@tangle-network/agent-runtime 0.174.1 → 0.177.0

package/dist/durable-file-g3YdfEh4.js

@@ -0,0 +1,131 @@
+import { randomUUID } from "node:crypto";
+import { dirname, join, relative, resolve } from "node:path";
+import { closeSync, constants, existsSync, fchmodSync, fsyncSync, linkSync, lstatSync, openSync, renameSync, unlinkSync, writeFileSync, writeSync } from "node:fs";
+//#region src/runtime/supervise/durable-file.ts
+/**
+* Small filesystem durability primitives for Runtime-owned state.
+*
+* Callers must validate their path and parent directory before invoking these functions.
+* The exclusive writer protects a no-clobber publication race; the atomic writer replaces one
+* state file after its temporary contents reach stable storage.
+*
+* @internal
+*/
+/** Publish a new file without replacing a concurrent winner. */
+function publishExclusiveDurableFile(filePath, content, options = {}) {
+	const temporaryPath = `${filePath}.${randomUUID()}.tmp`;
+	let operationFailed = false;
+	let operationError;
+	let published = false;
+	try {
+		writeExclusiveDurableFile(temporaryPath, content, options);
+		try {
+			linkSync(temporaryPath, filePath);
+			syncDurableDirectory(dirname(filePath));
+			published = true;
+		} catch (error) {
+			if (!isAlreadyExistsError(error)) throw error;
+		}
+	} catch (error) {
+		operationFailed = true;
+		operationError = error;
+	}
+	let cleanupError;
+	try {
+		unlinkSync(temporaryPath);
+	} catch (error) {
+		if (!isNoEntryError(error)) cleanupError = error;
+	}
+	if (operationFailed) throw operationError;
+	if (cleanupError !== void 0) throw cleanupError;
+	return published;
+}
+/** Fsync a directory after publishing a durable file entry. */
+function syncDurableDirectory(directoryPath) {
+	const fd = openSync(directoryPath, "r");
+	try {
+		fsyncSync(fd);
+	} finally {
+		closeSync(fd);
+	}
+}
+/** Fsync one durable file after its contents reach stable storage. */
+function syncDurableFile(filePath) {
+	const fd = openSync(filePath, "r");
+	try {
+		fsyncSync(fd);
+	} finally {
+		closeSync(fd);
+	}
+}
+/** Append one record with O_APPEND, then fsync the file and containing directory. */
+function appendDurableFile(filePath, content, options = {}) {
+	const fd = openSync(filePath, constants.O_APPEND | constants.O_CREAT | constants.O_WRONLY | (typeof constants.O_NOFOLLOW === "number" ? constants.O_NOFOLLOW : 0), options.mode ?? 384);
+	try {
+		if (process.platform !== "win32") fchmodSync(fd, options.mode ?? 384);
+		const expectedBytes = Buffer.byteLength(content, "utf8");
+		const writtenBytes = writeSync(fd, content, void 0, "utf8");
+		if (writtenBytes !== expectedBytes) throw new Error(`durable append wrote ${writtenBytes} of ${expectedBytes} bytes to '${filePath}'`);
+		fsyncSync(fd);
+	} finally {
+		closeSync(fd);
+	}
+	syncDurableDirectory(dirname(filePath));
+}
+/** Reject a path that escapes its run directory or traverses a symbolic link. */
+function assertNoSymlinkDescendant(root, target, label = "path") {
+	const base = resolve(root);
+	const rel = relative(base, resolve(target));
+	if (rel === ".." || rel.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`)) throw new Error(`${label} path escapes its run directory`);
+	if (existsSync(base) && lstatSync(base).isSymbolicLink()) throw new Error(`${label} path contains a symbolic link: ${base}`);
+	let current = base;
+	for (const part of rel.split(/[\\/]/u).filter(Boolean)) {
+		current = join(current, part);
+		if (!existsSync(current)) continue;
+		if (lstatSync(current).isSymbolicLink()) throw new Error(`${label} path contains a symbolic link: ${current}`);
+	}
+}
