@ai-sdk/workflow 1.0.0-canary.93 → 1.0.0

package/dist/index.mjs

@@ -1,7 +1,8 @@
 // src/workflow-agent.ts
 import {
   getErrorMessage,
-  validateTypes
+  validateTypes,
+  withUserAgentSuffix
 } from "@ai-sdk/provider-utils";
 import {
   Output,
@@ -365,9 +366,10 @@ async function* streamTextIterator({
   telemetry,
   includeRawChunks = false,
   repairToolCall,
-  responseFormat
+  responseFormat,
+  experimental_sandbox: sandbox
 }) {
-  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
+  var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k;
   let conversationPrompt = [...prompt];
   let currentModel = model;
   let currentGenerationSettings = generationSettings != null ? generationSettings : {};
@@ -390,6 +392,7 @@ async function* streamTextIterator({
     if ((_a = currentGenerationSettings.abortSignal) == null ? void 0 : _a.aborted) {
       break;
     }
+    let stepSandbox = sandbox;
     if (prepareStep) {
       const prepareResult = await prepareStep({
         model: currentModel,
@@ -397,8 +400,10 @@ async function* streamTextIterator({
         steps,
         messages: conversationPrompt,
         runtimeContext: currentRuntimeContext,
-        toolsContext: currentToolsContext
+        toolsContext: currentToolsContext,
+        experimental_sandbox: sandbox
       });
+      stepSandbox = (_b = prepareResult == null ? void 0 : prepareResult.experimental_sandbox) != null ? _b : sandbox;
       if ((prepareResult == null ? void 0 : prepareResult.model) !== void 0) {
         currentModel = prepareResult.model;
       }
@@ -508,7 +513,7 @@ async function* streamTextIterator({
       });
     }
     const stepStartModelInfo = getModelInfo(currentModel);
-    await ((_b = telemetryDispatcher.onStepStart) == null ? void 0 : _b.call(telemetryDispatcher, {
+    await ((_c = telemetryDispatcher.onStepStart) == null ? void 0 : _c.call(telemetryDispatcher, {
       callId: "workflow-agent",
       provider: stepStartModelInfo.provider,
       modelId: stepStartModelInfo.modelId,
@@ -525,13 +530,13 @@ async function* streamTextIterator({
       toolsContext: currentToolsContext
     }));
     try {
-      const effectiveTools = currentActiveTools && currentActiveTools.length > 0 ? (_c = filterActiveTools({
+      const effectiveTools = currentActiveTools && currentActiveTools.length > 0 ? (_d = filterActiveTools({
         tools,
         activeTools: currentActiveTools
-      })) != null ? _c : tools : tools;
+      })) != null ? _d : tools : tools;
       const serializedTools = serializeToolSet(effectiveTools);
       const modelCallInfo = getModelInfo(currentModel);
-      await ((_d = telemetryDispatcher.onLanguageModelCallStart) == null ? void 0 : _d.call(telemetryDispatcher, {
+      await ((_e = telemetryDispatcher.onLanguageModelCallStart) == null ? void 0 : _e.call(telemetryDispatcher, {
         callId: "workflow-agent",
         provider: modelCallInfo.provider,
         modelId: modelCallInfo.modelId,
@@ -565,10 +570,10 @@ async function* streamTextIterator({
           stepNumber
         }
       );
-      await ((_i = telemetryDispatcher.onLanguageModelCallEnd) == null ? void 0 : _i.call(telemetryDispatcher, {
+      await ((_j = telemetryDispatcher.onLanguageModelCallEnd) == null ? void 0 : _j.call(telemetryDispatcher, {
         callId: step.callId,
-        provider: (_f = (_e = step.model) == null ? void 0 : _e.provider) != null ? _f : "unknown",
-        modelId: (_h = (_g = step.model) == null ? void 0 : _g.modelId) != null ? _h : "unknown",
+        provider: (_g = (_f = step.model) == null ? void 0 : _f.provider) != null ? _g : "unknown",
+        modelId: (_i = (_h = step.model) == null ? void 0 : _h.modelId) != null ? _i : "unknown",
         finishReason: step.finishReason,
         usage: step.usage,
         content: step.content,
@@ -603,6 +608,7 @@ async function* streamTextIterator({
           step,
           runtimeContext: currentRuntimeContext,
           toolsContext: currentToolsContext,
+          experimental_sandbox: stepSandbox,
           providerExecutedToolResults
         };
         conversationPrompt.push({
@@ -647,7 +653,7 @@ async function* streamTextIterator({
       if (resolvedOnStepEnd) {
         await resolvedOnStepEnd(step);
       }
