Improve public reference completeness

Author: muxx

reference/manifest.json

@@ -3,43 +3,43 @@
     "connect/filesystem.md": "1cc1e81386810d3c5c999458e02340e3becb3da8138d943558584094750e5aae",
     "connect/process.md": "037574455e9e8c5159c391d8c007e7272560f62c4e5ee681f8aec29f9cd24539",
     "openapi/control-plane.yml": "99e42c340a18ac1f3bda9321d347b01f6bd8326c39373e92797bfb179ee0a0bf",
-    "openapi/envd.yml": "c8cb85cbdcfb0ae4ed55a3a0cd6f58b17a23b14bfe74be904a160e770c6e91c3",
+    "openapi/envd.yml": "334700432025fcdfd9f95f9e58d90e6290b835015a24f269548eba5500c0df4f",
     "openapi/markdown/assignTemplateTags.md": "3ec3dc705cbda5780d0a9e78234c7777f014784b2ec193821b6f5bb2ea26ec57",
-    "openapi/markdown/composeFiles.md": "3e5c37b40268689b6e5287a906c75b80f71fefafe94205c6327c976ca0594d5c",
+    "openapi/markdown/composeFiles.md": "172894794d346ac42d1357e28aafa5c6daea32f361977d0e8d7ac43b04c61577",
     "openapi/markdown/connectSandbox.md": "9106d09a6f525aa0bcbd1eed06de62a4d015d1f6fa63496ccb6aebbebb3ad332",
-    "openapi/markdown/createSandbox.md": "42b8b28e9aac9bcbbacec9dec346d043340f8c94ac497147a80910341572226f",
+    "openapi/markdown/createSandbox.md": "3bf499af52b01f87e48dfa56c0af227d4d22f755444118e8a8422b216c851f8d",
     "openapi/markdown/createSnapshot.md": "433724d1260fd60e68268a2984f7ca7ae54a1cad120fb25a026b6a6518af004f",
     "openapi/markdown/createTemplate.md": "b31935eef9b0c29bcd9402f7401a4159c349bed8b3e5458c4490870574bc2974",
     "openapi/markdown/deleteTemplate.md": "3f9a6ab1e0ab144f0a68e41938ef23fd07ac2509b16f6b4b9df5478e54a5865c",
     "openapi/markdown/deleteTemplateTags.md": "1b907ed1b5d9cd55a3b21f46c207217af8a4efe0fe6ccb56a8f988567fc27395",
-    "openapi/markdown/downloadFile.md": "d687f0fadf42a0c8d40324fbf6a732677dae38ed1cf02a755cf86eb9a5155abc",
-    "openapi/markdown/forkSandbox.md": "bc7846648216b1104ed1d1661eb08b9881b3fef7616bfae49542eca1d228e76e",
-    "openapi/markdown/getEnvironmentHealth.md": "640c9435ce216a6fd0e5da7ee646d8527e5de428c946fad219946f5c1de5622a",
-    "openapi/markdown/getEnvironmentMetrics.md": "fb7ce3264e1500da24b21a07b5b180110fa573fc3fb476c146f4529c16e7c089",
-    "openapi/markdown/getEnvironmentVariables.md": "12803bbc7e3f2638e16f013ce05b2a688d8085739e38049c1022452fd7881e50",
-    "openapi/markdown/getSandbox.md": "9e9f1200583b9abb206e7c69e9d4157403297042d2dd1e57e5bd804962073a91",
-    "openapi/markdown/getSandboxLogs.md": "6641f57b0ef9f7e029b66deb472616ea4abe54f3884b3021bfcf97b37920a598",
+    "openapi/markdown/downloadFile.md": "828154a446933bd19b1f20ca9170f6e93f2f80872fc08e92e46d339872e8f45c",
+    "openapi/markdown/forkSandbox.md": "84962addf6f2d49e40aaaca2e27f79e8e98991f703c7374e8852d4e47944dbc4",
+    "openapi/markdown/getEnvironmentHealth.md": "7595329f0fceb5ba613d73f8c522287f7836651d9a2dc44002a149c3ca8c57bf",
+    "openapi/markdown/getEnvironmentMetrics.md": "d6ebfaa682e3e2b6489703daf643b887362f5fdca055f9f3b2367143b03a5112",
+    "openapi/markdown/getEnvironmentVariables.md": "58fe720040afa68bc542c0416378bab9642dbfe73d397b923b220e44bb4c2f54",
+    "openapi/markdown/getSandbox.md": "fb4a7184f903a8bdd8c3b7ea1d00b10d17d26c6dc56b1e7f1a07f91f99aee09d",
+    "openapi/markdown/getSandboxLogs.md": "a3055767e82145d9c0cb1953ee1081489c0098200018802292634e4cb3c830c2",
     "openapi/markdown/getSandboxMetrics.md": "1572d44d0ff539495dadcbb909bb1e640b73375fcb4b0840243e692066162ace",
