> ## Documentation Index > Fetch the complete documentation index at: https://docs.labelbox.com/llms.txt > Use this file to discover all available pages before exploring further. # Get environment > Returns one environment and its full sandbox spec. A soft-deleted or unknown id is a 404, and an id belonging to another organization is reported the same way. ## OpenAPI ````yaml /managed-agents/openapi.yaml get /managed-agents/v1/environments/{environment_id} openapi: 3.1.0 info: title: Managed Agents API version: 0.13.0 description: >- The Recursion Managed Agents REST API. Authenticate with a Recursion API key as a bearer token. An organization-scoped key acts in its own organization and needs nothing else; a tenant-scoped key must also send `x-organization-id` with an organization id or `default`. Field names follow each operation's published schema. servers: - url: https://api.recursion.labelbox.com security: - bearerAuth: [] paths: /managed-agents/v1/environments/{environment_id}: get: tags: - Environments summary: Get environment description: >- Returns one environment and its full sandbox spec. A soft-deleted or unknown id is a 404, and an id belonging to another organization is reported the same way. operationId: managedAgentsGetEnvironment parameters: - description: >- Environment id (UUID) as returned by createEnvironment or listEnvironments. in: path name: environment_id required: true schema: description: >- Environment id (UUID) as returned by createEnvironment or listEnvironments. format: uuid type: string responses: '200': content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsEnvironment' description: >- A sandbox environment a session executes in: its provider, resources, mounts, setup steps and idle/delete lifecycle. Created and started independently of any session. '400': description: The request was rejected by schema or semantic validation. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiError' '401': description: The caller is unauthenticated. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiError' '403': description: The caller lacks a required permission or capability. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorForbidden' '404': description: No such resource is reachable for this caller. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiError' '429': headers: Retry-After: description: Seconds the caller should wait before retrying. schema: type: string style: simple description: A rate limit is exhausted. Honor `Retry-After`. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiError' '500': description: An unexpected server-side failure. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiError' '502': description: The service returned an invalid response. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorBadGateway' '503': headers: Retry-After: description: Seconds the caller should wait before retrying. schema: type: string style: simple description: A dependency is unavailable. Retryable. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiError' '504': headers: Retry-After: description: When to retry, as delay seconds or an HTTP date. schema: type: string description: The service did not respond before the timeout. Retryable. content: application/json: schema: $ref: '#/components/schemas/ManagedAgentsApiErrorGatewayTimeout' components: schemas: ManagedAgentsEnvironment: description: >- A sandbox environment a session executes in: its provider, resources, mounts, setup steps and idle/delete lifecycle. Created and started independently of any session. properties: computer_use: description: >- Whether this environment boots the shared interactive Chromium display used by the computer and human-handoff tools. The server projects this to http_port 6901. type: boolean config: additionalProperties: {} description: >- Provider-specific overflow settings this schema does not model. Passed to the provider unchanged. type: object created_at: description: >- Server-assigned RFC 3339 timestamp of when the environment was created. format: date-time type: string description: description: Free-text note about what this environment provides. type: string env_vars: additionalProperties: type: string description: >- Plaintext environment variables exported in the sandbox. They become the whole container environment, including the runner entrypoint's, so PATH is refused (env_vars.PATH): managed images select /workspace/.venv themselves. A Runs session using one-time setup after its runner changes also refuses startup-hook names such as BASH_ENV, HOME, PYTHONPATH, and LD_PRELOAD; re-test to capture a compatible image instead. Never put secrets here; use secrets instead. On update, omit to keep the current variables; send {} to clear them. type: object environment_id: description: >- Server-assigned id of the environment; pass it when starting a session that should run in this sandbox. type: string http_port: description: >- Port inside the sandbox to expose over HTTP for services the agent starts; 0 exposes nothing. format: int64 type: integer idle_stop_after_seconds: description: >- Seconds of inactivity after which a running sandbox is stopped; 0 uses the provider default. A computer-enabled environment requires 0 or at least 600 seconds so its five-minute handoff heartbeat arrives before idle-stop. format: int64 type: integer image: description: >- Container image the sandbox boots. Omit to use the provider's default image. For the Agent