@agent-compose/sdk 0.5.6 → 0.5.8

package/README.md

@@ -64,7 +64,7 @@ export default defineWorkflow({
 ```
 
 `defineWorkflow` is a thin sugar — it returns the bare `run` function with
-`networkPolicy` / `placeholders` / `snapshots` / `memory` / `postRunHooks`
+`networkPolicy` / `placeholders` / `snapshots`
 attached as metadata that the bundler picks up at registration time. A
 plain `export default async (ctx, sandbox) => {...}` is also valid; you
 just lose the metadata channel.
@@ -183,7 +183,7 @@ await client.register({
   runtimes:    bundled.runtimes,        // [{ name, source }] — embedded so the runner has them locally
   schedule:    "*/30 * * * *",          // optional cron
   factorySlug: "default",                // optional — defaults to "default"
-  // snapshots, memory, postRunHooks, networkPolicy, placeholders — all optional
+  // snapshots, networkPolicy, placeholders — all optional
 });
 ```
 
@@ -217,7 +217,7 @@ separate `metadata` field — useful for "side-channel" facts (PR url, plan
 url) without polluting the structured return.
 
 `invoke` and `invokeAndWait` both accept `{ factorySlug, snapshots,
-memory, postRunHooks, networkPolicy, placeholders, parentRunId }` as the
+networkPolicy, placeholders, parentRunId }` as the
 third argument. Per-invocation `snapshots` merges field-by-field with
 the registered default. `factorySlug` defaults to `"default"`.
 
@@ -379,7 +379,7 @@ CLI equivalents: `agentc snapshot list` / `agentc snapshot delete <run-id> <snap
 
 ### Per-invocation overrides merge field-by-field
 
-The `snapshots` object on `invoke()` is **merged** with the registered template's `snapshots` config — you can override `bootFrom` alone without losing `saveLatest`, or vice versa. Same for `memory` (boolean) and `postRunHooks` (string[]).
+The `snapshots` object on `invoke()` is **merged** with the registered template's `snapshots` config — you can override `bootFrom` alone without losing `saveLatest`, or vice versa.
 
 ---
 

package/dist/agent/__tests__/run-agent-liveness.test.d.ts

@@ -0,0 +1,17 @@
+/**
+ * run-agent working-dir liveness probe (the degraded-FUSE-wedge fix).
+ *
+ * `agent()` delivers the platform context file (AGENTS.md / CLAUDE.md /
+ * GEMINI.md) to the working dir AND uses that write as a bounded liveness
+ * probe of the dir. AGENT_COMPOSE_RUN_DIR points at the /factory FUSE drive,
+ * whose writes HANG uninterruptibly (no timeout) when the mount degraded —
+ * launching the agent there wedges it silently with zero output. The probe
+ * bounds the write at 15s and falls back to /workspace (always present +
+ * writable) when the run dir is wedged.
+ *
+ * These tests pin: (1) the happy path keeps RUN_DIR; (2) a RUN_DIR whose write
+ * hangs forever still selects /workspace within the deadline. `agentLoop` is
+ * mocked so we observe only the `cwd` the loop is launched with; fake timers
+ * drive the 15s deadline without waiting in real time.
+ */
+export {};

