@tangle-network/sandbox 0.10.2 → 0.10.3

package/LICENSE

@@ -0,0 +1,11 @@
+Copyright (c) 2025 Tangle Network
+
+All rights reserved.
+
+This software and associated documentation files (the "Software") are proprietary
+and confidential. No part of this Software may be reproduced, distributed, or
+transmitted in any form or by any means, including photocopying, recording, or
+other electronic or mechanical methods, without the prior written permission of
+Tangle Network.
+
+For licensing inquiries, contact: hello@tangle.tools

package/dist/agent/index.d.ts

@@ -1,5 +1,6 @@
-import { $ as CodeExecutionResult, Q as CodeExecutionOptions, et as CodeLanguage, n as SandboxInstance, nt as CodeResultPart } from "../sandbox-Bm2C9Phd.js";
-import { i as SandboxClient } from "../client-8wOu9raV.js";
+import { D as CodeLanguage, E as CodeExecutionResult, T as CodeExecutionOptions, k as CodeResultPart } from "../types-Cmpv-ox_.js";
+import { n as SandboxInstance } from "../sandbox-BhYmj7L3.js";
+import { i as SandboxClient } from "../client-Cr39zlgv.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/auth/index.d.ts

@@ -1,2 +1,2 @@
-import { _ as ReadTokenPayload, a as issueCollaborationToken, c as issueSessionScopedToken, d as AnyTokenPayload, f as BatchScopedTokenPayload, g as ProjectScopedTokenPayload, h as IssueCollaborationTokenOptions, i as issueBatchScopedToken, l as unsafeDecodeToken, m as CollaborationTokenPayload, n as getTokenTTL, o as issueProjectScopedToken, p as CollaborationAccess, r as isTokenExpiringSoon, s as issueReadToken, t as ProductTokenIssuer, u as verifyToken, v as SessionScopedTokenPayload, y as TokenScope } from "../index-D-2pH_70.js";
+import { _ as ReadTokenPayload, a as issueCollaborationToken, c as issueSessionScopedToken, d as AnyTokenPayload, f as BatchScopedTokenPayload, g as ProjectScopedTokenPayload, h as IssueCollaborationTokenOptions, i as issueBatchScopedToken, l as unsafeDecodeToken, m as CollaborationTokenPayload, n as getTokenTTL, o as issueProjectScopedToken, p as CollaborationAccess, r as isTokenExpiringSoon, s as issueReadToken, t as ProductTokenIssuer, u as verifyToken, v as SessionScopedTokenPayload, y as TokenScope } from "../index-CyHojkuA.js";
 export { AnyTokenPayload, BatchScopedTokenPayload, CollaborationAccess, CollaborationTokenPayload, IssueCollaborationTokenOptions, ProductTokenIssuer, ProjectScopedTokenPayload, ReadTokenPayload, SessionScopedTokenPayload, TokenScope, getTokenTTL, isTokenExpiringSoon, issueBatchScopedToken, issueCollaborationToken, issueProjectScopedToken, issueReadToken, issueSessionScopedToken, unsafeDecodeToken, verifyToken };

package/dist/{client-8wOu9raV.d.ts → client-Cr39zlgv.d.ts}

@@ -1,4 +1,5 @@
-import { $n as ReconcileSandboxFleetsResult, Bn as PromptOptions, Bt as FleetDispatchResultBuffer, Dt as ExecOptions, G as BatchRunOptions, Gt as FleetMachineId, Ht as FleetDispatchStreamOptions, J as BatchTask, Jn as PublishPublicTemplateOptions, K as BatchRunRequest, Kn as PublicTemplateInfo, Kt as FleetPromptDispatchOptions, M as AttachSandboxFleetMachineOptions, Mr as SandboxFleetWorkspaceRestoreResult, Nr as SandboxFleetWorkspaceSnapshotResult, Or as SandboxFleetTraceOptions, Ot as ExecResult, Pr as SandboxInfo, Qn as ReconcileSandboxFleetsOptions, Ri as TokenRefreshHandler, Sr as SandboxFleetOperationsSummary, Ti as SubscriptionInfo, Tr as SandboxFleetTraceBundle, U as BatchOptions, Ut as FleetExecDispatchOptions, V as BatchEvent, Vn as PromptResult, Vt as FleetDispatchResultBufferOptions, W as BatchResult, Wi as UsageInfo, Wt as FleetExecDispatchResult, Xn as ReapExpiredSandboxFleetsOptions, Yn as PublishPublicTemplateVersionOptions, Zn as ReapExpiredSandboxFleetsResult, _n as IntelligenceReportWindow, a as TraceExportSink, ar as SandboxEnvironment, bn as ListSandboxFleetOptions, br as SandboxFleetManifest, cr as SandboxFleetArtifactSpec, ct as CreateSandboxFleetOptions, dr as SandboxFleetDispatchResponse, dt as CreateSandboxOptions, fr as SandboxFleetDriverCapability, hn as IntelligenceReportCompareTo, i as TraceExportResult, jr as SandboxFleetWorkspaceReconcileResult, kr as SandboxFleetUsage, lr as SandboxFleetCostEstimate, lt as CreateSandboxFleetTokenOptions, mn as IntelligenceReportBudget, mr as SandboxFleetInfo, n as SandboxInstance, oi as SecretsManager, ot as CreateIntelligenceReportOptions, pn as IntelligenceReport, qn as PublicTemplateVersionInfo, qt as FleetPromptDispatchResult, rr as SandboxClientConfig, sr as SandboxFleetArtifact, st as CreateRequestOptions, t as HttpClient, ut as CreateSandboxFleetWithCoordinatorOptions, vr as SandboxFleetMachineRecord, wr as SandboxFleetToken, xi as SshKeysManager, xn as ListSandboxOptions, zn as PromptInputPart, zr as SandboxProfileSummary, zt as FleetDispatchCancelResult } from "./sandbox-Bm2C9Phd.js";
+import { Bt as IntelligenceReport, Cn as PublishPublicTemplateVersionOptions, Dn as ReconcileSandboxFleetsResult, En as ReconcileSandboxFleetsOptions, F as CreateSandboxFleetOptions, Fn as SandboxEnvironment, Hn as SandboxFleetDriverCapability, Ht as IntelligenceReportCompareTo, I as CreateSandboxFleetTokenOptions, Ir as SecretsManager, Jn as SandboxFleetMachineRecord, Jt as ListSandboxFleetOptions, L as CreateSandboxFleetWithCoordinatorOptions, Ln as SandboxFleetArtifact, N as CreateIntelligenceReportOptions, Nn as SandboxClientConfig, P as CreateRequestOptions, Qn as SandboxFleetOperationsSummary, R as CreateSandboxOptions, Rn as SandboxFleetArtifactSpec, Sn as PublishPublicTemplateOptions, Tn as ReapExpiredSandboxFleetsResult, Vn as SandboxFleetDispatchResponse, Vt as IntelligenceReportBudget, Wn as SandboxFleetInfo, Wt as IntelligenceReportWindow, Xn as SandboxFleetManifest, Yt as ListSandboxOptions, Zr as SshKeysManager, _ as BatchResult, _t as FleetExecDispatchResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetUsage, bi as UsageInfo, bn as PublicTemplateInfo, bt as FleetPromptDispatchResult, cr as SandboxFleetWorkspaceRestoreResult, er as SandboxFleetToken, et as ExecOptions, ft as FleetDispatchCancelResult, g as BatchOptions, gt as FleetExecDispatchOptions, hn as PromptResult, hr as SandboxProfileSummary, ht as FleetDispatchStreamOptions, ir as SandboxFleetTraceOptions, lr as SandboxFleetWorkspaceSnapshotResult, m as BatchEvent, mi as TokenRefreshHandler, mn as PromptOptions, mt as FleetDispatchResultBufferOptions, pn as PromptInputPart, pt as FleetDispatchResultBuffer, sr as SandboxFleetWorkspaceReconcileResult, ti as SubscriptionInfo, tr as SandboxFleetTraceBundle, tt as ExecResult, ur as SandboxInfo, v as BatchRunOptions, vt as FleetMachineId, wn as ReapExpiredSandboxFleetsOptions, x as BatchTask, xn as PublicTemplateVersionInfo, y as BatchRunRequest, yt as FleetPromptDispatchOptions, zn as SandboxFleetCostEstimate } from "./types-Cmpv-ox_.js";
+import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-BhYmj7L3.js";
 