runner provider only the deployment's own runner repository or a sibling published beside it (for example rma-runner-recursion) is accepted, and it must be omitted when an accelerator is requested, which always boots the platform's GPU runner. Customize the sandbox itself with setup.script. type: string metadata: additionalProperties: {} description: >- Caller-owned key/value data stored with the environment and returned unchanged. type: object mounts: description: >- Files or objects staged into the sandbox workspace when it is created. On update, omit to keep the current mounts; send [] to clear them. items: $ref: '#/components/schemas/ManagedAgentsEnvironmentMount' type: array name: description: Human-readable label shown wherever environments are listed. type: string network_policy: additionalProperties: {} description: >- Runs egress rules. On update, omission keeps the stored policy. Changing from a non-Runs provider to Runs with an absent or {} stored policy requires an explicit network_policy: {"version":"v1","rules":[]} for deny-all or {} for unrestricted egress. A nonempty policy requires GKE; with explicit non-GKE placement, send {} for unrestricted egress or change placement to GKE. Send {} to clear a policy. Runs responses always include network_policy; {} means unrestricted. type: object organization_id: description: >- Organization that owns the environment. Server-assigned from the caller's credentials; a value sent in a request body is ignored. type: string privileged: description: >- Whether a Runs sandbox may use privileged Docker. Independent of network_policy; omit on update to retain the saved value, or send false to disable it. New Runs environments and transitions from another provider default to false. Existing Runs environments retain their earlier effective setting until edited. Compute creation fails closed unless Agent Service can enforce the requested combination. type: boolean provider: description: >- Sandbox runtime that executes the session, chosen from the sandbox providers catalog. type: string pvc_size_gi: description: >- Size in GiB of the persistent workspace volume; 0 uses the provider default. format: int64 type: integer resources: $ref: '#/components/schemas/ManagedAgentsEnvironmentResources' description: >- Caller-sized CPU and memory for CPU environments, or one exclusive accelerator with service-owned limits of 8,000 millicores (8 vCPU) and 32,768 MiB (32 GiB) of memory for GPU environments, plus lifetime and placement constraints. scope: description: >- Who may use the environment. Defaults to organization, meaning it is shared across the owning organization. type: string secrets: additionalProperties: type: string description: >- Environment variable name to secret-manager reference. References only, never plaintext values; the runtime resolves them at start. The one-time Runs setup fallback applies the same startup-hook name restriction to secrets and vault-injected variables. On update, omit to keep the current references; send {} to clear them. type: object setup: $ref: '#/components/schemas/ManagedAgentsEnvironmentSetup' description: >- Setup script run after the sandbox is provisioned and before the agent starts. setup_updated_at: description: RFC 3339 timestamp of the last setup script change. Server-assigned. format: date-time type: string setup_updated_by_user_id: description: User who last changed the setup script. Server-assigned. type: string setup_verification: $ref: '#/components/schemas/ManagedAgentsEnvironmentSetupVerification' description: >- Server-owned verdict on the setup script: whether a manual setup run has proven this exact configuration on real compute. Read status and stale before starting sessions; read last_run.hint first when status is failed. Ignored in request bodies. setup_warnings: description: >- Advisory findings about the setup script (bash -lc wrapping, curl | sh, unpinned installs, ambiguous system Python, PATH replacement, or non-persistent shell activation), plus legacy_setup_discarded when the stored setup predates setup.script and is not run. Never block a save; computed on read. items: $ref: '#/components/schemas/ManagedAgentsEnvironmentSetupWarning' type: array stopped_delete_after_seconds: description: >- Seconds a stopped sandbox is retained before it is deleted along with its volume; 0 uses the provider default. format: int64 type: integer updated_at: description: >- Server-assigned RFC 3339 timestamp of the most recent update to the environment. format: date-time type: string required: - organization_id - environment_id - name - scope - provider - setup - resources - computer_use - created_at - updated_at type: object example: computer_use: true config: key: example created_at: '2026-02-18T09:30:00.000Z' description: example env_vars: key: example environment_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d http_port: 1 idle_stop_after_seconds: 1 image: example metadata: key: example mounts: - mount_path: example source: example name: example-name network_policy: key: example organization_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d privileged: true provider: example pvc_size_gi: 1 resources: accelerator: count: 1 name: example-name type: example cpu_milli: 1 memory_mib: 1 placement: allow_spot: true max_price_per_hour_usd: 1.5 min_accelerator_vram_gb: 1 providers: - example regions: - example timeout_seconds: 1 scope: example secrets: key: example setup: script: example