@tangle-network/agent-app 0.45.5 → 0.45.6

package/dist/sandbox/index.d.ts

@@ -262,25 +262,221 @@ declare function statSandboxFileSize(box: SandboxExecChannel, absolutePath: stri
 declare function readSandboxBinaryBytes(box: SandboxExecChannel, absolutePath: string, expectedSize: number, options?: SandboxExecOptions): Promise<SandboxFileBytesOutcome>;
 
 /**
- * Read a sandbox provisioning failure without leaking what it carries.
+ * What an app does after the platform hands back a sandbox it cannot use.
  *
- * Provisioning errors arrive as deep `cause` chains from the sandbox API, the
- * runtime sidecar, and the app's own vault code, and they routinely carry
- * bearer tokens and signed URLs in their messages. Every app on this shell
- * needs the same three things from one: a redacted shape it can log, a
- * classification it can act on, and a sentence it can show a person. Before
- * this module each app either wrote its own or — far more often — wrote none,
- * and surfaced the raw error or a generic apology.
+ * `replaceUnbringableBox` (see `./index`) decides whether to abandon a dead box.
+ * This decides everything around that: which box key the next attempt uses,
+ * whether the old box's snapshot is safe to restore from, whether an owner has
+ * to confirm the loss first, and what the person waiting is told. It is
+ * bookkeeping, not I/O — the app supplies storage through
+ * {@link WorkspaceSandboxRecoveryStore}.
  *
- * The classifiers are deliberately narrow. `isSandboxApiSandboxMissingFailure`
- * does not fire on a 404 from inside a live box; `isSandboxHostCapacityFailure`
- * does not fire on capacity wording from any origin but the sandbox API. A
- * classifier that over-matches turns a transient failure into a box deletion.
+ * ── Why the tables ──────────────────────────────────────────────────────────
+ * Every fact about an action or a code lives in ACTIONS/CODES below, and the
+ * types are DERIVED from those tables. That is deliberate, and it is the whole
+ * reliability argument for this module.
+ *
+ * The hand-maintained alternative — a union type plus a separate `x === 'a' ||
+ * x === 'b' || …` list per question — silently drops anything not on the list.
+ * A recovery recorded under an unlisted action is written to storage, read
+ * back, discarded as malformed, and the workspace re-provisions the box it just
+ * abandoned. Nothing throws. The fix looks correct, ships, and does nothing.
+ * That failure was hit twice inside one change before this module existed.
+ *
+ * With the tables, adding an action or code is a compile error until every
+ * question about it is answered. There is no list to forget.
  */
-/** Error code an app raises when a stopped box's egress proxy must be rebuilt
- *  before the box can be reused. Declared here so the classifier below stands
- *  alone; apps that model this failure re-export the same literal. */
+/** The box exists and still holds unsnapshotted state, so discarding it is an
+ *  owner's decision, not the runtime's. */
 declare const EGRESS_PROXY_RECOVERY_REQUIRED = "EGRESS_PROXY_RECOVERY_REQUIRED";
+declare const EGRESS_PROXY_RECOVERY_PHASE = "egress_proxy_recovery";
+/** The platform no longer has the box. Nothing to confirm, delete, or restore. */
+declare const WORKSPACE_SANDBOX_MISSING = "WORKSPACE_SANDBOX_MISSING";
+/** The box exists but its host has no free slot, so it can never be resumed
+ *  where it is. A replacement can be placed on a host with room. */
+declare const WORKSPACE_SANDBOX_HOST_EXHAUSTED = "WORKSPACE_SANDBOX_HOST_EXHAUSTED";
+/** The platform ran its own recovery, failed, and asked for a replacement.
+ *  Covers every way a box ends up unbringable with no more specific cause. */
+declare const WORKSPACE_SANDBOX_UNRECOVERABLE = "WORKSPACE_SANDBOX_UNRECOVERABLE";
+declare const WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS: number;
+/**
+ * Every recovery cause, and the one thing the runtime must know about each:
+ * whether the box it names can still be read from.
+ *
+ * `snapshotUsable: false` is not a preference. A snapshot is addressed by the
+ * sandbox it was taken from, so when that sandbox cannot be started the restore
+ * fails exactly the way the resume did — and an app that tried it would turn a
+ * recoverable workspace into a stuck one.
