running Sandbox's Outbound Network Policy","openapi":"openapi.json POST /sandboxes/{sandbox_id}/network-policy","href":"/reference/update-network-policy"}]},{"group":"Commands","pages":[{"title":"Run a Buffered Command","openapi":"openapi.json POST /sandboxes/{sandbox_id}/commands","href":"/reference/exec"}]},{"group":"Processes","pages":[{"title":"Start a Durable Background Command","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes","href":"/reference/process-start"},{"title":"Read Process Output from Byte Offsets","openapi":"openapi.json GET /sandboxes/{sandbox_id}/processes/{process_id}","href":"/reference/read-process"},{"title":"Delete a Finished Process's Retained Output","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}/processes/{process_id}","href":"/reference/remove-process"},{"title":"Write Process Input","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes/{process_id}/stdin","href":"/reference/process-stdin"},{"title":"Send Stdin EOF","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes/{process_id}/stdin/close","href":"/reference/process-stdin-close"},{"title":"Cancel a Durable Process","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes/{process_id}/cancel","href":"/reference/process-cancel"}]},{"group":"Files","pages":[{"title":"Read Exact File Bytes","openapi":"openapi.json GET /sandboxes/{sandbox_id}/files/content","href":"/reference/read"},{"title":"Write Exact File Bytes","openapi":"openapi.json PUT /sandboxes/{sandbox_id}/files/content","href":"/reference/write"},{"title":"Create a Sandbox File Upload","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/uploads","href":"/reference/create-sandbox-upload"},{"title":"Complete a Sandbox File Upload","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/uploads/{upload_id}/complete","href":"/reference/complete-sandbox-upload"},{"title":"Abort a Sandbox File Upload","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}/files/uploads/{upload_id}","href":"/reference/abort-sandbox-upload"},{"title":"Create a Sandbox File Download","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/downloads","href":"/reference/create-sandbox-download"},{"title":"List the Immediate Entries of a Directory","openapi":"openapi.json GET /sandboxes/{sandbox_id}/files/directories","href":"/reference/list-directory"},{"title":"Create a Directory","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/directories","href":"/reference/create-directory"},{"title":"Check for an Accessible Filesystem Target","openapi":"openapi.json GET /sandboxes/{sandbox_id}/files/exists","href":"/reference/path-exists"},{"title":"Remove a File, Symbolic Link or Directory","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/remove","href":"/reference/remove-path"}]},{"group":"Terminals","pages":[{"title":"Open a Terminal","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals","href":"/reference/open-terminal"},{"title":"Get Observed Terminal State","openapi":"openapi.json GET /sandboxes/{sandbox_id}/terminals/{terminal_id}","href":"/reference/get-terminal"},{"title":"Stream Terminal Output and Its End","openapi":"openapi.json GET /sandboxes/{sandbox_id}/terminals/{terminal_id}/events","href":"/reference/stream-terminal-events"},{"title":"Write Terminal Input","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals/{terminal_id}/input","href":"/reference/write-terminal-input"},{"title":"Resize the Terminal Window","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals/{terminal_id}/resize","href":"/reference/resize-terminal"},{"title":"Hang up the Terminal without Destroying Its Sandbox","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals/{terminal_id}/kill","href":"/reference/kill-terminal"}]},{"group":"Previews","pages":[{"title":"List a Sandbox's Open Previews","openapi":"openapi.json GET /sandboxes/{sandbox_id}/previews","href":"/reference/list-previews"},{"title":"Get a URL for a Sandbox Port","openapi":"openapi.json POST /sandboxes/{sandbox_id}/previews","href":"/reference/open-preview"},{"title":"Revoke a Preview","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}/previews/{preview_id}","href":"/reference/revoke-preview"}]},{"group":"Volumes","pages":[{"title":"List Volumes","openapi":"openapi.json GET /volumes","href":"/reference/list-volumes"},{"title":"Create a Volume","openapi":"openapi.json POST /volumes","href":"/reference/create-volume"},{"title":"Get a Volume","openapi":"openapi.json GET /volumes/{volume_id}","href":"/reference/get-volume"},{"title":"Delete a Volume and Its Checkpoints","openapi":"openapi.json DELETE /volumes/{volume_id}","href":"/reference/delete-volume"},{"title":"List Volume Checkpoints","openapi":"openapi.json GET /volumes/{volume_id}/checkpoints","href":"/reference/list-volume-checkpoints"},{"title":"Save a Volume Checkpoint","openapi":"openapi.json POST /volumes/{volume_id}/checkpoints","href":"/reference/save-volume"},{"title":"Get a Volume Checkpoint","openapi":"openapi.json GET /volumes/{volume_id}/checkpoints/{checkpoint}","href":"/reference/get-volume-checkpoint"},{"title":"Delete a Checkpoint","openapi":"openapi.json DELETE /volumes/{volume_id}/checkpoints/{checkpoint}","href":"/reference/delete-volume-checkpoint"},{"title":"Release a Volume's Writer Lease","openapi":"openapi.json DELETE /volumes/{volume_id}/lease","href":"/reference/release-volume-lease"},{"title":"Create a Volume File Upload","openapi":"openapi.json POST /volumes/{volume_id}/uploads","href":"/reference/create-volume-upload"},{"title":"Complete a Volume File Upload","openapi":"openapi.json POST /volumes/{volume_id}/uploads/{upload_id}/complete","href":"/reference/complete-volume-upload"},{"title":"Abort a Volume File Upload","openapi":"openapi.json DELETE /volumes/{volume_id}/uploads/{upload_id}","href":"/reference/abort-volume-upload"},{"title":"Create a Volume File Download","openapi":"openapi.json POST /volumes/{volume_id}/downloads","href":"/reference/create-volume-download"},{"title":"List Files in a Volume","openapi":"openapi.json GET /volumes/{volume_id}/files","href":"/reference/list-volume-files"},{"title":"Delete a Volume File","openapi":"openapi.json DELETE /volumes/{volume_id}/files","description":"Deletes the file at `path`, or every file under it when `path` ends in `/`, to free space without deleting the volume. Deleting a path that does not exist succeeds, so a repeated request is safe. A live or pending `write` attachment or an open upload makes the volume busy (`volume_busy`); read and shared sandboxes may need to refresh their volume cache to stop seeing the file.","href":"/reference/delete-volume-file"}]},{"group":"Images","pages":[{"title":"Prepare an Image on Selected Providers","openapi":"openapi.json POST /images/prepare","href":"/reference/prepare-image"},{"title":"Read Image Preparation Status","openapi":"openapi.json GET /images/preparations","description":"Reads preparation state recorded for the requested image in this workspace. The providers query can limit the result; omitted returns every recorded provider. A content selector reads the workspace's recorded copy without contacting a registry.","href":"/reference/get-image-preparations"},{"title":"Remove This Workspace's Prepared Image Copies","openapi":"openapi.json POST /images/unprepare","href":"/reference/unprepare-image"}]},{"group":"Operations","pages":[{"title":"List Recorded Workspace Operations","openapi":"openapi.json GET /operations","href":"/reference/list-operations"},{"title":"Get a Mutation's Known Outcome","openapi":"openapi.json GET /operations/{operation_id}","href":"/reference/operation"}]},{"group":"Routing Settings","pages":[{"title":"Read Workspace Routing and Provider Funding","openapi":"openapi.json GET /routing/settings","href":"/reference/get-routing-settings"},{"title":"Update One Workspace Routing Section","openapi":"openapi.json PUT /routing/settings","href":"/reference/update-routing-settings"},{"title":"Preview Workspace Route Availability without Dispatch","openapi":"openapi.json GET /routing/preview","href":"/reference/get-routing-preview"}]},{"group":"Providers","pages":[{"title":"List Available Provider Routes","openapi":"openapi.json GET /providers","href":"/reference/list-providers"}]},{"group":"Price Versions","pages":[{"title":"List the Providers' Live Price Versions","openapi":"openapi.json GET /price-versions","href":"/reference/list-price-versions"}]},{"group":"Agent Catalog","pages":[{"title":"List Launch Agents","openapi":"openapi.json GET /agents","href":"/reference/agents-list"},{"title":"Get a Launch Agent Manifest","openapi":"openapi.json GET /agents/{name}","href":"/reference/agents-get"}]},{"group":"Agent Launches","pages":[{"title":"Create an Agent Launch","openapi":"openapi.json POST /launches","href":"/reference/launch-create"},{"title":"Get Launch Status and Phase Progress","openapi":"openapi.json GET /launches/{operation_id}","href":"/reference/get-launch-operation"},{"title":"Get What a Launch Asked For","openapi":"openapi.json GET /launches/{operation_id}/settings","href":"/reference/get-launch-settings"},{"title":"Get Unattended Command State","openapi":"openapi.json GET /launches/{operation_id}/command","href":"/reference/get-launch-command"},{"title":"Check Whether This Workspace Can Read a Repository","openapi":"openapi.json GET /repositories/{owner}/{repo}/access","href":"/reference/check-repository-access"}]},{"group":"Launch Runs","pages":[{"title":"List Launch Runs","openapi":"openapi.json GET /launch-runs","href":"/reference/list-launch-runs"},{"title":"Start an Unattended Launch Run","openapi":"openapi.json POST /launch-runs","href":"/reference/create-launch-run"},{"title":"Read Launch Run Metadata","openapi":"openapi.json GET /launch-runs/{run_id}","href":"/reference/get-launch-run"},{"title":"Stop a Launch Run","openapi":"openapi.json POST /launch-runs/{run_id}/stop","href":"/reference/stop-launch-run"},{"title":"Destroy One Launch-Run Copy","openapi":"openapi.json POST /launch-runs/{run_id}/copies/{copy_index}/destroy","href":"/reference/destroy-launch-run-copy"}]},{"group":"Workspace Secrets","pages":[{"title":"List Workspace Secret Names","openapi":"openapi.json GET /secrets","href":"/reference/secrets-list"},{"title":"Store a Workspace Secret","openapi":"openapi.json PUT /secrets/{name}","href":"/reference/secrets-put"},{"title":"Delete a Workspace Secret","openapi":"openapi.json DELETE /secrets/{name}","href":"/reference/secrets-delete"}]},{"group":"Artifacts","pages":[{"title":"Upload a Staged Input","openapi":"openapi.json POST /artifacts","href":"/reference/upload-artifact"},{"title":"Inspect a Staged Artifact","openapi":"openapi.json GET /artifacts/{artifact_id}","href":"/reference/get-artifact"},{"title":"Remove a Staged Artifact","openapi":"openapi.json DELETE /artifacts/{artifact_id}","href":"/reference/delete-artifact"}]},{"group":"GitHub","pages":[{"title":"List GitHub App Installations Linked to This Workspace","openapi":"openapi.json GET /github/installations","href":"/reference/list-github-installations"},{"title":"Unlink a GitHub App Installation from This Workspace","openapi":"openapi.json DELETE /github/installations/{installation_id}","href":"/reference/unlink-github-installation"},{"title":"List Repositories Visible through a Linked Installation","openapi":"openapi.json GET /github/repositories","href":"/reference/list-github-repositories"}]},{"group":"GitHub Actions","pages":[{"title":"Batch Actions Enablement and Defaults for the Given Repositories","openapi":"openapi.json GET /actions/repositories","href":"/reference/list-actions-repositories"},{"title":"Get Actions Enablement and Defaults for a Repository","openapi":"openapi.json GET /actions/repositories/{repository_id}","href":"/reference/get-actions-repository"},{"title":"Enable or Update Actions Defaults for a Repository","openapi":"openapi.json PUT /actions/repositories/{repository_id}","href":"/reference/update-actions-repository"},{"title":"Read Actions Runner and Workspace Funding Readiness","openapi":"openapi.json GET /actions/readiness","href":"/reference/get-actions-readiness"},{"title":"Read the Recommended Actions Runner Labels and Resource Floors","openapi":"openapi.json GET /actions/runner-catalog","href":"/reference/get-actions-runner-catalog"},{"title":"List Workspace Actions Policies","openapi":"openapi.json GET /actions/policies","href":"/reference/list-actions-policies"},{"title":"Create a Named Workspace Actions Policy","openapi":"openapi.json POST /actions/policies","href":"/reference/create-actions-policy"},{"title":"Get a Workspace Actions Policy","openapi":"openapi.json GET /actions/policies/{policy_id}","href":"/reference/get-actions-policy"},{"title":"Replace a Workspace Actions Policy","openapi":"openapi.json PUT /actions/policies/{policy_id}","href":"/reference/update-actions-policy"},{"title":"Delete an Unused Workspace Actions Policy","openapi":"openapi.json DELETE /actions/policies/{policy_id}","href":"/reference/delete-actions-policy"},{"title":"Preview Actions Label and Policy Eligibility","openapi":"openapi.json POST /actions/preview","href":"/reference/preview-actions"},{"title":"List