@finalai/final-agent-provider 0.2.1 → 0.3.1

package/dist/modules/channels/routing.mjs

@@ -2,8 +2,7 @@ import {
   ConversationKind,
   Delivery,
   ParticipantKind,
-  RoutingMode,
-  SystemParticipantKind
+  RoutingMode
 } from "@finalai/agent-provider/channel";
 const MAX_AGENT_HOP_DEPTH = 2;
 const activeAgents = (participants) => participants.filter(
@@ -13,28 +12,15 @@ const effectiveDefaultAgent = (participants) => {
   const agents = activeAgents(participants);
   return agents.find((agent) => agent.routingMode === RoutingMode.Default) ?? agents.find((agent) => agent.routingMode === RoutingMode.All) ?? null;
 };
-const observesEverything = (participant) => participant.routingMode === RoutingMode.All || participant.routingMode === RoutingMode.Default;
 const routeMessage = (args) => {
   const { conversation, message, participants } = args;
-  const author = participants.find((participant) => participant.id === message.authorParticipantId) ?? null;
   const agents = activeAgents(participants).filter(
     (agent) => agent.id !== message.authorParticipantId && (message.agentAuthorDefinitionId == null || agent.definitionId !== message.agentAuthorDefinitionId)
   );
   if (agents.length === 0) {
     return [];
   }
-  const authorKind = author?.kind ?? ParticipantKind.User;
   const mentioned = new Set(message.mentionedParticipantIds);
-  if (authorKind === ParticipantKind.System && author?.systemKind !== SystemParticipantKind.ApiKey && message.agentAuthorDefinitionId == null) {
-    const sourceAgent = author?.definitionId == null ? null : agents.find((agent) => agent.definitionId === author.definitionId) ?? null;
-    const target = sourceAgent ?? (conversation.kind === ConversationKind.Direct ? agents[0] ?? null : effectiveDefaultAgent(agents));
-    return agents.flatMap((agent) => {
-      if (agent.id === target?.id) {
-        return [{ participantId: agent.id, delivery: Delivery.Prompt }];
-      }
-      return observesEverything(agent) ? [{ participantId: agent.id, delivery: Delivery.Observe }] : [];
-    });
-  }
   const mayPrompt = message.hopDepth < MAX_AGENT_HOP_DEPTH;
   const promptDelivery = mayPrompt ? Delivery.Prompt : Delivery.Observe;
   if (conversation.kind === ConversationKind.Direct) {

package/dist/modules/channels/routing.mjs.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/channels/routing.ts"],
-  "sourcesContent": ["import {\n  ConversationKind,\n  Delivery,\n  ParticipantKind,\n  RoutingMode,\n  SystemParticipantKind,\n  type ParticipantIface,\n  type RouteArgsIface,\n  type RouteDecisionIface,\n} from '@finalai/agent-provider/channel';\n\n// Agent-authored messages may prompt other agents only while the chain of\n// agent hops that produced them is shorter than this: a human\n// message (0) prompts A, A's reply (1) may prompt B, B's reply (2) prompts no one.\nexport const MAX_AGENT_HOP_DEPTH = 2;\n\nconst activeAgents = (participants: ParticipantIface[]): ParticipantIface[] =>\n  participants.filter(\n    (participant) => participant.kind === ParticipantKind.Agent && !participant.left,\n  );\n\n// The agent a no-mention message goes to: the Default agent, else (no Default)\n// the earliest-joined All agent, which then acts as the Default. Participants\n// arrive in join order.