@tangle-network/agent-provider-cli-bridge 2.0.7 → 2.0.9

package/dist/sandbox/provider.js

@@ -40,6 +40,14 @@ export function createBridgeSandboxProvider(options) {
     async function create(input, restore) {
         input.signal?.throwIfAborted();
         refuseUnsupportedCreateInput(input, vendor.support);
+        // A caller's requested lifetime can only shorten the configured one; the vendor still enforces the wall clock.
+        let lifetimeRequested = lifetimeMs;
+        if (input.maxLifetimeMs !== undefined) {
+            if (!Number.isSafeInteger(input.maxLifetimeMs) || input.maxLifetimeMs < 1) {
+                throw new EnvironmentProviderError("invalid_input", "maxLifetimeMs must be a positive safe integer of milliseconds", { path: "maxLifetimeMs" });
+            }
+            lifetimeRequested = Math.min(lifetimeMs, input.maxLifetimeMs);
+        }
         if (restore !== undefined && input.workspace?.environment !== undefined) {
             throw new EnvironmentProviderError("refused", "a fork restores its checkpoint; workspace.environment names a different one", { path: "workspace.environment" });
         }
@@ -60,7 +68,7 @@ export function createBridgeSandboxProvider(options) {
                 ...(input.name === undefined ? {} : { name: input.name }),
                 metadata: { ...stringMetadata(input.metadata), [BRIDGE_RUN_TAG]: runTag },
                 env: input.env ?? {},
-                lifetimeMs,
+                lifetimeMs: lifetimeRequested,
                 ...(input.workspace?.environment === undefined ? {} : { environment: input.workspace.environment }),
                 ...(restore === undefined ? {} : { snapshot: restore.snapshot }),
                 ...(input.workspace?.image === undefined ? {} : { image: input.workspace.image }),

package/dist/sandbox/refusal.js

@@ -107,6 +107,12 @@ export function refuseUnsupportedCreateInput(input, support) {
         refuse("idempotencyKey", "durable keyed create is not implemented");
     if (input.billingOwner !== undefined)
         refuse("billingOwner", "billing owners are not supported");
+    if (input.deleteAfterStoppedMs !== undefined)
+        refuse("deleteAfterStoppedMs", "stopped-generation retirement is not supported");
+    if (input.retain !== undefined)
+        refuse("retain", "stopped-generation retention is not supported");
+    if (input.idleTimeoutMs !== undefined)
+        refuse("idleTimeoutMs", "these sandboxes enforce a lifetime, not an idle timeout");
     if (input.secrets !== undefined)
         refuse("secrets", "secrets are not supported; pass env");
     if (input.proxySecrets !== undefined)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/agent-provider-cli-bridge",
-  "version": "2.0.7",
+  "version": "2.0.9",
   "description": "AgentEnvironmentProvider adapter for cli-bridge retained sessions and one-shot turns",
   "type": "module",
   "license": "MIT",
@@ -37,7 +37,7 @@
   ],
   "dependencies": {
     "@tangle-network/agent-core": "^1.0.2",
-    "@tangle-network/agent-interface": "^5.10.12",
+    "@tangle-network/agent-interface": "^5.10.19",
     "@tangle-network/agent-profile-materialize": "1.1.4",
     "@tangle-network/cli-agent-registry": "^0.14.0",
     "undici": "8.12.3"