package/dist/agent/agent-context.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Harness-agnostic agent context delivery.
+ *
+ * Every coding-agent harness we drive (Claude Code, Codex, Amp, Gemini, …)
+ * looks for an instruction file in its working directory — but they disagree
+ * on the NAME (Codex/Amp read `AGENTS.md`; Claude reads `CLAUDE.md`; Gemini
+ * reads `GEMINI.md`). So `agent()` writes the SAME platform manual under all
+ * three names at the agent's working dir, and every harness finds the one it
+ * knows. The manual is the single source of truth here; `base-env` bakes a
+ * static copy at `/workspace/AGENTS.md` for plain shell sessions, but the
+ * per-run copy `agent()` writes is the authoritative one — it carries the
+ * live connector list and lands at the run's working dir.
+ */
+import type { SandboxProvider } from "../types/sandbox.js";
+/**
+ * The platform manual delivered to every agent, regardless of harness.
+ * Covers the three things an agent must know: where files go (the factory
+ * drive + the persist-by-default working dir), how to pause for a human, and
+ * that credentials are network-injected (never in the env). The live
+ * "Connectors & access" section is appended per-run by `buildAgentContextDoc`.
+ */
+export declare const AGENT_COMPOSE_MANUAL = "# Working inside an Agent Compose sandbox\n\nYou are an agent running in a per-run sandbox on the Agent Compose platform.\nUse the **`agentc` CLI** and the **`@agent-compose/sdk`** for everything below \u2014\ndo NOT hand-roll raw HTTP/curl calls against the platform API. The CLI is on\nyour PATH and already authenticated from the environment\n(`AGENT_COMPOSE_URL` / `AGENT_COMPOSE_API_KEY` / `AGENT_COMPOSE_FACTORY` are\ninjected for this run), so commands just work \u2014 no login, no keys to manage.\n\nThe `/ac:*` skills are installed as Claude Code slash commands (`/ac:invoke`,\n`/ac:events`, `/ac:logs`, `/ac:register`, \u2026) \u2014 reach for them too.\n\n## Files \u2014 your outputs persist by default\n\nYour working directory defaults to **`$AGENT_COMPOSE_RUN_DIR`** \u2014 a per-run\ndirectory on the shared factory drive\n(`$AGENT_COMPOSE_FACTORY_DIR/<workflow>/<version>/<run-id>/`) the platform\ncreates and attributes to this run. **Files you write here persist by\ndefault** \u2014 they show up in the dashboard's Files tab and the run's Artifacts\ncard, with no API calls to save them. The dir already exists and is writable.\n\nNeed throwaway scratch \u2014 heavy build output, package caches, temp files?\n`cd /tmp` (or any path outside `/factory`): anything off the factory drive is\nephemeral and discarded when the sandbox ends. In short: **stay in your working\ndir to keep something, `cd` out to throw it away.**\n\nThe whole shared drive is POSIX-mounted at `/factory`; the dashboard-visible\nroot is `$AGENT_COMPOSE_FACTORY_DIR` (`/factory/files`). Earlier versions and\nruns live in sibling dirs under\n`$AGENT_COMPOSE_FACTORY_DIR/$AGENT_COMPOSE_WORKFLOW/` \u2014 read them for prior\ncontext. Other workflows' dirs are present but not your concern.\n\n## Events \u2014 the factory timeline\n\nRecord something on the run/factory timeline (the dashboard renders these)\nwith the CLI \u2014 your run id is `$RUN_ID`:\n\n    agentc events send \"$RUN_ID\" <name> --summary \"<one line>\" [--body '<json>']\n\nNames like `note.created` / `brief.posted` surface in the Workbench;\n`agentc events list` reads them back. `/ac:events` is the skill equivalent.\n\n## Runs\n\n    agentc list                          # registered workflows  (/ac:list)\n    agentc logs \"$RUN_ID\"                # a run's logs           (/ac:logs)\n    agentc invoke <workflow> -i '<json>' # dispatch a workflow    (/ac:invoke)\n\n## Writing workflow / agent code \u2014 the SDK\n\n`@agent-compose/sdk` is installed in `/workspace` \u2014 import it from any script\nyou write there:\n\n    import { defineWorkflow, agent, AgentComposeClient } from \"@agent-compose/sdk\";\n\nUse `/ac:generate-workflow` / `/ac:generate-agent` to scaffold, then\n`agentc register <file.ts>` (or `/ac:register`).