@inkeep/agents-run-api 0.22.0 → 0.22.2

package/dist/index.js

@@ -1,8 +1,8 @@
-import { flushBatchProcessor } from './chunk-RZXPMRBA.js';
-import { getLogger } from './chunk-A2S7GSHL.js';
+import { flushBatchProcessor } from './chunk-TVLDBLRZ.js';
 import { getFormattedConversationHistory, createDefaultConversationHistoryConfig, saveA2AMessageResponse } from './chunk-T5AYIGCU.js';
 import { dbClient_default } from './chunk-IBMWBEXH.js';
 import { env } from './chunk-LHCIBW34.js';
+import { getLogger } from './chunk-A2S7GSHL.js';
 import { __publicField } from './chunk-PKBMQBKP.js';
 import { getTracer, HeadersScopeSchema, getRequestExecutionContext, createApiError, getAgentWithDefaultSubAgent, contextValidationMiddleware, getConversationId, getFullAgent, createOrGetConversation, getActiveAgentForConversation, setActiveAgentForConversation, getSubAgentById, handleContextResolution, createMessage, commonGetErrorResponses, loggerFactory, createDefaultCredentialStores, CredentialStoreRegistry, listTaskIdsByContextId, getTask, getLedgerArtifacts, upsertLedgerArtifact, createTask, updateTask, setSpanWithError, updateConversation, handleApiError, TaskState, setActiveAgentForThread, getConversation, getAgentById, getRelatedAgentsForAgent, getToolsForAgent, getDataComponentsForAgent, getArtifactComponentsForAgent, dbResultToMcpTool, validateAndGetApiKey, getProject, ContextResolver, CredentialStuffer, MCPServerType, getCredentialReference, McpClient, getFunctionToolsForSubAgent, getFunction, getContextConfigById, getFullAgentDefinition, TemplateEngine, agentHasArtifactComponents, MCPTransportType, SPAN_KEYS, getExternalAgent } from '@inkeep/agents-core';
 import { otel } from '@hono/otel';
@@ -1683,31 +1683,6 @@ var _ArtifactService = class _ArtifactService {
     }
     return value;
   }
-  /**
-   * Extract properties from data using prop selectors
-   */
-  extractProps(item, propSelectors) {
-    const extracted = {};
-    for (const [propName, selector] of Object.entries(propSelectors)) {
-      try {
-        const sanitizedSelector = this.sanitizeJMESPathSelector(selector);
-        const rawValue = sanitizedSelector ? jmespath.search(item, sanitizedSelector) : item[propName];
-        if (rawValue !== null && rawValue !== void 0) {
-          extracted[propName] = this.cleanEscapedContent(rawValue);
-        }
-      } catch (error) {
-        logger6.warn(
-          { propName, selector, error: error instanceof Error ? error.message : "Unknown error" },
-          "Failed to extract property"
-        );
-        const fallbackValue = item[propName];
-        if (fallbackValue !== null && fallbackValue !== void 0) {
-          extracted[propName] = this.cleanEscapedContent(fallbackValue);
-        }
-      }
-    }
-    return extracted;
-  }
   /**
    * Extract properties from data using schema-defined fields and custom selectors
    */
@@ -1838,7 +1813,7 @@ var _ArtifactParser = class _ArtifactParser {
     while ((match = _ArtifactParser.ATTR_REGEX.exec(attrString)) !== null) {
       const key = match[1] || match[3] || match[5];
       let value = match[2] || match[4] || match[6];
-      if (value && value.startsWith("{")) {
+      if (value?.startsWith("{")) {
         try {
           value = JSON.parse(value);
         } catch {
@@ -2105,9 +2080,7 @@ var _ArtifactParser = class _ArtifactParser {
     return await this.artifactService.getArtifactSummary(artifactId, toolCallId, artifactMap);
   }
 };
-__publicField(_ArtifactParser, "ARTIFACT_REGEX", /<artifact:ref\s+id=(['"])([^'"]*?)\1\s+tool=(['"])([^'"]*?)\3\s*\/>/gs);
 __publicField(_ArtifactParser, "ARTIFACT_CHECK_REGEX", /<artifact:ref\s+(?=.*id=['"][^'"]+['"])(?=.*tool=['"][^'"]+['"])[^>]*\/>/);
-__publicField(_ArtifactParser, "ARTIFACT_CREATE_REGEX", /<artifact:create\s+([^>]+?)(?:\s*\/)?>(?:(.*?)<\/artifact:create>)?/gs);
 __publicField(_ArtifactParser, "ATTR_REGEX", /(\w+)="([^"]*)"|(\w+)='([^']*)'|(\w+)=({[^}]+})/g);
 __publicField(_ArtifactParser, "ARTIFACT_PATTERNS", [
   "<a",
@@ -3578,7 +3551,7 @@ var _IncrementalStreamParser = class _IncrementalStreamParser {
         sharedArtifactService = agentSessionManager.getArtifactService(
           artifactParserOptions.streamRequestId
         );
-      } catch (error) {
+      } catch (_error) {
       }
     }
     this.artifactParser = new ArtifactParser(tenantId, {
@@ -3618,7 +3591,9 @@ var _IncrementalStreamParser = class _IncrementalStreamParser {
    */
   async processTextChunk(chunk) {
     if (this.lastChunkWasToolResult && this.buffer === "" && chunk) {
-      chunk = "\n\n" + chunk;
+      chunk = `
+
+${chunk}`;
       this.lastChunkWasToolResult = false;
     }
     this.buffer += chunk;
@@ -3649,7 +3624,7 @@ var _IncrementalStreamParser = class _IncrementalStreamParser {
             if (this.isComponentComplete(component)) {
               await this.streamComponent(component);
             }
-          } catch (e) {
+          } catch (_e) {
           }
         }
       }
@@ -3962,7 +3937,7 @@ var ResponseFormatter = class {
         sharedArtifactService = agentSessionManager.getArtifactService(
           artifactParserOptions.streamRequestId
         );
-      } catch (error) {
+      } catch (_error) {
       }
     }
     this.artifactParser = new ArtifactParser(tenantId, {
@@ -4172,7 +4147,7 @@ function jsonSchemaToZod(jsonSchema) {
       return z.unknown();
   }
 }
-var SchemaProcessor = class {
+var _SchemaProcessor = class _SchemaProcessor {
   /**
    * Transform complex schema types to strings for JMESPath compatibility
    */
@@ -4203,13 +4178,13 @@ var SchemaProcessor = class {
    * Validate if a selector looks like a valid JMESPath expression
    */
   static validateJMESPathSelector(selector) {
-    if (this.isLiteralValue(selector)) {
+    if (_SchemaProcessor.isLiteralValue(selector)) {
       return {
         isLiteral: true,
         isValidSelector: false
       };
     }
-    if (this.looksLikeJMESPath(selector)) {
+    if (_SchemaProcessor.looksLikeJMESPath(selector)) {
       return {
         isLiteral: false,
         isValidSelector: true
@@ -4245,7 +4220,7 @@ var SchemaProcessor = class {
    * Check if a selector appears to be a literal value rather than a JMESPath expression
    */
   static isLiteralValue(selector) {
-    if (this.looksLikeJMESPath(selector)) {
+    if (_SchemaProcessor.looksLikeJMESPath(selector)) {
       return false;
     }
     if (/^https?:\/\//.test(selector)) {
@@ -4267,18 +4242,21 @@ var SchemaProcessor = class {
    */
   static safeJMESPathSearch(data, selector, fallback = null) {
     try {
-      const validation = this.validateJMESPathSelector(selector);
+      const validation = _SchemaProcessor.validateJMESPathSelector(selector);
       if (validation.isLiteral) {
-        this.logger.debug({ selector }, "Selector appears to be literal value, returning as-is");
+        _SchemaProcessor.logger.debug(
+          { selector },
+          "Selector appears to be literal value, returning as-is"
+        );
         return selector;
       }
       if (!validation.isValidSelector) {
-        this.logger.warn({ selector }, "Selector does not appear to be valid JMESPath");
+        _SchemaProcessor.logger.warn({ selector }, "Selector does not appear to be valid JMESPath");