timeout_seconds: 1 setup_updated_at: '2026-02-18T09:30:00.000Z' setup_updated_by_user_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d setup_verification: active_setup_run_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d at: '2026-02-18T09:30:00.000Z' fingerprint: example image: baseImageDigest: example capturedAt: '2026-02-18T09:30:00.000Z' computeId: example fingerprint: example generation: 1 image: example imageId: example runnerImage: example setupRunId: example sizeBytes: 1 usable: true warmup: example warmupMessage: example imageCapture: at: '2026-02-18T09:30:00.000Z' message: example reason: example setupRunId: example status: failed last_run: duration_ms: 1 exit_code: 1 failed_command: example failed_line: 1 hint: example hint_code: example message: example phase: example setup_run_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d status: example stderr_tail: example setup_run_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d stale: true status: example verified_by_user_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d setup_warnings: - code: example line: 1 message: example stopped_delete_after_seconds: 1 updated_at: '2026-02-18T09:30:00.000Z' ManagedAgentsApiError: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - analytics - analytics_not_ready - artifact_fetch_unavailable - artifact_generation_mismatch - artifact_hash_mismatch - artifact_invalid_events - artifact_invalid_json - artifact_not_allowlisted - artifact_size_mismatch - atlassian_rate_limited - atlassian_unavailable - atomic_ingest_timeout - auth_unavailable - automation_event_source_invalid - automation_memory_unavailable - automation_reference_invalid - automation_runs_unconfigured - automations_unconfigured - bad_gateway - built_in_catalog_unavailable - built_in_integrations_disabled - built_in_integrations_unconfigured - compute_offerings_unavailable - conflict - content_store_request_canceled - content_store_unavailable - content_store_upload_timeout - credential_encryption_unconfigured - delegate_preparation_failed - entity_family_not_permitted - environment_not_verified - evaluation_cancellation_pending - evaluation_deletion_pending - event_admission_unavailable - event_ingress_unavailable - event_source_verification_credential_invalid - event_sources_unconfigured - execution_unconfigured - file_quota_exceeded - file_storage_unconfigured - forbidden - gateway_timeout - gestalt_unconfigured - github_rate_limited - github_unavailable - handoff_access_invalid - handoff_access_unavailable - handoff_access_unsupported - handoff_capture_unavailable - handoff_requires_retest - handoff_revoke_unavailable - handoff_signal_unavailable - idempotency_conflict - idempotency_in_progress - idempotency_unavailable - ingest_policy_changed - ingest_policy_not_found - ingest_policy_revoked - integrations_unconfigured - internal_error - invalid_json - invalid_pull_request_review_result - invalid_request - invalid_scope - invariant_violation - launchdarkly_rate_limited - launchdarkly_unavailable - live_fleet_unconfigured - managed_agents_unavailable - merge_key_rejected - merge_link_unavailable - merge_rate_limited - merge_unavailable - missing_dependency - model_gateway_metadata_missing - model_gateway_unconfigured - model_gateway_unreachable - mutation_transaction_budget_exceeded - not_found - page_token_expired - payload_too_large - persistence_busy - precondition_failed - precondition_required - provider_registration_unsupported - provider_selection_unsupported - rate_limit_exceeded - rate_limited - repository_automation_unconfigured - request_too_large - reserved_source_type - revision_conflict - run_log_store_unavailable - runner_image_resolution_failed - sandbox_provider_disabled - service_unavailable - session_analyst_busy - session_analyst_model_unavailable - session_analyst_unconfigured - session_start_admission_unavailable - session_start_not_admitted - setup_fallback_environment_unsafe - setup_run_finished - setup_run_in_progress - setup_run_limit - setup_run_not_started - setup_runs_unavailable - skill_storage_unconfigured - slack_channels_rejected - slack_channels_unavailable - slack_channels_unconfigured - slack_connection_malformed - slack_event_intake_unavailable - slack_installation_mismatch - slack_missing_scope - slack_rate_limited - slack_reapproval_required - source_ownership_mismatch - source_revision_conflict - spanner_unavailable - streaming_unsupported - submission_transaction_budget_exceeded - task_version_number_conflict - team_board_unconfigured - too_many_streams - unauthorized - unsupported_media_type - vault_creation_retired - version_content_conflict - webhook_delivery_too_large - workspace_boundary_denied message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorForbidden: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - forbidden message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorBadGateway: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - bad_gateway message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsApiErrorGatewayTimeout: type: object properties: code: type: string minLength: 1 description: Stable machine-readable error code. enum: - gateway_timeout message: type: string minLength: 1 description: Human-readable error message. details: description: Optional structured error details. type: object propertyNames: type: string additionalProperties: {} required: - code - message additionalProperties: false description: Standard