@tangle-network/agent-provider-cli-bridge 0.9.3 → 0.9.4

package/README.md

@@ -8,6 +8,10 @@ import { createCliBridgeProvider } from '@tangle-network/agent-provider-cli-brid
 const provider = createCliBridgeProvider({
   baseUrl: 'http://127.0.0.1:8787',
   bearerToken: process.env.CLI_BRIDGE_TOKEN,
+  defaultExecution: {
+    kind: 'host',
+    jail: { mode: 'fs-jail' },
+  },
 })
 
 const environment = await provider.create({
@@ -46,6 +50,15 @@ The lookup returns the server-issued digest only when all five planned coordinat
 The bridge model is selected from run data in this order: the turn, the provider default, or the profile's `harness` plus `model.default`.
 Execution fails before network use when none is present.
 
+`defaultExecution` is the existing cli-bridge `execution` request object.
+The provider forwards it unchanged to the Bridge session or chat request.
+Host execution accepts `jail`, `netJail`, and `timeoutMs`.
+Sandbox execution accepts `repoUrl`, `gitRef`, `capability`, `ttlSeconds`, `netJail`, and `timeoutMs`.
+The Bridge validates the object and applies its operator confinement rules.
+Retained native sessions currently require `kind: 'host'`.
+The provider rejects a sandbox default before it creates the retained session; use one-shot execution for `kind: 'sandbox'`.
+The Bridge currently refuses `netJail` with `kind: 'sandbox'`; use the sandbox's own egress policy.
+
 Passing the same `sessionId` on later turns continues the same CLI conversation.
 `executionId` gives a turn stable bridge identity, and `lastEventId` reattaches after a reader failure.
 `dispatch()` starts a bridge-owned durable run and returns after detaching its HTTP reader.

package/dist/index.d.ts

@@ -3,6 +3,7 @@ import { type AgentExactRunControlRef, type HarnessType } from "@tangle-network/
 import { type CliBridgeRunLookupInput } from "./retained-control.js";
 import { type CliBridgeProviderOptions } from "./provider-options.js";
 export type { CliBridgeProviderOptions } from "./provider-options.js";
+export type { CliBridgeExecution } from "./provider-options.js";
 export type { CliBridgeRunLookupInput } from "./retained-control.js";
 export { safeEndpointFromBaseUrl } from "./observation.js";
 export interface CliBridgeProvider extends AgentEnvironmentProvider {

package/dist/provider-options.d.ts

@@ -1,19 +1,40 @@
 import type { AgentEnvironmentCapabilities } from "@tangle-network/agent-interface/environment-provider";
 export declare const MAX_CLI_BRIDGE_TIMEOUT_MS = 2147483647;
+/**
+ * The execution object accepted by cli-bridge's request wire contract.
+ *
+ * The provider forwards this object unchanged as `execution`; cli-bridge owns
+ * validation, confinement resolution, and execution placement.
+ */
+export type CliBridgeExecution = {
+    kind: "host";
+    jail?: {
+        mode?: "off" | "write-jail" | "fs-jail";
+        root?: string;
+    };
+    netJail?: {
+        mode?: "off" | "net-jail";
+        allow?: string[];
+    };
+    timeoutMs?: number;
+} | {
+    kind: "sandbox";
+    repoUrl?: string;
+    gitRef?: string;
+    capability?: string;
+    ttlSeconds?: number;
+    netJail?: {
+        mode?: "off" | "net-jail";
+        allow?: string[];
+    };
+    timeoutMs?: number;
+};
 export interface CliBridgeProviderOptions {
     baseUrl: string;
     bearerToken?: string;
     defaultModel?: string;
     defaultMode?: "byob" | "hosted-safe" | "hosted-sandboxed";
-    defaultExecution?: {
-        kind: "host";
-    } | {
-        kind: "sandbox";
-        repoUrl?: string;
-        gitRef?: string;
-        capability?: string;
-        ttlSeconds?: number;
-    };
+    defaultExecution?: CliBridgeExecution;
     /** Maximum wait for response headers. Defaults to no timeout. */
     headersTimeoutMs?: number;
     /** Maximum idle time between response body chunks. Defaults to no timeout. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-provider-cli-bridge",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "description": "AgentEnvironmentProvider adapter for cli-bridge retained sessions and one-shot turns",
   "type": "module",
   "license": "MIT",