@tangle-network/agent-app 0.45.5 → 0.45.7

package/dist/chat-routes/index.js

@@ -31,7 +31,7 @@ import {
 } from "../chunk-SDEADFHZ.js";
 import {
   createInteractionAnswerRoute
-} from "../chunk-6KMAM7BL.js";
+} from "../chunk-3BK3BC2L.js";
 import {
   parseJsonObjectBody
 } from "../chunk-J25RST7G.js";
@@ -100,7 +100,7 @@ import {
   flattenHistory,
   readSandboxBinaryBytes,
   statSandboxFileSize
-} from "../chunk-QGHQ2IRC.js";
+} from "../chunk-4XNCMUVI.js";
 import "../chunk-LWSJK546.js";
 import "../chunk-73F3CKVK.js";
 import "../chunk-ITCINLSU.js";

package/dist/{chunk-6KMAM7BL.js → chunk-3BK3BC2L.js}

@@ -75,6 +75,94 @@ async function respondToSessionInteraction(connection, response) {
   if (!result.succeeded) return result;
   return { succeeded: true, value: void 0 };
 }
+function isTerminalSidecarState(state) {
+  if (state.activeExecutionId) return false;
+  if (state.reconnectable === true) return false;
+  if (state.outstandingInteractions && state.outstandingInteractions.length > 0) return false;
+  return TERMINAL_SESSION_STATES.includes(state.state ?? "") || state.reconnectable === false;
+}
+var TERMINAL_SESSION_STATES = ["completed", "failed", "aborted", "expired", "idle", "terminal"];
+async function sessionFetch(connection, init = { method: "GET" }) {
+  const doFetch = connection.fetchImpl ?? fetch;
+  const base = `${connection.runtimeUrl.replace(/\/$/, "")}/agents/sessions/${encodeURIComponent(connection.sessionId)}`;
+  const url = init.method === "POST" ? `${base}/abort` : base;
+  let response;
+  try {
+    response = await doFetch(url, {
+      method: init.method,
+      headers: {
+        ...connection.authToken ? { authorization: `Bearer ${connection.authToken}` } : {},
+        ...init.method === "POST" ? { "content-type": "application/json" } : {}
+      },
+      ...init.method === "POST" ? { body: "{}" } : {},
+      signal: AbortSignal.timeout(connection.timeoutMs ?? DEFAULT_TIMEOUT_MS)
+    });
+  } catch (err) {
+    return {
+      succeeded: false,
+      error: { code: "SIDECAR_UNREACHABLE", message: sanitizeUpstreamMessage(err), status: 502 }
+    };
+  }
+  let parsed = {};
+  try {
+    parsed = await response.json();
+  } catch {
+    parsed = {};
+  }
+  if (!response.ok) {
+    const upstreamError = parsed.error && typeof parsed.error === "object" ? parsed.error : {};
+    return {
+      succeeded: false,
+      error: {
+        code: typeof upstreamError.code === "string" && upstreamError.code ? upstreamError.code : "SIDECAR_SESSION_FAILED",
+        message: sanitizeUpstreamMessage(
+          typeof upstreamError.message === "string" && upstreamError.message ? upstreamError.message : `sidecar session ${init.method} failed (${response.status})`
+        ),
+        status: response.status
+      }
+    };
+  }
+  return { succeeded: true, value: parsed };
+}
+function sessionStateFromPayload(payload) {
+  const data = payload.data && typeof payload.data === "object" ? payload.data : payload;
+  const session = data.session && typeof data.session === "object" ? data.session : data;
+  const activeExecution = data.activeExecution && typeof data.activeExecution === "object" ? data.activeExecution : session.activeExecution && typeof session.activeExecution === "object" ? session.activeExecution : null;
+  const interactions = session.outstandingInteractions ?? session.interactions;
+  return {
+    ...typeof session.state === "string" ? { state: session.state } : {},
+    ...typeof session.activeExecutionId === "string" ? { activeExecutionId: session.activeExecutionId } : session.activeExecutionId === null ? { activeExecutionId: null } : {},
+    ...typeof session.reconnectable === "boolean" ? { reconnectable: session.reconnectable } : {},
+    ...typeof session.registryAuthority === "string" ? { registryAuthority: session.registryAuthority } : session.registryAuthority === null ? { registryAuthority: null } : {},
+    ...typeof session.terminalReason === "string" ? { terminalReason: session.terminalReason } : session.terminalReason === null ? { terminalReason: null } : {},
+    ...typeof session.lastEventAt === "string" || typeof session.lastEventAt === "number" || session.lastEventAt === null ? { lastEventAt: session.lastEventAt } : {},
+    ...Array.isArray(interactions) ? { outstandingInteractions: interactions } : {},
+    ...activeExecution && typeof activeExecution.id === "string" && typeof session.activeExecutionId !== "string" ? { activeExecutionId: activeExecution.id } : {},
+    ...activeExecution && typeof activeExecution.status === "string" ? { activeExecutionStatus: activeExecution.status } : activeExecution === null && session.activeExecution === null ? { activeExecutionStatus: null } : {}
+  };
+}
+async function getSessionState(connection) {
+  const result = await sessionFetch(connection);
+  if (!result.succeeded) return result;
+  return { succeeded: true, value: sessionStateFromPayload(result.value) };
+}
+async function abortSession(connection) {
+  const result = await sessionFetch(connection, { method: "POST" });
+  if (!result.succeeded) {
+    if (result.error.status === 404) return { succeeded: true, value: { cancelled: false, reason: "not-found" } };
+    return result;
+  }
+  const data = result.value.data && typeof result.value.data === "object" ? result.value.data : result.value;
+  const reason = typeof data.reason === "string" && data.reason.trim() ? data.reason.trim() : typeof data.noopReason === "string" && data.noopReason.trim() ? data.noopReason.trim() : void 0;
+  return {
+    succeeded: true,
+    value: {
+      cancelled: data.cancelled === true,
+      ...reason ? { reason } : {},
+      ...data.session && typeof data.session === "object" ? { session: sessionStateFromPayload(result.value) } : {}
+    }
+  };
+}
 
 // src/interactions/route.ts
 function validateInteractionAnswerBody(body) {
@@ -300,8 +388,11 @@ function createInteractionAnswerRoute(options) {
 export {
   listSessionInteractions,
   respondToSessionInteraction,
+  isTerminalSidecarState,
+  getSessionState,
+  abortSession,
   validateInteractionAnswerBody,
   mapInteractionRespondFailure,
   createInteractionAnswerRoute
 };
-//# sourceMappingURL=chunk-6KMAM7BL.js.map
+//# sourceMappingURL=chunk-3BK3BC2L.js.map

package/dist/chunk-3BK3BC2L.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/interactions/sidecar.ts","../src/interactions/route.ts"],"sourcesContent":["/**\n * Server-side client for the sandbox sidecar's generic interaction routes\n * (`GET/POST {runtimeUrl}/agents/sessions/{sessionId}/interactions`). The\n * pinned sandbox SDK exposes only the question-specific `session().answer()`\n * convenience; these raw calls are backend-agnostic (question/permission/plan,\n * any harness) and carry explicit outcomes (accepted/declined).\n *\n * Server-only: the sidecar bearer must never reach browser code. The caller\n * supplies the connection as a structural value (runtime URL + bearer +\n * session id) — no sandbox-SDK import, so any box-resolution strategy works.