@finalai/final-agent-provider 0.10.1 → 0.12.0

package/dist/modules/sandboxes/device.mjs

@@ -1,6 +1,5 @@
-import { ProcessInspectionOperation } from "@finalai/agent-protocol/process-inspection";
+import { Capability, FilesAccess, ScreenAccess, ShellAccess } from "@finalai/agent-protocol";
 import {
-  SandboxAccess,
   toolDescriptorSchema
 } from "@finalai/agent-provider";
 import {
@@ -15,19 +14,18 @@ import {
   DeviceApiCapability,
   DeviceApiLeaseAccess
 } from "./device-api.mjs";
-import { computerOpenOptionsSchema, deviceEnvironmentSchema } from "./environment.mjs";
+import { DEVICE_PROVIDER, deviceEnvironmentSchema } from "./environment.mjs";
 import { createMcpPipe } from "./mcp-pipe.mjs";
 import { sandboxPathsFor, SandboxPlatform } from "./paths.mjs";
-import { createTransportSession, sessionForAccess } from "./session.mjs";
+import { createTransportSession, readOnlySession } from "./session.mjs";
 import { DEVICE_API_ACTING_USER_HEADER, DeviceApiClientErrorCode } from "./device-api.mjs";
-import { DEVICE_SANDBOX_SPECIFIER } from "./environment.mjs";
+import { DEVICE_PROVIDER as DEVICE_PROVIDER2 } from "./environment.mjs";
 import { SandboxPlatform as SandboxPlatform2 } from "./paths.mjs";
 const deviceArtifactSchema = z.object({ version: z.literal(1), deviceId: z.string() });
 const deviceStateSchema = z.object({
-  version: z.literal(1),
+  version: z.literal(2),
   deviceId: z.string(),
-  generation: z.number().int().min(1),
-  access: z.nativeEnum(SandboxAccess)
+  generation: z.number().int().min(0)
 });
 const DEVICE_COMPUTER_USE_SERVER = DEVICE_API_COMPUTER_USE_SERVER;
 const descriptorsOf = (tools) => tools.flatMap((tool) => {
@@ -43,6 +41,19 @@ const ONLINE_POLL_MAX_MS = 5e3;
 const MAX_LEASE_TTL_MS = 60 * 6e4;
 const MIN_LEASE_TTL_MS = 6e4;
 const platformOf = (platform) => platform === "windows" ? SandboxPlatform.Windows : SandboxPlatform.Posix;
+const refuseSetup = (setup) => {
+  if (setup == null) return;
+  const parts = [
+    setup.repositories.length > 0 ? "repositories" : null,
+    Object.keys(setup.variables).length > 0 ? "variables" : null,
+    setup.steps.length > 0 ? "steps" : null,
+    setup.services.length > 0 ? "services" : null,
+    Object.keys(setup.commands).length > 0 ? "commands" : null,
+    setup.network != null ? "a network policy" : null
+  ].filter((part) => part != null);
+  if (parts.length > 0)
+    throw new Error(`a Final Device takes no sandbox setup (this one has ${parts.join(", ")})`);
+};
 const createDeviceSandboxProvider = (config) => {
   const randomUuid = config.randomUuid ?? (() => crypto.randomUUID());
   const now = config.now ?? (() => Date.now());
@@ -67,43 +78,48 @@ const createDeviceSandboxProvider = (config) => {
       pollMs = Math.min(pollMs * 2, ONLINE_POLL_MAX_MS);
     }
   };
-  const attach = async (args) => {
-    const { ctx, access } = args;
-    const caller = {
-      organizationId: ctx.session.organizationId,
-      credentials: ctx.credentials,
-      actingUser: ctx.actingUser
-    };
-    const bindingId = ctx.session.bindingId;
+  const credentialsFor = (ctx) => ({
+    deviceAccess: async (args) => ({
+      baseUrl: config.deviceApiUrl,
+      token: (await ctx.identity({ audience: config.deviceApiUrl, refresh: args?.refresh === true })).token
+    })
+  });
+  const callerFor = (ctx) => ({
+    organizationId: ctx.organizationId,
+    credentials: credentialsFor(ctx),
+    actingUser: ctx.actingUser
+  });
+  const lease = async (args) => {
+    const { ctx } = args;
+    const caller = callerFor(ctx);
+    const bindingId = ctx.sandboxId;
     const device = await awaitOnline(caller, args.deviceId, onlineWaitMs);
-    if (access !== SandboxAccess.Read && !device.writable) {
-      throw new Error(`${device.displayName} does not permit writes`);
-    }
-    const leaseAccess = access === SandboxAccess.Read ? DeviceApiLeaseAccess.Read : DeviceApiLeaseAccess.Write;
-    let current = args.passive === true ? await api.recoverLease({
+    const leaseAccess = device.writable ? DeviceApiLeaseAccess.Write : DeviceApiLeaseAccess.Read;
+    const afterGeneration = args.afterGeneration === 0 ? void 0 : args.afterGeneration;
+    let current = args.passive ? await api.recoverLease({
       caller,
       deviceId: device.id,
-      sessionId: ctx.session.id,
+      sessionId: ctx.sandboxId,
       bindingId,
       access: leaseAccess
     }) : await api.lease({
       caller,
       deviceId: device.id,
-      sessionId: ctx.session.id,
+      sessionId: ctx.sandboxId,
       bindingId,
       access: leaseAccess,
       ttlMs: leaseTtlMs,
-      afterGeneration: args.afterGeneration ?? void 0
+      afterGeneration
     });
-    if (args.passive === true && (current.deviceId !== device.id || current.access !== leaseAccess || current.generation < (args.afterGeneration ?? 0) || current.expiresAtMs <= now()))
+    if (args.passive && (current.deviceId !== device.id || current.generation < args.afterGeneration || current.expiresAtMs <= now()))
       throw new Error("The existing Device lease is unavailable");
     let renewing = null;
-    const lease = async () => {
+    const leaseHandle = async () => {
       if (current.expiresAtMs - now() < LEASE_RENEW_MARGIN_MS) {
-        renewing ??= (args.passive === true ? api.recoverLease({
+        renewing ??= (args.passive ? api.recoverLease({
           caller,
           deviceId: device.id,
-          sessionId: ctx.session.id,
+          sessionId: ctx.sandboxId,
           bindingId,
           access: leaseAccess
         }) : api.renew({ caller, lease: current.lease, ttlMs: leaseTtlMs })).finally(() => {
@@ -115,7 +131,7 @@ const createDeviceSandboxProvider = (config) => {
     };
     let released = false;
     const release = async () => {
-      if (released) return;
+      if (released || args.passive) return;
       released = true;
       await api.release({ caller, lease: current.lease });
     };
@@ -125,7 +141,7 @@ const createDeviceSandboxProvider = (config) => {
       id: `${device.id}:${bindingId}`,
       description: `${device.displayName} (Final Device)`,
       workspaceRoot: current.workspaceRoot,
-      transport: api.transport({ caller, lease }),
+      transport: api.transport({ caller, lease: leaseHandle }),
       baseEnv: async () => ({}),
       randomUuid,
       paths,
@@ -147,27 +163,15 @@ const createDeviceSandboxProvider = (config) => {
     const computerUse = offered.has(DeviceApiCapability.ComputerUse);
     const capabilities = [SandboxCapability.Files];
     if (processes) capabilities.push(SandboxCapability.Process);
-    if (processes && access !== SandboxAccess.Read)
-      capabilities.push(SandboxCapability.DurableProcesses);
+    if (processes && !args.passive) capabilities.push(SandboxCapability.DurableProcesses);
     if (localMcp) capabilities.push(SandboxCapability.LocalMcp);
     if (computerUse) capabilities.push(SandboxCapability.ComputerUse);
     if (device.screenReady) capabilities.push(SandboxCapability.Screen);
-    const channelEndpoint = (server) => ({
-      name: server,
-      connect: async () => {
-        const pipe = openMcpPipe(server);
-        return {
-          send: (message, options) => pipe.send(message, options?.abortSignal),
-          receive: (options) => pipe.receive(options?.abortSignal),
-          close: () => pipe.close()
-        };
-      }
-    });
     const openMcpPipe = (server) => {
       const clientId = randomUuid();
       const request = async (action, dataBase64, signal) => api.pipe({
         caller,
-        lease: await lease(),
+        lease: await leaseHandle(),
         server,
         action,
         clientId,
@@ -189,13 +193,24 @@ const createDeviceSandboxProvider = (config) => {
         }
       });
     };
+    const channelEndpoint = (server) => ({
+      name: server,
+      connect: async () => {
+        const pipe = openMcpPipe(server);
+        return {
+          send: (message, options) => pipe.send(message, options?.abortSignal),
+          receive: (options) => pipe.receive(options?.abortSignal),
+          close: () => pipe.close()
+        };
+      }
+    });
     const sandbox = { ...session, capabilities };
     if (!processes) delete sandbox.attachProcess;
     if (computerUse) {
       sandbox.computerUse = async () => channelEndpoint(DEVICE_COMPUTER_USE_SERVER);
     }
     if (localMcp) {
-      sandbox.localMcp = async () => (await api.localMcpServers({ caller, lease: await lease() })).map(channelEndpoint);
+      sandbox.localMcp = async () => (await api.localMcpServers({ caller, lease: await leaseHandle() })).map(channelEndpoint);
     }
     if (device.screenReady) {
       sandbox.screen = (options) => api.screen({
@@ -209,8 +224,8 @@ const createDeviceSandboxProvider = (config) => {
     return {
       generation: current.generation,
       handle: {
-        // The Device enforces the read lease too; the view refuses before a round trip.
-        sandbox: sessionForAccess(sandbox, access),
+        // A viewer's lease is the existing one: it changes nothing.
+        sandbox: args.passive ? readOnlySession(sandbox) : sandbox,
         onSandboxStop: release,
         onSandboxDelete: release,
         onRuntimeShutdown: async () => void 0
@@ -223,40 +238,33 @@ const createDeviceSandboxProvider = (config) => {
     const options = parsed.data;
     const resolveDeviceId = async (caller) => {
       if ("deviceId" in options) return options.deviceId;
-      if ("pairing" in options) {
-        const device = await api.resolvePairing({ caller, code: options.pairing });
-        if (device == null) throw new Error("the Final Device pairing code is unknown or expired");
-        return device.id;
-      }
-      const devices = await api.listDevices({ caller });
-      const [only] = devices;
-      if (devices.length !== 1 || only == null) {
-        throw new Error(
-          devices.length === 0 ? "the user this session acts for has no Final Device" : "the user this session acts for has several Final Devices; name one by id or pairing code"
-        );
-      }
-      return only.id;
+      const device = await api.resolvePairing({ caller, code: options.pairing });
+      if (device == null) throw new Error("the Final Device pairing code is unknown or expired");
+      return device.id;
     };
     return {
-      processes: async (ctx, rawState, request) => {
-        const state = deviceStateSchema.parse(rawState);
-        if (request.operation === ProcessInspectionOperation.Stop && state.access === SandboxAccess.Read)
-          throw new Error("stopping processes requires execute access");
-        return api.inspectProcesses({
-          caller: ctx,
-          deviceId: state.deviceId,
-          bindingId: ctx.bindingId,
-          request
-        });
-      },
       // What a lease on this Device grants, known from the registry without
-      // leasing (the Device API's rule: processes, local MCP and computer use with
-      // a write lease on a Device that allows processes). The computer-use
-      // driver's readiness is checked when leased.
