@tangle-network/sandbox 0.10.5-develop.20260713235503.8f2cefc → 0.10.5

package/README.md

@@ -206,19 +206,6 @@ client.connect();
 detection, replay-on-reconnect, and `lastEventId` persistence. None of this requires a
 Durable Object.
 
-Server-originated product events can arrive before the browser connects:
-
-```typescript
-await client.broadcastSessionAgentEvent(sessionId, {
-  type: "project.provision_progress",
-  properties: { message: "Creating workspace" },
-});
-```
-
-The public API binds that pending queue to the authenticated product and Sandbox account and commits it to Redis before returning `success: true`.
-A later connection by the same owner leases and acknowledges the ordered queue; another owner receives none of it.
-A gateway crash before acknowledgement redelivers the same event IDs, which the default `SessionGatewayClient` deduplicates before invoking handlers.
-
 See `examples/cf-worker-chat.ts`, `examples/browser-streaming-resume.ts`, and
 `examples/reconnect-from-last-event-id.ts` for end-to-end patterns.
 

package/dist/agent/index.d.ts

@@ -1,6 +1,6 @@
-import { D as CodeLanguage, E as CodeExecutionResult, T as CodeExecutionOptions, k as CodeResultPart } from "../types-yNRVRww-.js";
-import { n as SandboxInstance } from "../sandbox-BvNEOnIl.js";
-import { i as SandboxClient } from "../client-C-4NcZoa.js";
+import { D as CodeLanguage, E as CodeExecutionResult, T as CodeExecutionOptions, k as CodeResultPart } from "../types-BGGfKALh.js";
+import { n as SandboxInstance } from "../sandbox-tksuLdrT.js";
+import { i as SandboxClient } from "../client-CtdFU_nx.js";
 import * as _$_modelcontextprotocol_sdk_server_index_js0 from "@modelcontextprotocol/sdk/server/index.js";
 
 //#region src/agent/tools/_specs.d.ts

package/dist/{client-C-4NcZoa.d.ts → client-CtdFU_nx.d.ts}

@@ -1,5 +1,5 @@
-import { $n as SandboxFleetInfo, Ci as TokenRefreshHandler, Cn as PublishPublicTemplateOptions, Dn as ReconcileSandboxFleetsOptions, En as ReapExpiredSandboxFleetsResult, F as CreateSandboxFleetOptions, Gr as SecretsManager, Gt as IntelligenceReportWindow, Hn as SandboxClientConfig, Ht as IntelligenceReportBudget, I as CreateSandboxFleetTokenOptions, Jn as SandboxFleetCostEstimate, Kn as SandboxFleetArtifact, L as CreateSandboxFleetWithCoordinatorOptions, N as CreateIntelligenceReportOptions, On as ReconcileSandboxFleetsResult, P as CreateRequestOptions, R as CreateSandboxOptions, Sn as PublicTemplateVersionInfo, Tn as ReapExpiredSandboxFleetsOptions, Ut as IntelligenceReportCompareTo, Vt as IntelligenceReport, Wn as SandboxEnvironment, Xn as SandboxFleetDispatchResponse, Xt as ListSandboxOptions, Yt as ListSandboxFleetOptions, Zn as SandboxFleetDriverCapability, _ as BatchResult, _r as SandboxFleetWorkspaceRestoreResult, _t as FleetExecDispatchOptions, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetManifest, bt as FleetPromptDispatchOptions, et as ExecOptions, g as BatchOptions, gn as PromptResult, gr as SandboxFleetWorkspaceReconcileResult, gt as FleetDispatchStreamOptions, hn as PromptOptions, ht as FleetDispatchResultBufferOptions, ki as UsageInfo, lr as SandboxFleetToken, m as BatchEvent, mn as PromptInputPart, mr as SandboxFleetUsage, mt as FleetDispatchResultBuffer, oi as SshKeysManager, pr as SandboxFleetTraceOptions, pt as FleetDispatchCancelResult, qn as SandboxFleetArtifactSpec, rr as SandboxFleetMachineRecord, sr as SandboxFleetOperationsSummary, tt as ExecResult, ui as SubscriptionInfo, ur as SandboxFleetTraceBundle, v as BatchRunOptions, vr as SandboxFleetWorkspaceSnapshotResult, vt as FleetExecDispatchResult, wn as PublishPublicTemplateVersionOptions, wr as SandboxProfileSummary, x as BatchTask, xn as PublicTemplateInfo, xt as FleetPromptDispatchResult, y as BatchRunRequest, yr as SandboxInfo, yt as FleetMachineId } from "./types-yNRVRww-.js";
-import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-BvNEOnIl.js";
+import { $n as SandboxFleetInfo, Ci as TokenRefreshHandler, Cn as PublishPublicTemplateOptions, Dn as ReconcileSandboxFleetsOptions, En as ReapExpiredSandboxFleetsResult, F as CreateSandboxFleetOptions, Gr as SecretsManager, Gt as IntelligenceReportWindow, Hn as SandboxClientConfig, Ht as IntelligenceReportBudget, I as CreateSandboxFleetTokenOptions, Jn as SandboxFleetCostEstimate, Kn as SandboxFleetArtifact, L as CreateSandboxFleetWithCoordinatorOptions, N as CreateIntelligenceReportOptions, On as ReconcileSandboxFleetsResult, P as CreateRequestOptions, R as CreateSandboxOptions, Sn as PublicTemplateVersionInfo, Tn as ReapExpiredSandboxFleetsOptions, Ut as IntelligenceReportCompareTo, Vt as IntelligenceReport, Wn as SandboxEnvironment, Xn as SandboxFleetDispatchResponse, Xt as ListSandboxOptions, Yt as ListSandboxFleetOptions, Zn as SandboxFleetDriverCapability, _ as BatchResult, _r as SandboxFleetWorkspaceRestoreResult, _t as FleetExecDispatchOptions, a as AttachSandboxFleetMachineOptions, ar as SandboxFleetManifest, bt as FleetPromptDispatchOptions, et as ExecOptions, g as BatchOptions, gn as PromptResult, gr as SandboxFleetWorkspaceReconcileResult, gt as FleetDispatchStreamOptions, hn as PromptOptions, ht as FleetDispatchResultBufferOptions, ki as UsageInfo, lr as SandboxFleetToken, m as BatchEvent, mn as PromptInputPart, mr as SandboxFleetUsage, mt as FleetDispatchResultBuffer, oi as SshKeysManager, pr as SandboxFleetTraceOptions, pt as FleetDispatchCancelResult, qn as SandboxFleetArtifactSpec, rr as SandboxFleetMachineRecord, sr as SandboxFleetOperationsSummary, tt as ExecResult, ui as SubscriptionInfo, ur as SandboxFleetTraceBundle, v as BatchRunOptions, vr as SandboxFleetWorkspaceSnapshotResult, vt as FleetExecDispatchResult, wn as PublishPublicTemplateVersionOptions, wr as SandboxProfileSummary, x as BatchTask, xn as PublicTemplateInfo, xt as FleetPromptDispatchResult, y as BatchRunRequest, yr as SandboxInfo, yt as FleetMachineId } from "./types-BGGfKALh.js";
+import { a as TraceExportSink, i as TraceExportResult, n as SandboxInstance, t as HttpClient } from "./sandbox-tksuLdrT.js";
 
 //#region src/lib/sse-parser.d.ts
 /**
@@ -194,11 +194,7 @@ interface SessionBroadcastEvent {
   data?: unknown;
   channel?: string;
 }
-/**
- * Result returned after Sandbox accepts or rejects a session event.
- * For a session that has not connected yet, `success: true` means the event
- * was durably queued for the authenticated owner.
- */
+/** Result returned after Sandbox accepts or rejects a session event. */
 interface SessionBroadcastResult {
   success: boolean;
   sessionId: string;