\n */\n\nimport type { InteractionData, InteractionOutcome, InteractionRequestWire } from './contract'\n\n/** Describe error details including code, message, and upstream HTTP status for sidecar interactions */\nexport interface SidecarInteractionsError {\n  code: string\n  message: string\n  /** Upstream HTTP status; 0 when the sidecar was unreachable. */\n  status: number\n}\n\n/** Represent the outcome of sidecar interactions with success or error details */\nexport type SidecarInteractionsResult<T> =\n  | { succeeded: true; value: T }\n  | { succeeded: false; error: SidecarInteractionsError }\n\n/** Where and how to reach one session's interaction registry. */\nexport interface SidecarInteractionsConnection {\n  runtimeUrl: string\n  authToken?: string\n  /** The sidecar agent-session id (the chat thread's session). */\n  sessionId: string\n  /** Request deadline. A pending interaction means the box is up and the\n   *  sidecar responsive; a short default keeps a wedged runtime from stalling\n   *  the answering request. */\n  timeoutMs?: number\n  /** Injection seam for tests; defaults to global fetch. */\n  fetchImpl?: typeof fetch\n}\n\nconst DEFAULT_TIMEOUT_MS = 5_000\n\n/** Strips bearer tokens / key material before an upstream message is logged\n *  or surfaced. */\nfunction sanitizeUpstreamMessage(input: unknown): string {\n  const message = input instanceof Error ? input.message : String(input)\n  return message\n    .replace(/Bearer\\s+[^\\s]+/gi, 'Bearer [redacted]')\n    .replace(/\\b(?:sk|pk|tc)[_-][A-Za-z0-9_-]{8,}\\b/g, '[redacted-key]')\n}\n\nasync function interactionsFetch(\n  connection: SidecarInteractionsConnection,\n  init: { method: 'GET' } | { method: 'POST'; body: Record<string, unknown> },\n): Promise<SidecarInteractionsResult<Record<string, unknown>>> {\n  const doFetch = connection.fetchImpl ?? fetch\n  const url = `${connection.runtimeUrl.replace(/\\/$/, '')}/agents/sessions/${encodeURIComponent(connection.sessionId)}/interactions`\n  let response: Response\n  try {\n    response = await doFetch(url, {\n      method: init.method,\n      headers: {\n        ...(connection.authToken ? { Authorization: `Bearer ${connection.authToken}` } : {}),\n        ...(init.method === 'POST' ? { 'Content-Type': 'application/json' } : {}),\n      },\n      ...(init.method === 'POST' ? { body: JSON.stringify(init.body) } : {}),\n      signal: AbortSignal.timeout(connection.timeoutMs ?? DEFAULT_TIMEOUT_MS),\n    })\n  } catch (err) {\n    return {\n      succeeded: false,\n      error: { code: 'UPSTREAM_UNREACHABLE', message: sanitizeUpstreamMessage(err), status: 0 },\n    }\n  }\n  const raw = await response.text().catch(() => '')\n  let parsed: Record<string, unknown> = {}\n  try {\n    parsed = raw ? (JSON.parse(raw) as Record<string, unknown>) : {}\n  } catch {\n    // Non-JSON error bodies (proxy 502 pages) fall through to the status check.\n  }\n  if (!response.ok) {\n    const upstreamError = (parsed.error ?? {}) as { code?: unknown; message?: unknown }\n    return {\n      succeeded: false,\n      error: {\n        code: typeof upstreamError.code === 'string' && upstreamError.code ? upstreamError.code : 'UPSTREAM_ERROR',\n        message: sanitizeUpstreamMessage(\n          typeof upstreamError.message === 'string' && upstreamError.message\n            ? upstreamError.message\n            : `sidecar interactions ${init.method} failed (${response.status})`,\n        ),\n        status: response.status,\n      },\n    }\n  }\n  return { succeeded: true, value: parsed }\n}\n\n/** Outstanding (unanswered) interactions for the session — the sidecar's\n *  registry is authoritative, so this is the reconnect/reload source of truth. */\nexport async function listSessionInteractions(\n  connection: SidecarInteractionsConnection,\n): Promise<SidecarInteractionsResult<InteractionRequestWire[]>> {\n  const result = await interactionsFetch(connection, { method: 'GET' })\n  if (!result.succeeded) return result\n  const data = result.value.data as { interactions?: unknown } | undefined\n  if (!Array.isArray(data?.interactions)) {\n    return {\n      succeeded: false,\n      error: { code: 'MALFORMED_RESPONSE', message: 'sidecar list returned no interactions array', status: 200 },\n    }\n  }\n  return { succeeded: true, value: data.interactions as InteractionRequestWire[] }\n}\n\n/** Resolves one interaction. `data` is required by the sidecar only for\n *  `accepted` outcomes and is validated fail-closed against the answerSpec\n *  (400 INVALID_INTERACTION_ANSWER on mismatch). */\nexport async function respondToSessionInteraction(\n  connection: SidecarInteractionsConnection,\n  response: { id: string; outcome: InteractionOutcome; data?: InteractionData },\n): Promise<SidecarInteractionsResult<void>> {\n  const result = await interactionsFetch(connection, {\n    method: 'POST',\n    body: {\n      id: response.id,\n      outcome: response.outcome,\n      ...(response.data ? { data: response.data } : {}),\n    },\n  })\n  if (!result.succeeded) return result\n  return { succeeded: true, value: undefined }\n}\n\n/**\n * A sandbox session's lifecycle as the sidecar reports it.\n *\n * Every field is optional because the sidecar's payload has grown over time and\n * an older box answers with a subset. A reader that assumes a field is present\n * mis-reads an old box as terminal; the shapes below are read defensively for\n * that reason, not out of caution about types.\n */\nexport interface SidecarSessionState {\n  state?: string\n  activeExecutionId?: string | null\n  activeExecutionStatus?: string | null\n  reconnectable?: boolean\n  registryAuthority?: string | null\n  terminalReason?: string | null\n  lastEventAt?: string | number | null\n  outstandingInteractions?: unknown[]\n}\n\nexport interface SidecarAbortResult {\n  cancelled: boolean\n  reason?: string\n  session?: SidecarSessionState\n}\n\n/**\n * Whether a session has finished and will not produce more events.\n *\n * The three early returns are the ones that matter: a session with a live\n * execution, one the platform says is reconnectable, or one holding an\n * unanswered interaction is NOT terminal however its `state` string reads. An\n * app that treats such a session as finished abandons a turn mid-flight, or\n * leaves an agent blocked on an answer nobody will send.\n */\nexport function isTerminalSidecarState(state: {\n  state?: string\n  activeExecutionId?: string | null\n  reconnectable?: boolean\n  outstandingInteractions?: unknown[]\n}): boolean {\n  if (state.activeExecutionId) return false\n  if (state.reconnectable === true) return false\n  if (state.outstandingInteractions && state.outstandingInteractions.length > 0) return false\n  return TERMINAL_SESSION_STATES.includes(state.state ?? '') || state.reconnectable === false\n}\n\nconst TERMINAL_SESSION_STATES = ['completed', 'failed', 'aborted', 'expired', 'idle', 'terminal']\n\nasync function sessionFetch(\n  connection: SidecarInteractionsConnection,\n  init: { method: 'GET' | 'POST' } = { method: 'GET' },\n): Promise<SidecarInteractionsResult<Record<string, unknown>>> {\n  const doFetch = connection.fetchImpl ?? fetch\n  const base = `${connection.runtimeUrl.replace(/\\/$/, '')}/agents/sessions/${encodeURIComponent(connection.sessionId)}`\n  const url = init.method === 'POST' ? `${base}/abort` : base\n  let response: Response\n  try {\n    response = await doFetch(url, {\n      method: init.method,\n      headers: {\n        ...(connection.authToken ? { authorization: `Bearer ${connection.authToken}` } : {}),\n        ...(init.method === 'POST' ? { 'content-type': 'application/json' } : {}),\n      },\n      ...(init.method === 'POST' ? { body: '{}' } : {}),\n      signal: AbortSignal.timeout(connection.timeoutMs ?? DEFAULT_TIMEOUT_MS),\n    })\n  } catch (err) {\n    return {\n      succeeded: false,\n      error: { code: 'SIDECAR_UNREACHABLE', message: sanitizeUpstreamMessage(err), status: 502 },\n    }\n  }\n  let parsed: Record<string, unknown> = {}\n  try {\n    parsed = (await response.json()) as Record<string, unknown>\n  } catch {\n    parsed = {}\n  }\n  if (!response.ok) {\n    const upstreamError = (parsed.error && typeof parsed.error === 'object'\n      ? parsed.error\n      : {}) as Record<string, unknown>\n    return {\n      succeeded: false,\n      error: {\n        code: typeof upstreamError.code === 'string' && upstreamError.code\n          ? upstreamError.code\n          : 'SIDECAR_SESSION_FAILED',\n        message: sanitizeUpstreamMessage(\n          typeof upstreamError.message === 'string' && upstreamError.message\n            ? upstreamError.message\n            : `sidecar session ${init.method} failed (${response.status})`,\n        ),\n        status: response.status,\n      },\n    }\n  }\n  return { succeeded: true, value: parsed }\n}\n\n/** Read the session payload defensively: newer boxes nest under `data`, and\n *  the execution id appears either on the session or on `activeExecution`. */\nfunction sessionStateFromPayload(payload: Record<string, unknown>): SidecarSessionState {\n  const data = (payload.data && typeof payload.data === 'object' ? payload.data : payload) as Record<string, unknown>\n  const session = data.session && typeof data.session === 'object'\n    ? data.session as Record<string, unknown>\n    : data\n  const activeExecution = data.activeExecution && typeof data.activeExecution === 'object'\n    ? data.activeExecution as Record<string, unknown>\n    : session.activeExecution && typeof session.activeExecution === 'object'\n      ? session.activeExecution as Record<string, unknown>\n      : null\n  const interactions = session.outstandingInteractions ?? session.interactions\n  return {\n    ...