\nexport const effectiveDefaultAgent = (\n  participants: ParticipantIface[],\n): ParticipantIface | null => {\n  const agents = activeAgents(participants);\n  return (\n    agents.find((agent) => agent.routingMode === RoutingMode.Default) ??\n    agents.find((agent) => agent.routingMode === RoutingMode.All) ??\n    null\n  );\n};\n\nconst observesEverything = (participant: ParticipantIface): boolean =>\n  participant.routingMode === RoutingMode.All || participant.routingMode === RoutingMode.Default;\n\n// Pure: who gets a message and how. Users never receive decisions.\nexport const routeMessage = (args: RouteArgsIface): RouteDecisionIface[] => {\n  const { conversation, message, participants } = args;\n  const author =\n    participants.find((participant) => participant.id === message.authorParticipantId) ?? null;\n  const agents = activeAgents(participants).filter(\n    (agent) =>\n      agent.id !== message.authorParticipantId &&\n      (message.agentAuthorDefinitionId == null ||\n        agent.definitionId !== message.agentAuthorDefinitionId),\n  );\n  if (agents.length === 0) {\n    return [];\n  }\n  const authorKind = author?.kind ?? ParticipantKind.User;\n  const mentioned = new Set(message.mentionedParticipantIds);\n\n  if (\n    authorKind === ParticipantKind.System &&\n    author?.systemKind !== SystemParticipantKind.ApiKey &&\n    message.agentAuthorDefinitionId == null\n  ) {\n    // The source's agent (schedule or webhook binding) when it is a member,\n    // else the Default agent (Goal and tool events).\n    const sourceAgent =\n      author?.definitionId == null\n        ? null\n        : (agents.find((agent) => agent.definitionId === author.definitionId) ?? null);\n    const target =\n      sourceAgent ??\n      (conversation.kind === ConversationKind.Direct\n        ? (agents[0] ?? null)\n        : effectiveDefaultAgent(agents));\n    return agents.flatMap((agent): RouteDecisionIface[] => {\n      if (agent.id === target?.id) {\n        return [{ participantId: agent.id, delivery: Delivery.Prompt }];\n      }\n      return observesEverything(agent)\n        ? [{ participantId: agent.id, delivery: Delivery.Observe }]\n        : [];\n    });\n  }\n\n  const mayPrompt = message.hopDepth < MAX_AGENT_HOP_DEPTH;\n  const promptDelivery = mayPrompt ? Delivery.Prompt : Delivery.Observe;\n\n  if (conversation.kind === ConversationKind.Direct) {\n    return agents.map((agent) => ({ participantId: agent.id, delivery: promptDelivery }));\n  }\n\n  const anyAgentMentioned = agents.some((agent) => mentioned.has(agent.id));\n  const defaultAgent = effectiveDefaultAgent(participants);\n  return agents.flatMap((agent): RouteDecisionIface[] => {\n    if (mentioned.has(agent.id)) {\n      return [{ participantId: agent.id, delivery: promptDelivery }];\n    }\n    if (agent.routingMode === RoutingMode.Mention || agent.routingMode == null) {\n      return [];\n    }\n    if (!anyAgentMentioned && agent.id === defaultAgent?.id) {\n      return [{ participantId: agent.id, delivery: promptDelivery }];\n    }\n    return [{ participantId: agent.id, delivery: Delivery.Observe }];\n  });\n};\n"],