\n\n## Pausing to ask the human \u2014 `agentc pause`\n\nWhen you can't or shouldn't proceed without a human, run `agentc pause`. It\nblocks until they answer on the dashboard, then prints their answer to stdout:\n\n    ANSWER=$(agentc pause --reason \"Notion returned 401 \u2014 connect Notion to continue\" \\\n                          --option retry --option skip)\n\nReach for it the moment you hit \u2014 or foresee \u2014 any of these:\n- **A wall only a human can clear:** a 401/403, a missing credential, an\n  unconnected provider, a host the network refuses. Do NOT retry blindly or try\n  to work around it \u2014 pause and say what needs enabling.\n- **A durable or outward-facing action that needs sign-off:** registering a\n  workflow, deploying, sending email/messages, deleting or overwriting shared\n  data, spending money. Prepare everything, then pause for approval BEFORE you\n  commit it.\n- **A judgment call only the human can settle:** an under-specified request,\n  several valid paths, a conflict with existing state, missing input only they have.\n\nYou compose the `--reason` (the ask) yourself; pass `--option` choices when\nthere are clear ones, omit them for a free-form answer. Read the printed answer\nand act on it. Each agent pauses independently \u2014 pausing doesn't stop the others.\n\n## Credentials\n\nConnector credentials (Google, GitHub, \u2026) are NEVER in your environment.\nThey're injected at the network layer when you call an allowed host \u2014 make the\nrequest **without** an Authorization header and the platform adds it. Don't try\nto read or exfiltrate tokens; they aren't here. The \"Connectors & access\"\nsection below (when present) lists exactly which providers this run can reach.\n\n## Tools in this environment\n\n- `agentc` \u2014 Agent Compose CLI (your primary interface; authed from env)\n- `@agent-compose/sdk` \u2014 installed in /workspace for writing workflows\n- `/ac:*` Claude Code skills \u2014 slash commands for the above\n- `archil` (factory drive), `rtk`, `bun`\n- A world-writable `/workspace` working directory";
+/**
+ * One connector this run can reach, as the agent should see it. Strictly
+ * NON-SECRET — hosts, methods, paths, identity only. The access token is
+ * injected at the network layer and never appears here. The server builds
+ * this list at dispatch from the run's connector grants × the provider
+ * catalogue and delivers it as the `AGENT_COMPOSE_CONNECTORS` env (JSON array).
+ */
+export interface AgentConnectorInfo {
+    /** Provider key (`github`, `notion`, …). */
+    provider: string;
+    /** Human label ("GitHub", "Notion"). */
+    name?: string;
+    /** API hosts the credential is injected for. */
+    hosts?: string[];
+    /** Allowed HTTP methods (Tier-2 narrowing). Empty/absent = any. */
+    methods?: string[];
+    /** Allowed path prefixes (Tier-2 narrowing). Empty/absent = any. */
+    pathPrefixes?: string[];
+    /** GitHub: the repository the minted token is scoped to. */
+    repository?: string;
+    /** Coarse capability the token was minted with. */
+    access?: string;
+    /** Human scope descriptions, when the provider declares them. */
+    scopes?: string[];
+}
+/** Compose the full per-run agent doc: the static manual + the live
+ *  connectors section read from `AGENT_COMPOSE_CONNECTORS` (a JSON array;
+ *  malformed/absent → no section). */
+export declare function buildAgentContextDoc(env: Record<string, string | undefined>): string;
+/**
+ * Write the platform context at the agent's working dir under every harness's
+ * instruction-file name, so whichever CLI runs finds the one it reads. Codex
+ * and Amp read `AGENTS.md` natively; Claude reads `CLAUDE.md`; Gemini reads
+ * `GEMINI.md` — we write identical content to all three rather than detect the
+ * harness (the runtime's `kind` isn't known until after spawn, and a few extra
+ * small files in our own run dir are harmless).
+ *
+ * Best-effort: a write failure logs and is swallowed — never fail an agent
+ * because its context file couldn't be written.
+ */
+export declare function writeAgentContext(args: {
+    sandbox: Pick<SandboxProvider, "files">;
+    cwd: string;
+    env: Record<string, string | undefined>;
+}): Promise<void>;

