Replaces a connected account’s credentials, for example to rotate a key. Needs the
provider-accounts:manage permission on the API key (a signed-in dashboard session also
works) and the account’s current expected_version.
The new credentials must belong to the same provider. BoxRouter makes one read-only request
to the provider and refuses a clear rejection with 422 credentials_rejected; it does not
check which account the key belongs to. Requests already running keep the old credentials,
and requests that start afterward use the new ones. A provider that is not enabled for you
fails with 409 provider_not_enabled.
Leave out the connection settings to keep the existing ones. Settings you send must match the
existing route; changing the endpoint, proxy or header identity needs a new connected
account, not a key rotation. Credentials that run your code need extra authority on the key
and an artifact you uploaded. If the new credentials fail to activate, the old version stays
in use. A token refresh that already happened with the provider is not undone.
BoxRouter API key; never an upstream provider key.
Headers
Idempotency-Key
string
Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads.
Stable identifier for one logical mutation.
Required string length: 1 - 128
Path Parameters
account_id
string
required
BoxRouter connected-account ID, scoped to this workspace.
Minimum string length: 1
Pattern: ^[^\u0000]*$
Body
application/json
expected_version
integer
required
Required range: x >= 1
credentials
object
required
One provider's account credentials as flat fields. provider names an available
provider (available_providers of listProviderAccounts); every other property is one of
that provider's credential_fields. A required field is a nonempty string; an optional
field is a string or null, and null is the same as leaving it out. Secret values contain
12 through 16384 characters and identifiers 1 through 256. A field the provider does not
declare, a missing or null required field, or a value of another type is rejected; errors
name the field, never its value. Accepted only on credential-management endpoints, over
TLS. Write-only and encrypted at rest. Never logged or returned.
Show child attributes
Response
Account metadata with the incremented credential version.
id
string
required
name
string
required
provider
string
required
status
string
required
Known states are pending, enabled, invalid_credentials, credentials_rejected and unavailable.
Pending is a legacy state for an account saved before provider approval. Enabled means
hosted BYOK is approved and the provider did not reject the credentials when they were saved.
invalid_credentials and unavailable remain readable for older records. credentials_rejected
means a later provider call rejected the saved access; credential_failure gives a safe cause
and the action needed to restore it.
settings
object
required
Non-secret credential fields saved with the credentials, named as in credential_fields. Legacy accounts may return an empty object. Secrets are never returned; credential_hints may return the last four characters and credential_prefixes only a declared public prefix.
Show child attributes
credential_version
integer
required
Monotonic version. Contains no key material or key fingerprint; credential_hints and credential_prefixes may return only the last four characters and a declared public prefix, respectively.
Required range: x >= 1
credential_hints
object
Last four characters of saved secret credential fields that contain at least 12 characters. No other key material is returned.
Show child attributes
credential_prefixes
object
Declared public prefixes for saved secret credential fields, returned only when the saved value starts with the declared prefix and at least eight characters remain hidden before the last four. No other key material is returned.
Show child attributes
credential_failure
object | null
Present when a later provider call rejected the saved credentials or access.
Show child attributes
standard_image
object
Option 1
Option 2
Option 3
Option 4
Show child attributes
disconnect
object | null
A removal accepted with wait=false that is still running or was refused; null otherwise.
Show child attributes
warnings
object[]
Notices about this connect. Present only on the response that created the account, and
only when there is something to say.
Show child attributes
{"docsConfig":{"theme":"mint","$schema":"https://mintlify.com/docs.json","name":"BoxRouter","description":"Run sandboxes, coding agents, and GitHub Actions jobs on any provider through one API.","colors":{"primary":"#047857","light":"#6ee7b7","dark":"#10b981"},"logo":{"light":"https://mintcdn.com/nv-4965711d/xqQLsJs3vPQQ6w_V/brand-mark.svg?fit=max\u0026auto=format\u0026n=xqQLsJs3vPQQ6w_V\u0026q=85\u0026s=34456eec220b466fd4503f478e120e5b","dark":"https://mintcdn.com/nv-4965711d/xqQLsJs3vPQQ6w_V/brand-mark.svg?fit=max\u0026auto=format\u0026n=xqQLsJs3vPQQ6w_V\u0026q=85\u0026s=34456eec220b466fd4503f478e120e5b","href":"https://boxrouter.ai/"},"favicon":"https://mintcdn.com/nv-4965711d/QLfzpIkb_yuLLqxB/tab-icon.svg?fit=max\u0026auto=format\u0026n=QLfzpIkb_yuLLqxB\u0026q=85\u0026s=768e4d931174b769c852362ed31f7768","api":{"playground":{"display":"none"}},"appearance":{"default":"dark","strict":false},"background":{"color":{"light":"#ffffff","dark":"#03080a"}},"navbar":{"links":[{"href":"https://boxrouter.ai/benchmarks","label":"Benchmarks"},{"href":"/","label":"Docs"}],"primary":{"type":"button","label":"Sign In","href":"https://boxrouter.ai/?return_to=%2Fdashboard"}},"footer":{"links":[{"header":"Company","items":[{"label":"Terms of Service","href":"https://boxrouter.ai/terms"},{"label":"Privacy Policy","href":"https://boxrouter.ai/privacy"},{"label":"Refund Policy","href":"https://boxrouter.ai/refunds"}]},{"header":"Developer","items":[{"label":"Docs","href":"https://boxrouter.ai/docs"},{"label":"Support","href":"https://boxrouter.ai/support"},{"label":"Security","href":"https://boxrouter.ai/security"},{"label":"Service Providers","href":"https://boxrouter.ai/subprocessors"}]},{"header":"Product","items":[{"label":"Dashboard","href":"https://boxrouter.ai/dashboard"},{"label":"Benchmarks","href":"https://boxrouter.ai/benchmarks"}]},{"header":"Connect","items":[{"label":"Contact Us","href":"https://boxrouter.ai/feedback?topic=docs\u0026from=docs"},{"label":"Book a Call","href":"https://calendly.com/andre-boxrouter/boxrouter-intro-call"},{"label":"X","href":"https://x.com/boxrouter_ai"},{"label":"LinkedIn","href":"https://www.linkedin.com/company/boxrouter"},{"label":"Discord","href":"https://discord.gg/3tRbPUJ2bZ"}]}]},"styling":{"codeblocks":{"theme":"css-variables"},"latex":false},"contextual":{"options":["copy","view"],"display":"header"},"navigation":{"pages":[]}},"deployment":{"deploymentMetadataValue":{"subdomain":"nv-4965711d","hasAudioNarration":false,"actualSubdomain":"nv-4965711d","customDomains":["boxrouter.ai"],"gitSource":{"type":"github","owner":"boxrouter","repo":"docs","deployBranch":"main","contentDirectory":"","isPrivate":true,"mountPath":"","label":"","_id":"6ae62c8bfb7ed7cff8d909d4"},"entitlements":{"AI_CHAT":{"status":"DISABLED"},"WEB_MCP":{"status":"DISABLED"},"NARRATION":{"status":"DISABLED"}},"buildId":"6af9ce26f845026aa4bf2673","clientVersion":"0.0.4143","searchFilterCounts":[{"language":"default","tag":"API Reference","count":145},{"language":"default","tag":"GitHub Actions","count":34},{"language":"default","tag":"Guides","count":28},{"language":"default","tag":"Credits and Billing","count":24},{"language":"default","tag":"Sandboxes","count":20},{"language":"default","tag":"Volumes","count":15},{"language":"default","tag":"Agents","count":12},{"language":"default","tag":"Files","count":10},{"language":"default","tag":"Provider Accounts","count":8},{"language":"default","tag":"Launch an Agent","count":7}]},"assistantConfig":{"enableAskAiButton":false,"enableStarterQuestions":false,"enableContextualStarterQuestions":false,"enableAskAiSearchBar":true},"basePath":"/docs","hasChatPermissions":false,"hasWebMcpPermissions":false,"toggles":[{"name":"kill-isr","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-rbac-roles","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-mintlify-slack","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"agent-integrations-settings","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"rbac-expansion","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-pr-grouping","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"custom-prefix","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"analytics-v7","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"user-flows-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"no-publish-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-onboarding","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving-live","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"stripTemperatureMiddleware","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"support-platform-pylon-zendesk","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"snapshot-serving","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"instant-rollback","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications-server","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"granular-notifications","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automations-fable","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fixed-ai-action-pricing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"automation-resolve-merge-conflict","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"scoped-publishing","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"mintql","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"page-level-analytics","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-version-history-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"billing-page-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"full-page-search","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workspace-projects","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"assistant-v5","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"fork-pr-previews","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"revalidation-jwt","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-sso-scim","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"hobby-abuse-scan","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"dashboard-inbox","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-signup","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-dual-write","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"workos-enabled","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"approve-review-flow","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"editor-metadata","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"sso-setup-deadline-banner","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"turbopuffer-serve","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"live-agents","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false},{"name":"llms-txt-v2","enabled":true,"variant":{"name":"disabled","enabled":false,"feature_enabled":true},"impressionData":false}],"googleFontsInlined":false},"customCss":[{"filePath":"docs-search.css","content":".bxs-dialog{--bxs-bg: #071114;--bxs-line: rgba(252, 252, 254, 0.12);--bxs-text: #eef2f3;--bxs-muted: #a3b0b4;--bxs-accent-text: #6ee7b7;--bxs-focus: rgba(252, 252, 254, 0.6);--bxs-hover: rgba(252, 252, 254, 0.08);position:fixed;inset:10vh 0 auto;width:min(640px, calc(100vw - 24px));max-width:none;max-height:80dvh;margin:0 auto;padding:0;overflow:hidden;color:var(--bxs-text);background:var(--bxs-bg);border:1px solid var(--bxs-line);border-radius:14px;box-shadow:0 24px 64px rgba(0, 0, 0, 0.6);font-family:var(--site-font, inherit)}.bxs-dialog::backdrop{background:rgba(3, 8, 10, 0.72)}.bxs-dialog[open]{display:flex;flex-direction:column}.bxs-panel{display:flex;flex-direction:column;min-height:0;max-height:80dvh}.bxs-sr{position:absolute;width:1px;height:1px;margin:-1px;padding:0;overflow:hidden;clip:rect(0 0 0 0);white-space:nowrap;border:0}.bxs-head{display:flex;align-items:center;gap:10px;padding:0 12px 0 16px;border-bottom:1px solid var(--bxs-line)}.bxs-icon{flex:none;width:18px;height:18px;color:var(--bxs-muted)}.bxs-input{flex:1;min-width:0;height:56px;padding:0;color:var(--bxs-text);background:transparent;border:0;border-radius:6px;font-size:16px;outline:none}.bxs-input::placeholder{color:var(--bxs-muted)}.bxs-input:focus,.bxs-input:focus-visible{outline:none}.bxs-head:focus-within{box-shadow:inset 0 -2px 0 var(--bxs-focus)}.bxs-close{flex:none;min-width:44px;height:32px;padding:0 8px;color:var(--bxs-muted);background:transparent;border:1px solid var(--bxs-line);border-radius:6px;font-size:12px;font-weight:600;cursor:pointer}.bxs-close:hover{color:var(--bxs-text);border-color:rgba(252, 252, 254, 0.3)}.bxs-close:focus-visible,.bxs-option:focus-visible{outline:2px solid var(--bxs-focus);outline-offset:2px}.bxs-close-x{display:none;font-size:20px;line-height:1}.bxs-status{margin:0;padding:12px 16px 6px;color:var(--bxs-muted);font-size:12px;font-weight:600}.bxs-list{flex:1;min-height:0;padding:4px 8px 8px;overflow-y:auto;overscroll-behavior:contain}.bxs-list[hidden]{display:none}.bxs-option{position:relative;display:block;padding:10px 12px 10px 14px;color:inherit;border-radius:8px;text-decoration:none;scroll-margin:8px}.bxs-option[aria-selected=\"true\"],.bxs-fallback .bxs-option:hover{background:var(--bxs-hover)}.bxs-option[aria-selected=\"true\"]::before{content:\"\";position:absolute;inset:8px auto 8px 0;width:3px;background:var(--bxs-focus);border-radius:2px}.bxs-option .bxs-title{display:block;font-size:15px;font-weight:600;line-height:1.4}.bxs-crumb{display:block;margin-top:1px;color:var(--bxs-muted);font-size:12px;line-height:1.5}.bxs-crumb:empty{display:none}.bxs-snippet{margin-top:4px;color:var(--bxs-muted);font-size:13px;line-height:1.5;overflow-wrap:anywhere;display:-webkit-box;-webkit-box-orient:vertical;-webkit-line-clamp:3;overflow:hidden}.bxs-snippet:empty{display:none}.bxs-mark{color:var(--bxs-accent-text);background:transparent;font-weight:700}.bxs-foot{display:flex;margin:0;padding:8px 16px;color:var(--bxs-muted);border-top:1px solid var(--bxs-line);font-size:12px}@media (max-width: 640px){.bxs-dialog{inset:12px 0 auto;max-height:calc(100dvh - 24px)}.bxs-panel{max-height:calc(100dvh - 24px)}.bxs-close{min-width:44px;height:44px;border:0}.bxs-close-label,.bxs-foot{display:none}.bxs-close-x{display:inline}.bxs-option{padding-block:12px}}"},{"filePath":"style.css","content":"@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-basic.woff2) format(\"woff2\");unicode-range:U+0020-007E, U+00A0-00FF, U+2013-2014, U+2019, U+201C-201D, U+2022, U+2026, U+203A, U+2190-2193, U+2197, U+2212, U+2248, U+2264-2265, U+24D8, U+25B4, U+25BE, U+25CB, U+25CC, U+25CF, U+2713, U+2715}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-cyrillic-ext.woff2) format(\"woff2\");unicode-range:U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-vietnamese.woff2) format(\"woff2\");unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-latin-ext.woff2) format(\"woff2\");unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF}@font-face{font-family:\"Plus Jakarta Sans\";font-style:normal;font-weight:400 800;font-display:swap;src:url(/fonts/plus-jakarta-sans-latin.woff2) format(\"woff2\");unicode-range:U+0000-001F, U+007F-009F, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-2012, U+2015-2018, U+201A-201B, U+201E-201F, U+2023-2025, U+2027-2039, U+203B-206F, U+20AC, U+2122, U+2215, U+FEFF, U+FFFD}body{word-spacing:0.1em}pre,code{word-spacing:normal}:root{--heading-text: #fcfcfef2;--lead-gap: 32px;--hairline: #e2ecef1a;--hairline-width: 1px}html{font-feature-settings:normal}body.antialiased,.antialiased{-webkit-font-smoothing:auto;-moz-osx-font-smoothing:auto}:root{--site-font: \"Plus Jakarta Sans\", -apple-system, BlinkMacSystemFont, \"Plus Jakarta Sans Fallback Segoe UI\", \"Segoe UI\", \"Plus Jakarta Sans Fallback DejaVu Sans\", \"Plus Jakarta Sans Fallback Roboto\", sans-serif}body,button,input,h1,h2,h3,h4,h5,h6{font-family:var(--site-font)!important}#navbar .max-w-8xl{max-width:none}#navbar .h-16{height:56px;margin:0;padding:0}#navbar .h-16>.border-b{padding:0 24px}#navbar .nav-tabs{margin-left:4px}#navbar>div>div>div.lg\\:flex.px-12,#navbar .hidden.lg\\:flex.px-12.h-12{padding-left:28px;padding-right:28px}#navbar a:has(>.nav-logo){display:inline-flex;align-items:center;gap:4px;margin-left:4px;color:var(--bx-fg);text-decoration:none}#navbar .nav-logo{width:40px;height:40px}#navbar a:has(>.nav-logo)::after{content:\"BoxRouter\";font-family:var(--site-font);font-size:20px;font-weight:600;letter-spacing:-0.5px;line-height:1;white-space:nowrap}#navbar nav[aria-label=\"Main\"] ul{gap:4px}#navbar nav[aria-label=\"Main\"] ul>li{margin:0!important}#navbar nav[aria-label=\"Main\"] ul>li.navbar-link>a{height:32px;padding:0 8px;border-radius:6px;color:var(--bx-site-muted);font-size:14px;font-weight:500;line-height:1.625;word-spacing:0.1em;transition:color 0.15s, background-color 0.15s}#navbar nav[aria-label=\"Main\"] ul>li.navbar-link>a:hover{color:var(--bx-link);background-color:var(--bx-accent-wash)}#navbar nav[aria-label=\"Main\"] ul>li.navbar-link>a:not([href^=\"https:\"]){color:var(--bx-fg)}#navbar #topbar-cta-button{margin-left:8px!important}#navbar #topbar-cta-button a{justify-content:center;height:32px;min-width:100px;padding:0 12px;line-height:1.625;word-spacing:0.1em}#navbar #topbar-cta-button a>span.absolute{border-radius:6px;background:#10b981}#navbar #topbar-cta-button a:hover>span.absolute{opacity:1;background:#10b981e0}#navbar #topbar-cta-button a .text-white{color:#03080a;font-weight:500}#navbar #topbar-cta-button a svg{display:none}#navbar .ml-auto>div:empty{display:none}#navbar .h-16>.border-b>.ml-auto{gap:4px}#navbar .h-16>.border-b>.ml-auto>*{margin:0!important}#navbar .ml-auto>div:has(>#theme-preference-menu-trigger){order:-1}@media (max-width: 1023px){#navbar .h-16>.border-b{gap:4px;padding:0 16px}#navbar .h-16>.border-b>.ml-auto{display:flex;flex:none;order:2}#navbar .h-16>.border-b>.ml-auto nav li:not(#topbar-cta-button){display:none}#navbar #topbar-cta-button{display:flex;margin-left:0!important}#navbar .h-16>.border-b>.lg\\:hidden{display:contents}#navbar #search-bar-entry-mobile{flex:none;order:1}#navbar .h-16>.border-b>.lg\\:hidden>:last-child{flex:none;order:3}}@media (max-width: 360px){#navbar .nav-logo{width:36px;height:36px}#navbar a:has(>.nav-logo){gap:3.6px}#navbar a:has(>.nav-logo)::after{font-size:18px}#navbar #topbar-cta-button a{min-width:0;padding:0 10px}#navbar #search-bar-entry-mobile{display:none!important}#navbar #theme-preference-menu-trigger{width:28px;padding-inline:6px}}#navbar nav[aria-label=\"Main\"]{margin-right:0!important}:root{--bx-bg: #ffffff;--bx-raised: #f6f8f7;--bx-raised-2: #eef2f0;--bx-line: #0b121014;--bx-line-strong: #0b121026;--bx-fg: #0b1210;--bx-body: #0b1210c9;--bx-muted: #0b1210a6;--bx-site-muted: var(--bx-muted);--bx-faint: #0b121057;--bx-accent: #10b981;--bx-link: #046c4f;--bx-accent-ink: #062a1e;--bx-accent-wash: #10b98110;--bx-accent-line: #05966973;--bx-warn: #b45309;--bx-warn-wash: #f59e0b0f;--bx-warn-line: #d9770652;--bx-font-mono: ui-monospace, \"SF Mono\", SFMono-Regular, Menlo, Consolas, monospace;--bx-code-background: var(--bx-raised);--bx-code-foreground: #1f2725;--bx-code-token-constant: #1f2725;--bx-code-token-string: #985a12;--bx-code-token-comment: #0b1210a3;--bx-code-token-keyword: #047857;--bx-code-token-parameter: #1f2725;--bx-code-token-function: #0b1210;--bx-code-token-string-expression: #985a12;--bx-code-token-punctuation: #1f2725;--bx-code-token-link: #047857}html:not(.dark){--heading-text: #0b1210f2;--hairline: #0b12101a}html.dark{--bx-bg: #03080a;--bx-raised: #0a1013;--bx-raised-2: #0f171a;--bx-line: #fcfcfe14;--bx-line-strong: #fcfcfe26;--bx-fg: #fcfcfe;--bx-body: #fcfcfec7;--bx-muted: #fcfcfe96;--bx-site-muted: #fcfcfea0;--bx-faint: #fcfcfe52;--bx-link: #6ee7b7;--bx-accent-ink: #03080a;--bx-accent-wash: #10b98112;--bx-accent-line: #10b98166;--bx-warn: #fbbf24;--bx-warn-wash: #fbbf240a;--bx-warn-line: #fbbf2447;--bx-code-foreground: #d9dfdd;--bx-code-token-constant: #d9dfdd;--bx-code-token-string: #e8cf9f;--bx-code-token-comment: #fcfcfe8f;--bx-code-token-keyword: #6ee7b7;--bx-code-token-parameter: #d9dfdd;--bx-code-token-function: #fcfcfe;--bx-code-token-string-expression: #e8cf9f;--bx-code-token-punctuation: #d9dfdd;--bx-code-token-link: #6ee7b7}#content :is(.code-block,.code-group,.bx-output){--mint-background: var(--bx-code-background);--mint-foreground: var(--bx-code-foreground);--mint-token-constant: var(--bx-code-token-constant);--mint-token-string: var(--bx-code-token-string);--mint-token-comment: var(--bx-code-token-comment);--mint-token-keyword: var(--bx-code-token-keyword);--mint-token-parameter: var(--bx-code-token-parameter);--mint-token-function: var(--bx-code-token-function);--mint-token-string-expression: var(--bx-code-token-string-expression);--mint-token-punctuation: var(--bx-code-token-punctuation);--mint-token-link: var(--bx-code-token-link)}:focus-visible{outline:2px solid var(--bx-link);outline-offset:2px}#navbar .border-b{border-color:var(--bx-line)!important}#navbar #search-bar-entry{border-color:var(--bx-line)!important;background:var(--bx-raised)!important;border-radius:6px!important;color:var(--bx-muted)!important}#navbar #search-bar-entry:hover{border-color:var(--bx-line-strong)!important}#navbar .nav-tabs a,#navbar [data-component-part=\"nav-tabs-item\"]{font-size:14px;font-weight:500}#navbar .nav-tabs-item,#navbar .nav-tabs-item>div{color:var(--bx-muted)}#navbar .nav-tabs-item[data-active=\"true\"]>div,#navbar .nav-tabs-item:hover>div{color:var(--bx-fg)!important}#navbar .nav-tabs-item>div>div:last-child,#navbar .nav-tabs-item [class*=\"bg-primary\"]{background:var(--bx-accent)!important}#sidebar .sidebar-group-header{color:var(--heading-text)!important;font-size:13px;line-height:20px;font-weight:600}#sidebar .sidebar-group li>a{border-radius:6px!important;font-size:14px;line-height:20px;color:var(--bx-muted)!important}#sidebar .sidebar-group li>a:hover{color:var(--bx-fg)!important;background:var(--bx-raised)!important}#sidebar .sidebar-group li>a[data-active=\"true\"],#sidebar .sidebar-group li>a.font-medium,#sidebar .sidebar-group li>a[class*=\"bg-primary\"]{color:var(--bx-link)!important;background:var(--bx-accent-wash)!important;font-weight:500}#table-of-contents .toc-item a{color:var(--bx-muted)!important;font-size:13px;line-height:20px}#table-of-contents .toc-item a:hover{color:var(--bx-fg)!important}#table-of-contents .toc-item[data-active] a{color:var(--bx-fg)!important;text-shadow:none!important}#table-of-contents button{font-size:13px;font-weight:600;color:var(--bx-fg)!important}#header .eyebrow{margin-bottom:0;font-size:13px;line-height:20px;font-weight:600;color:var(--bx-link)!important}#page-title{font-size:32px!important;line-height:40px!important;font-weight:650!important;letter-spacing:-0.02em;color:var(--heading-text)!important;text-wrap:balance}#header .prose{margin-top:12px;font-size:18px;line-height:30px;color:var(--bx-muted)!important;text-wrap:pretty;position:relative}#header .prose p{margin:0}#header .prose::after{content:\"\";position:absolute;left:0;right:0;top:calc(100% + (var(--lead-gap) - var(--hairline-width)) / 2);border-top:var(--hairline-width) solid var(--hairline);pointer-events:none}#header+#content{margin-top:var(--lead-gap)!important}#page-context-menu button{border-color:var(--bx-line)!important;background:none!important;color:var(--bx-muted)!important;font-size:13px}#page-context-menu button:hover{border-color:var(--bx-line-strong)!important;color:var(--bx-fg)!important}#header{position:relative}#page-context-menu{position:absolute;top:-26px;right:0}#page-context-menu button{height:28px!important;padding-block:0!important}#page-context-menu>div{display:none}@media (min-width: 1024px){#content-area{padding-left:4.5rem!important}}#content{font-size:16px;line-height:28px;color:var(--bx-body)}#content p,#content li{text-wrap:pretty}#content :is(strong,b){color:var(--bx-fg)!important}#content :is(h2,h3,h4){color:var(--heading-text)!important}#content strong{font-weight:600}#content h2:not([data-component-part]){margin:56px 0 0!important;font-size:22px;line-height:30px;font-weight:600;letter-spacing:-0.01em;text-wrap:balance}#content h2:not([data-component-part]){margin-bottom:12px!important}#content h3:not([data-component-part]){margin:32px 0 0!important;font-size:18px;line-height:28px;font-weight:600}#content h3:not([data-component-part]){margin-bottom:8px!important}#content li::marker{color:var(--bx-faint)}@media (max-width: 600px){#page-title{font-size:28px!important;line-height:36px!important}#header .prose{font-size:17px;line-height:28px}#content h2:not([data-component-part]){margin-top:48px!important;font-size:20px;line-height:28px}#content h3{font-size:17px;line-height:24px}}#content a.link,#content a:not([class]),#header .prose a{color:var(--bx-link)!important;font-weight:inherit!important;border-bottom:0!important;text-decoration:underline;text-decoration-color:var(--bx-accent-line);text-decoration-thickness:1px;text-underline-offset:3px;transition:text-decoration-color 0.15s}#content a.link:hover,#content a:not([class]):hover{text-decoration-color:currentColor}#content :not(pre)>code,#header .prose code{padding:1px 5px;border:1px solid var(--bx-line);border-radius:4px;background:var(--bx-raised);color:var(--bx-fg)!important;font-weight:500;font-size:0.875em;font-family:var(--bx-font-mono);overflow-wrap:anywhere}#content :is(h2,h3,h4) code{padding:0;border:0;background:none;font-size:inherit;font-weight:inherit}#content a>code{color:inherit!important}#content :not(pre)>code::before,#content :not(pre)>code::after{content:none}#content .code-block,#content .code-group{margin:16px 0!important;border:1px solid var(--bx-line)!important;border-radius:8px!important;background:var(--bx-raised)!important;box-shadow:none!important;padding:0!important}#content .code-block [data-component-part=\"code-block-root\"]{border-radius:7px!important;background:transparent!important}#content :is(pre,code,.font-mono),#content .code-block :is(pre,code,span),#content .code-group :is(pre,code,span){font-family:var(--bx-font-mono)!important}#content .code-block pre,#content .code-group pre{font:400 14px/22px var(--bx-font-mono);background:transparent!important}#content .code-block [data-component-part=\"scroll-area-viewport\"]{padding:14px 16px!important}#content [data-floating-buttons]{top:6px!important;right:6px!important}#content [data-floating-buttons] button,#content .code-group-tab-bar button[aria-label*=\"Copy\"],#content .code-group [data-testid=\"copy-code-button\"]{background:transparent!important;color:var(--bx-muted)!important;border-radius:6px}#content [data-floating-buttons] button:hover,#content .code-group [data-testid=\"copy-code-button\"]:hover{background:var(--bx-raised-2)!important;color:var(--bx-fg)!important}#content [data-floating-buttons] svg,#content .code-group [data-testid=\"copy-code-button\"] svg{color:inherit!important}#content .code-group>[data-component-part=\"code-group-tab-bar\"]{min-height:40px;padding-right:6px;border-bottom:1px solid var(--bx-line)}#content .code-group [role=\"tab\"]{color:var(--bx-muted)!important;font-size:13px}#content .code-group [role=\"tab\"][aria-selected=\"true\"]{color:var(--bx-fg)!important}#content .code-group [role=\"tab\"]>div{color:inherit!important}#content .code-group [role=\"tab\"]:hover>div{background:transparent!important;color:var(--bx-fg)!important}#content .code-group [role=\"tab\"] .bg-primary,#content .code-group [role=\"tab\"] [class*=\"bg-primary\"]{background:var(--bx-accent)!important}#content .code-group .code-block{margin:0!important;border:0!important;border-radius:0!important;background:transparent!important}#content .code-block-fade-overlay{display:none}#content :is(.code-block,.code-group) [data-component-part=\"scroll-area-viewport\"][data-overflow-x-end]{-webkit-mask-image:linear-gradient(to right, #000 calc(100% - 40px), transparent);mask-image:linear-gradient(to right, #000 calc(100% - 40px), transparent)}#content :is(.code-block,.code-group):has(+.bx-output){margin-bottom:0!important;border-bottom-left-radius:0!important;border-bottom-right-radius:0!important}#content .bx-output{margin:0 0 16px;padding:10px 16px 12px;border:1px solid var(--bx-line);border-radius:8px;background:var(--bx-bg)}#content :is(.code-block,.code-group)+.bx-output{border-top:0;border-top-left-radius:0;border-top-right-radius:0}#content .bx-output-label{display:flex;align-items:center;gap:6px;margin:0;font-size:12px;line-height:20px;font-weight:600;color:var(--bx-muted);opacity:1}#content .bx-output-label svg{width:13px;height:13px;color:var(--bx-link)}#content .bx-output,#content .bx-output :is(.code-block,.code-group){--mint-background: var(--bx-bg)}#content .bx-output :is(.code-block,.code-group),#content .bx-output .code-group [data-component-part=\"code-block-root\"]{margin:0!important;padding:0!important;border:0!important;border-radius:0!important;background:transparent!important;box-shadow:none!important}#content .bx-output .code-group [data-component-part=\"code-group-tab-bar\"]{display:none}#content .bx-output :is(.code-block,.code-group) [data-component-part=\"scroll-area-viewport\"]{padding:4px 0 0!important}#content .bx-output [data-floating-buttons]{display:none}#content .bx-output pre{color:var(--bx-fg)}#content .callout{margin:16px 0;padding:14px 16px!important;gap:12px;border:1px solid var(--bx-line-strong)!important;border-radius:8px!important;background:var(--bx-raised)!important}#content .callout [data-component-part=\"callout-content\"]{font-size:15px;line-height:24px;color:var(--bx-body)!important}#content .callout [data-component-part=\"callout-content\"] :is(a,strong,code){color:var(--bx-fg)!important}#content .callout [data-component-part=\"callout-content\"] a{color:var(--bx-link)!important}#content .callout [data-component-part=\"callout-icon\"]{margin-top:3px;color:var(--bx-muted)}#content .callout [data-component-part=\"callout-icon\"] svg{color:inherit!important;fill:currentColor}#content .callout[data-callout-type=\"warning\"]{border-color:var(--bx-warn-line)!important;background:var(--bx-warn-wash)!important}#content .callout[data-callout-type=\"warning\"] [data-component-part=\"callout-icon\"]{color:var(--bx-warn)}#content .steps{margin:32px 0 16px 0}#content .steps [data-component-part=\"step-indicator\"]{border:1px solid var(--bx-line-strong);background:var(--bx-bg)!important;color:var(--bx-fg)!important;font-size:13px}#content .steps [data-component-part=\"step-line\"]{background:var(--bx-line)!important}#content .steps .step{padding-bottom:36px}#content .steps [data-component-part=\"step-content\"]>:first-child{margin-top:8px}#content .steps [data-component-part=\"step-content\"]>:last-child{margin-bottom:0}#content .steps .step:last-child{padding-bottom:0}#content .steps [data-component-part=\"step-title\"]{font-size:18px;line-height:28px;font-weight:600;color:var(--bx-fg)!important}#content .tabs [data-component-part=\"tabs-list\"]{border-color:var(--bx-line)!important;margin-bottom:16px}#content .tabs [data-component-part=\"tab-button\"]{color:var(--bx-site-muted)!important;font-size:14px;font-weight:500;border-bottom-width:2px;border-color:transparent!important}#content .tabs [data-component-part=\"tab-button\"]:hover{color:var(--bx-fg)!important}#content .tabs [data-component-part=\"tab-button\"][data-active=\"true\"]{color:var(--bx-fg)!important;border-color:var(--bx-accent)!important}#content table{font-size:14px;line-height:22px}#content th{padding:0 14px 8px 0;border-bottom:1px solid var(--bx-line-strong)!important;font-size:13px;font-weight:600;color:var(--bx-muted)!important}#content td{padding:10px 14px 10px 0;border-bottom:1px solid var(--bx-line)!important;vertical-align:top;color:var(--bx-body)}#content td:last-child,#content th:last-child{padding-right:0}#content tr{border:0!important}#content td code{overflow-wrap:anywhere}@media (min-width: 1280px){#content [data-component-part=\"scroll-area\"]:has(table){width:calc(100% + var(--page-padding) * 2 + 56px)}}#content .columns{gap:12px}#content .columns>.card:last-child:nth-child(odd){grid-column:1 / -1}#content .card{margin:0;border:1px solid var(--bx-line)!important;border-radius:8px!important;background:transparent!important;box-shadow:none!important;transition:border-color 0.15s, background-color 0.15s}html.dark #content .card{--primary-light: 40 45 47}html:not(.dark) #content .card{--primary: 214 217 216}html.dark #content .card [data-component-part=\"card-icon\"]{--primary-light: 150 152 154}html:not(.dark) #content .card [data-component-part=\"card-icon\"]{--primary: 96 101 99}html.dark #content .card:hover [data-component-part=\"card-icon\"]{--primary-light: 110 231 183}html:not(.dark) #content .card:hover [data-component-part=\"card-icon\"]{--primary: 4 120 87}#content .card:hover{border-color:var(--bx-line-strong)!important;background:var(--bx-raised)!important}#content .card [data-component-part=\"card-content-container\"]{padding:16px 18px}#content .card [data-component-part=\"card-icon\"],#content .card [data-component-part=\"card-icon\"] svg{width:18px;height:18px;color:var(--bx-muted);fill:currentColor;transition:color 0.15s}#content .card:hover [data-component-part=\"card-icon\"],#content .card:hover [data-component-part=\"card-icon\"] svg{color:var(--bx-link)}#content .card [data-component-part=\"card-title\"]{margin:8px 0 0!important;font-size:15px;line-height:22px;font-weight:600;color:var(--bx-fg)!important}#content .card [data-component-part=\"card-content\"]{margin-top:2px;font-size:14px;line-height:22px;color:var(--bx-muted)!important}#content .card:focus-visible{outline:2px solid var(--bx-link);outline-offset:2px}#content details{border:1px solid var(--bx-line)!important;border-radius:8px!important;background:transparent!important}#content details>summary{color:var(--bx-fg);font-size:15px;font-weight:500}#content details>summary:hover{background:var(--bx-raised)}#pagination{margin-top:64px;gap:12px}#pagination a{flex:1;padding:12px 16px;border:1px solid var(--bx-line);border-radius:8px;color:var(--bx-fg);transition:border-color 0.15s}#pagination a:hover{border-color:var(--bx-line-strong)}#pagination [data-component-part=\"pagination-title\"]{color:var(--bx-fg)!important}#pagination a[rel=\"next\"]{justify-content:flex-end;text-align:right}#sidebar .method-nav-pill>span{background:transparent!important;border:1px solid var(--bx-line-strong);color:var(--bx-muted)!important;font-family:var(--bx-font-mono)}#footer a[href*=\"mintlify.com\"],#footer div:has(>div>a[href*=\"mintlify.com\"]){display:none!important}#footer *{border-color:var(--bx-line)!important}#footer{display:block!important;max-width:none!important;margin:0!important;padding:32px 7% 36px!important;border-top:1px solid var(--bx-line)!important}#footer>div{display:block!important;max-width:none!important;margin:0!important;padding:0!important}#footer>div>div:has(+div>div>a[href*=\"mintlify.com\"]){display:none!important}#footer>div>div:first-child{display:grid!important;grid-template-columns:max-content minmax(0, 1fr);column-gap:24px;row-gap:24px;min-height:0!important}#footer>div>div:first-child>div:first-child{display:flex!important;min-width:0!important;margin-right:16px}#footer>div>div:first-child>div:last-child{display:grid!important;grid-template-columns:repeat(4, minmax(0, 1fr))!important;gap:24px}#footer>div>div:first-child>div:last-child>div{display:block!important;min-width:0;align-items:stretch!important}#footer>div>div:first-child>div:last-child>div>div{display:grid!important;align-content:start;gap:6px}#footer a[class~=\"select-none\"]{display:inline-flex!important;align-items:flex-start;gap:10px;text-decoration:none}#footer a[class~=\"select-none\"] img{flex:none;width:28px;height:28px}#footer a[class~=\"select-none\"]::after{content:\"BoxRouter\";color:var(--bx-fg);font-size:14px;font-weight:600;line-height:28px}#footer p{margin:0 0 4px!important;color:var(--bx-fg)!important;font-size:13px;line-height:1.3;font-weight:600}#footer a:not([class~=\"select-none\"]){max-width:none!important;overflow:visible!important;text-overflow:clip!important;white-space:normal!important;color:var(--bx-site-muted)!important;font-size:14px;line-height:1.625;font-weight:450}#footer