+/** Write, fsync, atomically replace, and fsync one Runtime-owned state file. */
+function writeAtomicDurableFile(filePath, content, options = {}) {
+	const temporaryPath = `${filePath}.${randomUUID()}.tmp`;
+	let operationFailed = false;
+	let operationError;
+	try {
+		writeExclusiveDurableFile(temporaryPath, content, options);
+		renameSync(temporaryPath, filePath);
+		syncDurableDirectory(dirname(filePath));
+	} catch (error) {
+		operationFailed = true;
+		operationError = error;
+	}
+	let cleanupError;
+	try {
+		unlinkSync(temporaryPath);
+	} catch (error) {
+		if (!isNoEntryError(error)) cleanupError = error;
+	}
+	if (operationFailed) throw operationError;
+	if (cleanupError !== void 0) throw cleanupError;
+}
+function writeExclusiveDurableFile(filePath, content, options) {
+	if (options.mode === void 0) writeFileSync(filePath, content, {
+		encoding: "utf8",
+		flag: "wx"
+	});
+	else writeFileSync(filePath, content, {
+		encoding: "utf8",
+		flag: "wx",
+		mode: options.mode
+	});
+	syncDurableFile(filePath);
+}
+function isAlreadyExistsError(error) {
+	return error !== null && typeof error === "object" && "code" in error && error.code === "EEXIST";
+}
+function isNoEntryError(error) {
+	return error !== null && typeof error === "object" && "code" in error && error.code === "ENOENT";
+}
+//#endregion
+export { writeAtomicDurableFile as i, assertNoSymlinkDescendant as n, publishExclusiveDurableFile as r, appendDurableFile as t };
+
+//# sourceMappingURL=durable-file-g3YdfEh4.js.map

package/dist/durable-file-g3YdfEh4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-file-g3YdfEh4.js","names":["fsConstants"],"sources":["../src/runtime/supervise/durable-file.ts"],"sourcesContent":["/**\n * Small filesystem durability primitives for Runtime-owned state.\n *\n * Callers must validate their path and parent directory before invoking these functions.\n * The exclusive writer protects a no-clobber publication race; the atomic writer replaces one\n * state file after its temporary contents reach stable storage.\n *\n * @internal\n */\n\nimport { randomUUID } from 'node:crypto'\nimport {\n  closeSync,\n  existsSync,\n  fchmodSync,\n  constants as fsConstants,\n  fsyncSync,\n  linkSync,\n  lstatSync,\n  openSync,\n  renameSync,\n  unlinkSync,\n  writeFileSync,\n  writeSync,\n} from 'node:fs'\nimport { dirname, join, relative, resolve } from 'node:path'\n\nexport interface DurableFileOptions {\n  readonly mode?: number\n}\n\n/** Publish a new file without replacing a concurrent winner. */\nexport function publishExclusiveDurableFile(\n  filePath: string,\n  content: string,\n  options: DurableFileOptions = {},\n): boolean {\n  const temporaryPath = `${filePath}.${randomUUID()}.tmp`\n  let operationFailed = false\n  let operationError: unknown\n  let published = false\n  try {\n    writeExclusiveDurableFile(temporaryPath, content, options)\n    try {\n      linkSync(temporaryPath, filePath)\n      syncDurableDirectory(dirname(filePath))\n      published = true\n    } catch (error) {\n      if (!isAlreadyExistsError(error)) throw error\n    }\n  } catch (error) {\n    operationFailed = true\n    operationError = error\n  }\n  let cleanupError: unknown\n  try {\n    unlinkSync(temporaryPath)\n  } catch (error) {\n    if (!isNoEntryError(error)) cleanupError = error\n  }\n  if (operationFailed) throw operationError\n  if (cleanupError !