+      // leasing (the Device API's rule: processes and computer use with a write
+      // lease on a Device that allows processes).
       capabilities: async (ctx) => {
         const device = await api.getDevice({
-          caller: ctx,
-          deviceId: await resolveDeviceId(ctx)
+          caller: callerFor(ctx),
+          deviceId: await resolveDeviceId(callerFor(ctx))
+        });
+        if (device == null) return {};
+        const offer = {
+          [Capability.Files]: device.writable ? FilesAccess.Write : FilesAccess.Read
+        };
+        if (device.writable && device.allowProcesses) {
+          offer[Capability.Shell] = ShellAccess.Execute;
+          offer[Capability.ComputerUse] = ScreenAccess.Control;
+        } else if (device.screenReady) offer[Capability.ComputerUse] = ScreenAccess.View;
+        return offer;
+      },
+      features: async (ctx) => {
+        const device = await api.getDevice({
+          caller: callerFor(ctx),
+          deviceId: await resolveDeviceId(callerFor(ctx))
         });
         if (device == null) return null;
         const offered = [SandboxCapability.Files];
@@ -276,8 +284,8 @@ const createDeviceSandboxProvider = (config) => {
       // A Device the API has never seen list gives unknown; its first lease does.
       mcpCatalog: async (ctx) => {
         const catalog = await api.mcpCatalog({
-          caller: ctx,
-          deviceId: await resolveDeviceId(ctx)
+          caller: callerFor(ctx),
+          deviceId: await resolveDeviceId(callerFor(ctx))
         });
         const local = catalog.localServers;
         const localMcp = {};
@@ -291,78 +299,75 @@ const createDeviceSandboxProvider = (config) => {
           localMcp: localKnown ? localMcp : null
         };
       },
+      processes: async (ctx, rawState, request) => {
+        const state = deviceStateSchema.parse(rawState);
+        return api.inspectProcesses({
+          caller: callerFor(ctx),
+          deviceId: state.deviceId,
+          bindingId: ctx.sandboxId,
+          request
+        });
+      },
+      artifactKey: async (ctx) => `device:${await resolveDeviceId(callerFor(ctx))}`,
+      prepare: async (ctx) => ({ version: 1, deviceId: await resolveDeviceId(callerFor(ctx)) }),
+      create: async (_ctx, { artifact, setup }) => {
+        refuseSetup(setup);
+        return { state: { version: 2, deviceId: artifact.deviceId, generation: 0 } };
+      },
       awaitRunning: async (ctx, rawState, { timeoutMs }) => {
         const { deviceId } = deviceStateSchema.pick({ deviceId: true }).parse(rawState);
-        await awaitOnline(
-          {
-            organizationId: ctx.session.organizationId,
-            credentials: ctx.credentials,
-            actingUser: ctx.actingUser
-          },
-          deviceId,
-          timeoutMs
-        );
-      },
-      artifactKey: async (ctx) => `device:${await resolveDeviceId(ctx)}`,
-      prepare: async (ctx) => ({ version: 1, deviceId: await resolveDeviceId(ctx) }),
-      start: async (ctx, openOptions, rawArtifact) => {
-        const artifact = deviceArtifactSchema.parse(rawArtifact);
-        const access = computerOpenOptionsSchema.parse(openOptions ?? {}).access;
-        const { handle, generation } = await attach({
-          ctx,
-          deviceId: artifact.deviceId,
-          afterGeneration: null,
-          access
-        });
-        return { handle, state: { version: 1, deviceId: artifact.deviceId, generation, access } };
+        await awaitOnline(callerFor(ctx), deviceId, timeoutMs);
       },
       // A Device never takes a lease back at an old generation once it lapsed,
-      // so every attach leases a later one.
-      resume: async (ctx, _artifact, rawState) => {
+      // so every attach leases a later one, and no process from before survives.
+      attach: async (ctx, { state: rawState }) => {
         const state = deviceStateSchema.parse(rawState);
-        return (await attach({
+        const { handle, generation } = await lease({
           ctx,
           deviceId: state.deviceId,
           afterGeneration: state.generation,
-          access: state.access
-        })).handle;
+          passive: false
+        });
+        return {
+          handle,
+          state: { ...state, generation },
+          fresh: state.generation === 0,
+          booted: true
+        };
       },
-      resumePassive: async (ctx, _artifact, rawState) => {
+      attachPassive: async (ctx, { state: rawState }) => {
         const state = deviceStateSchema.parse(rawState);
-        return (await attach({
+        return (await lease({
           ctx,
           deviceId: state.deviceId,
           afterGeneration: state.generation,
-          access: state.access,
           passive: true
         })).handle;
       },
-      onSessionEnd: async (ctx, _artifact, rawState) => {
+      // The lease lapses on its own; the next generation retires its processes.
+      detach: async (_ctx, { state }) => deviceStateSchema.parse(state),
+      park: async (_ctx, { state }) => deviceStateSchema.parse(state),
+      // The Device stays the person's; its workspace for this sandbox is let go.
+      delete: async (ctx, { state: rawState }) => {
         const state = deviceStateSchema.parse(rawState);
         await api.releaseWorkspaceLeases({
-          caller: {
-            organizationId: ctx.session.organizationId,
-            credentials: ctx.credentials,
-            actingUser: ctx.actingUser
-          },
+          caller: callerFor(ctx),
           deviceId: state.deviceId,
-          bindingId: ctx.session.bindingId
+          bindingId: ctx.sandboxId
         });
-      },
-      // The lease lapses on its own; the next generation retires its processes.
-      park: async (_ctx, _artifact, rawState) => deviceStateSchema.parse(rawState)
+      }
     };
   };
   return defineSandboxProvider({
-    name: "device",
-    stateProtocolVersion: 1,
+    name: DEVICE_PROVIDER,
+    stateProtocolVersion: 2,
     environment
   });
 };
 export {
   DEVICE_API_ACTING_USER_HEADER,
   DEVICE_COMPUTER_USE_SERVER,
-  DEVICE_SANDBOX_SPECIFIER,
+  DEVICE_PROVIDER2 as DEVICE_PROVIDER,
   DeviceApiClientErrorCode,
   SandboxPlatform2 as SandboxPlatform,
   createDeviceSandboxProvider

package/dist/modules/sandboxes/device.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/sandboxes/device.ts"],
-  "sourcesContent": ["import { ProcessInspectionOperation } from '@finalai/agent-protocol/process-inspection';\nimport {\n  SandboxAccess,\n  toolDescriptorSchema,\n  type JsonObject,\n  type JsonValue,\n  type ToolDescriptorIface,\n} from '@finalai/agent-provider';\nimport {\n  defineSandboxProvider,\n  SandboxCapability,\n  type McpChannelEndpointIface,\n  type NetworkSandboxSessionIface,\n  type SandboxProviderHandleIface,\n  type SandboxProviderIface,\n  type SandboxProviderImplementationIface,\n  type SandboxStartContextIface,\n} from '@finalai/agent-provider/sandbox';\nimport * as z from 'zod';\nimport { commandEncoderFor } from \"./commands.mjs\";\nimport {\n  createDeviceApiClient,\n  DEVICE_API_COMPUTER_USE_SERVER,\n  DeviceApiCapability,\n  DeviceApiLeaseAccess,\n  type DeviceApiCallerIface,\n  type DeviceApiConfigIface,\n  type DeviceApiDeviceIface,\n  type DeviceApiFetchIface,\n  type DeviceApiLeaseIface,\n} from \"./device-api.mjs\";\nimport { computerOpenOptionsSchema, deviceEnvironmentSchema } from \"./environment.mjs\";\nimport { createMcpPipe } from \"./mcp-pipe.mjs\";\nimport { sandboxPathsFor, SandboxPlatform } from \"./paths.mjs\";\nimport { createTransportSession, sessionForAccess } from \"./session.mjs\";\n\nexport { DEVICE_API_ACTING_USER_HEADER, DeviceApiClientErrorCode } from \"./device-api.mjs\";\nexport type { DeviceApiConfigIface, DeviceApiFetchIface } from \"./device-api.mjs\";\nexport { DEVICE_SANDBOX_SPECIFIER } from \"./environment.mjs\";\nexport type { FinalPlatformAccessIface } from '@finalai/agent-provider/sandbox';\nexport { SandboxPlatform } from \"./paths.mjs\";\n\n// The `device` sandbox: a user's own computer running Final Device. The\n// provider is a client of the Device API, the Device's backend, exactly as a\n// vendor provider is a client of its vendor's API: it\n// leases a workspace there and drives files, processes, computer use and the\n// screen through that API with host-provided credentials. It knows nothing of how\n// the Device API reaches the Device (DEVICE_DIRECT_ENDPOINT.md). A Device is one\n// person's machine: every call names the user the session acts for\n// (ctx.actingUser, read per call since it changes between turns), and the Device\n// API refuses a Device that user does not own.\n\nexport interface DeviceSandboxProviderConfigIface {\n  // Transport options; the Device API origin and token come from each context's\n  // `credentials.deviceAccess`.\n  api: DeviceApiConfigIface;\n  fetch?: DeviceApiFetchIface;\n  // Device leases last at most an hour; renewed while in use.\n  leaseTtlMs?: number;\n  // How long start and resume wait for an offline Device to connect (default 0:\n  // an offline Device fails at once); polled from 500 ms, doubling to 5 s.\n  onlineWaitMs?: number;\n  sleep?: (ms: number) => Promise<void>;\n  log?: (message: string, fields?: Record<string, string | number | boolean | null>) => void;\n  randomUuid?: () => string;\n  now?: () => number;\n}\n\nconst deviceArtifactSchema = z.object({ version: z.literal(1), deviceId: z.string() });\nconst deviceStateSchema = z.object({\n  version: z.literal(1),\n  deviceId: z.string(),\n  generation: z.number().int().min(1),\n  access: z.nativeEnum(SandboxAccess),\n});\nexport type DeviceSandboxArtifact = z.infer<typeof deviceArtifactSchema>;\nexport type DeviceSandboxState = z.infer<typeof deviceStateSchema>;\n\nexport const DEVICE_COMPUTER_USE_SERVER = DEVICE_API_COMPUTER_USE_SERVER;\n\nexport interface DeviceSandboxSessionIface extends NetworkSandboxSessionIface {\n  readonly capabilities: readonly SandboxCapability[];\n}\n\nexport type DeviceSandboxProviderIface = SandboxProviderIface<\n  JsonValue,\n  JsonValue,\n  DeviceSandboxArtifact,\n  DeviceSandboxState,\n  DeviceSandboxSessionIface\n>;\n\n// The Device API's recorded tools as tool descriptors; one that does not fit\n// the contract is left out.