         return fallback;
       }
       return jmespath.search(data, selector) || fallback;
     } catch (error) {
-      this.logger.warn(
+      _SchemaProcessor.logger.warn(
         { selector, error: error instanceof Error ? error.message : String(error) },
         "JMESPath search failed"
       );
@@ -4300,7 +4278,7 @@ var SchemaProcessor = class {
     if (!schema.properties || typeof schema.properties !== "object") {
       errors.push("Schema must have properties object");
     }
-    const transformedSchema = this.transformSchemaForJMESPath(schema);
+    const transformedSchema = _SchemaProcessor.transformSchemaForJMESPath(schema);
     return {
       isValid: errors.length === 0,
       errors,
@@ -4310,8 +4288,8 @@ var SchemaProcessor = class {
   /**
    * Extract property value with proper type conversion and validation
    */
-  static extractPropertyValue(data, propName, selector, expectedType) {
-    const value = this.safeJMESPathSearch(data, selector);
+  static extractPropertyValue(data, _propName, selector, expectedType) {
+    const value = _SchemaProcessor.safeJMESPathSearch(data, selector);
     if (value === null || value === void 0) {
       return null;
     }
@@ -4319,9 +4297,10 @@ var SchemaProcessor = class {
       switch (expectedType) {
         case "string":
           return String(value);
-        case "number":
+        case "number": {
           const num = Number(value);
-          return isNaN(num) ? null : num;
+          return Number.isNaN(num) ? null : num;
+        }
         case "boolean":
           return Boolean(value);
         case "array":
@@ -4385,7 +4364,8 @@ var SchemaProcessor = class {
     return transformToSelectorSchema(schema);
   }
 };
-__publicField(SchemaProcessor, "logger", getLogger("SchemaProcessor"));
+__publicField(_SchemaProcessor, "logger", getLogger("SchemaProcessor"));
+var SchemaProcessor = _SchemaProcessor;
 
 // src/utils/artifact-component-schema.ts
 getLogger("ArtifactComponentSchema");
@@ -6474,7 +6454,7 @@ function hasToolCallWithPrefix(prefix) {
     return false;
   };
 }
-var logger16 = getLogger("Agent");
+var logger15 = getLogger("Agent");
 var CONSTANTS = {
   MAX_GENERATION_STEPS: 12,
   PHASE_1_TIMEOUT_MS: 27e4,
@@ -6780,14 +6760,14 @@ var Agent = class {
     for (const toolSet of tools) {
       for (const [toolName, originalTool] of Object.entries(toolSet)) {
         if (!isValidTool(originalTool)) {
-          logger16.error({ toolName }, "Invalid MCP tool structure - missing required properties");
+          logger15.error({ toolName }, "Invalid MCP tool structure - missing required properties");
           continue;
         }
         const sessionWrappedTool = tool({
           description: originalTool.description,
           inputSchema: originalTool.inputSchema,
           execute: async (args, { toolCallId }) => {
-            logger16.debug({ toolName, toolCallId }, "MCP Tool Called");
+            logger15.debug({ toolName, toolCallId }, "MCP Tool Called");
             try {
               const rawResult = await originalTool.execute(args, { toolCallId });
               const parsedResult = parseEmbeddedJson(rawResult);
@@ -6801,7 +6781,7 @@ var Agent = class {
               });
               return { result: enhancedResult, toolCallId };
             } catch (error) {
-              logger16.error({ toolName, toolCallId, error }, "MCP tool execution failed");
+              logger15.error({ toolName, toolCallId, error }, "MCP tool execution failed");
               throw error;
             }
           }
@@ -6902,7 +6882,7 @@ var Agent = class {
         headers: agentToolRelationHeaders
       };
     }
-    logger16.info(
+    logger15.info(
       {
         toolName: tool3.name,
         credentialReferenceId,
@@ -6927,7 +6907,7 @@ var Agent = class {
         this.mcpClientCache.set(cacheKey, client);
       } catch (error) {
         this.mcpConnectionLocks.delete(cacheKey);
-        logger16.error(
+        logger15.error(
           {
             toolName: tool3.name,
             subAgentId: this.config.id,
@@ -6991,7 +6971,7 @@ var Agent = class {
       await client.connect();
       return client;
     } catch (error) {
-      logger16.error(
+      logger15.error(
         {
           toolName: tool3.name,
           subAgentId: this.config.id,
@@ -7028,12 +7008,12 @@ var Agent = class {
       if (functionToolsData.length === 0) {
         return functionTools;
       }
-      const { LocalSandboxExecutor } = await import('./LocalSandboxExecutor-TSOIXW7O.js');
-      const sandboxExecutor = LocalSandboxExecutor.getInstance();
+      const { SandboxExecutorFactory } = await import('./SandboxExecutorFactory-FMNUKYDI.js');
+      const sandboxExecutor = SandboxExecutorFactory.getInstance();
       for (const functionToolDef of functionToolsData) {
         const functionId = functionToolDef.functionId;
         if (!functionId) {
-          logger16.warn(
+          logger15.warn(
             { functionToolId: functionToolDef.id },
             "Function tool missing functionId reference"
           );
@@ -7047,7 +7027,7 @@ var Agent = class {
           }
         });
         if (!functionData) {
-          logger16.warn(
+          logger15.warn(
             { functionId, functionToolId: functionToolDef.id },
             "Function not found in functions table"
           );
@@ -7058,16 +7038,13 @@ var Agent = class {
           description: functionToolDef.description || functionToolDef.name,
           inputSchema: zodSchema,
           execute: async (args, { toolCallId }) => {
-            logger16.debug(
+            logger15.debug(
               { toolName: functionToolDef.name, toolCallId, args },
               "Function Tool Called"
             );
             try {
-              const project = await getProject(dbClient_default)({
-                scopes: { tenantId: this.config.tenantId, projectId: this.config.projectId }
-              });
               const defaultSandboxConfig = {
-                provider: "local",
+                provider: "native",
                 runtime: "node22",
                 timeout: 3e4,
                 vcpus: 1
@@ -7077,7 +7054,7 @@ var Agent = class {
                 inputSchema: functionData.inputSchema || {},
                 executeCode: functionData.executeCode,
                 dependencies: functionData.dependencies || {},
-                sandboxConfig: project?.sandboxConfig || defaultSandboxConfig
+                sandboxConfig: this.config.sandboxConfig || defaultSandboxConfig
               });
               toolSessionManager.recordToolResult(sessionId || "", {
                 toolCallId,
@@ -7088,8 +7065,12 @@ var Agent = class {
               });
               return { result, toolCallId };
             } catch (error) {
-              logger16.error(
-                { toolName: functionToolDef.name, toolCallId, error },
+              logger15.error(
+                {
+                  toolName: functionToolDef.name,
+                  toolCallId,
+                  error: error instanceof Error ? error.message : String(error)
+                },
                 "Function tool execution failed"
               );
               throw error;
@@ -7104,7 +7085,7 @@ var Agent = class {