     "openapi/markdown/getTeamMetrics.md": "063860650df86f09f1119f441b1410b1e329dd20000cf1b1f8a1f84fdcbdac53",
     "openapi/markdown/getTeamMetricsMax.md": "5e5e6578470d1710c993ae69a91b34badaaa86e62e141eb91e57c6e0f7594fe6",
-    "openapi/markdown/getTemplate.md": "fa972635535ecb1b19324216185f75c90fe81520ed79dc7e20a0894306e054b3",
-    "openapi/markdown/getTemplateBuildLogs.md": "c1dc222e7ab5268897e8fdda893d1264ac9162db146fb89bbe6c9833f350ab7f",
-    "openapi/markdown/getTemplateBuildStatus.md": "26741b144d7ce26f353173bd0665b30925e6161d914317fb994bae5c2b4d0d3d",
+    "openapi/markdown/getTemplate.md": "a4747e42b28bb014ae4eb3b5477fe6d58cfda25c00ae829c339cfb7ef5ec6715",
+    "openapi/markdown/getTemplateBuildLogs.md": "5f696d204a13be42ce9df32b51ac4680b853231595d84e14aca9db7e05b385ff",
+    "openapi/markdown/getTemplateBuildStatus.md": "7ef1697ca9b6c3d44624df8ca528fdc5e4f81ebd226c748ae2183b2e99e27757",
     "openapi/markdown/getTemplateByAlias.md": "2a42010266038d50581e3526becf1f35ad3ada6eecd757522b083817fe435301",
     "openapi/markdown/getTemplateUploadUrl.md": "b06cb4aaed389e75daa8e509e3437a23915aad2b03ef6e69597df67984a48b19",
     "openapi/markdown/killSandbox.md": "c864528a36849a512be77bf144ef7d41356f01cb0dbbe1d2f5143712a95268f2",
-    "openapi/markdown/listSandboxMetrics.md": "b945d76f80dc2fef506d2f21183bca49ddb045773b8895b6412e435e5c9d6d7f",
-    "openapi/markdown/listSandboxes.md": "7744505b60b94d1c8db8c1b7a1a66bcf9bdb8f51a46b13b5a90349e562924f59",
+    "openapi/markdown/listSandboxMetrics.md": "38cc35b6d1087635efc6fa351da48402a021f12b185e3bbfbafacc64a34b8d87",
+    "openapi/markdown/listSandboxes.md": "ebb79c21ab83ad61ea2e7c738fa2f77d37c001e2d09142508209e7beab687aeb",
     "openapi/markdown/listSnapshots.md": "d7f7ae67491c5da2930181b0fe423ef8ad661f5f4e7e88f47ecfb58cb08ac83f",
     "openapi/markdown/listTemplateTags.md": "df27ed0dc04e6b49a3dc92704842e30365f50e88c8e28e6a5323a16aa10b7c45",
     "openapi/markdown/listTemplates.md": "e89b7d18efcfa6e16385e6b4e2f227ad2e5c9fa7608426ece673077a35468e12",
     "openapi/markdown/pauseSandbox.md": "0d1e7dd52ca966d37742e7d34898559dfd03c4ba3ca7f83f1859ddaefa9b0464",
     "openapi/markdown/refreshSandbox.md": "dea1862241aad45c17b194994722a23941263bb697b885e795ba97cf154469bd",
     "openapi/markdown/setSandboxTimeout.md": "ee0aaf78e2c0ffcdf4df1bde703fd4442d5436efad290bc235d1acc120adb997",
-    "openapi/markdown/startTemplateBuild.md": "befd11983028352bd7bf727113deb9bbb7d86d7b02385441111f4de46087173c",
-    "openapi/markdown/updateSandboxNetwork.md": "3449bd43a4e46c35d3f8ec314a47876ec06f85a8a75e4255212a85cb7a4c3e53",
+    "openapi/markdown/startTemplateBuild.md": "f987c7627a0170ff2908fd344d76acea3b2d8f7875686ff746ad8a8b2b3922c4",
+    "openapi/markdown/updateSandboxNetwork.md": "0254acd4dca8299bd7198024660bb1300752c6842f225c604389dd1951333675",
     "openapi/markdown/updateTemplate.md": "ace7930be4091213fc2e29a7109f489eaaf3a0e1d210aa65d9663a5adbf92250",
-    "openapi/markdown/uploadFile.md": "fe1dcc1b1eaad25ecd73f8c00a49c94ca7c2686fbdb6f3e2fbbebbfec6928806",
+    "openapi/markdown/uploadFile.md": "2c3b042f305f2e7234799f0af14979965e76a10ced1a74a464bb6afd96c5c68c",
     "openapi/operations.json": "f5097d93fb7eb5f6482e632624d5a212e29441ef8c558601ccbe2dae26db050d",
     "sdk/cli/auth.md": "0b2c75262b0c0670c7bc0f0f3cbed65fbe4a16d6fe4437789a5685b8bf2174a1",
     "sdk/cli/sandbox.md": "16b64c5a4e932eca2452e400e0faf154eba1d3c7373513aa7cd9744e02908313",

