--- title: "The contract, in full bloom." description: "Generated Wildflower Computer API reference for 8 public SDK operations, 36 browser operations, 51 models, and 12 providers." canonical: "https://wildflower.computer/docs/reference/" openapi_version: "0.8.0" source_revision: "788b7325a454b8b753a7d614247d5694bad5c967" --- # The contract, in full bloom. Browse every public operation, model, and provider capability generated from the same contract as the TypeScript, Python, Rust, Go, and Zig SDKs. The pages are static, content-addressed, and tied to OpenAPI 0.8.0. - **operations:** **8** - **models:** **51** - **error codes:** **34** - **SDK targets:** **5** - **providers:** **12** ## Browser control plane The account console uses 36 separately generated, cookie-authenticated operations. They are documented without presenting them as public project-key SDK methods. [Browse the generated browser control-plane reference →](https://wildflower.computer/docs/reference/control-plane/) ## Operations Resource ### sandboxes - [List project sandboxes](https://wildflower.computer/docs/reference/list-sandboxes/) — GET — `/v1/sandboxes` - [Create a persistent running sandbox](https://wildflower.computer/docs/reference/create-sandbox/) — POST — `/v1/sandboxes` - [Get a sandbox](https://wildflower.computer/docs/reference/get-sandbox/) — GET — `/v1/sandboxes/{id}` - [Run a command in an existing sandbox](https://wildflower.computer/docs/reference/run-sandbox-command/) — POST — `/v1/sandboxes/{id}/exec` - [Read a file from an existing sandbox](https://wildflower.computer/docs/reference/read-sandbox-file/) — POST — `/v1/sandboxes/{id}/files/read` - [Write a file in an existing sandbox](https://wildflower.computer/docs/reference/write-sandbox-file/) — POST — `/v1/sandboxes/{id}/files/write` - [Delete a sandbox](https://wildflower.computer/docs/reference/delete-sandbox/) — DELETE — `/v1/sandboxes/{id}` Resource ### providers - [List provider capabilities](https://wildflower.computer/docs/reference/list-providers/) — GET — `/v1/providers` ## Models Public request and response models preserve requiredness, nullability, enums, discriminated unions, and field descriptions from the generator IR. - [Provider](https://wildflower.computer/docs/reference/models/provider/) — enum — Stable provider identifier used for creation, routing, capability discovery, and errors. - [ImageMode](https://wildflower.computer/docs/reference/models/image-mode/) — enum — How a provider selects or fixes the sandbox runtime image. - [TimeoutMode](https://wildflower.computer/docs/reference/models/timeout-mode/) — enum — Whether sandbox lifetime is configured in seconds or managed entirely by the provider. - [OutputStreams](https://wildflower.computer/docs/reference/models/output-streams/) — enum — Whether the provider preserves stdout and stderr separately or returns combined command output. - [ProviderPricingProfile](https://wildflower.computer/docs/reference/models/provider-pricing-profile/) — object — Versioned workload used to compare published provider prices without implying an invoice quote. - [ProviderPricing](https://wildflower.computer/docs/reference/models/provider-pricing/) — object — Official provider pricing evidence and, when published rates permit it, a normalized catalog comparison. - [ProviderCapabilities](https://wildflower.computer/docs/reference/models/provider-capabilities/) — object — Discovery entry with identity, official pricing evidence, and runtime behavior for one configured sandbox provider. - [ProviderCatalog](https://wildflower.computer/docs/reference/models/provider-catalog/) — object — Identity, pricing evidence, and capability catalog for every provider configured in this Wildflower build. - [ProviderProfileConnection](https://wildflower.computer/docs/reference/models/provider-profile-connection/) — object — Non-secret provider-specific routing context stored with or supplied alongside a provider credential. - [ProviderProfileInput](https://wildflower.computer/docs/reference/models/provider-profile-input/) — object — Credential and optional non-secret connection context used to connect one project-scoped provider profile. - [ProviderProfilePersistence](https://wildflower.computer/docs/reference/models/provider-profile-persistence/) — enum — Storage boundary currently protecting a connected provider profile. - [ProviderOperation](https://wildflower.computer/docs/reference/models/provider-operation/) — enum — Provider operation whose credential entitlement or evidence was evaluated. - [ProviderOperationStatus](https://wildflower.computer/docs/reference/models/provider-operation-status/) — enum — Current evidence state for one provider operation. - [ProviderProfileStatus](https://wildflower.computer/docs/reference/models/provider-profile-status/) — enum — Overall provider profile readiness derived from the required operation matrix. - [ProviderTestMode](https://wildflower.computer/docs/reference/models/provider-test-mode/) — enum — Whether the result came from a non-mutating safe check or a provider-mutating deep verification. - [ProviderOperationReadiness](https://wildflower.computer/docs/reference/models/provider-operation-readiness/) — object — Evidence, failure reason, and remediation for one provider operation. - [ProviderProfileReadiness](https://wildflower.computer/docs/reference/models/provider-profile-readiness/) — object — Persisted operation-level readiness for a connected provider profile. - [ProviderProfile](https://wildflower.computer/docs/reference/models/provider-profile/) — object — Redacted metadata for a connected project-scoped provider profile. - [ProviderProfileCatalog](https://wildflower.computer/docs/reference/models/provider-profile-catalog/) — object — Redacted project-scoped provider profiles visible to the authenticated project. - [ProviderProfileTest](https://wildflower.computer/docs/reference/models/provider-profile-test/) — object — Safe or deep provider profile result with per-operation evidence and cleanup state. - [DeepProviderProfileTestInput](https://wildflower.computer/docs/reference/models/deep-provider-profile-test-input/) — object — Explicit acknowledgement required before a provider-mutating deep verification. - [SandboxStatus](https://wildflower.computer/docs/reference/models/sandbox-status/) — enum — Provider-neutral sandbox lifecycle state observed by Wildflower Computer. - [CreateSandboxRequest](https://wildflower.computer/docs/reference/models/create-sandbox-request/) — union — Provider-discriminated input for creating one persistent sandbox. - [AgentcoreCreateSandboxRequest](https://wildflower.computer/docs/reference/models/agentcore-create-sandbox-request/) — object — AgentCore is a capability-limited, non-resumable session provider reached through the Wildflower Computer bridge. - [BlaxelCreateSandboxRequest](https://wildflower.computer/docs/reference/models/blaxel-create-sandbox-request/) — object — Blaxel requires workspace context in either the connected profile or an inline X-Provider-Workspace override. - [BoxCreateSandboxRequest](https://wildflower.computer/docs/reference/models/box-create-sandbox-request/) — object — Box creates a fixed Ubuntu VM without injecting account-level Box secrets and permanently removes it on delete. - [CloudflareCreateSandboxRequest](https://wildflower.computer/docs/reference/models/cloudflare-create-sandbox-request/) — object — Cloudflare uses the customer-deployed official Sandbox Bridge. Image and timeout selection are configured in that Worker. - [E2bCreateSandboxRequest](https://wildflower.computer/docs/reference/models/e2b-create-sandbox-request/) — object — E2B creation input using an optional template and sandbox lifetime. - [NovitaCreateSandboxRequest](https://wildflower.computer/docs/reference/models/novita-create-sandbox-request/) — object — Novita Agent Sandbox creation input using an optional template and sandbox lifetime. - [DaytonaCreateSandboxRequest](https://wildflower.computer/docs/reference/models/daytona-create-sandbox-request/) — object — Daytona creation input using an optional container image and rounded TTL. - [ModalCreateSandboxRequest](https://wildflower.computer/docs/reference/models/modal-create-sandbox-request/) — object — Modal uses the customer-owned Wildflower Computer provider bridge and the official Modal SDK. - [SpritesCreateSandboxRequest](https://wildflower.computer/docs/reference/models/sprites-create-sandbox-request/) — object — Sprites provides a fixed environment, sleeps automatically, and persists until deleted. - [RunloopCreateSandboxRequest](https://wildflower.computer/docs/reference/models/runloop-create-sandbox-request/) — object — Runloop Devboxes use the direct REST API and are shut down permanently on delete. - [SmolCreateSandboxRequest](https://wildflower.computer/docs/reference/models/smol-create-sandbox-request/) — object — Smol Cloud creates a persistent hardware-isolated microVM with blocked network egress; the first command automatically starts it. - [VercelCreateSandboxRequest](https://wildflower.computer/docs/reference/models/vercel-create-sandbox-request/) — object — Wildflower Computer creates Vercel sandboxes with persistence enabled and permanently deletes them on delete. - [SandboxMetadata](https://wildflower.computer/docs/reference/models/sandbox-metadata/) — object — Provider provenance and logical operation metadata associated with a sandbox. - [Sandbox](https://wildflower.computer/docs/reference/models/sandbox/) — object — Current normalized state of one provider-backed persistent sandbox. - [SandboxListItem](https://wildflower.computer/docs/reference/models/sandbox-list-item/) — object — Project registry record for a sandbox, including cached status timestamps and deletion history. - [SandboxPage](https://wildflower.computer/docs/reference/models/sandbox-page/) — object — Cursor-paginated page of project sandbox registry records. - [DeletedSandbox](https://wildflower.computer/docs/reference/models/deleted-sandbox/) — intersection — Sandbox response whose normalized state is permanently deleted. - [RunCommandInput](https://wildflower.computer/docs/reference/models/run-command-input/) — object — Bounded command, working directory, and environment executed in an existing sandbox. - [CommandResult](https://wildflower.computer/docs/reference/models/command-result/) — object — Normalized command output and process exit code from an existing sandbox. - [FileEncoding](https://wildflower.computer/docs/reference/models/file-encoding/) — enum — Wire encoding for bounded file content. - [ReadFileInput](https://wildflower.computer/docs/reference/models/read-file-input/) — object — Path and requested encoding for reading one bounded sandbox