         );
       }
     } catch (error) {
-      logger16.error({ error }, "Failed to load function tools from database");
+      logger15.error({ error }, "Failed to load function tools from database");
     }
     return functionTools;
   }
@@ -7114,7 +7095,7 @@ var Agent = class {
   async getResolvedContext(conversationId, headers) {
     try {
       if (!this.config.contextConfigId) {
-        logger16.debug({ agentId: this.config.agentId }, "No context config found for agent");
+        logger15.debug({ agentId: this.config.agentId }, "No context config found for agent");
         return null;
       }
       const contextConfig = await getContextConfigById(dbClient_default)({
@@ -7126,7 +7107,7 @@ var Agent = class {
         id: this.config.contextConfigId
       });
       if (!contextConfig) {
-        logger16.warn({ contextConfigId: this.config.contextConfigId }, "Context config not found");
+        logger15.warn({ contextConfigId: this.config.contextConfigId }, "Context config not found");
         return null;
       }
       if (!this.contextResolver) {
@@ -7143,7 +7124,7 @@ var Agent = class {
         $now: (/* @__PURE__ */ new Date()).toISOString(),
         $env: process.env
       };
-      logger16.debug(
+      logger15.debug(
         {
           conversationId,
           contextConfigId: contextConfig.id,
@@ -7157,7 +7138,7 @@ var Agent = class {
       );
       return contextWithBuiltins;
     } catch (error) {
-      logger16.error(
+      logger15.error(
         {
           conversationId,
           error: error instanceof Error ? error.message : "Unknown error"
@@ -7181,7 +7162,7 @@ var Agent = class {
       });
       return agentDefinition?.prompt || void 0;
     } catch (error) {
-      logger16.warn(
+      logger15.warn(
         {
           agentId: this.config.agentId,
           error: error instanceof Error ? error.message : "Unknown error"
@@ -7210,7 +7191,7 @@ var Agent = class {
         (subAgent) => "artifactComponents" in subAgent && subAgent.artifactComponents && subAgent.artifactComponents.length > 0
       );
     } catch (error) {
-      logger16.warn(
+      logger15.warn(
         {
           agentId: this.config.agentId,
           tenantId: this.config.tenantId,
@@ -7239,7 +7220,7 @@ var Agent = class {
           preserveUnresolved: false
         });
       } catch (error) {
-        logger16.error(
+        logger15.error(
           {
             conversationId,
             error: error instanceof Error ? error.message : "Unknown error"
@@ -7286,7 +7267,7 @@ var Agent = class {
           preserveUnresolved: false
         });
       } catch (error) {
-        logger16.error(
+        logger15.error(
           {
             conversationId,
             error: error instanceof Error ? error.message : "Unknown error"
@@ -7301,7 +7282,7 @@ var Agent = class {
     const functionTools = await this.getFunctionTools(streamRequestId || "");
     const relationTools = this.getRelationTools(runtimeContext);
     const allTools = { ...mcpTools, ...functionTools, ...relationTools };
-    logger16.info(
+    logger15.info(
       {
         mcpTools: Object.keys(mcpTools),
         functionTools: Object.keys(functionTools),
@@ -7340,7 +7321,7 @@ var Agent = class {
           preserveUnresolved: false
         });
       } catch (error) {
-        logger16.error(
+        logger15.error(
           {
             conversationId,
             error: error instanceof Error ? error.message : "Unknown error"
@@ -7373,7 +7354,7 @@ var Agent = class {
         toolCallId: z.string().describe("The tool call ID associated with this artifact.")
       }),
       execute: async ({ artifactId, toolCallId }) => {
-        logger16.info({ artifactId, toolCallId }, "get_artifact_full executed");
+        logger15.info({ artifactId, toolCallId }, "get_artifact_full executed");
         const streamRequestId = this.getStreamRequestId();
         const artifactService = agentSessionManager.getArtifactService(streamRequestId);
         if (!artifactService) {
@@ -7444,7 +7425,7 @@ var Agent = class {
     if (typeof result === "string") {
       try {
         parsedForAnalysis = parseEmbeddedJson(result);
-      } catch (error) {
+      } catch (_error) {
         parsedForAnalysis = result;
       }
     }
@@ -7633,7 +7614,7 @@ var Agent = class {
       };
       return enhanced;
     } catch (error) {
-      logger16.warn({ error }, "Failed to enhance tool result with structure hints");
+      logger15.warn({ error }, "Failed to enhance tool result with structure hints");
       return result;
     }
   }
@@ -7648,7 +7629,7 @@ var Agent = class {
         }
       });
     } catch (error) {
-      logger16.error(
+      logger15.error(
         { error, agentId: this.config.agentId },
         "Failed to check agent artifact components"
       );
@@ -7749,7 +7730,7 @@ var Agent = class {
         const configuredTimeout = modelSettings.maxDuration ? Math.min(modelSettings.maxDuration * 1e3, MAX_ALLOWED_TIMEOUT_MS) : shouldStreamPhase1 ? CONSTANTS.PHASE_1_TIMEOUT_MS : CONSTANTS.NON_STREAMING_PHASE_1_TIMEOUT_MS;
         const timeoutMs = Math.min(configuredTimeout, MAX_ALLOWED_TIMEOUT_MS);
         if (modelSettings.maxDuration && modelSettings.maxDuration * 1e3 > MAX_ALLOWED_TIMEOUT_MS) {
-          logger16.warn(
+          logger15.warn(
             {
               requestedTimeout: modelSettings.maxDuration * 1e3,
               appliedTimeout: timeoutMs,
@@ -7791,7 +7772,7 @@ var Agent = class {
                     }
                   );
                 } catch (error) {
-                  logger16.debug({ error }, "Failed to track agent reasoning");
+                  logger15.debug({ error }, "Failed to track agent reasoning");
                 }
               }
               if (steps.length >= 2) {
@@ -7913,7 +7894,7 @@ var Agent = class {
                     }
                   );
                 } catch (error) {
-                  logger16.debug({ error }, "Failed to track agent reasoning");
+                  logger15.debug({ error }, "Failed to track agent reasoning");
                 }
               }
               if (steps.length >= 2) {
@@ -8211,7 +8192,7 @@ ${output}${structureHintsFormatted}`;
 };
 
 // src/agents/generateTaskHandler.ts
-var logger17 = getLogger("generateTaskHandler");
+var logger16 = getLogger("generateTaskHandler");
 var createTaskHandler = (config, credentialStoreRegistry) => {
   return async (task) => {
     try {
@@ -8264,7 +8245,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
           }
         })
       ]);
-      logger17.info({ toolsForAgent, internalRelations, externalRelations }, "agent stuff");
+      logger16.info({ toolsForAgent, internalRelations, externalRelations }, "agent stuff");
       const enhancedInternalRelations = await Promise.all(
         internalRelations.map(async (relation) => {
           try {
@@ -8293,7 +8274,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
               return { ...relation, description: enhancedDescription };
             }
           } catch (error) {
-            logger17.warn({ subAgentId: relation.id, error }, "Failed to enhance agent description");
+            logger16.warn({ subAgentId: relation.id, error }, "Failed to enhance agent description");