package/dist/agent/agent-loop-contract.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/agent/agent-loop.d.ts

@@ -8,7 +8,7 @@ import type { AgentStatus, AgentMessage } from "./protocol.js";
 import type { Processor } from "../processors/processor.js";
 import { RequestContext } from "../request-context/request-context.js";
 import { type SteerPayload } from "./steer-control.js";
-export declare const DEFAULT_CLAUDE_MODEL = "claude-opus-4-7";
+export declare const DEFAULT_CLAUDE_MODEL = "claude-fable-5";
 export declare function parseAgentStatus(text: string): AgentStatus | null;
 export interface AgentLoopResult<TResponse = unknown> {
     agentId: string;
@@ -46,6 +46,7 @@ export type AgentMessageSummary = {
     cacheCreationTokens: number;
     durationMs: number;
     numTurns: number;
+    model?: string;
 } | {
     type: "done";
     sessionId: string;

package/dist/client.d.ts

@@ -10,23 +10,16 @@
  * `register()` accepts pre-built sources — use the CLI (`agent-compose
  * register`) or build sources yourself and pass them directly.
  */
-import type { SandboxNetworkPolicy } from "./sandbox.js";
+import type { SandboxNetworkPolicy, SandboxSize } from "./sandbox.js";
 import type { RunEvent } from "./types/events.js";
 import type { WorkflowPlan } from "./types/workflow-plan.js";
-import type { SnapshotConfig, IOSchema } from "./types/workflow-metadata.js";
+import type { SnapshotConfig, IOSchema, ConnectorRequirements, ConnectorOperationTag, InvokePolicy, SandboxResources } from "./types/workflow-metadata.js";
 import type { WorkflowManifest } from "./utils/bundler.js";
 export interface RegisterResult {
     id: string;
     name: string;
     version: string;
     runtimes?: RegisteredRuntime[];
-    /** Non-fatal advisories from the server. Surfaced at register time so the
-     *  operator sees them while still in front of the terminal — currently
-     *  covers "memory extraction is configured but its workflow is not
-     *  registered in this factory". Empty/undefined when registration was
-     *  cleanly resolved against everything the workflow declares it
-     *  depends on. */
-    warnings?: string[];
 }
 export interface RegisteredRuntime {
     id: string;
@@ -37,6 +30,18 @@ export interface RuntimeSourceInput {
     name: string;
     source: string;
 }
+/** GitHub provenance for a registered template's source file — stored as
+ *  `metadata.source` on the registration. `cloud-build` stamps the built
+ *  commit's sha; the dashboard's manual link path writes `sha: "manual"`. */
+export interface TemplateSourceRef {
+    owner: string;
+    repo: string;
+    branch: string;
+    /** Repo-relative file path, e.g. `.agentc/workflows/workflow-deploy.ts`. */
+    path: string;
+    /** Commit sha the version was built from, or `"manual"` for hand-links. */
+    sha: string;
+}
 export interface RegisterWorkflowInput {
     name: string;
     source: string;
@@ -48,6 +53,9 @@ export interface RegisterWorkflowInput {
      *  executed on the server. */
     manifest: WorkflowManifest;
     version?: string;
+    /** Where the source file lives on GitHub — stored as `metadata.source`.
+     *  Named `sourceRef` because `source` is the bundled code itself. */
+    sourceRef?: TemplateSourceRef;
     schedule?: string;
     runtimes?: RuntimeSourceInput[];
     /** Human-readable description declared via
@@ -59,15 +67,20 @@ export interface RegisterWorkflowInput {
     /** All snapshot config — `bootFrom` (where to restore at run start),
      *  `save`, `retain`. See `WorkflowMetadata.snapshots`. */
     snapshots?: SnapshotConfig;
+    /** Sandbox machine size (template default). See `WorkflowMetadata.resources`. */
+    resources?: SandboxResources;
     /** Provider-neutral execution plan detected by the CLI bundler. */
     workflowPlan?: WorkflowPlan;
-    /** Run the built-in memory extractor after this workflow completes.
-     *  Opt-in; defaults to false when omitted. */
-    memory?: boolean;
-    /** Ordered list of workflow names that run as post-hooks after this
