1
0
mirror of https://github.com/docker/docs.git synced 2026-10-23 18:09:02 +03:00
Files
docs/hack/api-docs/model.go
David Karlsson bed22bda81 docs: Cloud Sandboxes API and SDK (#26168)
## Description

Add an experimental Sandboxes API and SDK section alongside Docker
Sandboxes under AI and agents, at `/ai/sandboxes-api/`. Cover
installation of `@docker/sandboxes`, browser and PAT authentication, and
a TypeScript walkthrough that launches the shell kit, runs a command,
and deletes the sandbox. Explain kits and image choices with examples,
along with compute sizes, quotas, permissions, resource lifecycle,
errors, and retries. Link subscription setup and billing to the shared
Docker Agentic Platform guide. Preserve the previous
`/ai/sandboxes/api/` URLs with redirects.

Uses the shared Docker Agentic Platform documentation merged in #26142.
Sibling to #26158, which introduces CLI-side Cloud Sandboxes
documentation.

Include 36 SDK cookbook recipes at `/ai/sandboxes-api/cookbook/` and the
public REST API reference at `/reference/api/sandboxes/`. Import the
generated export from `docker/sbx-api` commit `60d79c1d` (source
`1a7f4026`). Overview and installation remain maintained here. The
reference uses the shared API renderer from main, with separate
operation and schema pages, streaming and WebSocket details, and a
downloadable OpenAPI spec. An API reference link appears in the API/SDK
sidebar. A pinned manifest and import script provide the basis for later
release automation.

Examples are optional in the shared renderer; supplied examples still
have to pass schema validation. Requests without body examples use a
request-body file with instructions to prepare it. The import copies all
selected recipes and the OpenAPI specification byte for byte from the
corrected upstream export, without patches or link rewrites. The broken
naming recipe remains temporarily excluded.

This remains a draft pending validation against the published npm SDK.
The imported cookbook contains the TypeScript-only guidance, five-minute
request deadlines, kit-readiness explanation, active-policy status
requirement, and snapshot-deletion and lifetime-renewal restrictions.

Validation: scoped Markdown and Vale checks, full Hugo build, rendered
navigation, redirects, and internal links, and TypeScript type-checking
against the generated public SDK from `docker/sbx-api` commit
`68f214b9`. Import validation also covers all 60 REST operations and 188
schema definitions, 1,198 imported-page links and anchors,
desktop/mobile rendering, Markdown output, spec delivery, and a repeat
import. The shared renderer tests, strict generation for all five APIs
(zero diagnostics), full Hugo build, and verification of 453
HTML/Markdown page pairs and API links pass. No live sandbox execution.
The corrected export passes strict generation for all five APIs with
zero diagnostics, scoped Markdown/Vale lint, a full Hugo build, and
verification of 453 HTML/Markdown page pairs and API links. A repeat
import produces identical files. The spec update changes examples only;
schemas and operations are unchanged.