           }
           return relation;
         })
@@ -8382,7 +8363,8 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
           dataComponents,
           artifactComponents,
           contextConfigId: config.contextConfigId || void 0,
-          conversationHistoryConfig: config.conversationHistoryConfig
+          conversationHistoryConfig: config.conversationHistoryConfig,
+          sandboxConfig: config.sandboxConfig
         },
         credentialStoreRegistry
       );
@@ -8395,7 +8377,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
         const taskIdMatch = task.id.match(/^task_([^-]+-[^-]+-\d+)-/);
         if (taskIdMatch) {
           contextId = taskIdMatch[1];
-          logger17.info(
+          logger16.info(
             {
               taskId: task.id,
               extractedContextId: contextId,
@@ -8411,7 +8393,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
       const isDelegation = task.context?.metadata?.isDelegation === true;
       agent.setDelegationStatus(isDelegation);
       if (isDelegation) {
-        logger17.info(
+        logger16.info(
           { subAgentId: config.subAgentId, taskId: task.id },
           "Delegated agent - streaming disabled"
         );
@@ -8448,7 +8430,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
             const toolResult = allToolResults.find(
               (result) => result.toolCallId === toolCall.toolCallId
             );
-            logger17.info(
+            logger16.info(
               {
                 toolCallName: toolCall.toolName,
                 toolCallId: toolCall.toolCallId,
@@ -8465,7 +8447,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
             const transferReason = responseText || allThoughts[allThoughts.length - 1]?.text || "Agent requested transfer. No reason provided.";
             if (toolResult?.output && isValidTransferResult(toolResult.output)) {
               const transferResult = toolResult.output;
-              logger17.info(
+              logger16.info(
                 {
                   validationPassed: true,
                   transferResult,
@@ -8482,7 +8464,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
                 reason: transferReason,
                 original_message: userMessage
               };
-              logger17.info(
+              logger16.info(
                 {
                   artifactData,
                   artifactDataKeys: Object.keys(artifactData)
@@ -8507,7 +8489,7 @@ var createTaskHandler = (config, credentialStoreRegistry) => {
                 ]
               };
             } else {
-              logger17.warn(
+              logger16.warn(
                 {
                   hasToolResult: !!toolResult,
                   hasOutput: !!toolResult?.output,
@@ -8588,7 +8570,8 @@ var createTaskHandlerConfig = async (params) => {
     name: subAgent.name,
     description: subAgent.description,
     conversationHistoryConfig: effectiveConversationHistoryConfig,
-    contextConfigId: agent?.contextConfigId || void 0
+    contextConfigId: agent?.contextConfigId || void 0,
+    sandboxConfig: params.sandboxConfig
   };
 };
 
@@ -8663,7 +8646,8 @@ async function hydrateAgent({
   agentId,
   baseUrl,
   apiKey,
-  credentialStoreRegistry
+  credentialStoreRegistry,
+  sandboxConfig
 }) {
   try {
     const taskHandlerConfig = await createTaskHandlerConfig({
@@ -8672,7 +8656,8 @@ async function hydrateAgent({
       agentId,
       subAgentId: dbAgent.id,
       baseUrl,
-      apiKey
+      apiKey,
+      sandboxConfig
     });
     const taskHandler = createTaskHandler(taskHandlerConfig, credentialStoreRegistry);
     const agentCard = createAgentCard({
@@ -8692,7 +8677,8 @@ async function hydrateAgent({
     throw error;
   }
 }
-async function getRegisteredAgent(executionContext, credentialStoreRegistry) {
+async function getRegisteredAgent(params) {
+  const { executionContext, credentialStoreRegistry, sandboxConfig } = params;
   const { tenantId, projectId, agentId, subAgentId, baseUrl, apiKey } = executionContext;
   if (!subAgentId) {
     throw new Error("Agent ID is required");
@@ -8710,13 +8696,14 @@ async function getRegisteredAgent(executionContext, credentialStoreRegistry) {
     agentId,
     baseUrl: agentFrameworkBaseUrl,
     credentialStoreRegistry,
-    apiKey
+    apiKey,
+    sandboxConfig
   });
 }
 
 // src/routes/agents.ts
 var app = new OpenAPIHono();
-var logger18 = getLogger("agents");
+var logger17 = getLogger("agents");
 app.openapi(
   createRoute({
     method: "get",
@@ -8754,7 +8741,7 @@ app.openapi(
       tracestate: c.req.header("tracestate"),
       baggage: c.req.header("baggage")
     };
-    logger18.info(
+    logger17.info(
       {
         otelHeaders,
         path: c.req.path,
@@ -8766,7 +8753,7 @@ app.openapi(
     const { tenantId, projectId, agentId, subAgentId } = executionContext;
     console.dir("executionContext", executionContext);
     if (subAgentId) {
-      logger18.info(
+      logger17.info(
         {
           message: "getRegisteredAgent (agent-level)",
           tenantId,
@@ -8777,8 +8764,13 @@ app.openapi(
         "agent-level well-known agent.json"
       );
       const credentialStores = c.get("credentialStores");
-      const agent = await getRegisteredAgent(executionContext, credentialStores);
-      logger18.info({ agent }, "agent registered: well-known agent.json");
+      const sandboxConfig = c.get("sandboxConfig");
+      const agent = await getRegisteredAgent({
+        executionContext,
+        credentialStoreRegistry: credentialStores,
+        sandboxConfig
+      });
+      logger17.info({ agent }, "agent registered: well-known agent.json");
       if (!agent) {
         throw createApiError({
           code: "not_found",
@@ -8787,7 +8779,7 @@ app.openapi(
       }
       return c.json(agent.agentCard);
     } else {
-      logger18.info(
+      logger17.info(
         {
           message: "getRegisteredAgent (agent-level)",
           tenantId,
@@ -8796,7 +8788,11 @@ app.openapi(
         },
         "agent-level well-known agent.json"
       );
-      const agent = await getRegisteredAgent(executionContext);
+      const sandboxConfig = c.get("sandboxConfig");
+      const agent = await getRegisteredAgent({
+        executionContext,
+        sandboxConfig
+      });
       if (!agent) {
         throw createApiError({
           code: "not_found",
@@ -8813,7 +8809,7 @@ app.post("/a2a", async (c) => {
     tracestate: c.req.header("tracestate"),
     baggage: c.req.header("baggage")
   };
-  logger18.info(
+  logger17.info(
     {
       otelHeaders,
       path: c.req.path,
@@ -8824,7 +8820,7 @@ app.post("/a2a", async (c) => {
   const executionContext = getRequestExecutionContext(c);
   const { tenantId, projectId, agentId, subAgentId } = executionContext;
   if (subAgentId) {
-    logger18.info(
+    logger17.info(
       {
         message: "a2a (agent-level)",
         tenantId,
@@ -8835,7 +8831,12 @@ app.post("/a2a", async (c) => {
       "agent-level a2a endpoint"
     );
     const credentialStores = c.get("credentialStores");
-    const agent = await getRegisteredAgent(executionContext, credentialStores);
+    const sandboxConfig = c.get("sandboxConfig");