(typeof session.state === 'string' ? { state: session.state } : {}),\n    ...(typeof session.activeExecutionId === 'string'\n      ? { activeExecutionId: session.activeExecutionId }\n      : session.activeExecutionId === null ? { activeExecutionId: null } : {}),\n    ...(typeof session.reconnectable === 'boolean' ? { reconnectable: session.reconnectable } : {}),\n    ...(typeof session.registryAuthority === 'string'\n      ? { registryAuthority: session.registryAuthority }\n      : session.registryAuthority === null ? { registryAuthority: null } : {}),\n    ...(typeof session.terminalReason === 'string'\n      ? { terminalReason: session.terminalReason }\n      : session.terminalReason === null ? { terminalReason: null } : {}),\n    ...(typeof session.lastEventAt === 'string' || typeof session.lastEventAt === 'number' || session.lastEventAt === null\n      ? { lastEventAt: session.lastEventAt }\n      : {}),\n    ...(Array.isArray(interactions) ? { outstandingInteractions: interactions } : {}),\n    ...(activeExecution && typeof activeExecution.id === 'string' && typeof session.activeExecutionId !== 'string'\n      ? { activeExecutionId: activeExecution.id }\n      : {}),\n    ...(activeExecution && typeof activeExecution.status === 'string'\n      ? { activeExecutionStatus: activeExecution.status }\n      : activeExecution === null && session.activeExecution === null ? { activeExecutionStatus: null } : {}),\n  }\n}\n\n/** The session's current lifecycle, for reconnect and resume decisions. */\nexport async function getSessionState(\n  connection: SidecarInteractionsConnection,\n): Promise<SidecarInteractionsResult<SidecarSessionState>> {\n  const result = await sessionFetch(connection)\n  if (!result.succeeded) return result\n  return { succeeded: true, value: sessionStateFromPayload(result.value) }\n}\n\n/**\n * Cancel a running session.\n *\n * A 404 is reported as a SUCCESSFUL no-op rather than an error: the caller's\n * intent is \"this session must not be running\", and a session the sidecar has\n * never heard of already satisfies that. Surfacing it as a failure makes every\n * cancel-after-completion look like an outage.\n */\nexport async function abortSession(\n  connection: SidecarInteractionsConnection,\n): Promise<SidecarInteractionsResult<SidecarAbortResult>> {\n  const result = await sessionFetch(connection, { method: 'POST' })\n  if (!result.succeeded) {\n    if (result.error.status === 404) return { succeeded: true, value: { cancelled: false, reason: 'not-found' } }\n    return result\n  }\n  const data = (result.value.data && typeof result.value.data === 'object'\n    ? result.value.data\n    : result.value) as Record<string, unknown>\n  const reason = typeof data.reason === 'string' && data.reason.trim()\n    ? data.reason.trim()\n    : typeof data.noopReason === 'string' && data.noopReason.trim()\n      ? data.noopReason.trim()\n      : undefined\n  return {\n    succeeded: true,\n    value: {\n      cancelled: data.cancelled === true,\n      ...(reason ? { reason } : {}),\n      ...(data.session && typeof data.session === 'object' ? { session: sessionStateFromPayload(result.value) } : {}),\n    },\n  }\n}\n","/**\n * Framework-neutral interaction-answer endpoints, lifted out of the per-app\n * route files (gtm `api.chat.interactions`, legal `api.chat.interactions`,\n * tax `api.sessions.$id.interactions` — three byte-similar forks):\n *\n *   list(request)   — GET: outstanding asks for a live turn (reload restore)\n *   answer(request) — POST `{ id, outcome, data? }`: resolve one ask\n *\n * The product supplies ONE seam, `resolveConnection`: authenticate the caller,\n * authorize the thread/session, and resolve the sidecar connection. Everything\n * behind the seam is mechanism the forks kept re-fixing:\n *\n *   - body validation (safe field keys, typed values),\n *   - sidecar error → client contract mapping (every \"the ask is gone\" shape\n *     becomes 410 so the card flips to its expired state),\n *   - duplicate resolution: after answering, every other outstanding ask with\n *     the same content signature (a re-emitted duplicate) gets the same answer,\n *   - unblock verification: re-list and fail loud (503 INTERACTION_STILL_PENDING)\n *     when the sidecar accepted the POST but the ask is still open,\n *   - best-effort list: sidecar failures return `{ interactions: [],\n *     unavailable }` so a reload restore never breaks the live stream.\n *\n * Handlers return web-standard `Response`s (Workers, Node 18+, Deno) — no\n * router import anywhere.\n */\n\nimport {\n  interactionFromWireRequest,\n  isSafeInteractionFieldKey,\n  questionInteractionContentSignature,\n  type InteractionData,\n  type InteractionRequestWire,\n} from './contract'\nimport {\n  listSessionInteractions,\n  respondToSessionInteraction,\n  type SidecarInteractionsConnection,\n  type SidecarInteractionsError,\n} from './sidecar'\n\n// A client resolves an ask by answering (`accepted`) or refusing (`declined`).\n// Withdrawal (`cancelled`) is an agent/broker outcome delivered via the\n// `interaction.cancel` event, never a client POST, so it is not accepted here.\n/** Define possible outcomes for an interaction client as accepted or declined */\nexport type InteractionClientOutcome = 'accepted' | 'declined'\n\n/** Validate interaction answer body and return success with data or failure with error message */\nexport type InteractionAnswerBodyValidation =\n  | { ok: true; id: string; outcome: InteractionClientOutcome; data?: InteractionData }\n  | { ok: false; error: string }\n\n/** Validates the client POST body: `{ id, outcome, data? }` with\n *  identifier-safe field keys and primitive/string-array values only. */\nexport function validateInteractionAnswerBody(body: Record<string, unknown>): InteractionAnswerBodyValidation {\n  const id = typeof body.id === 'string' && body.id ? body.id : null\n  if (!id) return { ok: false, error: 'Missing interaction id' }\n  const outcome = body.outcome\n  if (outcome !== 'accepted' && outcome !== 'declined') {\n    return { ok: false, error: 'Invalid outcome: expected accepted or declined' }\n  }\n  if (body.data === undefined) return { ok: true, id, outcome }\n  if (!body.data || typeof body.data !