a:not([class~=\"select-none\"]):hover{color:var(--bx-fg)!important}@media (max-width: 760px){#footer{padding:28px 20px 36px!important}#footer>div>div:first-child{grid-template-columns:minmax(0, 1fr)!important}#footer>div>div:first-child>div:first-child{margin-right:0}#footer>div>div:first-child>div:last-child{grid-template-columns:repeat(2, minmax(0, 1fr))!important;gap:20px 16px}}@media (max-width: 420px){#footer>div>div:first-child>div:last-child{display:flex!important;flex-direction:column}}#assistant-entry,[data-testid=\"feedback-toolbar\"],#feedback-toolbar,.feedback-toolbar{display:none!important}.doc-figure{margin:32px 0 0;container-type:inline-size;container-name:docfig}.doc-figure img{display:none;width:100%;height:auto;margin:0}.doc-figure .doc-figure-desktop{max-width:560px}.doc-figure .doc-figure-mobile.doc-figure-light,.doc-figure .doc-figure-mobile.doc-figure-dark{display:none}.doc-figure .doc-figure-desktop.doc-figure-light{display:block}.dark .doc-figure .doc-figure-desktop.doc-figure-light{display:none}.dark .doc-figure .doc-figure-desktop.doc-figure-dark{display:block}.doc-figure .doc-figure-caption{margin:10px 0 0;font-size:14px;line-height:22px;color:var(--bx-muted);opacity:1}@container docfig (max-width: 479px){.doc-figure .doc-figure-desktop.doc-figure-light,.dark .doc-figure .doc-figure-desktop.doc-figure-dark{display:none}.doc-figure .doc-figure-mobile.doc-figure-light{display:block;max-width:440px;margin-inline:auto}.dark .doc-figure .doc-figure-mobile.doc-figure-light{display:none}.dark .doc-figure .doc-figure-mobile.doc-figure-dark{display:block;max-width:440px;margin-inline:auto}}@supports not (container-type: inline-size){@media (max-width: 600px){.doc-figure .doc-figure-desktop.doc-figure-light,.dark .doc-figure .doc-figure-desktop.doc-figure-dark{display:none}.doc-figure .doc-figure-mobile.doc-figure-light{display:block;max-width:440px;margin-inline:auto}.dark .doc-figure .doc-figure-mobile.doc-figure-light{display:none}.dark .doc-figure .doc-figure-mobile.doc-figure-dark{display:block;max-width:440px;margin-inline:auto}}}.bx-diagram{margin:32px 0 0;container-type:inline-size;container-name:bxdiagram}.bx-diagram svg{display:block;width:100%;height:auto}.bx-diagram .bx-diagram-mobile{display:none}.bx-diagram-caption{margin-top:10px;font-size:14px;line-height:22px;color:var(--bx-muted)}@container bxdiagram (max-width: 559px){.bx-diagram .bx-diagram-desktop:not(:only-child){display:none}.bx-diagram .bx-diagram-mobile{display:block;max-width:440px;margin-inline:auto}}html{overflow-y:scroll}[class*=\"active:scale\"]:active{scale:none!important}html{overscroll-behavior-x:none}[data-component-part=\"scroll-area-viewport\"]{overscroll-behavior-x:contain}"}],"page":{"pagePath":"reference/replace-provider-credentials","slug":"/reference/replace-provider-credentials","pageMetadata":{"title":"Rotate a Connected Account's Credentials","openapi":"openapi.json PUT /provider-accounts/{account_id}/credentials","description":"Replaces a connected account's credentials, for example to rotate a key. Needs the\n`provider-accounts:manage` permission on the API key (a signed-in dashboard session also\nworks) and the account's current `expected_version`.\n\nThe new credentials must belong to the same provider. BoxRouter makes one read-only request\nto the provider and refuses a clear rejection with `422 credentials_rejected`; it does not\ncheck which account the key belongs to. Requests already running keep the old credentials,\nand requests that start afterward use the new ones. A provider that is not enabled for you\nfails with `409 provider_not_enabled`.\n\nLeave out the connection settings to keep the existing ones. Settings you send must match the\nexisting route; changing the endpoint, proxy or header identity needs a new connected\naccount, not a key rotation. Credentials that run your code need extra authority on the key\nand an artifact you uploaded. If the new credentials fail to activate, the old version stays\nin use. A token refresh that already happened with the provider is not undone.\n","href":"/reference/replace-provider-credentials"},"description":{"compiledSource":"\"use strict\";\nconst {Fragment: _Fragment, jsx: _jsx, jsxs: _jsxs} = arguments[0];\nconst {useMDXComponents: _provideComponents} = arguments[0];\nfunction _createMdxContent(props) {\n const _components = {\n code: \"code\",\n p: \"p\",\n ..._provideComponents(),\n ...props.components\n };\n return _jsxs(_Fragment, {\n children: [_jsxs(_components.p, {\n children: [\"Replaces a connected account’s credentials, for example to rotate a key. Needs the\\n\", _jsx(_components.code, {\n children: \"provider-accounts:manage\"\n }), \" permission on the API key (a signed-in dashboard session also\\nworks) and the account’s current \", _jsx(_components.code, {\n children: \"expected_version\"\n }), \".\"]\n }), \"\\n\", _jsxs(_components.p, {\n children: [\"The new credentials must belong to the same provider. BoxRouter makes one read-only request\\nto the provider and refuses a clear rejection with \", _jsx(_components.code, {\n children: \"422 credentials_rejected\"\n }), \"; it does not\\ncheck which account the key belongs to. Requests already running keep the old credentials,\\nand requests that start afterward use the new ones. A provider that is not enabled for you\\nfails with \", _jsx(_components.code, {\n children: \"409 provider_not_enabled\"\n }), \".\"]\n }), \"\\n\", _jsx(_components.p, {\n children: \"Leave out the connection settings to keep the existing ones. Settings you send must match the\\nexisting route; changing the endpoint, proxy or header identity needs a new connected\\naccount, not a key rotation. Credentials that run your code need extra authority on the key\\nand an artifact you uploaded. If the new credentials fail to activate, the old version stays\\nin use. A token refresh that already happened with the provider is not undone.\"\n })]\n });\n}\nfunction MDXContent(props = {}) {\n const {wrapper: MDXLayout} = {\n ..._provideComponents(),\n ...props.components\n };\n return MDXLayout ? _jsx(MDXLayout, {\n ...props,\n children: _jsx(_createMdxContent, {\n ...props\n })\n }) : _createMdxContent(props);\n}\nreturn {\n default: MDXContent\n};\n","frontmatter":{},"scope":{}},"pageType":"default","mdx":{"mdxSource":{"compiledSource":"\"use strict\";const{Fragment:_Fragment,jsx:_jsx}=arguments[0];const{useMDXComponents:_provideComponents}=arguments[0];function _createMdxContent(props){return _jsx(_Fragment,{})}function MDXContent(props={}){const{wrapper:MDXLayout}={..._provideComponents(),...props.components};return MDXLayout?_jsx(MDXLayout,{...props,children:_jsx(_createMdxContent,{...props})}):_createMdxContent(props)}return{default:MDXContent}","frontmatter":{},"scope":{"codeStyling":{"theme":"css-variables"},"config":{},"pageMetadata":{"title":"Rotate a Connected Account's Credentials","openapi":"openapi.json PUT /provider-accounts/{account_id}/credentials","description":"Replaces a connected account's credentials, for example to rotate a key. Needs the\n`provider-accounts:manage` permission on the API key (a signed-in dashboard session also\nworks) and the account's current `expected_version`.\n\nThe new credentials must belong to the same provider. BoxRouter makes one read-only request\nto the provider and refuses a clear rejection with `422 credentials_rejected`; it does not\ncheck which account the key belongs to. Requests already running keep the old credentials,\nand requests that start afterward use the new ones. A provider that is not enabled for you\nfails with `409 provider_not_enabled`.\n\nLeave out the connection settings to keep the existing ones. Settings you send must match the\nexisting route; changing the endpoint, proxy or header identity needs a new connected\naccount, not a key rotation. Credentials that run your code need extra authority on the key\nand an artifact you uploaded. If the new credentials fail to activate, the old version stays\nin use. A token refresh that already happened with the provider is not undone.\n","href":"/reference/replace-provider-credentials"}}},"mdxSourceWithNoJs":null},"mdxExtracts":{"tableOfContents":[],"codeExamples":{}},"jsLinks":["/docs/_mintlify/custom/nv-4965711d/0678d865bf98fa52/docs-search.js","/docs/_mintlify/custom/nv-4965711d/1676f8e75d3dc931/docs-header.js"],"openApiReferenceData":{"operation":{"tags":["provider-accounts"],"operationId":"replaceProviderCredentials","x-speakeasy-group":"provider_accounts","x-speakeasy-name-override":"replace_credentials","parameters":["a92aded6-5e1a-44ad-a833-b8cd7c2f296f"],"summary":"Rotate a connected account's credentials","description":"Replaces a connected account's credentials, for example to rotate a key. Needs the\n`provider-accounts:manage` permission on the API key (a signed-in dashboard session also\nworks) and the account's current `expected_version`.\n\nThe new credentials must belong to the same provider. BoxRouter makes one read-only request\nto the provider and refuses a clear rejection with `422 credentials_rejected`; it does not\ncheck which account the key belongs to. Requests already running keep the old credentials,\nand requests that start afterward use the new ones. A provider that is not enabled for you\nfails with `409 provider_not_enabled`.\n\nLeave out the connection settings to keep the existing ones. Settings you send must match the\nexisting route; changing the endpoint, proxy or header identity needs a new connected\naccount, not a key rotation. Credentials that run your code need extra authority on the key\nand an artifact you uploaded. If the new credentials fail to activate, the old version stays\nin use. A token refresh that already happened with the provider is not undone.\n","requestBody":"c2fc3a1c-1f6d-4c18-aa85-0f685a95e18a","responses":{"200":"89b5bb85-cf44-4c1e-9a01-53aa48b970d4","404":"f782ba7a-c32d-43e7-a667-b545491caced","409":"6fa820c4-6d5b-49ea-9add-5cd4539feb2b","422":"bc677c17-2539-4c8d-b571-63c1036ffc26","default":"2bc3c13e-d7db-4424-802f-5cfb41abf8c6"},"method":"put","type":"path","servers":["38340c0e-1365-48ce-8dcd-74c64a2f69dc"],"security":["dd0c83e6-beb9-482e-9a5d-60b9e86012e1","3a6c0149-9909-4d75-82ec-be6787165396"],"path":"/provider-accounts/{account_id}/credentials","baseUrlOptions":["https://api.boxrouter.ai/api/v1"],"title":"Rotate a connected account's credentials","codeSamples":[],"requiredOnlyExamples":false,"requestExampleType":"generated","responseExampleType":"generated"},"dependencies":{"parameters":{"a92aded6-5e1a-44ad-a833-b8cd7c2f296f":{"name":"Idempotency-Key","in":"header","description":"Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads.","schema":{"type":"string","minLength":1,"maxLength":128,"description":"Optional for this operation. Preserve the same stable identifier when retrying an uncertain response; never reuse it for new work. If omitted where allowed, Cloud generates a request-scoped key that cannot reconcile a later retry. Do not include credentials or payloads.\nStable identifier for one logical mutation.","uniqueKey":"","typeLabel":"string"}},"f550eae5-851d-4938-82bd-194f6b83f16a":{"name":"account_id","in":"path","required":true,"description":"BoxRouter connected-account ID, scoped to this workspace.","schema":{"type":"string","minLength":1,"pattern":"^[^\\u0000]*$","isRequired":true,"description":"BoxRouter connected-account ID, scoped to this workspace.","uniqueKey":"","typeLabel":"string"}}},"requestBody":{"required":true,"content":{"application/json":{"schema":{"type":"object","additionalProperties":false,"required":["expected_version","credentials"],"properties":{"expected_version":{"type":"integer","minimum":1,"isRequired":true,"uniqueKey":"expected_version","typeLabel":"integer"},"credentials":{"description":"One provider's account credentials as flat fields. `provider` names an available\nprovider (`available_providers` of listProviderAccounts); every other property is one of\nthat provider's `credential_fields`. A required field is a nonempty string; an optional\nfield is a string or null, and null is the same as leaving it out. Secret values contain\n12 through 16384 characters and identifiers 1 through 256. A field the provider does not\ndeclare, a missing or null required field, or a value of another type is rejected; errors\nname the field, never its value. Accepted only on credential-management endpoints, over\nTLS. Write-only and encrypted at rest. Never logged or returned.\n","type":"object","required":["provider"],"maxProperties":9,"propertyNames":{"pattern":"^[a-z][a-z0-9_]{0,63}$"},"properties":{"provider":{"type":"string","minLength":1,"maxLength":64,"isRequired":true,"uniqueKey":"credentials.provider","typeLabel":"string"}},"additionalProperties":{"oneOf":[{"type":"string","minLength":1,"maxLength":16384,"writeOnly":true,"uniqueKey":"credentials.additionalProperties.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"maxLength":16384,"writeOnly":true,"uniqueKey":"credentials.additionalProperties.oneOf.1","typeLabel":"null"}],"uniqueKey":"credentials.additionalProperties","typeLabel":"string | null"},"isRequired":true,"uniqueKey":"credentials","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"example":{"expected_version":1,"credentials":{"provider":"example-provider","api_key":"example-api-key-value"}},"examples":{"Example":{"title":"Example","value":{"expected_version":1,"credentials":{"provider":"example-provider","api_key":"example-api-key-value"}}}},"exampleType":"examples"}},"exampleType":"examples"},"responses":{"89b5bb85-cf44-4c1e-9a01-53aa48b970d4":{"headers":{"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}}},"description":"Account metadata with the incremented credential version.","content":{"application/json":{"schema":{"type":"object","required":["id","name","provider","status","credential_version","settings"],"properties":{"id":{"type":"string","isRequired":true,"uniqueKey":"id","typeLabel":"string"},"name":{"type":"string","isRequired":true,"uniqueKey":"name","typeLabel":"string"},"provider":{"type":"string","isRequired":true,"uniqueKey":"provider","typeLabel":"string"},"status":{"type":"string","description":"Known states are pending, enabled, invalid_credentials, credentials_rejected and unavailable.\nPending is a legacy state for an account saved before provider approval. Enabled means\nhosted BYOK is approved and the provider did not reject the credentials when they were saved.\ninvalid_credentials and unavailable remain readable for older records. credentials_rejected\nmeans a later provider call rejected the saved access; credential_failure gives a safe cause\nand the action needed to restore it.\n","isRequired":true,"uniqueKey":"status","typeLabel":"string"},"settings":{"description":"Non-secret credential fields saved with the credentials, named as in credential_fields. Legacy accounts may return an empty object. Secrets are never returned; credential_hints may return the last four characters and credential_prefixes only a declared public prefix.","type":"object","additionalProperties":{"type":"string","uniqueKey":"settings.additionalProperties","typeLabel":"string"},"isRequired":true,"uniqueKey":"settings","typeLabel":"object"},"credential_version":{"type":"integer","minimum":1,"description":"Monotonic version. Contains no key material or key fingerprint; credential_hints and credential_prefixes may return only the last four characters and a declared public prefix, respectively.","isRequired":true,"uniqueKey":"credential_version","typeLabel":"integer"},"credential_hints":{"type":"object","description":"Last four characters of saved secret credential fields that contain at least 12 characters. No other key material is returned.","additionalProperties":{"type":"string","pattern":"^.{4}$","uniqueKey":"credential_hints.additionalProperties","typeLabel":"string"},"uniqueKey":"credential_hints","typeLabel":"object"},"credential_prefixes":{"type":"object","description":"Declared public prefixes for saved secret credential fields, returned only when the saved value starts with the declared prefix and at least eight characters remain hidden before the last four. No other key material is returned.","additionalProperties":{"type":"string","pattern":"^[a-z0-9]{2,8}[_-]$","uniqueKey":"credential_prefixes.additionalProperties","typeLabel":"string"},"uniqueKey":"credential_prefixes","typeLabel":"object"},"credential_failure":{"oneOf":[{"type":"object","description":"Present when a later provider call rejected the saved credentials or access.","required":["state","status","cause","remedy","detected_at"],"properties":{"state":{"type":"string","const":"credentials_rejected","isRequired":true,"uniqueKey":"credential_failure.oneOf.0.state","typeLabel":"string"},"status":{"type":"integer","enum":[401,403],"description":"Provider HTTP status returned by the rejected call.","isRequired":true,"uniqueKey":"credential_failure.oneOf.0.status","typeLabel":"enum\u003cinteger>"},"cause":{"type":"string","enum":["provider_rejected_credentials","provider_access_denied"],"x-boxrouter-open-enum":true,"description":"Safe normalized cause; provider response bodies and credential values are excluded.","isRequired":true,"uniqueKey":"credential_failure.oneOf.0.cause","typeLabel":"enum\u003cstring>"},"remedy":{"type":"string","minLength":1,"description":"The action needed to restore access, based on the provider and HTTP status.","isRequired":true,"uniqueKey":"credential_failure.oneOf.0.remedy","typeLabel":"string"},"detected_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"credential_failure.oneOf.0.detected_at","typeLabel":"string\u003cdate-time>"}},"additionalProperties":false,"uniqueKey":"credential_failure.oneOf.0","typeLabel":"object"},{"type":"null","description":"Present when a later provider call rejected the saved credentials or access.","uniqueKey":"credential_failure.oneOf.1","typeLabel":"null"}],"uniqueKey":"credential_failure","typeLabel":"object | null"},"standard_image":{"oneOf":[{"type":"object","required":["state","region","image_version","image_digest","reason","fix","checked_at"],"properties":{"state":{"type":"string","enum":["ready","preparing","failed","unavailable"],"const":"ready","isRequired":true,"uniqueKey":"standard_image.oneOf.0.state","typeLabel":"enum\u003cstring>"},"reason":{"type":"null","description":"Provider's reason when setup failed, or the reason this account cannot use the standard image.","isRequired":true,"uniqueKey":"standard_image.oneOf.0.reason","typeLabel":"null"},"fix":{"type":"null","description":"The one action needed to establish readiness or recover from a failed setup.","isRequired":true,"uniqueKey":"standard_image.oneOf.0.fix","typeLabel":"null"},"region":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.0.region","typeLabel":"string"},"image_version":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.0.image_version","typeLabel":"string"},"image_digest":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.0.image_digest","typeLabel":"string"},"checked_at":{"oneOf":[{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.0.checked_at.