-  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAKA,MAAM,sBAAsB;AAEnC,MAAM,eAAe,CAAC,iBACpB,aAAa;AAAA,EACX,CAAC,gBAAgB,YAAY,SAAS,gBAAgB,SAAS,CAAC,YAAY;AAC9E;AAKK,MAAM,wBAAwB,CACnC,iBAC4B;AAC5B,QAAM,SAAS,aAAa,YAAY;AACxC,SACE,OAAO,KAAK,CAAC,UAAU,MAAM,gBAAgB,YAAY,OAAO,KAChE,OAAO,KAAK,CAAC,UAAU,MAAM,gBAAgB,YAAY,GAAG,KAC5D;AAEJ;AAEA,MAAM,qBAAqB,CAAC,gBAC1B,YAAY,gBAAgB,YAAY,OAAO,YAAY,gBAAgB,YAAY;AAGlF,MAAM,eAAe,CAAC,SAA+C;AAC1E,QAAM,EAAE,cAAc,SAAS,aAAa,IAAI;AAChD,QAAM,SACJ,aAAa,KAAK,CAAC,gBAAgB,YAAY,OAAO,QAAQ,mBAAmB,KAAK;AACxF,QAAM,SAAS,aAAa,YAAY,EAAE;AAAA,IACxC,CAAC,UACC,MAAM,OAAO,QAAQ,wBACpB,QAAQ,2BAA2B,QAClC,MAAM,iBAAiB,QAAQ;AAAA,EACrC;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,WAAO,CAAC;AAAA,EACV;AACA,QAAM,aAAa,QAAQ,QAAQ,gBAAgB;AACnD,QAAM,YAAY,IAAI,IAAI,QAAQ,uBAAuB;AAEzD,MACE,eAAe,gBAAgB,UAC/B,QAAQ,eAAe,sBAAsB,UAC7C,QAAQ,2BAA2B,MACnC;AAGA,UAAM,cACJ,QAAQ,gBAAgB,OACpB,OACC,OAAO,KAAK,CAAC,UAAU,MAAM,iBAAiB,OAAO,YAAY,KAAK;AAC7E,UAAM,SACJ,gBACC,aAAa,SAAS,iBAAiB,SACnC,OAAO,CAAC,KAAK,OACd,sBAAsB,MAAM;AAClC,WAAO,OAAO,QAAQ,CAAC,UAAgC;AACrD,UAAI,MAAM,OAAO,QAAQ,IAAI;AAC3B,eAAO,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,SAAS,OAAO,CAAC;AAAA,MAChE;AACA,aAAO,mBAAmB,KAAK,IAC3B,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,SAAS,QAAQ,CAAC,IACxD,CAAC;AAAA,IACP,CAAC;AAAA,EACH;AAEA,QAAM,YAAY,QAAQ,WAAW;AACrC,QAAM,iBAAiB,YAAY,SAAS,SAAS,SAAS;AAE9D,MAAI,aAAa,SAAS,iBAAiB,QAAQ;AACjD,WAAO,OAAO,IAAI,CAAC,WAAW,EAAE,eAAe,MAAM,IAAI,UAAU,eAAe,EAAE;AAAA,EACtF;AAEA,QAAM,oBAAoB,OAAO,KAAK,CAAC,UAAU,UAAU,IAAI,MAAM,EAAE,CAAC;AACxE,QAAM,eAAe,sBAAsB,YAAY;AACvD,SAAO,OAAO,QAAQ,CAAC,UAAgC;AACrD,QAAI,UAAU,IAAI,MAAM,EAAE,GAAG;AAC3B,aAAO,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,eAAe,CAAC;AAAA,IAC/D;AACA,QAAI,MAAM,gBAAgB,YAAY,WAAW,MAAM,eAAe,MAAM;AAC1E,aAAO,CAAC;AAAA,IACV;AACA,QAAI,CAAC,qBAAqB,MAAM,OAAO,cAAc,IAAI;AACvD,aAAO,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,eAAe,CAAC;AAAA,IAC/D;AACA,WAAO,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,SAAS,QAAQ,CAAC;AAAA,EACjE,CAAC;AACH;",
+  "sourcesContent": ["import {\n  ConversationKind,\n  Delivery,\n  ParticipantKind,\n  RoutingMode,\n  type ParticipantIface,\n  type RouteArgsIface,\n  type RouteDecisionIface,\n} from '@finalai/agent-provider/channel';\n\n// Agent-authored messages may prompt other agents only while the chain of\n// agent hops that produced them is shorter than this: a human\n// message (0) prompts A, A's reply (1) may prompt B, B's reply (2) prompts no one.\nexport const MAX_AGENT_HOP_DEPTH = 2;\n\nconst activeAgents = (participants: ParticipantIface[]): ParticipantIface[] =>\n  participants.filter(\n    (participant) => participant.kind === ParticipantKind.Agent && !participant.left,\n  );\n\n// The agent a no-mention message goes to: the Default agent, else (no Default)\n// the earliest-joined All agent, which then acts as the Default. Participants\n// arrive in join order.\nexport const effectiveDefaultAgent = (\n  participants: ParticipantIface[],\n): ParticipantIface | null => {\n  const agents = activeAgents(participants);\n  return (\n    agents.find((agent) => agent.routingMode === RoutingMode.Default) ??\n    agents.find((agent) => agent.routingMode === RoutingMode.All) ??\n    null\n  );\n};\n\n// Pure: who gets a message and how. Users never receive decisions.\nexport const routeMessage = (args: RouteArgsIface): RouteDecisionIface[] => {\n  const { conversation, message, participants } = args;\n  const agents = activeAgents(participants).filter(\n    (agent) =>\n      agent.id !