\nconst descriptorsOf = (tools: readonly JsonObject[]): ToolDescriptorIface[] =>\n  tools.flatMap((tool) => {\n    const parsed = toolDescriptorSchema.safeParse({\n      ...tool,\n      description: tool.description ?? tool.title ?? tool.name,\n    });\n    return parsed.success ? [parsed.data] : [];\n  });\n\nconst LEASE_RENEW_MARGIN_MS = 5 * 60_000;\nconst ONLINE_POLL_MS = 500;\nconst ONLINE_POLL_MAX_MS = 5_000;\nconst MAX_LEASE_TTL_MS = 60 * 60_000;\nconst MIN_LEASE_TTL_MS = 60_000;\n\nconst platformOf = (platform: string): SandboxPlatform =>\n  platform === 'windows' ? SandboxPlatform.Windows : SandboxPlatform.Posix;\n\nexport const createDeviceSandboxProvider = (\n  config: DeviceSandboxProviderConfigIface,\n): DeviceSandboxProviderIface => {\n  const randomUuid = config.randomUuid ?? (() => crypto.randomUUID());\n  const now = config.now ?? (() => Date.now());\n  const log = config.log ?? (() => undefined);\n  const leaseTtlMs = Math.max(\n    MIN_LEASE_TTL_MS,\n    Math.min(config.leaseTtlMs ?? 15 * 60_000, MAX_LEASE_TTL_MS),\n  );\n  const sleep =\n    config.sleep ?? ((ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms)));\n  const onlineWaitMs = config.onlineWaitMs ?? 0;\n  const api = createDeviceApiClient({ api: config.api, fetch: config.fetch });\n\n  // A Device runs when it is connected to the Device API; nothing is leased before.\n  const awaitOnline = async (\n    caller: DeviceApiCallerIface,\n    deviceId: string,\n    timeoutMs: number,\n  ): Promise<DeviceApiDeviceIface> => {\n    const deadline = now() + timeoutMs;\n    let pollMs = ONLINE_POLL_MS;\n    for (;;) {\n      const device = await api.getDevice({ caller, deviceId });\n      if (device == null) throw new Error(`device ${deviceId} was not found`);\n      if (device.online) return device;\n      const left = deadline - now();\n      if (left <= 0) throw new Error(`${device.displayName} is not connected`);\n      await sleep(Math.min(pollMs, left));\n      pollMs = Math.min(pollMs * 2, ONLINE_POLL_MAX_MS);\n    }\n  };\n\n  const attach = async (args: {\n    ctx: SandboxStartContextIface;\n    deviceId: string;\n    afterGeneration: number | null;\n    passive?: boolean;\n    access: SandboxAccess;\n  }): Promise<{\n    handle: SandboxProviderHandleIface<DeviceSandboxSessionIface>;\n    generation: number;\n  }> => {\n    const { ctx, access } = args;\n    const caller: DeviceApiCallerIface = {\n      organizationId: ctx.session.organizationId,\n      credentials: ctx.credentials,\n      actingUser: ctx.actingUser,\n    };\n    const bindingId = ctx.session.bindingId;\n    // The provider's awaitRunning, before the lease.\n    const device = await awaitOnline(caller, args.deviceId, onlineWaitMs);\n    // Processes need the Device's write lease, so execute access does too.\n    if (access !== SandboxAccess.Read && !device.writable) {\n      throw new Error(`${device.displayName} does not permit writes`);\n    }\n    const leaseAccess =\n      access === SandboxAccess.Read ? DeviceApiLeaseAccess.Read : DeviceApiLeaseAccess.Write;\n    let current: DeviceApiLeaseIface =\n      args.passive === true\n        ? await api.recoverLease({\n            caller,\n            deviceId: device.id,\n            sessionId: ctx.session.id,\n            bindingId,\n            access: leaseAccess,\n          })\n        : await api.lease({\n            caller,\n            deviceId: device.id,\n            sessionId: ctx.session.id,\n            bindingId,\n            access: leaseAccess,\n            ttlMs: leaseTtlMs,\n            afterGeneration: args.afterGeneration ?? undefined,\n          });\n    if (\n      args.passive === true &&\n      (current.deviceId !== device.id ||\n        current.access !== leaseAccess ||\n        current.generation < (args.afterGeneration ?? 0) ||\n        current.expiresAtMs <= now())\n    )\n      throw new Error('The existing Device lease is unavailable');\n    let renewing: Promise<DeviceApiLeaseIface> | null = null;\n    // The current lease handle, renewed shortly before it lapses.\n    const lease = async (): Promise<string> => {\n      if (current.expiresAtMs - now() < LEASE_RENEW_MARGIN_MS) {\n        renewing ??= (\n          args.passive === true\n            ? api.recoverLease({\n                caller,\n                deviceId: device.id,\n                sessionId: ctx.session.id,\n                bindingId,\n                access: leaseAccess,\n              })\n            : api.renew({ caller, lease: current.lease, ttlMs: leaseTtlMs })\n        ).finally(() => {\n          renewing = null;\n        });\n        current = await renewing;\n      }\n      return current.lease;\n    };\n    let released = false;\n    const release = async (): Promise<void> => {\n      if (released) return;\n      released = true;\n      await api.release({ caller, lease: current.lease });\n    };\n\n    const platform = platformOf(current.platform);\n    const paths = sandboxPathsFor(platform);\n    const session = createTransportSession({\n      id: `${device.id}:${bindingId}`,\n      description: `${device.displayName} (Final Device)`,\n      workspaceRoot: current.workspaceRoot,\n      transport: api.transport({ caller, lease }),\n      baseEnv: async () => ({}),\n      randomUuid,\n      paths,\n      commands: commandEncoderFor(platform),\n      // Lease processes end with the lease generation; a new one knows none.\n      processScope: () => String(current.generation),\n      network: {\n        ports: [],\n        getPortEndpoint: async () => {\n          throw new Error('Final Device sandboxes expose no ports');\n        },\n        stop: release,\n        destroy: release,\n      },\n    });\n\n    const offered = new Set(current.capabilities);\n    const processes = offered.has(DeviceApiCapability.Process);\n    const localMcp = offered.has(DeviceApiCapability.LocalMcp);\n    const computerUse = offered.has(DeviceApiCapability.ComputerUse);\n    const capabilities = [SandboxCapability.Files];\n    if (processes) capabilities.push(SandboxCapability.Process);\n    if (processes && access !== SandboxAccess.Read)\n      capabilities.push(SandboxCapability.DurableProcesses);\n    if (localMcp) capabilities.push(SandboxCapability.LocalMcp);\n    if (computerUse) capabilities.push(SandboxCapability.ComputerUse);\n    if (device.screenReady) capabilities.push(SandboxCapability.Screen);\n\n    // The Device's computer-use server, or one of its local MCP servers, is a byte\n    // pipe in the Device API (`/v1/leases/:lease/mcp/:server/{open,write,read,close}`):\n    // a channel endpoint whoever runs this handle opens in process.\n    const channelEndpoint = (server: string): McpChannelEndpointIface => ({\n      name: server,\n      connect: async () => {\n        const pipe = openMcpPipe(server);\n        return {\n          send: (message, options) => pipe.send(message, options?.abortSignal),\n          receive: (options) => pipe.receive(options?.abortSignal),\n          close: () => pipe.close(),\n        };\n      },\n    });\n    const openMcpPipe = (server: string) => {\n      const clientId = randomUuid();\n      const request = async (\n        action: 'open' | 'write' | 'read' | 'close',\n        dataBase64?: string,\n        signal?: AbortSignal,\n      ): Promise<string> =>\n        api.pipe({\n          caller,\n          lease: await lease(),\n          server,\n          action,\n          clientId,\n          dataBase64,\n          signal,\n        });\n      return createMcpPipe({\n        wire: {\n          open: async (signal) => {\n            await request('open', undefined, signal);\n          },\n          write: async (data, signal) => {\n            await request('write', data, signal);\n          },\n          read: (signal) => request('read', undefined, signal),\n          close: async () => {\n            await request('close').catch(() => undefined);\n          },\n        },\n      });\n    };\n    const sandbox: DeviceSandboxSessionIface = { ...session, capabilities };\n    // Without process access there is nothing to attach to.\n    if (!processes) delete sandbox.attachProcess;\n    if (computerUse) {\n      sandbox.computerUse = async () => channelEndpoint(DEVICE_COMPUTER_USE_SERVER);\n    }\n    if (localMcp) {\n      sandbox.localMcp = async () =>\n        (await api.localMcpServers({ caller, lease: await lease() })).map(channelEndpoint);\n    }\n    if (device.screenReady) {\n      sandbox.screen = (options) =>\n        api.screen({\n          caller,\n          deviceId: device.id,\n          sessionId: randomUuid(),\n          viewOnly: options?.viewOnly ?? true,\n        });\n    }\n    log('device_sandbox.attached', { deviceId: device.id, generation: current.generation });\n    return {\n      generation: current.generation,\n      handle: {\n        // The Device enforces the read lease too; the view refuses before a round trip.\n        sandbox: sessionForAccess(sandbox, access),\n        onSandboxStop: release,\n        onSandboxDelete: release,\n        onRuntimeShutdown: async () => undefined,\n      },\n    };\n  };\n\n  const environment = (\n    rawOptions?: JsonValue,\n  ): SandboxProviderImplementationIface<\n    JsonValue,\n    DeviceSandboxArtifact,\n    DeviceSandboxState,\n    DeviceSandboxSessionIface\n  > => {\n    const parsed = deviceEnvironmentSchema.safeParse(rawOptions ?? {});\n    if (!parsed.success) throw new Error(`invalid device environment: ${parsed.error.message}`);\n    const options = parsed.data;\n    // The Device the environment names; the Device API checks on every call\n    // that the acting user owns it.