-     *  workflow completes. The memory extractor (when `memory: true`)
-     *  runs as an additional hook alongside these. */
-    postRunHooks?: readonly string[];
+    /** Connector requirements declared via `defineWorkflow({ connectors })`
+     *  (ADR-0007). Validated against the server's provider registry at
+     *  registration; tokens are injected at the network layer at dispatch. */
+    connectors?: ConnectorRequirements;
+    /** Connector-catalogue operation tag — see `ConnectorOperationTag`. */
+    connectorOperation?: ConnectorOperationTag;
+    /** Tier-1 invoke ACL declared via `defineWorkflow({ invokePolicy })`.
+     *  Only meaningful when the workflow also declares `connectors` — the
+     *  server gates dispatch on it before binding any grant. */
+    invokePolicy?: InvokePolicy;
     /** Input schema extracted from the workflow's `input` zod schema. */
     inputSchema?: IOSchema;
     /** Output schema extracted from the workflow's `output` zod schema. */
@@ -90,19 +103,20 @@ export interface InvokeWorkflowOptions {
      *  vars after brokering. Replaces the template-level placeholders for
      *  this run only — registered metadata is not mutated. */
     placeholders?: Record<string, string>;
-    /** Per-invocation memory-extractor override — `false` skips the
-     *  built-in memory hook for this run; omitting leaves the registered
-     *  default in place. */
-    memory?: boolean;
-    /** Per-invocation post-hook override — replaces the registered
-     *  `postRunHooks` array for this run only. */
-    postRunHooks?: readonly string[];
+    /** Per-invocation machine-size override of the template's `resources.size`.
+     *  `small` (default) | `medium` | `large`; omit → the template default,
+     *  else `small`. Honoured on Vercel (→ vCPUs); E2B ignores it. */
+    size?: SandboxSize;
     /** Explicit parent run id. Pass `null` to suppress ambient RUN_ID auto-detection. */
     parentRunId?: string | null;
     /** Agent loop inside the parent run that caused this invoke, when applicable. */
     agentId?: string | null;
     /** Factory slug. Defaults to `"default"`. */
     factorySlug?: string;
+    /** Idempotency key — sent as the `Idempotency-Key` header. A repeat invoke
+     *  with the same key inside the server's dedup window returns the original
+     *  run instead of starting a new one (matches `resumePause`'s pattern). */
+    idempotencyKey?: string;
 }
 export interface InvokeAndWaitOptions extends InvokeWorkflowOptions {
     timeoutMs?: number;
@@ -127,6 +141,53 @@ export interface TemplateRow {
 export interface ListTemplatesOptions {
     factorySlug?: string;
 }
+/** A human member of your team — the people an agent (or you) can @-flag. */
+export interface TeamMember {
+    /** Membership row id. */
+    id: string;
+    /** The user id — what you pass to `createMentions({ mentionedUserIds })`. */
+    userId: string;
+    role: string;
+    email: string;
+    name: string;
+    joinedAt: string;
+}
+/** A "you were flagged" ping, persisted server-side so it reaches the
+ *  mentioned teammate in their Workbench. */
+export interface Mention {
+    id: string;
+    factoryId: string;
+    mentionedUserId: string;
+    /** Who flagged: 'user' | 'api_key' | 'run' | 'system'. */
+    actorKind: string;
+    actorId: string | null;
+    actorLabel: string | null;
+    /** Where it lives: 'doc' | 'comment' | 'plan' | 'run'. */
+    contextKind: string;
+    contextPath: string | null;
+    /** Ready-made relative dashboard URL the Workbench card links to. */
+    contextUrl: string | null;
+    text: string;
+    runId: string | null;
+    seenAt: string | null;
+    resolvedAt: string | null;
+    createdAt: string;
+}
+export interface CreateMentionsInput {
+    /** Team-member user ids to flag (1–20). Discover them via `listMembers()`.
+     *  Non-members are dropped server-side. */
+    mentionedUserIds: string[];
+    /** The flag message shown in the teammate's Workbench. */
+    text: string;
+    contextKind: "doc" | "comment" | "plan" | "run";