flat error response. ManagedAgentsEnvironmentMount: description: >- One file or object staged into the sandbox workspace when it is created. Use mounts to give an agent input data it should find already on disk at the first turn. properties: mount_path: description: >- Absolute path inside the sandbox workspace where the source is placed. type: string source: description: Object or file to stage, as a URI the service can read. type: string type: object example: mount_path: example source: example ManagedAgentsEnvironmentResources: description: >- Compute sizing and lifetime for an environment's sandbox. CPU environments accept caller-selected CPU and memory. GPU environments accept an exclusive accelerator plus optional lifetime and placement constraints, but use service-owned limits of 8,000 millicores (8 vCPU) and 32,768 MiB (32 GiB) of memory. properties: accelerator: $ref: '#/components/schemas/ManagedAgentsEnvironmentAccelerator' description: >- Exclusive GPU to attach to the sandbox compute. Omit for CPU-only. When set, the service applies limits of 8,000 millicores (8 vCPU) and 32,768 MiB (32 GiB) of memory, and cpu_milli and memory_mib must be omitted. cpu_milli: description: >- CPU request in millicores, so 1000 is one vCPU; 0 uses the provider default. CPU-only environments; must be omitted with an accelerator because the GPU sandbox CPU limit is service-owned. format: int64 type: integer memory_mib: description: >- Memory request in MiB; 0 uses the provider default. CPU-only environments; must be omitted with an accelerator because the GPU sandbox memory limit is service-owned. format: int64 type: integer placement: $ref: '#/components/schemas/ManagedAgentsEnvironmentPlacement' description: >- Optional region, provider, VRAM, spot, and price constraints. Without an egress policy, omission permits any configured provider. A nonempty Runs network_policy requires GKE; when placement is omitted, the runtime selects GKE without saving a placement constraint. timeout_seconds: description: >- Maximum sandbox lifetime in seconds before the provider tears it down; 0 uses the provider default. format: int64 type: integer type: object example: accelerator: count: 1 name: example-name type: example cpu_milli: 1 memory_mib: 1 placement: allow_spot: true max_price_per_hour_usd: 1.5 min_accelerator_vram_gb: 1 providers: - example regions: - example timeout_seconds: 1 ManagedAgentsEnvironmentSetup: description: >- Post-provision customization of a sandbox: a bash script run before the agent starts. Set it when the agent needs packages, tools, or state the runner image does not ship; leave it empty to start from the image as is. Verify it with a setup run before sessions use the environment. properties: script: description: >- Bash script run after the sandbox is provisioned and before the agent starts. When a Runs session's verified captured image has an older runner base, setup runs once on that session's compute. It does not rerun after a container restart or move; a changed container generation prevents further sandbox work in that session. Re-test the environment to capture a compatible image, then start a new session. Executed as a separate login shell with set -eo pipefail, so the first failing line fails the run and is reported by line number; exports and activation do not persist into agent commands. Managed images automatically select a /workspace/.venv created here: install through its explicit interpreter and preserve the existing PATH. Do not wrap lines in bash -lc; the script already runs under bash. Empty means no setup. At most 64 KiB. type: string timeout_seconds: description: >- Wall-clock bound in seconds on the whole script; 0 uses the default of 600. Between 10 and 3600 when set. A run that exceeds it fails with exit code 124. format: int64 type: integer type: object example: script: example timeout_seconds: 1 ManagedAgentsEnvironmentSetupVerification: description: >- Whether an environment's setup script has been proven to run on real compute. Server-owned: it is written by manual setup runs and never accepted from a request body. properties: active_setup_run_id: description: >- Manual setup run in flight for this environment, when there is one. Present alongside any status: a verified environment being re-verified stays verified, and sessions keep starting, until this run finishes. Follow it with getEnvironmentSetupRun or getEnvironmentSetupRunLog. Cleared when the run records a verdict or is cancelled. type: string at: description: RFC 3339 timestamp of when the recorded run finished. format: date-time type: string fingerprint: description: >- Hash of the environment configuration the run executed. Compared against the current configuration to derive stale; opaque to callers. type: string image: $ref: '#/components/schemas/ManagedAgentsEnvironmentSetupImage' description: >- Immutable compute image produced after setup passed. Session admission validates this capture and resolves the current runner before choosing to boot it or run setup on the session's compute. imageCapture: $ref: '#/components/schemas/ManagedAgentsEnvironmentSetupImageCapture' description: >- Most recent image capture failure. Independent from the setup verdict: setup can be verified while capture failed. last_run: $ref: '#/components/schemas/ManagedAgentsEnvironmentSetupRunSummary' description: >- Summary of the recorded run: exit code, failing line and command, stderr tail, and hint. Read