== message.authorParticipantId &&\n      (message.agentAuthorDefinitionId == null ||\n        agent.definitionId !== message.agentAuthorDefinitionId),\n  );\n  if (agents.length === 0) {\n    return [];\n  }\n  const mentioned = new Set(message.mentionedParticipantIds);\n  const mayPrompt = message.hopDepth < MAX_AGENT_HOP_DEPTH;\n  const promptDelivery = mayPrompt ? Delivery.Prompt : Delivery.Observe;\n\n  if (conversation.kind === ConversationKind.Direct) {\n    return agents.map((agent) => ({ participantId: agent.id, delivery: promptDelivery }));\n  }\n\n  const anyAgentMentioned = agents.some((agent) => mentioned.has(agent.id));\n  const defaultAgent = effectiveDefaultAgent(participants);\n  return agents.flatMap((agent): RouteDecisionIface[] => {\n    if (mentioned.has(agent.id)) {\n      return [{ participantId: agent.id, delivery: promptDelivery }];\n    }\n    if (agent.routingMode === RoutingMode.Mention || agent.routingMode == null) {\n      return [];\n    }\n    if (!anyAgentMentioned && agent.id === defaultAgent?.id) {\n      return [{ participantId: agent.id, delivery: promptDelivery }];\n    }\n    return [{ participantId: agent.id, delivery: Delivery.Observe }];\n  });\n};\n"],
+  "mappings": "AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAIK;AAKA,MAAM,sBAAsB;AAEnC,MAAM,eAAe,CAAC,iBACpB,aAAa;AAAA,EACX,CAAC,gBAAgB,YAAY,SAAS,gBAAgB,SAAS,CAAC,YAAY;AAC9E;AAKK,MAAM,wBAAwB,CACnC,iBAC4B;AAC5B,QAAM,SAAS,aAAa,YAAY;AACxC,SACE,OAAO,KAAK,CAAC,UAAU,MAAM,gBAAgB,YAAY,OAAO,KAChE,OAAO,KAAK,CAAC,UAAU,MAAM,gBAAgB,YAAY,GAAG,KAC5D;AAEJ;AAGO,MAAM,eAAe,CAAC,SAA+C;AAC1E,QAAM,EAAE,cAAc,SAAS,aAAa,IAAI;AAChD,QAAM,SAAS,aAAa,YAAY,EAAE;AAAA,IACxC,CAAC,UACC,MAAM,OAAO,QAAQ,wBACpB,QAAQ,2BAA2B,QAClC,MAAM,iBAAiB,QAAQ;AAAA,EACrC;AACA,MAAI,OAAO,WAAW,GAAG;AACvB,WAAO,CAAC;AAAA,EACV;AACA,QAAM,YAAY,IAAI,IAAI,QAAQ,uBAAuB;AACzD,QAAM,YAAY,QAAQ,WAAW;AACrC,QAAM,iBAAiB,YAAY,SAAS,SAAS,SAAS;AAE9D,MAAI,aAAa,SAAS,iBAAiB,QAAQ;AACjD,WAAO,OAAO,IAAI,CAAC,WAAW,EAAE,eAAe,MAAM,IAAI,UAAU,eAAe,EAAE;AAAA,EACtF;AAEA,QAAM,oBAAoB,OAAO,KAAK,CAAC,UAAU,UAAU,IAAI,MAAM,EAAE,CAAC;AACxE,QAAM,eAAe,sBAAsB,YAAY;AACvD,SAAO,OAAO,QAAQ,CAAC,UAAgC;AACrD,QAAI,UAAU,IAAI,MAAM,EAAE,GAAG;AAC3B,aAAO,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,eAAe,CAAC;AAAA,IAC/D;AACA,QAAI,MAAM,gBAAgB,YAAY,WAAW,MAAM,eAAe,MAAM;AAC1E,aAAO,CAAC;AAAA,IACV;AACA,QAAI,CAAC,qBAAqB,MAAM,OAAO,cAAc,IAAI;AACvD,aAAO,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,eAAe,CAAC;AAAA,IAC/D;AACA,WAAO,CAAC,EAAE,eAAe,MAAM,IAAI,UAAU,SAAS,QAAQ,CAAC;AAAA,EACjE,CAAC;AACH;",
   "names": []
 }

package/dist/modules/channels/service-input.d.mts

@@ -0,0 +1,22 @@
+import type { ContentBlock } from '@agentclientprotocol/sdk/experimental/v2';
+import { ChannelPrincipalType, type ChannelAuthIface, type ChannelInputReceiptIface, type ChannelPlatformIface, type JsonObject, type TurnPolicy } from '@finalai/agent-provider';
+export interface ServiceInputArgsIface {
+    room: string;
+    participantId?: string;
+    content: ContentBlock[];
+    principal: {
+        principalId: string;
+        principalType?: ChannelPrincipalType | `${ChannelPrincipalType}`;
+        authenticator: string;
+        attributes?: JsonObject;
+    };
+    displayName: string;
