@tangle-network/sandbox 0.10.4 → 0.10.5-develop.20260713235503.8f2cefc

package/README.md

@@ -206,6 +206,19 @@ client.connect();
 detection, replay-on-reconnect, and `lastEventId` persistence. None of this requires a
 Durable Object.
 
+Server-originated product events can arrive before the browser connects:
+
+```typescript
+await client.broadcastSessionAgentEvent(sessionId, {
+  type: "project.provision_progress",
+  properties: { message: "Creating workspace" },
+});
+```
+
+The public API binds that pending queue to the authenticated product and Sandbox account and commits it to Redis before returning `success: true`.
+A later connection by the same owner leases and acknowledges the ordered queue; another owner receives none of it.
+A gateway crash before acknowledgement redelivers the same event IDs, which the default `SessionGatewayClient` deduplicates before invoking handlers.
+
 See `examples/cf-worker-chat.ts`, `examples/browser-streaming-resume.ts`, and
 `examples/reconnect-from-last-event-id.ts` for end-to-end patterns.
 

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { D as CodeLanguage, E as CodeExecutionResult, T as CodeExecutionOptions, k as CodeResultPart } from "../types-BvSoEHz8.js";
-import { n as SandboxInstance } from "../sandbox-BtNWbfd3.js";
-import { i as SandboxClient } from "../client-B8i6qrQr.js";
+import { D as CodeLanguage, E as CodeExecutionResult, T as CodeExecutionOptions, k as CodeResultPart } from "../types-yNRVRww-.js";
+import { n as SandboxInstance } from "../sandbox-BvNEOnIl.js";
+import { i as SandboxClient } from "../client-C-4NcZoa.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-B8i6qrQr.d.ts → client-C-4NcZoa.d.ts}

@@ -1,5 +1,5 @@
-import { Bn as SandboxClientConfig, Bt as IntelligenceReport, Cn as PublishPublicTemplateVersionOptions, Di as UsageInfo, Dn as ReconcileSandboxFleetsResult, En as ReconcileSandboxFleetsOptions, F as CreateSandboxFleetOptions, Gn as SandboxFleetArtifactSpec, Hn as SandboxEnvironment, Ht as IntelligenceReportCompareTo, I as CreateSandboxFleetTokenOptions, Jn as SandboxFleetDispatchResponse, Jt as ListSandboxFleetOptions, Kn as SandboxFleetCostEstimate, L as CreateSandboxFleetWithCoordinatorOptions, N as CreateIntelligenceReportOptions, P as CreateRequestOptions, R as CreateSandboxOptions, Sn as PublishPublicTemplateOptions, Sr as SandboxProfileSummary, Tn as ReapExpiredSandboxFleetsResult, Ur as SecretsManager, Vt as IntelligenceReportBudget, Wn as SandboxFleetArtifact, Wt as IntelligenceReportWindow, Yn as SandboxFleetDriverCapability, Yt as ListSandboxOptions, Zn as SandboxFleetInfo, _ as BatchResult, _r as SandboxInfo, _t as FleetExecDispatchResult, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetOperationsSummary, bn as PublicTemplateInfo, bt as FleetPromptDispatchResult, ci as SubscriptionInfo, cr as SandboxFleetTraceBundle, dr as SandboxFleetTraceOptions, et as ExecOptions, fr as SandboxFleetUsage, ft as FleetDispatchCancelResult, g as BatchOptions, gr as SandboxFleetWorkspaceSnapshotResult, gt as FleetExecDispatchOptions, hn as PromptResult, hr as SandboxFleetWorkspaceRestoreResult, ht as FleetDispatchStreamOptions, ii as SshKeysManager, m as BatchEvent, mn as PromptOptions, mr as SandboxFleetWorkspaceReconcileResult, mt as FleetDispatchResultBufferOptions, pn as PromptInputPart, pt as FleetDispatchResultBuffer, rr as SandboxFleetManifest, sr as SandboxFleetToken, tr as SandboxFleetMachineRecord, tt as ExecResult, v as BatchRunOptions, vt as FleetMachineId, wn as ReapExpiredSandboxFleetsOptions, x as BatchTask, xi as TokenRefreshHandler, xn as PublicTemplateVersionInfo, y as BatchRunRequest, yt as FleetPromptDispatchOptions } from "./types-BvSoEHz8.js";
-import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-BtNWbfd3.js";
+import { $n as SandboxFleetInfo, Ci as TokenRefreshHandler, Cn as PublishPublicTemplateOptions, Dn as ReconcileSandboxFleetsOptions, En as ReapExpiredSandboxFleetsResult, F as CreateSandboxFleetOptions, Gr as SecretsManager, Gt as IntelligenceReportWindow, Hn as SandboxClientConfig, Ht as IntelligenceReportBudget, I as CreateSandboxFleetTokenOptions, Jn as SandboxFleetCostEstimate, Kn as SandboxFleetArtifact, L as CreateSandboxFleetWithCoordinatorOptions, N as CreateIntelligenceReportOptions, On as ReconcileSandboxFleetsResult, P as CreateRequestOptions, R as CreateSandboxOptions, Sn as PublicTemplateVersionInfo, Tn as ReapExpiredSandboxFleetsOptions, Ut as IntelligenceReportCompareTo, Vt as IntelligenceReport, Wn as SandboxEnvironment, Xn as SandboxFleetDispatchResponse, Xt as ListSandboxOptions, Yt as ListSandboxFleetOptions, Zn as SandboxFleetDriverCapability, _ as BatchResult, _r as SandboxFleetWorkspaceRestoreResult, _t as FleetExecDispatchOptions, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetManifest, bt as FleetPromptDispatchOptions, et as ExecOptions, g as BatchOptions, gn as PromptResult, gr as SandboxFleetWorkspaceReconcileResult, gt as FleetDispatchStreamOptions, hn as PromptOptions, ht as FleetDispatchResultBufferOptions, ki as UsageInfo, lr as SandboxFleetToken, m as BatchEvent, mn as PromptInputPart, mr as SandboxFleetUsage, mt as FleetDispatchResultBuffer, oi as SshKeysManager, pr as SandboxFleetTraceOptions, pt as FleetDispatchCancelResult, qn as SandboxFleetArtifactSpec, rr as SandboxFleetMachineRecord, sr as SandboxFleetOperationsSummary, tt as ExecResult, ui as SubscriptionInfo, ur as SandboxFleetTraceBundle, v as BatchRunOptions, vr as SandboxFleetWorkspaceSnapshotResult, vt as FleetExecDispatchResult, wn as PublishPublicTemplateVersionOptions, wr as SandboxProfileSummary, x as BatchTask, xn as PublicTemplateInfo, xt as FleetPromptDispatchResult, y as BatchRunRequest, yr as SandboxInfo, yt as FleetMachineId } from "./types-yNRVRww-.js";
+import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-BvNEOnIl.js";
 
 //#region src/lib/sse-parser.d.ts
 /**
@@ -194,7 +194,11 @@ interface SessionBroadcastEvent {
   data?: unknown;
   channel?: string;
 }
-/** Result returned after Sandbox accepts or rejects a session event. */
+/**
+ * Result returned after Sandbox accepts or rejects a session event.
+ * For a session that has not connected yet, `success: true` means the event
+ * was durably queued for the authenticated owner.
+ */
 interface SessionBroadcastResult {
   success: boolean;
   sessionId: string;

package/dist/{client-DTpHjPjc.js → client-CL_cbjU4.js}

@@ -1,5 +1,5 @@
-import { a as NotFoundError, d as TimeoutError, f as ValidationError, i as NetworkError, p as parseErrorResponse, t as AuthError } from "./errors-DSz87Rkk.js";
-import { d as exportTraceBundle, g as parseSSEStream, l as normalizeConnection, m as encodePromptForWire, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-Be9WAqSg.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, p as parseErrorResponse, t as AuthError } from "./errors-wd266B9Q.js";
+import { d as exportTraceBundle, g as parseSSEStream, l as normalizeConnection, m as encodePromptForWire, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-CIHssZCH.js";
 //#region src/resources.ts
 /**
 * Compute tiers, ordered smallest → largest. Defined HERE (not imported from
@@ -100,7 +100,7 @@ const DEFAULT_MACHINE_LIFETIME_SECONDS = 3600;
 const DEFAULT_MAX_CONCURRENT_CREATES = 4;
 const MAX_CONCURRENT_ARTIFACT_READS = 8;
 const DEFAULT_ARTIFACT_ROOT = "/workspace";
-const DEFAULT_MAX_ARTIFACT_BYTES = 25 * 1024 * 1024;
+const DEFAULT_MAX_ARTIFACT_BYTES = 10 * 1024 * 1024;
 const MAX_MACHINE_ID_LENGTH = 64;
 const machineIdPattern = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
 function createFleetId() {
@@ -997,6 +997,41 @@ const DEFAULT_TIMEOUT_MS = 3e4;
 */
 const DEFAULT_CREATE_TIMEOUT_MS = 12e4;
 const DEFAULT_GPU_CREATE_TIMEOUT_MS = 900 * 1e3;
+const CREATE_POST_MAX_ATTEMPTS = 5;
+const CREATE_RETRY_BASE_DELAY_MS = 250;
+const CREATE_RETRY_MAX_DELAY_MS = 4e3;
+const RETRYABLE_CREATE_STATUS_CODES = new Set([
+	408,
+	425,
+	429,
+	500,
+	502,
+	503,
+	504
+]);
+function isRetryableCreateError(error) {
+	if (error instanceof NetworkError) return true;
+	return error instanceof SandboxError && error.status !== void 0 && RETRYABLE_CREATE_STATUS_CODES.has(error.status);
+}
+function createRetryDelayMs(error, failedAttempt) {
+	if (error instanceof SandboxError && error.retryAfterMs !== void 0) return error.retryAfterMs;
+	return Math.min(CREATE_RETRY_BASE_DELAY_MS * 2 ** Math.max(0, failedAttempt - 1), CREATE_RETRY_MAX_DELAY_MS);
+}
+async function waitForCreateRetry(delayMs, signal) {
+	if (signal.aborted) throw signal.reason ?? /* @__PURE__ */ new Error("Sandbox create aborted");
+	if (delayMs <= 0) return;
+	await new Promise((resolve, reject) => {
+		const timeoutId = setTimeout(() => {
+			signal.removeEventListener("abort", onAbort);
+			resolve();
+		}, delayMs);
+		const onAbort = () => {
+			clearTimeout(timeoutId);
+			reject(signal.reason ?? /* @__PURE__ */ new Error("Sandbox create aborted"));
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+	});
+}
 /**
 * Extra grace the SDK's client-side batch deadline gets on top of
 * the server-side `timeoutMs`. The server's clock starts when the
@@ -1294,60 +1329,77 @@ var SandboxClient = class {
 		const resources = normalizeSandboxResources(options?.resources, options?.driver);
 		const postDeadline = AbortSignal.timeout(timeoutMs);
 		const postSignal = requestOptions?.signal ? AbortSignal.any([requestOptions.signal, postDeadline]) : postDeadline;
+		const createRequestBody = JSON.stringify({
+			name: options?.name,
+			...resolvedEnvironment !== void 0 ? {
+				environment: resolvedEnvironment,
+				image: resolvedEnvironment
+			} : {},
+			git,
+			tools: options?.tools,
+			bare: options?.bare,
+			...options?.publicEdge === false ? { publicEdge: false } : {},
+			driver: options?.driver,
+			backend: resolvedBackend,
+			permissions: options?.permissions,
+			env: options?.env,
+			resources,
+			gpuLease: options?.gpuLease,
+			sshEnabled: options?.sshEnabled,
+			sshPublicKeys: options?.sshPublicKeys ?? (options?.sshPublicKey ? [options.sshPublicKey] : void 0),
+			sshKeyIds: options?.sshKeyIds,
+			webTerminalEnabled: options?.webTerminalEnabled,
+			maxLifetimeSeconds: options?.maxLifetimeSeconds,
+			idleTimeoutSeconds: options?.idleTimeoutSeconds,
+			storage: options?.storage,
+			ephemeral: options?.ephemeral,
+			fromSnapshot: options?.fromSnapshot,
+			fromSandboxId: options?.fromSandboxId,
+			templateId: options?.templateId,
+			publicTemplateId: options?.publicTemplateId,
+			publicTemplateVersionId: options?.publicTemplateVersionId,
+			secrets: options?.secrets,
+			confidential: options?.confidential,
+			metadata: options?.metadata,
+			teamId: options?.teamId,
+			capabilities: options?.capabilities,
+			privacy: options?.privacy,
+			egressPolicy: options?.egressPolicy,
+			idempotencyKey
+		});
+		const createTimeoutError = () => new TimeoutError(timeoutMs, `Sandbox create did not complete within ${timeoutMs}ms. The provision may still be running server-side; retry create() with idempotencyKey="${idempotencyKey}" to join it.`);
+		const waitBeforeRetry = async (error, failedAttempt) => {
+			try {
+				await waitForCreateRetry(createRetryDelayMs(error, failedAttempt), postSignal);
+			} catch (waitError) {
+				if (requestOptions?.signal?.aborted) throw waitError;
+				throw createTimeoutError();
+			}
+		};
 		let response;
-		try {
-			response = await this.fetch("/v1/sandboxes", {
-				method: "POST",
-				headers: { "Idempotency-Key": idempotencyKey },
-				signal: postSignal,
-				body: JSON.stringify({
-					name: options?.name,
-					...resolvedEnvironment !== void 0 ? {
-						environment: resolvedEnvironment,
-						image: resolvedEnvironment
-					} : {},
-					git,
-					tools: options?.tools,
-					bare: options?.bare,
-					...options?.publicEdge === false ? { publicEdge: false } : {},
-					driver: options?.driver,
-					backend: resolvedBackend,
-					permissions: options?.permissions,
-					env: options?.env,
-					resources,
-					gpuLease: options?.gpuLease,
-					sshEnabled: options?.sshEnabled,
-					sshPublicKeys: options?.sshPublicKeys ?? (options?.sshPublicKey ? [options.sshPublicKey] : void 0),
-					sshKeyIds: options?.sshKeyIds,
-					webTerminalEnabled: options?.webTerminalEnabled,
-					maxLifetimeSeconds: options?.maxLifetimeSeconds,
-					idleTimeoutSeconds: options?.idleTimeoutSeconds,
-					storage: options?.storage,
-					ephemeral: options?.ephemeral,
-					fromSnapshot: options?.fromSnapshot,
-					fromSandboxId: options?.fromSandboxId,
-					templateId: options?.templateId,
-					publicTemplateId: options?.publicTemplateId,
-					publicTemplateVersionId: options?.publicTemplateVersionId,
-					secrets: options?.secrets,
-					confidential: options?.confidential,
-					metadata: options?.metadata,
-					teamId: options?.teamId,
-					capabilities: options?.capabilities,
-					privacy: options?.privacy,
-					egressPolicy: options?.egressPolicy,
-					idempotencyKey
-				})
-			});
-		} catch (err) {
-			if (requestOptions?.signal?.aborted) throw err;
-			if (err instanceof TimeoutError || err instanceof Error && (err.name === "AbortError" || err.name === "TimeoutError")) throw new TimeoutError(timeoutMs, `Sandbox create did not complete within ${timeoutMs}ms. The provision may still be running server-side; retry create() with idempotencyKey="${idempotencyKey}" to join it.`);
-			throw err;
-		}
-		if (!response.ok) {
+		for (let attempt = 1; attempt <= CREATE_POST_MAX_ATTEMPTS; attempt++) {
+			try {
+				response = await this.fetch("/v1/sandboxes", {
+					method: "POST",
+					headers: { "Idempotency-Key": idempotencyKey },
+					signal: postSignal,
+					body: createRequestBody
+				});
+			} catch (error) {
+				if (requestOptions?.signal?.aborted) throw error;
+				if (postDeadline.aborted || Date.now() >= deadline || error instanceof TimeoutError || error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError")) throw createTimeoutError();
+				if (attempt >= CREATE_POST_MAX_ATTEMPTS || !isRetryableCreateError(error)) throw error;
+				await waitBeforeRetry(error, attempt);
+				continue;
+			}
+			if (response.ok) break;
 			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
+			const error = parseErrorResponse(response.status, body, void 0, response.headers);
+			if (attempt >= CREATE_POST_MAX_ATTEMPTS || !isRetryableCreateError(error)) throw error;
+			await waitBeforeRetry(error, attempt);
+			response = void 0;
 		}
+		if (!response) throw createTimeoutError();
 		const data = await response.json();
 		const instance = new SandboxInstance(this, this.parseInfo(data), resolvedBackend);
 		if (instance.status === "provisioning" || instance.status === "pending") {