+ */
+declare const CODES: {
+    readonly EGRESS_PROXY_RECOVERY_REQUIRED: {
+        readonly snapshotUsable: true;
+    };
+    readonly WORKSPACE_SANDBOX_MISSING: {
+        readonly snapshotUsable: false;
+    };
+    readonly WORKSPACE_SANDBOX_HOST_EXHAUSTED: {
+        readonly snapshotUsable: false;
+    };
+    readonly WORKSPACE_SANDBOX_UNRECOVERABLE: {
+        readonly snapshotUsable: false;
+    };
+};
+type WorkspaceSandboxRecoveryCode = keyof typeof CODES;
+/**
+ * Every recovery action, and whether it means a replacement box has been
+ * CHOSEN — the single question that decides which box key the next provisioning
+ * attempt uses.
+ *
+ * `replacementChosen: false` covers the states where a key may be recorded but
+ * must not be used yet: an owner has been asked and has not answered, or has
+ * answered no. Handing back a key in those states replaces a box the owner
+ * declined to lose.
+ */
+declare const ACTIONS: {
+    readonly confirmation_required: {
+        readonly replacementChosen: false;
+    };
+    readonly deletion_declined: {
+        readonly replacementChosen: false;
+    };
+    readonly replacement_authorized: {
+        readonly replacementChosen: false;
+    };
+    readonly snapshot_replacement_authorized: {
+        readonly replacementChosen: false;
+    };
+    readonly replacement_started: {
+        readonly replacementChosen: true;
+    };
+    readonly replacement_completed: {
+        readonly replacementChosen: true;
+    };
+    readonly snapshot_replacement_started: {
+        readonly replacementChosen: true;
+    };
+    readonly snapshot_restore_failed: {
+        readonly replacementChosen: true;
+    };
+    readonly snapshot_replacement_completed: {
+        readonly replacementChosen: true;
+    };
+    readonly missing_replacement_started: {
+        readonly replacementChosen: true;
+    };
+    readonly missing_replacement_completed: {
+        readonly replacementChosen: true;
+    };
+    readonly unrecoverable_replacement_started: {
+        readonly replacementChosen: true;
+    };
+    readonly unrecoverable_replacement_completed: {
+        readonly replacementChosen: true;
+    };
+};
+type WorkspaceSandboxRecoveryAction = keyof typeof ACTIONS;
+type WorkspaceSandboxSnapshotAvailability = 'available' | 'missing' | 'stale';
+type WorkspaceSandboxSnapshotFreshness = 'fresh' | 'stale' | 'unknown';
+/** A snapshot the app took of a box, addressed by the box it came from. */
+interface WorkspaceSandboxSnapshot {
+    fromSandboxId: string;
+    createdAt: string;
+    [key: string]: unknown;
+}
+interface WorkspaceSandboxSnapshotAssessment {
+    availability: WorkspaceSandboxSnapshotAvailability;
+    freshness: WorkspaceSandboxSnapshotFreshness;
+    snapshot?: WorkspaceSandboxSnapshot;
+}
+interface WorkspaceSandboxRecoveryState {
+    code: WorkspaceSandboxRecoveryCode;
+    sandboxId: string;
+    detectedAt: string;
+    snapshot: WorkspaceSandboxSnapshotAssessment;
+    action: WorkspaceSandboxRecoveryAction;
+    replacementBoxKey?: string;
+    replacementSandboxId?: string;
+    confirmedAt?: string;
+}
+type WorkspaceSandboxRecoveryDecision = 'replace' | 'decline';
+/** Raised when chat cannot continue until an owner decides about the box. */
+declare class WorkspaceSandboxRecoveryRequiredError extends Error {
+    readonly code = "EGRESS_PROXY_RECOVERY_REQUIRED";
+    readonly status = 409;
+    readonly phase = "egress_proxy_recovery";
+    readonly recovery: WorkspaceSandboxRecoveryState;
+    constructor(recovery: WorkspaceSandboxRecoveryState, cause: Error);
+}
+declare function isEgressProxyRecoveryRequiredError(error: unknown): boolean;
+declare function isWorkspaceSandboxSnapshotRestoreError(error: unknown): boolean;
+/**
+ * Judge a snapshot against the box being replaced.
+ *
+ * Fresh means BOTH that it came from this exact sandbox and that it is inside
+ * the age bound — a snapshot from a different box restores someone else's
+ * filesystem, which is worse than starting empty.