 //#region src/lib/sse-parser.d.ts
 /**

package/dist/{client-B3oM6E-L.js → client-Df1K1d_Q.js}

@@ -1,5 +1,5 @@
-import { d as exportTraceBundle, g as parseSSEStream, l as normalizeConnection, m as encodePromptForWire, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-CeimsfC8.js";
 import { a as NotFoundError, d as TimeoutError, f as ValidationError, i as NetworkError, p as parseErrorResponse, t as AuthError } from "./errors-DSz87Rkk.js";
+import { d as exportTraceBundle, g as parseSSEStream, l as normalizeConnection, m as encodePromptForWire, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-CxBHIBV1.js";
 //#region src/resources.ts
 /**
 * Compute tiers, ordered smallest → largest. Defined HERE (not imported from

package/dist/collaboration/index.d.ts

@@ -1,2 +1,2 @@
-import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "../index-D7bwmNs8.js";
+import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "../index-DKzapw-9.js";
 export { CollaborationBootstrapRequest, CollaborationBootstrapResponse, CollaborationClient, CollaborationClientConfig, CollaborationDocumentAdapter, CollaborationDocumentChange, CollaborationDocumentRef, CollaborationFileBridge, CollaborationFileBridgeOptions, CollaborationFileEvent, CollaborationPermissions, CollaborationTokenRefreshRequest, CollaborationTokenRefreshResponse, CollaborationTransportConfig, SaveCollaborationSnapshotRequest, SaveCollaborationSnapshotResponse, buildCollaborationDocumentId, normalizeCollaborationPath, parseCollaborationDocumentId };

package/dist/collaboration/index.js

@@ -1,2 +1,2 @@
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-D17lnOJX.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-QZXrXdIb.js";
 export { CollaborationClient, CollaborationFileBridge, buildCollaborationDocumentId, normalizeCollaborationPath, parseCollaborationDocumentId };

package/dist/core.d.ts

@@ -1,4 +1,5 @@
-import { An as PreviewLinkInfo, Dt as ExecOptions, Gr as SandboxStatus, Ot as ExecResult, Pr as SandboxInfo, Tn as NetworkConfig, dt as CreateSandboxOptions, jn as PreviewLinkManager, n as SandboxInstance, rr as SandboxClientConfig } from "./sandbox-Bm2C9Phd.js";
-import { i as SandboxClient } from "./client-8wOu9raV.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-H9268M_g.js";
+import { $t as NetworkConfig, Nn as SandboxClientConfig, R as CreateSandboxOptions, an as PreviewLinkManager, et as ExecOptions, in as PreviewLinkInfo, tt as ExecResult, ur as SandboxInfo, xr as SandboxStatus } from "./types-Cmpv-ox_.js";
+import { n as SandboxInstance } from "./sandbox-BhYmj7L3.js";
+import { i as SandboxClient } from "./client-Cr39zlgv.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, QuotaError, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { t as SandboxInstance } from "./sandbox-CeimsfC8.js";
 import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
-import { n as SandboxClient } from "./client-B3oM6E-L.js";
+import { t as SandboxInstance } from "./sandbox-CxBHIBV1.js";
+import { n as SandboxClient } from "./client-Df1K1d_Q.js";
 export { AuthError, CapabilityError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxClient as Sandbox, SandboxClient, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError };

package/dist/{index-DS4SOkKG.d.ts → index-DzEUjav-.d.ts}

@@ -1,4 +1,5 @@
-import { dt as CreateSandboxOptions, n as SandboxInstance, t as HttpClient } from "./sandbox-Bm2C9Phd.js";
+import { R as CreateSandboxOptions } from "./types-Cmpv-ox_.js";
+import { n as SandboxInstance, t as HttpClient } from "./sandbox-BhYmj7L3.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,9 +1,10 @@
-import { $i as AgentProfileFileMount, $n as ReconcileSandboxFleetsResult, $r as SandboxTraceOptions, $t as GitDiff, A as AddUserOptions, Ai as TaskSessionFileChange, An as PreviewLinkInfo, Ar as SandboxFleetWorkspace, At as FileReadBatchOptions, B as BatchBackendStats, Bi as TurnDriveResult, Bn as PromptOptions, Br as SandboxResourceUsage, Bt as FleetDispatchResultBuffer, C as SandboxMcpConfig, Ci as StartupOperation, Cn as MintScopedTokenOptions, Cr as SandboxFleetPolicy, Ct as DriverType, D as buildSandboxMcpConfig, Di as TaskResult, Dn as NonHostAgentDriverConfig, Dr as SandboxFleetTraceExport, Dt as ExecOptions, E as buildControlPlaneMcpConfig, Ei as TaskOptions, En as NetworkManager, Er as SandboxFleetTraceEvent, Et as EventStreamOptions, F as BackendInfo, Fi as TeeAttestationResponse, Fn as ProcessManager, Fr as SandboxIntelligenceEnvelope, Ft as FileTreeFile, G as BatchRunOptions, Gi as WaitForOptions, Gn as ProvisionStep, Gr as SandboxStatus, Gt as FleetMachineId, H as BatchEventDataMap, Hi as UploadOptions, Hn as ProvisionEvent, Hr as SandboxRuntimeHealth, Ht as FleetDispatchStreamOptions, I as BackendManager, Ii as TeePublicKey, In as ProcessSignal, Ir as SandboxPermissionsConfig, It as FileTreeOptions, J as BatchTask, Ji as WriteManyOptions, Jn as PublishPublicTemplateOptions, Jr as SandboxTerminalManager, Jt as GPU_LEASE_PROVIDER_NAMES, K as BatchRunRequest, Ki as WriteFileOptions, Kn as PublicTemplateInfo, Kr as SandboxTerminalCreateOptions, Kt as FleetPromptDispatchOptions, L as BackendStatus, Li as TeePublicKeyResponse, Ln as ProcessSpawnOptions, Lr as SandboxPortBinding, Lt as FileTreeResult, M as AttachSandboxFleetMachineOptions, Mi as TaskSessionProfile, Mn as Process, Mr as SandboxFleetWorkspaceRestoreResult, Mt as FileReadError, N as BackendCapabilities, Ni as TeeAttestationOptions, Nn as ProcessInfo, Nr as SandboxFleetWorkspaceSnapshotResult, Nt as FileReadResult, O as AcceleratorKind, Oi as TaskSessionChanges, On as PermissionLevel, Or as SandboxFleetTraceOptions, Ot as ExecResult, P as BackendConfig, Pi as TeeAttestationReport, Pn as ProcessLogEntry, Pr as SandboxInfo, Pt as FileSystem, Qi as AgentProfileConnection, Qn as ReconcileSandboxFleetsOptions, Qr as SandboxTraceExport, Qt as GitConfig, R as BackendType, Ri as TokenRefreshHandler, Rn as ProcessStatus, Rr as SandboxPortPreviewLink, Rt as FileWriteResult, S as SANDBOX_MCP_SERVER_NAME, Si as StartupDiagnostics, Sn as McpServerConfig, Sr as SandboxFleetOperationsSummary, St as DriverInfo, T as SandboxMcpServerEntry, Ti as SubscriptionInfo, Tn as NetworkConfig, Tr as SandboxFleetTraceBundle, Tt as EgressPolicy, U as BatchOptions, Ui as UploadProgress, Un as ProvisionResult, Ur as SandboxRuntimeProfile, Ut as FleetExecDispatchOptions, V as BatchEvent, Vi as UpdateUserOptions, Vn as PromptResult, Vr as SandboxResources, Vt as FleetDispatchResultBufferOptions, W as BatchResult, Wi as UsageInfo, Wn as ProvisionStatus, Wr as SandboxRuntimeProfileList, X as BatchTaskUsage, Xi as AgentProfileCapabilities, Xn as ReapExpiredSandboxFleetsOptions, Xr as SandboxTraceBundle, Xt as GitBranch, Y as BatchTaskResult, Yi as AgentProfile, Yn as PublishPublicTemplateVersionOptions, Yr as SandboxTerminalRequestOptions, Yt as GitAuth, Z as BranchOptions, Zi as AgentProfileConfidential, Zn as ReapExpiredSandboxFleetsResult, Zr as SandboxTraceEvent, Zt as GitCommit, _ as RespondToPermissionOptions, _i as SessionStatus, _n as IntelligenceReportWindow, _r as SandboxFleetMachineMeteredUsage, _t as DispatchedSession, a as TraceExportSink, aa as AgentProfileResources, ai as SecretInfo, an as GpuLeaseExecResult, ar as SandboxEnvironment, at as CreateGpuLeaseOptions, b as BuildSandboxMcpConfigOptions, bi as SnapshotResult, bn as ListSandboxFleetOptions, br as SandboxFleetManifest, bt as DriveTurnOptions, c as otelTraceIdForTangleTrace, ca as AgentSubagentProfile, ci as SendSessionMessageRequest, cn as GpuLeaseStatus, cr as SandboxFleetArtifactSpec, ct as CreateSandboxFleetOptions, d as SandboxSession, da as defineInlineResource, di as SessionEventStreamOptions, dn as HostAgentRuntimeBackend, dr as SandboxFleetDispatchResponse, dt as CreateSandboxOptions, ea as AgentProfileMcpServer, ei as SandboxUser, en as GitStatus, er as RunCodeOptions, f as InteractiveAuthFile, fa as mergeAgentProfiles, fi as SessionForkOptions, fn as InstalledTool, fr as SandboxFleetDriverCapability, ft as CreateSessionOptions, g as InterruptResult, gi as SessionMessageInputPart, gn as IntelligenceReportSubjectType, gr as