package/dist/collaboration/index.js

@@ -1,2 +1,2 @@
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-QZXrXdIb.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-CcZE2xMl.js";
 export { CollaborationClient, CollaborationFileBridge, buildCollaborationDocumentId, normalizeCollaborationPath, parseCollaborationDocumentId };

package/dist/{collaboration-QZXrXdIb.js → collaboration-CcZE2xMl.js}

@@ -1,4 +1,4 @@
-import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "./errors-DSz87Rkk.js";
+import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "./errors-wd266B9Q.js";
 //#region src/collaboration/client.ts
 const DEFAULT_TIMEOUT_MS = 3e4;
 function normalizeBaseUrl(url) {

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { $t as NetworkConfig, Bn as SandboxClientConfig, Or as SandboxStatus, R as CreateSandboxOptions, _r as SandboxInfo, an as PreviewLinkManager, et as ExecOptions, in as PreviewLinkInfo, tt as ExecResult } from "./types-BvSoEHz8.js";
-import { n as SandboxInstance } from "./sandbox-BtNWbfd3.js";
-import { i as SandboxClient } from "./client-B8i6qrQr.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
+import { Ar as SandboxStatus, Hn as SandboxClientConfig, R as CreateSandboxOptions, an as PreviewLinkInfo, en as NetworkConfig, et as ExecOptions, on as PreviewLinkManager, tt as ExecResult, yr as SandboxInfo } from "./types-yNRVRww-.js";
+import { n as SandboxInstance } from "./sandbox-BvNEOnIl.js";
+import { i as SandboxClient } from "./client-C-4NcZoa.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, QuotaError, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
-import { t as SandboxInstance } from "./sandbox-Be9WAqSg.js";
-import { n as SandboxClient } from "./client-DTpHjPjc.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
+import { t as SandboxInstance } from "./sandbox-CIHssZCH.js";
+import { n as SandboxClient } from "./client-CL_cbjU4.js";
 export { AuthError, CapabilityError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxClient as Sandbox, SandboxClient, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError };

package/dist/{errors--P_nbLzM.d.ts → errors-CNCz3Ms9.d.ts}

@@ -90,7 +90,7 @@ declare class PartialFailureError extends SandboxError {
 declare class ValidationError extends SandboxError {
   /** Field-level validation errors */
   readonly fields?: Record<string, string>;
-  constructor(message: string, fields?: Record<string, string>, metadata?: SandboxErrorMetadata);
+  constructor(message: string, fields?: Record<string, string>, metadata?: SandboxErrorMetadata, code?: string);
 }
 /**
  * The sandbox is not in a valid state for the requested operation.

package/dist/{errors-DSz87Rkk.js → errors-wd266B9Q.js}

@@ -109,8 +109,8 @@ var PartialFailureError = class extends SandboxError {
 var ValidationError = class extends SandboxError {
 	/** Field-level validation errors */
 	fields;
-	constructor(message, fields, metadata) {
-		super(message, "VALIDATION_ERROR", 400, metadata);
+	constructor(message, fields, metadata, code = "VALIDATION_ERROR") {
+		super(message, code, 400, metadata);
 		this.name = "ValidationError";
 		this.fields = fields;
 	}
@@ -255,7 +255,7 @@ function parseErrorResponse(status, body, context, headers) {
 	if (isPartialFailureCode(code)) return new PartialFailureError(message, code, status, metadata, readFailures(data, errorObj));
 	if (code === "EGRESS_PROXY_RECOVERY_REQUIRED") return new EgressProxyRecoveryError(message, metadata);
 	switch (status) {
-		case 400: return new ValidationError(message, data.fields, metadata);
+		case 400: return new ValidationError(message, data.fields, metadata, code);
 		case 401: return new AuthError(message, metadata);
 		case 404: return new NotFoundError(data.resourceType || "Resource", data.resourceId || "unknown", metadata);
 		case 408: return new TimeoutError(data.timeoutMs || 3e4, message, metadata);