-      await ((_j = telemetryDispatcher.onStepEnd) == null ? void 0 : _j.call(telemetryDispatcher, normalizeStepForTelemetry(step)));
+      await ((_k = telemetryDispatcher.onStepEnd) == null ? void 0 : _k.call(telemetryDispatcher, normalizeStepForTelemetry(step)));
     } catch (error) {
       if (onError) {
         await onError({ error });
@@ -661,7 +667,8 @@ async function* streamTextIterator({
       messages: conversationPrompt,
       step: lastStep,
       runtimeContext: currentRuntimeContext,
-      toolsContext: currentToolsContext
+      toolsContext: currentToolsContext,
+      experimental_sandbox: sandbox
     };
   }
   return conversationPrompt;
@@ -701,7 +708,7 @@ function sanitizeProviderMetadataForToolCall(metadata) {
 // src/workflow-agent.ts
 var WorkflowAgent = class {
   constructor(options) {
-    var _a, _b, _c;
+    var _a, _b, _c, _d;
     this.id = options.id;
     this.model = options.model;
     this.tools = (_a = options.tools) != null ? _a : {};
@@ -715,6 +722,7 @@ var WorkflowAgent = class {
     this.output = options.output;
     this.experimentalRepairToolCall = options.experimental_repairToolCall;
     this.experimentalDownload = options.experimental_download;
+    this.experimentalSandbox = options.experimental_sandbox;
     this.prepareStep = options.prepareStep;
     this.constructorOnStepEnd = (_c = options.onStepEnd) != null ? _c : options.onStepFinish;
     const { onFinish, onEnd = onFinish } = options;
@@ -724,6 +732,7 @@ var WorkflowAgent = class {
     this.constructorOnToolExecutionStart = options.onToolExecutionStart;
     this.constructorOnToolExecutionEnd = options.onToolExecutionEnd;
     this.prepareCall = options.prepareCall;
+    this.allowSystemInMessages = (_d = options.allowSystemInMessages) != null ? _d : false;
     this.generationSettings = {
       maxOutputTokens: options.maxOutputTokens,
       temperature: options.temperature,
@@ -743,7 +752,7 @@ var WorkflowAgent = class {
     throw new Error("Not implemented");
   }
   async stream(options) {
-    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _A, _B, _C, _D, _E, _F, _G, _H, _I, _J, _K, _L, _M, _N, _O, _P;
+    var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j, _k, _l, _m, _n, _o, _p, _q, _r, _s, _t, _u, _v, _w, _x, _y, _z, _A, _B, _C, _D, _E, _F, _G, _H, _I, _J, _K, _L, _M, _N, _O, _P, _Q, _R;
     const { onFinish, onEnd = onFinish } = options;
     let effectiveModel = this.model;
     let effectiveInstructions = (_a = options.system) != null ? _a : this.instructions;
@@ -811,11 +820,11 @@ var WorkflowAgent = class {
     });
     const prompt = await standardizePrompt({
       system: effectiveInstructions,
-      allowSystemInMessages: true,
-      // TODO: consider exposing this as a parameter
+      allowSystemInMessages: this.allowSystemInMessages,
       ...effectivePrompt != null ? { prompt: effectivePrompt } : { messages: effectiveMessages }
     });
     const download = (_i = options.experimental_download) != null ? _i : this.experimentalDownload;
+    const sandbox = (_j = options.experimental_sandbox) != null ? _j : this.experimentalSandbox;
     const collectedApprovals = collectToolApprovals({
       messages: prompt.messages
     });
@@ -825,6 +834,7 @@ var WorkflowAgent = class {
         toolName: collected.toolCall.toolName,
         input: collected.toolCall.input,
         reason: collected.approvalResponse.reason,
+        providerExecuted: collected.toolCall.providerExecuted === true,
         collected
       })
     );
@@ -833,14 +843,24 @@ var WorkflowAgent = class {
         toolCallId: collected.toolCall.toolCallId,
         toolName: collected.toolCall.toolName,
         input: collected.toolCall.input,
-        reason: collected.approvalResponse.reason
+        reason: collected.approvalResponse.reason,
+        providerExecuted: collected.toolCall.providerExecuted === true
       })
     );
+    const providerExecutedApprovalIds = new Set(
+      [
+        ...collectedApprovals.approvedToolApprovals,
+        ...collectedApprovals.deniedToolApprovals
+      ].filter((collected) => collected.toolCall.providerExecuted === true).map((collected) => collected.approvalResponse.approvalId)
+    );
     if (approvedToolApprovals.length > 0 || deniedToolApprovals.length > 0) {