SandboxFleetMachine, gt as DispatchPromptOptions, h as InteractiveSessionInfo, hi as SessionMessage, hn as IntelligenceReportCompareTo, hr as SandboxFleetIntelligenceEnvelope, ht as DirectoryPermission, i as TraceExportResult, ia as AgentProfileResourceRef, ii as SearchOptions, in as GpuLeaseExecOptions, ir as SandboxConnection, it as CompletedTurnResult, j as AttachGpuLeaseOptions, ji as TaskSessionInfo, jn as PreviewLinkManager, jr as SandboxFleetWorkspaceReconcileResult, jt as FileReadBatchResult, k as AccessPolicyRule, ki as TaskSessionCommitResult, kn as PermissionsManager, kr as SandboxFleetUsage, kt as FileInfo, l as toOtelJson, la as defineAgentProfile, li as SentSessionMessage, ln as GpuType, lr as SandboxFleetCostEstimate, m as InteractiveSessionHost, mi as SessionListOptions, mn as IntelligenceReportBudget, mr as SandboxFleetInfo, mt as DeleteOptions, n as SandboxInstance, na as AgentProfilePermissionValue, ni as ScopedTokenScope, nn as GpuLeaseBilling, nr as SSHCredentials, o as buildTraceExportPayload, oa as AgentProfileValidationIssue, oi as SecretsManager, on as GpuLeaseManager, or as SandboxEvent, ot as CreateIntelligenceReportOptions, p as InteractiveSessionHandle, pi as SessionInfo, pn as IntelligenceReport, pr as SandboxFleetDriverTimings, pt as CreateTaskSessionOptions, q as BatchSidecarGroup, qi as WriteManyFile, qn as PublicTemplateVersionInfo, qr as SandboxTerminalInfo, r as TraceExportFormat, ra as AgentProfilePrompt, ri as SearchMatch, rn as GpuLeaseCommandResult, rr as SandboxClientConfig, rt as CommitTaskSessionOptions, s as exportTraceBundle, sa as AgentProfileValidationResult, si as SendSessionMessageOptions, sn as GpuLeaseProviderName, sr as SandboxFleetArtifact, ta as AgentProfileModelHints, ti as ScopedToken, tn as GpuLease, tr as SSHCommandDescriptor, tt as CodeResult, u as SandboxTaskSession, ua as defineGitHubResource, ui as SessionBackendCredentials, un as HostAgentDriverConfig, ur as SandboxFleetDispatchFailureClass, ut as CreateSandboxFleetWithCoordinatorOptions, v as StartInteractiveOptions, vi as SnapshotInfo, vn as ListMessagesOptions, vr as SandboxFleetMachineRecord, vt as DownloadOptions, w as SandboxMcpEndpoint, wi as StorageConfig, wn as MkdirOptions, wr as SandboxFleetToken, wt as EgressManager, x as CONTROL_PLANE_MCP_SERVER_NAME, xn as ListSandboxOptions, xr as SandboxFleetManifestMachine, xt as DriverConfig, y as BuildControlPlaneMcpConfigOptions, yi as SnapshotOptions, yn as ListOptions, yr as SandboxFleetMachineSpec, yt as DownloadProgress, z as BatchBackend, zi as ToolsConfig, zr as SandboxProfileSummary, zt as FleetDispatchCancelResult } from "./sandbox-Bm2C9Phd.js";
-import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-8wOu9raV.js";
-import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-D-2pH_70.js";
-import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-D7bwmNs8.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-H9268M_g.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DS4SOkKG.js";
+import { $ as EventStreamOptions, $n as SandboxFleetPolicy, $r as StartupOperation, $t as NetworkConfig, A as CommitTaskSessionOptions, Ai as AgentProfileMcpServer, An as RunCodeOptions, Ar as SandboxUser, At as GpuLeaseCommandResult, B as CreateTaskSessionOptions, Bi as defineGitHubResource, Bn as SandboxFleetDispatchFailureClass, Br as SessionBackendCredentials, Bt as IntelligenceReport, C as BatchTaskUsage, Ci as WriteManyFile, Cn as PublishPublicTemplateVersionOptions, Cr as SandboxTerminalInfo, Ct as GitBranch, Di as AgentProfileConfidential, Dn as ReconcileSandboxFleetsResult, Dr as SandboxTraceEvent, Dt as GitStatus, Ei as AgentProfileCapabilities, En as ReconcileSandboxFleetsOptions, Er as SandboxTraceBundle, Et as GitDiff, F as CreateSandboxFleetOptions, Fi as AgentProfileResources, Fn as SandboxEnvironment, Fr as SecretInfo, Ft as GpuLeaseStatus, G as DownloadOptions, Gn as SandboxFleetIntelligenceEnvelope, Gr as SessionMessage, H as DirectoryPermission, Hi as mergeAgentProfiles, Hn as SandboxFleetDriverCapability, Hr as SessionForkOptions, Ht as IntelligenceReportCompareTo, Ii as AgentProfileValidationIssue, In as SandboxEvent, Ir as SecretsManager, It as GpuType, J as DriverConfig, Jn as SandboxFleetMachineRecord, Jr as SnapshotInfo, Jt as ListSandboxFleetOptions, K as DownloadProgress, Kn as SandboxFleetMachine, Kr as SessionMessageInputPart, Kt as ListMessagesOptions, L as CreateSandboxFleetWithCoordinatorOptions, Li as AgentProfileValidationResult, Ln as SandboxFleetArtifact, Lr as SendSessionMessageOptions, Lt as HostAgentDriverConfig, M as CreateGpuLeaseOptions, Mi as AgentProfilePermissionValue, Mn as SSHCredentials, Mr as ScopedTokenScope, Mt as GpuLeaseExecResult, N as CreateIntelligenceReportOptions, Ni as AgentProfilePrompt, Nn as SandboxClientConfig, Nr as SearchMatch, Nt as GpuLeaseManager, O as CodeResult, Oi as AgentProfileConnection, Or