package/dist/{index-BFnMEze6.d.ts → index-DFJiN98I.d.ts}

@@ -1,5 +1,5 @@
-import { R as CreateSandboxOptions } from "./types-BvSoEHz8.js";
-import { n as SandboxInstance, t as HttpClient } from "./sandbox-BtNWbfd3.js";
+import { R as CreateSandboxOptions } from "./types-yNRVRww-.js";
+import { n as SandboxInstance, t as HttpClient } from "./sandbox-BvNEOnIl.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { $ as EventStreamOptions, $n as SandboxFleetMachine, $r as SessionMessageInputPart, $t as NetworkConfig, A as CommitTaskSessionOptions, Ai as WriteFileOptions, An as Rollout, Ar as SandboxTerminalInfo, At as GpuLeaseCommandResult, B as CreateTaskSessionOptions, Bi as AgentProfilePermissionValue, Bn as SandboxClientConfig, Br as SearchMatch, Bt as IntelligenceReport, C as BatchTaskUsage, Ci as TurnDriveResult, Cn as PublishPublicTemplateVersionOptions, Cr as SandboxResourceUsage, Ct as GitBranch, Di as UsageInfo, Dn as ReconcileSandboxFleetsResult, Dr as SandboxRuntimeProfileList, Dt as GitStatus, Ei as UploadProgress, En as ReconcileSandboxFleetsOptions, Er as SandboxRuntimeProfile, Et as GitDiff, F as CreateSandboxFleetOptions, Fi as AgentProfileConfidential, Fn as RolloutStatus, Fr as SandboxTraceExport, Ft as GpuLeaseStatus, G as DownloadOptions, Gi as AgentProfileValidationResult, Gn as SandboxFleetArtifactSpec, Gr as SendSessionMessageRequest, H as DirectoryPermission, Hi as AgentProfileResourceRef, Hn as SandboxEnvironment, Hr as SecretInfo, Ht as IntelligenceReportCompareTo, Ii as AgentProfileConnection, In as RolloutTurnPart, Ir as SandboxTraceOptions, It as GpuType, J as DriverConfig, Ji as defineGitHubResource, Jn as SandboxFleetDispatchResponse, Jr as SessionEventStreamOptions, Jt as ListSandboxFleetOptions, K as DownloadProgress, Ki as AgentSubagentProfile, Kn as SandboxFleetCostEstimate, Kr as SentSessionMessage, Kt as ListMessagesOptions, L as CreateSandboxFleetWithCoordinatorOptions, Li as AgentProfileFileMount, Ln as RunCodeOptions, Lr as SandboxUser, Lt as HostAgentDriverConfig, M as CreateGpuLeaseOptions, Mi as WriteManyOptions, Mn as RolloutOptions, Mr as SandboxTerminalRequestOptions, Mt as GpuLeaseExecResult, N as CreateIntelligenceReportOptions, Ni as AgentProfile, Nn as RolloutScorer, Nr as SandboxTraceBundle, Nt as GpuLeaseManager, O as CodeResult, Oi as WaitForOptions, Or as SandboxStatus, Ot as GpuLease, P as CreateRequestOptions, Pi as AgentProfileCapabilities, Pn as RolloutStartResult, Pr as SandboxTraceEvent, Pt as GpuLeaseProviderName, Q as EgressPolicy, Qn as SandboxFleetIntelligenceEnvelope, Qr as SessionMessage, Qt as MkdirOptions, R as CreateSandboxOptions, Ri as AgentProfileMcpServer, Rn as SSHCommandDescriptor, Rr as ScopedToken, Rt as HostAgentRuntimeBackend, S as BatchTaskResult, Si as ToolsConfig, Sn as PublishPublicTemplateOptions, Sr as SandboxProfileSummary, St as GitAuth, Ti as UploadOptions, Tn as ReapExpiredSandboxFleetsResult, Tr as SandboxRuntimeHealth, Tt as GitConfig, U as DispatchPromptOptions, Ui as AgentProfileResources, Un as SandboxEvent, Ur as SecretsManager, Ut as IntelligenceReportSubjectType, V as DeleteOptions, Vi as AgentProfilePrompt, Vn as SandboxConnection, Vr as SearchOptions, Vt as IntelligenceReportBudget, W as DispatchedSession, Wi as AgentProfileValidationIssue, Wn as SandboxFleetArtifact, Wr as SendSessionMessageOptions, Wt as IntelligenceReportWindow, X as DriverType, Xi as mergeAgentProfiles, Xn as SandboxFleetDriverTimings, Xr as SessionInfo, Xt as McpServerConfig, Y as DriverInfo, Yi as defineInlineResource, Yn as SandboxFleetDriverCapability, Yr as SessionForkOptions, Yt as ListSandboxOptions, Z as EgressManager, Zn as SandboxFleetInfo, Zr as SessionListOptions, Zt as MintScopedTokenOptions, _ as BatchResult, _i as TeeAttestationReport, _n as ProvisionResult, _r as SandboxInfo, a as AttachSandboxFleetMachineOptions, ai as StartupDiagnostics, an as PreviewLinkManager, ar as SandboxFleetOperationsSummary, at as FileReadError, b as BatchSidecarGroup, bi as TeePublicKeyResponse, bn as PublicTemplateInfo, br as SandboxPortBinding, c as BackendInfo, ci as SubscriptionInfo, cn as ProcessLogEntry, cr as SandboxFleetTraceBundle, ct as FileTreeFile, d as BackendType, di as TaskSessionChanges, dn as ProcessSpawnOptions, dr as SandboxFleetTraceOptions, dt as FileWriteResult, ei as SessionStatus, en as NetworkManager, er as SandboxFleetMachineMeteredUsage, et as ExecOptions, f as BatchBackend, fi as TaskSessionCommitResult, fn as ProcessStatus, fr as SandboxFleetUsage, ft as FleetDispatchCancelResult, g as BatchOptions, gi as TeeAttestationOptions, gn as ProvisionEvent, gr as SandboxFleetWorkspaceSnapshotResult, gt as FleetExecDispatchOptions, h as BatchEventDataMap, hi as TaskSessionProfile, hn as PromptResult, hr as SandboxFleetWorkspaceRestoreResult, ht as FleetDispatchStreamOptions, i as AttachGpuLeaseOptions, in as PreviewLinkInfo, ir as SandboxFleetManifestMachine, it as FileReadBatchResult, j as CompletedTurnResult, ji as WriteManyFile, jn as RolloutChildResult, jr as SandboxTerminalManager, jt as GpuLeaseExecOptions, ki as WaitForRolloutOptions, kr as SandboxTerminalCreateOptions, kt as GpuLeaseBilling, l as BackendManager, li as TaskOptions, ln as ProcessManager, lr as SandboxFleetTraceEvent, lt as FileTreeOptions, m as BatchEvent, mi as TaskSessionInfo, mn as PromptOptions, mr as SandboxFleetWorkspaceReconcileResult, mt as FleetDispatchResultBufferOptions, n as AccessPolicyRule, ni as SnapshotOptions, nn as PermissionLevel, nr as SandboxFleetMachineSpec, nt as FileInfo, o as BackendCapabilities, oi as StartupOperation, on as Process, or as SandboxFleetPolicy, ot as FileReadResult, p as BatchBackendStats, pi as TaskSessionFileChange, pr as SandboxFleetWorkspace, pt as FleetDispatchResultBuffer, q as DriveTurnOptions, qi as defineAgentProfile, qn as SandboxFleetDispatchFailureClass, qr as SessionBackendCredentials, qt as ListOptions, r as AddUserOptions, ri as SnapshotResult, rn as PermissionsManager, rr as SandboxFleetManifest, rt as FileReadBatchOptions, s as BackendConfig, si as StorageConfig, sn as ProcessInfo, sr as SandboxFleetToken, st as FileSystem, t as AcceleratorKind, ti as SnapshotInfo, tn as NonHostAgentDriverConfig, tr as SandboxFleetMachineRecord, tt as ExecResult, u as BackendStatus, ui as TaskResult, un as ProcessSignal, ur as SandboxFleetTraceExport, ut as FileTreeResult, v as BatchRunOptions, vi as TeeAttestationResponse, vn as ProvisionStatus, vr as SandboxIntelligenceEnvelope, vt as FleetMachineId, w as BranchOptions, wi as UpdateUserOptions, wn as ReapExpiredSandboxFleetsOptions, wr as SandboxResources, wt as GitCommit, x as BatchTask, xi as TokenRefreshHandler, xn as PublicTemplateVersionInfo, xr as SandboxPortPreviewLink, xt as GPU_LEASE_PROVIDER_NAMES, y as BatchRunRequest, yi as TeePublicKey, yn as ProvisionStep, yr as SandboxPermissionsConfig, yt as FleetPromptDispatchOptions, z as CreateSessionOptions, zi as AgentProfileModelHints, zn as SSHCredentials, zr as ScopedTokenScope, zt as InstalledTool } from "./types-BvSoEHz8.js";
-import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-BtNWbfd3.js";
-import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-B8i6qrQr.js";
+import { $ as EventStreamOptions, $n as SandboxFleetInfo, $r as SessionListOptions, $t as MkdirOptions, A as CommitTaskSessionOptions, Ai as WaitForOptions, Ar as SandboxStatus, At as GpuLeaseBilling, B as CreateTaskSessionOptions, Bi as AgentProfileMcpServer, Bn as SSHCommandDescriptor, Br as ScopedToken, Bt as InstalledTool, C as BatchTaskUsage, Ci as TokenRefreshHandler, Cn as PublishPublicTemplateOptions, Cr as SandboxPortPreviewLink, Ct as GitAuth, Di as UploadOptions, Dn as ReconcileSandboxFleetsOptions, Dr as SandboxRuntimeHealth, Dt as GitDiff, Ei as UpdateUserOptions, En as ReapExpiredSandboxFleetsResult, Er as SandboxResources, Et as GitConfig, F as CreateSandboxFleetOptions, Fi as AgentProfile, Fn as RolloutScorer, Fr as SandboxTraceBundle, Ft as GpuLeaseProviderName, G as DownloadOptions, Gi as AgentProfileResources, Gn as SandboxEvent, Gr as SecretsManager, Gt as IntelligenceReportWindow, H as DirectoryPermission, Hi as AgentProfilePermissionValue, Hn as SandboxClientConfig, Hr as SearchMatch, Ht as IntelligenceReportBudget, Ii as AgentProfileCapabilities, In as RolloutStartResult, Ir as SandboxTraceEvent, It as GpuLeaseStatus, J as DriverConfig, Ji as AgentSubagentProfile, Jn as SandboxFleetCostEstimate, Jr as SentSessionMessage, Jt as ListOptions, K as DownloadProgress, Ki as AgentProfileValidationIssue, Kn as SandboxFleetArtifact, Kr as SendSessionMessageOptions, L as CreateSandboxFleetWithCoordinatorOptions, Li as AgentProfileConfidential, Ln as RolloutStatus, Lr as SandboxTraceExport, Lt as GpuType, M as CreateGpuLeaseOptions, Mi as WriteFileOptions, Mn as Rollout, Mr as SandboxTerminalInfo, Mt as GpuLeaseExecOptions, N as CreateIntelligenceReportOptions, Ni as WriteManyFile, Nn as RolloutChildResult, Nr as SandboxTerminalManager, Nt as GpuLeaseExecResult, O as CodeResult, Oi as UploadProgress, On as ReconcileSandboxFleetsResult, Or as SandboxRuntimeProfile, Ot as GitStatus, P as CreateRequestOptions, Pi as WriteManyOptions, Pn as RolloutOptions, Pr as SandboxTerminalRequestOptions, Pt as GpuLeaseManager, Q as EgressPolicy, Qi as mergeAgentProfiles, Qn as SandboxFleetDriverTimings, Qr as SessionInfo, Qt as MintScopedTokenOptions, R as CreateSandboxOptions, Ri as AgentProfileConnection, Rn as RolloutTurnPart, Rr as SandboxTraceOptions, Rt as HostAgentDriverConfig, S as BatchTaskResult, Si as TeePublicKeyResponse, Sn as PublicTemplateVersionInfo, Sr as SandboxPortBinding, St as GPU_LEASE_PROVIDER_NAMES, Ti as TurnDriveResult, Tn as ReapExpiredSandboxFleetsOptions, Tr as SandboxResourceUsage, Tt as GitCommit, U as DispatchPromptOptions, Ui as AgentProfilePrompt, Un as SandboxConnection, Ur as SearchOptions, Ut as IntelligenceReportCompareTo, V as DeleteOptions, Vi as AgentProfileModelHints, Vn as SSHCredentials, Vr as ScopedTokenScope, Vt as IntelligenceReport, W as DispatchedSession, Wi as AgentProfileResourceRef, Wn as SandboxEnvironment, Wr as SecretInfo, Wt as IntelligenceReportSubjectType, X as DriverType, Xi as defineGitHubResource, Xn as SandboxFleetDispatchResponse, Xr as SessionEventStreamOptions, Xt as ListSandboxOptions, Y as DriverInfo, Yi as defineAgentProfile, Yn as SandboxFleetDispatchFailureClass, Yr as SessionBackendCredentials, Yt as ListSandboxFleetOptions, Z as EgressManager, Zi as defineInlineResource, Zn as SandboxFleetDriverCapability, Zr as SessionForkOptions, Zt as McpServerConfig, _ as BatchResult, _i as TaskSessionProfile, _n as ProvisionEvent, _r as SandboxFleetWorkspaceRestoreResult, _t as FleetExecDispatchOptions, a as AttachSandboxFleetMachineOptions, ai as SnapshotResult, an as PreviewLinkInfo, ar as SandboxFleetManifest, at as FileReadError, b as BatchSidecarGroup, bi as TeeAttestationResponse, bn as ProvisionStep, br as SandboxIntelligenceEnvelope, bt as FleetPromptDispatchOptions, c as BackendInfo, ci as StartupOperation, cn as ProcessInfo, cr as SandboxFleetPolicy, ct as FileSystem, d as BackendType, di as TaskOptions, dn as ProcessSignal, dr as SandboxFleetTraceEvent, dt as FileTreeResult, ei as SessionMessage, en as NetworkConfig, er as SandboxFleetIntelligenceEnvelope, et as ExecOptions, f as BatchBackend, fi as TaskResult, fn as ProcessSpawnOptions, fr as SandboxFleetTraceExport, ft as FileWriteResult, g as BatchOptions, gi as TaskSessionInfo, gn as PromptResult, gr as SandboxFleetWorkspaceReconcileResult, gt as FleetDispatchStreamOptions, h as BatchEventDataMap, hi as TaskSessionFileChange, hn as PromptOptions, hr as SandboxFleetWorkspace, ht as FleetDispatchResultBufferOptions, i as AttachGpuLeaseOptions, ii as SnapshotOptions, in as PermissionsManager, ir as SandboxFleetMachineSpec, it as FileReadBatchResult, j as CompletedTurnResult, ji as WaitForRolloutOptions, jr as SandboxTerminalCreateOptions, jt as GpuLeaseCommandResult, ki as UsageInfo, kn as RenameOptions, kr as SandboxRuntimeProfileList, kt as GpuLease, l as BackendManager, li as StorageConfig, ln as ProcessLogEntry, lr as SandboxFleetToken, lt as FileTreeFile, m as BatchEvent, mi as TaskSessionCommitResult, mr as SandboxFleetUsage, mt as FleetDispatchResultBuffer, n as AccessPolicyRule, ni as SessionStatus, nn as NonHostAgentDriverConfig, nr as SandboxFleetMachineMeteredUsage, nt as FileInfo, o as BackendCapabilities, on as PreviewLinkManager, or as SandboxFleetManifestMachine, ot as FileReadResult, p as BatchBackendStats, pi as TaskSessionChanges, pn as ProcessStatus, pr as SandboxFleetTraceOptions, pt as FleetDispatchCancelResult, q as DriveTurnOptions, qi as AgentProfileValidationResult, qn as SandboxFleetArtifactSpec, qr as SendSessionMessageRequest, qt as ListMessagesOptions, r as AddUserOptions, ri as SnapshotInfo, rn as PermissionLevel, rr as SandboxFleetMachineRecord, rt as FileReadBatchOptions, s as BackendConfig, si as StartupDiagnostics, sn as Process, sr as SandboxFleetOperationsSummary, st as FileRenameResult, t as AcceleratorKind, ti as SessionMessageInputPart, tn as NetworkManager, tr as SandboxFleetMachine, tt as ExecResult, u as BackendStatus, ui as SubscriptionInfo, un as ProcessManager, ur as SandboxFleetTraceBundle, ut as FileTreeOptions, v as BatchRunOptions, vi as TeeAttestationOptions, vn as ProvisionResult, vr as SandboxFleetWorkspaceSnapshotResult, w as BranchOptions, wi as ToolsConfig, wn as PublishPublicTemplateVersionOptions, wr as SandboxProfileSummary, wt as GitBranch, x as BatchTask, xi as TeePublicKey, xn as PublicTemplateInfo, xr as SandboxPermissionsConfig, y as BatchRunRequest, yi as TeeAttestationReport, yn as ProvisionStatus, yr as SandboxInfo, yt as FleetMachineId, z as CreateSessionOptions, zi as AgentProfileFileMount, zn as RunCodeOptions, zr as SandboxUser, zt as HostAgentRuntimeBackend } from "./types-yNRVRww-.js";
+import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-BvNEOnIl.js";
+import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-C-4NcZoa.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-CyHojkuA.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DKzapw-9.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-BFnMEze6.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DFJiN98I.js";
 
