You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
3. The request is retried with the payment signature header
69
69
4. The sandbox is created — $0.02 per sandbox (includes 10 min)
70
70
71
-
## Lifecycle Webhooks
72
-
73
-
Sandbank Cloud supports operator-managed lifecycle webhooks for box status changes. Tenants do not register these through the SDK today. To receive tenant notifications, send your Sandbank tenant id, webhook URL, and optional secret/token to the Sandbank Cloud operator.
74
-
75
-
Tenant ids must match the `user_id` stored on boxes. For API-key based tenants, this is the label in `AGENT_API_KEYS`, for example `AGENT_API_KEYS=wanman:key`.
76
-
77
-
Supported tenant events:
78
-
79
-
-`box.error`
80
-
-`box.terminated`
81
-
-`box.status_changed`
82
-
83
-
Tenant webhook payloads are sanitized and omit admin-only fields such as node id, source, and internal detail:
84
-
85
-
```json
86
-
{
87
-
"event": "box.error",
88
-
"audience": "tenant",
89
-
"tenant_id": "wanman",
90
-
"box_id": "box-1",
91
-
"image": "codebox",
92
-
"previous_status": "running",
93
-
"status": "error",
94
-
"reason": "probe_failure",
95
-
"observed_at": "2026-05-01T05:41:00.000Z"
96
-
}
97
-
```
98
-
99
-
Requests include `X-Sandbank-Tenant`, `X-Sandbank-Event`, and `X-Sandbank-Delivery`. If a tenant secret is configured, Sandbank sends `X-Sandbank-Signature: sha256=<hmac-sha256>` using HMAC-SHA256 over the exact JSON body. If a token is configured, Sandbank sends `Authorization: Bearer <token>`.
0 commit comments