\n    const resolveDeviceId = async (caller: DeviceApiCallerIface): Promise<string> => {\n      if ('deviceId' in options) return options.deviceId;\n      if ('pairing' in options) {\n        const device = await api.resolvePairing({ caller, code: options.pairing });\n        if (device == null) throw new Error('the Final Device pairing code is unknown or expired');\n        return device.id;\n      }\n      // An unnamed binding uses the only Device of the user the session acts\n      // for (the API lists only that user's Devices), never another member's.\n      const devices = await api.listDevices({ caller });\n      const [only] = devices;\n      if (devices.length !== 1 || only == null) {\n        throw new Error(\n          devices.length === 0\n            ? 'the user this session acts for has no Final Device'\n            : 'the user this session acts for has several Final Devices; name one by id or pairing code',\n        );\n      }\n      return only.id;\n    };\n    return {\n      processes: async (ctx, rawState, request) => {\n        const state = deviceStateSchema.parse(rawState);\n        if (\n          request.operation === ProcessInspectionOperation.Stop &&\n          state.access === SandboxAccess.Read\n        )\n          throw new Error('stopping processes requires execute access');\n        return api.inspectProcesses({\n          caller: ctx,\n          deviceId: state.deviceId,\n          bindingId: ctx.bindingId,\n          request,\n        });\n      },\n      // What a lease on this Device grants, known from the registry without\n      // leasing (the Device API's rule: processes, local MCP and computer use with\n      // a write lease on a Device that allows processes). The computer-use\n      // driver's readiness is checked when leased.\n      capabilities: async (ctx) => {\n        const device = await api.getDevice({\n          caller: ctx,\n          deviceId: await resolveDeviceId(ctx),\n        });\n        if (device == null) return null;\n        const offered = [SandboxCapability.Files];\n        if (device.writable && device.allowProcesses) {\n          offered.push(\n            SandboxCapability.Process,\n            SandboxCapability.DurableProcesses,\n            SandboxCapability.LocalMcp,\n            SandboxCapability.ComputerUse,\n          );\n        }\n        if (device.screenReady) offered.push(SandboxCapability.Screen);\n        return offered;\n      },\n      // What the Device's servers last listed through the Device API (it records\n      // them from the MCP pipes), so the projection lists them without leasing.\n      // A Device the API has never seen list gives unknown; its first lease does.\n      mcpCatalog: async (ctx) => {\n        const catalog = await api.mcpCatalog({\n          caller: ctx,\n          deviceId: await resolveDeviceId(ctx),\n        });\n        const local = catalog.localServers;\n        const localMcp: Record<string, ToolDescriptorIface[]> = {};\n        let localKnown = local != null;\n        for (const server of local?.servers ?? []) {\n          if (server.tools == null) localKnown = false;\n          else localMcp[server.name] = descriptorsOf(server.tools);\n        }\n        return {\n          computerUse:\n            catalog.computerUse == null ? null : descriptorsOf(catalog.computerUse.tools),\n          localMcp: localKnown ? localMcp : null,\n        };\n      },\n      awaitRunning: async (ctx, rawState, { timeoutMs }) => {\n        const { deviceId } = deviceStateSchema.pick({ deviceId: true }).parse(rawState);\n        await awaitOnline(\n          {\n            organizationId: ctx.session.organizationId,\n            credentials: ctx.credentials,\n            actingUser: ctx.actingUser,\n          },\n          deviceId,\n          timeoutMs,\n        );\n      },\n      artifactKey: async (ctx) => `device:${await resolveDeviceId(ctx)}`,\n      prepare: async (ctx) => ({ version: 1, deviceId: await resolveDeviceId(ctx) }),\n      start: async (ctx, openOptions, rawArtifact) => {\n        const artifact = deviceArtifactSchema.parse(rawArtifact);\n        const access = computerOpenOptionsSchema.parse(openOptions ?? {}).access;\n        const { handle, generation } = await attach({\n          ctx,\n          deviceId: artifact.deviceId,\n          afterGeneration: null,\n          access,\n        });\n        return { handle, state: { version: 1, deviceId: artifact.deviceId, generation, access } };\n      },\n      // A Device never takes a lease back at an old generation once it lapsed,\n      // so every attach leases a later one.\n      resume: async (ctx, _artifact, rawState) => {\n        const state = deviceStateSchema.parse(rawState);\n        return (\n          await attach({\n            ctx,\n            deviceId: state.deviceId,\n            afterGeneration: state.generation,\n            access: state.access,\n          })\n        ).handle;\n      },\n      resumePassive: async (ctx, _artifact, rawState) => {\n        const state = deviceStateSchema.parse(rawState);\n        return (\n          await attach({\n            ctx,\n            deviceId: state.deviceId,\n            afterGeneration: state.generation,\n            access: state.access,\n            passive: true,\n          })\n        ).handle;\n      },\n      onSessionEnd: async (ctx, _artifact, rawState) => {\n        const state = deviceStateSchema.parse(rawState);\n        await api.releaseWorkspaceLeases({\n          caller: {\n            organizationId: ctx.session.organizationId,\n            credentials: ctx.credentials,\n            actingUser: ctx.actingUser,\n          },\n          deviceId: state.deviceId,\n          bindingId: ctx.session.bindingId,\n        });\n      },\n      // The lease lapses on its own; the next generation retires its processes.\n      park: async (_ctx, _artifact, rawState) => deviceStateSchema.parse(rawState),\n    };\n  };\n\n  return defineSandboxProvider({\n    name: 'device',\n    stateProtocolVersion: 1,\n    environment,\n  });\n};\n"],
-  "mappings": "AAAA,SAAS,kCAAkC;AAC3C;AAAA,EACE;AAAA,EACA;AAAA,OAIK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAOK;AACP,YAAY,OAAO;AACnB,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,2BAA2B,+BAA+B;AACnE,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,wBAAwB,wBAAwB;AAEzD,SAAS,+BAA+B,gCAAgC;AAExE,SAAS,gCAAgC;AAEzC,SAAS,mBAAAA,wBAAuB;AA4BhC,MAAM,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,UAAU,EAAE,OAAO,EAAE,CAAC;AACrF,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AAAA,EAClC,QAAQ,EAAE,WAAW,aAAa;AACpC,CAAC;AAIM,MAAM,6BAA6B;AAgB1C,MAAM,gBAAgB,CAAC,UACrB,MAAM,QAAQ,CAAC,SAAS;AACtB,QAAM,SAAS,qBAAqB,UAAU;AAAA,IAC5C,GAAG;AAAA,IACH,aAAa,KAAK,eAAe,KAAK,SAAS,KAAK;AAAA,EACtD,CAAC;AACD,SAAO,OAAO,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC;AAC3C,CAAC;AAEH,MAAM,wBAAwB,IAAI;AAClC,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB,KAAK;AAC9B,MAAM,mBAAmB;AAEzB,MAAM,aAAa,CAAC,aAClB,aAAa,YAAY,gBAAgB,UAAU,gBAAgB;AAE9D,MAAM,8BAA8B,CACzC,WAC+B;AAC/B,QAAM,aAAa,OAAO,eAAe,MAAM,OAAO,WAAW;AACjE,QAAM,MAAM,OAAO,QAAQ,MAAM,KAAK,IAAI;AAC1C,QAAM,MAAM,OAAO,QAAQ,MAAM;AACjC,QAAM,aAAa,KAAK;AAAA,IACtB;AAAA,IACA,KAAK,IAAI,OAAO,cAAc,KAAK,KAAQ,gBAAgB;AAAA,EAC7D;AACA,QAAM,QACJ,OAAO,UAAU,CAAC,OAAe,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzF,QAAM,eAAe,OAAO,gBAAgB;AAC5C,QAAM,MAAM,sBAAsB,EAAE,KAAK,OAAO,KAAK,OAAO,OAAO,MAAM,CAAC;AAG1E,QAAM,cAAc,OAClB,QACA,UACA,cACkC;AAClC,UAAM,WAAW,IAAI,IAAI;AACzB,QAAI,SAAS;AACb,eAAS;AACP,YAAM,SAAS,MAAM,IAAI,UAAU,EAAE,QAAQ,SAAS,CAAC;AACvD,UAAI,UAAU,KAAM,OAAM,IAAI,MAAM,UAAU,QAAQ,gBAAgB;AACtE,UAAI,OAAO,OAAQ,QAAO;AAC1B,YAAM,OAAO,WAAW,IAAI;AAC5B,UAAI,QAAQ,EAAG,OAAM,IAAI,MAAM,GAAG,OAAO,WAAW,mBAAmB;AACvE,YAAM,MAAM,KAAK,IAAI,QAAQ,IAAI,CAAC;AAClC,eAAS,KAAK,IAAI,SAAS,GAAG,kBAAkB;AAAA,IAClD;AAAA,EACF;AAEA,QAAM,SAAS,OAAO,SAShB;AACJ,UAAM,EAAE,KAAK,OAAO,IAAI;AACxB,UAAM,SAA+B;AAAA,MACnC,gBAAgB,IAAI,QAAQ;AAAA,MAC5B,aAAa,IAAI;AAAA,MACjB,YAAY,IAAI;AAAA,IAClB;AACA,UAAM,YAAY,IAAI,QAAQ;AAE9B,UAAM,SAAS,MAAM,YAAY,QAAQ,KAAK,UAAU,YAAY;AAEpE,QAAI,WAAW,cAAc,QAAQ,CAAC,OAAO,UAAU;AACrD,YAAM,IAAI,MAAM,GAAG,OAAO,WAAW,yBAAyB;AAAA,IAChE;AACA,UAAM,cACJ,WAAW,cAAc,OAAO,qBAAqB,OAAO,qBAAqB;AACnF,QAAI,UACF,KAAK,YAAY,OACb,MAAM,IAAI,aAAa;AAAA,MACrB;AAAA,MACA,UAAU,OAAO;AAAA,MACjB,WAAW,IAAI,QAAQ;AAAA,MACvB;AAAA,MACA,QAAQ;AAAA,IACV,CAAC,IACD,MAAM,IAAI,MAAM;AAAA,MACd;AAAA,MACA,UAAU,OAAO;AAAA,MACjB,WAAW,IAAI,QAAQ;AAAA,MACvB;AAAA,MACA,QAAQ;AAAA,MACR,OAAO;AAAA,MACP,iBAAiB,KAAK,mBAAmB;AAAA,IAC3C,CAAC;AACP,QACE,KAAK,YAAY,SAChB,QAAQ,aAAa,OAAO,MAC3B,QAAQ,WAAW,eACnB,QAAQ,cAAc,KAAK,mBAAmB,MAC9C,QAAQ,eAAe,IAAI;AAE7B,YAAM,IAAI,MAAM,0CAA0C;AAC5D,QAAI,WAAgD;AAEpD,UAAM,QAAQ,YAA6B;AACzC,UAAI,QAAQ,cAAc,IAAI,IAAI,uBAAuB;AACvD,sBACE,KAAK,YAAY,OACb,IAAI,aAAa;AAAA,UACf;AAAA,UACA,UAAU,OAAO;AAAA,UACjB,WAAW,IAAI,QAAQ;AAAA,UACvB;AAAA,UACA,QAAQ;AAAA,QACV,CAAC,IACD,IAAI,MAAM,EAAE,QAAQ,OAAO,QAAQ,OAAO,OAAO,WAAW,CAAC,GACjE,QAAQ,MAAM;AACd,qBAAW;AAAA,QACb,CAAC;AACD,kBAAU,MAAM;AAAA,MAClB;AACA,aAAO,QAAQ;AAAA,IACjB;AACA,QAAI,WAAW;AACf,UAAM,UAAU,YAA2B;AACzC,UAAI,SAAU;AACd,iBAAW;AACX,YAAM,IAAI,QAAQ,EAAE,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAAA,IACpD;AAEA,UAAM,WAAW,WAAW,QAAQ,QAAQ;AAC5C,UAAM,QAAQ,gBAAgB,QAAQ;AACtC,UAAM,UAAU,uBAAuB;AAAA,MACrC,IAAI,GAAG,OAAO,EAAE,IAAI,SAAS;AAAA,MAC7B,aAAa,GAAG,OAAO,WAAW;AAAA,MAClC,eAAe,QAAQ;AAAA,MACvB,WAAW,IAAI,UAAU,EAAE,QAAQ,MAAM,CAAC;AAAA,MAC1C,SAAS,aAAa,CAAC;AAAA,MACvB;AAAA,MACA;AAAA,MACA,UAAU,kBAAkB,QAAQ;AAAA;AAAA,MAEpC,cAAc,MAAM,OAAO,QAAQ,UAAU;AAAA,MAC7C,