reference/openapi/envd.yml

@@ -16,6 +16,9 @@ paths:
       operationId: getEnvironmentHealth
       tags:
       - environment
+      parameters:
+      - $ref: '#/components/parameters/AgentboxSandboxId'
+      - $ref: '#/components/parameters/AgentboxSandboxPort'
       security: []
   /metrics:
     get:
@@ -30,6 +33,9 @@ paths:
       operationId: getEnvironmentMetrics
       tags:
       - environment
+      parameters:
+      - $ref: '#/components/parameters/AgentboxSandboxId'
+      - $ref: '#/components/parameters/AgentboxSandboxPort'
       security:
       - {}
       - AccessTokenAuth: []
@@ -46,6 +52,9 @@ paths:
       operationId: getEnvironmentVariables
       tags:
       - environment
+      parameters:
+      - $ref: '#/components/parameters/AgentboxSandboxId'
+      - $ref: '#/components/parameters/AgentboxSandboxPort'
       security:
       - {}
       - AccessTokenAuth: []
@@ -55,6 +64,8 @@ paths:
       tags:
       - files
       parameters:
+      - $ref: '#/components/parameters/AgentboxSandboxId'
+      - $ref: '#/components/parameters/AgentboxSandboxPort'
       - $ref: '#/components/parameters/FilePath'
       - $ref: '#/components/parameters/User'
       - $ref: '#/components/parameters/Signature'
@@ -122,6 +133,8 @@ paths:
       tags:
       - files
       parameters:
+      - $ref: '#/components/parameters/AgentboxSandboxId'
+      - $ref: '#/components/parameters/AgentboxSandboxPort'
       - $ref: '#/components/parameters/FilePath'
       - $ref: '#/components/parameters/User'
       - $ref: '#/components/parameters/Signature'
@@ -173,6 +186,9 @@ paths:
         '507':
           $ref: '#/components/responses/NotEnoughDiskSpace'
       operationId: composeFiles
+      parameters:
+      - $ref: '#/components/parameters/AgentboxSandboxId'
+      - $ref: '#/components/parameters/AgentboxSandboxPort'
       security:
       - {}
       - AccessTokenAuth: []
@@ -209,6 +225,21 @@ components:
         used with the signature parameter.
       schema:
         type: integer
+    AgentboxSandboxId:
+      name: Agentbox-Sandbox-Id
+      in: header
+      required: true
+      description: Identifier of the sandbox that receives the request.
+      schema:
+        type: string
+    AgentboxSandboxPort:
+      name: Agentbox-Sandbox-Port
+      in: header
+      required: true
+      description: Internal envd HTTP port exposed through the sandbox proxy.
+      schema:
+        type: integer
+        default: 49983
   requestBodies:
     File:
       required: true
@@ -399,3 +430,6 @@ components:
       type: apiKey
       in: header
       name: X-Access-Token
+servers:
+- url: https://sandbox.agentbox-runtime.ru
+  description: AgentBox sandbox proxy. Routing headers are required.