+    const agent = await getRegisteredAgent({
+      executionContext,
+      credentialStoreRegistry: credentialStores,
+      sandboxConfig
+    });
     if (!agent) {
       return c.json(
         {
@@ -8848,7 +8849,7 @@ app.post("/a2a", async (c) => {
     }
     return a2aHandler(c, agent);
   } else {
-    logger18.info(
+    logger17.info(
       {
         message: "a2a (agent-level)",
         tenantId,
@@ -8882,7 +8883,12 @@ app.post("/a2a", async (c) => {
     }
     executionContext.subAgentId = agent.defaultSubAgentId;
     const credentialStores = c.get("credentialStores");
-    const defaultSubAgent = await getRegisteredAgent(executionContext, credentialStores);
+    const sandboxConfig = c.get("sandboxConfig");
+    const defaultSubAgent = await getRegisteredAgent({
+      executionContext,
+      credentialStoreRegistry: credentialStores,
+      sandboxConfig
+    });
     if (!defaultSubAgent) {
       return c.json(
         {
@@ -8946,28 +8952,37 @@ function extractTransferData(task) {
 }
 
 // src/a2a/transfer.ts
-var logger19 = getLogger("Transfer");
+var logger18 = getLogger("Transfer");
 async function executeTransfer({
   tenantId,
   threadId,
   projectId,
   targetSubAgentId
 }) {
-  logger19.info({
-    targetAgent: targetSubAgentId,
-    threadId,
-    tenantId,
-    projectId
-  }, "Executing transfer - calling setActiveAgentForThread");
+  logger18.info(
+    {
+      targetAgent: targetSubAgentId,
+      threadId,
+      tenantId,
+      projectId
+    },
+    "Executing transfer - calling setActiveAgentForThread"
+  );
   try {
     await setActiveAgentForThread(dbClient_default)({
       scopes: { tenantId, projectId },
       threadId,
       subAgentId: targetSubAgentId
     });
-    logger19.info({ targetAgent: targetSubAgentId, threadId }, "Successfully updated active_sub_agent_id in database");
+    logger18.info(
+      { targetAgent: targetSubAgentId, threadId },
+      "Successfully updated active_sub_agent_id in database"
+    );
   } catch (error) {
-    logger19.error({ error, targetAgent: targetSubAgentId, threadId }, "Failed to update active_sub_agent_id");
+    logger18.error(
+      { error, targetAgent: targetSubAgentId, threadId },
+      "Failed to update active_sub_agent_id"
+    );
     throw error;
   }
   return { success: true, targetSubAgentId };
@@ -9379,7 +9394,7 @@ var _VercelDataStreamHelper = class _VercelDataStreamHelper {
           timestamp: Date.now()
         });
       }
-    } catch (e) {
+    } catch (_e) {
     }
   }
   /**
@@ -9535,7 +9550,7 @@ function createMCPStreamHelper() {
 }
 
 // src/handlers/executionHandler.ts
-var logger20 = getLogger("ExecutionHandler");
+var logger19 = getLogger("ExecutionHandler");
 var ExecutionHandler = class {
   constructor() {
     __publicField(this, "MAX_ERRORS", 3);
@@ -9570,7 +9585,7 @@ var ExecutionHandler = class {
     if (emitOperations) {
       agentSessionManager.enableEmitOperations(requestId2);
     }
-    logger20.info(
+    logger19.info(
       { sessionId: requestId2, agentId, conversationId, emitOperations },
       "Created AgentSession for message execution"
     );
@@ -9587,7 +9602,7 @@ var ExecutionHandler = class {
         );
       }
     } catch (error) {
-      logger20.error(
+      logger19.error(
         {
           error: error instanceof Error ? error.message : "Unknown error",
           stack: error instanceof Error ? error.stack : void 0
@@ -9603,7 +9618,7 @@ var ExecutionHandler = class {
     try {
       await sseHelper.writeOperation(agentInitializingOp(requestId2, agentId));
       const taskId = `task_${conversationId}-${requestId2}`;
-      logger20.info(
+      logger19.info(
         { taskId, currentAgentId, conversationId, requestId: requestId2 },
         "Attempting to create or reuse existing task"
       );
@@ -9627,7 +9642,7 @@ var ExecutionHandler = class {
             sub_agent_id: currentAgentId
           }
         });
-        logger20.info(
+        logger19.info(
           {
             taskId,
             createdTaskMetadata: Array.isArray(task) ? task[0]?.metadata : task?.metadata
@@ -9636,27 +9651,27 @@ var ExecutionHandler = class {
         );
       } catch (error) {
         if (error?.message?.includes("UNIQUE constraint failed") || error?.message?.includes("PRIMARY KEY constraint failed") || error?.code === "SQLITE_CONSTRAINT_PRIMARYKEY") {
-          logger20.info(
+          logger19.info(
             { taskId, error: error.message },
             "Task already exists, fetching existing task"
           );
           const existingTask = await getTask(dbClient_default)({ id: taskId });
           if (existingTask) {
             task = existingTask;
-            logger20.info(
+            logger19.info(
               { taskId, existingTask },
               "Successfully reused existing task from race condition"
             );
           } else {
-            logger20.error({ taskId, error }, "Task constraint failed but task not found");
+            logger19.error({ taskId, error }, "Task constraint failed but task not found");
             throw error;
           }
         } else {
-          logger20.error({ taskId, error }, "Failed to create task due to non-constraint error");
+          logger19.error({ taskId, error }, "Failed to create task due to non-constraint error");
           throw error;
         }
       }
-      logger20.debug(
+      logger19.debug(
         {
           timestamp: (/* @__PURE__ */ new Date()).toISOString(),
           executionType: "create_initial_task",
@@ -9675,7 +9690,7 @@ var ExecutionHandler = class {
       const maxTransfers = agentConfig?.stopWhen?.transferCountIs ?? 10;
       while (iterations < maxTransfers) {
         iterations++;
-        logger20.info(
+        logger19.info(
           { iterations, currentAgentId, agentId, conversationId, fromSubAgentId },
           `Execution loop iteration ${iterations} with agent ${currentAgentId}, transfer from: ${fromSubAgentId || "none"}`
         );
@@ -9683,10 +9698,10 @@ var ExecutionHandler = class {
           scopes: { tenantId, projectId },
           conversationId
         });
-        logger20.info({ activeAgent }, "activeAgent");
+        logger19.info({ activeAgent }, "activeAgent");
         if (activeAgent && activeAgent.activeSubAgentId !== currentAgentId) {
           currentAgentId = activeAgent.activeSubAgentId;
-          logger20.info({ currentAgentId }, `Updated current agent to: ${currentAgentId}`);
+          logger19.info({ currentAgentId }, `Updated current agent to: ${currentAgentId}`);
         }
         const agentBaseUrl = `${baseUrl}/agents`;
         const a2aClient = new A2AClient(agentBaseUrl, {
@@ -9727,13 +9742,13 @@ var ExecutionHandler = class {
         });
         if (!messageResponse?.result) {
           errorCount++;
-          logger20.error(
+          logger19.error(
             { currentAgentId, iterations, errorCount },
             `No response from agent ${currentAgentId} on iteration ${iterations} (error ${errorCount}/${this.MAX_ERRORS})`
           );
           if (errorCount >= this.MAX_ERRORS) {
             const errorMessage2 = `Maximum error limit (${this.MAX_ERRORS}) reached`;
-            logger20.error({ maxErrors: this.MAX_ERRORS, errorCount }, errorMessage2);