package/dist/{client-CL_cbjU4.js → client-Dv93EI90.js}

@@ -1,5 +1,5 @@
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, p as parseErrorResponse, t as AuthError } from "./errors-wd266B9Q.js";
-import { d as exportTraceBundle, g as parseSSEStream, l as normalizeConnection, m as encodePromptForWire, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-CIHssZCH.js";
+import { a as NotFoundError, d as TimeoutError, f as ValidationError, i as NetworkError, p as parseErrorResponse, t as AuthError } from "./errors-DSz87Rkk.js";
+import { d as exportTraceBundle, g as parseSSEStream, l as normalizeConnection, m as encodePromptForWire, n as normalizeStartupDiagnostics, t as SandboxInstance } from "./sandbox-Vh7Aog8b.js";
 //#region src/resources.ts
 /**
 * Compute tiers, ordered smallest → largest. Defined HERE (not imported from
@@ -100,7 +100,7 @@ const DEFAULT_MACHINE_LIFETIME_SECONDS = 3600;
 const DEFAULT_MAX_CONCURRENT_CREATES = 4;
 const MAX_CONCURRENT_ARTIFACT_READS = 8;
 const DEFAULT_ARTIFACT_ROOT = "/workspace";
-const DEFAULT_MAX_ARTIFACT_BYTES = 10 * 1024 * 1024;
+const DEFAULT_MAX_ARTIFACT_BYTES = 25 * 1024 * 1024;
 const MAX_MACHINE_ID_LENGTH = 64;
 const machineIdPattern = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
 function createFleetId() {
@@ -997,41 +997,6 @@ const DEFAULT_TIMEOUT_MS = 3e4;
 */
 const DEFAULT_CREATE_TIMEOUT_MS = 12e4;
 const DEFAULT_GPU_CREATE_TIMEOUT_MS = 900 * 1e3;
-const CREATE_POST_MAX_ATTEMPTS = 5;
-const CREATE_RETRY_BASE_DELAY_MS = 250;
-const CREATE_RETRY_MAX_DELAY_MS = 4e3;
-const RETRYABLE_CREATE_STATUS_CODES = new Set([
-	408,
-	425,
-	429,
-	500,
-	502,
-	503,
-	504
-]);
-function isRetryableCreateError(error) {
-	if (error instanceof NetworkError) return true;
-	return error instanceof SandboxError && error.status !== void 0 && RETRYABLE_CREATE_STATUS_CODES.has(error.status);
-}
-function createRetryDelayMs(error, failedAttempt) {
-	if (error instanceof SandboxError && error.retryAfterMs !== void 0) return error.retryAfterMs;
-	return Math.min(CREATE_RETRY_BASE_DELAY_MS * 2 ** Math.max(0, failedAttempt - 1), CREATE_RETRY_MAX_DELAY_MS);
-}
-async function waitForCreateRetry(delayMs, signal) {
-	if (signal.aborted) throw signal.reason ?? /* @__PURE__ */ new Error("Sandbox create aborted");
-	if (delayMs <= 0) return;
-	await new Promise((resolve, reject) => {
-		const timeoutId = setTimeout(() => {
-			signal.removeEventListener("abort", onAbort);
-			resolve();
-		}, delayMs);
-		const onAbort = () => {
-			clearTimeout(timeoutId);
-			reject(signal.reason ?? /* @__PURE__ */ new Error("Sandbox create aborted"));
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-	});
-}
 /**
 * Extra grace the SDK's client-side batch deadline gets on top of
 * the server-side `timeoutMs`. The server's clock starts when the
@@ -1329,77 +1294,60 @@ var SandboxClient = class {
 		const resources = normalizeSandboxResources(options?.resources, options?.driver);
 		const postDeadline = AbortSignal.timeout(timeoutMs);
 		const postSignal = requestOptions?.signal ? AbortSignal.any([requestOptions.signal, postDeadline]) : postDeadline;
-		const createRequestBody = JSON.stringify({
-			name: options?.name,
-			...resolvedEnvironment !== void 0 ? {
-				environment: resolvedEnvironment,
-				image: resolvedEnvironment
-			} : {},
-			git,
-			tools: options?.tools,
-			bare: options?.bare,
-			...options?.publicEdge === false ? { publicEdge: false } : {},
-			driver: options?.driver,
-			backend: resolvedBackend,
-			permissions: options?.permissions,
-			env: options?.env,
-			resources,
-			gpuLease: options?.gpuLease,
-			sshEnabled: options?.sshEnabled,
-			sshPublicKeys: options?.sshPublicKeys ?? (options?.sshPublicKey ? [options.sshPublicKey] : void 0),
-			sshKeyIds: options?.sshKeyIds,
-			webTerminalEnabled: options?.webTerminalEnabled,
-			maxLifetimeSeconds: options?.maxLifetimeSeconds,
-			idleTimeoutSeconds: options?.idleTimeoutSeconds,
-			storage: options?.storage,
-			ephemeral: options?.ephemeral,
-			fromSnapshot: options?.fromSnapshot,
-			fromSandboxId: options?.fromSandboxId,
-			templateId: options?.templateId,
-			publicTemplateId: options?.publicTemplateId,
-			publicTemplateVersionId: options?.publicTemplateVersionId,
-			secrets: options?.secrets,
-			confidential: options?.confidential,
-			metadata: options?.metadata,
-			teamId: options?.teamId,
-			capabilities: options?.capabilities,
-			privacy: options?.privacy,
-			egressPolicy: options?.egressPolicy,
-			idempotencyKey
-		});
-		const createTimeoutError = () => new TimeoutError(timeoutMs, `Sandbox create did not complete within ${timeoutMs}ms. The provision may still be running server-side; retry create() with idempotencyKey="${idempotencyKey}" to join it.`);
-		const waitBeforeRetry = async (error, failedAttempt) => {
-			try {
-				await waitForCreateRetry(createRetryDelayMs(error, failedAttempt), postSignal);
-			} catch (waitError) {
-				if (requestOptions?.signal?.aborted) throw waitError;
-				throw createTimeoutError();
-			}
-		};
 		let response;
-		for (let attempt = 1; attempt <= CREATE_POST_MAX_ATTEMPTS; attempt++) {
-			try {
-				response = await this.fetch("/v1/sandboxes", {
-					method: "POST",
-					headers: { "Idempotency-Key": idempotencyKey },
-					signal: postSignal,
-					body: createRequestBody
-				});
-			} catch (error) {
-				if (requestOptions?.signal?.aborted) throw error;
-				if (postDeadline.aborted || Date.now() >= deadline || error instanceof TimeoutError || error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError")) throw createTimeoutError();
-				if (attempt >= CREATE_POST_MAX_ATTEMPTS || !isRetryableCreateError(error)) throw error;
-				await waitBeforeRetry(error, attempt);
-				continue;
-			}
-			if (response.ok) break;
+		try {
+			response = await this.fetch("/v1/sandboxes", {
+				method: "POST",
+				headers: { "Idempotency-Key": idempotencyKey },
+				signal: postSignal,
+				body: JSON.stringify({
+					name: options?.name,
+					...resolvedEnvironment !== void 0 ? {
+						environment: resolvedEnvironment,
+						image: resolvedEnvironment
+					} : {},
+					git,
+					tools: options?.tools,
+					bare: options?.bare,
+					...options?.publicEdge === false ? { publicEdge: false } : {},
+					driver: options?.driver,
+					backend: resolvedBackend,
+					permissions: options?.permissions,
+					env: options?.env,
+					resources,
+					gpuLease: options?.gpuLease,
+					sshEnabled: options?.sshEnabled,
+					sshPublicKeys: options?.sshPublicKeys ?? (options?.sshPublicKey ? [options.sshPublicKey] : void 0),
+					sshKeyIds: options?.sshKeyIds,
+					webTerminalEnabled: options?.webTerminalEnabled,
+					maxLifetimeSeconds: options?.maxLifetimeSeconds,
+					idleTimeoutSeconds: options?.idleTimeoutSeconds,
+					storage: options?.storage,
+					ephemeral: options?.ephemeral,
+					fromSnapshot: options?.fromSnapshot,
+					fromSandboxId: options?.fromSandboxId,
+					templateId: options?.templateId,
+					publicTemplateId: options?.publicTemplateId,
+					publicTemplateVersionId: options?.publicTemplateVersionId,
+					secrets: options?.secrets,
+					confidential: options?.confidential,
+					metadata: options?.metadata,
+					teamId: options?.teamId,
+					capabilities: options?.capabilities,
+					privacy: options?.privacy,
+					egressPolicy: options?.egressPolicy,
+					idempotencyKey
+				})
+			});
+		} catch (err) {
+			if (requestOptions?.signal?.aborted) throw err;
+			if (err instanceof TimeoutError || err instanceof Error && (err.name === "AbortError" || err.name === "TimeoutError")) throw new TimeoutError(timeoutMs, `Sandbox create did not complete within ${timeoutMs}ms. The provision may still be running server-side; retry create() with idempotencyKey="${idempotencyKey}" to join it.`);
+			throw err;
+		}
+		if (!response.ok) {
 			const body = await response.text();
-			const error = parseErrorResponse(response.status, body, void 0, response.headers);
-			if (attempt >= CREATE_POST_MAX_ATTEMPTS || !isRetryableCreateError(error)) throw error;
-			await waitBeforeRetry(error, attempt);
-			response = void 0;
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
-		if (!response) throw createTimeoutError();
 		const data = await response.json();
 		const instance = new SandboxInstance(this, this.parseInfo(data), resolvedBackend);
 		if (instance.status === "provisioning" || instance.status === "pending") {

package/dist/collaboration/index.js

@@ -1,2 +1,2 @@
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-CcZE2xMl.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "../collaboration-QZXrXdIb.js";
 export { CollaborationClient, CollaborationFileBridge, buildCollaborationDocumentId, normalizeCollaborationPath, parseCollaborationDocumentId };

package/dist/{collaboration-CcZE2xMl.js → collaboration-QZXrXdIb.js}

@@ -1,4 +1,4 @@
-import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "./errors-wd266B9Q.js";
+import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "./errors-DSz87Rkk.js";
 //#region src/collaboration/client.ts
 const DEFAULT_TIMEOUT_MS = 3e4;
 function normalizeBaseUrl(url) {

package/dist/core.d.ts

@@ -1,5 +1,5 @@
-import { Ar as SandboxStatus, Hn as SandboxClientConfig, R as CreateSandboxOptions, an as PreviewLinkInfo, en as NetworkConfig, et as ExecOptions, on as PreviewLinkManager, tt as ExecResult, yr as SandboxInfo } from "./types-yNRVRww-.js";
-import { n as SandboxInstance } from "./sandbox-BvNEOnIl.js";
-import { i as SandboxClient } from "./client-C-4NcZoa.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
+import { Ar as SandboxStatus, Hn as SandboxClientConfig, R as CreateSandboxOptions, an as PreviewLinkInfo, en as NetworkConfig, et as ExecOptions, on as PreviewLinkManager, tt as ExecResult, yr as SandboxInfo } from "./types-BGGfKALh.js";
+import { n as SandboxInstance } from "./sandbox-tksuLdrT.js";
+import { i as SandboxClient } from "./client-CtdFU_nx.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
 export { AuthError, CapabilityError, type CreateSandboxOptions, type ExecOptions, type ExecResult, type NetworkConfig, NetworkError, NotFoundError, PartialFailureError, type PreviewLinkInfo, type PreviewLinkManager, QuotaError, SandboxClient as Sandbox, SandboxClient, type SandboxClientConfig, SandboxError, type SandboxErrorJson, type SandboxFailureDetail, type SandboxInfo, SandboxInstance, type SandboxStatus, ServerError, StateError, TimeoutError, ValidationError };