Workspace Actions Workflow-Run Projections","openapi":"openapi.json GET /actions/runs","href":"/reference/list-actions-runs"},{"title":"Count the Values Each Run Filter Offers","openapi":"openapi.json GET /actions/runs/facets","href":"/reference/list-actions-run-facets"},{"title":"Get the Billed Time of Runners That Served No Job","openapi":"openapi.json GET /actions/pool-idle-time","href":"/reference/get-actions-pool-idle-time"},{"title":"Get a Workflow-Run Projection and Aggregate Billing Evidence","openapi":"openapi.json GET /actions/runs/{run_id}","href":"/reference/get-actions-run"},{"title":"List GitHub Jobs Projected for a Workflow Run","openapi":"openapi.json GET /actions/runs/{run_id}/jobs","href":"/reference/list-actions-run-jobs"},{"title":"List Placements Attempted for a Workflow Run","openapi":"openapi.json GET /actions/runs/{run_id}/placements","href":"/reference/list-actions-run-placements"},{"title":"Get an Actions Job Projection","openapi":"openapi.json GET /actions/jobs/{job_id}","href":"/reference/get-actions-job"},{"title":"Get GitHub Workflow Steps for an Actions Job","openapi":"openapi.json GET /actions/jobs/{job_id}/steps","href":"/reference/get-actions-job-steps"},{"title":"Read a Bounded Prefix of the Selected GitHub Job Log","openapi":"openapi.json GET /actions/jobs/{job_id}/logs","href":"/reference/get-actions-job-logs"},{"title":"Read a Bounded Prefix of One GitHub Step Log","openapi":"openapi.json GET /actions/jobs/{job_id}/steps/{step_position}/logs","href":"/reference/get-actions-job-step-logs"},{"title":"List Actions Step Events for a Job","openapi":"openapi.json GET /actions/jobs/{job_id}/events","href":"/reference/get-actions-job-events"},{"title":"Get an Actions Placement and Its Cost and Cleanup Evidence","openapi":"openapi.json GET /actions/placements/{placement_id}","href":"/reference/get-actions-placement"},{"title":"Ask GitHub to Cancel the Entire Workflow Run","openapi":"openapi.json POST /actions/runs/{run_id}/cancel","href":"/reference/cancel-actions-run"},{"title":"Ask GitHub to Rerun the Entire Workflow","openapi":"openapi.json POST /actions/runs/{run_id}/rerun","href":"/reference/rerun-actions-run"},{"title":"Ask GitHub to Rerun Failed Jobs and Their Dependents","openapi":"openapi.json POST /actions/runs/{run_id}/rerun-failed-jobs","href":"/reference/rerun-actions-run-failed-jobs"}]},{"group":"Provider Accounts","pages":[{"title":"Connect a Provider Account","openapi":"openapi.json POST /provider-accounts","href":"/reference/connect-provider-account"},{"title":"List Connected Accounts","openapi":"openapi.json GET /provider-accounts","href":"/reference/list-provider-accounts"},{"title":"Test Provider Credentials without Saving Them","openapi":"openapi.json POST /provider-accounts/test","href":"/reference/test-provider-credentials"},{"title":"Get Connected-Account Metadata","openapi":"openapi.json GET /provider-accounts/{account_id}","href":"/reference/get-provider-account"},{"title":"Remove a Connected Account","openapi":"openapi.json DELETE /provider-accounts/{account_id}","href":"/reference/disconnect-provider-account"},{"title":"Rotate a Connected Account's Credentials","openapi":"openapi.json PUT /provider-accounts/{account_id}/credentials","href":"/reference/replace-provider-credentials"},{"title":"Test a Saved Provider Account","openapi":"openapi.json POST /provider-accounts/{account_id}/test","href":"/reference/test-provider-account"},{"title":"Run the Standard Image Setup Proof","openapi":"openapi.json POST /provider-accounts/{account_id}/standard-image/setup","href":"/reference/setup-provider-standard-image"}]},{"group":"Credits and Billing","pages":[{"title":"Get the Workspace Credit Balance","openapi":"openapi.json GET /credits","href":"/reference/get-credits"},{"title":"Start a Credit Purchase through Checkout or a Saved Card","openapi":"openapi.json POST /credits/purchases","href":"/reference/create-credit-purchase"},{"title":"List Recent Credit Purchases","openapi":"openapi.json GET /credits/purchases","href":"/reference/list-credit-purchases"},{"title":"Preview a Credit Purchase and Its Tax","openapi":"openapi.json POST /credits/purchases/quote","href":"/reference/quote-credit-purchase"},{"title":"List Managed-Compute Credit Movements","openapi":"openapi.json GET /credits/usage","href":"/reference/list-credit-usage"},{"title":"List