file. - [ReadFileResult](https://wildflower.computer/docs/reference/models/read-file-result/) — object — Bounded file content read from an existing sandbox. - [WriteFileInput](https://wildflower.computer/docs/reference/models/write-file-input/) — object — Path, content, and encoding for writing one bounded sandbox file. - [WriteFileResult](https://wildflower.computer/docs/reference/models/write-file-result/) — object — Result of writing one bounded file into an existing sandbox. - [ErrorCode](https://wildflower.computer/docs/reference/models/error-code/) — enum — Stable Wildflower Computer error code set, version 3. - [Error](https://wildflower.computer/docs/reference/models/error/) — object — Normalized API failure safe to expose to SDK callers. - [ErrorEnvelope](https://wildflower.computer/docs/reference/models/error-envelope/) — object — JSON envelope returned for every API failure. - [Health](https://wildflower.computer/docs/reference/models/health/) — object — Service liveness and optional build provenance. ## Provider capabilities Generated provider pages show typed create options and non-secret connection context without copying credentials into the documentation bundle. - [AWS AgentCore](https://wildflower.computer/docs/reference/providers/agentcore/) — 1 create fields — 1 typed connection field. - [Blaxel](https://wildflower.computer/docs/reference/providers/blaxel/) — 2 create fields — 1 typed connection field. - [ASCII Box](https://wildflower.computer/docs/reference/providers/box/) — 1 create fields — No additional connection context. - [Cloudflare Sandbox](https://wildflower.computer/docs/reference/providers/cloudflare/) — 0 create fields — 1 typed connection field. - [E2B](https://wildflower.computer/docs/reference/providers/e2b/) — 2 create fields — No additional connection context. - [Novita Agent Sandbox](https://wildflower.computer/docs/reference/providers/novita/) — 2 create fields — No additional connection context. - [Daytona](https://wildflower.computer/docs/reference/providers/daytona/) — 2 create fields — No additional connection context. - [Modal](https://wildflower.computer/docs/reference/providers/modal/) — 2 create fields — 1 typed connection field. - [Runloop](https://wildflower.computer/docs/reference/providers/runloop/) — 2 create fields — No additional connection context. - [Smol Machines](https://wildflower.computer/docs/reference/providers/smol/) — 2 create fields — No additional connection context. - [Fly.io Sprites](https://wildflower.computer/docs/reference/providers/sprites/) — 0 create fields — No additional connection context. - [Vercel Sandbox](https://wildflower.computer/docs/reference/providers/vercel/) — 2 create fields — 2 typed connection fields. ## Stable error codes Handle the stable code, not message text. Retry only the codes classified as retryable, and follow the operation-specific remediation. ### `invalid_request` - **Retry:** Do not retry blindly The request did not satisfy the endpoint contract. **Remediation:** Correct the fields identified by the response message before sending the request again. ### `payload_too_large` - **Retry:** Do not retry blindly The request body or file content exceeded the supported size limit. **Remediation:** Reduce the payload to the documented limit or split the work into smaller operations. ### `request_timeout` - **Retry:** Retryable Wildflower stopped waiting before the operation completed. **Remediation:** Retry with exponential backoff. For create operations, first reconcile using the operation ID because the provider may have succeeded. ### `invalid_idempotency_key` - **Retry:** Do not retry blindly The Idempotency-Key header was missing, malformed, or outside the supported length. **Remediation:** Send a stable, non-secret key that follows the documented Idempotency-Key constraints. ### `idempotency_conflict` - **Retry:** Do not retry blindly The same idempotency key was reused with a different create request. **Remediation:** Reuse the key only for the identical logical request, or generate a new key for changed input. ### `idempotency_in_progress` - **Retry:** Retryable An identical idempotent operation is still running. **Remediation:** Wait for the Retry-After interval and retry the same request with the same idempotency key. ### `idempotency_outcome_unknown` - **Retry:** Do not retry blindly Wildflower cannot safely determine whether a prior create reached the provider. **Remediation:** Do not issue a blind create retry. Reconcile the operation ID with the sandbox registry or support. ### `idempotency_unavailable` - **Retry:** Retryable The idempotency store was temporarily unavailable. **Remediation:** Retry with exponential backoff and the same idempotency key. ### `sandbox_registry_unavailable` - **Retry:** Retryable The sandbox registry could not be read or updated. **Remediation:** Retry with exponential backoff. For create or delete, preserve identifiers and reconcile state before repeating the operation. ### `sandbox_create_outcome_unknown` - **Retry:** Do not retry blindly The provider create outcome could not be confirmed. **Remediation:** Do not create again automatically. Use the operation ID to reconcile the provider and Wildflower registry. ### `invalid_file_content` - **Retry:** Do not retry blindly File content was not valid for the declared wire encoding. **Remediation:** Encode the content as valid UTF-8 