hint first when the status is failed; it names the likely fix when the failure is a recognised one. setup_run_id: description: >- Setup run the status was written from. Read its log with getEnvironmentSetupRunLog when the status is failed. type: string stale: description: >- True when the environment's provider, image, compute (resources, workspace disk size, provider config), setup script or timeout, variables, secret references, mounts, network policy, or privileged access changed after the recorded run, so the verdict no longer describes this configuration. Name, description, metadata, and the HTTP port do not count. Re-run setup to clear it. Always false for not_applicable and never. type: boolean status: description: >- not_applicable (no setup script), never (a script exists but no run has recorded a verdict), running (a manual setup run is in flight and there is no earlier passing verdict to stand on), verified (the latest recorded manual run passed), or failed (the latest recorded manual run failed). Sessions on managed providers require verified and not stale when a script is configured; Runs additionally requires a valid captured image. When the captured base differs from the runner resolved at session start, setup runs on the session's compute instead of booting the captured image. The verdict is monotone: re-verifying a verified environment keeps it verified, with the new run in active_setup_run_id, until that run records its own verdict. type: string verified_by_user_id: description: User who requested the recorded run. type: string required: - status - stale type: object example: active_setup_run_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d at: '2026-02-18T09:30:00.000Z' fingerprint: example image: baseImageDigest: example capturedAt: '2026-02-18T09:30:00.000Z' computeId: example fingerprint: example generation: 1 image: example imageId: example runnerImage: example setupRunId: example sizeBytes: 1 usable: true warmup: example warmupMessage: example imageCapture: at: '2026-02-18T09:30:00.000Z' message: example reason: example setupRunId: example status: failed last_run: duration_ms: 1 exit_code: 1 failed_command: example failed_line: 1 hint: example hint_code: example message: example phase: example setup_run_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d status: example stderr_tail: example setup_run_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d stale: true status: example verified_by_user_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d ManagedAgentsEnvironmentSetupWarning: description: >- An advisory finding about a setup script line. Warnings never block a save. properties: code: description: >- Stable identifier: bash_lc_wrapper, curl_pipe_sh, unpinned_install, rm_rf_root (line findings); verify_not_started (line 0: the save succeeded but the run requested with verify=true could not be started; call createEnvironmentSetupRun); or legacy_setup_discarded (line 0: the stored setup predates setup.script and does not run; re-enter it as a script). type: string line: description: >- 1-based script line the finding is on; 0 when the finding is about the save rather than a line. format: int64 type: integer message: description: What was found and the recommended change. type: string required: - code - line - message type: object example: code: example line: 1 message: example ManagedAgentsEnvironmentAccelerator: description: >- An accelerator attached to an environment's sandbox compute. Set it only for GPU workloads; omit it and the sandbox runs CPU-only. A GPU sandbox receives one exclusive accelerator with service-owned limits of 8,000 millicores (8 vCPU) and 32,768 MiB (32 GiB) of memory; its host machine may be larger. properties: count: description: >- How many accelerators to attach. Defaults to 1; every offering currently carries one. format: int64 type: integer name: description: >- Accelerator model, lower-case and provider-neutral, e.g. a100. Must name a model in this deployment's configured accelerator_catalog. Live compute offerings enrich that catalog but never remove configured choices. type: string type: description: Accelerator class to attach. Only gpu is accepted. type: string type: object example: count: 1 name: example-name type: example ManagedAgentsEnvironmentPlacement: description: >- Where an environment's sandboxes may run, expressed as constraints rather than a named machine. The runtime selects a provider that can enforce the environment's access settings. properties: allow_spot: description: >- Let preemptible capacity compete on price. A reclaimed sandbox is failed and restarted from its last snapshot rather than resumed in place, so this trades an occasional lost turn for markedly cheaper accelerators. type: boolean max_price_per_hour_usd: description: >- Reject offerings priced above this per hour. Offerings whose price is unknown are never rejected by this, because an unpriced offering is a gap in a provider's catalog rather than an expensive machine. format: double type: number min_accelerator_vram_gb: description: >- Reject offerings whose per-accelerator memory is below this, in vendor-quoted gigabytes. Omit unless a workload genuinely needs the larger variant: an H100 and an H200 run the same image and the same snapshot, so treating them as interchangeable is what makes capacity findable. format: int64 type: integer providers: description: >- Restrict placement to these providers, e.g. gke or