+            logger19.error({ maxErrors: this.MAX_ERRORS, errorCount }, errorMessage2);
             await sseHelper.writeOperation(errorOp(errorMessage2, currentAgentId || "system"));
             if (task) {
               await updateTask(dbClient_default)({
@@ -9757,7 +9772,7 @@ var ExecutionHandler = class {
         if (isTransferTask(messageResponse.result)) {
           const transferData = extractTransferData(messageResponse.result);
           if (!transferData) {
-            logger20.error(
+            logger19.error(
               { result: messageResponse.result },
               "Transfer detected but no transfer data found"
             );
@@ -9766,10 +9781,7 @@ var ExecutionHandler = class {
           const { targetSubAgentId, fromSubAgentId: transferFromAgent } = transferData;
           const firstArtifact = messageResponse.result.artifacts[0];
           const transferReason = firstArtifact?.parts[1]?.kind === "text" ? firstArtifact.parts[1].text : "Transfer initiated";
-          logger20.info(
-            { targetSubAgentId, transferReason, transferFromAgent },
-            "Transfer response"
-          );
+          logger19.info({ targetSubAgentId, transferReason, transferFromAgent }, "Transfer response");
           currentMessage = `<transfer_context> ${transferReason} </transfer_context>`;
           const { success, targetSubAgentId: newAgentId } = await executeTransfer({
             projectId,
@@ -9780,7 +9792,7 @@ var ExecutionHandler = class {
           if (success) {
             fromSubAgentId = currentAgentId;
             currentAgentId = newAgentId;
-            logger20.info(
+            logger19.info(
               {
                 transferFrom: fromSubAgentId,
                 transferTo: currentAgentId,
@@ -9794,7 +9806,7 @@ var ExecutionHandler = class {
         let responseParts = [];
         if (messageResponse.result.streamedContent?.parts) {
           responseParts = messageResponse.result.streamedContent.parts;
-          logger20.info(
+          logger19.info(
             { partsCount: responseParts.length },
             "Using streamed content for conversation history"
           );
@@ -9802,7 +9814,7 @@ var ExecutionHandler = class {
           responseParts = messageResponse.result.artifacts?.flatMap(
             (artifact) => artifact.parts || []
           ) || [];
-          logger20.info(
+          logger19.info(
             { partsCount: responseParts.length },
             "Using artifacts for conversation history (fallback)"
           );
@@ -9811,7 +9823,7 @@ var ExecutionHandler = class {
           const agentSessionData = agentSessionManager.getSession(requestId2);
           if (agentSessionData) {
             const sessionSummary = agentSessionData.getSummary();
-            logger20.info(sessionSummary, "AgentSession data after completion");
+            logger19.info(sessionSummary, "AgentSession data after completion");
           }
           let textContent = "";
           for (const part of responseParts) {
@@ -9864,22 +9876,22 @@ var ExecutionHandler = class {
                 }
               });
               const updateTaskEnd = Date.now();
-              logger20.info(
+              logger19.info(
                 { duration: updateTaskEnd - updateTaskStart },
                 "Completed updateTask operation"
               );
               await sseHelper.writeOperation(completionOp(currentAgentId, iterations));
               await sseHelper.complete();
-              logger20.info({}, "Ending AgentSession and cleaning up");
+              logger19.info({}, "Ending AgentSession and cleaning up");
               agentSessionManager.endSession(requestId2);
-              logger20.info({}, "Cleaning up streamHelper");
+              logger19.info({}, "Cleaning up streamHelper");
               unregisterStreamHelper(requestId2);
               let response;
               if (sseHelper instanceof MCPStreamHelper) {
                 const captured = sseHelper.getCapturedResponse();
                 response = captured.text || "No response content";
               }
-              logger20.info({}, "ExecutionHandler returning success");
+              logger19.info({}, "ExecutionHandler returning success");
               return { success: true, iterations, response };
             } catch (error) {
               setSpanWithError(span, error instanceof Error ? error : new Error(String(error)));
@@ -9890,13 +9902,13 @@ var ExecutionHandler = class {
           });
         }
         errorCount++;
-        logger20.warn(
+        logger19.warn(
           { iterations, errorCount },
           `No valid response or transfer on iteration ${iterations} (error ${errorCount}/${this.MAX_ERRORS})`
         );
         if (errorCount >= this.MAX_ERRORS) {
           const errorMessage2 = `Maximum error limit (${this.MAX_ERRORS}) reached`;
-          logger20.error({ maxErrors: this.MAX_ERRORS, errorCount }, errorMessage2);
+          logger19.error({ maxErrors: this.MAX_ERRORS, errorCount }, errorMessage2);
           await sseHelper.writeOperation(errorOp(errorMessage2, currentAgentId || "system"));
           if (task) {
             await updateTask(dbClient_default)({
@@ -9917,7 +9929,7 @@ var ExecutionHandler = class {
         }
       }
       const errorMessage = `Maximum transfer limit (${maxTransfers}) reached without completion`;
-      logger20.error({ maxTransfers, iterations }, errorMessage);
+      logger19.error({ maxTransfers, iterations }, errorMessage);
       await sseHelper.writeOperation(errorOp(errorMessage, currentAgentId || "system"));
       if (task) {
         await updateTask(dbClient_default)({
@@ -9936,7 +9948,7 @@ var ExecutionHandler = class {
       unregisterStreamHelper(requestId2);
       return { success: false, error: errorMessage, iterations };
     } catch (error) {
-      logger20.error({ error }, "Error in execution handler");
+      logger19.error({ error }, "Error in execution handler");
       const errorMessage = error instanceof Error ? error.message : "Unknown execution error";
       await sseHelper.writeOperation(
         errorOp(`Execution error: ${errorMessage}`, currentAgentId || "system")
@@ -9963,7 +9975,7 @@ var ExecutionHandler = class {
 
 // src/routes/chat.ts
 var app2 = new OpenAPIHono();
-var logger21 = getLogger("completionsHandler");
+var logger20 = getLogger("completionsHandler");
 var chatCompletionsRoute = createRoute({
   method: "post",
   path: "/completions",
@@ -10081,7 +10093,7 @@ app2.openapi(chatCompletionsRoute, async (c) => {
     tracestate: c.req.header("tracestate"),
     baggage: c.req.header("baggage")
   };
-  logger21.info(
+  logger20.info(
     {
       otelHeaders,
       path: c.req.path,
@@ -10190,7 +10202,7 @@ app2.openapi(chatCompletionsRoute, async (c) => {
         dbClient: dbClient_default,
         credentialStores
       });
-      logger21.info(
+      logger20.info(
         {
           tenantId,
           projectId,
@@ -10238,7 +10250,7 @@ app2.openapi(chatCompletionsRoute, async (c) => {
         try {
           const sseHelper = createSSEStreamHelper(stream2, requestId2, timestamp);
           await sseHelper.writeRole();