@netlify /ai/sandboxes-api/

Generated by Codex

---------

Co-authored-by: Claude <noreply@anthropic.com>
2026-09-24 18:06:30 +02:00

297 lines
9.0 KiB
Go

package main
import (
"net/url"
"sort"
"strings"
)
func route(id string) string {
return "/reference/api/" + id + "/latest/"
}
func slug(s string) string { return url.PathEscape(s) }
func (d *Document) model() Object {
ops := d.operations()
schemas := []any{}
schemaURLs := Object{}
for _, name := range keys(obj(obj(d.Root["components"])["schemas"])) {
p := "/components/schemas/" + esc(name)
u := route(d.Source.ID) + "schemas/" + slug(name) + "/"
schemaURLs["#"+p] = u
schemas = append(schemas, Object{"name": name, "pointer": p, "url": u, "schema": obj(obj(d.Root["components"])["schemas"])[name]})
}
for _, op := range ops {
for _, raw := range arr(op["variants"]) {
v := obj(raw)
for _, rawEx := range arr(v["examples"]) {
ex := obj(rawEx)
ex["text"], ex["language"] = exampleText(str(v["media"]), ex["value"])
}
}
}
for _, op := range ops {
op["url"] = route(d.Source.ID) + "operations/" + slug(str(op["id"])) + "/"
op["securitySchemes"] = obj(d.Root["components"])["securitySchemes"]
op["acceptMedia"] = responseMedia(op)
// HEAD negotiates the GET representation but has no response body.
if op["method"] == "HEAD" && op["acceptMedia"] == "" {
for _, get := range ops {
if get["method"] == "GET" && get["path"] == op["path"] {
op["acceptMedia"] = responseMedia(get)
break
}
}
}
op["curl"], op["curlNotes"] = curlExample(d.Source, op)
op["references"] = refs(op["raw"], schemaURLs)
op["requestSchema"] = firstRequestSchema(op)
}
return Object{"experimental": d.Source.Experimental, "id": d.Source.ID, "product": d.Source.Product, "title": d.Source.Title, "version": obj(d.Root["info"])["version"], "description": obj(d.Root["info"])["description"], "url": route(d.Source.ID), "manual": d.Source.Manual, "guides": d.Source.Guides, "connection": d.Source.Connection, "servers": d.Root["servers"], "securitySchemes": obj(d.Root["components"])["securitySchemes"], "tags": d.Root["tags"], "operations": ops, "schemas": schemas, "schemaURLs": schemaURLs, "digest": d.Digest, "owner": d.Source.Owner, "source": d.Source.Source, "sourceURL": "/" + strings.TrimPrefix(d.Source.Source, "content/"), "diagnostics": d.Diagnostics, "schemaCount": d.SchemaCount, "exampleCount": d.ExampleCount}
}
func refs(v any, urls Object) []any {
found := map[string]bool{}
walk(v, "", func(n Object, _ string) {
if s := str(n["$ref"]); s != "" {
found[s] = true
}
})
out := []any{}
names := []string{}
for n := range found {
names = append(names, n)
}
sort.Strings(names)
for _, n := range names {
out = append(out, Object{"ref": n, "url": urls[n]})
}
return out
}
func firstRequestSchema(op Object) any {
for _, v := range arr(op["variants"]) {
m := obj(v)
if m["direction"] == "Request" {
return m["schema"]
}
}
return nil
}
func shell(s string) string { return "'" + strings.ReplaceAll(s, "'", "'\"'\"'") + "'" }
func scalar(v any) string {
if s, ok := v.(string); ok {
return s
}
return strings.TrimSpace(string(encoded(v)))
}
func parameterValue(p Object) (any, bool) {
if v, ok := p["example"]; ok {
return v, true
}
s := obj(p["schema"])
if v, ok := s["example"]; ok {
return v, true
}
if a := arr(s["examples"]); len(a) > 0 {
return a[0], true
}
return nil, false
}
func exampleText(media string, value any) (string, string) {
if s, ok := value.(string); ok && !strings.Contains(media, "json") {
return s, "text"
}
return strings.TrimSpace(string(encoded(value))), "json"
}
func responseMedia(op Object) string {
for _, raw := range arr(op["variants"]) {
v := obj(raw)
if v["direction"] == "Response" && strings.HasPrefix(str(v["status"]), "2") && str(v["media"]) != "" {
return str(v["media"])
}
}
return ""
}
func curlExample(src Source, op Object) (string, []string) {
if len(obj(obj(op["raw"])["x-websocket"])) > 0 {
return "", []string{"Use a WebSocket client with the subprotocol, credential transport, and frame schemas documented for this operation."}
}
notes := []string{}
args := []string{"curl"}
if op["method"] == "HEAD" {
args = append(args, "--head")
} else {
args = append(args, "--request "+str(op["method"]))
}
server := ""
if a := arr(op["servers"]); len(a) > 0 {
m := obj(a[0])
server = str(m["url"])
for name, v := range obj(m["variables"]) {
server = strings.ReplaceAll(server, "{"+name+"}", str(obj(v)["default"]))