== undefined) throw cleanupError\n  return published\n}\n\n/** Fsync a directory after publishing a durable file entry. */\nexport function syncDurableDirectory(directoryPath: string): void {\n  const fd = openSync(directoryPath, 'r')\n  try {\n    fsyncSync(fd)\n  } finally {\n    closeSync(fd)\n  }\n}\n\n/** Fsync one durable file after its contents reach stable storage. */\nexport function syncDurableFile(filePath: string): void {\n  const fd = openSync(filePath, 'r')\n  try {\n    fsyncSync(fd)\n  } finally {\n    closeSync(fd)\n  }\n}\n\n/** Append one record with O_APPEND, then fsync the file and containing directory. */\nexport function appendDurableFile(\n  filePath: string,\n  content: string,\n  options: DurableFileOptions = {},\n): void {\n  const flags =\n    fsConstants.O_APPEND |\n    fsConstants.O_CREAT |\n    fsConstants.O_WRONLY |\n    (typeof fsConstants.O_NOFOLLOW === 'number' ? fsConstants.O_NOFOLLOW : 0)\n  const fd = openSync(filePath, flags, options.mode ?? 0o600)\n  try {\n    if (process.platform !== 'win32') fchmodSync(fd, options.mode ?? 0o600)\n    const expectedBytes = Buffer.byteLength(content, 'utf8')\n    const writtenBytes = writeSync(fd, content, undefined, 'utf8')\n    if (writtenBytes !== expectedBytes) {\n      throw new Error(\n        `durable append wrote ${writtenBytes} of ${expectedBytes} bytes to '${filePath}'`,\n      )\n    }\n    fsyncSync(fd)\n  } finally {\n    closeSync(fd)\n  }\n  syncDurableDirectory(dirname(filePath))\n}\n\n/** Reject a path that escapes its run directory or traverses a symbolic link. */\nexport function assertNoSymlinkDescendant(root: string, target: string, label = 'path'): void {\n  const base = resolve(root)\n  const exact = resolve(target)\n  const rel = relative(base, exact)\n  if (rel === '..' || rel.startsWith(`..${process.platform === 'win32' ? '\\\\' : '/'}`)) {\n    throw new Error(`${label} path escapes its run directory`)\n  }\n  if (existsSync(base) && lstatSync(base).isSymbolicLink()) {\n    throw new Error(`${label} path contains a symbolic link: ${base}`)\n  }\n  let current = base\n  for (const part of rel.split(/[\\\\/]/u).filter(Boolean)) {\n    current = join(current, part)\n    if (!existsSync(current)) continue\n    if (lstatSync(current).isSymbolicLink()) {\n      throw new Error(`${label} path contains a symbolic link: ${current}`)\n    }\n  }\n}\n\n/** Write, fsync, atomically replace, and fsync one Runtime-owned state file. */\nexport function writeAtomicDurableFile(\n  filePath: string,\n  content: string,\n  options: DurableFileOptions = {},\n): void {\n  const temporaryPath = `${filePath}.${randomUUID()}.tmp`\n  let operationFailed = false\n  let operationError: unknown\n  try {\n    writeExclusiveDurableFile(temporaryPath, content, options)\n    renameSync(temporaryPath, filePath)\n    syncDurableDirectory(dirname(filePath))\n  } catch (error) {\n    operationFailed = true\n    operationError = error\n  }\n  let cleanupError: unknown\n  try {\n    unlinkSync(temporaryPath)\n  } catch (error) {\n    if (!isNoEntryError(error)) cleanupError = error\n    // A successful rename removes the temporary directory entry.\n  }\n  if (operationFailed) throw operationError\n  if (cleanupError !== undefined) throw cleanupError\n}\n\nfunction writeExclusiveDurableFile(\n  filePath: string,\n  content: string,\n  options: DurableFileOptions,\n): void {\n  if (options.mode === undefined) {\n    writeFileSync(filePath, content, { encoding: 'utf8', flag: 'wx' })\n  } else {\n    writeFileSync(filePath, content, { encoding: 'utf8', flag: 'wx', mode: options.mode })\n  }\n  syncDurableFile(filePath)\n}\n\nexport function isAlreadyExistsError(error: unknown): boolean {\n  return (\n    error !== null &&\n    typeof error === 'object' &&\n    'code' in error &&\n    (error as { code?: unknown }).code === 'EEXIST'\n  )\n}\n\nfunction isNoEntryError(error: unknown): boolean {\n  return (\n    error !