+ */
+declare function assessWorkspaceSandboxSnapshot(snapshot: WorkspaceSandboxSnapshot | undefined, sandboxId: string, now?: number): WorkspaceSandboxSnapshotAssessment;
+declare function isWorkspaceSandboxRecoveryAction(value: unknown): value is WorkspaceSandboxRecoveryAction;
+declare function isWorkspaceSandboxRecoveryCode(value: unknown): value is WorkspaceSandboxRecoveryCode;
+declare function isWorkspaceSandboxRecoveryState(value: unknown): value is WorkspaceSandboxRecoveryState;
+declare function workspaceSandboxRecoveryFromError(error: unknown): WorkspaceSandboxRecoveryState | undefined;
+/** What to tell the person waiting. Never names the product, so an app can
+ *  surface it verbatim. */
+declare function workspaceSandboxRecoveryMessage(recovery: WorkspaceSandboxRecoveryState): string;
+declare function workspaceSandboxRecoveryRecommendedActions(recovery: WorkspaceSandboxRecoveryState): string[];
+/** Flat key/value shape for a log line — no nesting, no secrets. */
+declare function workspaceSandboxRecoveryDiagnostic(recovery: WorkspaceSandboxRecoveryState): Record<string, string | undefined>;
+/**
+ * The box key the next provisioning attempt should use, or undefined to keep
+ * using the workspace's own key.
+ *
+ * Reads {@link ACTIONS} rather than a hand-kept list, because the failure mode
+ * of a hand-kept list here is invisible: the key is recorded, silently ignored,
+ * and provisioning goes back to the box the app just decided to abandon.
+ */
+declare function preferredWorkspaceSandboxRecoveryBoxKey(recovery: WorkspaceSandboxRecoveryState | undefined): string | undefined;
+/** Whether the replacement should be restored from the old box's snapshot. */
+declare function shouldRestoreWorkspaceSandboxRecovery(recovery: WorkspaceSandboxRecoveryState | undefined): boolean;
+/**
+ * Where an app keeps recovery state. One row per workspace, last write wins —
+ * a recovery is a current situation, not a history.
+ */
+interface WorkspaceSandboxRecoveryStore {
+    read: (workspaceId: string) => Promise<WorkspaceSandboxRecoveryState | undefined>;
+    write: (workspaceId: string, recovery: WorkspaceSandboxRecoveryState) => Promise<void>;
+}
+interface WorkspaceSandboxRecoveryManager {
+    read: (workspaceId: string) => Promise<WorkspaceSandboxRecoveryState | undefined>;
+    record: (workspaceId: string, recovery: WorkspaceSandboxRecoveryState) => Promise<void>;
+    /** Record an owner's decision. Returns undefined when the stored recovery does
+     *  not name this sandbox — a decision about a box that has already been
+     *  replaced must not resurrect it. */
+    decide: (args: {
+        workspaceId: string;
+        sandboxId: string;
+        decision: WorkspaceSandboxRecoveryDecision;
+        replacementBoxKey?: string;
+    }) => Promise<WorkspaceSandboxRecoveryState | undefined>;
+    /** Mark a replacement finished and name the box that took over. */
+    complete: (args: {
+        workspaceId: string;
+        replacementSandboxId: string;
+    }) => Promise<WorkspaceSandboxRecoveryState | undefined>;
+}
+/**
+ * Bind the recovery bookkeeping to an app's storage.
+ *
+ * The app owns persistence — a D1 column, a KV key, a Postgres row — and
+ * nothing else. Every rule about which action means what stays here, so it
+ * cannot drift between apps.