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.0.checked_at.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"standard_image.oneOf.0.checked_at","typeLabel":"string\u003cdate-time> | null"}},"additionalProperties":false,"uniqueKey":"standard_image.oneOf.0","typeLabel":"object"},{"type":"object","required":["state","region","image_version","image_digest","reason","fix","checked_at"],"properties":{"state":{"type":"string","enum":["ready","preparing","failed","unavailable"],"const":"preparing","isRequired":true,"uniqueKey":"standard_image.oneOf.1.state","typeLabel":"enum\u003cstring>"},"reason":{"type":"null","description":"Provider's reason when setup failed, or the reason this account cannot use the standard image.","isRequired":true,"uniqueKey":"standard_image.oneOf.1.reason","typeLabel":"null"},"fix":{"type":"null","description":"The one action needed to establish readiness or recover from a failed setup.","isRequired":true,"uniqueKey":"standard_image.oneOf.1.fix","typeLabel":"null"},"region":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.1.region","typeLabel":"string"},"image_version":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.1.image_version","typeLabel":"string"},"image_digest":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.1.image_digest","typeLabel":"string"},"checked_at":{"oneOf":[{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.1.checked_at.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.1.checked_at.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"standard_image.oneOf.1.checked_at","typeLabel":"string\u003cdate-time> | null"}},"additionalProperties":false,"uniqueKey":"standard_image.oneOf.1","typeLabel":"object"},{"type":"object","required":["state","region","image_version","image_digest","reason","fix","checked_at"],"properties":{"state":{"type":"string","enum":["ready","preparing","failed","unavailable"],"const":"failed","isRequired":true,"uniqueKey":"standard_image.oneOf.2.state","typeLabel":"enum\u003cstring>"},"reason":{"type":"string","description":"Provider's reason when setup failed, or the reason this account cannot use the standard image.","minLength":1,"isRequired":true,"uniqueKey":"standard_image.oneOf.2.reason","typeLabel":"string"},"fix":{"type":"string","description":"The one action needed to establish readiness or recover from a failed setup.","minLength":1,"isRequired":true,"uniqueKey":"standard_image.oneOf.2.fix","typeLabel":"string"},"region":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.2.region","typeLabel":"string"},"image_version":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.2.image_version","typeLabel":"string"},"image_digest":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.2.image_digest","typeLabel":"string"},"checked_at":{"oneOf":[{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.2.checked_at.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.2.checked_at.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"standard_image.oneOf.2.checked_at","typeLabel":"string\u003cdate-time> | null"}},"additionalProperties":false,"uniqueKey":"standard_image.oneOf.2","typeLabel":"object"},{"type":"object","required":["state","region","image_version","image_digest","reason","fix","checked_at"],"properties":{"state":{"type":"string","enum":["ready","preparing","failed","unavailable"],"const":"unavailable","isRequired":true,"uniqueKey":"standard_image.oneOf.3.state","typeLabel":"enum\u003cstring>"},"fix":{"type":"string","description":"The one action needed to establish readiness or recover from a failed setup.","minLength":1,"isRequired":true,"uniqueKey":"standard_image.oneOf.3.fix","typeLabel":"string"},"region":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.3.region","typeLabel":"string"},"image_version":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.3.image_version","typeLabel":"string"},"image_digest":{"type":"string","isRequired":true,"uniqueKey":"standard_image.oneOf.3.image_digest","typeLabel":"string"},"reason":{"oneOf":[{"type":"string","description":"Provider's reason when setup failed, or the reason this account cannot use the standard image.","isRequired":true,"uniqueKey":"standard_image.oneOf.3.reason.oneOf.0","typeLabel":"string"},{"type":"null","description":"Provider's reason when setup failed, or the reason this account cannot use the standard image.","isRequired":true,"uniqueKey":"standard_image.oneOf.3.reason.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"standard_image.oneOf.3.reason","typeLabel":"string | null"},"checked_at":{"oneOf":[{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.3.checked_at.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","format":"date-time","isRequired":true,"uniqueKey":"standard_image.oneOf.3.checked_at.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"standard_image.oneOf.3.checked_at","typeLabel":"string\u003cdate-time> | null"}},"additionalProperties":false,"uniqueKey":"standard_image.oneOf.3","typeLabel":"object"}],"uniqueKey":"standard_image","typeLabel":"object"},"disconnect":{"oneOf":[{"type":"object","description":"A removal accepted with `wait=false` that is still running or was refused; null otherwise.","required":["state","started_at","finished_at","error"],"properties":{"state":{"type":"string","enum":["disconnecting","failed"],"x-boxrouter-open-enum":true,"isRequired":true,"uniqueKey":"disconnect.oneOf.0.state","typeLabel":"enum\u003cstring>"},"started_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"disconnect.oneOf.0.started_at","typeLabel":"string\u003cdate-time>"},"finished_at":{"oneOf":[{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"disconnect.oneOf.0.finished_at.oneOf.0","typeLabel":"string\u003cdate-time>"},{"type":"null","isRequired":true,"uniqueKey":"disconnect.oneOf.0.finished_at.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"disconnect.oneOf.0.finished_at","typeLabel":"string\u003cdate-time> | null"},"error":{"oneOf":[{"type":"object","description":"Present when state is failed. The same code, message and fix the synchronous request returns as its refusal.","required":["code","message","fix","request_id","details"],"properties":{"code":{"type":"string","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.message","typeLabel":"string"},"fix":{"oneOf":[{"type":"string","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.fix.oneOf.0","typeLabel":"string"},{"type":"null","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.fix.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.fix","typeLabel":"string | null"},"request_id":{"oneOf":[{"type":"string","description":"The removal request's ID.","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.request_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"The removal request's ID.","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.request_id.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.request_id","typeLabel":"string | null"},"details":{"type":"object","description":"Code-specific context, such as `sandbox_ids` naming the live sandboxes in the way.","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0.details","typeLabel":"object"}},"isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.0","typeLabel":"object"},{"type":"null","description":"Present when state is failed. The same code, message and fix the synchronous request returns as its refusal.","isRequired":true,"uniqueKey":"disconnect.oneOf.0.error.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"disconnect.oneOf.0.error","typeLabel":"object | null"}},"additionalProperties":false,"uniqueKey":"disconnect.oneOf.0","typeLabel":"object"},{"type":"null","description":"A removal accepted with `wait=false` that is still running or was refused; null otherwise.","uniqueKey":"disconnect.oneOf.1","typeLabel":"null"}],"uniqueKey":"disconnect","typeLabel":"object | null"},"warnings":{"type":"array","description":"Notices about this connect. Present only on the response that created the account, and\nonly when there is something to say.\n","items":{"type":"object","required":["code","message"],"properties":{"code":{"type":"string","enum":["duplicate_credential"],"x-boxrouter-open-enum":true,"description":"duplicate_credential: another account of this workspace has the same provider, settings\nand last four characters of every secret. New values may appear.\n","isRequired":true,"uniqueKey":"warnings.items.[INDEX].code","typeLabel":"enum\u003cstring>"},"message":{"type":"string","description":"What was noticed and what to do about it.","isRequired":true,"uniqueKey":"warnings.items.[INDEX].message","typeLabel":"string"},"account_id":{"type":"string","description":"The other account the notice is about.","uniqueKey":"warnings.items.[INDEX].account_id","typeLabel":"string"}},"uniqueKey":"warnings.items.[INDEX]","typeLabel":"object"},"uniqueKey":"warnings","typeLabel":"object[]"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"id":"\u003cstring>","name":"\u003cstring>","provider":"\u003cstring>","status":"\u003cstring>","settings":{},"credential_version":2,"credential_hints":{},"credential_prefixes":{},"credential_failure":{"state":"credentials_rejected","status":401,"cause":"provider_rejected_credentials","remedy":"\u003cstring>","detected_at":"2023-11-07T05:31:56Z"},"standard_image":{"state":"ready","reason":null,"fix":null,"region":"\u003cstring>","image_version":"\u003cstring>","image_digest":"\u003cstring>","checked_at":"2023-11-07T05:31:56Z"},"disconnect":{"state":"disconnecting","started_at":"2023-11-07T05:31:56Z","finished_at":"2023-11-07T05:31:56Z","error":{"code":"\u003cstring>","message":"\u003cstring>","fix":"\u003cstring>","request_id":"\u003cstring>","details":{}}},"warnings":[{"code":"duplicate_credential","message":"\u003cstring>","account_id":"\u003cstring>"}]}}},"exampleType":"generated"}},"exampleType":"generated"},"f782ba7a-c32d-43e7-a667-b545491caced":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"},"6fa820c4-6d5b-49ea-9add-5cd4539feb2b":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"},"bc677c17-2539-4c8d-b571-63c1036ffc26":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"},"2bc3c13e-d7db-4424-802f-5cfb41abf8c6":{"description":"Structured error. `retry` says whether to send the call again (`now`, `after_fix`, `inspect` or `never`) and `retry_after_seconds` how long to wait first. Unowned and unknown resource IDs both return 404. Admission overload returns 503 with code overloaded, outcome not_started and Retry-After. It reserves no operation and dispatches no provider work. Shared workspace/provider admission budgets return 429 with code rate_limited, outcome not_started and Retry-After. An incomplete request body can return 408 request_timeout before dispatch. Durable-state failures return 503 database_unavailable with outcome unknown; do not infer that execution did not occur. A read (GET or HEAD) that meets the same failure changed nothing: its message says the state is temporarily unavailable, and it is safe to repeat. A provider that cannot be reached when a create is prepared returns 502 provider_error with outcome not_started; nothing was created, and the create can be retried with the same Idempotency-Key or sent to another provider with `providers`.\nNative errors are sanitized; upstream credentials, request bodies and\nanother workspace's metadata are never included. Server-Timing is present only when the response reached Dispatcher or held-response preparation; an earlier response, including pre-Dispatcher admission overload, may omit it.\n","headers":{"X-Request-ID":{"description":"Server-generated correlation identifier; contains no credentials or payloads.","schema":{"type":"string"}},"Server-Timing":{"description":"Durations of server-side phases, for diagnosing slow requests. Phase names are not stable\nand may change.\n","schema":{"type":"string"},"x-boxrouter-server-timing":{"version":1,"unit":"ms","serviceAggregateMetric":"service","maxHeaderBytes":8192,"maxOperationRows":32,"decimalPlaces":3,"safeNamePattern":"^[A-Za-z0-9_.:-]{1,64}$","aggregates":[{"metric":"service","fieldStem":"cloud"},{"metric":"database","fieldStem":"database"},{"metric":"code","fieldStem":"code"},{"metric":"provider_connect","fieldStem":"provider_connect"},{"metric":"provider_wait","fieldStem":"provider_wait"},{"metric":"accept","fieldStem":"accept"},{"metric":"queue","fieldStem":"queue"},{"metric":"admission","fieldStem":"admission"},{"metric":"encode","fieldStem":"encode"}],"aggregateGrammar":{"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"descriptionParameter":"desc","unknownDescription":"unknown","missingMeans":"unreported"},"operationGrammar":{"metric":"op","nameParameter":"desc","namePattern":"safeNamePattern","start":{"parameter":"start","type":"number","finite":true,"sign":"signed","relativeTo":"recorderWindow"},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0},"outcomeParameter":"outcome","outcomes":["returned","raised"],"requiresAggregateDependencyUnion":false},"omissionGrammar":{"metric":"op-omitted","count":{"parameter":"desc","type":"integer","minimum":0},"duration":{"parameter":"dur","type":"number","finite":true,"minimum":0,"sumOf":"knownOmittedMeasuredRows"},"requiresAggregateDependencyUnion":false},"coverageGrammar":{"metric":"op-coverage","descriptionParameter":"desc","unknownValue":"unknown","absentState":"unreported","states":["unknown","unreported"],"absenceImpliesCompleteness":false}}},"Retry-After":{"description":"Seconds before retrying an eligible read; not permission to replay a mutation.","schema":{"type":"integer","minimum":0}}},"content":{"application/json":{"schema":{"type":"object","required":["error"],"description":"The one error body every failing call answers. It leads with what to do: `retry` says whether to send the call again, `fix` says what to change, `outcome` says what happened, and `doc_url` links to the page that explains the code. Clients retry `retry: safe` for you with the same idempotency key.","x-sandbox-provider-spec-codes":["no_eligible_route","knob_not_named","unrecognised_word","invalid_request","not_named","gate_unavailable","account_unhealthy","lifetime_limit","lifetime_used_up","not_running","invalid_state","sandbox_ended","not_found","provider_error","timeout","contract_violation"],"properties":{"error":{"type":"object","required":["code","message","request_id","outcome","retry","retry_after_seconds"],"properties":{"code":{"type":"string","description":"Stable machine category. Operation failures use SandboxProviderSpec error codes,\nincluding invalid_request, invalid_state, not_found, unauthorized,\nincompatible_requirements, no_eligible_route, capacity_unavailable,\ncapability_unavailable, contract_violation, resource_limit, timeout and\nprovider_error. Hosted service failures add method_not_allowed,\nunauthenticated, forbidden, actions_sandbox_protected,\ninsufficient_credit, spend_limit_exceeded,\nprovider_not_enabled, credentials_rejected, conflict, rate_limited, provider_quota, request_timeout, overloaded,\ndatabase_unavailable, payment_method_required, payment_declined, promotion_already_redeemed, account_exists, and internal_error. unsupported_feature and\noutput_limit are earlier names still returned by some routes.\nOrganization and membership operations also use organization_changed, last_admin,\nstale_membership, directory_managed and change_in_progress. Key ownership and\ninvitation operations use idempotency_key_reused and conflict.\nCredit refunds and purchase quotes also use refund_window_closed,\nnothing_to_refund, refund_below_minimum, refund_in_progress,\npurchase_in_progress, dispute_open, already_refunded,\nrefund_amount_changed, refund_fee_unavailable, quote_changed,\nsession_required, refund_daily_limit, refund_rate_limit,\nrefund_retry_requires_support, idempotency_key_reused and fraud_review.\nCard setup adds card_setup_rate_limit (429, with Retry-After): a workspace may start five\ncard setups an hour.\nA provider that refuses the request for its own plan or quota limit answers\n429 provider_quota with the provider's words in native_message; rate_limited is\nBoxRouter's own limit.\nRouting Prevent Overrides refuses a request containing preferences.order,\npreferences.sort or preferences.allow_fallbacks with routing_overrides_forbidden,\noutcome not_started and details.fields naming the prohibited inputs. No provider\neffect occurs.\nLaunch operations also use invalid_request, secret_missing, agent_not_found,\nno_eligible_route and launch_failed.\nA process or terminal is observed by one API task. When that task stops, process\noutput, result and stdin answer 410 process_observer_lost (reading or cancelling the\nprocess still works), and a terminal on a provider that cannot reattach it answers\n410 terminal_observer_lost. invalid_observer_hop (403) refuses an internal hop\nbetween API tasks that is not signed; clients never send one.\nOpening a preview that the provider answered with other access than the request\nasked for returns 502 preview_access_refused: that preview is never returned, and\ndetails say whether it was ended.\nStarting a process with wait_for_port answers 409 port_not_listening, outcome partial,\nwhen the process exits before the port accepts connections or the port stays closed for\n30 seconds; the process is ended and details carry the output so far.\nA request that must store content (a volume, a saved artifact) under transient content\nretention answers 409 privacy_persistence_conflict with outcome not_started.