or base64 and make the encoding field match. ### `file_not_utf8` - **Retry:** Do not retry blindly The requested file contains bytes that cannot be returned as UTF-8. **Remediation:** Read the file with base64 encoding instead. ### `file_operation_failed` - **Retry:** Do not retry blindly The provider could not complete the requested file operation. **Remediation:** Verify that the path exists, is permitted, and is within provider limits before retrying. ### `missing_api_key` - **Retry:** Do not retry blindly No usable Wildflower or provider credential was supplied. **Remediation:** Configure the required project API key and connect or supply the provider credential. ### `provider_profiles_unavailable` - **Retry:** Retryable Connected provider profiles could not be loaded. **Remediation:** Retry with exponential backoff; do not replace a stored profile unless the failure persists. ### `provider_profile_not_found` - **Retry:** Do not retry blindly The project has no connected profile for the requested provider. **Remediation:** Connect that provider or supply a valid inline provider credential for the request. ### `provider_operation_unavailable` - **Retry:** Do not retry blindly A prior deep verification proved that the connected provider credential cannot perform the requested operation. **Remediation:** Use the response operation, reason, and remediation fields to grant the missing permission, replace the credential, or choose a supported provider. ### `invalid_sandbox_id` - **Retry:** Do not retry blindly The sandbox ID is malformed or names a provider that does not match the route. **Remediation:** Use the opaque sandbox ID returned by Wildflower without modifying it. ### `provider_invalid_request` - **Retry:** Do not retry blindly The selected provider rejected the normalized request as invalid. **Remediation:** Correct provider-specific image, timeout, command, or connection settings before retrying. ### `authentication_error` - **Retry:** Do not retry blindly A Wildflower or upstream provider credential was rejected. **Remediation:** Replace or reconnect the invalid credential, then retry the original operation. ### `control_plane_conflict` - **Retry:** Do not retry blindly The requested account or project mutation conflicts with current control-plane state. **Remediation:** Refresh the current resource state and submit a mutation that satisfies its ownership and lifecycle rules. ### `last_account_owner` - **Retry:** Do not retry blindly The operation would leave an organization without an owner. **Remediation:** Promote another member to owner before removing, demoting, or transferring the current owner. ### `personal_account_immutable` - **Retry:** Do not retry blindly The requested ownership or membership change is not allowed for a personal account. **Remediation:** Use an organization account for shared ownership and membership changes. ### `account_deleting` - **Retry:** Do not retry blindly The account is already in its deletion lifecycle. **Remediation:** Wait for deletion to finish and avoid starting new work in the account. ### `sandbox_not_found` - **Retry:** Do not retry blindly No sandbox visible to this project matches the supplied ID. **Remediation:** Check the project and sandbox ID; a previously deleted sandbox cannot be restored through this endpoint. ### `rate_limited` - **Retry:** Retryable The request exceeded a Wildflower or provider rate limit. **Remediation:** Wait for Retry-After when present, then retry with exponential backoff and jitter. ### `provider_unavailable` - **Retry:** Retryable The selected provider or customer-owned bridge is temporarily unavailable. **Remediation:** Retry with exponential backoff or select another provider when workload portability permits. ### `provider_error` - **Retry:** Do not retry blindly The provider returned a failure that Wildflower could not classify more narrowly. **Remediation:** Inspect the safe response message and operation ID; retry only when the provider condition is known to be transient. ### `internal_error` - **Retry:** Retryable Wildflower encountered an unexpected server-side failure. **Remediation:** Retry with exponential backoff and retain the request or operation ID for support if the failure repeats. ### `legal_acceptance_required` - **Retry:** Do not retry blindly The actor or account must accept the current legal release before continuing. **Remediation:** Review and accept the required documents, then repeat the blocked operation. ### `legal_release_changed` - **Retry:** Do not retry blindly The legal release changed between review and acceptance. **Remediation:** Fetch and review the new current release before submitting acceptance again. ### `legal_not_found` - **Retry:** Do not retry blindly The requested legal document or release does not exist. **Remediation:** Refresh the legal manifest and use a published document and version. ### `legal_unavailable` - **Retry:** Retryable The legal publication or acceptance store is temporarily unavailable. **Remediation:** Retry with exponential backoff; do not assume acceptance was recorded unless it can be confirmed. ### `invalid_email_webhook` - **Retry:** Do not retry blindly The inbound email webhook signature or payload was invalid. **Remediation:** Verify webhook signing configuration and send a payload that matches the documented provider event shape.