reference/openapi/markdown/composeFiles.md

@@ -2,6 +2,16 @@
 
 Compose multiple files into a single file using zero-copy concatenation. Source files are deleted after successful composition.
 
+## Parameters
+
+- **`Agentbox-Sandbox-Id`** · `string` · header · required
+
+  Identifier of the sandbox that receives the request.
+
+- **`Agentbox-Sandbox-Port`** · `integer` · header · required
+
+  Internal envd HTTP port exposed through the sandbox proxy.
+
 ## Request body
 
 Required: yes
@@ -48,6 +58,8 @@ Schema: `EntryInfo`
 
   User-defined metadata stored as extended attributes on the file.
 
+- **`metadata.*`** · `string` · additional property
+
 ### 400
 
 Invalid path

reference/openapi/markdown/createSandbox.md

@@ -32,6 +32,10 @@ Schema: `NewSandbox`
 
   Auto-resume configuration for paused sandboxes.
 
+- **`autoResume.enabled`** · `SandboxAutoResumeEnabled` · required
+
+  Auto-resume enabled flag for paused sandboxes. Default false.
+
 - **`secure`** · `boolean` · optional
 
   Secure all system communication with sandbox
@@ -42,18 +46,74 @@ Schema: `NewSandbox`
 
 - **`network`** · `SandboxNetworkConfig` · optional
 
+- **`network.allowPublicTraffic`** · `boolean` · optional
+
+  Specify if the sandbox URLs should be accessible only with authentication.
+
+- **`network.allowOut`** · `array<string>` · optional
+
+  List of allowed destinations for egress traffic. Each entry can be a CIDR block (e.g. "8.8.8.8/32"), a bare IP address (e.g. "8.8.8.8"), or a domain name (e.g. "example.com", "*.example.com"). Allowed entries always take precedence over denied entries.
+
+- **`network.denyOut`** · `array<string>` · optional
+
+  List of denied CIDR blocks or IP addresses for egress traffic. Domain names are not supported for deny rules.
+
+- **`network.maskRequestHost`** · `string` · optional
+
+  Specify host mask which will be used for all sandbox requests
+
+- **`network.rules`** · `object` · optional
+
+  Per-domain transform rules applied to matching egress HTTP/HTTPS requests. Keys are domains (e.g. "api.example.com", "example.com"). A domain listed here is not automatically allowed - use allowOut to permit the traffic.
+
+- **`network.rules.*`** · `array<SandboxNetworkRule>` · additional property
+
+- **`network.rules.*.transform`** · `SandboxNetworkTransform` · optional
+
+  Transformations applied to matching egress requests before forwarding.
+
+- **`network.rules.*.transform.headers`** · `object` · optional
+
+  HTTP headers to inject or override in matching requests. An existing header with the same name is replaced. Values are plain strings; secret resolution happens client-side before sending to the API.
+
+- **`network.rules.*.transform.headers.*`** · `string` · additional property
+
 - **`metadata`** · `SandboxMetadata` · optional
 
+- **`metadata.*`** · `string` · additional property
+
+  Metadata of the sandbox
+
 - **`envVars`** · `EnvVars` · optional
 
+- **`envVars.*`** · `string` · additional property
+
+  Environment variables for the sandbox
+
 - **`mcp`** · `Mcp` · optional
 
   MCP configuration for the sandbox
 
+- **`mcp.*`** · `object` · additional property
+
 - **`iam`** · `SandboxIam` · optional
 
   Sandbox workload identity configuration. A non-empty, valid tokens map enables workload identity for the sandbox.
 