+    actingUserId?: string;
+    originTurnId?: string;
+    idempotencyKey: string;
+    label: string;
+    context?: string[];
+    turnPolicy?: TurnPolicy | `${TurnPolicy}`;
+}
+export declare const serviceAuthOf: (args: ServiceInputArgsIface) => ChannelAuthIface;
+export declare const sendServiceInput: (platform: Pick<ChannelPlatformIface, "channelSessions">, args: ServiceInputArgsIface) => Promise<ChannelInputReceiptIface>;

package/dist/modules/channels/service-input.mjs

@@ -0,0 +1,32 @@
+import {
+  ChannelPrincipalType
+} from "@finalai/agent-provider";
+const serviceAuthOf = (args) => ({
+  principalId: args.principal.principalId,
+  principalType: args.principal.principalType ?? ChannelPrincipalType.Service,
+  authenticator: args.principal.authenticator,
+  displayName: args.displayName,
+  attributes: args.principal.attributes ?? {}
+});
+const sendServiceInput = async (platform, args) => {
+  if (platform.channelSessions == null)
+    throw new Error("channel session operations are unavailable");
+  return platform.channelSessions.send(
+    { conversationId: args.room, participantId: args.participantId },
+    {
+      content: args.content,
+      idempotencyKey: args.idempotencyKey,
+      auth: serviceAuthOf(args),
+      actingUserId: args.actingUserId,
+      originTurnId: args.originTurnId,
+      source: { label: args.label },
+      context: args.context,
+      turnPolicy: args.turnPolicy
+    }
+  );
+};
+export {
+  sendServiceInput,
+  serviceAuthOf
+};
+//# sourceMappingURL=service-input.mjs.map

package/dist/modules/channels/service-input.mjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/channels/service-input.ts"],
+  "sourcesContent": ["import type { ContentBlock } from '@agentclientprotocol/sdk/experimental/v2';\nimport {\n  ChannelPrincipalType,\n  type ChannelAuthIface,\n  type ChannelInputReceiptIface,\n  type ChannelPlatformIface,\n  type JsonObject,\n  type TurnPolicy,\n} from '@finalai/agent-provider';\n\n// Input to a Final room's agent from no member of the room: a schedule\n// firing, a webhook, a linked conversation, a sandbox result, a handoff from\n// another channel. It is channel input from a principal, never a message: the\n// platform accepts it at once and prompts the agent; the agent's reply in the\n// room carries `label` as its caption.\n\nexport interface ServiceInputArgsIface {\n  // The room (conversation id).\n  room: string;\n  // One agent of the room; the room's Default agent when absent.\n  participantId?: string;\n  content: ContentBlock[];\n  // Who sent it. A service principal unless a channel authenticated a person.\n  principal: {\n    principalId: string;\n    principalType?: ChannelPrincipalType | `${ChannelPrincipalType}`;\n    authenticator: string;\n    attributes?: JsonObject;\n  };\n  // How the agent and the room name the principal.\n  displayName: string;\n  // The person the input acts for: who pays for the turn and answers what it asks.\n  actingUserId?: string;\n  // The turn whose work produced the input, for loop limits and reply provenance.\n  originTurnId?: string;\n  idempotencyKey: string;\n  // The reply's caption (\"After the 9:00 schedule\"), written by the producer.