       const _toolResultMessages = [];
       const toolResultContent = [];
       const approvedRawResults = [];
       for (const approval of approvedToolApprovals) {
+        if (approval.providerExecuted) {
+          continue;
+        }
         const tool2 = this.tools[approval.toolName];
         if (tool2 && typeof tool2.execute === "function") {
           if (!tool2.needsApproval) {
@@ -873,7 +893,7 @@ var WorkflowAgent = class {
               runtimeContext: effectiveRuntimeContext
             });
             if (policyDenied.length > 0) {
-              revalidationReason = (_j = policyDenied[0].approvalResponse.reason) != null ? _j : "Tool approval denied";
+              revalidationReason = (_k = policyDenied[0].approvalResponse.reason) != null ? _k : "Tool approval denied";
             }
           } catch (error) {
             revalidationReason = getErrorMessage(error);
@@ -910,7 +930,7 @@ var WorkflowAgent = class {
               input: approval.input
             };
             const messages2 = prompt.messages;
-            await ((_k = telemetryDispatcher.onToolExecutionStart) == null ? void 0 : _k.call(telemetryDispatcher, {
+            await ((_l = telemetryDispatcher.onToolExecutionStart) == null ? void 0 : _l.call(telemetryDispatcher, {
               toolCall: toolCallEvent,
               stepNumber: 0,
               messages: messages2,
@@ -920,14 +940,15 @@ var WorkflowAgent = class {
             const executeApprovedTool = () => execute(approval.input, {
               toolCallId: approval.toolCallId,
               messages: [],
-              context: resolvedContext
+              context: resolvedContext,
+              experimental_sandbox: sandbox
             });
             const toolResult = telemetryDispatcher.executeTool != null ? await telemetryDispatcher.executeTool({
               callId: "workflow-agent",
               toolCallId: approval.toolCallId,
               execute: executeApprovedTool
             }) : await executeApprovedTool();
-            await ((_l = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _l.call(telemetryDispatcher, {
+            await ((_m = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _m.call(telemetryDispatcher, {
               toolCall: toolCallEvent,
               stepNumber: 0,
               durationMs: Date.now() - startTime,
@@ -959,7 +980,7 @@ var WorkflowAgent = class {
             });
           } catch (error) {
             const errorMessage = getErrorMessage(error);
-            await ((_m = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _m.call(telemetryDispatcher, {
+            await ((_n = telemetryDispatcher.onToolExecutionEnd) == null ? void 0 : _n.call(telemetryDispatcher, {
               toolCall: {
                 type: "tool-call",
                 toolCallId: approval.toolCallId,
@@ -998,6 +1019,9 @@ var WorkflowAgent = class {
         }
       }
       for (const denial of deniedToolApprovals) {
+        if (denial.providerExecuted) {
+          continue;
+        }
         toolResultContent.push({
           type: "tool-result",
           toolCallId: denial.toolCallId,
@@ -1012,15 +1036,21 @@ var WorkflowAgent = class {
       for (const msg of prompt.messages) {
         if (msg.role === "assistant" && Array.isArray(msg.content)) {
           const filtered = msg.content.filter(
-            (p) => p.type !== "tool-approval-request"
+            (p) => p.type !== "tool-approval-request" || providerExecutedApprovalIds.has(p.approvalId)
           );
           if (filtered.length > 0) {
             cleanedMessages.push({ ...msg, content: filtered });
           }
         } else if (msg.role === "tool") {
-          const filtered = msg.content.filter(
-            (p) => p.type !== "tool-approval-response"
-          );
+          const filtered = msg.content.flatMap((p) => {
+            if (p.type !== "tool-approval-response") {
+              return [p];
+            }
+            if (!providerExecutedApprovalIds.has(p.approvalId)) {
+              return [];
+            }
+            return [{ ...p, providerExecuted: true }];
+          });
           if (filtered.length > 0) {
             cleanedMessages.push({ ...msg, content: filtered });
           }