as SandboxTraceExport, Ot as GpuLease, Pi as AgentProfileResourceRef, Pn as SandboxConnection, Pr as SearchOptions, Pt as GpuLeaseProviderName, Q as EgressPolicy, Qn as SandboxFleetOperationsSummary, Qr as StartupDiagnostics, Qt as MkdirOptions, R as CreateSandboxOptions, Ri as AgentSubagentProfile, Rn as SandboxFleetArtifactSpec, Rr as SendSessionMessageRequest, Rt as HostAgentRuntimeBackend, S as BatchTaskResult, Si as WriteFileOptions, Sn as PublishPublicTemplateOptions, Sr as SandboxTerminalCreateOptions, St as GitAuth, Ti as AgentProfile, Tn as ReapExpiredSandboxFleetsResult, Tr as SandboxTerminalRequestOptions, Tt as GitConfig, U as DispatchPromptOptions, Un as SandboxFleetDriverTimings, Ur as SessionInfo, Ut as IntelligenceReportSubjectType, V as DeleteOptions, Vi as defineInlineResource, Vn as SandboxFleetDispatchResponse, Vr as SessionEventStreamOptions, Vt as IntelligenceReportBudget, W as DispatchedSession, Wn as SandboxFleetInfo, Wr as SessionListOptions, Wt as IntelligenceReportWindow, X as DriverType, Xn as SandboxFleetManifest, Xr as SnapshotResult, Xt as McpServerConfig, Y as DriverInfo, Yn as SandboxFleetMachineSpec, Yr as SnapshotOptions, Yt as ListSandboxOptions, Z as EgressManager, Zn as SandboxFleetManifestMachine, Zt as MintScopedTokenOptions, _ as BatchResult, _i as UpdateUserOptions, _n as ProvisionResult, _r as SandboxResources, a as AttachSandboxFleetMachineOptions, ai as TaskSessionCommitResult, an as PreviewLinkManager, ar as SandboxFleetUsage, at as FileReadError, b as BatchSidecarGroup, bi as UsageInfo, bn as PublicTemplateInfo, br as SandboxRuntimeProfileList, c as BackendInfo, ci as TaskSessionProfile, cn as ProcessLogEntry, cr as SandboxFleetWorkspaceRestoreResult, ct as FileTreeFile, d as BackendType, di as TeeAttestationResponse, dn as ProcessSpawnOptions, dr as SandboxIntelligenceEnvelope, dt as FileWriteResult, ei as StorageConfig, en as NetworkManager, er as SandboxFleetToken, et as ExecOptions, f as BatchBackend, fi as TeePublicKey, fn as ProcessStatus, fr as SandboxPermissionsConfig, ft as FleetDispatchCancelResult, g as BatchOptions, gi as TurnDriveResult, gn as ProvisionEvent, gr as SandboxResourceUsage, gt as FleetExecDispatchOptions, h as BatchEventDataMap, hi as ToolsConfig, hn as PromptResult, hr as SandboxProfileSummary, ht as FleetDispatchStreamOptions, i as AttachGpuLeaseOptions, ii as TaskSessionChanges, in as PreviewLinkInfo, ir as SandboxFleetTraceOptions, it as FileReadBatchResult, j as CompletedTurnResult, ji as AgentProfileModelHints, jn as SSHCommandDescriptor, jr as ScopedToken, jt as GpuLeaseExecOptions, ki as AgentProfileFileMount, kr as SandboxTraceOptions, kt as GpuLeaseBilling, l as BackendManager, li as TeeAttestationOptions, ln as ProcessManager, lr as SandboxFleetWorkspaceSnapshotResult, lt as FileTreeOptions, m as BatchEvent, mi as TokenRefreshHandler, mn as PromptOptions, mr as SandboxPortPreviewLink, mt as FleetDispatchResultBufferOptions, n as AccessPolicyRule, ni as TaskOptions, nn as PermissionLevel, nr as SandboxFleetTraceEvent, nt as FileInfo, o as BackendCapabilities, oi as TaskSessionFileChange, on as Process, or as SandboxFleetWorkspace, ot as FileReadResult, p as BatchBackendStats, pi as TeePublicKeyResponse, pr as SandboxPortBinding, pt as FleetDispatchResultBuffer, q as DriveTurnOptions, qn as SandboxFleetMachineMeteredUsage, qr as SessionStatus, qt as ListOptions, r as AddUserOptions, ri as TaskResult, rn as PermissionsManager, rr as SandboxFleetTraceExport, rt as FileReadBatchOptions, s as BackendConfig, si as TaskSessionInfo, sn as ProcessInfo, sr as SandboxFleetWorkspaceReconcileResult, st as FileSystem, t as AcceleratorKind, ti as SubscriptionInfo, tn as NonHostAgentDriverConfig, tr as SandboxFleetTraceBundle, tt as ExecResult, u as BackendStatus, ui as TeeAttestationReport, un as ProcessSignal, ur as SandboxInfo, ut as FileTreeResult, v as BatchRunOptions, vi as UploadOptions, vn as ProvisionStatus, vr as SandboxRuntimeHealth, vt as FleetMachineId, w as BranchOptions, wi as WriteManyOptions, wn as ReapExpiredSandboxFleetsOptions, wr as SandboxTerminalManager, wt as GitCommit, x as BatchTask, xi as WaitForOptions, xn as PublicTemplateVersionInfo, xr as SandboxStatus, xt as GPU_LEASE_PROVIDER_NAMES, y as BatchRunRequest, yi as UploadProgress, yn as ProvisionStep, yr as SandboxRuntimeProfile, yt as FleetPromptDispatchOptions, z as CreateSessionOptions, zi as defineAgentProfile, zn as SandboxFleetCostEstimate, zr as SentSessionMessage, zt as InstalledTool } from "./types-Cmpv-ox_.js";
+import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-BhYmj7L3.js";
+import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-Cr39zlgv.js";
+import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-CyHojkuA.js";
+import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DKzapw-9.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DzEUjav-.js";
 