\n  label: string;\n  context?: string[];\n  turnPolicy?: TurnPolicy | `${TurnPolicy}`;\n}\n\nexport const serviceAuthOf = (args: ServiceInputArgsIface): ChannelAuthIface => ({\n  principalId: args.principal.principalId,\n  principalType: args.principal.principalType ?? ChannelPrincipalType.Service,\n  authenticator: args.principal.authenticator,\n  displayName: args.displayName,\n  attributes: args.principal.attributes ?? {},\n});\n\nexport const sendServiceInput = async (\n  platform: Pick<ChannelPlatformIface, 'channelSessions'>,\n  args: ServiceInputArgsIface,\n): Promise<ChannelInputReceiptIface> => {\n  if (platform.channelSessions == null)\n    throw new Error('channel session operations are unavailable');\n  return platform.channelSessions.send(\n    { conversationId: args.room, participantId: args.participantId },\n    {\n      content: args.content,\n      idempotencyKey: args.idempotencyKey,\n      auth: serviceAuthOf(args),\n      actingUserId: args.actingUserId,\n      originTurnId: args.originTurnId,\n      source: { label: args.label },\n      context: args.context,\n      turnPolicy: args.turnPolicy,\n    },\n  );\n};\n"],
+  "mappings": "AACA;AAAA,EACE;AAAA,OAMK;AAkCA,MAAM,gBAAgB,CAAC,UAAmD;AAAA,EAC/E,aAAa,KAAK,UAAU;AAAA,EAC5B,eAAe,KAAK,UAAU,iBAAiB,qBAAqB;AAAA,EACpE,eAAe,KAAK,UAAU;AAAA,EAC9B,aAAa,KAAK;AAAA,EAClB,YAAY,KAAK,UAAU,cAAc,CAAC;AAC5C;AAEO,MAAM,mBAAmB,OAC9B,UACA,SACsC;AACtC,MAAI,SAAS,mBAAmB;AAC9B,UAAM,IAAI,MAAM,4CAA4C;AAC9D,SAAO,SAAS,gBAAgB;AAAA,IAC9B,EAAE,gBAAgB,KAAK,MAAM,eAAe,KAAK,cAAc;AAAA,IAC/D;AAAA,MACE,SAAS,KAAK;AAAA,MACd,gBAAgB,KAAK;AAAA,MACrB,MAAM,cAAc,IAAI;AAAA,MACxB,cAAc,KAAK;AAAA,MACnB,cAAc,KAAK;AAAA,MACnB,QAAQ,EAAE,OAAO,KAAK,MAAM;AAAA,MAC5B,SAAS,KAAK;AAAA,MACd,YAAY,KAAK;AAAA,IACnB;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/sandboxes/computer.d.mts

@@ -29,6 +29,8 @@ export interface ComputerSandboxProviderConfigIface {
     buildPollMs?: number;
     shelveWaitMs?: number;
     shelvePollMs?: number;
+    runningWaitMs?: number;
+    runningPollMs?: number;
     log?: ComputerSandboxLogIface;
     randomUuid?: () => string;
     now?: () => number;

package/dist/modules/sandboxes/computer.mjs

@@ -11,6 +11,7 @@ import {
   PLATFORM_ENVIRONMENT_NAMES,
   platformProcessEnvironment,
   PortProtocol,
+  reportPlatformNetworkPolicy,
   SandboxCapability,
   sandboxSeedArtifact,
   sandboxSeedArtifactSchema,
@@ -134,12 +135,12 @@ const CAPTURE_SCRUBBED_PATHS = [
   "/home/user/.ssh"
 ];
 const BUILDER_IDLE_TIMEOUT_SECONDS = 2 * 60 * 60;
-const egressFor = (ctx, requested) => {
-  const policy = withPlatformEgressHosts(ctx, requested);
+const computerEgressOf = (policy) => {
   if (policy.mode === NetworkPolicy.AllowAll) return { egress: ComputerEgressPolicy.Internet };
   if (policy.mode === NetworkPolicy.DenyAll) return { egress: ComputerEgressPolicy.None };
   return { egress: ComputerEgressPolicy.Allowlist, allow: policy.allow ?? [] };
 };
+const egressFor = (ctx, requested) => computerEgressOf(withPlatformEgressHosts(ctx, requested));
 const LINEAGE_PREFIX = "lineage:";
 const portOf = (url) => {
   try {
@@ -157,6 +158,7 @@ const sandboxWorkspaceOf = {
   [ComputerWorkspacePolicy.Ephemeral]: SandboxWorkspace.Ephemeral
 };
 const isRunningState = (state) => state === ComputerState.Running || state === ComputerState.Paused || state === ComputerState.Resuming;