Grouped Managed and BYOK Sandbox Usage","openapi":"openapi.json GET /usage","href":"/reference/list-usage-report"},{"title":"Export Grouped Managed and BYOK Sandbox Usage as CSV","openapi":"openapi.json GET /usage.csv","href":"/reference/export-usage-report-csv"},{"title":"Get One Credit Purchase","openapi":"openapi.json GET /credits/purchases/{purchase_id}","href":"/reference/get-credit-purchase"},{"title":"Close an Unpaid Checkout Session","openapi":"openapi.json POST /credits/purchases/{purchase_id}/cancel","href":"/reference/cancel-credit-purchase"},{"title":"Redeem a Promotion Code for Free Credit","openapi":"openapi.json POST /credits/promotions","href":"/reference/redeem-credit-promotion"},{"title":"List Redeemed Promotion Codes","openapi":"openapi.json GET /credits/promotions","href":"/reference/list-credit-promotions"},{"title":"Get Workspace Billing Details","openapi":"openapi.json GET /credits/billing-details","href":"/reference/get-credit-billing-details"},{"title":"Replace Workspace Billing Details","openapi":"openapi.json PUT /credits/billing-details","href":"/reference/update-credit-billing-details"},{"title":"Get Workspace Credit Alert Settings","openapi":"openapi.json GET /credits/alerts","href":"/reference/get-credit-alerts"},{"title":"Replace Workspace Credit Alert Settings","openapi":"openapi.json PUT /credits/alerts","href":"/reference/update-credit-alerts"},{"title":"List Saved Workspace Payment Methods","openapi":"openapi.json GET /credits/payment-methods","href":"/reference/list-credit-payment-methods"},{"title":"Start Hosted Setup for a Saved Payment Method","openapi":"openapi.json POST /credits/payment-methods/setup","href":"/reference/create-credit-payment-method-setup"},{"title":"Start in-Page Saved Card Setup","openapi":"openapi.json POST /credits/payment-methods/setup-intent","href":"/reference/create-credit-payment-method-setup-intent"},{"title":"Set Saved Card Charge Order","openapi":"openapi.json PUT /credits/payment-methods/order","href":"/reference/reorder-credit-payment-methods"},{"title":"Get a Saved Payment Method Setup Status","openapi":"openapi.json GET /credits/payment-method-setups/{setup_id}","href":"/reference/get-credit-payment-method-setup"},{"title":"Remove a Saved Workspace Payment Method","openapi":"openapi.json DELETE /credits/payment-methods/{payment_method_id}","href":"/reference/delete-credit-payment-method"},{"title":"Set the Workspace's Default Saved Card","openapi":"openapi.json POST /credits/payment-methods/{payment_method_id}/default","href":"/reference/set-credit-default-payment-method"},{"title":"Get Automatic Credit Top-up Settings","openapi":"openapi.json GET /credits/auto-top-up","href":"/reference/get-credit-auto-top-up"},{"title":"Replace Automatic Credit Top-up Settings","openapi":"openapi.json PUT /credits/auto-top-up","href":"/reference/update-credit-auto-top-up"}]},{"group":"Spend Limits","pages":[{"title":"List Managed-Compute Spend Limits","openapi":"openapi.json GET /spend-limits","href":"/reference/list-spend-limits"},{"title":"Set a Managed-Compute Spend Cap","openapi":"openapi.json PUT /spend-limits/{scope}","href":"/reference/set-spend-limit"},{"title":"Clear a Managed-Compute Spend Cap","openapi":"openapi.json DELETE /spend-limits/{scope}","href":"/reference/clear-spend-limit"}]}]}]},"basePath":"","title":"Prepare an Image on Selected Providers - BoxRouter","buildId":"dpl_Aw98ji4XvBsgtZwL1VrkUF9ehFqz","deploymentId":"dpl_Aw98ji4XvBsgtZwL1VrkUF9ehFqz","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-CQGbdtm4.js","utils-D88A1f-Z.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-ChqWdz1A.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-yBrxdh_6.js","snippetPresets-BgqDrFJC.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-Duxc2rZw.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-C7jidOil.js","shallow-xkjpHm-U.js","getApiPlaygroundDisplay-fE3rVpvL.js","CodeSnippet-LgxljKed.js","CodeSnippets-D-pXWDHq.js","Page-C2-BijcO.js","getPastedJson-CLRcu-uo.js","icon-Cxirpjgo.js","MethodPill-D49eqY5e.js","DuplicateIcon-CivCz5Rp.js","createIcon-D71qL3f5.js","DynamicMarkdown-BcGRTrw6.js","SectionHeading-DzaqmmSD.js","axios-vUo_bRtp.js","Markdown-CZqUYmMp.js","clsx-B6IZIRsp.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-B0ZV6X5T.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-MqLyPtsW.js"]}