 //#region src/attestation-heartbeat.d.ts
 interface TeeAttestationHeartbeatSample {
@@ -1371,4 +1371,4 @@ interface RouterEvalMatrixCaseResult {
 }
 declare function runTangleRouterEvalMatrixInSandbox(options: RunTangleRouterEvalMatrixInSandboxOptions): Promise<RunTangleRouterEvalMatrixInSandboxResult>;
 //#endregion
-export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchOptions, type BatchResult, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, type CodeResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EventStreamOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type GpuType, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type Process, type ProcessInfo, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunCodeOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, type SandboxConnection, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPermissionsConfig, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxProfileSummary, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeHealth, type SandboxRuntimeProfile, type SandboxRuntimeProfileList, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionForkOptions, type SessionInfo, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionStatus, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskOptions, type TaskResult, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, TimeoutError, type TokenRefreshHandler, type ToolsConfig, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentResponseText, createConfidentialSandbox, createManageSandboxesTool, defineAgentProfile, defineGitHubResource, defineInlineResource, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, materializeProfileFileMounts, mergeAgentProfiles, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, serializeForSidecar, splitInlineProfileFileMounts, startTeeAttestationHeartbeat, toOtelJson };
+export { type AcceleratorKind, type AccessPolicyRule, type AddUserOptions, type AgentProfile, type AgentProfileCapabilities, type AgentProfileConnection, type AgentProfileFileMount, type AgentProfileMcpServer, type AgentProfileModelHints, type AgentProfilePermissionValue, type AgentProfilePrompt, type AgentProfileResourceRef, type AgentProfileResources, type AgentProfileValidationIssue, type AgentProfileValidationResult, type AgentSubagentProfile, type AnyTokenPayload, type AttachGpuLeaseOptions, type AttachSandboxFleetMachineOptions, AuthError, type BackendCapabilities, type BackendConfig, type BackendInfo, type BackendManager, type BackendStatus, type BackendType, type BatchBackend, type BatchBackendStats, type BatchEvent, type BatchEventDataMap, type BatchOptions, type BatchResult, type BatchRunOptions, type BatchRunRequest, type BatchSidecarGroup, type BatchTask, type BatchTaskResult, type BatchTaskUsage, type BranchOptions, type BuildControlPlaneMcpConfigOptions, type BuildProgressEvent, type BuildSandboxMcpConfigOptions, CONTROL_PLANE_MCP_SERVER_NAME, CapabilityError, type CodeResult, type CollaborationAccess, type CollaborationBootstrapRequest, type CollaborationBootstrapResponse, CollaborationClient, type CollaborationClientConfig, type CollaborationDocumentAdapter, type CollaborationDocumentChange, type CollaborationDocumentRef, CollaborationFileBridge, type CollaborationFileBridgeOptions, type CollaborationFileEvent, type CollaborationPermissions, type CollaborationTokenPayload, type CollaborationTokenRefreshRequest, type CollaborationTokenRefreshResponse, type CollaborationTransportConfig, type CommitTaskSessionOptions, type CompletedTurnResult, type ConfidentialSandboxResult, type ConfidentialTeeType, type CreateConfidentialSandboxOptions, type CreateGpuLeaseOptions, type CreateIntelligenceReportOptions, type CreateRequestOptions, type CreateSandboxFleetOptions, type CreateSandboxFleetWithCoordinatorOptions, type CreateSandboxOptions, type CreateSessionOptions, type CreateTaskSessionOptions, type CreateTeamOptions, DEFAULT_SANDBOX_SIZE, type DeleteOptions, type DirectoryPermission, type DispatchPromptOptions, type DispatchedSession, type DownloadOptions, type DownloadProgress, type DriveTurnOptions, type DriverConfig, type DriverInfo, type DriverType, type EgressManager, type EgressPolicy, EgressProxyRecoveryError, type EventStreamOptions, type ExecOptions, type ExecResult, type FileInfo, type FileReadBatchOptions, type FileReadBatchResult, type FileReadError, type FileReadResult, type FileRenameResult, type FileSystem, type FileTreeFile, type FileTreeOptions, type FileTreeResult, type FileWriteResult, type FleetDispatchCancelResult, type FleetDispatchResultBuffer, type FleetDispatchResultBufferOptions, type FleetDispatchStreamOptions, type FleetExecDispatchOptions, type FleetMachineId, type FleetPromptDispatchOptions, GPU_LEASE_PROVIDER_NAMES, type GitAuth, type GitBranch, type GitCommit, type GitConfig, type GitDiff, type GitStatus, type GpuLease, type GpuLeaseBilling, type GpuLeaseCommandResult, type GpuLeaseExecOptions, type GpuLeaseExecResult, type GpuLeaseManager, type GpuLeaseProviderName, type GpuLeaseStatus, type GpuType, type HostAgentDriverConfig, type HostAgentRuntimeBackend, Image, type ImageBuildClient, type ImageBuildClientConfig, type ImageBuildFetchClient, type ImageBuildOptions, type ImageBuildResult, ImageBuilder, type ImageSpec, type InstalledTool, IntelligenceClient, type IntelligenceReport, type IntelligenceReportBudget, type IntelligenceReportCompareTo, type IntelligenceReportSubjectType, type IntelligenceReportWindow, type InteractiveAuthFile, InteractiveSessionHandle, type InteractiveSessionHost, type InteractiveSessionInfo, type InterruptResult, type InviteTeamMemberOptions, type IssueCollaborationTokenOptions, type ListMessagesOptions, type ListOptions, type ListSandboxFleetOptions, type ListSandboxOptions, MANAGE_SANDBOXES_PARAMETERS, MANAGE_SANDBOXES_TOOL_NAME, type ManageSandboxesInput, type ManageSandboxesTool, type ManageSandboxesToolOptions, type MaterializeProfileFileMountsOptions, type MaterializeProfileFileMountsResult, type McpServerConfig, type MintScopedTokenOptions, type MkdirOptions, type NetworkConfig, NetworkError, type NetworkManager, type NonHostAgentDriverConfig, NotFoundError, type ParseSSEStreamOptions, type ParsedSSEEvent, PartialFailureError, type PermissionLevel, type PermissionsManager, type PreviewLinkInfo, type PreviewLinkManager, type Process, type ProcessInfo, type ProcessLogEntry, type ProcessManager, type ProcessSignal, type ProcessSpawnOptions, type ProcessStatus, type PromptOptions, type PromptResult, type ProvisionEvent, type ProvisionResult, type ProvisionStatus, type ProvisionStep, type PublicTemplateInfo, type PublicTemplateVersionInfo, type PublishPublicTemplateOptions, type PublishPublicTemplateVersionOptions, QuotaError, type ReapExpiredSandboxFleetsOptions, type ReapExpiredSandboxFleetsResult, type ReconcileSandboxFleetsOptions, type ReconcileSandboxFleetsResult, type RenameOptions, type RespondToPermissionOptions, type Rollout, type RolloutChildResult, type RolloutOptions, type RolloutScorer, type RolloutStartResult, type RolloutStatus, type RolloutTurnPart, type RouterEvalMatrixAgentProfile, type RouterEvalMatrixCaseResult, type RouterEvalMatrixHarness, type RouterEvalMatrixPayload, type RouterEvalMatrixSandboxBox, type RouterEvalMatrixSandboxClient, type RouterEvalMatrixScenario, type RouterEvalMatrixSuiteResponse, type RouterImportedRunResponse, type RouterSearchConfig, type RouterSearchConfigOptions, type RunCodeOptions, type RunTangleRouterEvalMatrixInSandboxOptions, type RunTangleRouterEvalMatrixInSandboxResult, SANDBOX_MCP_SERVER_NAME, SANDBOX_SIZE_PRESETS, SANDBOX_SIZE_PRESET_NAMES, type SSHCommandDescriptor, type SSHCredentials, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, type SandboxConnection, type SandboxEnvironment, SandboxError, type SandboxErrorJson, type SandboxEvent, type SandboxFailureDetail, SandboxFleet, type SandboxFleetArtifact, type SandboxFleetArtifactSpec, SandboxFleetClient, type SandboxFleetCostEstimate, type SandboxFleetDispatchFailureClass, type SandboxFleetDispatchResponse, type SandboxFleetDriverCapability, type SandboxFleetDriverTimings, type SandboxFleetInfo, type SandboxFleetIntelligenceEnvelope, type SandboxFleetMachine, type SandboxFleetMachineMeteredUsage, type SandboxFleetMachineRecord, type SandboxFleetMachineSpec, type SandboxFleetManifest, type SandboxFleetManifestMachine, type SandboxFleetOperationsSummary, type SandboxFleetPolicy, type SandboxFleetToken, type SandboxFleetTraceBundle, type SandboxFleetTraceEvent, type SandboxFleetTraceExport, type SandboxFleetTraceOptions, type SandboxFleetUsage, type SandboxFleetWorkspace, type SandboxFleetWorkspaceReconcileResult, type SandboxFleetWorkspaceRestoreResult, type SandboxFleetWorkspaceSnapshotResult, type SandboxInfo, SandboxInstance, type SandboxIntelligenceEnvelope, type SandboxMcpConfig, type SandboxMcpEndpoint, type SandboxMcpServerEntry, type SandboxPermissionsConfig, type SandboxPortBinding, type SandboxPortPreviewLink, type SandboxProfileSummary, type SandboxResourceUsage, type SandboxResources, type SandboxRuntimeHealth, type SandboxRuntimeProfile, type SandboxRuntimeProfileList, SandboxSession, type SandboxSizePreset, type SandboxStatus, SandboxTaskSession, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, type SandboxTraceBundle, type SandboxTraceEvent, type SandboxTraceExport, type SandboxTraceOptions, type SandboxUser, type SaveCollaborationSnapshotRequest, type SaveCollaborationSnapshotResponse, type ScopedToken, type ScopedTokenScope, type SearchMatch, type SearchOptions, type SecretInfo, type SecretsManager, type SendSessionMessageOptions, type SendSessionMessageRequest, type SentSessionMessage, ServerError, type SessionBackendCredentials, type SessionBroadcastEvent, type SessionBroadcastResult, type SessionEventStreamOptions, type SessionForkOptions, type SessionInfo, type SessionListOptions, type SessionMessage, type SessionMessageInputPart, type SessionStatus, type SnapshotInfo, type SnapshotOptions, type SnapshotResult, type SplitInlineProfileFileMountsResult, type StartInteractiveOptions, type StartupDiagnostics, type StartupOperation, StateError, type StorageConfig, type SubscriptionInfo, TangleSandboxClient, type TangleSandboxClientConfig, type TangleSearchProvider, type TaskOptions, type TaskResult, type TaskSessionChanges, type TaskSessionCommitResult, type TaskSessionFileChange, type TaskSessionInfo, type TaskSessionProfile, type Team, type TeamInvitation, type TeamMember, type TeeAttestationHeartbeat, type TeeAttestationHeartbeatOptions, type TeeAttestationHeartbeatSample, type TeeAttestationOptions, type TeeAttestationReport, type TeeAttestationResponse, type TeePublicKey, type TeePublicKeyResponse, TimeoutError, type TokenRefreshHandler, type ToolsConfig, type TraceExportFormat, type TraceExportResult, type TraceExportSink, type TurnDriveResult, type UpdateUserOptions, type UploadOptions, type UploadProgress, type UsageInfo, ValidationError, type WaitForOptions, type WaitForRolloutOptions, type WriteFileOptions, type WriteManyFile, type WriteManyOptions, applySandboxEventText, buildCollaborationDocumentId, buildControlPlaneMcpConfig, buildSandboxMcpConfig, buildTangleRouterEvalMatrixRequest, buildTangleRouterResponsesWebSearchRequest, buildTangleRouterSearchBackend, buildTangleRouterSearchProfile, buildTraceExportPayload, collectAgentResponseText, createConfidentialSandbox, createManageSandboxesTool, defineAgentProfile, defineGitHubResource, defineInlineResource, exportTraceBundle, fetchTangleRouterSearchConfig, generateAttestationNonce, generateDockerfile, getSandboxEventText, materializeProfileFileMounts, mergeAgentProfiles, normalizeCollaborationPath, normalizeRuntimeBackendConfig, otelTraceIdForTangleTrace, parseCollaborationDocumentId, parseSSEStream, resolveSandboxResources, runTangleRouterEvalMatrixInSandbox, sandboxResourcesForSize, serializeForSidecar, splitInlineProfileFileMounts, startTeeAttestationHeartbeat, toOtelJson };

package/dist/index.js

@@ -1,9 +1,9 @@
-import { i as serializeForSidecar, r as normalizeRuntimeBackendConfig } from "./runtime-api-CYA2DUQw.js";
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
-import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as parseSSEStream, h as encodeTextForWire, i as SandboxSession, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-Be9WAqSg.js";
-import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-DTpHjPjc.js";
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-QZXrXdIb.js";
-import { t as TangleSandboxClient } from "./tangle-D6UfK_B0.js";
+import { i as serializeForSidecar, r as normalizeRuntimeBackendConfig } from "./runtime-api-CaXI7Kl2.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
+import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as parseSSEStream, h as encodeTextForWire, i as SandboxSession, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-CIHssZCH.js";
+import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-CL_cbjU4.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CcZE2xMl.js";
+import { t as TangleSandboxClient } from "./tangle-C-5OvIj8.js";
 import { defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
 //#region src/confidential.ts
 function generateAttestationNonce(bytes = 32) {