 //#region src/attestation-heartbeat.d.ts
 interface TeeAttestationHeartbeatSample {

package/dist/index.js

@@ -1,8 +1,9 @@
-import { _ as normalizeRuntimeBackendConfig, a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as parseSSEStream, h as encodeTextForWire, i as SandboxSession, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload, v as serializeForSidecar } from "./sandbox-CeimsfC8.js";
+import { i as serializeForSidecar, r as normalizeRuntimeBackendConfig } from "./runtime-api-CYA2DUQw.js";
 import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
-import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-B3oM6E-L.js";
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-D17lnOJX.js";
-import { t as TangleSandboxClient } from "./tangle-DayyZe-i.js";
+import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as parseSSEStream, h as encodeTextForWire, i as SandboxSession, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-CxBHIBV1.js";
+import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-Df1K1d_Q.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-QZXrXdIb.js";
+import { t as TangleSandboxClient } from "./tangle-BdRRHMpX.js";
 import { defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
 //#region src/confidential.ts
 function generateAttestationNonce(bytes = 32) {

package/dist/runtime-api-CYA2DUQw.js

@@ -0,0 +1,434 @@
+import { f as ValidationError, l as ServerError, p as parseErrorResponse } from "./errors-DSz87Rkk.js";
+//#region src/backend-config.ts
+const LEGACY_QUESTION_ALIAS_KEY = ["question", "Channel"].join("");
+function parseModelString(model) {
+	const parts = model.split("/");
+	if (parts.length >= 2) return {
+		provider: parts[0],
+		model: parts.slice(1).join("/")
+	};
+	return { model };
+}
+/**
+* Normalize runtime backend config for the wire format.
+*
+* Callers set `backend.profile` (named string or portable AgentProfile).
+* This function generates the native `inlineProfile` shim automatically.
+*/
+function normalizeRuntimeBackendConfig(backend, options = {}) {
+	if (!backend && !options.model) return void 0;
+	if (backend && LEGACY_QUESTION_ALIAS_KEY in backend) throw new Error(`[sandbox-sdk] backend.${LEGACY_QUESTION_ALIAS_KEY} was removed. Use backend.interactions.question instead.`);
+	const portableProfile = backend?.profile && typeof backend.profile !== "string" ? backend.profile : void 0;
+	const inlineProfile = portableProfile ? toBackendProfile(portableProfile) : void 0;
+	const callerInlineProfile = backend?.inlineProfile;
+	if (callerInlineProfile && !inlineProfile) console.warn("[sandbox-sdk] backend.inlineProfile is deprecated. Use backend.profile (AgentPortableProfile) instead.");
+	if (inlineProfile && portableProfile) {
+		const reasoningEffort = portableProfile.model?.reasoningEffort ?? portableProfile.extensions?.[backend?.type ?? ""]?.reasoningEffort;
+		if (typeof reasoningEffort === "string" && reasoningEffort !== "auto" && reasoningEffort !== "none") inlineProfile.reasoningEffort = reasoningEffort;
+	}
+	return {
+		...backend?.type ? { type: backend.type } : {},
+		...typeof backend?.profile === "string" ? { profile: backend.profile } : {},
+		...inlineProfile ? { inlineProfile } : callerInlineProfile ? { inlineProfile: callerInlineProfile } : {},
+		...backend?.model ? { model: backend.model } : options.model ? { model: parseModelString(options.model) } : {},
+		...backend?.server ? { server: backend.server } : {},
+		...backend?.interactions !== void 0 ? { interactions: backend.interactions } : {},
+		...backend?.metadata !== void 0 ? { metadata: backend.metadata } : {}
+	};
+}
+/**
+* Permission keys the sidecar's strict `permission` schema accepts
+* (apps/sidecar/src/schemas/agent-profile-schema.ts → permissionConfigSchema).
+* Any other portable-permission key is a per-tool gate, not a permission, and
+* is routed into `tools` instead of passed through — the sidecar's `.strict()`
+* schema rejects unknown permission keys with `unrecognized_keys`.
+*
+* Name must not carry an UPPERCASE `SIDECAR_`/`ORCHESTRATOR_`-style prefix:
+* obfuscate.sh runs `--rename-globals false`, so a module-global identifier
+* ships verbatim in dist/, and verify-dist.sh bans those prefixes as
+* closed-source leaks.
+*/
+const CANONICAL_PERMISSION_KEYS = new Set([
+	"edit",
+	"bash",
+	"webfetch",
+	"mcp",
+	"doom_loop",
+	"external_directory"
+]);
+function hasAnyProfileResource(resources) {
+	return !!(resources.files?.length || resources.tools?.length || resources.skills?.length || resources.agents?.length || resources.commands?.length || resources.instructions);
+}
+function validateProfileResources(profile) {
+	if (profile.resources !== void 0 && (profile.resources === null || typeof profile.resources !== "object" || Array.isArray(profile.resources))) throw new Error("backend.profile.resources must be an object when provided");
+	if (profile.resources?.plugins?.length) throw new Error("backend.profile.resources.plugins is not supported by the sandbox SDK profile contract; use backend-specific provider profiles for OpenCode plugin resources");
+}
+function toBackendProfile(profile) {
+	validateProfileResources(profile);
+	const permission = {};
+	const derivedTools = {};
+	for (const [rawKey, value] of Object.entries(profile.permissions ?? {})) {
+		const key = rawKey === "network" ? "webfetch" : rawKey;
+		if (CANONICAL_PERMISSION_KEYS.has(key)) permission[key] = value;
+		else if (typeof value === "string") derivedTools[key] = value !== "deny";
+		else console.warn(`[sandbox-sdk] dropping unsupported permission key "${rawKey}": not a canonical sidecar permission and not a string tool gate`);
+	}
+	const tools = {
+		...derivedTools,
+		...profile.tools ?? {}
+	};
+	const mcp = profile.mcp ? Object.fromEntries(Object.entries(profile.mcp).map(([name, config]) => {
+		const c = config;
+		const transport = c.transport;
+		const command = c.command;
+		const hasCommand = Array.isArray(command) ? command.length > 0 : typeof command === "string" && command.trim().length > 0;
+		const isRemote = transport === "http" || transport === "sse" || typeof c.url === "string" && !hasCommand;
+		const enabled = c.enabled;
+		const timeout = c.timeout;
+		if (isRemote) return [name, {
+			type: "remote",
+			url: c.url,
+			...c.headers ? { headers: c.headers } : {},
+			...enabled !== void 0 ? { enabled } : {},
+			...timeout !== void 0 ? { timeout } : {}
+		}];
+		return [name, {
+			type: "local",
+			command: [...Array.isArray(command) ? command : typeof command === "string" ? command.trim().split(/\s+/).filter(Boolean) : [], ...c.args ?? []],
+			...c.env ? { environment: c.env } : {},
+			...enabled !== void 0 ? { enabled } : {},
+			...timeout !== void 0 ? { timeout } : {}
+		}];
+	})) : void 0;
+	const openCodeExtension = profile.extensions?.opencode;
+	const plugins = openCodeExtension?.plugins;