+- **`iam.tokens`** · `SandboxIamTokens` · optional
+
+  Named workload-token definitions, keyed by a caller-chosen token name.
+
+- **`iam.tokens.*`** · `SandboxIamToken` · additional property
+
+- **`iam.tokens.*.audience`** · `string` · required
+
+  Audience of the workload token, stored exactly as provided.
+
+- **`iam.tokens.*.tokenType`** · `string` · required
+
+  Workload token type.
+
 ## Responses
 
 ### 201

reference/openapi/markdown/downloadFile.md

@@ -4,6 +4,14 @@ Download a file
 
 ## Parameters
 
+- **`Agentbox-Sandbox-Id`** · `string` · header · required
+
+  Identifier of the sandbox that receives the request.
+
+- **`Agentbox-Sandbox-Port`** · `integer` · header · required
+
+  Internal envd HTTP port exposed through the sandbox proxy.
+
 - **`path`** · `string` · query · optional
 
   Path to the file, URL encoded. Can be relative to the user's home directory (e.g. "file.txt" resolves to ~/file.txt).

reference/openapi/markdown/forkSandbox.md

@@ -36,8 +36,36 @@ Schema: `array<SandboxForkResult>`
 
 - **`sandbox`** · `Sandbox` · optional
 
+- **`sandbox.templateID`** · `string` · required
+
+  Identifier of the template from which is the sandbox created
+
+- **`sandbox.sandboxID`** · `string` · required
+
+  Identifier of the sandbox
+
+- **`sandbox.alias`** · `string` · optional
+
+  Alias of the template
+
+- **`sandbox.envdVersion`** · `EnvdVersion` · required
+
+  Version of the envd running in the sandbox
+
+- **`sandbox.domain`** · `string` · optional
+
+  Base domain where the sandbox traffic is accessible
+
 - **`error`** · `Error` · optional
 
+- **`error.code`** · `integer` · required
+
+  Error code
+
+- **`error.message`** · `string` · required
+
+  Error
+
 ### 409
 
 Conflict

reference/openapi/markdown/getEnvironmentHealth.md

@@ -2,6 +2,16 @@
 
 Check the health of the service
 
+## Parameters
+
+- **`Agentbox-Sandbox-Id`** · `string` · header · required
+
+  Identifier of the sandbox that receives the request.
+
+- **`Agentbox-Sandbox-Port`** · `integer` · header · required
+
+  Internal envd HTTP port exposed through the sandbox proxy.
+
 ## Responses
 
 ### 204

reference/openapi/markdown/getEnvironmentMetrics.md

@@ -2,6 +2,16 @@
 
 Service stats
 
+## Parameters
+
+- **`Agentbox-Sandbox-Id`** · `string` · header · required
+
+  Identifier of the sandbox that receives the request.
+
+- **`Agentbox-Sandbox-Port`** · `integer` · header · required
+
+  Internal envd HTTP port exposed through the sandbox proxy.
+
 ## Responses
 
 ### 200

reference/openapi/markdown/getEnvironmentVariables.md

@@ -2,6 +2,16 @@
 
 Environment variables
 
+## Parameters
+
+- **`Agentbox-Sandbox-Id`** · `string` · header · required
+
+  Identifier of the sandbox that receives the request.
+
+- **`Agentbox-Sandbox-Port`** · `integer` · header · required
+
+  Internal envd HTTP port exposed through the sandbox proxy.
+
 ## Responses
 
 ### 200
@@ -11,3 +21,5 @@ Environment variables
 Content-Type: `application/json`
 
 Schema: `EnvVars`
+
+- **`*`** · `string` · additional property