package/dist/intelligence/index.js

@@ -1,4 +1,4 @@
-import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "../errors-DSz87Rkk.js";
+import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "../errors-wd266B9Q.js";
 //#region src/intelligence/index.ts
 /**
 * `@tangle-network/sandbox/intelligence` — browser-safe typed client for the

package/dist/{runtime-api-CYA2DUQw.js → runtime-api-CaXI7Kl2.js}

@@ -1,4 +1,4 @@
-import { f as ValidationError, l as ServerError, p as parseErrorResponse } from "./errors-DSz87Rkk.js";
+import { f as ValidationError, l as ServerError, p as parseErrorResponse } from "./errors-wd266B9Q.js";
 //#region src/backend-config.ts
 const LEGACY_QUESTION_ALIAS_KEY = ["question", "Channel"].join("");
 function parseModelString(model) {
@@ -203,7 +203,7 @@ var SandboxRuntimeApi = class {
 				method: "POST",
 				body: JSON.stringify({
 					paths: chunk,
-					...options.encoding ? { encoding: options.encoding } : {}
+					encoding: options.encoding ?? "utf8"
 				})
 			});
 			for (const [path, result] of Object.entries(payload.data.files)) if (result.success) files.push({
@@ -259,6 +259,19 @@ var SandboxRuntimeApi = class {
 			body: JSON.stringify({ path })
 		});
 	}
+	async renameFile(sourcePath, destinationPath, options = {}) {
+		await this.transport.ensureRunning();
+		const params = new URLSearchParams();
+		if (options.sessionId) params.set("sessionId", options.sessionId);
+		const query = params.toString();
+		return (await this.json(`/files/rename${query ? `?${query}` : ""}`, {
+			method: "POST",
+			body: JSON.stringify({
+				sourcePath,
+				destinationPath
+			})
+		})).data;
+	}
 	async fileTree(path, options = {}) {
 		if (options.maxDepth !== void 0 && (!Number.isInteger(options.maxDepth) || options.maxDepth < 1 || options.maxDepth > 20)) throw new ValidationError("maxDepth must be an integer between 1 and 20");
 		await this.transport.ensureRunning();
@@ -272,6 +285,7 @@ var SandboxRuntimeApi = class {
 		const info = normalizeSessionInfo(await this.json("/agents/sessions", {
 			method: "POST",
 			body: JSON.stringify({
+				...options.sessionId !== void 0 ? { sessionId: options.sessionId } : {},
 				...options.title !== void 0 ? { title: options.title } : {},
 				...options.parentId !== void 0 ? { parentID: options.parentId } : {},
 				backend: normalizeRuntimeBackendConfig(options.backend)

package/dist/runtime.d.ts

@@ -1,5 +1,5 @@
-import { A as CommitTaskSessionOptions, Ai as WriteFileOptions, Ar as SandboxTerminalInfo, B as CreateTaskSessionOptions, Dr as SandboxRuntimeProfileList, Gr as SendSessionMessageRequest, Kr as SentSessionMessage, Kt as ListMessagesOptions, Mr as SandboxTerminalRequestOptions, Qr as SessionMessage, Tr as SandboxRuntimeHealth, Wr as SendSessionMessageOptions, Xr as SessionInfo, br as SandboxPortBinding, di as TaskSessionChanges, dt as FileWriteResult, fi as TaskSessionCommitResult, it as FileReadBatchResult, jr as SandboxTerminalManager, kr as SandboxTerminalCreateOptions, lt as FileTreeOptions, mi as TaskSessionInfo, rt as FileReadBatchOptions, ut as FileTreeResult, z as CreateSessionOptions } from "./types-BvSoEHz8.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
+import { A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Dr as SandboxRuntimeHealth, Jr as SentSessionMessage, Kr as SendSessionMessageOptions, Mi as WriteFileOptions, Mr as SandboxTerminalInfo, Nr as SandboxTerminalManager, Pr as SandboxTerminalRequestOptions, Qr as SessionInfo, Sr as SandboxPortBinding, dt as FileTreeResult, ei as SessionMessage, ft as FileWriteResult, gi as TaskSessionInfo, it as FileReadBatchResult, jr as SandboxTerminalCreateOptions, kn as RenameOptions, kr as SandboxRuntimeProfileList, mi as TaskSessionCommitResult, pi as TaskSessionChanges, qr as SendSessionMessageRequest, qt as ListMessagesOptions, rt as FileReadBatchOptions, st as FileRenameResult, ut as FileTreeOptions, z as CreateSessionOptions } from "./types-yNRVRww-.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
 
 //#region src/runtime-api.d.ts
 interface RuntimeTransport {
@@ -17,6 +17,7 @@ declare class SandboxRuntimeApi {
   readFiles(paths: string[], options?: FileReadBatchOptions): Promise<FileReadBatchResult>;
   writeFile(path: string, content: string, options?: WriteFileOptions): Promise<FileWriteResult>;
   deleteFile(path: string, options?: Pick<WriteFileOptions, "sessionId">): Promise<void>;
+  renameFile(sourcePath: string, destinationPath: string, options?: RenameOptions): Promise<FileRenameResult>;
   fileTree(path: string, options?: FileTreeOptions): Promise<FileTreeResult>;
   createSession(options: CreateSessionOptions): Promise<SessionInfo>;
   messages(id: string, options?: Omit<ListMessagesOptions, "sessionId">): Promise<SessionMessage[]>;
@@ -36,9 +37,9 @@ declare class SandboxRuntimeApi {
 //#endregion
 //#region src/runtime-client.d.ts
 interface SandboxRuntimeClientConfig {
-  /** Browser-safe proxy base returned by `box.mintScopedToken()`. */
+  /** Browser-safe proxy base returned by a runtime-scoped token mint. */
   baseUrl: string;
-  /** Short-lived scoped token returned by `box.mintScopedToken()`. */
+  /** Short-lived `session-runtime` or `read-only` token. */
   token: string;
   /** Request timeout in milliseconds. Defaults to 30 seconds. */
   timeoutMs?: number;
@@ -49,7 +50,9 @@ interface SandboxRuntimeClientConfig {
  * Browser- and Worker-safe client for one sandbox runtime.
  *
  * Construct it from the scoped token response returned by
- * `box.mintScopedToken()`. The full Sandbox API key remains server-side.
+ * `box.mintScopedToken({ scope: "session-runtime", sessionId })` or
+ * `box.mintScopedToken({ scope: "read-only" })`. The full Sandbox API key
+ * remains server-side.
  */
 declare class SandboxRuntimeClient extends SandboxRuntimeApi {
   private readonly auth;
@@ -59,4 +62,4 @@ declare class SandboxRuntimeClient extends SandboxRuntimeApi {
 }
 declare function createSandboxRuntimeClient(config: SandboxRuntimeClientConfig): SandboxRuntimeClient;
 //#endregion
-export { AuthError, CapabilityError, type FileReadBatchOptions, type FileReadBatchResult, type FileTreeOptions, type FileTreeResult, type FileWriteResult, type ListMessagesOptions, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, SandboxRuntimeClient, type SandboxRuntimeClientConfig, type SandboxRuntimeHealth, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, ServerError, type SessionMessage, StateError, TimeoutError, ValidationError, type WriteFileOptions, createSandboxRuntimeClient };
+export { AuthError, CapabilityError, type FileReadBatchOptions, type FileReadBatchResult, type FileRenameResult, type FileTreeOptions, type FileTreeResult, type FileWriteResult, type ListMessagesOptions, NetworkError, NotFoundError, PartialFailureError, QuotaError, type RenameOptions, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, SandboxRuntimeClient, type SandboxRuntimeClientConfig, type SandboxRuntimeHealth, type SandboxTerminalCreateOptions, type SandboxTerminalInfo, type SandboxTerminalManager, type SandboxTerminalRequestOptions, ServerError, type SessionMessage, StateError, TimeoutError, ValidationError, type WriteFileOptions, createSandboxRuntimeClient };

package/dist/runtime.js

@@ -1,5 +1,5 @@
-import { t as SandboxRuntimeApi } from "./runtime-api-CYA2DUQw.js";
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
+import { t as SandboxRuntimeApi } from "./runtime-api-CaXI7Kl2.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;
 function requireToken(token) {
@@ -28,7 +28,9 @@ function requireTimeout(timeoutMs) {
 * Browser- and Worker-safe client for one sandbox runtime.
 *
 * Construct it from the scoped token response returned by
-* `box.mintScopedToken()`. The full Sandbox API key remains server-side.
+* `box.mintScopedToken({ scope: "session-runtime", sessionId })` or
+* `box.mintScopedToken({ scope: "read-only" })`. The full Sandbox API key
+* remains server-side.
 */
 var SandboxRuntimeClient = class extends SandboxRuntimeApi {
 	auth;

package/dist/{sandbox-BtNWbfd3.d.ts → sandbox-BvNEOnIl.d.ts}

@@ -1,4 +1,4 @@
-import { $ as EventStreamOptions, A as CommitTaskSessionOptions, Ai as WriteFileOptions, An as Rollout, B as CreateTaskSessionOptions, Br as SearchMatch, Bt as IntelligenceReport, Ci as TurnDriveResult, Cr as SandboxResourceUsage, Ct as GitBranch, D as CodeLanguage, Dr as SandboxRuntimeProfileList, Dt as GitStatus, E as CodeExecutionResult, Et as GitDiff, Gr as SendSessionMessageRequest, Gt as JsonValue, Ht as IntelligenceReportCompareTo, Ir as SandboxTraceOptions, Jr as SessionEventStreamOptions, Kr as SentSessionMessage, Kt as ListMessagesOptions, Mi as WriteManyOptions, Mn as RolloutOptions, Nr as SandboxTraceBundle, Nt as GpuLeaseManager, Oi as WaitForOptions, On as RestoreSnapshotOptions, Or as SandboxStatus, Ot as GpuLease, Pn as RolloutStartResult, Qr as SessionMessage, Rn as SSHCommandDescriptor, Rr as ScopedToken, T as CodeExecutionOptions, Tr as SandboxRuntimeHealth, U as DispatchPromptOptions, Un as SandboxEvent, Vn as SandboxConnection, Vr as SearchOptions, Vt as IntelligenceReportBudget, W as DispatchedSession, Wr as SendSessionMessageOptions, Wt as IntelligenceReportWindow, Xr as SessionInfo, Y as DriverInfo, Yr as SessionForkOptions, Z as EgressManager, Zr as SessionListOptions, Zt as MintScopedTokenOptions, _n as ProvisionResult, _r as SandboxInfo, ai as StartupDiagnostics, an as PreviewLinkManager, bi as TeePublicKeyResponse, br as SandboxPortBinding, cr as SandboxFleetTraceBundle, di as TaskSessionChanges, dt as FileWriteResult, en as NetworkManager, et as ExecOptions, fi as TaskSessionCommitResult, gi as TeeAttestationOptions, gn as ProvisionEvent, hn as PromptResult, j as CompletedTurnResult, ji as WriteManyFile, jr as SandboxTerminalManager, ki as WaitForRolloutOptions, kn as ResumeOptions, l as BackendManager, li as TaskOptions, ln as ProcessManager, mi as TaskSessionInfo, mn as PromptOptions, ni as SnapshotOptions, pn as PromptInputPart, q as DriveTurnOptions, ri as SnapshotResult, rn as PermissionsManager, s as BackendConfig, st as FileSystem, ti as SnapshotInfo, tt as ExecResult, ui as TaskResult, vi as TeeAttestationResponse, w as BranchOptions, wt as GitCommit, z as CreateSessionOptions, zn as SSHCredentials, zt as InstalledTool } from "./types-BvSoEHz8.js";
+import { $ as EventStreamOptions, $r as SessionListOptions, A as CommitTaskSessionOptions, Ai as WaitForOptions, An as RestoreSnapshotOptions, Ar as SandboxStatus, B as CreateTaskSessionOptions, Bn as SSHCommandDescriptor, Br as ScopedToken, Bt as InstalledTool, D as CodeLanguage, Dr as SandboxRuntimeHealth, Dt as GitDiff, E as CodeExecutionResult, Fr as SandboxTraceBundle, Gn as SandboxEvent, Gt as IntelligenceReportWindow, Hr as SearchMatch, Ht as IntelligenceReportBudget, In as RolloutStartResult, Jr as SentSessionMessage, Kr as SendSessionMessageOptions, Kt as JsonValue, Mi as WriteFileOptions, Mn as Rollout, Ni as WriteManyFile, Nr as SandboxTerminalManager, Ot as GitStatus, Pi as WriteManyOptions, Pn as RolloutOptions, Pt as GpuLeaseManager, Qr as SessionInfo, Qt as MintScopedTokenOptions, Rr as SandboxTraceOptions, Si as TeePublicKeyResponse, Sr as SandboxPortBinding, T as CodeExecutionOptions, Ti as TurnDriveResult, Tr as SandboxResourceUsage, Tt as GitCommit, U as DispatchPromptOptions, Un as SandboxConnection, Ur as SearchOptions, Ut as IntelligenceReportCompareTo, Vn as SSHCredentials, Vt as IntelligenceReport, W as DispatchedSession, Xr as SessionEventStreamOptions, Y as DriverInfo, Z as EgressManager, Zr as SessionForkOptions, _n as ProvisionEvent, ai as SnapshotResult, bi as TeeAttestationResponse, ct as FileSystem, di as TaskOptions, ei as SessionMessage, et as ExecOptions, fi as TaskResult, ft as FileWriteResult, gi as TaskSessionInfo, gn as PromptResult, hn as PromptOptions, ii as SnapshotOptions, in as PermissionsManager, j as CompletedTurnResult, ji as WaitForRolloutOptions, jn as ResumeOptions, kr as SandboxRuntimeProfileList, kt as GpuLease, l as BackendManager, mi as TaskSessionCommitResult, mn as PromptInputPart, on as PreviewLinkManager, pi as TaskSessionChanges, q as DriveTurnOptions, qr as SendSessionMessageRequest, qt as ListMessagesOptions, ri as SnapshotInfo, s as BackendConfig, si as StartupDiagnostics, tn as NetworkManager, tt as ExecResult, un as ProcessManager, ur as SandboxFleetTraceBundle, vi as TeeAttestationOptions, vn as ProvisionResult, w as BranchOptions, wt as GitBranch, yr as SandboxInfo, z as CreateSessionOptions } from "./types-yNRVRww-.js";
 