+	if (plugins !== void 0 && (!Array.isArray(plugins) || plugins.some((plugin) => typeof plugin !== "string" || !plugin.trim()))) throw new Error("backend.profile.extensions.opencode.plugins must be an array of non-empty package names");
+	const commands = openCodeExtension?.commands;
+	if (commands !== void 0 && (commands === null || typeof commands !== "object" || Array.isArray(commands))) throw new Error("backend.profile.extensions.opencode.commands must be an object");
+	const profileExtends = openCodeExtension?.extends;
+	if (profileExtends !== void 0 && typeof profileExtends !== "string" && (!Array.isArray(profileExtends) || profileExtends.some((entry) => typeof entry !== "string" || !entry.trim()))) throw new Error("backend.profile.extensions.opencode.extends must be a profile name or array of profile names");
+	const agents = profile.subagents ? Object.fromEntries(Object.entries(profile.subagents).map(([name, subagent]) => [name, {
+		description: subagent.description,
+		prompt: subagent.prompt,
+		model: subagent.model,
+		tools: subagent.tools,
+		permission: subagent.permissions,
+		maxSteps: subagent.maxSteps,
+		...subagent.metadata ?? {}
+	}])) : void 0;
+	return {
+		name: profile.name,
+		description: profile.description,
+		version: profile.version,
+		tags: profile.tags,
+		...profileExtends ? { extends: profileExtends } : {},
+		model: profile.model?.default,
+		small_model: profile.model?.small,
+		...profile.prompt?.systemPrompt ? { systemPrompt: profile.prompt.systemPrompt } : {},
+		...Object.keys(tools).length > 0 ? { tools } : {},
+		...profile.prompt?.instructions?.length ? { instructions: profile.prompt.instructions } : {},
+		...Object.keys(permission).length > 0 ? { permission } : {},
+		...mcp ? { mcp } : {},
+		...profile.connections?.length ? { connections: profile.connections } : {},
+		...agents ? { agent: agents } : {},
+		...profile.resources && hasAnyProfileResource(profile.resources) ? { resources: profile.resources } : {},
+		...profile.hooks ? { hooks: profile.hooks } : {},
+		...profile.modes ? { modes: profile.modes } : {},
+		...commands ? { command: commands } : {},
+		...plugins?.length ? { plugin: plugins } : {},
+		...profile.extensions ? { extensions: profile.extensions } : {}
+	};
+}
+/**
+* Serialize a portable AgentProfile into the sidecar's canonical inline-profile
+* wire shape (validated by inlineProfileSchema in
+* apps/sidecar/src/schemas/agent-profile-schema.ts).
+*
+* Single choke point every product shares: streamPrompt →
+* normalizeRuntimeBackendConfig → toBackendProfile. Exported so callers and the
+* drift-guard test target one contract — the test parses this output with the
+* sidecar's own schema, so any future schema tightening fails here first.
+*/
+function serializeForSidecar(profile) {
+	return toBackendProfile(profile);
+}
+//#endregion
+//#region src/runtime-api.ts
+/** Internal typed client for routes served by a sandbox runtime. */
+var SandboxRuntimeApi = class {
+	terminals;
+	constructor(transport) {
+		this.transport = transport;
+		this.terminals = {
+			create: (options, request) => this.createTerminal(options, request),
+			input: (terminalId, data, request) => this.writeTerminal(terminalId, data, request),
+			list: () => this.listTerminals(),
+			get: (terminalId) => this.getTerminal(terminalId)
+		};
+	}
+	async health() {
+		await this.transport.ensureRunning();
+		return this.json("/health", { method: "GET" });
+	}
+	async ports() {
+		await this.transport.ensureRunning();
+		return (await this.json("/ports", { method: "GET" })).data?.ports ?? [];
+	}
+	async profiles() {
+		await this.transport.ensureRunning();
+		return this.json("/profiles", { method: "GET" });
+	}
+	async readFiles(paths, options = {}) {
+		if (paths.length === 0) return {
+			files: [],
+			errors: [],
+			stats: {
+				requested: 0,
+				succeeded: 0,
+				failed: 0
+			}
+		};
+		await this.transport.ensureRunning();
+		const files = [];
+		const errors = [];
+		let requested = 0;
+		let succeeded = 0;
+		let failed = 0;
+		for (let offset = 0; offset < paths.length; offset += 100) {
+			const chunk = paths.slice(offset, offset + 100);
+			const params = new URLSearchParams();
+			if (options.sessionId) params.set("sessionId", options.sessionId);
+			const query = params.toString();
+			const payload = await this.json(`/files/read-batch${query ? `?${query}` : ""}`, {
+				method: "POST",
+				body: JSON.stringify({
+					paths: chunk,
+					...options.encoding ? { encoding: options.encoding } : {}
+				})
+			});
+			for (const [path, result] of Object.entries(payload.data.files)) if (result.success) files.push({
+				path,
+				content: result.content,
+				encoding: result.encoding,
+				hash: result.hash,
+				size: result.size,
+				mtime: result.mtime
+			});
+			else errors.push({
+				path,
+				error: result.error,
+				code: result.code
+			});
+			const results = Object.values(payload.data.files);
+			requested += payload.data.stats?.requested ?? chunk.length;
+			succeeded += payload.data.stats?.succeeded ?? results.filter((entry) => entry.success).length;
+			failed += payload.data.stats?.failed ?? results.filter((entry) => !entry.success).length;
+		}
+		return {
+			files,
+			errors,
+			stats: {
+				requested,
+				succeeded,
+				failed
+			}
+		};
+	}
+	async writeFile(path, content, options = {}) {
+		await this.transport.ensureRunning();
+		const params = new URLSearchParams();
+		if (options.sessionId) params.set("sessionId", options.sessionId);
+		const query = params.toString();
+		return (await this.json(`/files/write${query ? `?${query}` : ""}`, {
+			method: "POST",
+			body: JSON.stringify({
+				path,
+				content,
+				...options.encoding !== void 0 ? { encoding: options.encoding } : {},
+				...options.mode !== void 0 ? { mode: options.mode } : {}
+			})
+		})).data;
+	}
+	async deleteFile(path, options = {}) {
+		await this.transport.ensureRunning();
+		const params = new URLSearchParams();
+		if (options.sessionId) params.set("sessionId", options.sessionId);
+		const query = params.toString();
+		await this.request(`/files/delete${query ? `?${query}` : ""}`, {
+			method: "POST",
+			body: JSON.stringify({ path })
+		});
+	}
+	async fileTree(path, options = {}) {
+		if (options.maxDepth !== void 0 && (!Number.isInteger(options.maxDepth) || options.maxDepth < 1 || options.maxDepth > 20)) throw new ValidationError("maxDepth must be an integer between 1 and 20");
+		await this.transport.ensureRunning();
+		const params = new URLSearchParams({ path });
+		if (options.maxDepth !== void 0) params.set("maxDepth", String(options.maxDepth));
+		if (options.sessionId) params.set("sessionId", options.sessionId);
+		return (await this.json(`/files/tree?${params}`, { method: "GET" })).data;
+	}
+	async createSession(options) {