nebius. Empty permits configured providers compatible with the environment's network policy and privileged access. A nonempty Runs network_policy requires gke. items: type: string type: array regions: description: >- Regions the sandbox may run in, as each provider names them. Empty means anywhere the deployment has configured, which is the usual answer: constraining regions constrains capacity, and capacity is the reason to place across providers at all. items: type: string type: array type: object example: allow_spot: true max_price_per_hour_usd: 1.5 min_accelerator_vram_gb: 1 providers: - example regions: - example ManagedAgentsEnvironmentSetupImage: description: >- An immutable setup image published after a manual setup run passes. Identity includes the environment fingerprint, configured runner, observed base digest, and capture generation. properties: baseImageDigest: description: Immutable base image reference observed by Agent Service. type: string capturedAt: description: When Agent Service reported the image ready. format: date-time type: string computeId: description: Agent Service compute whose filesystem was captured. type: string fingerprint: description: Environment configuration fingerprint this image was produced for. type: string generation: description: Capture and boot contract generation. format: int64 type: integer image: description: Immutable digest-pinned image reference. type: string imageId: description: Agent Service image id. type: string runnerImage: description: Exact configured runner reference selected for the captured compute. type: string setupRunId: description: Manual setup run that produced this image. type: string sizeBytes: description: Captured filesystem layer size. format: int64 type: integer usable: description: >- Registry-free read-time projection for the active verified environment and configured runner. A moving tag may have changed since this projection; session admission resolves its exact digest before choosing the captured image or per-session setup. type: boolean warmup: description: >- Agent Service warmup state: pulling, verifying, ready, failed, or unavailable. type: string warmupMessage: description: Bounded Agent Service explanation of the warmup state. type: string required: - imageId - computeId - setupRunId - image - baseImageDigest - fingerprint - runnerImage - generation - sizeBytes - capturedAt type: object example: baseImageDigest: example capturedAt: '2026-02-18T09:30:00.000Z' computeId: example fingerprint: example generation: 1 image: example imageId: example runnerImage: example setupRunId: example sizeBytes: 1 usable: true warmup: example warmupMessage: example ManagedAgentsEnvironmentSetupImageCapture: description: Why a verified setup run published no new reusable image. properties: at: description: When the capture failure was recorded. format: date-time type: string message: description: Sanitized bounded explanation. type: string reason: description: Stable Agent Service capture failure reason. type: string setupRunId: description: Setup run whose capture failed. type: string status: description: Always failed; successful capture is represented by image. enum: - failed type: string required: - status - setupRunId - at type: object example: at: '2026-02-18T09:30:00.000Z' message: example reason: example setupRunId: example status: failed ManagedAgentsEnvironmentSetupRunSummary: description: >- The outcome of one setup run, reduced to what a caller needs to fix it: exit code, failing line, stderr tail, and a hint when the cause is recognised. properties: duration_ms: description: >- Wall-clock duration of the run in milliseconds, provisioning included. format: int64 type: integer exit_code: description: >- Exit code of the setup script when it ran. 124 means the timeout elapsed; absent when the run failed before the script started. type: integer failed_command: description: >- The failing line's command as written in the script, unexpanded, so it never contains a secret's value. type: string failed_line: description: >- 1-based line in the setup script whose command exited non-zero. 0 when unknown. format: int64 type: integer hint: description: >- Human-readable likely fix for a recognised failure cause. Absent rather than guessed when the cause is not recognised. type: string hint_code: description: >- Stable identifier of the recognised failure cause, e.g. command_not_found, pip_not_installed, bash_lc_wrapper, egress_blocked, timeout. Absent when the cause was not recognised. type: string message: description: One-sentence description of the outcome suitable for showing as is. type: string phase: description: >- Phase the run ended in: provision, gpu_check, setup, profile, commit, or cleanup. A failure outside setup is about the platform, not the script. type: string setup_run_id: description: Setup run this summary describes. type: string status: description: succeeded, failed, or cancelled. type: string stderr_tail: description: Last lines of stderr from the script, redacted and bounded to 2 KiB. type: string required: - setup_run_id - status type: object example: duration_ms: 1 exit_code: 1 failed_command: example failed_line: 1 hint: example hint_code: example message: example phase: example setup_run_id: 9f8b1c2d-3e4f-5a6b-7c8d-9e0f1a2b3c4d status: example stderr_tail: example securitySchemes: bearerAuth: type: http scheme: bearer description: A Recursion API key, created in the console under API keys. ````