 //#region src/mcp.d.ts
 /**
@@ -900,6 +900,7 @@ declare class SandboxInstance {
   private fsList;
   private fsStat;
   private fsDelete;
+  private fsRename;
   private fsMkdir;
   private fsExists;
   /**
@@ -1498,15 +1499,10 @@ declare class SandboxInstance {
    */
   driveTurn(message: string | PromptInputPart[], opts: DriveTurnOptions): Promise<TurnDriveResult>;
   /**
-   * Mint a scoped, time-bounded JWT for direct browser access to this
-   * sandbox (Issue #913 Gap 1). Authority is the caller's
-   * `TANGLE_API_KEY` (sk-tan-*) — the Sandbox API mints the token;
-   * signing secrets stay server-side.
-   *
-   * Use this to give a browser direct read access to the sandbox without
-   * leaking the full bearer (`box.connection.authToken`). The returned
-   * token verifies against the same sidecar middleware that already
-   * gates ProductTokenIssuer-issued JWTs — no new sidecar surface.
+   * Mint a scoped, time-bounded JWT for browser access (Issue #913 Gap 1).
+   * Authority is the caller's `TANGLE_API_KEY` (sk-tan-*); signing secrets
+   * stay server-side. Session/project scopes work with SessionGatewayClient,
+   * while session-runtime/read-only scopes work with SandboxRuntimeClient.
    */
   mintScopedToken(opts: MintScopedTokenOptions): Promise<ScopedToken>;
   /** @internal — invoked by SandboxSession.status(). */

package/dist/{sandbox-Be9WAqSg.js → sandbox-CIHssZCH.js}

@@ -1,5 +1,5 @@
-import { n as normalizeSessionInfo, r as normalizeRuntimeBackendConfig, t as SandboxRuntimeApi } from "./runtime-api-CYA2DUQw.js";
-import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, p as parseErrorResponse, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
+import { n as normalizeSessionInfo, r as normalizeRuntimeBackendConfig, t as SandboxRuntimeApi } from "./runtime-api-CaXI7Kl2.js";
+import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, p as parseErrorResponse, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
 import { addTokenUsage, readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
 //#region src/lib/sse-parser.ts
 /**
@@ -920,6 +920,22 @@ const WRITE_MANY_DEFAULT_PACE_MS = 150;
 const WRITE_MANY_DEFAULT_MAX_RETRIES = 4;
 const WRITE_MANY_RETRY_BASE_MS = 250;
 const WRITE_MANY_RETRY_MAX_MS = 2e3;
+function parseTextFileReadResponse(body) {
+	let payload;
+	try {
+		payload = JSON.parse(body);
+	} catch {
+		throw new ServerError("Runtime returned invalid JSON for file read", 502, {
+			origin: "runtime",
+			endpoint: "/files/read"
+		});
+	}
+	if (typeof payload !== "object" || payload === null || !("success" in payload) || payload.success !== true || !("data" in payload) || typeof payload.data !== "object" || payload.data === null || !("content" in payload.data) || typeof payload.data.content !== "string" || !("encoding" in payload.data) || payload.data.encoding !== "utf8") throw new ServerError("Runtime returned a malformed text file response", 502, {
+		origin: "runtime",
+		endpoint: "/files/read"
+	});
+	return payload.data.content;
+}
 const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 /** Transient file-write failures worth retrying: rate-limit (quota), 5xx,
 *  transport (network), and request timeouts. A non-transient error (bad path,
@@ -1331,18 +1347,20 @@ var SandboxInstance = class SandboxInstance {
 	*/
 	async read(path, options) {
 		await this.ensureRunning();
-		const headers = {};
-		if (options?.sessionId) headers["X-Session-Id"] = options.sessionId;
+		const headers = options?.sessionId ? { "X-Session-Id": options.sessionId } : void 0;
 		const response = await this.runtimeFetch("/files/read", {
 			method: "POST",
 			headers,
-			body: JSON.stringify({ path })
+			body: JSON.stringify({
+				path,
+				encoding: "utf8"
+			})
 		});
 		if (!response.ok) {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
-		return (await response.json()).data?.content ?? "";
+		return parseTextFileReadResponse(await response.text());
 	}
 	/**
 	* Write content to a file in the sandbox.
@@ -1544,8 +1562,8 @@ var SandboxInstance = class SandboxInstance {
 	* `error` + `done` so callers never see a thrown generator.
 	*/
 	async *streamPromptInner(message, options) {
+		if (options?.lastEventId && !options.executionId) throw new ValidationError("lastEventId requires executionId so the SDK can replay the correct execution", { executionId: "Required when lastEventId is set" });
 		await this.ensureRunning();
-		const parts = encodePromptForWire(message);
 		const timeoutMs = typeof options?.timeoutMs === "number" && options.timeoutMs > 0 ? options.timeoutMs : void 0;
 		const timeoutSignal = timeoutMs ? AbortSignal.timeout(timeoutMs) : void 0;
 		const streamSignal = timeoutSignal ? options?.signal ? AbortSignal.any([options.signal, timeoutSignal]) : timeoutSignal : options?.signal;
@@ -1563,26 +1581,47 @@ var SandboxInstance = class SandboxInstance {
 				...data
 			});
 		};
+		const explicitReplay = Boolean(options?.executionId && options.lastEventId);
+		const requestEndpoint = explicitReplay ? `/agents/run/${encodeURIComponent(options?.executionId ?? "")}/events?lastEventId=${encodeURIComponent(options?.lastEventId ?? "")}&format=sse` : "/agents/run/stream";
+		let lastEventId = options?.lastEventId;
+		let executionId = options?.executionId;
+		let sessionId = options?.sessionId;
+		let receivedTerminal = false;
+		const RECONNECT_BACKOFF_MS = [
+			2e3,
+			4e3,
+			8e3,
+			16e3,
+			3e4,
+			3e4
+		];
+		const MAX_RECONNECT_ATTEMPTS = RECONNECT_BACKOFF_MS.length;
+		let lastReplayStatus;
+		let lastExecutionStatus;
+		let firstSseEventSeen = false;
 		let response;
 		try {
 			logStreamCheckpoint("runtime_post_start", {
-				endpoint: "/agents/run/stream",
+				endpoint: requestEndpoint,
 				sessionId: options?.sessionId,
 				executionId: options?.executionId,
 				hasLastEventId: Boolean(options?.lastEventId),
-				detach: options?.detach === true
+				detach: options?.detach === true,
+				replayOnly: explicitReplay
 			});
-			response = await this.runtimeFetch("/agents/run/stream", {
+			const request = explicitReplay ? {
+				method: "GET",
+				signal: streamSignal
+			} : {
 				method: "POST",
 				signal: streamSignal,
 				headers: {
 					...options?.executionId ? { "X-Execution-ID": options.executionId } : {},
-					...options?.lastEventId ? { "Last-Event-ID": options.lastEventId } : {},
 					...options?.detach ? { "x-agent-detach": "true" } : {}
 				},
 				body: JSON.stringify({
 					identifier: "default",
-					parts,
+					parts: encodePromptForWire(message),
 					sessionId: options?.sessionId,
 					turnId: options?.turnId,
 					metadata: options?.context,
@@ -1591,7 +1630,8 @@ var SandboxInstance = class SandboxInstance {
 					...options?.detach ? { detach: true } : {},
 					backend: normalizeRuntimeBackendConfig(options?.backend ?? this.defaultRuntimeBackend, { model: options?.model })
 				})
-			});
+			};
+			response = await this.runtimeFetch(requestEndpoint, request);
 			logStreamCheckpoint("runtime_response_headers", {
 				status: response.status,
 				ok: response.ok
@@ -1601,27 +1641,20 @@ var SandboxInstance = class SandboxInstance {
 			throwIfTimedOut();
 			throw err;
 		}
-		if (!response.ok) {
+		if (!response.ok && !explicitReplay) {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
-		let lastEventId = options?.lastEventId;
-		let executionId = options?.executionId;
-		let sessionId = options?.sessionId;
-		let receivedTerminal = false;
-		const RECONNECT_BACKOFF_MS = [
-			2e3,
-			4e3,
-			8e3,
-			16e3,
-			3e4,
-			3e4
-		];
-		const MAX_RECONNECT_ATTEMPTS = RECONNECT_BACKOFF_MS.length;
-		let lastReplayStatus;
-		let lastExecutionStatus;
-		let firstSseEventSeen = false;
-		for await (const event of this.parseSSEStream(response, streamSignal)) {
+		if (!response.ok) {
+			lastReplayStatus = response.status;
+			await response.text();
+			logStreamCheckpoint("replay_response_status", {
+				attempt: 0,
+				status: response.status,
+				ok: false
+			});
+		} else for await (const event of this.parseSSEStream(response, streamSignal)) {
+			if (event.type === "history.replay.start" || event.type === "history.replay.end") continue;
 			if (!firstSseEventSeen) {
 				firstSseEventSeen = true;
 				logStreamCheckpoint("first_sse_event", {
@@ -2099,11 +2132,19 @@ var SandboxInstance = class SandboxInstance {
 	async resourceUsage() {
 		await this.ensureRunning();
 		const response = await this.runtimeFetch("/health/detailed", { method: "GET" });
-		if (!response.ok) {
-			const body = await response.text();
-			throw parseErrorResponse(response.status, body, void 0, response.headers);
+		const body = await response.text();
+		let data;
+		try {
+			data = JSON.parse(body);
+		} catch (error) {
+			if (response.ok) throw new NetworkError("Detailed health returned a non-JSON response", error instanceof Error ? error : void 0, {
+				endpoint: "/health/detailed",
+				origin: "runtime"
+			});
 		}
-		return (await response.json()).resources ?? null;
+		if (data?.resources) return data.resources;
+		if (!response.ok) throw parseErrorResponse(response.status, body, void 0, response.headers);
+		return null;
 	}
 	/**
 	* Git capability object for repository operations.
@@ -2328,6 +2369,7 @@ var SandboxInstance = class SandboxInstance {
 			list: (path, options) => this.fsList(path, options),
 			stat: (path) => this.fsStat(path),
 			delete: (path, options) => this.fsDelete(path, options),
+			rename: (sourcePath, destinationPath, options) => this.fsRename(sourcePath, destinationPath, options),
 			mkdir: (path, options) => this.fsMkdir(path, options),
 			exists: (path) => this.fsExists(path)
 		};
@@ -2515,6 +2557,9 @@ var SandboxInstance = class SandboxInstance {
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
 	}
+	async fsRename(sourcePath, destinationPath, options) {
+		return this.runtime.renameFile(sourcePath, destinationPath, options);
+	}
 	async fsMkdir(path, options) {
 		await this.ensureRunning();
 		const params = new URLSearchParams();
@@ -4443,15 +4488,10 @@ var SandboxInstance = class SandboxInstance {
 		return { state: "running" };
 	}
 	/**
-	* Mint a scoped, time-bounded JWT for direct browser access to this
-	* sandbox (Issue #913 Gap 1). Authority is the caller's
-	* `TANGLE_API_KEY` (sk-tan-*) — the Sandbox API mints the token;
-	* signing secrets stay server-side.
-	*
-	* Use this to give a browser direct read access to the sandbox without
-	* leaking the full bearer (`box.connection.authToken`). The returned
-	* token verifies against the same sidecar middleware that already
-	* gates ProductTokenIssuer-issued JWTs — no new sidecar surface.
+	* Mint a scoped, time-bounded JWT for browser access (Issue #913 Gap 1).
+	* Authority is the caller's `TANGLE_API_KEY` (sk-tan-*); signing secrets
+	* stay server-side. Session/project scopes work with SessionGatewayClient,
+	* while session-runtime/read-only scopes work with SandboxRuntimeClient.
 	*/
 	async mintScopedToken(opts) {
 		if ((opts.scope === "session" || opts.scope === "session-runtime") && !opts.sessionId) throw new ValidationError(`${opts.scope} scope requires a sessionId`);