+const RUNNING_POLL_MAX_MS = 5e3;
 const createComputerSandboxProvider = (config) => {
   const log = config.log ?? (() => void 0);
   const randomUuid = config.randomUuid ?? (() => crypto.randomUUID());
@@ -164,6 +166,7 @@ const createComputerSandboxProvider = (config) => {
   const sleep = config.sleep ?? defaultSleep;
   const defaultImage = config.defaultImage ?? DEFAULT_COMPUTER_IMAGE;
   const credentials = createComputersApiCredentials(config.computersApi, now);
+  const runningWaitMs = config.runningWaitMs ?? 5 * 6e4;
   const clientFor = (organizationId) => createComputersApiClient({ config: config.computersApi, credentials, organizationId });
   const registerImage = (client, reference) => client.registerImage(
     config.registryCredentialId == null ? { reference } : { reference, registryCredentialId: config.registryCredentialId }
@@ -435,6 +438,29 @@ ${commandHelp}`}`,
       await sleep(config.buildPollMs ?? 5e3);
     }
   };
+  const awaitComputerRunning = async (client, computerId, timeoutMs) => {
+    const deadline = now() + timeoutMs;
+    let pollMs = config.runningPollMs ?? 250;
+    for (; ; ) {
+      const computer = await client.getComputer(computerId);
+      if (computer == null || computer.state === ComputerState.Deleted)
+        throw computerSandboxError("computer_gone", `computer ${computerId} is gone`);
+      if (computer.state === ComputerState.Error)
+        throw computerSandboxError(
+          "computer_gone",
+          `computer ${computer.name} is in the Error state`
+        );
+      if (computer.state === ComputerState.Running) return computer;
+      const left = deadline - now();
+      if (left <= 0)
+        throw computerSandboxError(
+          "computer_not_running",
+          `computer ${computer.name} was not running within ${Math.round(timeoutMs / 1e3)} s (it is ${ComputerState[computer.state]})`
+        );
+      await sleep(Math.min(pollMs, left));
+      pollMs = Math.min(pollMs * 2, RUNNING_POLL_MAX_MS);
+    }
+  };
   const awaitShelved = async (client, computerId) => {
     const deadline = now() + (config.shelveWaitMs ?? 5 * 6e4);
     for (; ; ) {
@@ -475,6 +501,7 @@ ${commandHelp}`}`,
     );
     ctx.log?.(`building computer base ${key} on ${builder.name}`);
     try {
+      await awaitComputerRunning(client, builder.id, runningWaitMs);
       const sandbox = setupSession({ client, info: builder, env: async () => ({}) }).sandbox;
       const prepared = await sandbox.run({
         command: "/bin/sh",
@@ -579,6 +606,11 @@ ${step.run}`,
         log
       });
     };
+    const awaitRunning = (ctx, rawState, options2) => awaitComputerRunning(
+      clientFor(ctx.session.organizationId),
+      computerStateSchema.pick({ computerId: true }).parse(rawState).computerId,
+      options2.timeoutMs
+    );
     return {
       processes: async (ctx, rawState, request) => {
         const state = computerStateSchema.parse(rawState);
@@ -677,10 +709,14 @@ ${step.run}`,
           base: { kind: "image", image: spec.image, imageVersionId }
         };
       },
+      awaitRunning: async (ctx, state, options2) => {
+        await awaitRunning(ctx, state, options2);
+      },
       start: async (ctx, openOptions, rawArtifact) => {
         const access = computerOpenOptionsSchema.parse(openOptions ?? {}).access;