package/dist/core.js

@@ -1,4 +1,4 @@
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
-import { t as SandboxInstance } from "./sandbox-CIHssZCH.js";
-import { n as SandboxClient } from "./client-CL_cbjU4.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
+import { t as SandboxInstance } from "./sandbox-Vh7Aog8b.js";
+import { n as SandboxClient } from "./client-Dv93EI90.js";
 export { AuthError, CapabilityError, NetworkError, NotFoundError, PartialFailureError, QuotaError, SandboxClient as Sandbox, SandboxClient, SandboxError, SandboxInstance, ServerError, StateError, TimeoutError, ValidationError };

package/dist/{errors-CNCz3Ms9.d.ts → errors--P_nbLzM.d.ts}

@@ -90,7 +90,7 @@ declare class PartialFailureError extends SandboxError {
 declare class ValidationError extends SandboxError {
   /** Field-level validation errors */
   readonly fields?: Record<string, string>;
-  constructor(message: string, fields?: Record<string, string>, metadata?: SandboxErrorMetadata, code?: string);
+  constructor(message: string, fields?: Record<string, string>, metadata?: SandboxErrorMetadata);
 }
 /**
  * The sandbox is not in a valid state for the requested operation.

package/dist/{errors-wd266B9Q.js → errors-DSz87Rkk.js}

@@ -109,8 +109,8 @@ var PartialFailureError = class extends SandboxError {
 var ValidationError = class extends SandboxError {
 	/** Field-level validation errors */
 	fields;
-	constructor(message, fields, metadata, code = "VALIDATION_ERROR") {
-		super(message, code, 400, metadata);
+	constructor(message, fields, metadata) {
+		super(message, "VALIDATION_ERROR", 400, metadata);
 		this.name = "ValidationError";
 		this.fields = fields;
 	}
@@ -255,7 +255,7 @@ function parseErrorResponse(status, body, context, headers) {
 	if (isPartialFailureCode(code)) return new PartialFailureError(message, code, status, metadata, readFailures(data, errorObj));
 	if (code === "EGRESS_PROXY_RECOVERY_REQUIRED") return new EgressProxyRecoveryError(message, metadata);
 	switch (status) {
-		case 400: return new ValidationError(message, data.fields, metadata, code);
+		case 400: return new ValidationError(message, data.fields, metadata);
 		case 401: return new AuthError(message, metadata);
 		case 404: return new NotFoundError(data.resourceType || "Resource", data.resourceId || "unknown", metadata);
 		case 408: return new TimeoutError(data.timeoutMs || 3e4, message, metadata);

package/dist/{index-DFJiN98I.d.ts → index-DF36P3Ew.d.ts}

@@ -1,5 +1,5 @@
-import { R as CreateSandboxOptions } from "./types-yNRVRww-.js";
-import { n as SandboxInstance, t as HttpClient } from "./sandbox-BvNEOnIl.js";
+import { R as CreateSandboxOptions } from "./types-BGGfKALh.js";
+import { n as SandboxInstance, t as HttpClient } from "./sandbox-tksuLdrT.js";
 
