@opengeni/runtime 0.7.1 → 0.11.0

package/src/sandbox/index.ts

@@ -1,7 +1,7 @@
 // @opengeni/runtime/sandbox — the agent-loop-free sandbox leaf.
 //
 // This module is the load-bearing pre-req for the API-direct control plane
-// (docs/design/sandbox-surfacing). It exposes the sandbox client factory plus
+// (docs/connected-machines.md). It exposes the sandbox client factory plus
 // the resume / recovery-envelope helpers that the API needs to touch a box by
 // id (resume-by-id, file/exec/port ops) WITHOUT importing the @openai/agents
 // agent-loop graph.
@@ -125,6 +125,39 @@ export {
   type EnsureTerminalServerResult,
 } from "./terminal-server";
 
+// Host-owned rotating run credentials. Material lives outside the persisted
+// workspace/manifest and is activated atomically per session generation.
+export {
+  RunCredentialValidationError,
+  normalizeRunCredentialsResolution,
+  runCredentialRoot,
+  runCredentialPointerFile,
+  materializeRunCredentials,
+  clearRunCredentials,
+  clearRunCredentialsForAttempt,
+  withRunCredentialEnvironment,
+  withRunCredentialsSession,
+  withRunCredentialsClient,
+  type RunCredentialExpectedScope,
+  type NormalizedRunCredentialMaterial,
+  type RunCredentialCommandSession,
+  type RunCredentialCommandRunner,
+  type RunCredentialSessionReady,
+  type MaterializeRunCredentialsOptions,
+} from "./run-credentials";
+
+// Session-specific Toolspace token routing. The manifest retains one stable
+// legacy pointer for warm-box env parity; every session command selects its own
+// hashed token file off-manifest.
+export {
+  ToolspaceTokenPathError,
+  toolspaceTokenFileForSession,
+  toolspaceTokenFileFromEnvironment,
+  withToolspaceTokenEnvironment,
+  withToolspaceTokenSession,
+  withToolspaceTokenClient,
+} from "./toolspace-token";
+
 // The Channel-B pixel DATA PLANE (P4.2). Resolves the provider's scoped tunnel
 // for port 6080 (client → provider-tunnel direct), assembles the WS URL, and
 // mints the scoped stream token. Called API-direct on the resumed handle.
@@ -164,12 +197,13 @@ export {
 export {
   SandboxChannelAService,
   ChannelAValidationError,
+  ChannelAUnavailableError,
   ChannelAConflictError,
   ChannelANotFoundError,
   ChannelAUnsupportedError,
   stripExecBanner,
   parseExecBannerSessionId,
-  isWorkspaceEscapeError,
+  parseExecBannerExitCode,
   isExecSessionLostBanner,
   assertSafeRelPath,
   parsePorcelainV2,

package/src/sandbox/routing/routing-session.ts

@@ -1,6 +1,6 @@
 // `RoutingSandboxSession` — the per-session hot-swap routing proxy (M7).
 //
-// THE load-bearing SDK finding (dossier §10.3 / §20-M7): when a box is injected
+// THE load-bearing SDK finding: when a box is injected
 // NON-OWNED into a turn (`ownedSandbox.session`), the agent SDK's sandbox
 // capabilities bind to that ONE session OBJECT ONCE and call ITS methods
 // (`exec`/`execCommand`/`readFile`/`listDir`/`resolveExposedPort`/…) per tool
@@ -10,7 +10,7 @@
 // per-session active pointer `(active_sandbox_id, active_epoch)` and DISPATCHES
 // to the CURRENTLY-active backend session (Modal or selfhosted).
 //
-// The contract (dossier §10.3):
+// The contract:
 //   - ONE stable object implementing the `SandboxSessionLike` structural surface.
 //   - On EVERY op, re-read `(activeSandboxId, activeEpoch)` via `readPointer`.
 //   - Cache the resolved backend session keyed by `activeEpoch`; when the epoch
@@ -58,6 +58,7 @@ export interface RoutableBackendSession {
   exec?(args: unknown): Promise<unknown>;
   execCommand?(args: unknown): Promise<string>;
   writeStdin?(args: unknown): Promise<string>;
+  cancelExecCommand?(opId: string): Promise<boolean>;
   readFile?(args: unknown): Promise<string | Uint8Array>;
   writeFile?(args: unknown): Promise<unknown>;
   createEditor?(runAs?: string): unknown;
@@ -430,6 +431,13 @@ export class RoutingSandboxSession implements RoutableBackendSession {
     });
   }
 
+  async cancelExecCommand(opId: string): Promise<boolean> {
+    return await this.dispatch("cancelExecCommand", async (session) => {
+      if (!session.cancelExecCommand) return false;
+      return await session.cancelExecCommand(opId);
+    });
+  }
+
   async readFile(args: unknown): Promise<string | Uint8Array> {
     return this.dispatch("readFile", async (s) => {
       if (!s.readFile) {