}
}
if src.Connection == "unix" {
args = append(args, "--unix-socket \"${DOCKER_SOCKET:-/var/run/docker.sock}\"")
if !strings.HasPrefix(server, "/") {
server = "/v" + strings.TrimPrefix(src.ID, "engine-")
}
server = "http://localhost" + server
}
if server == "" {
server = "https://<SERVER>"
notes = append(notes, "Set the API server address.")
}
target := strings.TrimRight(server, "/") + str(op["path"])
query := []string{}
for _, raw := range arr(op["parameters"]) {
p := obj(raw)
name := str(p["name"])
v, has := parameterValue(p)
required, _ := p["required"].(bool)
if !has && !required {
continue
}
value := "<" + strings.ToUpper(name) + ">"
if has {
value = scalar(v)
}
location := str(p["in"])
if location == "path" {
part := value
if has {
part = url.PathEscape(value)
}
target = strings.ReplaceAll(target, "{"+name+"}", part)
} else if location == "header" {
args = append(args, "--header "+shell(name+": "+value))
} else if location == "query" {
style := str(p["style"])
if style == "" {
style = "form"
}
explode := true
if x, ok := p["explode"].(bool); ok {
explode = x
}
if list, ok := v.([]any); ok && style == "form" {
parts := []string{}
for _, x := range list {
parts = append(parts, scalar(x))
}
if explode {
for _, x := range parts {
query = append(query, url.QueryEscape(name)+"="+url.QueryEscape(x))
}
} else {
query = append(query, url.QueryEscape(name)+"="+url.QueryEscape(strings.Join(parts, ",")))
}
} else if len(obj(v)) > 0 || style != "form" {
notes = append(notes, "Serialize "+name+" using its documented "+style+" rules; this parameter is not generated.")
} else {
query = append(query, url.QueryEscape(name)+"="+url.QueryEscape(value))
}
} else {
notes = append(notes, "Supply "+name+" using its documented "+location+" encoding.")
}
}
if len(query) > 0 {
target += "?" + strings.Join(query, "&")
}
security := arr(op["security"])
if len(security) > 0 {
first := obj(security[0])
for _, scheme := range keys(first) {
definition := obj(obj(op["securitySchemes"])[scheme])
switch {
case definition["type"] == "http" && definition["scheme"] == "bearer":
token := "TOKEN"
if scheme == "scimToken" {
token = "SCIM_TOKEN"
}
if scheme == "registryToken" {
token = "REGISTRY_TOKEN"
}
args = append(args, "--header \"Authorization: Bearer ${"+token+"}\"")
case definition["type"] == "apiKey" && definition["in"] == "header":
args = append(args, "--header \""+str(definition["name"])+": ${API_KEY}\"")
default:
notes = append(notes, "Configure authentication scheme "+scheme+" using its documented transport or credential format.")
}
}
if len(security) > 1 {
notes = append(notes, "This example uses the first authentication alternative. Review the complete requirements.")
}
}
if media := str(op["acceptMedia"]); media != "" {
args = append(args, "--header "+shell("Accept: "+media))
}
for _, raw := range arr(op["variants"]) {
v := obj(raw)
if v["direction"] != "Request" {
continue
}
media := str(v["media"])
if media == "" {
continue
}
args = append(args, "--header "+shell("Content-Type: "+media))
examples := arr(v["examples"])
if len(examples) > 0 && strings.Contains(media, "json") {
args = append(args, "--data-raw "+shell(strings.TrimSpace(string(encoded(obj(examples[0])["value"])))))
} else {
args = append(args, "--data-binary @request-body")
notes = append(notes, "Prepare request-body using the selected media type and schema.")
}
break
}
args = append(args, shell(target))
return strings.Join(args, " \\\n "), notes
}
// Examples are annotations: retrieve them without flattening schema constraints.
func (d *Document) mediaExamples(v Object) []any {
out := d.exampleList(v)
if len(out) > 0 {
return out
}
s := v["schema"]
seen := map[string]bool{}
base, _ := url.Parse(d.URI)
for s != nil {
n := obj(s)
if x, ok := n["example"]; ok {
return []any{Object{"name": "Schema example", "value": x}}
}
if xs := arr(n["examples"]); len(xs) > 0 {
for _, x := range xs {
out = append(out, Object{"name": "Schema example", "value": x})
}
return out
}
ref := str(n["$ref"])
if ref == "" {
break
}
u, err := url.Parse(ref)
if err != nil {
break
}
u = base.ResolveReference(u)
if seen[u.String()] {
break
}
seen[u.String()] = true
fragment := u.Fragment
u.Fragment = ""
// Follow one reference at a time so intermediate schema annotations survive.
s, err = pointer(d.Registry.resources[u.String()], fragment)
if err != nil {
break
}
base = u
}
return out
}