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-BFnMEze6.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DFJiN98I.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-D6UfK_B0.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-C-5OvIj8.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-D6UfK_B0.js → tangle-C-5OvIj8.js}

@@ -1,5 +1,5 @@
-import { p as parseErrorResponse } from "./errors-DSz87Rkk.js";
-import { t as SandboxInstance } from "./sandbox-Be9WAqSg.js";
+import { p as parseErrorResponse } from "./errors-wd266B9Q.js";
+import { t as SandboxInstance } from "./sandbox-CIHssZCH.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-BvSoEHz8.d.ts → types-yNRVRww-.d.ts}

@@ -1254,18 +1254,19 @@ interface PromptOptions {
   /** AbortSignal for cancellation */
   signal?: AbortSignal;
   /**
-   * Stable execution id for cross-process reconnect. When passed, the same
-   * id on a retry lands on the same substrate execution — the platform
-   * replays its buffered event stream instead of spawning a duplicate run.
-   * Forwarded as the `X-Execution-ID` header. Omit to let the SDK extract
-   * one from the response stream's `execution.started` event (in-call
-   * reconnect only).
+   * Stable execution id for tracing a first dispatch or selecting an existing
+   * execution for replay. Forwarded as `X-Execution-ID` on a first dispatch.
+   * When combined with `lastEventId`, the SDK replays the existing execution
+   * without sending the prompt again. An execution ID alone does not make a
+   * repeated POST idempotent; use `turnId` for application-level retries.
+   * Omit to let the SDK read the id from `execution.started` for in-call
+   * reconnects.
    */
   executionId?: string;
   /**
-   * Last event id the caller has already acknowledged. The substrate
-   * replays strictly after this id on reconnect. Forwarded as the
-   * `Last-Event-ID` header. Omit on first attempt.
+   * Last event id the caller has already acknowledged. Requires `executionId`;
+   * the SDK replays strictly after this id without dispatching a new prompt.
+   * Omit on the first attempt.
    */
   lastEventId?: string;
   /**
@@ -1724,6 +1725,10 @@ interface SessionListOptions {
 }
 /** Options for creating a runtime agent session. */
 interface CreateSessionOptions {
+  /** Stable caller-supplied idempotency key. Repeating create with the same
+   * id returns the existing session without creating another workspace or
+   * backend session. Omit to let the runtime mint a random id. */
+  sessionId?: string;
   title?: string;
   parentId?: string;
   backend: BackendConfig;
@@ -2018,18 +2023,18 @@ type TurnDriveResult = {
   error: string;
 };
 /**
- * Scope of a `box.mintScopedToken()` request. Each value narrows the token's
- * authority compared to the full sandbox bearer. `session-runtime` permits
- * only typed message, workspace-file, and terminal operations for one session.
+ * Scope of a `box.mintScopedToken()` request. `session` and `project` mint
+ * SessionGateway read tokens. `session-runtime` and `read-only` mint sidecar
+ * capability tokens for browser-safe runtime access.
  */
 type ScopedTokenScope = "session" | "session-runtime" | "project" | "read-only";
 /**
  * Options for `box.mintScopedToken()`.
  */
 interface MintScopedTokenOptions {
-  /** Scope to mint. `session` narrows to a single session id; `project`
-   * grants read access to the whole sandbox; `read-only` is a project
-   * scope without prompt-dispatch capabilities. */
+  /** Scope to mint. `session` and `project` are for SessionGateway streams;
+   * `session-runtime` permits typed files, messages, and terminals for one
+   * session; `read-only` permits read-only runtime requests. */
   scope: ScopedTokenScope;
   /** Required when `scope` is `session` or `session-runtime`. */
   sessionId?: string;
@@ -2039,18 +2044,17 @@ interface MintScopedTokenOptions {
   ttlMinutes?: number;
 }
 /**
- * Returned by `box.mintScopedToken()`. The token verifies against the
- * same sidecar middleware that already gates ProductTokenIssuer-issued
- * JWTs — no new sidecar surface.
+ * Returned by `box.mintScopedToken()`. Use session/project tokens with
+ * `SessionGatewayClient`; use session-runtime/read-only tokens with
+ * `SandboxRuntimeClient`.
  */
 interface ScopedToken {
-  /** Bearer token (JWT). Send as `Authorization: Bearer <token>` or
-   * via the `EventSource` URL with token query param. */
+  /** Bearer token (JWT) for the consumer selected by `scope`. */
   token: string;
   /** When the token expires. */
   expiresAt: Date;
-  /** The runtime's direct edge URL. Matches `SandboxConnection.runtimeUrl`
-   *  (the SDK's canonical public name for this URL). */
+  /** The runtime's direct edge URL. Use with runtime scopes; session/project
+   * tokens instead connect to the Sandbox API's `/session` WebSocket. */
   runtimeUrl: string;
   /** Browser-safe Sandbox API proxy base for terminal and runtime requests. */
   sidecarProxyUrl: string;
@@ -2582,7 +2586,7 @@ interface SandboxFleetArtifactSpec {
    */
   path: string;
   label?: string;
-  /** Maximum allowed artifact content size in bytes. Defaults to 5 MiB. */
+  /** Maximum allowed artifact content size in bytes. Defaults to 10 MiB. */
   maxBytes?: number;
 }
 interface SandboxFleetArtifact extends SandboxFleetArtifactSpec {
@@ -4419,6 +4423,13 @@ interface FileWriteResult {
   /** Encoding echoed by runtimes that include it in write responses. */
   encoding?: "utf8" | "base64";
 }
+/** Metadata returned after a successful file or directory rename. */
+interface FileRenameResult {
+  /** Previous path, relative to the workspace when applicable. */
+  sourcePath: string;
+  /** New path, relative to the workspace when applicable. */
+  destinationPath: string;
+}
 /**
  * Options for uploading files.
  */
@@ -4490,6 +4501,11 @@ interface DeleteOptions {
   /** Agent session whose workspace and change history receive the deletion. */
   sessionId?: string;
 }
+/** Options for {@link FileSystem.rename}. */
+interface RenameOptions {
+  /** Agent session whose workspace and change history receive the rename. */
+  sessionId?: string;
+}
 /**
  * File system operations for sandboxes. Access via `sandbox.fs`.
  *
@@ -4734,6 +4750,27 @@ interface FileSystem {
    * ```
    */
   delete(path: string, options?: DeleteOptions): Promise<void>;
+  /**
+   * Rename a file or directory inside the sandbox without transferring its contents.
+   * An existing regular file or symbolic link at the destination is replaced atomically.
+   * Replacing a non-empty directory fails, as does moving across filesystems.
+   *
+   * @param sourcePath - Current path
+   * @param destinationPath - New path
+   * @param options - Session workspace options
+   * @returns The resolved source and destination paths
+   * @throws NotFoundError if the source or destination parent does not exist
+   * @throws Error if the destination is a non-empty directory or the paths span filesystems
+   *
+   * @example
+   * ```typescript
+   * await box.fs.rename(
+   *   "/workspace/assets/logo.tmp",
+   *   "/workspace/assets/logo.png",
+   * );
+   * ```
+   */
+  rename(sourcePath: string, destinationPath: string, options?: RenameOptions): Promise<FileRenameResult>;
   /**
    * Create a directory.
    *
@@ -4843,4 +4880,4 @@ interface CodeExecutionOptions {
   idempotencyKey?: string;
 }
 //#endregion
-export { EventStreamOptions as $, SandboxFleetMachine as $n, SessionMessageInputPart as $r, NetworkConfig as $t, CommitTaskSessionOptions as A, WriteFileOptions as Ai, Rollout as An, SandboxTerminalInfo as Ar, GpuLeaseCommandResult as At, CreateTaskSessionOptions as B, AgentProfilePermissionValue as Bi, SandboxClientConfig as Bn, SearchMatch as Br, IntelligenceReport as Bt, BatchTaskUsage as C, TurnDriveResult as Ci, PublishPublicTemplateVersionOptions as Cn, SandboxResourceUsage as Cr, GitBranch as Ct, CodeLanguage as D, UsageInfo as Di, ReconcileSandboxFleetsResult as Dn, SandboxRuntimeProfileList as Dr, GitStatus as Dt, CodeExecutionResult as E, UploadProgress as Ei, ReconcileSandboxFleetsOptions as En, SandboxRuntimeProfile as Er, GitDiff as Et, CreateSandboxFleetOptions as F, AgentProfileConfidential as Fi, RolloutStatus as Fn, SandboxTraceExport as Fr, GpuLeaseStatus as Ft, DownloadOptions as G, AgentProfileValidationResult as Gi, SandboxFleetArtifactSpec as Gn, SendSessionMessageRequest as Gr, JsonValue as Gt, DirectoryPermission as H, AgentProfileResourceRef as Hi, SandboxEnvironment as Hn, SecretInfo as Hr, IntelligenceReportCompareTo as Ht, CreateSandboxFleetTokenOptions as I, AgentProfileConnection as Ii, RolloutTurnPart as In, SandboxTraceOptions as Ir, GpuType as It, DriverConfig as J, defineGitHubResource as Ji, SandboxFleetDispatchResponse as Jn, SessionEventStreamOptions as Jr, ListSandboxFleetOptions as Jt, DownloadProgress as K, AgentSubagentProfile as Ki, SandboxFleetCostEstimate as Kn, SentSessionMessage as Kr, ListMessagesOptions as Kt, CreateSandboxFleetWithCoordinatorOptions as L, AgentProfileFileMount as Li, RunCodeOptions as Ln, SandboxUser as Lr, HostAgentDriverConfig as Lt, CreateGpuLeaseOptions as M, WriteManyOptions as Mi, RolloutOptions as Mn, SandboxTerminalRequestOptions as Mr, GpuLeaseExecResult as Mt, CreateIntelligenceReportOptions as N, AgentProfile as Ni, RolloutScorer as Nn, SandboxTraceBundle as Nr, GpuLeaseManager as Nt, CodeResult as O, WaitForOptions as Oi, RestoreSnapshotOptions as On, SandboxStatus as Or, GpuLease as Ot, CreateRequestOptions as P, AgentProfileCapabilities as Pi, RolloutStartResult as Pn, SandboxTraceEvent as Pr, GpuLeaseProviderName as Pt, EgressPolicy as Q, SandboxFleetIntelligenceEnvelope as Qn, SessionMessage as Qr, MkdirOptions as Qt, CreateSandboxOptions as R, AgentProfileMcpServer as Ri, SSHCommandDescriptor as Rn, ScopedToken as Rr, HostAgentRuntimeBackend as Rt, BatchTaskResult as S, ToolsConfig as Si, PublishPublicTemplateOptions as Sn, SandboxProfileSummary as Sr, GitAuth as St, CodeExecutionOptions as T, UploadOptions as Ti, ReapExpiredSandboxFleetsResult as Tn, SandboxRuntimeHealth as Tr, GitConfig as Tt, DispatchPromptOptions as U, AgentProfileResources as Ui, SandboxEvent as Un, SecretsManager as Ur, IntelligenceReportSubjectType as Ut, DeleteOptions as V, AgentProfilePrompt as Vi, SandboxConnection as Vn, SearchOptions as Vr, IntelligenceReportBudget as Vt, DispatchedSession as W, AgentProfileValidationIssue as Wi, SandboxFleetArtifact as Wn, SendSessionMessageOptions as Wr, IntelligenceReportWindow as Wt, DriverType as X, mergeAgentProfiles as Xi, SandboxFleetDriverTimings as Xn, SessionInfo as Xr, McpServerConfig as Xt, DriverInfo as Y, defineInlineResource as Yi, SandboxFleetDriverCapability