+ */
+declare function createWorkspaceSandboxRecoveryManager(store: WorkspaceSandboxRecoveryStore): WorkspaceSandboxRecoveryManager;
+/** Every declared action, for exhaustiveness tests in apps and here. */
+declare const WORKSPACE_SANDBOX_RECOVERY_ACTIONS: readonly WorkspaceSandboxRecoveryAction[];
+/** Every declared cause. */
+declare const WORKSPACE_SANDBOX_RECOVERY_CODES: readonly WorkspaceSandboxRecoveryCode[];
+
 interface SafeSandboxErrorCause {
     name?: string;
     message?: string;
@@ -1363,4 +1559,4 @@ declare function isTerminalPromptEvent(event: unknown): boolean;
 /** Resolve the interactive question text from a structured event or return null if none found */
 declare function detectInteractiveQuestion(event: unknown): string | null;
 
-export { type AppToolDescriptor, type BuildAppToolMcpServersOptions, type BuildSandboxToolFileMountsOptions, type D1PrewarmClaimStoreOptions, DEFAULT_PREWARM_CLAIM_TABLE, DEFAULT_SANDBOX_RESOURCES, DEFAULT_SIDECAR_PROCESS_PATTERN, type DriveSandboxTurnOptions, EGRESS_PROXY_RECOVERY_REQUIRED, ENV_TOTAL_MAX_BYTES, ENV_VALUE_MAX_BYTES, type EnsureWorkspaceSandboxOptions, type LivenessProbeConfig, type MemberSyncSeam, type ModelSelection, type ModelSelectionError, type ModelSelectionFailure, type ModelSelectionSource, type Outcome, PREWARM_CLAIM_TABLE_DDL, PROVISION_PAYLOAD_MAX_BYTES, type PeekWorkspaceSandboxOutcome, type PrewarmClaimD1Like, type PrewarmClaimStore, type PrewarmDecision, type PrewarmEvent, type PrewarmOutcome, type PrewarmResult, type ProfileComposeOptions, type PromptInputPart, type ProviderResolutionConfig, type ProvisionPayloadSections, type ProvisionProfileSection, type ResolveSandboxClientCredentialsOptions, type ResolvedModel, type SafeSandboxErrorCause, type SafeSandboxErrorDiagnostics, type SandboxBuildContext, type SandboxClientCredentials, type SandboxCredentialEnvironment, SandboxEgressPolicyMismatchError, type SandboxEgressPolicySource, type SandboxExecChannel, type SandboxExecOptions, type SandboxExistingBoxStage, type SandboxFileBytesOutcome, type SandboxFileSizeOutcome, SandboxModelResolutionError, type SandboxPermissionLevel, type SandboxPrewarmScope, type SandboxPrewarmer, type SandboxPrewarmerOptions, type SandboxReadiness, SandboxRecoveryFailedError, type SandboxRecoveryPhase, type SandboxResourceConfig, type SandboxRestoreSpec, SandboxRuntimeAuthRefreshError, type SandboxRuntimeConfig, type SandboxScope, type SandboxStepTransition, type SandboxTerminalConnectionRouteOptions, type SandboxToolPathOptions, type SandboxToolSpec, type ScopedTokenResult, type SecretStore, type StoppedSandboxResumeFailure, type StoppedSandboxResumeRecovery, type StreamSandboxPromptOptions, type TerminalConnectionBoxLike, type WorkspaceSandboxEnsureContext, type WorkspaceSandboxInstanceLike, type WorkspaceSandboxManager, type WorkspaceSandboxManagerOptions, type WriteProfileFilesOptions, assertEnvWithinLimits, assertProvisionPayloadWithinCap, attachReasoningEffort, buildAppToolMcpServers, buildSandboxToolFileMounts, buildSandboxToolPathSetupScript, classifySeveredStream, collectSandboxPromptText, createD1PrewarmClaimStore, createSandboxPrewarmer, createSandboxTerminalConnectionRoute, createWorkspaceSandboxManager, deferredCorpusHash, deleteSecret, detectInteractiveQuestion, driveSandboxTurn, ensureWorkspaceSandbox, flattenHistory, formatSandboxProvisioningSupportDetails, formatSandboxProvisioningUserMessage, getClient, isSandboxApiBearerAuthFailure, isSandboxApiSandboxMissingFailure, isSandboxAuthFailure, isSandboxHostCapacityFailure, isTerminalPromptEvent, mergeExtraMcp, mergeHistoryIntoParts, mintSandboxScopedToken, peekWorkspaceSandbox, readSandboxBinaryBytes, readSecret, requireTransportableModel, resetClientCache, resolveModel, resolveModelSelection, resolveSandboxClientCredentials, runSandboxPrompt, runSandboxToolPathSetup, sandboxToolBinDir, sandboxToolPath, sandboxToolRootDir, secretStoreFromClient, serializeSandboxProvisioningError, shellQuote, splitDeferredProfileFiles, statSandboxFileSize, storeSecret, streamSandboxPrompt, syncSandboxMemberAdd, syncSandboxMemberRemove, syncSandboxMemberRole, writeProfileFilesToBox };
+export { type AppToolDescriptor, type BuildAppToolMcpServersOptions, type BuildSandboxToolFileMountsOptions, type D1PrewarmClaimStoreOptions, DEFAULT_PREWARM_CLAIM_TABLE, DEFAULT_SANDBOX_RESOURCES, DEFAULT_SIDECAR_PROCESS_PATTERN, type DriveSandboxTurnOptions, EGRESS_PROXY_RECOVERY_PHASE, EGRESS_PROXY_RECOVERY_REQUIRED, ENV_TOTAL_MAX_BYTES, ENV_VALUE_MAX_BYTES, type EnsureWorkspaceSandboxOptions, type LivenessProbeConfig, type MemberSyncSeam, type ModelSelection, type ModelSelectionError, type ModelSelectionFailure, type ModelSelectionSource, type Outcome, PREWARM_CLAIM_TABLE_DDL, PROVISION_PAYLOAD_MAX_BYTES, type PeekWorkspaceSandboxOutcome, type PrewarmClaimD1Like, type PrewarmClaimStore, type PrewarmDecision, type PrewarmEvent, type PrewarmOutcome, type PrewarmResult, type ProfileComposeOptions, type PromptInputPart, type ProviderResolutionConfig, type ProvisionPayloadSections, type ProvisionProfileSection, type ResolveSandboxClientCredentialsOptions, type ResolvedModel, type SafeSandboxErrorCause, type SafeSandboxErrorDiagnostics, type SandboxBuildContext, type SandboxClientCredentials, type SandboxCredentialEnvironment, SandboxEgressPolicyMismatchError, type SandboxEgressPolicySource, type SandboxExecChannel, type SandboxExecOptions, type SandboxExistingBoxStage, type SandboxFileBytesOutcome, type SandboxFileSizeOutcome, SandboxModelResolutionError, type SandboxPermissionLevel, type SandboxPrewarmScope, type SandboxPrewarmer, type SandboxPrewarmerOptions, type SandboxReadiness, SandboxRecoveryFailedError, type SandboxRecoveryPhase, type SandboxResourceConfig, type SandboxRestoreSpec, SandboxRuntimeAuthRefreshError, type SandboxRuntimeConfig, type SandboxScope, type SandboxStepTransition, type SandboxTerminalConnectionRouteOptions, type SandboxToolPathOptions, type SandboxToolSpec, type ScopedTokenResult, type SecretStore, type StoppedSandboxResumeFailure, type StoppedSandboxResumeRecovery, type StreamSandboxPromptOptions, type TerminalConnectionBoxLike, WORKSPACE_SANDBOX_HOST_EXHAUSTED, WORKSPACE_SANDBOX_MISSING, WORKSPACE_SANDBOX_RECOVERY_ACTIONS, WORKSPACE_SANDBOX_RECOVERY_CODES, WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS, WORKSPACE_SANDBOX_UNRECOVERABLE, type WorkspaceSandboxEnsureContext, type WorkspaceSandboxInstanceLike, type WorkspaceSandboxManager, type WorkspaceSandboxManagerOptions, type WorkspaceSandboxRecoveryAction, type WorkspaceSandboxRecoveryCode, type WorkspaceSandboxRecoveryDecision, type WorkspaceSandboxRecoveryManager, WorkspaceSandboxRecoveryRequiredError, type WorkspaceSandboxRecoveryState, type WorkspaceSandboxRecoveryStore, type WorkspaceSandboxSnapshot, type WorkspaceSandboxSnapshotAssessment, type