@@ -1050,7 +1080,7 @@ var WorkflowAgent = class {
       download
     });
     const effectiveAbortSignal = mergeAbortSignals(
-      (_n = options.abortSignal) != null ? _n : effectiveGenerationSettings.abortSignal,
+      (_o = options.abortSignal) != null ? _o : effectiveGenerationSettings.abortSignal,
       options.timeout
     );
     const mergedGenerationSettings = {
@@ -1084,9 +1114,13 @@ var WorkflowAgent = class {
         providerOptions: options.providerOptions
       }
     };
+    mergedGenerationSettings.headers = withUserAgentSuffix(
+      (_p = mergedGenerationSettings.headers) != null ? _p : {},
+      "ai-sdk-agent/workflow"
+    );
     const mergedOnStepEnd = mergeCallbacks(
       this.constructorOnStepEnd,
-      (_o = options.onStepEnd) != null ? _o : options.onStepFinish
+      (_q = options.onStepEnd) != null ? _q : options.onStepFinish
     );
     const mergedOnEnd = mergeCallbacks(
       this.constructorOnEnd,
@@ -1109,11 +1143,11 @@ var WorkflowAgent = class {
       options.onToolExecutionEnd
     );
     const effectiveToolChoice = effectiveToolChoiceFromPrepare;
-    const effectiveActiveTools = (_p = options.activeTools) != null ? _p : this.activeTools;
-    const effectiveTools = effectiveActiveTools && effectiveActiveTools.length > 0 ? (_q = filterActiveTools2({
+    const effectiveActiveTools = (_r = options.activeTools) != null ? _r : this.activeTools;
+    const effectiveTools = effectiveActiveTools && effectiveActiveTools.length > 0 ? (_s = filterActiveTools2({
       tools: this.tools,
       activeTools: effectiveActiveTools
-    })) != null ? _q : this.tools : this.tools;
+    })) != null ? _s : this.tools : this.tools;
     const effectiveModelInfo = getModelInfo2(effectiveModel);
     let runtimeContext = effectiveRuntimeContext;
     let toolsContext = effectiveToolsContext;
@@ -1128,7 +1162,7 @@ var WorkflowAgent = class {
         toolsContext
       });
     }
-    await ((_t = telemetryDispatcher.onStart) == null ? void 0 : _t.call(telemetryDispatcher, {
+    await ((_v = telemetryDispatcher.onStart) == null ? void 0 : _v.call(telemetryDispatcher, {
       callId: "workflow-agent",
       operationId: "ai.workflowAgent.stream",
       provider: effectiveModelInfo.provider,
@@ -1146,15 +1180,15 @@ var WorkflowAgent = class {
       frequencyPenalty: mergedGenerationSettings.frequencyPenalty,
       stopSequences: mergedGenerationSettings.stopSequences,
       seed: mergedGenerationSettings.seed,
-      maxRetries: (_r = mergedGenerationSettings.maxRetries) != null ? _r : 2,
+      maxRetries: (_t = mergedGenerationSettings.maxRetries) != null ? _t : 2,
       timeout: void 0,
       headers: mergedGenerationSettings.headers,
       providerOptions: mergedGenerationSettings.providerOptions,
-      output: (_s = options.output) != null ? _s : this.output,
+      output: (_u = options.output) != null ? _u : this.output,
       runtimeContext,
       toolsContext
     }));
-    const executeToolWithCallbacks = async (toolCall, tools, messages2, perToolContexts, currentStepNumber = 0) => {
+    const executeToolWithCallbacks = async (toolCall, tools, messages2, perToolContexts, currentStepNumber = 0, stepSandbox) => {
       var _a2, _b2, _c2, _d2;
       const toolCallEvent = {
         type: "tool-call",
@@ -1186,7 +1220,14 @@ var WorkflowAgent = class {
       const startTime = Date.now();
       let result;
       try {
-        const execute = () => executeTool(toolCall, tools, messages2, resolvedContext, download);
+        const execute = () => executeTool(
+          toolCall,
+          tools,
+          messages2,
+          resolvedContext,
+          download,
+          stepSandbox
+        );
         result = telemetryDispatcher.executeTool != null ? await telemetryDispatcher.executeTool({
           callId: "workflow-agent",
           toolCallId: toolCall.toolCallId,
@@ -1293,7 +1334,7 @@ var WorkflowAgent = class {
         }
       }));
     };
-    if ((_u = mergedGenerationSettings.abortSignal) == null ? void 0 : _u.aborted) {
+    if ((_w = mergedGenerationSettings.abortSignal) == null ? void 0 : _w.aborted) {
       if (options.onAbort) {
         await options.onAbort({ steps });
       }
@@ -1310,19 +1351,20 @@ var WorkflowAgent = class {
       tools: effectiveTools,