         const spec = await resolve(ctx.guides);
-        const egress = egressFor(ctx, spec.parameters.networkPolicy);
+        const policy = withPlatformEgressHosts(ctx, spec.parameters.networkPolicy);
+        const egress = computerEgressOf(policy);
         const artifact = computerArtifactSchema.safeParse(rawArtifact);
         if (!artifact.success) {
           throw computerSandboxError(
@@ -736,8 +772,12 @@ ${step.run}`,
           const idempotencyKey = `agent-sandbox-${(await sha256Hex(`${ctx.session.bindingId}:${name}:${source.baseId ?? source.imageVersionId}`)).slice(0, 32)}`;
           info = await client.createComputer(body, idempotencyKey);
         }
-        log("computer_sandbox.started", { computerId: info.id, reused: existing != null });
+        const reused = existing != null && existing.id === info.id;
+        log("computer_sandbox.started", { computerId: info.id, reused });
         try {
+          info = await awaitRunning(ctx, { computerId: info.id }, { timeoutMs: runningWaitMs });
+          if (reused) await client.setNetworkPolicy(info.id, egress);
+          await reportPlatformNetworkPolicy(ctx, policy);
           const setup = setupSession({ client, info, env });
           await writePlatformFiles(ctx, setup.sandbox);
           await mountRepositories({
@@ -774,7 +814,7 @@ ${step.run}`,
             }
           };
         } catch (error) {
-          if (existing == null || existing.id !== info.id) {
+          if (!reused) {
             try {
               await client.action(info.id, "delete");
             } catch (cleanupError) {
@@ -796,6 +836,7 @@ ${step.run}`,
             "computer_not_running",
             "computer is not running for passive access"
           );
+        await awaitRunning(ctx, state, { timeoutMs: runningWaitMs });
         const spec = await resolve(ctx.guides);
         const env = platformProcessEnvironment(ctx, await loadVariables(ctx, spec));
         return (await buildHandle({ ctx, client, info, spec, access: state.access, env })).handle;
@@ -810,16 +851,20 @@ ${step.run}`,
         const rebooted = !isRunningState(info.state);
         if (info.state === ComputerState.Paused) await client.action(info.id, "resume");
         else if (rebooted) await client.action(info.id, "start");
+        const running = await awaitRunning(ctx, state, { timeoutMs: runningWaitMs });
         const spec = await resolve(ctx.guides);
         const env = platformProcessEnvironment(ctx, await loadVariables(ctx, spec));
-        const setup = setupSession({ client, info, env });
+        const policy = withPlatformEgressHosts(ctx, spec.parameters.networkPolicy);
+        await client.setNetworkPolicy(running.id, computerEgressOf(policy));
+        await reportPlatformNetworkPolicy(ctx, policy);
+        const setup = setupSession({ client, info: running, env });
         await writePlatformFiles(ctx, setup.sandbox);
         await installGuideCommands({ sandbox: setup.sandbox, template: spec.template });
         if (rebooted) await startServicesFor({ setup, spec, env });
         const { handle } = await buildHandle({
           ctx,
           client,
-          info,
+          info: running,
           spec,
           access: state.access,
           env