WorkspaceSandboxSnapshotAvailability, type WorkspaceSandboxSnapshotFreshness, type WriteProfileFilesOptions, assertEnvWithinLimits, assertProvisionPayloadWithinCap, assessWorkspaceSandboxSnapshot, attachReasoningEffort, buildAppToolMcpServers, buildSandboxToolFileMounts, buildSandboxToolPathSetupScript, classifySeveredStream, collectSandboxPromptText, createD1PrewarmClaimStore, createSandboxPrewarmer, createSandboxTerminalConnectionRoute, createWorkspaceSandboxManager, createWorkspaceSandboxRecoveryManager, deferredCorpusHash, deleteSecret, detectInteractiveQuestion, driveSandboxTurn, ensureWorkspaceSandbox, flattenHistory, formatSandboxProvisioningSupportDetails, formatSandboxProvisioningUserMessage, getClient, isEgressProxyRecoveryRequiredError, isSandboxApiBearerAuthFailure, isSandboxApiSandboxMissingFailure, isSandboxAuthFailure, isSandboxHostCapacityFailure, isTerminalPromptEvent, isWorkspaceSandboxRecoveryAction, isWorkspaceSandboxRecoveryCode, isWorkspaceSandboxRecoveryState, isWorkspaceSandboxSnapshotRestoreError, mergeExtraMcp, mergeHistoryIntoParts, mintSandboxScopedToken, peekWorkspaceSandbox, preferredWorkspaceSandboxRecoveryBoxKey, readSandboxBinaryBytes, readSecret, requireTransportableModel, resetClientCache, resolveModel, resolveModelSelection, resolveSandboxClientCredentials, runSandboxPrompt, runSandboxToolPathSetup, sandboxToolBinDir, sandboxToolPath, sandboxToolRootDir, secretStoreFromClient, serializeSandboxProvisioningError, shellQuote, shouldRestoreWorkspaceSandboxRecovery, splitDeferredProfileFiles, statSandboxFileSize, storeSecret, streamSandboxPrompt, syncSandboxMemberAdd, syncSandboxMemberRemove, syncSandboxMemberRole, workspaceSandboxRecoveryDiagnostic, workspaceSandboxRecoveryFromError, workspaceSandboxRecoveryMessage, workspaceSandboxRecoveryRecommendedActions, writeProfileFilesToBox };

package/dist/sandbox/index.js

@@ -2,6 +2,7 @@ import {
   DEFAULT_PREWARM_CLAIM_TABLE,
   DEFAULT_SANDBOX_RESOURCES,
   DEFAULT_SIDECAR_PROCESS_PATTERN,
+  EGRESS_PROXY_RECOVERY_PHASE,
   EGRESS_PROXY_RECOVERY_REQUIRED,
   ENV_TOTAL_MAX_BYTES,
   ENV_VALUE_MAX_BYTES,
@@ -11,8 +12,16 @@ import {
   SandboxModelResolutionError,
   SandboxRecoveryFailedError,
   SandboxRuntimeAuthRefreshError,
+  WORKSPACE_SANDBOX_HOST_EXHAUSTED,
+  WORKSPACE_SANDBOX_MISSING,
+  WORKSPACE_SANDBOX_RECOVERY_ACTIONS,
+  WORKSPACE_SANDBOX_RECOVERY_CODES,
+  WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS,
+  WORKSPACE_SANDBOX_UNRECOVERABLE,
+  WorkspaceSandboxRecoveryRequiredError,
   assertEnvWithinLimits,
   assertProvisionPayloadWithinCap,
+  assessWorkspaceSandboxSnapshot,
   attachReasoningEffort,
   buildAppToolMcpServers,
   buildSandboxToolFileMounts,
@@ -23,6 +32,7 @@ import {
   createSandboxPrewarmer,
   createSandboxTerminalConnectionRoute,
   createWorkspaceSandboxManager,
+  createWorkspaceSandboxRecoveryManager,
   deferredCorpusHash,
   deleteSecret,
   detectInteractiveQuestion,
@@ -32,15 +42,21 @@ import {
   formatSandboxProvisioningSupportDetails,
   formatSandboxProvisioningUserMessage,
   getClient,
+  isEgressProxyRecoveryRequiredError,
   isSandboxApiBearerAuthFailure,
   isSandboxApiSandboxMissingFailure,
   isSandboxAuthFailure,
   isSandboxHostCapacityFailure,
   isTerminalPromptEvent,
+  isWorkspaceSandboxRecoveryAction,
+  isWorkspaceSandboxRecoveryCode,
+  isWorkspaceSandboxRecoveryState,
+  isWorkspaceSandboxSnapshotRestoreError,