       writable: options.writable,
       prompt: modelPrompt,
-      stopConditions: (_v = options.stopWhen) != null ? _v : this.stopWhen,
+      stopConditions: (_x = options.stopWhen) != null ? _x : this.stopWhen,
       onStepEnd: mergedOnStepEnd,
       onStepStart: mergedOnStepStart,
       onError: options.onError,
-      prepareStep: (_w = options.prepareStep) != null ? _w : this.prepareStep,
+      prepareStep: (_y = options.prepareStep) != null ? _y : this.prepareStep,
       generationSettings: mergedGenerationSettings,
       toolChoice: effectiveToolChoice,
       runtimeContext,
       toolsContext,
       telemetry: effectiveTelemetry,
-      includeRawChunks: (_x = options.includeRawChunks) != null ? _x : false,
-      repairToolCall: (_y = options.experimental_repairToolCall) != null ? _y : this.experimentalRepairToolCall,
-      responseFormat: await ((_A = (_z = options.output) != null ? _z : this.output) == null ? void 0 : _A.responseFormat)
+      includeRawChunks: (_z = options.includeRawChunks) != null ? _z : false,
+      repairToolCall: (_A = options.experimental_repairToolCall) != null ? _A : this.experimentalRepairToolCall,
+      responseFormat: await ((_C = (_B = options.output) != null ? _B : this.output) == null ? void 0 : _C.responseFormat),
+      experimental_sandbox: sandbox
     });
     let finalMessages;
     let encounteredError;
@@ -1330,7 +1372,7 @@ var WorkflowAgent = class {
     try {
       let result = await iterator.next();
       while (!result.done) {
-        if ((_B = mergedGenerationSettings.abortSignal) == null ? void 0 : _B.aborted) {
+        if ((_D = mergedGenerationSettings.abortSignal) == null ? void 0 : _D.aborted) {
           wasAborted = true;
           if (options.onAbort) {
             await options.onAbort({ steps });
@@ -1343,8 +1385,10 @@ var WorkflowAgent = class {
           step,
           runtimeContext: yieldedRuntimeContext,
           toolsContext: yieldedToolsContext,
+          experimental_sandbox: stepSandbox,
           providerExecutedToolResults
         } = result.value;
+        const toolExecutionSandbox = stepSandbox != null ? stepSandbox : sandbox;
         const currentStepNumber = steps.length;
         if (step) {
           steps.push(step);
@@ -1399,7 +1443,8 @@ var WorkflowAgent = class {
                   effectiveTools,
                   iterMessages,
                   toolsContext,
-                  currentStepNumber
+                  currentStepNumber,
+                  toolExecutionSandbox
                 )
               )
             );
@@ -1463,8 +1508,8 @@ var WorkflowAgent = class {
               await mergedOnEnd({
                 steps,
                 messages: messages2,
-                text: (_C = lastStep == null ? void 0 : lastStep.text) != null ? _C : "",
-                finishReason: (_D = lastStep == null ? void 0 : lastStep.finishReason) != null ? _D : "other",
+                text: (_E = lastStep == null ? void 0 : lastStep.text) != null ? _E : "",
+                finishReason: (_F = lastStep == null ? void 0 : lastStep.finishReason) != null ? _F : "other",
                 usage: totalUsage,
                 totalUsage,
                 runtimeContext,
@@ -1476,7 +1521,7 @@ var WorkflowAgent = class {
               const telemetrySteps = steps.map(normalizeStepForTelemetry2);
               const lastStep = telemetrySteps[telemetrySteps.length - 1];
               const totalUsage = aggregateUsage(steps);
-              await ((_E = telemetryDispatcher.onEnd) == null ? void 0 : _E.call(telemetryDispatcher, {
+              await ((_G = telemetryDispatcher.onEnd) == null ? void 0 : _G.call(telemetryDispatcher, {
                 ...lastStep,
                 steps: telemetrySteps,
                 usage: totalUsage,
@@ -1501,8 +1546,8 @@ var WorkflowAgent = class {
               }
             }
             if (options.writable) {
-              const sendFinish = (_F = options.sendFinish) != null ? _F : true;
-              const preventClose = (_G = options.preventClose) != null ? _G : false;
+              const sendFinish = (_H = options.sendFinish) != null ? _H : true;
+              const preventClose = (_I = options.preventClose) != null ? _I : false;
               if (sendFinish || !preventClose) {