 //#region src/tangle/abi.d.ts
 /**

package/dist/index.d.ts

@@ -1,10 +1,10 @@
-import { $ as EventStreamOptions, $n as SandboxFleetInfo, $r as SessionListOptions, $t as MkdirOptions, A as CommitTaskSessionOptions, Ai as WaitForOptions, Ar as SandboxStatus, At as GpuLeaseBilling, B as CreateTaskSessionOptions, Bi as AgentProfileMcpServer, Bn as SSHCommandDescriptor, Br as ScopedToken, Bt as InstalledTool, C as BatchTaskUsage, Ci as TokenRefreshHandler, Cn as PublishPublicTemplateOptions, Cr as SandboxPortPreviewLink, Ct as GitAuth, Di as UploadOptions, Dn as ReconcileSandboxFleetsOptions, Dr as SandboxRuntimeHealth, Dt as GitDiff, Ei as UpdateUserOptions, En as ReapExpiredSandboxFleetsResult, Er as SandboxResources, Et as GitConfig, F as CreateSandboxFleetOptions, Fi as AgentProfile, Fn as RolloutScorer, Fr as SandboxTraceBundle, Ft as GpuLeaseProviderName, G as DownloadOptions, Gi as AgentProfileResources, Gn as SandboxEvent, Gr as SecretsManager, Gt as IntelligenceReportWindow, H as DirectoryPermission, Hi as AgentProfilePermissionValue, Hn as SandboxClientConfig, Hr as SearchMatch, Ht as IntelligenceReportBudget, Ii as AgentProfileCapabilities, In as RolloutStartResult, Ir as SandboxTraceEvent, It as GpuLeaseStatus, J as DriverConfig, Ji as AgentSubagentProfile, Jn as SandboxFleetCostEstimate, Jr as SentSessionMessage, Jt as ListOptions, K as DownloadProgress, Ki as AgentProfileValidationIssue, Kn as SandboxFleetArtifact, Kr as SendSessionMessageOptions, L as CreateSandboxFleetWithCoordinatorOptions, Li as AgentProfileConfidential, Ln as RolloutStatus, Lr as SandboxTraceExport, Lt as GpuType, M as CreateGpuLeaseOptions, Mi as WriteFileOptions, Mn as Rollout, Mr as SandboxTerminalInfo, Mt as GpuLeaseExecOptions, N as CreateIntelligenceReportOptions, Ni as WriteManyFile, Nn as RolloutChildResult, Nr as SandboxTerminalManager, Nt as GpuLeaseExecResult, O as CodeResult, Oi as UploadProgress, On as ReconcileSandboxFleetsResult, Or as SandboxRuntimeProfile, Ot as GitStatus, P as CreateRequestOptions, Pi as WriteManyOptions, Pn as RolloutOptions, Pr as SandboxTerminalRequestOptions, Pt as GpuLeaseManager, Q as EgressPolicy, Qi as mergeAgentProfiles, Qn as SandboxFleetDriverTimings, Qr as SessionInfo, Qt as MintScopedTokenOptions, R as CreateSandboxOptions, Ri as AgentProfileConnection, Rn as RolloutTurnPart, Rr as SandboxTraceOptions, Rt as HostAgentDriverConfig, S as BatchTaskResult, Si as TeePublicKeyResponse, Sn as PublicTemplateVersionInfo, Sr as SandboxPortBinding, St as GPU_LEASE_PROVIDER_NAMES, Ti as TurnDriveResult, Tn as ReapExpiredSandboxFleetsOptions, Tr as SandboxResourceUsage, Tt as GitCommit, U as DispatchPromptOptions, Ui as AgentProfilePrompt, Un as SandboxConnection, Ur as SearchOptions, Ut as IntelligenceReportCompareTo, V as DeleteOptions, Vi as AgentProfileModelHints, Vn as SSHCredentials, Vr as ScopedTokenScope, Vt as IntelligenceReport, W as DispatchedSession, Wi as AgentProfileResourceRef, Wn as SandboxEnvironment, Wr as SecretInfo, Wt as IntelligenceReportSubjectType, X as DriverType, Xi as defineGitHubResource, Xn as SandboxFleetDispatchResponse, Xr as SessionEventStreamOptions, Xt as ListSandboxOptions, Y as DriverInfo, Yi as defineAgentProfile, Yn as SandboxFleetDispatchFailureClass, Yr as SessionBackendCredentials, Yt as ListSandboxFleetOptions, Z as EgressManager, Zi as defineInlineResource, Zn as SandboxFleetDriverCapability, Zr as SessionForkOptions, Zt as McpServerConfig, _ as BatchResult, _i as TaskSessionProfile, _n as ProvisionEvent, _r as SandboxFleetWorkspaceRestoreResult, _t as FleetExecDispatchOptions, a as AttachSandboxFleetMachineOptions, ai as SnapshotResult, an as PreviewLinkInfo, ar as SandboxFleetManifest, at as FileReadError, b as BatchSidecarGroup, bi as TeeAttestationResponse, bn as ProvisionStep, br as SandboxIntelligenceEnvelope, bt as FleetPromptDispatchOptions, c as BackendInfo, ci as StartupOperation, cn as ProcessInfo, cr as SandboxFleetPolicy, ct as FileSystem, d as BackendType, di as TaskOptions, dn as ProcessSignal, dr as SandboxFleetTraceEvent, dt as FileTreeResult, ei as SessionMessage, en as NetworkConfig, er as SandboxFleetIntelligenceEnvelope, et as ExecOptions, f as BatchBackend, fi as TaskResult, fn as ProcessSpawnOptions, fr as SandboxFleetTraceExport, ft as FileWriteResult, g as BatchOptions, gi as TaskSessionInfo, gn as PromptResult, gr as SandboxFleetWorkspaceReconcileResult, gt as FleetDispatchStreamOptions, h as BatchEventDataMap, hi as TaskSessionFileChange, hn as PromptOptions, hr as SandboxFleetWorkspace, ht as FleetDispatchResultBufferOptions, i as AttachGpuLeaseOptions, ii as SnapshotOptions, in as PermissionsManager, ir as SandboxFleetMachineSpec, it as FileReadBatchResult, j as CompletedTurnResult, ji as WaitForRolloutOptions, jr as SandboxTerminalCreateOptions, jt as GpuLeaseCommandResult, ki as UsageInfo, kn as RenameOptions, kr as SandboxRuntimeProfileList, kt as GpuLease, l as BackendManager, li as StorageConfig, ln as ProcessLogEntry, lr as SandboxFleetToken, lt as FileTreeFile, m as BatchEvent, mi as TaskSessionCommitResult, mr as SandboxFleetUsage, mt as FleetDispatchResultBuffer, n as AccessPolicyRule, ni as SessionStatus, nn as NonHostAgentDriverConfig, nr as SandboxFleetMachineMeteredUsage, nt as FileInfo, o as BackendCapabilities, on as PreviewLinkManager, or as SandboxFleetManifestMachine, ot as FileReadResult, p as BatchBackendStats, pi as TaskSessionChanges, pn as ProcessStatus, pr as SandboxFleetTraceOptions, pt as FleetDispatchCancelResult, q as DriveTurnOptions, qi as AgentProfileValidationResult, qn as SandboxFleetArtifactSpec, qr as SendSessionMessageRequest, qt as ListMessagesOptions, r as AddUserOptions, ri as SnapshotInfo, rn as PermissionLevel, rr as SandboxFleetMachineRecord, rt as FileReadBatchOptions, s as BackendConfig, si as StartupDiagnostics, sn as Process, sr as SandboxFleetOperationsSummary, st as FileRenameResult, t as AcceleratorKind, ti as SessionMessageInputPart, tn as NetworkManager, tr as SandboxFleetMachine, tt as ExecResult, u as BackendStatus, ui as SubscriptionInfo, un as ProcessManager, ur as SandboxFleetTraceBundle, ut as FileTreeOptions, v as BatchRunOptions, vi as TeeAttestationOptions, vn as ProvisionResult, vr as SandboxFleetWorkspaceSnapshotResult, w as BranchOptions, wi as ToolsConfig, wn as PublishPublicTemplateVersionOptions, wr as SandboxProfileSummary, wt as GitBranch, x as BatchTask, xi as TeePublicKey, xn as PublicTemplateInfo, xr as SandboxPermissionsConfig, y as BatchRunRequest, yi as TeeAttestationReport, yn as ProvisionStatus, yr as SandboxInfo, yt as FleetMachineId, z as CreateSessionOptions, zi as AgentProfileFileMount, zn as RunCodeOptions, zr as SandboxUser, zt as HostAgentRuntimeBackend } from "./types-yNRVRww-.js";
-import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-BvNEOnIl.js";
-import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-C-4NcZoa.js";
+import { $ as EventStreamOptions, $n as SandboxFleetInfo, $r as SessionListOptions, $t as MkdirOptions, A as CommitTaskSessionOptions, Ai as WaitForOptions, Ar as SandboxStatus, At as GpuLeaseBilling, B as CreateTaskSessionOptions, Bi as AgentProfileMcpServer, Bn as SSHCommandDescriptor, Br as ScopedToken, Bt as InstalledTool, C as BatchTaskUsage, Ci as TokenRefreshHandler, Cn as PublishPublicTemplateOptions, Cr as SandboxPortPreviewLink, Ct as GitAuth, Di as UploadOptions, Dn as ReconcileSandboxFleetsOptions, Dr as SandboxRuntimeHealth, Dt as GitDiff, Ei as UpdateUserOptions, En as ReapExpiredSandboxFleetsResult, Er as SandboxResources, Et as GitConfig, F as CreateSandboxFleetOptions, Fi as AgentProfile, Fn as RolloutScorer, Fr as SandboxTraceBundle, Ft as GpuLeaseProviderName, G as DownloadOptions, Gi as AgentProfileResources, Gn as SandboxEvent, Gr as SecretsManager, Gt as IntelligenceReportWindow, H as DirectoryPermission, Hi as AgentProfilePermissionValue, Hn as SandboxClientConfig, Hr as SearchMatch, Ht as IntelligenceReportBudget, Ii as AgentProfileCapabilities, In as RolloutStartResult, Ir as SandboxTraceEvent, It as GpuLeaseStatus, J as DriverConfig, Ji as AgentSubagentProfile, Jn as SandboxFleetCostEstimate, Jr as SentSessionMessage, Jt as ListOptions, K as DownloadProgress, Ki as AgentProfileValidationIssue, Kn as SandboxFleetArtifact, Kr as SendSessionMessageOptions, L as CreateSandboxFleetWithCoordinatorOptions, Li as AgentProfileConfidential, Ln as RolloutStatus, Lr as SandboxTraceExport, Lt as GpuType, M as CreateGpuLeaseOptions, Mi as WriteFileOptions, Mn as Rollout, Mr as SandboxTerminalInfo, Mt as GpuLeaseExecOptions, N as CreateIntelligenceReportOptions, Ni as WriteManyFile, Nn as RolloutChildResult, Nr as SandboxTerminalManager, Nt as GpuLeaseExecResult, O as CodeResult, Oi as UploadProgress, On as ReconcileSandboxFleetsResult, Or as SandboxRuntimeProfile, Ot as GitStatus, P as CreateRequestOptions, Pi as WriteManyOptions, Pn as RolloutOptions, Pr as SandboxTerminalRequestOptions, Pt as GpuLeaseManager, Q as EgressPolicy, Qi as mergeAgentProfiles, Qn as SandboxFleetDriverTimings, Qr as SessionInfo, Qt as MintScopedTokenOptions, R as CreateSandboxOptions, Ri as AgentProfileConnection, Rn as RolloutTurnPart, Rr as SandboxTraceOptions, Rt as HostAgentDriverConfig, S as BatchTaskResult, Si as TeePublicKeyResponse, Sn as PublicTemplateVersionInfo, Sr as SandboxPortBinding, St as GPU_LEASE_PROVIDER_NAMES, Ti as TurnDriveResult, Tn as ReapExpiredSandboxFleetsOptions, Tr as SandboxResourceUsage, Tt as GitCommit, U as DispatchPromptOptions, Ui as AgentProfilePrompt, Un as SandboxConnection, Ur as SearchOptions, Ut as IntelligenceReportCompareTo, V as DeleteOptions, Vi as AgentProfileModelHints, Vn as SSHCredentials, Vr as ScopedTokenScope, Vt as IntelligenceReport, W as DispatchedSession, Wi as AgentProfileResourceRef, Wn as SandboxEnvironment, Wr as SecretInfo, Wt as IntelligenceReportSubjectType, X as DriverType, Xi as defineGitHubResource, Xn as SandboxFleetDispatchResponse, Xr as SessionEventStreamOptions, Xt as ListSandboxOptions, Y as DriverInfo, Yi as defineAgentProfile, Yn as SandboxFleetDispatchFailureClass, Yr as SessionBackendCredentials, Yt as ListSandboxFleetOptions, Z as EgressManager, Zi as defineInlineResource, Zn as SandboxFleetDriverCapability, Zr as SessionForkOptions, Zt as McpServerConfig, _ as BatchResult, _i as TaskSessionProfile, _n as ProvisionEvent, _r as SandboxFleetWorkspaceRestoreResult, _t as FleetExecDispatchOptions, a as AttachSandboxFleetMachineOptions, ai as SnapshotResult, an as PreviewLinkInfo, ar as SandboxFleetManifest, at as FileReadError, b as BatchSidecarGroup, bi as TeeAttestationResponse, bn as ProvisionStep, br as SandboxIntelligenceEnvelope, bt as FleetPromptDispatchOptions, c as BackendInfo, ci as StartupOperation, cn as ProcessInfo, cr as SandboxFleetPolicy, ct as FileSystem, d as BackendType, di as TaskOptions, dn as ProcessSignal, dr as SandboxFleetTraceEvent, dt as FileTreeResult, ei as SessionMessage, en as NetworkConfig, er as SandboxFleetIntelligenceEnvelope, et as ExecOptions, f as BatchBackend, fi as TaskResult, fn as ProcessSpawnOptions, fr as SandboxFleetTraceExport, ft as FileWriteResult, g as BatchOptions, gi as TaskSessionInfo, gn as PromptResult, gr as SandboxFleetWorkspaceReconcileResult, gt as FleetDispatchStreamOptions, h as BatchEventDataMap, hi as TaskSessionFileChange, hn as PromptOptions, hr as SandboxFleetWorkspace, ht as FleetDispatchResultBufferOptions, i as AttachGpuLeaseOptions, ii as SnapshotOptions, in as PermissionsManager, ir as SandboxFleetMachineSpec, it as FileReadBatchResult, j as CompletedTurnResult, ji as WaitForRolloutOptions, jr as SandboxTerminalCreateOptions, jt as GpuLeaseCommandResult, ki as UsageInfo, kn as RenameOptions, kr as SandboxRuntimeProfileList, kt as GpuLease, l as BackendManager, li as StorageConfig, ln as ProcessLogEntry, lr as SandboxFleetToken, lt as FileTreeFile, m as BatchEvent, mi as TaskSessionCommitResult, mr as SandboxFleetUsage, mt as FleetDispatchResultBuffer, n as AccessPolicyRule, ni as SessionStatus, nn as NonHostAgentDriverConfig, nr as SandboxFleetMachineMeteredUsage, nt as FileInfo, o as BackendCapabilities, on as PreviewLinkManager, or as SandboxFleetManifestMachine, ot as FileReadResult, p as BatchBackendStats, pi as TaskSessionChanges, pn as ProcessStatus, pr as SandboxFleetTraceOptions, pt as FleetDispatchCancelResult, q as DriveTurnOptions, qi as AgentProfileValidationResult, qn as SandboxFleetArtifactSpec, qr as SendSessionMessageRequest, qt as ListMessagesOptions, r as AddUserOptions, ri as SnapshotInfo, rn as PermissionLevel, rr as SandboxFleetMachineRecord, rt as FileReadBatchOptions, s as BackendConfig, si as StartupDiagnostics, sn as Process, sr as SandboxFleetOperationsSummary, st as FileRenameResult, t as AcceleratorKind, ti as SessionMessageInputPart, tn as NetworkManager, tr as SandboxFleetMachine, tt as ExecResult, u as BackendStatus, ui as SubscriptionInfo, un as ProcessManager, ur as SandboxFleetTraceBundle, ut as FileTreeOptions, v as BatchRunOptions, vi as TeeAttestationOptions, vn as ProvisionResult, vr as SandboxFleetWorkspaceSnapshotResult, w as BranchOptions, wi as ToolsConfig, wn as PublishPublicTemplateVersionOptions, wr as SandboxProfileSummary, wt as GitBranch, x as BatchTask, xi as TeePublicKey, xn as PublicTemplateInfo, xr as SandboxPermissionsConfig, y as BatchRunRequest, yi as TeeAttestationReport, yn as ProvisionStatus, yr as SandboxInfo, yt as FleetMachineId, z as CreateSessionOptions, zi as AgentProfileFileMount, zn as RunCodeOptions, zr as SandboxUser, zt as HostAgentRuntimeBackend } from "./types-BGGfKALh.js";
+import { C as SandboxMcpConfig, D as buildSandboxMcpConfig, E as buildControlPlaneMcpConfig, S as SANDBOX_MCP_SERVER_NAME, T as SandboxMcpServerEntry, _ as RespondToPermissionOptions, a as TraceExportSink, b as BuildSandboxMcpConfigOptions, c as otelTraceIdForTangleTrace, d as SandboxSession, f as InteractiveAuthFile, g as InterruptResult, h as InteractiveSessionInfo, i as TraceExportResult, l as toOtelJson, m as InteractiveSessionHost, n as SandboxInstance, o as buildTraceExportPayload, p as InteractiveSessionHandle, r as TraceExportFormat, s as exportTraceBundle, u as SandboxTaskSession, v as StartInteractiveOptions, w as SandboxMcpEndpoint, x as CONTROL_PLANE_MCP_SERVER_NAME, y as BuildControlPlaneMcpConfigOptions } from "./sandbox-tksuLdrT.js";
+import { a as Team, c as SessionBroadcastEvent, d as SandboxFleetClient, f as ParseSSEStreamOptions, i as SandboxClient, l as SessionBroadcastResult, m as parseSSEStream, n as IntelligenceClient, o as TeamInvitation, p as ParsedSSEEvent, r as InviteTeamMemberOptions, s as TeamMember, t as CreateTeamOptions, u as SandboxFleet } from "./client-CtdFU_nx.js";
 import { d as AnyTokenPayload, h as IssueCollaborationTokenOptions, m as CollaborationTokenPayload, p as CollaborationAccess } from "./index-CyHojkuA.js";
 import { _ as CollaborationTransportConfig, a as CollaborationClient, c as CollaborationClientConfig, d as CollaborationDocumentRef, f as CollaborationFileBridgeOptions, g as CollaborationTokenRefreshResponse, h as CollaborationTokenRefreshRequest, i as parseCollaborationDocumentId, l as CollaborationDocumentAdapter, m as CollaborationPermissions, n as buildCollaborationDocumentId, o as CollaborationBootstrapRequest, p as CollaborationFileEvent, r as normalizeCollaborationPath, s as CollaborationBootstrapResponse, t as CollaborationFileBridge, u as CollaborationDocumentChange, v as SaveCollaborationSnapshotRequest, y as SaveCollaborationSnapshotResponse } from "./index-DKzapw-9.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
-import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DFJiN98I.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
+import { s as TangleSandboxClientConfig, t as TangleSandboxClient } from "./index-DF36P3Ew.js";
 