== null &&\n    typeof error === 'object' &&\n    'code' in error &&\n    (error as { code?: unknown }).code === 'ENOENT'\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;AAgCA,SAAgB,4BACd,UACA,SACA,UAA8B,CAAC,GACtB;CACT,MAAM,gBAAgB,GAAG,SAAS,GAAG,WAAW,EAAE;CAClD,IAAI,kBAAkB;CACtB,IAAI;CACJ,IAAI,YAAY;CAChB,IAAI;EACF,0BAA0B,eAAe,SAAS,OAAO;EACzD,IAAI;GACF,SAAS,eAAe,QAAQ;GAChC,qBAAqB,QAAQ,QAAQ,CAAC;GACtC,YAAY;EACd,SAAS,OAAO;GACd,IAAI,CAAC,qBAAqB,KAAK,GAAG,MAAM;EAC1C;CACF,SAAS,OAAO;EACd,kBAAkB;EAClB,iBAAiB;CACnB;CACA,IAAI;CACJ,IAAI;EACF,WAAW,aAAa;CAC1B,SAAS,OAAO;EACd,IAAI,CAAC,eAAe,KAAK,GAAG,eAAe;CAC7C;CACA,IAAI,iBAAiB,MAAM;CAC3B,IAAI,iBAAiB,KAAA,GAAW,MAAM;CACtC,OAAO;AACT;;AAGA,SAAgB,qBAAqB,eAA6B;CAChE,MAAM,KAAK,SAAS,eAAe,GAAG;CACtC,IAAI;EACF,UAAU,EAAE;CACd,UAAU;EACR,UAAU,EAAE;CACd;AACF;;AAGA,SAAgB,gBAAgB,UAAwB;CACtD,MAAM,KAAK,SAAS,UAAU,GAAG;CACjC,IAAI;EACF,UAAU,EAAE;CACd,UAAU;EACR,UAAU,EAAE;CACd;AACF;;AAGA,SAAgB,kBACd,UACA,SACA,UAA8B,CAAC,GACzB;CAMN,MAAM,KAAK,SAAS,UAJlBA,UAAY,WACZA,UAAY,UACZA,UAAY,YACX,OAAOA,UAAY,eAAe,WAAWA,UAAY,aAAa,IACpC,QAAQ,QAAQ,GAAK;CAC1D,IAAI;EACF,IAAI,QAAQ,aAAa,SAAS,WAAW,IAAI,QAAQ,QAAQ,GAAK;EACtE,MAAM,gBAAgB,OAAO,WAAW,SAAS,MAAM;EACvD,MAAM,eAAe,UAAU,IAAI,SAAS,KAAA,GAAW,MAAM;EAC7D,IAAI,iBAAiB,eACnB,MAAM,IAAI,MACR,wBAAwB,aAAa,MAAM,cAAc,aAAa,SAAS,EACjF;EAEF,UAAU,EAAE;CACd,UAAU;EACR,UAAU,EAAE;CACd;CACA,qBAAqB,QAAQ,QAAQ,CAAC;AACxC;;AAGA,SAAgB,0BAA0B,MAAc,QAAgB,QAAQ,QAAc;CAC5F,MAAM,OAAO,QAAQ,IAAI;CAEzB,MAAM,MAAM,SAAS,MADP,QAAQ,MACS,CAAC;CAChC,IAAI,QAAQ,QAAQ,IAAI,WAAW,KAAK,QAAQ,aAAa,UAAU,OAAO,KAAK,GACjF,MAAM,IAAI,MAAM,GAAG,MAAM,gCAAgC;CAE3D,IAAI,WAAW,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,eAAe,GACrD,MAAM,IAAI,MAAM,GAAG,MAAM,kCAAkC,MAAM;CAEnE,IAAI,UAAU;CACd,KAAK,MAAM,QAAQ,IAAI,MAAM,QAAQ,CAAC,CAAC,OAAO,OAAO,GAAG;EACtD,UAAU,KAAK,SAAS,IAAI;EAC5B,IAAI,CAAC,WAAW,OAAO,GAAG;EAC1B,IAAI,UAAU,OAAO,CAAC,CAAC,eAAe,GACpC,MAAM,IAAI,MAAM,GAAG,MAAM,kCAAkC,SAAS;CAExE;AACF;;AAGA,SAAgB,uBACd,UACA,SACA,UAA8B,CAAC,GACzB;CACN,MAAM,gBAAgB,GAAG,SAAS,GAAG,WAAW,EAAE;CAClD,IAAI,kBAAkB;CACtB,IAAI;CACJ,IAAI;EACF,0BAA0B,eAAe,SAAS,OAAO;EACzD,WAAW,eAAe,QAAQ;EAClC,qBAAqB,QAAQ,QAAQ,CAAC;CACxC,SAAS,OAAO;EACd,kBAAkB;EAClB,iBAAiB;CACnB;CACA,IAAI;CACJ,IAAI;EACF,WAAW,aAAa;CAC1B,SAAS,OAAO;EACd,IAAI,CAAC,eAAe,KAAK,GAAG,eAAe;CAE7C;CACA,IAAI,iBAAiB,MAAM;CAC3B,IAAI,iBAAiB,KAAA,GAAW,MAAM;AACxC;AAEA,SAAS,0BACP,UACA,SACA,SACM;CACN,IAAI,QAAQ,SAAS,KAAA,GACnB,cAAc,UAAU,SAAS;EAAE,UAAU;EAAQ,MAAM;CAAK,CAAC;MAEjE,cAAc,UAAU,SAAS;EAAE,UAAU;EAAQ,MAAM;EAAM,MAAM,QAAQ;CAAK,CAAC;CAEvF,gBAAgB,QAAQ;AAC1B;AAEA,SAAgB,qBAAqB,OAAyB;CAC5D,OACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACT,MAA6B,SAAS;AAE3C;AAEA,SAAS,eAAe,OAAyB;CAC/C,OACE,UAAU,QACV,OAAO,UAAU,YACjB,UAAU,SACT,MAA6B,SAAS;AAE3C"}

package/dist/durable.d.ts

@@ -1,6 +1,6 @@
-import { do as SuperviseOptions, ho as supervise, jo as SupervisorProfile } from "./index-CIhkH7mq.js";
+import { Uo as supervise, as as SupervisorProfile, zo as SuperviseOptions } from "./index-BnAiQVLD.js";
 import { l as RuntimeHooks, o as RuntimeHookEvent, r as RuntimeDecisionPoint } from "./runtime-hooks-Bj6wJHlH.js";
-import { A as ProviderModelExecutionEvidence, J as SpendGap, K as Spend, O as ProfileMaterializationReceipt, T as NodeId, o as ExecutionBindingReceipt, st as WorkerTraceEvidence } from "./types-DjVO-p7R.js";
+import { A as ProviderModelExecutionEvidence, J as SpendGap, K as Spend, O as ProfileMaterializationReceipt, T as NodeId, o as ExecutionBindingReceipt, st as WorkerTraceEvidence } from "./types-a2ZZUl80.js";
 //#region src/durable/chat-engine.d.ts
 /**
  * `handleChatTurn` is a framework-neutral chat-turn HTTP orchestrator.