   mergeExtraMcp,
   mergeHistoryIntoParts,
   mintSandboxScopedToken,
   peekWorkspaceSandbox,
+  preferredWorkspaceSandboxRecoveryBoxKey,
   readSandboxBinaryBytes,
   readSecret,
   requireTransportableModel,
@@ -56,6 +72,7 @@ import {
   secretStoreFromClient,
   serializeSandboxProvisioningError,
   shellQuote,
+  shouldRestoreWorkspaceSandboxRecovery,
   splitDeferredProfileFiles,
   statSandboxFileSize,
   storeSecret,
@@ -63,8 +80,12 @@ import {
   syncSandboxMemberAdd,
   syncSandboxMemberRemove,
   syncSandboxMemberRole,
+  workspaceSandboxRecoveryDiagnostic,
+  workspaceSandboxRecoveryFromError,
+  workspaceSandboxRecoveryMessage,
+  workspaceSandboxRecoveryRecommendedActions,
   writeProfileFilesToBox
-} from "../chunk-QGHQ2IRC.js";
+} from "../chunk-4XNCMUVI.js";
 import "../chunk-LWSJK546.js";
 import "../chunk-73F3CKVK.js";
 import "../chunk-ITCINLSU.js";
@@ -76,6 +97,7 @@ export {
   DEFAULT_PREWARM_CLAIM_TABLE,
   DEFAULT_SANDBOX_RESOURCES,
   DEFAULT_SIDECAR_PROCESS_PATTERN,
+  EGRESS_PROXY_RECOVERY_PHASE,
   EGRESS_PROXY_RECOVERY_REQUIRED,
   ENV_TOTAL_MAX_BYTES,
   ENV_VALUE_MAX_BYTES,
@@ -85,8 +107,16 @@ export {
   SandboxModelResolutionError,
   SandboxRecoveryFailedError,
   SandboxRuntimeAuthRefreshError,
+  WORKSPACE_SANDBOX_HOST_EXHAUSTED,
+  WORKSPACE_SANDBOX_MISSING,
+  WORKSPACE_SANDBOX_RECOVERY_ACTIONS,
+  WORKSPACE_SANDBOX_RECOVERY_CODES,
+  WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS,
+  WORKSPACE_SANDBOX_UNRECOVERABLE,
+  WorkspaceSandboxRecoveryRequiredError,
   assertEnvWithinLimits,
   assertProvisionPayloadWithinCap,
+  assessWorkspaceSandboxSnapshot,
   attachReasoningEffort,
   buildAppToolMcpServers,
   buildSandboxToolFileMounts,
@@ -97,6 +127,7 @@ export {
   createSandboxPrewarmer,
   createSandboxTerminalConnectionRoute,
   createWorkspaceSandboxManager,
+  createWorkspaceSandboxRecoveryManager,
   deferredCorpusHash,
   deleteSecret,
   detectInteractiveQuestion,
@@ -106,15 +137,21 @@ export {
   formatSandboxProvisioningSupportDetails,
   formatSandboxProvisioningUserMessage,
   getClient,
+  isEgressProxyRecoveryRequiredError,
   isSandboxApiBearerAuthFailure,
   isSandboxApiSandboxMissingFailure,
   isSandboxAuthFailure,
   isSandboxHostCapacityFailure,
   isTerminalPromptEvent,
+  isWorkspaceSandboxRecoveryAction,
+  isWorkspaceSandboxRecoveryCode,
+  isWorkspaceSandboxRecoveryState,
+  isWorkspaceSandboxSnapshotRestoreError,
   mergeExtraMcp,
   mergeHistoryIntoParts,
   mintSandboxScopedToken,
   peekWorkspaceSandbox,
+  preferredWorkspaceSandboxRecoveryBoxKey,
   readSandboxBinaryBytes,
   readSecret,
   requireTransportableModel,
@@ -130,6 +167,7 @@ export {
   secretStoreFromClient,
   serializeSandboxProvisioningError,
   shellQuote,
+  shouldRestoreWorkspaceSandboxRecovery,
   splitDeferredProfileFiles,
   statSandboxFileSize,
   storeSecret,
@@ -137,6 +175,10 @@ export {
   syncSandboxMemberAdd,
   syncSandboxMemberRemove,
   syncSandboxMemberRole,
+  workspaceSandboxRecoveryDiagnostic,
+  workspaceSandboxRecoveryFromError,
+  workspaceSandboxRecoveryMessage,
+  workspaceSandboxRecoveryRecommendedActions,
   writeProfileFilesToBox
 };
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-app",
-  "version": "0.45.5",
+  "version": "0.45.6",
   "packageManager": "pnpm@11.17.0",
   "description": "Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.",
   "keywords": [