 //#region src/attestation-heartbeat.d.ts
 interface TeeAttestationHeartbeatSample {

package/dist/index.js

@@ -1,9 +1,9 @@
-import { i as serializeForSidecar, r as normalizeRuntimeBackendConfig } from "./runtime-api-CaXI7Kl2.js";
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
-import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as parseSSEStream, h as encodeTextForWire, i as SandboxSession, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-CIHssZCH.js";
-import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-CL_cbjU4.js";
-import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-CcZE2xMl.js";
-import { t as TangleSandboxClient } from "./tangle-C-5OvIj8.js";
+import { i as serializeForSidecar, r as normalizeRuntimeBackendConfig } from "./runtime-api-CvAUrnHc.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, r as EgressProxyRecoveryError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
+import { a as InteractiveSessionHandle, c as getSandboxEventText, d as exportTraceBundle, f as otelTraceIdForTangleTrace, g as parseSSEStream, h as encodeTextForWire, i as SandboxSession, o as applySandboxEventText, p as toOtelJson, r as SandboxTaskSession, s as collectAgentResponseText, t as SandboxInstance, u as buildTraceExportPayload } from "./sandbox-Vh7Aog8b.js";
+import { a as DEFAULT_SANDBOX_SIZE, c as resolveSandboxResources, i as SandboxFleetClient, l as sandboxResourcesForSize, n as SandboxClient, o as SANDBOX_SIZE_PRESETS, r as SandboxFleet, s as SANDBOX_SIZE_PRESET_NAMES, t as IntelligenceClient } from "./client-Dv93EI90.js";
+import { a as CollaborationClient, i as parseCollaborationDocumentId, n as buildCollaborationDocumentId, r as normalizeCollaborationPath, t as CollaborationFileBridge } from "./collaboration-QZXrXdIb.js";
+import { t as TangleSandboxClient } from "./tangle-Bqbf3dA8.js";
 import { defineAgentProfile, defineGitHubResource, defineInlineResource, mergeAgentProfiles } from "@tangle-network/agent-interface";
 //#region src/confidential.ts
 function generateAttestationNonce(bytes = 32) {

package/dist/intelligence/index.js

@@ -1,4 +1,4 @@
-import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "../errors-wd266B9Q.js";
+import { d as TimeoutError, i as NetworkError, p as parseErrorResponse } from "../errors-DSz87Rkk.js";
 //#region src/intelligence/index.ts
 /**
 * `@tangle-network/sandbox/intelligence` — browser-safe typed client for the

package/dist/{runtime-api-CaXI7Kl2.js → runtime-api-CvAUrnHc.js}

@@ -1,4 +1,4 @@
-import { f as ValidationError, l as ServerError, p as parseErrorResponse } from "./errors-wd266B9Q.js";
+import { f as ValidationError, l as ServerError, p as parseErrorResponse } from "./errors-DSz87Rkk.js";
 //#region src/backend-config.ts
 const LEGACY_QUESTION_ALIAS_KEY = ["question", "Channel"].join("");
 function parseModelString(model) {
@@ -203,7 +203,7 @@ var SandboxRuntimeApi = class {
 				method: "POST",
 				body: JSON.stringify({
 					paths: chunk,
-					encoding: options.encoding ?? "utf8"
+					...options.encoding ? { encoding: options.encoding } : {}
 				})
 			});
 			for (const [path, result] of Object.entries(payload.data.files)) if (result.success) files.push({

package/dist/runtime.d.ts

@@ -1,5 +1,5 @@
-import { A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Dr as SandboxRuntimeHealth, Jr as SentSessionMessage, Kr as SendSessionMessageOptions, Mi as WriteFileOptions, Mr as SandboxTerminalInfo, Nr as SandboxTerminalManager, Pr as SandboxTerminalRequestOptions, Qr as SessionInfo, Sr as SandboxPortBinding, dt as FileTreeResult, ei as SessionMessage, ft as FileWriteResult, gi as TaskSessionInfo, it as FileReadBatchResult, jr as SandboxTerminalCreateOptions, kn as RenameOptions, kr as SandboxRuntimeProfileList, mi as TaskSessionCommitResult, pi as TaskSessionChanges, qr as SendSessionMessageRequest, qt as ListMessagesOptions, rt as FileReadBatchOptions, st as FileRenameResult, ut as FileTreeOptions, z as CreateSessionOptions } from "./types-yNRVRww-.js";
-import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors-CNCz3Ms9.js";
+import { A as CommitTaskSessionOptions, B as CreateTaskSessionOptions, Dr as SandboxRuntimeHealth, Jr as SentSessionMessage, Kr as SendSessionMessageOptions, Mi as WriteFileOptions, Mr as SandboxTerminalInfo, Nr as SandboxTerminalManager, Pr as SandboxTerminalRequestOptions, Qr as SessionInfo, Sr as SandboxPortBinding, dt as FileTreeResult, ei as SessionMessage, ft as FileWriteResult, gi as TaskSessionInfo, it as FileReadBatchResult, jr as SandboxTerminalCreateOptions, kn as RenameOptions, kr as SandboxRuntimeProfileList, mi as TaskSessionCommitResult, pi as TaskSessionChanges, qr as SendSessionMessageRequest, qt as ListMessagesOptions, rt as FileReadBatchOptions, st as FileRenameResult, ut as FileTreeOptions, z as CreateSessionOptions } from "./types-BGGfKALh.js";
+import { a as NotFoundError, c as SandboxError, d as ServerError, f as StateError, i as NetworkError, l as SandboxErrorJson, m as ValidationError, n as CapabilityError, o as PartialFailureError, p as TimeoutError, s as QuotaError, t as AuthError, u as SandboxFailureDetail } from "./errors--P_nbLzM.js";
 