package/dist/durable.js

@@ -1,7 +1,7 @@
 import { i as cloneSpend, t as addSpend, y as zeroSpend } from "./util-D6ZEuBMi.js";
 import { i as writeAllBytes, n as parseCommittedJsonLines, r as prepareJsonlAppend, t as isNoEntError } from "./jsonl-file-CDfsCI5s.js";
 import { a as withPursuitContext, t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
-import { n as supervise } from "./supervise-Ci0RfWQF.js";
+import { n as supervise } from "./supervise-HsRKOlKY.js";
 import { createHash } from "node:crypto";
 import { resolve } from "node:path";
 import { readFile } from "node:fs/promises";

package/dist/{environment-provider-DWjbGH8W.d.ts → environment-provider-5E82esWE.d.ts}

@@ -1,5 +1,5 @@
 import { E as SandboxClient } from "./types-DpdfZoQ3.js";
-import { R as Runtime, p as ExecutorFactory } from "./types-DjVO-p7R.js";
+import { R as Runtime, p as ExecutorFactory } from "./types-a2ZZUl80.js";
 import { AgentProfile, AgentProfileValidationResult } from "@tangle-network/agent-interface";
 import { BackendType, CreateSandboxOptions, Sandbox } from "@tangle-network/sandbox";
 import { AgentEnvironment as AgentEnvironment$1, AgentEnvironmentCapabilities, AgentEnvironmentCapabilities as AgentEnvironmentCapabilities$1, AgentEnvironmentEvent, AgentEnvironmentProvider, AgentEnvironmentProvider as AgentEnvironmentProvider$1, AgentEnvironmentQuery, AgentEnvironmentStatus, AgentEnvironmentSummary, AgentProfileRef, AgentProfileRef as AgentProfileRef$1, AgentSession, AgentSessionRef, AgentSessionStatus as AgentSessionStatus$1, AgentTurnInput, AgentTurnInput as AgentTurnInput$1, AgentTurnResult as AgentTurnResult$1, CheckpointRef, CheckpointRequest, CreateAgentEnvironmentInput, CreateAgentEnvironmentInput as CreateAgentEnvironmentInput$1, ExecRequest, ExecResult, ForkRequest, PlacementInfo, ResourceRequest, WorkspaceRequest } from "@tangle-network/agent-interface/environment-provider";
@@ -62,7 +62,10 @@ interface SandboxClientProviderOptions {
   resolveProfile?: (profileId: string) => AgentProfile | Promise<AgentProfile>;
   mapCreateInput?: (input: CreateAgentEnvironmentInput) => CreateSandboxOptions;
 }
-/** Adapt a `SandboxClient` into the shared `AgentEnvironmentProvider` contract.
+/**
+ * Adapt a `SandboxClient` into the shared `AgentEnvironmentProvider` contract.
+ * The provider declares the public SDK contract before it creates an environment.
+ * Each environment exposes interactive methods only when its deployment declares every required capability.
  * @experimental */
 declare function sandboxClientAsProvider(client: SandboxClient, options?: SandboxClientProviderOptions): AgentEnvironmentProvider;
 /** Options for running a provider as a supervise-mode executor.