SAAS;AAAA,QACP,OAAO,CAAC;AAAA,QACR,iBAAiB,YAAY;AAC3B,gBAAM,IAAI,MAAM,wCAAwC;AAAA,QAC1D;AAAA,QACA,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAED,UAAM,UAAU,IAAI,IAAI,QAAQ,YAAY;AAC5C,UAAM,YAAY,QAAQ,IAAI,oBAAoB,OAAO;AACzD,UAAM,WAAW,QAAQ,IAAI,oBAAoB,QAAQ;AACzD,UAAM,cAAc,QAAQ,IAAI,oBAAoB,WAAW;AAC/D,UAAM,eAAe,CAAC,kBAAkB,KAAK;AAC7C,QAAI,UAAW,cAAa,KAAK,kBAAkB,OAAO;AAC1D,QAAI,aAAa,WAAW,cAAc;AACxC,mBAAa,KAAK,kBAAkB,gBAAgB;AACtD,QAAI,SAAU,cAAa,KAAK,kBAAkB,QAAQ;AAC1D,QAAI,YAAa,cAAa,KAAK,kBAAkB,WAAW;AAChE,QAAI,OAAO,YAAa,cAAa,KAAK,kBAAkB,MAAM;AAKlE,UAAM,kBAAkB,CAAC,YAA6C;AAAA,MACpE,MAAM;AAAA,MACN,SAAS,YAAY;AACnB,cAAM,OAAO,YAAY,MAAM;AAC/B,eAAO;AAAA,UACL,MAAM,CAAC,SAAS,YAAY,KAAK,KAAK,SAAS,SAAS,WAAW;AAAA,UACnE,SAAS,CAAC,YAAY,KAAK,QAAQ,SAAS,WAAW;AAAA,UACvD,OAAO,MAAM,KAAK,MAAM;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AACA,UAAM,cAAc,CAAC,WAAmB;AACtC,YAAM,WAAW,WAAW;AAC5B,YAAM,UAAU,OACd,QACA,YACA,WAEA,IAAI,KAAK;AAAA,QACP;AAAA,QACA,OAAO,MAAM,MAAM;AAAA,QACnB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACH,aAAO,cAAc;AAAA,QACnB,MAAM;AAAA,UACJ,MAAM,OAAO,WAAW;AACtB,kBAAM,QAAQ,QAAQ,QAAW,MAAM;AAAA,UACzC;AAAA,UACA,OAAO,OAAO,MAAM,WAAW;AAC7B,kBAAM,QAAQ,SAAS,MAAM,MAAM;AAAA,UACrC;AAAA,UACA,MAAM,CAAC,WAAW,QAAQ,QAAQ,QAAW,MAAM;AAAA,UACnD,OAAO,YAAY;AACjB,kBAAM,QAAQ,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,UAC9C;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,UAAqC,EAAE,GAAG,SAAS,aAAa;AAEtE,QAAI,CAAC,UAAW,QAAO,QAAQ;AAC/B,QAAI,aAAa;AACf,cAAQ,cAAc,YAAY,gBAAgB,0BAA0B;AAAA,IAC9E;AACA,QAAI,UAAU;AACZ,cAAQ,WAAW,aAChB,MAAM,IAAI,gBAAgB,EAAE,QAAQ,OAAO,MAAM,MAAM,EAAE,CAAC,GAAG,IAAI,eAAe;AAAA,IACrF;AACA,QAAI,OAAO,aAAa;AACtB,cAAQ,SAAS,CAAC,YAChB,IAAI,OAAO;AAAA,QACT;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,WAAW,WAAW;AAAA,QACtB,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACL;AACA,QAAI,2BAA2B,EAAE,UAAU,OAAO,IAAI,YAAY,QAAQ,WAAW,CAAC;AACtF,WAAO;AAAA,MACL,YAAY,QAAQ;AAAA,MACpB,QAAQ;AAAA;AAAA,QAEN,SAAS,iBAAiB,SAAS,MAAM;AAAA,QACzC,eAAe;AAAA,QACf,iBAAiB;AAAA,QACjB,mBAAmB,YAAY;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,CAClB,eAMG;AACH,UAAM,SAAS,wBAAwB,UAAU,cAAc,CAAC,CAAC;AACjE,QAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,+BAA+B,OAAO,MAAM,OAAO,EAAE;AAC1F,UAAM,UAAU,OAAO;AAGvB,UAAM,kBAAkB,OAAO,WAAkD;AAC/E,UAAI,cAAc,QAAS,QAAO,QAAQ;AAC1C,UAAI,aAAa,SAAS;AACxB,cAAM,SAAS,MAAM,IAAI,eAAe,EAAE,QAAQ,MAAM,QAAQ,QAAQ,CAAC;AACzE,YAAI,UAAU,KAAM,OAAM,IAAI,MAAM,qDAAqD;AACzF,eAAO,OAAO;AAAA,MAChB;AAGA,YAAM,UAAU,MAAM,IAAI,YAAY,EAAE,OAAO,CAAC;AAChD,YAAM,CAAC,IAAI,IAAI;AACf,UAAI,QAAQ,WAAW,KAAK,QAAQ,MAAM;AACxC,cAAM,IAAI;AAAA,UACR,QAAQ,WAAW,IACf,uDACA;AAAA,QACN;AAAA,MACF;AACA,aAAO,KAAK;AAAA,IACd;AACA,WAAO;AAAA,MACL,WAAW,OAAO,KAAK,UAAU,YAAY;AAC3C,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,YACE,QAAQ,cAAc,2BAA2B,QACjD,MAAM,WAAW,cAAc;AAE/B,gBAAM,IAAI,MAAM,4CAA4C;AAC9D,eAAO,IAAI,iBAAiB;AAAA,UAC1B,QAAQ;AAAA,UACR,UAAU,MAAM;AAAA,UAChB,WAAW,IAAI;AAAA,UACf;AAAA,QACF,CAAC;AAAA,MACH;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,cAAc,OAAO,QAAQ;AAC3B,cAAM,SAAS,MAAM,IAAI,UAAU;AAAA,UACjC,QAAQ;AAAA,UACR,UAAU,MAAM,gBAAgB,GAAG;AAAA,QACrC,CAAC;AACD,YAAI,UAAU,KAAM,QAAO;AAC3B,cAAM,UAAU,CAAC,kBAAkB,KAAK;AACxC,YAAI,OAAO,YAAY,OAAO,gBAAgB;AAC5C,kBAAQ;AAAA,YACN,kBAAkB;AAAA,YAClB,kBAAkB;AAAA,YAClB,kBAAkB;AAAA,YAClB,kBAAkB;AAAA,UACpB;AAAA,QACF;AACA,YAAI,OAAO,YAAa,SAAQ,KAAK,kBAAkB,MAAM;AAC7D,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAIA,YAAY,OAAO,QAAQ;AACzB,cAAM,UAAU,MAAM,IAAI,WAAW;AAAA,UACnC,QAAQ;AAAA,UACR,UAAU,MAAM,gBAAgB,GAAG;AAAA,QACrC,CAAC;AACD,cAAM,QAAQ,QAAQ;AACtB,cAAM,WAAkD,CAAC;AACzD,YAAI,aAAa,SAAS;AAC1B,mBAAW,UAAU,OAAO,WAAW,CAAC,GAAG;AACzC,cAAI,OAAO,SAAS,KAAM,cAAa;AAAA,cAClC,UAAS,OAAO,IAAI,IAAI,cAAc,OAAO,KAAK;AAAA,QACzD;AACA,eAAO;AAAA,UACL,aACE,QAAQ,eAAe,OAAO,OAAO,cAAc,QAAQ,YAAY,KAAK;AAAA,UAC9E,UAAU,aAAa,WAAW;AAAA,QACpC;AAAA,MACF;AAAA,MACA,cAAc,OAAO,KAAK,UAAU,EAAE,UAAU,MAAM;AACpD,cAAM,EAAE,SAAS,IAAI,kBAAkB,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,MAAM,QAAQ;AAC9E,cAAM;AAAA,UACJ;AAAA,YACE,gBAAgB,IAAI,QAAQ;AAAA,YAC5B,aAAa,IAAI;AAAA,YACjB,YAAY,IAAI;AAAA,UAClB;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,MACA,aAAa,OAAO,QAAQ,UAAU,MAAM,gBAAgB,GAAG,CAAC;AAAA,MAChE,SAAS,OAAO,SAAS,EAAE,SAAS,GAAG,UAAU,MAAM,gBAAgB,GAAG,EAAE;AAAA,MAC5E,OAAO,OAAO,KAAK,aAAa,gBAAgB;AAC9C,cAAM,WAAW,qBAAqB,MAAM,WAAW;AACvD,cAAM,SAAS,0BAA0B,MAAM,eAAe,CAAC,CAAC,EAAE;AAClE,cAAM,EAAE,QAAQ,WAAW,IAAI,MAAM,OAAO;AAAA,UAC1C;AAAA,UACA,UAAU,SAAS;AAAA,UACnB,iBAAiB;AAAA,UACjB;AAAA,QACF,CAAC;AACD,eAAO,EAAE,QAAQ,OAAO,EAAE,SAAS,GAAG,UAAU,SAAS,UAAU,YAAY,OAAO,EAAE;AAAA,MAC1F;AAAA;AAAA;AAAA,MAGA,QAAQ,OAAO,KAAK,WAAW,aAAa;AAC1C,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,gBACE,MAAM,OAAO;AAAA,UACX;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,iBAAiB,MAAM;AAAA,UACvB,QAAQ,MAAM;AAAA,QAChB,CAAC,GACD;AAAA,MACJ;AAAA,MACA,eAAe,OAAO,KAAK,WAAW,aAAa;AACjD,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,gBACE,MAAM,OAAO;AAAA,UACX;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,iBAAiB,MAAM;AAAA,UACvB,QAAQ,MAAM;AAAA,UACd,SAAS;AAAA,QACX,CAAC,GACD;AAAA,MACJ;AAAA,MACA,cAAc,OAAO,KAAK,WAAW,aAAa;AAChD,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,cAAM,IAAI,uBAAuB;AAAA,UAC/B,QAAQ;AAAA,YACN,gBAAgB,IAAI,QAAQ;AAAA,YAC5B,aAAa,IAAI;AAAA,YACjB,YAAY,IAAI;AAAA,UAClB;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,WAAW,IAAI,QAAQ;AAAA,QACzB,CAAC;AAAA,MACH;AAAA;AAAA,MAEA,MAAM,OAAO,MAAM,WAAW,aAAa,kBAAkB,MAAM,QAAQ;AAAA,IAC7E;AAAA,EACF;AAEA,SAAO,sBAAsB;AAAA,IAC3B,MAAM;AAAA,IACN,sBAAsB;AAAA,IACtB;AAAA,EACF,CAAC;AACH;",
-  "names": ["SandboxPlatform"]
+  "sourcesContent": ["import { Capability, FilesAccess, ScreenAccess, ShellAccess } from '@finalai/agent-protocol';\nimport {\n  toolDescriptorSchema,\n  type JsonObject,\n  type JsonValue,\n  type ToolDescriptorIface,\n} from '@finalai/agent-provider';\nimport {\n  defineSandboxProvider,\n  SandboxCapability,\n  type McpChannelEndpointIface,\n  type NetworkSandboxSessionIface,\n  type SandboxCapabilityOffer,\n  type SandboxEnvironmentImplementationIface,\n  type SandboxProviderContextIface,\n  type SandboxProviderHandleIface,\n  type SandboxProviderIface,\n  type SandboxResourceContextIface,\n  type SandboxSetupIface,\n} from '@finalai/agent-provider/sandbox';\nimport * as z from 'zod';\nimport type { DeviceApiCredentialsIface } from \"./access.mjs\";\nimport { commandEncoderFor } from \"./commands.mjs\";\nimport {\n  createDeviceApiClient,\n  DEVICE_API_COMPUTER_USE_SERVER,\n  DeviceApiCapability,\n  DeviceApiLeaseAccess,\n  type DeviceApiCallerIface,\n  type DeviceApiConfigIface,\n  type DeviceApiDeviceIface,\n  type DeviceApiFetchIface,\n  type DeviceApiLeaseIface,\n} from \"./device-api.mjs\";\nimport { DEVICE_PROVIDER, deviceEnvironmentSchema } from \"./environment.mjs\";\nimport { createMcpPipe } from \"./mcp-pipe.mjs\";\nimport { sandboxPathsFor, SandboxPlatform } from \"./paths.mjs\";\nimport { createTransportSession, readOnlySession } from \"./session.mjs\";\n\nexport { DEVICE_API_ACTING_USER_HEADER, DeviceApiClientErrorCode } from \"./device-api.mjs\";\nexport type { DeviceApiConfigIface, DeviceApiFetchIface } from \"./device-api.mjs\";\nexport { DEVICE_PROVIDER } from \"./environment.mjs\";\nexport type { FinalPlatformAccessIface } from \"./access.mjs\";\nexport { SandboxPlatform } from \"./paths.mjs\";\n\n// The `device` sandbox: a person's own computer running Final Device. The\n// provider is a client of the Device API, the Device's backend, exactly as a\n// vendor provider is a client of its vendor's API: it leases a workspace there\n// and drives files, processes, computer use and the screen through that API.\n// It knows nothing of how the Device API reaches the Device\n// (DEVICE_DIRECT_ENDPOINT.md). A Device is one person's machine: every call\n// names the user the sandbox acts for (ctx.actingUser, read per call since it\n// changes between turns), and the Device API refuses a Device that user does\n// not own. A Device takes no sandbox setup: it is the person's machine as it is.\n\nexport interface DeviceSandboxProviderConfigIface {\n  // Transport options.\n  api: DeviceApiConfigIface;\n  // The Device API origin. Requests authenticate with the provider's platform\n  // identity for it (ctx.identity), which names the acting user and which the\n  // registration must be granted.\n  deviceApiUrl: string;\n  fetch?: DeviceApiFetchIface;\n  // Device leases last at most an hour; renewed while in use.\n  leaseTtlMs?: number;\n  // How long attach waits for an offline Device to connect (default 0:\n  // an offline Device fails at once); polled from 500 ms, doubling to 5 s.\n  onlineWaitMs?: number;\n  sleep?: (ms: number) => Promise<void>;\n  log?: (message: string, fields?: Record<string, string | number | boolean | null>) => void;\n  randomUuid?: () => string;\n  now?: () => number;\n}\n\nconst deviceArtifactSchema = z.object({ version: z.literal(1), deviceId: z.string() });\n// `generation`: the last lease generation taken; 0 before the first attach.\nconst deviceStateSchema = z.object({\n  version: z.literal(2),\n  deviceId: z.string(),\n  generation: z.number().int().min(0),\n});\nexport type DeviceSandboxArtifact = z.infer<typeof deviceArtifactSchema>;\nexport type DeviceSandboxState = z.infer<typeof deviceStateSchema>;\n\nexport const DEVICE_COMPUTER_USE_SERVER = DEVICE_API_COMPUTER_USE_SERVER;\n\nexport interface DeviceSandboxSessionIface extends NetworkSandboxSessionIface {\n  readonly capabilities: readonly SandboxCapability[];\n}\n\nexport type DeviceSandboxProviderIface = SandboxProviderIface<\n  JsonValue,\n  DeviceSandboxArtifact,\n  DeviceSandboxState,\n  DeviceSandboxSessionIface\n>;\n\n// The Device API's recorded tools as tool descriptors; one that does not fit\n// the contract is left out.