-          logger21.info({ subAgentId }, "Starting execution");
+          logger20.info({ subAgentId }, "Starting execution");
           const emitOperationsHeader = c.req.header("x-emit-operations");
           const emitOperations = emitOperationsHeader === "true";
           const executionHandler = new ExecutionHandler();
@@ -10251,7 +10263,7 @@ app2.openapi(chatCompletionsRoute, async (c) => {
             sseHelper,
             emitOperations
           });
-          logger21.info(
+          logger20.info(
             { result },
             `Execution completed: ${result.success ? "success" : "failed"} after ${result.iterations} iterations`
           );
@@ -10265,7 +10277,7 @@ app2.openapi(chatCompletionsRoute, async (c) => {
           }
           await sseHelper.complete();
         } catch (error) {
-          logger21.error(
+          logger20.error(
             {
               error: error instanceof Error ? error.message : error,
               stack: error instanceof Error ? error.stack : void 0
@@ -10282,13 +10294,13 @@ app2.openapi(chatCompletionsRoute, async (c) => {
             );
             await sseHelper.complete();
           } catch (streamError) {
-            logger21.error({ streamError }, "Failed to write error to stream");
+            logger20.error({ streamError }, "Failed to write error to stream");
           }
         }
       });
     });
   } catch (error) {
-    logger21.error(
+    logger20.error(
       {
         error: error instanceof Error ? error.message : error,
         stack: error instanceof Error ? error.stack : void 0
@@ -10312,7 +10324,7 @@ var getMessageText = (content) => {
 };
 var chat_default = app2;
 var app3 = new OpenAPIHono();
-var logger22 = getLogger("chatDataStream");
+var logger21 = getLogger("chatDataStream");
 var chatDataStreamRoute = createRoute({
   method: "post",
   path: "/chat",
@@ -10436,7 +10448,7 @@ app3.openapi(chatDataStreamRoute, async (c) => {
       });
       const lastUserMessage = body.messages.filter((m) => m.role === "user").slice(-1)[0];
       const userText = typeof lastUserMessage?.content === "string" ? lastUserMessage.content : lastUserMessage?.parts?.map((p) => p.text).join("") || "";
-      logger22.info({ userText, lastUserMessage }, "userText");
+      logger21.info({ userText, lastUserMessage }, "userText");
       const messageSpan = trace.getActiveSpan();
       if (messageSpan) {
         messageSpan.setAttributes({
@@ -10481,7 +10493,7 @@ app3.openapi(chatDataStreamRoute, async (c) => {
               await streamHelper.writeOperation(errorOp("Unable to process request", "system"));
             }
           } catch (err) {
-            logger22.error({ err }, "Streaming error");
+            logger21.error({ err }, "Streaming error");
             await streamHelper.writeOperation(errorOp("Internal server error", "system"));
           } finally {
             if ("cleanup" in streamHelper && typeof streamHelper.cleanup === "function") {
@@ -10503,7 +10515,7 @@ app3.openapi(chatDataStreamRoute, async (c) => {
       );
     });
   } catch (error) {
-    logger22.error({ error }, "chatDataStream error");
+    logger21.error({ error }, "chatDataStream error");
     throw createApiError({
       code: "internal_server_error",
       message: "Failed to process chat completion"
@@ -10514,7 +10526,7 @@ var chatDataStream_default = app3;
 function createMCPSchema(schema) {
   return schema;
 }
-var logger23 = getLogger("mcp");
+var logger22 = getLogger("mcp");
 var _MockResponseSingleton = class _MockResponseSingleton {
   constructor() {
     __publicField(this, "mockRes");
@@ -10569,21 +10581,21 @@ var createSpoofInitMessage = (mcpProtocolVersion) => ({
   id: 0
 });
 var spoofTransportInitialization = async (transport, req, sessionId, mcpProtocolVersion) => {
-  logger23.info({ sessionId }, "Spoofing initialization message to set transport state");
+  logger22.info({ sessionId }, "Spoofing initialization message to set transport state");
   const spoofInitMessage = createSpoofInitMessage(mcpProtocolVersion);
   const mockRes = MockResponseSingleton.getInstance().getMockResponse();
   try {
     await transport.handleRequest(req, mockRes, spoofInitMessage);
-    logger23.info({ sessionId }, "Successfully spoofed initialization");
+    logger22.info({ sessionId }, "Successfully spoofed initialization");
   } catch (spoofError) {
-    logger23.warn({ sessionId, error: spoofError }, "Spoof initialization failed, continuing anyway");
+    logger22.warn({ sessionId, error: spoofError }, "Spoof initialization failed, continuing anyway");
   }
 };
 var validateSession = async (req, res, body, tenantId, projectId, agentId) => {
   const sessionId = req.headers["mcp-session-id"];
-  logger23.info({ sessionId }, "Received MCP session ID");
+  logger22.info({ sessionId }, "Received MCP session ID");
   if (!sessionId) {
-    logger23.info({ body }, "Missing session ID");
+    logger22.info({ body }, "Missing session ID");
     res.writeHead(400).end(
       JSON.stringify({
         jsonrpc: "2.0",
@@ -10609,7 +10621,7 @@ var validateSession = async (req, res, body, tenantId, projectId, agentId) => {
     scopes: { tenantId, projectId },
     conversationId: sessionId
   });
-  logger23.info(
+  logger22.info(
     {
       sessionId,
       conversationFound: !!conversation,
@@ -10620,7 +10632,7 @@ var validateSession = async (req, res, body, tenantId, projectId, agentId) => {
     "Conversation lookup result"
   );
   if (!conversation || conversation.metadata?.sessionData?.sessionType !== "mcp" || conversation.metadata?.sessionData?.agentId !== agentId) {
-    logger23.info(
+    logger22.info(
       { sessionId, conversationId: conversation?.id },
       "MCP session not found or invalid"
     );
@@ -10681,7 +10693,7 @@ var executeAgentQuery = async (executionContext, conversationId, query, defaultS
     requestId: requestId2,
     sseHelper: mcpStreamHelper
   });
-  logger23.info(
+  logger22.info(
     { result },
     `Execution completed: ${result.success ? "success" : "failed"} after ${result.iterations} iterations`
   );
@@ -10765,7 +10777,7 @@ var getServer = async (headers, executionContext, conversationId, credentialStor
           dbClient: dbClient_default,
           credentialStores
         });
-        logger23.info(
+        logger22.info(
           {
             tenantId,
             projectId,
@@ -10827,7 +10839,7 @@ var validateRequestParameters = (c) => {
 };
 var handleInitializationRequest = async (body, executionContext, validatedContext, req, res, c, credentialStores) => {
   const { tenantId, projectId, agentId } = executionContext;
-  logger23.info({ body }, "Received initialization request");
+  logger22.info({ body }, "Received initialization request");
   const sessionId = getConversationId();
   const activeSpan = trace.getActiveSpan();
   if (activeSpan) {
@@ -10883,7 +10895,7 @@ var handleInitializationRequest = async (body, executionContext, validatedContex
         }
       }
     });
-    logger23.info(
+    logger22.info(
       { sessionId, conversationId: conversation.id },
       "Created MCP session as conversation"
     );
@@ -10892,9 +10904,9 @@ var handleInitializationRequest = async (body, executionContext, validatedContex
     });