== 'object' || Array.isArray(body.data)) {\n    return { ok: false, error: 'Invalid data: expected an object of field values' }\n  }\n  const data: InteractionData = {}\n  for (const [key, value] of Object.entries(body.data)) {\n    if (!isSafeInteractionFieldKey(key)) {\n      return { ok: false, error: 'Invalid data: field names must contain only letters, numbers, underscores, or hyphens' }\n    }\n    const validValue =\n      typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean' ||\n      (Array.isArray(value) && value.every((item) => typeof item === 'string'))\n    if (!validValue) {\n      return { ok: false, error: 'Invalid data: field values must be strings, numbers, booleans, or string arrays' }\n    }\n    data[key] = value as InteractionData[string]\n  }\n  return { ok: true, id, outcome, data }\n}\n\n/** Provide logging methods for warnings and errors in interaction routes */\nexport type InteractionRouteLogger = Pick<Console, 'warn' | 'error'>\n\n/** Sidecar error → the client-actionable contract. Every \"the ask is gone\"\n *  shape maps to 410 so the card flips to its expired state — a raw 404/409\n *  must never surface. */\nexport function mapInteractionRespondFailure(\n  error: SidecarInteractionsError,\n  logger: InteractionRouteLogger = console,\n): Response {\n  if (error.code === 'INVALID_INTERACTION_ANSWER') {\n    return Response.json(\n      { code: 'INVALID_INTERACTION_ANSWER', error: 'This question needs an answer from the card above — pick one of the listed options.' },\n      { status: 400 },\n    )\n  }\n  if (error.status === 404) {\n    return Response.json(\n      { code: 'INTERACTION_EXPIRED', error: 'This question is no longer waiting for an answer.' },\n      { status: 410 },\n    )\n  }\n  if (error.status === 501 || error.code === 'NOT_IMPLEMENTED') {\n    return Response.json(\n      { code: 'INTERACTIONS_UNSUPPORTED', error: 'This agent backend cannot accept answers this way.' },\n      { status: 501 },\n    )\n  }\n  logger.error('[interactions] respond failed:', error)\n  return Response.json(\n    { code: 'INTERACTION_UPSTREAM_FAILED', error: 'Could not reach the agent. Try again.' },\n    { status: 503 },\n  )\n}\n\n/** The product seam's verdict for one request. `response` short-circuits with\n *  a product-authored Response (401/404/429…); `unavailable` means the caller\n *  is fine but the sandbox runtime is not reachable — the factory shapes that\n *  per intent (empty list for `list`, 503 for `answer`). */\nexport type InteractionConnectionResolution =\n  | { ok: true; connection: SidecarInteractionsConnection }\n  | { ok: false; response: Response }\n  | { ok: false; unavailable: string }\n\n/** Define arguments required to resolve interaction connections based on request and intent */\nexport interface ResolveInteractionConnectionArgs {\n  request: Request\n  intent: 'list' | 'answer'\n  /** The parsed, validated POST body (answer intent only) so the resolver can\n   *  read product routing fields (workspaceId/threadId) without re-parsing. */\n  body?: Record<string, unknown>\n}\n\n/** Describe the arguments provided before processing an interaction answer including request, body, and connection details */\nexport interface BeforeInteractionAnswerArgs {\n  request: Request\n  /** Original parsed body, including product routing fields. */\n  body: Record<string, unknown>\n  /** Shared validation result; products never need to parse the answer again. */\n  answer: Extract<InteractionAnswerBodyValidation, { ok: true }>\n  connection: SidecarInteractionsConnection\n  /** The route's single authoritative pre-answer sidecar snapshot. */\n  outstanding: InteractionRequestWire[]\n  answeredRequest?: InteractionRequestWire\n  /** Content-identical questions that the shared route will also answer. */\n  duplicateRequests: InteractionRequestWire[]\n}\n\n/** Define arguments for durable interaction routes including a stable caller-created attempt key */\nexport interface DurableInteractionRouteArgs extends BeforeInteractionAnswerArgs {\n  /** Caller-created opaque identifier, stable across an ambiguous retry. */\n  attemptKey: string\n}\n\n/** Crash-recoverable persistence lifecycle for the answer route. The product\n * binds this structural port to its OWN durable store — agent-app ships no\n * implementation (the `/durable-chat` module that used to provide one was\n * removed in 0.44.0 after nine repos produced zero imports of it). Existing\n * `beforeAnswer` behavior remains independent and unchanged. */\nexport interface DurableInteractionRoutePersistence<TPrepared = unknown> {\n  guarantee: 'reconciled' | 'best-effort'\n  prepare(args: DurableInteractionRouteArgs): TPrepared | Promise<TPrepared>\n  /** Resolve an ambiguous retry (for example, the sidecar says the ask is\n   * already gone). Only `settled:true` permits the route to report success. */\n  reconcile(args: DurableInteractionRouteArgs & { prepared: TPrepared }):\n    | { settled: boolean }\n    | Promise<{ settled: boolean }>\n  /** Record the authority acknowledgement before terminal projection. */\n  acknowledge(args: DurableInteractionRouteArgs & {\n    prepared: TPrepared\n    duplicateIds: string[]\n  }): void | Promise<void>\n  /** Idempotently materialize terminal status and accepted values. */\n  finalize(args: DurableInteractionRouteArgs & {\n    prepared: TPrepared\n    duplicateIds: string[]\n  }): void | Promise<void>\n  fail?(args: DurableInteractionRouteArgs & { prepared: TPrepared; error: unknown }): void | Promise<void>\n}\n\n/** Define options to authenticate, authorize, and manage persistence for interaction answer routes */\nexport interface InteractionAnswerRouteOptions {\n  /** Authenticate + authorize the caller and resolve the sidecar connection.\n   *  This is the only product-supplied step: session auth, workspace/thread\n   *  access, rate limiting, and box resolution all live here. */\n  resolveConnection: (args: ResolveInteractionConnectionArgs) => Promise<InteractionConnectionResolution>\n  /** Product persistence seam that runs before the answer can unblock and\n   * finalize the agent turn. A throw aborts the request before any answer POST. */\n  beforeAnswer?: (args: BeforeInteractionAnswerArgs) => void | Promise<void>\n  /** Additive crash-recoverable settlement. When configured, POST requires an\n   * `attemptKey`; accepted values are finalized only after sidecar ack. */\n  durable?: DurableInteractionRoutePersistence\n  logger?: InteractionRouteLogger\n}\n\n/** Define routes to list outstanding interactions and resolve answers for live turns */\nexport interface InteractionAnswerRoute {\n  /** GET — outstanding interactions for a live turn. Failures return an empty\n   *  list with an explicit `unavailable` code: the caller is a best-effort\n   *  reload restore, and the live/replayed stream must stay untouched when the\n   *  sidecar cannot answer. */\n  list: (request: Request) => Promise<Response>\n  /** POST `{ id, outcome, data?, ...productFields }` — resolve one ask, answer\n   *  content-identical duplicates the same way, then re-list to prove the run\n   *  actually unblocked. */\n  answer: (request: Request) => Promise<Response>\n}\n\n/** Create an interaction answer route that handles listing and resolving interaction requests */\nexport function createInteractionAnswerRoute(options: InteractionAnswerRouteOptions): InteractionAnswerRoute {\n  const logger = options.logger ?? console\n\n  async function list(request: Request): Promise<Response> {\n    const resolution = await options.resolveConnection({ request, intent: 'list' })\n    if (!resolution.ok) {\n      if ('response' in resolution) return resolution.response\n      return Response.json({ interactions: [], unavailable: resolution.unavailable })\n    }\n    const result = await listSessionInteractions(resolution.connection)\n    if (!result.succeeded) {\n      logger.warn('[interactions] list failed:', result.error)\n      return Response.json({ interactions: [], unavailable: result.error.code })\n    }\n    return Response.json({ interactions: result.value })\n  }\n\n  async function answer(request: Request): Promise<Response> {\n    const body = await request.json().catch(() => null) as Record<string, unknown> | null\n    if (!body || typeof body !== 'object' || Array.isArray(body)) {\n      return Response.json({ error: 'Invalid JSON body' }, { status: 400 })\n    }\n    const validation = validateInteractionAnswerBody(body)\n    if (!validation.ok) return Response.json({ error: validation.error }, { status: 400 })\n    const attemptKey = typeof body.attemptKey === 'string' ? body.attemptKey.trim() : ''\n    if (options.durable && !attemptKey) {\n      return Response.json({ error: 'Missing attemptKey for durable interaction answer' }, { status: 400 })\n    }\n\n    const resolution = await options.resolveConnection({ request, intent: 'answer', body })\n    if (!resolution.ok) {\n      if ('response' in resolution) return resolution.response\n      return mapInteractionRespondFailure(\n        { code: resolution.unavailable, message: 'sandbox runtime unavailable', status: 0 },\n        logger,\n      )\n    }\n    const connection = resolution.connection\n    const answerPayload = {\n      outcome: validation.outcome,\n      ...