\nA sandbox request that stops before anything is created also answers\nlifetime_cap_exceeded, knob_not_named and unrecognised_word (400), and price_unknown and\npolicy_denied (409), each with outcome not_started; the Actions codes job_claim_lost,\nactions_authority_changed, actions_candidate_ceiling_withdrawn and\nactions_candidate_outside_ceiling (409) say the job's claim, settings or admitted routes\nchanged; provider_budget_exhausted (409) says a run's provider budget allows no\nfurther create. A create that names an image Cloud cannot use answers 400\nimage_architecture_unsupported, image_digest_resolution_failed,\nimage_preparation_unsupported or private_image_managed_route_unavailable, and\nprivacy_admission_unavailable when privacy cannot be enforced; each says what to change.\nLaunch and source-repository refusals name the repository or manifest fault (code_ref_not_found,\ncode_repository_*, source_*, invalid_source_manifest, invalid_manifest_encoding,\ninvalid_run_spec, repository_*, reserved_env_refused, launch_run_position_conflict,\ncode_reference_moved, dockerfile_context_unsupported, image_tag_unresolved,\nrecovery_sandbox_mismatch); the GitHub-side ones (source_rate_limited,\nsource_resolution_failed, source_resolution_timeout, code_repository_resolution_failed)\nare safe to resend. image_setup_timeout, managed_funding_unavailable,\nlifetime_funding_conflict, candidate_admission_unavailable, secrets_unavailable and the\nActions candidate codes (actions_candidate_record_invalid, actions_create_budget_exhausted,\nactions_create_format_mismatch) complete the creation and extension refusals.\ndispatch_limit_reached, inline_secret_values_refused and launch_incomplete come from\nlaunch runs, provider_policy_unknown from an operation whose privacy evidence cannot be\nverified, and quota_exceeded from a full managed provider account.\nVolume operations also use volume_busy, volume_lease_lost, volume_not_attached,\nvolume_incompatible, volume_save_failed and volume_restore_failed. Creating a\nsandbox on a volume whose writer is ending waits for the release (at most 120\nseconds) before it can answer volume_busy.\nA team member's new personal API key is paused until WorkOS membership sync catches\nup: it answers 403 forbidden whose message and fix say the key becomes active once\nthe team membership syncs, usually within a minute, and the call can be retried.\nClients must preserve and handle unknown categories explicitly.\n","x-boxrouter-error-codes":{"account_exists":[409],"account_unhealthy":[402],"actions_authority_changed":[409],"actions_candidate_ceiling_withdrawn":[409],"actions_candidate_outside_ceiling":[409],"actions_candidate_record_invalid":[409],"actions_create_budget_exhausted":[409],"actions_create_format_mismatch":[409],"actions_sandbox_protected":[403],"agent_not_found":[404],"already_refunded":[409],"authorization_error":[403],"candidate_admission_unavailable":[503],"capability_unavailable":[409,503],"capability_unverified":[409],"card_setup_rate_limit":[429],"change_in_progress":[409],"code_ref_not_found":[404],"code_reference_moved":[409],"code_repository_not_authorized":[403],"code_repository_not_found":[404],"code_repository_not_private":[400],"code_repository_not_public":[404],"code_repository_resolution_failed":[502],"command_failed":[409],"command_observation_busy":[409],"conflict":[409],"contract_violation":[409],"credentials_rejected":[409,422],"database_unavailable":[503],"directory_managed":[409],"dispatch_limit_reached":[409],"dispute_open":[409],"dockerfile_context_unsupported":[400],"expired":[410],"forbidden":[403],"fraud_review":[409],"gate_unavailable":[409],"idempotency_key_reused":[409,422],"identity_unavailable":[503],"image_architecture_unsupported":[400],"image_digest_resolution_failed":[400],"image_preparation_unsupported":[400],"image_setup_timeout":[504],"image_tag_unresolved":[400],"inline_secret_values_refused":[422],"insufficient_credit":[402],"internal_error":[500],"invalid_manifest_encoding":[400],"invalid_observer_hop":[403],"invalid_request":[400,413,422,428],"invalid_run_spec":[400],"invalid_source_manifest":[400],"invalid_state":[409],"job_claim_lost":[409],"knob_not_named":[400],"last_admin":[409],"launch_failed":[409],"launch_incomplete":[409],"launch_run_position_conflict":[409],"lifetime_cap_exceeded":[400],"lifetime_funding_conflict":[409],"lifetime_limit":[409],"lifetime_used_up":[409],"managed_funding_unavailable":[503],"method_not_allowed":[405],"no_eligible_route":[409],"not_found":[404],"not_named":[409],"not_running":[409],"nothing_to_refund":[409],"organization_changed":[409],"output_limit":[413],"overloaded":[503],"payment_declined":[402],"payment_method_required":[409],"payment_provider_rejected":[502],"payment_provider_unavailable":[503],"payments_unavailable":[503],"policy_denied":[409],"port_not_listening":[409],"preview_access_refused":[502],"price_unknown":[409],"privacy_admission_unavailable":[400],"privacy_persistence_conflict":[409],"private_image_managed_route_unavailable":[400],"process_observer_lost":[410],"promotion_already_redeemed":[409],"promotion_code_invalid":[404],"provider_budget_exhausted":[409],"provider_error":[502],"provider_not_enabled":[409],"provider_policy_unknown":[409],"provider_quota":[429],"purchase_in_progress":[409],"quota_exceeded":[429],"quote_changed":[409],"rate_limited":[429],"recovery_sandbox_mismatch":[409],"refund_amount_changed":[409],"refund_below_minimum":[409],"refund_daily_limit":[429],"refund_fee_unavailable":[409],"refund_in_progress":[409],"refund_rate_limit":[429],"refund_retry_requires_support":[409],"refund_window_closed":[409],"repository_file_unsupported":[400],"repository_too_large":[400],"request_timeout":[408],"reserved_env_refused":[400,422],"resource_limit":[413,507],"routing_overrides_forbidden":[400],"run_limit_exceeded":[429],"sandbox_ended":[410],"secret_missing":[400],"secrets_unavailable":[503],"session_required":[403],"source_file_not_found":[400],"source_file_too_large":[413],"source_rate_limited":[503],"source_ref_not_found":[400],"source_repository_not_accessible":[404],"source_repository_not_found":[400],"source_repository_not_private":[400],"source_repository_not_public":[400],"source_resolution_failed":[502],"source_resolution_timeout":[504],"spend_limit_exceeded":[402],"stale_membership":[409],"terminal_closed":[410],"terminal_observer_lost":[410],"timeout":[504],"unauthenticated":[401],"unavailable":[503],"unrecognised_word":[400],"unsupported_feature":[422],"volume_busy":[409],"volume_incompatible":[409],"volume_lease_lost":[409],"volume_not_attached":[409],"volume_restore_failed":[502],"volume_save_failed":[409,502],"volume_unavailable":[409],"wrong_region":[421]},"x-boxrouter-error-retry":{"account_exists":"after_fix","account_unhealthy":"after_fix","actions_authority_changed":"after_fix","actions_candidate_ceiling_withdrawn":"after_fix","actions_candidate_outside_ceiling":"after_fix","actions_candidate_record_invalid":"after_fix","actions_create_budget_exhausted":"after_fix","actions_create_format_mismatch":"after_fix","actions_sandbox_protected":"never","agent_not_found":"after_fix","already_refunded":"never","authorization_error":"check_outcome","candidate_admission_unavailable":"never","capability_unavailable":"check_outcome","capability_unverified":"after_fix","card_setup_rate_limit":"safe","change_in_progress":"safe","code_ref_not_found":"after_fix","code_reference_moved":"after_fix","code_repository_not_authorized":"after_fix","code_repository_not_found":"after_fix","code_repository_not_private":"after_fix","code_repository_not_public":"after_fix","code_repository_resolution_failed":"safe","command_failed":"after_fix","command_observation_busy":"safe","conflict":"check_outcome","contract_violation":"check_outcome","credentials_rejected":"after_fix","database_unavailable":"check_outcome","directory_managed":"never","dispatch_limit_reached":"after_fix","dispute_open":"after_fix","dockerfile_context_unsupported":"after_fix","expired":"check_outcome","forbidden":"after_fix","fraud_review":"safe","gate_unavailable":"after_fix","idempotency_key_reused":"after_fix","identity_unavailable":"safe","image_architecture_unsupported":"after_fix","image_digest_resolution_failed":"after_fix","image_preparation_unsupported":"after_fix","image_setup_timeout":"after_fix","image_tag_unresolved":"after_fix","inline_secret_values_refused":"after_fix","insufficient_credit":"after_fix","internal_error":"never","invalid_manifest_encoding":"after_fix","invalid_observer_hop":"after_fix","invalid_request":"after_fix","invalid_run_spec":"after_fix","invalid_source_manifest":"after_fix","invalid_state":"check_outcome","job_claim_lost":"after_fix","knob_not_named":"after_fix","last_admin":"after_fix","launch_failed":"check_outcome","launch_incomplete":"check_outcome","launch_run_position_conflict":"after_fix","lifetime_cap_exceeded":"after_fix","lifetime_funding_conflict":"after_fix","lifetime_limit":"check_outcome","lifetime_used_up":"after_fix","managed_funding_unavailable":"safe","method_not_allowed":"after_fix","no_eligible_route":"after_fix","not_found":"check_outcome","not_named":"after_fix","not_running":"after_fix","nothing_to_refund":"never","organization_changed":"safe","output_limit":"check_outcome","overloaded":"safe","payment_declined":"after_fix","payment_method_required":"after_fix","payment_provider_rejected":"check_outcome","payment_provider_unavailable":"check_outcome","payments_unavailable":"safe","policy_denied":"after_fix","port_not_listening":"after_fix","preview_access_refused":"never","price_unknown":"after_fix","privacy_admission_unavailable":"after_fix","privacy_persistence_conflict":"after_fix","private_image_managed_route_unavailable":"after_fix","process_observer_lost":"check_outcome","promotion_already_redeemed":"never","promotion_code_invalid":"after_fix","provider_budget_exhausted":"never","provider_error":"check_outcome","provider_not_enabled":"after_fix","provider_policy_unknown":"after_fix","provider_quota":"after_fix","purchase_in_progress":"safe","quota_exceeded":"safe","quote_changed":"after_fix","rate_limited":"safe","recovery_sandbox_mismatch":"check_outcome","refund_amount_changed":"after_fix","refund_below_minimum":"never","refund_daily_limit":"safe","refund_fee_unavailable":"safe","refund_in_progress":"safe","refund_rate_limit":"safe","refund_retry_requires_support":"never","refund_window_closed":"never","repository_file_unsupported":"after_fix","repository_too_large":"after_fix","request_timeout":"safe","reserved_env_refused":"after_fix","resource_limit":"check_outcome","routing_overrides_forbidden":"after_fix","run_limit_exceeded":"after_fix","sandbox_ended":"check_outcome","secret_missing":"after_fix","secrets_unavailable":"never","session_required":"never","source_file_not_found":"after_fix","source_file_too_large":"after_fix","source_rate_limited":"safe","source_ref_not_found":"after_fix","source_repository_not_accessible":"after_fix","source_repository_not_found":"after_fix","source_repository_not_private":"after_fix","source_repository_not_public":"after_fix","source_resolution_failed":"safe","source_resolution_timeout":"safe","spend_limit_exceeded":"after_fix","stale_membership":"after_fix","terminal_closed":"after_fix","terminal_observer_lost":"after_fix","timeout":"check_outcome","unauthenticated":"after_fix","unavailable":"safe","unrecognised_word":"after_fix","unsupported_feature":"after_fix","volume_busy":"after_fix","volume_incompatible":"after_fix","volume_lease_lost":"after_fix","volume_not_attached":"after_fix","volume_restore_failed":"check_outcome","volume_save_failed":"check_outcome","volume_unavailable":"after_fix","wrong_region":"after_fix"},"isRequired":true,"uniqueKey":"error.code","typeLabel":"string"},"message":{"type":"string","isRequired":true,"uniqueKey":"error.message","typeLabel":"string"},"request_id":{"type":"string","isRequired":true,"uniqueKey":"error.request_id","typeLabel":"string"},"outcome":{"type":"string","enum":["not_started","completed","partial","unknown"],"description":"What is known about the requested side effect. `not_started` means nothing ran\nanywhere, at BoxRouter or at a provider; a launch-setup or process-start failure\nafter dispatch is `partial` or `unknown`. Unknown and partial forbid automatic\nreplay and always carry `retry: check_outcome`. An HTTP status alone does not establish\noutcome.\nMany refusals report not_started before the provider is asked anything. A read\n(GET or HEAD) has no side effect to be unsure about, so its failures report\nnot_started and carry the code's own retry value. A launch preparation failure\nhappens after the sandbox was created and setup commands may already have run, and\ndeleting the sandbox does not undo effects outside it: it reports partial once the\ncleanup is confirmed and unknown if it is not. A process that wait_for_port ended\nreports partial. volume_restore_failed on a resume or create,\nand volume_save_failed after the guest was read, report unknown or partial; they\ncarry the operation_id when the call was recorded, and their fix does not offer to\nsend the call again unchanged.\n","isRequired":true,"uniqueKey":"error.outcome","typeLabel":"enum\u003cstring>"},"retry":{"type":"string","enum":["safe","after_fix","check_outcome","never"],"x-boxrouter-open-enum":true,"description":"What the caller may do next, fixed per code (x-boxrouter-error-retry): safe resends the\nsame request, after_fix changes the request or setup first, check_outcome reads\n`outcome` and the resource before resending, never does not resend. Branch on this\ninstead of the HTTP status.\n","isRequired":true,"uniqueKey":"error.retry","typeLabel":"enum\u003cstring>"},"retry_after_seconds":{"oneOf":[{"type":"integer","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.0","typeLabel":"integer"},{"type":"null","minimum":0,"description":"How long to wait before a `retry: safe` resend, as the Retry-After header says it; null when there is no wait to name.","isRequired":true,"uniqueKey":"error.retry_after_seconds.oneOf.1","typeLabel":"null"}],"isRequired":true,"uniqueKey":"error.retry_after_seconds","typeLabel":"integer | null"},"details":{"type":"object","description":"Code-specific context, spelled for programs. no_eligible_route carries considered,\nexcluded, closest and nearest; knob_not_named the knob and its values;\nunrecognised_word the path, the word and the known ones; not_named the gate, what\nthe call needed beyond the grant and the corrected requirements line; gate_unavailable\nthe gate and account; lifetime_limit the ceiling and this run. A creation that\nstopped before a sandbox existed may also carry `fallbacks_allowed`, `stopped_reason`\nand `attempts`, spelled and bounded as in the sandbox route selection.\ncapability_unavailable may identify the needed capability. A launch preparation failure can follow sandbox creation;\ninspect outcome and cleanup details before creating another. Clients must\npreserve fields they do not know.\n","properties":{"selection_version":{"type":"integer","minimum":0,"description":"Current selected organization version for organization_changed.","uniqueKey":"error.details.selection_version","typeLabel":"integer"},"considered":{"type":"integer","minimum":0,"description":"no_eligible_route only; how many routes were considered.","uniqueKey":"error.details.considered","typeLabel":"integer"},"excluded":{"type":"array","description":"no_eligible_route only; every considered route that cannot serve the request. Each entry names its `provider` and the checks it failed (`failed` for a sandbox request, `reasons` and `exclusions` for a launch); clients must preserve fields they do not know.","items":{"type":"object","required":["provider"],"properties":{"provider":{"type":"string","isRequired":true,"uniqueKey":"error.details.excluded.items.[INDEX].provider","typeLabel":"string"}},"uniqueKey":"error.details.excluded.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.excluded","typeLabel":"object[]"},"closest":{"oneOf":[{"type":"object","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.0","typeLabel":"object"},{"type":"null","description":"no_eligible_route only; the excluded route that fails fewest checks, or null.","uniqueKey":"error.details.closest.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.details.closest","typeLabel":"object | null"},"nearest":{"type":"array","description":"no_eligible_route only; the smallest changes that would make a route eligible, nearest first. An entry names the change (`change` and `then_eligible` for a sandbox request, `provider`, `distance` and `failing` for a launch); clients must preserve fields they do not know.","items":{"type":"object","uniqueKey":"error.details.nearest.items.