     const server = await getServer(validatedContext, executionContext, sessionId, credentialStores);
     await server.connect(transport);
-    logger23.info({ sessionId }, "Server connected for initialization");
+    logger22.info({ sessionId }, "Server connected for initialization");
     res.setHeader("Mcp-Session-Id", sessionId);
-    logger23.info(
+    logger22.info(
       {
         sessionId,
         bodyMethod: body?.method,
@@ -10903,7 +10915,7 @@ var handleInitializationRequest = async (body, executionContext, validatedContex
       "About to handle initialization request"
     );
     await transport.handleRequest(req, res, body);
-    logger23.info({ sessionId }, "Successfully handled initialization request");
+    logger22.info({ sessionId }, "Successfully handled initialization request");
     return toFetchResponse(res);
   });
 };
@@ -10930,8 +10942,8 @@ var handleExistingSessionRequest = async (body, executionContext, validatedConte
     sessionId,
     conversation.metadata?.session_data?.mcpProtocolVersion
   );
-  logger23.info({ sessionId }, "Server connected and transport initialized");
-  logger23.info(
+  logger22.info({ sessionId }, "Server connected and transport initialized");
+  logger22.info(
     {
       sessionId,
       bodyKeys: Object.keys(body || {}),
@@ -10945,9 +10957,9 @@ var handleExistingSessionRequest = async (body, executionContext, validatedConte
   );
   try {
     await transport.handleRequest(req, res, body);
-    logger23.info({ sessionId }, "Successfully handled MCP request");
+    logger22.info({ sessionId }, "Successfully handled MCP request");
   } catch (transportError) {
-    logger23.error(
+    logger22.error(
       {
         sessionId,
         error: transportError,
@@ -10998,13 +11010,13 @@ app4.openapi(
       }
       const { executionContext } = paramValidation;
       const body = c.get("requestBody") || {};
-      logger23.info({ body, bodyKeys: Object.keys(body || {}) }, "Parsed request body");
+      logger22.info({ body, bodyKeys: Object.keys(body || {}) }, "Parsed request body");
       const isInitRequest = body.method === "initialize";
       const { req, res } = toReqRes(c.req.raw);
       const validatedContext = c.get("validatedContext") || {};
       const credentialStores = c.get("credentialStores");
-      logger23.info({ validatedContext }, "Validated context");
-      logger23.info({ req }, "request");
+      logger22.info({ validatedContext }, "Validated context");
+      logger22.info({ req }, "request");
       if (isInitRequest) {
         return await handleInitializationRequest(
           body,
@@ -11026,7 +11038,7 @@ app4.openapi(
         );
       }
     } catch (e) {
-      logger23.error(
+      logger22.error(
         {
           error: e instanceof Error ? e.message : e,
           stack: e instanceof Error ? e.stack : void 0
@@ -11038,7 +11050,7 @@ app4.openapi(
   }
 );
 app4.get("/", async (c) => {
-  logger23.info({}, "Received GET MCP request");
+  logger22.info({}, "Received GET MCP request");
   return c.json(
     {
       jsonrpc: "2.0",
@@ -11052,7 +11064,7 @@ app4.get("/", async (c) => {
   );
 });
 app4.delete("/", async (c) => {
-  logger23.info({}, "Received DELETE MCP request");
+  logger22.info({}, "Received DELETE MCP request");
   return c.json(
     {
       jsonrpc: "2.0",
@@ -11065,14 +11077,17 @@ app4.delete("/", async (c) => {
 var mcp_default = app4;
 
 // src/app.ts
-var logger24 = getLogger("agents-run-api");
-function createExecutionHono(serverConfig, credentialStores) {
+var logger23 = getLogger("agents-run-api");
+function createExecutionHono(serverConfig, credentialStores, sandboxConfig) {
   const app6 = new OpenAPIHono();
   app6.use("*", otel());
   app6.use("*", requestId());
   app6.use("*", async (c, next) => {
     c.set("serverConfig", serverConfig);
     c.set("credentialStores", credentialStores);
+    if (sandboxConfig) {
+      c.set("sandboxConfig", sandboxConfig);
+    }
     return next();
   });
   app6.use("*", async (c, next) => {
@@ -11081,7 +11096,7 @@ function createExecutionHono(serverConfig, credentialStores) {
         const body = await c.req.json();
         c.set("requestBody", body);
       } catch (error) {
-        logger24.debug({ error }, "Failed to parse JSON body, continuing without parsed body");
+        logger23.debug({ error }, "Failed to parse JSON body, continuing without parsed body");
       }
     }
     return next();
@@ -11132,8 +11147,8 @@ function createExecutionHono(serverConfig, credentialStores) {
       if (!isExpectedError) {
         const errorMessage = err instanceof Error ? err.message : String(err);
         const errorStack = err instanceof Error ? err.stack : void 0;
-        if (logger24) {
-          logger24.error(
+        if (logger23) {
+          logger23.error(
             {
               error: err,
               message: errorMessage,
@@ -11145,8 +11160,8 @@ function createExecutionHono(serverConfig, credentialStores) {
           );
         }
       } else {
-        if (logger24) {
-          logger24.error(
+        if (logger23) {
+          logger23.error(
             {
               error: err,
               path: c.req.path,
@@ -11163,8 +11178,8 @@ function createExecutionHono(serverConfig, credentialStores) {
         const response = err.getResponse();
         return response;
       } catch (responseError) {
-        if (logger24) {
-          logger24.error({ error: responseError }, "Error while handling HTTPException response");
+        if (logger23) {
+          logger23.error({ error: responseError }, "Error while handling HTTPException response");
         }
       }
     }
@@ -11198,7 +11213,7 @@ function createExecutionHono(serverConfig, credentialStores) {
   app6.use("*", async (c, next) => {
     const executionContext = c.get("executionContext");
     if (!executionContext) {
-      logger24.debug({}, "Empty execution context");
+      logger23.debug({}, "Empty execution context");
       return next();
     }
     const { tenantId, projectId, agentId } = executionContext;
@@ -11207,7 +11222,7 @@ function createExecutionHono(serverConfig, credentialStores) {
     if (requestBody) {
       conversationId = requestBody.conversationId;
       if (!conversationId) {
-        logger24.debug({ requestBody }, "No conversation ID found in request body");
+        logger23.debug({ requestBody }, "No conversation ID found in request body");
       }
     }
     const entries = Object.fromEntries(
@@ -11222,7 +11237,7 @@ function createExecutionHono(serverConfig, credentialStores) {
       })
     );
     if (!Object.keys(entries).length) {
-      logger24.debug({}, "Empty entries for baggage");
+      logger23.debug({}, "Empty entries for baggage");
       return next();
     }
     const bag = Object.entries(entries).reduce(
@@ -11293,7 +11308,7 @@ function createExecutionApp(config) {
   const serverConfig = config?.serverConfig ?? defaultConfig;
   const stores = config?.credentialStores ?? defaultStores;
   const registry = new CredentialStoreRegistry(stores);
-  return createExecutionHono(serverConfig, registry);
+  return createExecutionHono(serverConfig, registry, config?.sandboxConfig);
 }
 
 export { createExecutionApp, createExecutionHono, index_default as default };