@@ -83,4 +86,4 @@ interface ProviderExecutorOptions {
 declare function providerAsExecutor(provider: AgentEnvironmentProvider, options?: ProviderExecutorOptions): ExecutorFactory<unknown>;
 //#endregion
 export { providerAsSandboxClient as A, ProviderAsSandboxClientOptions as C, WorkspaceRequest as D, SandboxClientProviderOptions as E, createTangleSandboxExactProcessProvider as F, sandboxClientAsProvider as M, CreateTangleSandboxExactProcessProviderOptions as N, createAgentEnvironmentProviderRegistry as O, SandboxControlClient as P, PlacementInfo as S, ResourceRequest as T, CheckpointRequest as _, AgentEnvironmentProviderRef as a, ExecResult as b, AgentEnvironmentStatus as c, AgentSession as d, AgentSessionRef as f, CheckpointRef as g, AgentTurnResult$1 as h, AgentEnvironmentProvider$1 as i, resolveAgentEnvironmentProvider as j, providerAsExecutor as k, AgentEnvironmentSummary as l, AgentTurnInput$1 as m, AgentEnvironmentCapabilities$1 as n, AgentEnvironmentProviderRegistry as o, AgentSessionStatus$1 as p, AgentEnvironmentEvent as r, AgentEnvironmentQuery as s, AgentEnvironment$1 as t, AgentProfileRef$1 as u, CreateAgentEnvironmentInput$1 as v, ProviderExecutorOptions as w, ForkRequest as x, ExecRequest as y };
-//# sourceMappingURL=environment-provider-DWjbGH8W.d.ts.map
+//# sourceMappingURL=environment-provider-5E82esWE.d.ts.map

package/dist/{environment-provider-Bn3652YU.js → environment-provider-DKyMWQJd.js}

@@ -1,8 +1,9 @@
-import { I as awaitAbortable, J as sameControlCoordinates, X as promptFromAgentTurnInput, Z as promptOptionsFromAgentTurnInput, o as finalizeRuntimeOwnedPendingExecutor, r as attestRuntimeOwnedPendingExecutor, u as newExecutionAttemptId } from "./materialization-Ct3I4wu3.js";
+import { I as awaitAbortable, J as sameControlCoordinates, X as promptFromAgentTurnInput, Z as promptOptionsFromAgentTurnInput, o as finalizeRuntimeOwnedPendingExecutor, r as attestRuntimeOwnedPendingExecutor, u as newExecutionAttemptId } from "./materialization-CekWK6OO.js";
+import { n as detachedSnapshot } from "./snapshot-CTAf4uuA.js";
 import { b as zeroTokenUsage } from "./util-D6ZEuBMi.js";
 import { a as isSandboxTerminalEvent, d as sandboxTerminalUsageField, n as canonicalStreamEventFromSandboxEvent, r as createSandboxToolPartState, u as sandboxProgressEvents } from "./sandbox-events-BVjstFgb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, o as enforceTokenLimits } from "./model-policy-Sw4ywhtL.js";
-import { AgentExactRunControlRefSchema, AgentRunCancellationRequestSchema, harnessSystemPromptIntents } from "@tangle-network/agent-interface";
+import { AgentExactRunControlRefSchema, AgentInteractiveSessionRefSchema, AgentInteractiveSessionStartSchema, AgentRunCancellationRequestSchema, agentInteractiveSessionRefMatchesStart, canonicalCandidateDigest, harnessSystemPromptIntents } from "@tangle-network/agent-interface";
 import { randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 //#region src/runtime/supervise/abortable.ts
@@ -573,24 +574,35 @@ function providerAsSandboxClient(provider, options = {}) {
 		return environmentAsSandboxInstance(environment, { requireTerminalEvent: options.requireTerminalEvent ?? true });
 	} };
 }
-/** Adapt a `SandboxClient` into the shared `AgentEnvironmentProvider` contract.
+/**
+* Adapt a `SandboxClient` into the shared `AgentEnvironmentProvider` contract.
+* The provider declares the public SDK contract before it creates an environment.
+* Each environment exposes interactive methods only when its deployment declares every required capability.