+    /** Factory-relative file path or comment thread id, when applicable. */
+    contextPath?: string;
+    /** Ready-made relative dashboard URL the Workbench card links to (e.g.
+     *  `/factories/<slug>/files/view?path=<plan>`). */
+    contextUrl?: string;
+    runId?: string;
+    factorySlug?: string;
+}
 export interface CreateFactoryInput {
     slug: string;
     name: string;
@@ -182,6 +243,13 @@ export interface RunStatus<TOutput = unknown> {
     id: string;
     status: RunState;
     output?: TOutput;
+    /** The run's latest (`saveLatest`) snapshot id, populated once the run has
+     *  succeeded — the boot source to fork this run's evolved filesystem from
+     *  (pass as `snapshots.bootFrom` on a follow-up invoke). `null` while the run
+     *  is still in flight or when it captured no snapshot. Lets an orchestrator
+     *  fork a child straight off the `invokeChild` result without a separate
+     *  `listRunSnapshots` call. */
+    latestSnapshotId?: string | null;
 }
 /** ADR-0006 step 10 — actor record returned on a successful resume.
  *  Shape mirrors the server's `PauseResumeActor` type after the row
@@ -317,6 +385,20 @@ export interface EventRow {
     idempotencyKey: string | null;
     createdAt: string;
 }
+export interface RunArtifactRow {
+    path: string;
+    factorySlug: string | null;
+    sizeBytes: number | null;
+    lastWriteAt: string;
+    /** Opening text of the file (≤320 chars) — null for binary/empty. */
+    preview: string | null;
+}
+export interface FactoryFileWriteResult {
+    path: string;
+    contentHash: string;
+    sizeBytes: number;
+    created: boolean;
+}
 export interface ReportEventInput {
     name: string;
     body: unknown;
@@ -331,7 +413,7 @@ export interface ListEventsOptions {
     factorySlug?: string;
     limit?: number;
     /** Case-insensitive substring match. Server uses `ILIKE %name%`, so
-     *  `"mem"` matches `memory.fact`, `memory.usage`, etc. Pass the
+     *  `"site"` matches `site.created`, `site.failed`, etc. Pass the
      *  full event name for an effectively-exact filter (any string is a
      *  substring of itself). */
     name?: string;
@@ -580,6 +662,29 @@ export declare class AgentComposeClient {
      * like quality.accepted, defect.regression, or intervention.override. */
     reportEvent(runId: string, input: ReportEventInput): Promise<EventRow>;
     listRunEvents(runId: string): Promise<EventRow[]>;
+    /** Files the run wrote on the factory drive — run-attributed revisions,
+     *  latest write per path, paths the run later deleted excluded. */
+    listRunArtifacts(runId: string): Promise<RunArtifactRow[]>;
+    /** Write (create or overwrite) one file on a factory's drive. */
+    putFactoryFile(path: string, content: string | Uint8Array, opts?: {
+        factorySlug?: string;
+        contentType?: string;
+    }): Promise<FactoryFileWriteResult>;
+    /** Read one file's current content (or a specific revision) as text. */
+    getFactoryFile(path: string, opts?: {
+        factorySlug?: string;
+        revision?: number;
+    }): Promise<string>;
+    /** List the human members of your team — the people you (or an agent) can
+     *  @-flag with `createMentions`. Each row's `userId` is what
+     *  `mentionedUserIds` expects. */
+    listMembers(): Promise<TeamMember[]>;
+    /** Flag one or more teammates — a durable ping that lands in their factory
+     *  Workbench. Use from an agent (e.g. a remediation plan that needs a human
+     *  to rotate a secret) or any team automation. Resolve `mentionedUserIds`
+     *  via `listMembers()`. When run inside a sandbox the run-callback token is
+     *  forwarded so the ping is attributed to the run ("flagged by <workflow>"). */
+    createMentions(input: CreateMentionsInput): Promise<Mention[]>;
     /** List events ingested into a factory, newest first. Supports
      *  case-insensitive substring filter (`name`) and timestamp-cursor
      *  pagination (`before`). Returns `{ events, has_more }` — the

package/dist/index.d.ts

@@ -16,7 +16,8 @@ export type { WorkflowDefinition } from "./types/workflow.js";
 export { defineSandboxEnvironment } from "./types/sandbox-environment.js";
 export type { SandboxEnvironmentDefinition } from "./types/sandbox-environment.js";
 export type { AgentRuntime, McpServerConfig, ModelExecutionContract, ToolCallGateResult, RuntimeOptions, } from "./types/runtime.js";
-export type { WorkflowFn, WorkflowCtx, WorkflowRun, AgentBudget, WorkflowHooks, SnapshotConfig, BootSnapshot, ReuseSnapshot, IOSchema, OutputSchema, WorkflowMemoryConfig, } from "./types/workflow.js";
+export type { WorkflowFn, WorkflowCtx, WorkflowRun, AgentBudget, WorkflowHooks, SnapshotConfig, BootSnapshot, ReuseSnapshot, IOSchema, OutputSchema, } from "./types/workflow.js";
+export type { ConnectorRequestRules } from "./types/workflow-metadata.js";
 export type { RunSnapshotEntry } from "./client.js";
 export type { WorkflowPlan, WorkflowStepPlan } from "./types/workflow-plan.js";
 export type { BaseExecutionContext, InvokeChild } from "./types/execution-context.js";
@@ -27,7 +28,7 @@ export type { Processor, ProcessorContext, ProcessorVerdict, ToolCall, } from ".
 export type { AgentMessage, AgentMessageInit, AgentMessageText, AgentMessageThinking, AgentMessageToolUse, AgentMessageToolResult, AgentMessageDone, AgentMessageError, AgentMessageUsage, AgentStatus, } from "./types/protocol.js";
 export type { SandboxProvider, DesktopSandboxProvider, } from "./types/sandbox.js";
 export { AgentComposeClient } from "./client.js";
-export type { RegisterResult, RegisterWorkflowInput, RuntimeSourceInput, InvokeWorkflowOptions, InvokeAndWaitOptions, InvokeResult, ListSnapshotsOptions, TemplateRow, ListTemplatesOptions, CreateFactoryInput, UpdateFactoryInput, SecretOptions, SetSecretResult, SecretListEntry, CreateApiKeyInput, StreamRunLogsOptions, EventSubjectType, EventRow, ReportEventInput, ListEventsOptions, ListEventsResult, RunLogLine, ListRunLogsOptions, RegisteredRuntime, RunState, RunStatus, FactoryRow, SnapshotListEntry, SnapshotListResponse, ApiKey, ApiKeyCreated, UsageRollupRow, UsageResponse, CancelRunResponse, RequestAgentPauseOptions, RequestAgentPauseResponse, SendAgentMessageOptions, SendAgentMessageResponse, AnswerSteerOptions, ResumePauseOptions, ResumePauseResponse, ResumePauseSuccess, ResumePausePending, ResumePauseActor, } from "./client.js";
+export type { RegisterResult, RegisterWorkflowInput, RuntimeSourceInput, TemplateSourceRef, InvokeWorkflowOptions, InvokeAndWaitOptions, InvokeResult, ListSnapshotsOptions, TemplateRow, ListTemplatesOptions, CreateFactoryInput, UpdateFactoryInput, SecretOptions, SetSecretResult, SecretListEntry, CreateApiKeyInput, StreamRunLogsOptions, TeamMember, Mention, CreateMentionsInput, EventSubjectType, EventRow, ReportEventInput, ListEventsOptions, ListEventsResult, RunLogLine, ListRunLogsOptions, RegisteredRuntime, RunState, RunStatus, FactoryRow, SnapshotListEntry, SnapshotListResponse, ApiKey, ApiKeyCreated, UsageRollupRow, UsageResponse, CancelRunResponse, RequestAgentPauseOptions, RequestAgentPauseResponse, SendAgentMessageOptions, SendAgentMessageResponse, AnswerSteerOptions, ResumePauseOptions, ResumePauseResponse, ResumePauseSuccess, ResumePausePending, ResumePauseActor, } from "./client.js";