                 await closeStream(options.writable, preventClose, sendFinish);
               }
@@ -1522,7 +1567,8 @@ var WorkflowAgent = class {
                 effectiveTools,
                 iterMessages,
                 toolsContext,
-                currentStepNumber
+                currentStepNumber,
+                toolExecutionSandbox
               )
             )
           );
@@ -1625,10 +1671,10 @@ var WorkflowAgent = class {
       } else if (options.onError) {
         await options.onError({ error });
       }
-      await ((_H = telemetryDispatcher.onError) == null ? void 0 : _H.call(telemetryDispatcher, error));
+      await ((_J = telemetryDispatcher.onError) == null ? void 0 : _J.call(telemetryDispatcher, error));
     }
     const messages = finalMessages != null ? finalMessages : prompt.messages;
-    const effectiveOutput = (_I = options.output) != null ? _I : this.output;
+    const effectiveOutput = (_K = options.output) != null ? _K : this.output;
     let experimentalOutput = void 0;
     if (effectiveOutput && steps.length > 0) {
       const lastStep = steps[steps.length - 1];
@@ -1656,8 +1702,8 @@ var WorkflowAgent = class {
       await mergedOnEnd({
         steps,
         messages,
-        text: (_J = lastStep == null ? void 0 : lastStep.text) != null ? _J : "",
-        finishReason: (_K = lastStep == null ? void 0 : lastStep.finishReason) != null ? _K : "other",
+        text: (_L = lastStep == null ? void 0 : lastStep.text) != null ? _L : "",
+        finishReason: (_M = lastStep == null ? void 0 : lastStep.finishReason) != null ? _M : "other",
         usage: totalUsage,
         totalUsage,
         runtimeContext,
@@ -1669,7 +1715,7 @@ var WorkflowAgent = class {
       const telemetrySteps = steps.map(normalizeStepForTelemetry2);
       const lastStep = telemetrySteps[telemetrySteps.length - 1];
       const totalUsage = aggregateUsage(steps);
-      await ((_L = telemetryDispatcher.onEnd) == null ? void 0 : _L.call(telemetryDispatcher, {
+      await ((_N = telemetryDispatcher.onEnd) == null ? void 0 : _N.call(telemetryDispatcher, {
         ...lastStep,
         steps: telemetrySteps,
         usage: totalUsage,
@@ -1678,8 +1724,8 @@ var WorkflowAgent = class {
     }
     if (encounteredError) {
       if (options.writable) {
-        const sendFinish = (_M = options.sendFinish) != null ? _M : true;
-        const preventClose = (_N = options.preventClose) != null ? _N : false;
+        const sendFinish = (_O = options.sendFinish) != null ? _O : true;
+        const preventClose = (_P = options.preventClose) != null ? _P : false;
         if (sendFinish || !preventClose) {
           await closeStream(options.writable, preventClose, sendFinish);
         }
@@ -1687,8 +1733,8 @@ var WorkflowAgent = class {
       throw encounteredError;
     }
     if (options.writable) {
-      const sendFinish = (_O = options.sendFinish) != null ? _O : true;
-      const preventClose = (_P = options.preventClose) != null ? _P : false;
+      const sendFinish = (_Q = options.sendFinish) != null ? _Q : true;
+      const preventClose = (_R = options.preventClose) != null ? _R : false;
       if (sendFinish || !preventClose) {
         await closeStream(options.writable, preventClose, sendFinish);
       }
@@ -1874,7 +1920,7 @@ function getToolCallbackMessages(messages) {
   const withoutAssistantToolCall = ((_a = messages.at(-1)) == null ? void 0 : _a.role) === "assistant" ? messages.slice(0, -1) : messages;
   return withoutAssistantToolCall;
 }
-async function executeTool(toolCall, tools, messages, context, download) {
+async function executeTool(toolCall, tools, messages, context, download, sandbox) {
   const tool2 = tools[toolCall.toolName];
   if (!tool2) throw new Error(`Tool "${toolCall.toolName}" not found`);
   if (typeof tool2.execute !== "function") {
@@ -1891,7 +1937,8 @@ async function executeTool(toolCall, tools, messages, context, download) {
       // Pass the conversation messages to the tool so it has context about the conversation
       messages,
       // Pass per-tool context to the tool (resolved from `toolsContext`)
-      context
+      context,
+      experimental_sandbox: sandbox
     });
   } catch (error) {
     const errorMessage = getErrorMessage(error);