(validation.data ? { data: validation.data } : {}),\n    }\n\n    // Snapshot the answered ask's content signature BEFORE resolving it, so any\n    // content-identical duplicates still outstanding afterwards (the agent may\n    // have re-emitted the same question N times) can be answered the same way.\n    const before = await listSessionInteractions(connection)\n    if (!before.succeeded && (options.beforeAnswer || options.durable)) {\n      return mapInteractionRespondFailure(before.error, logger)\n    }\n    const answeredRequest = before.succeeded ? before.value.find((item) => item.id === validation.id) : undefined\n    if (options.beforeAnswer && !options.durable && !answeredRequest) {\n      return mapInteractionRespondFailure(\n        { code: 'NOT_FOUND', message: 'interaction not found', status: 404 },\n        logger,\n      )\n    }\n    const answeredSignature = answeredRequest\n      ? questionInteractionContentSignature(interactionFromWireRequest(answeredRequest))\n      : null\n    const duplicateRequests = before.succeeded && answeredSignature\n      ? before.value.filter((item) => item.id !== validation.id && (\n          questionInteractionContentSignature(interactionFromWireRequest(item)) === answeredSignature\n        ))\n      : []\n\n    const lifecycleArgs: BeforeInteractionAnswerArgs = {\n      request,\n      body,\n      answer: validation,\n      connection,\n      outstanding: before.succeeded ? before.value : [],\n      ...(answeredRequest ? { answeredRequest } : {}),\n      duplicateRequests,\n    }\n\n    if (options.beforeAnswer && answeredRequest) {\n      try {\n        await options.beforeAnswer(lifecycleArgs)\n      } catch (error) {\n        logger.error('[interactions] beforeAnswer failed:', error)\n        return Response.json(\n          { code: 'INTERACTION_BEFORE_ANSWER_FAILED', error: 'Could not save the answer. Try again.' },\n          { status: 503 },\n        )\n      }\n    }\n\n    let prepared: unknown\n    const durableArgs = options.durable\n      ? { ...lifecycleArgs, attemptKey }\n      : null\n    if (options.durable && durableArgs) {\n      try {\n        prepared = await options.durable.prepare(durableArgs)\n      } catch (error) {\n        logger.error('[interactions] durable prepare failed:', error)\n        return Response.json(\n          { code: 'INTERACTION_PREPARE_FAILED', error: 'Could not prepare the answer. Try again.' },\n          { status: 503 },\n        )\n      }\n      if (!answeredRequest) {\n        let reconciled: { settled: boolean }\n        try {\n          reconciled = await options.durable.reconcile({ ...durableArgs, prepared })\n        } catch (error) {\n          logger.error('[interactions] durable reconcile failed:', error)\n          reconciled = { settled: false }\n        }\n        if (reconciled.settled) return Response.json({ ok: true, idempotent: true })\n        return Response.json(\n          { code: 'INTERACTION_RECONCILIATION_PENDING', error: 'The answer status is still being checked. Retry with the same attempt.' },\n          { status: 503 },\n        )\n      }\n    }\n\n    const result = await respondToSessionInteraction(connection, { id: validation.id, ...answerPayload })\n    if (!result.succeeded) {\n      if (options.durable && durableArgs) {\n        let reconciled: { settled: boolean }\n        try {\n          reconciled = await options.durable.reconcile({ ...durableArgs, prepared })\n        } catch {\n          reconciled = { settled: false }\n        }\n        if (reconciled.settled) return Response.json({ ok: true, idempotent: true })\n        if (result.error.status === 404) {\n          return Response.json(\n            { code: 'INTERACTION_RECONCILIATION_PENDING', error: 'The answer status is still being checked. Retry with the same attempt.' },\n            { status: 503 },\n          )\n        }\n        try {\n          await options.durable.fail?.({ ...durableArgs, prepared, error: result.error })\n        } catch {\n          // The upstream failure remains authoritative; a persistence cleanup\n          // failure must not replace its client-facing mapping.\n        }\n      }\n      return mapInteractionRespondFailure(result.error, logger)\n    }\n\n    let remaining = await listSessionInteractions(connection)\n    const acknowledgedDuplicateIds: string[] = []\n    if (remaining.succeeded && answeredSignature) {\n      const remainingDuplicates = remaining.value.filter((item) => {\n        if (item.id === validation.id) return false\n        return questionInteractionContentSignature(interactionFromWireRequest(item)) === answeredSignature\n      })\n      for (const duplicate of remainingDuplicates) {\n        const duplicateResult = await respondToSessionInteraction(connection, { id: duplicate.id, ...answerPayload })\n        if (!duplicateResult.succeeded) break\n        acknowledgedDuplicateIds.push(duplicate.id)\n      }\n      if (remainingDuplicates.length > 0) remaining = await listSessionInteractions(connection)\n    }\n\n    // Prove the run actually unblocked: neither the answered id nor any\n    // content-duplicate may still be outstanding. If one is, the sidecar\n    // accepted the POST but did not release the run — report it rather than\n    // tell the user it was answered.\n    if (remaining.succeeded && remaining.value.some((item) => item.id === validation.id || (\n      answeredSignature && questionInteractionContentSignature(interactionFromWireRequest(item)) === answeredSignature\n    ))) {\n      logger.error('[interactions] respond returned ok but interaction is still pending:', {\n        sessionId: connection.sessionId,\n        interactionId: validation.id,\n      })\n      return Response.json(\n        { code: 'INTERACTION_STILL_PENDING', error: 'The agent did not accept the answer. Try answering again.' },\n        { status: 503 },\n      )\n    }\n\n    if (options.durable && durableArgs) {\n      try {\n        await options.durable.acknowledge({\n          ...durableArgs,\n          prepared,\n          duplicateIds: acknowledgedDuplicateIds,\n        })\n        await options.durable.finalize({\n          ...durableArgs,\n          prepared,\n          duplicateIds: acknowledgedDuplicateIds,\n        })\n      } catch (error) {\n        logger.error('[interactions] durable finalize failed:', error)\n        return Response.json(\n          { code: 'INTERACTION_FINALIZE_FAILED', error: 'The answer was accepted but is still being saved. Retry to reconcile it.' },\n          { status: 503 },\n        )\n      }\n    }\n\n    return Response.json({ ok: true })\n  }\n\n  return { list, answer }\n}\n"],"mappings":";;;;;;;AAyCA,IAAM,qBAAqB;AAI3B,SAAS,wBAAwB,OAAwB;AACvD,QAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACrE,SAAO,QACJ,QAAQ,qBAAqB,mBAAmB,EAChD,QAAQ,0CAA0C,gBAAgB;AACvE;AAEA,eAAe,kBACb,YACA,MAC6D;AAC7D,QAAM,UAAU,WAAW,aAAa;AACxC,QAAM,MAAM,GAAG,WAAW,WAAW,QAAQ,OAAO,EAAE,CAAC,oBAAoB,mBAAmB,WAAW,SAAS,CAAC;AACnH,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,QAAQ,KAAK;AAAA,MAC5B,QAAQ,KAAK;AAAA,MACb,SAAS;AAAA,QACP,GAAI,WAAW,YAAY,EAAE,eAAe,UAAU,WAAW,SAAS,GAAG,IAAI,CAAC;AAAA,QAClF,GAAI,KAAK,WAAW,SAAS,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,MACzE;AAAA,MACA,GAAI,KAAK,WAAW,SAAS,EAAE,MAAM,KAAK,UAAU,KAAK,IAAI,EAAE,IAAI,CAAC;AAAA,MACpE,QAAQ,YAAY,QAAQ,WAAW,aAAa,kBAAkB;AAAA,IACxE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,EAAE,MAAM,wBAAwB,SAAS,wBAAwB,GAAG,GAAG,QAAQ,EAAE;AAAA,IAC1F;AAAA,EACF;AACA,QAAM,MAAM,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AAChD,MAAI,SAAkC,CAAC;AACvC,MAAI;AACF,aAAS,MAAO,KAAK,MAAM,GAAG,IAAgC,CAAC;AAAA,EACjE,QAAQ;AAAA,EAER;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,gBAAiB,OAAO,SAAS,CAAC;AACxC,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO;AAAA,QACL,MAAM,OAAO,cAAc,SAAS,YAAY,cAAc,OAAO,cAAc,OAAO;AAAA,QAC1F,SAAS;AAAA,UACP,OAAO,cAAc,YAAY,YAAY,cAAc,UACvD,cAAc,UACd,wBAAwB,KAAK,MAAM,YAAY,SAAS,MAAM;AAAA,QACpE;AAAA,QACA,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,WAAW,MAAM,OAAO,OAAO;AAC1C;AAIA,eAAsB,wBACpB,YAC8D;AAC9D,QAAM,SAAS,MAAM,kBAAkB,YAAY,EAAE,QAAQ,MAAM,CAAC;AACpE,MAAI,CAAC,OAAO,UAAW,QAAO;AAC9B,QAAM,OAAO,OAAO,MAAM;AAC1B,MAAI,CAAC,MAAM,QAAQ,MAAM,YAAY,GAAG;AACtC,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,EAAE,MAAM,sBAAsB,SAAS,+CAA+C,QAAQ,IAAI;AAAA,IAC3G;AAAA,EACF;AACA,SAAO,EAAE,WAAW,MAAM,OAAO,KAAK,aAAyC;AACjF;AAKA,eAAsB,4BACpB,YACA,UAC0C;AAC1C,QAAM,SAAS,MAAM,kBAAkB,YAAY;AAAA,IACjD,QAAQ;AAAA,IACR,MAAM;AAAA,MACJ,IAAI,SAAS;AAAA,MACb,SAAS,SAAS;AAAA,MAClB,GAAI,SAAS,OAAO,EAAE,MAAM,SAAS,KAAK,IAAI,CAAC;AAAA,IACjD;AAAA,EACF,CAAC;AACD,MAAI,CAAC,OAAO,UAAW,QAAO;AAC9B,SAAO,EAAE,WAAW,MAAM,OAAO,OAAU;AAC7C;AAoCO,SAAS,uBAAuB,OAK3B;AACV,MAAI,MAAM,kBAAmB,QAAO;AACpC,MAAI,MAAM,kBAAkB,KAAM,QAAO;AACzC,MAAI,MAAM,2BAA2B,MAAM,wBAAwB,SAAS,EAAG,QAAO;AACtF,SAAO,wBAAwB,SAAS,MAAM,SAAS,EAAE,KAAK,MAAM,kBAAkB;AACxF;AAEA,IAAM,0BAA0B,CAAC,aAAa,UAAU,WAAW,WAAW,QAAQ,UAAU;AAEhG,eAAe,aACb,YACA,OAAmC,EAAE,QAAQ,MAAM,GACU;AAC7D,QAAM,UAAU,WAAW,aAAa;AACxC,QAAM,OAAO,GAAG,WAAW,WAAW,QAAQ,OAAO,EAAE,CAAC,oBAAoB,mBAAmB,WAAW,SAAS,CAAC;AACpH,QAAM,MAAM,KAAK,WAAW,SAAS,GAAG,IAAI,WAAW;AACvD,MAAI;AACJ,MAAI;AACF,eAAW,MAAM,QAAQ,KAAK;AAAA,MAC5B,QAAQ,KAAK;AAAA,MACb,SAAS;AAAA,QACP,GAAI,WAAW,YAAY,EAAE,eAAe,UAAU,WAAW,SAAS,GAAG,IAAI,CAAC;AAAA,QAClF,GAAI,KAAK,WAAW,SAAS,EAAE,gBAAgB,mBAAmB,IAAI,CAAC;AAAA,MACzE;AAAA,MACA,GAAI,KAAK,WAAW,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,MAC/C,QAAQ,YAAY,QAAQ,WAAW,aAAa,kBAAkB;AAAA,IACxE,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO,EAAE,MAAM,uBAAuB,SAAS,wBAAwB,GAAG,GAAG,QAAQ,IAAI;AAAA,IAC3F;AAAA,EACF;AACA,MAAI,SAAkC,CAAC;AACvC,MAAI;AACF,aAAU,MAAM,SAAS,KAAK;AAAA,EAChC,QAAQ;AACN,aAAS,CAAC;AAAA,EACZ;AACA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,gBAAiB,OAAO,SAAS,OAAO,OAAO,UAAU,WAC3D,OAAO,QACP,CAAC;AACL,WAAO;AAAA,MACL,WAAW;AAAA,MACX,OAAO;AAAA,QACL,MAAM,OAAO,cAAc,SAAS,YAAY,cAAc,OAC1D,cAAc,OACd;AAAA,QACJ,SAAS;AAAA,UACP,OAAO,cAAc,YAAY,YAAY,cAAc,UACvD,cAAc,UACd,mBAAmB,KAAK,MAAM,YAAY,SAAS,MAAM;AAAA,QAC/D;AAAA,QACA,QAAQ,SAAS;AAAA,MACnB;AAAA,IACF;AAAA,EACF;AACA,SAAO,EAAE,WAAW,MAAM,OAAO,OAAO;AAC1C;AAIA,SAAS,wBAAwB,SAAuD;AACtF,QAAM,OAAQ,QAAQ,QAAQ,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAChF,QAAM,UAAU,KAAK,WAAW,OAAO,KAAK,YAAY,WACpD,KAAK,UACL;AACJ,QAAM,kBAAkB,KAAK,mBAAmB,OAAO,KAAK,oBAAoB,WAC5E,KAAK,kBACL,QAAQ,mBAAmB,OAAO,QAAQ,oBAAoB,WAC5D,QAAQ,kBACR;AACN,QAAM,eAAe,QAAQ,2BAA2B,QAAQ;AAChE,SAAO;AAAA,IACL,GAAI,OAAO,QAAQ,UAAU,WAAW,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IACpE,GAAI,OAAO,QAAQ,sBAAsB,WACrC,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C,QAAQ,sBAAsB,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAAA,IACxE,GAAI,OAAO,QAAQ,kBAAkB,YAAY,EAAE,eAAe,QAAQ,cAAc,IAAI,CAAC;AAAA,IAC7F,GAAI,OAAO,QAAQ,sBAAsB,WACrC,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C,QAAQ,sBAAsB,OAAO,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAAA,IACxE,GAAI,OAAO,QAAQ,mBAAmB,WAClC,EAAE,gBAAgB,QAAQ,eAAe,IACzC,QAAQ,mBAAmB,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAAA,IAClE,GAAI,OAAO,QAAQ,gBAAgB,YAAY,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,gBAAgB,OAC9G,EAAE,aAAa,QAAQ,YAAY,IACnC,CAAC;AAAA,IACL,GAAI,MAAM,QAAQ,YAAY,IAAI,EAAE,yBAAyB,aAAa,IAAI,CAAC;AAAA,IAC/E,GAAI,mBAAmB,OAAO,gBAAgB,OAAO,YAAY,OAAO,QAAQ,sBAAsB,WAClG,EAAE,mBAAmB,gBAAgB,GAAG,IACxC,CAAC;AAAA,IACL,GAAI,mBAAmB,OAAO,gBAAgB,WAAW,WACrD,EAAE,uBAAuB,gBAAgB,OAAO,IAChD,oBAAoB,QAAQ,QAAQ,oBAAoB,OAAO,EAAE,uBAAuB,KAAK,IAAI,CAAC;AAAA,EACxG;AACF;AAGA,eAAsB,gBACpB,YACyD;AACzD,QAAM,SAAS,MAAM,aAAa,UAAU;AAC5C,MAAI,CAAC,OAAO,UAAW,QAAO;AAC9B,SAAO,EAAE,WAAW,MAAM,OAAO,wBAAwB,OAAO,KAAK,EAAE;AACzE;AAUA,eAAsB,aACpB,YACwD;AACxD,QAAM,SAAS,MAAM,aAAa,YAAY,EAAE,QAAQ,OAAO,CAAC;AAChE,MAAI,CAAC,OAAO,WAAW;AACrB,QAAI,OAAO,MAAM,WAAW,IAAK,QAAO,EAAE,WAAW,MAAM,OAAO,EAAE,WAAW,OAAO,QAAQ,YAAY,EAAE;AAC5G,WAAO;AAAA,EACT;AACA,QAAM,OAAQ,OAAO,MAAM,QAAQ,OAAO,OAAO,MAAM,SAAS,WAC5D,OAAO,MAAM,OACb,OAAO;AACX,QAAM,SAAS,OAAO,KAAK,WAAW,YAAY,KAAK,OAAO,KAAK,IAC/D,KAAK,OAAO,KAAK,IACjB,OAAO,KAAK,eAAe,YAAY,KAAK,WAAW,KAAK,IAC1D,KAAK,WAAW,KAAK,IACrB;AACN,SAAO;AAAA,IACL,WAAW;AAAA,IACX,OAAO;AAAA,MACL,WAAW,KAAK,cAAc;AAAA,MAC9B,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,MAC3B,GAAI,KAAK,WAAW,OAAO,KAAK,YAAY,WAAW,EAAE,SAAS,wBAAwB,OAAO,KAAK,EAAE,IAAI,CAAC;AAAA,IAC/G;AAAA,EACF;AACF;;;ACtQO,SAAS,8BAA8B,MAAgE;AAC5G,QAAM,KAAK,OAAO,KAAK,OAAO,YAAY,KAAK,KAAK,KAAK,KAAK;AAC9D,MAAI,CAAC,GAAI,QAAO,EAAE,IAAI,OAAO,OAAO,yBAAyB;AAC7D,QAAM,UAAU,KAAK;AACrB,MAAI,YAAY,cAAc,YAAY,YAAY;AACpD,WAAO,EAAE,IAAI,OAAO,OAAO,iDAAiD;AAAA,EAC9E;AACA,MAAI,KAAK,SAAS,OAAW,QAAO,EAAE,IAAI,MAAM,IAAI,QAAQ;AAC5D,MAAI,CAAC,KAAK,QAAQ,OAAO,KAAK,SAAS,YAAY,MAAM,QAAQ,KAAK,IAAI,GAAG;AAC3E,WAAO,EAAE,IAAI,OAAO,OAAO,mDAAmD;AAAA,EAChF;AACA,QAAM,OAAwB,CAAC;AAC/B,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,IAAI,GAAG;AACpD,QAAI,CAAC,0BAA0B,GAAG,GAAG;AACnC,aAAO,EAAE,IAAI,OAAO,OAAO,wFAAwF;AAAA,IACrH;AACA,UAAM,aACJ,OAAO,UAAU,YAAY,OAAO,UAAU,YAAY,OAAO,UAAU,aAC1E,MAAM,QAAQ,KAAK,KAAK,MAAM,MAAM,CAAC,SAAS,OAAO,SAAS,QAAQ;AACzE,QAAI,CAAC,YAAY;AACf,aAAO,EAAE,IAAI,OAAO,OAAO,kFAAkF;AAAA,IAC/G;AACA,SAAK,GAAG,IAAI;AAAA,EACd;AACA,SAAO,EAAE,IAAI,MAAM,IAAI,SAAS,KAAK;AACvC;AAQO,SAAS,6BACd,OACA,SAAiC,SACvB;AACV,MAAI,MAAM,SAAS,8BAA8B;AAC/C,WAAO,SAAS;AAAA,MACd,EAAE,MAAM,8BAA8B,OAAO,2FAAsF;AAAA,MACnI,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,MAAM,WAAW,KAAK;AACxB,WAAO,SAAS;AAAA,MACd,EAAE,MAAM,uBAAuB,OAAO,oDAAoD;AAAA,MAC1F,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,MAAI,MAAM,WAAW,OAAO,MAAM,SAAS,mBAAmB;AAC5D,WAAO,SAAS;AAAA,MACd,EAAE,MAAM,4BAA4B,OAAO,qDAAqD;AAAA,MAChG,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACA,SAAO,MAAM,kCAAkC,KAAK;AACpD,SAAO,SAAS;AAAA,IACd,EAAE,MAAM,+BAA+B,OAAO,wCAAwC;AAAA,IACtF,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAgGO,SAAS,6BAA6B,SAAgE;AAC3G,QAAM,SAAS,QAAQ,UAAU;AAEjC,iBAAe,KAAK,SAAqC;AACvD,UAAM,aAAa,MAAM,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,OAAO,CAAC;AAC9E,QAAI,CAAC,WAAW,IAAI;AAClB,UAAI,cAAc,WAAY,QAAO,WAAW;AAChD,aAAO,SAAS,KAAK,EAAE,cAAc,CAAC,GAAG,aAAa,WAAW,YAAY,CAAC;AAAA,IAChF;AACA,UAAM,SAAS,MAAM,wBAAwB,WAAW,UAAU;AAClE,QAAI,CAAC,OAAO,WAAW;AACrB,aAAO,KAAK,+BAA+B,OAAO,KAAK;AACvD,aAAO,SAAS,KAAK,EAAE,cAAc,CAAC,GAAG,aAAa,OAAO,MAAM,KAAK,CAAC;AAAA,IAC3E;AACA,WAAO,SAAS,KAAK,EAAE,cAAc,OAAO,MAAM,CAAC;AAAA,EACrD;AAEA,iBAAe,OAAO,SAAqC;AACzD,UAAM,OAAO,MAAM,QAAQ,KAAK,EAAE,MAAM,MAAM,IAAI;AAClD,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,IAAI,GAAG;AAC5D,aAAO,SAAS,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtE;AACA,UAAM,aAAa,8BAA8B,IAAI;AACrD,QAAI,CAAC,WAAW,GAAI,QAAO,SAAS,KAAK,EAAE,OAAO,WAAW,MAAM,GAAG,EAAE,QAAQ,IAAI,CAAC;AACrF,UAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,KAAK,IAAI;AAClF,QAAI,QAAQ,WAAW,CAAC,YAAY;AAClC,aAAO,SAAS,KAAK,EAAE,OAAO,oDAAoD,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACtG;AAEA,UAAM,aAAa,MAAM,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,UAAU,KAAK,CAAC;AACtF,QAAI,CAAC,WAAW,IAAI;AAClB,UAAI,cAAc,WAAY,QAAO,WAAW;AAChD,aAAO;AAAA,QACL,EAAE,MAAM,WAAW,aAAa,SAAS,+BAA+B,QAAQ,EAAE;AAAA,QAClF;AAAA,MACF;AAAA,IACF;AACA,UAAM,aAAa,WAAW;AAC9B,UAAM,gBAAgB;AAAA,MACpB,SAAS,WAAW;AAAA,MACpB,GAAI,WAAW,OAAO,EAAE,MAAM,WAAW,KAAK,IAAI,CAAC;AAAA,IACrD;AAKA,UAAM,SAAS,MAAM,wBAAwB,UAAU;AACvD,QAAI,CAAC,OAAO,cAAc,QAAQ,gBAAgB,QAAQ,UAAU;AAClE,aAAO,6BAA6B,OAAO,OAAO,MAAM;AAAA,IAC1D;AACA,UAAM,kBAAkB,OAAO,YAAY,OAAO,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,WAAW,EAAE,IAAI;AACpG,QAAI,QAAQ,gBAAgB,CAAC,QAAQ,WAAW,CAAC,iBAAiB;AAChE,aAAO;AAAA,QACL,EAAE,MAAM,aAAa,SAAS,yBAAyB,QAAQ,IAAI;AAAA,QACnE;AAAA,MACF;AAAA,IACF;AACA,UAAM,oBAAoB,kBACtB,oCAAoC,2BAA2B,eAAe,CAAC,IAC/E;AACJ,UAAM,oBAAoB,OAAO,aAAa,oBAC1C,OAAO,MAAM,OAAO,CAAC,SAAS,KAAK,OAAO,WAAW,MACnD,oCAAoC,2BAA2B,IAAI,CAAC,MAAM,iBAC3E,IACD,CAAC;AAEL,UAAM,gBAA6C;AAAA,MACjD;AAAA,MACA;AAAA,MACA,QAAQ;AAAA,MACR;AAAA,MACA,aAAa,OAAO,