[INDEX]","typeLabel":"object"},"uniqueKey":"error.details.nearest","typeLabel":"object[]"},"requirement":{"type":"string","description":"The SandboxProviderSpec family whose requirement would make this operation available.","uniqueKey":"error.details.requirement","typeLabel":"string"},"purchase_id":{"type":"string","description":"Retained failed credit purchase ID, when a saved-card charge was declined.","uniqueKey":"error.details.purchase_id","typeLabel":"string"},"preview":{"type":"object","additionalProperties":false,"required":["unused","held_excluded","fee","principal","tax","total","card"],"properties":{"unused":{"type":"integer","minimum":0,"description":"Unused purchased credit in US cents, before held credit is excluded.","isRequired":true,"uniqueKey":"error.details.preview.unused","typeLabel":"integer"},"held_excluded":{"type":"integer","minimum":0,"description":"Credit held for running sandboxes, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.held_excluded","typeLabel":"integer"},"fee":{"type":"integer","minimum":0,"description":"Original Stripe processing fee retained, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.fee","typeLabel":"integer"},"principal":{"type":"integer","minimum":0,"description":"Tax-exclusive principal returned to the original card, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.principal","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Tax Stripe adds to the credit note, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":0,"description":"Total Stripe will refund, in US cents.","isRequired":true,"uniqueKey":"error.details.preview.total","typeLabel":"integer"},"card":{"type":"object","conditionallyRequiredProperties":{"email":[{"when":[[{"property":"type","values":["link"]}]]}],"brand":[{"when":[[{"property":"type","values":["card"]}]]}],"last4":[{"when":[[{"property":"type","values":["card"]}]]}]},"properties":{"brand":{"oneOf":[{"type":"string","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.0","typeLabel":"string"},{"type":"null","description":"Card brand; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.brand","typeLabel":"string | null"},"last4":{"oneOf":[{"type":"string","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.0","typeLabel":"string"},{"type":"null","pattern":"^[0-9]{4}$","description":"Last four card digits; absent for Link methods.","conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4.oneOf.1","typeLabel":"null"}],"conditionalRequirements":[{"when":[[{"property":"type","values":["card"]}]]}],"uniqueKey":"error.details.preview.card.last4","typeLabel":"string | null"},"type":{"type":"string","enum":["card","link"],"x-boxrouter-open-enum":true,"uniqueKey":"error.details.preview.card.type","typeLabel":"enum\u003cstring>"},"email":{"type":"string","format":"email","description":"Link account email; present only when type is link.","conditionalRequirements":[{"when":[[{"property":"type","values":["link"]}]]}],"uniqueKey":"error.details.preview.card.email","typeLabel":"string\u003cemail>"}},"additionalProperties":false,"isRequired":true,"uniqueKey":"error.details.preview.card","typeLabel":"object"}},"description":"Current refund preview returned with 409 refund_amount_changed.","uniqueKey":"error.details.preview","typeLabel":"object"},"quote":{"type":"object","additionalProperties":false,"required":["amount","tax","total","address_required"],"properties":{"amount":{"type":"integer","minimum":1,"description":"Tax-exclusive credit amount in US cents; this is what is added to the balance.","isRequired":true,"uniqueKey":"error.details.quote.amount","typeLabel":"integer"},"tax":{"type":"integer","minimum":0,"description":"Estimated tax in US cents, on the credits and the fee.","isRequired":true,"uniqueKey":"error.details.quote.tax","typeLabel":"integer"},"total":{"type":"integer","minimum":1,"description":"Estimated total to charge in US cents: amount plus fee_minor plus tax.","isRequired":true,"uniqueKey":"error.details.quote.total","typeLabel":"integer"},"address_required":{"type":"boolean","isRequired":true,"uniqueKey":"error.details.quote.address_required","typeLabel":"boolean"},"fee_minor":{"type":"integer","minimum":0,"description":"BoxRouter's purchase fee in US cents, computed by the server and charged on top of amount. Tax applies to amount plus fee. Absent on older services.","uniqueKey":"error.details.quote.fee_minor","typeLabel":"integer"},"missing":{"type":"array","items":{"type":"string","uniqueKey":"error.details.quote.missing.items.[INDEX]","typeLabel":"string"},"description":"Required billing address fields missing for an exact tax quote.","uniqueKey":"error.details.quote.missing","typeLabel":"string[]"}},"description":"Current purchase quote returned with 409 quote_changed.","uniqueKey":"error.details.quote","typeLabel":"object"},"redemption":{"type":"object","additionalProperties":false,"required":["code","amount_nanodollars","description","redeemed_at"],"properties":{"code":{"type":"string","description":"The code in its canonical upper-case form.","isRequired":true,"uniqueKey":"error.details.redemption.code","typeLabel":"string"},"amount_nanodollars":{"type":"string","maxLength":19,"pattern":"^(?:[1-9][0-9]{0,17}|[1-8][0-9]{18}|9[0-1][0-9]{17}|92[0-1][0-9]{16}|922[0-2][0-9]{15}|9223[0-2][0-9]{14}|92233[0-6][0-9]{13}|922337[0-1][0-9]{12}|92233720[0-2][0-9]{10}|922337203[0-5][0-9]{9}|9223372036[0-7][0-9]{8}|92233720368[0-4][0-9]{7}|922337203685[0-3][0-9]{6}|9223372036854[0-6][0-9]{5}|92233720368547[0-6][0-9]{4}|922337203685477[0-4][0-9]{3}|9223372036854775[0-7][0-9]{2}|922337203685477580[0-7])$","description":"Credit granted, in billionths of a US dollar, as a canonical positive signed 64-bit nanodollar string.","isRequired":true,"uniqueKey":"error.details.redemption.amount_nanodollars","typeLabel":"string"},"description":{"type":"string","description":"What the credit is for, as the promotion describes it.","isRequired":true,"uniqueKey":"error.details.redemption.description","typeLabel":"string"},"redeemed_at":{"type":"string","format":"date-time","isRequired":true,"uniqueKey":"error.details.redemption.redeemed_at","typeLabel":"string\u003cdate-time>"}},"description":"Original promotion redemption returned with 409 promotion_already_redeemed.","uniqueKey":"error.details.redemption","typeLabel":"object"},"scope":{"type":"string","enum":["workspace"],"description":"spend_limit_exceeded only; which configured cap refused admission.","uniqueKey":"error.details.scope","typeLabel":"enum\u003cstring>"},"period":{"type":"string","enum":["total","daily","monthly"],"description":"spend_limit_exceeded only; the cap period that applies.","uniqueKey":"error.details.period","typeLabel":"enum\u003cstring>"},"limit_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact configured USD nanodollars.","uniqueKey":"error.details.limit_nanodollars","typeLabel":"integer"},"requested_nanodollars":{"type":"integer","minimum":1,"description":"spend_limit_exceeded only; exact proposed managed hold.","uniqueKey":"error.details.requested_nanodollars","typeLabel":"integer"},"sign_in_method":{"type":"string","description":"account_exists only: how the existing account with this verified address signs in (google, github, email or other).","uniqueKey":"error.details.sign_in_method","typeLabel":"string"},"masked_email":{"type":"string","description":"account_exists only: that account's address, masked as `t…@gmail.com`.","uniqueKey":"error.details.masked_email","typeLabel":"string"},"failure_reason":{"type":"string","maxLength":100,"description":"Short safe card-decline reason; raw Stripe messages are not returned.","uniqueKey":"error.details.failure_reason","typeLabel":"string"},"names":{"type":"array","uniqueItems":true,"items":{"type":"string","minLength":1,"maxLength":128,"pattern":"^[A-Z][A-Z0-9_]{0,127}$","uniqueKey":"error.details.names.items.[INDEX]","typeLabel":"string"},"description":"All manifest secret names that could not be resolved.","uniqueKey":"error.details.names","typeLabel":"string[]"},"fields":{"type":"array","uniqueItems":true,"items":{"type":"string","enum":["preferences.order","preferences.sort","preferences.allow_fallbacks"],"uniqueKey":"error.details.fields.items.[INDEX]","typeLabel":"enum\u003cstring>"},"description":"routing_overrides_forbidden only; the prohibited request inputs.","uniqueKey":"error.details.fields","typeLabel":"enum\u003cstring>[]"},"volume_id":{"type":"string","description":"BoxRouter Volume ID involved in the error.","uniqueKey":"error.details.volume_id","typeLabel":"string"},"writer_sandbox_id":{"type":"string","description":"volume_busy only; the sandbox that holds the volume's writer lease, when it is a recorded sandbox.","uniqueKey":"error.details.writer_sandbox_id","typeLabel":"string"},"checkpoint":{"type":"integer","minimum":1,"description":"Volume checkpoint involved in the error.","uniqueKey":"error.details.checkpoint","typeLabel":"integer"},"limit_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.limit_bytes","typeLabel":"integer"},"observed_bytes":{"type":"integer","minimum":0,"uniqueKey":"error.details.observed_bytes","typeLabel":"integer"},"mismatch":{"type":"object","additionalProperties":false,"required":["field","recorded","requested"],"properties":{"field":{"type":"string","enum":["image","arch"],"isRequired":true,"uniqueKey":"error.details.mismatch.field","typeLabel":"enum\u003cstring>"},"recorded":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.recorded","typeLabel":"string"},"requested":{"type":"string","isRequired":true,"uniqueKey":"error.details.mismatch.requested","typeLabel":"string"}},"uniqueKey":"error.details.mismatch","typeLabel":"object"},"volume_phase":{"type":"string","enum":["check","branch","lease","identity","install","credential","mount","metadata","checkpoint","commit","write"],"uniqueKey":"error.details.volume_phase","typeLabel":"enum\u003cstring>"},"phase":{"type":"string","enum":["code","setup","files","background","previews"],"description":"Preparation phase that failed.","uniqueKey":"error.details.phase","typeLabel":"enum\u003cstring>"},"command":{"type":"string","description":"Command whose nonzero exit stopped launch preparation.","uniqueKey":"error.details.command","typeLabel":"string"},"exit_code":{"type":"integer","description":"Exit code of the failed command, or of the process that exited before its port listened.","uniqueKey":"error.details.exit_code","typeLabel":"integer"},"stderr_tail":{"type":"string","description":"At most the final 4 KiB of stderr from the failed command, with resolved secret values\nredacted. port_not_listening carries the same tail of the process's stderr.\n","uniqueKey":"error.details.stderr_tail","typeLabel":"string"},"stdout_tail":{"type":"string","description":"port_not_listening only; at most the final 4 KiB of the process's stdout.","uniqueKey":"error.details.stdout_tail","typeLabel":"string"},"agent":{"type":"string","description":"Unknown catalog agent name.","uniqueKey":"error.details.agent","typeLabel":"string"},"port":{"type":"integer","minimum":1,"maximum":65535,"description":"The sandbox port whose preview was refused (preview_access_refused) or that never accepted connections (port_not_listening).","uniqueKey":"error.details.port","typeLabel":"integer"},"revoked":{"type":"boolean","description":"preview_access_refused only; true when the unwanted preview was ended and no\naccess to the port remains. False: it may still be reachable (outcome unknown).\n","uniqueKey":"error.details.revoked","typeLabel":"boolean"},"preview_id":{"type":"string","description":"preview_access_refused only; the identifier the provider gave the preview that may\nstill be reachable. Present only for a public preview.\n","uniqueKey":"error.details.preview_id","typeLabel":"string"},"url":{"type":"string","format":"uri","description":"preview_access_refused only; the address of a public preview that may still be\nreachable. Never present for a private preview, whose address holds a credential,\nand never when it was ended.\n","uniqueKey":"error.details.url","typeLabel":"string\u003curi>"}},"uniqueKey":"error.details","typeLabel":"object"},"doc_url":{"oneOf":[{"type":"string","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.0","typeLabel":"string\u003curi>"},{"type":"null","format":"uri","description":"Where the documentation explains this code: `https://boxrouter.ai/docs/error-codes#` followed by the code, for example `https://boxrouter.ai/docs/error-codes#no_eligible_route`. The page has one anchored row per code with what it means and what to do. BoxRouter sends it with every error; it is null for a code that has no documented row. Clients must accept an error body that omits it.","uniqueKey":"error.doc_url.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.doc_url","typeLabel":"string\u003curi> | null"},"fix":{"oneOf":[{"type":"string","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.0","typeLabel":"string"},{"type":"null","minLength":1,"description":"Actionable change for the caller when the request cannot be completed. A refusal (4xx) always carries one; a server or provider fault, including an error event that ends a terminal or process stream, can answer null.","uniqueKey":"error.fix.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.fix","typeLabel":"string | null"},"operation_id":{"oneOf":[{"type":"string","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.0","typeLabel":"string"},{"type":"null","description":"Durable server operation ID for reconciliation after uncertain mutations.","uniqueKey":"error.operation_id.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.operation_id","typeLabel":"string | null"},"provider":{"oneOf":[{"type":"string","uniqueKey":"error.provider.oneOf.0","typeLabel":"string"},{"type":"null","uniqueKey":"error.provider.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.provider","typeLabel":"string | null"},"native_code":{"oneOf":[{"type":"string","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.0","typeLabel":"string"},{"type":"null","description":"The provider's machine-readable error code, unchanged, when it reports one.","uniqueKey":"error.native_code.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_code","typeLabel":"string | null"},"native_status":{"oneOf":[{"type":"integer","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.0","typeLabel":"integer"},{"type":"null","description":"The provider's HTTP status, unchanged, when the failure came from a provider response.","uniqueKey":"error.native_status.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_status","typeLabel":"integer | null"},"native_message":{"oneOf":[{"type":"string","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.0","typeLabel":"string"},{"type":"null","maxLength":4096,"description":"The provider's own error message when it answered with an HTTP 4xx refusal (for example a plan limit); null otherwise. Capped at 512 characters, with whitespace collapsed. Credential secrets and token-shaped strings are removed before return. The literal `[redacted]` marker is used when all credential secret fields are at least 12 characters; legacy saved secrets shorter than 12 characters are removed without the marker.","uniqueKey":"error.native_message.oneOf.1","typeLabel":"null"}],"uniqueKey":"error.native_message","typeLabel":"string | null"}},"isRequired":true,"uniqueKey":"error","typeLabel":"object"}},"uniqueKey":"","typeLabel":"object"},"examples":{"Example":{"title":"Example","value":{"error":{"code":"\u003cstring>","message":"\u003cstring>","request_id":"\u003cstring>","outcome":"not_started","retry":"safe","retry_after_seconds":1,"details":{"selection_version":1,"considered":1,"excluded":[{"provider":"\u003cstring>"}],"closest":{},"nearest":[{}],"requirement":"\u003cstring>","purchase_id":"\u003cstring>","preview":{"unused":1,"held_excluded":1,"fee":1,"principal":1,"tax":1,"total":1,"card":{"brand":"\u003cstring>","last4":"\u003cstring>","type":"card","email":"jsmith@example.com"}},"quote":{"amount":2,"tax":1,"total":2,"address_required":true,"fee_minor":1,"missing":["\u003cstring>"]},"redemption":{"code":"\u003cstring>","amount_nanodollars":"\u003cstring>","description":"\u003cstring>","redeemed_at":"2023-11-07T05:31:56Z"},"scope":"workspace","period":"total","limit_nanodollars":2,"requested_nanodollars":2,"sign_in_method":"\u003cstring>","masked_email":"\u003cstring>","failure_reason":"\u003cstring>","names":["\u003cstring>"],"fields":["preferences.order"],"volume_id":"\u003cstring>","writer_sandbox_id":"\u003cstring>","checkpoint":2,"limit_bytes":1,"observed_bytes":1,"mismatch":{"field":"image","recorded":"\u003cstring>","requested":"\u003cstring>"},"volume_phase":"check","phase":"code","command":"\u003cstring>","exit_code":123,"stderr_tail":"\u003cstring>","stdout_tail":"\u003cstring>","agent":"\u003cstring>","port":32768,"revoked":true,"preview_id":"\u003cstring>","url":"\u003cstring>"},"doc_url":"\u003cstring>","fix":"\u003cstring>","operation_id":"\u003cstring>","provider":"\u003cstring>","native_code":"\u003cstring>","native_status":123,"native_message":"\u003cstring>"}}}},"exampleType":"generated"}},"exampleType":"generated"}},"security":{"dd0c83e6-beb9-482e-9a5d-60b9e86012e1":{"BoxRouterKey":{"type":"http","scheme":"bearer","description":"BoxRouter API key; never an upstream provider key.","scopes":[],"schemeName":"BoxRouterKey"}},"3a6c0149-9909-4d75-82ec-be6787165396":{"BrowserSession":{"type":"apiKey","in":"cookie","name":"__Host-boxrouter_session","description":"HttpOnly server-side session. Local HTTP uses boxrouter_session. Browser mutations require the session CSRF token and the configured Origin; execution API keys cannot administer sessions or customer keys.","scopes":[],"schemeName":"BrowserSession"}}},"servers":{"38340c0e-1365-48ce-8dcd-74c64a2f69dc":{"url":"https://api.boxrouter.ai/api/v1"}},"processedSecurityOptions":[{"schemes":[{"scheme":{"type":"http","scheme":"bearer","description":"BoxRouter API key; never an upstream provider key.","scopes":[],"schemeName":"BoxRouterKey"},"schema":{"title":"Bearer Auth","type":"string","isRequired":true,"description":"BoxRouter API key; never an upstream provider key.","format":"bearer","typeLabel":"string\u003cbearer>","deprecated":false},"schemeName":"BoxRouterKey","name":"Authorization"}],"title":"BoxRouterKey"},{"schemes":[{"scheme":{"type":"apiKey","in":"cookie","name":"__Host-boxrouter_session","description":"HttpOnly server-side session. Local HTTP uses boxrouter_session. Browser mutations require the session CSRF token and the configured Origin; execution API keys cannot administer sessions or customer keys.","scopes":[],"schemeName":"BrowserSession"},"schema":{"title":"__Host-boxrouter_session","type":"string","description":"HttpOnly server-side session. Local HTTP uses boxrouter_session. Browser mutations require the session CSRF token and the configured Origin; execution API keys cannot administer sessions or customer keys.","isRequired":true,"typeLabel":"string","deprecated":false},"schemeName":"BrowserSession","name":"__Host-boxrouter_session"}],"title":"BrowserSession"}]},"originalFileLocation":"openapi.json"},"subdomain":"nv-4965711d","siteName":"BoxRouter","title":"Rotate a Connected Account's Credentials - BoxRouter","navMaps":{"firstHrefInVersion":{},"firstHrefInLanguage":{}},"lastModified":"2026-11-02T07:39:39.132Z","originalFileLocation":"reference/replace-provider-credentials.md"},"headHtml":"\u003cscript data-mint-head>(function(){var d=document.documentElement,p=null;if(!p){try{p=localStorage.getItem(\"isDarkMode\")}catch(e){}if(p==='true')p='dark';else if(p==='false')p='light';if(p!=='light'\u0026\u0026p!=='dark'\u0026\u0026p!=='system')p=\"dark\"}var r=p==='system'?