 //#region src/runtime-api.d.ts
 interface RuntimeTransport {
@@ -37,9 +37,9 @@ declare class SandboxRuntimeApi {
 //#endregion
 //#region src/runtime-client.d.ts
 interface SandboxRuntimeClientConfig {
-  /** Browser-safe proxy base returned by a runtime-scoped token mint. */
+  /** Browser-safe proxy base returned by `box.mintScopedToken()`. */
   baseUrl: string;
-  /** Short-lived `session-runtime` or `read-only` token. */
+  /** Short-lived scoped token returned by `box.mintScopedToken()`. */
   token: string;
   /** Request timeout in milliseconds. Defaults to 30 seconds. */
   timeoutMs?: number;
@@ -50,9 +50,7 @@ interface SandboxRuntimeClientConfig {
  * Browser- and Worker-safe client for one sandbox runtime.
  *
  * Construct it from the scoped token response returned by
- * `box.mintScopedToken({ scope: "session-runtime", sessionId })` or
- * `box.mintScopedToken({ scope: "read-only" })`. The full Sandbox API key
- * remains server-side.
+ * `box.mintScopedToken()`. The full Sandbox API key remains server-side.
  */
 declare class SandboxRuntimeClient extends SandboxRuntimeApi {
   private readonly auth;

package/dist/runtime.js

@@ -1,5 +1,5 @@
-import { t as SandboxRuntimeApi } from "./runtime-api-CaXI7Kl2.js";
-import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
+import { t as SandboxRuntimeApi } from "./runtime-api-CvAUrnHc.js";
+import { a as NotFoundError, c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, o as PartialFailureError, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
 //#region src/runtime-client.ts
 const DEFAULT_RUNTIME_TIMEOUT_MS = 3e4;
 function requireToken(token) {
@@ -28,9 +28,7 @@ function requireTimeout(timeoutMs) {
 * Browser- and Worker-safe client for one sandbox runtime.
 *
 * Construct it from the scoped token response returned by
-* `box.mintScopedToken({ scope: "session-runtime", sessionId })` or
-* `box.mintScopedToken({ scope: "read-only" })`. The full Sandbox API key
-* remains server-side.
+* `box.mintScopedToken()`. The full Sandbox API key remains server-side.
 */
 var SandboxRuntimeClient = class extends SandboxRuntimeApi {
 	auth;

package/dist/{sandbox-CIHssZCH.js → sandbox-Vh7Aog8b.js}

@@ -1,5 +1,5 @@
-import { n as normalizeSessionInfo, r as normalizeRuntimeBackendConfig, t as SandboxRuntimeApi } from "./runtime-api-CaXI7Kl2.js";
-import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, p as parseErrorResponse, s as QuotaError, t as AuthError, u as StateError } from "./errors-wd266B9Q.js";
+import { n as normalizeSessionInfo, r as normalizeRuntimeBackendConfig, t as SandboxRuntimeApi } from "./runtime-api-CvAUrnHc.js";
+import { c as SandboxError, d as TimeoutError, f as ValidationError, i as NetworkError, l as ServerError, n as CapabilityError, p as parseErrorResponse, s as QuotaError, t as AuthError, u as StateError } from "./errors-DSz87Rkk.js";
 import { addTokenUsage, readTokenCostUsd, readTokenUsage } from "@tangle-network/agent-core";
 //#region src/lib/sse-parser.ts
 /**
@@ -920,22 +920,6 @@ const WRITE_MANY_DEFAULT_PACE_MS = 150;
 const WRITE_MANY_DEFAULT_MAX_RETRIES = 4;
 const WRITE_MANY_RETRY_BASE_MS = 250;
 const WRITE_MANY_RETRY_MAX_MS = 2e3;
-function parseTextFileReadResponse(body) {
-	let payload;
-	try {
-		payload = JSON.parse(body);
-	} catch {
-		throw new ServerError("Runtime returned invalid JSON for file read", 502, {
-			origin: "runtime",
-			endpoint: "/files/read"
-		});
-	}
-	if (typeof payload !== "object" || payload === null || !("success" in payload) || payload.success !== true || !("data" in payload) || typeof payload.data !== "object" || payload.data === null || !("content" in payload.data) || typeof payload.data.content !== "string" || !("encoding" in payload.data) || payload.data.encoding !== "utf8") throw new ServerError("Runtime returned a malformed text file response", 502, {
-		origin: "runtime",
-		endpoint: "/files/read"
-	});
-	return payload.data.content;
-}
 const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 /** Transient file-write failures worth retrying: rate-limit (quota), 5xx,
 *  transport (network), and request timeouts. A non-transient error (bad path,
@@ -1347,20 +1331,18 @@ var SandboxInstance = class SandboxInstance {
 	*/
 	async read(path, options) {
 		await this.ensureRunning();
-		const headers = options?.sessionId ? { "X-Session-Id": options.sessionId } : void 0;
+		const headers = {};
+		if (options?.sessionId) headers["X-Session-Id"] = options.sessionId;
 		const response = await this.runtimeFetch("/files/read", {
 			method: "POST",
 			headers,
-			body: JSON.stringify({
-				path,
-				encoding: "utf8"
-			})
+			body: JSON.stringify({ path })
 		});
 		if (!response.ok) {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
-		return parseTextFileReadResponse(await response.text());
+		return (await response.json()).data?.content ?? "";
 	}
 	/**
 	* Write content to a file in the sandbox.
@@ -1562,8 +1544,8 @@ var SandboxInstance = class SandboxInstance {
 	* `error` + `done` so callers never see a thrown generator.
 	*/
 	async *streamPromptInner(message, options) {
-		if (options?.lastEventId && !options.executionId) throw new ValidationError("lastEventId requires executionId so the SDK can replay the correct execution", { executionId: "Required when lastEventId is set" });
 		await this.ensureRunning();
+		const parts = encodePromptForWire(message);
 		const timeoutMs = typeof options?.timeoutMs === "number" && options.timeoutMs > 0 ? options.timeoutMs : void 0;
 		const timeoutSignal = timeoutMs ? AbortSignal.timeout(timeoutMs) : void 0;
 		const streamSignal = timeoutSignal ? options?.signal ? AbortSignal.any([options.signal, timeoutSignal]) : timeoutSignal : options?.signal;
@@ -1581,47 +1563,26 @@ var SandboxInstance = class SandboxInstance {
 				...data
 			});
 		};
-		const explicitReplay = Boolean(options?.executionId && options.lastEventId);
-		const requestEndpoint = explicitReplay ? `/agents/run/${encodeURIComponent(options?.executionId ?? "")}/events?lastEventId=${encodeURIComponent(options?.lastEventId ?? "")}&format=sse` : "/agents/run/stream";
-		let lastEventId = options?.lastEventId;
-		let executionId = options?.executionId;
-		let sessionId = options?.sessionId;
-		let receivedTerminal = false;
-		const RECONNECT_BACKOFF_MS = [
-			2e3,
-			4e3,
-			8e3,
-			16e3,
-			3e4,
-			3e4
-		];
-		const MAX_RECONNECT_ATTEMPTS = RECONNECT_BACKOFF_MS.length;
-		let lastReplayStatus;
-		let lastExecutionStatus;
-		let firstSseEventSeen = false;
 		let response;
 		try {
 			logStreamCheckpoint("runtime_post_start", {
-				endpoint: requestEndpoint,
+				endpoint: "/agents/run/stream",
 				sessionId: options?.sessionId,
 				executionId: options?.executionId,
 				hasLastEventId: Boolean(options?.lastEventId),
-				detach: options?.detach === true,
-				replayOnly: explicitReplay
+				detach: options?.detach === true
 			});
-			const request = explicitReplay ? {
-				method: "GET",
-				signal: streamSignal
-			} : {
+			response = await this.runtimeFetch("/agents/run/stream", {
 				method: "POST",
 				signal: streamSignal,
 				headers: {
 					...options?.executionId ? { "X-Execution-ID": options.executionId } : {},
+					...options?.lastEventId ? { "Last-Event-ID": options.lastEventId } : {},
 					...options?.detach ? { "x-agent-detach": "true" } : {}
 				},
 				body: JSON.stringify({
 					identifier: "default",
-					parts: encodePromptForWire(message),
+					parts,
 					sessionId: options?.sessionId,
 					turnId: options?.turnId,
 					metadata: options?.context,
@@ -1630,8 +1591,7 @@ var SandboxInstance = class SandboxInstance {
 					...options?.detach ? { detach: true } : {},
 					backend: normalizeRuntimeBackendConfig(options?.backend ?? this.defaultRuntimeBackend, { model: options?.model })
 				})
-			};
-			response = await this.runtimeFetch(requestEndpoint, request);
+			});
 			logStreamCheckpoint("runtime_response_headers", {
 				status: response.status,
 				ok: response.ok
@@ -1641,20 +1601,27 @@ var SandboxInstance = class SandboxInstance {
 			throwIfTimedOut();
 			throw err;
 		}
-		if (!response.ok && !explicitReplay) {
+		if (!response.ok) {
 			const body = await response.text();
 			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
-		if (!response.ok) {
-			lastReplayStatus = response.status;
-			await response.text();
-			logStreamCheckpoint("replay_response_status", {
-				attempt: 0,
-				status: response.status,
-				ok: false
-			});
-		} else for await (const event of this.parseSSEStream(response, streamSignal)) {
-			if (event.type === "history.replay.start" || event.type === "history.replay.end") continue;
+		let lastEventId = options?.lastEventId;
+		let executionId = options?.executionId;
+		let sessionId = options?.sessionId;
+		let receivedTerminal = false;
+		const RECONNECT_BACKOFF_MS = [
+			2e3,
+			4e3,
+			8e3,
+			16e3,
+			3e4,
+			3e4
+		];
+		const MAX_RECONNECT_ATTEMPTS = RECONNECT_BACKOFF_MS.length;
+		let lastReplayStatus;
+		let lastExecutionStatus;
+		let firstSseEventSeen = false;
+		for await (const event of this.parseSSEStream(response, streamSignal)) {
 			if (!firstSseEventSeen) {
 				firstSseEventSeen = true;
 				logStreamCheckpoint("first_sse_event", {
@@ -2132,19 +2099,11 @@ var SandboxInstance = class SandboxInstance {
 	async resourceUsage() {
 		await this.ensureRunning();
 		const response = await this.runtimeFetch("/health/detailed", { method: "GET" });
-		const body = await response.text();
-		let data;
-		try {
-			data = JSON.parse(body);
-		} catch (error) {
-			if (response.ok) throw new NetworkError("Detailed health returned a non-JSON response", error instanceof Error ? error : void 0, {
-				endpoint: "/health/detailed",
-				origin: "runtime"
-			});
+		if (!response.ok) {
+			const body = await response.text();
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
 		}
-		if (data?.resources) return data.resources;
-		if (!response.ok) throw parseErrorResponse(response.status, body, void 0, response.headers);
-		return null;
+		return (await response.json()).resources ?? null;
 	}
 	/**
 	* Git capability object for repository operations.
@@ -2971,11 +2930,32 @@ var SandboxInstance = class SandboxInstance {
 	get process() {
 		return {
 			spawn: (command, options) => this.processSpawn(command, options),
+			spawnExact: (executable, args, options) => this.processSpawnExact(executable, args, options),
 			runCode: (code, options) => this.processRunCode(code, options),
 			list: () => this.processList(),
 			get: (pid) => this.processGet(pid)
 		};
 	}
+	async processSpawnExact(executable, args, options) {
+		await this.ensureRunning();
+		const response = await this.runtimeFetch("/process/spawn-exact", {
+			method: "POST",
+			body: JSON.stringify({
+				executable,
+				args,
+				cwd: options?.cwd,
+				env: options?.env ?? {},
+				stdin: options?.stdin,
+				timeoutMs: options?.timeoutMs
+			})
+		});
+		if (!response.ok) {
+			const body = await response.text();
+			throw parseErrorResponse(response.status, body, void 0, response.headers);
+		}
+		const data = await response.json();
+		return this.createProcessHandle(data.data.pid, executable);
+	}
 	async processSpawn(command, options) {
 		await this.ensureRunning();
 		const response = await this.runtimeFetch("/process/spawn", {
@@ -4488,10 +4468,15 @@ var SandboxInstance = class SandboxInstance {
 		return { state: "running" };
 	}
 	/**
-	* Mint a scoped, time-bounded JWT for browser access (Issue #913 Gap 1).
-	* Authority is the caller's `TANGLE_API_KEY` (sk-tan-*); signing secrets
-	* stay server-side. Session/project scopes work with SessionGatewayClient,
-	* while session-runtime/read-only scopes work with SandboxRuntimeClient.
+	* Mint a scoped, time-bounded JWT for direct browser access to this
+	* sandbox (Issue #913 Gap 1). Authority is the caller's
+	* `TANGLE_API_KEY` (sk-tan-*) — the Sandbox API mints the token;
+	* signing secrets stay server-side.
+	*
+	* Use this to give a browser direct read access to the sandbox without
+	* leaking the full bearer (`box.connection.authToken`). The returned
+	* token verifies against the same sidecar middleware that already
+	* gates ProductTokenIssuer-issued JWTs — no new sidecar surface.
 	*/
 	async mintScopedToken(opts) {
 		if ((opts.scope === "session" || opts.scope === "session-runtime") && !opts.sessionId) throw new ValidationError(`${opts.scope} scope requires a sessionId`);