YAAY,OAAO,QAAQ,CAAC;AAAA,MAChD,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI,QAAQ,gBAAgB,iBAAiB;AAC3C,UAAI;AACF,cAAM,QAAQ,aAAa,aAAa;AAAA,MAC1C,SAAS,OAAO;AACd,eAAO,MAAM,uCAAuC,KAAK;AACzD,eAAO,SAAS;AAAA,UACd,EAAE,MAAM,oCAAoC,OAAO,wCAAwC;AAAA,UAC3F,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,QAAI;AACJ,UAAM,cAAc,QAAQ,UACxB,EAAE,GAAG,eAAe,WAAW,IAC/B;AACJ,QAAI,QAAQ,WAAW,aAAa;AAClC,UAAI;AACF,mBAAW,MAAM,QAAQ,QAAQ,QAAQ,WAAW;AAAA,MACtD,SAAS,OAAO;AACd,eAAO,MAAM,0CAA0C,KAAK;AAC5D,eAAO,SAAS;AAAA,UACd,EAAE,MAAM,8BAA8B,OAAO,2CAA2C;AAAA,UACxF,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AACA,UAAI,CAAC,iBAAiB;AACpB,YAAI;AACJ,YAAI;AACF,uBAAa,MAAM,QAAQ,QAAQ,UAAU,EAAE,GAAG,aAAa,SAAS,CAAC;AAAA,QAC3E,SAAS,OAAO;AACd,iBAAO,MAAM,4CAA4C,KAAK;AAC9D,uBAAa,EAAE,SAAS,MAAM;AAAA,QAChC;AACA,YAAI,WAAW,QAAS,QAAO,SAAS,KAAK,EAAE,IAAI,MAAM,YAAY,KAAK,CAAC;AAC3E,eAAO,SAAS;AAAA,UACd,EAAE,MAAM,sCAAsC,OAAO,yEAAyE;AAAA,UAC9H,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,SAAS,MAAM,4BAA4B,YAAY,EAAE,IAAI,WAAW,IAAI,GAAG,cAAc,CAAC;AACpG,QAAI,CAAC,OAAO,WAAW;AACrB,UAAI,QAAQ,WAAW,aAAa;AAClC,YAAI;AACJ,YAAI;AACF,uBAAa,MAAM,QAAQ,QAAQ,UAAU,EAAE,GAAG,aAAa,SAAS,CAAC;AAAA,QAC3E,QAAQ;AACN,uBAAa,EAAE,SAAS,MAAM;AAAA,QAChC;AACA,YAAI,WAAW,QAAS,QAAO,SAAS,KAAK,EAAE,IAAI,MAAM,YAAY,KAAK,CAAC;AAC3E,YAAI,OAAO,MAAM,WAAW,KAAK;AAC/B,iBAAO,SAAS;AAAA,YACd,EAAE,MAAM,sCAAsC,OAAO,yEAAyE;AAAA,YAC9H,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AACA,YAAI;AACF,gBAAM,QAAQ,QAAQ,OAAO,EAAE,GAAG,aAAa,UAAU,OAAO,OAAO,MAAM,CAAC;AAAA,QAChF,QAAQ;AAAA,QAGR;AAAA,MACF;AACA,aAAO,6BAA6B,OAAO,OAAO,MAAM;AAAA,IAC1D;AAEA,QAAI,YAAY,MAAM,wBAAwB,UAAU;AACxD,UAAM,2BAAqC,CAAC;AAC5C,QAAI,UAAU,aAAa,mBAAmB;AAC5C,YAAM,sBAAsB,UAAU,MAAM,OAAO,CAAC,SAAS;AAC3D,YAAI,KAAK,OAAO,WAAW,GAAI,QAAO;AACtC,eAAO,oCAAoC,2BAA2B,IAAI,CAAC,MAAM;AAAA,MACnF,CAAC;AACD,iBAAW,aAAa,qBAAqB;AAC3C,cAAM,kBAAkB,MAAM,4BAA4B,YAAY,EAAE,IAAI,UAAU,IAAI,GAAG,cAAc,CAAC;AAC5G,YAAI,CAAC,gBAAgB,UAAW;AAChC,iCAAyB,KAAK,UAAU,EAAE;AAAA,MAC5C;AACA,UAAI,oBAAoB,SAAS,EAAG,aAAY,MAAM,wBAAwB,UAAU;AAAA,IAC1F;AAMA,QAAI,UAAU,aAAa,UAAU,MAAM,KAAK,CAAC,SAAS,KAAK,OAAO,WAAW,MAC/E,qBAAqB,oCAAoC,2BAA2B,IAAI,CAAC,MAAM,iBAChG,GAAG;AACF,aAAO,MAAM,wEAAwE;AAAA,QACnF,WAAW,WAAW;AAAA,QACtB,eAAe,WAAW;AAAA,MAC5B,CAAC;AACD,aAAO,SAAS;AAAA,QACd,EAAE,MAAM,6BAA6B,OAAO,4DAA4D;AAAA,QACxG,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI,QAAQ,WAAW,aAAa;AAClC,UAAI;AACF,cAAM,QAAQ,QAAQ,YAAY;AAAA,UAChC,GAAG;AAAA,UACH;AAAA,UACA,cAAc;AAAA,QAChB,CAAC;AACD,cAAM,QAAQ,QAAQ,SAAS;AAAA,UAC7B,GAAG;AAAA,UACH;AAAA,UACA,cAAc;AAAA,QAChB,CAAC;AAAA,MACH,SAAS,OAAO;AACd,eAAO,MAAM,2CAA2C,KAAK;AAC7D,eAAO,SAAS;AAAA,UACd,EAAE,MAAM,+BAA+B,OAAO,2EAA2E;AAAA,UACzH,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAAA,IACF;AAEA,WAAO,SAAS,KAAK,EAAE,IAAI,KAAK,CAAC;AAAA,EACnC;AAEA,SAAO,EAAE,MAAM,OAAO;AACxB;","names":[]}

package/dist/{chunk-QGHQ2IRC.js → chunk-4XNCMUVI.js}

@@ -155,8 +155,213 @@ async function readSandboxBinaryBytes(box, absolutePath, expectedSize, options)
   return { succeeded: true, value: { bytes, size: expectedSize } };
 }
 
-// src/sandbox/diagnostics.ts
+// src/sandbox/recovery.ts
 var EGRESS_PROXY_RECOVERY_REQUIRED = "EGRESS_PROXY_RECOVERY_REQUIRED";
+var EGRESS_PROXY_RECOVERY_PHASE = "egress_proxy_recovery";
+var WORKSPACE_SANDBOX_MISSING = "WORKSPACE_SANDBOX_MISSING";
+var WORKSPACE_SANDBOX_HOST_EXHAUSTED = "WORKSPACE_SANDBOX_HOST_EXHAUSTED";
+var WORKSPACE_SANDBOX_UNRECOVERABLE = "WORKSPACE_SANDBOX_UNRECOVERABLE";
+var WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+var CODES = {
+  [EGRESS_PROXY_RECOVERY_REQUIRED]: { snapshotUsable: true },
+  [WORKSPACE_SANDBOX_MISSING]: { snapshotUsable: false },
+  [WORKSPACE_SANDBOX_HOST_EXHAUSTED]: { snapshotUsable: false },
+  [WORKSPACE_SANDBOX_UNRECOVERABLE]: { snapshotUsable: false }
+};
+var ACTIONS = {
+  confirmation_required: { replacementChosen: false },
+  deletion_declined: { replacementChosen: false },
+  replacement_authorized: { replacementChosen: false },
+  snapshot_replacement_authorized: { replacementChosen: false },
+  replacement_started: { replacementChosen: true },
+  replacement_completed: { replacementChosen: true },
+  snapshot_replacement_started: { replacementChosen: true },
+  snapshot_restore_failed: { replacementChosen: true },
+  snapshot_replacement_completed: { replacementChosen: true },
+  missing_replacement_started: { replacementChosen: true },
+  missing_replacement_completed: { replacementChosen: true },
+  unrecoverable_replacement_started: { replacementChosen: true },
+  unrecoverable_replacement_completed: { replacementChosen: true }
+};
+var WorkspaceSandboxRecoveryRequiredError = class extends Error {
+  code = EGRESS_PROXY_RECOVERY_REQUIRED;
+  status = 409;
+  phase = EGRESS_PROXY_RECOVERY_PHASE;
+  recovery;
+  constructor(recovery, cause) {
+    super(workspaceSandboxRecoveryMessage(recovery), { cause });
+    this.name = "WorkspaceSandboxRecoveryRequiredError";
+    this.recovery = recovery;
+  }
+};
+function isRecord(value) {
+  return typeof value === "object" && value !== null;
+}
+function asNonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0 ? value : void 0;
+}
+function errorChain(error) {
+  const pending = [error];
+  const visited = /* @__PURE__ */ new Set();
+  const chain = [];
+  while (pending.length > 0) {
+    const current = pending.shift();
+    if (current === void 0 || current === null || visited.has(current)) continue;
+    visited.add(current);
+    chain.push(current);
+    if (!isRecord(current)) continue;
+    if (current.cause !== void 0) pending.push(current.cause);
+    if (Array.isArray(current.errors)) pending.push(...current.errors);
+  }
+  return chain;
+}
+function isEgressProxyRecoveryRequiredError(error) {
+  return errorChain(error).some(
+    (current) => isRecord(current) && current.code === EGRESS_PROXY_RECOVERY_REQUIRED
+  );
+}
+function isWorkspaceSandboxSnapshotRestoreError(error) {
+  return errorChain(error).some((current) => {
+    const message = current instanceof Error ? current.message : isRecord(current) && typeof current.message === "string" ? current.message : "";
+    return /snapshot|fromSnapshot|restore/i.test(message);
+  });
+}
+function assessWorkspaceSandboxSnapshot(snapshot, sandboxId, now = Date.now()) {
+  if (!snapshot) return { availability: "missing", freshness: "unknown" };
+  const createdAt = Date.parse(snapshot.createdAt);
+  const ageMs = now - createdAt;
+  const isFresh = snapshot.fromSandboxId === sandboxId && Number.isFinite(createdAt) && ageMs >= 0 && ageMs <= WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS;
+  return isFresh ? { availability: "available", freshness: "fresh", snapshot } : { availability: "stale", freshness: "stale", snapshot };
+}
+function isSnapshotAssessment(value) {
+  if (!isRecord(value)) return false;
+  const availability = value.availability;
+  const freshness = value.freshness;
+  return (availability === "available" || availability === "missing" || availability === "stale") && (freshness === "fresh" || freshness === "stale" || freshness === "unknown");
+}
+function isWorkspaceSandboxRecoveryAction(value) {
+  return typeof value === "string" && Object.hasOwn(ACTIONS, value);
+}
+function isWorkspaceSandboxRecoveryCode(value) {
+  return typeof value === "string" && Object.hasOwn(CODES, value);
+}
+function isWorkspaceSandboxRecoveryState(value) {
+  if (!isRecord(value)) return false;
+  return isWorkspaceSandboxRecoveryCode(value.code) && !!asNonEmptyString(value.sandboxId) && !!asNonEmptyString(value.detectedAt) && isSnapshotAssessment(value.snapshot) && isWorkspaceSandboxRecoveryAction(value.action);
+}
+function workspaceSandboxRecoveryFromError(error) {
+  for (const current of errorChain(error)) {
+    if (!isRecord(current) || !isWorkspaceSandboxRecoveryState(current.recovery)) continue;
+    return current.recovery;
+  }
+  return void 0;
+}
+function workspaceSandboxRecoveryMessage(recovery) {
+  if (recovery.code === WORKSPACE_SANDBOX_MISSING) {