(matchMedia(\"(prefers-color-scheme: dark)\").matches?'dark':'light'):p;d.classList.remove(r==='dark'?'light':'dark');d.classList.add(r);d.setAttribute(\"data-theme-preference\",p)})();\u003c/script>\u003cmeta data-mint-head name=\"description\" content=\"Replaces a connected account\u0026#x27;s credentials, for example to rotate a key. Needs the provider-accounts:manage permission on the API key (a signed-in dashboard session also works) and the account\u0026#x27;s current expected_version. The new credentials must belong to the same provider. BoxRouter makes one read-only request to the provider and refuses a clear rejection with 422 credentials_rejected; it does not check which account the key belongs to. Requests already running keep the old credentials, and requests that start afterward use the new ones. A provider that is not enabled for you fails with 409 provider_not_enabled. Leave out the connection settings to keep the existing ones. Settings you send must match the existing route; changing the endpoint, proxy or header identity needs a new connected account, not a key rotation. Credentials that run your code need extra authority on the key and an artifact you uploaded. If the new credentials fail to activate, the old version stays in use. A token refresh that already happened with the provider is not undone.\">\u003cmeta data-mint-head name=\"application-name\" content=\"BoxRouter\">\u003cmeta data-mint-head name=\"generator\" content=\"Mintlify\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/android-chrome-192x192.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"apple-touch-icon\" type=\"image/png\" sizes=\"180x180\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/apple-touch-icon.png\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/favicon-16x16.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/favicon-32x32.png\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/favicon.ico\" media=\"(prefers-color-scheme: light)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"192x192\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/android-chrome-192x192.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"16x16\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/favicon-16x16.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"icon\" type=\"image/png\" sizes=\"32x32\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/favicon-32x32.png\" media=\"(prefers-color-scheme: dark)\">\u003clink data-mint-head rel=\"shortcut icon\" type=\"image/x-icon\" href=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon-dark/favicon.ico\" media=\"(prefers-color-scheme: dark)\">\u003cmeta data-mint-head property=\"og:title\" content=\"Rotate a Connected Account\u0026#x27;s Credentials - BoxRouter\">\u003cmeta data-mint-head property=\"og:description\" content=\"Replaces a connected account\u0026#x27;s credentials, for example to rotate a key. Needs the provider-accounts:manage permission on the API key (a signed-in dashboard session also works) and the account\u0026#x27;s current expected_version. The new credentials must belong to the same provider. BoxRouter makes one read-only request to the provider and refuses a clear rejection with 422 credentials_rejected; it does not check which account the key belongs to. Requests already running keep the old credentials, and requests that start afterward use the new ones. A provider that is not enabled for you fails with 409 provider_not_enabled. Leave out the connection settings to keep the existing ones. Settings you send must match the existing route; changing the endpoint, proxy or header identity needs a new connected account, not a key rotation. Credentials that run your code need extra authority on the key and an artifact you uploaded. If the new credentials fail to activate, the old version stays in use. A token refresh that already happened with the provider is not undone.\">\u003cmeta data-mint-head property=\"og:site_name\" content=\"BoxRouter\">\u003cmeta data-mint-head property=\"og:url\" content=\"https://boxrouter.ai/docs/reference/replace-provider-credentials\">\u003cmeta data-mint-head property=\"og:type\" content=\"website\">\u003cmeta data-mint-head property=\"og:image\" content=\"https://nv-4965711d.mintlify.site/docs/_mintlify/api/og/v2?division=Provider+Accounts\u0026amp;title=Rotate+a+Connected+Account%27s+Credentials\u0026amp;description=Replaces+a+connected+account%27s+credentials%2C+for+example+to+rotate+a+key.+Needs+the%0A%60provider-accounts%3Amanage%60+permission+on+the+API+key+%28a+signed-in+dashboard+s\u0026amp;theme=231fc68973f7c9fcdf02f0c3\u0026amp;signature=c6a98439a2a98767b8b3b240dba54a01fde7b97d68025a1c139dc4dc0b51a4bf\">\u003cmeta data-mint-head property=\"og:image:width\" content=\"1200\">\u003cmeta data-mint-head property=\"og:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"twitter:card\" content=\"summary_large_image\">\u003cmeta data-mint-head name=\"twitter:title\" content=\"Rotate a Connected Account\u0026#x27;s Credentials - BoxRouter\">\u003cmeta data-mint-head name=\"twitter:description\" content=\"Replaces a connected account\u0026#x27;s credentials, for example to rotate a key. Needs the provider-accounts:manage permission on the API key (a signed-in dashboard session also works) and the account\u0026#x27;s current expected_version. The new credentials must belong to the same provider. BoxRouter makes one read-only request to the provider and refuses a clear rejection with 422 credentials_rejected; it does not check which account the key belongs to. Requests already running keep the old credentials, and requests that start afterward use the new ones. A provider that is not enabled for you fails with 409 provider_not_enabled. Leave out the connection settings to keep the existing ones. Settings you send must match the existing route; changing the endpoint, proxy or header identity needs a new connected account, not a key rotation. Credentials that run your code need extra authority on the key and an artifact you uploaded. If the new credentials fail to activate, the old version stays in use. A token refresh that already happened with the provider is not undone.\">\u003cmeta data-mint-head name=\"twitter:image\" content=\"https://nv-4965711d.mintlify.site/docs/_mintlify/api/og/v2?division=Provider+Accounts\u0026amp;title=Rotate+a+Connected+Account%27s+Credentials\u0026amp;description=Replaces+a+connected+account%27s+credentials%2C+for+example+to+rotate+a+key.+Needs+the%0A%60provider-accounts%3Amanage%60+permission+on+the+API+key+%28a+signed-in+dashboard+s\u0026amp;theme=231fc68973f7c9fcdf02f0c3\u0026amp;signature=c6a98439a2a98767b8b3b240dba54a01fde7b97d68025a1c139dc4dc0b51a4bf\">\u003cmeta data-mint-head name=\"twitter:image:width\" content=\"1200\">\u003cmeta data-mint-head name=\"twitter:image:height\" content=\"630\">\u003cmeta data-mint-head name=\"msapplication-config\" content=\"/docs/mintlify-assets/_mintlify/favicons/nv-4965711d/q9ftyRpgQlu0T30E/_generated/favicon/browserconfig.xml\">\u003cmeta data-mint-head name=\"apple-mobile-web-app-title\" content=\"BoxRouter\">\u003cmeta data-mint-head name=\"msapplication-TileColor\" content=\"#047857\">\u003clink data-mint-head rel=\"canonical\" href=\"https://boxrouter.ai/docs/reference/replace-provider-credentials\">\u003clink data-mint-head rel=\"alternate\" type=\"application/xml\" href=\"/docs/sitemap.xml\">\u003clink data-mint-head rel=\"alternate\" type=\"text/markdown\" href=\"/docs/reference/replace-provider-credentials.md\">\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https://boxrouter.ai/#organization\",\"name\":\"BoxRouter\",\"url\":\"https://boxrouter.ai\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https://mintcdn.com/nv-4965711d/xqQLsJs3vPQQ6w_V/brand-mark.svg?fit=max\u0026auto=format\u0026n=xqQLsJs3vPQQ6w_V\u0026q=85\u0026s=34456eec220b466fd4503f478e120e5b\"}},{\"@type\":\"WebSite\",\"@id\":\"https://boxrouter.ai/docs#website\",\"name\":\"BoxRouter\",\"url\":\"https://boxrouter.ai/docs\",\"publisher\":{\"@id\":\"https://boxrouter.ai/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials#webpage\",\"url\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials\",\"name\":\"Rotate a Connected Account's Credentials\",\"description\":\"Replaces a connected account's credentials, for example to rotate a key. Needs the provider-accounts:manage permission on the API key (a signed-in dashboard session also works) and the account's current expected_version. The new credentials must belong to the same provider. BoxRouter makes one read-only request to the provider and refuses a clear rejection with 422 credentials_rejected; it does not check which account the key belongs to. Requests already running keep the old credentials, and requests that start afterward use the new ones. A provider that is not enabled for you fails with 409 provider_not_enabled. Leave out the connection settings to keep the existing ones. Settings you send must match the existing route; changing the endpoint, proxy or header identity needs a new connected account, not a key rotation. Credentials that run your code need extra authority on the key and an artifact you uploaded. If the new credentials fail to activate, the old version stays in use. A token refresh that already happened with the provider is not undone.\",\"dateModified\":\"2026-11-02T07:39:39.132Z\",\"isPartOf\":{\"@id\":\"https://boxrouter.ai/docs#website\"},\"breadcrumb\":{\"@id\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials#breadcrumb\"}},{\"@type\":\"BreadcrumbList\",\"@id\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Provider Accounts\",\"item\":\"https://boxrouter.ai/docs/reference/connect-provider-account\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rotate a Connected Account's Credentials\",\"item\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials\"}]},{\"@type\":[\"TechArticle\",\"APIReference\"],\"@id\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials#apireference\",\"headline\":\"Rotate a Connected Account's Credentials\",\"name\":\"Rotate a Connected Account's Credentials\",\"description\":\"Replaces a connected account's credentials, for example to rotate a key. Needs the provider-accounts:manage permission on the API key (a signed-in dashboard session also works) and the account's current expected_version. The new credentials must belong to the same provider. BoxRouter makes one read-only request to the provider and refuses a clear rejection with 422 credentials_rejected; it does not check which account the key belongs to. Requests already running keep the old credentials, and requests that start afterward use the new ones. A provider that is not enabled for you fails with 409 provider_not_enabled. Leave out the connection settings to keep the existing ones. Settings you send must match the existing route; changing the endpoint, proxy or header identity needs a new connected account, not a key rotation. Credentials that run your code need extra authority on the key and an artifact you uploaded. If the new credentials fail to activate, the old version stays in use. A token refresh that already happened with the provider is not undone.\",\"url\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials\",\"mainEntityOfPage\":{\"@id\":\"https://boxrouter.ai/docs/reference/replace-provider-credentials#webpage\"},\"dateModified\":\"2026-11-02T07:39:39.132Z\",\"publisher\":{\"@id\":\"https://boxrouter.ai/#organization\"},\"isPartOf\":{\"@id\":\"https://boxrouter.ai/docs#website\"}}]}\u003c/script>\u003cscript data-mint-head type=\"application/ld+json\">{\"@context\":\"https://schema.org\",\"@type\":\"WebSite\",\"name\":\"BoxRouter\",\"publisher\":{\"@type\":\"Organization\",\"name\":\"BoxRouter\"},\"provider\":{\"@type\":\"Organization\",\"name\":\"Mintlify\",\"url\":\"https://mintlify.com\"}}\u003c/script>","agentPointerHref":"/docs/reference/replace-provider-credentials.md","siteName":"BoxRouter","nav":{"global":null,"tabs":[{"tab":"Guides","pages":[{"title":"Guides","href":""}]},{"tab":"Agents","pages":[{"title":"Agents","href":"/launch/quickstart"}]},{"tab":"GitHub Actions","pages":[{"title":"GitHub Actions","href":"/actions/quickstart"}]},{"tab":"API Reference","groups":[{"group":"Overview","pages":[{"title":"Call the BoxRouter API","sidebarTitle":"Overview","href":"/api-overview"},{"title":"Error Codes","href":"/error-codes"}]},{"group":"Sandboxes","pages":[{"title":"Create a Sandbox","openapi":"openapi.json POST /sandboxes","href":"/reference/create"},{"title":"List Workspace Sandboxes","openapi":"openapi.json GET /sandboxes","href":"/reference/list-sandboxes"},{"title":"Get a Sandbox","openapi":"openapi.json GET /sandboxes/{sandbox_id}","href":"/reference/get"},{"title":"Destroy a Sandbox","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}","href":"/reference/destroy"},{"title":"Explain Routing without Creating","openapi":"openapi.json POST /sandboxes/match","href":"/reference/match"},{"title":"Prove a Headless Chromium in the Sandbox","openapi":"openapi.json POST /sandboxes/{sandbox_id}/browser","href":"/reference/ensure-browser"},{"title":"Pause a Sandbox and Keep It","openapi":"openapi.json POST /sandboxes/{sandbox_id}/pause","href":"/reference/pause-sandbox"},{"title":"Resume the Same Paused Sandbox","openapi":"openapi.json POST /sandboxes/{sandbox_id}/resume","href":"/reference/resume-sandbox"},{"title":"Extend a Sandbox Lifetime","openapi":"openapi.json POST /sandboxes/{sandbox_id}/lifetime","href":"/reference/extend-sandbox-lifetime"},{"title":"Change a Running Sandbox's Outbound Network Policy","openapi":"openapi.json POST /sandboxes/{sandbox_id}/network-policy","href":"/reference/update-network-policy"}]},{"group":"Commands","pages":[{"title":"Run a Buffered Command","openapi":"openapi.json POST /sandboxes/{sandbox_id}/commands","href":"/reference/exec"}]},{"group":"Processes","pages":[{"title":"Start a Durable Background Command","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes","href":"/reference/process-start"},{"title":"Read Process Output from Byte Offsets","openapi":"openapi.json GET /sandboxes/{sandbox_id}/processes/{process_id}","href":"/reference/read-process"},{"title":"Delete a Finished Process's Retained Output","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}/processes/{process_id}","href":"/reference/remove-process"},{"title":"Write Process Input","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes/{process_id}/stdin","href":"/reference/process-stdin"},{"title":"Send Stdin EOF","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes/{process_id}/stdin/close","href":"/reference/process-stdin-close"},{"title":"Cancel a Durable Process","openapi":"openapi.json POST /sandboxes/{sandbox_id}/processes/{process_id}/cancel","href":"/reference/process-cancel"}]},{"group":"Files","pages":[{"title":"Read Exact File Bytes","openapi":"openapi.json GET /sandboxes/{sandbox_id}/files/content","href":"/reference/read"},{"title":"Write Exact File Bytes","openapi":"openapi.json PUT /sandboxes/{sandbox_id}/files/content","href":"/reference/write"},{"title":"Create a Sandbox File Upload","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/uploads","href":"/reference/create-sandbox-upload"},{"title":"Complete a Sandbox File Upload","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/uploads/{upload_id}/complete","href":"/reference/complete-sandbox-upload"},{"title":"Abort a Sandbox File Upload","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}/files/uploads/{upload_id}","href":"/reference/abort-sandbox-upload"},{"title":"Create a Sandbox File Download","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/downloads","href":"/reference/create-sandbox-download"},{"title":"List the Immediate Entries of a Directory","openapi":"openapi.json GET /sandboxes/{sandbox_id}/files/directories","href":"/reference/list-directory"},{"title":"Create a Directory","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/directories","href":"/reference/create-directory"},{"title":"Check for an Accessible Filesystem Target","openapi":"openapi.json GET /sandboxes/{sandbox_id}/files/exists","href":"/reference/path-exists"},{"title":"Remove a File, Symbolic Link or Directory","openapi":"openapi.json POST /sandboxes/{sandbox_id}/files/remove","href":"/reference/remove-path"}]},{"group":"Terminals","pages":[{"title":"Open a Terminal","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals","href":"/reference/open-terminal"},{"title":"Get Observed Terminal State","openapi":"openapi.json GET /sandboxes/{sandbox_id}/terminals/{terminal_id}","href":"/reference/get-terminal"},{"title":"Stream Terminal Output and Its End","openapi":"openapi.json GET /sandboxes/{sandbox_id}/terminals/{terminal_id}/events","href":"/reference/stream-terminal-events"},{"title":"Write Terminal Input","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals/{terminal_id}/input","href":"/reference/write-terminal-input"},{"title":"Resize the Terminal Window","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals/{terminal_id}/resize","href":"/reference/resize-terminal"},{"title":"Hang up the Terminal without Destroying Its Sandbox","openapi":"openapi.json POST /sandboxes/{sandbox_id}/terminals/{terminal_id}/kill","href":"/reference/kill-terminal"}]},{"group":"Previews","pages":[{"title":"List a Sandbox's Open Previews","openapi":"openapi.json GET /sandboxes/{sandbox_id}/previews","href":"/reference/list-previews"},{"title":"Get a URL for a Sandbox Port","openapi":"openapi.json POST /sandboxes/{sandbox_id}/previews","href":"/reference/open-preview"},{"title":"Revoke a Preview","openapi":"openapi.json DELETE /sandboxes/{sandbox_id}/previews/{preview_id}","href":"/reference/revoke-preview"}]},{"group":"Volumes","pages":[{"title":"List Volumes","openapi":"openapi.json GET /volumes","href":"/reference/list-volumes"},{"title":"Create a Volume","openapi":"openapi.json POST /volumes","href":"/reference/create-volume"},{"title":"Get a Volume","openapi":"openapi.json GET /volumes/{volume_id}","href":"/reference/get-volume"},{"title":"Delete a Volume and Its Checkpoints","openapi":"openapi.json DELETE /volumes/{volume_id}","href":"/reference/delete-volume"},{"title":"List Volume Checkpoints","openapi":"openapi.json GET /volumes/{volume_id}/checkpoints","href":"/reference/list-volume-checkpoints"},{"title":"Save a Volume Checkpoint","openapi":"openapi.json POST /volumes/{volume_id}/checkpoints","href":"/reference/save-volume"},{"title":"Get a Volume Checkpoint","openapi":"openapi.json GET /volumes/{volume_id}/checkpoints/{checkpoint}","href":"/reference/get-volume-checkpoint"},{"title":"Delete a Checkpoint","openapi":"openapi.json DELETE /volumes/{volume_id}/checkpoints/{checkpoint}","href":"/reference/delete-volume-checkpoint"},{"title":"Release a Volume's Writer Lease","openapi":"openapi.json DELETE /volumes/{volume_id}/lease","href":"/reference/release-volume-lease"},{"title":"Create a Volume File Upload","openapi":"openapi.json POST /volumes/{volume_id}/uploads","href":"/reference/create-volume-upload"},{"title":"Complete a Volume File Upload","openapi":"openapi.json POST /volumes/{volume_id}/uploads/{upload_id}/complete","href":"/reference/complete-volume-upload"},{"title":"Abort a Volume File Upload","openapi":"openapi.json DELETE /volumes/{volume_id}/uploads/{upload_id}","href":"/reference/abort-volume-upload"},{"title":"Create a Volume File Download","openapi":"openapi.json POST /volumes/{volume_id}/downloads","href":"/reference/create-volume-download"},{"title":"List Files in a Volume","openapi":"openapi.json GET /volumes/{volume_id}/files","href":"/reference/list-volume-files"},{"title":"Delete a Volume File","openapi":"openapi.json DELETE /volumes/{volume_id}/files","href":"/reference/delete-volume-file"}]},{"group":"Images","pages":[{"title":"Prepare an Image on Selected Providers","openapi":"openapi.json POST /images/prepare","href":"/reference/prepare-image"},{"title":"Read Image Preparation Status","openapi":"openapi.json GET /images/preparations","href":"/reference/get-image-preparations"},{"title":"Remove This Workspace's Prepared Image Copies","openapi":"openapi.json POST /images/unprepare","href":"/reference/unprepare-image"}]},{"group":"Operations","pages":[{"title":"List Recorded Workspace Operations","openapi":"openapi.json GET /operations","href":"/reference/list-operations"},{"title":"Get a Mutation's Known Outcome","openapi":"openapi.json GET /operations/{operation_id}","href":"/reference/operation"}]},{"group":"Routing Settings","pages":[{"title":"Read Workspace Routing and Provider Funding","openapi":"openapi.json GET /routing/settings","href":"/reference/get-routing-settings"},{"title":"Update One Workspace Routing Section","openapi":"openapi.json PUT /routing/settings","href":"/reference/update-routing-settings"},{"title":"Preview Workspace Route Availability without Dispatch","openapi":"openapi.json GET /routing/preview","href":"/reference/get-routing-preview"}]},{"group":"Providers","pages":[{"title":"List Available Provider Routes","openapi":"openapi.json GET /providers","href":"/reference/list-providers"}]},{"group":"Price Versions","pages":[{"title":"List the Providers' Live Price Versions","openapi":"openapi.json GET /price-versions","href":"/reference/list-price-versions"}]},{"group":"Agent Catalog","pages":[{"title":"List Launch Agents","openapi":"openapi.json GET /agents","href":"/reference/agents-list"},{"title":"Get a Launch Agent Manifest","openapi":"openapi.json GET /agents/{name}","href":"/reference/agents-get"}]},{"group":"Agent Launches","pages":[{"title":"Create an Agent Launch","openapi":"openapi.json POST /launches","href":"/reference/launch-create"},{"title":"Get Launch Status and Phase Progress","openapi":"openapi.json GET /launches/{operation_id}","href":"/reference/get-launch-operation"},{"title":"Get What a Launch Asked For","openapi":"openapi.json GET /launches/{operation_id}/settings","href":"/reference/get-launch-settings"},{"title":"Get Unattended Command State","openapi":"openapi.json GET /launches/{operation_id}/command","href":"/reference/get-launch-command"},{"title":"Check Whether This Workspace Can Read a Repository","openapi":"openapi.json GET /repositories/{owner}/{repo}/access","href":"/reference/check-repository-access"}]},{"group":"Launch Runs","pages":[{"title":"List Launch Runs","openapi":"openapi.json GET /launch-runs","href":"/reference/list-launch-runs"},{"title":"Start an Unattended Launch Run","openapi":"openapi.json POST /launch-runs","href":"/reference/create-launch-run"},{"title":"Read Launch Run Metadata","openapi":"openapi.json GET /launch-runs/{run_id}","href":"/reference/get-launch-run"},{"title":"Stop a Launch Run","openapi":"openapi.json POST /launch-runs/{run_id}/stop","href":"/reference/stop-launch-run"},{"title":"Destroy One Launch-Run Copy","openapi":"openapi.json POST /launch-runs/{run_id}/copies/{copy_index}/destroy","href":"/reference/destroy-launch-run-copy"}]},{"group":"Workspace Secrets","pages":[{"title":"List Workspace Secret Names","openapi":"openapi.json GET /secrets","href":"/reference/secrets-list"},{"title":"Store a Workspace Secret","openapi":"openapi.json PUT /secrets/{name}","href":"/reference/secrets-put"},{"title":"Delete a Workspace Secret","openapi":"openapi.json DELETE /secrets/{name}","href":"/reference/secrets-delete"}]},{"group":"Artifacts","pages":[{"title":"Upload a Staged Input","openapi":"openapi.json POST /artifacts","href":"/reference/upload-artifact"},{"title":"Inspect a Staged Artifact","openapi":"openapi.json GET /artifacts/{artifact_id}","href":"/reference/get-artifact"},{"title":"Remove a Staged Artifact","openapi":"openapi.json DELETE /artifacts/{artifact_id}","href":"/reference/delete-artifact"}]},{"group":"GitHub","pages":[{"title":"List GitHub App Installations Linked to This Workspace","openapi":"openapi.json GET /github/installations","href":"/reference/list-github-installations"},{"title":"Unlink a GitHub App Installation from This Workspace","openapi":"openapi.json DELETE /github/installations/{installation_id}","href":"/reference/unlink-github-installation"},{"title":"List Repositories Visible through a Linked Installation","openapi":"openapi.json GET /github/repositories","href":"/reference/list-github-repositories"}]},{"group":"GitHub Actions","pages":[{"title":"Batch Actions Enablement and Defaults for the Given Repositories","openapi":"openapi.json GET /actions/repositories","href":"/reference/list-actions-repositories"},{"title":"Get Actions Enablement and Defaults for a Repository","openapi":"openapi.json GET /actions/repositories/{repository_id}","href":"/reference/get-actions-repository"},{"title":"Enable or Update Actions Defaults for a Repository","openapi":"openapi.json PUT /actions/repositories/{repository_id}","href":"/reference/update-actions-repository"},{"title":"Read Actions Runner and Workspace Funding Readiness","openapi":"openapi.json GET /actions/readiness","href":"/reference/get-actions-readiness"},{"title":"Read the Recommended Actions Runner Labels and Resource Floors","openapi":"openapi.json GET /actions/runner-catalog","href":"/reference/get-actions-runner-catalog"},{"title":"List Workspace Actions Policies","openapi":"openapi.json GET /actions/policies","href":"/reference/list-actions-policies"},{"title":"Create a Named Workspace Actions Policy","openapi":"openapi.json POST /actions/policies","href":"/reference/create-actions-policy"},{"title":"Get a Workspace Actions Policy","openapi":"openapi.json GET /actions/policies/{policy_id}","href":"/reference/get-actions-policy"},{"title":"Replace a Workspace Actions Policy","openapi":"openapi.json PUT /actions/policies/{policy_id}","href":"/reference/update-actions-policy"},{"title":"Delete an Unused Workspace Actions Policy","openapi":"openapi.json DELETE /actions/policies/{policy_id}","href":"/reference/delete-actions-policy"},{"title":"Preview Actions Label and Policy Eligibility","openapi":"openapi.json POST /actions/preview","href":"/reference/preview-actions"},{"title":"List Workspace Actions Workflow-Run Projections","openapi":"openapi.json GET /actions/runs","href":"/reference/list-actions-runs"},{"title":"Count the Values Each Run Filter Offers","openapi":"openapi.json GET /actions/runs/facets","href":"/reference/list-actions-run-facets"},{"title":"Get the Billed Time of Runners That Served No Job","openapi":"openapi.json GET /actions/pool-idle-time","href":"/reference/get-actions-pool-idle-time"},{"title":"Get a Workflow-Run Projection and Aggregate Billing Evidence","openapi":"openapi.json GET /actions/runs/{run_id}","href":"/reference/get-actions-run"},{"title":"List GitHub Jobs Projected for a Workflow Run","openapi":"openapi.json GET /actions/runs/{run_id}/jobs","href":"/reference/list-actions-run-jobs"},{"title":"List Placements Attempted for a Workflow Run","openapi":"openapi.json GET /actions/runs/{run_id}/placements","href":"/reference/list-actions-run-placements"},{"title":"Get an Actions Job Projection","openapi":"openapi.json GET /actions/jobs/{job_id}","href":"/reference/get-actions-job"},{"title":"Get GitHub Workflow Steps for an Actions Job","openapi":"openapi.json GET /actions/jobs/{job_id}/steps","href":"/reference/get-actions-job-steps"},{"title":"Read a Bounded Prefix of the Selected GitHub Job Log","openapi":"openapi.json GET /actions/jobs/{job_id}/logs","href":"/reference/get-actions-job-logs"},{"title":"Read a Bounded Prefix of One GitHub Step Log","openapi":"openapi.json GET /actions/jobs/{job_id}/steps/{step_position}/logs","href":"/reference/get-actions-job-step-logs"},{"title":"List Actions Step Events for a Job","openapi":"openapi.json GET /actions/jobs/{job_id}/events","href":"/reference/get-actions-job-events"},{"title":"Get an Actions Placement and Its Cost and Cleanup Evidence","openapi":"openapi.json GET /actions/placements/{placement_id}","href":"/reference/get-actions-placement"},{"title":"Ask GitHub to Cancel the Entire Workflow Run","openapi":"openapi.json POST /actions/runs/{run_id}/cancel","href":"/reference/cancel-actions-run"},{"title":"Ask GitHub to Rerun the Entire Workflow","openapi":"openapi.json POST /actions/runs/{run_id}/rerun","href":"/reference/rerun-actions-run"},{"title":"Ask GitHub to Rerun Failed Jobs and Their Dependents","openapi":"openapi.json POST /actions/runs/{run_id}/rerun-failed-jobs","href":"/reference/rerun-actions-run-failed-jobs"}]},{"group":"Provider Accounts","pages":[{"title":"Connect a Provider Account","openapi":"openapi.json POST /provider-accounts","href":"/reference/connect-provider-account"},{"title":"List Connected Accounts","openapi":"openapi.json GET /provider-accounts","href":"/reference/list-provider-accounts"},{"title":"Test Provider Credentials without Saving Them","openapi":"openapi.json POST /provider-accounts/test","href":"/reference/test-provider-credentials"},{"title":"Get Connected-Account Metadata","openapi":"openapi.json GET /provider-accounts/{account_id}","href":"/reference/get-provider-account"},{"title":"Remove a Connected Account","openapi":"openapi.json DELETE /provider-accounts/{account_id}","description":"Requires `provider-accounts:manage` on API keys; dashboard browser sessions are also\nauthorized. Reject with 409 while owned\nresources, pending mutations or unresolved cleanup still depend on this\ncredential. Never orphan sandboxes silently or transfer them to managed\nbilling. Removes the stored secret; does not revoke the upstream token.\nFor callable credentials, close all unreferenced factory workers and remove\ntheir retained code/configuration and acquired secrets. Pending acquisitions\nand retained credential-version dependencies also prevent disconnection.\n\nRemoval waits for work already running on the account (standard-image setup,\nActions runner-image checks), which can take minutes. With `wait=false` the\nrequest returns 202 at once with the account and `disconnect.state:\ndisconnecting`, and finishes in the background: read the account until it\nreturns 404 (removed) or `disconnect.state: failed`, whose `error` is the\nrefusal this request would otherwise have returned, with the account still\nconnected. Repeating the request while a removal runs returns the same 202 and\nstarts nothing new.\n","href":"/reference/disconnect-provider-account"},{"title":"Rotate a Connected Account's Credentials","openapi":"openapi.json PUT /provider-accounts/{account_id}/credentials","href":"/reference/replace-provider-credentials"},{"title":"Test a Saved Provider Account","openapi":"openapi.json POST /provider-accounts/{account_id}/test","description":"Requires `provider-accounts:manage` on API keys; dashboard browser sessions are also\nauthorized. The credential check makes one read-only provider request using the saved\ncredentials and returns the provider's native status and body, limited to 4096 characters.\nA successful test can update account health and register provider event webhooks. It\nstarts no sandbox and prepares no image; run the standard image setup to prepare the\nstandard image before the first sandbox needs it. The response reports the credential\ncheck.\nFails with `409 provider_not_enabled` when this provider is not enabled for you.\n","href":"/reference/test-provider-account"},{"title":"Run the Standard Image Setup Proof","openapi":"openapi.json POST /provider-accounts/{account_id}/standard-image/setup","href":"/reference/setup-provider-standard-image"}]},{"group":"Credits and Billing","pages":[{"title":"Get the Workspace Credit Balance","openapi":"openapi.json GET /credits","href":"/reference/get-credits"},{"title":"Start a Credit Purchase through Checkout or a Saved Card","openapi":"openapi.json POST /credits/purchases","href":"/reference/create-credit-purchase"},{"title":"List Recent Credit Purchases","openapi":"openapi.json GET /credits/purchases","href":"/reference/list-credit-purchases"},{"title":"Preview a Credit Purchase and Its Tax","openapi":"openapi.json POST /credits/purchases/quote","href":"/reference/quote-credit-purchase"},{"title":"List Managed-Compute Credit Movements","openapi":"openapi.json GET /credits/usage","href":"/reference/list-credit-usage"},{"title":"List Grouped Managed and BYOK Sandbox Usage","openapi":"openapi.json GET /usage","href":"/reference/list-usage-report"},{"title":"Export Grouped Managed and BYOK Sandbox Usage as CSV","openapi":"openapi.json GET /usage.csv","href":"/reference/export-usage-report-csv"},{"title":"Get One Credit Purchase","openapi":"openapi.json GET /credits/purchases/{purchase_id}","href":"/reference/get-credit-purchase"},{"title":"Close an Unpaid Checkout Session","openapi":"openapi.json POST /credits/purchases/{purchase_id}/cancel","href":"/reference/cancel-credit-purchase"},{"title":"Redeem a Promotion Code for Free Credit","openapi":"openapi.json POST /credits/promotions","href":"/reference/redeem-credit-promotion"},{"title":"List Redeemed Promotion Codes","openapi":"openapi.json GET /credits/promotions","href":"/reference/list-credit-promotions"},{"title":"Get Workspace Billing Details","openapi":"openapi.json GET /credits/billing-details","href":"/reference/get-credit-billing-details"},{"title":"Replace Workspace Billing Details","openapi":"openapi.json PUT /credits/billing-details","href":"/reference/update-credit-billing-details"},{"title":"Get Workspace Credit Alert Settings","openapi":"openapi.json GET /credits/alerts","href":"/reference/get-credit-alerts"},{"title":"Replace Workspace Credit Alert Settings","openapi":"openapi.json PUT /credits/alerts","href":"/reference/update-credit-alerts"},{"title":"List Saved Workspace Payment Methods","openapi":"openapi.json GET /credits/payment-methods","href":"/reference/list-credit-payment-methods"},{"title":"Start Hosted Setup for a Saved Payment Method","openapi":"openapi.json POST /credits/payment-methods/setup","href":"/reference/create-credit-payment-method-setup"},{"title":"Start in-Page Saved Card Setup","openapi":"openapi.json POST /credits/payment-methods/setup-intent","href":"/reference/create-credit-payment-method-setup-intent"},{"title":"Set Saved Card Charge Order","openapi":"openapi.json PUT /credits/payment-methods/order","href":"/reference/reorder-credit-payment-methods"},{"title":"Get a Saved Payment Method Setup Status","openapi":"openapi.json GET /credits/payment-method-setups/{setup_id}","href":"/reference/get-credit-payment-method-setup"},{"title":"Remove a Saved Workspace Payment Method","openapi":"openapi.json DELETE /credits/payment-methods/{payment_method_id}","href":"/reference/delete-credit-payment-method"},{"title":"Set the Workspace's Default Saved Card","openapi":"openapi.json POST /credits/payment-methods/{payment_method_id}/default","href":"/reference/set-credit-default-payment-method"},{"title":"Get Automatic Credit Top-up Settings","openapi":"openapi.json GET /credits/auto-top-up","href":"/reference/get-credit-auto-top-up"},{"title":"Replace Automatic Credit Top-up Settings","openapi":"openapi.json PUT /credits/auto-top-up","href":"/reference/update-credit-auto-top-up"}]},{"group":"Spend Limits","pages":[{"title":"List Managed-Compute Spend Limits","openapi":"openapi.json GET /spend-limits","href":"/reference/list-spend-limits"},{"title":"Set a Managed-Compute Spend Cap","openapi":"openapi.json PUT /spend-limits/{scope}","href":"/reference/set-spend-limit"},{"title":"Clear a Managed-Compute Spend Cap","openapi":"openapi.json DELETE /spend-limits/{scope}","href":"/reference/clear-spend-limit"}]}]}]},"basePath":"","title":"Rotate a Connected Account's Credentials - BoxRouter","buildId":"dpl_Aw98ji4XvBsgtZwL1VrkUF9ehFqz","deploymentId":"dpl_Aw98ji4XvBsgtZwL1VrkUF9ehFqz","dynamics":["c2aa737661","2b790eda92","b0f84f53ff","a9bb46feb3"],"chunks":["OpenApiReferenceProvider-CQGbdtm4.js","utils-D88A1f-Z.js","cloneDeep-izs3Hzxb.js","_Uint8Array-BVIqJ90l.js","isObjectLike-C8vmzPEN.js","isArray-Dcu1dQ5t.js","utils-ChqWdz1A.js","toString-BX-iyh8G.js","isSymbol-CSH9U2Gm.js","addUniqueKeysToSchema-yBrxdh_6.js","snippetPresets-BgqDrFJC.js","style-to-object-BY3JEAdk.js","v4-DIgz8zy6.js","conditional-requirements-CFM0id0Q.js","ApiExamples-Duxc2rZw.js","isEqual-BfaiBbcl.js","usePlaygroundInputsStore-C7jidOil.js","shallow-xkjpHm-U.js","getApiPlaygroundDisplay-fE3rVpvL.js","CodeSnippet-LgxljKed.js","CodeSnippets-D-pXWDHq.js","Page-C2-BijcO.js","getPastedJson-CLRcu-uo.js","icon-Cxirpjgo.js","MethodPill-D49eqY5e.js","DuplicateIcon-CivCz5Rp.js","createIcon-D71qL3f5.js","DynamicMarkdown-BcGRTrw6.js","SectionHeading-DzaqmmSD.js","axios-vUo_bRtp.js","Markdown-CZqUYmMp.js","clsx-B6IZIRsp.js","lib-DuNMoZ05.js","lib-B8HbPgcC.js","html-void-elements-mCSPHezU.js","dist-B0ZV6X5T.js","katex-YMM-FMeD.js","marked.esm-CZWythHk.js","AssistantPageLink-MqLyPtsW.js"]}