 * @experimental */
 function sandboxClientAsProvider(client, options = {}) {
 	const providerName = options.name ?? "tangle-sandbox";
+	const providerCapabilities = async () => {
+		const resolved = await (options.capabilities ? typeof options.capabilities === "function" ? options.capabilities() : options.capabilities : defaultTangleSandboxCapabilities({
+			namedProfiles: options.resolveProfile !== void 0,
+			rediscover: hasGet(client)
+		}));
+		if (hasGet(client)) return resolved;
+		const { interactiveAgent: _interactiveAgent, ...withoutInteractive } = resolved;
+		return withoutInteractive;
+	};
 	return {
 		name: providerName,
-		capabilities: async () => {
-			if (options.capabilities) return typeof options.capabilities === "function" ? options.capabilities() : options.capabilities;
-			return defaultTangleSandboxCapabilities({ namedProfiles: options.resolveProfile !== void 0 });
-		},
+		capabilities: providerCapabilities,
 		...options.validateProfile ? { validateProfile: options.validateProfile } : {},
 		async create(input) {
 			const createOptions = options.mapCreateInput?.(input) ?? await sandboxOptionsFromCreateInput(input, options.defaultBackend ?? "opencode", options.resolveProfile);
-			return sandboxInstanceAsEnvironment(await client.create(createOptions, input.signal === void 0 ? void 0 : { signal: input.signal }), providerName, client);
+			const capabilities = await providerCapabilities();
+			return sandboxInstanceAsEnvironment(await client.create(createOptions, input.signal === void 0 ? void 0 : { signal: input.signal }), providerName, client, capabilities);
 		},
 		...hasGet(client) ? { async get(id) {
+			const capabilities = await providerCapabilities();
 			const box = await client.get(id);
-			return box ? sandboxInstanceAsEnvironment(box, providerName, client) : null;
+			return box ? sandboxInstanceAsEnvironment(box, providerName, client, capabilities) : null;
 		} } : {},
 		...hasList(client) ? { async list(query) {
 			return (await client.list(query?.providerOptions)).map((box) => ({
@@ -792,7 +804,7 @@ function createInputFromSandboxOptions(options) {
 		...Object.keys(workspace).length > 0 ? { workspace } : {},
 		...options?.resources ? { resources: options.resources } : {},
 		...options?.env ? { env: options.env } : {},
-		...options?.secrets ? { secrets: options.secrets } : {},
+		...Array.isArray(options?.secrets) ? { secrets: options.secrets } : {},
 		...options?.metadata ? { metadata: options.metadata } : {},
 		...options?.name ? { name: options.name } : {},
 		...options?.idempotencyKey ? { idempotencyKey: options.idempotencyKey } : {},
@@ -830,7 +842,7 @@ async function sandboxOptionsFromCreateInput(input, defaultBackend, resolveProfi
 	};
 }
 function assertSandboxSecretNames(secrets) {
-	if (secrets !== void 0 && (!Array.isArray(secrets) || secrets.some((secret) => typeof secret !== "string" || secret.trim().length === 0))) throw new ValidationError("Tangle Sandbox secret names must be non-empty strings; secret values are unsupported");
+	if (secrets !== void 0 && secrets !== "all" && (!Array.isArray(secrets) || secrets.some((secret) => typeof secret !== "string" || secret.trim().length === 0))) throw new ValidationError("Tangle Sandbox secret names must be non-empty strings; secret values are unsupported");
 }
 function sandboxEnvironmentFromWorkspace(workspace) {
 	if (workspace.environment !== void 0 && workspace.image !== void 0 && workspace.environment !== workspace.image) throw new ValidationError("Tangle Sandbox accepts one environment value; workspace.environment and workspace.image must match");
@@ -953,10 +965,13 @@ function environmentAsSandboxInstance(environment, options) {
 		}
 	};
 }
-function sandboxInstanceAsEnvironment(box, providerName, client) {
+async function sandboxInstanceAsEnvironment(box, providerName, client, providerCapabilities) {
+	const capabilities = await sandboxEnvironmentCapabilities(box, providerCapabilities);
+	const interactiveAgent = capabilities.interactiveAgent;
 	return {
 		id: String(box.id),
 		provider: providerName,
+		capabilities,
 		...typeof box.name === "string" ? { name: box.name } : {},
 		...readBoxMetadata(box) ? { metadata: readBoxMetadata(box) } : {},
 		async status() {
@@ -977,6 +992,50 @@ function sandboxInstanceAsEnvironment(box, providerName, client) {
 				return (await box.session(command.binding.sessionId).respondToInteraction(command, options)).acknowledgement;
 			}
 		} : {},
+		...interactiveAgent ? {
+			async startInteractive(request, options) {
+				const exactRequest = AgentInteractiveSessionStartSchema.parse(request);
+				assertSandboxInteractiveBinding(exactRequest.run, box, providerName);
+				const result = await box.session(exactRequest.run.sessionId).interactive().start(exactRequest, options);
+				if (result.state !== "running") throw new ValidationError("sandbox interactive process settled before attachment");
+				const ref = detachedSnapshot(AgentInteractiveSessionRefSchema.parse(result.ref), "sandbox interactive start reference");
+				if (!agentInteractiveSessionRefMatchesStart(exactRequest, ref)) throw new ValidationError("sandbox interactive start returned a different exact process");