 export { parseSseStream } from "./sse.js";
 export { AgentComposeError } from "./errors.js";
 export { formatError } from "./utils/errors.js";
@@ -50,7 +51,9 @@ export { bashTool, codingTools, editTool, readTool, writeTool } from "./tools/in
 export type { CodingTool } from "./tools/index.js";
 export type { RunEvent } from "./types/events.js";
 export { createSandbox, reconnectSandbox, killAllSandboxes, killSandboxById, getSandboxQuotas, listOwnedSandboxes, deleteSandboxSnapshot, makeSandboxProvider, makeDesktopSandboxProvider, parseSseExecStream, AGENT_COMPOSE_TAG } from "./sandbox.js";
-export type { SandboxCreateOpts, SandboxNetworkPolicy, SandboxNetworkHeaderTransform, SandboxNetworkAllowRule, SandboxNetworkSubnetPolicy, SandboxProviderName, SandboxQuotaResult, OwnedSandboxResult, OwnedSandbox, ParseSseExecStreamOptions, SandboxCommandRunOptions, SandboxCommandResult, } from "./sandbox.js";
+export { SandboxUnavailableError, SANDBOX_UNAVAILABLE_PREFIX } from "./sandbox-errors.js";
+export type { SandboxCreateOpts, SandboxNetworkPolicy, SandboxNetworkHeaderTransform, SandboxNetworkAllowRule, SandboxNetworkSubnetPolicy, SandboxProviderName, SandboxQuotaResult, OwnedSandboxResult, OwnedSandbox, SandboxSize, ParseSseExecStreamOptions, SandboxCommandRunOptions, SandboxCommandResult, } from "./sandbox.js";
+export type { SandboxResources } from "./types/workflow-metadata.js";
 export { runWorkflow, WorkflowError, EngineError, classifyError, parseNameVersion } from "./workflows/engine.js";
 export type { WorkflowResult, RunWorkflowOptions, EngineSubsystem } from "./workflows/engine.js";
 export { buildInvokeChild } from "./workflows/invoke-child.js";
@@ -60,11 +63,13 @@ export { invokeStep, serveStep, parseStepResult, buildStepEnvs, StepExecutionErr
 export { PauseError, PauseExpiredError, PauseSchemaError, PauseRequestError, } from "./pause/errors.js";
 export type { PauseErrorCode } from "./pause/errors.js";
 export type { PauseRequest } from "./pause/pause-core.js";
-export type { RequestDecisionRequest, WaitForEventRequest } from "./pause/wrappers.js";
+export type { WaitForEventRequest } from "./pause/wrappers.js";
 export type { StepRequest, StepResult, StepInvocationError, StepPauseRequest, StepHandler, StepHandlerResult, ServeStepRequest, } from "./step-invocation/index.js";
 export { agentLoop, parseAgentStatus, DEFAULT_CLAUDE_MODEL } from "./agent/agent-loop.js";
 export type { AgentLifecycleEvent, AgentLoopOpts, AgentLoopResult } from "./agent/agent-loop.js";
 export { agent } from "./agent/run-agent.js";
 export type { AgentOpts } from "./agent/run-agent.js";
+export { AGENT_COMPOSE_MANUAL, buildAgentContextDoc, writeAgentContext } from "./agent/agent-context.js";
+export type { AgentConnectorInfo } from "./agent/agent-context.js";
 export { AgentMessageSchema, parseAgentResponse } from "./agent/protocol.js";
 export { importSourceModule, TMP_DIR, LATEST_VERSION } from "./utils/source-loader.js";