+    return "The sandbox behind this workspace no longer exists on the platform. A replacement is being provisioned and your saved work is restored into it.";
+  }
+  if (!CODES[recovery.code].snapshotUsable) {
+    return "The sandbox behind this workspace could not be started again. A replacement is being provisioned and your saved work is restored into it.";
+  }
+  if (recovery.action === "deletion_declined") {
+    return "Sandbox recovery remains paused because replacement was declined. The stopped sandbox has not been deleted.";
+  }
+  if (recovery.action === "confirmation_required") {
+    const snapshotReason = recovery.snapshot.availability === "missing" ? "No restorable sandbox snapshot is available." : "The available sandbox snapshot is stale.";
+    return `Sandbox recovery requires owner confirmation before replacement. ${snapshotReason} The stopped sandbox has not been deleted.`;
+  }
+  if (recovery.action === "snapshot_restore_failed") {
+    return "Sandbox replacement could not restore its verified snapshot, and an empty fallback was not created because it could lose workspace state.";
+  }
+  return "Sandbox recovery is required before chat can continue. The stopped sandbox has not been deleted.";
+}
+function workspaceSandboxRecoveryRecommendedActions(recovery) {
+  if (!CODES[recovery.code].snapshotUsable) {
+    return ["Retry after the replacement sandbox finishes provisioning."];
+  }
+  if (recovery.action === "deletion_declined") {
+    return ["Keep the stopped sandbox for support or ask a workspace owner to authorize replacement."];
+  }
+  if (recovery.action === "confirmation_required") {
+    return ["An owner can explicitly replace the sandbox after accepting loss of unsnapshotted sandbox-local changes."];
+  }
+  if (recovery.action === "snapshot_restore_failed") {
+    return ["Retry snapshot restoration or contact support. An empty replacement is not created automatically."];
+  }
+  return ["Retry after sandbox recovery completes."];
+}
+function workspaceSandboxRecoveryDiagnostic(recovery) {
+  return {
+    sandboxId: recovery.sandboxId,
+    recoveryCode: recovery.code,
+    snapshotAvailability: recovery.snapshot.availability,
+    snapshotFreshness: recovery.snapshot.freshness,
+    selectedRecoveryAction: recovery.action,
+    replacementSandboxId: recovery.replacementSandboxId
+  };
+}
+function preferredWorkspaceSandboxRecoveryBoxKey(recovery) {
+  if (!recovery?.replacementBoxKey) return void 0;
+  return ACTIONS[recovery.action].replacementChosen ? recovery.replacementBoxKey : void 0;
+}
+function shouldRestoreWorkspaceSandboxRecovery(recovery) {
+  if (!recovery) return false;
+  if (!CODES[recovery.code].snapshotUsable) return false;
+  return !!preferredWorkspaceSandboxRecoveryBoxKey(recovery) && recovery.snapshot.availability === "available";
+}
+function createWorkspaceSandboxRecoveryManager(store) {
+  async function record(workspaceId, recovery) {
+    await store.write(workspaceId, recovery);
+  }
+  return {
+    read: store.read,
+    record,
+    async decide({ workspaceId, sandboxId, decision, replacementBoxKey }) {
+      const current = await store.read(workspaceId);
+      if (!current || current.sandboxId !== sandboxId) return void 0;
+      const next = {
+        ...current,
+        action: decision === "replace" ? current.snapshot.availability === "available" ? "snapshot_replacement_authorized" : "replacement_authorized" : "deletion_declined",
+        confirmedAt: (/* @__PURE__ */ new Date()).toISOString(),
+        ...decision === "replace" && replacementBoxKey ? { replacementBoxKey } : {}
+      };
+      await record(workspaceId, next);
+      return next;
+    },
+    async complete({ workspaceId, replacementSandboxId }) {
+      const current = await store.read(workspaceId);
+      if (!current) return void 0;
+      const next = {
+        ...current,
+        action: completionFor(current.action),
+        replacementSandboxId
+      };
+      await record(workspaceId, next);
+      return next;
+    }
+  };
+}
+function completionFor(action) {
+  switch (action) {
+    case "missing_replacement_started":
+      return "missing_replacement_completed";
+    case "unrecoverable_replacement_started":
+      return "unrecoverable_replacement_completed";
+    case "snapshot_replacement_started":
+    case "snapshot_replacement_authorized":
+      return "snapshot_replacement_completed";
+    default:
+      return "replacement_completed";
+  }
+}
+var WORKSPACE_SANDBOX_RECOVERY_ACTIONS = Object.keys(
+  ACTIONS
+);
+var WORKSPACE_SANDBOX_RECOVERY_CODES = Object.keys(
+  CODES
+);
+
+// src/sandbox/diagnostics.ts
 var SAFE_ERROR_FIELDS = [
   "code",
   "status",
@@ -167,7 +372,7 @@ var SAFE_ERROR_FIELDS = [
   "sidecarVersion",
   "containerImage"
 ];
-function isRecord(value) {
+function isRecord2(value) {
   return typeof value === "object" && value !== null;
 }
 function asSafeScalar(value) {
@@ -197,18 +402,18 @@ function readMessage(value) {
   if (typeof value === "string" && value.length > 0) return redactDiagnosticText(value);
   if (typeof value === "number" && Number.isFinite(value)) return String(value);
   if (typeof value === "boolean") return String(value);
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const message = value.message;
   return typeof message === "string" && message.length > 0 ? redactDiagnosticText(message) : void 0;
 }
 function readName(value) {
   if (value instanceof Error) return redactDiagnosticText(value.name);
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   const name = value.name;
   return typeof name === "string" && name.length > 0 ? redactDiagnosticText(name) : void 0;
 }
 function readCause(value) {
-  if (!isRecord(value)) return void 0;
+  if (!isRecord2(value)) return void 0;
   return value.cause;
 }
 function serializeSandboxProvisioningError(error, options = {}) {
@@ -228,13 +433,13 @@ function serializeSandboxProvisioningError(error, options = {}) {
       });
       break;
     }
-    if (isRecord(current)) seen.add(current);
+    if (isRecord2(current)) seen.add(current);
     const cause = {};
     const name = readName(current);
     const message = readMessage(current);
     if (name) cause.name = name;
     if (message) cause.message = message;
-    if (isRecord(current)) {
+    if (isRecord2(current)) {
       for (const field of SAFE_ERROR_FIELDS) {
         const safeValue = asSafeScalar(current[field]);
         if (safeValue !== void 0) {
@@ -245,7 +450,7 @@ function serializeSandboxProvisioningError(error, options = {}) {
     if (Object.keys(cause).length > 0) causes.push(cause);
     current = readCause(current);
   }
-  if (!cycle && isRecord(current) && seen.has(current)) {
+  if (!cycle && isRecord2(current) && seen.has(current)) {
     cycle = true;
     causes.push({
       name: "CauseChainCycle",
@@ -1940,6 +2145,27 @@ export {
   statSandboxFileSize,
   readSandboxBinaryBytes,
   EGRESS_PROXY_RECOVERY_REQUIRED,
+  EGRESS_PROXY_RECOVERY_PHASE,
+  WORKSPACE_SANDBOX_MISSING,
+  WORKSPACE_SANDBOX_HOST_EXHAUSTED,
+  WORKSPACE_SANDBOX_UNRECOVERABLE,
+  WORKSPACE_SANDBOX_SNAPSHOT_MAX_AGE_MS,
+  WorkspaceSandboxRecoveryRequiredError,
+  isEgressProxyRecoveryRequiredError,
+  isWorkspaceSandboxSnapshotRestoreError,
+  assessWorkspaceSandboxSnapshot,
+  isWorkspaceSandboxRecoveryAction,
+  isWorkspaceSandboxRecoveryCode,
+  isWorkspaceSandboxRecoveryState,
+  workspaceSandboxRecoveryFromError,
+  workspaceSandboxRecoveryMessage,
+  workspaceSandboxRecoveryRecommendedActions,
+  workspaceSandboxRecoveryDiagnostic,
+  preferredWorkspaceSandboxRecoveryBoxKey,
+  shouldRestoreWorkspaceSandboxRecovery,
+  createWorkspaceSandboxRecoveryManager,
+  WORKSPACE_SANDBOX_RECOVERY_ACTIONS,
+  WORKSPACE_SANDBOX_RECOVERY_CODES,
   serializeSandboxProvisioningError,
   formatSandboxProvisioningSupportDetails,
   isSandboxAuthFailure,
@@ -1998,4 +2224,4 @@ export {
   isTerminalPromptEvent,
   detectInteractiveQuestion
 };
-//# sourceMappingURL=chunk-QGHQ2IRC.js.map
+//# sourceMappingURL=chunk-4XNCMUVI.js.map