package/dist/{sandbox-BvNEOnIl.d.ts → sandbox-tksuLdrT.d.ts}

@@ -1,4 +1,4 @@
-import { $ as EventStreamOptions, $r as SessionListOptions, A as CommitTaskSessionOptions, Ai as WaitForOptions, An as RestoreSnapshotOptions, Ar as SandboxStatus, B as CreateTaskSessionOptions, Bn as SSHCommandDescriptor, Br as ScopedToken, Bt as InstalledTool, D as CodeLanguage, Dr as SandboxRuntimeHealth, Dt as GitDiff, E as CodeExecutionResult, Fr as SandboxTraceBundle, Gn as SandboxEvent, Gt as IntelligenceReportWindow, Hr as SearchMatch, Ht as IntelligenceReportBudget, In as RolloutStartResult, Jr as SentSessionMessage, Kr as SendSessionMessageOptions, Kt as JsonValue, Mi as WriteFileOptions, Mn as Rollout, Ni as WriteManyFile, Nr as SandboxTerminalManager, Ot as GitStatus, Pi as WriteManyOptions, Pn as RolloutOptions, Pt as GpuLeaseManager, Qr as SessionInfo, Qt as MintScopedTokenOptions, Rr as SandboxTraceOptions, Si as TeePublicKeyResponse, Sr as SandboxPortBinding, T as CodeExecutionOptions, Ti as TurnDriveResult, Tr as SandboxResourceUsage, Tt as GitCommit, U as DispatchPromptOptions, Un as SandboxConnection, Ur as SearchOptions, Ut as IntelligenceReportCompareTo, Vn as SSHCredentials, Vt as IntelligenceReport, W as DispatchedSession, Xr as SessionEventStreamOptions, Y as DriverInfo, Z as EgressManager, Zr as SessionForkOptions, _n as ProvisionEvent, ai as SnapshotResult, bi as TeeAttestationResponse, ct as FileSystem, di as TaskOptions, ei as SessionMessage, et as ExecOptions, fi as TaskResult, ft as FileWriteResult, gi as TaskSessionInfo, gn as PromptResult, hn as PromptOptions, ii as SnapshotOptions, in as PermissionsManager, j as CompletedTurnResult, ji as WaitForRolloutOptions, jn as ResumeOptions, kr as SandboxRuntimeProfileList, kt as GpuLease, l as BackendManager, mi as TaskSessionCommitResult, mn as PromptInputPart, on as PreviewLinkManager, pi as TaskSessionChanges, q as DriveTurnOptions, qr as SendSessionMessageRequest, qt as ListMessagesOptions, ri as SnapshotInfo, s as BackendConfig, si as StartupDiagnostics, tn as NetworkManager, tt as ExecResult, un as ProcessManager, ur as SandboxFleetTraceBundle, vi as TeeAttestationOptions, vn as ProvisionResult, w as BranchOptions, wt as GitBranch, yr as SandboxInfo, z as CreateSessionOptions } from "./types-yNRVRww-.js";
+import { $ as EventStreamOptions, $r as SessionListOptions, A as CommitTaskSessionOptions, Ai as WaitForOptions, An as RestoreSnapshotOptions, Ar as SandboxStatus, B as CreateTaskSessionOptions, Bn as SSHCommandDescriptor, Br as ScopedToken, Bt as InstalledTool, D as CodeLanguage, Dr as SandboxRuntimeHealth, Dt as GitDiff, E as CodeExecutionResult, Fr as SandboxTraceBundle, Gn as SandboxEvent, Gt as IntelligenceReportWindow, Hr as SearchMatch, Ht as IntelligenceReportBudget, In as RolloutStartResult, Jr as SentSessionMessage, Kr as SendSessionMessageOptions, Kt as JsonValue, Mi as WriteFileOptions, Mn as Rollout, Ni as WriteManyFile, Nr as SandboxTerminalManager, Ot as GitStatus, Pi as WriteManyOptions, Pn as RolloutOptions, Pt as GpuLeaseManager, Qr as SessionInfo, Qt as MintScopedTokenOptions, Rr as SandboxTraceOptions, Si as TeePublicKeyResponse, Sr as SandboxPortBinding, T as CodeExecutionOptions, Ti as TurnDriveResult, Tr as SandboxResourceUsage, Tt as GitCommit, U as DispatchPromptOptions, Un as SandboxConnection, Ur as SearchOptions, Ut as IntelligenceReportCompareTo, Vn as SSHCredentials, Vt as IntelligenceReport, W as DispatchedSession, Xr as SessionEventStreamOptions, Y as DriverInfo, Z as EgressManager, Zr as SessionForkOptions, _n as ProvisionEvent, ai as SnapshotResult, bi as TeeAttestationResponse, ct as FileSystem, di as TaskOptions, ei as SessionMessage, et as ExecOptions, fi as TaskResult, ft as FileWriteResult, gi as TaskSessionInfo, gn as PromptResult, hn as PromptOptions, ii as SnapshotOptions, in as PermissionsManager, j as CompletedTurnResult, ji as WaitForRolloutOptions, jn as ResumeOptions, kr as SandboxRuntimeProfileList, kt as GpuLease, l as BackendManager, mi as TaskSessionCommitResult, mn as PromptInputPart, on as PreviewLinkManager, pi as TaskSessionChanges, q as DriveTurnOptions, qr as SendSessionMessageRequest, qt as ListMessagesOptions, ri as SnapshotInfo, s as BackendConfig, si as StartupDiagnostics, tn as NetworkManager, tt as ExecResult, un as ProcessManager, ur as SandboxFleetTraceBundle, vi as TeeAttestationOptions, vn as ProvisionResult, w as BranchOptions, wt as GitBranch, yr as SandboxInfo, z as CreateSessionOptions } from "./types-BGGfKALh.js";
 