\nconst descriptorsOf = (tools: readonly JsonObject[]): ToolDescriptorIface[] =>\n  tools.flatMap((tool) => {\n    const parsed = toolDescriptorSchema.safeParse({\n      ...tool,\n      description: tool.description ?? tool.title ?? tool.name,\n    });\n    return parsed.success ? [parsed.data] : [];\n  });\n\nconst LEASE_RENEW_MARGIN_MS = 5 * 60_000;\nconst ONLINE_POLL_MS = 500;\nconst ONLINE_POLL_MAX_MS = 5_000;\nconst MAX_LEASE_TTL_MS = 60 * 60_000;\nconst MIN_LEASE_TTL_MS = 60_000;\n\nconst platformOf = (platform: string): SandboxPlatform =>\n  platform === 'windows' ? SandboxPlatform.Windows : SandboxPlatform.Posix;\n\n// A Device is the person's machine as it is: nothing is cloned, installed or\n// started on it, and its network is the person's. Notes may still describe it.\nconst refuseSetup = (setup: SandboxSetupIface | null): void => {\n  if (setup == null) return;\n  const parts = [\n    setup.repositories.length > 0 ? 'repositories' : null,\n    Object.keys(setup.variables).length > 0 ? 'variables' : null,\n    setup.steps.length > 0 ? 'steps' : null,\n    setup.services.length > 0 ? 'services' : null,\n    Object.keys(setup.commands).length > 0 ? 'commands' : null,\n    setup.network != null ? 'a network policy' : null,\n  ].filter((part) => part != null);\n  if (parts.length > 0)\n    throw new Error(`a Final Device takes no sandbox setup (this one has ${parts.join(', ')})`);\n};\n\nexport const createDeviceSandboxProvider = (\n  config: DeviceSandboxProviderConfigIface,\n): DeviceSandboxProviderIface => {\n  const randomUuid = config.randomUuid ?? (() => crypto.randomUUID());\n  const now = config.now ?? (() => Date.now());\n  const log = config.log ?? (() => undefined);\n  const leaseTtlMs = Math.max(\n    MIN_LEASE_TTL_MS,\n    Math.min(config.leaseTtlMs ?? 15 * 60_000, MAX_LEASE_TTL_MS),\n  );\n  const sleep =\n    config.sleep ?? ((ms: number) => new Promise<void>((resolve) => setTimeout(resolve, ms)));\n  const onlineWaitMs = config.onlineWaitMs ?? 0;\n  const api = createDeviceApiClient({ api: config.api, fetch: config.fetch });\n\n  // A Device runs when it is connected to the Device API; nothing is leased before.\n  const awaitOnline = async (\n    caller: DeviceApiCallerIface,\n    deviceId: string,\n    timeoutMs: number,\n  ): Promise<DeviceApiDeviceIface> => {\n    const deadline = now() + timeoutMs;\n    let pollMs = ONLINE_POLL_MS;\n    for (;;) {\n      const device = await api.getDevice({ caller, deviceId });\n      if (device == null) throw new Error(`device ${deviceId} was not found`);\n      if (device.online) return device;\n      const left = deadline - now();\n      if (left <= 0) throw new Error(`${device.displayName} is not connected`);\n      await sleep(Math.min(pollMs, left));\n      pollMs = Math.min(pollMs * 2, ONLINE_POLL_MAX_MS);\n    }\n  };\n\n  // An assertion for the Device API before each request, and a new one after\n  // a rejection; it carries the acting user it was issued for.\n  const credentialsFor = (ctx: SandboxProviderContextIface): DeviceApiCredentialsIface => ({\n    deviceAccess: async (args) => ({\n      baseUrl: config.deviceApiUrl,\n      token: (\n        await ctx.identity({ audience: config.deviceApiUrl, refresh: args?.refresh === true })\n      ).token,\n    }),\n  });\n\n  const callerFor = (ctx: SandboxProviderContextIface): DeviceApiCallerIface => ({\n    organizationId: ctx.organizationId,\n    credentials: credentialsFor(ctx),\n    actingUser: ctx.actingUser,\n  });\n\n  const lease = async (args: {\n    ctx: SandboxResourceContextIface;\n    deviceId: string;\n    afterGeneration: number;\n    passive: boolean;\n  }): Promise<{\n    handle: SandboxProviderHandleIface<DeviceSandboxSessionIface>;\n    generation: number;\n  }> => {\n    const { ctx } = args;\n    const caller = callerFor(ctx);\n    // A Device workspace is keyed by the sandbox: every attach of this sandbox\n    // finds the same files, and its processes end with each lease generation.\n    const bindingId = ctx.sandboxId;\n    // The provider's awaitRunning, before the lease.\n    const device = await awaitOnline(caller, args.deviceId, onlineWaitMs);\n    // The host gates each call by its grant; the lease is the most the Device allows.\n    const leaseAccess = device.writable ? DeviceApiLeaseAccess.Write : DeviceApiLeaseAccess.Read;\n    const afterGeneration = args.afterGeneration === 0 ? undefined : args.afterGeneration;\n    let current: DeviceApiLeaseIface = args.passive\n      ? await api.recoverLease({\n          caller,\n          deviceId: device.id,\n          sessionId: ctx.sandboxId,\n          bindingId,\n          access: leaseAccess,\n        })\n      : await api.lease({\n          caller,\n          deviceId: device.id,\n          sessionId: ctx.sandboxId,\n          bindingId,\n          access: leaseAccess,\n          ttlMs: leaseTtlMs,\n          afterGeneration,\n        });\n    if (\n      args.passive &&\n      (current.deviceId !== device.id ||\n        current.generation < args.afterGeneration ||\n        current.expiresAtMs <= now())\n    )\n      throw new Error('The existing Device lease is unavailable');\n    let renewing: Promise<DeviceApiLeaseIface> | null = null;\n    // The current lease handle, renewed shortly before it lapses.\n    const leaseHandle = async (): Promise<string> => {\n      if (current.expiresAtMs - now() < LEASE_RENEW_MARGIN_MS) {\n        renewing ??= (\n          args.passive\n            ? api.recoverLease({\n                caller,\n                deviceId: device.id,\n                sessionId: ctx.sandboxId,\n                bindingId,\n                access: leaseAccess,\n              })\n            : api.renew({ caller, lease: current.lease, ttlMs: leaseTtlMs })\n        ).finally(() => {\n          renewing = null;\n        });\n        current = await renewing;\n      }\n      return current.lease;\n    };\n    let released = false;\n    const release = async (): Promise<void> => {\n      if (released || args.passive) return;\n      released = true;\n      await api.release({ caller, lease: current.lease });\n    };\n\n    const platform = platformOf(current.platform);\n    const paths = sandboxPathsFor(platform);\n    const session = createTransportSession({\n      id: `${device.id}:${bindingId}`,\n      description: `${device.displayName} (Final Device)`,\n      workspaceRoot: current.workspaceRoot,\n      transport: api.transport({ caller, lease: leaseHandle }),\n      baseEnv: async () => ({}),\n      randomUuid,\n      paths,\n      commands: commandEncoderFor(platform),\n      // Lease processes end with the lease generation; a new one knows none.\n      processScope: () => String(current.generation),\n      network: {\n        ports: [],\n        getPortEndpoint: async () => {\n          throw new Error('Final Device sandboxes expose no ports');\n        },\n        stop: release,\n        destroy: release,\n      },\n    });\n\n    const offered = new Set(current.capabilities);\n    const processes = offered.has(DeviceApiCapability.Process);\n    const localMcp = offered.has(DeviceApiCapability.LocalMcp);\n    const computerUse = offered.has(DeviceApiCapability.ComputerUse);\n    const capabilities = [SandboxCapability.Files];\n    if (processes) capabilities.push(SandboxCapability.Process);\n    if (processes && !args.passive) capabilities.push(SandboxCapability.DurableProcesses);\n    if (localMcp) capabilities.push(SandboxCapability.LocalMcp);\n    if (computerUse) capabilities.push(SandboxCapability.ComputerUse);\n    if (device.screenReady) capabilities.push(SandboxCapability.Screen);\n\n    // The Device's computer-use server, or one of its local MCP servers, is a byte\n    // pipe in the Device API (`/v1/leases/:lease/mcp/:server/{open,write,read,close}`):\n    // a channel endpoint whoever runs this handle opens in process.\n    const openMcpPipe = (server: string) => {\n      const clientId = randomUuid();\n      const request = async (\n        action: 'open' | 'write' | 'read' | 'close',\n        dataBase64?: string,\n        signal?: AbortSignal,\n      ): Promise<string> =>\n        api.pipe({\n          caller,\n          lease: await leaseHandle(),\n          server,\n          action,\n          clientId,\n          dataBase64,\n          signal,\n        });\n      return createMcpPipe({\n        wire: {\n          open: async (signal) => {\n            await request('open', undefined, signal);\n          },\n          write: async (data, signal) => {\n            await request('write', data, signal);\n          },\n          read: (signal) => request('read', undefined, signal),\n          close: async () => {\n            await request('close').catch(() => undefined);\n          },\n        },\n      });\n    };\n    const channelEndpoint = (server: string): McpChannelEndpointIface => ({\n      name: server,\n      connect: async () => {\n        const pipe = openMcpPipe(server);\n        return {\n          send: (message, options) => pipe.send(message, options?.abortSignal),\n          receive: (options) => pipe.receive(options?.abortSignal),\n          close: () => pipe.close(),\n        };\n      },\n    });\n    const sandbox: DeviceSandboxSessionIface = { ...session, capabilities };\n    // Without process access there is nothing to attach to.\n    if (!processes) delete sandbox.attachProcess;\n    if (computerUse) {\n      sandbox.computerUse = async () => channelEndpoint(DEVICE_COMPUTER_USE_SERVER);\n    }\n    if (localMcp) {\n      sandbox.localMcp = async () =>\n        (await api.localMcpServers({ caller, lease: await leaseHandle() })).map(channelEndpoint);\n    }\n    if (device.screenReady) {\n      sandbox.screen = (options) =>\n        api.screen({\n          caller,\n          deviceId: device.id,\n          sessionId: randomUuid(),\n          viewOnly: options?.viewOnly ?? true,\n        });\n    }\n    log('device_sandbox.attached', { deviceId: device.id, generation: current.generation });\n    return {\n      generation: current.generation,\n      handle: {\n        // A viewer's lease is the existing one: it changes nothing.