as Yn, SessionForkOptions as Yr, ListSandboxOptions as Yt, EgressManager as Z, SandboxFleetInfo as Zn, SessionListOptions as Zr, MintScopedTokenOptions as Zt, BatchResult as _, TeeAttestationReport as _i, ProvisionResult as _n, SandboxInfo as _r, FleetExecDispatchResult as _t, AttachSandboxFleetMachineOptions as a, StartupDiagnostics as ai, PreviewLinkManager as an, SandboxFleetOperationsSummary as ar, FileReadError as at, BatchSidecarGroup as b, TeePublicKeyResponse as bi, PublicTemplateInfo as bn, SandboxPortBinding as br, FleetPromptDispatchResult as bt, BackendInfo as c, SubscriptionInfo as ci, ProcessLogEntry as cn, SandboxFleetTraceBundle as cr, FileTreeFile as ct, BackendType as d, TaskSessionChanges as di, ProcessSpawnOptions as dn, SandboxFleetTraceOptions as dr, FileWriteResult as dt, SessionStatus as ei, NetworkManager as en, SandboxFleetMachineMeteredUsage as er, ExecOptions as et, BatchBackend as f, TaskSessionCommitResult as fi, ProcessStatus as fn, SandboxFleetUsage as fr, FleetDispatchCancelResult as ft, BatchOptions as g, TeeAttestationOptions as gi, ProvisionEvent as gn, SandboxFleetWorkspaceSnapshotResult as gr, FleetExecDispatchOptions as gt, BatchEventDataMap as h, TaskSessionProfile as hi, PromptResult as hn, SandboxFleetWorkspaceRestoreResult as hr, FleetDispatchStreamOptions as ht, AttachGpuLeaseOptions as i, SshKeysManager as ii, PreviewLinkInfo as in, SandboxFleetManifestMachine as ir, FileReadBatchResult as it, CompletedTurnResult as j, WriteManyFile as ji, RolloutChildResult as jn, SandboxTerminalManager as jr, GpuLeaseExecOptions as jt, CodeResultPart as k, WaitForRolloutOptions as ki, ResumeOptions as kn, SandboxTerminalCreateOptions as kr, GpuLeaseBilling as kt, BackendManager as l, TaskOptions as li, ProcessManager as ln, SandboxFleetTraceEvent as lr, FileTreeOptions as lt, BatchEvent as m, TaskSessionInfo as mi, PromptOptions as mn, SandboxFleetWorkspaceReconcileResult as mr, FleetDispatchResultBufferOptions as mt, AccessPolicyRule as n, SnapshotOptions as ni, PermissionLevel as nn, SandboxFleetMachineSpec as nr, FileInfo as nt, BackendCapabilities as o, StartupOperation as oi, Process as on, SandboxFleetPolicy as or, FileReadResult as ot, BatchBackendStats as p, TaskSessionFileChange as pi, PromptInputPart as pn, SandboxFleetWorkspace as pr, FleetDispatchResultBuffer as pt, DriveTurnOptions as q, defineAgentProfile as qi, SandboxFleetDispatchFailureClass as qn, SessionBackendCredentials as qr, ListOptions as qt, AddUserOptions as r, SnapshotResult as ri, PermissionsManager as rn, SandboxFleetManifest as rr, FileReadBatchOptions as rt, BackendConfig as s, StorageConfig as si, ProcessInfo as sn, SandboxFleetToken as sr, FileSystem as st, AcceleratorKind as t, SnapshotInfo as ti, NonHostAgentDriverConfig as tn, SandboxFleetMachineRecord as tr, ExecResult as tt, BackendStatus as u, TaskResult as ui, ProcessSignal as un, SandboxFleetTraceExport as ur, FileTreeResult as ut, BatchRunOptions as v, TeeAttestationResponse as vi, ProvisionStatus as vn, SandboxIntelligenceEnvelope as vr, FleetMachineId as vt, BranchOptions as w, UpdateUserOptions as wi, ReapExpiredSandboxFleetsOptions as wn, SandboxResources as wr, GitCommit as wt, BatchTask as x, TokenRefreshHandler as xi, PublicTemplateVersionInfo as xn, SandboxPortPreviewLink as xr, GPU_LEASE_PROVIDER_NAMES as xt, BatchRunRequest as y, TeePublicKey as yi, ProvisionStep as yn, SandboxPermissionsConfig as yr, FleetPromptDispatchOptions as yt, CreateSessionOptions as z, AgentProfileModelHints as zi, SSHCredentials as zn, ScopedTokenScope as zr, InstalledTool as zt };
+export { EventStreamOptions as $, SandboxFleetInfo as $n, SessionListOptions as $r, MkdirOptions as $t, CommitTaskSessionOptions as A, WaitForOptions as Ai, RestoreSnapshotOptions as An, SandboxStatus as Ar, GpuLeaseBilling as At, CreateTaskSessionOptions as B, AgentProfileMcpServer as Bi, SSHCommandDescriptor as Bn, ScopedToken as Br, InstalledTool as Bt, BatchTaskUsage as C, TokenRefreshHandler as Ci, PublishPublicTemplateOptions as Cn, SandboxPortPreviewLink as Cr, GitAuth as Ct, CodeLanguage as D, UploadOptions as Di, ReconcileSandboxFleetsOptions as Dn, SandboxRuntimeHealth as Dr, GitDiff as Dt, CodeExecutionResult as E, UpdateUserOptions as Ei, ReapExpiredSandboxFleetsResult as En, SandboxResources as Er, GitConfig as Et, CreateSandboxFleetOptions as F, AgentProfile as Fi, RolloutScorer as Fn, SandboxTraceBundle as Fr, GpuLeaseProviderName as Ft, DownloadOptions as G, AgentProfileResources as Gi, SandboxEvent as Gn, SecretsManager as Gr, IntelligenceReportWindow as Gt, DirectoryPermission as H, AgentProfilePermissionValue as Hi, SandboxClientConfig as Hn, SearchMatch as Hr, IntelligenceReportBudget as Ht, CreateSandboxFleetTokenOptions as I, AgentProfileCapabilities as Ii, RolloutStartResult as In, SandboxTraceEvent as Ir, GpuLeaseStatus as It, DriverConfig as J, AgentSubagentProfile as Ji, SandboxFleetCostEstimate as Jn, SentSessionMessage as Jr, ListOptions as Jt, DownloadProgress as K, AgentProfileValidationIssue as Ki, SandboxFleetArtifact as Kn, SendSessionMessageOptions as Kr, JsonValue as Kt, CreateSandboxFleetWithCoordinatorOptions as L, AgentProfileConfidential as Li, RolloutStatus as Ln, SandboxTraceExport as Lr, GpuType as Lt, CreateGpuLeaseOptions as M, WriteFileOptions as Mi, Rollout as Mn, SandboxTerminalInfo as Mr, GpuLeaseExecOptions as Mt, CreateIntelligenceReportOptions as N, WriteManyFile as Ni, RolloutChildResult as Nn, SandboxTerminalManager as Nr, GpuLeaseExecResult as Nt, CodeResult as O, UploadProgress as Oi, ReconcileSandboxFleetsResult as On, SandboxRuntimeProfile as Or, GitStatus as Ot, CreateRequestOptions as P, WriteManyOptions as Pi, RolloutOptions as Pn, SandboxTerminalRequestOptions as Pr, GpuLeaseManager as Pt, EgressPolicy as Q, mergeAgentProfiles as Qi, SandboxFleetDriverTimings as Qn, SessionInfo as Qr, MintScopedTokenOptions as Qt, CreateSandboxOptions as R, AgentProfileConnection as Ri, RolloutTurnPart as Rn, SandboxTraceOptions as Rr, HostAgentDriverConfig as Rt, BatchTaskResult as S, TeePublicKeyResponse as Si, PublicTemplateVersionInfo as Sn, SandboxPortBinding as Sr, GPU_LEASE_PROVIDER_NAMES as St, CodeExecutionOptions as T, TurnDriveResult as Ti, ReapExpiredSandboxFleetsOptions as Tn, SandboxResourceUsage as Tr, GitCommit as Tt, DispatchPromptOptions as U, AgentProfilePrompt as Ui, SandboxConnection as Un, SearchOptions as Ur, IntelligenceReportCompareTo as Ut, DeleteOptions as V, AgentProfileModelHints as Vi, SSHCredentials as Vn, ScopedTokenScope as Vr, IntelligenceReport as Vt, DispatchedSession as W, AgentProfileResourceRef as Wi, SandboxEnvironment as Wn, SecretInfo as Wr, IntelligenceReportSubjectType as Wt, DriverType as X, defineGitHubResource as Xi, SandboxFleetDispatchResponse as Xn, SessionEventStreamOptions as Xr, ListSandboxOptions as Xt, DriverInfo as Y, defineAgentProfile as Yi, SandboxFleetDispatchFailureClass as Yn, SessionBackendCredentials as Yr, ListSandboxFleetOptions as Yt, EgressManager as Z, defineInlineResource as Zi, SandboxFleetDriverCapability as Zn, SessionForkOptions as Zr, McpServerConfig as Zt, BatchResult as _, TaskSessionProfile as _i, ProvisionEvent as _n, SandboxFleetWorkspaceRestoreResult as _r, FleetExecDispatchOptions as _t, AttachSandboxFleetMachineOptions as a, SnapshotResult as ai, PreviewLinkInfo as an, SandboxFleetManifest as ar, FileReadError as at, BatchSidecarGroup as b, TeeAttestationResponse as bi, ProvisionStep as bn, SandboxIntelligenceEnvelope as br, FleetPromptDispatchOptions as bt, BackendInfo as c, StartupOperation as ci, ProcessInfo as cn, SandboxFleetPolicy as cr, FileSystem as ct, BackendType as d, TaskOptions as di, ProcessSignal as dn, SandboxFleetTraceEvent as dr, FileTreeResult as dt, SessionMessage as ei, NetworkConfig as en, SandboxFleetIntelligenceEnvelope as er, ExecOptions as et, BatchBackend as f, TaskResult as fi, ProcessSpawnOptions as fn, SandboxFleetTraceExport as fr, FileWriteResult as ft, BatchOptions as g, TaskSessionInfo as gi, PromptResult as gn, SandboxFleetWorkspaceReconcileResult as gr, FleetDispatchStreamOptions as gt, BatchEventDataMap as h, TaskSessionFileChange as hi, PromptOptions as hn, SandboxFleetWorkspace as hr, FleetDispatchResultBufferOptions as ht, AttachGpuLeaseOptions as i, SnapshotOptions as ii, PermissionsManager as in, SandboxFleetMachineSpec as ir, FileReadBatchResult as it, CompletedTurnResult as j, WaitForRolloutOptions as ji, ResumeOptions as jn, SandboxTerminalCreateOptions as jr, GpuLeaseCommandResult as jt, CodeResultPart as k, UsageInfo as ki, RenameOptions as kn, SandboxRuntimeProfileList as kr, GpuLease as kt, BackendManager as l, StorageConfig as li, ProcessLogEntry as ln, SandboxFleetToken as lr, FileTreeFile as lt, BatchEvent as m, TaskSessionCommitResult as mi, PromptInputPart as mn, SandboxFleetUsage as mr, FleetDispatchResultBuffer as mt, AccessPolicyRule as n, SessionStatus as ni, NonHostAgentDriverConfig as nn, SandboxFleetMachineMeteredUsage as nr, FileInfo as nt, BackendCapabilities as o, SshKeysManager as oi, PreviewLinkManager as on, SandboxFleetManifestMachine as or, FileReadResult as ot, BatchBackendStats as p, TaskSessionChanges as pi, ProcessStatus as pn, SandboxFleetTraceOptions as pr, FleetDispatchCancelResult as pt, DriveTurnOptions as q, AgentProfileValidationResult as qi, SandboxFleetArtifactSpec as qn, SendSessionMessageRequest as qr, ListMessagesOptions as qt, AddUserOptions as r, SnapshotInfo as ri, PermissionLevel as rn, SandboxFleetMachineRecord as rr, FileReadBatchOptions as rt, BackendConfig as s, StartupDiagnostics as si, Process as sn, SandboxFleetOperationsSummary as sr, FileRenameResult as st, AcceleratorKind as t, SessionMessageInputPart as ti, NetworkManager as tn, SandboxFleetMachine as tr, ExecResult as tt, BackendStatus as u, SubscriptionInfo as ui, ProcessManager as un, SandboxFleetTraceBundle as ur, FileTreeOptions as ut, BatchRunOptions as v, TeeAttestationOptions as vi, ProvisionResult as vn, SandboxFleetWorkspaceSnapshotResult as vr, FleetExecDispatchResult as vt, BranchOptions as w, ToolsConfig as wi, PublishPublicTemplateVersionOptions as wn, SandboxProfileSummary as wr, GitBranch as wt, BatchTask as x, TeePublicKey as xi, PublicTemplateInfo as xn, SandboxPermissionsConfig as xr, FleetPromptDispatchResult as xt, BatchRunRequest as y, TeeAttestationReport as yi, ProvisionStatus as yn, SandboxInfo as yr, FleetMachineId as yt, CreateSessionOptions as z, AgentProfileFileMount as zi, RunCodeOptions as zn, SandboxUser as zr, HostAgentRuntimeBackend as zt };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.10.4",
+  "version": "0.10.5-develop.20260713235503.8f2cefc",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "main": "./dist/index.js",