+				return ref;
+			},
+			interactive(ref) {
+				const exactRef = detachedSnapshot(AgentInteractiveSessionRefSchema.parse(ref), "sandbox interactive reference");
+				assertSandboxInteractiveBinding(exactRef.run, box, providerName);
+				const session = box.session(exactRef.run.sessionId).interactive({ ref: exactRef });
+				const controlledSessions = /* @__PURE__ */ new Map();
+				const controlledSession = (control) => {
+					const key = canonicalCandidateDigest(control);
+					const existing = controlledSessions.get(key);
+					if (existing) return existing;
+					const created = box.session(exactRef.run.sessionId).interactive({
+						ref: exactRef,
+						control
+					});
+					controlledSessions.set(key, created);
+					return created;
+				};
+				return {
+					ref: exactRef,
+					claimControl: (request, options) => session.claimControl(request, options),
+					async status(options) {
+						const status = await session.status(options);
+						if (status === null) throw new ValidationError(`sandbox interactive session "${exactRef.run.sessionId}" is unavailable`);
+						return status;
+					},
+					attach: (request, options) => {
+						const controlled = controlledSession(request.control);
+						if (typeof controlled.attachAgentTerminal !== "function") return Promise.reject(new ValidationError("sandbox interactive session does not expose the exact terminal adapter"));
+						return controlled.attachAgentTerminal(request, options);
+					},
+					sendPrompt: (command, options) => controlledSession(command.control).sendPrompt(command, options),
+					stop: (command, options) => controlledSession(command.control).stop(command, options)
+				};
+			}
+		} : {},
 		...hasRead(box) ? { read: box.read.bind(box) } : {},
 		...hasWrite(box) ? { write: box.write.bind(box) } : {},
 		...hasExec(box) ? { async exec(command, options) {
@@ -995,7 +1054,7 @@ function sandboxInstanceAsEnvironment(box, providerName, client) {
 				fromSandboxId: String(box.id),
 				...options?.name ? { name: options.name } : {},
 				...options?.metadata ? { metadata: options.metadata } : {}
-			}), providerName, client);
+			}), providerName, client, providerCapabilities);
 		},
 		async placement() {
 			return placementInfoFromLoopPlacement(client.describePlacement?.(box), box);
@@ -1478,6 +1537,50 @@ function placementInfoFromLoopPlacement(placement, box) {
 		...placement.machineId ? { machineId: placement.machineId } : {}
 	};
 }
+const completeInteractiveAgentCapabilities = {
+	start: true,
+	control: true,
+	status: true,
+	attach: true,
+	reattach: true,
+	sendPrompt: true,
+	input: true,
+	resize: true,
+	stop: true
+};
+async function sandboxEnvironmentCapabilities(box, providerCapabilities) {
+	const { interactiveAgent: providerInteractive, ...baseCapabilities } = providerCapabilities;
+	if (!hasCompleteInteractiveAgentCapabilities(providerInteractive)) return baseCapabilities;
+	let deployed;
+	try {
+		deployed = await box.capabilities();
+	} catch {
+		return baseCapabilities;
+	}
+	if (!hasCompleteInteractiveAgentCapabilities(deployed?.interactiveAgent)) return baseCapabilities;
+	if (!hasExactInteractiveTerminalAdapter(box)) return baseCapabilities;
+	return {
+		...baseCapabilities,
+		interactiveAgent: { ...completeInteractiveAgentCapabilities }
+	};
+}
+function hasExactInteractiveTerminalAdapter(box) {
+	if (!hasSession(box)) return false;
+	try {
+		const session = box.session("__runtime-capability-probe__");
+		const interactive = session.interactive;
+		if (typeof interactive !== "function") return false;
+		return typeof interactive.call(session).attachAgentTerminal === "function";
+	} catch {
+		return false;
+	}
+}
+function hasCompleteInteractiveAgentCapabilities(value) {
+	return value?.start === true && value.control === true && value.status === true && value.attach === true && value.reattach === true && value.sendPrompt === true && value.input === true && value.resize === true && value.stop === true;
+}
+function assertSandboxInteractiveBinding(run, box, providerName) {
+	if (run.provider !== providerName || run.environmentId !== String(box.id)) throw new ValidationError("sandbox interactive request targets another environment");
+}
 function defaultTangleSandboxCapabilities(options) {
 	return {
 		profile: {
@@ -1521,12 +1624,13 @@ function defaultTangleSandboxCapabilities(options) {
 			download: true
 		},
 		branching: {
-			checkpoint: true,
-			fork: true
+			checkpoint: false,
+			fork: false
 		},
+		...options.rediscover ? { interactiveAgent: { ...completeInteractiveAgentCapabilities } } : {},
 		placement: true,
 		usage: true,
-		confidential: true
+		confidential: false
 	};
 }
 function contentRef(prefix, value) {
@@ -1567,4 +1671,4 @@ function hasExec(box) {
 //#endregion
 export { sandboxClientAsProvider as a, linkAbort as c, resolveAgentEnvironmentProvider as i, runAbortable as l, providerAsExecutor as n, createTangleSandboxExactProcessProvider as o, providerAsSandboxClient as r, abortError as s, createAgentEnvironmentProviderRegistry as t };
 
-//# sourceMappingURL=environment-provider-Bn3652YU.js.map
+//# sourceMappingURL=environment-provider-DKyMWQJd.js.map