+		await this.transport.ensureRunning();
+		const info = normalizeSessionInfo(await this.json("/agents/sessions", {
+			method: "POST",
+			body: JSON.stringify({
+				...options.title !== void 0 ? { title: options.title } : {},
+				...options.parentId !== void 0 ? { parentID: options.parentId } : {},
+				backend: normalizeRuntimeBackendConfig(options.backend)
+			})
+		}));
+		if (!info) throw new ServerError("Session creation response missing session id", 502, {
+			endpoint: "/agents/sessions",
+			origin: "runtime"
+		});
+		return info;
+	}
+	async messages(id, options = {}) {
+		await this.transport.ensureRunning();
+		const params = new URLSearchParams({ sessionId: id });
+		if (options.limit !== void 0) params.set("limit", String(options.limit));
+		if (options.offset !== void 0) params.set("offset", String(options.offset));
+		if (options.since !== void 0) params.set("since", String(options.since));
+		const query = params.toString();
+		return (await this.json(`/messages${query ? `?${query}` : ""}`, { method: "GET" })).map((message) => ({
+			id: message.info.id,
+			role: message.info.role,
+			timestamp: message.info.timestamp,
+			parts: message.parts,
+			metadata: message.info.metadata
+		}));
+	}
+	async createTaskSession(options) {
+		await this.transport.ensureRunning();
+		const info = await this.json("/tasks", {
+			method: "POST",
+			body: JSON.stringify({
+				sessionId: options.sessionId,
+				backend: normalizeRuntimeBackendConfig(options.backend),
+				title: options.title,
+				...options.parentSessionId !== void 0 ? { parentSessionId: options.parentSessionId } : {},
+				...options.profile !== void 0 ? { profile: options.profile } : {},
+				...options.isolateFileWrites !== void 0 ? { isolateFileWrites: options.isolateFileWrites } : {}
+			})
+		});
+		if (!info.id) throw new ServerError("Task session creation response missing session id", 502, {
+			endpoint: "/tasks",
+			origin: "runtime"
+		});
+		return info;
+	}
+	async sendSessionMessage(id, request, options = {}) {
+		if (options.timeoutMs !== void 0 && options.timeoutMs <= 0) throw new ValidationError("timeoutMs must be greater than zero");
+		await this.transport.ensureRunning();
+		const headers = new Headers({ "x-no-retry": "true" });
+		if (options.credentials?.apiKey) headers.set("X-Backend-Api-Key", options.credentials.apiKey);
+		if (options.credentials?.baseUrl) headers.set("X-Backend-Base-Url", options.credentials.baseUrl);
+		const timeoutSignal = options.timeoutMs !== void 0 ? AbortSignal.timeout(options.timeoutMs) : void 0;
+		const signal = options.signal && timeoutSignal ? AbortSignal.any([options.signal, timeoutSignal]) : options.signal ?? timeoutSignal;
+		return this.json(`/agents/sessions/${encodeURIComponent(id)}/messages`, {
+			method: "POST",
+			headers,
+			signal,
+			body: JSON.stringify({
+				...request.messageId !== void 0 ? { messageID: request.messageId } : {},
+				parts: request.parts,
+				...request.system !== void 0 ? { system: request.system } : {},
+				...request.agent !== void 0 ? { agent: request.agent } : {},
+				...request.model !== void 0 ? { model: {
+					providerID: request.model.providerId,
+					modelID: request.model.modelId
+				} } : {},
+				...request.reasoningEffort !== void 0 ? { reasoningEffort: request.reasoningEffort } : {},
+				...request.turnId !== void 0 ? { turnId: request.turnId } : {},
+				...request.interactions !== void 0 ? { interactions: request.interactions } : {}
+			})
+		});
+	}
+	async deleteSession(id) {
+		await this.transport.ensureRunning();
+		await this.request(`/agents/sessions/${encodeURIComponent(id)}`, { method: "DELETE" });
+	}
+	async taskSessionChanges(id) {
+		await this.transport.ensureRunning();
+		return this.json(`/tasks/${encodeURIComponent(id)}/changes`, { method: "GET" });
+	}
+	async commitTaskSession(id, options = {}) {
+		await this.transport.ensureRunning();
+		return this.json(`/tasks/${encodeURIComponent(id)}/changes`, {
+			method: "POST",
+			body: JSON.stringify({
+				...options.message !== void 0 ? { message: options.message } : {},
+				...options.files !== void 0 ? { files: options.files } : {}
+			})
+		});
+	}
+	async createTerminal(options = {}, request = {}) {
+		await this.transport.ensureRunning();
+		const params = new URLSearchParams();
+		if (request.sessionId) params.set("sessionId", request.sessionId);
+		const query = params.toString();
+		return (await this.json(`/terminals${query ? `?${query}` : ""}`, {
+			method: "POST",
+			body: JSON.stringify(options)
+		})).data;
+	}
+	async writeTerminal(terminalId, data, request = {}) {
+		await this.transport.ensureRunning();
+		const params = new URLSearchParams();
+		if (request.sessionId) params.set("sessionId", request.sessionId);
+		const query = params.toString();
+		await this.request(`/terminals/${encodeURIComponent(terminalId)}/input${query ? `?${query}` : ""}`, {
+			method: "POST",
+			body: JSON.stringify({ data })
+		});
+	}
+	async listTerminals() {
+		await this.transport.ensureRunning();
+		return (await this.json("/terminals", { method: "GET" })).data ?? [];
+	}
+	async getTerminal(terminalId) {
+		await this.transport.ensureRunning();
+		const response = await this.transport.fetch(`/terminals/${encodeURIComponent(terminalId)}`, { method: "GET" });
+		if (response.status === 404) return null;
+		await this.assertOk(response);
+		return (await response.json()).data;
+	}
+	async json(path, init) {
+		return await (await this.request(path, init)).json();
+	}
+	async request(path, init) {
+		const response = await this.transport.fetch(path, init);
+		await this.assertOk(response);
+		return response;
+	}
+	async assertOk(response) {
+		if (response.ok) return;
+		const body = await response.text();
+		throw parseErrorResponse(response.status, body, void 0, response.headers);
+	}
+};
+function normalizeSessionInfo(raw) {
+	const id = raw.id;
+	if (typeof id !== "string") return null;
+	const status = raw.status || "running";
+	return {
+		id,
+		parentId: typeof raw.parentID === "string" ? raw.parentID : typeof raw.parentId === "string" ? raw.parentId : void 0,
+		status: [
+			"queued",
+			"running",
+			"completed",
+			"failed",
+			"cancelled"
+		].includes(status) ? status : "running",
+		backend: typeof raw.backendType === "string" ? raw.backendType : typeof raw.backend === "string" ? raw.backend : void 0,
+		model: typeof raw.model === "string" ? raw.model : void 0,
+		promptCount: typeof raw.promptCount === "number" ? raw.promptCount : void 0,
+		createdAt: raw.createdAt ? new Date(raw.createdAt) : void 0,
+		startedAt: raw.startedAt ? new Date(raw.startedAt) : void 0,
+		endedAt: raw.endedAt ? new Date(raw.endedAt) : void 0,
+		raw
+	};
+}
+//#endregion
+export { serializeForSidecar as i, normalizeSessionInfo as n, normalizeRuntimeBackendConfig as r, SandboxRuntimeApi as t };