 //#region src/mcp.d.ts
 /**
@@ -1015,6 +1015,7 @@ declare class SandboxInstance {
    * ```
    */
   get process(): ProcessManager;
+  private processSpawnExact;
   private processSpawn;
   private processRunCode;
   private processList;
@@ -1499,10 +1500,15 @@ declare class SandboxInstance {
    */
   driveTurn(message: string | PromptInputPart[], opts: DriveTurnOptions): Promise<TurnDriveResult>;
   /**
-   * Mint a scoped, time-bounded JWT for browser access (Issue #913 Gap 1).
-   * Authority is the caller's `TANGLE_API_KEY` (sk-tan-*); signing secrets
-   * stay server-side. Session/project scopes work with SessionGatewayClient,
-   * while session-runtime/read-only scopes work with SandboxRuntimeClient.
+   * Mint a scoped, time-bounded JWT for direct browser access to this
+   * sandbox (Issue #913 Gap 1). Authority is the caller's
+   * `TANGLE_API_KEY` (sk-tan-*) — the Sandbox API mints the token;
+   * signing secrets stay server-side.
+   *
+   * Use this to give a browser direct read access to the sandbox without
+   * leaking the full bearer (`box.connection.authToken`). The returned
+   * token verifies against the same sidecar middleware that already
+   * gates ProductTokenIssuer-issued JWTs — no new sidecar surface.
    */
   mintScopedToken(opts: MintScopedTokenOptions): Promise<ScopedToken>;
   /** @internal — invoked by SandboxSession.status(). */

package/dist/tangle/index.d.ts

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DFJiN98I.js";
+import { a as TANGLE_JOBS_CONTRACT, c as AgentSandboxBlueprintAbi, d as SandboxCreateParamTypes, f as SandboxCreateResponseParamTypes, i as TANGLE_CHAIN_ID, l as ITangleJobsAbi, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, p as SandboxIdParamTypes, r as JOB_SANDBOX_DELETE, s as TangleSandboxClientConfig, t as TangleSandboxClient, u as JsonResponseParamTypes } from "../index-DF36P3Ew.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient, TangleSandboxClientConfig };

package/dist/tangle/index.js

@@ -1,2 +1,2 @@
-import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-C-5OvIj8.js";
+import { a as TANGLE_JOBS_CONTRACT, c as ITangleJobsAbi, d as SandboxCreateResponseParamTypes, f as SandboxIdParamTypes, i as TANGLE_CHAIN_ID, l as JsonResponseParamTypes, n as JOB_SANDBOX_CREATE, o as TANGLE_MAINNET_RPC, r as JOB_SANDBOX_DELETE, s as AgentSandboxBlueprintAbi, t as TangleSandboxClient, u as SandboxCreateParamTypes } from "../tangle-Bqbf3dA8.js";
 export { AgentSandboxBlueprintAbi, ITangleJobsAbi, JOB_SANDBOX_CREATE, JOB_SANDBOX_DELETE, JsonResponseParamTypes, SandboxCreateParamTypes, SandboxCreateResponseParamTypes, SandboxIdParamTypes, TANGLE_CHAIN_ID, TANGLE_JOBS_CONTRACT, TANGLE_MAINNET_RPC, TangleSandboxClient };

package/dist/{tangle-C-5OvIj8.js → tangle-Bqbf3dA8.js}

@@ -1,5 +1,5 @@
-import { p as parseErrorResponse } from "./errors-wd266B9Q.js";
-import { t as SandboxInstance } from "./sandbox-CIHssZCH.js";
+import { p as parseErrorResponse } from "./errors-DSz87Rkk.js";
+import { t as SandboxInstance } from "./sandbox-Vh7Aog8b.js";
 //#region src/tangle/abi.ts
 /**
 * Tangle Contract ABI Definitions

package/dist/{types-yNRVRww-.d.ts → types-BGGfKALh.d.ts}

@@ -1254,19 +1254,18 @@ interface PromptOptions {
   /** AbortSignal for cancellation */
   signal?: AbortSignal;
   /**
-   * Stable execution id for tracing a first dispatch or selecting an existing
-   * execution for replay. Forwarded as `X-Execution-ID` on a first dispatch.
-   * When combined with `lastEventId`, the SDK replays the existing execution
-   * without sending the prompt again. An execution ID alone does not make a
-   * repeated POST idempotent; use `turnId` for application-level retries.
-   * Omit to let the SDK read the id from `execution.started` for in-call
-   * reconnects.
+   * Stable execution id for cross-process reconnect. When passed, the same
+   * id on a retry lands on the same substrate execution — the platform
+   * replays its buffered event stream instead of spawning a duplicate run.
+   * Forwarded as the `X-Execution-ID` header. Omit to let the SDK extract
+   * one from the response stream's `execution.started` event (in-call
+   * reconnect only).
    */
   executionId?: string;
   /**
-   * Last event id the caller has already acknowledged. Requires `executionId`;
-   * the SDK replays strictly after this id without dispatching a new prompt.
-   * Omit on the first attempt.
+   * Last event id the caller has already acknowledged. The substrate
+   * replays strictly after this id on reconnect. Forwarded as the
+   * `Last-Event-ID` header. Omit on first attempt.
    */
   lastEventId?: string;
   /**
@@ -2023,18 +2022,18 @@ type TurnDriveResult = {
   error: string;
 };
 /**
- * Scope of a `box.mintScopedToken()` request. `session` and `project` mint
- * SessionGateway read tokens. `session-runtime` and `read-only` mint sidecar
- * capability tokens for browser-safe runtime access.
+ * Scope of a `box.mintScopedToken()` request. Each value narrows the token's
+ * authority compared to the full sandbox bearer. `session-runtime` permits
+ * only typed message, workspace-file, and terminal operations for one session.
  */
 type ScopedTokenScope = "session" | "session-runtime" | "project" | "read-only";
 /**
  * Options for `box.mintScopedToken()`.
  */
 interface MintScopedTokenOptions {
-  /** Scope to mint. `session` and `project` are for SessionGateway streams;
-   * `session-runtime` permits typed files, messages, and terminals for one
-   * session; `read-only` permits read-only runtime requests. */
+  /** Scope to mint. `session` narrows to a single session id; `project`
+   * grants read access to the whole sandbox; `read-only` is a project
+   * scope without prompt-dispatch capabilities. */
   scope: ScopedTokenScope;
   /** Required when `scope` is `session` or `session-runtime`. */
   sessionId?: string;
@@ -2044,17 +2043,18 @@ interface MintScopedTokenOptions {
   ttlMinutes?: number;
 }
 /**
- * Returned by `box.mintScopedToken()`. Use session/project tokens with
- * `SessionGatewayClient`; use session-runtime/read-only tokens with
- * `SandboxRuntimeClient`.
+ * Returned by `box.mintScopedToken()`. The token verifies against the
+ * same sidecar middleware that already gates ProductTokenIssuer-issued
+ * JWTs — no new sidecar surface.
  */
 interface ScopedToken {
-  /** Bearer token (JWT) for the consumer selected by `scope`. */
+  /** Bearer token (JWT). Send as `Authorization: Bearer <token>` or
+   * via the `EventSource` URL with token query param. */
   token: string;
   /** When the token expires. */
   expiresAt: Date;
-  /** The runtime's direct edge URL. Use with runtime scopes; session/project
-   * tokens instead connect to the Sandbox API's `/session` WebSocket. */
+  /** The runtime's direct edge URL. Matches `SandboxConnection.runtimeUrl`
+   *  (the SDK's canonical public name for this URL). */
   runtimeUrl: string;
   /** Browser-safe Sandbox API proxy base for terminal and runtime requests. */
   sidecarProxyUrl: string;
@@ -2586,7 +2586,7 @@ interface SandboxFleetArtifactSpec {
    */
   path: string;
   label?: string;
-  /** Maximum allowed artifact content size in bytes. Defaults to 10 MiB. */
+  /** Maximum allowed artifact content size in bytes. Defaults to 5 MiB. */
   maxBytes?: number;
 }
 interface SandboxFleetArtifact extends SandboxFleetArtifactSpec {
@@ -3585,6 +3585,8 @@ interface EgressPolicy {
    * Ignored in `open` and `blocked` modes.
    */
   allowDomains?: string[];
+  /** Include platform-default and secret-derived domains. Defaults to true. */
+  includeImplicitDomains?: boolean;
   /**
    * Denied domains. Only enforced when the proxy supports denylist transforms.
    * @deprecated Deferred — not supported by iron-proxy v0.41.
@@ -3972,6 +3974,16 @@ interface ProcessSpawnOptions {
   /** Timeout in milliseconds (0 = no timeout) */
   timeoutMs?: number;
 }
+interface ExactProcessSpawnOptions {
+  /** Working directory for the process. */
+  cwd?: string;
+  /** The complete process environment. Host variables are not inherited. */
+  env?: Record<string, string>;
+  /** Optional UTF-8 stdin. The stream is always closed after spawn. */
+  stdin?: string;
+  /** Timeout in milliseconds. */
+  timeoutMs?: number;
+}
 /**
  * Options for running Python code.
  *
@@ -4174,6 +4186,8 @@ interface ProcessManager {
    * @returns Process handle for control and monitoring
    */
   spawn(command: string, options?: ProcessSpawnOptions): Promise<Process>;
+  /** Spawn without shell parsing or inherited environment variables. */
+  spawnExact(executable: string, args: readonly string[], options?: ExactProcessSpawnOptions): Promise<Process>;
   /**
    * Run Python code directly.
    * Blocks until completion and returns result.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tangle-network/sandbox",
-  "version": "0.10.5-develop.20260713235503.8f2cefc",
+  "version": "0.10.5",
   "description": "Client SDK for the Tangle Sandbox platform - build AI agent applications with dev containers",
   "type": "module",
   "main": "./dist/index.js",