\n        sandbox: args.passive ? readOnlySession(sandbox) : sandbox,\n        onSandboxStop: release,\n        onSandboxDelete: release,\n        onRuntimeShutdown: async () => undefined,\n      },\n    };\n  };\n\n  const environment = (\n    rawOptions?: JsonValue,\n  ): SandboxEnvironmentImplementationIface<\n    DeviceSandboxArtifact,\n    DeviceSandboxState,\n    DeviceSandboxSessionIface\n  > => {\n    const parsed = deviceEnvironmentSchema.safeParse(rawOptions ?? {});\n    if (!parsed.success) throw new Error(`invalid device environment: ${parsed.error.message}`);\n    const options = parsed.data;\n    // The Device the environment names; the Device API checks on every call\n    // that the acting user owns it.\n    const resolveDeviceId = async (caller: DeviceApiCallerIface): Promise<string> => {\n      if ('deviceId' in options) return options.deviceId;\n      const device = await api.resolvePairing({ caller, code: options.pairing });\n      if (device == null) throw new Error('the Final Device pairing code is unknown or expired');\n      return device.id;\n    };\n    return {\n      // What a lease on this Device grants, known from the registry without\n      // leasing (the Device API's rule: processes and computer use with a write\n      // lease on a Device that allows processes).\n      capabilities: async (ctx): Promise<SandboxCapabilityOffer> => {\n        const device = await api.getDevice({\n          caller: callerFor(ctx),\n          deviceId: await resolveDeviceId(callerFor(ctx)),\n        });\n        if (device == null) return {};\n        const offer: SandboxCapabilityOffer = {\n          [Capability.Files]: device.writable ? FilesAccess.Write : FilesAccess.Read,\n        };\n        if (device.writable && device.allowProcesses) {\n          offer[Capability.Shell] = ShellAccess.Execute;\n          offer[Capability.ComputerUse] = ScreenAccess.Control;\n        } else if (device.screenReady) offer[Capability.ComputerUse] = ScreenAccess.View;\n        return offer;\n      },\n      features: async (ctx) => {\n        const device = await api.getDevice({\n          caller: callerFor(ctx),\n          deviceId: await resolveDeviceId(callerFor(ctx)),\n        });\n        if (device == null) return null;\n        const offered = [SandboxCapability.Files];\n        if (device.writable && device.allowProcesses) {\n          offered.push(\n            SandboxCapability.Process,\n            SandboxCapability.DurableProcesses,\n            SandboxCapability.LocalMcp,\n            SandboxCapability.ComputerUse,\n          );\n        }\n        if (device.screenReady) offered.push(SandboxCapability.Screen);\n        return offered;\n      },\n      // What the Device's servers last listed through the Device API (it records\n      // them from the MCP pipes), so the projection lists them without leasing.\n      // A Device the API has never seen list gives unknown; its first lease does.\n      mcpCatalog: async (ctx) => {\n        const catalog = await api.mcpCatalog({\n          caller: callerFor(ctx),\n          deviceId: await resolveDeviceId(callerFor(ctx)),\n        });\n        const local = catalog.localServers;\n        const localMcp: Record<string, ToolDescriptorIface[]> = {};\n        let localKnown = local != null;\n        for (const server of local?.servers ?? []) {\n          if (server.tools == null) localKnown = false;\n          else localMcp[server.name] = descriptorsOf(server.tools);\n        }\n        return {\n          computerUse:\n            catalog.computerUse == null ? null : descriptorsOf(catalog.computerUse.tools),\n          localMcp: localKnown ? localMcp : null,\n        };\n      },\n      processes: async (ctx, rawState, request) => {\n        const state = deviceStateSchema.parse(rawState);\n        return api.inspectProcesses({\n          caller: callerFor(ctx),\n          deviceId: state.deviceId,\n          bindingId: ctx.sandboxId,\n          request,\n        });\n      },\n      artifactKey: async (ctx) => `device:${await resolveDeviceId(callerFor(ctx))}`,\n      prepare: async (ctx) => ({ version: 1, deviceId: await resolveDeviceId(callerFor(ctx)) }),\n      create: async (_ctx, { artifact, setup }) => {\n        refuseSetup(setup);\n        return { state: { version: 2, deviceId: artifact.deviceId, generation: 0 } };\n      },\n      awaitRunning: async (ctx, rawState, { timeoutMs }) => {\n        const { deviceId } = deviceStateSchema.pick({ deviceId: true }).parse(rawState);\n        await awaitOnline(callerFor(ctx), deviceId, timeoutMs);\n      },\n      // A Device never takes a lease back at an old generation once it lapsed,\n      // so every attach leases a later one, and no process from before survives.\n      attach: async (ctx, { state: rawState }) => {\n        const state = deviceStateSchema.parse(rawState);\n        const { handle, generation } = await lease({\n          ctx,\n          deviceId: state.deviceId,\n          afterGeneration: state.generation,\n          passive: false,\n        });\n        return {\n          handle,\n          state: { ...state, generation },\n          fresh: state.generation === 0,\n          booted: true,\n        };\n      },\n      attachPassive: async (ctx, { state: rawState }) => {\n        const state = deviceStateSchema.parse(rawState);\n        return (\n          await lease({\n            ctx,\n            deviceId: state.deviceId,\n            afterGeneration: state.generation,\n            passive: true,\n          })\n        ).handle;\n      },\n      // The lease lapses on its own; the next generation retires its processes.\n      detach: async (_ctx, { state }) => deviceStateSchema.parse(state),\n      park: async (_ctx, { state }) => deviceStateSchema.parse(state),\n      // The Device stays the person's; its workspace for this sandbox is let go.\n      delete: async (ctx, { state: rawState }) => {\n        const state = deviceStateSchema.parse(rawState);\n        await api.releaseWorkspaceLeases({\n          caller: callerFor(ctx),\n          deviceId: state.deviceId,\n          bindingId: ctx.sandboxId,\n        });\n      },\n    };\n  };\n\n  return defineSandboxProvider({\n    name: DEVICE_PROVIDER,\n    stateProtocolVersion: 2,\n    environment,\n  });\n};\n"],
+  "mappings": "AAAA,SAAS,YAAY,aAAa,cAAc,mBAAmB;AACnE;AAAA,EACE;AAAA,OAIK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAUK;AACP,YAAY,OAAO;AAEnB,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAMK;AACP,SAAS,iBAAiB,+BAA+B;AACzD,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB,uBAAuB;AACjD,SAAS,wBAAwB,uBAAuB;AAExD,SAAS,+BAA+B,gCAAgC;AAExE,SAAS,mBAAAA,wBAAuB;AAEhC,SAAS,mBAAAC,wBAAuB;AA+BhC,MAAM,uBAAuB,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,UAAU,EAAE,OAAO,EAAE,CAAC;AAErF,MAAM,oBAAoB,EAAE,OAAO;AAAA,EACjC,SAAS,EAAE,QAAQ,CAAC;AAAA,EACpB,UAAU,EAAE,OAAO;AAAA,EACnB,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC;AACpC,CAAC;AAIM,MAAM,6BAA6B;AAe1C,MAAM,gBAAgB,CAAC,UACrB,MAAM,QAAQ,CAAC,SAAS;AACtB,QAAM,SAAS,qBAAqB,UAAU;AAAA,IAC5C,GAAG;AAAA,IACH,aAAa,KAAK,eAAe,KAAK,SAAS,KAAK;AAAA,EACtD,CAAC;AACD,SAAO,OAAO,UAAU,CAAC,OAAO,IAAI,IAAI,CAAC;AAC3C,CAAC;AAEH,MAAM,wBAAwB,IAAI;AAClC,MAAM,iBAAiB;AACvB,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB,KAAK;AAC9B,MAAM,mBAAmB;AAEzB,MAAM,aAAa,CAAC,aAClB,aAAa,YAAY,gBAAgB,UAAU,gBAAgB;AAIrE,MAAM,cAAc,CAAC,UAA0C;AAC7D,MAAI,SAAS,KAAM;AACnB,QAAM,QAAQ;AAAA,IACZ,MAAM,aAAa,SAAS,IAAI,iBAAiB;AAAA,IACjD,OAAO,KAAK,MAAM,SAAS,EAAE,SAAS,IAAI,cAAc;AAAA,IACxD,MAAM,MAAM,SAAS,IAAI,UAAU;AAAA,IACnC,MAAM,SAAS,SAAS,IAAI,aAAa;AAAA,IACzC,OAAO,KAAK,MAAM,QAAQ,EAAE,SAAS,IAAI,aAAa;AAAA,IACtD,MAAM,WAAW,OAAO,qBAAqB;AAAA,EAC/C,EAAE,OAAO,CAAC,SAAS,QAAQ,IAAI;AAC/B,MAAI,MAAM,SAAS;AACjB,UAAM,IAAI,MAAM,uDAAuD,MAAM,KAAK,IAAI,CAAC,GAAG;AAC9F;AAEO,MAAM,8BAA8B,CACzC,WAC+B;AAC/B,QAAM,aAAa,OAAO,eAAe,MAAM,OAAO,WAAW;AACjE,QAAM,MAAM,OAAO,QAAQ,MAAM,KAAK,IAAI;AAC1C,QAAM,MAAM,OAAO,QAAQ,MAAM;AACjC,QAAM,aAAa,KAAK;AAAA,IACtB;AAAA,IACA,KAAK,IAAI,OAAO,cAAc,KAAK,KAAQ,gBAAgB;AAAA,EAC7D;AACA,QAAM,QACJ,OAAO,UAAU,CAAC,OAAe,IAAI,QAAc,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzF,QAAM,eAAe,OAAO,gBAAgB;AAC5C,QAAM,MAAM,sBAAsB,EAAE,KAAK,OAAO,KAAK,OAAO,OAAO,MAAM,CAAC;AAG1E,QAAM,cAAc,OAClB,QACA,UACA,cACkC;AAClC,UAAM,WAAW,IAAI,IAAI;AACzB,QAAI,SAAS;AACb,eAAS;AACP,YAAM,SAAS,MAAM,IAAI,UAAU,EAAE,QAAQ,SAAS,CAAC;AACvD,UAAI,UAAU,KAAM,OAAM,IAAI,MAAM,UAAU,QAAQ,gBAAgB;AACtE,UAAI,OAAO,OAAQ,QAAO;AAC1B,YAAM,OAAO,WAAW,IAAI;AAC5B,UAAI,QAAQ,EAAG,OAAM,IAAI,MAAM,GAAG,OAAO,WAAW,mBAAmB;AACvE,YAAM,MAAM,KAAK,IAAI,QAAQ,IAAI,CAAC;AAClC,eAAS,KAAK,IAAI,SAAS,GAAG,kBAAkB;AAAA,IAClD;AAAA,EACF;AAIA,QAAM,iBAAiB,CAAC,SAAiE;AAAA,IACvF,cAAc,OAAO,UAAU;AAAA,MAC7B,SAAS,OAAO;AAAA,MAChB,QACE,MAAM,IAAI,SAAS,EAAE,UAAU,OAAO,cAAc,SAAS,MAAM,YAAY,KAAK,CAAC,GACrF;AAAA,IACJ;AAAA,EACF;AAEA,QAAM,YAAY,CAAC,SAA4D;AAAA,IAC7E,gBAAgB,IAAI;AAAA,IACpB,aAAa,eAAe,GAAG;AAAA,IAC/B,YAAY,IAAI;AAAA,EAClB;AAEA,QAAM,QAAQ,OAAO,SAQf;AACJ,UAAM,EAAE,IAAI,IAAI;AAChB,UAAM,SAAS,UAAU,GAAG;AAG5B,UAAM,YAAY,IAAI;AAEtB,UAAM,SAAS,MAAM,YAAY,QAAQ,KAAK,UAAU,YAAY;AAEpE,UAAM,cAAc,OAAO,WAAW,qBAAqB,QAAQ,qBAAqB;AACxF,UAAM,kBAAkB,KAAK,oBAAoB,IAAI,SAAY,KAAK;AACtE,QAAI,UAA+B,KAAK,UACpC,MAAM,IAAI,aAAa;AAAA,MACrB;AAAA,MACA,UAAU,OAAO;AAAA,MACjB,WAAW,IAAI;AAAA,MACf;AAAA,MACA,QAAQ;AAAA,IACV,CAAC,IACD,MAAM,IAAI,MAAM;AAAA,MACd;AAAA,MACA,UAAU,OAAO;AAAA,MACjB,WAAW,IAAI;AAAA,MACf;AAAA,MACA,QAAQ;AAAA,MACR,OAAO;AAAA,MACP;AAAA,IACF,CAAC;AACL,QACE,KAAK,YACJ,QAAQ,aAAa,OAAO,MAC3B,QAAQ,aAAa,KAAK,mBAC1B,QAAQ,eAAe,IAAI;AAE7B,YAAM,IAAI,MAAM,0CAA0C;AAC5D,QAAI,WAAgD;AAEpD,UAAM,cAAc,YAA6B;AAC/C,UAAI,QAAQ,cAAc,IAAI,IAAI,uBAAuB;AACvD,sBACE,KAAK,UACD,IAAI,aAAa;AAAA,UACf;AAAA,UACA,UAAU,OAAO;AAAA,UACjB,WAAW,IAAI;AAAA,UACf;AAAA,UACA,QAAQ;AAAA,QACV,CAAC,IACD,IAAI,MAAM,EAAE,QAAQ,OAAO,QAAQ,OAAO,OAAO,WAAW,CAAC,GACjE,QAAQ,MAAM;AACd,qBAAW;AAAA,QACb,CAAC;AACD,kBAAU,MAAM;AAAA,MAClB;AACA,aAAO,QAAQ;AAAA,IACjB;AACA,QAAI,WAAW;AACf,UAAM,UAAU,YAA2B;AACzC,UAAI,YAAY,KAAK,QAAS;AAC9B,iBAAW;AACX,YAAM,IAAI,QAAQ,EAAE,QAAQ,OAAO,QAAQ,MAAM,CAAC;AAAA,IACpD;AAEA,UAAM,WAAW,WAAW,QAAQ,QAAQ;AAC5C,UAAM,QAAQ,gBAAgB,QAAQ;AACtC,UAAM,UAAU,uBAAuB;AAAA,MACrC,IAAI,GAAG,OAAO,EAAE,IAAI,SAAS;AAAA,MAC7B,aAAa,GAAG,OAAO,WAAW;AAAA,MAClC,eAAe,QAAQ;AAAA,MACvB,WAAW,IAAI,UAAU,EAAE,QAAQ,OAAO,YAAY,CAAC;AAAA,MACvD,SAAS,aAAa,CAAC;AAAA,MACvB;AAAA,MACA;AAAA,MACA,UAAU,kBAAkB,QAAQ;AAAA;AAAA,MAEpC,cAAc,MAAM,OAAO,QAAQ,UAAU;AAAA,MAC7C,SAAS;AAAA,QACP,OAAO,CAAC;AAAA,QACR,iBAAiB,YAAY;AAC3B,gBAAM,IAAI,MAAM,wCAAwC;AAAA,QAC1D;AAAA,QACA,MAAM;AAAA,QACN,SAAS;AAAA,MACX;AAAA,IACF,CAAC;AAED,UAAM,UAAU,IAAI,IAAI,QAAQ,YAAY;AAC5C,UAAM,YAAY,QAAQ,IAAI,oBAAoB,OAAO;AACzD,UAAM,WAAW,QAAQ,IAAI,oBAAoB,QAAQ;AACzD,UAAM,cAAc,QAAQ,IAAI,oBAAoB,WAAW;AAC/D,UAAM,eAAe,CAAC,kBAAkB,KAAK;AAC7C,QAAI,UAAW,cAAa,KAAK,kBAAkB,OAAO;AAC1D,QAAI,aAAa,CAAC,KAAK,QAAS,cAAa,KAAK,kBAAkB,gBAAgB;AACpF,QAAI,SAAU,cAAa,KAAK,kBAAkB,QAAQ;AAC1D,QAAI,YAAa,cAAa,KAAK,kBAAkB,WAAW;AAChE,QAAI,OAAO,YAAa,cAAa,KAAK,kBAAkB,MAAM;AAKlE,UAAM,cAAc,CAAC,WAAmB;AACtC,YAAM,WAAW,WAAW;AAC5B,YAAM,UAAU,OACd,QACA,YACA,WAEA,IAAI,KAAK;AAAA,QACP;AAAA,QACA,OAAO,MAAM,YAAY;AAAA,QACzB;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AACH,aAAO,cAAc;AAAA,QACnB,MAAM;AAAA,UACJ,MAAM,OAAO,WAAW;AACtB,kBAAM,QAAQ,QAAQ,QAAW,MAAM;AAAA,UACzC;AAAA,UACA,OAAO,OAAO,MAAM,WAAW;AAC7B,kBAAM,QAAQ,SAAS,MAAM,MAAM;AAAA,UACrC;AAAA,UACA,MAAM,CAAC,WAAW,QAAQ,QAAQ,QAAW,MAAM;AAAA,UACnD,OAAO,YAAY;AACjB,kBAAM,QAAQ,OAAO,EAAE,MAAM,MAAM,MAAS;AAAA,UAC9C;AAAA,QACF;AAAA,MACF,CAAC;AAAA,IACH;AACA,UAAM,kBAAkB,CAAC,YAA6C;AAAA,MACpE,MAAM;AAAA,MACN,SAAS,YAAY;AACnB,cAAM,OAAO,YAAY,MAAM;AAC/B,eAAO;AAAA,UACL,MAAM,CAAC,SAAS,YAAY,KAAK,KAAK,SAAS,SAAS,WAAW;AAAA,UACnE,SAAS,CAAC,YAAY,KAAK,QAAQ,SAAS,WAAW;AAAA,UACvD,OAAO,MAAM,KAAK,MAAM;AAAA,QAC1B;AAAA,MACF;AAAA,IACF;AACA,UAAM,UAAqC,EAAE,GAAG,SAAS,aAAa;AAEtE,QAAI,CAAC,UAAW,QAAO,QAAQ;AAC/B,QAAI,aAAa;AACf,cAAQ,cAAc,YAAY,gBAAgB,0BAA0B;AAAA,IAC9E;AACA,QAAI,UAAU;AACZ,cAAQ,WAAW,aAChB,MAAM,IAAI,gBAAgB,EAAE,QAAQ,OAAO,MAAM,YAAY,EAAE,CAAC,GAAG,IAAI,eAAe;AAAA,IAC3F;AACA,QAAI,OAAO,aAAa;AACtB,cAAQ,SAAS,CAAC,YAChB,IAAI,OAAO;AAAA,QACT;AAAA,QACA,UAAU,OAAO;AAAA,QACjB,WAAW,WAAW;AAAA,QACtB,UAAU,SAAS,YAAY;AAAA,MACjC,CAAC;AAAA,IACL;AACA,QAAI,2BAA2B,EAAE,UAAU,OAAO,IAAI,YAAY,QAAQ,WAAW,CAAC;AACtF,WAAO;AAAA,MACL,YAAY,QAAQ;AAAA,MACpB,QAAQ;AAAA;AAAA,QAEN,SAAS,KAAK,UAAU,gBAAgB,OAAO,IAAI;AAAA,QACnD,eAAe;AAAA,QACf,iBAAiB;AAAA,QACjB,mBAAmB,YAAY;AAAA,MACjC;AAAA,IACF;AAAA,EACF;AAEA,QAAM,cAAc,CAClB,eAKG;AACH,UAAM,SAAS,wBAAwB,UAAU,cAAc,CAAC,CAAC;AACjE,QAAI,CAAC,OAAO,QAAS,OAAM,IAAI,MAAM,+BAA+B,OAAO,MAAM,OAAO,EAAE;AAC1F,UAAM,UAAU,OAAO;AAGvB,UAAM,kBAAkB,OAAO,WAAkD;AAC/E,UAAI,cAAc,QAAS,QAAO,QAAQ;AAC1C,YAAM,SAAS,MAAM,IAAI,eAAe,EAAE,QAAQ,MAAM,QAAQ,QAAQ,CAAC;AACzE,UAAI,UAAU,KAAM,OAAM,IAAI,MAAM,qDAAqD;AACzF,aAAO,OAAO;AAAA,IAChB;AACA,WAAO;AAAA;AAAA;AAAA;AAAA,MAIL,cAAc,OAAO,QAAyC;AAC5D,cAAM,SAAS,MAAM,IAAI,UAAU;AAAA,UACjC,QAAQ,UAAU,GAAG;AAAA,UACrB,UAAU,MAAM,gBAAgB,UAAU,GAAG,CAAC;AAAA,QAChD,CAAC;AACD,YAAI,UAAU,KAAM,QAAO,CAAC;AAC5B,cAAM,QAAgC;AAAA,UACpC,CAAC,WAAW,KAAK,GAAG,OAAO,WAAW,YAAY,QAAQ,YAAY;AAAA,QACxE;AACA,YAAI,OAAO,YAAY,OAAO,gBAAgB;AAC5C,gBAAM,WAAW,KAAK,IAAI,YAAY;AACtC,gBAAM,WAAW,WAAW,IAAI,aAAa;AAAA,QAC/C,WAAW,OAAO,YAAa,OAAM,WAAW,WAAW,IAAI,aAAa;AAC5E,eAAO;AAAA,MACT;AAAA,MACA,UAAU,OAAO,QAAQ;AACvB,cAAM,SAAS,MAAM,IAAI,UAAU;AAAA,UACjC,QAAQ,UAAU,GAAG;AAAA,UACrB,UAAU,MAAM,gBAAgB,UAAU,GAAG,CAAC;AAAA,QAChD,CAAC;AACD,YAAI,UAAU,KAAM,QAAO;AAC3B,cAAM,UAAU,CAAC,kBAAkB,KAAK;AACxC,YAAI,OAAO,YAAY,OAAO,gBAAgB;AAC5C,kBAAQ;AAAA,YACN,kBAAkB;AAAA,YAClB,kBAAkB;AAAA,YAClB,kBAAkB;AAAA,YAClB,kBAAkB;AAAA,UACpB;AAAA,QACF;AACA,YAAI,OAAO,YAAa,SAAQ,KAAK,kBAAkB,MAAM;AAC7D,eAAO;AAAA,MACT;AAAA;AAAA;AAAA;AAAA,MAIA,YAAY,OAAO,QAAQ;AACzB,cAAM,UAAU,MAAM,IAAI,WAAW;AAAA,UACnC,QAAQ,UAAU,GAAG;AAAA,UACrB,UAAU,MAAM,gBAAgB,UAAU,GAAG,CAAC;AAAA,QAChD,CAAC;AACD,cAAM,QAAQ,QAAQ;AACtB,cAAM,WAAkD,CAAC;AACzD,YAAI,aAAa,SAAS;AAC1B,mBAAW,UAAU,OAAO,WAAW,CAAC,GAAG;AACzC,cAAI,OAAO,SAAS,KAAM,cAAa;AAAA,cAClC,UAAS,OAAO,IAAI,IAAI,cAAc,OAAO,KAAK;AAAA,QACzD;AACA,eAAO;AAAA,UACL,aACE,QAAQ,eAAe,OAAO,OAAO,cAAc,QAAQ,YAAY,KAAK;AAAA,UAC9E,UAAU,aAAa,WAAW;AAAA,QACpC;AAAA,MACF;AAAA,MACA,WAAW,OAAO,KAAK,UAAU,YAAY;AAC3C,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,eAAO,IAAI,iBAAiB;AAAA,UAC1B,QAAQ,UAAU,GAAG;AAAA,UACrB,UAAU,MAAM;AAAA,UAChB,WAAW,IAAI;AAAA,UACf;AAAA,QACF,CAAC;AAAA,MACH;AAAA,MACA,aAAa,OAAO,QAAQ,UAAU,MAAM,gBAAgB,UAAU,GAAG,CAAC,CAAC;AAAA,MAC3E,SAAS,OAAO,SAAS,EAAE,SAAS,GAAG,UAAU,MAAM,gBAAgB,UAAU,GAAG,CAAC,EAAE;AAAA,MACvF,QAAQ,OAAO,MAAM,EAAE,UAAU,MAAM,MAAM;AAC3C,oBAAY,KAAK;AACjB,eAAO,EAAE,OAAO,EAAE,SAAS,GAAG,UAAU,SAAS,UAAU,YAAY,EAAE,EAAE;AAAA,MAC7E;AAAA,MACA,cAAc,OAAO,KAAK,UAAU,EAAE,UAAU,MAAM;AACpD,cAAM,EAAE,SAAS,IAAI,kBAAkB,KAAK,EAAE,UAAU,KAAK,CAAC,EAAE,MAAM,QAAQ;AAC9E,cAAM,YAAY,UAAU,GAAG,GAAG,UAAU,SAAS;AAAA,MACvD;AAAA;AAAA;AAAA,MAGA,QAAQ,OAAO,KAAK,EAAE,OAAO,SAAS,MAAM;AAC1C,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,cAAM,EAAE,QAAQ,WAAW,IAAI,MAAM,MAAM;AAAA,UACzC;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,iBAAiB,MAAM;AAAA,UACvB,SAAS;AAAA,QACX,CAAC;AACD,eAAO;AAAA,UACL;AAAA,UACA,OAAO,EAAE,GAAG,OAAO,WAAW;AAAA,UAC9B,OAAO,MAAM,eAAe;AAAA,UAC5B,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,eAAe,OAAO,KAAK,EAAE,OAAO,SAAS,MAAM;AACjD,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,gBACE,MAAM,MAAM;AAAA,UACV;AAAA,UACA,UAAU,MAAM;AAAA,UAChB,iBAAiB,MAAM;AAAA,UACvB,SAAS;AAAA,QACX,CAAC,GACD;AAAA,MACJ;AAAA;AAAA,MAEA,QAAQ,OAAO,MAAM,EAAE,MAAM,MAAM,kBAAkB,MAAM,KAAK;AAAA,MAChE,MAAM,OAAO,MAAM,EAAE,MAAM,MAAM,kBAAkB,MAAM,KAAK;AAAA;AAAA,MAE9D,QAAQ,OAAO,KAAK,EAAE,OAAO,SAAS,MAAM;AAC1C,cAAM,QAAQ,kBAAkB,MAAM,QAAQ;AAC9C,cAAM,IAAI,uBAAuB;AAAA,UAC/B,QAAQ,UAAU,GAAG;AAAA,UACrB,UAAU,MAAM;AAAA,UAChB,WAAW,IAAI;AAAA,QACjB,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,SAAO,sBAAsB;AAAA,IAC3B,MAAM;AAAA,IACN,sBAAsB;AAAA,IACtB;AAAA,EACF,CAAC;AACH;",
+  "names": ["DEVICE_PROVIDER", "SandboxPlatform"]
 }

package/dist/modules/sandboxes/egress.d.mts

@@ -1,13 +1,13 @@
 import { type WorkspaceEgressRequestIface, type WorkspaceEgressStatusIface } from '@finalai/agent-protocol/device-egress';
-import { SandboxAccess } from '@finalai/agent-provider';
-import { type SandboxNetworkingExtensionIface } from '@finalai/agent-provider/sandbox';
-import type { NetworkSandboxSessionIface, SandboxActingUserIface, SandboxCredentialsIface, SandboxRunResultIface, SandboxProviderHandleIface, NetworkPolicyIface } from '@finalai/agent-provider/sandbox';
+import { type SandboxGrantIface, type SandboxNetworkingExtensionIface } from '@finalai/agent-provider/sandbox';
+import type { NetworkSandboxSessionIface, SandboxActingUserIface, SandboxRunResultIface, SandboxProviderHandleIface, NetworkPolicyIface } from '@finalai/agent-provider/sandbox';
+import { type DeviceAccessIface, type DeviceApiCredentialsIface } from "./access.mjs";
 import { type DeviceApiClientIface, type DeviceApiConfigIface } from "./device-api.mjs";
 export interface WorkspaceEgressManagerOptionsIface {
     sandbox: NetworkSandboxSessionIface;
     workspaceId: string;
     organizationId: string;
-    credentials?: SandboxCredentialsIface;
+    credentials?: DeviceApiCredentialsIface;
     actingUser: SandboxActingUserIface;
     api: DeviceApiConfigIface | (() => DeviceApiConfigIface);
     privilegedRun?: (request: {
@@ -37,7 +37,7 @@ export interface WorkspaceEgressManagerOptionsIface {
 export declare const suspendWorkspaceEgress: (args: {
     api: DeviceApiConfigIface | (() => DeviceApiConfigIface);
     organizationId: string;
-    credentials?: SandboxCredentialsIface;
+    credentials?: DeviceApiCredentialsIface;
     workspaceId: string;
     actingUser: SandboxActingUserIface;
 }) => Promise<void>;
@@ -54,7 +54,7 @@ export declare const createWorkspaceEgressManager: (options: WorkspaceEgressMana
 export declare const preserveWorkspaceNetworkPolicy: (options: {
     api: DeviceApiConfigIface | (() => DeviceApiConfigIface);
     organizationId: string;
-    credentials?: SandboxCredentialsIface;
+    credentials?: DeviceApiCredentialsIface;
     workspaceId: string;
     policy: NetworkPolicyIface;
     client?: Pick<DeviceApiClientIface, "egress">;
@@ -62,12 +62,13 @@ export declare const preserveWorkspaceNetworkPolicy: (options: {
 export type WorkspaceEgressManagerIface = ReturnType<typeof createWorkspaceEgressManager>;
 export interface WorkspaceDeviceNetworkingOptionsIface {
     api: WorkspaceEgressManagerOptionsIface['api'];
+    access?: DeviceAccessIface;
     mcpFetch?: typeof globalThis.fetch;
     needed: (args: {
         organizationId: string;
+        projectId: string;
         workspaceId: string;
         teardown?: boolean;
-        access?: SandboxAccess;
     }) => Promise<boolean>;
     allowConfiguration?: boolean;
     authorizeOwnerChange?: (args: {
@@ -80,14 +81,14 @@ export declare const createWorkspaceDeviceNetworking: (options: WorkspaceDeviceN
 export declare const withWorkspaceEgress: <S extends NetworkSandboxSessionIface>(options: {
     handle: SandboxProviderHandleIface<S>;
     manager: WorkspaceEgressManagerIface;
-    access: SandboxAccess;
+    grant: SandboxGrantIface;
     beforeUse?: () => Promise<void>;
     initialized?: boolean;
     fetch?: typeof globalThis.fetch;
 }) => Promise<SandboxProviderHandleIface<S>>;
 export declare const withWorkspaceAdmission: <S extends NetworkSandboxSessionIface>(options: {
     handle: SandboxProviderHandleIface<S>;
-    access: SandboxAccess;
+    grant: SandboxGrantIface;
     admission: () => Promise<void>;
     fetch?: typeof globalThis.fetch;
 }) => Promise<SandboxProviderHandleIface<S>>;